@graftland/plugin-remote 0.3.1 → 0.3.2

package/dist/Auth.d.ts

@@ -1,4 +1,4 @@
-import { AuthenticationFailed, CredentialsError } from "./Errors.js";
+import { AuthenticationFailed, AuthenticatorUnavailable, CredentialsError } from "./Errors.js";
 import { Context, Effect, Option, Redacted, Scope } from "effect";
 export interface ClientCertificate {
   readonly cert: string;
@@ -32,7 +32,7 @@ export type CredentialsApi = { [K in Prepared["_tag"]]: {
 export type AuthenticatorApi = {
   readonly _tag: "Header";
   readonly issuer?: string;
-  readonly authenticate: (header: Option.Option<Redacted.Redacted<string>>) => Effect.Effect<string, AuthenticationFailed>;
+  readonly authenticate: (header: Option.Option<Redacted.Redacted<string>>) => Effect.Effect<string, AuthenticationFailed | AuthenticatorUnavailable>;
 } | {
   readonly _tag: "Mtls";
   readonly tls: TlsPolicy;

package/dist/Auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.d.ts","names":[],"sources":["../src/Auth.ts"],"mappings":";;iBAKiB;WACP;WACA,KAAK,SAAS;;iBAEP;WACP,KAAK;WACL,gBAAgB,OAAO;;iBAEhB;WACP,IAAI;WACJ;WACA;WACA;;YAEE;WAEA;WACA,OAAO,SAAS;;WAEd;WAA8B,OAAO;;WACrC;;YAEF,oBACV,KAAK;WACI,MAAM;WACN,MAAM,OAAO,OACrB,QAAQ;aAAqB,MAAM;MACnC,kBACA,MAAM;KAGP;YAEU;WAEA;WACA;WACA,eACR,QAAQ,OAAO,OAAO,SAAS,sBAC3B,OAAO,eAAe;;WAGlB;WACA,KAAK;WACL,eACR,MAAM,wBACF,OAAO,eAAe;;WAEhB;WAAuB;;;qBAExB,oBAAoB;;qBAGpB,sBAAsB"}
+{"version":3,"file":"Auth.d.ts","names":[],"sources":["../src/Auth.ts"],"mappings":";;iBASiB;WACP;WACA,KAAK,SAAS;;iBAEP;WACP,KAAK;WACL,gBAAgB,OAAO;;iBAEhB;WACP,IAAI;WACJ;WACA;WACA;;YAEE;WAEA;WACA,OAAO,SAAS;;WAEd;WAA8B,OAAO;;WACrC;;YAEF,oBACV,KAAK;WACI,MAAM;WACN,MAAM,OAAO,OACrB,QAAQ;aAAqB,MAAM;MACnC,kBACA,MAAM;KAGP;YAEU;WAEA;WACA;WACA,eACR,QAAQ,OAAO,OAAO,SAAS,sBAC3B,OAAO,eAEX,uBAAuB;;WAIf;WACA,KAAK;WACL,eACR,MAAM,wBACF,OAAO,eAAe;;WAEhB;WAAuB;;;qBAExB,oBAAoB;;qBAGpB,sBAAsB"}

package/dist/Auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"Auth.js","names":[],"sources":["../src/Auth.ts"],"sourcesContent":["/** Credentials and authenticated identities shared by transport plugins. */\nimport { Context } from \"effect\"\nimport type { Effect, Redacted, Option, Scope } from \"effect\"\nimport type { AuthenticationFailed, CredentialsError } from \"./Errors\"\n\nexport interface ClientCertificate {\n\treadonly cert: string\n\treadonly key: Redacted.Redacted<string>\n}\nexport interface VerifiedCertificate {\n\treadonly der: Uint8Array\n\treadonly subjectAltName: Option.Option<string>\n}\nexport interface TlsPolicy {\n\treadonly ca: ReadonlyArray<string>\n\treadonly minVersion: \"TLSv1.3\"\n\treadonly requestCert: true\n\treadonly rejectUnauthorized: true\n}\nexport type Prepared =\n\t| {\n\t\t\treadonly _tag: \"Authorization\"\n\t\t\treadonly value: Redacted.Redacted<string>\n\t  }\n\t| { readonly _tag: \"Certificate\"; readonly value: ClientCertificate }\n\t| { readonly _tag: \"None\" }\n\nexport type CredentialsApi = {\n\t[K in Prepared[\"_tag\"]]: {\n\t\treadonly kind: K\n\t\treadonly read: Effect.Effect<\n\t\t\tExtract<Prepared, { readonly _tag: K }>,\n\t\t\tCredentialsError,\n\t\t\tScope.Scope\n\t\t>\n\t}\n}[Prepared[\"_tag\"]]\n\nexport type AuthenticatorApi =\n\t| {\n\t\t\treadonly _tag: \"Header\"\n\t\t\treadonly issuer?: string\n\t\t\treadonly authenticate: (\n\t\t\t\theader: Option.Option<Redacted.Redacted<string>>,\n\t\t\t) => Effect.Effect<string, AuthenticationFailed>\n\t  }\n\t| {\n\t\t\treadonly _tag: \"Mtls\"\n\t\t\treadonly tls: TlsPolicy\n\t\t\treadonly authenticate: (\n\t\t\t\tpeer: VerifiedCertificate,\n\t\t\t) => Effect.Effect<string, AuthenticationFailed>\n\t  }\n\t| { readonly _tag: \"None\"; readonly identity: string }\n\nexport class Credentials extends Context.Service<Credentials, CredentialsApi>()(\n\t\"@graftland/plugin-remote/Auth/Credentials\",\n) {}\nexport class Authenticator extends Context.Service<\n\tAuthenticator,\n\tAuthenticatorApi\n>()(\"@graftland/plugin-remote/Auth/Authenticator\") {}\n"],"mappings":";;;AAuDA,IAAa,cAAb,cAAiC,QAAQ,QAAqC,CAAC,CAC9E,2CACD,CAAC,CAAC,CAAC;AACH,IAAa,gBAAb,cAAmC,QAAQ,QAGzC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC"}
+{"version":3,"file":"Auth.js","names":[],"sources":["../src/Auth.ts"],"sourcesContent":["/** Credentials and authenticated identities shared by transport plugins. */\nimport { Context } from \"effect\"\nimport type { Effect, Redacted, Option, Scope } from \"effect\"\nimport type {\n\tAuthenticationFailed,\n\tAuthenticatorUnavailable,\n\tCredentialsError,\n} from \"./Errors\"\n\nexport interface ClientCertificate {\n\treadonly cert: string\n\treadonly key: Redacted.Redacted<string>\n}\nexport interface VerifiedCertificate {\n\treadonly der: Uint8Array\n\treadonly subjectAltName: Option.Option<string>\n}\nexport interface TlsPolicy {\n\treadonly ca: ReadonlyArray<string>\n\treadonly minVersion: \"TLSv1.3\"\n\treadonly requestCert: true\n\treadonly rejectUnauthorized: true\n}\nexport type Prepared =\n\t| {\n\t\t\treadonly _tag: \"Authorization\"\n\t\t\treadonly value: Redacted.Redacted<string>\n\t  }\n\t| { readonly _tag: \"Certificate\"; readonly value: ClientCertificate }\n\t| { readonly _tag: \"None\" }\n\nexport type CredentialsApi = {\n\t[K in Prepared[\"_tag\"]]: {\n\t\treadonly kind: K\n\t\treadonly read: Effect.Effect<\n\t\t\tExtract<Prepared, { readonly _tag: K }>,\n\t\t\tCredentialsError,\n\t\t\tScope.Scope\n\t\t>\n\t}\n}[Prepared[\"_tag\"]]\n\nexport type AuthenticatorApi =\n\t| {\n\t\t\treadonly _tag: \"Header\"\n\t\t\treadonly issuer?: string\n\t\t\treadonly authenticate: (\n\t\t\t\theader: Option.Option<Redacted.Redacted<string>>,\n\t\t\t) => Effect.Effect<\n\t\t\t\tstring,\n\t\t\t\tAuthenticationFailed | AuthenticatorUnavailable\n\t\t\t>\n\t  }\n\t| {\n\t\t\treadonly _tag: \"Mtls\"\n\t\t\treadonly tls: TlsPolicy\n\t\t\treadonly authenticate: (\n\t\t\t\tpeer: VerifiedCertificate,\n\t\t\t) => Effect.Effect<string, AuthenticationFailed>\n\t  }\n\t| { readonly _tag: \"None\"; readonly identity: string }\n\nexport class Credentials extends Context.Service<Credentials, CredentialsApi>()(\n\t\"@graftland/plugin-remote/Auth/Credentials\",\n) {}\nexport class Authenticator extends Context.Service<\n\tAuthenticator,\n\tAuthenticatorApi\n>()(\"@graftland/plugin-remote/Auth/Authenticator\") {}\n"],"mappings":";;;AA8DA,IAAa,cAAb,cAAiC,QAAQ,QAAqC,CAAC,CAC9E,2CACD,CAAC,CAAC,CAAC;AACH,IAAa,gBAAb,cAAmC,QAAQ,QAGzC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC"}

