@usine/executor 0.0.0 → 0.1.0

package/dist/local/index.js

@@ -0,0 +1,302 @@
+import { Attempt, AttemptChannel, AttemptFailure, Instance, Repository } from "@usine/core";
+import { Effect, FileSystem, Layer, Path, Redacted, Ref, Result, Schema, Stream, } from "effect";
+import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
+import { allowlistedEnvironment, collectCommand, requireSuccess } from "../child-command.js";
+import { CheckoutRequest, CredentialProvider, Executor, ExecutorError, ExecutorOperationError, logPreflightFailure, WorkerCapabilityError, } from "../index.js";
+import { keyedLockFor } from "../keyed-lock.js";
+import { provisionWorktree, safeSegment } from "../provision.js";
+import { runHostSessionFor } from "../run-host-session.js";
+const isExecutorError = Schema.is(ExecutorError);
+/**
+ * The run host gets a minimal environment, never the orchestrator's: the App
+ * private key and every other orchestrator secret must not reach the agent
+ * (ADR 0011's single-repo worker token is the only credential it holds).
+ */
+const HOST_ENVIRONMENT_ALLOWLIST = [
+    "HOME",
+    "LANG",
+    "LC_ALL",
+    "PATH",
+    "SHELL",
+    "TMPDIR",
+    "USER",
+];
+const executorError = (operation, message, cause) => new ExecutorOperationError({ operation, message, cause });
+/** The credential must never survive into a persisted error message. */
+const scrubbed = (text, credential) => text.replaceAll(Redacted.value(credential), "[REDACTED]");
+const credentialEnvironment = (base, credential) => {
+    const token = Redacted.value(credential);
+    return {
+        ...base,
+        GH_TOKEN: token,
+        GITHUB_TOKEN: token,
+        GIT_CONFIG_COUNT: "1",
+        GIT_CONFIG_KEY_0: "credential.helper",
+        GIT_CONFIG_VALUE_0: "!f() { echo username=x-access-token; echo password=$GITHUB_TOKEN; }; f",
+    };
+};
+const makeLocalExecutor = (options) => Effect.gen(function* () {
+    const credentials = yield* CredentialProvider;
+    const fileSystem = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
+    const fetches = yield* keyedLockFor();
+    const preparedStates = yield* Ref.make(new Map());
+    const baseEnvironment = yield* allowlistedEnvironment(HOST_ENVIRONMENT_ALLOWLIST);
+    const repositoryUrl = options.repositoryUrl ??
+        ((repository) => `https://github.com/${repository}.git`);
+    const runHost = options.runHost;
+    const interruptGrace = options.interruptGrace ?? "2 seconds";
+    const workersRoot = path.join(options.instanceDirectory, ".usine", "workers");
+    const executeCommand = Effect.fn("LocalExecutor.executeCommand")(function* (operation, command, args, commandOptions = {}) {
+        yield* Effect.annotateCurrentSpan({ host: "local", operation });
+        const result = yield* collectCommand(spawner, operation, command, args, {
+            env: baseEnvironment,
+            extendEnv: false,
+            ...commandOptions,
+        });
+        return yield* requireSuccess(operation, "local", command, args, result);
+    });
+    const run = Effect.fn("LocalExecutor.run")(function* (operation, command, args, commandOptions = {}) {
+        yield* executeCommand(operation, command, args, commandOptions);
+    });
+    // ADR 0006: worktrees never outlive their Attempt. A crashed orchestrator
+    // leaves both directories and bare-cache registrations behind; the sweep
+    // reclaims them at the next layer build, before new Attempts start.
