@usine/executor 0.0.0 → 0.1.0

package/dist/exe-dev/sweep.js

@@ -0,0 +1,119 @@
+import { Attempt, Worker } from "@usine/core";
+import { Effect, Ref, Schema } from "effect";
+import { ExecutorOperationError } from "../index.js";
+import { keyedLockFor } from "../keyed-lock.js";
+const SWEEP_CONCURRENCY = 4;
+const directChildSchema = (parent) => {
+    const prefix = `${parent}/`;
+    return Schema.String.check(Schema.makeFilter((value) => {
+        const segment = value.slice(prefix.length);
+        return (value.startsWith(prefix) &&
+            segment.length > 0 &&
+            segment !== "." &&
+            segment !== ".." &&
+            !segment.includes("/"));
+    }, { message: `Expected a direct child of ${parent}` }));
+};
+const directChildren = (parent, output) => Schema.decodeUnknownEffect(Schema.Array(directChildSchema(parent)))(output.split("\0").filter((value) => value.length > 0)).pipe(Effect.mapError((cause) => new ExecutorOperationError({
+    operation: "prepare",
+    message: `Worker returned an invalid path while sweeping ${parent}`,
+    cause,
+})));
+/**
+ * Reclaims crash leftovers once, before this process starts work on a VM.
+ * Every removal is isolated: one immovable leftover must never block the
+ * sweep's siblings or, worse, every future prepare on the Worker — so the
+ * sweep is marked done even when parts of it failed, and each failure is
+ * logged instead of propagated.
+ */
+export const abandonedWorktreeSweepFor = Effect.fn("ExeDevExecutor.abandonedWorktreeSweepFor")(function* (commands) {
+    const locks = yield* keyedLockFor();
+    const swept = yield* Ref.make(new Set());
+    const sweep = Effect.fn("ExeDevExecutor.sweepAbandonedWorktrees")(function* (attemptId, worker, vm, root) {
+        yield* Effect.annotateCurrentSpan({ attemptId, worker, host: vm.sshDest });
+        yield* locks.withLock(worker)(Effect.gen(function* () {
+            if ((yield* Ref.get(swept)).has(worker)) {
+                yield* Effect.logDebug("exe.dev abandoned-worktree sweep was already complete", {
+                    attemptId,
+                    worker,
+                    host: vm.sshDest,
+                });
+                return;
+            }
+            // One shot per Worker per process: a partial sweep must not retry
+            // forever in front of every prepare, so mark it done up front and
+            // rely on the next process start to reclaim what failed today.
+            yield* Ref.update(swept, (current) => new Set(current).add(worker));
+            const attemptsRoot = `${root}/attempts`;
+            const reposRoot = `${root}/repos`;
+            yield* Effect.logInfo("Sweeping abandoned exe.dev Attempt worktrees", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+            });
+            yield* commands.remote("prepare", vm.sshDest, "mkdir", ["-p", attemptsRoot, reposRoot]);
+            const attempts = yield* commands
+                .remote("prepare", vm.sshDest, "find", [
+                attemptsRoot,
+                "-mindepth",
+                "1",
+                "-maxdepth",
+                "1",
+                "-print0",
+            ])
+                .pipe(Effect.flatMap((output) => directChildren(attemptsRoot, output)));
+            const failures = yield* Ref.make(0);
+            yield* Effect.forEach(attempts, (worktree) => Effect.logInfo("Sweeping abandoned exe.dev Attempt worktree", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                worktree,
+            }).pipe(Effect.andThen(commands.remote("prepare", vm.sshDest, "rm", ["-rf", worktree])), Effect.tapError((error) => Effect.logWarning("Could not remove an abandoned exe.dev worktree", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                worktree,
+                message: error.message,
+            }).pipe(Effect.andThen(Ref.update(failures, (count) => count + 1)))), Effect.ignore), { concurrency: SWEEP_CONCURRENCY, discard: true });
+            const caches = yield* commands
+                .remote("prepare", vm.sshDest, "find", [
+                reposRoot,
+                "-mindepth",
+                "1",
+                "-maxdepth",
+                "1",
+                "-type",
+                "d",
+                "-name",
+                "*.git",
+                "-print0",
+            ])
+                .pipe(Effect.flatMap((output) => directChildren(reposRoot, output)));
+            yield* Effect.forEach(caches, (cache) => commands
+                .remote("prepare", vm.sshDest, "git", ["--git-dir", cache, "worktree", "prune"])
+                .pipe(Effect.tapError((error) => Effect.logWarning("Could not prune an exe.dev cache during the sweep", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                cache,
+                message: error.message,
+            })), Effect.ignore), { concurrency: SWEEP_CONCURRENCY, discard: true });
+            const failed = yield* Ref.get(failures);
+            yield* Effect.logInfo("exe.dev abandoned-worktree sweep completed", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                removed: attempts.length - failed,
+                failed,
+                caches: caches.length,
+            });
+        }).pipe(Effect.tapError((error) => Effect.logWarning("exe.dev abandoned-worktree sweep failed; continuing", {
+            attemptId,
+            worker,
+            host: vm.sshDest,
+            message: error.message,
+        })), Effect.ignore));
+    });
+    return sweep;
+});
+//# sourceMappingURL=sweep.js.map

