@humwick/runner 0.0.0-stage → 0.130.1

package/node_modules/@humwick/offload/LICENSE

@@ -0,0 +1,167 @@
+# PolyForm Shield License 1.0.0
+
+<https://polyformproject.org/licenses/shield/1.0.0>
+
+## Acceptance
+
+In order to get any license under these terms, you must agree
+to them as both strict obligations and conditions to all
+your licenses.
+
+## Copyright License
+
+The licensor grants you a copyright license for the
+software to do everything you might do with the software
+that would otherwise infringe the licensor's copyright
+in it for any permitted purpose.  However, you may
+only distribute the software according to [Distribution
+License](#distribution-license) and make changes or new works
+based on the software according to [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Distribution License
+
+The licensor grants you an additional copyright license
+to distribute copies of the software.  Your license
+to distribute covers distributing the software with
+changes and new works permitted by [Changes and New Works
+License](#changes-and-new-works-license).
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of
+the software from you also gets a copy of these terms or the
+URL for them above, as well as copies of any plain-text lines
+beginning with `Required Notice:` that the licensor provided
+with the software.  For example:
+
+> Required Notice: Copyright Yoyodyne, Inc. (http://example.com)
+
+## Changes and New Works License
+
+The licensor grants you an additional copyright license to
+make changes and new works based on the software for any
+permitted purpose.
+
+## Patent License
+
+The licensor grants you a patent license for the software that
+covers patent claims the licensor can license, or becomes able
+to license, that you would infringe by using the software.
+
+## Noncompete
+
+Any purpose is a permitted purpose, except for providing any
+product that competes with the software or any product the
+licensor or any of its affiliates provides using the software.
+
+## Competition
+
+Goods and services compete even when they provide functionality
+through different kinds of interfaces or for different technical
+platforms.  Applications can compete with services, libraries
+with plugins, frameworks with development tools, and so on,
+even if they're written in different programming languages
+or for different computer architectures.  Goods and services
+compete even when provided free of charge.  If you market a
+product as a practical substitute for the software or another
+product, it definitely competes.
+
+## New Products
+
+If you are using the software to provide a product that does
+not compete, but the licensor or any of its affiliates brings
+your product into competition by providing a new version of
+the software or another product using the software, you may
+continue using versions of the software available under these
+terms beforehand to provide your competing product, but not
+any later versions.
+
+## Discontinued Products
+
+You may begin using the software to compete with a product
+or service that the licensor or any of its affiliates has
+stopped providing, unless the licensor includes a plain-text
+line beginning with `Licensor Line of Business:` with the
+software that mentions that line of business.  For example:
+
+> Licensor Line of Business: YoyodyneCMS Content Management
+System (http://example.com/cms)
+
+## Sales of Business
+
+If the licensor or any of its affiliates sells a line of
+business developing the software or using the software
+to provide a product, the buyer can also enforce
+[Noncompete](#noncompete) for that product.
+
+## Fair Use
+
+You may have "fair use" rights for the software under the
+law. These terms do not limit them.
+
+## No Other Rights
+
+These terms do not allow you to sublicense or transfer any of
+your licenses to anyone else, or prevent the licensor from
+granting licenses to anyone else.  These terms do not imply
+any other licenses.
+
+## Patent Defense
+
+If you make any written claim that the software infringes or
+contributes to infringement of any patent, your patent license
+for the software granted under these terms ends immediately. If
+your company makes such a claim, your patent license ends
+immediately for work on behalf of your company.
+
+## Violations
+
+The first time you are notified in writing that you have
+violated any of these terms, or done anything with the software
+not covered by your licenses, your licenses can nonetheless
+continue if you come into full compliance with these terms,
+and take practical steps to correct past violations, within
+32 days of receiving notice.  Otherwise, all your licenses
+end immediately.
+
+## No Liability
+
+***As far as the law allows, the software comes as is, without
+any warranty or condition, and the licensor will not be liable
+to you for any damages arising out of these terms or the use
+or nature of the software, under any kind of legal claim.***
+
+## Definitions
+
+The **licensor** is the individual or entity offering these
+terms, and the **software** is the software the licensor makes
+available under these terms.
+
+A **product** can be a good or service, or a combination
+of them.
+
+**You** refers to the individual or entity agreeing to these
+terms.
+
+**Your company** is any legal entity, sole proprietorship,
+or other kind of organization that you work for, plus all
+its affiliates.
+
+**Affiliates** means the other organizations than an
+organization has control over, is under the control of, or is
+under common control with.
+
+**Control** means ownership of substantially all the assets of
+an entity, or the power to direct its management and policies
+by vote, contract, or otherwise.  Control can be direct or
+indirect.
+
+**Your licenses** are all the licenses granted to you for the
+software under these terms.
+
+**Use** means anything you do with the software requiring one
+of your licenses.
+
+Required Notice: Copyright 2026 Exelerus AB
+Licensor Line of Business: provider-independent runtimes and coordination software for teams of AI agents

