@graftland/plugin-remote 0.3.0 → 0.3.2

package/dist/Auth.d.ts

@@ -1,4 +1,4 @@
-import { AuthenticationFailed, CredentialsError } from "./Errors.js";
+import { AuthenticationFailed, AuthenticatorUnavailable, CredentialsError } from "./Errors.js";
 import { Context, Effect, Option, Redacted, Scope } from "effect";
 export interface ClientCertificate {
   readonly cert: string;
@@ -32,7 +32,7 @@ export type CredentialsApi = { [K in Prepared["_tag"]]: {
 export type AuthenticatorApi = {
   readonly _tag: "Header";
   readonly issuer?: string;
-  readonly authenticate: (header: Option.Option<Redacted.Redacted<string>>) => Effect.Effect<string, AuthenticationFailed>;
+  readonly authenticate: (header: Option.Option<Redacted.Redacted<string>>) => Effect.Effect<string, AuthenticationFailed | AuthenticatorUnavailable>;
 } | {
   readonly _tag: "Mtls";
   readonly tls: TlsPolicy;

package/dist/Auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.d.ts","names":[],"sources":["../src/Auth.ts"],"mappings":";;iBAKiB;WACP;WACA,KAAK,SAAS;;iBAEP;WACP,KAAK;WACL,gBAAgB,OAAO;;iBAEhB;WACP,IAAI;WACJ;WACA;WACA;;YAEE;WAEA;WACA,OAAO,SAAS;;WAEd;WAA8B,OAAO;;WACrC;;YAEF,oBACV,KAAK;WACI,MAAM;WACN,MAAM,OAAO,OACrB,QAAQ;aAAqB,MAAM;MACnC,kBACA,MAAM;KAGP;YAEU;WAEA;WACA;WACA,eACR,QAAQ,OAAO,OAAO,SAAS,sBAC3B,OAAO,eAAe;;WAGlB;WACA,KAAK;WACL,eACR,MAAM,wBACF,OAAO,eAAe;;WAEhB;WAAuB;;;qBAExB,oBAAoB;;qBAGpB,sBAAsB"}
+{"version":3,"file":"Auth.d.ts","names":[],"sources":["../src/Auth.ts"],"mappings":";;iBASiB;WACP;WACA,KAAK,SAAS;;iBAEP;WACP,KAAK;WACL,gBAAgB,OAAO;;iBAEhB;WACP,IAAI;WACJ;WACA;WACA;;YAEE;WAEA;WACA,OAAO,SAAS;;WAEd;WAA8B,OAAO;;WACrC;;YAEF,oBACV,KAAK;WACI,MAAM;WACN,MAAM,OAAO,OACrB,QAAQ;aAAqB,MAAM;MACnC,kBACA,MAAM;KAGP;YAEU;WAEA;WACA;WACA,eACR,QAAQ,OAAO,OAAO,SAAS,sBAC3B,OAAO,eAEX,uBAAuB;;WAIf;WACA,KAAK;WACL,eACR,MAAM,wBACF,OAAO,eAAe;;WAEhB;WAAuB;;;qBAExB,oBAAoB;;qBAGpB,sBAAsB"}

package/dist/Auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.js","names":[],"sources":["../src/Auth.ts"],"sourcesContent":["/** Credentials and authenticated identities shared by transport plugins. */\nimport { Context } from \"effect\"\nimport type { Effect, Redacted, Option, Scope } from \"effect\"\nimport type { AuthenticationFailed, CredentialsError } from \"./Errors\"\n\nexport interface ClientCertificate {\n\treadonly cert: string\n\treadonly key: Redacted.Redacted<string>\n}\nexport interface VerifiedCertificate {\n\treadonly der: Uint8Array\n\treadonly subjectAltName: Option.Option<string>\n}\nexport interface TlsPolicy {\n\treadonly ca: ReadonlyArray<string>\n\treadonly minVersion: \"TLSv1.3\"\n\treadonly requestCert: true\n\treadonly rejectUnauthorized: true\n}\nexport type Prepared =\n\t| {\n\t\t\treadonly _tag: \"Authorization\"\n\t\t\treadonly value: Redacted.Redacted<string>\n\t  }\n\t| { readonly _tag: \"Certificate\"; readonly value: ClientCertificate }\n\t| { readonly _tag: \"None\" }\n\nexport type CredentialsApi = {\n\t[K in Prepared[\"_tag\"]]: {\n\t\treadonly kind: K\n\t\treadonly read: Effect.Effect<\n\t\t\tExtract<Prepared, { readonly _tag: K }>,\n\t\t\tCredentialsError,\n\t\t\tScope.Scope\n\t\t>\n\t}\n}[Prepared[\"_tag\"]]\n\nexport type AuthenticatorApi =\n\t| {\n\t\t\treadonly _tag: \"Header\"\n\t\t\treadonly issuer?: string\n\t\t\treadonly authenticate: (\n\t\t\t\theader: Option.Option<Redacted.Redacted<string>>,\n\t\t\t) => Effect.Effect<string, AuthenticationFailed>\n\t  }\n\t| {\n\t\t\treadonly _tag: \"Mtls\"\n\t\t\treadonly tls: TlsPolicy\n\t\t\treadonly authenticate: (\n\t\t\t\tpeer: VerifiedCertificate,\n\t\t\t) => Effect.Effect<string, AuthenticationFailed>\n\t  }\n\t| { readonly _tag: \"None\"; readonly identity: string }\n\nexport class Credentials extends Context.Service<Credentials, CredentialsApi>()(\n\t\"@graftland/plugin-remote/Auth/Credentials\",\n) {}\nexport class Authenticator extends Context.Service<\n\tAuthenticator,\n\tAuthenticatorApi\n>()(\"@graftland/plugin-remote/Auth/Authenticator\") {}\n"],"mappings":";;;AAuDA,IAAa,cAAb,cAAiC,QAAQ,QAAqC,CAAC,CAC9E,2CACD,CAAC,CAAC,CAAC;AACH,IAAa,gBAAb,cAAmC,QAAQ,QAGzC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC"}
+{"version":3,"file":"Auth.js","names":[],"sources":["../src/Auth.ts"],"sourcesContent":["/** Credentials and authenticated identities shared by transport plugins. */\nimport { Context } from \"effect\"\nimport type { Effect, Redacted, Option, Scope } from \"effect\"\nimport type {\n\tAuthenticationFailed,\n\tAuthenticatorUnavailable,\n\tCredentialsError,\n} from \"./Errors\"\n\nexport interface ClientCertificate {\n\treadonly cert: string\n\treadonly key: Redacted.Redacted<string>\n}\nexport interface VerifiedCertificate {\n\treadonly der: Uint8Array\n\treadonly subjectAltName: Option.Option<string>\n}\nexport interface TlsPolicy {\n\treadonly ca: ReadonlyArray<string>\n\treadonly minVersion: \"TLSv1.3\"\n\treadonly requestCert: true\n\treadonly rejectUnauthorized: true\n}\nexport type Prepared =\n\t| {\n\t\t\treadonly _tag: \"Authorization\"\n\t\t\treadonly value: Redacted.Redacted<string>\n\t  }\n\t| { readonly _tag: \"Certificate\"; readonly value: ClientCertificate }\n\t| { readonly _tag: \"None\" }\n\nexport type CredentialsApi = {\n\t[K in Prepared[\"_tag\"]]: {\n\t\treadonly kind: K\n\t\treadonly read: Effect.Effect<\n\t\t\tExtract<Prepared, { readonly _tag: K }>,\n\t\t\tCredentialsError,\n\t\t\tScope.Scope\n\t\t>\n\t}\n}[Prepared[\"_tag\"]]\n\nexport type AuthenticatorApi =\n\t| {\n\t\t\treadonly _tag: \"Header\"\n\t\t\treadonly issuer?: string\n\t\t\treadonly authenticate: (\n\t\t\t\theader: Option.Option<Redacted.Redacted<string>>,\n\t\t\t) => Effect.Effect<\n\t\t\t\tstring,\n\t\t\t\tAuthenticationFailed | AuthenticatorUnavailable\n\t\t\t>\n\t  }\n\t| {\n\t\t\treadonly _tag: \"Mtls\"\n\t\t\treadonly tls: TlsPolicy\n\t\t\treadonly authenticate: (\n\t\t\t\tpeer: VerifiedCertificate,\n\t\t\t) => Effect.Effect<string, AuthenticationFailed>\n\t  }\n\t| { readonly _tag: \"None\"; readonly identity: string }\n\nexport class Credentials extends Context.Service<Credentials, CredentialsApi>()(\n\t\"@graftland/plugin-remote/Auth/Credentials\",\n) {}\nexport class Authenticator extends Context.Service<\n\tAuthenticator,\n\tAuthenticatorApi\n>()(\"@graftland/plugin-remote/Auth/Authenticator\") {}\n"],"mappings":";;;AA8DA,IAAa,cAAb,cAAiC,QAAQ,QAAqC,CAAC,CAC9E,2CACD,CAAC,CAAC,CAAC;AACH,IAAa,gBAAb,cAAmC,QAAQ,QAGzC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC"}