package/dist/{Bootstrap-Dr6sX7el.js → Bootstrap-H9gDsgsC.js}

@@ -1,5 +1,5 @@
-import { D as Identity } from "./Peer-BT7eAGmh.js";
-import { r as Limits } from "./port-DSVUY8Bq.js";
+import { D as Identity } from "./Peer-DXeVrGBh.js";
+import { r as Limits } from "./port--3x2zJ4D.js";
 import { Schema } from "effect";
 // packages/remote/src/internal/runner/Bootstrap.ts
 const Bootstrap = Schema.Struct({

package/dist/{Contract-DL2mHvaT.js → Contract-DsJtisvL.js}

@@ -1,6 +1,6 @@
 import { n as __exportAll } from "./rolldown-runtime-DYf_mQCB.js";
-import { t as Priority } from "./port-DSVUY8Bq.js";
-import { a as provide } from "./Graft-CVyueNOf.js";
+import { t as Priority } from "./port--3x2zJ4D.js";
+import { a as provide } from "./Graft-B71CPA2Y.js";
 import { Array, Context, Effect, Predicate, Record, Schema } from "effect";
 import { Rpc, RpcClient, RpcGroup, RpcServer } from "effect/rpc";
 // packages/remote/src/internal/control.ts

package/dist/Contract.js

@@ -1 +1 @@
-export { n as UndeclaredFailure, r as fromModule, i as isContract, a as make, s as service } from "./Contract-DL2mHvaT.js";
+export { n as UndeclaredFailure, r as fromModule, i as isContract, a as make, s as service } from "./Contract-DsJtisvL.js";

package/dist/{Errors-BMKmu5Y7.js → Errors-DYhsGZcZ.js}

@@ -42,6 +42,8 @@ var AuthenticationFailed = class extends Schema.TaggedError()("AuthenticationFai
 	challenge: Schema.optionalKey(Schema.String),
 	cause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown))
 }) {};
+/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */
+var AuthenticatorUnavailable = class extends Schema.TaggedError()("AuthenticatorUnavailable", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {};
 /** A remote entry could not be resolved or configured at the indicated field. */
 var RemoteEntryError = class extends Schema.TaggedError()("RemoteEntryError", {
 	entry: Schema.Option(Schema.String),
@@ -53,4 +55,4 @@ var RemoteEntryError = class extends Schema.TaggedError()("RemoteEntryError", {
 		return `Remote entry ${Option.getOrElse(this.entry, () => "<programmatic>")} failed at ${this.field}`;
 	}
 };
-export { ProcessExited as a, RemoteWithdrawn as c, MissingInstance as i, TransportError as l, CredentialsError as n, RemoteEntryError as o, LocalTerminationTimeout as r, RemoteError as s, AuthenticationFailed as t };
+export { MissingInstance as a, RemoteError as c, LocalTerminationTimeout as i, RemoteWithdrawn as l, AuthenticatorUnavailable as n, ProcessExited as o, CredentialsError as r, RemoteEntryError as s, AuthenticationFailed as t, TransportError as u };

package/dist/Errors.d.ts

@@ -63,6 +63,13 @@ declare const AuthenticationFailed_base: Schema.Class<AuthenticationFailed, Sche
   readonly brand: unique symbol;
 }>;
 export declare class AuthenticationFailed extends AuthenticationFailed_base {}
+declare const AuthenticatorUnavailable_base: Schema.Class<AuthenticatorUnavailable, Schema.TaggedStruct<"AuthenticatorUnavailable", {
+  readonly cause: Schema.Cause<Schema.Unknown, Schema.Unknown>;
+}>, import("effect/Cause").YieldableError & {
+  readonly brand: unique symbol;
+}>;
+/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */
+export declare class AuthenticatorUnavailable extends AuthenticatorUnavailable_base {}
 declare const RemoteEntryError_base: Schema.Class<RemoteEntryError, Schema.TaggedStruct<"RemoteEntryError", {
   readonly entry: Schema.Option<Schema.String>;
   readonly directory: Schema.Option<Schema.String>;

package/dist/Errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Errors.d.ts","names":[],"sources":["../src/Errors.ts"],"mappings":";;;;;;;;WAImB;;qBAFN,sBAAsB;MAUrB;;;;;WAQK;;qBAFN,uBAAuB;;WAUjB;;;qBAFN,wBAAwB;MAIvB;;;;;WAQK;;;qBAFN,oBAAoB;;WAQd;;;qBAFN,wBAAwB;MAIvB;;;;;;WAQK;;;qBAFN,gCAAgC;MAO/B;;;;;WAUK;;;qBAFN,yBAAyB;;;;;;WASnB;;qBAFN,6BAA6B;;;;;;;WAYvB;;;qBAFN,yBAAyB;MASxB"}
+{"version":3,"file":"Errors.d.ts","names":[],"sources":["../src/Errors.ts"],"mappings":";;;;;;;;WAImB;;qBAFN,sBAAsB;MAUrB;;;;;WAQK;;qBAFN,uBAAuB;;WAUjB;;;qBAFN,wBAAwB;MAIvB;;;;;WAQK;;;qBAFN,oBAAoB;;WAQd;;;qBAFN,wBAAwB;MAIvB;;;;;;WAQK;;;qBAFN,gCAAgC;MAO/B;;;;;WAUK;;;qBAFN,yBAAyB;;;;;;WASnB;;qBAFN,6BAA6B;;;;WAYvB;;;qBAFN,iCAAiC;;;;;;;WAU3B;;;qBAFN,yBAAyB;MASxB"}