package/dist/exe-dev/sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.js","sourceRoot":"","sources":["../../src/exe-dev/sweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIhD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAwB,EAAE;IACjE,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CACxB,MAAM,CAAC,UAAU,CACf,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YACxB,OAAO,CAAC,MAAM,GAAG,CAAC;YAClB,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvB,CAAC;IACJ,CAAC,EACD,EAAE,OAAO,EAAE,8BAA8B,MAAM,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,MAAc,EACd,MAAc,EACgD,EAAE,CAChE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CACjE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACvD,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;IACzB,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,kDAAkD,MAAM,EAAE;IACnE,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CAC5F,QAAQ,CAAC,EAAE,QAAwB;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAe,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAe,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CAAC,QAAQ,CAAC,EACzE,SAA4B,EAC5B,MAAmB,EACnB,EAAW,EACX,IAAY;QAEZ,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,uDAAuD,EAAE;oBAC9E,SAAS;oBACT,MAAM;oBACN,IAAI,EAAE,EAAE,CAAC,OAAO;iBACjB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,kEAAkE;YAClE,kEAAkE;YAClE,+DAA+D;YAC/D,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAEpE,MAAM,YAAY,GAAG,GAAG,IAAI,WAAW,CAAC;YACxC,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,CAAC;YAClC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,8CAA8C,EAAE;gBACpE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;aACjB,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;YAExF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ;iBAC7B,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE;gBACrC,YAAY;gBACZ,WAAW;gBACX,GAAG;gBACH,WAAW;gBACX,GAAG;gBACH,SAAS;aACV,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,QAAQ,EACR,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,OAAO,CAAC,6CAA6C,EAAE;gBAC5D,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,QAAQ;aACT,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAC/E,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,gDAAgD,EAAE;gBAClE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CACpE,EACD,MAAM,CAAC,MAAM,CACd,EACH,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAClD,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ;iBAC3B,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE;gBACrC,SAAS;gBACT,WAAW;gBACX,GAAG;gBACH,WAAW;gBACX,GAAG;gBACH,OAAO;gBACP,GAAG;gBACH,OAAO;gBACP,OAAO;gBACP,SAAS;aACV,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACvE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,MAAM,EACN,CAAC,KAAK,EAAE,EAAE,CACR,QAAQ;iBACL,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;iBAC/E,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,mDAAmD,EAAE;gBACrE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,KAAK;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,EACL,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAClD,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,4CAA4C,EAAE;gBAClE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM;gBACjC,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,qDAAqD,EAAE;YACvE,SAAS;YACT,MAAM;YACN,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC,CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,82 @@
+/** @usine/executor — platform-free worker execution contract. */
+import { Agent, Attempt, AttemptChannel, AttemptFailure, Repository, StepResult, Worker } from "@usine/core";
+import { Context, Effect, Redacted, Schema } from "effect";
+export declare const ExecutorOperation: Schema.Literals<readonly ["preflight", "prepare", "launch", "cancel", "cleanup"]>;
+export type ExecutorOperation = typeof ExecutorOperation.Type;
+export declare const WorkerCapability: Schema.Literals<readonly ["machine", "toolchain", "run-host", "harness-login", "credentials"]>;
+export type WorkerCapability = typeof WorkerCapability.Type;
+declare const ExecutorOperationError_base: Schema.Class<ExecutorOperationError, Schema.TaggedStruct<"ExecutorOperationError", {
+    readonly operation: Schema.Literals<readonly ["preflight", "prepare", "launch", "cancel", "cleanup"]>;
+    readonly message: Schema.NonEmptyString;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+export declare class ExecutorOperationError extends ExecutorOperationError_base {
+}
+declare const CredentialUnavailableError_base: Schema.Class<CredentialUnavailableError, Schema.TaggedStruct<"CredentialUnavailableError", {
+    readonly repository: Schema.brand<Schema.String, "RepoName">;
+    readonly message: Schema.NonEmptyString;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+export declare class CredentialUnavailableError extends CredentialUnavailableError_base {
+}
+declare const WorkerCapabilityError_base: Schema.Class<WorkerCapabilityError, Schema.TaggedStruct<"WorkerCapabilityError", {
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly capability: Schema.Literals<readonly ["machine", "toolchain", "run-host", "harness-login", "credentials"]>;
