@usine/config 0.2.1 → 0.4.0

package/README.md

@@ -1,15 +1,16 @@
 # @usine/config
 
-Reads and edits the authored files in a [usine](https://github.com/basaltbytes/usine) instance folder:
+Reads and edits the files of a [usine](https://github.com/basaltbytes/usine) instance folder. The [`usine.yaml`](https://docs.usine.dev/reference/configuration/usine-yaml/), [loop file](https://docs.usine.dev/reference/configuration/loop-files/), and [agent file](https://docs.usine.dev/reference/configuration/agent-files/) references describe every key.
 
-- `usine.yaml` defines the schema version, factory-wide GitHub labels, managed-repo registry, settings, workers, webhook mode, and operator login.
-- `loops/*.md` combines strict YAML frontmatter with a Markdown prompt. The parser type-checks the trigger and every `{{ CEL expression }}` against that trigger's payload.
-- `agents/*.md` records a named agent's harness, model, effort, optional parent model, optional parent effort, and persona.
-- `updateYaml` and `updateFrontmatter` change one path through the YAML document tree while retaining comments, key order, and the Markdown body.
+- `usine.yaml`: schema version, factory-wide GitHub labels, the managed-repo registry, settings, workers, webhook mode, and operator login.
+- `loops/*.md`: strict YAML frontmatter and a Markdown prompt. The parser type-checks the trigger and every `{{ CEL expression }}` against the trigger's payload.
+- `agents/*.md`: harness, model, effort, optional parent model and parent effort, and persona.
 
-Authored keys are snake_case (`poll_interval`, `max_concurrent_attempts`); the decoded domain types expose camelCase fields (`pollInterval`, `maxConcurrentAttempts`). The rename is part of the schema, so edits encode back to the authored casing.
+`updateYaml` and `updateFrontmatter` change one path in the YAML tree and keep comments, key order, and the Markdown body. Files use snake_case keys (`poll_interval`, `max_concurrent_attempts`); decoded types use camelCase (`pollInterval`, `maxConcurrentAttempts`). The schema does the rename, so edits keep snake_case.
 
-Declare the GitHub labels used by Loops and Board lanes once. Usine provisions missing declarations in every managed repository; existing definitions are never edited or deleted. `color` is an optional six-digit hexadecimal value without `#`:
+## Labels and lanes
+
+Declare the labels that loops and lanes use once. usine creates missing labels in every managed repo and never edits or deletes labels:
 
 ```yaml
 labels:
@@ -19,11 +20,9 @@ labels:
   - name: ready-for-review
 ```
 
-Label names follow GitHub's contract: at most 50 characters, no surrounding whitespace, and unique without regard to case; descriptions are at most 100 characters. A lane source or trigger-expression string literal that refers to an undeclared label becomes a non-blocking entry in `LoadedInstance.warnings`; prose in prompt bodies is not inspected.
-
-Set `settings.max_children` to the number of child sessions one Attempt may spawn. The default is 4, and the count includes sequential and concurrent child sessions.
+An undeclared label in a lane source or a trigger expression string literal adds a non-blocking entry to `LoadedInstance.warnings`. Prompt prose isn't checked.
 
-Each managed repository can define an exclusive Board lane map. A lane accepts one or more GitHub label or Item-state sources:
+Each managed repo can define an exclusive board lane map of label and item state sources:
 
 ```yaml
 repos:
@@ -38,16 +37,31 @@ repos:
           - state: pr-open
 ```
 
-Valid state sources are `issue-open`, `issue-closed`, `pr-open`, `pr-closed`, and `pr-merged`. Lane names and sources must be unique within the repository. Repositories without an authored map receive proposed lanes from the labels observed during GitHub polling.
+`isSettledItemState` reports the settled states, `issue-closed`, `pr-closed`, and `pr-merged`; the board places such an item by state alone, whatever its labels. A repo without a lane map gets proposed lanes from the labels that polling finds.
+
+## Settings and workers
+
+`settings.max_children` (default 4) limits the child sessions, sequential and concurrent, that one attempt can start. Without a `workers` key, the parser adds a local worker named `local` that runs one attempt at a time. A worker's `kind` (`local`, `exe.dev`, or `ssh`) selects its executor. An SSH worker's `container` (`WorkerContainer`) sets the image and the `cpus`, `memory_mib`, and `pids` limits of each attempt container; each limit is optional, and the executor derives an unset one from the machine at preflight.
+
+Issue and pull request loops accept `max_cycles`, a positive integer (default 3): the number of runs each loop can open on an item between operator resets. The first admission past it blocks runs from every loop on the item. Schedule loops are exempt. See [Write review and fix loops](https://docs.usine.dev/guides/review-fix-loops/).
+
+A loop's optional `priority`, a positive integer (`LoopFile.priority`, `LoopPriority`), ranks its runs for a free worker slot before runs that lane order ranks, higher first. See [Loop files](https://docs.usine.dev/reference/configuration/loop-files/#priority).
+
+## Load an instance
+
+`InstanceFolder.load` takes an `InstanceDirectory` (`@usine/core/instance`) and returns one atomic `LoadedInstance` snapshot:
 
-`workers` must contain at least one uniquely named worker. If the key is absent, the parser supplies one local worker named `local` with a concurrency limit of one. Set `kind` to `local` or `exe.dev` to select its executor, and set `max_concurrent_attempts` to control how many Attempts it can run at once.
+- An invalid `usine.yaml` fails the load with `FactoryConfigError`.
+- An invalid loop goes to `quarantinedLoops` with a `ConfigFileError` naming the file and stage. Valid loops still load.
+- Invalid agents go to `invalidAgents`, and loops that use them are quarantined.
+- Non-blocking reference diagnostics go to `warnings`.
 