package/dist/Errors.js

@@ -42,6 +42,8 @@ var AuthenticationFailed = class extends Schema.TaggedError()("AuthenticationFai
 	challenge: Schema.optionalKey(Schema.String),
 	cause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown))
 }) {};
+/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */
+var AuthenticatorUnavailable = class extends Schema.TaggedError()("AuthenticatorUnavailable", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {};
 /** A remote entry could not be resolved or configured at the indicated field. */
 var RemoteEntryError = class extends Schema.TaggedError()("RemoteEntryError", {
 	entry: Schema.Option(Schema.String),
@@ -53,6 +55,6 @@ var RemoteEntryError = class extends Schema.TaggedError()("RemoteEntryError", {
 		return `Remote entry ${Option.getOrElse(this.entry, () => "<programmatic>")} failed at ${this.field}`;
 	}
 };
-export { AuthenticationFailed, CredentialsError, LocalTerminationTimeout, MissingInstance, ProcessExited, RemoteEntryError, RemoteError, RemoteWithdrawn, TransportError };
+export { AuthenticationFailed, AuthenticatorUnavailable, CredentialsError, LocalTerminationTimeout, MissingInstance, ProcessExited, RemoteEntryError, RemoteError, RemoteWithdrawn, TransportError };
 
 //# sourceMappingURL=Errors.js.map

package/dist/Errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"Errors.js","names":[],"sources":["../src/Errors.ts"],"sourcesContent":["import { Option, Schema } from \"effect\"\n\nexport class ProcessExited extends Schema.TaggedError<\n\tProcessExited,\n\t{ readonly brand: unique symbol }\n>()(\"ProcessExited\", {\n\tpid: Schema.Option(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n\texitCode: Schema.NullOr(Schema.Int),\n\tstderr: Schema.String,\n\tstatusCause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} exited unexpectedly (${this.exitCode})`\n\t\t\t: `Remote process${Option.isSome(this.pid) ? ` ${this.pid.value}` : \"\"} exited unexpectedly (${this.exitCode ?? \"signal\"})`\n\t}\n}\nexport class TransportError extends Schema.TaggedError<\n\tTransportError,\n\t{ readonly brand: unique symbol }\n>()(\"TransportError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\n/** The remote export lease was withdrawn; host consumers must drain before Dispose. */\nexport class RemoteWithdrawn extends Schema.TaggedError<\n\tRemoteWithdrawn,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteWithdrawn\", {}) {\n\toverride get message() {\n\t\treturn \"Remote services were withdrawn\"\n\t}\n}\n\n/** Infrastructure failure at the plugin boundary; the complete underlying cause remains inspectable. */\nexport class RemoteError extends Schema.TaggedError<\n\tRemoteError,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteError\", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {}\n\n/** A network execution needs a stable logical identity across host restarts. */\nexport class MissingInstance extends Schema.TaggedError<\n\tMissingInstance,\n\t{ readonly brand: unique symbol }\n>()(\"MissingInstance\", {}) {\n\toverride get message() {\n\t\treturn \"A runner connection requires an instance or a loader entry id; set connect.instance when loading without Loader.\"\n\t}\n}\n\n/** Dispose completed, but Node still owns live handles; process-scope cleanup must terminate it. */\nexport class LocalTerminationTimeout extends Schema.TaggedError<\n\tLocalTerminationTimeout,\n\t{ readonly brand: unique symbol }\n>()(\"LocalTerminationTimeout\", {\n\tpid: Schema.optionalKey(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} did not exit within one second after Dispose; terminating it`\n\t\t\t: `Remote process ${this.pid} did not exit within one second after Dispose; terminating it`\n\t}\n}\n\n/** A credential source failed; the original failure remains available. */\nexport class CredentialsError extends Schema.TaggedError<\n\tCredentialsError,\n\t{ readonly brand: unique symbol }\n>()(\"CredentialsError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\nexport class AuthenticationFailed extends Schema.TaggedError<\n\tAuthenticationFailed,\n\t{ readonly brand: unique symbol }\n>()(\"AuthenticationFailed\", {\n\treason: Schema.Literals([\"missing\", \"invalid\"]),\n\tchallenge: Schema.optionalKey(Schema.String),\n\tcause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown)),\n}) {}\n\n/** A remote entry could not be resolved or configured at the indicated field. */\nexport class RemoteEntryError extends Schema.TaggedError<\n\tRemoteEntryError,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteEntryError\", {\n\tentry: Schema.Option(Schema.String),\n\tdirectory: Schema.Option(Schema.String),\n\tfield: Schema.String,\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {\n\toverride get message() {\n\t\treturn `Remote entry ${Option.getOrElse(this.entry, () => \"<programmatic>\")} failed at ${this.field}`\n\t}\n}\n"],"mappings":";;AAEA,IAAa,gBAAb,cAAmC,OAAO,YAGxC,CAAC,CAAC,iBAAiB;CACpB,KAAK,OAAO,OAAO,OAAO,GAAG;CAC7B,UAAU,OAAO,YAAY,OAAO,GAAG;CACvC,UAAU,OAAO,OAAO,OAAO,GAAG;CAClC,QAAQ,OAAO;CACf,aAAa,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO;AACzD,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,wBAAwB,KAAK,SAAS,KACrE,iBAAiB,OAAO,OAAO,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,UAAU,GAAG,wBAAwB,KAAK,YAAY,SAAS;CAC3H;AACD;AACA,IAAa,iBAAb,cAAoC,OAAO,YAGzC,CAAC,CAAC,kBAAkB,EACrB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,cAAb,cAAiC,OAAO,YAGtC,CAAC,CAAC,eAAe,EAAE,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;;AAG7E,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,0BAAb,cAA6C,OAAO,YAGlD,CAAC,CAAC,2BAA2B;CAC9B,KAAK,OAAO,YAAY,OAAO,GAAG;CAClC,UAAU,OAAO,YAAY,OAAO,GAAG;AACxC,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,iEAC/B,kBAAkB,KAAK,IAAI;CAC/B;AACD;;AAGA,IAAa,mBAAb,cAAsC,OAAO,YAG3C,CAAC,CAAC,oBAAoB,EACvB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,uBAAb,cAA0C,OAAO,YAG/C,CAAC,CAAC,wBAAwB;CAC3B,QAAQ,OAAO,SAAS,CAAC,WAAW,SAAS,CAAC;CAC9C,WAAW,OAAO,YAAY,OAAO,MAAM;CAC3C,OAAO,OAAO,YAAY,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,CAAC;AACvE,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,mBAAb,cAAsC,OAAO,YAG3C,CAAC,CAAC,oBAAoB;CACvB,OAAO,OAAO,OAAO,OAAO,MAAM;CAClC,WAAW,OAAO,OAAO,OAAO,MAAM;CACtC,OAAO,OAAO;CACd,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO;AACnD,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,gBAAgB,OAAO,UAAU,KAAK,aAAa,gBAAgB,EAAE,aAAa,KAAK;CAC/F;AACD"}