package/dist/{Bootstrap-MCwivGN1.js → Bootstrap-H9gDsgsC.js}

@@ -1,5 +1,5 @@
-import { D as Identity } from "./Peer-IJgFK6mD.js";
-import { r as Limits } from "./port-Blbh8tms.js";
+import { D as Identity } from "./Peer-DXeVrGBh.js";
+import { r as Limits } from "./port--3x2zJ4D.js";
 import { Schema } from "effect";
 // packages/remote/src/internal/runner/Bootstrap.ts
 const Bootstrap = Schema.Struct({

package/dist/{Contract-CcpSIJm4.js → Contract-DsJtisvL.js}

@@ -1,33 +1,8 @@
 import { n as __exportAll } from "./rolldown-runtime-DYf_mQCB.js";
-import { t as Priority } from "./port-Blbh8tms.js";
-import { a as provide } from "./Graft-BsYq3F-J.js";
-import { Array, Cause, Context, Effect, Predicate, Record, Schema } from "effect";
+import { t as Priority } from "./port--3x2zJ4D.js";
+import { a as provide } from "./Graft-B71CPA2Y.js";
+import { Array, Context, Effect, Predicate, Record, Schema } from "effect";
 import { Rpc, RpcClient, RpcGroup, RpcServer } from "effect/rpc";
-// packages/remote/src/internal/childErrors.ts
-var AlreadyLoaded = class extends Schema.TaggedError()("AlreadyLoaded", {}) {};
-var ContractNotFound = class extends Schema.TaggedError()("ContractNotFound", { module: Schema.String }) {
-	get message() {
-		return `No remote contract exported by ${this.module}`;
-	}
-};
-var ModuleImportFailed = class extends Schema.TaggedError()("ModuleImportFailed", {
-	module: Schema.String,
-	cause: Schema.Defect({ includeStack: true })
-}) {};
-var ActivationFailed = class extends Schema.TaggedError()("ActivationFailed", {
-	detail: Schema.String,
-	cause: Schema.optionalKey(Schema.Cause(Schema.Defect({ includeStack: true }), Schema.Defect({ includeStack: true })))
-}) {
-	get message() {
-		return this.detail;
-	}
-};
-const ChildFailure = Schema.Union([
-	AlreadyLoaded,
-	ContractNotFound,
-	ModuleImportFailed,
-	ActivationFailed
-]);
 // packages/remote/src/internal/control.ts
 const Log = Schema.Struct({
 	level: Schema.Literals([
@@ -82,7 +57,6 @@ const service = (key, group, mapping) => ({
 const endpoints = (services) => Record.fromEntries(Array.map(services, (service) => [service.key.key, service.group]));
 // packages/remote/src/Contract.ts
 var Contract_exports = /* @__PURE__ */ __exportAll({
-	ChildFailure: () => ChildFailure,
 	UndeclaredFailure: () => UndeclaredFailure,
 	fromModule: () => fromModule,
 	isContract: () => isContract,
@@ -92,30 +66,18 @@ var Contract_exports = /* @__PURE__ */ __exportAll({
 const TypeId = "~@graftland/plugin-remote/Contract";
 /** An undeclared failure still crosses the boundary, with its diagnostic value. */
 var UndeclaredFailure = class extends Schema.TaggedError()("UndeclaredFailure", { original: Schema.Defect({ includeStack: true }) }) {};
-/** Pure metadata shared by the host and the executable runner bootstrap. */
-const make = (options) => {
+function make(options) {
 	const keys = Array.map([...options.inject ?? [], ...options.provides ?? []], (service) => service.key.key);
 	if (Array.dedupe(keys).length !== keys.length || keys.includes("@graftland/plugin-remote/control")) throw new Error("Service keys must be unique within a remote contract and must not use the control endpoint");
-	const failure = Schema.Union([
-		options.error,
-		UndeclaredFailure,
-		ChildFailure
-	]);
-	const codec = Schema.toCodecJson(Schema.Cause(failure, Schema.Defect({ includeStack: true })));
-	const declared = Schema.is(failure);
-	const normalizeCause = (cause) => Cause.map(cause, (error) => declared(error) ? error : UndeclaredFailure.make({ original: error }));
 	return {
 		...options,
-		control: make$1(codec),
-		normalizeCause,
+		error: options.error ?? Schema.Never,
 		inject: options.inject ?? [],
 		provides: options.provides ?? [],
-		[TypeId]: TypeId,
-		encodeCause: (cause) => normalizeCause(cause).pipe(Schema.encodeEffect(codec)),
-		decodeCause: Schema.decodeUnknownEffect(codec)
+		[TypeId]: TypeId
 	};
-};
+}
 const isContract = (value) => Predicate.hasProperty(value, TypeId) && value[TypeId] === TypeId;
 /** A contract module exports either default or a named contract. */
 const fromModule = (module) => Array.findFirst([Predicate.hasProperty(module, "default") ? module.default : void 0, Predicate.hasProperty(module, "contract") ? module.contract : void 0], isContract);
-export { make as a, endpoint as c, ChildFailure as d, ContractNotFound as f, isContract as i, ActivationFailed as l, UndeclaredFailure as n, endpoints as o, ModuleImportFailed as p, fromModule as r, service as s, Contract_exports as t, AlreadyLoaded as u };
+export { make as a, endpoint as c, isContract as i, make$1 as l, UndeclaredFailure as n, endpoints as o, fromModule as r, service as s, Contract_exports as t };

