@usine/core 0.4.0 → 0.5.0

package/dist/attempt/salvage.js

@@ -9,6 +9,18 @@ export class SalvagePushed extends Schema.TaggedClass("AttemptSalvage/Pushed")("
     commit: CommitSha,
 }) {
 }
+/**
+ * Unfinished work pushed to `ref` at `commit`, without files that the salvage can't push, such as
+ * a file over GitHub's size limit. The workspace at `path` on the Worker keeps their only copy,
+ * and `message` names them.
+ */
+export class SalvagePartlyPushed extends Schema.TaggedClass("AttemptSalvage/PartlyPushed")("PartlyPushed", {
+    ref: SalvageRef,
+    commit: CommitSha,
+    path: Schema.NonEmptyString,
+    message: Schema.String,
+}) {
+}
 /** A failed salvage that left the workspace at `path` on the Worker. `commit` is `None` if inspection failed. */
 export class SalvageRetained extends Schema.TaggedClass("AttemptSalvage/Retained")("Retained", {
     path: Schema.NonEmptyString,
@@ -16,6 +28,22 @@ export class SalvageRetained extends Schema.TaggedClass("AttemptSalvage/Retained
     message: Schema.String,
 }) {
 }
+/**
+ * A salvage whose push the remote refused for a reason that pushing again can't fix, such as a
+ * file over GitHub's size limit. It left the workspace at `path` on the Worker, and recovery
+ * doesn't push `commit` again.
+ */
+export class SalvageRejected extends Schema.TaggedClass("AttemptSalvage/Rejected")("Rejected", {
+    path: Schema.NonEmptyString,
+    commit: CommitSha,
+    message: Schema.String,
+}) {
+}
 /** What the executor kept of the workspace of an unsuccessful Attempt. */
-export const AttemptSalvage = Schema.Union([SalvagePushed, SalvageRetained]);
+export const AttemptSalvage = Schema.Union([
+    SalvagePushed,
+    SalvagePartlyPushed,
+    SalvageRetained,
+    SalvageRejected,
+]);
 //# sourceMappingURL=salvage.js.map

package/dist/attempt/salvage.js.map

@@ -1 +1 @@
-{"version":3,"file":"salvage.js","sourceRoot":"","sources":["../../src/attempt/salvage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAuB,MAAM,kBAAkB,CAAC;AAM/E,2FAA2F;AAC3F,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAGjF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAY,EAAE,MAAqB,EAAc,EAAE,CAC/E,UAAU,CAAC,IAAI,CAAC,iBAAiB,WAAW,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;AAEnE,kFAAkF;AAClF,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,WAAW,CAAgB,uBAAuB,CAAC,CAC3F,QAAQ,EACR;IACE,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,SAAS;CAClB,CACF;CAAG;AAEJ,iHAAiH;AACjH,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,CAAkB,yBAAyB,CAAC,CACjG,UAAU,EACV;IACE,IAAI,EAAE,MAAM,CAAC,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CACF;CAAG;AAEJ,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC"}
+{"version":3,"file":"salvage.js","sourceRoot":"","sources":["../../src/attempt/salvage.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAuB,MAAM,kBAAkB,CAAC;AAM/E,2FAA2F;AAC3F,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAGjF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAY,EAAE,MAAqB,EAAc,EAAE,CAC/E,UAAU,CAAC,IAAI,CAAC,iBAAiB,WAAW,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;AAEnE,kFAAkF;AAClF,MAAM,OAAO,aAAc,SAAQ,MAAM,CAAC,WAAW,CAAgB,uBAAuB,CAAC,CAC3F,QAAQ,EACR;IACE,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,SAAS;CAClB,CACF;CAAG;AAEJ;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,CACzD,6BAA6B,CAC9B,CAAC,cAAc,EAAE;IAChB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CAAC;CAAG;AAEL,iHAAiH;AACjH,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,CAAkB,yBAAyB,CAAC,CACjG,UAAU,EACV;IACE,IAAI,EAAE,MAAM,CAAC,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CACF;CAAG;AAEJ;;;;GAIG;AACH,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,CAAkB,yBAAyB,CAAC,CACjG,UAAU,EACV;IACE,IAAI,EAAE,MAAM,CAAC,cAAc;IAC3B,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC,MAAM;CACvB,CACF;CAAG;AAEJ,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC;IACzC,aAAa;IACb,mBAAmB;IACnB,eAAe;IACf,eAAe;CAChB,CAAC,CAAC"}

package/dist/closed-struct.d.ts

@@ -0,0 +1,7 @@
+import { Schema } from "effect";
+/**
+ * Returns `Schema.Struct(fields)` that fails with "Unexpected key" on any key `fields` doesn't
+ * declare, whatever `onExcessProperty` the decode site passes.
+ */
+export declare const closedStruct: <const Fields extends Schema.Struct.Fields>(fields: Fields) => Schema.Struct<Fields>;
+//# sourceMappingURL=closed-struct.d.ts.map

package/dist/closed-struct.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"closed-struct.d.ts","sourceRoot":"","sources":["../src/closed-struct.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,KAAK,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,UAC5D,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,MAAM,CAQtB,CAAC"}

package/dist/closed-struct.js

@@ -0,0 +1,12 @@
+import { Schema } from "effect";
+/**
+ * Returns `Schema.Struct(fields)` that fails with "Unexpected key" on any key `fields` doesn't
+ * declare, whatever `onExcessProperty` the decode site passes.
+ */
+export const closedStruct = (fields) => {
+    const struct = Schema.Struct(fields);
+    const declared = new Set(Object.keys(fields));
+    const undeclared = Schema.Record(Schema.String.check(Schema.makeFilter((key) => !declared.has(key))), Schema.Never.annotate({ message: "Unexpected key" }));
+    return struct.rebuild(Schema.StructWithRest(struct, [undeclared]).ast);
+};
+//# sourceMappingURL=closed-struct.js.map

package/dist/closed-struct.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"closed-struct.js","sourceRoot":"","sources":["../src/closed-struct.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAc,EACS,EAAE;IACzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAC9B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EACnE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CACrD,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACzE,CAAC,CAAC"}

