everything-dev 2.0.0-rc.4 → 2.0.0-rc.6

package/dist/dev-program.cjs

@@ -377,8 +377,7 @@ const startBootstrap = (deps, input) => effect.Effect.gen(function* () {
 		},
 		description: `${isStaging ? "Staging" : "Production"} Mode (${baseConfig.account})`,
 		port: plan.resolvedPorts.host ?? port,
-		interactive: input.interactive,
-		noLogs: true
+		interactive: input.interactive
 	};
 	yield* require_progress.emitProgress({
 		phase: "config",
@@ -409,5 +408,6 @@ exports.StartRemoteConfigMissing = StartRemoteConfigMissing;
 exports.bootstrapLayers = bootstrapLayers;
 exports.devBootstrap = devBootstrap;
 exports.resolveProxyUrl = resolveProxyUrl;
+exports.resolvePublishedConfig = resolvePublishedConfig;
 exports.startBootstrap = startBootstrap;
 //# sourceMappingURL=dev-program.cjs.map

package/dist/dev-program.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"dev-program.cjs","names":["Data","walkExtendsChain","resolveConfigComposableEntries","BosConfigSchema","timedPhase","Effect","captureShellEnv","ProjectEnv","detectLocalPackages","syncResolvedSharedDeps","run","findWorkspaceRoot","ensureFreshDeps","openResolution","planInfra","materializeViaLayer","mergeGeneratedOverFileEnv","processEnvRecord","preflightLocalInfra","shouldAutoStartDocker","detectAutoStartContext","isDockerAvailable","runDockerComposeUp","buildServiceDescriptorMapFromPlan","isDebug","getProcessEnv","generateCodeArtifacts","buildDescription","emitProgress","resolveStartConfigSource","buildRegistryConfigUrl","getHostDevelopmentPort","buildRuntimePluginsForConfig","buildRuntimeConfig","isRegistryStart","isRailwayPublicProxyUrl","buildServiceDescriptorMap","findConfigPath","Layer","ProjectEnvLive","PortAllocatorLive"],"sources":["../src/dev-program.ts"],"sourcesContent":["import { Data, Effect, Layer } from \"effect\";\nimport { detectLocalPackages, PortAllocatorLive } from \"./app\";\nimport { generateCodeArtifacts } from \"./code-artifacts\";\nimport {\n  buildRuntimeConfig,\n  buildRuntimePluginsForConfig,\n  findConfigPath,\n  getHostDevelopmentPort,\n  resolveConfigComposableEntries,\n} from \"./config\";\nimport type { DevOptions, PhaseTiming, StartOptions } from \"./contract\";\nimport { isRailwayPublicProxyUrl } from \"./db/driver\";\nimport { isDebug } from \"./dev-log-pipeline\";\nimport type { DevSessionData, StartSummary } from \"./dev-session-data\";\nimport {\n  deleteProcessEnv,\n  getProcessEnv,\n  processEnvRecord,\n  setProcessEnv,\n} from \"./env/process-env\";\nimport {\n  captureShellEnv,\n  type EnvEnsureError,\n  type EnvLoadError,\n  ProjectEnv,\n  ProjectEnvLive,\n  type ProjectEnvService,\n} from \"./env/project-env\";\nimport { buildRegistryConfigUrl } from \"./fastkv\";\nimport {\n  detectAutoStartContext,\n  isDockerAvailable,\n  runDockerComposeUp,\n  shouldAutoStartDocker,\n} from \"./infra/docker\";\nimport { materializeViaLayer } from \"./infra/materializer\";\nimport { planInfra } from \"./infra/planner\";\nimport { preflightLocalInfra } from \"./infra/preflight\";\nimport type { InfraPlan } from \"./infra/types\";\nimport { mergeGeneratedOverFileEnv } from \"./orchestrator\";\nimport { emitProgress, timedPhase } from \"./progress\";\nimport { openResolution, type ResolutionSession, walkExtendsChain } from \"./resolution/session\";\nimport {\n  type AppOrchestrator,\n  buildDescription,\n  buildServiceDescriptorMap,\n  buildServiceDescriptorMapFromPlan,\n} from \"./service-descriptor\";\nimport { syncResolvedSharedDeps } from \"./shared-deps\";\nimport { isRegistryStart, resolveStartConfigSource } from \"./start-config-source\";\nimport type { BosConfig, SourceMode } from \"./types\";\nimport { BosConfigSchema } from \"./types\";\nimport { run } from \"./utils/run\";\nimport { ensureFreshDeps, findWorkspaceRoot } from \"./workspace\";\n\nexport type { DevSessionData, StartSummary } from \"./dev-session-data\";\n\nexport interface BootstrapDeps {\n  readonly session: ResolutionSession | null;\n}\n\nexport class DevStepError extends Data.TaggedError(\"DevStepError\")<{\n  phase: string;\n  cause: unknown;\n}> {}\n\nexport class DevConfigMissing extends Data.TaggedError(\"DevConfigMissing\")<Record<string, never>> {}\n\nexport class DevProxyMissing extends Data.TaggedError(\"DevProxyMissing\")<Record<string, never>> {}\n\nexport class DevPreflightFailed extends Data.TaggedError(\"DevPreflightFailed\")<{\n  messages: string[];\n}> {}\n\nexport class StartFetchFailed extends Data.TaggedError(\"StartFetchFailed\")<{ message: string }> {}\n\nexport class StartRemoteConfigMissing extends Data.TaggedError(\"StartRemoteConfigMissing\")<{\n  message: string;\n}> {}\n\nexport class StartConfigMissing extends Data.TaggedError(\"StartConfigMissing\")<\n  Record<string, never>\n> {}\n\nfunction parseSourceMode(value: string | undefined, defaultValue: SourceMode): SourceMode {\n  if (value === \"local\" || value === \"remote\") return value;\n  return defaultValue;\n}\n\nasync function resolvePublishedConfig(\n  account: string,\n  gateway: string,\n  registry?: string,\n): Promise<BosConfig | null> {\n  try {\n    const { config: merged } = await walkExtendsChain(`bos://${account}/${gateway}`, {\n      env: \"production\",\n      registry,\n      visit: async () => {},\n    });\n    return resolveConfigComposableEntries(\n      BosConfigSchema.parse(merged),\n      process.cwd(),\n      \"production\",\n    );\n  } catch (error) {\n    if (error instanceof Error && error.message.startsWith(\"No config found\")) {\n      return null;\n    }\n    throw error;\n  }\n}\n\nfunction isValidProxyUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    return parsed.protocol === \"http:\" || parsed.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n\nexport function resolveProxyUrl(bosConfig: BosConfig | null): string | null {\n  if (!bosConfig) return null;\n  const apiConfig = bosConfig.app.api;\n  if (!apiConfig) return null;\n  if (apiConfig.proxy && isValidProxyUrl(apiConfig.proxy)) return apiConfig.proxy;\n  if (apiConfig.production && isValidProxyUrl(apiConfig.production)) return apiConfig.production;\n  return null;\n}\n\nconst step = <A>(timings: PhaseTiming[], name: string, fn: () => Promise<A>) =>\n  timedPhase(\n    timings,\n    name,\n    Effect.tryPromise({\n      try: fn,\n      catch: (cause) => new DevStepError({ phase: name, cause }),\n    }),\n  );\n\nconst ensureEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .ensureFile(configDir)\n    .pipe(\n      Effect.mapError((cause: EnvEnsureError) => new DevStepError({ phase: \"ensure env\", cause })),\n    );\n\nconst loadEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .load(configDir)\n    .pipe(Effect.mapError((cause: EnvLoadError) => new DevStepError({ phase: \"load env\", cause })));\n\nexport const devBootstrap = (deps: BootstrapDeps, input: DevOptions, timings: PhaseTiming[]) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    if (!deps.session) {\n      return yield* new DevConfigMissing({});\n    }\n    let session: ResolutionSession = deps.session;\n\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    const localPackages = detectLocalPackages(\n      session.config ?? undefined,\n      session.runtime ?? undefined,\n      session.root,\n    );\n    const localPackageNames = new Set(localPackages.map((entry) => entry.name));\n    const localDirs = localPackages.map((entry) => entry.dir);\n\n    const hostSource: SourceMode = localPackageNames.has(\"host\")\n      ? parseSourceMode(input.host, \"local\")\n      : \"remote\";\n    const uiSource: SourceMode = localPackageNames.has(\"ui\")\n      ? parseSourceMode(input.ui, \"local\")\n      : \"remote\";\n    const apiSource: SourceMode = localPackageNames.has(\"api\")\n      ? parseSourceMode(input.api, \"local\")\n      : \"remote\";\n    const authSource: SourceMode = localPackageNames.has(\"auth\")\n      ? parseSourceMode(input.auth, \"local\")\n      : \"remote\";\n    const ssr = input.ssr ?? false;\n    const proxy = input.proxy ?? false;\n\n    if (input.logLevel) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_LOG_LEVEL\", input.logLevel!);\n      });\n    }\n\n    if (ssr) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_SSR\", \"1\");\n      });\n    }\n\n    const sharedSync = yield* step(timings, \"shared deps\", () =>\n      syncResolvedSharedDeps({\n        configDir: session.root,\n        hostMode: hostSource,\n        bosConfig: session.config ?? undefined,\n        extendsChain: [],\n      }),\n    );\n    let configMayHaveChanged = false;\n    if (sharedSync.catalogChanged) {\n      yield* step(timings, \"install\", () =>\n        run(\"pnpm\", [\"install\"], { cwd: findWorkspaceRoot(session.root)?.dir ?? session.root }),\n      );\n      configMayHaveChanged = true;\n    }\n\n    yield* step(timings, \"build\", async () => {\n      const report = await ensureFreshDeps(session.root, localDirs);\n      if (report.rebuilt.some((member) => member.name === \"everything-dev\")) {\n        // Only the bos process itself runs the everything-dev dist (plugin\n        // children spawn after this step and load the fresh build). A source\n        // run (node --import tsx src/cli.ts) never imported dist, so nothing\n        // is stale for it — warn only where the previously imported build\n        // matters.\n        const runningFromDist = import.meta.url.includes(\"/dist/\");\n        if (runningFromDist) {\n          console.log(\n            \"[dev] everything-dev was rebuilt — this session still runs the previous \" +\n              \"orchestrator build. Restart `bos dev` once to pick it up.\",\n          );\n        }\n      }\n    });\n\n    let devExtendsChain: string[] | undefined;\n    if (configMayHaveChanged || input.remotePlugins !== undefined) {\n      yield* step(timings, \"resolve config\", async () => {\n        const opened = await openResolution({\n          cwd: session.root,\n          remotePlugins: input.remotePlugins,\n        });\n        if (opened) {\n          session = opened;\n          devExtendsChain = [...opened.chain];\n        }\n      });\n    }\n\n    if (!session.config) {\n      return yield* new DevConfigMissing({});\n    }\n    const bosConfig: BosConfig = session.config;\n\n    if (proxy && !resolveProxyUrl(bosConfig)) {\n      return yield* new DevProxyMissing({});\n    }\n\n    const developmentRuntime = yield* Effect.tryPromise({\n      try: async () => {\n        return session.buildRuntime({\n          uiSource,\n          apiSource,\n          authSource,\n          hostSource,\n          env: \"development\",\n          plugins: session.runtime?.plugins,\n        });\n      },\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n    for (const message of session.warnings) {\n      yield* Effect.logWarning(message);\n    }\n\n    const plan: InfraPlan = yield* timedPhase(\n      timings,\n      \"ports\",\n      planInfra({\n        configDir: session.root,\n        bosConfig: developmentRuntime,\n        cli: {\n          port: input.port,\n          apiPort: input.apiPort,\n          authPort: input.authPort,\n          uiPort: input.uiPort,\n          pluginPortStart: input.pluginPortStart,\n          ssr,\n          proxy,\n          hostSource,\n          uiSource,\n          apiSource,\n          authSource,\n          interactive: input.interactive,\n        },\n      }),\n    );\n\n    yield* Effect.tryPromise({\n      try: () => materializeViaLayer(session.root, plan.runtimeConfig),\n      catch: (cause) => new DevStepError({ phase: \"materialize infra\", cause }),\n    });\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    yield* projectEnv\n      .sync(session.root, plan.envGenerated, shell)\n      .pipe(\n        Effect.catchTag(\"EnvSyncError\", (error) =>\n          Effect.logWarning(\n            `[env] failed to refresh .env from resolved ports: ${String(error.cause)}`,\n          ),\n        ),\n      );\n\n    const mergedEnv = yield* Effect.sync(() =>\n      mergeGeneratedOverFileEnv(\n        plan.envGenerated,\n        processEnvRecord() as Record<string, string>,\n        shell,\n      ),\n    );\n    yield* Effect.sync(() => {\n      for (const [key, value] of Object.entries(mergedEnv)) {\n        if (key === \"BASE_URL\" || key === \"CORS_ORIGIN\") setProcessEnv(key, value);\n      }\n    });\n    let preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n    if (\n      preflightFailures.length > 0 &&\n      shouldAutoStartDocker(preflightFailures, {\n        ...detectAutoStartContext(session.root),\n        dockerAvailable: yield* Effect.promise(isDockerAvailable),\n      })\n    ) {\n      const compose = yield* step(timings, \"docker compose up\", () =>\n        runDockerComposeUp(session.root),\n      );\n      if (compose.ok) {\n        preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n      } else {\n        preflightFailures = [\n          ...preflightFailures,\n          {\n            secret: \"docker-compose\",\n            host: \"localhost\",\n            port: 0,\n            error: `docker compose up -d --wait failed${compose.tail ? `:\\n${compose.tail}` : \"\"}`,\n            tcpReachable: false,\n          },\n        ];\n      }\n    }\n    if (preflightFailures.length > 0) {\n      return yield* new DevPreflightFailed({ messages: preflightFailures.map((f) => f.error) });\n    }\n\n    const services = buildServiceDescriptorMapFromPlan(plan, { ssr, proxy });\n\n    const packages = [...plan.serviceDescriptors.keys()];\n    if (isDebug(getProcessEnv(\"DEBUG\"))) {\n      yield* Effect.logError(`[DEBUG dev] services keys: ${packages.join(\", \")}`);\n    }\n    const apiSvc = services.get(\"api\");\n    if (apiSvc?.proxy) {\n      const proxyUrl = resolveProxyUrl(bosConfig);\n      if (proxyUrl) plan.orchestrator.env.API_PROXY = proxyUrl;\n    }\n\n    yield* step(timings, \"generate artifacts\", () =>\n      generateCodeArtifacts(session.root, bosConfig, {\n        env: \"development\",\n        extendsChain: devExtendsChain,\n        runtimeConfig: plan.runtimeConfig,\n      }),\n    );\n\n    return {\n      session: {\n        orchestrator: plan.orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      description: buildDescription(services) || plan.description,\n      processes: packages,\n    };\n  });\n\nexport const startBootstrap = (deps: BootstrapDeps, input: StartOptions) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    const sessionRoot = deps.session?.root ?? process.cwd();\n\n    yield* loadEnvStep(projectEnv, sessionRoot);\n\n    yield* emitProgress({ phase: \"config\", status: \"running\" });\n\n    const bosEnv = input.env ?? (getProcessEnv(\"BOS_ENV\") === \"staging\" ? \"staging\" : \"production\");\n    const explicitConfig = resolveStartConfigSource(input, {\n      BOS_ACCOUNT: getProcessEnv(\"BOS_ACCOUNT\"),\n      BOS_GATEWAY: getProcessEnv(\"BOS_GATEWAY\"),\n    });\n\n    let config: BosConfig | null = null;\n    let remoteConfig: BosConfig | null = null;\n\n    if (explicitConfig.configPath) {\n      config = deps.session?.config ?? null;\n    } else if (explicitConfig.registry) {\n      const { account, domain } = explicitConfig.registry;\n      const expectedUrl = buildRegistryConfigUrl(account, domain, input.registry);\n      remoteConfig = yield* Effect.tryPromise({\n        try: () => resolvePublishedConfig(account, domain, input.registry),\n        catch: (error) =>\n          new StartFetchFailed({\n            message: `Failed to fetch config for bos://${account}/${domain}: ${\n              error instanceof Error ? error.message : \"Unknown error\"\n            }\\nExpected URL: ${expectedUrl}`,\n          }),\n      });\n      if (remoteConfig) {\n        config = remoteConfig;\n      } else {\n        return yield* new StartRemoteConfigMissing({\n          message: `No config found at bos://${account}/${domain}. Verify the account and gateway are correct and the config has been published.\\nExpected URL: ${expectedUrl}`,\n        });\n      }\n    } else {\n      config = deps.session?.config ?? null;\n    }\n\n    if (!config) {\n      return yield* new StartConfigMissing({});\n    }\n\n    if (!explicitConfig.configPath) {\n      if (explicitConfig.registry?.account) {\n        config = { ...config, account: explicitConfig.registry.account };\n      }\n      if (explicitConfig.registry?.domain) {\n        config = { ...config, domain: explicitConfig.registry.domain };\n      }\n    }\n    const baseConfig: BosConfig = config;\n\n    const port = input.port ?? getHostDevelopmentPort(baseConfig.app.host.development);\n    const isStaging = bosEnv === \"staging\";\n    const runtimePlugins = yield* Effect.tryPromise({\n      try: () => buildRuntimePluginsForConfig(baseConfig, sessionRoot, \"production\"),\n      catch: (cause) => new DevStepError({ phase: \"resolve runtime plugins\", cause }),\n    });\n    const runtimeConfig = yield* Effect.tryPromise({\n      try: () =>\n        buildRuntimeConfig(baseConfig, sessionRoot, \"production\", {\n          uiSource: \"remote\",\n          apiSource: \"remote\",\n          authSource: \"remote\",\n          hostSource: \"remote\",\n          plugins: runtimePlugins,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n\n    if (isStaging && baseConfig.staging?.domain) {\n      runtimeConfig.domain = baseConfig.staging.domain;\n    }\n\n    if (isStaging) {\n      runtimeConfig.env = \"staging\";\n    }\n\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"running\" });\n    yield* Effect.tryPromise({\n      try: () =>\n        generateCodeArtifacts(sessionRoot, baseConfig, {\n          env: \"production\",\n          runtimeConfig,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"generate artifacts\", cause }),\n    });\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"done\" });\n\n    const productionEnv: Record<string, string> = {};\n    const warnings: string[] = [];\n\n    const localhostOrigin = /^https?:\\/\\/(localhost|127\\.0\\.0\\.1)(:\\d+)?$/i;\n    const corsOrigin = getProcessEnv(\"CORS_ORIGIN\");\n    const isLocalhostProductionOrigin =\n      corsOrigin !== undefined && localhostOrigin.test(corsOrigin);\n    if (isLocalhostProductionOrigin && isRegistryStart(explicitConfig)) {\n      warnings.push(\n        `CORS_ORIGIN is a localhost origin (${corsOrigin}) in a registry production start — overriding with the configured domain`,\n      );\n      deleteProcessEnv(\"CORS_ORIGIN\");\n      deleteProcessEnv(\"BASE_URL\");\n    }\n\n    if (!getProcessEnv(\"CORS_ORIGIN\") && baseConfig.domain) {\n      const effectiveDomain = isStaging\n        ? (baseConfig.staging?.domain ?? baseConfig.domain)\n        : baseConfig.domain;\n      const defaultOrigin = `https://${effectiveDomain}`;\n      productionEnv.CORS_ORIGIN = defaultOrigin;\n      productionEnv.BASE_URL = defaultOrigin;\n      warnings.push(`CORS_ORIGIN defaulting to ${defaultOrigin}`);\n    }\n\n    const requiredSecrets = new Set<string>();\n    const missingSecrets: string[] = [];\n\n    if (runtimeConfig.host.secrets) {\n      for (const s of runtimeConfig.host.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.auth?.secrets) {\n      for (const s of runtimeConfig.auth.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.api?.secrets) {\n      for (const s of runtimeConfig.api.secrets) requiredSecrets.add(s);\n    }\n    for (const plugin of Object.values(runtimeConfig.plugins ?? {})) {\n      if (plugin.secrets) {\n        for (const s of plugin.secrets) {\n          if (s.endsWith(\"_DATABASE_URL\")) continue;\n          requiredSecrets.add(s);\n        }\n      }\n    }\n\n    for (const secret of requiredSecrets) {\n      const value = getProcessEnv(secret);\n      if (!value || value.length === 0) {\n        missingSecrets.push(secret);\n      }\n    }\n\n    if (missingSecrets.length > 0) {\n      warnings.push(`Missing ${missingSecrets.length} secret(s): ${missingSecrets.join(\", \")}`);\n    }\n\n    for (const [secret, value] of Object.entries(processEnvRecord())) {\n      if (!value || !secret.endsWith(\"_DATABASE_URL\")) continue;\n      if (isRailwayPublicProxyUrl(value)) {\n        const host = new URL(value).hostname;\n        warnings.push(\n          `${secret} points at Railway's public proxy (${host}) — its TLS certificate is self-signed, ` +\n            `so connections use unverified TLS. Prefer the private *.railway.internal URL when the ` +\n            `database runs in the same Railway project.