-`InstanceFolder.load` takes an `InstanceDirectory` (from `@usine/core/instance`) and returns one atomic `LoadedInstance` snapshot. An invalid `usine.yaml` fails the load with a `FactoryConfigError`; an invalid loop enters `quarantinedLoops` with a `ConfigFileError` naming the file and stage, without blocking valid siblings. Invalid agents appear in `invalidAgents`, and loops that name them are quarantined. A `LoadedInstance` always satisfies its own reference rule: every loaded loop names a rostered agent and registered selector entries, enforced at construction. Non-blocking authored-reference diagnostics appear in `warnings`. The `ConfigError` union covers both failure types.
+`ConfigError` is the union of both errors. The `LoadedInstance` constructor enforces that every loop references a rostered agent and registered selector entries.
 
-Import factory settings and registry types from `@usine/config/factory`, Board lanes from `@usine/config/board`, and label declarations from `@usine/config/label`. Authored loop, trigger, and agent schemas are available at `/loop`, `/trigger`, and `/agent`; `/selector` provides both the selector schema and matching operation. `/instance` provides `LoadedInstance` and its warnings, while `/file` provides file paths and typed loading failures. Shared identities and agent personas come from their owning `@usine/core` modules.
+## Imports
 
-The package exports Effect services and layers. Import `InstanceFolder` from `@usine/config/instance-folder` and `ConfigParser` from `@usine/config/parser`. Supply `FileSystem.FileSystem` and `Path.Path` implementations when composing `InstanceFolder.layer`; `ConfigParser.layer` requires `ExpressionEngine` from `@usine/expression/expression-engine`.
+Subpaths: `/factory` (settings and registry), `/board` (lanes), `/label`, `/loop`, `/trigger`, `/agent`, `/selector` (schema and matching), `/instance` (`LoadedInstance` and warnings), and `/file` (file paths and loading failures). Shared identities and agent personas come from `@usine/core`.
 
-All APIs remain 0.x and can change between minor releases.
+`InstanceFolder` (`/instance-folder`) and `ConfigParser` (`/parser`) are Effect services. `InstanceFolder.layer` needs `FileSystem.FileSystem` and `Path.Path`; `ConfigParser.layer` needs `ExpressionEngine` from `@usine/expression/expression-engine`.
 
-Issue and pull-request Loops accept `max_cycles`, a positive integer defaulting to three. Each Loop may open that many Runs on an Item between operator resets. The first excess admission blocks further Runs from every Loop on the Item. Schedule Loops are exempt. See the [review/fix guide](../../docs/guides/review-fix-loops.md) for authored examples.
+The 0.x APIs can change between minor releases.

package/dist/agent.d.ts

@@ -10,16 +10,15 @@ declare const AgentFile_base: Schema.Class<AgentFile, Schema.Struct<{
     readonly parentEffort: Schema.Option<Schema.Literals<readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"]>>;
     readonly persona: Schema.brand<Schema.String, "AgentPersona">;
 }>, {}>;
-/** An Agent's authored brain, parent overrides, and standing instructions, named by its Markdown filename. */
+/** A parsed Agent Markdown file; `name` comes from the filename. */
 export declare class AgentFile extends AgentFile_base {
-    /** The roster member represented by this file, including persona and parent overrides. */
     get agent(): Agent;
 }
 declare const InvalidAgent_base: Schema.Class<InvalidAgent, Schema.Struct<{
     readonly file: Schema.brand<Schema.NonEmptyString, "InstancePath">;
     readonly error: typeof ConfigFileError;
 }>, {}>;
-/** An Agent file excluded from the roster because it could not be loaded. */
+/** An Agent file that failed to load and is left out of the roster. */
 export declare class InvalidAgent extends InvalidAgent_base {
 }
 export {};

package/dist/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAA2B,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAgB,eAAe,EAAE,MAAM,WAAW,CAAC;;;;;;;;;;AAE1D,8GAA8G;AAC9G,qBAAa,SAAU,SAAQ,cAQ7B;IACA,0FAA0F;IAC1F,IAAI,KAAK,IAAI,KAAK,CAQjB;CACF;;;;;AAED,6EAA6E;AAC7E,qBAAa,YAAa,SAAQ,iBAGhC;CAAG"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAA2B,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAgB,eAAe,EAAE,MAAM,WAAW,CAAC;;;;;;;;;;AAE1D,oEAAoE;AACpE,qBAAa,SAAU,SAAQ,cAQ7B;IACA,IAAI,KAAK,IAAI,KAAK,CAQjB;CACF;;;;;AAED,uEAAuE;AACvE,qBAAa,YAAa,SAAQ,iBAGhC;CAAG"}

package/dist/agent.js

@@ -2,7 +2,7 @@ import { Agent, AgentPersona, AgentName } from "@usine/core/agent";
 import { BrainSpec, Effort, Harness, ModelId } from "@usine/core/agent/brain";
 import { Schema } from "effect";
 import { InstancePath, ConfigFileError } from "./file.js";
-/** An Agent's authored brain, parent overrides, and standing instructions, named by its Markdown filename. */
+/** A parsed Agent Markdown file; `name` comes from the filename. */
 export class AgentFile extends Schema.Class("@usine/config/AgentFile")({
     name: AgentName,
     harness: Harness,
@@ -12,7 +12,6 @@ export class AgentFile extends Schema.Class("@usine/config/AgentFile")({
     parentEffort: Schema.Option(Effort),
     persona: AgentPersona,
 }) {
-    /** The roster member represented by this file, including persona and parent overrides. */
     get agent() {
         return new Agent({
             name: this.name,
@@ -23,7 +22,7 @@ export class AgentFile extends Schema.Class("@usine/config/AgentFile")({
         });
     }
 }
-/** An Agent file excluded from the roster because it could not be loaded. */
+/** An Agent file that failed to load and is left out of the roster. */
 export class InvalidAgent extends Schema.Class("@usine/config/InvalidAgent")({
     file: InstancePath,
     error: ConfigFileError,