package/dist/Contract.d.ts

@@ -1,71 +1,68 @@
-import { ActivationFailed, AlreadyLoaded, ChildFailure, ContractNotFound, ModuleImportFailed } from "./internal/childErrors.js";
-import { Service, service } from "./internal/services.js";
-import { Cause, Schema } from "effect";
+import { service } from "./internal/services.js";
+import { Graft } from "@graftland/graft";
+import { Context, Effect, Schema, Scope } from "effect";
+import { Rpc, RpcClient, RpcGroup, RpcServer } from "effect/rpc";
 declare namespace Contract_d_exports {
-  export { ChildFailure, Contract, RunnerContract, UndeclaredFailure, fromModule, isContract, make, service };
+  export { ConfigSchema, Contract, ErrorSchema, Options, RunnerContract, Service, UndeclaredFailure, fromModule, isContract, make, service };
 }
-declare const UndeclaredFailure_base: Schema.Class<UndeclaredFailure, Schema.TaggedStruct<"UndeclaredFailure", {
-  readonly original: Schema.Defect;
-}>, Cause.YieldableError & {
-  readonly brand: unique symbol;
-}>;
-/** An undeclared failure still crosses the boundary, with its diagnostic value. */
-export declare class UndeclaredFailure extends UndeclaredFailure_base {}
-/** Pure metadata shared by the host and the executable runner bootstrap. */
-export declare const make: <S extends Schema.Top & {
+declare const TypeId = "~@graftland/plugin-remote/Contract";
+/** RPC types stay inside the descriptor; Graft supplies its dynamic activation context. */
+export interface Service<R = never, ClientR = never> {
+  readonly key: Context.Key<unknown, unknown>;
+  readonly group: Pick<RpcGroup.RpcGroup<Rpc.Any>, "requests">;
+  readonly serve: (port: {
+    readonly serverProtocol: (endpoint: string) => RpcServer.Protocol["Service"];
+  }) => Effect.Effect<never, never, R>;
+  readonly publish: (port: {
+    readonly clientProtocol: (endpoint: string) => RpcClient.Protocol["Service"];
+  }) => Effect.Effect<void, Graft.ServiceConflict, Graft.Graft | Scope.Scope | ClientR>;
+}
+/** A self-contained configuration schema that encodes as JSON. */
+export type ConfigSchema = Schema.Top & {
   readonly Encoded: Schema.Json;
   readonly DecodingServices: never;
   readonly EncodingServices: never;
-}, E extends Schema.Top & {
+};
+/** A self-contained schema for declared failures. */
+export type ErrorSchema = Schema.Top & {
   readonly DecodingServices: never;
   readonly EncodingServices: never;
-}>(options: {
+};
+/** The shared configuration and service declarations for one remote plugin. */
+export interface Contract<S extends ConfigSchema, E extends ErrorSchema = typeof Schema.Never> {
   readonly name: string;
   readonly config: S;
   readonly error: E;
   readonly module: string;
+  readonly inject: ReadonlyArray<Service>;
+  readonly provides: ReadonlyArray<Service>;
+  readonly [TypeId]: typeof TypeId;
+}
+/** Configuration accepted by make; omitted errors default to Never. */
+export interface Options<S extends ConfigSchema, E extends ErrorSchema> {
+  readonly name: string;
+  readonly config: S;
+  readonly error?: E;
+  readonly module: string;
   readonly inject?: ReadonlyArray<Service>;
   readonly provides?: ReadonlyArray<Service>;
-}) => {
-  name: string;
-  config: S;
-  error: E;
-  module: string;
-  control: import("effect/rpc/RpcGroup").RpcGroup<import("effect/rpc/Rpc").Rpc<"Dispose", Schema.Void, Schema.Void, Schema.toCodecJson<Schema.Cause<Schema.Union<readonly [E, typeof UndeclaredFailure, Schema.Union<readonly [typeof AlreadyLoaded, typeof ContractNotFound, typeof ModuleImportFailed, typeof ActivationFailed]>]>, Schema.Defect>>, never, never> | import("effect/rpc/Rpc").Rpc<"Events", Schema.Void, import("effect/rpc/RpcSchema").Stream<Schema.Union<readonly [Schema.TaggedStruct<"Failed", {
-    readonly cause: Schema.Codec<Schema.Json, Schema.Json, never, never>;
-  }>, Schema.TaggedStruct<"Stopped", {}>, Schema.TaggedStruct<"Withdrawing", {}>]>, Schema.Never>, Schema.Never, never, never> | import("effect/rpc/Rpc").Rpc<"Load", Schema.Struct<{
-    input: Schema.Codec<Schema.Json, Schema.Json, never, never>;
-  }>, Schema.Void, Schema.toCodecJson<Schema.Cause<Schema.Union<readonly [E, typeof UndeclaredFailure, Schema.Union<readonly [typeof AlreadyLoaded, typeof ContractNotFound, typeof ModuleImportFailed, typeof ActivationFailed]>]>, Schema.Defect>>, never, never> | import("effect/rpc/Rpc").Rpc<"Logs", Schema.Void, import("effect/rpc/RpcSchema").Stream<Schema.Union<readonly [Schema.TaggedStruct<"Log", {
-    readonly entry: Schema.Struct<{
-      readonly level: Schema.Literals<readonly ["Fatal", "Error", "Warn", "Info", "Debug", "Trace", "All", "None"]>;
-      readonly message: Schema.Defect;
-      readonly cause: Schema.Codec<Schema.Json, Schema.Json, never, never>;
-      readonly annotations: Schema.$Record<Schema.String, Schema.Defect>;
-    }>;
-    readonly dropped: Schema.Int;
-  }>, Schema.TaggedStruct<"LogsEnded", {
-    readonly dropped: Schema.Int;
-  }>]>, Schema.Never>, Schema.Never, never, never>>;
-  normalizeCause: (cause: Cause.Cause<unknown>) => Cause.Cause<ActivationFailed | AlreadyLoaded | ContractNotFound | ModuleImportFailed | UndeclaredFailure | E["Type"]>;
-  inject: readonly Service<never, never>[];
-  provides: readonly Service<never, never>[];
-  "~@graftland/plugin-remote/Contract": string;
-  encodeCause: (cause: Cause.Cause<unknown>) => import("effect/Effect").Effect<Schema.Json, Schema.SchemaError, E["EncodingServices"]>;
-  decodeCause: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => import("effect/Effect").Effect<Cause.Cause<ActivationFailed | AlreadyLoaded | ContractNotFound | ModuleImportFailed | UndeclaredFailure | E["Type"]>, Schema.SchemaError, E["DecodingServices"]>;
-};
-/** The shared config, error codecs, and service declarations for one remote plugin. */
-export type Contract<S extends Schema.Top & {
-  readonly Encoded: Schema.Json;
-  readonly DecodingServices: never;
-  readonly EncodingServices: never;
-}, E extends Schema.Top & {
-  readonly DecodingServices: never;
-  readonly EncodingServices: never;
-}> = ReturnType<typeof make<S, E>>;
-/** Dynamic imports retain the control server and cause normalization; hosts retain the declared error type. */
+}
+declare const UndeclaredFailure_base: Schema.Class<UndeclaredFailure, Schema.TaggedStruct<"UndeclaredFailure", {
+  readonly original: Schema.Defect;
+}>, import("effect/Cause").YieldableError & {
+  readonly brand: unique symbol;
+}>;
+/** An undeclared failure still crosses the boundary, with its diagnostic value. */
+export declare class UndeclaredFailure extends UndeclaredFailure_base {}
+/** Pure metadata shared by the host and the executable runner bootstrap. */
+export declare function make<S extends ConfigSchema, E extends ErrorSchema>(options: Options<S, E> & {
+  readonly error: E;
+}): Contract<S, E>;
+export declare function make<S extends ConfigSchema>(options: Options<S, typeof Schema.Never>): Contract<S>;
+/** A contract whose schemas are discovered through a dynamic import. */
 export type RunnerContract = Contract<Schema.Codec<unknown, Schema.Json>, Schema.Codec<unknown>>;
 export declare const isContract: (value: unknown) => value is RunnerContract;
 /** A contract module exports either default or a named contract. */
 export declare const fromModule: (module: unknown) => import("effect/Option").Option<RunnerContract>;
-export { ChildFailure, Contract_d_exports, service };
+export { Contract_d_exports, service };
 //# sourceMappingURL=Contract.d.ts.map