+    readonly message: Schema.NonEmptyString;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+/** A verify-only preflight found a Worker capability missing or incompatible. */
+export declare class WorkerCapabilityError extends WorkerCapabilityError_base {
+}
+export declare const ExecutorError: Schema.Union<readonly [typeof ExecutorOperationError, typeof CredentialUnavailableError, typeof WorkerCapabilityError]>;
+export type ExecutorError = typeof ExecutorError.Type;
+/** Every preflight refusal is logged: a missing capability must be explainable from logs alone. */
+export declare const logPreflightFailure: <A, R>(effect: Effect.Effect<A, ExecutorError, R>) => Effect.Effect<A, ExecutorError, R>;
+/** Process command for a one-shot run host or a preflight capability probe. */
+export interface RunHostCommand {
+    readonly command: string;
+    readonly args: ReadonlyArray<string>;
+}
+declare const CheckoutRequest_base: Schema.Class<CheckoutRequest, Schema.Struct<{
+    readonly attemptId: Schema.brand<Schema.NonEmptyString, "AttemptId">;
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepoName">;
+    readonly revision: Schema.brand<Schema.String, "RepositoryRevision">;
+    readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+    readonly task: Schema.brand<Schema.String, "AttemptTask">;
+    readonly agent: typeof Agent.Agent;
+    readonly parentModel: Schema.Option<Schema.brand<Schema.String, "ModelId">>;
+}>, {}>;
+/** Secret-free request used to create one fresh Attempt workspace. */
+export declare class CheckoutRequest extends CheckoutRequest_base {
+}
+/** Value object (branded path): one Attempt's disposable checkout directory. */
+export declare const WorktreePath: Schema.brand<Schema.NonEmptyString, "WorktreePath">;
+export type WorktreePath = typeof WorktreePath.Type;
+declare const PreparedAttempt_base: Schema.Class<PreparedAttempt, Schema.Struct<{
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly spec: typeof AttemptChannel.RunSpec;
+    readonly worktree: Schema.brand<Schema.NonEmptyString, "WorktreePath">;
+}>, {}>;
+/** Prepared workspace descriptor. Credentials remain private to the adapter. */
+export declare class PreparedAttempt extends PreparedAttempt_base {
+}
+declare const CredentialProvider_base: Context.ServiceClass<CredentialProvider, "@usine/executor/CredentialProvider", {
+    readonly issue: (repository: Repository.Name, attemptId: Attempt.AttemptId) => Effect.Effect<Redacted.Redacted<string>, CredentialUnavailableError>;
+}>;
+/** Mints exactly one repository-scoped credential for each prepared Attempt. */
+export declare class CredentialProvider extends CredentialProvider_base {
+}
+declare const Executor_base: Context.ServiceClass<Executor, "@usine/executor/Executor", {
+    readonly kind: Worker.Kind;
+    readonly preflight: (worker: Worker.Name) => Effect.Effect<void, ExecutorError>;
+    readonly prepare: (request: CheckoutRequest) => Effect.Effect<PreparedAttempt, ExecutorError>;
+    readonly launch: (prepared: PreparedAttempt, io: AttemptChannel.Sink) => Effect.Effect<StepResult.StepResult, AttemptFailure.AttemptFailure>;
+    readonly cancel: (attemptId: Attempt.AttemptId) => Effect.Effect<void, ExecutorError>;
+    readonly cleanup: (prepared: PreparedAttempt) => Effect.Effect<void, ExecutorError>;
+}>;
+/** The five-operation worker contract from ADR 0006. Preflight verifies only — it never installs. */
+export declare class Executor extends Executor_base {
+}
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,EACL,KAAK,EACL,OAAO,EACP,cAAc,EACd,cAAc,EACd,UAAU,EACV,UAAU,EACV,MAAM,EACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE3D,eAAO,MAAM,iBAAiB,mFAM5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAC;AAE9D,eAAO,MAAM,gBAAgB,gGAM3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;;;;;;AAE5D,qBAAa,sBAAuB,SAAQ,2BAM1C;CAAG;;;;;;AAEL,qBAAa,0BAA2B,SAAQ,+BAM9C;CAAG;;;;;;;AAEL,iFAAiF;AACjF,qBAAa,qBAAsB,SAAQ,0BAOzC;CAAG;AAEL,eAAO,MAAM,aAAa,yHAIxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,mGAAmG;AACnG,eAAO,MAAM,mBAAmB,GAAI,CAAC,EAAE,CAAC,UAC9B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,KACzC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAajC,CAAC;AAEJ,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtC;;;;;;;;;;;AAED,sEAAsE;AACtE,qBAAa,eAAgB,SAAQ,oBAWnC;CAAG;AAEL,gFAAgF;AAChF,eAAO,MAAM,YAAY,qDAA2D,CAAC;AACrF,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAC;;;;;;AAEpD,gFAAgF;AAChF,qBAAa,eAAgB,SAAQ,oBAMnC;CAAG;;oBAMe,CACd,UAAU,EAAE,UAAU,CAAC,IAAI,EAC3B,SAAS,EAAE,OAAO,CAAC,SAAS,KACzB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAC;;AAP7E,gFAAgF;AAChF,qBAAa,kBAAmB,SAAQ,uBAQC;CAAG;;mBAMzB,MAAM,CAAC,IAAI;wBACN,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;sBAC7D,CAAC,OAAO,EAAE,eAAe,KAAK,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC;qBAC5E,CACf,QAAQ,EAAE,eAAe,EACzB,EAAE,EAAE,cAAc,CAAC,IAAI,KACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC,cAAc,CAAC;qBACvD,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;sBACnE,CAAC,QAAQ,EAAE,eAAe,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC;;AAZvF,qGAAqG;AACrG,qBAAa,QAAS,SAAQ,aAaC;CAAG"}