package/dist/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE1D,8GAA8G;AAC9G,MAAM,OAAO,SAAU,SAAQ,MAAM,CAAC,KAAK,CAAY,yBAAyB,CAAC,CAAC;IAChF,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,MAAM;IACd,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,YAAY;CACtB,CAAC;IACA,0FAA0F;IAC1F,IAAI,KAAK;QACP,OAAO,IAAI,KAAK,CAAC;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACvF,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,KAAK,CAAe,4BAA4B,CAAC,CAAC;IACzF,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,eAAe;CACvB,CAAC;CAAG"}
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE1D,oEAAoE;AACpE,MAAM,OAAO,SAAU,SAAQ,MAAM,CAAC,KAAK,CAAY,yBAAyB,CAAC,CAAC;IAChF,IAAI,EAAE,SAAS;IACf,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,MAAM;IACd,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,YAAY;CACtB,CAAC;IACA,IAAI,KAAK;QACP,OAAO,IAAI,KAAK,CAAC;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACvF,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,KAAK,CAAe,4BAA4B,CAAC,CAAC;IACzF,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,eAAe;CACvB,CAAC;CAAG"}

package/dist/board.d.ts

@@ -1,30 +1,35 @@
 import { Schema } from "effect";
-/** The operator-visible name of one lane on a Project's Board. */
 export declare const LaneName: Schema.brand<Schema.String, "LaneName">;
 export type LaneName = typeof LaneName.Type;
-/** An issue or pull-request state that can place an Item in a Board lane. */
 export declare const LaneItemState: Schema.Literals<readonly ["issue-open", "issue-closed", "pr-open", "pr-closed", "pr-merged"]>;
 export type LaneItemState = typeof LaneItemState.Type;
+/** The state of a closed issue or a closed or merged pull request. */
+export declare const SettledItemState: Schema.Literals<readonly ["issue-closed", "pr-closed", "pr-merged"]>;
+export type SettledItemState = typeof SettledItemState.Type;
+/**
+ * Returns whether `state` is a closed issue or a closed or merged pull request, which the Board
+ * places by state regardless of labels.
+ */
+export declare const isSettledItemState: (state: LaneItemState) => state is SettledItemState;
 declare const LabelLaneSource_base: Schema.Class<LabelLaneSource, Schema.Struct<{
     readonly label: Schema.brand<Schema.String, "GitHubLabelName">;
 }>, {}>;
-/** Places Items with this GitHub label in the lane; Board moves can write the label. */
+/** A lane source that matches Items with this GitHub label, which Board moves can set. */
 export declare class LabelLaneSource extends LabelLaneSource_base {
 }
 declare const StateLaneSource_base: Schema.Class<StateLaneSource, Schema.Struct<{
     readonly state: Schema.Literals<readonly ["issue-open", "issue-closed", "pr-open", "pr-closed", "pr-merged"]>;
 }>, {}>;
-/** Places Items with this GitHub state in the lane; Board moves cannot change the state. */
+/** A lane source that matches Items in this state, which Board moves can't change. */
 export declare class StateLaneSource extends StateLaneSource_base {
 }
-/** A GitHub label or Item state that routes matching Items to a Board lane. */
 export declare const LaneSource: Schema.Union<readonly [typeof LabelLaneSource, typeof StateLaneSource]>;
 export type LaneSource = typeof LaneSource.Type;
 declare const Lane_base: Schema.Class<Lane, Schema.Struct<{
     readonly name: Schema.brand<Schema.String, "LaneName">;
     readonly sources: Schema.$Array<Schema.Union<readonly [typeof LabelLaneSource, typeof StateLaneSource]>>;
 }>, {}>;
-/** A named Board column containing Items that match any of its configured sources. */
+/** A Board column that contains the Items matching any of `sources`. */
 export declare class Lane extends Lane_base {
 }
 export {};

package/dist/board.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../src/board.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,kEAAkE;AAClE,eAAO,MAAM,QAAQ,yCAEpB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;AAE5C,6EAA6E;AAC7E,eAAO,MAAM,aAAa,+FAMxB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;;;;AAEtD,wFAAwF;AACxF,qBAAa,eAAgB,SAAQ,oBAIpC;CAAG;;;;AAEJ,4FAA4F;AAC5F,qBAAa,eAAgB,SAAQ,oBAIpC;CAAG;AAEJ,+EAA+E;AAC/E,eAAO,MAAM,UAAU,yEAAmD,CAAC;AAE3E,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;;;;;AAEhD,sFAAsF;AACtF,qBAAa,IAAK,SAAQ,SAGxB;CAAG"}
+{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../src/board.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIhC,eAAO,MAAM,QAAQ,yCAEpB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;AAE5C,eAAO,MAAM,aAAa,+FAMxB,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,sEAA8D,CAAC;AAE5F,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;AAI5D;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAAW,aAAa,KAAG,KAAK,IAAI,gBACjD,CAAC;;;;AAEnB,0FAA0F;AAC1F,qBAAa,eAAgB,SAAQ,oBAIpC;CAAG;;;;AAEJ,sFAAsF;AACtF,qBAAa,eAAgB,SAAQ,oBAIpC;CAAG;AAEJ,eAAO,MAAM,UAAU,yEAAmD,CAAC;AAE3E,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;;;;;AAEhD,wEAAwE;AACxE,qBAAa,IAAK,SAAQ,SAGxB;CAAG"}