package/dist/cycle-budget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cycle-budget.d.ts","sourceRoot":"","sources":["../src/cycle-budget.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,wFAAwF;AACxF,eAAO,MAAM,UAAU,wCAEtB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD,kFAAkF;AAClF,eAAO,MAAM,eAAe,6CAE3B,CAAC;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D,eAAO,MAAM,mBAAmB,qDAAqB,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,UAAU,wCAEtB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;;;;;;AAEhD,mFAAmF;AACnF,qBAAa,cAAe,SAAQ,mBAYnC;CAAG;AAEJ,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,kFAAiD,CAAC;AAC/E,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;;;;;;;;;AAE5D,6FAA6F;AAC7F,qBAAa,cAAe,SAAQ,mBAoBnC;IACC,yFAAyF;IACzF,IAAI,eAAe,IAAI,UAAU,CAEhC;CACF"}
+{"version":3,"file":"cycle-budget.d.ts","sourceRoot":"","sources":["../src/cycle-budget.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,wFAAwF;AACxF,eAAO,MAAM,UAAU,wCAEtB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD,kFAAkF;AAClF,eAAO,MAAM,eAAe,6CAE3B,CAAC;AACF,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D,eAAO,MAAM,mBAAmB,qDAAqB,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,UAAU,wCAEtB,CAAC;AACF,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;;;;;;AAEhD,mFAAmF;AACnF,qBAAa,cAAe,SAAQ,mBAUnC;CAAG;AAEJ,sFAAsF;AACtF,eAAO,MAAM,gBAAgB,kFAAiD,CAAC;AAC/E,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;;;;;;;;;AAE5D,6FAA6F;AAC7F,qBAAa,cAAe,SAAQ,mBAkBnC;IACC,yFAAyF;IACzF,IAAI,eAAe,IAAI,UAAU,CAEhC;CACF"}

package/dist/cycle-budget.js

@@ -1,3 +1,4 @@
+import { closedStruct } from "./closed-struct.js";
 import { EventId } from "./event.js";
 import { ItemKey } from "./item.js";
 import { LoopName } from "./loop.js";
@@ -11,32 +12,28 @@ export const DEFAULT_CYCLE_LIMIT = CycleLimit.make(3);
 /** The number of admitted or completed Runs of one Loop on an Item. */
 export const CycleCount = Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)).pipe(Schema.brand("CycleCount"));
 /** The admitted and completed Runs of one Loop in the current cycle generation. */
-export class LoopCycleCount extends Schema.Class("LoopCycleCount")(Schema.Struct({
+export class LoopCycleCount extends Schema.Class("LoopCycleCount")(closedStruct({
     loop: LoopName,
     admitted: CycleCount,
     completed: CycleCount,
-})
-    .check(Schema.makeFilter(({ admitted, completed }) => completed <= admitted, {
+}).check(Schema.makeFilter(({ admitted, completed }) => completed <= admitted, {
     message: "Completed runs can't exceed admitted runs",
-}))
-    .annotate({ parseOptions: { onExcessProperty: "error" } })) {
+}))) {
 }
 /** The ID of the Event and cycle generation that first exhausted an Item's budget. */
 export const CycleBudgetAskId = EventId.pipe(Schema.brand("CycleBudgetAskId"));
 /** An Ask for the operator to reset an Item's cycle budget; no Runs open until the reset. */
-export class CycleBudgetAsk extends Schema.Class("CycleBudgetAsk")(Schema.Struct({
+export class CycleBudgetAsk extends Schema.Class("CycleBudgetAsk")(closedStruct({
     id: CycleBudgetAskId,
     itemKey: ItemKey,
     repository: RepositoryName,
     loop: LoopName,
     limit: CycleLimit,
     counts: Schema.NonEmptyArray(LoopCycleCount),
-})
-    .check(Schema.makeFilter(({ loop, limit, counts }) => new Set(counts.map((count) => count.loop)).size === counts.length &&
+}).check(Schema.makeFilter(({ loop, limit, counts }) => new Set(counts.map((count) => count.loop)).size === counts.length &&
     counts.some((count) => count.loop === loop && count.admitted >= limit), {
     message: "Expected unique participating loops, including the exhausted loop at its limit",
-}))
-    .annotate({ parseOptions: { onExcessProperty: "error" } })) {
+}))) {
     /** The highest `completed` count across Loops; each Loop runs at most once per round. */
     get completedCycles() {
         return CycleCount.make(Math.max(...this.counts.map(({ completed }) => completed)));

package/dist/cycle-budget.js.map

@@ -1 +1 @@
-{"version":3,"file":"cycle-budget.js","sourceRoot":"","sources":["../src/cycle-budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,wFAAwF;AACxF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAC3B,CAAC;AAGF,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAChC,CAAC;AAGF,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEtD,uEAAuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAC3B,CAAC;AAGF,mFAAmF;AACnF,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,gBAAgB,CAAC,CAChF,MAAM,CAAC,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,UAAU;CACtB,CAAC;KACC,KAAK,CACJ,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,IAAI,QAAQ,EAAE;IACpE,OAAO,EAAE,2CAA2C;CACrD,CAAC,CACH;KACA,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC,CAC7D;CAAG;AAEJ,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAG/E,6FAA6F;AAC7F,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,gBAAgB,CAAC,CAChF,MAAM,CAAC,MAAM,CAAC;IACZ,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;CAC7C,CAAC;KACC,KAAK,CACJ,MAAM,CAAC,UAAU,CACf,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAC1B,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;IACjE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EACxE;IACE,OAAO,EAAE,gFAAgF;CAC1F,CACF,CACF;KACA,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC,CAC7D;IACC,yFAAyF;IACzF,IAAI,eAAe;QACjB,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;CACF"}
+{"version":3,"file":"cycle-budget.js","sourceRoot":"","sources":["../src/cycle-budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,wFAAwF;AACxF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAC3B,CAAC;AAGF,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAChC,CAAC;AAGF,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEtD,uEAAuE;AACvE,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAC3B,CAAC;AAGF,mFAAmF;AACnF,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,gBAAgB,CAAC,CAChF,YAAY,CAAC;IACX,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,UAAU;IACpB,SAAS,EAAE,UAAU;CACtB,CAAC,CAAC,KAAK,CACN,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,IAAI,QAAQ,EAAE;IACpE,OAAO,EAAE,2CAA2C;CACrD,CAAC,CACH,CACF;CAAG;AAEJ,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAG/E,6FAA6F;AAC7F,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,gBAAgB,CAAC,CAChF,YAAY,CAAC;IACX,EAAE,EAAE,gBAAgB;IACpB,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;CAC7C,CAAC,CAAC,KAAK,CACN,MAAM,CAAC,UAAU,CACf,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAC1B,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;IACjE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EACxE;IACE,OAAO,EAAE,gFAAgF;CAC1F,CACF,CACF,CACF;IACC,yFAAyF;IACzF,IAAI,eAAe;QACjB,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC;CACF"}