package/node_modules/@humwick/offload/README.md

@@ -0,0 +1,57 @@
+# @humwick/offload
+
+Bounded execution primitives for CPU workers, cooperative async I/O, and subprocesses.
+All runners use `OffloadEnvelope` for timeout, abort, structured logging, labels, typed
+`OffloadError`, and injected escalation.
+
+## Maintenance adoption
+
+`WorkerPool` and `SubprocessRunner` expose `offThread: true`; this is an intentional
+marker, not an automatic scheduler integration. A maintenance job that hands its heavy
+work to either runner must explicitly wire the existing #1757 seam immediately after
+starting it:
+
+```ts
+const work = runner.run("heavy-job", input, { signal: context.signal });
+if (runner.offThread) context.markOffThread?.();
+await work;
+```
+
+`AsyncRunner` is bounded but stays on the process event loop, so it does not advertise
+`offThread`.
+
+## Shutdown
+
+Every runner has a teardown that cancels rather than waits: `WorkerPool.destroy()`,
+`AsyncRunner.destroy()` and `SubprocessRunner.destroy()` reject outstanding work with an
+`aborted` `OffloadError`, kill live subprocess groups, and refuse new work. `drain()` is
+the opposite — it waits for accepted work to finish and cancels nothing.
+
+Because subprocess children run in their own process group, they are reparented rather
+than reaped when the host dies; the runner installs a single process `exit` hook that
+SIGKILLs any group still alive. A host killed with SIGKILL cannot run that hook, so a
+supervisor is still the only guarantee there.
+
+## Bounds worth knowing
+
+- `timeoutMs` (and abort) are hard for subprocesses: SIGTERM, then SIGKILL to the process
+  group after `killGraceMs` (default 2s), so a child that traps SIGTERM cannot outlive
+  its deadline. The concurrency slot is held until the child is actually reaped, so
+  `stats` never reports a slot as free while its work is still running.
+- A non-zero exit is a failure by default (it rejects and takes an escalation strike). Probe
+  callers whose answer *is* the exit code — `tmux has-session`, `which`, `git rev-parse`, a
+  land gate — must declare it with `okExitCodes` (`[0, 1]`, or `"any"` when the failing codes
+  are not enumerable). Without it the escalation signal inverts: the sink pages on a healthy
+  fleet and then latches, so the real outage goes unreported.
+  **`"any"` also accepts signal deaths** — 137 (SIGKILL, typically the OOM killer) and 139
+  (SIGSEGV) come back as successes and re-arm the strike counter. That is deliberate for a
+  land gate, where an OOM-killed gate is just a failed gate, but it means an infrastructure
+  death reads as a healthy answer and never escalates. Prefer an explicit code list unless
+  the failing codes genuinely cannot be enumerated; timeout and abort still throw either way.
+- Subprocess output is captured up to `maxOutputBytes` per stream (default 8 MiB) and the
+  result carries `truncated`. The stream is still drained past the cap so a chatty child
+  never blocks on a full pipe.
+- `AsyncRunner` work that ignores its signal keeps its slot until it returns: the cap
+  degrades toward serial rather than over-admitting. `destroy()` still returns promptly.
+- A worker round-trip costs ~110µs, so tasks below roughly 1ms of CPU are not worth
+  offloading. `run()` has no backpressure: the queue is unbounded by design.