package/dist/Contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Contract.d.ts","names":["_$__internal_childErrors0.AlreadyLoaded","_$__internal_childErrors0.ContractNotFound","_$__internal_childErrors0.ModuleImportFailed","_$__internal_childErrors0.ActivationFailed"],"sources":["../src/Contract.ts"],"mappings":";;;;;;;;;WAamB;;;qBAFN,0BAA0B;;qBAM1B,OACZ,UAAU,OAAO;WACP,SAAS,OAAO;WAChB;WACA;GAEV,UAAU,OAAO;WACP;WACA;GACT;WAEQ;WACA,QAAQ;WACR,OAAO;WACP;WACA,SAAS,cAAc;WACvB,WAAW,cAAc;;EALnB;EACE,QAAA;EACD,OAAA;EACC;;;;;;;;;;;;;;;;EAqBc,iBAAA,OAAA,MAAM,mBAAc,MAAA,MAAdG,mBAAcH,gBAAAC,mBAAAC,qBAAA,oBAAA;;;;EAW7B,cAAA,OAAA,MAAM,2CAAc,OAAA,OAAA,MAAA,OAAA,aAAA;E,+HAAAC,mB;;;YAO/B,SACX,UAAU,OAAO;WACP,SAAS,OAAO;WAChB;WACA;GAEV,UAAU,OAAO;WACP;WACA;KAEP,kBAAkB,KAAK,GAAG;;YAGlB,iBAAiB,SAC5B,OAAO,eAAe,OAAO,OAC7B,OAAO;qBAGK,aAAU,mBAAqB,SAAS;;qBAIxC,aAAU,4CAAmB,OAAA"}
+{"version":3,"file":"Contract.d.ts","names":[],"sources":["../src/Contract.ts"],"mappings":";;;;;;;cAOM;;iBAGW,QAAQ,WAAW;WAC1B,KAAK,QAAQ;WACb,OAAO,KAAK,SAAS,SAAS,IAAI;WAClC,QAAQ;aACP,iBAAiB,qBAAqB,UAAU;QACpD,OAAO,qBAAqB;WACzB,UAAU;aACT,iBAAiB,qBAAqB,UAAU;QACpD,OAAO,aAEZ,MAAM,iBACN,MAAM,QAAQ,MAAM,QAAQ;;;YAKlB,eAAe,OAAO;WACxB,SAAS,OAAO;WAChB;WACA;;;YAGE,cAAc,OAAO;WACvB;WACA;;;iBAIO,SAChB,UAAU,cACV,UAAU,qBAAqB,OAAO;WAE7B;WACA,QAAQ;WACR,OAAO;WACP;WACA,QAAQ,cAAc;WACtB,UAAU,cAAc;YACvB,gBAAgB;;;iBAGV,QAAQ,UAAU,cAAc,UAAU;WACjD;WACA,QAAQ;WACR,QAAQ;WACR;WACA,SAAS,cAAc;WACvB,WAAW,cAAc;;;;;WAMhB;;;qBAFN,0BAA0B;;wBAMvB,KAAK,UAAU,cAAc,UAAU,aACtD,SAAS,QAAQ,GAAG;WAAgB,OAAO;IACzC,SAAS,GAAG;wBACC,KAAK,UAAU,cAC9B,SAAS,QAAQ,UAAU,OAAO,SAChC,SAAS;;YA2BA,iBAAiB,SAC5B,OAAO,eAAe,OAAO,OAC7B,OAAO;qBAGK,aAAU,mBAAqB,SAAS;;qBAIxC,aAAU,4CAAmB,OAAA"}

package/dist/Contract.js

@@ -1 +1 @@
-export { d as ChildFailure, n as UndeclaredFailure, r as fromModule, i as isContract, a as make, s as service } from "./Contract-CcpSIJm4.js";
+export { n as UndeclaredFailure, r as fromModule, i as isContract, a as make, s as service } from "./Contract-DsJtisvL.js";