package/dist/instance.d.ts

@@ -2,4 +2,10 @@ import { Schema } from "effect";
 /** The folder with `usine.yaml`, Loop files, and Agent files. */
 export declare const InstanceDirectory: Schema.brand<Schema.NonEmptyString, "InstanceDirectory">;
 export type InstanceDirectory = typeof InstanceDirectory.Type;
+/**
+ * The UUID of one instance folder, which tells apart instances that share a GitHub App. It
+ * stays the same across restarts of the instance.
+ */
+export declare const InstanceId: Schema.brand<Schema.String, "InstanceId">;
+export type InstanceId = typeof InstanceId.Type;
 //# sourceMappingURL=instance.d.ts.map

package/dist/instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,0DAAgE,CAAC;AAC/F,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAC"}
+{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,0DAAgE,CAAC;AAC/F,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,UAAU,2CAAwE,CAAC;AAChG,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC"}

package/dist/instance.js

@@ -1,4 +1,9 @@
 import { Schema } from "effect";
 /** The folder with `usine.yaml`, Loop files, and Agent files. */
 export const InstanceDirectory = Schema.NonEmptyString.pipe(Schema.brand("InstanceDirectory"));
+/**
+ * The UUID of one instance folder, which tells apart instances that share a GitHub App. It
+ * stays the same across restarts of the instance.
+ */
+export const InstanceId = Schema.String.check(Schema.isUUID()).pipe(Schema.brand("InstanceId"));
 //# sourceMappingURL=instance.js.map

package/dist/instance.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance.js","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"instance.js","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAG/F;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC"}

package/dist/run/again.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"again.d.ts","sourceRoot":"","sources":["../../src/run/again.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;;AAIhC;;;GAGG;AACH,qBAAa,QAAS,SAAQ,aAK7B;CAAG"}
+{"version":3,"file":"again.d.ts","sourceRoot":"","sources":["../../src/run/again.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;;AAKhC;;;GAGG;AACH,qBAAa,QAAS,SAAQ,aAK7B;CAAG"}

package/dist/run/again.js

@@ -1,13 +1,14 @@
 import { Schema } from "effect";
+import { closedStruct } from "../closed-struct.js";
 import { OperatorLogin } from "../operator.js";
 import { RunId } from "./run.js";
 /**
  * The origin of a Run created by running a succeeded or canceled Run again (ADR 0002).
  * `requestedBy` is the operator login from `usine.yaml`, or `None` if none is configured.
  */
-export class RunAgain extends Schema.Class("RunAgain")(Schema.Struct({
+export class RunAgain extends Schema.Class("RunAgain")(closedStruct({
     from: RunId,
     requestedBy: Schema.OptionFromNullOr(OperatorLogin),
-}).annotate({ parseOptions: { onExcessProperty: "error" } })) {
+})) {
 }
 //# sourceMappingURL=again.js.map

package/dist/run/again.js.map

@@ -1 +1 @@
-{"version":3,"file":"again.js","sourceRoot":"","sources":["../../src/run/again.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEjC;;;GAGG;AACH,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,KAAK,CAAW,UAAU,CAAC,CAC9D,MAAM,CAAC,MAAM,CAAC;IACZ,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC;CACpD,CAAC,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC,CAC7D;CAAG"}
+{"version":3,"file":"again.js","sourceRoot":"","sources":["../../src/run/again.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AAEjC;;;GAGG;AACH,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,KAAK,CAAW,UAAU,CAAC,CAC9D,YAAY,CAAC;IACX,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC;CACpD,CAAC,CACH;CAAG"}

package/dist/run/approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/run/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGxC,0HAA0H;AAC1H,eAAO,MAAM,iBAAiB,YAAI,IAAI,EAAE,YAAY,CAAU,CAAC;AAC/D,eAAO,MAAM,eAAe,gDAAqC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;;;;;AAE1D;;;GAGG;AACH,qBAAa,cAAe,SAAQ,mBAYnC;CAAG;;;;;AAEJ;;;GAGG;AACH,qBAAa,WAAY,SAAQ,gBAG/B;CAAG"}
+{"version":3,"file":"approval.d.ts","sourceRoot":"","sources":["../../src/run/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIxC,0HAA0H;AAC1H,eAAO,MAAM,iBAAiB,YAAI,IAAI,EAAE,YAAY,CAAU,CAAC;AAC/D,eAAO,MAAM,eAAe,gDAAqC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;;;;;AAE1D;;;GAGG;AACH,qBAAa,cAAe,SAAQ,mBAUnC;CAAG;;;;;AAEJ;;;GAGG;AACH,qBAAa,WAAY,SAAQ,gBAG/B;CAAG"}

package/dist/run/approval.js

@@ -1,4 +1,5 @@
 import { Option, Schema } from "effect";
+import { closedStruct } from "../closed-struct.js";
 import { OperatorLogin } from "../operator.js";
 /** The approval channels: `ui` for the web UI's Approve action and `github-ask` for a 👍 on the GitHub Ask (ADR 0017). */
 export const APPROVAL_CHANNELS = ["ui", "github-ask"];
@@ -7,12 +8,10 @@ export const ApprovalChannel = Schema.Literals(APPROVAL_CHANNELS);
  * The approver and channel, recorded when the approval takes effect. A `ui` approval has no
  * `approver` if `usine.yaml` sets no operator login; a `github-ask` approval always has one.
  */
-export class ApprovalSource extends Schema.Class("ApprovalSource")(Schema.Struct({
+export class ApprovalSource extends Schema.Class("ApprovalSource")(closedStruct({
     channel: ApprovalChannel,
     approver: Schema.OptionFromNullOr(OperatorLogin),
-})
-    .check(Schema.makeFilter(({ channel, approver }) => channel !== "github-ask" || Option.isSome(approver), { message: "Expected an approver for a GitHub ask approval" }))
-    .annotate({ parseOptions: { onExcessProperty: "error" } })) {
+}).check(Schema.makeFilter(({ channel, approver }) => channel !== "github-ask" || Option.isSome(approver), { message: "Expected an approver for a GitHub ask approval" }))) {
 }
 /**
  * A Run's approval. `approvedAt` is when the approval Event arrived, and `source` is `None` for