+{"version":3,"file":"Errors.js","names":[],"sources":["../src/Errors.ts"],"sourcesContent":["import { Option, Schema } from \"effect\"\n\nexport class ProcessExited extends Schema.TaggedError<\n\tProcessExited,\n\t{ readonly brand: unique symbol }\n>()(\"ProcessExited\", {\n\tpid: Schema.Option(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n\texitCode: Schema.NullOr(Schema.Int),\n\tstderr: Schema.String,\n\tstatusCause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} exited unexpectedly (${this.exitCode})`\n\t\t\t: `Remote process${Option.isSome(this.pid) ? ` ${this.pid.value}` : \"\"} exited unexpectedly (${this.exitCode ?? \"signal\"})`\n\t}\n}\nexport class TransportError extends Schema.TaggedError<\n\tTransportError,\n\t{ readonly brand: unique symbol }\n>()(\"TransportError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\n/** The remote export lease was withdrawn; host consumers must drain before Dispose. */\nexport class RemoteWithdrawn extends Schema.TaggedError<\n\tRemoteWithdrawn,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteWithdrawn\", {}) {\n\toverride get message() {\n\t\treturn \"Remote services were withdrawn\"\n\t}\n}\n\n/** Infrastructure failure at the plugin boundary; the complete underlying cause remains inspectable. */\nexport class RemoteError extends Schema.TaggedError<\n\tRemoteError,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteError\", { cause: Schema.Cause(Schema.Unknown, Schema.Unknown) }) {}\n\n/** A network execution needs a stable logical identity across host restarts. */\nexport class MissingInstance extends Schema.TaggedError<\n\tMissingInstance,\n\t{ readonly brand: unique symbol }\n>()(\"MissingInstance\", {}) {\n\toverride get message() {\n\t\treturn \"A runner connection requires an instance or a loader entry id; set connect.instance when loading without Loader.\"\n\t}\n}\n\n/** Dispose completed, but Node still owns live handles; process-scope cleanup must terminate it. */\nexport class LocalTerminationTimeout extends Schema.TaggedError<\n\tLocalTerminationTimeout,\n\t{ readonly brand: unique symbol }\n>()(\"LocalTerminationTimeout\", {\n\tpid: Schema.optionalKey(Schema.Int),\n\tthreadId: Schema.optionalKey(Schema.Int),\n}) {\n\toverride get message() {\n\t\treturn this.threadId !== undefined\n\t\t\t? `Remote worker ${this.threadId} did not exit within one second after Dispose; terminating it`\n\t\t\t: `Remote process ${this.pid} did not exit within one second after Dispose; terminating it`\n\t}\n}\n\n/** A credential source failed; the original failure remains available. */\nexport class CredentialsError extends Schema.TaggedError<\n\tCredentialsError,\n\t{ readonly brand: unique symbol }\n>()(\"CredentialsError\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\nexport class AuthenticationFailed extends Schema.TaggedError<\n\tAuthenticationFailed,\n\t{ readonly brand: unique symbol }\n>()(\"AuthenticationFailed\", {\n\treason: Schema.Literals([\"missing\", \"invalid\"]),\n\tchallenge: Schema.optionalKey(Schema.String),\n\tcause: Schema.optionalKey(Schema.Cause(Schema.Unknown, Schema.Unknown)),\n}) {}\n\n/** The authenticator could not reach what it needs to decide, such as its key set; the credential may still be valid. */\nexport class AuthenticatorUnavailable extends Schema.TaggedError<\n\tAuthenticatorUnavailable,\n\t{ readonly brand: unique symbol }\n>()(\"AuthenticatorUnavailable\", {\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {}\n\n/** A remote entry could not be resolved or configured at the indicated field. */\nexport class RemoteEntryError extends Schema.TaggedError<\n\tRemoteEntryError,\n\t{ readonly brand: unique symbol }\n>()(\"RemoteEntryError\", {\n\tentry: Schema.Option(Schema.String),\n\tdirectory: Schema.Option(Schema.String),\n\tfield: Schema.String,\n\tcause: Schema.Cause(Schema.Unknown, Schema.Unknown),\n}) {\n\toverride get message() {\n\t\treturn `Remote entry ${Option.getOrElse(this.entry, () => \"<programmatic>\")} failed at ${this.field}`\n\t}\n}\n"],"mappings":";;AAEA,IAAa,gBAAb,cAAmC,OAAO,YAGxC,CAAC,CAAC,iBAAiB;CACpB,KAAK,OAAO,OAAO,OAAO,GAAG;CAC7B,UAAU,OAAO,YAAY,OAAO,GAAG;CACvC,UAAU,OAAO,OAAO,OAAO,GAAG;CAClC,QAAQ,OAAO;CACf,aAAa,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO;AACzD,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,wBAAwB,KAAK,SAAS,KACrE,iBAAiB,OAAO,OAAO,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,UAAU,GAAG,wBAAwB,KAAK,YAAY,SAAS;CAC3H;AACD;AACA,IAAa,iBAAb,cAAoC,OAAO,YAGzC,CAAC,CAAC,kBAAkB,EACrB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,cAAb,cAAiC,OAAO,YAGtC,CAAC,CAAC,eAAe,EAAE,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;;AAG7E,IAAa,kBAAb,cAAqC,OAAO,YAG1C,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;CAC1B,IAAa,UAAU;EACtB,OAAO;CACR;AACD;;AAGA,IAAa,0BAAb,cAA6C,OAAO,YAGlD,CAAC,CAAC,2BAA2B;CAC9B,KAAK,OAAO,YAAY,OAAO,GAAG;CAClC,UAAU,OAAO,YAAY,OAAO,GAAG;AACxC,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,KAAK,aAAa,KAAA,IACtB,iBAAiB,KAAK,SAAS,iEAC/B,kBAAkB,KAAK,IAAI;CAC/B;AACD;;AAGA,IAAa,mBAAb,cAAsC,OAAO,YAG3C,CAAC,CAAC,oBAAoB,EACvB,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,uBAAb,cAA0C,OAAO,YAG/C,CAAC,CAAC,wBAAwB;CAC3B,QAAQ,OAAO,SAAS,CAAC,WAAW,SAAS,CAAC;CAC9C,WAAW,OAAO,YAAY,OAAO,MAAM;CAC3C,OAAO,OAAO,YAAY,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,CAAC;AACvE,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,2BAAb,cAA8C,OAAO,YAGnD,CAAC,CAAC,4BAA4B,EAC/B,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO,EACnD,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,mBAAb,cAAsC,OAAO,YAG3C,CAAC,CAAC,oBAAoB;CACvB,OAAO,OAAO,OAAO,OAAO,MAAM;CAClC,WAAW,OAAO,OAAO,OAAO,MAAM;CACtC,OAAO,OAAO;CACd,OAAO,OAAO,MAAM,OAAO,SAAS,OAAO,OAAO;AACnD,CAAC,CAAC,CAAC;CACF,IAAa,UAAU;EACtB,OAAO,gBAAgB,OAAO,UAAU,KAAK,aAAa,gBAAgB,EAAE,aAAa,KAAK;CAC/F;AACD"}