package/node_modules/@humwick/offload/dist/async-runner.d.ts

@@ -0,0 +1,18 @@
+import { type OffloadDefaults, type OffloadEnvelope } from "./types.js";
+export interface AsyncRunnerOptions extends OffloadDefaults {
+    concurrency: number;
+}
+export interface AsyncRunner {
+    run<T>(taskName: string, fn: (signal: AbortSignal) => Promise<T> | T, env?: OffloadEnvelope): Promise<T>;
+    readonly stats: {
+        active: number;
+        queued: number;
+    };
+    /** Resolves when everything accepted so far has finished. Does not cancel anything. */
+    drain(): Promise<void>;
+    /** Cancels in-flight work, settles every outstanding caller, and refuses new work. */
+    destroy(): Promise<void>;
+}
+/** Bounded I/O runner. Work receives the composed signal and must cooperate with aborts. */
+export declare function createAsyncRunner(options: AsyncRunnerOptions): AsyncRunner;
+//# sourceMappingURL=async-runner.d.ts.map

package/node_modules/@humwick/offload/dist/async-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-runner.d.ts","sourceRoot":"","sources":["../src/async-runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgE,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAEtI,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACzD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzG,QAAQ,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,uFAAuF;IACvF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,sFAAsF;IACtF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAYD,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CA6I1E"}

package/node_modules/@humwick/offload/dist/async-runner.js

@@ -0,0 +1,158 @@
+import PQueue from "p-queue";
+import { beginRun, finishLog, recordResult, startLog } from "./envelope.js";
+import { OffloadError, StrikeCounter, normalizeError, validateTimeout } from "./types.js";
+/** Bounded I/O runner. Work receives the composed signal and must cooperate with aborts. */
+export function createAsyncRunner(options) {
+    if (!Number.isSafeInteger(options.concurrency) || options.concurrency < 1)
+        throw new RangeError("concurrency must be a positive integer");
+    const queue = new PQueue({ concurrency: options.concurrency });
+    const counter = new StrikeCounter(options.escalationThreshold, options.escalationWindowAttempts);
+    const live = new Set();
+    let destroyed = false;
+    const abortedError = (taskName, cause) => new OffloadError({ kind: "aborted", taskName, message: `${taskName} was aborted`, cause });
+    const destroyedError = (taskName) => new OffloadError({ kind: "aborted", taskName, message: `${taskName} was cancelled: async runner destroyed` });
+    return {
+        get stats() { return { active: queue.pending, queued: queue.size }; },
+        async run(taskName, fn, env) {
+            const labels = env?.labels ?? {};
+            const logger = env?.logger ?? options.logger;
+            const sink = env?.onEscalate ?? options.onEscalate;
+            const reportRejection = async (error) => {
+                // Rejecting before the run reaches startLog is still a terminal outcome; without this
+                // the structured stream shows nothing at all for it.
+                finishLog(logger, "async", taskName, labels, performance.now(), error);
+                await recordResult({ counter, taskName, backend: "async", labels, error, sink, logger });
+                throw error;
+            };
+            if (destroyed)
+                return reportRejection(destroyedError(taskName));
+            if (env?.signal?.aborted)
+                return reportRejection(abortedError(taskName, env.signal.reason));
+            // Eagerly validated so an invalid deadline rejects with an OffloadError rather than
+            // escaping the queue callback as a raw RangeError (#1809 P0-1, same class).
+            try {
+                validateTimeout(env?.timeoutMs ?? options.defaultTimeoutMs);
+            }
+            catch (error) {
+                return reportRejection(normalizeError(taskName, error, "rejected"));
+            }
+            let publish;
+            let published = false;
+            const outcome = new Promise((resolve) => {
+                publish = (value) => { if (!published) {
+                    published = true;
+                    resolve(value);
+                } };
+            });
+            let started = false;
+            let cancelled = false;
+            const entry = {
+                taskName,
+                teardown: new AbortController(),
+                settled: outcome.then(() => undefined),
+                cancelIfQueued: (error) => {
+                    if (started || cancelled)
+                        return;
+                    cancelled = true;
+                    // The single funnel for both abort-while-queued and destroy()-cancels-queued, so
+                    // the one line each terminal path owes the structured stream is emitted here. The
+                    // callback bails on `cancelled` without logging, which keeps it to exactly one.
+                    finishLog(logger, "async", taskName, labels, performance.now(), error);
+                    publish({ ok: false, error });
+                },
+            };
+            live.add(entry);
+            // p-queue's own `signal` option used to provide this, but it also released the slot
+            // while the work kept running (#1809 P1-7). Cancelling here keeps abort prompt for
+            // queued work without lying about occupancy.
+            const signal = env?.signal;
+            const onQueuedAbort = signal ? () => entry.cancelIfQueued(abortedError(taskName, signal.reason)) : undefined;
+            if (signal && onQueuedAbort)
+                signal.addEventListener("abort", onQueuedAbort, { once: true });
+            const task = queue.add(async () => {
+                if (signal && onQueuedAbort)
+                    signal.removeEventListener("abort", onQueuedAbort);
+                let work;
+                let context;
+                let onAbort;
+                try {
+                    if (cancelled)
+                        return;
+                    if (destroyed || entry.teardown.signal.aborted) {
+                        const error = destroyedError(taskName);
+                        finishLog(logger, "async", taskName, labels, performance.now(), error);
+                        publish({ ok: false, error });
+                        return;
+                    }
+                    started = true;
+                    // Match WorkerPool semantics: a task's deadline starts when it receives a slot,
+                    // not while it is waiting behind unrelated bounded work.
+                    context = beginRun(taskName, env, options, entry.teardown.signal);
+                    const run = context;
+                    const startedAt = startLog(logger, "async", taskName, labels);
+                    try {
+                        if (run.signal.aborted)
+                            throw run.abortError();
+                        const abort = new Promise((_, reject) => {
+                            onAbort = () => reject(run.abortError());
+                            run.signal.addEventListener("abort", onAbort, { once: true });
+                        });
+                        work = Promise.resolve().then(() => fn(run.signal));
+                        const value = await Promise.race([work, abort]);
+                        finishLog(logger, "async", taskName, labels, startedAt);
+                        await recordResult({ counter, taskName, backend: "async", labels, sink, logger });
+                        publish({ ok: true, value });
+                    }
+                    catch (error) {
+                        const normalized = run.signal.aborted ? run.abortError() : normalizeError(taskName, error);
+                        finishLog(logger, "async", taskName, labels, startedAt, normalized);
+                        await recordResult({ counter, taskName, backend: "async", labels, error: normalized, sink, logger });
+                        publish({ ok: false, error: normalized });
+                    }
+                    finally {
+                        // The composite signal stays reachable from the caller's long-lived signal, so an
+                        // un-removed listener retains this closure for the process lifetime (#1809 P0-4).
+                        if (onAbort)
+                            run.signal.removeEventListener("abort", onAbort);
+                        run.cleanup();
+                    }
+                }
+                catch (error) {
+                    const normalized = normalizeError(taskName, error, "rejected");
+                    finishLog(logger, "async", taskName, labels, performance.now(), normalized);
+                    await recordResult({ counter, taskName, backend: "async", labels, error: normalized, sink, logger });
+                    publish({ ok: false, error: normalized });
+                }
+                finally {
+                    context?.cleanup();
+                    // The caller may already have been settled by the abort race; the slot stays held
+                    // until the work itself finishes, otherwise the cap admits a replacement while the
+                    // aborted task is still running and `stats` under-reports it (#1809 P1-7).
+                    if (work)
+                        await work.catch(() => undefined);
+                    live.delete(entry);
+                }
+            });
+            // The callback settles callers through `publish` and never throws, but a stray
+            // rejection here would surface as an unhandled rejection rather than a failed run.
+            void task.catch(() => undefined);
+            const result = await outcome;
+            if (!result.ok)
+                throw result.error;
+            return result.value;
+        },
+        drain: () => queue.onIdle(),
+        async destroy() {
+            destroyed = true;
+            const outstanding = [...live];
+            for (const entry of outstanding) {
+                entry.cancelIfQueued(destroyedError(entry.taskName));
+                entry.teardown.abort(new DOMException("Async runner destroyed", "AbortError"));
+            }
+            // Waits on caller settlement rather than `queue.onIdle()`: work that ignores its signal
+            // must not be able to make teardown hang. Its slot is still held until it finishes.
+            await Promise.all(outstanding.map((entry) => entry.settled));
+        },
+    };
+}
+//# sourceMappingURL=async-runner.js.map