+    const sweepAbandonedWorktrees = Effect.fn("LocalExecutor.sweepAbandonedWorktrees")(function* () {
+        if (!(yield* fileSystem.exists(workersRoot)))
+            return;
+        const workers = yield* fileSystem.readDirectory(workersRoot);
+        for (const worker of workers) {
+            const attemptsRoot = path.join(workersRoot, worker, "attempts");
+            if (yield* fileSystem.exists(attemptsRoot)) {
+                const leftovers = yield* fileSystem.readDirectory(attemptsRoot);
+                for (const leftover of leftovers) {
+                    const target = path.join(attemptsRoot, leftover);
+                    yield* Effect.logInfo("Sweeping abandoned Attempt worktree", {
+                        worker,
+                        host: "local",
+                        worktree: target,
+                    });
+                    yield* fileSystem.remove(target, { recursive: true, force: true });
+                }
+            }
+            const reposRoot = path.join(workersRoot, worker, "repos");
+            if (yield* fileSystem.exists(reposRoot)) {
+                const caches = yield* fileSystem.readDirectory(reposRoot);
+                for (const cache of caches) {
+                    yield* run("cleanup", "git", [
+                        "--git-dir",
+                        path.join(reposRoot, cache),
+                        "worktree",
+                        "prune",
+                    ]).pipe(Effect.tapError((error) => Effect.logWarning("Could not prune a bare cache during the sweep", {
+                        worker,
+                        host: "local",
+                        cache,
+                        message: error.message,
+                    })), Effect.ignore);
+                }
+            }
+        }
+    });
+    yield* sweepAbandonedWorktrees().pipe(Effect.tapError((error) => Effect.logWarning("Abandoned-worktree sweep failed; continuing", {
+        message: String(error),
+    })), Effect.ignore);
+    const preflight = Effect.fn("LocalExecutor.preflight")(function* (worker) {
+        yield* Effect.annotateCurrentSpan({ worker, host: "local" });
+        const gitVersion = (yield* executeCommand("preflight", "git", ["--version"])).trim();
+        if (!gitVersion.startsWith("git version ")) {
+            return yield* new WorkerCapabilityError({
+                worker,
+                capability: "toolchain",
+                message: `Worker ${worker} returned an unrecognized git version`,
+                cause: new Error(gitVersion),
+            });
+        }
+        const reported = (yield* executeCommand("preflight", runHost.command, [
+            ...runHost.args,
+            "--protocol-version",
+        ])).trim();
+        if (reported !== String(AttemptChannel.PROTOCOL_VERSION)) {
+            return yield* new WorkerCapabilityError({
+                worker,
+                capability: "run-host",
+                message: `Worker ${worker} has run-host protocol ${reported || "unknown"}; expected ${AttemptChannel.PROTOCOL_VERSION}`,
+                cause: new Error("run-host protocol mismatch"),
+            });
+        }
+        yield* Effect.logInfo("Worker preflight verified", {
+            worker,
+            host: "local",
+            gitVersion,
+            protocolVersion: AttemptChannel.PROTOCOL_VERSION,
+        });
+    }, logPreflightFailure);
+    const prepare = Effect.fn("LocalExecutor.prepare")(function* (request) {
+        yield* Effect.annotateCurrentSpan({
+            attemptId: request.attemptId,
+            worker: request.worker,
+            host: "local",
+            repository: request.repository,
+        });
+        const credential = yield* credentials.issue(request.repository, request.attemptId);
+        const workerRoot = path.join(workersRoot, request.worker);
+        const cache = path.join(workerRoot, "repos", `${safeSegment(request.repository)}.git`);
+        const worktree = path.join(workerRoot, "attempts", safeSegment(request.attemptId));
+        const environment = credentialEnvironment(baseEnvironment, credential);
+        const commandOptions = { env: environment, extendEnv: false };
+        yield* Effect.logInfo("Preparing Attempt workspace", {
+            attemptId: request.attemptId,
+            worker: request.worker,
+            repository: request.repository,
+            revision: request.revision,
+            cache,
+            worktree,
+        });
+        const remove = (target) => fileSystem.remove(target, { recursive: true, force: true });
+        const ops = {
+            ensureRoots: Effect.andThen(fileSystem.makeDirectory(path.dirname(cache), { recursive: true }), fileSystem.makeDirectory(path.dirname(worktree), { recursive: true })),
+            removePath: remove,
+            cacheExists: fileSystem.exists(cache),
+            promoteStaging: fileSystem.rename(`${cache}.cloning`, cache),