package/dist/board.js

@@ -1,9 +1,7 @@
 import { Schema } from "effect";
 import { nonBlankString } from "./checks.js";
 import { GitHubLabelName } from "./label.js";
-/** The operator-visible name of one lane on a Project's Board. */
 export const LaneName = nonBlankString("Expected a non-blank lane name").pipe(Schema.brand("LaneName"));
-/** An issue or pull-request state that can place an Item in a Board lane. */
 export const LaneItemState = Schema.Literals([
     "issue-open",
     "issue-closed",
@@ -11,19 +9,26 @@ export const LaneItemState = Schema.Literals([
     "pr-closed",
     "pr-merged",
 ]);
-/** Places Items with this GitHub label in the lane; Board moves can write the label. */
+/** The state of a closed issue or a closed or merged pull request. */
+export const SettledItemState = Schema.Literals(["issue-closed", "pr-closed", "pr-merged"]);
+const isSettled = Schema.is(SettledItemState);
+/**
+ * Returns whether `state` is a closed issue or a closed or merged pull request, which the Board
+ * places by state regardless of labels.
+ */
+export const isSettledItemState = (state) => isSettled(state);
+/** A lane source that matches Items with this GitHub label, which Board moves can set. */
 export class LabelLaneSource extends Schema.Class("@usine/config/LabelLaneSource")({
     label: GitHubLabelName,
 }) {
 }
-/** Places Items with this GitHub state in the lane; Board moves cannot change the state. */
+/** A lane source that matches Items in this state, which Board moves can't change. */
 export class StateLaneSource extends Schema.Class("@usine/config/StateLaneSource")({
     state: LaneItemState,
 }) {
 }
-/** A GitHub label or Item state that routes matching Items to a Board lane. */
 export const LaneSource = Schema.Union([LabelLaneSource, StateLaneSource]);
-/** A named Board column containing Items that match any of its configured sources. */
+/** A Board column that contains the Items matching any of `sources`. */
 export class Lane extends Schema.Class("@usine/config/Lane")({
     name: LaneName,
     sources: Schema.Array(LaneSource).check(Schema.isNonEmpty()),

package/dist/board.js.map

@@ -1 +1 @@
-{"version":3,"file":"board.js","sourceRoot":"","sources":["../src/board.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,kEAAkE;AAClE,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACzB,CAAC;AAIF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3C,YAAY;IACZ,cAAc;IACd,SAAS;IACT,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAIH,wFAAwF;AACxF,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,+BAA+B,CAAC,CACjG;IACE,KAAK,EAAE,eAAe;CACvB,CACF;CAAG;AAEJ,4FAA4F;AAC5F,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,+BAA+B,CAAC,CACjG;IACE,KAAK,EAAE,aAAa;CACrB,CACF;CAAG;AAEJ,+EAA+E;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;AAI3E,sFAAsF;AACtF,MAAM,OAAO,IAAK,SAAQ,MAAM,CAAC,KAAK,CAAO,oBAAoB,CAAC,CAAC;IACjE,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;CAC7D,CAAC;CAAG"}
+{"version":3,"file":"board.js","sourceRoot":"","sources":["../src/board.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,CAAC,gCAAgC,CAAC,CAAC,IAAI,CAC3E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACzB,CAAC;AAIF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3C,YAAY;IACZ,cAAc;IACd,SAAS;IACT,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAIH,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAI5F,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAoB,EAA6B,EAAE,CACpF,SAAS,CAAC,KAAK,CAAC,CAAC;AAEnB,0FAA0F;AAC1F,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,+BAA+B,CAAC,CACjG;IACE,KAAK,EAAE,eAAe;CACvB,CACF;CAAG;AAEJ,sFAAsF;AACtF,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,+BAA+B,CAAC,CACjG;IACE,KAAK,EAAE,aAAa;CACrB,CACF;CAAG;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC;AAI3E,wEAAwE;AACxE,MAAM,OAAO,IAAK,SAAQ,MAAM,CAAC,KAAK,CAAO,oBAAoB,CAAC,CAAC;IACjE,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;CAC7D,CAAC;CAAG"}

package/dist/checks.d.ts

@@ -1,3 +1,6 @@
+import { type RepositoryName } from "@usine/core/repository";
 import { Schema } from "effect";
 export declare const nonBlankString: (message: string) => Schema.String;
+/** Returns a filter that rejects two names GitHub treats as the same repository. */
+export declare const uniqueRepositoryNames: <A>(nameOf: (value: A) => RepositoryName) => import("effect/SchemaAST").Filter<readonly A[]>;
 //# sourceMappingURL=checks.d.ts.map

package/dist/checks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,eAAO,MAAM,cAAc,YAAa,MAAM,kBACa,CAAC"}
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,eAAO,MAAM,cAAc,YAAa,MAAM,kBACa,CAAC;AAE5D,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,GAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,cAAc,oDAK1E,CAAC"}

package/dist/checks.js

@@ -1,3 +1,6 @@
+import { canonicalRepositoryName } from "@usine/core/repository";
 import { Schema } from "effect";
 export const nonBlankString = (message) => Schema.String.check(Schema.isPattern(/\S/u, { message }));
+/** Returns a filter that rejects two names GitHub treats as the same repository. */
+export const uniqueRepositoryNames = (nameOf) => Schema.makeFilter((values) => new Set(values.map((value) => canonicalRepositoryName(nameOf(value)))).size === values.length, { message: "Expected unique repository names, ignoring case" });
 //# sourceMappingURL=checks.js.map