package/node_modules/@humwick/offload/dist/async-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"async-runner.js","sourceRoot":"","sources":["../src/async-runner.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAmB,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAA8C,MAAM,YAAY,CAAC;AAyBtI,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;IAC1I,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,KAAe,EAAgB,EAAE,CACvE,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7F,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAgB,EAAE,CACxD,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,wCAAwC,EAAE,CAAC,CAAC;IAEhH,OAAO;QACL,IAAI,KAAK,KAAK,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,GAAG,CAAI,QAAgB,EAAE,EAA2C,EAAE,GAAqB;YAC/F,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;YAC7C,MAAM,IAAI,GAAG,GAAG,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;YACnD,MAAM,eAAe,GAAG,KAAK,EAAE,KAAmB,EAAkB,EAAE;gBACpE,sFAAsF;gBACtF,qDAAqD;gBACrD,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;gBACvE,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBACzF,MAAM,KAAK,CAAC;YACd,CAAC,CAAC;YACF,IAAI,SAAS;gBAAE,OAAO,eAAe,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;YAChE,IAAI,GAAG,EAAE,MAAM,EAAE,OAAO;gBAAE,OAAO,eAAe,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5F,oFAAoF;YACpF,4EAA4E;YAC5E,IAAI,CAAC;gBACH,eAAe,CAAC,GAAG,EAAE,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,eAAe,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,OAAuC,CAAC;YAC5C,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;gBAClD,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;oBAAC,SAAS,GAAG,IAAI,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC,CAAC,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,KAAK,GAAY;gBACrB,QAAQ;gBACR,QAAQ,EAAE,IAAI,eAAe,EAAE;gBAC/B,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;gBACtC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;oBACxB,IAAI,OAAO,IAAI,SAAS;wBAAE,OAAO;oBACjC,SAAS,GAAG,IAAI,CAAC;oBACjB,iFAAiF;oBACjF,kFAAkF;oBAClF,gFAAgF;oBAChF,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;oBACvE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChC,CAAC;aACF,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEhB,oFAAoF;YACpF,mFAAmF;YACnF,6CAA6C;YAC7C,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,CAAC;YAC3B,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7G,IAAI,MAAM,IAAI,aAAa;gBAAE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAE7F,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;gBAChC,IAAI,MAAM,IAAI,aAAa;oBAAE,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAChF,IAAI,IAA4B,CAAC;gBACjC,IAAI,OAA+B,CAAC;gBACpC,IAAI,OAAiC,CAAC;gBACtC,IAAI,CAAC;oBACH,IAAI,SAAS;wBAAE,OAAO;oBACtB,IAAI,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;wBACvC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;wBACvE,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;wBAC9B,OAAO;oBACT,CAAC;oBACD,OAAO,GAAG,IAAI,CAAC;oBACf,gFAAgF;oBAChF,yDAAyD;oBACzD,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAClE,MAAM,GAAG,GAAG,OAAO,CAAC;oBACpB,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC9D,IAAI,CAAC;wBACH,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO;4BAAE,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;wBAC/C,MAAM,KAAK,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;4BAC7C,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;4BACzC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;wBAChE,CAAC,CAAC,CAAC;wBACH,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;wBACpD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;wBAChD,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;wBACxD,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;wBAClF,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC/B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;wBAC3F,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;wBACpE,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;wBACrG,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;oBAC5C,CAAC;4BAAS,CAAC;wBACT,kFAAkF;wBAClF,kFAAkF;wBAClF,IAAI,OAAO;4BAAE,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;wBAC9D,GAAG,CAAC,OAAO,EAAE,CAAC;oBAChB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;oBAC/D,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;oBAC5E,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBACrG,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5C,CAAC;wBAAS,CAAC;oBACT,OAAO,EAAE,OAAO,EAAE,CAAC;oBACnB,kFAAkF;oBAClF,mFAAmF;oBACnF,2EAA2E;oBAC3E,IAAI,IAAI;wBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,+EAA+E;YAC/E,mFAAmF;YACnF,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAEjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,MAAM,MAAM,CAAC,KAAK,CAAC;YACnC,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE;QAC3B,KAAK,CAAC,OAAO;YACX,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACrD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,wBAAwB,EAAE,YAAY,CAAC,CAAC,CAAC;YACjF,CAAC;YACD,wFAAwF;YACxF,oFAAoF;YACpF,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@humwick/offload/dist/envelope.d.ts

