@usine/executor 0.0.1 → 0.1.0

package/dist/exe-dev/index.js

@@ -0,0 +1,239 @@
+import { Attempt, Repository } from "@usine/core";
+import { Effect, Layer, Ref, Result, Schema } from "effect";
+import { ChildProcessSpawner } from "effect/unstable/process";
+import { CheckoutRequest, CredentialUnavailableError, Executor, ExecutorError, ExecutorOperationError, PreparedAttempt, } from "../index.js";
+import { keyedLockFor } from "../keyed-lock.js";
+import { provisionWorktree, safeSegment } from "../provision.js";
+import { attemptChannelFor } from "./channel.js";
+import { commandsFor } from "./commands.js";
+import { credentialGrantsFor } from "./grants.js";
+import { CredentialGrantMinutes, GitHubIntegration, HarnessLoginCheck, IntegrationName, } from "./model.js";
+import { preflightFor } from "./preflight.js";
+import { RUN_HOST_KILL_SCRIPT, runHostPidFile } from "./shell.js";
+import { abandonedWorktreeSweepFor } from "./sweep.js";
+export { CredentialGrantMinutes, GitHubIntegration, HarnessLoginCheck, IntegrationName, };
+const isExecutorError = Schema.is(ExecutorError);
+const executorError = (message, cause) => new ExecutorOperationError({ operation: "prepare", message, cause });
+const makeExeDevExecutor = (options) => Effect.gen(function* () {
+    const commands = yield* commandsFor(options.ssh);
+    const fetches = yield* keyedLockFor();
+    const preparedStates = yield* Ref.make(new Map());
+    const integrations = new Map(options.githubIntegrations.map(({ name, repository }) => [repository, name]));
+    const integrationNames = new Set(options.githubIntegrations.map(({ name }) => name));
+    const runHost = options.runHost ?? { command: "usine-run-host", args: [] };
+    // The grace covers an SSH round trip plus the agent flushing its final
+    // events, not just a local pipe: budget accordingly.
+    const interruptGrace = options.interruptGrace ?? "10 seconds";
+    if (integrations.size !== options.githubIntegrations.length) {
+        return yield* Effect.die(new Error("ExeDevExecutorOptions.githubIntegrations contains duplicate repositories"));
+    }
+    if (integrationNames.size !== options.githubIntegrations.length) {
+        return yield* Effect.die(new Error("ExeDevExecutorOptions.githubIntegrations contains duplicate integration names"));
+    }
+    const machines = yield* preflightFor(options, commands, runHost);
+    const credentialGrants = yield* credentialGrantsFor(options, commands);
+    const sweepAbandonedWorktrees = yield* abandonedWorktreeSweepFor(commands);
+    const attemptChannel = yield* attemptChannelFor(commands, preparedStates, runHost, interruptGrace);
+    const prepare = Effect.fn("ExeDevExecutor.prepare")(function* (request) {
+        yield* Effect.annotateCurrentSpan({
+            attemptId: request.attemptId,
+            worker: request.worker,
+            repository: request.repository,
+        });
+        const integration = integrations.get(request.repository);
+        if (integration === undefined) {
+            return yield* new CredentialUnavailableError({
+                repository: request.repository,
+                message: `No exe.dev GitHub integration is configured for ${request.repository}`,
+                cause: new Error("repository integration missing"),
+            });
+        }
+        const vm = yield* machines.vmFor(request.worker);
+        const root = `${vm.home}/.usine/workers/${safeSegment(request.worker)}`;
+        const cache = `${root}/repos/${safeSegment(request.repository)}.git`;
+        const worktree = `${root}/attempts/${safeSegment(request.attemptId)}`;
+        const staging = `${cache}.cloning`;
+        const remoteUrl = `https://github.int.exe.xyz/${request.repository}.git`;
+        yield* Effect.annotateCurrentSpan({ host: vm.sshDest });
+        yield* sweepAbandonedWorktrees(request.attemptId, request.worker, vm, root);
+        const remove = (target) => Effect.asVoid(commands.remote("prepare", vm.sshDest, "rm", ["-rf", target]));
+        const ops = {
+            ensureRoots: Effect.asVoid(commands.remote("prepare", vm.sshDest, "mkdir", [
+                "-p",
+                `${root}/repos`,
+                `${root}/attempts`,
+            ])),
+            removePath: remove,
+            cacheExists: Effect.gen(function* () {
+                const inspected = yield* commands.remoteRaw("prepare", vm.sshDest, "test", ["-d", cache]);
+                if (inspected.exitCode === 0)
+                    return true;
+                if (inspected.exitCode === 1)
+                    return false;
+                return yield* executorError(`Could not inspect the cached clone on Worker ${request.worker}`, new Error(inspected.stderr.trim()));
+            }),
+            promoteStaging: Effect.asVoid(commands.remote("prepare", vm.sshDest, "mv", [staging, cache])),
+            git: (args) => commands.remote("prepare", vm.sshDest, "git", args),
+        };
+        const prepared = yield* fetches
+            .withLock(request.repository)(Effect.gen(function* () {
+            // The grant attaches inside the compensated region: an interrupt
+            // parked on the repository lock must not leak an attachment.