package/dist/Contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"Contract.js","names":["Control.make"],"sources":["../src/Contract.ts"],"sourcesContent":["import { ChildFailure } from \"./internal/childErrors\"\nexport { ChildFailure }\nimport { Array, Cause, Predicate, Schema } from \"effect\"\n\nimport type { Service } from \"./internal/services\"\nimport * as Control from \"./internal/control\"\nexport { service } from \"./internal/services\"\n\nconst TypeId = \"~@graftland/plugin-remote/Contract\"\n\n/** An undeclared failure still crosses the boundary, with its diagnostic value. */\nexport class UndeclaredFailure extends Schema.TaggedError<\n\tUndeclaredFailure,\n\t{ readonly brand: unique symbol }\n>()(\"UndeclaredFailure\", { original: Schema.Defect({ includeStack: true }) }) {}\n\n/** Pure metadata shared by the host and the executable runner bootstrap. */\nexport const make = <\n\tS extends Schema.Top & {\n\t\treadonly Encoded: Schema.Json\n\t\treadonly DecodingServices: never\n\t\treadonly EncodingServices: never\n\t},\n\tE extends Schema.Top & {\n\t\treadonly DecodingServices: never\n\t\treadonly EncodingServices: never\n\t},\n>(options: {\n\treadonly name: string\n\treadonly config: S\n\treadonly error: E\n\treadonly module: string\n\treadonly inject?: ReadonlyArray<Service>\n\treadonly provides?: ReadonlyArray<Service>\n}) => {\n\t// Keys are runtime strings; tuple types cannot distinguish independently created keys.\n\tconst keys = Array.map(\n\t\t[...(options.inject ?? []), ...(options.provides ?? [])],\n\t\t(service) => service.key.key,\n\t)\n\tif (\n\t\tArray.dedupe(keys).length !== keys.length ||\n\t\tkeys.includes(Control.endpoint)\n\t)\n\t\tthrow new Error(\n\t\t\t\"Service keys must be unique within a remote contract and must not use the control endpoint\",\n\t\t)\n\tconst failure = Schema.Union([options.error, UndeclaredFailure, ChildFailure])\n\tconst codec = Schema.toCodecJson(\n\t\tSchema.Cause(failure, Schema.Defect({ includeStack: true })),\n\t)\n\tconst declared = Schema.is(failure)\n\tconst normalizeCause = (cause: Cause.Cause<unknown>) =>\n\t\tCause.map(cause, (error) =>\n\t\t\tdeclared(error) ? error : UndeclaredFailure.make({ original: error }),\n\t\t)\n\treturn {\n\t\t...options,\n\t\tcontrol: Control.make(codec),\n\t\tnormalizeCause,\n\t\tinject: options.inject ?? [],\n\t\tprovides: options.provides ?? [],\n\t\t[TypeId]: TypeId,\n\t\tencodeCause: (cause: Cause.Cause<unknown>) =>\n\t\t\tnormalizeCause(cause).pipe(Schema.encodeEffect(codec)),\n\t\tdecodeCause: Schema.decodeUnknownEffect(codec),\n\t}\n}\n\n/** The shared config, error codecs, and service declarations for one remote plugin. */\nexport type Contract<\n\tS extends Schema.Top & {\n\t\treadonly Encoded: Schema.Json\n\t\treadonly DecodingServices: never\n\t\treadonly EncodingServices: never\n\t},\n\tE extends Schema.Top & {\n\t\treadonly DecodingServices: never\n\t\treadonly EncodingServices: never\n\t},\n> = ReturnType<typeof make<S, E>>\n\n/** Dynamic imports retain the control server and cause normalization; hosts retain the declared error type. */\nexport type RunnerContract = Contract<\n\tSchema.Codec<unknown, Schema.Json>,\n\tSchema.Codec<unknown>\n>\n\nexport const isContract = (value: unknown): value is RunnerContract =>\n\tPredicate.hasProperty(value, TypeId) && value[TypeId] === TypeId\n\n/** A contract module exports either default or a named contract. */\nexport const fromModule = (module: unknown) =>\n\tArray.findFirst(\n\t\t[\n\t\t\tPredicate.hasProperty(module, \"default\") ? module.default : undefined,\n\t\t\tPredicate.hasProperty(module, \"contract\") ? module.contract : undefined,\n\t\t],\n\t\tisContract,\n\t)\n"],"mappings":";;;;;;;;;;;;;;AAQA,MAAM,SAAS;;AAGf,IAAa,oBAAb,cAAuC,OAAO,YAG5C,CAAC,CAAC,qBAAqB,EAAE,UAAU,OAAO,OAAO,EAAE,cAAc,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;;AAG/E,MAAa,QAUX,YAOI;CAEL,MAAM,OAAO,MAAM,IAClB,CAAC,GAAI,QAAQ,UAAU,CAAC,GAAI,GAAI,QAAQ,YAAY,CAAC,CAAE,IACtD,YAAY,QAAQ,IAAI,GAC1B;CACA,IACC,MAAM,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,UACnC,KAAK,SAAS,kCAAgB,GAE9B,MAAM,IAAI,MACT,4FACD;CACD,MAAM,UAAU,OAAO,MAAM;EAAC,QAAQ;EAAO;EAAmB;CAAY,CAAC;CAC7E,MAAM,QAAQ,OAAO,YACpB,OAAO,MAAM,SAAS,OAAO,OAAO,EAAE,cAAc,KAAK,CAAC,CAAC,CAC5D;CACA,MAAM,WAAW,OAAO,GAAG,OAAO;CAClC,MAAM,kBAAkB,UACvB,MAAM,IAAI,QAAQ,UACjB,SAAS,KAAK,IAAI,QAAQ,kBAAkB,KAAK,EAAE,UAAU,MAAM,CAAC,CACrE;CACD,OAAO;EACN,GAAG;EACH,SAASA,OAAa,KAAK;EAC3B;EACA,QAAQ,QAAQ,UAAU,CAAC;EAC3B,UAAU,QAAQ,YAAY,CAAC;GAC9B,SAAS;EACV,cAAc,UACb,eAAe,KAAK,CAAC,CAAC,KAAK,OAAO,aAAa,KAAK,CAAC;EACtD,aAAa,OAAO,oBAAoB,KAAK;CAC9C;AACD;AAqBA,MAAa,cAAc,UAC1B,UAAU,YAAY,OAAO,MAAM,KAAK,MAAM,YAAY;;AAG3D,MAAa,cAAc,WAC1B,MAAM,UACL,CACC,UAAU,YAAY,QAAQ,SAAS,IAAI,OAAO,UAAU,KAAA,GAC5D,UAAU,YAAY,QAAQ,UAAU,IAAI,OAAO,WAAW,KAAA,CAC/D,GACA,UACD"}
+{"version":3,"file":"Contract.js","names":[],"sources":["../src/Contract.ts"],"sourcesContent":["import { Array, Predicate, Schema } from \"effect\"\nimport type { Context, Effect, Scope } from \"effect\"\nimport type { Graft } from \"@graftland/graft\"\nimport type { Rpc, RpcClient, RpcGroup, RpcServer } from \"effect/rpc\"\nimport * as Control from \"./internal/control\"\nexport { service } from \"./internal/services\"\n\nconst TypeId = \"~@graftland/plugin-remote/Contract\"\n\n/** RPC types stay inside the descriptor; Graft supplies its dynamic activation context. */\nexport interface Service<R = never, ClientR = never> {\n\treadonly key: Context.Key<unknown, unknown>\n\treadonly group: Pick<RpcGroup.RpcGroup<Rpc.Any>, \"requests\">\n\treadonly serve: (port: {\n\t\treadonly serverProtocol: (endpoint: string) => RpcServer.Protocol[\"Service\"]\n\t}) => Effect.Effect<never, never, R>\n\treadonly publish: (port: {\n\t\treadonly clientProtocol: (endpoint: string) => RpcClient.Protocol[\"Service\"]\n\t}) => Effect.Effect<\n\t\tvoid,\n\t\tGraft.ServiceConflict,\n\t\tGraft.Graft | Scope.Scope | ClientR\n\t>\n}\n\n/** A self-contained configuration schema that encodes as JSON. */\nexport type ConfigSchema = Schema.Top & {\n\treadonly Encoded: Schema.Json\n\treadonly DecodingServices: never\n\treadonly EncodingServices: never\n}\n/** A self-contained schema for declared failures. */\nexport type ErrorSchema = Schema.Top & {\n\treadonly DecodingServices: never\n\treadonly EncodingServices: never\n}\n\n/** The shared configuration and service declarations for one remote plugin. */\nexport interface Contract<\n\tS extends ConfigSchema,\n\tE extends ErrorSchema = typeof Schema.Never,\n> {\n\treadonly name: string\n\treadonly config: S\n\treadonly error: E\n\treadonly module: string\n\treadonly inject: ReadonlyArray<Service>\n\treadonly provides: ReadonlyArray<Service>\n\treadonly [TypeId]: typeof TypeId\n}\n/** Configuration accepted by make; omitted errors default to Never. */\nexport interface Options<S extends ConfigSchema, E extends ErrorSchema> {\n\treadonly name: string\n\treadonly config: S\n\treadonly error?: E\n\treadonly module: string\n\treadonly inject?: ReadonlyArray<Service>\n\treadonly provides?: ReadonlyArray<Service>\n}\n\n/** An undeclared failure still crosses the boundary, with its diagnostic value. */\nexport class UndeclaredFailure extends Schema.TaggedError<\n\tUndeclaredFailure,\n\t{ readonly brand: unique symbol }\n>()(\"UndeclaredFailure\", { original: Schema.Defect({ includeStack: true }) }) {}\n\n/** Pure metadata shared by the host and the executable runner bootstrap. */\nexport function make<S extends ConfigSchema, E extends ErrorSchema>(\n\toptions: Options<S, E> & { readonly error: E },\n): Contract<S, E>\nexport function make<S extends ConfigSchema>(\n\toptions: Options<S, typeof Schema.Never>,\n): Contract<S>\nexport function make<S extends ConfigSchema, E extends ErrorSchema>(\n\toptions: Options<S, E>,\n): Contract<S, E | typeof Schema.Never> {\n\t// Keys are runtime strings; tuple types cannot distinguish independently created keys.\n\tconst keys = Array.map(\n\t\t[...(options.inject ?? []), ...(options.provides ?? [])],\n\t\t(service) => service.key.key,\n\t)\n\tif (\n\t\tArray.dedupe(keys).length !== keys.length ||\n\t\tkeys.includes(Control.endpoint)\n\t)\n\t\tthrow new Error(\n\t\t\t\"Service keys must be unique within a remote contract and must not use the control endpoint\",\n\t\t)\n\n\treturn {\n\t\t...options,\n\t\terror: options.error ?? Schema.Never,\n\t\tinject: options.inject ?? [],\n\t\tprovides: options.provides ?? [],\n\t\t[TypeId]: TypeId,\n\t}\n}\n\n/** A contract whose schemas are discovered through a dynamic import. */\nexport type RunnerContract = Contract<\n\tSchema.Codec<unknown, Schema.Json>,\n\tSchema.Codec<unknown>\n>\n\nexport const isContract = (value: unknown): value is RunnerContract =>\n\tPredicate.hasProperty(value, TypeId) && value[TypeId] === TypeId\n\n/** A contract module exports either default or a named contract. */\nexport const fromModule = (module: unknown) =>\n\tArray.findFirst(\n\t\t[\n\t\t\tPredicate.hasProperty(module, \"default\") ? module.default : undefined,\n\t\t\tPredicate.hasProperty(module, \"contract\") ? module.contract : undefined,\n\t\t],\n\t\tisContract,\n\t)\n"],"mappings":";;;;;;;;;;;;AAOA,MAAM,SAAS;;AAsDf,IAAa,oBAAb,cAAuC,OAAO,YAG5C,CAAC,CAAC,qBAAqB,EAAE,UAAU,OAAO,OAAO,EAAE,cAAc,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAS/E,SAAgB,KACf,SACuC;CAEvC,MAAM,OAAO,MAAM,IAClB,CAAC,GAAI,QAAQ,UAAU,CAAC,GAAI,GAAI,QAAQ,YAAY,CAAC,CAAE,IACtD,YAAY,QAAQ,IAAI,GAC1B;CACA,IACC,MAAM,OAAO,IAAI,CAAC,CAAC,WAAW,KAAK,UACnC,KAAK,SAAS,kCAAgB,GAE9B,MAAM,IAAI,MACT,4FACD;CAED,OAAO;EACN,GAAG;EACH,OAAO,QAAQ,SAAS,OAAO;EAC/B,QAAQ,QAAQ,UAAU,CAAC;EAC3B,UAAU,QAAQ,YAAY,CAAC;GAC9B,SAAS;CACX;AACD;AAQA,MAAa,cAAc,UAC1B,UAAU,YAAY,OAAO,MAAM,KAAK,MAAM,YAAY;;AAG3D,MAAa,cAAc,WAC1B,MAAM,UACL,CACC,UAAU,YAAY,QAAQ,SAAS,IAAI,OAAO,UAAU,KAAA,GAC5D,UAAU,YAAY,QAAQ,UAAU,IAAI,OAAO,WAAW,KAAA,CAC/D,GACA,UACD"}