@@ -0,0 +1,25 @@
+import { OffloadError, type OffloadDefaults, type OffloadEnvelope, type OffloadLogger, type EscalationEvent, type EscalationSink, type StrikeCounter } from "./types.js";
+export interface RunContext {
+    signal: AbortSignal;
+    timeoutMs?: number;
+    cleanup(): void;
+    abortError(): OffloadError;
+}
+/**
+ * `teardown` is the backend's own cancellation channel (runner `destroy()`); it is composed
+ * with the caller's signal and the deadline so every backend has exactly one signal to observe.
+ */
+export declare function beginRun(taskName: string, env: OffloadEnvelope | undefined, defaults: OffloadDefaults, teardown?: AbortSignal, timeoutMsOverride?: number | null): RunContext;
+export declare function startLog(logger: OffloadLogger | undefined, backend: EscalationEvent["backend"], taskName: string, labels: Record<string, string>): number;
+export declare function finishLog(logger: OffloadLogger | undefined, backend: EscalationEvent["backend"], taskName: string, labels: Record<string, string>, startedAt: number, error?: OffloadError): void;
+export declare function recordResult(options: {
+    counter: StrikeCounter;
+    taskName: string;
+    backend: EscalationEvent["backend"];
+    labels: Record<string, string>;
+    error?: OffloadError;
+    sink?: EscalationSink;
+    logger?: OffloadLogger;
+}): Promise<void>;
+export declare function errorForExit(taskName: string, code?: string): OffloadError;
+//# sourceMappingURL=envelope.d.ts.map