`,\n        );\n      }\n    }\n\n    const stagingEnvVars: Record<string, string> = isStaging\n      ? { BOS_GATEWAY: baseConfig.staging?.domain ?? baseConfig.domain ?? \"\" }\n      : {};\n\n    const plan: InfraPlan = yield* planInfra({\n      configDir: sessionRoot,\n      bosConfig: runtimeConfig,\n      cli: {\n        port: input.port,\n        ssr: false,\n        proxy: false,\n        hostSource: \"remote\",\n        uiSource: \"remote\",\n        apiSource: \"remote\",\n        authSource: \"remote\",\n        interactive: input.interactive,\n      },\n    });\n\n    const services = buildServiceDescriptorMap(plan.runtimeConfig);\n\n    const configSource = explicitConfig.configPath\n      ? explicitConfig.configPath\n      : remoteConfig\n        ? `bos://${explicitConfig.registry?.account}/${explicitConfig.registry?.domain}`\n        : (findConfigPath() ?? \"bos.config.json\");\n\n    const configSourceHttp =\n      remoteConfig && explicitConfig.registry\n        ? buildRegistryConfigUrl(\n            explicitConfig.registry.account,\n            explicitConfig.registry.domain,\n            input.registry,\n          )\n        : undefined;\n\n    const summary: StartSummary = {\n      configSource,\n      configSourceHttp,\n      account: baseConfig.account,\n      domain: baseConfig.domain ?? undefined,\n      modules: {\n        host: plan.runtimeConfig.host.remoteUrl ?? plan.runtimeConfig.host.url ?? \"local\",\n        ui: plan.runtimeConfig.ui.url ?? \"local\",\n        api: plan.runtimeConfig.api.url ?? \"local\",\n        auth: plan.runtimeConfig.auth?.url ?? undefined,\n      },\n      warnings,\n    };\n\n    const orchestrator: AppOrchestrator = {\n      packages: [\"host\"],\n      env: {\n        NODE_ENV: \"production\",\n        ...productionEnv,\n        ...stagingEnvVars,\n        ...plan.launch.env,\n      },\n      description: `${isStaging ? \"Staging\" : \"Production\"} Mode (${baseConfig.account})`,\n      port: plan.resolvedPorts.host ?? port,\n      interactive: input.interactive,\n      noLogs: true,\n    };\n\n    yield* emitProgress({ phase: \"config\", status: \"done\" });\n\n    return {\n      session: {\n        orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      summary,\n      url: plan.launch.hostUrl ?? `http://localhost:${plan.resolvedPorts.host ?? port}`,\n    };\n  });\n\nexport const bootstrapLayers = Layer.mergeAll(ProjectEnvLive, PortAllocatorLive);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,eAAb,cAAkCA,YAAK,YAAY,cAAc,CAAC,CAG/D,CAAC;AAEJ,IAAa,mBAAb,cAAsCA,YAAK,YAAY,kBAAkB,CAAC,CAAwB,CAAC;AAEnG,IAAa,kBAAb,cAAqCA,YAAK,YAAY,iBAAiB,CAAC,CAAwB,CAAC;AAEjG,IAAa,qBAAb,cAAwCA,YAAK,YAAY,oBAAoB,CAAC,CAE3E,CAAC;AAEJ,IAAa,mBAAb,cAAsCA,YAAK,YAAY,kBAAkB,CAAC,CAAsB,CAAC;AAEjG,IAAa,2BAAb,cAA8CA,YAAK,YAAY,0BAA0B,CAAC,CAEvF,CAAC;AAEJ,IAAa,qBAAb,cAAwCA,YAAK,YAAY,oBAAoB,CAAC,CAE5E,CAAC;AAEH,SAAS,gBAAgB,OAA2B,cAAsC;CACxF,IAAI,UAAU,WAAW,UAAU,UAAU,OAAO;CACpD,OAAO;AACT;AAEA,eAAe,uBACb,SACA,SACA,UAC2B;CAC3B,IAAI;EACF,MAAM,EAAE,QAAQ,WAAW,MAAMC,4CAAiB,SAAS,QAAQ,GAAG,WAAW;GAC/E,KAAK;GACL;GACA,OAAO,YAAY,CAAC;EACtB,CAAC;EACD,OAAOC,8CACLC,8BAAgB,MAAM,MAAM,GAC5B,QAAQ,IAAI,GACZ,YACF;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,MAAM,QAAQ,WAAW,iBAAiB,GACtE,OAAO;EAET,MAAM;CACR;AACF;AAEA,SAAS,gBAAgB,KAAsB;CAC7C,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,OAAO,aAAa,WAAW,OAAO,aAAa;CAC5D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,gBAAgB,WAA4C;CAC1E,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,YAAY,UAAU,IAAI;CAChC,IAAI,CAAC,WAAW,OAAO;CACvB,IAAI,UAAU,SAAS,gBAAgB,UAAU,KAAK,GAAG,OAAO,UAAU;CAC1E,IAAI,UAAU,cAAc,gBAAgB,UAAU,UAAU,GAAG,OAAO,UAAU;CACpF,OAAO;AACT;AAEA,MAAM,QAAW,SAAwB,MAAc,OACrDC,4BACE,SACA,MACAC,cAAO,WAAW;CAChB,KAAK;CACL,QAAQ,UAAU,IAAI,aAAa;EAAE,OAAO;EAAM;CAAM,CAAC;AAC3D,CAAC,CACH;AAEF,MAAM,iBAAiB,YAA+B,cACpD,WACG,WAAW,SAAS,CAAC,CACrB,KACCA,cAAO,UAAU,UAA0B,IAAI,aAAa;CAAE,OAAO;CAAc;AAAM,CAAC,CAAC,CAC7F;AAEJ,MAAM,eAAe,YAA+B,cAClD,WACG,KAAK,SAAS,CAAC,CACf,KAAKA,cAAO,UAAU,UAAwB,IAAI,aAAa;CAAE,OAAO;CAAY;AAAM,CAAC,CAAC,CAAC;AAElG,MAAa,gBAAgB,MAAqB,OAAmB,YACnEA,cAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAOC;CACrB,MAAM,aAAa,OAAOC;CAE1B,IAAI,CAAC,KAAK,SACR,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,IAAI,UAA6B,KAAK;CAEtC,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,MAAM,gBAAgBC,gCACpB,QAAQ,UAAU,QAClB,QAAQ,WAAW,QACnB,QAAQ,IACV;CACA,MAAM,oBAAoB,IAAI,IAAI,cAAc,KAAK,UAAU,MAAM,IAAI,CAAC;CAC1E,MAAM,YAAY,cAAc,KAAK,UAAU,MAAM,GAAG;CAExD,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,WAAuB,kBAAkB,IAAI,IAAI,IACnD,gBAAgB,MAAM,IAAI,OAAO,IACjC;CACJ,MAAM,YAAwB,kBAAkB,IAAI,KAAK,IACrD,gBAAgB,MAAM,KAAK,OAAO,IAClC;CACJ,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,MAAM,MAAM,OAAO;CACzB,MAAM,QAAQ,MAAM,SAAS;CAE7B,IAAI,MAAM,UACR,OAAOH,cAAO,WAAW;EACvB,kCAAc,iBAAiB,MAAM,QAAS;CAChD,CAAC;CAGH,IAAI,KACF,OAAOA,cAAO,WAAW;EACvB,kCAAc,WAAW,GAAG;CAC9B,CAAC;CAGH,MAAM,aAAa,OAAO,KAAK,SAAS,qBACtCI,2CAAuB;EACrB,WAAW,QAAQ;EACnB,UAAU;EACV,WAAW,QAAQ,UAAU;EAC7B,cAAc,CAAC;CACjB,CAAC,CACH;CACA,IAAI,uBAAuB;CAC3B,IAAI,WAAW,gBAAgB;EAC7B,OAAO,KAAK,SAAS,iBACnBC,gBAAI,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAKC,oCAAkB,QAAQ,IAAI,CAAC,EAAE,OAAO,QAAQ,KAAK,CAAC,CACxF;EACA,uBAAuB;CACzB;CAEA,OAAO,KAAK,SAAS,SAAS,YAAY;EAExC,KAAI,MADiBC,kCAAgB,QAAQ,MAAM,SAAS,EAClD,CAAC,QAAQ,MAAM,WAAW,OAAO,SAAS,gBAAgB,GAOlE;qDADwC,SAAS,QAC/B,GAChB,QAAQ,IACN,mIAEF;EACF;CAEJ,CAAC;CAED,IAAI;CACJ,IAAI,wBAAwB,MAAM,kBAAkB,QAClD,OAAO,KAAK,SAAS,kBAAkB,YAAY;EACjD,MAAM,SAAS,MAAMC,0CAAe;GAClC,KAAK,QAAQ;GACb,eAAe,MAAM;EACvB,CAAC;EACD,IAAI,QAAQ;GACV,UAAU;GACV,kBAAkB,CAAC,GAAG,OAAO,KAAK;EACpC;CACF,CAAC;CAGH,IAAI,CAAC,QAAQ,QACX,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,MAAM,YAAuB,QAAQ;CAErC,IAAI,SAAS,CAAC,gBAAgB,SAAS,GACrC,OAAO,OAAO,IAAI,gBAAgB,CAAC,CAAC;CAGtC,MAAM,qBAAqB,OAAOR,cAAO,WAAW;EAClD,KAAK,YAAY;GACf,OAAO,QAAQ,aAAa;IAC1B;IACA;IACA;IACA;IACA,KAAK;IACL,SAAS,QAAQ,SAAS;GAC5B,CAAC;EACH;EACA,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CACD,KAAK,MAAM,WAAW,QAAQ,UAC5B,OAAOA,cAAO,WAAW,OAAO;CAGlC,MAAM,OAAkB,OAAOD,4BAC7B,SACA,SACAU,0BAAU;EACR,WAAW,QAAQ;EACnB,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,UAAU,MAAM;GAChB,QAAQ,MAAM;GACd,iBAAiB,MAAM;GACvB;GACA;GACA;GACA;GACA;GACA;GACA,aAAa,MAAM;EACrB;CACF,CAAC,CACH;CAEA,OAAOT,cAAO,WAAW;EACvB,WAAWU,yCAAoB,QAAQ,MAAM,KAAK,aAAa;EAC/D,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAqB;EAAM,CAAC;CAC1E,CAAC;CACD,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,OAAO,WACJ,KAAK,QAAQ,MAAM,KAAK,cAAc,KAAK,CAAC,CAC5C,KACCV,cAAO,SAAS,iBAAiB,UAC/BA,cAAO,WACL,qDAAqD,OAAO,MAAM,KAAK,GACzE,CACF,CACF;CAEF,MAAM,YAAY,OAAOA,cAAO,WAC9BW,+CACE,KAAK,cACLC,qCAAiB,GACjB,KACF,CACF;CACA,OAAOZ,cAAO,WAAW;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,GACjD,IAAI,QAAQ,cAAc,QAAQ,eAAe,kCAAc,KAAK,KAAK;CAE7E,CAAC;CACD,IAAI,oBAAoB,OAAOa,sCAAoB,KAAK,cAAc,SAAS;CAC/E,IACE,kBAAkB,SAAS,KAC3BC,qCAAsB,mBAAmB;EACvC,GAAGC,sCAAuB,QAAQ,IAAI;EACtC,iBAAiB,OAAOf,cAAO,QAAQgB,gCAAiB;CAC1D,CAAC,GACD;EACA,MAAM,UAAU,OAAO,KAAK,SAAS,2BACnCC,kCAAmB,QAAQ,IAAI,CACjC;EACA,IAAI,QAAQ,IACV,oBAAoB,OAAOJ,sCAAoB,KAAK,cAAc,SAAS;OAE3E,oBAAoB,CAClB,GAAG,mBACH;GACE,QAAQ;GACR,MAAM;GACN,MAAM;GACN,OAAO,qCAAqC,QAAQ,OAAO,MAAM,QAAQ,SAAS;GAClF,cAAc;EAChB,CACF;CAEJ;CACA,IAAI,kBAAkB,SAAS,GAC7B,OAAO,OAAO,IAAI,mBAAmB,EAAE,UAAU,kBAAkB,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC;CAG1F,MAAM,WAAWK,6DAAkC,MAAM;EAAE;EAAK;CAAM,CAAC;CAEvE,MAAM,WAAW,CAAC,GAAG,KAAK,mBAAmB,KAAK,CAAC;CACnD,IAAIC,iCAAQC,kCAAc,OAAO,CAAC,GAChC,OAAOpB,cAAO,SAAS,8BAA8B,SAAS,KAAK,IAAI,GAAG;CAG5E,IADe,SAAS,IAAI,KACnB,CAAC,EAAE,OAAO;EACjB,MAAM,WAAW,gBAAgB,SAAS;EAC1C,IAAI,UAAU,KAAK,aAAa,IAAI,YAAY;CAClD;CAEA,OAAO,KAAK,SAAS,4BACnBqB,6CAAsB,QAAQ,MAAM,WAAW;EAC7C,KAAK;EACL,cAAc;EACd,eAAe,KAAK;CACtB,CAAC,CACH;CAEA,OAAO;EACL,SAAS;GACP,cAAc,KAAK;GACnB;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA,aAAaC,4CAAiB,QAAQ,KAAK,KAAK;EAChD,WAAW;CACb;AACF,CAAC;AAEH,MAAa,kBAAkB,MAAqB,UAClDtB,cAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAOC;CACrB,MAAM,aAAa,OAAOC;CAE1B,MAAM,cAAc,KAAK,SAAS,QAAQ,QAAQ,IAAI;CAEtD,OAAO,YAAY,YAAY,WAAW;CAE1C,OAAOqB,8BAAa;EAAE,OAAO;EAAU,QAAQ;CAAU,CAAC;CAE1D,MAAM,SAAS,MAAM,QAAQH,kCAAc,SAAS,MAAM,YAAY,YAAY;CAClF,MAAM,iBAAiBI,qDAAyB,OAAO;EACrD,aAAaJ,kCAAc,aAAa;EACxC,aAAaA,kCAAc,aAAa;CAC1C,CAAC;CAED,IAAI,SAA2B;CAC/B,IAAI,eAAiC;CAErC,IAAI,eAAe,YACjB,SAAS,KAAK,SAAS,UAAU;MAC5B,IAAI,eAAe,UAAU;EAClC,MAAM,EAAE,SAAS,WAAW,eAAe;EAC3C,MAAM,cAAcK,sCAAuB,SAAS,QAAQ,MAAM,QAAQ;EAC1E,eAAe,OAAOzB,cAAO,WAAW;GACtC,WAAW,uBAAuB,SAAS,QAAQ,MAAM,QAAQ;GACjE,QAAQ,UACN,IAAI,iBAAiB,EACnB,SAAS,oCAAoC,QAAQ,GAAG,OAAO,IAC7D,iBAAiB,QAAQ,MAAM,UAAU,gBAC1C,kBAAkB,cACrB,CAAC;EACL,CAAC;EACD,IAAI,cACF,SAAS;OAET,OAAO,OAAO,IAAI,yBAAyB,EACzC,SAAS,4BAA4B,QAAQ,GAAG,OAAO,iGAAiG,cAC1J,CAAC;CAEL,OACE,SAAS,KAAK,SAAS,UAAU;CAGnC,IAAI,CAAC,QACH,OAAO,OAAO,IAAI,mBAAmB,CAAC,CAAC;CAGzC,IAAI,CAAC,eAAe,YAAY;EAC9B,IAAI,eAAe,UAAU,SAC3B,SAAS;GAAE,GAAG;GAAQ,SAAS,eAAe,SAAS;EAAQ;EAEjE,IAAI,eAAe,UAAU,QAC3B,SAAS;GAAE,GAAG;GAAQ,QAAQ,eAAe,SAAS;EAAO;CAEjE;CACA,MAAM,aAAwB;CAE9B,MAAM,OAAO,MAAM,QAAQ0B,sCAAuB,WAAW,IAAI,KAAK,WAAW;CACjF,MAAM,YAAY,WAAW;CAC7B,MAAM,iBAAiB,OAAO1B,cAAO,WAAW;EAC9C,WAAW2B,4CAA6B,YAAY,aAAa,YAAY;EAC7E,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAA2B;EAAM,CAAC;CAChF,CAAC;CACD,MAAM,gBAAgB,OAAO3B,cAAO,WAAW;EAC7C,WACE4B,kCAAmB,YAAY,aAAa,cAAc;GACxD,UAAU;GACV,WAAW;GACX,YAAY;GACZ,YAAY;GACZ,SAAS;EACX,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CAED,IAAI,aAAa,WAAW,SAAS,QACnC,cAAc,SAAS,WAAW,QAAQ;CAG5C,IAAI,WACF,cAAc,MAAM;CAGtB,OAAOL,8BAAa;EAAE,OAAO;EAAsB,QAAQ;CAAU,CAAC;CACtE,OAAOvB,cAAO,WAAW;EACvB,WACEqB,6CAAsB,aAAa,YAAY;GAC7C,KAAK;GACL;EACF,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAsB;EAAM,CAAC;CAC3E,CAAC;CACD,OAAOE,8BAAa;EAAE,OAAO;EAAsB,QAAQ;CAAO,CAAC;CAEnE,MAAM,gBAAwC,CAAC;CAC/C,MAAM,WAAqB,CAAC;CAE5B,MAAM,kBAAkB;CACxB,MAAM,aAAaH,kCAAc,aAAa;CAG9C,IADE,eAAe,UAAa,gBAAgB,KAAK,UAAU,KAC1BS,4CAAgB,cAAc,GAAG;EAClE,SAAS,KACP,sCAAsC,WAAW,yEACnD;EACA,qCAAiB,aAAa;EAC9B,qCAAiB,UAAU;CAC7B;CAEA,IAAI,CAACT,kCAAc,aAAa,KAAK,WAAW,QAAQ;EAItD,MAAM,gBAAgB,WAHE,YACnB,WAAW,SAAS,UAAU,WAAW,SAC1C,WAAW;EAEf,cAAc,cAAc;EAC5B,cAAc,WAAW;EACzB,SAAS,KAAK,6BAA6B,eAAe;CAC5D;CAEA,MAAM,kCAAkB,IAAI,IAAY;CACxC,MAAM,iBAA2B,CAAC;CAElC,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,MAAM,SACtB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,IAAI,SAAS,gBAAgB,IAAI,CAAC;CAElE,KAAK,MAAM,UAAU,OAAO,OAAO,cAAc,WAAW,CAAC,CAAC,GAC5D,IAAI,OAAO,SACT,KAAK,MAAM,KAAK,OAAO,SAAS;EAC9B,IAAI,EAAE,SAAS,eAAe,GAAG;EACjC,gBAAgB,IAAI,CAAC;CACvB;CAIJ,KAAK,MAAM,UAAU,iBAAiB;EACpC,MAAM,QAAQA,kCAAc,MAAM;EAClC,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B,eAAe,KAAK,MAAM;CAE9B;CAEA,IAAI,eAAe,SAAS,GAC1B,SAAS,KAAK,WAAW,eAAe,OAAO,cAAc,eAAe,KAAK,IAAI,GAAG;CAG1F,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQR,qCAAiB,CAAC,GAAG;EAChE,IAAI,CAAC,SAAS,CAAC,OAAO,SAAS,eAAe,GAAG;EACjD,IAAIkB,uCAAwB,KAAK,GAAG;GAClC,MAAM,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC;GAC5B,SAAS,KACP,GAAG,OAAO,qCAAqC,KAAK,yKAGtD;EACF;CACF;CAEA,MAAM,iBAAyC,YAC3C,EAAE,aAAa,WAAW,SAAS,UAAU,WAAW,UAAU,GAAG,IACrE,CAAC;CAEL,MAAM,OAAkB,OAAOrB,0BAAU;EACvC,WAAW;EACX,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,KAAK;GACL,OAAO;GACP,YAAY;GACZ,UAAU;GACV,WAAW;GACX,YAAY;GACZ,aAAa,MAAM;EACrB;CACF,CAAC;CAED,MAAM,WAAWsB,qDAA0B,KAAK,aAAa;CAiB7D,MAAM,UAAwB;EAC5B,cAhBmB,eAAe,aAChC,eAAe,aACf,eACE,SAAS,eAAe,UAAU,QAAQ,GAAG,eAAe,UAAU,WACrEC,8BAAe,KAAK;EAazB,kBAVA,gBAAgB,eAAe,WAC3BP,sCACE,eAAe,SAAS,SACxB,eAAe,SAAS,QACxB,MAAM,QACR,IACA;EAKJ,SAAS,WAAW;EACpB,QAAQ,WAAW,UAAU;EAC7B,SAAS;GACP,MAAM,KAAK,cAAc,KAAK,aAAa,KAAK,cAAc,KAAK,OAAO;GAC1E,IAAI,KAAK,cAAc,GAAG,OAAO;GACjC,KAAK,KAAK,cAAc,IAAI,OAAO;GACnC,MAAM,KAAK,cAAc,MAAM,OAAO;EACxC;EACA;CACF;CAEA,MAAM,eAAgC;EACpC,UAAU,CAAC,MAAM;EACjB,KAAK;GACH,UAAU;GACV,GAAG;GACH,GAAG;GACH,GAAG,KAAK,OAAO;EACjB;EACA,aAAa,GAAG,YAAY,YAAY,aAAa,SAAS,WAAW,QAAQ;EACjF,MAAM,KAAK,cAAc,QAAQ;EACjC,aAAa,MAAM;EACnB,QAAQ;CACV;CAEA,OAAOF,8BAAa;EAAE,OAAO;EAAU,QAAQ;CAAO,CAAC;CAEvD,OAAO;EACL,SAAS;GACP;GACA;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA;EACA,KAAK,KAAK,OAAO,WAAW,oBAAoB,KAAK,cAAc,QAAQ;CAC7E;AACF,CAAC;AAEH,MAAa,kBAAkBU,aAAM,SAASC,oCAAgBC,6BAAiB"}
+{"version":3,"file":"dev-program.cjs","names":["Data","walkExtendsChain","resolveConfigComposableEntries","BosConfigSchema","timedPhase","Effect","captureShellEnv","ProjectEnv","detectLocalPackages","syncResolvedSharedDeps","run","findWorkspaceRoot","ensureFreshDeps","openResolution","planInfra","materializeViaLayer","mergeGeneratedOverFileEnv","processEnvRecord","preflightLocalInfra","shouldAutoStartDocker","detectAutoStartContext","isDockerAvailable","runDockerComposeUp","buildServiceDescriptorMapFromPlan","isDebug","getProcessEnv","generateCodeArtifacts","buildDescription","emitProgress","resolveStartConfigSource","buildRegistryConfigUrl","getHostDevelopmentPort","buildRuntimePluginsForConfig","buildRuntimeConfig","isRegistryStart","isRailwayPublicProxyUrl","buildServiceDescriptorMap","findConfigPath","Layer","ProjectEnvLive","PortAllocatorLive"],"sources":["../src/dev-program.ts"],"sourcesContent":["import { Data, Effect, Layer } from \"effect\";\nimport { detectLocalPackages, PortAllocatorLive } from \"./app\";\nimport { generateCodeArtifacts } from \"./code-artifacts\";\nimport {\n  buildRuntimeConfig,\n  buildRuntimePluginsForConfig,\n  findConfigPath,\n  getHostDevelopmentPort,\n  resolveConfigComposableEntries,\n} from \"./config\";\nimport type { DevOptions, PhaseTiming, StartOptions } from \"./contract\";\nimport { isRailwayPublicProxyUrl } from \"./db/driver\";\nimport { isDebug } from \"./dev-log-pipeline\";\nimport type { DevSessionData, StartSummary } from \"./dev-session-data\";\nimport {\n  deleteProcessEnv,\n  getProcessEnv,\n  processEnvRecord,\n  setProcessEnv,\n} from \"./env/process-env\";\nimport {\n  captureShellEnv,\n  type EnvEnsureError,\n  type EnvLoadError,\n  ProjectEnv,\n  ProjectEnvLive,\n  type ProjectEnvService,\n} from \"./env/project-env\";\nimport { buildRegistryConfigUrl } from \"./fastkv\";\nimport {\n  detectAutoStartContext,\n  isDockerAvailable,\n  runDockerComposeUp,\n  shouldAutoStartDocker,\n} from \"./infra/docker\";\nimport { materializeViaLayer } from \"./infra/materializer\";\nimport { planInfra } from \"./infra/planner\";\nimport { preflightLocalInfra } from \"./infra/preflight\";\nimport type { InfraPlan } from \"./infra/types\";\nimport { mergeGeneratedOverFileEnv } from \"./orchestrator\";\nimport { emitProgress, timedPhase } from \"./progress\";\nimport { openResolution, type ResolutionSession, walkExtendsChain } from \"./resolution/session\";\nimport {\n  type AppOrchestrator,\n  buildDescription,\n  buildServiceDescriptorMap,\n  buildServiceDescriptorMapFromPlan,\n} from \"./service-descriptor\";\nimport { syncResolvedSharedDeps } from \"./shared-deps\";\nimport { isRegistryStart, resolveStartConfigSource } from \"./start-config-source\";\nimport type { BosConfig, SourceMode } from \"./types\";\nimport { BosConfigSchema } from \"./types\";\nimport { run } from \"./utils/run\";\nimport { ensureFreshDeps, findWorkspaceRoot } from \"./workspace\";\n\nexport type { DevSessionData, StartSummary } from \"./dev-session-data\";\n\nexport interface BootstrapDeps {\n  readonly session: ResolutionSession | null;\n}\n\nexport class DevStepError extends Data.TaggedError(\"DevStepError\")<{\n  phase: string;\n  cause: unknown;\n}> {}\n\nexport class DevConfigMissing extends Data.TaggedError(\"DevConfigMissing\")<Record<string, never>> {}\n\nexport class DevProxyMissing extends Data.TaggedError(\"DevProxyMissing\")<Record<string, never>> {}\n\nexport class DevPreflightFailed extends Data.TaggedError(\"DevPreflightFailed\")<{\n  messages: string[];\n}> {}\n\nexport class StartFetchFailed extends Data.TaggedError(\"StartFetchFailed\")<{ message: string }> {}\n\nexport class StartRemoteConfigMissing extends Data.TaggedError(\"StartRemoteConfigMissing\")<{\n  message: string;\n}> {}\n\nexport class StartConfigMissing extends Data.TaggedError(\"StartConfigMissing\")<\n  Record<string, never>\n> {}\n\nfunction parseSourceMode(value: string | undefined, defaultValue: SourceMode): SourceMode {\n  if (value === \"local\" || value === \"remote\") return value;\n  return defaultValue;\n}\n\nexport async function resolvePublishedConfig(\n  account: string,\n  gateway: string,\n  registry?: string,\n): Promise<BosConfig | null> {\n  try {\n    const { config: merged } = await walkExtendsChain(`bos://${account}/${gateway}`, {\n      env: \"production\",\n      registry,\n      visit: async () => {},\n    });\n    return resolveConfigComposableEntries(\n      BosConfigSchema.parse(merged),\n      process.cwd(),\n      \"production\",\n    );\n  } catch (error) {\n    if (error instanceof Error && error.message.startsWith(\"No config found\")) {\n      return null;\n    }\n    throw error;\n  }\n}\n\nfunction isValidProxyUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    return parsed.protocol === \"http:\" || parsed.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n\nexport function resolveProxyUrl(bosConfig: BosConfig | null): string | null {\n  if (!bosConfig) return null;\n  const apiConfig = bosConfig.app.api;\n  if (!apiConfig) return null;\n  if (apiConfig.proxy && isValidProxyUrl(apiConfig.proxy)) return apiConfig.proxy;\n  if (apiConfig.production && isValidProxyUrl(apiConfig.production)) return apiConfig.production;\n  return null;\n}\n\nconst step = <A>(timings: PhaseTiming[], name: string, fn: () => Promise<A>) =>\n  timedPhase(\n    timings,\n    name,\n    Effect.tryPromise({\n      try: fn,\n      catch: (cause) => new DevStepError({ phase: name, cause }),\n    }),\n  );\n\nconst ensureEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .ensureFile(configDir)\n    .pipe(\n      Effect.mapError((cause: EnvEnsureError) => new DevStepError({ phase: \"ensure env\", cause })),\n    );\n\nconst loadEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .load(configDir)\n    .pipe(Effect.mapError((cause: EnvLoadError) => new DevStepError({ phase: \"load env\", cause })));\n\nexport const devBootstrap = (deps: BootstrapDeps, input: DevOptions, timings: PhaseTiming[]) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    if (!deps.session) {\n      return yield* new DevConfigMissing({});\n    }\n    let session: ResolutionSession = deps.session;\n\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    const localPackages = detectLocalPackages(\n      session.config ?? undefined,\n      session.runtime ?? undefined,\n      session.root,\n    );\n    const localPackageNames = new Set(localPackages.map((entry) => entry.name));\n    const localDirs = localPackages.map((entry) => entry.dir);\n\n    const hostSource: SourceMode = localPackageNames.has(\"host\")\n      ? parseSourceMode(input.host, \"local\")\n      : \"remote\";\n    const uiSource: SourceMode = localPackageNames.has(\"ui\")\n      ? parseSourceMode(input.ui, \"local\")\n      : \"remote\";\n    const apiSource: SourceMode = localPackageNames.has(\"api\")\n      ? parseSourceMode(input.api, \"local\")\n      : \"remote\";\n    const authSource: SourceMode = localPackageNames.has(\"auth\")\n      ? parseSourceMode(input.auth, \"local\")\n      : \"remote\";\n    const ssr = input.ssr ?? false;\n    const proxy = input.proxy ?? false;\n\n    if (input.logLevel) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_LOG_LEVEL\", input.logLevel!);\n      });\n    }\n\n    if (ssr) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_SSR\", \"1\");\n      });\n    }\n\n    const sharedSync = yield* step(timings, \"shared deps\", () =>\n      syncResolvedSharedDeps({\n        configDir: session.root,\n        hostMode: hostSource,\n        bosConfig: session.config ?? undefined,\n        extendsChain: [],\n      }),\n    );\n    let configMayHaveChanged = false;\n    if (sharedSync.catalogChanged) {\n      yield* step(timings, \"install\", () =>\n        run(\"pnpm\", [\"install\"], { cwd: findWorkspaceRoot(session.root)?.dir ?? session.root }),\n      );\n      configMayHaveChanged = true;\n    }\n\n    yield* step(timings, \"build\", async () => {\n      const report = await ensureFreshDeps(session.root, localDirs);\n      if (report.rebuilt.some((member) => member.name === \"everything-dev\")) {\n        // Only the bos process itself runs the everything-dev dist (plugin\n        // children spawn after this step and load the fresh build). A source\n        // run (node --import tsx src/cli.ts) never imported dist, so nothing\n        // is stale for it — warn only where the previously imported build\n        // matters.\n        const runningFromDist = import.meta.url.includes(\"/dist/\");\n        if (runningFromDist) {\n          console.log(\n            \"[dev] everything-dev was rebuilt — this session still runs the previous \" +\n              \"orchestrator build. Restart `bos dev` once to pick it up.\",\n          );\n        }\n      }\n    });\n\n    let devExtendsChain: string[] | undefined;\n    if (configMayHaveChanged || input.remotePlugins !