package/dist/checks.js.map

@@ -1 +1 @@
-{"version":3,"file":"checks.js","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,EAAE,CAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../src/checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAuB,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,EAAE,CAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAE5D,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAI,MAAoC,EAAE,EAAE,CAC/E,MAAM,CAAC,UAAU,CACf,CAAC,MAAM,EAAE,EAAE,CACT,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAC/F,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAC/D,CAAC"}

package/dist/factory.d.ts

@@ -1,46 +1,231 @@
 import { Schema } from "effect";
 import { Lane } from "./board.ts";
 import { DeclaredLabel } from "./label.ts";
-/** A factory-defined repository grouping that Loops can select by tag. */
+/** A repository tag that Loop selectors match. */
 export declare const RegistryTag: Schema.brand<Schema.String, "RegistryTag">;
 export type RegistryTag = typeof RegistryTag.Type;
-/** GitHub login identifying the human operator for this factory. */
-export declare const OperatorLogin: Schema.brand<Schema.String, "OperatorLogin">;
-export type OperatorLogin = typeof OperatorLogin.Type;
 declare const ManagedRepo_base: Schema.Class<ManagedRepo, Schema.Struct<{
     readonly name: Schema.brand<Schema.String, "RepositoryName">;
     readonly tags: Schema.withDecodingDefaultKey<Schema.$Array<Schema.brand<Schema.String, "RegistryTag">>, never>;
     readonly lanes: Schema.withDecodingDefaultKey<Schema.$Array<typeof Lane>, never>;
 }>, {}>;
-/** A repository the factory manages, with its selector tags and configured Board lanes. */
 export declare class ManagedRepo extends ManagedRepo_base {
 }
-declare const Worker_base: Schema.Class<Worker, Schema.Struct<{
+declare const LocalWorker_base: Schema.Class<LocalWorker, Schema.Struct<{
     readonly name: Schema.brand<Schema.String, "WorkerName">;
-    readonly kind: Schema.Literals<readonly ["local", "exe.dev"]>;
+    readonly kind: Schema.Literal<"local">;
     readonly maxConcurrentAttempts: Schema.withDecodingDefaultKey<Schema.Int, never>;
 }>, {}>;
-/** A named place to execute Attempts, with the number it may run at the same time. */
-export declare class Worker extends Worker_base {
+/** A Worker that runs Attempts on the orchestrator's machine. */
+export declare class LocalWorker extends LocalWorker_base {
 }
+declare const ExeDevWorker_base: Schema.Class<ExeDevWorker, Schema.Struct<{
+    readonly name: Schema.brand<Schema.String, "WorkerName">;
+    readonly kind: Schema.Literal<"exe.dev">;
+    readonly maxConcurrentAttempts: Schema.withDecodingDefaultKey<Schema.Int, never>;
+}>, {}>;
+/** A Worker on the exe.dev VM with the same name. */
+export declare class ExeDevWorker extends ExeDevWorker_base {
+}
+declare const WorkerGateway_base: Schema.Class<WorkerGateway, Schema.Struct<{
+    readonly domain: Schema.brand<Schema.String, "GatewayDomain">;
+    readonly destination: Schema.brand<Schema.String, "SshDestination">;
+    readonly adminPort: Schema.withDecodingDefaultKey<Schema.brand<Schema.Int, "GatewayAdminPort">, never>;
+    readonly adminTokenEnv: Schema.brand<Schema.String, "EnvironmentVariableName">;
+    readonly llmProviders: Schema.withDecodingDefaultKey<Schema.$Array<Schema.Literals<readonly ["anthropic", "openai"]>>, never>;
+}>, {}>;
+/**
+ * The Gateway in front of an SSH Worker's machine on a private network (ADR 0027).
+ *
+ * - `domain`: the Gateway's private DNS domain.
+ * - `destination`: the Gateway's `ssh` destination, usually the Host alias in the Worker's
+ *   `ProxyJump`. The executor forwards through it to the admin API at `adminPort` on the
+ *   Gateway's loopback interface.
+ * - `adminTokenEnv`: the orchestrator environment variable with the admin token, read when
+ *   `usine up` starts or a reload adds the Worker.
+ * - `llmProviders`: the providers whose credential the Gateway injects: `anthropic` for Claude
+ *   Code, `openai` for Codex. Harnesses for other providers use the operator's login on the
+ *   Worker through the forward proxy.
+ */
+export declare class WorkerGateway extends WorkerGateway_base {
+}
+declare const WorkerContainer_base: Schema.Class<WorkerContainer, Schema.Struct<{
+    readonly image: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "ContainerImage">>;
+    readonly cpus: Schema.OptionFromOptionalKey<Schema.brand<Schema.Finite, "ContainerCpus">>;
+    readonly memoryMib: Schema.OptionFromOptionalKey<Schema.brand<Schema.Int, "ContainerMemoryMib">>;
+    readonly pids: Schema.OptionFromOptionalKey<Schema.brand<Schema.Int, "ContainerPids">>;
+}>, {}>;
+/**
+ * The container that each Attempt on an SSH Worker runs in, if the machine has Docker.
+ *
+ * - `image`: the image to run. If `None`, the executor's image for the harness versions of this
+ *   release.
+ * - `cpus`, `memoryMib`, and `pids`: the limits of each Attempt's container. If `None`, the
+ *   executor derives the limit from the machine at preflight: the machine's total less a reserve
+ *   for its own processes, divided by `maxConcurrentAttempts`.
+ */
+export declare class WorkerContainer extends WorkerContainer_base {