package/node_modules/@humwick/offload/dist/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,aAAa,EAAwB,MAAM,YAAY,CAAC;AAE/L,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,IAAI,IAAI,CAAC;IAChB,UAAU,IAAI,YAAY,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,CA8B7K;AAKD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAIzJ;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI,CAIjM;AAED,wBAAsB,YAAY,CAAC,OAAO,EAAE;IAC1C,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBhB;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,CAE1E"}

package/node_modules/@humwick/offload/dist/envelope.js

@@ -0,0 +1,80 @@
+import { OffloadError, log, validateTimeout } from "./types.js";
+/**
+ * `teardown` is the backend's own cancellation channel (runner `destroy()`); it is composed
+ * with the caller's signal and the deadline so every backend has exactly one signal to observe.
+ */
+export function beginRun(taskName, env, defaults, teardown, timeoutMsOverride) {
+    // `timeoutMsOverride` lets the WorkerPool pass an ALREADY-RESOLVED timeout: a number (e.g. the
+    // remaining budget of an absolute deadline on a retry-safe re-dispatch, #1822 MED-2) or `null`
+    // meaning "no deadline, definitively." Either way it is authoritative and already validated, so
+    // the envelope AND the mutable pool default are NOT re-read — that is what keeps a post-submission
+    // mutation of either from adding or erasing this job's deadline (#1822 MED). `null` is used for
+    // "no deadline" rather than `undefined` on purpose: `undefined` is indistinguishable from "no
+    // argument passed", which is how the async/subprocess runners ask to resolve from env/default.
+    const timeoutMs = timeoutMsOverride === undefined
+        ? validateTimeout(env?.timeoutMs ?? defaults.defaultTimeoutMs)
+        : (timeoutMsOverride ?? undefined);
+    const timeout = new AbortController();
+    const sources = [env?.signal, teardown].filter((source) => source !== undefined);
+    const signal = sources.length === 0 ? timeout.signal : AbortSignal.any([...sources, timeout.signal]);
+    let timedOut = false;
+    const timer = timeoutMs === undefined ? undefined : setTimeout(() => {
+        timedOut = true;
+        timeout.abort(new DOMException(`Timed out after ${timeoutMs}ms`, "TimeoutError"));
+    }, timeoutMs);
+    return {
+        signal,
+        timeoutMs,
+        cleanup: () => { if (timer)
+            clearTimeout(timer); },
+        abortError: () => new OffloadError({
+            kind: timedOut ? "timeout" : "aborted",
+            taskName,
+            message: timedOut ? `${taskName} timed out after ${timeoutMs}ms` : `${taskName} was aborted`,
+            cause: signal.reason,
+        }),
+    };
+}
+// Labels are spread FIRST throughout: adopters pass generic context bags, and a label that
+// happens to be named `taskName` or `backend` must not silently replace the envelope's own
+// fields — that would destroy exactly the uniformity this logging contract exists to provide.
+export function startLog(logger, backend, taskName, labels) {
+    const startedAt = performance.now();
+    log(logger, "debug", "offload started", { ...labels, backend, taskName });
+    return startedAt;
+}
+export function finishLog(logger, backend, taskName, labels, startedAt, error) {
+    const fields = { ...labels, backend, taskName, tookMs: Math.round(performance.now() - startedAt) };
+    if (error)
+        log(logger, "warn", "offload failed", { ...fields, kind: error.kind, code: error.code, error: error.message });
+    else
+        log(logger, "debug", "offload completed", fields);
+}
+export async function recordResult(options) {
+    if (!options.error) {
+        options.counter.succeed(options.taskName);
+        return;
+    }
+    // Caller-directed cancellation is neither a backend failure nor a timeout. It must not
+    // page a host merely because a legitimate shutdown cancelled several queued operations.
+    if (options.error.kind === "aborted")
+        return;
+    const strikes = options.counter.fail(options.taskName);
+    if (strikes < options.counter.threshold)
+        return;
+    // Like the maintenance breaker, escalation is edge-triggered: one notification at
+    // the threshold, then a latch until a successful run re-arms the task.
+    options.counter.trip(options.taskName);
+    if (!options.sink)
+        return;
+    try {
+        await options.sink({ taskName: options.taskName, backend: options.backend, error: options.error, strikes, labels: options.labels });
+    }
+    catch (error) {
+        log(options.logger, "error", "offload escalation sink failed", { taskName: options.taskName, backend: options.backend, error: String(error) });
+    }
+}
+export function errorForExit(taskName, code) {
+    return new OffloadError({ kind: "worker-exit", taskName, code, message: `${taskName} worker exited${code ? ` (${code})` : ""}` });
+}
+//# sourceMappingURL=envelope.js.map