package/dist/{FailureGroup-BcH0XOBi.js → FailureGroup-BgT73AaR.js}

@@ -1,9 +1,19 @@
-import { n as close, t as ReleaseInterrupted } from "./release-BY4Mlluy.js";
+import { n as close, t as ReleaseInterrupted } from "./release-DfZPuIcK.js";
+import { f as CleanupError } from "./Graft-B71CPA2Y.js";
 import { Array, Cause, Data, Deferred, Effect, Exit, Fiber, FiberSet, Ref, Schema, Scope, TxRef } from "effect";
+// packages/remote/src/internal/cleanup.ts
+/** Finalizers have no typed failure channel. Keep reasons and their annotations flat. */
+const cleanupCause = (cause) => Cause.fromReasons(Array.flatMap(cause.reasons, (reason) => {
+	const error = reason._tag === "Fail" ? reason.error : reason._tag === "Die" ? reason.defect : void 0;
+	if (Schema.is(CleanupError)(error)) return Array.map(cleanupCause(error.cause).reasons, (inner) => inner.annotate(Cause.reasonAnnotations(reason)));
+	return [reason._tag === "Fail" ? Cause.makeDieReason(reason.error).annotate(Cause.reasonAnnotations(reason)) : reason];
+}));
+/** Assembly children close before the entry reports their cleanup as its own result. */
+const children = Effect.acquireRelease(Scope.make(), (scope, exit) => close(scope, exit).pipe(Effect.catchCause((cause) => Effect.failCause(cleanupCause(cause)))));
 // packages/remote/src/internal/FailureGroup.ts
 const State = Data.taggedEnum();
 /** One owner for first failure, transaction wakeups, and interruption of sibling work. */
-const make = () => Effect.gen(function* () {
+const make = Effect.fnUntraced(function* () {
 	const fibers = yield* FiberSet.make();
 	const state = yield* TxRef.make(State.Open());
 	const failures = yield* Ref.make(Cause.empty);
@@ -37,7 +47,7 @@ const make = () => Effect.gen(function* () {
 	const failure = Effect.tx(check.pipe(Effect.andThen(Effect.txRetry)));
 	const failCause = (cause) => FiberSet.run(fibers, observe(Effect.failCause(cause))).pipe(Effect.asVoid);
 	const close$1 = TxRef.update(state, (s) => s._tag === "Open" ? State.Closed() : s).pipe(Effect.andThen(FiberSet.clear(fibers)), Effect.andThen(Ref.get(cleanup)), Effect.flatMap((cause) => cause.reasons.length > 0 ? Effect.failCause(cause) : Effect.void), Effect.uninterruptible);
-	yield* Effect.addFinalizer(() => close$1.pipe(Effect.orDie));
+	yield* Effect.addFinalizer(() => close$1.pipe(Effect.catchCause((cause) => Effect.failCause(cleanupCause(cause)))));
 	return {
 		await: failure,
 		check,
@@ -50,4 +60,4 @@ const make = () => Effect.gen(function* () {
 		close: close$1
 	};
 });
-export { make as t };
+export { children as n, cleanupCause as r, make as t };

package/dist/{Framing-zaYdOJnT.js → Framing-G9eSaeLb.js}

@@ -14,7 +14,7 @@ var EndOfStream = class extends Schema.TaggedError()("RunnerEndOfStream", {}) {
 const maxPayload = 1048576;
 const invalid = (detail) => FrameError.make({ detail });
 /** Version 2 carries only channel and length; request admission belongs to port. */
-const encode = (frame) => Effect.gen(function* () {
+const encode = Effect.fnUntraced(function* (frame) {
 	if (frame.payload.byteLength > 1048576) return yield* invalid("Runner frame exceeds the payload limit");
 	const bytes = new Uint8Array(8 + frame.payload.byteLength);
 	bytes.set([