+}
+declare const ProviderApiKeys_base: Schema.Class<ProviderApiKeys, Schema.Struct<{
+    readonly anthropic: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "EnvironmentVariableName">>;
+    readonly openai: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "EnvironmentVariableName">>;
+}>, {}>;
+/**
+ * The orchestrator environment variables with the LLM provider API keys that each Attempt on a
+ * provisioned Worker gets in its environment, read when `usine up` starts or a reload adds the
+ * Worker. `anthropic` becomes `ANTHROPIC_API_KEY` for Claude Code, and `openai` becomes
+ * `OPENAI_API_KEY` for Codex.
+ */
+export declare class ProviderApiKeys extends ProviderApiKeys_base {
+}
+declare const HetznerProvisioner_base: Schema.Class<HetznerProvisioner, Schema.Struct<{
+    readonly provider: Schema.Literal<"hetzner">;
+    readonly tokenEnv: Schema.brand<Schema.String, "EnvironmentVariableName">;
+    readonly serverType: Schema.brand<Schema.String, "HetznerServerType">;
+    readonly location: Schema.brand<Schema.String, "HetznerLocation">;
+    readonly image: Schema.brand<Schema.String, "HetznerImage">;
+    readonly network: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "HetznerResourceName">>;
+    readonly firewall: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "HetznerResourceName">>;
+    readonly sshKey: Schema.brand<Schema.String, "HetznerResourceName">;
+    readonly sshUser: Schema.withDecodingDefaultKey<Schema.brand<Schema.String, "SshUser">, never>;
+    readonly labels: Schema.withDecodingDefaultKey<Schema.$Record<Schema.String, Schema.String>, never>;
+    readonly apiKeys: Schema.withDecodingDefaultKey<typeof ProviderApiKeys, never>;
+}>, {}>;
+/**
+ * Creates one Hetzner Cloud server per Attempt from a snapshot, and deletes it after the
+ * Attempt (#550).
+ *
+ * - `tokenEnv`: the orchestrator environment variable with a Hetzner Cloud API token with read
+ *   and write access to the project.
+ * - `serverType` and `location`: each server's type and location.
+ * - `image`: the snapshot's ID or description, which `infra/hetzner/snapshot.sh` prints.
+ * - `network`: the private network to attach each server to. With a Gateway, it's the Gateway's
+ *   network and the server gets no public address.
+ * - `firewall`: the project's firewall to apply to each server, such as one that admits SSH only
+ *   from the orchestrator's address to a server with a public address.
+ * - `sshKey`: the name of the SSH key in the project that each server authorizes.
+ * - `sshUser`: the user the executor connects as.
+ * - `labels`: extra labels for each server.
+ * - `apiKeys`: provider API keys for each Attempt, for harnesses whose credential the Gateway
+ *   doesn't have.
+ */
+export declare class HetznerProvisioner extends HetznerProvisioner_base {
+}
+declare const BoatProvisioner_base: Schema.Class<BoatProvisioner, Schema.Struct<{
+    readonly provider: Schema.Literal<"boat">;
+    readonly tokenEnv: Schema.brand<Schema.String, "EnvironmentVariableName">;
+    readonly size: Schema.withDecodingDefaultKey<Schema.Literals<readonly ["small", "default", "large", "xlarge"]>, never>;
+    readonly apiKeys: Schema.withDecodingDefaultKey<typeof ProviderApiKeys, never>;
+}>, {}>;
+/**
+ * Creates one Boat sandbox per Attempt and deletes it after the Attempt (#550). Boat has no
+ * network rules, so a Boat Worker has no Gateway, and each Attempt's GitHub token is on its
+ * machine (ADR 0026). Boat documents no region choice; its machines are in Germany, Finland, and
+ * France.
+ *
+ * - `tokenEnv`: the orchestrator environment variable with a Boat API key.
+ * - `size`: each sandbox's Boat machine type.
+ * - `apiKeys`: provider API keys for each Attempt. A harness without one can't authenticate,
+ *   because a subscription login needs a Gateway.
+ */
+export declare class BoatProvisioner extends BoatProvisioner_base {
+}
+/** The provider that creates one machine per Attempt for an SSH Worker; `provider` selects it. */
+export declare const WorkerProvisioner: Schema.Union<readonly [typeof HetznerProvisioner, typeof BoatProvisioner]>;
+export type WorkerProvisioner = typeof WorkerProvisioner.Type;
+declare const SshWorker_base: Schema.Class<SshWorker, Schema.Struct<{
+    readonly name: Schema.brand<Schema.String, "WorkerName">;
+    readonly kind: Schema.Literal<"ssh">;
+    readonly maxConcurrentAttempts: Schema.withDecodingDefaultKey<Schema.Int, never>;
+    readonly destination: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "SshDestination">>;
+    readonly provisioner: Schema.OptionFromOptionalKey<Schema.Union<readonly [Schema.encodeKeys<typeof HetznerProvisioner, {
+        readonly tokenEnv: "token_env";
+        readonly serverType: "server_type";
+        readonly sshKey: "ssh_key";
+        readonly sshUser: "ssh_user";
+        readonly apiKeys: "api_keys";
+    }>, Schema.encodeKeys<typeof BoatProvisioner, {
+        readonly tokenEnv: "token_env";
+        readonly apiKeys: "api_keys";
+    }>]>>;
+    readonly identityFile: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "SshIdentityFile">>;
+    readonly port: Schema.OptionFromOptionalKey<Schema.brand<Schema.Int, "SshPort">>;