package/dist/{Errors-oPsTLY7l.js → Errors-DYhsGZcZ.js}

@@ -42,4 +42,17 @@ var AuthenticationFailed = class extends Schema.TaggedError()("AuthenticationFai
 	challenge: Schema.optionalKey(Schema.String),
 	cause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown))
 }) {};
-export { ProcessExited as a, TransportError as c, MissingInstance as i, CredentialsError as n, RemoteError as o, LocalTerminationTimeout as r, RemoteWithdrawn as s, AuthenticationFailed as t };
+/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */
+var AuthenticatorUnavailable = class extends Schema.TaggedError()("AuthenticatorUnavailable", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {};
+/** A remote entry could not be resolved or configured at the indicated field. */
+var RemoteEntryError = class extends Schema.TaggedError()("RemoteEntryError", {
+	entry: Schema.Option(Schema.String),
+	directory: Schema.Option(Schema.String),
+	field: Schema.String,
+	cause: Schema.Cause(Schema.Unknown, Schema.Unknown)
+}) {
+	get message() {
+		return `Remote entry ${Option.getOrElse(this.entry, () => "<programmatic>")} failed at ${this.field}`;
+	}
+};
+export { MissingInstance as a, RemoteError as c, LocalTerminationTimeout as i, RemoteWithdrawn as l, AuthenticatorUnavailable as n, ProcessExited as o, CredentialsError as r, RemoteEntryError as s, AuthenticationFailed as t, TransportError as u };

package/dist/Errors.d.ts

@@ -63,5 +63,24 @@ declare const AuthenticationFailed_base: Schema.Class<AuthenticationFailed, Sche
   readonly brand: unique symbol;
 }>;
 export declare class AuthenticationFailed extends AuthenticationFailed_base {}
+declare const AuthenticatorUnavailable_base: Schema.Class<AuthenticatorUnavailable, Schema.TaggedStruct<"AuthenticatorUnavailable", {
+  readonly cause: Schema.Cause<Schema.Unknown, Schema.Unknown>;
+}>, import("effect/Cause").YieldableError & {
+  readonly brand: unique symbol;
+}>;
+/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */
+export declare class AuthenticatorUnavailable extends AuthenticatorUnavailable_base {}
+declare const RemoteEntryError_base: Schema.Class<RemoteEntryError, Schema.TaggedStruct<"RemoteEntryError", {
+  readonly entry: Schema.Option<Schema.String>;
+  readonly directory: Schema.Option<Schema.String>;
+  readonly field: Schema.String;
+  readonly cause: Schema.Cause<Schema.Unknown, Schema.Unknown>;
+}>, import("effect/Cause").YieldableError & {
+  readonly brand: unique symbol;
+}>;
+/** A remote entry could not be resolved or configured at the indicated field. */
+export declare class RemoteEntryError extends RemoteEntryError_base {
+  get message(): string;
+}
 export {};
 //# sourceMappingURL=Errors.d.ts.map

package/dist/Errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Errors.d.ts","names":[],"sources":["../src/Errors.ts"],"mappings":";;;;;;;;WAImB;;qBAFN,sBAAsB;MAUrB;;;;;WAQK;;qBAFN,uBAAuB;;WAUjB;;;qBAFN,wBAAwB;MAIvB;;;;;WAQK;;;qBAFN,oBAAoB;;WAQd;;;qBAFN,wBAAwB;MAIvB;;;;;;WAQK;;;qBAFN,gCAAgC;MAO/B;;;;;WAUK;;;qBAFN,yBAAyB;;;;;;WASnB;;qBAFN,6BAA6B"}
+{"version":3,"file":"Errors.d.ts","names":[],"sources":["../src/Errors.ts"],"mappings":";;;;;;;;WAImB;;qBAFN,sBAAsB;MAUrB;;;;;WAQK;;qBAFN,uBAAuB;;WAUjB;;;qBAFN,wBAAwB;MAIvB;;;;;WAQK;;;qBAFN,oBAAoB;;WAQd;;;qBAFN,wBAAwB;MAIvB;;;;;;WAQK;;;qBAFN,gCAAgC;MAO/B;;;;;WAUK;;;qBAFN,yBAAyB;;;;;;WASnB;;qBAFN,6BAA6B;;;;WAYvB;;;qBAFN,iCAAiC;;;;;;;WAU3B;;;qBAFN,yBAAyB;MASxB"}

package/dist/Errors.js

@@ -42,6 +42,19 @@ var AuthenticationFailed = class extends Schema.TaggedError()("AuthenticationFai
 	challenge: Schema.optionalKey(Schema.String),
 	cause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown))
 }) {};
-export { AuthenticationFailed, CredentialsError, LocalTerminationTimeout, MissingInstance, ProcessExited, RemoteError, RemoteWithdrawn, TransportError };
+/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */
+var AuthenticatorUnavailable = class extends Schema.TaggedError()("AuthenticatorUnavailable", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {};
+/** A remote entry could not be resolved or configured at the indicated field. */
+var RemoteEntryError = class extends Schema.TaggedError()("RemoteEntryError", {
+	entry: Schema.Option(Schema.String),
+	directory: Schema.Option(Schema.String),
+	field: Schema.String,
+	cause: Schema.Cause(Schema.Unknown, Schema.Unknown)
+}) {
+	get message() {
+		return `Remote entry ${Option.getOrElse(this.entry, () => "<programmatic>")} failed at ${this.field}`;
+	}
+};
+export { AuthenticationFailed, AuthenticatorUnavailable, CredentialsError, LocalTerminationTimeout, MissingInstance, ProcessExited, RemoteEntryError, RemoteError, RemoteWithdrawn, TransportError };
 