package/dist/run/approval.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/run/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,0HAA0H;AAC1H,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,YAAY,CAAU,CAAC;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAGlE;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,gBAAgB,CAAC,CAChF,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO,EAAE,eAAe;IACxB,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC;CACjD,CAAC;KACC,KAAK,CACJ,MAAM,CAAC,UAAU,CACf,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC9E,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAC9D,CACF;KACA,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC,CAC7D;CAAG;AAEJ;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,MAAM,CAAC,KAAK,CAAc,aAAa,CAAC,CAAC;IACxE,UAAU,EAAE,MAAM,CAAC,WAAW;IAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;CACtC,CAAC;CAAG"}
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../../src/run/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,0HAA0H;AAC1H,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,YAAY,CAAU,CAAC;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AAGlE;;;GAGG;AACH,MAAM,OAAO,cAAe,SAAQ,MAAM,CAAC,KAAK,CAAiB,gBAAgB,CAAC,CAChF,YAAY,CAAC;IACX,OAAO,EAAE,eAAe;IACxB,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC;CACjD,CAAC,CAAC,KAAK,CACN,MAAM,CAAC,UAAU,CACf,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC9E,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAC9D,CACF,CACF;CAAG;AAEJ;;;GAGG;AACH,MAAM,OAAO,WAAY,SAAQ,MAAM,CAAC,KAAK,CAAc,aAAa,CAAC,CAAC;IACxE,UAAU,EAAE,MAAM,CAAC,WAAW;IAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;CACtC,CAAC;CAAG"}