+            git: (args) => executeCommand("prepare", "git", args, commandOptions),
+        };
+        const prepared = yield* fetches
+            .withLock(request.repository)(provisionWorktree({
+            request,
+            url: repositoryUrl(request.repository),
+            host: "local",
+            layout: { cache, staging: `${cache}.cloning`, worktree },
+            ops,
+        }))
+            .pipe(Effect.mapError((error) => isExecutorError(error)
+            ? error
+            : executorError("prepare", "Attempt workspace preparation failed", error)), Effect.onError(() => Effect.gen(function* () {
+            yield* fileSystem.remove(worktree, { recursive: true, force: true }).pipe(Effect.tapError((error) => Effect.logWarning("Could not remove a partial local workspace", {
+                attemptId: request.attemptId,
+                worker: request.worker,
+                host: "local",
+                worktree,
+                message: String(error),
+            })), Effect.ignore);
+            Redacted.wipeUnsafe(credential);
+        })));
+        yield* Ref.update(preparedStates, (current) => {
+            const next = new Map(current);
+            next.set(request.attemptId, { cache, credential });
+            return next;
+        });
+        yield* Effect.logInfo("Attempt workspace ready", {
+            attemptId: request.attemptId,
+            baseCommit: prepared.spec.baseCommit,
+            worktree,
+        });
+        return prepared;
+    });
+    const spawn = Effect.fn("LocalExecutor.spawnRunHost")(function* (prepared, input) {
+        const attemptId = prepared.spec.attemptId;
+        yield* Effect.annotateCurrentSpan({
+            attemptId,
+            worker: prepared.worker,
+            host: "local",
+        });
+        const stored = (yield* Ref.get(preparedStates)).get(attemptId);
+        if (stored === undefined) {
+            return yield* new AttemptFailure.InfraFailure({
+                message: `Attempt ${attemptId} has no prepared credential`,
+                cause: new Error("prepared Attempt state missing"),
+            });
+        }
+        yield* Effect.logInfo("Launching the run host", {
+            attemptId,
+            worker: prepared.worker,
+            host: "local",
+            command: runHost.command,
+            worktree: prepared.worktree,
+        });
+        const handle = yield* spawner.spawn(ChildProcess.make(runHost.command, runHost.args, {
+            cwd: prepared.worktree,
+            env: credentialEnvironment(baseEnvironment, stored.credential),
+            extendEnv: false,
+            stdin: { stream: Stream.fromQueue(input), endOnDone: true },
+        }));
+        return {
+            handle,
+            host: "local",
+            scrub: (text) => scrubbed(text, stored.credential),
+        };
+    });
+    const session = yield* runHostSessionFor({ interruptGrace, spawn });
+    const cleanup = Effect.fn("LocalExecutor.cleanup")(function* (prepared) {
+        const attemptId = prepared.spec.attemptId;
+        yield* Effect.annotateCurrentSpan({
+            attemptId,
+            worker: prepared.worker,
+            host: "local",
+        });
+        yield* Effect.logInfo("Cleaning Attempt workspace", {
+            attemptId,
+            worker: prepared.worker,
+            host: "local",
+            worktree: prepared.worktree,
+        });
+        const state = (yield* Ref.get(preparedStates)).get(attemptId);
+        if (state === undefined) {
+            yield* fileSystem
+                .remove(prepared.worktree, { recursive: true, force: true })
+                .pipe(Effect.mapError((cause) => executorError("cleanup", `Could not remove ${prepared.worktree}`, cause)));
+            return;
+        }
+        const finish = Effect.gen(function* () {
+            const removedFromGit = yield* run("cleanup", "git", [
+                "--git-dir",
+                state.cache,
+                "worktree",
+                "remove",
+                "--force",
+                prepared.worktree,
+            ]).pipe(Effect.result);
+            const removedFromDisk = yield* fileSystem
+                .remove(prepared.worktree, { recursive: true, force: true })
+                .pipe(Effect.mapError((cause) => executorError("cleanup", `Could not remove ${prepared.worktree}`, cause)), Effect.result);
+            const pruned = yield* run("cleanup", "git", [
+                "--git-dir",
+                state.cache,
+                "worktree",
+                "prune",
+            ]).pipe(Effect.result);
+            for (const result of [removedFromGit, removedFromDisk, pruned]) {
+                if (Result.isFailure(result)) {
+                    return yield* result.failure;
+                }
+            }
+        }).pipe(Effect.mapError((cause) => isExecutorError(cause)
+            ? cause
+            : executorError("cleanup", `Could not clean Attempt ${attemptId}`, cause)));