== undefined) {\n      yield* step(timings, \"resolve config\", async () => {\n        const opened = await openResolution({\n          cwd: session.root,\n          remotePlugins: input.remotePlugins,\n        });\n        if (opened) {\n          session = opened;\n          devExtendsChain = [...opened.chain];\n        }\n      });\n    }\n\n    if (!session.config) {\n      return yield* new DevConfigMissing({});\n    }\n    const bosConfig: BosConfig = session.config;\n\n    if (proxy && !resolveProxyUrl(bosConfig)) {\n      return yield* new DevProxyMissing({});\n    }\n\n    const developmentRuntime = yield* Effect.tryPromise({\n      try: async () => {\n        return session.buildRuntime({\n          uiSource,\n          apiSource,\n          authSource,\n          hostSource,\n          env: \"development\",\n          plugins: session.runtime?.plugins,\n        });\n      },\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n    for (const message of session.warnings) {\n      yield* Effect.logWarning(message);\n    }\n\n    const plan: InfraPlan = yield* timedPhase(\n      timings,\n      \"ports\",\n      planInfra({\n        configDir: session.root,\n        bosConfig: developmentRuntime,\n        cli: {\n          port: input.port,\n          apiPort: input.apiPort,\n          authPort: input.authPort,\n          uiPort: input.uiPort,\n          pluginPortStart: input.pluginPortStart,\n          ssr,\n          proxy,\n          hostSource,\n          uiSource,\n          apiSource,\n          authSource,\n          interactive: input.interactive,\n        },\n      }),\n    );\n\n    yield* Effect.tryPromise({\n      try: () => materializeViaLayer(session.root, plan.runtimeConfig),\n      catch: (cause) => new DevStepError({ phase: \"materialize infra\", cause }),\n    });\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    yield* projectEnv\n      .sync(session.root, plan.envGenerated, shell)\n      .pipe(\n        Effect.catchTag(\"EnvSyncError\", (error) =>\n          Effect.logWarning(\n            `[env] failed to refresh .env from resolved ports: ${String(error.cause)}`,\n          ),\n        ),\n      );\n\n    const mergedEnv = yield* Effect.sync(() =>\n      mergeGeneratedOverFileEnv(\n        plan.envGenerated,\n        processEnvRecord() as Record<string, string>,\n        shell,\n      ),\n    );\n    yield* Effect.sync(() => {\n      for (const [key, value] of Object.entries(mergedEnv)) {\n        if (key === \"BASE_URL\" || key === \"CORS_ORIGIN\") setProcessEnv(key, value);\n      }\n    });\n    let preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n    if (\n      preflightFailures.length > 0 &&\n      shouldAutoStartDocker(preflightFailures, {\n        ...detectAutoStartContext(session.root),\n        dockerAvailable: yield* Effect.promise(isDockerAvailable),\n      })\n    ) {\n      const compose = yield* step(timings, \"docker compose up\", () =>\n        runDockerComposeUp(session.root),\n      );\n      if (compose.ok) {\n        preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n      } else {\n        preflightFailures = [\n          ...preflightFailures,\n          {\n            secret: \"docker-compose\",\n            host: \"localhost\",\n            port: 0,\n            error: `docker compose up -d --wait failed${compose.tail ? `:\\n${compose.tail}` : \"\"}`,\n            tcpReachable: false,\n          },\n        ];\n      }\n    }\n    if (preflightFailures.length > 0) {\n      return yield* new DevPreflightFailed({ messages: preflightFailures.map((f) => f.error) });\n    }\n\n    const services = buildServiceDescriptorMapFromPlan(plan, { ssr, proxy });\n\n    const packages = [...plan.serviceDescriptors.keys()];\n    if (isDebug(getProcessEnv(\"DEBUG\"))) {\n      yield* Effect.logError(`[DEBUG dev] services keys: ${packages.join(\", \")}`);\n    }\n    const apiSvc = services.get(\"api\");\n    if (apiSvc?.proxy) {\n      const proxyUrl = resolveProxyUrl(bosConfig);\n      if (proxyUrl) plan.orchestrator.env.API_PROXY = proxyUrl;\n    }\n\n    yield* step(timings, \"generate artifacts\", () =>\n      generateCodeArtifacts(session.root, bosConfig, {\n        env: \"development\",\n        extendsChain: devExtendsChain,\n        runtimeConfig: plan.runtimeConfig,\n      }),\n    );\n\n    return {\n      session: {\n        orchestrator: plan.orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      description: buildDescription(services) || plan.description,\n      processes: packages,\n    };\n  });\n\nexport const startBootstrap = (deps: BootstrapDeps, input: StartOptions) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    const sessionRoot = deps.session?.root ?? process.cwd();\n\n    yield* loadEnvStep(projectEnv, sessionRoot);\n\n    yield* emitProgress({ phase: \"config\", status: \"running\" });\n\n    const bosEnv = input.env ?? (getProcessEnv(\"BOS_ENV\") === \"staging\" ? \"staging\" : \"production\");\n    const explicitConfig = resolveStartConfigSource(input, {\n      BOS_ACCOUNT: getProcessEnv(\"BOS_ACCOUNT\"),\n      BOS_GATEWAY: getProcessEnv(\"BOS_GATEWAY\"),\n    });\n\n    let config: BosConfig | null = null;\n    let remoteConfig: BosConfig | null = null;\n\n    if (explicitConfig.configPath) {\n      config = deps.session?.config ?? null;\n    } else if (explicitConfig.registry) {\n      const { account, domain } = explicitConfig.registry;\n      const expectedUrl = buildRegistryConfigUrl(account, domain, input.registry);\n      remoteConfig = yield* Effect.tryPromise({\n        try: () => resolvePublishedConfig(account, domain, input.registry),\n        catch: (error) =>\n          new StartFetchFailed({\n            message: `Failed to fetch config for bos://${account}/${domain}: ${\n              error instanceof Error ? error.message : \"Unknown error\"\n            }\\nExpected URL: ${expectedUrl}`,\n          }),\n      });\n      if (remoteConfig) {\n        config = remoteConfig;\n      } else {\n        return yield* new StartRemoteConfigMissing({\n          message: `No config found at bos://${account}/${domain}. Verify the account and gateway are correct and the config has been published.\\nExpected URL: ${expectedUrl}`,\n        });\n      }\n    } else {\n      config = deps.session?.config ?? null;\n    }\n\n    if (!config) {\n      return yield* new StartConfigMissing({});\n    }\n\n    if (!explicitConfig.configPath) {\n      if (explicitConfig.registry?.account) {\n        config = { ...config, account: explicitConfig.registry.account };\n      }\n      if (explicitConfig.registry?.domain) {\n        config = { ...config, domain: explicitConfig.registry.domain };\n      }\n    }\n    const baseConfig: BosConfig = config;\n\n    const port = input.port ?? getHostDevelopmentPort(baseConfig.app.host.development);\n    const isStaging = bosEnv === \"staging\";\n    const runtimePlugins = yield* Effect.tryPromise({\n      try: () => buildRuntimePluginsForConfig(baseConfig, sessionRoot, \"production\"),\n      catch: (cause) => new DevStepError({ phase: \"resolve runtime plugins\", cause }),\n    });\n    const runtimeConfig = yield* Effect.tryPromise({\n      try: () =>\n        buildRuntimeConfig(baseConfig, sessionRoot, \"production\", {\n          uiSource: \"remote\",\n          apiSource: \"remote\",\n          authSource: \"remote\",\n          hostSource: \"remote\",\n          plugins: runtimePlugins,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n\n    if (isStaging && baseConfig.staging?.domain) {\n      runtimeConfig.domain = baseConfig.staging.domain;\n    }\n\n    if (isStaging) {\n      runtimeConfig.env = \"staging\";\n    }\n\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"running\" });\n    yield* Effect.tryPromise({\n      try: () =>\n        generateCodeArtifacts(sessionRoot, baseConfig, {\n          env: \"production\",\n          runtimeConfig,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"generate artifacts\", cause }),\n    });\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"done\" });\n\n    const productionEnv: Record<string, string> = {};\n    const warnings: string[] = [];\n\n    const localhostOrigin = /^https?:\\/\\/(localhost|127\\.0\\.0\\.1)(:\\d+)?$/i;\n    const corsOrigin = getProcessEnv(\"CORS_ORIGIN\");\n    const isLocalhostProductionOrigin =\n      corsOrigin !== undefined && localhostOrigin.test(corsOrigin);\n    if (isLocalhostProductionOrigin && isRegistryStart(explicitConfig)) {\n      warnings.push(\n        `CORS_ORIGIN is a localhost origin (${corsOrigin}) in a registry production start — overriding with the configured domain`,\n      );\n      deleteProcessEnv(\"CORS_ORIGIN\");\n      deleteProcessEnv(\"BASE_URL\");\n    }\n\n    if (!getProcessEnv(\"CORS_ORIGIN\") && baseConfig.domain) {\n      const effectiveDomain = isStaging\n        ? (baseConfig.staging?.domain ?? baseConfig.domain)\n        : baseConfig.domain;\n      const defaultOrigin = `https://${effectiveDomain}`;\n      productionEnv.CORS_ORIGIN = defaultOrigin;\n      productionEnv.BASE_URL = defaultOrigin;\n      warnings.push(`CORS_ORIGIN defaulting to ${defaultOrigin}`);\n    }\n\n    const requiredSecrets = new Set<string>();\n    const missingSecrets: string[] = [];\n\n    if (runtimeConfig.host.secrets) {\n      for (const s of runtimeConfig.host.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.auth?.secrets) {\n      for (const s of runtimeConfig.auth.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.api?.secrets) {\n      for (const s of runtimeConfig.api.secrets) requiredSecrets.add(s);\n    }\n    for (const plugin of Object.values(runtimeConfig.plugins ?? {})) {\n      if (plugin.secrets) {\n        for (const s of plugin.secrets) {\n          if (s.endsWith(\"_DATABASE_URL\")) continue;\n          requiredSecrets.add(s);\n        }\n      }\n    }\n\n    for (const secret of requiredSecrets) {\n      const value = getProcessEnv(secret);\n      if (!value || value.length === 0) {\n        missingSecrets.push(secret);\n      }\n    }\n\n    if (missingSecrets.length > 0) {\n      warnings.push(`Missing ${missingSecrets.length} secret(s): ${missingSecrets.join(\", \")}`);\n    }\n\n    for (const [secret, value] of Object.entries(processEnvRecord())) {\n      if (!value || !secret.endsWith(\"_DATABASE_URL\")) continue;\n      if (isRailwayPublicProxyUrl(value)) {\n        const host = new URL(value).hostname;\n        warnings.push(\n          `${secret} points at Railway's public proxy (${host}) — its TLS certificate is self-signed, ` +\n            `so connections use unverified TLS. Prefer the private *.railway.internal URL when the ` +\n            `database runs in the same Railway project.`,\n        );\n      }\n    }\n\n    const stagingEnvVars: Record<string, string> = isStaging\n      ? { BOS_GATEWAY: baseConfig.staging?.domain ?? baseConfig.domain ?? \"\" }\n      : {};\n\n    const plan: InfraPlan = yield* planInfra({\n      configDir: sessionRoot,\n      bosConfig: runtimeConfig,\n      cli: {\n        port: input.port,\n        ssr: false,\n        proxy: false,\n        hostSource: \"remote\",\n        uiSource: \"remote\",\n        apiSource: \"remote\",\n        authSource: \"remote\",\n        interactive: input.interactive,\n      },\n    });\n\n    const services = buildServiceDescriptorMap(plan.runtimeConfig);\n\n    const configSource = explicitConfig.configPath\n      ? explicitConfig.configPath\n      : remoteConfig\n        ? `bos://${explicitConfig.registry?.account}/${explicitConfig.registry?.domain}`\n        : (findConfigPath() ?? \"bos.config.json\");\n\n    const configSourceHttp =\n      remoteConfig && explicitConfig.registry\n        ? buildRegistryConfigUrl(\n            explicitConfig.registry.account,\n            explicitConfig.registry.domain,\n            input.registry,\n          )\n        : undefined;\n\n    const summary: StartSummary = {\n      configSource,\n      configSourceHttp,\n      account: baseConfig.account,\n      domain: baseConfig.domain ?? undefined,\n      modules: {\n        host: plan.runtimeConfig.host.remoteUrl ?? plan.runtimeConfig.host.url ?? \"local\",\n        ui: plan.runtimeConfig.ui.url ?? \"local\",\n        api: plan.runtimeConfig.api.url ?? \"local\",\n        auth: plan.runtimeConfig.auth?.url ?? undefined,\n      },\n      warnings,\n    };\n\n    const orchestrator: AppOrchestrator = {\n      packages: [\"host\"],\n      env: {\n        NODE_ENV: \"production\",\n        ...productionEnv,\n        ...stagingEnvVars,\n        ...plan.launch.env,\n      },\n      description: `${isStaging ? \"Staging\" : \"Production\"} Mode (${baseConfig.account})`,\n      port: plan.resolvedPorts.host ?? port,\n      interactive: input.interactive,\n      // Log persistence stays off for start stacks: the SSR host emits ~80\n      // log events per page render (i18n uncompiled-catalog warnings), and\n      // the file sink writes every event twice through a serialized\n      // appendFile chain regardless of level or dedup — on a loaded machine\n      // that chain starves the event loop and degrades SSR/hydration\n      // mid-suite. Boot failures are diagnosed from stdout (the renderer\n      // prints error-level lines; the smoke captures 400 lines of it).\n    };\n\n    yield* emitProgress({ phase: \"config\", status: \"done\" });\n\n    return {\n      session: {\n        orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      summary,\n      url: plan.launch.hostUrl ?? `http://localhost:${plan.resolvedPorts.host ?? port}`,\n    };\n  });\n\nexport const bootstrapLayers = Layer.mergeAll(ProjectEnvLive, PortAllocatorLive);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,eAAb,cAAkCA,YAAK,YAAY,cAAc,CAAC,CAG/D,CAAC;AAEJ,IAAa,mBAAb,cAAsCA,YAAK,YAAY,kBAAkB,CAAC,CAAwB,CAAC;AAEnG,IAAa,kBAAb,cAAqCA,YAAK,YAAY,iBAAiB,CAAC,CAAwB,CAAC;AAEjG,IAAa,qBAAb,cAAwCA,YAAK,YAAY,oBAAoB,CAAC,CAE3E,CAAC;AAEJ,IAAa,mBAAb,cAAsCA,YAAK,YAAY,kBAAkB,CAAC,CAAsB,CAAC;AAEjG,IAAa,2BAAb,cAA8CA,YAAK,YAAY,0BAA0B,CAAC,CAEvF,CAAC;AAEJ,IAAa,qBAAb,cAAwCA,YAAK,YAAY,oBAAoB,CAAC,CAE5E,CAAC;AAEH,SAAS,gBAAgB,OAA2B,cAAsC;CACxF,IAAI,UAAU,WAAW,UAAU,UAAU,OAAO;CACpD,OAAO;AACT;AAEA,eAAsB,uBACpB,SACA,SACA,UAC2B;CAC3B,IAAI;EACF,MAAM,EAAE,QAAQ,WAAW,MAAMC,4CAAiB,SAAS,QAAQ,GAAG,WAAW;GAC/E,KAAK;GACL;GACA,OAAO,YAAY,CAAC;EACtB,CAAC;EACD,OAAOC,8CACLC,8BAAgB,MAAM,MAAM,GAC5B,QAAQ,IAAI,GACZ,YACF;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,MAAM,QAAQ,WAAW,iBAAiB,GACtE,OAAO;EAET,MAAM;CACR;AACF;AAEA,SAAS,gBAAgB,KAAsB;CAC7C,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,OAAO,aAAa,WAAW,OAAO,aAAa;CAC5D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,gBAAgB,WAA4C;CAC1E,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,YAAY,UAAU,IAAI;CAChC,IAAI,CAAC,WAAW,OAAO;CACvB,IAAI,UAAU,SAAS,gBAAgB,UAAU,KAAK,GAAG,OAAO,UAAU;CAC1E,IAAI,UAAU,cAAc,gBAAgB,UAAU,UAAU,GAAG,OAAO,UAAU;CACpF,OAAO;AACT;AAEA,MAAM,QAAW,SAAwB,MAAc,OACrDC,4BACE,SACA,MACAC,cAAO,WAAW;CAChB,KAAK;CACL,QAAQ,UAAU,IAAI,aAAa;EAAE,OAAO;EAAM;CAAM,CAAC;AAC3D,CAAC,CACH;AAEF,MAAM,iBAAiB,YAA+B,cACpD,WACG,WAAW,SAAS,CAAC,CACrB,KACCA,cAAO,UAAU,UAA0B,IAAI,aAAa;CAAE,OAAO;CAAc;AAAM,CAAC,CAAC,CAC7F;AAEJ,MAAM,eAAe,YAA+B,cAClD,WACG,KAAK,SAAS,CAAC,CACf,KAAKA,cAAO,UAAU,UAAwB,IAAI,aAAa;CAAE,OAAO;CAAY;AAAM,CAAC,CAAC,CAAC;AAElG,MAAa,gBAAgB,MAAqB,OAAmB,YACnEA,cAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAOC;CACrB,MAAM,aAAa,OAAOC;CAE1B,IAAI,CAAC,KAAK,SACR,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,IAAI,UAA6B,KAAK;CAEtC,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,MAAM,gBAAgBC,gCACpB,QAAQ,UAAU,QAClB,QAAQ,WAAW,QACnB,QAAQ,IACV;CACA,MAAM,oBAAoB,IAAI,IAAI,cAAc,KAAK,UAAU,MAAM,IAAI,CAAC;CAC1E,MAAM,YAAY,cAAc,KAAK,UAAU,MAAM,GAAG;CAExD,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,WAAuB,kBAAkB,IAAI,IAAI,IACnD,gBAAgB,MAAM,IAAI,OAAO,IACjC;CACJ,MAAM,YAAwB,kBAAkB,IAAI,KAAK,IACrD,gBAAgB,MAAM,KAAK,OAAO,IAClC;CACJ,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,MAAM,MAAM,OAAO;CACzB,MAAM,QAAQ,MAAM,SAAS;CAE7B,IAAI,MAAM,UACR,OAAOH,cAAO,WAAW;EACvB,kCAAc,iBAAiB,MAAM,QAAS;CAChD,CAAC;CAGH,IAAI,KACF,OAAOA,cAAO,WAAW;EACvB,kCAAc,WAAW,GAAG;CAC9B,CAAC;CAGH,MAAM,aAAa,OAAO,KAAK,SAAS,qBACtCI,2CAAuB;EACrB,WAAW,QAAQ;EACnB,UAAU;EACV,WAAW,QAAQ,UAAU;EAC7B,cAAc,CAAC;CACjB,CAAC,CACH;CACA,IAAI,uBAAuB;CAC3B,IAAI,WAAW,gBAAgB;EAC7B,OAAO,KAAK,SAAS,iBACnBC,gBAAI,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAKC,oCAAkB,QAAQ,IAAI,CAAC,EAAE,OAAO,QAAQ,KAAK,CAAC,CACxF;EACA,uBAAuB;CACzB;CAEA,OAAO,KAAK,SAAS,SAAS,YAAY;EAExC,KAAI,MADiBC,kCAAgB,QAAQ,MAAM,SAAS,EAClD,CAAC,QAAQ,MAAM,WAAW,OAAO,SAAS,gBAAgB,GAOlE;qDADwC,SAAS,QAC/B,GAChB,QAAQ,IACN,mIAEF;EACF;CAEJ,CAAC;CAED,IAAI;CACJ,IAAI,wBAAwB,MAAM,kBAAkB,QAClD,OAAO,KAAK,SAAS,kBAAkB,YAAY;EACjD,MAAM,SAAS,MAAMC,0CAAe;GAClC,KAAK,QAAQ;GACb,eAAe,MAAM;EACvB,CAAC;EACD,IAAI,QAAQ;GACV,UAAU;GACV,kBAAkB,CAAC,GAAG,OAAO,KAAK;EACpC;CACF,CAAC;CAGH,IAAI,CAAC,QAAQ,QACX,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,MAAM,YAAuB,QAAQ;CAErC,IAAI,SAAS,CAAC,gBAAgB,SAAS,GACrC,OAAO,OAAO,IAAI,gBAAgB,CAAC,CAAC;CAGtC,MAAM,qBAAqB,OAAOR,cAAO,WAAW;EAClD,KAAK,YAAY;GACf,OAAO,QAAQ,aAAa;IAC1B;IACA;IACA;IACA;IACA,KAAK;IACL,SAAS,QAAQ,SAAS;GAC5B,CAAC;EACH;EACA,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CACD,KAAK,MAAM,WAAW,QAAQ,UAC5B,OAAOA,cAAO,WAAW,OAAO;CAGlC,MAAM,OAAkB,OAAOD,4BAC7B,SACA,SACAU,0BAAU;EACR,WAAW,QAAQ;EACnB,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,UAAU,MAAM;GAChB,QAAQ,MAAM;GACd,iBAAiB,MAAM;GACvB;GACA;GACA;GACA;GACA;GACA;GACA,aAAa,MAAM;EACrB;CACF,CAAC,CACH;CAEA,OAAOT,cAAO,WAAW;EACvB,WAAWU,yCAAoB,QAAQ,MAAM,KAAK,aAAa;EAC/D,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAqB;EAAM,CAAC;CAC1E,CAAC;CACD,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,OAAO,WACJ,KAAK,QAAQ,MAAM,KAAK,cAAc,KAAK,CAAC,CAC5C,KACCV,cAAO,SAAS,iBAAiB,UAC/BA,cAAO,WACL,qDAAqD,OAAO,MAAM,KAAK,GACzE,CACF,CACF;CAEF,MAAM,YAAY,OAAOA,cAAO,WAC9BW,+CACE,KAAK,cACLC,qCAAiB,GACjB,KACF,CACF;CACA,OAAOZ,cAAO,WAAW;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,GACjD,IAAI,QAAQ,cAAc,QAAQ,eAAe,kCAAc,KAAK,KAAK;CAE7E,CAAC;CACD,IAAI,oBAAoB,OAAOa,sCAAoB,KAAK,cAAc,SAAS;CAC/E,IACE,kBAAkB,SAAS,KAC3BC,qCAAsB,mBAAmB;EACvC,GAAGC,sCAAuB,QAAQ,IAAI;EACtC,iBAAiB,OAAOf,cAAO,QAAQgB,gCAAiB;CAC1D,CAAC,GACD;EACA,MAAM,UAAU,OAAO,KAAK,SAAS,2BACnCC,kCAAmB,QAAQ,IAAI,CACjC;EACA,IAAI,QAAQ,IACV,oBAAoB,OAAOJ,sCAAoB,KAAK,cAAc,SAAS;OAE3E,oBAAoB,CAClB,GAAG,mBACH;GACE,QAAQ;GACR,MAAM;GACN,MAAM;GACN,OAAO,qCAAqC,QAAQ,OAAO,MAAM,QAAQ,SAAS;GAClF,cAAc;EAChB,CACF;CAEJ;CACA,IAAI,kBAAkB,SAAS,GAC7B,OAAO,OAAO,IAAI,mBAAmB,EAAE,UAAU,kBAAkB,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC;CAG1F,MAAM,WAAWK,6DAAkC,MAAM;EAAE;EAAK;CAAM,CAAC;CAEvE,MAAM,WAAW,CAAC,GAAG,KAAK,mBAAmB,KAAK,CAAC;CACnD,IAAIC,iCAAQC,kCAAc,OAAO,CAAC,GAChC,OAAOpB,cAAO,SAAS,8BAA8B,SAAS,KAAK,IAAI,GAAG;CAG5E,IADe,SAAS,IAAI,KACnB,CAAC,EAAE,OAAO;EACjB,MAAM,WAAW,gBAAgB,SAAS;EAC1C,IAAI,UAAU,KAAK,aAAa,IAAI,YAAY;CAClD;CAEA,OAAO,KAAK,SAAS,4BACnBqB,6CAAsB,QAAQ,MAAM,WAAW;EAC7C,KAAK;EACL,cAAc;EACd,eAAe,KAAK;CACtB,CAAC,CACH;CAEA,OAAO;EACL,SAAS;GACP,cAAc,KAAK;GACnB;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA,aAAaC,4CAAiB,QAAQ,KAAK,KAAK;EAChD,WAAW;CACb;AACF,CAAC;AAEH,MAAa,kBAAkB,MAAqB,UAClDtB,cAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAOC;CACrB,MAAM,aAAa,OAAOC;CAE1B,MAAM,cAAc,KAAK,SAAS,QAAQ,QAAQ,IAAI;CAEtD,OAAO,YAAY,YAAY,WAAW;CAE1C,OAAOqB,8BAAa;EAAE,OAAO;EAAU,QAAQ;CAAU,CAAC;CAE1D,MAAM,SAAS,MAAM,QAAQH,kCAAc,SAAS,MAAM,YAAY,YAAY;CAClF,MAAM,iBAAiBI,qDAAyB,OAAO;EACrD,aAAaJ,kCAAc,aAAa;EACxC,aAAaA,kCAAc,aAAa;CAC1C,CAAC;CAED,IAAI,SAA2B;CAC/B,IAAI,eAAiC;CAErC,IAAI,eAAe,YACjB,SAAS,KAAK,SAAS,UAAU;MAC5B,IAAI,eAAe,UAAU;EAClC,MAAM,EAAE,SAAS,WAAW,eAAe;EAC3C,MAAM,cAAcK,sCAAuB,SAAS,QAAQ,MAAM,QAAQ;EAC1E,eAAe,OAAOzB,cAAO,WAAW;GACtC,WAAW,uBAAuB,SAAS,QAAQ,MAAM,QAAQ;GACjE,QAAQ,UACN,IAAI,iBAAiB,EACnB,SAAS,oCAAoC,QAAQ,GAAG,OAAO,IAC7D,iBAAiB,QAAQ,MAAM,UAAU,gBAC1C,kBAAkB,cACrB,CAAC;EACL,CAAC;EACD,IAAI,cACF,SAAS;OAET,OAAO,OAAO,IAAI,yBAAyB,EACzC,SAAS,4BAA4B,QAAQ,GAAG,OAAO,iGAAiG,cAC1J,CAAC;CAEL,OACE,SAAS,KAAK,SAAS,UAAU;CAGnC,IAAI,CAAC,QACH,OAAO,OAAO,IAAI,mBAAmB,CAAC,CAAC;CAGzC,IAAI,CAAC,eAAe,YAAY;EAC9B,IAAI,eAAe,UAAU,SAC3B,SAAS;GAAE,GAAG;GAAQ,SAAS,eAAe,SAAS;EAAQ;EAEjE,IAAI,eAAe,UAAU,QAC3B,SAAS;GAAE,GAAG;GAAQ,QAAQ,eAAe,SAAS;EAAO;CAEjE;CACA,MAAM,aAAwB;CAE9B,MAAM,OAAO,MAAM,QAAQ0B,sCAAuB,WAAW,IAAI,KAAK,WAAW;CACjF,MAAM,YAAY,WAAW;CAC7B,MAAM,iBAAiB,OAAO1B,cAAO,WAAW;EAC9C,WAAW2B,4CAA6B,YAAY,aAAa,YAAY;EAC7E,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAA2B;EAAM,CAAC;CAChF,CAAC;CACD,MAAM,gBAAgB,OAAO3B,cAAO,WAAW;EAC7C,WACE4B,kCAAmB,YAAY,aAAa,cAAc;GACxD,UAAU;GACV,WAAW;GACX,YAAY;GACZ,YAAY;GACZ,SAAS;EACX,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CAED,IAAI,aAAa,WAAW,SAAS,QACnC,cAAc,SAAS,WAAW,QAAQ;CAG5C,IAAI,WACF,cAAc,MAAM;CAGtB,OAAOL,8BAAa;EAAE,OAAO;EAAsB,QAAQ;CAAU,CAAC;CACtE,OAAOvB,cAAO,WAAW;EACvB,WACEqB,6CAAsB,aAAa,YAAY;GAC7C,KAAK;GACL;EACF,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAsB;EAAM,CAAC;CAC3E,CAAC;CACD,OAAOE,8BAAa;EAAE,OAAO;EAAsB,QAAQ;CAAO,CAAC;CAEnE,MAAM,gBAAwC,CAAC;CAC/C,MAAM,WAAqB,CAAC;CAE5B,MAAM,kBAAkB;CACxB,MAAM,aAAaH,kCAAc,aAAa;CAG9C,IADE,eAAe,UAAa,gBAAgB,KAAK,UAAU,KAC1BS,4CAAgB,cAAc,GAAG;EAClE,SAAS,KACP,sCAAsC,WAAW,yEACnD;EACA,qCAAiB,aAAa;EAC9B,qCAAiB,UAAU;CAC7B;CAEA,IAAI,CAACT,kCAAc,aAAa,KAAK,WAAW,QAAQ;EAItD,MAAM,gBAAgB,WAHE,YACnB,WAAW,SAAS,UAAU,WAAW,SAC1C,WAAW;EAEf,cAAc,cAAc;EAC5B,cAAc,WAAW;EACzB,SAAS,KAAK,6BAA6B,eAAe;CAC5D;CAEA,MAAM,kCAAkB,IAAI,IAAY;CACxC,MAAM,iBAA2B,CAAC;CAElC,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,MAAM,SACtB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,IAAI,SAAS,gBAAgB,IAAI,CAAC;CAElE,KAAK,MAAM,UAAU,OAAO,OAAO,cAAc,WAAW,CAAC,CAAC,GAC5D,IAAI,OAAO,SACT,KAAK,MAAM,KAAK,OAAO,SAAS;EAC9B,IAAI,EAAE,SAAS,eAAe,GAAG;EACjC,gBAAgB,IAAI,CAAC;CACvB;CAIJ,KAAK,MAAM,UAAU,iBAAiB;EACpC,MAAM,QAAQA,kCAAc,MAAM;EAClC,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B,eAAe,KAAK,MAAM;CAE9B;CAEA,IAAI,eAAe,SAAS,GAC1B,SAAS,KAAK,WAAW,eAAe,OAAO,cAAc,eAAe,KAAK,IAAI,GAAG;CAG1F,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQR,qCAAiB,CAAC,GAAG;EAChE,IAAI,CAAC,SAAS,CAAC,OAAO,SAAS,eAAe,GAAG;EACjD,IAAIkB,uCAAwB,KAAK,GAAG;GAClC,MAAM,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC;GAC5B,SAAS,KACP,GAAG,OAAO,qCAAqC,KAAK,yKAGtD;EACF;CACF;CAEA,MAAM,iBAAyC,YAC3C,EAAE,aAAa,WAAW,SAAS,UAAU,WAAW,UAAU,GAAG,IACrE,CAAC;CAEL,MAAM,OAAkB,OAAOrB,0BAAU;EACvC,WAAW;EACX,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,KAAK;GACL,OAAO;GACP,YAAY;GACZ,UAAU;GACV,WAAW;GACX,YAAY;GACZ,aAAa,MAAM;EACrB;CACF,CAAC;CAED,MAAM,WAAWsB,qDAA0B,KAAK,aAAa;CAiB7D,MAAM,UAAwB;EAC5B,cAhBmB,eAAe,aAChC,eAAe,aACf,eACE,SAAS,eAAe,UAAU,QAAQ,GAAG,eAAe,UAAU,WACrEC,8BAAe,KAAK;EAazB,kBAVA,gBAAgB,eAAe,WAC3BP,sCACE,eAAe,SAAS,SACxB,eAAe,SAAS,QACxB,MAAM,QACR,IACA;EAKJ,SAAS,WAAW;EACpB,QAAQ,WAAW,UAAU;EAC7B,SAAS;GACP,MAAM,KAAK,cAAc,KAAK,aAAa,KAAK,cAAc,KAAK,OAAO;GAC1E,IAAI,KAAK,cAAc,GAAG,OAAO;GACjC,KAAK,KAAK,cAAc,IAAI,OAAO;GACnC,MAAM,KAAK,cAAc,MAAM,OAAO;EACxC;EACA;CACF;CAEA,MAAM,eAAgC;EACpC,UAAU,CAAC,MAAM;EACjB,KAAK;GACH,UAAU;GACV,GAAG;GACH,GAAG;GACH,GAAG,KAAK,OAAO;EACjB;EACA,aAAa,GAAG,YAAY,YAAY,aAAa,SAAS,WAAW,QAAQ;EACjF,MAAM,KAAK,cAAc,QAAQ;EACjC,aAAa,MAAM;CAQrB;CAEA,OAAOF,8BAAa;EAAE,OAAO;EAAU,QAAQ;CAAO,CAAC;CAEvD,OAAO;EACL,SAAS;GACP;GACA;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA;EACA,KAAK,KAAK,OAAO,WAAW,oBAAoB,KAAK,cAAc,QAAQ;CAC7E;AACF,CAAC;AAEH,MAAa,kBAAkBU,aAAM,SAASC,oCAAgBC,6BAAiB"}