package/dist/index.js

@@ -0,0 +1,82 @@
+/** @usine/executor — platform-free worker execution contract. */
+import { Agent, Attempt, AttemptChannel, AttemptFailure, Repository, StepResult, Worker, } from "@usine/core";
+import { Context, Effect, Redacted, Schema } from "effect";
+export const ExecutorOperation = Schema.Literals([
+    "preflight",
+    "prepare",
+    "launch",
+    "cancel",
+    "cleanup",
+]);
+export const WorkerCapability = Schema.Literals([
+    "machine",
+    "toolchain",
+    "run-host",
+    "harness-login",
+    "credentials",
+]);
+export class ExecutorOperationError extends Schema.TaggedError("@usine/executor/ExecutorOperationError")("ExecutorOperationError", {
+    operation: ExecutorOperation,
+    message: Schema.NonEmptyString,
+    cause: Schema.Defect(),
+}) {
+}
+export class CredentialUnavailableError extends Schema.TaggedError("@usine/executor/CredentialUnavailableError")("CredentialUnavailableError", {
+    repository: Repository.Name,
+    message: Schema.NonEmptyString,
+    cause: Schema.Defect(),
+}) {
+}
+/** A verify-only preflight found a Worker capability missing or incompatible. */
+export class WorkerCapabilityError extends Schema.TaggedError("@usine/executor/WorkerCapabilityError")("WorkerCapabilityError", {
+    worker: Worker.Name,
+    capability: WorkerCapability,
+    message: Schema.NonEmptyString,
+    cause: Schema.Defect(),
+}) {
+}
+export const ExecutorError = Schema.Union([
+    ExecutorOperationError,
+    CredentialUnavailableError,
+    WorkerCapabilityError,
+]);
+/** Every preflight refusal is logged: a missing capability must be explainable from logs alone. */
+export const logPreflightFailure = (effect) => Effect.tapError(effect, (error) => error instanceof WorkerCapabilityError
+    ? Effect.logError("Worker preflight failed", {
+        error: error._tag,
+        message: error.message,
+        worker: error.worker,
+        capability: error.capability,
+    })
+    : Effect.logError("Worker preflight failed", {
+        error: error._tag,
+        message: error.message,
+    }));
+/** Secret-free request used to create one fresh Attempt workspace. */
+export class CheckoutRequest extends Schema.Class("@usine/executor/CheckoutRequest")({
+    attemptId: Attempt.AttemptId,
+    worker: Worker.Name,
+    repository: Repository.Name,
+    revision: Repository.Revision,
+    payload: Schema.Json,
+    task: AttemptChannel.Task,
+    agent: Agent.Agent,
+    parentModel: Schema.Option(Agent.ModelId),
+}) {
+}
+/** Value object (branded path): one Attempt's disposable checkout directory. */
+export const WorktreePath = Schema.NonEmptyString.pipe(Schema.brand("WorktreePath"));
+/** Prepared workspace descriptor. Credentials remain private to the adapter. */
+export class PreparedAttempt extends Schema.Class("@usine/executor/PreparedAttempt")({
+    worker: Worker.Name,
+    spec: AttemptChannel.RunSpec,
+    worktree: WorktreePath,
+}) {
+}
+/** Mints exactly one repository-scoped credential for each prepared Attempt. */
+export class CredentialProvider extends Context.Service()("@usine/executor/CredentialProvider") {
+}
+/** The five-operation worker contract from ADR 0006. Preflight verifies only — it never installs. */
+export class Executor extends Context.Service()("@usine/executor/Executor") {
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,EACL,KAAK,EACL,OAAO,EACP,cAAc,EACd,cAAc,EACd,UAAU,EACV,UAAU,EACV,MAAM,GACP,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/C,WAAW;IACX,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC9C,SAAS;IACT,WAAW;IACX,UAAU;IACV,eAAe;IACf,aAAa;CACd,CAAC,CAAC;AAGH,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,CAC5D,wCAAwC,CACzC,CAAC,wBAAwB,EAAE;IAC1B,SAAS,EAAE,iBAAiB;IAC5B,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CAAC;CAAG;AAEL,MAAM,OAAO,0BAA2B,SAAQ,MAAM,CAAC,WAAW,CAChE,4CAA4C,CAC7C,CAAC,4BAA4B,EAAE;IAC9B,UAAU,EAAE,UAAU,CAAC,IAAI;IAC3B,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CAAC;CAAG;AAEL,iFAAiF;AACjF,MAAM,OAAO,qBAAsB,SAAQ,MAAM,CAAC,WAAW,CAC3D,uCAAuC,CACxC,CAAC,uBAAuB,EAAE;IACzB,MAAM,EAAE,MAAM,CAAC,IAAI;IACnB,UAAU,EAAE,gBAAgB;IAC5B,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;CACvB,CAAC;CAAG;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;IACxC,sBAAsB;IACtB,0BAA0B;IAC1B,qBAAqB;CACtB,CAAC,CAAC;AAGH,mGAAmG;AACnG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAA0C,EACN,EAAE,CACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChC,KAAK,YAAY,qBAAqB;IACpC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE;QACzC,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;IACJ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE;QACzC,KAAK,EAAE,KAAK,CAAC,IAAI;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CACP,CAAC;AAQJ,sEAAsE;AACtE,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAC/C,iCAAiC,CAClC,CAAC;IACA,SAAS,EAAE,OAAO,CAAC,SAAS;IAC5B,MAAM,EAAE,MAAM,CAAC,IAAI;IACnB,UAAU,EAAE,UAAU,CAAC,IAAI;IAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;IAC7B,OAAO,EAAE,MAAM,CAAC,IAAI;IACpB,IAAI,EAAE,cAAc,CAAC,IAAI;IACzB,KAAK,EAAE,KAAK,CAAC,KAAK;IAClB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;CAC1C,CAAC;CAAG;AAEL,gFAAgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AAGrF,gFAAgF;AAChF,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAC/C,iCAAiC,CAClC,CAAC;IACA,MAAM,EAAE,MAAM,CAAC,IAAI;IACnB,IAAI,EAAE,cAAc,CAAC,OAAO;IAC5B,QAAQ,EAAE,YAAY;CACvB,CAAC;CAAG;AAEL,gFAAgF;AAChF,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAQpD,CAAC,oCAAoC,CAAC;CAAG;AAE5C,qGAAqG;AACrG,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAa1C,CAAC,0BAA0B,CAAC;CAAG"}