+        yield* finish.pipe(Effect.ensuring(Effect.gen(function* () {
+            yield* Ref.update(preparedStates, (current) => {
+                const next = new Map(current);
+                next.delete(attemptId);
+                return next;
+            });
+            Redacted.wipeUnsafe(state.credential);
+        })));
+        yield* Effect.logInfo("Attempt cleanup completed", {
+            attemptId,
+            worker: prepared.worker,
+            host: "local",
+        });
+    });
+    return Executor.of({
+        kind: "local",
+        cancel: session.cancel,
+        cleanup,
+        launch: session.launch,
+        preflight,
+        prepare,
+    });
+});
+/** Node-only local executor; the package root remains platform-free. */
+export const layer = (options) => Layer.effect(Executor, makeLocalExecutor(options));
+//# sourceMappingURL=index.js.map

package/dist/local/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/local/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EACL,MAAM,EACN,UAAU,EACV,KAAK,EACL,IAAI,EAEJ,QAAQ,EACR,GAAG,EACH,MAAM,EACN,MAAM,EACN,MAAM,GACP,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,sBAAsB,EACtB,mBAAmB,EAGnB,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAqB,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAqB,MAAM,wBAAwB,CAAC;AAiB9E,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;AAEjD;;;;GAIG;AACH,MAAM,0BAA0B,GAAG;IACjC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,aAAa,GAAG,CACpB,SAA4B,EAC5B,OAAe,EACf,KAAc,EACU,EAAE,CAAC,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEvF,wEAAwE;AACxE,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,UAAqC,EAAU,EAAE,CAC/E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;AAE5D,MAAM,qBAAqB,GAAG,CAC5B,IAA4B,EAC5B,UAAqC,EACrC,EAAE;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO;QACL,GAAG,IAAI;QACP,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;QACnB,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,mBAAmB;QACrC,kBAAkB,EAAE,wEAAwE;KACpF,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,OAA6B,EAAE,EAAE,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,EAAmB,CAAC;IACvD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAoC,CAAC,CAAC;IACpF,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;IAClF,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa;QACrB,CAAC,CAAC,UAA2B,EAAU,EAAE,CAAC,sBAAsB,UAAU,MAAM,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,WAAW,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE9E,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EACxE,SAA4B,EAC5B,OAAe,EACf,IAA2B,EAC3B,cAAc,GAAgC,EAAE;QAEhD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;YACtE,GAAG,EAAE,eAAe;YACpB,SAAS,EAAE,KAAK;YAChB,GAAG,cAAc;SAClB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAClD,SAA4B,EAC5B,OAAe,EACf,IAA2B,EAC3B,cAAc,GAAgC,EAAE;QAEhD,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,uCAAuC,CAAC,CAChF,QAAQ,CAAC;QACP,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAAE,OAAO;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAChE,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBAChE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;oBACjD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;wBAC3D,MAAM;wBACN,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,MAAM;qBACjB,CAAC,CAAC;oBACH,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC1D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE;wBAC3B,WAAW;wBACX,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;wBAC3B,UAAU;wBACV,OAAO;qBACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,+CAA+C,EAAE;wBACjE,MAAM;wBACN,IAAI,EAAE,OAAO;wBACb,KAAK;wBACL,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CACF,CAAC;IACF,KAAK,CAAC,CAAC,uBAAuB,EAAE,CAAC,IAAI,CACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,6CAA6C,EAAE;QAC/D,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;KACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAC9D,MAAiC;QAEjC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,WAAW;gBACvB,OAAO,EAAE,UAAU,MAAM,uCAAuC;gBAChE,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE;YACpE,GAAG,OAAO,CAAC,IAAI;YACf,oBAAoB;SACrB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,QAAQ,KAAK,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,UAAU;gBACtB,OAAO,EAAE,UAAU,MAAM,0BAA0B,QAAQ,IAAI,SAAS,cAAc,cAAc,CAAC,gBAAgB,EAAE;gBACvH,KAAK,EAAE,IAAI,KAAK,CAAC,4BAA4B,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE;YACjD,MAAM;YACN,IAAI,EAAE,OAAO;YACb,UAAU;YACV,eAAe,EAAE,cAAc,CAAC,gBAAgB;SACjD,CAAC,CAAC;IACL,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAExB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAwB;QACpF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACnF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,qBAAqB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAW,CAAC;QACvE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;YACnD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK;YACL,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CAAC,MAAc,EAAoD,EAAE,CAClF,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAuE;YAC9E,WAAW,EAAE,MAAM,CAAC,OAAO,CACzB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAClE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CACtE;YACD,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;YACrC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,KAAK,CAAC;YAC5D,GAAG,EAAE,CAAC,IAA2B,EAAiD,EAAE,CAClF,cAAc,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC;SACzD,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO;aAC5B,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,iBAAiB,CAAC;YAChB,OAAO;YACP,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,UAAU,EAAE,QAAQ,EAAE;YACxD,GAAG;SACJ,CAAC,CACH;aACA,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,sCAAsC,EAAE,KAAK,CAAC,CAC5E,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,4CAA4C,EAAE;gBAC9D,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO;gBACb,QAAQ;gBACR,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;YACF,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC,CACH,CACF,CAAC;QAEJ,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE;YAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC7D,QAAyB,EACzB,KAAmB;QAEnB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,YAAY,CAAC;gBAC5C,OAAO,EAAE,WAAW,SAAS,6BAA6B;gBAC1D,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE;YAC9C,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CACjC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC/C,GAAG,EAAE,QAAQ,CAAC,QAAQ;YACtB,GAAG,EAAE,qBAAqB,CAAC,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC;YAC9D,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5D,CAAC,CACH,CAAC;QACF,OAAO;YACL,MAAM;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;SACnE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAyB;QACrF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,4BAA4B,EAAE;YAClD,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,CAAC,UAAU;iBACd,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBAC3D,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,aAAa,CAAC,SAAS,EAAE,oBAAoB,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CACzE,CACF,CAAC;YACJ,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE;gBAClD,WAAW;gBACX,KAAK,CAAC,KAAK;gBACX,UAAU;gBACV,QAAQ;gBACR,SAAS;gBACT,QAAQ,CAAC,QAAQ;aAClB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,UAAU;iBACtC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBAC3D,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,aAAa,CAAC,SAAS,EAAE,oBAAoB,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC,CACzE,EACD,MAAM,CAAC,MAAM,CACd,CAAC;YACJ,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE;gBAC1C,WAAW;gBACX,KAAK,CAAC,KAAK;gBACX,UAAU;gBACV,OAAO;aACR,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvB,KAAK,MAAM,MAAM,IAAI,CAAC,cAAc,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/D,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,2BAA2B,SAAS,EAAE,EAAE,KAAK,CAAC,CAC5E,CACF,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,MAAM,CAAC,QAAQ,CACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC,CAAC,CACH,CACF,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE;YACjD,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;QACjB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS;QACT,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,wEAAwE;AACxE,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,OAA6B,EAK7B,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/provision.d.ts

@@ -0,0 +1,33 @@
+import { Effect } from "effect";
+import { ExecutorOperationError, PreparedAttempt, type CheckoutRequest } from "./index.ts";
+export declare const safeSegment: (value: string) => string;
+export interface WorkspaceLayout {
+    readonly cache: string;
+    readonly staging: string;
+    readonly worktree: string;
+}
+/** The adapter-specific primitives; everything else about provisioning is shared. */
+export interface WorkspaceOps<E> {
+    readonly ensureRoots: Effect.Effect<void, E>;
+    readonly removePath: (target: string) => Effect.Effect<void, E>;
+    readonly cacheExists: Effect.Effect<boolean, E>;
+    /** Atomically promote the finished staging clone to the cache path. */
+    readonly promoteStaging: Effect.Effect<void, E>;
+    readonly git: (args: ReadonlyArray<string>) => Effect.Effect<string, E>;
+}
+export interface ProvisionOptions<E> {
+    readonly request: CheckoutRequest;
+    readonly url: string;
+    readonly host: string;
+    readonly layout: WorkspaceLayout;
+    readonly ops: WorkspaceOps<E>;
+}
+/**
+ * One canonical cached-clone-to-worktree choreography shared by every
+ * Executor: clone into a staging sibling and promote on success (an
+ * interrupted clone must never leave a half-initialized cache that every
+ * later fetch for the repository would poison), fetch the requested
+ * revision, and check out a detached worktree at the resolved commit.