package/dist/dev-program.mjs

@@ -377,8 +377,7 @@ const startBootstrap = (deps, input) => Effect.gen(function* () {
 		},
 		description: `${isStaging ? "Staging" : "Production"} Mode (${baseConfig.account})`,
 		port: plan.resolvedPorts.host ?? port,
-		interactive: input.interactive,
-		noLogs: true
+		interactive: input.interactive
 	};
 	yield* emitProgress({
 		phase: "config",
@@ -399,5 +398,5 @@ const startBootstrap = (deps, input) => Effect.gen(function* () {
 const bootstrapLayers = Layer.mergeAll(ProjectEnvLive, PortAllocatorLive);
 
 //#endregion
-export { DevConfigMissing, DevPreflightFailed, DevProxyMissing, DevStepError, StartConfigMissing, StartFetchFailed, StartRemoteConfigMissing, bootstrapLayers, devBootstrap, resolveProxyUrl, startBootstrap };
+export { DevConfigMissing, DevPreflightFailed, DevProxyMissing, DevStepError, StartConfigMissing, StartFetchFailed, StartRemoteConfigMissing, bootstrapLayers, devBootstrap, resolveProxyUrl, resolvePublishedConfig, startBootstrap };
 //# sourceMappingURL=dev-program.mjs.map

package/dist/dev-program.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"dev-program.mjs","names":[],"sources":["../src/dev-program.ts"],"sourcesContent":["import { Data, Effect, Layer } from \"effect\";\nimport { detectLocalPackages, PortAllocatorLive } from \"./app\";\nimport { generateCodeArtifacts } from \"./code-artifacts\";\nimport {\n  buildRuntimeConfig,\n  buildRuntimePluginsForConfig,\n  findConfigPath,\n  getHostDevelopmentPort,\n  resolveConfigComposableEntries,\n} from \"./config\";\nimport type { DevOptions, PhaseTiming, StartOptions } from \"./contract\";\nimport { isRailwayPublicProxyUrl } from \"./db/driver\";\nimport { isDebug } from \"./dev-log-pipeline\";\nimport type { DevSessionData, StartSummary } from \"./dev-session-data\";\nimport {\n  deleteProcessEnv,\n  getProcessEnv,\n  processEnvRecord,\n  setProcessEnv,\n} from \"./env/process-env\";\nimport {\n  captureShellEnv,\n  type EnvEnsureError,\n  type EnvLoadError,\n  ProjectEnv,\n  ProjectEnvLive,\n  type ProjectEnvService,\n} from \"./env/project-env\";\nimport { buildRegistryConfigUrl } from \"./fastkv\";\nimport {\n  detectAutoStartContext,\n  isDockerAvailable,\n  runDockerComposeUp,\n  shouldAutoStartDocker,\n} from \"./infra/docker\";\nimport { materializeViaLayer } from \"./infra/materializer\";\nimport { planInfra } from \"./infra/planner\";\nimport { preflightLocalInfra } from \"./infra/preflight\";\nimport type { InfraPlan } from \"./infra/types\";\nimport { mergeGeneratedOverFileEnv } from \"./orchestrator\";\nimport { emitProgress, timedPhase } from \"./progress\";\nimport { openResolution, type ResolutionSession, walkExtendsChain } from \"./resolution/session\";\nimport {\n  type AppOrchestrator,\n  buildDescription,\n  buildServiceDescriptorMap,\n  buildServiceDescriptorMapFromPlan,\n} from \"./service-descriptor\";\nimport { syncResolvedSharedDeps } from \"./shared-deps\";\nimport { isRegistryStart, resolveStartConfigSource } from \"./start-config-source\";\nimport type { BosConfig, SourceMode } from \"./types\";\nimport { BosConfigSchema } from \"./types\";\nimport { run } from \"./utils/run\";\nimport { ensureFreshDeps, findWorkspaceRoot } from \"./workspace\";\n\nexport type { DevSessionData, StartSummary } from \"./dev-session-data\";\n\nexport interface BootstrapDeps {\n  readonly session: ResolutionSession | null;\n}\n\nexport class DevStepError extends Data.TaggedError(\"DevStepError\")<{\n  phase: string;\n  cause: unknown;\n}> {}\n\nexport class DevConfigMissing extends Data.TaggedError(\"DevConfigMissing\")<Record<string, never>> {}\n\nexport class DevProxyMissing extends Data.TaggedError(\"DevProxyMissing\")<Record<string, never>> {}\n\nexport class DevPreflightFailed extends Data.TaggedError(\"DevPreflightFailed\")<{\n  messages: string[];\n}> {}\n\nexport class StartFetchFailed extends Data.TaggedError(\"StartFetchFailed\")<{ message: string }> {}\n\nexport class StartRemoteConfigMissing extends Data.TaggedError(\"StartRemoteConfigMissing\")<{\n  message: string;\n}> {}\n\nexport class StartConfigMissing extends Data.TaggedError(\"StartConfigMissing\")<\n  Record<string, never>\n> {}\n\nfunction parseSourceMode(value: string | undefined, defaultValue: SourceMode): SourceMode {\n  if (value === \"local\" || value === \"remote\") return value;\n  return defaultValue;\n}\n\nasync function resolvePublishedConfig(\n  account: string,\n  gateway: string,\n  registry?: string,\n): Promise<BosConfig | null> {\n  try {\n    const { config: merged } = await walkExtendsChain(`bos://${account}/${gateway}`, {\n      env: \"production\",\n      registry,\n      visit: async () => {},\n    });\n    return resolveConfigComposableEntries(\n      BosConfigSchema.parse(merged),\n      process.cwd(),\n      \"production\",\n    );\n  } catch (error) {\n    if (error instanceof Error && error.message.startsWith(\"No config found\")) {\n      return null;\n    }\n    throw error;\n  }\n}\n\nfunction isValidProxyUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    return parsed.protocol === \"http:\" || parsed.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n\nexport function resolveProxyUrl(bosConfig: BosConfig | null): string | null {\n  if (!bosConfig) return null;\n  const apiConfig = bosConfig.app.api;\n  if (!apiConfig) return null;\n  if (apiConfig.proxy && isValidProxyUrl(apiConfig.proxy)) return apiConfig.proxy;\n  if (apiConfig.production && isValidProxyUrl(apiConfig.production)) return apiConfig.production;\n  return null;\n}\n\nconst step = <A>(timings: PhaseTiming[], name: string, fn: () => Promise<A>) =>\n  timedPhase(\n    timings,\n    name,\n    Effect.tryPromise({\n      try: fn,\n      catch: (cause) => new DevStepError({ phase: name, cause }),\n    }),\n  );\n\nconst ensureEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .ensureFile(configDir)\n    .pipe(\n      Effect.mapError((cause: EnvEnsureError) => new DevStepError({ phase: \"ensure env\", cause })),\n    );\n\nconst loadEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .load(configDir)\n    .pipe(Effect.mapError((cause: EnvLoadError) => new DevStepError({ phase: \"load env\", cause })));\n\nexport const devBootstrap = (deps: BootstrapDeps, input: DevOptions, timings: PhaseTiming[]) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    if (!deps.session) {\n      return yield* new DevConfigMissing({});\n    }\n    let session: ResolutionSession = deps.session;\n\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    const localPackages = detectLocalPackages(\n      session.config ?? undefined,\n      session.runtime ?? undefined,\n      session.root,\n    );\n    const localPackageNames = new Set(localPackages.map((entry) => entry.name));\n    const localDirs = localPackages.map((entry) => entry.dir);\n\n    const hostSource: SourceMode = localPackageNames.has(\"host\")\n      ? parseSourceMode(input.host, \"local\")\n      : \"remote\";\n    const uiSource: SourceMode = localPackageNames.has(\"ui\")\n      ? parseSourceMode(input.ui, \"local\")\n      : \"remote\";\n    const apiSource: SourceMode = localPackageNames.has(\"api\")\n      ? parseSourceMode(input.api, \"local\")\n      : \"remote\";\n    const authSource: SourceMode = localPackageNames.has(\"auth\")\n      ? parseSourceMode(input.auth, \"local\")\n      : \"remote\";\n    const ssr = input.ssr ?? false;\n    const proxy = input.proxy ?? false;\n\n    if (input.logLevel) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_LOG_LEVEL\", input.logLevel!);\n      });\n    }\n\n    if (ssr) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_SSR\", \"1\");\n      });\n    }\n\n    const sharedSync = yield* step(timings, \"shared deps\", () =>\n      syncResolvedSharedDeps({\n        configDir: session.root,\n        hostMode: hostSource,\n        bosConfig: session.config ?? undefined,\n        extendsChain: [],\n      }),\n    );\n    let configMayHaveChanged = false;\n    if (sharedSync.catalogChanged) {\n      yield* step(timings, \"install\", () =>\n        run(\"pnpm\", [\"install\"], { cwd: findWorkspaceRoot(session.root)?.dir ?? session.root }),\n      );\n      configMayHaveChanged = true;\n    }\n\n    yield* step(timings, \"build\", async () => {\n      const report = await ensureFreshDeps(session.root, localDirs);\n      if (report.rebuilt.some((member) => member.name === \"everything-dev\")) {\n        // Only the bos process itself runs the everything-dev dist (plugin\n        // children spawn after this step and load the fresh build). A source\n        // run (node --import tsx src/cli.ts) never imported dist, so nothing\n        // is stale for it — warn only where the previously imported build\n        // matters.\n        const runningFromDist = import.meta.url.includes(\"/dist/\");\n        if (runningFromDist) {\n          console.log(\n            \"[dev] everything-dev was rebuilt — this session still runs the previous \" +\n              \"orchestrator build. Restart `bos dev` once to pick it up.\",\n          );\n        }\n      }\n    });\n\n    let devExtendsChain: string[] | undefined;\n    if (configMayHaveChanged || input.remotePlugins !== undefined) {\n      yield* step(timings, \"resolve config\", async () => {\n        const opened = await openResolution({\n          cwd: session.root,\n          remotePlugins: input.remotePlugins,\n        });\n        if (opened) {\n          session = opened;\n          devExtendsChain = [...opened.chain];\n        }\n      });\n    }\n\n    if (!session.config) {\n      return yield* new DevConfigMissing({});\n    }\n    const bosConfig: BosConfig = session.config;\n\n    if (proxy && !resolveProxyUrl(bosConfig)) {\n      return yield* new DevProxyMissing({});\n    }\n\n    const developmentRuntime = yield* Effect.tryPromise({\n      try: async () => {\n        return session.buildRuntime({\n          uiSource,\n          apiSource,\n          authSource,\n          hostSource,\n          env: \"development\",\n          plugins: session.runtime?.plugins,\n        });\n      },\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n    for (const message of session.warnings) {\n      yield* Effect.logWarning(message);\n    }\n\n    const plan: InfraPlan = yield* timedPhase(\n      timings,\n      \"ports\",\n      planInfra({\n        configDir: session.root,\n        bosConfig: developmentRuntime,\n        cli: {\n          port: input.port,\n          apiPort: input.apiPort,\n          authPort: input.authPort,\n          uiPort: input.uiPort,\n          pluginPortStart: input.pluginPortStart,\n          ssr,\n          proxy,\n          hostSource,\n          uiSource,\n          apiSource,\n          authSource,\n          interactive: input.interactive,\n        },\n      }),\n    );\n\n    yield* Effect.tryPromise({\n      try: () => materializeViaLayer(session.root, plan.runtimeConfig),\n      catch: (cause) => new DevStepError({ phase: \"materialize infra\", cause }),\n    });\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    yield* projectEnv\n      .sync(session.root, plan.envGenerated, shell)\n      .pipe(\n        Effect.catchTag(\"EnvSyncError\", (error) =>\n          Effect.logWarning(\n            `[env] failed to refresh .env from resolved ports: ${String(error.cause)}`,\n          ),\n        ),\n      );\n\n    const mergedEnv = yield* Effect.sync(() =>\n      mergeGeneratedOverFileEnv(\n        plan.envGenerated,\n        processEnvRecord() as Record<string, string>,\n        shell,\n      ),\n    );\n    yield* Effect.sync(() => {\n      for (const [key, value] of Object.entries(mergedEnv)) {\n        if (key === \"BASE_URL\" || key === \"CORS_ORIGIN\") setProcessEnv(key, value);\n      }\n    });\n    let preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n    if (\n      preflightFailures.length > 0 &&\n      shouldAutoStartDocker(preflightFailures, {\n        ...detectAutoStartContext(session.root),\n        dockerAvailable: yield* Effect.promise(isDockerAvailable),\n      })\n    ) {\n      const compose = yield* step(timings, \"docker compose up\", () =>\n        runDockerComposeUp(session.root),\n      );\n      if (compose.ok) {\n        preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n      } else {\n        preflightFailures = [\n          ...preflightFailures,\n          {\n            secret: \"docker-compose\",\n            host: \"localhost\",\n            port: 0,\n            error: `docker compose up -d --wait failed${compose.tail ? `:\\n${compose.tail}` : \"\"}`,\n            tcpReachable: false,\n          },\n        ];\n      }\n    }\n    if (preflightFailures.length > 0) {\n      return yield* new DevPreflightFailed({ messages: preflightFailures.map((f) => f.error) });\n    }\n\n    const services = buildServiceDescriptorMapFromPlan(plan, { ssr, proxy });\n\n    const packages = [...plan.serviceDescriptors.keys()];\n    if (isDebug(getProcessEnv(\"DEBUG\"))) {\n      yield* Effect.logError(`[DEBUG dev] services keys: ${packages.join(\", \")}`);\n    }\n    const apiSvc = services.get(\"api\");\n    if (apiSvc?.proxy) {\n      const proxyUrl = resolveProxyUrl(bosConfig);\n      if (proxyUrl) plan.orchestrator.env.API_PROXY = proxyUrl;\n    }\n\n    yield* step(timings, \"generate artifacts\", () =>\n      generateCodeArtifacts(session.root, bosConfig, {\n        env: \"development\",\n        extendsChain: devExtendsChain,\n        runtimeConfig: plan.runtimeConfig,\n      }),\n    );\n\n    return {\n      session: {\n        orchestrator: plan.orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      description: buildDescription(services) || plan.description,\n      processes: packages,\n    };\n  });\n\nexport const startBootstrap = (deps: BootstrapDeps, input: StartOptions) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    const sessionRoot = deps.session?.root ?? process.cwd();\n\n    yield* loadEnvStep(projectEnv, sessionRoot);\n\n    yield* emitProgress({ phase: \"config\", status: \"running\" });\n\n    const bosEnv = input.env ?? (getProcessEnv(\"BOS_ENV\") === \"staging\" ? \"staging\" : \"production\");\n    const explicitConfig = resolveStartConfigSource(input, {\n      BOS_ACCOUNT: getProcessEnv(\"BOS_ACCOUNT\"),\n      BOS_GATEWAY: getProcessEnv(\"BOS_GATEWAY\"),\n    });\n\n    let config: BosConfig | null = null;\n    let remoteConfig: BosConfig | null = null;\n\n    if (explicitConfig.configPath) {\n      config = deps.session?.config ?? null;\n    } else if (explicitConfig.registry) {\n      const { account, domain } = explicitConfig.registry;\n      const expectedUrl = buildRegistryConfigUrl(account, domain, input.registry);\n      remoteConfig = yield* Effect.tryPromise({\n        try: () => resolvePublishedConfig(account, domain, input.registry),\n        catch: (error) =>\n          new StartFetchFailed({\n            message: `Failed to fetch config for bos://${account}/${domain}: ${\n              error instanceof Error ? error.message : \"Unknown error\"\n            }\\nExpected URL: ${expectedUrl}`,\n          }),\n      });\n      if (remoteConfig) {\n        config = remoteConfig;\n      } else {\n        return yield* new StartRemoteConfigMissing({\n          message: `No config found at bos://${account}/${domain}. Verify the account and gateway are correct and the config has been published.\\nExpected URL: ${expectedUrl}`,\n        });\n      }\n    } else {\n      config = deps.session?.config ?? null;\n    }\n\n    if (!config) {\n      return yield* new StartConfigMissing({});\n    }\n\n    if (!explicitConfig.configPath) {\n      if (explicitConfig.registry?.account) {\n        config = { ...config, account: explicitConfig.registry.account };\n      }\n      if (explicitConfig.registry?.domain) {\n        config = { ...config, domain: explicitConfig.registry.domain };\n      }\n    }\n    const baseConfig: BosConfig = config;\n\n    const port = input.port ?? getHostDevelopmentPort(baseConfig.app.host.development);\n    const isStaging = bosEnv === \"staging\";\n    const runtimePlugins = yield* Effect.tryPromise({\n      try: () => buildRuntimePluginsForConfig(baseConfig, sessionRoot, \"production\"),\n      catch: (cause) => new DevStepError({ phase: \"resolve runtime plugins\", cause }),\n    });\n    const runtimeConfig = yield* Effect.tryPromise({\n      try: () =>\n        buildRuntimeConfig(baseConfig, sessionRoot, \"production\", {\n          uiSource: \"remote\",\n          apiSource: \"remote\",\n          authSource: \"remote\",\n          hostSource: \"remote\",\n          plugins: runtimePlugins,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n\n    if (isStaging && baseConfig.staging?.domain) {\n      runtimeConfig.domain = baseConfig.staging.domain;\n    }\n\n    if (isStaging) {\n      runtimeConfig.env = \"staging\";\n    }\n\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"running\" });\n    yield* Effect.tryPromise({\n      try: () =>\n        generateCodeArtifacts(sessionRoot, baseConfig, {\n          env: \"production\",\n          runtimeConfig,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"generate artifacts\", cause }),\n    });\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"done\" });\n\n    const productionEnv: Record<string, string> = {};\n    const warnings: string[] = [];\n\n    const localhostOrigin = /^https?:\\/\\/(localhost|127\\.0\\.0\\.1)(:\\d+)?$/i;\n    const corsOrigin = getProcessEnv(\"CORS_ORIGIN\");\n    const isLocalhostProductionOrigin =\n      corsOrigin !== undefined && localhostOrigin.test(corsOrigin);\n    if (isLocalhostProductionOrigin && isRegistryStart(explicitConfig)) {\n      warnings.push(\n        `CORS_ORIGIN is a localhost origin (${corsOrigin}) in a registry production start — overriding with the configured domain`,\n      );\n      deleteProcessEnv(\"CORS_ORIGIN\");\n      deleteProcessEnv(\"BASE_URL\");\n    }\n\n    if (!getProcessEnv(\"CORS_ORIGIN\") && baseConfig.domain) {\n      const effectiveDomain = isStaging\n        ? (baseConfig.staging?.domain ?? baseConfig.domain)\n        : baseConfig.domain;\n      const defaultOrigin = `https://${effectiveDomain}`;\n      productionEnv.CORS_ORIGIN = defaultOrigin;\n      productionEnv.BASE_URL = defaultOrigin;\n      warnings.push(`CORS_ORIGIN defaulting to ${defaultOrigin}`);\n    }\n\n    const requiredSecrets = new Set<string>();\n    const missingSecrets: string[] = [];\n\n    if (runtimeConfig.host.secrets) {\n      for (const s of runtimeConfig.host.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.auth?.secrets) {\n      for (const s of runtimeConfig.auth.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.api?.secrets) {\n      for (const s of runtimeConfig.api.secrets) requiredSecrets.add(s);\n    }\n    for (const plugin of Object.values(runtimeConfig.plugins ?? {})) {\n      if (plugin.secrets) {\n        for (const s of plugin.secrets) {\n          if (s.endsWith(\"_DATABASE_URL\")) continue;\n          requiredSecrets.add(s);\n        }\n      }\n    }\n\n    for (const secret of requiredSecrets) {\n      const value = getProcessEnv(secret);\n      if (!value || value.length === 0) {\n        missingSecrets.push(secret);\n      }\n    }\n\n    if (missingSecrets.length > 0) {\n      warnings.push(`Missing ${missingSecrets.length} secret(s): ${missingSecrets.join(\", \")}`);\n    }\n\n    for (const [secret, value] of Object.entries(processEnvRecord())) {\n      if (!value || !secret.endsWith(\"_DATABASE_URL\")) continue;\n      if (isRailwayPublicProxyUrl(value)) {\n        const host = new URL(value).hostname;\n        warnings.push(\n          `${secret} points at Railway's public proxy (${host}) — its TLS certificate is self-signed, ` +\n            `so connections use unverified TLS. Prefer the private *.railway.internal URL when the ` +\n            `database runs in the same Railway project.