+            yield* credentialGrants.acquire(request.worker, request.repository, integration);
+            const provisioned = yield* provisionWorktree({
+                request,
+                url: remoteUrl,
+                host: vm.sshDest,
+                layout: { cache, staging, worktree },
+                ops,
+            });
+            yield* Ref.update(preparedStates, (current) => {
+                const next = new Map(current);
+                next.set(request.attemptId, { cache, integration, vm });
+                return next;
+            });
+            return provisioned;
+        }))
+            .pipe(Effect.mapError((cause) => isExecutorError(cause)
+            ? cause
+            : executorError("exe.dev workspace preparation failed", cause)), Effect.onError(() => Effect.gen(function* () {
+            yield* Ref.update(preparedStates, (current) => {
+                const next = new Map(current);
+                next.delete(request.attemptId);
+                return next;
+            });
+            yield* commands.remote("cleanup", vm.sshDest, "rm", ["-rf", worktree, staging]).pipe(Effect.tapError((error) => Effect.logWarning("Could not remove a partial exe.dev workspace", {
+                attemptId: request.attemptId,
+                worker: request.worker,
+                host: vm.sshDest,
+                message: error.message,
+            })), Effect.ignore);
+            yield* credentialGrants.release(request.worker, integration).pipe(Effect.tapError((error) => Effect.logWarning("Could not detach credentials after prepare failed", {
+                attemptId: request.attemptId,
+                worker: request.worker,
+                host: vm.sshDest,
+                message: error.message,
+            })), Effect.ignore);
+        })));
+        yield* Effect.logInfo("exe.dev Attempt workspace ready", {
+            attemptId: request.attemptId,
+            worker: request.worker,
+            host: vm.sshDest,
+            repository: request.repository,
+            baseCommit: prepared.spec.baseCommit,
+            worktree,
+        });
+        return prepared;
+    });
+    const cleanWorktree = Effect.fn("ExeDevExecutor.cleanWorktree")(function* (prepared, state) {
+        yield* Effect.annotateCurrentSpan({
+            attemptId: prepared.spec.attemptId,
+            worker: prepared.worker,
+            host: state.vm.sshDest,
+        });
+        // Killing the local SSH client says nothing about the VM: confirm the
+        // recorded run host is dead before destroying the workspace under it.