package/dist/worker.d.ts

@@ -1,18 +1,34 @@
 import { Schema } from "effect";
 export declare const WorkerName: Schema.brand<Schema.String, "WorkerName">;
 export type WorkerName = typeof WorkerName.Type;
-export declare const WORKER_KINDS: readonly ["local", "exe.dev", "ssh"];
-export declare const WorkerKind: Schema.Literals<readonly ["local", "exe.dev", "ssh"]>;
+export declare const WORKER_KINDS: readonly ["local", "exe.dev", "ssh", "cloudflare"];
+export declare const WorkerKind: Schema.Literals<readonly ["local", "exe.dev", "ssh", "cloudflare"]>;
 export type WorkerKind = typeof WorkerKind.Type;
 /**
- * The GitHub bot login that an Attempt writes as: the factory's GitHub App on local and SSH
- * Workers, or the exe.dev GitHub integration on exe.dev Workers (ADR 0011).
+ * The GitHub bot login that an Attempt writes as: the factory's GitHub App on local, SSH, and
+ * Cloudflare Workers, or the exe.dev GitHub integration on exe.dev Workers (ADR 0011).
  */
 export declare const BotLogin: Schema.brand<Schema.String, "BotLogin">;
 export type BotLogin = typeof BotLogin.Type;
+/** The user ID of a GitHub App's bot account. It differs from the App ID. */
+export declare const BotUserId: Schema.brand<Schema.Int, "BotUserId">;
+export type BotUserId = typeof BotUserId.Type;
+declare const BotAccount_base: Schema.Class<BotAccount, Schema.Struct<{
+    readonly login: Schema.brand<Schema.String, "BotLogin">;
+    readonly id: Schema.brand<Schema.Int, "BotUserId">;
+}>, {}>;
 /**
- * The `ssh` destination: a host name, address, or SSH config Host alias, optionally prefixed
- * with `user@`. Rejects values that `ssh` could parse as an option, such as `-oProxyCommand=...`.
+ * A GitHub App's bot account. The factory App's account authors and commits every Attempt's
+ * commits on every Worker kind (ADR 0011).
+ */
+export declare class BotAccount extends BotAccount_base {
+    /** The ID-based noreply address, which GitHub links to the account even after a rename. */
+    get noreplyEmail(): string;
+}
+/**
+ * The `ssh` destination: a host name, IPv4 or IPv6 address, or SSH config Host alias, optionally
+ * prefixed with `user@`. Rejects values that `ssh` could parse as an option, such as
+ * `-oProxyCommand=...`.
  */
 export declare const SshDestination: Schema.brand<Schema.String, "SshDestination">;
 export type SshDestination = typeof SshDestination.Type;
@@ -38,16 +54,112 @@ export type GatewayDomain = typeof GatewayDomain.Type;
 export declare const GatewayAdminPort: Schema.brand<Schema.Int, "GatewayAdminPort">;
 export type GatewayAdminPort = typeof GatewayAdminPort.Type;
 /**
- * An LLM provider whose credential the Gateway stores. The harness for that provider, such as
- * Claude Code for `anthropic`, uses the Attempt's caller token instead of a login on the machine.
+ * An LLM provider whose credential the Gateway stores. The harness for that provider, Claude
+ * Code for `anthropic` and Codex for `openai`, uses the Attempt's caller token instead of a login
+ * on the machine.
  */
-export declare const GatewayLlmProvider: Schema.Literals<readonly ["anthropic"]>;
+export declare const GatewayLlmProvider: Schema.Literals<readonly ["anthropic", "openai"]>;
 export type GatewayLlmProvider = typeof GatewayLlmProvider.Type;
 /**
- * The kind of LLM provider credential that the Gateway stores, as reported by its admin API.
- * `api-key` is billed at API rates; `subscription` uses a plan, such as a Claude plan from
- * `claude setup-token` ([ADR 0013](../../../docs/adr/0013-cost-accounting-native-meters-guardrails.md)).
+ * The kind of LLM provider credential that the Gateway stores, as reported by its admin API, or
+ * that a Cloudflare Worker's outbound handler holds, always `api-key`. `api-key` is billed at
+ * API rates; `subscription` uses a plan: a Claude plan from `claude setup-token`, or a ChatGPT
+ * plan from `codex login`
+ * ([ADR 0013](../../../docs/adr/0013-cost-accounting-native-meters-guardrails.md)).
  */
 export declare const GatewayCredentialKind: Schema.Literals<readonly ["api-key", "subscription"]>;
 export type GatewayCredentialKind = typeof GatewayCredentialKind.Type;
+/**
+ * A container image reference, `[registry/]repository[:tag][@digest]`, such as
+ * `ghcr.io/basaltbytes/usine-worker:claude-2.1.308-codex-0.159.2`. Rejects values that the
+ * container CLI could parse as an option.
+ */
+export declare const ContainerImage: Schema.brand<Schema.String, "ContainerImage">;
+export type ContainerImage = typeof ContainerImage.Type;
+/**
+ * The ID that the container runtime gives a container when it creates it: 64 lowercase hex
+ * digits. A start of a stopped container keeps it.
+ */
+export declare const ContainerId: Schema.brand<Schema.String, "ContainerId">;
+export type ContainerId = typeof ContainerId.Type;
+/** The CPUs a container may use, such as `1.5`. */
+export declare const ContainerCpus: Schema.brand<Schema.Finite, "ContainerCpus">;
+export type ContainerCpus = typeof ContainerCpus.Type;
+/** A container's memory limit in MiB. */
+export declare const ContainerMemoryMib: Schema.brand<Schema.Int, "ContainerMemoryMib">;
+export type ContainerMemoryMib = typeof ContainerMemoryMib.Type;
+/** The maximum number of processes and threads in a container. */
+export declare const ContainerPids: Schema.brand<Schema.Int, "ContainerPids">;
+export type ContainerPids = typeof ContainerPids.Type;
+declare const ContainerLimits_base: Schema.Class<ContainerLimits, Schema.Struct<{
+    readonly cpus: Schema.brand<Schema.Finite, "ContainerCpus">;
+    readonly memoryMib: Schema.brand<Schema.Int, "ContainerMemoryMib">;
+    readonly pids: Schema.brand<Schema.Int, "ContainerPids">;
+}>, {}>;
+/** The CPU, memory, and process limits of one Attempt container. */
+export declare class ContainerLimits extends ContainerLimits_base {
+}
+/** The fields of `ContainerLimits`, in the order that logs and the web UI give them. */
+export declare const CONTAINER_LIMITS: readonly ["cpus", "memoryMib", "pids"];
+export type ContainerLimit = (typeof CONTAINER_LIMITS)[number];
+/**
+ * A Cloudflare container instance type. From `lite` (1/16 vCPU, 256 MiB, 2 GB disk) to
+ * `standard-4` (4 vCPU, 12 GiB, 20 GB disk).
+ */
+export declare const CloudflareInstanceType: Schema.Literals<readonly ["lite", "basic", "standard-1", "standard-2", "standard-3", "standard-4"]>;
+export type CloudflareInstanceType = typeof CloudflareInstanceType.Type;
+/**
+ * The name of an image in the Cloudflare Worker's `containers[].images`, which the Worker starts
+ * each Attempt's sandbox from.
+ */
+export declare const CloudflareImageName: Schema.brand<Schema.String, "CloudflareImageName">;
+export type CloudflareImageName = typeof CloudflareImageName.Type;
+/**
+ * An LLM provider whose API key the Cloudflare Worker's outbound handlers hold for an Attempt:
+ * `anthropic` for Claude Code and `openai` for Codex.