package/node_modules/@humwick/offload/dist/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAiI,GAAG,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAS/L;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,GAAgC,EAAE,QAAyB,EAAE,QAAsB,EAAE,iBAAiC;IAC/J,+FAA+F;IAC/F,+FAA+F;IAC/F,gGAAgG;IAChG,mGAAmG;IACnG,gGAAgG;IAChG,8FAA8F;IAC9F,+FAA+F;IAC/F,MAAM,SAAS,GAAG,iBAAiB,KAAK,SAAS;QAC/C,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,SAAS,IAAI,QAAQ,CAAC,gBAAgB,CAAC;QAC9D,CAAC,CAAC,CAAC,iBAAiB,IAAI,SAAS,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAyB,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrG,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;QAClE,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,mBAAmB,SAAS,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACpF,CAAC,EAAE,SAAS,CAAC,CAAC;IACd,OAAO;QACL,MAAM;QACN,SAAS;QACT,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC;YACjC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACtC,QAAQ;YACR,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,oBAAoB,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,cAAc;YAC5F,KAAK,EAAE,MAAM,CAAC,MAAM;SACrB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,2FAA2F;AAC3F,8FAA8F;AAC9F,MAAM,UAAU,QAAQ,CAAC,MAAiC,EAAE,OAAmC,EAAE,QAAgB,EAAE,MAA8B;IAC/I,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAiC,EAAE,OAAmC,EAAE,QAAgB,EAAE,MAA8B,EAAE,SAAiB,EAAE,KAAoB;IACzL,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;IACnG,IAAI,KAAK;QAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;;QACrH,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAQlC;IACC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,uFAAuF;IACvF,wFAAwF;IACxF,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO;IAChD,kFAAkF;IAClF,uEAAuE;IACvE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,OAAO;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtI,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,IAAa;IAC1D,OAAO,IAAI,YAAY,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,iBAAiB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACpI,CAAC"}

package/node_modules/@humwick/offload/dist/fixtures/worker-task.d.ts

@@ -0,0 +1,10 @@
+import type { OffloadWorkerTask } from "../worker.js";
+declare const task: OffloadWorkerTask<{
+    kind: string;
+    ms?: number;
+    value?: unknown;
+    file?: string;
+    code?: number;
+}, unknown>;
+export default task;
+//# sourceMappingURL=worker-task.d.ts.map

package/node_modules/@humwick/offload/dist/fixtures/worker-task.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-task.d.ts","sourceRoot":"","sources":["../../src/fixtures/worker-task.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAMtD,QAAA,MAAM,IAAI,EAAE,iBAAiB,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAuClH,CAAC;eAEa,IAAI"}