 //# sourceMappingURL=Errors.js.map

package/dist/Errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"Errors.js","names":[],"sources":["../src/Errors.ts"],"sourcesContent":["import { Option, Schema } from \"effect\"\n\nexport class ProcessExited extends Schema.TaggedError<\n\tProcessExited,\n\t{ readonly brand: unique symbol }\n>()(\"ProcessExited\", {\n\tpid: Schema.Option(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n\texitCode: Schema.NullOr(Schema.Int),\n\tstderr: Schema.String,\n\tstatusCause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} exited unexpectedly (${this.exitCode})`\n\t\t\t: `Remote process${Option.isSome(this.pid) ? ` ${this.pid.value}` : \"\"} exited unexpectedly (${this.exitCode ?? \"signal\"})`\n\t}\n}\nexport class TransportError extends Schema.TaggedError<\n\tTransportError,\n\t{ readonly brand: unique symbol }\n>()(\"TransportError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\n/** The remote export lease was withdrawn; host consumers must drain before Dispose. */\nexport class RemoteWithdrawn extends Schema.TaggedError<\n\tRemoteWithdrawn,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteWithdrawn\", {}) {\n\toverride get message() {\n\t\treturn \"Remote services were withdrawn\"\n\t}\n}\n\n/** Infrastructure failure at the plugin boundary; the complete underlying cause remains inspectable. */\nexport class RemoteError extends Schema.TaggedError<\n\tRemoteError,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteError\", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {}\n\n/** A network execution needs a stable logical identity across host restarts. */\nexport class MissingInstance extends Schema.TaggedError<\n\tMissingInstance,\n\t{ readonly brand: unique symbol }\n>()(\"MissingInstance\", {}) {\n\toverride get message() {\n\t\treturn \"A runner connection requires an instance or a loader entry id; set connect.instance when loading without Loader.\"\n\t}\n}\n\n/** Dispose completed, but Node still owns live handles; process-scope cleanup must terminate it. */\nexport class LocalTerminationTimeout extends Schema.TaggedError<\n\tLocalTerminationTimeout,\n\t{ readonly brand: unique symbol }\n>()(\"LocalTerminationTimeout\", {\n\tpid: Schema.optionalKey(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} did not exit within one second after Dispose; terminating it`\n\t\t\t: `Remote process ${this.pid} did not exit within one second after Dispose; terminating it`\n\t}\n}\n\n/** A credential source failed; the original failure remains available. */\nexport class CredentialsError extends Schema.TaggedError<\n\tCredentialsError,\n\t{ readonly brand: unique symbol }\n>()(\"CredentialsError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\nexport class AuthenticationFailed extends Schema.TaggedError<\n\tAuthenticationFailed,\n\t{ readonly brand: unique symbol }\n>()(\"AuthenticationFailed\", {\n\treason: Schema.Literals([\"missing\", \"invalid\"]),\n\tchallenge: Schema.optionalKey(Schema.String),\n\tcause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown)),\n}) {}\n"],"mappings":";;AAEA,IAAa,gBAAb,cAAmC,OAAO,YAGxC,CAAC,CAAC,iBAAiB;CACpB,KAAK,OAAO,OAAO,OAAO,GAAG;CAC7B,UAAU,OAAO,YAAY,OAAO,GAAG;CACvC,UAAU,OAAO,OAAO,OAAO,GAAG;CAClC,QAAQ,OAAO;CACf,aAAa,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO;AACzD,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,wBAAwB,KAAK,SAAS,KACrE,iBAAiB,OAAO,OAAO,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,UAAU,GAAG,wBAAwB,KAAK,YAAY,SAAS;CAC3H;AACD;AACA,IAAa,iBAAb,cAAoC,OAAO,YAGzC,CAAC,CAAC,kBAAkB,EACrB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,cAAb,cAAiC,OAAO,YAGtC,CAAC,CAAC,eAAe,EAAE,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;;AAG7E,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,0BAAb,cAA6C,OAAO,YAGlD,CAAC,CAAC,2BAA2B;CAC9B,KAAK,OAAO,YAAY,OAAO,GAAG;CAClC,UAAU,OAAO,YAAY,OAAO,GAAG;AACxC,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,iEAC/B,kBAAkB,KAAK,IAAI;CAC/B;AACD;;AAGA,IAAa,mBAAb,cAAsC,OAAO,YAG3C,CAAC,CAAC,oBAAoB,EACvB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,uBAAb,cAA0C,OAAO,YAG/C,CAAC,CAAC,wBAAwB;CAC3B,QAAQ,OAAO,SAAS,CAAC,WAAW,SAAS,CAAC;CAC9C,WAAW,OAAO,YAAY,OAAO,MAAM;CAC3C,OAAO,OAAO,YAAY,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,CAAC;AACvE,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"Errors.js","names":[],"sources":["../src/Errors.ts"],"sourcesContent":["import { Option, Schema } from \"effect\"\n\nexport class ProcessExited extends Schema.TaggedError<\n\tProcessExited,\n\t{ readonly brand: unique symbol }\n>()(\"ProcessExited\", {\n\tpid: Schema.Option(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n\texitCode: Schema.NullOr(Schema.Int),\n\tstderr: Schema.String,\n\tstatusCause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} exited unexpectedly (${this.exitCode})`\n\t\t\t: `Remote process${Option.isSome(this.pid) ? ` ${this.pid.value}` : \"\"} exited unexpectedly (${this.exitCode ?? \"signal\"})`\n\t}\n}\nexport class TransportError extends Schema.TaggedError<\n\tTransportError,\n\t{ readonly brand: unique symbol }\n>()(\"TransportError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\n/** The remote export lease was withdrawn; host consumers must drain before Dispose. */\nexport class RemoteWithdrawn extends Schema.TaggedError<\n\tRemoteWithdrawn,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteWithdrawn\", {}) {\n\toverride get message() {\n\t\treturn \"Remote services were withdrawn\"\n\t}\n}\n\n/** Infrastructure failure at the plugin boundary; the complete underlying cause remains inspectable. */\nexport class RemoteError extends Schema.TaggedError<\n\tRemoteError,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteError\", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {}\n\n/** A network execution needs a stable logical identity across host restarts. */\nexport class MissingInstance extends Schema.TaggedError<\n\tMissingInstance,\n\t{ readonly brand: unique symbol }\n>()(\"MissingInstance\", {}) {\n\toverride get message() {\n\t\treturn \"A runner connection requires an instance or a loader entry id; set connect.instance when loading without Loader.\"\n\t}\n}\n\n/** Dispose completed, but Node still owns live handles; process-scope cleanup must terminate it. */\nexport class LocalTerminationTimeout extends Schema.TaggedError<\n\tLocalTerminationTimeout,\n\t{ readonly brand: unique symbol }\n>()(\"LocalTerminationTimeout\", {\n\tpid: Schema.optionalKey(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} did not exit within one second after Dispose; terminating it`\n\t\t\t: `Remote process ${this.pid} did not exit within one second after Dispose; terminating it`\n\t}\n}\n\n/** A credential source failed; the original failure remains available. */\nexport class CredentialsError extends Schema.TaggedError<\n\tCredentialsError,\n\t{ readonly brand: unique symbol }\n>()(\"CredentialsError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\nexport class AuthenticationFailed extends Schema.TaggedError<\n\tAuthenticationFailed,\n\t{ readonly brand: unique symbol }\n>()(\"AuthenticationFailed\", {\n\treason: Schema.Literals([\"missing\", \"invalid\"]),\n\tchallenge: Schema.optionalKey(Schema.String),\n\tcause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown)),\n}) {}\n\n/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */\nexport class AuthenticatorUnavailable extends Schema.TaggedError<\n\tAuthenticatorUnavailable,\n\t{ readonly brand: unique symbol }\n>()(\"AuthenticatorUnavailable\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\n/** A remote entry could not be resolved or configured at the indicated field. */\nexport class RemoteEntryError extends Schema.TaggedError<\n\tRemoteEntryError,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteEntryError\", {\n\tentry: Schema.Option(Schema.String),\n\tdirectory: Schema.Option(Schema.String),\n\tfield: Schema.String,\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {\n\toverride get message() {\n\t\treturn `Remote entry ${Option.getOrElse(this.entry, () => \"<programmatic>\")} failed at ${this.field}`\n\t}\n}\n"],"mappings":";;AAEA,IAAa,gBAAb,cAAmC,OAAO,YAGxC,CAAC,CAAC,iBAAiB;CACpB,KAAK,OAAO,OAAO,OAAO,GAAG;CAC7B,UAAU,OAAO,YAAY,OAAO,GAAG;CACvC,UAAU,OAAO,OAAO,OAAO,GAAG;CAClC,QAAQ,OAAO;CACf,aAAa,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO;AACzD,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,wBAAwB,KAAK,SAAS,KACrE,iBAAiB,OAAO,OAAO,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,UAAU,GAAG,wBAAwB,KAAK,YAAY,SAAS;CAC3H;AACD;AACA,IAAa,iBAAb,cAAoC,OAAO,YAGzC,CAAC,CAAC,kBAAkB,EACrB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,cAAb,cAAiC,OAAO,YAGtC,CAAC,CAAC,eAAe,EAAE,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;;AAG7E,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,0BAAb,cAA6C,OAAO,YAGlD,CAAC,CAAC,2BAA2B;CAC9B,KAAK,OAAO,YAAY,OAAO,GAAG;CAClC,UAAU,OAAO,YAAY,OAAO,GAAG;AACxC,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,iEAC/B,kBAAkB,KAAK,IAAI;CAC/B;AACD;;AAGA,IAAa,mBAAb,cAAsC,OAAO,YAG3C,CAAC,CAAC,oBAAoB,EACvB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,uBAAb,cAA0C,OAAO,YAG/C,CAAC,CAAC,wBAAwB;CAC3B,QAAQ,OAAO,SAAS,CAAC,WAAW,SAAS,CAAC;CAC9C,WAAW,OAAO,YAAY,OAAO,MAAM;CAC3C,OAAO,OAAO,YAAY,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,CAAC;AACvE,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,2BAAb,cAA8C,OAAO,YAGnD,CAAC,CAAC,4BAA4B,EAC/B,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,mBAAb,cAAsC,OAAO,YAG3C,CAAC,CAAC,oBAAoB;CACvB,OAAO,OAAO,OAAO,OAAO,MAAM;CAClC,WAAW,OAAO,OAAO,OAAO,MAAM;CACtC,OAAO,OAAO;CACd,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO;AACnD,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,gBAAgB,OAAO,UAAU,KAAK,aAAa,gBAAgB,EAAE,aAAa,KAAK;CAC/F;AACD"}