+ */
+export declare const CloudflareLlmProvider: Schema.Literals<readonly ["anthropic", "openai"]>;
+export type CloudflareLlmProvider = typeof CloudflareLlmProvider.Type;
+/** The cloud provider that creates one machine per Attempt for a provisioned SSH Worker. */
+export declare const MachineProvider: Schema.Literals<readonly ["hetzner", "boat"]>;
+export type MachineProvider = typeof MachineProvider.Type;
+/**
+ * A machine's ID at its provider: a Hetzner Cloud server ID, such as `52341896`, or a Boat
+ * sandbox ID, such as `bx_23456789`.
+ */
+export declare const MachineId: Schema.brand<Schema.String, "MachineId">;
+export type MachineId = typeof MachineId.Type;
+/** A Hetzner Cloud server type, such as `cx33` or `cpx32`. */
+export declare const HetznerServerType: Schema.brand<Schema.String, "HetznerServerType">;
+export type HetznerServerType = typeof HetznerServerType.Type;
+/** A Hetzner Cloud location, such as `fsn1`, `nbg1`, or `hel1`. */
+export declare const HetznerLocation: Schema.brand<Schema.String, "HetznerLocation">;
+export type HetznerLocation = typeof HetznerLocation.Type;
+/**
+ * The image of each Hetzner Cloud server: a snapshot's ID or description, or a system image's
+ * name, such as `debian-13`.
+ */
+export declare const HetznerImage: Schema.brand<Schema.String, "HetznerImage">;
+export type HetznerImage = typeof HetznerImage.Type;
+/** The name of a Hetzner Cloud resource, such as a network or an SSH key. */
+export declare const HetznerResourceName: Schema.brand<Schema.String, "HetznerResourceName">;
+export type HetznerResourceName = typeof HetznerResourceName.Type;
+/** Returns whether `value` is a valid Hetzner Cloud label value. */
+export declare const isHetznerLabelValue: (value: string) => boolean;
+/**
+ * Extra labels for each Hetzner Cloud server, by Hetzner's label rules. Keys that start with
+ * `usine-` are usine's own.
+ */
+export declare const HetznerLabels: Schema.$Record<Schema.String, Schema.String>;
+export type HetznerLabels = typeof HetznerLabels.Type;
+/** A Unix user name for SSH, such as `usine`. */
+export declare const SshUser: Schema.brand<Schema.String, "SshUser">;
+export type SshUser = typeof SshUser.Type;
+/**
+ * A Boat machine size: `small`, `default` (4 vCPU and 8 GB), `large`, or `xlarge`, which needs
+ * a Boat plan of $100 per month or more.
+ */
+export declare const BoatSize: Schema.Literals<readonly ["small", "default", "large", "xlarge"]>;
+export type BoatSize = typeof BoatSize.Type;
+export {};
 //# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,eAAO,MAAM,UAAU,2CAIW,CAAC;AAEnC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD,eAAO,MAAM,YAAY,YAAI,OAAO,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AACjE,eAAO,MAAM,UAAU,uDAAgC,CAAC;AACxD,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,QAAQ,yCAIW,CAAC;AACjC,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,cAAc,+CAIW,CAAC;AACvC,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC;AAExD,eAAO,MAAM,OAAO,qCAEnB,CAAC;AACF,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,CAAC;AAE1C,kEAAkE;AAClE,eAAO,MAAM,eAAe,gDAIW,CAAC;AACxC,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,UAAU,2CAIW,CAAC;AACnC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,aAAa,8CAKW,CAAC;AACtC,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,gIAAgI;AAChI,eAAO,MAAM,gBAAgB,8CAEW,CAAC;AACzC,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;AAE5D;;;GAGG;AACH,eAAO,MAAM,kBAAkB,yCAAiC,CAAC;AACjE,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,uDAA+C,CAAC;AAClF,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAC"}
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,eAAO,MAAM,UAAU,2CAIW,CAAC;AAEnC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD,eAAO,MAAM,YAAY,YAAI,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAU,CAAC;AAC/E,eAAO,MAAM,UAAU,qEAAgC,CAAC;AACxD,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;GAGG;AACH,eAAO,MAAM,QAAQ,yCAIW,CAAC;AACjC,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;AAE5C,6EAA6E;AAC7E,eAAO,MAAM,SAAS,uCAErB,CAAC;AACF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;;;;;AAE9C;;;GAGG;AACH,qBAAa,UAAW,SAAQ,eAG9B;IACA,2FAA2F;IAC3F,IAAI,YAAY,IAAI,MAAM,CAEzB;CACF;AAED;;;;GAIG;AACH,eAAO,MAAM,cAAc,+CAOW,CAAC;AACvC,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC;AAExD,eAAO,MAAM,OAAO,qCAEnB,CAAC;AACF,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,CAAC;AAE1C,kEAAkE;AAClE,eAAO,MAAM,eAAe,gDAIW,CAAC;AACxC,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,UAAU,2CAIW,CAAC;AACnC,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,aAAa,8CAKW,CAAC;AACtC,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,gIAAgI;AAChI,eAAO,MAAM,gBAAgB,8CAEW,CAAC;AACzC,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,mDAA2C,CAAC;AAC3E,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AAEhE;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,uDAA+C,CAAC;AAClF,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,cAAc,+CAKW,CAAC;AACvC,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,WAAW,4CAIW,CAAC;AACpC,MAAM,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,IAAI,CAAC;AAElD,mDAAmD;AACnD,eAAO,MAAM,aAAa,8CAEzB,CAAC;AACF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,yCAAyC;AACzC,eAAO,MAAM,kBAAkB,gDAE9B,CAAC;AACF,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAC;AAEhE,kEAAkE;AAClE,eAAO,MAAM,aAAa,2CAEzB,CAAC;AACF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;;;;;;AAEtD,oEAAoE;AACpE,qBAAa,eAAgB,SAAQ,oBAInC;CAAG;AAEL,wFAAwF;AACxF,eAAO,MAAM,gBAAgB,wCAE5B,CAAC;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D;;;GAGG;AACH,eAAO,MAAM,sBAAsB,qGAOjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAC;AAExE;;;GAGG;AACH,eAAO,MAAM,mBAAmB,oDAKW,CAAC;AAC5C,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,qBAAqB,mDAA2C,CAAC;AAC9E,MAAM,MAAM,qBAAqB,GAAG,OAAO,qBAAqB,CAAC,IAAI,CAAC;AAEtE,4FAA4F;AAC5F,eAAO,MAAM,eAAe,+CAAuC,CAAC;AACpE,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,SAAS,0CAEW,CAAC;AAClC,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;AAE9C,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,kDAIW,CAAC;AAC1C,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAC;AAE9D,mEAAmE;AACnE,eAAO,MAAM,eAAe,gDAIW,CAAC;AACxC,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,YAAY,6CAIW,CAAC;AACrC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAC;AAEpD,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,oDAIW,CAAC;AAC5C,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAC;AAMlE,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,UAAW,MAAM,KAAG,OAA0C,CAAC;AAE/F;;;GAGG;AACH,eAAO,MAAM,aAAa,8CAezB,CAAC;AACF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,iDAAiD;AACjD,eAAO,MAAM,OAAO,wCAEW,CAAC;AAChC,MAAM,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,QAAQ,mEAA2D,CAAC;AACjF,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC"}