package/dist/invalid-frame.d.ts

@@ -0,0 +1,17 @@
+type FrameSource = "effect-log" | "json" | "non-json";
+export interface InvalidFrameDiagnostic {
+    readonly byteLength: number;
+    readonly eventTag: string | undefined;
+    readonly issues: ReadonlyArray<{
+        readonly message: string;
+        readonly path: string;
+    }>;
+    readonly payloadTag: string | undefined;
+    readonly source: FrameSource;
+    readonly version: number | undefined;
+}
+/** Redacted frame diagnostics: shape and schema metadata only, never frame content. */
+export declare const invalidFrameDiagnostic: (line: string, cause: unknown) => InvalidFrameDiagnostic;
+export declare const invalidFrameMessage: (diagnostic: InvalidFrameDiagnostic) => string;
+export {};
+//# sourceMappingURL=invalid-frame.d.ts.map

package/dist/invalid-frame.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-frame.d.ts","sourceRoot":"","sources":["../src/invalid-frame.ts"],"names":[],"mappings":"AAiEA,KAAK,WAAW,GAAG,YAAY,GAAG,MAAM,GAAG,UAAU,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAeD,uFAAuF;AACvF,eAAO,MAAM,sBAAsB,SAAU,MAAM,SAAS,OAAO,KAAG,sBAgCrE,CAAC;AAEF,eAAO,MAAM,mBAAmB,eAAgB,sBAAsB,KAAG,MAUxE,CAAC"}