+ */
+export declare const provisionWorktree: <E>(options: ProvisionOptions<E>) => Effect.Effect<PreparedAttempt, E | ExecutorOperationError, never>;
+//# sourceMappingURL=provision.d.ts.map

package/dist/provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../src/provision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,eAAe,EAEf,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,WAAW,UAAW,MAAM,KAAG,MAAoD,CAAC;AAIjG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qFAAqF;AACrF,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAsD,CAAC,oGA6EnF,CAAC"}

package/dist/provision.js

@@ -0,0 +1,76 @@
+import { AttemptChannel, Repository } from "@usine/core";
+import { Effect, Schema } from "effect";
+import { ExecutorOperationError, PreparedAttempt, WorktreePath, } from "./index.js";
+export const safeSegment = (value) => value.replaceAll(/[^A-Za-z0-9_.-]/gu, "_");
+const decodeCommit = Schema.decodeUnknownEffect(Repository.CommitSha);
+/**
+ * One canonical cached-clone-to-worktree choreography shared by every
+ * Executor: clone into a staging sibling and promote on success (an
+ * interrupted clone must never leave a half-initialized cache that every
+ * later fetch for the repository would poison), fetch the requested
+ * revision, and check out a detached worktree at the resolved commit.
+ */
+export const provisionWorktree = Effect.fn("Executor.provisionWorktree")(function* (options) {
+    const { layout, ops, request } = options;
+    yield* Effect.annotateCurrentSpan({
+        attemptId: request.attemptId,
+        worker: request.worker,
+        host: options.host,
+        repository: request.repository,
+    });
+    yield* ops.ensureRoots;
+    yield* ops.removePath(layout.worktree);
+    if (yield* ops.cacheExists) {
+        yield* ops.git(["--git-dir", layout.cache, "remote", "set-url", "origin", options.url]);
+    }
+    else {
+        yield* ops.removePath(layout.staging);
+        yield* ops.git(["clone", "--bare", "--filter=blob:none", options.url, layout.staging]).pipe(Effect.onError(() => ops.removePath(layout.staging).pipe(Effect.tapError((error) => Effect.logWarning("Could not remove a partial clone", {
+            attemptId: request.attemptId,
+            worker: request.worker,
+            host: options.host,
+            staging: layout.staging,
+            message: String(error),
+        })), Effect.ignore)));
+        yield* ops.promoteStaging;
+    }
+    yield* ops.git([
+        "--git-dir",
+        layout.cache,
+        "fetch",
+        "--force",
+        "--prune",
+        "origin",
+        request.revision,
+    ]);
+    const resolved = (yield* ops.git(["--git-dir", layout.cache, "rev-parse", "FETCH_HEAD"])).trim();
+    const baseCommit = yield* decodeCommit(resolved).pipe(Effect.mapError((cause) => new ExecutorOperationError({
+        operation: "prepare",
+        message: "git returned an invalid object id",
+        cause,
+    })));
+    yield* ops.git([
+        "--git-dir",
+        layout.cache,
+        "worktree",
+        "add",
+        "--detach",
+        layout.worktree,
+        baseCommit,
+    ]);
+    return new PreparedAttempt({
+        worker: request.worker,
+        spec: new AttemptChannel.RunSpec({
+            attemptId: request.attemptId,
+            repository: request.repository,
+            revision: request.revision,
+            baseCommit,
+            payload: request.payload,
+            task: request.task,
+            agent: request.agent,
+            parentModel: request.parentModel,
+        }),
+        worktree: WorktreePath.make(layout.worktree),
+    });
+});
+//# sourceMappingURL=provision.js.map