package/dist/{Graft-CVyueNOf.js → Graft-B71CPA2Y.js}

@@ -189,8 +189,10 @@ const ownedScope = Effect.fnUntraced(function* (parent, afterClose = Effect.void
 	const started = yield* Deferred.make();
 	const ready = yield* Deferred.make();
 	const completed = yield* Deferred.make();
-	const start = (exit) => Effect.gen(function* () {
-		if (!(yield* Deferred.succeed(started, void 0))) return;
+	const observer = yield* Ref.make("waiting");
+	const reportUnobserved = (result) => Exit.isFailure(result) ? Effect.logError("Fork cleanup failed after its dispose caller was interrupted", result.cause) : Effect.void;
+	const start = Effect.fnUntraced(function* (exit) {
+		if (!(yield* Deferred.succeed(started, void 0))) return false;
 		yield* Effect.gen(function* () {
 			const result = yield* Effect.exit(Effect.gen(function* () {
 				const closed = yield* Effect.exit(close(scope, exit));
@@ -201,13 +203,15 @@ const ownedScope = Effect.fnUntraced(function* (parent, afterClose = Effect.void
 			yield* Deferred.done(ready, result);
 			yield* close(link, exit).pipe(Effect.catchCause((cause) => Effect.logError("Closing fork ownership failed", cause)));
 			yield* Deferred.done(completed, result);
+			if (yield* Ref.modify(observer, (state) => [state === "abandoned", "settled"])) yield* reportUnobserved(result);
 		}).pipe(Effect.forkIn(workers, {
 			uninterruptible: true,
 			startImmediately: false
 		}));
+		return true;
 	});
-	const close$1 = (exit) => Effect.uninterruptibleMask((restore) => start(exit).pipe(Effect.andThen(restore(Deferred.await(completed)))));
-	yield* Scope.addFinalizerExit(link, (exit) => start(exit).pipe(Effect.andThen(Deferred.await(ready)), Effect.orDie, Effect.ensuring(close(workers, exit))));
+	const close$1 = (exit) => Effect.uninterruptibleMask((restore) => start(exit).pipe(Effect.flatMap((owner) => owner ? restore(Deferred.await(completed)).pipe(Effect.onInterrupt(() => Ref.modify(observer, (state) => state === "waiting" ? [false, "abandoned"] : [true, state]).pipe(Effect.flatMap((settled) => settled ? Effect.flatMap(Effect.exit(Deferred.await(completed)), reportUnobserved) : Effect.void)))) : restore(Deferred.await(completed)))));
+	yield* Scope.addFinalizerExit(link, (exit) => start(exit).pipe(Effect.flatMap((owner) => owner ? Effect.orDie(Deferred.await(ready)) : Effect.asVoid(Effect.exit(Deferred.await(ready)))), Effect.ensuring(close(workers, exit))));
 	return {
 		scope,
 		close: close$1
@@ -238,7 +242,7 @@ const make$2 = Effect.fnUntraced(function* (parent, spec) {
 	yield* adjustLoading(status, 1);
 	return status;
 });
-const setState = (runtime, id, status, state, spec) => Effect.tx(Effect.gen(function* () {
+const setState = Effect.fnUntraced(function* (runtime, id, status, state, spec) {
 	const current = yield* TxSubscriptionRef.get(status.snapshot);
 	if (current.disposed) return;
 	const next = {
@@ -254,7 +258,7 @@ const setState = (runtime, id, status, state, spec) => Effect.tx(Effect.gen(func
 		...entry,
 		...next
 	})));
-}));
+}, Effect.tx);
 /** Called inside the removal transaction, after supervisor cleanup. */
 const dispose = Effect.fnUntraced(function* (runtime, id, status) {
 	const current = yield* TxSubscriptionRef.get(status.snapshot);
@@ -270,9 +274,9 @@ const dispose = Effect.fnUntraced(function* (runtime, id, status) {
 	yield* TxSubscriptionRef.update(runtime.forks, HashMap.remove(id));
 });
 /** Only the subtree's own counter belongs to this waiting transaction's read set. */
-const stable = (status) => Effect.tx(Effect.gen(function* () {
+const stable = Effect.fnUntraced(function* (status) {
 	if ((yield* TxRef.get(status.loading)) > 0) return yield* Effect.txRetry;
-}));
+}, Effect.tx);
 // packages/core/src/internal/context.ts
 /** Strip provision-sourced values before child intercepts read or transform the fallback. */
 const inheritContext = (parent, inherited) => Context.makeUnsafe(new Map([...Array.filter(parent.fallback.mapUnsafe, ([key]) => HashSet.has(parent.provisionKeys, key)), ...Array.filter(inherited.mapUnsafe, ([key]) => !HashSet.has(parent.provisionKeys, key))]));
@@ -325,7 +329,7 @@ const Contract = "~@graftland/graft/Plugin/Contract";
 */
 var Optional = class extends Data.TaggedClass("Optional") {};
 /** Starts an activation-owned worker. Its unhandled errors belong to the plugin, not the launch operation. */
-const fork = (effect) => Effect.gen(function* () {
+const fork = Effect.fnUntraced(function* (effect) {
 	const { activation } = yield* RuntimeContext;
 	if (Option.isNone(activation.tasks)) return yield* Effect.die(/* @__PURE__ */ new Error("Plugin.fork requires a plugin activation"));
 	return yield* run(activation.tasks.value, effect);
@@ -415,12 +419,12 @@ const resolve = Effect.fnUntraced(function* (spec, prepared) {
 		unprovided: Array.map(unresolved, (lookup) => lookup.qualified)
 	};
 });
-const waitDrained = (published) => Effect.tx(Effect.gen(function* () {
+const waitDrained = Effect.fnUntraced(function* (published) {
 	for (const provision of published) {
 		const consumers = yield* TxRef.get(provision.consumers);
 		if (HashSet.size(consumers) > 0) return yield* Effect.txRetry;
 	}
-}));
+}, Effect.tx);
 /**
 * Withdraws what an activation published, closes it to further publishing,
 * and waits until no consumer holds a lease on any of it.
@@ -489,12 +493,12 @@ const supervise = Effect.fnUntraced(function* (runtime, id, specRef, processing,
 	});
 	const resolveCurrent = (prepared) => Effect.flatMap(TxRef.get(specRef), (spec) => resolve(spec, prepared));
 	/** Resolves to the new spec if the spec changed, or `None` if a dependency changed. */
-	const waitChange = (resolution) => Effect.tx(Effect.gen(function* () {
+	const waitChange = Effect.fnUntraced(function* (resolution) {
 		const current = yield* TxRef.get(specRef);
 		if (current !== resolution.spec) return Option.some(current);
 		if (resolution.provisions.length === 0 && resolution.unprovided.length === 0) return yield* Effect.txRetry;
 		return (yield* resolutionChanged(resolution)) ? Option.none() : yield* Effect.txRetry;
-	}));
+	}, Effect.tx);
 	const acquire = Effect.gen(function* () {
 		const resolution = yield* Effect.tx(Effect.gen(function* () {
 			const prepared = yield* prepare;
@@ -605,7 +609,7 @@ const supervise = Effect.fnUntraced(function* (runtime, id, specRef, processing,
 		}
 	});
 	/** Every phase finishes before the immutable result is handed to state or disposal. */
-	const teardown = (running, exit) => Effect.gen(function* () {
+	const teardown = Effect.fnUntraced(function* (running, exit) {
 		const closer = yield* Effect.withFiber((self) => Effect.succeed(self.id));
 		yield* Fiber.interrupt(running.fiber);
 		const stopped = yield* Fiber.await(running.fiber);
@@ -631,7 +635,7 @@ const supervise = Effect.fnUntraced(function* (runtime, id, specRef, processing,
 		if (Exit.isFailure(closed)) yield* Effect.logError("Releasing the plugin's resources failed", closed.cause);
 		yield* reportFailure(`Plugin "${running.resolution.spec.plugin.name}" failed`, stopped);
 		return cause.reasons.length === 0 ? Exit.void : Exit.failCause(cause);
-	}).pipe(Effect.annotateLogs({
+	}, (effect, running) => Effect.annotateLogs(effect, {
 		"graft.fork": id,
 		"graft.plugin": running.resolution.spec.plugin.name
 	}));
@@ -842,7 +846,7 @@ const isolation = (id) => (entry) => "key" in entry ? [entry.key, `#${id}`] : [e
 * Changes a fork's spec and waits until its supervisor has acted on it:
 * updated in place, or begun restarting. A later change also counts.
 */
-const accept = (status, spec, f) => Effect.gen(function* () {
+const accept = Effect.fnUntraced(function* (status, spec, f) {
 	const next = yield* TxRef.modify(spec, (current) => {
 		const next = f(current);
 		return [next, next];