`,\n        );\n      }\n    }\n\n    const stagingEnvVars: Record<string, string> = isStaging\n      ? { BOS_GATEWAY: baseConfig.staging?.domain ?? baseConfig.domain ?? \"\" }\n      : {};\n\n    const plan: InfraPlan = yield* planInfra({\n      configDir: sessionRoot,\n      bosConfig: runtimeConfig,\n      cli: {\n        port: input.port,\n        ssr: false,\n        proxy: false,\n        hostSource: \"remote\",\n        uiSource: \"remote\",\n        apiSource: \"remote\",\n        authSource: \"remote\",\n        interactive: input.interactive,\n      },\n    });\n\n    const services = buildServiceDescriptorMap(plan.runtimeConfig);\n\n    const configSource = explicitConfig.configPath\n      ? explicitConfig.configPath\n      : remoteConfig\n        ? `bos://${explicitConfig.registry?.account}/${explicitConfig.registry?.domain}`\n        : (findConfigPath() ?? \"bos.config.json\");\n\n    const configSourceHttp =\n      remoteConfig && explicitConfig.registry\n        ? buildRegistryConfigUrl(\n            explicitConfig.registry.account,\n            explicitConfig.registry.domain,\n            input.registry,\n          )\n        : undefined;\n\n    const summary: StartSummary = {\n      configSource,\n      configSourceHttp,\n      account: baseConfig.account,\n      domain: baseConfig.domain ?? undefined,\n      modules: {\n        host: plan.runtimeConfig.host.remoteUrl ?? plan.runtimeConfig.host.url ?? \"local\",\n        ui: plan.runtimeConfig.ui.url ?? \"local\",\n        api: plan.runtimeConfig.api.url ?? \"local\",\n        auth: plan.runtimeConfig.auth?.url ?? undefined,\n      },\n      warnings,\n    };\n\n    const orchestrator: AppOrchestrator = {\n      packages: [\"host\"],\n      env: {\n        NODE_ENV: \"production\",\n        ...productionEnv,\n        ...stagingEnvVars,\n        ...plan.launch.env,\n      },\n      description: `${isStaging ? \"Staging\" : \"Production\"} Mode (${baseConfig.account})`,\n      port: plan.resolvedPorts.host ?? port,\n      interactive: input.interactive,\n      noLogs: true,\n    };\n\n    yield* emitProgress({ phase: \"config\", status: \"done\" });\n\n    return {\n      session: {\n        orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      summary,\n      url: plan.launch.hostUrl ?? `http://localhost:${plan.resolvedPorts.host ?? port}`,\n    };\n  });\n\nexport const bootstrapLayers = Layer.mergeAll(ProjectEnvLive, PortAllocatorLive);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,eAAb,cAAkC,KAAK,YAAY,cAAc,CAAC,CAG/D,CAAC;AAEJ,IAAa,mBAAb,cAAsC,KAAK,YAAY,kBAAkB,CAAC,CAAwB,CAAC;AAEnG,IAAa,kBAAb,cAAqC,KAAK,YAAY,iBAAiB,CAAC,CAAwB,CAAC;AAEjG,IAAa,qBAAb,cAAwC,KAAK,YAAY,oBAAoB,CAAC,CAE3E,CAAC;AAEJ,IAAa,mBAAb,cAAsC,KAAK,YAAY,kBAAkB,CAAC,CAAsB,CAAC;AAEjG,IAAa,2BAAb,cAA8C,KAAK,YAAY,0BAA0B,CAAC,CAEvF,CAAC;AAEJ,IAAa,qBAAb,cAAwC,KAAK,YAAY,oBAAoB,CAAC,CAE5E,CAAC;AAEH,SAAS,gBAAgB,OAA2B,cAAsC;CACxF,IAAI,UAAU,WAAW,UAAU,UAAU,OAAO;CACpD,OAAO;AACT;AAEA,eAAe,uBACb,SACA,SACA,UAC2B;CAC3B,IAAI;EACF,MAAM,EAAE,QAAQ,WAAW,MAAM,iBAAiB,SAAS,QAAQ,GAAG,WAAW;GAC/E,KAAK;GACL;GACA,OAAO,YAAY,CAAC;EACtB,CAAC;EACD,OAAO,+BACL,gBAAgB,MAAM,MAAM,GAC5B,QAAQ,IAAI,GACZ,YACF;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,MAAM,QAAQ,WAAW,iBAAiB,GACtE,OAAO;EAET,MAAM;CACR;AACF;AAEA,SAAS,gBAAgB,KAAsB;CAC7C,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,OAAO,aAAa,WAAW,OAAO,aAAa;CAC5D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,gBAAgB,WAA4C;CAC1E,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,YAAY,UAAU,IAAI;CAChC,IAAI,CAAC,WAAW,OAAO;CACvB,IAAI,UAAU,SAAS,gBAAgB,UAAU,KAAK,GAAG,OAAO,UAAU;CAC1E,IAAI,UAAU,cAAc,gBAAgB,UAAU,UAAU,GAAG,OAAO,UAAU;CACpF,OAAO;AACT;AAEA,MAAM,QAAW,SAAwB,MAAc,OACrD,WACE,SACA,MACA,OAAO,WAAW;CAChB,KAAK;CACL,QAAQ,UAAU,IAAI,aAAa;EAAE,OAAO;EAAM;CAAM,CAAC;AAC3D,CAAC,CACH;AAEF,MAAM,iBAAiB,YAA+B,cACpD,WACG,WAAW,SAAS,CAAC,CACrB,KACC,OAAO,UAAU,UAA0B,IAAI,aAAa;CAAE,OAAO;CAAc;AAAM,CAAC,CAAC,CAC7F;AAEJ,MAAM,eAAe,YAA+B,cAClD,WACG,KAAK,SAAS,CAAC,CACf,KAAK,OAAO,UAAU,UAAwB,IAAI,aAAa;CAAE,OAAO;CAAY;AAAM,CAAC,CAAC,CAAC;AAElG,MAAa,gBAAgB,MAAqB,OAAmB,YACnE,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,aAAa,OAAO;CAE1B,IAAI,CAAC,KAAK,SACR,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,IAAI,UAA6B,KAAK;CAEtC,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,MAAM,gBAAgB,oBACpB,QAAQ,UAAU,QAClB,QAAQ,WAAW,QACnB,QAAQ,IACV;CACA,MAAM,oBAAoB,IAAI,IAAI,cAAc,KAAK,UAAU,MAAM,IAAI,CAAC;CAC1E,MAAM,YAAY,cAAc,KAAK,UAAU,MAAM,GAAG;CAExD,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,WAAuB,kBAAkB,IAAI,IAAI,IACnD,gBAAgB,MAAM,IAAI,OAAO,IACjC;CACJ,MAAM,YAAwB,kBAAkB,IAAI,KAAK,IACrD,gBAAgB,MAAM,KAAK,OAAO,IAClC;CACJ,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,MAAM,MAAM,OAAO;CACzB,MAAM,QAAQ,MAAM,SAAS;CAE7B,IAAI,MAAM,UACR,OAAO,OAAO,WAAW;EACvB,cAAc,iBAAiB,MAAM,QAAS;CAChD,CAAC;CAGH,IAAI,KACF,OAAO,OAAO,WAAW;EACvB,cAAc,WAAW,GAAG;CAC9B,CAAC;CAGH,MAAM,aAAa,OAAO,KAAK,SAAS,qBACtC,uBAAuB;EACrB,WAAW,QAAQ;EACnB,UAAU;EACV,WAAW,QAAQ,UAAU;EAC7B,cAAc,CAAC;CACjB,CAAC,CACH;CACA,IAAI,uBAAuB;CAC3B,IAAI,WAAW,gBAAgB;EAC7B,OAAO,KAAK,SAAS,iBACnB,IAAI,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAK,kBAAkB,QAAQ,IAAI,CAAC,EAAE,OAAO,QAAQ,KAAK,CAAC,CACxF;EACA,uBAAuB;CACzB;CAEA,OAAO,KAAK,SAAS,SAAS,YAAY;EAExC,KAAI,MADiB,gBAAgB,QAAQ,MAAM,SAAS,EAClD,CAAC,QAAQ,MAAM,WAAW,OAAO,SAAS,gBAAgB,GAOlE;OADwB,YAAY,IAAI,SAAS,QAC/B,GAChB,QAAQ,IACN,mIAEF;EACF;CAEJ,CAAC;CAED,IAAI;CACJ,IAAI,wBAAwB,MAAM,kBAAkB,QAClD,OAAO,KAAK,SAAS,kBAAkB,YAAY;EACjD,MAAM,SAAS,MAAM,eAAe;GAClC,KAAK,QAAQ;GACb,eAAe,MAAM;EACvB,CAAC;EACD,IAAI,QAAQ;GACV,UAAU;GACV,kBAAkB,CAAC,GAAG,OAAO,KAAK;EACpC;CACF,CAAC;CAGH,IAAI,CAAC,QAAQ,QACX,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,MAAM,YAAuB,QAAQ;CAErC,IAAI,SAAS,CAAC,gBAAgB,SAAS,GACrC,OAAO,OAAO,IAAI,gBAAgB,CAAC,CAAC;CAGtC,MAAM,qBAAqB,OAAO,OAAO,WAAW;EAClD,KAAK,YAAY;GACf,OAAO,QAAQ,aAAa;IAC1B;IACA;IACA;IACA;IACA,KAAK;IACL,SAAS,QAAQ,SAAS;GAC5B,CAAC;EACH;EACA,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CACD,KAAK,MAAM,WAAW,QAAQ,UAC5B,OAAO,OAAO,WAAW,OAAO;CAGlC,MAAM,OAAkB,OAAO,WAC7B,SACA,SACA,UAAU;EACR,WAAW,QAAQ;EACnB,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,UAAU,MAAM;GAChB,QAAQ,MAAM;GACd,iBAAiB,MAAM;GACvB;GACA;GACA;GACA;GACA;GACA;GACA,aAAa,MAAM;EACrB;CACF,CAAC,CACH;CAEA,OAAO,OAAO,WAAW;EACvB,WAAW,oBAAoB,QAAQ,MAAM,KAAK,aAAa;EAC/D,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAqB;EAAM,CAAC;CAC1E,CAAC;CACD,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,OAAO,WACJ,KAAK,QAAQ,MAAM,KAAK,cAAc,KAAK,CAAC,CAC5C,KACC,OAAO,SAAS,iBAAiB,UAC/B,OAAO,WACL,qDAAqD,OAAO,MAAM,KAAK,GACzE,CACF,CACF;CAEF,MAAM,YAAY,OAAO,OAAO,WAC9B,0BACE,KAAK,cACL,iBAAiB,GACjB,KACF,CACF;CACA,OAAO,OAAO,WAAW;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,GACjD,IAAI,QAAQ,cAAc,QAAQ,eAAe,cAAc,KAAK,KAAK;CAE7E,CAAC;CACD,IAAI,oBAAoB,OAAO,oBAAoB,KAAK,cAAc,SAAS;CAC/E,IACE,kBAAkB,SAAS,KAC3B,sBAAsB,mBAAmB;EACvC,GAAG,uBAAuB,QAAQ,IAAI;EACtC,iBAAiB,OAAO,OAAO,QAAQ,iBAAiB;CAC1D,CAAC,GACD;EACA,MAAM,UAAU,OAAO,KAAK,SAAS,2BACnC,mBAAmB,QAAQ,IAAI,CACjC;EACA,IAAI,QAAQ,IACV,oBAAoB,OAAO,oBAAoB,KAAK,cAAc,SAAS;OAE3E,oBAAoB,CAClB,GAAG,mBACH;GACE,QAAQ;GACR,MAAM;GACN,MAAM;GACN,OAAO,qCAAqC,QAAQ,OAAO,MAAM,QAAQ,SAAS;GAClF,cAAc;EAChB,CACF;CAEJ;CACA,IAAI,kBAAkB,SAAS,GAC7B,OAAO,OAAO,IAAI,mBAAmB,EAAE,UAAU,kBAAkB,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC;CAG1F,MAAM,WAAW,kCAAkC,MAAM;EAAE;EAAK;CAAM,CAAC;CAEvE,MAAM,WAAW,CAAC,GAAG,KAAK,mBAAmB,KAAK,CAAC;CACnD,IAAI,QAAQ,cAAc,OAAO,CAAC,GAChC,OAAO,OAAO,SAAS,8BAA8B,SAAS,KAAK,IAAI,GAAG;CAG5E,IADe,SAAS,IAAI,KACnB,CAAC,EAAE,OAAO;EACjB,MAAM,WAAW,gBAAgB,SAAS;EAC1C,IAAI,UAAU,KAAK,aAAa,IAAI,YAAY;CAClD;CAEA,OAAO,KAAK,SAAS,4BACnB,sBAAsB,QAAQ,MAAM,WAAW;EAC7C,KAAK;EACL,cAAc;EACd,eAAe,KAAK;CACtB,CAAC,CACH;CAEA,OAAO;EACL,SAAS;GACP,cAAc,KAAK;GACnB;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA,aAAa,iBAAiB,QAAQ,KAAK,KAAK;EAChD,WAAW;CACb;AACF,CAAC;AAEH,MAAa,kBAAkB,MAAqB,UAClD,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,aAAa,OAAO;CAE1B,MAAM,cAAc,KAAK,SAAS,QAAQ,QAAQ,IAAI;CAEtD,OAAO,YAAY,YAAY,WAAW;CAE1C,OAAO,aAAa;EAAE,OAAO;EAAU,QAAQ;CAAU,CAAC;CAE1D,MAAM,SAAS,MAAM,QAAQ,cAAc,SAAS,MAAM,YAAY,YAAY;CAClF,MAAM,iBAAiB,yBAAyB,OAAO;EACrD,aAAa,cAAc,aAAa;EACxC,aAAa,cAAc,aAAa;CAC1C,CAAC;CAED,IAAI,SAA2B;CAC/B,IAAI,eAAiC;CAErC,IAAI,eAAe,YACjB,SAAS,KAAK,SAAS,UAAU;MAC5B,IAAI,eAAe,UAAU;EAClC,MAAM,EAAE,SAAS,WAAW,eAAe;EAC3C,MAAM,cAAc,uBAAuB,SAAS,QAAQ,MAAM,QAAQ;EAC1E,eAAe,OAAO,OAAO,WAAW;GACtC,WAAW,uBAAuB,SAAS,QAAQ,MAAM,QAAQ;GACjE,QAAQ,UACN,IAAI,iBAAiB,EACnB,SAAS,oCAAoC,QAAQ,GAAG,OAAO,IAC7D,iBAAiB,QAAQ,MAAM,UAAU,gBAC1C,kBAAkB,cACrB,CAAC;EACL,CAAC;EACD,IAAI,cACF,SAAS;OAET,OAAO,OAAO,IAAI,yBAAyB,EACzC,SAAS,4BAA4B,QAAQ,GAAG,OAAO,iGAAiG,cAC1J,CAAC;CAEL,OACE,SAAS,KAAK,SAAS,UAAU;CAGnC,IAAI,CAAC,QACH,OAAO,OAAO,IAAI,mBAAmB,CAAC,CAAC;CAGzC,IAAI,CAAC,eAAe,YAAY;EAC9B,IAAI,eAAe,UAAU,SAC3B,SAAS;GAAE,GAAG;GAAQ,SAAS,eAAe,SAAS;EAAQ;EAEjE,IAAI,eAAe,UAAU,QAC3B,SAAS;GAAE,GAAG;GAAQ,QAAQ,eAAe,SAAS;EAAO;CAEjE;CACA,MAAM,aAAwB;CAE9B,MAAM,OAAO,MAAM,QAAQ,uBAAuB,WAAW,IAAI,KAAK,WAAW;CACjF,MAAM,YAAY,WAAW;CAC7B,MAAM,iBAAiB,OAAO,OAAO,WAAW;EAC9C,WAAW,6BAA6B,YAAY,aAAa,YAAY;EAC7E,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAA2B;EAAM,CAAC;CAChF,CAAC;CACD,MAAM,gBAAgB,OAAO,OAAO,WAAW;EAC7C,WACE,mBAAmB,YAAY,aAAa,cAAc;GACxD,UAAU;GACV,WAAW;GACX,YAAY;GACZ,YAAY;GACZ,SAAS;EACX,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CAED,IAAI,aAAa,WAAW,SAAS,QACnC,cAAc,SAAS,WAAW,QAAQ;CAG5C,IAAI,WACF,cAAc,MAAM;CAGtB,OAAO,aAAa;EAAE,OAAO;EAAsB,QAAQ;CAAU,CAAC;CACtE,OAAO,OAAO,WAAW;EACvB,WACE,sBAAsB,aAAa,YAAY;GAC7C,KAAK;GACL;EACF,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAsB;EAAM,CAAC;CAC3E,CAAC;CACD,OAAO,aAAa;EAAE,OAAO;EAAsB,QAAQ;CAAO,CAAC;CAEnE,MAAM,gBAAwC,CAAC;CAC/C,MAAM,WAAqB,CAAC;CAE5B,MAAM,kBAAkB;CACxB,MAAM,aAAa,cAAc,aAAa;CAG9C,IADE,eAAe,UAAa,gBAAgB,KAAK,UAAU,KAC1B,gBAAgB,cAAc,GAAG;EAClE,SAAS,KACP,sCAAsC,WAAW,yEACnD;EACA,iBAAiB,aAAa;EAC9B,iBAAiB,UAAU;CAC7B;CAEA,IAAI,CAAC,cAAc,aAAa,KAAK,WAAW,QAAQ;EAItD,MAAM,gBAAgB,WAHE,YACnB,WAAW,SAAS,UAAU,WAAW,SAC1C,WAAW;EAEf,cAAc,cAAc;EAC5B,cAAc,WAAW;EACzB,SAAS,KAAK,6BAA6B,eAAe;CAC5D;CAEA,MAAM,kCAAkB,IAAI,IAAY;CACxC,MAAM,iBAA2B,CAAC;CAElC,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,MAAM,SACtB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,IAAI,SAAS,gBAAgB,IAAI,CAAC;CAElE,KAAK,MAAM,UAAU,OAAO,OAAO,cAAc,WAAW,CAAC,CAAC,GAC5D,IAAI,OAAO,SACT,KAAK,MAAM,KAAK,OAAO,SAAS;EAC9B,IAAI,EAAE,SAAS,eAAe,GAAG;EACjC,gBAAgB,IAAI,CAAC;CACvB;CAIJ,KAAK,MAAM,UAAU,iBAAiB;EACpC,MAAM,QAAQ,cAAc,MAAM;EAClC,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B,eAAe,KAAK,MAAM;CAE9B;CAEA,IAAI,eAAe,SAAS,GAC1B,SAAS,KAAK,WAAW,eAAe,OAAO,cAAc,eAAe,KAAK,IAAI,GAAG;CAG1F,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,iBAAiB,CAAC,GAAG;EAChE,IAAI,CAAC,SAAS,CAAC,OAAO,SAAS,eAAe,GAAG;EACjD,IAAI,wBAAwB,KAAK,GAAG;GAClC,MAAM,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC;GAC5B,SAAS,KACP,GAAG,OAAO,qCAAqC,KAAK,yKAGtD;EACF;CACF;CAEA,MAAM,iBAAyC,YAC3C,EAAE,aAAa,WAAW,SAAS,UAAU,WAAW,UAAU,GAAG,IACrE,CAAC;CAEL,MAAM,OAAkB,OAAO,UAAU;EACvC,WAAW;EACX,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,KAAK;GACL,OAAO;GACP,YAAY;GACZ,UAAU;GACV,WAAW;GACX,YAAY;GACZ,aAAa,MAAM;EACrB;CACF,CAAC;CAED,MAAM,WAAW,0BAA0B,KAAK,aAAa;CAiB7D,MAAM,UAAwB;EAC5B,cAhBmB,eAAe,aAChC,eAAe,aACf,eACE,SAAS,eAAe,UAAU,QAAQ,GAAG,eAAe,UAAU,WACrE,eAAe,KAAK;EAazB,kBAVA,gBAAgB,eAAe,WAC3B,uBACE,eAAe,SAAS,SACxB,eAAe,SAAS,QACxB,MAAM,QACR,IACA;EAKJ,SAAS,WAAW;EACpB,QAAQ,WAAW,UAAU;EAC7B,SAAS;GACP,MAAM,KAAK,cAAc,KAAK,aAAa,KAAK,cAAc,KAAK,OAAO;GAC1E,IAAI,KAAK,cAAc,GAAG,OAAO;GACjC,KAAK,KAAK,cAAc,IAAI,OAAO;GACnC,MAAM,KAAK,cAAc,MAAM,OAAO;EACxC;EACA;CACF;CAEA,MAAM,eAAgC;EACpC,UAAU,CAAC,MAAM;EACjB,KAAK;GACH,UAAU;GACV,GAAG;GACH,GAAG;GACH,GAAG,KAAK,OAAO;EACjB;EACA,aAAa,GAAG,YAAY,YAAY,aAAa,SAAS,WAAW,QAAQ;EACjF,MAAM,KAAK,cAAc,QAAQ;EACjC,aAAa,MAAM;EACnB,QAAQ;CACV;CAEA,OAAO,aAAa;EAAE,OAAO;EAAU,QAAQ;CAAO,CAAC;CAEvD,OAAO;EACL,SAAS;GACP;GACA;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA;EACA,KAAK,KAAK,OAAO,WAAW,oBAAoB,KAAK,cAAc,QAAQ;CAC7E;AACF,CAAC;AAEH,MAAa,kBAAkB,MAAM,SAAS,gBAAgB,iBAAiB"}
+{"version":3,"file":"dev-program.mjs","names":[],"sources":["../src/dev-program.ts"],"sourcesContent":["import { Data, Effect, Layer } from \"effect\";\nimport { detectLocalPackages, PortAllocatorLive } from \"./app\";\nimport { generateCodeArtifacts } from \"./code-artifacts\";\nimport {\n  buildRuntimeConfig,\n  buildRuntimePluginsForConfig,\n  findConfigPath,\n  getHostDevelopmentPort,\n  resolveConfigComposableEntries,\n} from \"./config\";\nimport type { DevOptions, PhaseTiming, StartOptions } from \"./contract\";\nimport { isRailwayPublicProxyUrl } from \"./db/driver\";\nimport { isDebug } from \"./dev-log-pipeline\";\nimport type { DevSessionData, StartSummary } from \"./dev-session-data\";\nimport {\n  deleteProcessEnv,\n  getProcessEnv,\n  processEnvRecord,\n  setProcessEnv,\n} from \"./env/process-env\";\nimport {\n  captureShellEnv,\n  type EnvEnsureError,\n  type EnvLoadError,\n  ProjectEnv,\n  ProjectEnvLive,\n  type ProjectEnvService,\n} from \"./env/project-env\";\nimport { buildRegistryConfigUrl } from \"./fastkv\";\nimport {\n  detectAutoStartContext,\n  isDockerAvailable,\n  runDockerComposeUp,\n  shouldAutoStartDocker,\n} from \"./infra/docker\";\nimport { materializeViaLayer } from \"./infra/materializer\";\nimport { planInfra } from \"./infra/planner\";\nimport { preflightLocalInfra } from \"./infra/preflight\";\nimport type { InfraPlan } from \"./infra/types\";\nimport { mergeGeneratedOverFileEnv } from \"./orchestrator\";\nimport { emitProgress, timedPhase } from \"./progress\";\nimport { openResolution, type ResolutionSession, walkExtendsChain } from \"./resolution/session\";\nimport {\n  type AppOrchestrator,\n  buildDescription,\n  buildServiceDescriptorMap,\n  buildServiceDescriptorMapFromPlan,\n} from \"./service-descriptor\";\nimport { syncResolvedSharedDeps } from \"./shared-deps\";\nimport { isRegistryStart, resolveStartConfigSource } from \"./start-config-source\";\nimport type { BosConfig, SourceMode } from \"./types\";\nimport { BosConfigSchema } from \"./types\";\nimport { run } from \"./utils/run\";\nimport { ensureFreshDeps, findWorkspaceRoot } from \"./workspace\";\n\nexport type { DevSessionData, StartSummary } from \"./dev-session-data\";\n\nexport interface BootstrapDeps {\n  readonly session: ResolutionSession | null;\n}\n\nexport class DevStepError extends Data.TaggedError(\"DevStepError\")<{\n  phase: string;\n  cause: unknown;\n}> {}\n\nexport class DevConfigMissing extends Data.TaggedError(\"DevConfigMissing\")<Record<string, never>> {}\n\nexport class DevProxyMissing extends Data.TaggedError(\"DevProxyMissing\")<Record<string, never>> {}\n\nexport class DevPreflightFailed extends Data.TaggedError(\"DevPreflightFailed\")<{\n  messages: string[];\n}> {}\n\nexport class StartFetchFailed extends Data.TaggedError(\"StartFetchFailed\")<{ message: string }> {}\n\nexport class StartRemoteConfigMissing extends Data.TaggedError(\"StartRemoteConfigMissing\")<{\n  message: string;\n}> {}\n\nexport class StartConfigMissing extends Data.TaggedError(\"StartConfigMissing\")<\n  Record<string, never>\n> {}\n\nfunction parseSourceMode(value: string | undefined, defaultValue: SourceMode): SourceMode {\n  if (value === \"local\" || value === \"remote\") return value;\n  return defaultValue;\n}\n\nexport async function resolvePublishedConfig(\n  account: string,\n  gateway: string,\n  registry?: string,\n): Promise<BosConfig | null> {\n  try {\n    const { config: merged } = await walkExtendsChain(`bos://${account}/${gateway}`, {\n      env: \"production\",\n      registry,\n      visit: async () => {},\n    });\n    return resolveConfigComposableEntries(\n      BosConfigSchema.parse(merged),\n      process.cwd(),\n      \"production\",\n    );\n  } catch (error) {\n    if (error instanceof Error && error.message.startsWith(\"No config found\")) {\n      return null;\n    }\n    throw error;\n  }\n}\n\nfunction isValidProxyUrl(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    return parsed.protocol === \"http:\" || parsed.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n\nexport function resolveProxyUrl(bosConfig: BosConfig | null): string | null {\n  if (!bosConfig) return null;\n  const apiConfig = bosConfig.app.api;\n  if (!apiConfig) return null;\n  if (apiConfig.proxy && isValidProxyUrl(apiConfig.proxy)) return apiConfig.proxy;\n  if (apiConfig.production && isValidProxyUrl(apiConfig.production)) return apiConfig.production;\n  return null;\n}\n\nconst step = <A>(timings: PhaseTiming[], name: string, fn: () => Promise<A>) =>\n  timedPhase(\n    timings,\n    name,\n    Effect.tryPromise({\n      try: fn,\n      catch: (cause) => new DevStepError({ phase: name, cause }),\n    }),\n  );\n\nconst ensureEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .ensureFile(configDir)\n    .pipe(\n      Effect.mapError((cause: EnvEnsureError) => new DevStepError({ phase: \"ensure env\", cause })),\n    );\n\nconst loadEnvStep = (projectEnv: ProjectEnvService, configDir: string) =>\n  projectEnv\n    .load(configDir)\n    .pipe(Effect.mapError((cause: EnvLoadError) => new DevStepError({ phase: \"load env\", cause })));\n\nexport const devBootstrap = (deps: BootstrapDeps, input: DevOptions, timings: PhaseTiming[]) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    if (!deps.session) {\n      return yield* new DevConfigMissing({});\n    }\n    let session: ResolutionSession = deps.session;\n\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    const localPackages = detectLocalPackages(\n      session.config ?? undefined,\n      session.runtime ?? undefined,\n      session.root,\n    );\n    const localPackageNames = new Set(localPackages.map((entry) => entry.name));\n    const localDirs = localPackages.map((entry) => entry.dir);\n\n    const hostSource: SourceMode = localPackageNames.has(\"host\")\n      ? parseSourceMode(input.host, \"local\")\n      : \"remote\";\n    const uiSource: SourceMode = localPackageNames.has(\"ui\")\n      ? parseSourceMode(input.ui, \"local\")\n      : \"remote\";\n    const apiSource: SourceMode = localPackageNames.has(\"api\")\n      ? parseSourceMode(input.api, \"local\")\n      : \"remote\";\n    const authSource: SourceMode = localPackageNames.has(\"auth\")\n      ? parseSourceMode(input.auth, \"local\")\n      : \"remote\";\n    const ssr = input.ssr ?? false;\n    const proxy = input.proxy ?? false;\n\n    if (input.logLevel) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_LOG_LEVEL\", input.logLevel!);\n      });\n    }\n\n    if (ssr) {\n      yield* Effect.sync(() => {\n        setProcessEnv(\"BOS_SSR\", \"1\");\n      });\n    }\n\n    const sharedSync = yield* step(timings, \"shared deps\", () =>\n      syncResolvedSharedDeps({\n        configDir: session.root,\n        hostMode: hostSource,\n        bosConfig: session.config ?? undefined,\n        extendsChain: [],\n      }),\n    );\n    let configMayHaveChanged = false;\n    if (sharedSync.catalogChanged) {\n      yield* step(timings, \"install\", () =>\n        run(\"pnpm\", [\"install\"], { cwd: findWorkspaceRoot(session.root)?.dir ?? session.root }),\n      );\n      configMayHaveChanged = true;\n    }\n\n    yield* step(timings, \"build\", async () => {\n      const report = await ensureFreshDeps(session.root, localDirs);\n      if (report.rebuilt.some((member) => member.name === \"everything-dev\")) {\n        // Only the bos process itself runs the everything-dev dist (plugin\n        // children spawn after this step and load the fresh build). A source\n        // run (node --import tsx src/cli.ts) never imported dist, so nothing\n        // is stale for it — warn only where the previously imported build\n        // matters.\n        const runningFromDist = import.meta.url.includes(\"/dist/\");\n        if (runningFromDist) {\n          console.log(\n            \"[dev] everything-dev was rebuilt — this session still runs the previous \" +\n              \"orchestrator build. Restart `bos dev` once to pick it up.\",\n          );\n        }\n      }\n    });\n\n    let devExtendsChain: string[] | undefined;\n    if (configMayHaveChanged || input.remotePlugins !