package/dist/worker.js

@@ -2,20 +2,36 @@ import { Schema } from "effect";
 export const WorkerName = Schema.String.check(Schema.isPattern(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u, {
     message: "Expected a kebab-case worker name",
 })).pipe(Schema.brand("WorkerName"));
-export const WORKER_KINDS = ["local", "exe.dev", "ssh"];
+export const WORKER_KINDS = ["local", "exe.dev", "ssh", "cloudflare"];
 export const WorkerKind = Schema.Literals(WORKER_KINDS);
 /**
- * The GitHub bot login that an Attempt writes as: the factory's GitHub App on local and SSH
- * Workers, or the exe.dev GitHub integration on exe.dev Workers (ADR 0011).
+ * The GitHub bot login that an Attempt writes as: the factory's GitHub App on local, SSH, and
+ * Cloudflare Workers, or the exe.dev GitHub integration on exe.dev Workers (ADR 0011).
  */
 export const BotLogin = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?\[bot\]$/u, {
     message: "Expected a GitHub bot login: <slug>[bot]",
 })).pipe(Schema.brand("BotLogin"));
+/** The user ID of a GitHub App's bot account. It differs from the App ID. */
+export const BotUserId = Schema.Int.check(Schema.isGreaterThanOrEqualTo(1)).pipe(Schema.brand("BotUserId"));
 /**
- * The `ssh` destination: a host name, address, or SSH config Host alias, optionally prefixed
- * with `user@`. Rejects values that `ssh` could parse as an option, such as `-oProxyCommand=...`.
+ * A GitHub App's bot account. The factory App's account authors and commits every Attempt's
+ * commits on every Worker kind (ADR 0011).
  */
-export const SshDestination = Schema.String.check(Schema.isPattern(/^(?:[A-Za-z0-9._-]+@)?[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/u, {
+export class BotAccount extends Schema.Class("BotAccount")({
+    login: BotLogin,
+    id: BotUserId,
+}) {
+    /** The ID-based noreply address, which GitHub links to the account even after a rename. */
+    get noreplyEmail() {
+        return `${String(this.id)}+${this.login}@users.noreply.github.com`;
+    }
+}
+/**
+ * The `ssh` destination: a host name, IPv4 or IPv6 address, or SSH config Host alias, optionally
+ * prefixed with `user@`. Rejects values that `ssh` could parse as an option, such as
+ * `-oProxyCommand=...`.
+ */
+export const SshDestination = Schema.String.check(Schema.isPattern(/^(?:[A-Za-z0-9._-]+@)?(?:[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?|[0-9A-Fa-f]{0,4}(?::[0-9A-Fa-f]{0,4}){2,7})$/u, {
     message: "Expected an SSH destination: a host name or address, optionally prefixed by a user",
 })).pipe(Schema.brand("SshDestination"));
 export const SshPort = Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 65_535 })).pipe(Schema.brand("SshPort"));
@@ -39,14 +55,122 @@ export const GatewayDomain = Schema.String.check(Schema.isPattern(/^(?:[a-z0-9](
 /** The Gateway admin API port on the Gateway's loopback interface (`USINE_GATEWAY_ADMIN_PORT`), used through an SSH forward. */
 export const GatewayAdminPort = Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 65_535 })).pipe(Schema.brand("GatewayAdminPort"));
 /**
- * An LLM provider whose credential the Gateway stores. The harness for that provider, such as
- * Claude Code for `anthropic`, uses the Attempt's caller token instead of a login on the machine.
+ * An LLM provider whose credential the Gateway stores. The harness for that provider, Claude
+ * Code for `anthropic` and Codex for `openai`, uses the Attempt's caller token instead of a login
+ * on the machine.
  */
-export const GatewayLlmProvider = Schema.Literals(["anthropic"]);
+export const GatewayLlmProvider = Schema.Literals(["anthropic", "openai"]);
 /**
- * The kind of LLM provider credential that the Gateway stores, as reported by its admin API.
- * `api-key` is billed at API rates; `subscription` uses a plan, such as a Claude plan from
- * `claude setup-token` ([ADR 0013](../../../docs/adr/0013-cost-accounting-native-meters-guardrails.md)).
+ * The kind of LLM provider credential that the Gateway stores, as reported by its admin API, or
+ * that a Cloudflare Worker's outbound handler holds, always `api-key`. `api-key` is billed at
+ * API rates; `subscription` uses a plan: a Claude plan from `claude setup-token`, or a ChatGPT
+ * plan from `codex login`
+ * ([ADR 0013](../../../docs/adr/0013-cost-accounting-native-meters-guardrails.md)).
  */
 export const GatewayCredentialKind = Schema.Literals(["api-key", "subscription"]);
+/**
+ * A container image reference, `[registry/]repository[:tag][@digest]`, such as
+ * `ghcr.io/basaltbytes/usine-worker:claude-2.1.308-codex-0.159.2`. Rejects values that the
+ * container CLI could parse as an option.
+ */
+export const ContainerImage = Schema.String.check(Schema.isPattern(/^[a-z0-9][A-Za-z0-9._/:@-]{0,254}$/u, {
+    message: "Expected a container image reference, such as ghcr.io/owner/image:tag, without spaces or a leading dash",
+})).pipe(Schema.brand("ContainerImage"));
+/**
+ * The ID that the container runtime gives a container when it creates it: 64 lowercase hex
+ * digits. A start of a stopped container keeps it.
+ */
+export const ContainerId = Schema.String.check(Schema.isPattern(/^[0-9a-f]{64}$/u, {
+    message: "Expected a container ID of 64 lowercase hex digits",
+})).pipe(Schema.brand("ContainerId"));
+/** The CPUs a container may use, such as `1.5`. */
+export const ContainerCpus = Schema.Finite.check(Schema.isGreaterThan(0)).pipe(Schema.brand("ContainerCpus"));
+/** A container's memory limit in MiB. */
+export const ContainerMemoryMib = Schema.Int.check(Schema.isGreaterThanOrEqualTo(256)).pipe(Schema.brand("ContainerMemoryMib"));
+/** The maximum number of processes and threads in a container. */
+export const ContainerPids = Schema.Int.check(Schema.isGreaterThanOrEqualTo(64)).pipe(Schema.brand("ContainerPids"));
+/** The CPU, memory, and process limits of one Attempt container. */
+export class ContainerLimits extends Schema.Class("ContainerLimits")({
+    cpus: ContainerCpus,
+    memoryMib: ContainerMemoryMib,
+    pids: ContainerPids,
+}) {
+}
+/** The fields of `ContainerLimits`, in the order that logs and the web UI give them. */
+export const CONTAINER_LIMITS = ["cpus", "memoryMib", "pids"];
+/**
+ * A Cloudflare container instance type. From `lite` (1/16 vCPU, 256 MiB, 2 GB disk) to
+ * `standard-4` (4 vCPU, 12 GiB, 20 GB disk).
+ */
+export const CloudflareInstanceType = Schema.Literals([
+    "lite",
+    "basic",
+    "standard-1",
+    "standard-2",
+    "standard-3",
+    "standard-4",
+]);
+/**
+ * The name of an image in the Cloudflare Worker's `containers[].images`, which the Worker starts
+ * each Attempt's sandbox from.
+ */
+export const CloudflareImageName = Schema.String.check(Schema.isPattern(/^[A-Za-z_][A-Za-z0-9_]{0,62}$/u, {
+    message: "Expected an image name of letters, digits, and underscores that doesn't start with a digit",
+})).pipe(Schema.brand("CloudflareImageName"));
+/**
+ * An LLM provider whose API key the Cloudflare Worker's outbound handlers hold for an Attempt:
+ * `anthropic` for Claude Code and `openai` for Codex.
+ */
+export const CloudflareLlmProvider = Schema.Literals(["anthropic", "openai"]);
+/** The cloud provider that creates one machine per Attempt for a provisioned SSH Worker. */
+export const MachineProvider = Schema.Literals(["hetzner", "boat"]);
+/**
+ * A machine's ID at its provider: a Hetzner Cloud server ID, such as `52341896`, or a Boat
+ * sandbox ID, such as `bx_23456789`.
+ */
+export const MachineId = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{1,64}$/u, { message: "Expected a provider machine ID" })).pipe(Schema.brand("MachineId"));
+/** A Hetzner Cloud server type, such as `cx33` or `cpx32`. */
+export const HetznerServerType = Schema.String.check(Schema.isPattern(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/u, {
+    message: "Expected a Hetzner server type, such as cx33",
+})).pipe(Schema.brand("HetznerServerType"));
+/** A Hetzner Cloud location, such as `fsn1`, `nbg1`, or `hel1`. */
+export const HetznerLocation = Schema.String.check(Schema.isPattern(/^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/u, {
+    message: "Expected a Hetzner location, such as nbg1",
+})).pipe(Schema.brand("HetznerLocation"));
+/**
+ * The image of each Hetzner Cloud server: a snapshot's ID or description, or a system image's
+ * name, such as `debian-13`.
+ */
+export const HetznerImage = Schema.String.check(Schema.isPattern(/^[!-~](?:[ -~]{0,253}[!-~])?$/u, {
+    message: "Expected a Hetzner image ID, snapshot description, or image name",
+})).pipe(Schema.brand("HetznerImage"));
+/** The name of a Hetzner Cloud resource, such as a network or an SSH key. */