package/node_modules/@humwick/offload/dist/fixtures/worker-task.js

@@ -0,0 +1,59 @@
+import { appendFileSync, readFileSync } from "node:fs";
+// `file`-based counters let a test count executions/deaths deterministically across worker
+// threads (a shared in-process counter is not visible from a worker), so the #1822 F2/F3 tests
+// can PROVE the mechanism (exactly-once, bounded retries, real deaths) instead of hoping on
+// timing. Each execution/death appends one byte; the test reads the file size.
+const task = async (input) => {
+    if (input.kind === "burn") {
+        const until = Date.now() + (input.ms ?? 0);
+        while (Date.now() < until) { /* intentionally synchronous: timeout must terminate this worker */ }
+        return input.value ?? "burned";
+    }
+    if (input.kind === "delay") {
+        await Bun.sleep(input.ms ?? 0);
+        return input.value;
+    }
+    if (input.kind === "throw")
+        throw Object.assign(new RangeError("bad worker input"), { code: "BAD_INPUT" });
+    if (input.kind === "exit")
+        process.exit(1);
+    // Returns a value now, then exits AFTER the slot has gone idle: simulates an OOM/SIGKILL
+    // that lands on a worker between jobs, which is the #1822 item 2 scenario. Records the death
+    // to `file` (if given) so a test can assert the deaths actually happened.
+    if (input.kind === "exit-when-idle") {
+        setTimeout(() => { if (input.file)
+            appendFileSync(input.file, "d"); process.exit(0); }, input.ms ?? 20);
+        return input.value ?? "ok";
+    }
+    // Optionally runs for `ms` (so a deadline can bite mid-execution), records one execution to
+    // `file`, then exits the worker every time. Exits with `code` (default 1 = abnormal); pass
+    // code 0 to model a CLEAN worker exit while a job is in flight. Used to prove at-most-once
+    // (default → one record) vs bounded retry (retrySafe → MAX+1 records), the absolute deadline,
+    // and exit-manner attribution (abnormal charges, clean does not — #1822 MED-4).
+    if (input.kind === "crash-record") {
+        if (input.ms)
+            await Bun.sleep(input.ms);
+        if (input.file)
+            appendFileSync(input.file, "x");
+        process.exit(input.code ?? 1);
+    }
+    // Records one execution, then crashes ONLY on the first execution (file was empty) and succeeds
+    // on any retry — proves a retry-safe re-dispatch recovers and is bounded (file has 2 records).
+    if (input.kind === "flaky-record") {
+        let prior = 0;
+        try {
+            prior = input.file ? readFileSync(input.file, "utf8").length : 0;
+        }
+        catch {
+            prior = 0;
+        }
+        if (input.file)
+            appendFileSync(input.file, "x");
+        if (prior === 0)
+            process.exit(1);
+        return input.value ?? "recovered";
+    }
+    return input.value;
+};
+export default task;
+//# sourceMappingURL=worker-task.js.map

package/node_modules/@humwick/offload/dist/fixtures/worker-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-task.js","sourceRoot":"","sources":["../../src/fixtures/worker-task.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAGvD,2FAA2F;AAC3F,+FAA+F;AAC/F,4FAA4F;AAC5F,+EAA+E;AAC/E,MAAM,IAAI,GAA6G,KAAK,EAAE,KAAK,EAAE,EAAE;IACrI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,mEAAmE,CAAC,CAAC;QAClG,OAAO,KAAK,CAAC,KAAK,IAAI,QAAQ,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3G,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,yFAAyF;IACzF,6FAA6F;IAC7F,0EAA0E;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI;YAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACxG,OAAO,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IAC7B,CAAC;IACD,4FAA4F;IAC5F,2FAA2F;IAC3F,2FAA2F;IAC3F,8FAA8F;IAC9F,gFAAgF;IAChF,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,EAAE;YAAE,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,IAAI;YAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,gGAAgG;IAChG,+FAA+F;IAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,KAAK,GAAG,CAAC,CAAC;QAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,IAAI;YAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/node_modules/@humwick/offload/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { createAsyncRunner, type AsyncRunner, type AsyncRunnerOptions } from "./async-runner.js";
+export { createSubprocessRunner, type SubprocessResult, type SubprocessRunner, type SubprocessRunnerOptions, type SubprocessSpec } from "./subprocess-runner.js";
+export { createWorkerPool, type WorkerPool, type WorkerPoolOptions, type WorkerPoolStats } from "./worker-pool.js";
+export { OffloadError, StrikeCounter, type EscalationEvent, type EscalationSink, type OffloadDefaults, type OffloadEnvelope, type OffloadErrorKind, type OffloadLogger } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@humwick/offload/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,KAAK,uBAAuB,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACjK,OAAO,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC"}

package/node_modules/@humwick/offload/dist/index.js

@@ -0,0 +1,5 @@
+export { createAsyncRunner } from "./async-runner.js";
+export { createSubprocessRunner } from "./subprocess-runner.js";
+export { createWorkerPool } from "./worker-pool.js";
+export { OffloadError, StrikeCounter } from "./types.js";
+//# sourceMappingURL=index.js.map

package/node_modules/@humwick/offload/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAA6C,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAmG,MAAM,wBAAwB,CAAC;AACjK,OAAO,EAAE,gBAAgB,EAAiE,MAAM,kBAAkB,CAAC;AACnH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAoI,MAAM,YAAY,CAAC"}