== undefined) {\n      yield* step(timings, \"resolve config\", async () => {\n        const opened = await openResolution({\n          cwd: session.root,\n          remotePlugins: input.remotePlugins,\n        });\n        if (opened) {\n          session = opened;\n          devExtendsChain = [...opened.chain];\n        }\n      });\n    }\n\n    if (!session.config) {\n      return yield* new DevConfigMissing({});\n    }\n    const bosConfig: BosConfig = session.config;\n\n    if (proxy && !resolveProxyUrl(bosConfig)) {\n      return yield* new DevProxyMissing({});\n    }\n\n    const developmentRuntime = yield* Effect.tryPromise({\n      try: async () => {\n        return session.buildRuntime({\n          uiSource,\n          apiSource,\n          authSource,\n          hostSource,\n          env: \"development\",\n          plugins: session.runtime?.plugins,\n        });\n      },\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n    for (const message of session.warnings) {\n      yield* Effect.logWarning(message);\n    }\n\n    const plan: InfraPlan = yield* timedPhase(\n      timings,\n      \"ports\",\n      planInfra({\n        configDir: session.root,\n        bosConfig: developmentRuntime,\n        cli: {\n          port: input.port,\n          apiPort: input.apiPort,\n          authPort: input.authPort,\n          uiPort: input.uiPort,\n          pluginPortStart: input.pluginPortStart,\n          ssr,\n          proxy,\n          hostSource,\n          uiSource,\n          apiSource,\n          authSource,\n          interactive: input.interactive,\n        },\n      }),\n    );\n\n    yield* Effect.tryPromise({\n      try: () => materializeViaLayer(session.root, plan.runtimeConfig),\n      catch: (cause) => new DevStepError({ phase: \"materialize infra\", cause }),\n    });\n    yield* ensureEnvStep(projectEnv, session.root);\n    yield* loadEnvStep(projectEnv, session.root);\n\n    yield* projectEnv\n      .sync(session.root, plan.envGenerated, shell)\n      .pipe(\n        Effect.catchTag(\"EnvSyncError\", (error) =>\n          Effect.logWarning(\n            `[env] failed to refresh .env from resolved ports: ${String(error.cause)}`,\n          ),\n        ),\n      );\n\n    const mergedEnv = yield* Effect.sync(() =>\n      mergeGeneratedOverFileEnv(\n        plan.envGenerated,\n        processEnvRecord() as Record<string, string>,\n        shell,\n      ),\n    );\n    yield* Effect.sync(() => {\n      for (const [key, value] of Object.entries(mergedEnv)) {\n        if (key === \"BASE_URL\" || key === \"CORS_ORIGIN\") setProcessEnv(key, value);\n      }\n    });\n    let preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n    if (\n      preflightFailures.length > 0 &&\n      shouldAutoStartDocker(preflightFailures, {\n        ...detectAutoStartContext(session.root),\n        dockerAvailable: yield* Effect.promise(isDockerAvailable),\n      })\n    ) {\n      const compose = yield* step(timings, \"docker compose up\", () =>\n        runDockerComposeUp(session.root),\n      );\n      if (compose.ok) {\n        preflightFailures = yield* preflightLocalInfra(plan.envGenerated, mergedEnv);\n      } else {\n        preflightFailures = [\n          ...preflightFailures,\n          {\n            secret: \"docker-compose\",\n            host: \"localhost\",\n            port: 0,\n            error: `docker compose up -d --wait failed${compose.tail ? `:\\n${compose.tail}` : \"\"}`,\n            tcpReachable: false,\n          },\n        ];\n      }\n    }\n    if (preflightFailures.length > 0) {\n      return yield* new DevPreflightFailed({ messages: preflightFailures.map((f) => f.error) });\n    }\n\n    const services = buildServiceDescriptorMapFromPlan(plan, { ssr, proxy });\n\n    const packages = [...plan.serviceDescriptors.keys()];\n    if (isDebug(getProcessEnv(\"DEBUG\"))) {\n      yield* Effect.logError(`[DEBUG dev] services keys: ${packages.join(\", \")}`);\n    }\n    const apiSvc = services.get(\"api\");\n    if (apiSvc?.proxy) {\n      const proxyUrl = resolveProxyUrl(bosConfig);\n      if (proxyUrl) plan.orchestrator.env.API_PROXY = proxyUrl;\n    }\n\n    yield* step(timings, \"generate artifacts\", () =>\n      generateCodeArtifacts(session.root, bosConfig, {\n        env: \"development\",\n        extendsChain: devExtendsChain,\n        runtimeConfig: plan.runtimeConfig,\n      }),\n    );\n\n    return {\n      session: {\n        orchestrator: plan.orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      description: buildDescription(services) || plan.description,\n      processes: packages,\n    };\n  });\n\nexport const startBootstrap = (deps: BootstrapDeps, input: StartOptions) =>\n  Effect.gen(function* () {\n    const shell = yield* captureShellEnv;\n    const projectEnv = yield* ProjectEnv;\n\n    const sessionRoot = deps.session?.root ?? process.cwd();\n\n    yield* loadEnvStep(projectEnv, sessionRoot);\n\n    yield* emitProgress({ phase: \"config\", status: \"running\" });\n\n    const bosEnv = input.env ?? (getProcessEnv(\"BOS_ENV\") === \"staging\" ? \"staging\" : \"production\");\n    const explicitConfig = resolveStartConfigSource(input, {\n      BOS_ACCOUNT: getProcessEnv(\"BOS_ACCOUNT\"),\n      BOS_GATEWAY: getProcessEnv(\"BOS_GATEWAY\"),\n    });\n\n    let config: BosConfig | null = null;\n    let remoteConfig: BosConfig | null = null;\n\n    if (explicitConfig.configPath) {\n      config = deps.session?.config ?? null;\n    } else if (explicitConfig.registry) {\n      const { account, domain } = explicitConfig.registry;\n      const expectedUrl = buildRegistryConfigUrl(account, domain, input.registry);\n      remoteConfig = yield* Effect.tryPromise({\n        try: () => resolvePublishedConfig(account, domain, input.registry),\n        catch: (error) =>\n          new StartFetchFailed({\n            message: `Failed to fetch config for bos://${account}/${domain}: ${\n              error instanceof Error ? error.message : \"Unknown error\"\n            }\\nExpected URL: ${expectedUrl}`,\n          }),\n      });\n      if (remoteConfig) {\n        config = remoteConfig;\n      } else {\n        return yield* new StartRemoteConfigMissing({\n          message: `No config found at bos://${account}/${domain}. Verify the account and gateway are correct and the config has been published.\\nExpected URL: ${expectedUrl}`,\n        });\n      }\n    } else {\n      config = deps.session?.config ?? null;\n    }\n\n    if (!config) {\n      return yield* new StartConfigMissing({});\n    }\n\n    if (!explicitConfig.configPath) {\n      if (explicitConfig.registry?.account) {\n        config = { ...config, account: explicitConfig.registry.account };\n      }\n      if (explicitConfig.registry?.domain) {\n        config = { ...config, domain: explicitConfig.registry.domain };\n      }\n    }\n    const baseConfig: BosConfig = config;\n\n    const port = input.port ?? getHostDevelopmentPort(baseConfig.app.host.development);\n    const isStaging = bosEnv === \"staging\";\n    const runtimePlugins = yield* Effect.tryPromise({\n      try: () => buildRuntimePluginsForConfig(baseConfig, sessionRoot, \"production\"),\n      catch: (cause) => new DevStepError({ phase: \"resolve runtime plugins\", cause }),\n    });\n    const runtimeConfig = yield* Effect.tryPromise({\n      try: () =>\n        buildRuntimeConfig(baseConfig, sessionRoot, \"production\", {\n          uiSource: \"remote\",\n          apiSource: \"remote\",\n          authSource: \"remote\",\n          hostSource: \"remote\",\n          plugins: runtimePlugins,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"build runtime config\", cause }),\n    });\n\n    if (isStaging && baseConfig.staging?.domain) {\n      runtimeConfig.domain = baseConfig.staging.domain;\n    }\n\n    if (isStaging) {\n      runtimeConfig.env = \"staging\";\n    }\n\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"running\" });\n    yield* Effect.tryPromise({\n      try: () =>\n        generateCodeArtifacts(sessionRoot, baseConfig, {\n          env: \"production\",\n          runtimeConfig,\n        }),\n      catch: (cause) => new DevStepError({ phase: \"generate artifacts\", cause }),\n    });\n    yield* emitProgress({ phase: \"generate artifacts\", status: \"done\" });\n\n    const productionEnv: Record<string, string> = {};\n    const warnings: string[] = [];\n\n    const localhostOrigin = /^https?:\\/\\/(localhost|127\\.0\\.0\\.1)(:\\d+)?$/i;\n    const corsOrigin = getProcessEnv(\"CORS_ORIGIN\");\n    const isLocalhostProductionOrigin =\n      corsOrigin !== undefined && localhostOrigin.test(corsOrigin);\n    if (isLocalhostProductionOrigin && isRegistryStart(explicitConfig)) {\n      warnings.push(\n        `CORS_ORIGIN is a localhost origin (${corsOrigin}) in a registry production start — overriding with the configured domain`,\n      );\n      deleteProcessEnv(\"CORS_ORIGIN\");\n      deleteProcessEnv(\"BASE_URL\");\n    }\n\n    if (!getProcessEnv(\"CORS_ORIGIN\") && baseConfig.domain) {\n      const effectiveDomain = isStaging\n        ? (baseConfig.staging?.domain ?? baseConfig.domain)\n        : baseConfig.domain;\n      const defaultOrigin = `https://${effectiveDomain}`;\n      productionEnv.CORS_ORIGIN = defaultOrigin;\n      productionEnv.BASE_URL = defaultOrigin;\n      warnings.push(`CORS_ORIGIN defaulting to ${defaultOrigin}`);\n    }\n\n    const requiredSecrets = new Set<string>();\n    const missingSecrets: string[] = [];\n\n    if (runtimeConfig.host.secrets) {\n      for (const s of runtimeConfig.host.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.auth?.secrets) {\n      for (const s of runtimeConfig.auth.secrets) requiredSecrets.add(s);\n    }\n    if (runtimeConfig.api?.secrets) {\n      for (const s of runtimeConfig.api.secrets) requiredSecrets.add(s);\n    }\n    for (const plugin of Object.values(runtimeConfig.plugins ?? {})) {\n      if (plugin.secrets) {\n        for (const s of plugin.secrets) {\n          if (s.endsWith(\"_DATABASE_URL\")) continue;\n          requiredSecrets.add(s);\n        }\n      }\n    }\n\n    for (const secret of requiredSecrets) {\n      const value = getProcessEnv(secret);\n      if (!value || value.length === 0) {\n        missingSecrets.push(secret);\n      }\n    }\n\n    if (missingSecrets.length > 0) {\n      warnings.push(`Missing ${missingSecrets.length} secret(s): ${missingSecrets.join(\", \")}`);\n    }\n\n    for (const [secret, value] of Object.entries(processEnvRecord())) {\n      if (!value || !secret.endsWith(\"_DATABASE_URL\")) continue;\n      if (isRailwayPublicProxyUrl(value)) {\n        const host = new URL(value).hostname;\n        warnings.push(\n          `${secret} points at Railway's public proxy (${host}) — its TLS certificate is self-signed, ` +\n            `so connections use unverified TLS. Prefer the private *.railway.internal URL when the ` +\n            `database runs in the same Railway project.`,\n        );\n      }\n    }\n\n    const stagingEnvVars: Record<string, string> = isStaging\n      ? { BOS_GATEWAY: baseConfig.staging?.domain ?? baseConfig.domain ?? \"\" }\n      : {};\n\n    const plan: InfraPlan = yield* planInfra({\n      configDir: sessionRoot,\n      bosConfig: runtimeConfig,\n      cli: {\n        port: input.port,\n        ssr: false,\n        proxy: false,\n        hostSource: \"remote\",\n        uiSource: \"remote\",\n        apiSource: \"remote\",\n        authSource: \"remote\",\n        interactive: input.interactive,\n      },\n    });\n\n    const services = buildServiceDescriptorMap(plan.runtimeConfig);\n\n    const configSource = explicitConfig.configPath\n      ? explicitConfig.configPath\n      : remoteConfig\n        ? `bos://${explicitConfig.registry?.account}/${explicitConfig.registry?.domain}`\n        : (findConfigPath() ?? \"bos.config.json\");\n\n    const configSourceHttp =\n      remoteConfig && explicitConfig.registry\n        ? buildRegistryConfigUrl(\n            explicitConfig.registry.account,\n            explicitConfig.registry.domain,\n            input.registry,\n          )\n        : undefined;\n\n    const summary: StartSummary = {\n      configSource,\n      configSourceHttp,\n      account: baseConfig.account,\n      domain: baseConfig.domain ?? undefined,\n      modules: {\n        host: plan.runtimeConfig.host.remoteUrl ?? plan.runtimeConfig.host.url ?? \"local\",\n        ui: plan.runtimeConfig.ui.url ?? \"local\",\n        api: plan.runtimeConfig.api.url ?? \"local\",\n        auth: plan.runtimeConfig.auth?.url ?? undefined,\n      },\n      warnings,\n    };\n\n    const orchestrator: AppOrchestrator = {\n      packages: [\"host\"],\n      env: {\n        NODE_ENV: \"production\",\n        ...productionEnv,\n        ...stagingEnvVars,\n        ...plan.launch.env,\n      },\n      description: `${isStaging ? \"Staging\" : \"Production\"} Mode (${baseConfig.account})`,\n      port: plan.resolvedPorts.host ?? port,\n      interactive: input.interactive,\n      // Log persistence stays off for start stacks: the SSR host emits ~80\n      // log events per page render (i18n uncompiled-catalog warnings), and\n      // the file sink writes every event twice through a serialized\n      // appendFile chain regardless of level or dedup — on a loaded machine\n      // that chain starves the event loop and degrades SSR/hydration\n      // mid-suite. Boot failures are diagnosed from stdout (the renderer\n      // prints error-level lines; the smoke captures 400 lines of it).\n    };\n\n    yield* emitProgress({ phase: \"config\", status: \"done\" });\n\n    return {\n      session: {\n        orchestrator,\n        services,\n        runtimeConfig: plan.runtimeConfig,\n        envGenerated: plan.envGenerated,\n        shellEnv: shell,\n      } satisfies DevSessionData,\n      summary,\n      url: plan.launch.hostUrl ?? `http://localhost:${plan.resolvedPorts.host ?? port}`,\n    };\n  });\n\nexport const bootstrapLayers = Layer.mergeAll(ProjectEnvLive, PortAllocatorLive);\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA6DA,IAAa,eAAb,cAAkC,KAAK,YAAY,cAAc,CAAC,CAG/D,CAAC;AAEJ,IAAa,mBAAb,cAAsC,KAAK,YAAY,kBAAkB,CAAC,CAAwB,CAAC;AAEnG,IAAa,kBAAb,cAAqC,KAAK,YAAY,iBAAiB,CAAC,CAAwB,CAAC;AAEjG,IAAa,qBAAb,cAAwC,KAAK,YAAY,oBAAoB,CAAC,CAE3E,CAAC;AAEJ,IAAa,mBAAb,cAAsC,KAAK,YAAY,kBAAkB,CAAC,CAAsB,CAAC;AAEjG,IAAa,2BAAb,cAA8C,KAAK,YAAY,0BAA0B,CAAC,CAEvF,CAAC;AAEJ,IAAa,qBAAb,cAAwC,KAAK,YAAY,oBAAoB,CAAC,CAE5E,CAAC;AAEH,SAAS,gBAAgB,OAA2B,cAAsC;CACxF,IAAI,UAAU,WAAW,UAAU,UAAU,OAAO;CACpD,OAAO;AACT;AAEA,eAAsB,uBACpB,SACA,SACA,UAC2B;CAC3B,IAAI;EACF,MAAM,EAAE,QAAQ,WAAW,MAAM,iBAAiB,SAAS,QAAQ,GAAG,WAAW;GAC/E,KAAK;GACL;GACA,OAAO,YAAY,CAAC;EACtB,CAAC;EACD,OAAO,+BACL,gBAAgB,MAAM,MAAM,GAC5B,QAAQ,IAAI,GACZ,YACF;CACF,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,MAAM,QAAQ,WAAW,iBAAiB,GACtE,OAAO;EAET,MAAM;CACR;AACF;AAEA,SAAS,gBAAgB,KAAsB;CAC7C,IAAI;EACF,MAAM,SAAS,IAAI,IAAI,GAAG;EAC1B,OAAO,OAAO,aAAa,WAAW,OAAO,aAAa;CAC5D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,gBAAgB,WAA4C;CAC1E,IAAI,CAAC,WAAW,OAAO;CACvB,MAAM,YAAY,UAAU,IAAI;CAChC,IAAI,CAAC,WAAW,OAAO;CACvB,IAAI,UAAU,SAAS,gBAAgB,UAAU,KAAK,GAAG,OAAO,UAAU;CAC1E,IAAI,UAAU,cAAc,gBAAgB,UAAU,UAAU,GAAG,OAAO,UAAU;CACpF,OAAO;AACT;AAEA,MAAM,QAAW,SAAwB,MAAc,OACrD,WACE,SACA,MACA,OAAO,WAAW;CAChB,KAAK;CACL,QAAQ,UAAU,IAAI,aAAa;EAAE,OAAO;EAAM;CAAM,CAAC;AAC3D,CAAC,CACH;AAEF,MAAM,iBAAiB,YAA+B,cACpD,WACG,WAAW,SAAS,CAAC,CACrB,KACC,OAAO,UAAU,UAA0B,IAAI,aAAa;CAAE,OAAO;CAAc;AAAM,CAAC,CAAC,CAC7F;AAEJ,MAAM,eAAe,YAA+B,cAClD,WACG,KAAK,SAAS,CAAC,CACf,KAAK,OAAO,UAAU,UAAwB,IAAI,aAAa;CAAE,OAAO;CAAY;AAAM,CAAC,CAAC,CAAC;AAElG,MAAa,gBAAgB,MAAqB,OAAmB,YACnE,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,aAAa,OAAO;CAE1B,IAAI,CAAC,KAAK,SACR,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,IAAI,UAA6B,KAAK;CAEtC,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,MAAM,gBAAgB,oBACpB,QAAQ,UAAU,QAClB,QAAQ,WAAW,QACnB,QAAQ,IACV;CACA,MAAM,oBAAoB,IAAI,IAAI,cAAc,KAAK,UAAU,MAAM,IAAI,CAAC;CAC1E,MAAM,YAAY,cAAc,KAAK,UAAU,MAAM,GAAG;CAExD,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,WAAuB,kBAAkB,IAAI,IAAI,IACnD,gBAAgB,MAAM,IAAI,OAAO,IACjC;CACJ,MAAM,YAAwB,kBAAkB,IAAI,KAAK,IACrD,gBAAgB,MAAM,KAAK,OAAO,IAClC;CACJ,MAAM,aAAyB,kBAAkB,IAAI,MAAM,IACvD,gBAAgB,MAAM,MAAM,OAAO,IACnC;CACJ,MAAM,MAAM,MAAM,OAAO;CACzB,MAAM,QAAQ,MAAM,SAAS;CAE7B,IAAI,MAAM,UACR,OAAO,OAAO,WAAW;EACvB,cAAc,iBAAiB,MAAM,QAAS;CAChD,CAAC;CAGH,IAAI,KACF,OAAO,OAAO,WAAW;EACvB,cAAc,WAAW,GAAG;CAC9B,CAAC;CAGH,MAAM,aAAa,OAAO,KAAK,SAAS,qBACtC,uBAAuB;EACrB,WAAW,QAAQ;EACnB,UAAU;EACV,WAAW,QAAQ,UAAU;EAC7B,cAAc,CAAC;CACjB,CAAC,CACH;CACA,IAAI,uBAAuB;CAC3B,IAAI,WAAW,gBAAgB;EAC7B,OAAO,KAAK,SAAS,iBACnB,IAAI,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAK,kBAAkB,QAAQ,IAAI,CAAC,EAAE,OAAO,QAAQ,KAAK,CAAC,CACxF;EACA,uBAAuB;CACzB;CAEA,OAAO,KAAK,SAAS,SAAS,YAAY;EAExC,KAAI,MADiB,gBAAgB,QAAQ,MAAM,SAAS,EAClD,CAAC,QAAQ,MAAM,WAAW,OAAO,SAAS,gBAAgB,GAOlE;OADwB,YAAY,IAAI,SAAS,QAC/B,GAChB,QAAQ,IACN,mIAEF;EACF;CAEJ,CAAC;CAED,IAAI;CACJ,IAAI,wBAAwB,MAAM,kBAAkB,QAClD,OAAO,KAAK,SAAS,kBAAkB,YAAY;EACjD,MAAM,SAAS,MAAM,eAAe;GAClC,KAAK,QAAQ;GACb,eAAe,MAAM;EACvB,CAAC;EACD,IAAI,QAAQ;GACV,UAAU;GACV,kBAAkB,CAAC,GAAG,OAAO,KAAK;EACpC;CACF,CAAC;CAGH,IAAI,CAAC,QAAQ,QACX,OAAO,OAAO,IAAI,iBAAiB,CAAC,CAAC;CAEvC,MAAM,YAAuB,QAAQ;CAErC,IAAI,SAAS,CAAC,gBAAgB,SAAS,GACrC,OAAO,OAAO,IAAI,gBAAgB,CAAC,CAAC;CAGtC,MAAM,qBAAqB,OAAO,OAAO,WAAW;EAClD,KAAK,YAAY;GACf,OAAO,QAAQ,aAAa;IAC1B;IACA;IACA;IACA;IACA,KAAK;IACL,SAAS,QAAQ,SAAS;GAC5B,CAAC;EACH;EACA,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CACD,KAAK,MAAM,WAAW,QAAQ,UAC5B,OAAO,OAAO,WAAW,OAAO;CAGlC,MAAM,OAAkB,OAAO,WAC7B,SACA,SACA,UAAU;EACR,WAAW,QAAQ;EACnB,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,UAAU,MAAM;GAChB,QAAQ,MAAM;GACd,iBAAiB,MAAM;GACvB;GACA;GACA;GACA;GACA;GACA;GACA,aAAa,MAAM;EACrB;CACF,CAAC,CACH;CAEA,OAAO,OAAO,WAAW;EACvB,WAAW,oBAAoB,QAAQ,MAAM,KAAK,aAAa;EAC/D,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAqB;EAAM,CAAC;CAC1E,CAAC;CACD,OAAO,cAAc,YAAY,QAAQ,IAAI;CAC7C,OAAO,YAAY,YAAY,QAAQ,IAAI;CAE3C,OAAO,WACJ,KAAK,QAAQ,MAAM,KAAK,cAAc,KAAK,CAAC,CAC5C,KACC,OAAO,SAAS,iBAAiB,UAC/B,OAAO,WACL,qDAAqD,OAAO,MAAM,KAAK,GACzE,CACF,CACF;CAEF,MAAM,YAAY,OAAO,OAAO,WAC9B,0BACE,KAAK,cACL,iBAAiB,GACjB,KACF,CACF;CACA,OAAO,OAAO,WAAW;EACvB,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAS,GACjD,IAAI,QAAQ,cAAc,QAAQ,eAAe,cAAc,KAAK,KAAK;CAE7E,CAAC;CACD,IAAI,oBAAoB,OAAO,oBAAoB,KAAK,cAAc,SAAS;CAC/E,IACE,kBAAkB,SAAS,KAC3B,sBAAsB,mBAAmB;EACvC,GAAG,uBAAuB,QAAQ,IAAI;EACtC,iBAAiB,OAAO,OAAO,QAAQ,iBAAiB;CAC1D,CAAC,GACD;EACA,MAAM,UAAU,OAAO,KAAK,SAAS,2BACnC,mBAAmB,QAAQ,IAAI,CACjC;EACA,IAAI,QAAQ,IACV,oBAAoB,OAAO,oBAAoB,KAAK,cAAc,SAAS;OAE3E,oBAAoB,CAClB,GAAG,mBACH;GACE,QAAQ;GACR,MAAM;GACN,MAAM;GACN,OAAO,qCAAqC,QAAQ,OAAO,MAAM,QAAQ,SAAS;GAClF,cAAc;EAChB,CACF;CAEJ;CACA,IAAI,kBAAkB,SAAS,GAC7B,OAAO,OAAO,IAAI,mBAAmB,EAAE,UAAU,kBAAkB,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC;CAG1F,MAAM,WAAW,kCAAkC,MAAM;EAAE;EAAK;CAAM,CAAC;CAEvE,MAAM,WAAW,CAAC,GAAG,KAAK,mBAAmB,KAAK,CAAC;CACnD,IAAI,QAAQ,cAAc,OAAO,CAAC,GAChC,OAAO,OAAO,SAAS,8BAA8B,SAAS,KAAK,IAAI,GAAG;CAG5E,IADe,SAAS,IAAI,KACnB,CAAC,EAAE,OAAO;EACjB,MAAM,WAAW,gBAAgB,SAAS;EAC1C,IAAI,UAAU,KAAK,aAAa,IAAI,YAAY;CAClD;CAEA,OAAO,KAAK,SAAS,4BACnB,sBAAsB,QAAQ,MAAM,WAAW;EAC7C,KAAK;EACL,cAAc;EACd,eAAe,KAAK;CACtB,CAAC,CACH;CAEA,OAAO;EACL,SAAS;GACP,cAAc,KAAK;GACnB;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA,aAAa,iBAAiB,QAAQ,KAAK,KAAK;EAChD,WAAW;CACb;AACF,CAAC;AAEH,MAAa,kBAAkB,MAAqB,UAClD,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CACrB,MAAM,aAAa,OAAO;CAE1B,MAAM,cAAc,KAAK,SAAS,QAAQ,QAAQ,IAAI;CAEtD,OAAO,YAAY,YAAY,WAAW;CAE1C,OAAO,aAAa;EAAE,OAAO;EAAU,QAAQ;CAAU,CAAC;CAE1D,MAAM,SAAS,MAAM,QAAQ,cAAc,SAAS,MAAM,YAAY,YAAY;CAClF,MAAM,iBAAiB,yBAAyB,OAAO;EACrD,aAAa,cAAc,aAAa;EACxC,aAAa,cAAc,aAAa;CAC1C,CAAC;CAED,IAAI,SAA2B;CAC/B,IAAI,eAAiC;CAErC,IAAI,eAAe,YACjB,SAAS,KAAK,SAAS,UAAU;MAC5B,IAAI,eAAe,UAAU;EAClC,MAAM,EAAE,SAAS,WAAW,eAAe;EAC3C,MAAM,cAAc,uBAAuB,SAAS,QAAQ,MAAM,QAAQ;EAC1E,eAAe,OAAO,OAAO,WAAW;GACtC,WAAW,uBAAuB,SAAS,QAAQ,MAAM,QAAQ;GACjE,QAAQ,UACN,IAAI,iBAAiB,EACnB,SAAS,oCAAoC,QAAQ,GAAG,OAAO,IAC7D,iBAAiB,QAAQ,MAAM,UAAU,gBAC1C,kBAAkB,cACrB,CAAC;EACL,CAAC;EACD,IAAI,cACF,SAAS;OAET,OAAO,OAAO,IAAI,yBAAyB,EACzC,SAAS,4BAA4B,QAAQ,GAAG,OAAO,iGAAiG,cAC1J,CAAC;CAEL,OACE,SAAS,KAAK,SAAS,UAAU;CAGnC,IAAI,CAAC,QACH,OAAO,OAAO,IAAI,mBAAmB,CAAC,CAAC;CAGzC,IAAI,CAAC,eAAe,YAAY;EAC9B,IAAI,eAAe,UAAU,SAC3B,SAAS;GAAE,GAAG;GAAQ,SAAS,eAAe,SAAS;EAAQ;EAEjE,IAAI,eAAe,UAAU,QAC3B,SAAS;GAAE,GAAG;GAAQ,QAAQ,eAAe,SAAS;EAAO;CAEjE;CACA,MAAM,aAAwB;CAE9B,MAAM,OAAO,MAAM,QAAQ,uBAAuB,WAAW,IAAI,KAAK,WAAW;CACjF,MAAM,YAAY,WAAW;CAC7B,MAAM,iBAAiB,OAAO,OAAO,WAAW;EAC9C,WAAW,6BAA6B,YAAY,aAAa,YAAY;EAC7E,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAA2B;EAAM,CAAC;CAChF,CAAC;CACD,MAAM,gBAAgB,OAAO,OAAO,WAAW;EAC7C,WACE,mBAAmB,YAAY,aAAa,cAAc;GACxD,UAAU;GACV,WAAW;GACX,YAAY;GACZ,YAAY;GACZ,SAAS;EACX,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAwB;EAAM,CAAC;CAC7E,CAAC;CAED,IAAI,aAAa,WAAW,SAAS,QACnC,cAAc,SAAS,WAAW,QAAQ;CAG5C,IAAI,WACF,cAAc,MAAM;CAGtB,OAAO,aAAa;EAAE,OAAO;EAAsB,QAAQ;CAAU,CAAC;CACtE,OAAO,OAAO,WAAW;EACvB,WACE,sBAAsB,aAAa,YAAY;GAC7C,KAAK;GACL;EACF,CAAC;EACH,QAAQ,UAAU,IAAI,aAAa;GAAE,OAAO;GAAsB;EAAM,CAAC;CAC3E,CAAC;CACD,OAAO,aAAa;EAAE,OAAO;EAAsB,QAAQ;CAAO,CAAC;CAEnE,MAAM,gBAAwC,CAAC;CAC/C,MAAM,WAAqB,CAAC;CAE5B,MAAM,kBAAkB;CACxB,MAAM,aAAa,cAAc,aAAa;CAG9C,IADE,eAAe,UAAa,gBAAgB,KAAK,UAAU,KAC1B,gBAAgB,cAAc,GAAG;EAClE,SAAS,KACP,sCAAsC,WAAW,yEACnD;EACA,iBAAiB,aAAa;EAC9B,iBAAiB,UAAU;CAC7B;CAEA,IAAI,CAAC,cAAc,aAAa,KAAK,WAAW,QAAQ;EAItD,MAAM,gBAAgB,WAHE,YACnB,WAAW,SAAS,UAAU,WAAW,SAC1C,WAAW;EAEf,cAAc,cAAc;EAC5B,cAAc,WAAW;EACzB,SAAS,KAAK,6BAA6B,eAAe;CAC5D;CAEA,MAAM,kCAAkB,IAAI,IAAY;CACxC,MAAM,iBAA2B,CAAC;CAElC,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,MAAM,SACtB,KAAK,MAAM,KAAK,cAAc,KAAK,SAAS,gBAAgB,IAAI,CAAC;CAEnE,IAAI,cAAc,KAAK,SACrB,KAAK,MAAM,KAAK,cAAc,IAAI,SAAS,gBAAgB,IAAI,CAAC;CAElE,KAAK,MAAM,UAAU,OAAO,OAAO,cAAc,WAAW,CAAC,CAAC,GAC5D,IAAI,OAAO,SACT,KAAK,MAAM,KAAK,OAAO,SAAS;EAC9B,IAAI,EAAE,SAAS,eAAe,GAAG;EACjC,gBAAgB,IAAI,CAAC;CACvB;CAIJ,KAAK,MAAM,UAAU,iBAAiB;EACpC,MAAM,QAAQ,cAAc,MAAM;EAClC,IAAI,CAAC,SAAS,MAAM,WAAW,GAC7B,eAAe,KAAK,MAAM;CAE9B;CAEA,IAAI,eAAe,SAAS,GAC1B,SAAS,KAAK,WAAW,eAAe,OAAO,cAAc,eAAe,KAAK,IAAI,GAAG;CAG1F,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,iBAAiB,CAAC,GAAG;EAChE,IAAI,CAAC,SAAS,CAAC,OAAO,SAAS,eAAe,GAAG;EACjD,IAAI,wBAAwB,KAAK,GAAG;GAClC,MAAM,OAAO,IAAI,IAAI,KAAK,CAAC,CAAC;GAC5B,SAAS,KACP,GAAG,OAAO,qCAAqC,KAAK,yKAGtD;EACF;CACF;CAEA,MAAM,iBAAyC,YAC3C,EAAE,aAAa,WAAW,SAAS,UAAU,WAAW,UAAU,GAAG,IACrE,CAAC;CAEL,MAAM,OAAkB,OAAO,UAAU;EACvC,WAAW;EACX,WAAW;EACX,KAAK;GACH,MAAM,MAAM;GACZ,KAAK;GACL,OAAO;GACP,YAAY;GACZ,UAAU;GACV,WAAW;GACX,YAAY;GACZ,aAAa,MAAM;EACrB;CACF,CAAC;CAED,MAAM,WAAW,0BAA0B,KAAK,aAAa;CAiB7D,MAAM,UAAwB;EAC5B,cAhBmB,eAAe,aAChC,eAAe,aACf,eACE,SAAS,eAAe,UAAU,QAAQ,GAAG,eAAe,UAAU,WACrE,eAAe,KAAK;EAazB,kBAVA,gBAAgB,eAAe,WAC3B,uBACE,eAAe,SAAS,SACxB,eAAe,SAAS,QACxB,MAAM,QACR,IACA;EAKJ,SAAS,WAAW;EACpB,QAAQ,WAAW,UAAU;EAC7B,SAAS;GACP,MAAM,KAAK,cAAc,KAAK,aAAa,KAAK,cAAc,KAAK,OAAO;GAC1E,IAAI,KAAK,cAAc,GAAG,OAAO;GACjC,KAAK,KAAK,cAAc,IAAI,OAAO;GACnC,MAAM,KAAK,cAAc,MAAM,OAAO;EACxC;EACA;CACF;CAEA,MAAM,eAAgC;EACpC,UAAU,CAAC,MAAM;EACjB,KAAK;GACH,UAAU;GACV,GAAG;GACH,GAAG;GACH,GAAG,KAAK,OAAO;EACjB;EACA,aAAa,GAAG,YAAY,YAAY,aAAa,SAAS,WAAW,QAAQ;EACjF,MAAM,KAAK,cAAc,QAAQ;EACjC,aAAa,MAAM;CAQrB;CAEA,OAAO,aAAa;EAAE,OAAO;EAAU,QAAQ;CAAO,CAAC;CAEvD,OAAO;EACL,SAAS;GACP;GACA;GACA,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,UAAU;EACZ;EACA;EACA,KAAK,KAAK,OAAO,WAAW,oBAAoB,KAAK,cAAc,QAAQ;CAC7E;AACF,CAAC;AAEH,MAAa,kBAAkB,MAAM,SAAS,gBAAgB,iBAAiB"}

package/dist/image-deploy.cjs

@@ -196,30 +196,54 @@ async function buildAndPushImage(input) {
 	};
 }
 /**
-* Railway leg (ADR 0021): pull-only deploy of the pushed image digest — a
-* thin `FROM image@digest` Dockerfile pins the digest so Railway never
-* rebuilds; `RAILWAY_DOCKERFILE_PATH` points at the generated file.