+export const HetznerResourceName = Schema.String.check(Schema.isPattern(/^[!-~](?:[ -~]{0,126}[!-~])?$/u, {
+    message: "Expected a Hetzner resource name without control characters",
+})).pipe(Schema.brand("HetznerResourceName"));
+const HETZNER_LABEL_KEY = /^(?:[a-z0-9A-Z](?:[-_.a-z0-9A-Z]*[a-z0-9A-Z])?\/)?[a-z0-9A-Z](?:[-_.a-z0-9A-Z]{0,61}[a-z0-9A-Z])?$/u;
+const HETZNER_LABEL_VALUE = /^(?:[a-z0-9A-Z](?:[-_.a-z0-9A-Z]{0,61}[a-z0-9A-Z])?)?$/u;
+/** Returns whether `value` is a valid Hetzner Cloud label value. */
+export const isHetznerLabelValue = (value) => HETZNER_LABEL_VALUE.test(value);
+/**
+ * Extra labels for each Hetzner Cloud server, by Hetzner's label rules. Keys that start with
+ * `usine-` are usine's own.
+ */
+export const HetznerLabels = Schema.Record(Schema.String, Schema.String.check(Schema.isPattern(HETZNER_LABEL_VALUE, { message: "Expected a Hetzner label value" }))).check(Schema.makeFilter((labels) => {
+    const keys = Object.keys(labels);
+    const invalid = keys.find((key) => !HETZNER_LABEL_KEY.test(key));
+    if (invalid !== undefined)
+        return `Expected a Hetzner label key, not "${invalid}"`;
+    const reserved = keys.find((key) => key.startsWith("usine-"));
+    return reserved === undefined
+        ? true
+        : `Expected a label key that doesn't start with usine-, which usine sets itself, not "${reserved}"`;
+}));
+/** A Unix user name for SSH, such as `usine`. */
+export const SshUser = Schema.String.check(Schema.isPattern(/^[a-z_][a-z0-9_-]{0,31}$/u, { message: "Expected a Unix user name" })).pipe(Schema.brand("SshUser"));
+/**
+ * A Boat machine size: `small`, `default` (4 vCPU and 8 GB), `large`, or `xlarge`, which needs
+ * a Boat plan of $100 per month or more.
+ */
+export const BoatSize = Schema.Literals(["small", "default", "large", "xlarge"]);
 //# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC3C,MAAM,CAAC,SAAS,CAAC,6BAA6B,EAAE;IAC9C,OAAO,EAAE,mCAAmC;CAC7C,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAInC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAU,CAAC;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAGxD;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACzC,MAAM,CAAC,SAAS,CAAC,oDAAoD,EAAE;IACrE,OAAO,EAAE,0CAA0C;CACpD,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAGjC;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/C,MAAM,CAAC,SAAS,CAAC,mEAAmE,EAAE;IACpF,OAAO,EAAE,oFAAoF;CAC9F,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvC,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAC7F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CACxB,CAAC;AAGF,kEAAkE;AAClE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAChD,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAAE;IACtC,OAAO,EAAE,0EAA0E;CACpF,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAGxC;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC3C,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAAE;IACtC,OAAO,EAAE,oFAAoF;CAC9F,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAGnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC9C,MAAM,CAAC,SAAS,CACd,oFAAoF,EACpF,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAC/C,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;AAGtC,gIAAgI;AAChI,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAC9C,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAClD,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAGzC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAGjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC"}
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC3C,MAAM,CAAC,SAAS,CAAC,6BAA6B,EAAE;IAC9C,OAAO,EAAE,mCAAmC;CAC7C,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAInC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAU,CAAC;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAGxD;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACzC,MAAM,CAAC,SAAS,CAAC,oDAAoD,EAAE;IACrE,OAAO,EAAE,0CAA0C;CACpD,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AAGjC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9E,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAC1B,CAAC;AAGF;;;GAGG;AACH,MAAM,OAAO,UAAW,SAAQ,MAAM,CAAC,KAAK,CAAa,YAAY,CAAC,CAAC;IACrE,KAAK,EAAE,QAAQ;IACf,EAAE,EAAE,SAAS;CACd,CAAC;IACA,2FAA2F;IAC3F,IAAI,YAAY;QACd,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,2BAA2B,CAAC;IACrE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/C,MAAM,CAAC,SAAS,CACd,kHAAkH,EAClH;IACE,OAAO,EAAE,oFAAoF;CAC9F,CACF,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvC,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAC7F,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CACxB,CAAC;AAGF,kEAAkE;AAClE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAChD,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAAE;IACtC,OAAO,EAAE,0EAA0E;CACpF,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAGxC;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC3C,MAAM,CAAC,SAAS,CAAC,qBAAqB,EAAE;IACtC,OAAO,EAAE,oFAAoF;CAC9F,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAGnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC9C,MAAM,CAAC,SAAS,CACd,oFAAoF,EACpF,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAC/C,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;AAGtC,gIAAgI;AAChI,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAC9C,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAClD,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAGzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG3E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAGlF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/C,MAAM,CAAC,SAAS,CAAC,qCAAqC,EAAE;IACtD,OAAO,EACL,yGAAyG;CAC5G,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvC;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC5C,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE;IAClC,OAAO,EAAE,oDAAoD;CAC9D,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;AAGpC,mDAAmD;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC5E,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAC9B,CAAC;AAGF,yCAAyC;AACzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CACzF,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CACnC,CAAC;AAGF,kEAAkE;AAClE,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CACnF,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAC9B,CAAC;AAGF,oEAAoE;AACpE,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,iBAAiB,CAAC,CAAC;IACpF,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,kBAAkB;IAC7B,IAAI,EAAE,aAAa;CACpB,CAAC;CAAG;AAEL,wFAAwF;AACxF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAE3D,CAAC;AAGF;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,QAAQ,CAAC;IACpD,MAAM;IACN,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,YAAY;CACb,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACpD,MAAM,CAAC,SAAS,CAAC,gCAAgC,EAAE;IACjD,OAAO,EACL,4FAA4F;CAC/F,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAG5C;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG9E,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAGpE;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC1C,MAAM,CAAC,SAAS,CAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAC1F,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;AAGlC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAClD,MAAM,CAAC,SAAS,CAAC,yCAAyC,EAAE;IAC1D,OAAO,EAAE,8CAA8C;CACxD,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAG1C,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAChD,MAAM,CAAC,SAAS,CAAC,yCAAyC,EAAE;IAC1D,OAAO,EAAE,2CAA2C;CACrD,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAGxC;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC7C,MAAM,CAAC,SAAS,CAAC,gCAAgC,EAAE;IACjD,OAAO,EAAE,kEAAkE;CAC5E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AAGrC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACpD,MAAM,CAAC,SAAS,CAAC,gCAAgC,EAAE;IACjD,OAAO,EAAE,6DAA6D;CACvE,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAG5C,MAAM,iBAAiB,GACrB,qGAAqG,CAAC;AACxG,MAAM,mBAAmB,GAAG,yDAAyD,CAAC;AAEtF,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE/F;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CACxC,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CACrF,CACF,CAAC,KAAK,CACL,MAAM,CAAC,UAAU,CAAC,CAAC,MAAwC,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,sCAAsC,OAAO,GAAG,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,sFAAsF,QAAQ,GAAG,CAAC;AACxG,CAAC,CAAC,CACH,CAAC;AAGF,iDAAiD;AACjD,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACxC,MAAM,CAAC,SAAS,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CACxF,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AAGhC;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC"}