+    readonly root: Schema.brand<Schema.String, "WorkerRoot">;
+    readonly gateway: Schema.OptionFromOptionalKey<Schema.encodeKeys<typeof WorkerGateway, {
+        readonly adminPort: "admin_port";
+        readonly adminTokenEnv: "admin_token_env";
+        readonly llmProviders: "llm_providers";
+    }>>;
+    readonly container: Schema.withDecodingDefaultKey<Schema.encodeKeys<typeof WorkerContainer, {
+        readonly memoryMib: "memory_mib";
+    }>, never>;
+}>, {}>;
+/**
+ * A Linux machine reached with `ssh`, with Worker state under `<root>/workers/<name>`. If
+ * `gateway` is set, the machine stores no GitHub token; the executor sends each Attempt's token
+ * to the Gateway. A Worker sets either `destination`, for one long-lived machine, or
+ * `provisioner`, for one machine per Attempt; `maxConcurrentAttempts` then caps the machines in
+ * flight.
+ */
+export declare class SshWorker extends SshWorker_base {
+}
+declare const CloudflareLlmProviderKey_base: Schema.Class<CloudflareLlmProviderKey, Schema.Struct<{
+    readonly provider: Schema.Literals<readonly ["anthropic", "openai"]>;
+    readonly apiKeyEnv: Schema.brand<Schema.String, "EnvironmentVariableName">;
+}>, {}>;
+/**
+ * An LLM provider whose API key the Cloudflare Worker's outbound handlers hold for each Attempt.
+ * `apiKeyEnv` is the orchestrator environment variable with the key, read when `usine up` starts.
+ */
+export declare class CloudflareLlmProviderKey extends CloudflareLlmProviderKey_base {
+}
+declare const CloudflareWorker_base: Schema.Class<CloudflareWorker, Schema.Struct<{
+    readonly name: Schema.brand<Schema.String, "WorkerName">;
+    readonly kind: Schema.Literal<"cloudflare">;
+    readonly maxConcurrentAttempts: Schema.withDecodingDefaultKey<Schema.Int, never>;
+    readonly workerUrl: Schema.URLFromString;
+    readonly accessClientIdEnv: Schema.brand<Schema.String, "EnvironmentVariableName">;
+    readonly accessClientSecretEnv: Schema.brand<Schema.String, "EnvironmentVariableName">;
+    readonly image: Schema.brand<Schema.String, "CloudflareImageName">;
+    readonly instanceType: Schema.withDecodingDefaultKey<Schema.Literals<readonly ["lite", "basic", "standard-1", "standard-2", "standard-3", "standard-4"]>, never>;
+    readonly llmProviders: Schema.withDecodingDefaultKey<Schema.$Array<Schema.encodeKeys<typeof CloudflareLlmProviderKey, {
+        readonly apiKeyEnv: "api_key_env";
+    }>>, never>;
+}>, {}>;
+/**
+ * A Worker that runs each Attempt in its own Cloudflare sandbox, through the Worker that the
+ * operator deploys from `@usine/cloudflare`.
+ *
+ * - `workerUrl`: the deployed Worker's origin.
+ * - `accessClientIdEnv` and `accessClientSecretEnv`: the orchestrator environment variables with
+ *   the Cloudflare Access service token that the Worker accepts, read when `usine up` starts.
+ * - `image`: the name of the image in the Worker's `containers[].images`.
+ * - `instanceType`: the container instance type of each sandbox.
+ * - `llmProviders`: the providers whose API key the Worker's outbound handlers inject. Claude Code
+ *   needs `anthropic` and Codex needs `openai`; a sandbox holds no harness login.
+ */
+export declare class CloudflareWorker extends CloudflareWorker_base {
+}
+/** A configured Worker; `kind` selects the adapter. */
+export declare const Worker: Schema.Union<readonly [typeof LocalWorker, typeof ExeDevWorker, typeof SshWorker, typeof CloudflareWorker]>;
+export type Worker = typeof Worker.Type;
 declare const Settings_base: Schema.Class<Settings, Schema.Struct<{
-    /** Seconds between routine GitHub polling cycles; defaults to 60. */
+    /** The interval between GitHub polling cycles, in seconds. */
     readonly pollInterval: Schema.withDecodingDefaultKey<Schema.Int, never>;
-    /** Total child sessions allowed over one Attempt's lifetime, including sequential spawns; defaults to four. */
+    /** The maximum number of child sessions per Attempt, counting sequential spawns. */
     readonly maxChildren: Schema.withDecodingDefaultKey<Schema.brand<Schema.Int, "ChildSessionBudget">, never>;
-    /** Configured Attempt duration ceiling in minutes; defaults to 60. */
-    readonly maxAttemptMinutes: Schema.withDecodingDefaultKey<Schema.Int, never>;
-    /** Configured total-token ceiling per Attempt; defaults to 10,000,000. */
-    readonly maxAttemptTokens: Schema.withDecodingDefaultKey<Schema.Int, never>;
-    /** Parent model used when the Agent has no override; an absent default leaves selection to Pi. */
+    /** The wall-clock limit per Attempt, in minutes, or `None` for no limit. */
+    readonly maxAttemptMinutes: Schema.OptionFromOptionalKey<Schema.Int>;
+    /** The token limit per Attempt, counting the parent and every child, or `None` for no limit. */
+    readonly maxAttemptTokens: Schema.OptionFromOptionalKey<Schema.Int>;
+    /** The parent model for Agents that set none, or `None` to let Pi select it. */
     readonly parentModel: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "ModelId">>;
-    /** Default parent reasoning effort; if neither Agent nor factory supplies one, the child's effort applies. */
+    /** The parent reasoning effort for Agents that set none, or `None` to use the child's effort. */