package/dist/{FailureGroup-BcH0XOBi.js → FailureGroup-BgT73AaR.js}

@@ -1,9 +1,19 @@
-import { n as close, t as ReleaseInterrupted } from "./release-BY4Mlluy.js";
+import { n as close, t as ReleaseInterrupted } from "./release-DfZPuIcK.js";
+import { f as CleanupError } from "./Graft-B71CPA2Y.js";
 import { Array, Cause, Data, Deferred, Effect, Exit, Fiber, FiberSet, Ref, Schema, Scope, TxRef } from "effect";
+// packages/remote/src/internal/cleanup.ts
+/** Finalizers have no typed failure channel. Keep reasons and their annotations flat. */
+const cleanupCause = (cause) => Cause.fromReasons(Array.flatMap(cause.reasons, (reason) => {
+	const error = reason._tag === "Fail" ? reason.error : reason._tag === "Die" ? reason.defect : void 0;
+	if (Schema.is(CleanupError)(error)) return Array.map(cleanupCause(error.cause).reasons, (inner) => inner.annotate(Cause.reasonAnnotations(reason)));
+	return [reason._tag === "Fail" ? Cause.makeDieReason(reason.error).annotate(Cause.reasonAnnotations(reason)) : reason];
+}));
+/** Assembly children close before the entry reports their cleanup as its own result. */
+const children = Effect.acquireRelease(Scope.make(), (scope, exit) => close(scope, exit).pipe(Effect.catchCause((cause) => Effect.failCause(cleanupCause(cause)))));
 // packages/remote/src/internal/FailureGroup.ts
 const State = Data.taggedEnum();
 /** One owner for first failure, transaction wakeups, and interruption of sibling work. */
-const make = () => Effect.gen(function* () {
+const make = Effect.fnUntraced(function* () {
 	const fibers = yield* FiberSet.make();
 	const state = yield* TxRef.make(State.Open());
 	const failures = yield* Ref.make(Cause.empty);
@@ -37,7 +47,7 @@ const make = () => Effect.gen(function* () {
 	const failure = Effect.tx(check.pipe(Effect.andThen(Effect.txRetry)));
 	const failCause = (cause) => FiberSet.run(fibers, observe(Effect.failCause(cause))).pipe(Effect.asVoid);
 	const close$1 = TxRef.update(state, (s) => s._tag === "Open" ? State.Closed() : s).pipe(Effect.andThen(FiberSet.clear(fibers)), Effect.andThen(Ref.get(cleanup)), Effect.flatMap((cause) => cause.reasons.length > 0 ? Effect.failCause(cause) : Effect.void), Effect.uninterruptible);
-	yield* Effect.addFinalizer(() => close$1.pipe(Effect.orDie));
+	yield* Effect.addFinalizer(() => close$1.pipe(Effect.catchCause((cause) => Effect.failCause(cleanupCause(cause)))));
 	return {
 		await: failure,
 		check,
@@ -50,4 +60,4 @@ const make = () => Effect.gen(function* () {
 		close: close$1
 	};
 });
-export { make as t };
+export { children as n, cleanupCause as r, make as t };

package/dist/{Framing-zaYdOJnT.js → Framing-G9eSaeLb.js}

@@ -14,7 +14,7 @@ var EndOfStream = class extends Schema.TaggedError()("RunnerEndOfStream", {}) {
 const maxPayload = 1048576;
 const invalid = (detail) => FrameError.make({ detail });
 /** Version 2 carries only channel and length; request admission belongs to port. */
-const encode = (frame) => Effect.gen(function* () {
+const encode = Effect.fnUntraced(function* (frame) {
 	if (frame.payload.byteLength > 1048576) return yield* invalid("Runner frame exceeds the payload limit");
 	const bytes = new Uint8Array(8 + frame.payload.byteLength);
 	bytes.set([