+* Railway leg (ADR 0021, amended): image-backed deploy. The service's source
+* is a Docker image ref (connected once in the dashboard — `:rc` during the
+* prerelease train), and `redeploy --from-source` pulls and deploys whatever
+* that ref points at. The image leg pushes `:rc` (and the `sha-<short>` /
+* version tags) immediately before this step, so the pulled bytes are exactly
+* what this train validated. Railway skips the build entirely for
+* Docker-image sources — nothing is uploaded, nothing is built on Railway,
+* and the digest-pin Dockerfile mechanism this replaces is gone (the CLI v5
+* dropped RAILWAY_DOCKERFILE_PATH, its snapshot respects .gitignore so
+* generated Dockerfiles never shipped, and its Metal builder rejected the
+* repo Dockerfile's cache-mount ids).
 */
 async function deployImageToRailway(input) {
-	const deployDir = (0, node_path.join)(input.configDir, ".bos", "deploy");
-	(0, node_fs.mkdirSync)(deployDir, { recursive: true });
-	const dockerfilePath = (0, node_path.join)(deployDir, "Dockerfile");
-	(0, node_fs.writeFileSync)(dockerfilePath, `FROM ${input.image}@${input.digest}\n`);
-	console.log(`  Deploying to Railway service ${require_theme.colors.cyan(input.service)} (pull-only)...`);
+	console.log(`  Deploying to Railway service ${require_theme.colors.cyan(input.service)} (image-backed)...`);
+	let version;
+	try {
+		version = (await require_run.run("railway", ["--version"], {
+			cwd: input.configDir,
+			capture: true
+		}))?.stdout;
+	} catch {
+		version = void 0;
+	}
+	if (!version?.trim()) throw new Error("Railway CLI not found. Install it: npm i -g @railway/cli");
+	console.log(`  ${require_theme.colors.dim(`railway ${version.trim()}`)}`);
+	const collected = {
+		stdout: "",
+		stderr: ""
+	};
 	const result = await require_run.run("railway", [
-		"up",
+		"redeploy",
 		"--service",
 		input.service,
-		"--ci"
+		"--from-source",
+		"--yes"
 	], {
 		cwd: input.configDir,
 		capture: true,
-		env: { RAILWAY_DOCKERFILE_PATH: ".bos/deploy/Dockerfile" }
+		onChunk: (stream, chunk) => {
+			collected[stream] += chunk.toString("utf-8");
+			for (const line of chunk.toString("utf-8").split("\n")) if (line.trim()) console.log(`  ${require_theme.colors.dim(line.trim())}`);
+		}
 	});
-	if (result?.stdout) {
-		for (const line of result.stdout.split("\n")) if (line.trim()) console.log(`  ${require_theme.colors.dim(line.trim())}`);
+	if (!result || result.exitCode !== 0) {
+		const exitCode = result?.exitCode ?? "unknown";
+		const tail = (stream, text) => text.trim() ? `\nrailway ${stream} (tail):\n${text.trim().split("\n").slice(-20).join("\n")}` : "";
+		throw new Error(`railway redeploy failed with exit code ${exitCode}` + tail("stdout", collected.stdout) + tail("stderr", collected.stderr));
 	}
-	if (!result || result.exitCode !== 0) throw new Error(result?.stderr.trim() ? `railway up failed: ${result.stderr.trim().split("\n").slice(-3).join(" ")}` : `railway up failed with exit code ${result?.exitCode ?? "unknown"}`);
 	console.log(require_theme.colors.green(`  ${require_theme.icons.ok} Railway deploy complete`));
 }
 

package/dist/image-deploy.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"image-deploy.cjs","names":["run","readFileSync","join","colors","icons"],"sources":["../src/image-deploy.ts"],"sourcesContent":["import { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { run } from \"./utils/run\";\nimport { colors, icons } from \"./utils/theme\";\n\nexport interface ResolvedImageRef {\n  image: string;\n  source: \"ci\" | \"env\" | \"repository\";\n}\n\n/**\n * Image reference resolution precedence (ADR 0021): `ci.image` in\n * bos.config.json → `BOS_IMAGE` env → derived from `repository`.\n */\nexport function resolveImageRef(input: {\n  ciImage?: string;\n  repository?: string;\n  env?: Record<string, string | undefined>;\n}): ResolvedImageRef | undefined {\n  const envImage = input.env?.BOS_IMAGE;\n  if (input.ciImage) return { image: input.ciImage, source: \"ci\" };\n  if (envImage) return { image: envImage, source: \"env\" };\n\n  const repo = input.repository\n    ?.replace(/^https?:\\/\\/(www\\.)?github\\.com\\//i, \"\")\n    .replace(/\\.git$/i, \"\")\n    .replace(/\\/+$/, \"\")\n    .toLowerCase();\n  if (!repo?.includes(\"/\") || repo.split(\"/\").length !== 2) return undefined;\n  return { image: `ghcr.io/${repo}`, source: \"repository\" };\n}\n\nexport async function hasDocker(): Promise<boolean> {\n  try {\n    const result = await run(\"docker\", [\"info\", \"--format\", \"{{.ServerVersion}}\"], {\n      capture: true,\n    });\n    return result?.exitCode === 0;\n  } catch {\n    return false;\n  }\n}\n\nfunction parseDigest(pushOutput: string): string | undefined {\n  const match = pushOutput.match(/digest:\\s*(sha256:[a-f0-9]+)/i);\n  return match?.[1];\n}\n\nconst SEMVER_PATTERN = /^(\\d+)\\.(\\d+)\\.(\\d+)(?:-([0-9A-Za-z.-]+))?$/;\n\n/**\n * The runtime framework version baked into the image is the workspace source's\n * `everything-dev` package version — the image builds from `configDir`, so that\n * file is the truth. Missing (child repos without the workspace) → undefined.\n */\nfunction readFrameworkVersion(configDir: string): string | undefined {\n  try {\n    const raw = readFileSync(\n      join(configDir, \"packages\", \"everything-dev\", \"package.json\"),\n      \"utf-8\",\n    );\n    const pkg = JSON.parse(raw) as { version?: unknown };\n    return typeof pkg.version === \"string\" && SEMVER_PATTERN.test(pkg.version)\n      ? pkg.version\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport interface ImageTags {\n  /** Exact refs to build and push, in push order (latest excluded). */\n  tags: string[];\n  /** Push `:latest` after the pinned tags. */\n  pushLatest: boolean;\n  /** Human-readable reason when `latest` is held. */\n  latestHoldReason?: string;\n  /** Push `:rc` after the pinned tags — the floating prerelease-train ref. */\n  pushRc: boolean;\n}\n\n/**\n * Tag scheme (ADR 0021): `sha-<short>` always; the exact `v<version>` tag; a\n * floating major tag (`v2`) on stable releases only. `latest` is held during\n * prereleases (npm's `rc` dist-tag analog) so existing deployments pinned to\n * `:latest` keep serving the last stable image — and `:rc` is the floating\n * ref for the prerelease train (npm's `rc` dist-tag mirror): it moves on\n * every prerelease deploy and freezes at the last rc-train build once the\n * workspace releases a stable version.\n */\nexport function computeImageTags(input: { shortSha: string; version?: string }): ImageTags {\n  const tags = [`sha-${input.shortSha}`];\n  const match = input.version?.trim().match(SEMVER_PATTERN);\n  if (!match) {\n    return { tags, pushLatest: true, pushRc: false };\n  }\n  const [, major, minor, patch, prerelease] = match;\n  const exact = prerelease\n    ? `v${major}.${minor}.${patch}-${prerelease}`\n    : `v${major}.${minor}.${patch}`;\n  if (prerelease) {\n    return {\n      tags: [...tags, exact],\n      pushLatest: false,\n      latestHoldReason: `${exact} is a prerelease — :latest still serves the last stable image`,\n      pushRc: true,\n    };\n  }\n  return { tags: [...tags, exact, `v${major}`], pushLatest: true, pushRc: false };\n}\n\nexport interface ImageDeployResult {\n  image: string;\n  /** Primary pinned tag (the sha tag). */\n  tag: string;\n  /** All tags pushed, including the primary. */\n  tags: string[];\n  latestPushed: boolean;\n  /** Whether the floating `:rc` prerelease-train ref was pushed. */\n  rcPushed: boolean;\n  digest?: string;\n}\n\nexport type DeployImagePlan =\n  | { kind: \"prebuilt\"; image: string; digest: string }\n  | { kind: \"build\"; image: string }\n  | { kind: \"skip\"; reason: string };\n\nconst DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;\n\n/** A Railway pin is `FROM image@<digest>` — anything else cannot resolve. */\nexport function isValidImageDigest(digest: string): boolean {\n  return DIGEST_PATTERN.test(digest);\n}\n\n/**\n * Decide the image leg's source: a digest handed over from a pre-pushed image\n * (the CI image job) wins; otherwise the local docker build runs when the\n * toolchain and Dockerfile are present (ADR 0021, as amended).\n */\nexport function resolveDeployImagePlan(input: {\n  imageRef: ResolvedImageRef | undefined;\n  imageDigest?: string;\n  hasDocker: boolean;\n  hasDockerfile: boolean;\n}): DeployImagePlan {\n  if (!input.imageRef) {\n    return {\n      kind: \"skip\",\n      reason: \"set ci.image in bos.config.json (or BOS_IMAGE) to build and push the runtime image\",\n    };\n  }\n  if (input.imageDigest) {\n    return { kind: \"prebuilt\", image: input.imageRef.image, digest: input.imageDigest };\n  }\n  if (!input.hasDocker) {\n    return { kind: \"skip\", reason: \"docker is not available\" };\n  }\n  if (!input.hasDockerfile) {\n    return { kind: \"skip\", reason: \"no Dockerfile at the config root\" };\n  }\n  return { kind: \"build\", image: input.imageRef.image };\n}\n\n/**\n * Image leg (ADR 0021): build the runtime stage, tag `sha-<short>` + version\n * tags, push them, capture the digest, then push the floating refs — `:latest`\n * unless the version is a prerelease, and `:rc` when it is. Callers skip the\n * leg with a notice when no image is configured (child repos get\n * build+upload+publish only).\n */\nexport async function buildAndPushImage(input: {\n  image: string;\n  configDir: string;\n  verbose?: boolean;\n}): Promise<ImageDeployResult> {\n  const shaResult = await run(\"git\", [\"rev-parse\", \"--short=7\", \"HEAD\"], {\n    cwd: input.configDir,\n    capture: true,\n  });\n  const shortSha = shaResult?.stdout.trim();\n  if (!shaResult || shaResult.exitCode !== 0 || !shortSha) {\n    const detail = shaResult?.stderr.trim();\n    throw new Error(\n      `Failed to resolve the current git SHA in ${input.configDir} (exit code ${shaResult?.exitCode ?? \"unknown\"}${detail ? `: ${detail}` : \"\"})`,\n    );\n  }\n\n  const version = readFrameworkVersion(input.configDir);\n  const { tags, pushLatest, latestHoldReason, pushRc } = computeImageTags({\n    shortSha,\n    version,\n  });\n  const refs = tags.map((tag) => `${input.image}:${tag}`);\n  const latestRef = `${input.image}:latest`;\n  const rcRef = `${input.image}:rc`;\n  const buildRefs = pushLatest ? [...refs, latestRef] : [...refs];\n  if (pushRc) buildRefs.push(rcRef);\n\n  console.log(\n    `  Building runtime image ${colors.cyan(buildRefs.join(\", \"))}${pushLatest ? \"\" : colors.yellow(\" (latest held)\")}`,\n  );\n  await run(\n    \"docker\",\n    [\"build\", \"--target\", \"runtime\", ...buildRefs.flatMap((ref) => [\"-t\", ref]), \".\"],\n    { cwd: input.configDir },\n  );\n\n  console.log(`  Pushing ${colors.cyan(refs.join(\", \"))}...`);\n  let digest: string | undefined;\n  for (const ref of refs) {\n    const push = await run(\"docker\", [\"push\", ref], {\n      cwd: input.configDir,\n      capture: true,\n    });\n    if (!push || push.exitCode !== 0) {\n      throw new Error(`docker push ${ref} failed with exit code ${push?.exitCode ?? \"unknown\"}`);\n    }\n    digest ??= parseDigest(push.stdout);\n    if (input.verbose && push.stdout.trim()) {\n      console.log(colors.dim(push.stdout.trim()));\n    }\n  }\n\n  const pushFloating = async (ref: string): Promise<boolean> => {\n    const push = await run(\"docker\", [\"push\", ref], {\n      cwd: input.configDir,\n      capture: true,\n    });\n    if (!push || push.exitCode !== 0) {\n      throw new Error(`docker push ${ref} failed with exit code ${push?.exitCode ?? \"unknown\"}`);\n    }\n    digest ??= parseDigest(push.stdout);\n    if (input.verbose && push.stdout.trim()) {\n      console.log(colors.dim(push.stdout.trim()));\n    }\n    return true;\n  };\n\n  let latestPushed = false;\n  if (pushLatest) {\n    latestPushed = await pushFloating(latestRef);\n  } else {\n    console.log(colors.yellow(`  latest held: ${latestHoldReason}`));\n  }\n  const rcPushed = pushRc ? await pushFloating(rcRef) : false;\n\n  if (!digest) {\n    console.log(colors.yellow(\"  Could not capture the image digest from push output\"));\n  }\n\n  return { image: input.image, tag: tags[0]!, tags, latestPushed, rcPushed, digest };\n}\n\n/**\n * Railway leg (ADR 0021): pull-only deploy of the pushed image digest — a\n * thin `FROM image@digest` Dockerfile pins the digest so Railway never\n * rebuilds; `RAILWAY_DOCKERFILE_PATH` points at the generated file.\n */\nexport async function deployImageToRailway(input: {\n  image: string;\n  digest: string;\n  service: string;\n  configDir: string;\n}): Promise<void> {\n  const deployDir = join(input.configDir, \".bos\", \"deploy\");\n  mkdirSync(deployDir, { recursive: true });\n  const dockerfilePath = join(deployDir, \"Dockerfile\");\n  writeFileSync(dockerfilePath, `FROM ${input.image}@${input.digest}\\n`);\n\n  console.log(`  Deploying to Railway service ${colors.cyan(input.service)} (pull-only)...`);\n  const result = await run(\"railway\", [\"up\", \"--service\", input.service, \"--ci\"], {\n    cwd: input.configDir,\n    capture: true,\n    env: { RAILWAY_DOCKERFILE_PATH: \".bos/deploy/Dockerfile\" },\n  });\n  if (result?.stdout) {\n    for (const line of result.stdout.split(\"\\n\")) {\n      if (line.trim()) console.log(`  ${colors.dim(line.trim())}`);\n    }\n  }\n  if (!result || result.exitCode !== 0) {\n    throw new Error(\n      result?.stderr.trim()\n        ? `railway up failed: ${result.stderr.trim().split(\"\\n\").slice(-3).join(\" \")}`\n        : `railway up failed with exit code ${result?.exitCode ?? \"unknown\"}`,\n    );\n  }\n  console.log(colors.green(`  ${icons.ok} Railway deploy complete`));\n}\n"],"mappings":";;;;;;;;;;AAcA,SAAgB,gBAAgB,OAIC;CAC/B,MAAM,WAAW,MAAM,KAAK;CAC5B,IAAI,MAAM,SAAS,OAAO;EAAE,OAAO,MAAM;EAAS,QAAQ;CAAK;CAC/D,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,OAAO,MAAM,YACf,QAAQ,sCAAsC,EAAE,CAAC,CAClD,QAAQ,WAAW,EAAE,CAAC,CACtB,QAAQ,QAAQ,EAAE,CAAC,CACnB,YAAY;CACf,IAAI,CAAC,MAAM,SAAS,GAAG,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,WAAW,GAAG,OAAO;CACjE,OAAO;EAAE,OAAO,WAAW;EAAQ,QAAQ;CAAa;AAC1D;AAEA,eAAsB,YAA8B;CAClD,IAAI;EAIF,QAAO,MAHcA,gBAAI,UAAU;GAAC;GAAQ;GAAY;EAAoB,GAAG,EAC7E,SAAS,KACX,CAAC,EACY,EAAE,aAAa;CAC9B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,YAAY,YAAwC;CAE3D,OADc,WAAW,MAAM,+BACpB,CAAC,GAAG;AACjB;AAEA,MAAM,iBAAiB;;;;;;AAOvB,SAAS,qBAAqB,WAAuC;CACnE,IAAI;EACF,MAAM,UAAMC,0BACVC,gBAAK,WAAW,YAAY,kBAAkB,cAAc,GAC5D,OACF;EACA,MAAM,MAAM,KAAK,MAAM,GAAG;EAC1B,OAAO,OAAO,IAAI,YAAY,YAAY,eAAe,KAAK,IAAI,OAAO,IACrE,IAAI,UACJ;CACN,QAAQ;EACN;CACF;AACF;;;;;;;;;;AAsBA,SAAgB,iBAAiB,OAA0D;CACzF,MAAM,OAAO,CAAC,OAAO,MAAM,UAAU;CACrC,MAAM,QAAQ,MAAM,SAAS,KAAK,CAAC,CAAC,MAAM,cAAc;CACxD,IAAI,CAAC,OACH,OAAO;EAAE;EAAM,YAAY;EAAM,QAAQ;CAAM;CAEjD,MAAM,GAAG,OAAO,OAAO,OAAO,cAAc;CAC5C,MAAM,QAAQ,aACV,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,eAC/B,IAAI,MAAM,GAAG,MAAM,GAAG;CAC1B,IAAI,YACF,OAAO;EACL,MAAM,CAAC,GAAG,MAAM,KAAK;EACrB,YAAY;EACZ,kBAAkB,GAAG,MAAM;EAC3B,QAAQ;CACV;CAEF,OAAO;EAAE,MAAM;GAAC,GAAG;GAAM;GAAO,IAAI;EAAO;EAAG,YAAY;EAAM,QAAQ;CAAM;AAChF;AAmBA,MAAM,iBAAiB;;AAGvB,SAAgB,mBAAmB,QAAyB;CAC1D,OAAO,eAAe,KAAK,MAAM;AACnC;;;;;;AAOA,SAAgB,uBAAuB,OAKnB;CAClB,IAAI,CAAC,MAAM,UACT,OAAO;EACL,MAAM;EACN,QAAQ;CACV;CAEF,IAAI,MAAM,aACR,OAAO;EAAE,MAAM;EAAY,OAAO,MAAM,SAAS;EAAO,QAAQ,MAAM;CAAY;CAEpF,IAAI,CAAC,MAAM,WACT,OAAO;EAAE,MAAM;EAAQ,QAAQ;CAA0B;CAE3D,IAAI,CAAC,MAAM,eACT,OAAO;EAAE,MAAM;EAAQ,QAAQ;CAAmC;CAEpE,OAAO;EAAE,MAAM;EAAS,OAAO,MAAM,SAAS;CAAM;AACtD;;;;;;;;AASA,eAAsB,kBAAkB,OAIT;CAC7B,MAAM,YAAY,MAAMF,gBAAI,OAAO;EAAC;EAAa;EAAa;CAAM,GAAG;EACrE,KAAK,MAAM;EACX,SAAS;CACX,CAAC;CACD,MAAM,WAAW,WAAW,OAAO,KAAK;CACxC,IAAI,CAAC,aAAa,UAAU,aAAa,KAAK,CAAC,UAAU;EACvD,MAAM,SAAS,WAAW,OAAO,KAAK;EACtC,MAAM,IAAI,MACR,4CAA4C,MAAM,UAAU,cAAc,WAAW,YAAY,YAAY,SAAS,KAAK,WAAW,GAAG,EAC3I;CACF;CAGA,MAAM,EAAE,MAAM,YAAY,kBAAkB,WAAW,iBAAiB;EACtE;EACA,SAHc,qBAAqB,MAAM,SAGnC;CACR,CAAC;CACD,MAAM,OAAO,KAAK,KAAK,QAAQ,GAAG,MAAM,MAAM,GAAG,KAAK;CACtD,MAAM,YAAY,GAAG,MAAM,MAAM;CACjC,MAAM,QAAQ,GAAG,MAAM,MAAM;CAC7B,MAAM,YAAY,aAAa,CAAC,GAAG,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI;CAC9D,IAAI,QAAQ,UAAU,KAAK,KAAK;CAEhC,QAAQ,IACN,4BAA4BG,qBAAO,KAAK,UAAU,KAAK,IAAI,CAAC,IAAI,aAAa,KAAKA,qBAAO,OAAO,gBAAgB,GAClH;CACA,MAAMH,gBACJ,UACA;EAAC;EAAS;EAAY;EAAW,GAAG,UAAU,SAAS,QAAQ,CAAC,MAAM,GAAG,CAAC;EAAG;CAAG,GAChF,EAAE,KAAK,MAAM,UAAU,CACzB;CAEA,QAAQ,IAAI,aAAaG,qBAAO,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE,IAAI;CAC1D,IAAI;CACJ,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,OAAO,MAAMH,gBAAI,UAAU,CAAC,QAAQ,GAAG,GAAG;GAC9C,KAAK,MAAM;GACX,SAAS;EACX,CAAC;EACD,IAAI,CAAC,QAAQ,KAAK,aAAa,GAC7B,MAAM,IAAI,MAAM,eAAe,IAAI,yBAAyB,MAAM,YAAY,WAAW;EAE3F,WAAW,YAAY,KAAK,MAAM;EAClC,IAAI,MAAM,WAAW,KAAK,OAAO,KAAK,GACpC,QAAQ,IAAIG,qBAAO,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC;CAE9C;CAEA,MAAM,eAAe,OAAO,QAAkC;EAC5D,MAAM,OAAO,MAAMH,gBAAI,UAAU,CAAC,QAAQ,GAAG,GAAG;GAC9C,KAAK,MAAM;GACX,SAAS;EACX,CAAC;EACD,IAAI,CAAC,QAAQ,KAAK,aAAa,GAC7B,MAAM,IAAI,MAAM,eAAe,IAAI,yBAAyB,MAAM,YAAY,WAAW;EAE3F,WAAW,YAAY,KAAK,MAAM;EAClC,IAAI,MAAM,WAAW,KAAK,OAAO,KAAK,GACpC,QAAQ,IAAIG,qBAAO,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC;EAE5C,OAAO;CACT;CAEA,IAAI,eAAe;CACnB,IAAI,YACF,eAAe,MAAM,aAAa,SAAS;MAE3C,QAAQ,IAAIA,qBAAO,OAAO,kBAAkB,kBAAkB,CAAC;CAEjE,MAAM,WAAW,SAAS,MAAM,aAAa,KAAK,IAAI;CAEtD,IAAI,CAAC,QACH,QAAQ,IAAIA,qBAAO,OAAO,uDAAuD,CAAC;CAGpF,OAAO;EAAE,OAAO,MAAM;EAAO,KAAK,KAAK;EAAK;EAAM;EAAc;EAAU;CAAO;AACnF;;;;;;AAOA,eAAsB,qBAAqB,OAKzB;CAChB,MAAM,gBAAYD,gBAAK,MAAM,WAAW,QAAQ,QAAQ;CACxD,uBAAU,WAAW,EAAE,WAAW,KAAK,CAAC;CACxC,MAAM,qBAAiBA,gBAAK,WAAW,YAAY;CACnD,2BAAc,gBAAgB,QAAQ,MAAM,MAAM,GAAG,MAAM,OAAO,GAAG;CAErE,QAAQ,IAAI,kCAAkCC,qBAAO,KAAK,MAAM,OAAO,EAAE,gBAAgB;CACzF,MAAM,SAAS,MAAMH,gBAAI,WAAW;EAAC;EAAM;EAAa,MAAM;EAAS;CAAM,GAAG;EAC9E,KAAK,MAAM;EACX,SAAS;EACT,KAAK,EAAE,yBAAyB,yBAAyB;CAC3D,CAAC;CACD,IAAI,QAAQ,QACV;OAAK,MAAM,QAAQ,OAAO,OAAO,MAAM,IAAI,GACzC,IAAI,KAAK,KAAK,GAAG,QAAQ,IAAI,KAAKG,qBAAO,IAAI,KAAK,KAAK,CAAC,GAAG;CAC7D;CAEF,IAAI,CAAC,UAAU,OAAO,aAAa,GACjC,MAAM,IAAI,MACR,QAAQ,OAAO,KAAK,IAChB,sBAAsB,OAAO,OAAO,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,GAAG,MACzE,oCAAoC,QAAQ,YAAY,WAC9D;CAEF,QAAQ,IAAIA,qBAAO,MAAM,KAAKC,oBAAM,GAAG,yBAAyB,CAAC;AACnE"}