package/dist/invalid-frame.js

@@ -0,0 +1,110 @@
+import { Option, Schema, SchemaIssue } from "effect";
+const encoder = new TextEncoder();
+const SAFE_TAG_VALUES = [
+    "Started",
+    "SessionEvent",
+    "Final",
+    "Failed",
+    "Interrupted",
+    "SessionStarted",
+    "TextOutput",
+    "ToolStarted",
+    "ToolFinished",
+    "PoolRateLimitsUpdated",
+    "SessionFinished",
+];
+const SafeFrameTag = Schema.Literals(SAFE_TAG_VALUES);
+const FramePreview = Schema.Struct({
+    version: Schema.optionalKey(Schema.Int),
+    payload: Schema.optionalKey(Schema.Struct({
+        _tag: Schema.optionalKey(Schema.String),
+        event: Schema.optionalKey(Schema.Struct({ _tag: Schema.optionalKey(Schema.String) })),
+    })),
+});
+const decodeJsonOption = Schema.decodeUnknownOption(Schema.fromJsonString(Schema.Json));
+const decodeFramePreviewOption = Schema.decodeUnknownOption(FramePreview);
+const decodeSafeFrameTagOption = Schema.decodeUnknownOption(SafeFrameTag);
+const SAFE_PATH_SEGMENTS = new Set([
+    "version",
+    "attemptId",
+    "sequence",
+    "sentAt",
+    "payload",
+    "_tag",
+    "event",
+    "session",
+    "id",
+    "parentId",
+    "agent",
+    "brain",
+    "harness",
+    "model",
+    "effort",
+    "callId",
+    "tool",
+    "input",
+    "output",
+    "isError",
+    "text",
+    "pool",
+    "rateLimits",
+    "limitId",
+    "limitName",
+    "primary",
+    "secondary",
+    "usedPercent",
+    "windowDurationMinutes",
+    "resetsAt",
+    "parentModel",
+    "result",
+    "failure",
+]);
+const formatSchemaIssues = SchemaIssue.makeFormatterStandardSchemaV1();
+const safeIssuePath = (path) => path
+    .map((segment) => {
+    const value = String(segment);
+    return SAFE_PATH_SEGMENTS.has(value) ? value : "<unexpected>";
+})
+    .join(".");
+/** Redacted frame diagnostics: shape and schema metadata only, never frame content. */
+export const invalidFrameDiagnostic = (line, cause) => {
+    const byteLength = encoder.encode(line).byteLength;
+    const parsed = decodeJsonOption(line);
+    if (Option.isNone(parsed)) {
+        return {
+            byteLength,
+            eventTag: undefined,
+            issues: [],
+            payloadTag: undefined,
+            source: /^\[\d{2}:\d{2}:\d{2}[.\]]/u.test(line) ? "effect-log" : "non-json",
+            version: undefined,
+        };
+    }
+    const preview = decodeFramePreviewOption(parsed.value);
+    const issues = Schema.isSchemaError(cause)
+        ? formatSchemaIssues(cause.issue).issues.map((issue) => ({
+            message: issue.message.slice(0, 200),
+            path: safeIssuePath(issue.path ?? []),
+        }))
+        : [];
+    return {
+        byteLength,
+        eventTag: Option.flatMap(preview, ({ payload }) => decodeSafeFrameTagOption(payload?.event?._tag)).pipe(Option.getOrUndefined),
+        issues,
+        payloadTag: Option.flatMap(preview, ({ payload }) => decodeSafeFrameTagOption(payload?._tag)).pipe(Option.getOrUndefined),
+        source: "json",
+        version: Option.map(preview, ({ version }) => version).pipe(Option.getOrUndefined),
+    };
+};
+export const invalidFrameMessage = (diagnostic) => {
+    if (diagnostic.source !== "json") {