package/dist/{Packages-JNL34JpS.js → Packages-AgoCGotL.js}

@@ -1,4 +1,4 @@
-import { c as PackageError } from "./Peer-BT7eAGmh.js";
+import { c as PackageError } from "./Peer-DXeVrGBh.js";
 import { Array, Cause, Context, Duration, Effect, FileSystem, Order, Path, Schema, Stream, String } from "effect";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
@@ -20,7 +20,7 @@ const digest = Effect.fnUntraced(function* (directory) {
 	const fs = yield* FileSystem.FileSystem;
 	const path = yield* Path.Path;
 	const hash = yield* Effect.sync(() => createHash("sha256").update("graft-package-sha256-v1\0"));
-	const visit = (relative) => Effect.gen(function* () {
+	const visit = Effect.fnUntraced(function* (relative) {
 		const filename = path.join(directory, relative);
 		const info = yield* fs.stat(filename);
 		if (info.type !== "File" && info.type !== "Directory") return yield* PackageError.make({ detail: `Unsupported package entry: ${relative}` });
@@ -83,29 +83,26 @@ const resolve = Effect.fnUntraced(function* (root, specifier, includeDigest = fa
 		cause: Cause.fail(error)
 	}))
 }));
-const resolveEntry = (installation, specifier) => Effect.gen(function* () {
-	const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
-	return yield* Effect.scoped(Effect.gen(function* () {
-		const child = yield* spawner.spawn(ChildProcess.make(process.execPath, [
-			"--input-type=module",
-			"--eval",
-			"process.stdout.write(import.meta.resolve(process.argv[1]))",
-			"--",
-			specifier
-		], {
-			cwd: installation,
-			env: {},
-			stdin: "ignore",
-			stdout: "pipe",
-			stderr: "pipe"
-		}));
-		const [code, stdout, stderr] = yield* Effect.all([
-			child.exitCode,
-			child.stdout.pipe(Stream.decodeText(), Stream.mkString),
-			child.stderr.pipe(Stream.decodeText(), Stream.mkString)
-		], { concurrency: "unbounded" });
-		if (code !== 0) return yield* PackageError.make({ detail: `Package resolution failed: ${stderr}` });
-		return stdout;
+const resolveEntry = Effect.fnUntraced(function* (installation, specifier) {
+	const child = yield* (yield* ChildProcessSpawner.ChildProcessSpawner).spawn(ChildProcess.make(process.execPath, [
+		"--input-type=module",
+		"--eval",
+		"process.stdout.write(import.meta.resolve(process.argv[1]))",
+		"--",
+		specifier
+	], {
+		cwd: installation,
+		env: {},
+		stdin: "ignore",
+		stdout: "pipe",
+		stderr: "pipe"
 	}));
-});
+	const [code, stdout, stderr] = yield* Effect.all([
+		child.exitCode,
+		child.stdout.pipe(Stream.decodeText(), Stream.mkString),
+		child.stderr.pipe(Stream.decodeText(), Stream.mkString)
+	], { concurrency: "unbounded" });
+	if (code !== 0) return yield* PackageError.make({ detail: `Package resolution failed: ${stderr}` });
+	return stdout;
+}, Effect.scoped);
 export { PositiveDuration as a, Supervisor as i, resolveEntry as n, verify as r, resolve as t };

package/dist/{Peer-BT7eAGmh.js → Peer-DXeVrGBh.js}

@@ -1,7 +1,7 @@
-import { l as TransportError } from "./Errors-BMKmu5Y7.js";
-import { i as encode, r as decoder, t as EndOfStream } from "./Framing-zaYdOJnT.js";
-import { t as make$1 } from "./FailureGroup-BcH0XOBi.js";
-import { a as PositiveInt, i as PositiveFinite, r as Limits, t as Priority } from "./port-DSVUY8Bq.js";
+import { u as TransportError } from "./Errors-DYhsGZcZ.js";
+import { i as encode, r as decoder, t as EndOfStream } from "./Framing-G9eSaeLb.js";
+import { t as make$1 } from "./FailureGroup-BgT73AaR.js";
+import { a as PositiveInt, i as PositiveFinite, r as Limits, t as Priority } from "./port--3x2zJ4D.js";
 import { Array, Cause, Context, Data, Duration, Effect, Fiber, Option, Queue, Schema, Sink, Stream, TxQueue } from "effect";
 import { Rpc, RpcGroup } from "effect/rpc";
 // packages/remote/src/Instance.ts
@@ -273,7 +273,7 @@ var Store = class extends Context.Service()("@graftland/plugin-remote/internal/r
 var Execution = class extends Context.Service()("@graftland/plugin-remote/internal/runner/model/Execution") {};
 var RemoteTerminationUnconfirmed = class extends Schema.TaggedError()("RemoteTerminationUnconfirmed", { handle: Handle }) {};
 /** Losing contact never becomes a successful stop merely because a lease duration passed. */
-const awaitTermination = (handle, confirmation, leaseMillis, marginMillis) => Effect.gen(function* () {
+const awaitTermination = Effect.fnUntraced(function* (handle, confirmation, leaseMillis, marginMillis) {
 	const [elapsed, result] = yield* Effect.exit(Effect.timeoutOption(confirmation, leaseMillis + marginMillis)).pipe(Effect.timed);
 	if (result._tag === "Success") {
 		if (Option.isSome(result.value)) return result.value.value;

package/dist/{ProcessObservation-DEGrEMfP.js → ProcessObservation-gLgGirYv.js}

@@ -1,4 +1,4 @@
-import { t as make } from "./FailureGroup-BcH0XOBi.js";
+import { t as make } from "./FailureGroup-BgT73AaR.js";
 import { Array, Cause, Effect, Exit, Fiber, Ref, Schedule, Stream, String } from "effect";
 // packages/remote/src/internal/runner/ProcessObservation.ts
 /** Time allowed for a direct execution unit or launcher to exit after input EOF. */

package/dist/{ServeLifecycle-CJM0gG5B.js → ServeLifecycle-Bd1FPJ6e.js}

@@ -1,4 +1,4 @@
-import { n as close } from "./release-BY4Mlluy.js";
+import { n as close } from "./release-DfZPuIcK.js";
 import { Context, Deferred, Effect, Exit, Option, Schema, Scope } from "effect";
 // packages/remote/src/internal/ServeLifecycle.ts
 var StartupError = class extends Schema.TaggedError()("RunnerStartupError", {

package/dist/Transport.d.ts

@@ -1,4 +1,4 @@
-import { AuthenticationFailed, TransportError } from "./Errors.js";
+import { AuthenticationFailed, AuthenticatorUnavailable, TransportError } from "./Errors.js";
 import { Prepared, TlsPolicy, VerifiedCertificate } from "./Auth.js";
 import { Context, Effect, Option, Redacted, Scope, Sink, Stream } from "effect";
 /** Ordered reliable bytes. Chunk boundaries have no meaning; EOF is not exit confirmation. */
@@ -17,7 +17,7 @@ export interface Handshake {
   readonly certificate: Option.Option<VerifiedCertificate>;
 }
 export type Session = (channel: Channel) => Effect.Effect<void, TransportError, Scope.Scope>;
-export type Accept = (handshake: Handshake) => Effect.Effect<Session, AuthenticationFailed>;
+export type Accept = (handshake: Handshake) => Effect.Effect<Session, AuthenticationFailed | AuthenticatorUnavailable>;
 export interface Serving {
   /** Completes after serve has registered its accept loop, not merely after bind. */
   readonly ready: Effect.Effect<void>;