package/dist/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../src/provision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,YAAY,GAEb,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;AAEjG,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AA0BtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAChF,OAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IACvB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACzF,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,kCAAkC,EAAE;YACpD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;SACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CACF,CAAC;QACF,KAAK,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACb,WAAW;QACX,MAAM,CAAC,KAAK;QACZ,OAAO;QACP,SAAS;QACT,SAAS;QACT,QAAQ;QACR,OAAO,CAAC,QAAQ;KACjB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;QACzB,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,mCAAmC;QAC5C,KAAK;KACN,CAAC,CACL,CACF,CAAC;IACF,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACb,WAAW;QACX,MAAM,CAAC,KAAK;QACZ,UAAU;QACV,KAAK;QACL,UAAU;QACV,MAAM,CAAC,QAAQ;QACf,UAAU;KACX,CAAC,CAAC;IACH,OAAO,IAAI,eAAe,CAAC;QACzB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,IAAI,cAAc,CAAC,OAAO,CAAC;YAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU;YACV,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;SACjC,CAAC;QACF,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/run-host-session.d.ts

@@ -0,0 +1,22 @@
+import { Attempt, AttemptChannel, AttemptFailure, StepResult } from "@usine/core";
+import { Cause, Effect, Queue, Scope, type PlatformError } from "effect";
+import type { ChildProcessHandle } from "effect/unstable/process/ChildProcessSpawner";
+import { ExecutorError, type PreparedAttempt } from "./index.ts";
+export interface SpawnedRunHost {
+    readonly handle: ChildProcessHandle;
+    readonly host: string;
+    /** Redacts the Attempt credential from any run-host output before it is persisted. */
+    readonly scrub: (text: string) => string;
+}
+export type RunHostInput = Queue.Queue<Uint8Array, Cause.Done>;
+export interface RunHostSessionOptions {
+    readonly interruptGrace: Parameters<typeof Effect.timeoutOption>[1];
+    readonly spawn: (prepared: PreparedAttempt, input: RunHostInput) => Effect.Effect<SpawnedRunHost, AttemptFailure.AttemptFailure | PlatformError.PlatformError, Scope.Scope>;
+}
+export interface RunHostSession {
+    readonly cancel: (attemptId: Attempt.AttemptId) => Effect.Effect<void, ExecutorError>;
+    readonly launch: (prepared: PreparedAttempt, io: AttemptChannel.Sink) => Effect.Effect<StepResult.StepResult, AttemptFailure.AttemptFailure>;
+}
+/** One canonical byte-channel state machine shared by every process-backed Executor. */
+export declare const runHostSessionFor: (options: RunHostSessionOptions) => Effect.Effect<RunHostSession>;
+//# sourceMappingURL=run-host-session.d.ts.map

package/dist/run-host-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-host-session.d.ts","sourceRoot":"","sources":["../src/run-host-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EACL,KAAK,EAEL,MAAM,EAGN,KAAK,EAIL,KAAK,EAEL,KAAK,aAAa,EACnB,MAAM,QAAQ,CAAC;AAChB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,aAAa,EAA0B,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAGzF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CAC1C;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAE/D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,QAAQ,CAAC,KAAK,EAAE,CACd,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,YAAY,KAChB,MAAM,CAAC,MAAM,CAChB,cAAc,EACd,cAAc,CAAC,cAAc,GAAG,aAAa,CAAC,aAAa,EAC3D,KAAK,CAAC,KAAK,CACZ,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACtF,QAAQ,CAAC,MAAM,EAAE,CACf,QAAQ,EAAE,eAAe,EACzB,EAAE,EAAE,cAAc,CAAC,IAAI,KACpB,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;CAC1E;AAwCD,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,EAAE,CAAC,OAAO,EAAE,qBAAqB,KAAK,MAAM,CAAC,MAAM,CAAC,cAAc,CAqT5F,CAAC"}