+        return diagnostic.source === "effect-log"
+            ? "The run host wrote a log line to its protocol output"
+            : "The run host emitted malformed JSON";
+    }
+    const first = diagnostic.issues[0];
+    return first === undefined
+        ? "The run host emitted a schema-invalid frame"
+        : `The run host emitted a schema-invalid frame at ${first.path || "<root>"}: ${first.message}`;
+};
+//# sourceMappingURL=invalid-frame.js.map

package/dist/invalid-frame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalid-frame.js","sourceRoot":"","sources":["../src/invalid-frame.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,eAAe,GAAG;IACtB,SAAS;IACT,cAAc;IACd,OAAO;IACP,QAAQ;IACR,aAAa;IACb,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,cAAc;IACd,uBAAuB;IACvB,iBAAiB;CACT,CAAC;AACX,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AACtD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;QACvC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;KACtF,CAAC,CACH;CACF,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACxF,MAAM,wBAAwB,GAAG,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;AAC1E,MAAM,wBAAwB,GAAG,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;AAC1E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,WAAW;IACX,UAAU;IACV,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,SAAS;IACT,IAAI;IACJ,UAAU;IACV,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,YAAY;IACZ,SAAS;IACT,WAAW;IACX,SAAS;IACT,WAAW;IACX,aAAa;IACb,uBAAuB;IACvB,UAAU;IACV,aAAa;IACb,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAgBH,MAAM,kBAAkB,GAAG,WAAW,CAAC,6BAA6B,EAAE,CAAC;AAKvE,MAAM,aAAa,GAAG,CAAC,IAAwB,EAAU,EAAE,CACzD,IAAI;KACD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;IACf,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC;AAChE,CAAC,CAAC;KACD,IAAI,CAAC,GAAG,CAAC,CAAC;AAEf,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,IAAY,EAAE,KAAc,EAA0B,EAAE;IAC7F,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;IACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,UAAU;YACV,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,SAAS;YACrB,MAAM,EAAE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;YAC3E,OAAO,EAAE,SAAS;SACnB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QACxC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACpC,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;SACtC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,UAAU;QACV,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAChD,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAC/C,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAC7B,MAAM;QACN,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAClD,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,CACxC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;KACnF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,UAAkC,EAAU,EAAE;IAChF,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,MAAM,KAAK,YAAY;YACvC,CAAC,CAAC,sDAAsD;YACxD,CAAC,CAAC,qCAAqC,CAAC;IAC5C,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnC,OAAO,KAAK,KAAK,SAAS;QACxB,CAAC,CAAC,6CAA6C;QAC/C,CAAC,CAAC,kDAAkD,KAAK,CAAC,IAAI,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;AACnG,CAAC,CAAC"}