package/dist/Transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Transport.d.ts","names":[],"sources":["../src/Transport.ts"],"mappings":";;;;iBAMiB;WACP,OAAO,OAAO,OAAO,YAAY;WACjC,QAAQ,KAAK,cAAc,qBAAqB;;iBAGzC;WACP;WACA;WACA;WACA,SAAS;;iBAEF;WACP,eAAe,OAAO,OAAO,SAAS;WACtC,aAAa,OAAO,OAAO;;YAEzB,WACX,SAAS,YACL,OAAO,aAAa,gBAAgB,MAAM;YACnC,UACX,WAAW,cACP,OAAO,OAAO,SAAS;iBACX;;WAEP,OAAO,OAAO;WACd,QACR,QAAQ,WACJ,OAAO,aAAa,gBAAgB,MAAM;;iBAE/B;WACP,YAAY;WACZ,UACR,aAAa,aACT,OAAO,OAAO,SAAS,gBAAgB,MAAM;;iBAElC;WACP,YAAY;WACZ,OACR,KAAK,OAAO,OAAO,eACf,OAAO,OAAO,SAAS,gBAAgB,MAAM;;;qBAEtC,kBAAkB;;qBAGlB,iBAAiB"}
+{"version":3,"file":"Transport.d.ts","names":[],"sources":["../src/Transport.ts"],"mappings":";;;;iBAUiB;WACP,OAAO,OAAO,OAAO,YAAY;WACjC,QAAQ,KAAK,cAAc,qBAAqB;;iBAGzC;WACP;WACA;WACA;WACA,SAAS;;iBAEF;WACP,eAAe,OAAO,OAAO,SAAS;WACtC,aAAa,OAAO,OAAO;;YAEzB,WACX,SAAS,YACL,OAAO,aAAa,gBAAgB,MAAM;YACnC,UACX,WAAW,cACP,OAAO,OAAO,SAAS,uBAAuB;iBAClC;;WAEP,OAAO,OAAO;WACd,QACR,QAAQ,WACJ,OAAO,aAAa,gBAAgB,MAAM;;iBAE/B;WACP,YAAY;WACZ,UACR,aAAa,aACT,OAAO,OAAO,SAAS,gBAAgB,MAAM;;iBAElC;WACP,YAAY;WACZ,OACR,KAAK,OAAO,OAAO,eACf,OAAO,OAAO,SAAS,gBAAgB,MAAM;;;qBAEtC,kBAAkB;;qBAGlB,iBAAiB"}

package/dist/Transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"Transport.js","names":[],"sources":["../src/Transport.ts"],"sourcesContent":["/** Execution and byte-channel capabilities; implementations live in host plugins. */\nimport { Context } from \"effect\"\nimport type { Effect, Option, Scope, Stream, Sink, Redacted } from \"effect\"\nimport type { AuthenticationFailed, TransportError } from \"./Errors\"\nimport type { Prepared, VerifiedCertificate, TlsPolicy } from \"./Auth\"\n/** Ordered reliable bytes. Chunk boundaries have no meaning; EOF is not exit confirmation. */\nexport interface Channel {\n\treadonly input: Stream.Stream<Uint8Array, TransportError>\n\treadonly output: Sink.Sink<unknown, Uint8Array, unknown, TransportError>\n}\n\nexport interface Properties {\n\treadonly protocol: string\n\treadonly encrypted: boolean\n\treadonly network: boolean\n\treadonly carries: ReadonlyArray<\"header\" | \"certificate\">\n}\nexport interface Handshake {\n\treadonly authorization: Option.Option<Redacted.Redacted<string>>\n\treadonly certificate: Option.Option<VerifiedCertificate>\n}\nexport type Session = (\n\tchannel: Channel,\n) => Effect.Effect<void, TransportError, Scope.Scope>\nexport type Accept = (\n\thandshake: Handshake,\n) => Effect.Effect<Session, AuthenticationFailed>\nexport interface Serving {\n\t/** Completes after serve has registered its accept loop, not merely after bind. */\n\treadonly ready: Effect.Effect<void>\n\treadonly serve: (\n\t\taccept: Accept,\n\t) => Effect.Effect<void, TransportError, Scope.Scope>\n}\nexport interface ConnectorApi {\n\treadonly properties: Properties\n\treadonly connect: (\n\t\tcredentials: Prepared,\n\t) => Effect.Effect<Channel, TransportError, Scope.Scope>\n}\nexport interface ListenerApi {\n\treadonly properties: Properties\n\treadonly bind: (\n\t\ttls: Option.Option<TlsPolicy>,\n\t) => Effect.Effect<Serving, TransportError, Scope.Scope>\n}\nexport class Connector extends Context.Service<Connector, ConnectorApi>()(\n\t\"@graftland/plugin-remote/Transport/Connector\",\n) {}\nexport class Listener extends Context.Service<Listener, ListenerApi>()(\n\t\"@graftland/plugin-remote/Transport/Listener\",\n) {}\n"],"mappings":";;;AA8CA,IAAa,YAAb,cAA+B,QAAQ,QAAiC,CAAC,CACxE,8CACD,CAAC,CAAC,CAAC;AACH,IAAa,WAAb,cAA8B,QAAQ,QAA+B,CAAC,CACrE,6CACD,CAAC,CAAC,CAAC"}
+{"version":3,"file":"Transport.js","names":[],"sources":["../src/Transport.ts"],"sourcesContent":["/** Execution and byte-channel capabilities; implementations live in host plugins. */\nimport { Context } from \"effect\"\nimport type { Effect, Option, Scope, Stream, Sink, Redacted } from \"effect\"\nimport type {\n\tAuthenticationFailed,\n\tAuthenticatorUnavailable,\n\tTransportError,\n} from \"./Errors\"\nimport type { Prepared, VerifiedCertificate, TlsPolicy } from \"./Auth\"\n/** Ordered reliable bytes. Chunk boundaries have no meaning; EOF is not exit confirmation. */\nexport interface Channel {\n\treadonly input: Stream.Stream<Uint8Array, TransportError>\n\treadonly output: Sink.Sink<unknown, Uint8Array, unknown, TransportError>\n}\n\nexport interface Properties {\n\treadonly protocol: string\n\treadonly encrypted: boolean\n\treadonly network: boolean\n\treadonly carries: ReadonlyArray<\"header\" | \"certificate\">\n}\nexport interface Handshake {\n\treadonly authorization: Option.Option<Redacted.Redacted<string>>\n\treadonly certificate: Option.Option<VerifiedCertificate>\n}\nexport type Session = (\n\tchannel: Channel,\n) => Effect.Effect<void, TransportError, Scope.Scope>\nexport type Accept = (\n\thandshake: Handshake,\n) => Effect.Effect<Session, AuthenticationFailed | AuthenticatorUnavailable>\nexport interface Serving {\n\t/** Completes after serve has registered its accept loop, not merely after bind. */\n\treadonly ready: Effect.Effect<void>\n\treadonly serve: (\n\t\taccept: Accept,\n\t) => Effect.Effect<void, TransportError, Scope.Scope>\n}\nexport interface ConnectorApi {\n\treadonly properties: Properties\n\treadonly connect: (\n\t\tcredentials: Prepared,\n\t) => Effect.Effect<Channel, TransportError, Scope.Scope>\n}\nexport interface ListenerApi {\n\treadonly properties: Properties\n\treadonly bind: (\n\t\ttls: Option.Option<TlsPolicy>,\n\t) => Effect.Effect<Serving, TransportError, Scope.Scope>\n}\nexport class Connector extends Context.Service<Connector, ConnectorApi>()(\n\t\"@graftland/plugin-remote/Transport/Connector\",\n) {}\nexport class Listener extends Context.Service<Listener, ListenerApi>()(\n\t\"@graftland/plugin-remote/Transport/Listener\",\n) {}\n"],"mappings":";;;AAkDA,IAAa,YAAb,cAA+B,QAAQ,QAAiC,CAAC,CACxE,8CACD,CAAC,CAAC,CAAC;AACH,IAAa,WAAb,cAA8B,QAAQ,QAA+B,CAAC,CACrE,6CACD,CAAC,CAAC,CAAC"}