+{"version":3,"file":"image-deploy.cjs","names":["run","readFileSync","join","colors","icons"],"sources":["../src/image-deploy.ts"],"sourcesContent":["import { readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { run } from \"./utils/run\";\nimport { colors, icons } from \"./utils/theme\";\n\nexport interface ResolvedImageRef {\n  image: string;\n  source: \"ci\" | \"env\" | \"repository\";\n}\n\n/**\n * Image reference resolution precedence (ADR 0021): `ci.image` in\n * bos.config.json → `BOS_IMAGE` env → derived from `repository`.\n */\nexport function resolveImageRef(input: {\n  ciImage?: string;\n  repository?: string;\n  env?: Record<string, string | undefined>;\n}): ResolvedImageRef | undefined {\n  const envImage = input.env?.BOS_IMAGE;\n  if (input.ciImage) return { image: input.ciImage, source: \"ci\" };\n  if (envImage) return { image: envImage, source: \"env\" };\n\n  const repo = input.repository\n    ?.replace(/^https?:\\/\\/(www\\.)?github\\.com\\//i, \"\")\n    .replace(/\\.git$/i, \"\")\n    .replace(/\\/+$/, \"\")\n    .toLowerCase();\n  if (!repo?.includes(\"/\") || repo.split(\"/\").length !== 2) return undefined;\n  return { image: `ghcr.io/${repo}`, source: \"repository\" };\n}\n\nexport async function hasDocker(): Promise<boolean> {\n  try {\n    const result = await run(\"docker\", [\"info\", \"--format\", \"{{.ServerVersion}}\"], {\n      capture: true,\n    });\n    return result?.exitCode === 0;\n  } catch {\n    return false;\n  }\n}\n\nfunction parseDigest(pushOutput: string): string | undefined {\n  const match = pushOutput.match(/digest:\\s*(sha256:[a-f0-9]+)/i);\n  return match?.[1];\n}\n\nconst SEMVER_PATTERN = /^(\\d+)\\.(\\d+)\\.(\\d+)(?:-([0-9A-Za-z.-]+))?$/;\n\n/**\n * The runtime framework version baked into the image is the workspace source's\n * `everything-dev` package version — the image builds from `configDir`, so that\n * file is the truth. Missing (child repos without the workspace) → undefined.\n */\nfunction readFrameworkVersion(configDir: string): string | undefined {\n  try {\n    const raw = readFileSync(\n      join(configDir, \"packages\", \"everything-dev\", \"package.json\"),\n      \"utf-8\",\n    );\n    const pkg = JSON.parse(raw) as { version?: unknown };\n    return typeof pkg.version === \"string\" && SEMVER_PATTERN.test(pkg.version)\n      ? pkg.version\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport interface ImageTags {\n  /** Exact refs to build and push, in push order (latest excluded). */\n  tags: string[];\n  /** Push `:latest` after the pinned tags. */\n  pushLatest: boolean;\n  /** Human-readable reason when `latest` is held. */\n  latestHoldReason?: string;\n  /** Push `:rc` after the pinned tags — the floating prerelease-train ref. */\n  pushRc: boolean;\n}\n\n/**\n * Tag scheme (ADR 0021): `sha-<short>` always; the exact `v<version>` tag; a\n * floating major tag (`v2`) on stable releases only. `latest` is held during\n * prereleases (npm's `rc` dist-tag analog) so existing deployments pinned to\n * `:latest` keep serving the last stable image — and `:rc` is the floating\n * ref for the prerelease train (npm's `rc` dist-tag mirror): it moves on\n * every prerelease deploy and freezes at the last rc-train build once the\n * workspace releases a stable version.\n */\nexport function computeImageTags(input: { shortSha: string; version?: string }): ImageTags {\n  const tags = [`sha-${input.shortSha}`];\n  const match = input.version?.trim().match(SEMVER_PATTERN);\n  if (!match) {\n    return { tags, pushLatest: true, pushRc: false };\n  }\n  const [, major, minor, patch, prerelease] = match;\n  const exact = prerelease\n    ? `v${major}.${minor}.${patch}-${prerelease}`\n    : `v${major}.${minor}.${patch}`;\n  if (prerelease) {\n    return {\n      tags: [...tags, exact],\n      pushLatest: false,\n      latestHoldReason: `${exact} is a prerelease — :latest still serves the last stable image`,\n      pushRc: true,\n    };\n  }\n  return { tags: [...tags, exact, `v${major}`], pushLatest: true, pushRc: false };\n}\n\nexport interface ImageDeployResult {\n  image: string;\n  /** Primary pinned tag (the sha tag). */\n  tag: string;\n  /** All tags pushed, including the primary. */\n  tags: string[];\n  latestPushed: boolean;\n  /** Whether the floating `:rc` prerelease-train ref was pushed. */\n  rcPushed: boolean;\n  digest?: string;\n}\n\nexport type DeployImagePlan =\n  | { kind: \"prebuilt\"; image: string; digest: string }\n  | { kind: \"build\"; image: string }\n  | { kind: \"skip\"; reason: string };\n\nconst DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/;\n\n/** A Railway pin is `FROM image@<digest>` — anything else cannot resolve. */\nexport function isValidImageDigest(digest: string): boolean {\n  return DIGEST_PATTERN.test(digest);\n}\n\n/**\n * Decide the image leg's source: a digest handed over from a pre-pushed image\n * (the CI image job) wins; otherwise the local docker build runs when the\n * toolchain and Dockerfile are present (ADR 0021, as amended).\n */\nexport function resolveDeployImagePlan(input: {\n  imageRef: ResolvedImageRef | undefined;\n  imageDigest?: string;\n  hasDocker: boolean;\n  hasDockerfile: boolean;\n}): DeployImagePlan {\n  if (!input.imageRef) {\n    return {\n      kind: \"skip\",\n      reason: \"set ci.image in bos.config.json (or BOS_IMAGE) to build and push the runtime image\",\n    };\n  }\n  if (input.imageDigest) {\n    return { kind: \"prebuilt\", image: input.imageRef.image, digest: input.imageDigest };\n  }\n  if (!input.hasDocker) {\n    return { kind: \"skip\", reason: \"docker is not available\" };\n  }\n  if (!input.hasDockerfile) {\n    return { kind: \"skip\", reason: \"no Dockerfile at the config root\" };\n  }\n  return { kind: \"build\", image: input.imageRef.image };\n}\n\n/**\n * Image leg (ADR 0021): build the runtime stage, tag `sha-<short>` + version\n * tags, push them, capture the digest, then push the floating refs — `:latest`\n * unless the version is a prerelease, and `:rc` when it is. Callers skip the\n * leg with a notice when no image is configured (child repos get\n * build+upload+publish only).\n */\nexport async function buildAndPushImage(input: {\n  image: string;\n  configDir: string;\n  verbose?: boolean;\n}): Promise<ImageDeployResult> {\n  const shaResult = await run(\"git\", [\"rev-parse\", \"--short=7\", \"HEAD\"], {\n    cwd: input.configDir,\n    capture: true,\n  });\n  const shortSha = shaResult?.stdout.trim();\n  if (!shaResult || shaResult.exitCode !== 0 || !shortSha) {\n    const detail = shaResult?.stderr.trim();\n    throw new Error(\n      `Failed to resolve the current git SHA in ${input.configDir} (exit code ${shaResult?.exitCode ?? \"unknown\"}${detail ? `: ${detail}` : \"\"})`,\n    );\n  }\n\n  const version = readFrameworkVersion(input.configDir);\n  const { tags, pushLatest, latestHoldReason, pushRc } = computeImageTags({\n    shortSha,\n    version,\n  });\n  const refs = tags.map((tag) => `${input.image}:${tag}`);\n  const latestRef = `${input.image}:latest`;\n  const rcRef = `${input.image}:rc`;\n  const buildRefs = pushLatest ? [...refs, latestRef] : [...refs];\n  if (pushRc) buildRefs.push(rcRef);\n\n  console.log(\n    `  Building runtime image ${colors.cyan(buildRefs.join(\", \"))}${pushLatest ? \"\" : colors.yellow(\" (latest held)\")}`,\n  );\n  await run(\n    \"docker\",\n    [\"build\", \"--target\", \"runtime\", ...buildRefs.flatMap((ref) => [\"-t\", ref]), \".\"],\n    { cwd: input.configDir },\n  );\n\n  console.log(`  Pushing ${colors.cyan(refs.join(\", \"))}...`);\n  let digest: string | undefined;\n  for (const ref of refs) {\n    const push = await run(\"docker\", [\"push\", ref], {\n      cwd: input.configDir,\n      capture: true,\n    });\n    if (!push || push.exitCode !== 0) {\n      throw new Error(`docker push ${ref} failed with exit code ${push?.exitCode ?? \"unknown\"}`);\n    }\n    digest ??= parseDigest(push.stdout);\n    if (input.verbose && push.stdout.trim()) {\n      console.log(colors.dim(push.stdout.trim()));\n    }\n  }\n\n  const pushFloating = async (ref: string): Promise<boolean> => {\n    const push = await run(\"docker\", [\"push\", ref], {\n      cwd: input.configDir,\n      capture: true,\n    });\n    if (!push || push.exitCode !== 0) {\n      throw new Error(`docker push ${ref} failed with exit code ${push?.exitCode ?? \"unknown\"}`);\n    }\n    digest ??= parseDigest(push.stdout);\n    if (input.verbose && push.stdout.trim()) {\n      console.log(colors.dim(push.stdout.trim()));\n    }\n    return true;\n  };\n\n  let latestPushed = false;\n  if (pushLatest) {\n    latestPushed = await pushFloating(latestRef);\n  } else {\n    console.log(colors.yellow(`  latest held: ${latestHoldReason}`));\n  }\n  const rcPushed = pushRc ? await pushFloating(rcRef) : false;\n\n  if (!digest) {\n    console.log(colors.yellow(\"  Could not capture the image digest from push output\"));\n  }\n\n  return { image: input.image, tag: tags[0]!, tags, latestPushed, rcPushed, digest };\n}\n\n/**\n * Railway leg (ADR 0021, amended): image-backed deploy. The service's source\n * is a Docker image ref (connected once in the dashboard — `:rc` during the\n * prerelease train), and `redeploy --from-source` pulls and deploys whatever\n * that ref points at. The image leg pushes `:rc` (and the `sha-<short>` /\n * version tags) immediately before this step, so the pulled bytes are exactly\n * what this train validated. Railway skips the build entirely for\n * Docker-image sources — nothing is uploaded, nothing is built on Railway,\n * and the digest-pin Dockerfile mechanism this replaces is gone (the CLI v5\n * dropped RAILWAY_DOCKERFILE_PATH, its snapshot respects .gitignore so\n * generated Dockerfiles never shipped, and its Metal builder rejected the\n * repo Dockerfile's cache-mount ids).\n */\nexport async function deployImageToRailway(input: {\n  service: string;\n  configDir: string;\n}): Promise<void> {\n  console.log(`  Deploying to Railway service ${colors.cyan(input.service)} (image-backed)...`);\n  // The probe is authoritative: runners don't ship the CLI, and a spawn\n  // failure resolves (reject:false) as exitCode 1 with empty output — the\n  // 2026-10-13 deploy surfaced exactly that as a silent instant failure.\n  let version: string | undefined;\n  try {\n    version = (await run(\"railway\", [\"--version\"], { cwd: input.configDir, capture: true }))\n      ?.stdout;\n  } catch {\n    version = undefined;\n  }\n  if (!version?.trim()) {\n    throw new Error(\"Railway CLI not found. Install it: npm i -g @railway/cli\");\n  }\n  console.log(`  ${colors.dim(`railway ${version.trim()}`)}`);\n\n  // Stream the CLI's output live — a silent exit (empty stdout+stderr, seen\n  // on the 2026-10-13 deploy) must still be diagnosable from the workflow log.\n  const collected = { stdout: \"\", stderr: \"\" };\n  const result = await run(\n    \"railway\",\n    [\"redeploy\", \"--service\", input.service, \"--from-source\", \"--yes\"],\n    {\n      cwd: input.configDir,\n      capture: true,\n      onChunk: (stream, chunk) => {\n        collected[stream] += chunk.toString(\"utf-8\");\n        for (const line of chunk.toString(\"utf-8\").split(\"\\n\")) {\n          if (line.trim()) console.log(`  ${colors.dim(line.trim())}`);\n        }\n      },\n    },\n  );\n  if (!result || result.exitCode !== 0) {\n    const exitCode = result?.exitCode ?? \"unknown\";\n    const tail = (stream: string, text: string) =>\n      text.trim()\n        ? `\\nrailway ${stream} (tail):\\n${text.trim().split(\"\\n\").slice(-20).join(\"\\n\")}`\n        : \"\";\n    throw new Error(\n      `railway redeploy failed with exit code ${exitCode}` +\n        tail(\"stdout\", collected.stdout) +\n        tail(\"stderr\", collected.stderr),\n    );\n  }\n  console.log(colors.green(`  ${icons.ok} Railway deploy complete`));\n}\n"],"mappings":";;;;;;;;;;AAcA,SAAgB,gBAAgB,OAIC;CAC/B,MAAM,WAAW,MAAM,KAAK;CAC5B,IAAI,MAAM,SAAS,OAAO;EAAE,OAAO,MAAM;EAAS,QAAQ;CAAK;CAC/D,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,OAAO,MAAM,YACf,QAAQ,sCAAsC,EAAE,CAAC,CAClD,QAAQ,WAAW,EAAE,CAAC,CACtB,QAAQ,QAAQ,EAAE,CAAC,CACnB,YAAY;CACf,IAAI,CAAC,MAAM,SAAS,GAAG,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,WAAW,GAAG,OAAO;CACjE,OAAO;EAAE,OAAO,WAAW;EAAQ,QAAQ;CAAa;AAC1D;AAEA,eAAsB,YAA8B;CAClD,IAAI;EAIF,QAAO,MAHcA,gBAAI,UAAU;GAAC;GAAQ;GAAY;EAAoB,GAAG,EAC7E,SAAS,KACX,CAAC,EACY,EAAE,aAAa;CAC9B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,YAAY,YAAwC;CAE3D,OADc,WAAW,MAAM,+BACpB,CAAC,GAAG;AACjB;AAEA,MAAM,iBAAiB;;;;;;AAOvB,SAAS,qBAAqB,WAAuC;CACnE,IAAI;EACF,MAAM,UAAMC,0BACVC,gBAAK,WAAW,YAAY,kBAAkB,cAAc,GAC5D,OACF;EACA,MAAM,MAAM,KAAK,MAAM,GAAG;EAC1B,OAAO,OAAO,IAAI,YAAY,YAAY,eAAe,KAAK,IAAI,OAAO,IACrE,IAAI,UACJ;CACN,QAAQ;EACN;CACF;AACF;;;;;;;;;;AAsBA,SAAgB,iBAAiB,OAA0D;CACzF,MAAM,OAAO,CAAC,OAAO,MAAM,UAAU;CACrC,MAAM,QAAQ,MAAM,SAAS,KAAK,CAAC,CAAC,MAAM,cAAc;CACxD,IAAI,CAAC,OACH,OAAO;EAAE;EAAM,YAAY;EAAM,QAAQ;CAAM;CAEjD,MAAM,GAAG,OAAO,OAAO,OAAO,cAAc;CAC5C,MAAM,QAAQ,aACV,IAAI,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,eAC/B,IAAI,MAAM,GAAG,MAAM,GAAG;CAC1B,IAAI,YACF,OAAO;EACL,MAAM,CAAC,GAAG,MAAM,KAAK;EACrB,YAAY;EACZ,kBAAkB,GAAG,MAAM;EAC3B,QAAQ;CACV;CAEF,OAAO;EAAE,MAAM;GAAC,GAAG;GAAM;GAAO,IAAI;EAAO;EAAG,YAAY;EAAM,QAAQ;CAAM;AAChF;AAmBA,MAAM,iBAAiB;;AAGvB,SAAgB,mBAAmB,QAAyB;CAC1D,OAAO,eAAe,KAAK,MAAM;AACnC;;;;;;AAOA,SAAgB,uBAAuB,OAKnB;CAClB,IAAI,CAAC,MAAM,UACT,OAAO;EACL,MAAM;EACN,QAAQ;CACV;CAEF,IAAI,MAAM,aACR,OAAO;EAAE,MAAM;EAAY,OAAO,MAAM,SAAS;EAAO,QAAQ,MAAM;CAAY;CAEpF,IAAI,CAAC,MAAM,WACT,OAAO;EAAE,MAAM;EAAQ,QAAQ;CAA0B;CAE3D,IAAI,CAAC,MAAM,eACT,OAAO;EAAE,MAAM;EAAQ,QAAQ;CAAmC;CAEpE,OAAO;EAAE,MAAM;EAAS,OAAO,MAAM,SAAS;CAAM;AACtD;;;;;;;;AASA,eAAsB,kBAAkB,OAIT;CAC7B,MAAM,YAAY,MAAMF,gBAAI,OAAO;EAAC;EAAa;EAAa;CAAM,GAAG;EACrE,KAAK,MAAM;EACX,SAAS;CACX,CAAC;CACD,MAAM,WAAW,WAAW,OAAO,KAAK;CACxC,IAAI,CAAC,aAAa,UAAU,aAAa,KAAK,CAAC,UAAU;EACvD,MAAM,SAAS,WAAW,OAAO,KAAK;EACtC,MAAM,IAAI,MACR,4CAA4C,MAAM,UAAU,cAAc,WAAW,YAAY,YAAY,SAAS,KAAK,WAAW,GAAG,EAC3I;CACF;CAGA,MAAM,EAAE,MAAM,YAAY,kBAAkB,WAAW,iBAAiB;EACtE;EACA,SAHc,qBAAqB,MAAM,SAGnC;CACR,CAAC;CACD,MAAM,OAAO,KAAK,KAAK,QAAQ,GAAG,MAAM,MAAM,GAAG,KAAK;CACtD,MAAM,YAAY,GAAG,MAAM,MAAM;CACjC,MAAM,QAAQ,GAAG,MAAM,MAAM;CAC7B,MAAM,YAAY,aAAa,CAAC,GAAG,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI;CAC9D,IAAI,QAAQ,UAAU,KAAK,KAAK;CAEhC,QAAQ,IACN,4BAA4BG,qBAAO,KAAK,UAAU,KAAK,IAAI,CAAC,IAAI,aAAa,KAAKA,qBAAO,OAAO,gBAAgB,GAClH;CACA,MAAMH,gBACJ,UACA;EAAC;EAAS;EAAY;EAAW,GAAG,UAAU,SAAS,QAAQ,CAAC,MAAM,GAAG,CAAC;EAAG;CAAG,GAChF,EAAE,KAAK,MAAM,UAAU,CACzB;CAEA,QAAQ,IAAI,aAAaG,qBAAO,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE,IAAI;CAC1D,IAAI;CACJ,KAAK,MAAM,OAAO,MAAM;EACtB,MAAM,OAAO,MAAMH,gBAAI,UAAU,CAAC,QAAQ,GAAG,GAAG;GAC9C,KAAK,MAAM;GACX,SAAS;EACX,CAAC;EACD,IAAI,CAAC,QAAQ,KAAK,aAAa,GAC7B,MAAM,IAAI,MAAM,eAAe,IAAI,yBAAyB,MAAM,YAAY,WAAW;EAE3F,WAAW,YAAY,KAAK,MAAM;EAClC,IAAI,MAAM,WAAW,KAAK,OAAO,KAAK,GACpC,QAAQ,IAAIG,qBAAO,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC;CAE9C;CAEA,MAAM,eAAe,OAAO,QAAkC;EAC5D,MAAM,OAAO,MAAMH,gBAAI,UAAU,CAAC,QAAQ,GAAG,GAAG;GAC9C,KAAK,MAAM;GACX,SAAS;EACX,CAAC;EACD,IAAI,CAAC,QAAQ,KAAK,aAAa,GAC7B,MAAM,IAAI,MAAM,eAAe,IAAI,yBAAyB,MAAM,YAAY,WAAW;EAE3F,WAAW,YAAY,KAAK,MAAM;EAClC,IAAI,MAAM,WAAW,KAAK,OAAO,KAAK,GACpC,QAAQ,IAAIG,qBAAO,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC;EAE5C,OAAO;CACT;CAEA,IAAI,eAAe;CACnB,IAAI,YACF,eAAe,MAAM,aAAa,SAAS;MAE3C,QAAQ,IAAIA,qBAAO,OAAO,kBAAkB,kBAAkB,CAAC;CAEjE,MAAM,WAAW,SAAS,MAAM,aAAa,KAAK,IAAI;CAEtD,IAAI,CAAC,QACH,QAAQ,IAAIA,qBAAO,OAAO,uDAAuD,CAAC;CAGpF,OAAO;EAAE,OAAO,MAAM;EAAO,KAAK,KAAK;EAAK;EAAM;EAAc;EAAU;CAAO;AACnF;;;;;;;;;;;;;;AAeA,eAAsB,qBAAqB,OAGzB;CAChB,QAAQ,IAAI,kCAAkCA,qBAAO,KAAK,MAAM,OAAO,EAAE,mBAAmB;CAI5F,IAAI;CACJ,IAAI;EACF,WAAW,MAAMH,gBAAI,WAAW,CAAC,WAAW,GAAG;GAAE,KAAK,MAAM;GAAW,SAAS;EAAK,CAAC,EAAC,EACnF;CACN,QAAQ;EACN,UAAU;CACZ;CACA,IAAI,CAAC,SAAS,KAAK,GACjB,MAAM,IAAI,MAAM,0DAA0D;CAE5E,QAAQ,IAAI,KAAKG,qBAAO,IAAI,WAAW,QAAQ,KAAK,GAAG,GAAG;CAI1D,MAAM,YAAY;EAAE,QAAQ;EAAI,QAAQ;CAAG;CAC3C,MAAM,SAAS,MAAMH,gBACnB,WACA;EAAC;EAAY;EAAa,MAAM;EAAS;EAAiB;CAAO,GACjE;EACE,KAAK,MAAM;EACX,SAAS;EACT,UAAU,QAAQ,UAAU;GAC1B,UAAU,WAAW,MAAM,SAAS,OAAO;GAC3C,KAAK,MAAM,QAAQ,MAAM,SAAS,OAAO,CAAC,CAAC,MAAM,IAAI,GACnD,IAAI,KAAK,KAAK,GAAG,QAAQ,IAAI,KAAKG,qBAAO,IAAI,KAAK,KAAK,CAAC,GAAG;EAE/D;CACF,CACF;CACA,IAAI,CAAC,UAAU,OAAO,aAAa,GAAG;EACpC,MAAM,WAAW,QAAQ,YAAY;EACrC,MAAM,QAAQ,QAAgB,SAC5B,KAAK,KAAK,IACN,aAAa,OAAO,YAAY,KAAK,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,MAC5E;EACN,MAAM,IAAI,MACR,0CAA0C,aACxC,KAAK,UAAU,UAAU,MAAM,IAC/B,KAAK,UAAU,UAAU,MAAM,CACnC;CACF;CACA,QAAQ,IAAIA,qBAAO,MAAM,KAAKC,oBAAM,GAAG,yBAAyB,CAAC;AACnE"}

package/dist/image-deploy.mjs

@@ -1,6 +1,6 @@
 import { run } from "./utils/run.mjs";
 import { colors, icons } from "./utils/theme.mjs";
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { readFileSync } from "node:fs";
 import { join } from "node:path";
 
 //#region src/image-deploy.ts
@@ -196,30 +196,54 @@ async function buildAndPushImage(input) {
 	};
 }
 /**
-* Railway leg (ADR 0021): pull-only deploy of the pushed image digest — a
-* thin `FROM image@digest` Dockerfile pins the digest so Railway never
-* rebuilds; `RAILWAY_DOCKERFILE_PATH` points at the generated file.
+* Railway leg (ADR 0021, amended): image-backed deploy. The service's source
+* is a Docker image ref (connected once in the dashboard — `:rc` during the
+* prerelease train), and `redeploy --from-source` pulls and deploys whatever
+* that ref points at. The image leg pushes `:rc` (and the `sha-<short>` /
+* version tags) immediately before this step, so the pulled bytes are exactly
+* what this train validated. Railway skips the build entirely for
+* Docker-image sources — nothing is uploaded, nothing is built on Railway,
+* and the digest-pin Dockerfile mechanism this replaces is gone (the CLI v5
+* dropped RAILWAY_DOCKERFILE_PATH, its snapshot respects .gitignore so
+* generated Dockerfiles never shipped, and its Metal builder rejected the
+* repo Dockerfile's cache-mount ids).
 */
 async function deployImageToRailway(input) {
-	const deployDir = join(input.configDir, ".bos", "deploy");
-	mkdirSync(deployDir, { recursive: true });
-	const dockerfilePath = join(deployDir, "Dockerfile");
-	writeFileSync(dockerfilePath, `FROM ${input.image}@${input.digest}\n`);
-	console.log(`  Deploying to Railway service ${colors.cyan(input.service)} (pull-only)...`);
+	console.log(`  Deploying to Railway service ${colors.cyan(input.service)} (image-backed)...`);
+	let version;
+	try {
+		version = (await run("railway", ["--version"], {
+			cwd: input.configDir,
+			capture: true
+		}))?.stdout;
+	} catch {
+		version = void 0;
+	}
+	if (!version?.trim()) throw new Error("Railway CLI not found. Install it: npm i -g @railway/cli");
+	console.log(`  ${colors.dim(`railway ${version.trim()}`)}`);
+	const collected = {
+		stdout: "",
+		stderr: ""
+	};
 	const result = await run("railway", [
-		"up",
+		"redeploy",
 		"--service",
 		input.service,
-		"--ci"
+		"--from-source",
+		"--yes"
 	], {
 		cwd: input.configDir,
 		capture: true,
-		env: { RAILWAY_DOCKERFILE_PATH: ".bos/deploy/Dockerfile" }
+		onChunk: (stream, chunk) => {
+			collected[stream] += chunk.toString("utf-8");
+			for (const line of chunk.toString("utf-8").split("\n")) if (line.trim()) console.log(`  ${colors.dim(line.trim())}`);
+		}
 	});
-	if (result?.stdout) {
-		for (const line of result.stdout.split("\n")) if (line.trim()) console.log(`  ${colors.dim(line.trim())}`);
+	if (!result || result.exitCode !== 0) {
+		const exitCode = result?.exitCode ?? "unknown";
+		const tail = (stream, text) => text.trim() ? `\nrailway ${stream} (tail):\n${text.trim().split("\n").slice(-20).join("\n")}` : "";
+		throw new Error(`railway redeploy failed with exit code ${exitCode}` + tail("stdout", collected.stdout) + tail("stderr", collected.stderr));
 	}
-	if (!result || result.exitCode !== 0) throw new Error(result?.stderr.trim() ? `railway up failed: ${result.stderr.trim().split("\n").slice(-3).join(" ")}` : `railway up failed with exit code ${result?.exitCode ?? "unknown"}`);
 	console.log(colors.green(`  ${icons.ok} Railway deploy complete`));
 }