package/dist/keyed-lock.d.ts

@@ -0,0 +1,11 @@
+import { Effect } from "effect";
+export interface KeyedLock<in K> {
+    readonly withLock: (key: K) => <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+}
+/**
+ * One mutex per key. `PartitionedSemaphore` is not this: its `permits` option
+ * is a single shared pool and the partition key only orders waiters, so
+ * `make({ permits: 1 })` serializes every key behind one global permit.
+ */
+export declare const keyedLockFor: <K>() => Effect.Effect<KeyedLock<K>>;
+//# sourceMappingURL=keyed-lock.d.ts.map

package/dist/keyed-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyed-lock.d.ts","sourceRoot":"","sources":["../src/keyed-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAEhD,MAAM,WAAW,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,CACjB,GAAG,EAAE,CAAC,KACH,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;CAC1E;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,CAAC,OAAK,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAcxD,CAAC"}

package/dist/keyed-lock.js

@@ -0,0 +1,21 @@
+import { Effect, Ref, Semaphore } from "effect";
+/**
+ * One mutex per key. `PartitionedSemaphore` is not this: its `permits` option
+ * is a single shared pool and the partition key only orders waiters, so
+ * `make({ permits: 1 })` serializes every key behind one global permit.
+ */
+export const keyedLockFor = () => Effect.map(Ref.make(new Map()), (locks) => ({
+    withLock: (key) => {
+        const semaphore = Ref.modify(locks, (current) => {
+            const existing = current.get(key);
+            if (existing !== undefined)
+                return [existing, current];
+            const created = Semaphore.makeUnsafe(1);
+            const next = new Map(current);
+            next.set(key, created);
+            return [created, next];
+        });
+        return (effect) => Effect.flatMap(semaphore, (lock) => Semaphore.withPermit(lock, effect));
+    },
+}));
+//# sourceMappingURL=keyed-lock.js.map

package/dist/keyed-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyed-lock.js","sourceRoot":"","sources":["../src/keyed-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAQhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAmC,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClE,QAAQ,EAAE,CAAC,GAAM,EAAE,EAAE;QACnB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;YAChE,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAU,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,CAAU,MAA8B,EAA0B,EAAE,CACzE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF,CAAC,CAAC,CAAC"}

package/dist/local/index.d.ts

@@ -0,0 +1,15 @@
+import { Instance, Repository } from "@usine/core";
+import { Effect, FileSystem, Layer, Path } from "effect";
+import { ChildProcessSpawner } from "effect/unstable/process";
+import { CredentialProvider, Executor, type RunHostCommand } from "../index.ts";
+export type { RunHostCommand } from "../index.ts";
+export interface LocalExecutorOptions {
+    readonly instanceDirectory: Instance.Directory;
+    /** How to launch the one-shot run host; the composition root resolves it. */
+    readonly runHost: RunHostCommand;
+    readonly repositoryUrl?: (repository: Repository.Name) => string;
+    readonly interruptGrace?: Parameters<typeof Effect.timeoutOption>[1];
+}
+/** Node-only local executor; the package root remains platform-free. */
+export declare const layer: (options: LocalExecutorOptions) => Layer.Layer<Executor, never, CredentialProvider | FileSystem.FileSystem | Path.Path | ChildProcessSpawner.ChildProcessSpawner>;
+//# sourceMappingURL=index.d.ts.map

package/dist/local/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/local/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EACL,MAAM,EACN,UAAU,EACV,KAAK,EACL,IAAI,EAOL,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAEL,kBAAkB,EAClB,QAAQ,EAKR,KAAK,cAAc,EAGpB,MAAM,aAAa,CAAC;AAKrB,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC/C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC;IACjE,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACtE;AAqYD,wEAAwE;AACxE,eAAO,MAAM,KAAK,YACP,oBAAoB,KAC5B,KAAK,CAAC,KAAK,CACZ,QAAQ,EACR,KAAK,EACL,kBAAkB,GAAG,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,mBAAmB,CAC3C,CAAC"}