     readonly parentEffort: Schema.OptionFromOptionalKey<Schema.Literals<readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"]>>;
 }>, {}>;
-/** Factory-wide polling, Attempt limits, and defaults for the coordinating parent. */
 export declare class Settings extends Settings_base {
 }
-/** How GitHub hints reach the factory to request earlier polling; routine polling remains the backstop. */
+/** The source of GitHub webhook events that trigger an early poll; polling continues in every mode. */
 export declare const Webhooks: Schema.Union<readonly [Schema.Struct<{
     readonly mode: Schema.Literal<"off">;
 }>, Schema.Struct<{
@@ -52,6 +237,18 @@ export declare const Webhooks: Schema.Union<readonly [Schema.Struct<{
     readonly publicUrl: "public_url";
 }>]>;
 export type Webhooks = typeof Webhooks.Type;
+declare const Tracing_base: Schema.Class<Tracing, Schema.Struct<{
+    /**
+     * The collector's OTLP/HTTP traces endpoint, used as given, such as
+     * `http://localhost:4318/v1/traces`. It has no credentials or query string.
+     */
+    readonly otlpUrl: Schema.URLFromString;
+    /** The `service.name` resource attribute of every exported span. */
+    readonly serviceName: Schema.withDecodingDefaultKey<Schema.String, never>;
+}>, {}>;
+/** Span export over OTLP/HTTP (ADR 0028). */
+export declare class Tracing extends Tracing_base {
+}
 declare const UsineConfig_base: Schema.Class<UsineConfig, Schema.Struct<{
     readonly version: Schema.Literal<1>;
     readonly labels: Schema.withDecodingDefaultKey<Schema.$Array<typeof DeclaredLabel>, never>;
@@ -64,9 +261,44 @@ declare const UsineConfig_base: Schema.Class<UsineConfig, Schema.Struct<{
         readonly parentModel: "parent_model";
         readonly parentEffort: "parent_effort";
     }>, never>;
-    readonly workers: Schema.withDecodingDefaultKey<Schema.$Array<Schema.encodeKeys<typeof Worker, {
+    readonly workers: Schema.withDecodingDefaultKey<Schema.$Array<Schema.Union<readonly [Schema.encodeKeys<typeof LocalWorker, {
         readonly maxConcurrentAttempts: "max_concurrent_attempts";
-    }>>, never>;
+    }>, Schema.encodeKeys<typeof ExeDevWorker, {
+        readonly maxConcurrentAttempts: "max_concurrent_attempts";
+    }>, Schema.decodeTo<typeof SshWorker, Schema.Struct<{
+        readonly container: Schema.toEncoded<Schema.withDecodingDefaultKey<Schema.encodeKeys<typeof WorkerContainer, {
+            readonly memoryMib: "memory_mib";
+        }>, never>>;
+        readonly destination: Schema.toEncoded<Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "SshDestination">>>;
+        readonly gateway: Schema.toEncoded<Schema.OptionFromOptionalKey<Schema.encodeKeys<typeof WorkerGateway, {
+            readonly adminPort: "admin_port";
+            readonly adminTokenEnv: "admin_token_env";
+            readonly llmProviders: "llm_providers";
+        }>>>;
+        readonly identity_file: Schema.toEncoded<Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "SshIdentityFile">>>;
+        readonly kind: Schema.toEncoded<Schema.Literal<"ssh">>;
+        readonly max_concurrent_attempts: Schema.toEncoded<Schema.withDecodingDefaultKey<Schema.Int, never>>;
+        readonly name: Schema.toEncoded<Schema.brand<Schema.String, "WorkerName">>;
+        readonly port: Schema.toEncoded<Schema.OptionFromOptionalKey<Schema.brand<Schema.Int, "SshPort">>>;
+        readonly provisioner: Schema.toEncoded<Schema.OptionFromOptionalKey<Schema.Union<readonly [Schema.encodeKeys<typeof HetznerProvisioner, {
+            readonly tokenEnv: "token_env";
+            readonly serverType: "server_type";
+            readonly sshKey: "ssh_key";
+            readonly sshUser: "ssh_user";
+            readonly apiKeys: "api_keys";
+        }>, Schema.encodeKeys<typeof BoatProvisioner, {
+            readonly tokenEnv: "token_env";
+            readonly apiKeys: "api_keys";
+        }>]>>>;
+        readonly root: Schema.toEncoded<Schema.brand<Schema.String, "WorkerRoot">>;
+    }>, never, never>, Schema.encodeKeys<typeof CloudflareWorker, {
+        readonly maxConcurrentAttempts: "max_concurrent_attempts";
+        readonly workerUrl: "worker_url";
+        readonly accessClientIdEnv: "access_client_id_env";
+        readonly accessClientSecretEnv: "access_client_secret_env";
+        readonly instanceType: "instance_type";
+        readonly llmProviders: "llm_providers";
+    }>]>>, never>;
     readonly webhooks: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Struct<{
         readonly mode: Schema.Literal<"off">;
     }>, Schema.Struct<{
@@ -78,8 +310,12 @@ declare const UsineConfig_base: Schema.Class<UsineConfig, Schema.Struct<{
         readonly publicUrl: "public_url";
     }>]>, never>;
     readonly operator: Schema.OptionFromOptionalKey<Schema.brand<Schema.String, "OperatorLogin">>;
+    readonly tracing: Schema.OptionFromOptionalKey<Schema.encodeKeys<typeof Tracing, {
+        readonly otlpUrl: "otlp_url";
+        readonly serviceName: "service_name";
+    }>>;
 }>, {}>;
-/** The factory's repository registry, Worker capacity, labels, and operating defaults from `usine.yaml`. */
+/** The decoded `usine.yaml`. */
 export declare class UsineConfig extends UsineConfig_base {
 }
 export {};