+        const confirmed = yield* commands.remoteRaw("cleanup", state.vm.sshDest, "sh", [
+            "-c",
+            RUN_HOST_KILL_SCRIPT,
+            "sh",
+            runHostPidFile(prepared.worktree),
+        ]);
+        yield* Effect.logInfo("Confirmed the remote run host before workspace removal", {
+            attemptId: prepared.spec.attemptId,
+            worker: prepared.worker,
+            host: state.vm.sshDest,
+            runHost: confirmed.stdout.trim() || `exit ${String(confirmed.exitCode)}`,
+        });
+        const removed = yield* commands.remoteRaw("cleanup", state.vm.sshDest, "git", [
+            "--git-dir",
+            state.cache,
+            "worktree",
+            "remove",
+            "--force",
+            prepared.worktree,
+        ]);
+        if (removed.exitCode !== 0) {
+            yield* Effect.logDebug("Remote Git worktree removal returned non-zero", {
+                attemptId: prepared.spec.attemptId,
+                worker: prepared.worker,
+                host: state.vm.sshDest,
+                exitCode: String(removed.exitCode),
+            });
+        }
+        yield* commands.remote("cleanup", state.vm.sshDest, "rm", ["-rf", prepared.worktree]);
+        yield* commands.remote("cleanup", state.vm.sshDest, "git", [
+            "--git-dir",
+            state.cache,
+            "worktree",
+            "prune",
+        ]);
+    });
+    const cleanup = Effect.fn("ExeDevExecutor.cleanup")(function* (prepared) {
+        const attemptId = prepared.spec.attemptId;
+        yield* Effect.annotateCurrentSpan({
+            attemptId,
+            worker: prepared.worker,
+        });
+        yield* Effect.logInfo("Cleaning exe.dev Attempt workspace", {
+            attemptId,
+            worker: prepared.worker,
+            worktree: prepared.worktree,
+        });
+        const state = (yield* Ref.get(preparedStates)).get(attemptId);
+        if (state === undefined) {
+            yield* Effect.logDebug("exe.dev Attempt cleanup was already complete", {
+                attemptId,
+                worker: prepared.worker,
+            });
+            return;
+        }
+        yield* Effect.annotateCurrentSpan({ host: state.vm.sshDest });
+        // The state entry drops exactly once whatever the outcome: a failed
+        // cleanup must never leave a retry path that releases the grant twice
+        // and detaches a running sibling's credentials.
+        const [worktreeResult, grantResult] = yield* Effect.all([
+            cleanWorktree(prepared, state).pipe(Effect.result),
+            credentialGrants.release(prepared.worker, state.integration).pipe(Effect.result),
+        ]).pipe(Effect.ensuring(Ref.update(preparedStates, (current) => {
+            const next = new Map(current);
+            next.delete(attemptId);
+            return next;
+        })));
+        const results = [
+            ["worktree", worktreeResult],
+            ["credential-grant", grantResult],
+        ];
+        for (const [resource, result] of results) {
+            if (Result.isFailure(result)) {
+                yield* Effect.logError("exe.dev Attempt cleanup operation failed", {
+                    attemptId,
+                    worker: prepared.worker,
+                    host: state.vm.sshDest,
+                    resource,
+                    message: result.failure.message,
+                });
+            }
+        }
+        if (Result.isFailure(worktreeResult))
+            return yield* worktreeResult.failure;
+        if (Result.isFailure(grantResult))
+            return yield* grantResult.failure;
+        yield* Effect.logInfo("exe.dev Attempt cleanup completed", {
+            attemptId,
+            worker: prepared.worker,
+            host: state.vm.sshDest,
+        });
+    });
+    return Executor.of({
+        kind: "exe.dev",
+        cancel: attemptChannel.cancel,
+        cleanup,
+        launch: attemptChannel.launch,
+        preflight: machines.preflight,
+        prepare,
+    });
+});
+/** Node-only exe.dev adapter; the package root remains platform-free. */
+export const layer = (options) => Layer.effect(Executor, makeExeDevExecutor(options));
+//# sourceMappingURL=index.js.map

package/dist/exe-dev/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/exe-dev/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,QAAQ,EACR,aAAa,EACb,sBAAsB,EACtB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAqB,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,sBAAsB,EAEtB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAEhB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEvD,OAAO,EACL,sBAAsB,EAEtB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,CAAC;AAEF,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;AAEjD,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,KAAc,EAA0B,EAAE,CAChF,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEvE,MAAM,kBAAkB,GAAG,CAAC,OAA8B,EAAE,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,EAAmB,CAAC;IACvD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAoC,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC3E,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,YAAY,CAAC;IAE9D,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,0EAA0E,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,uBAAuB,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAC7C,QAAQ,EACR,cAAc,EACd,OAAO,EACP,cAAc,CACf,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAwB;QACrF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;gBAC3C,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,mDAAmD,OAAO,CAAC,UAAU,EAAE;gBAChF,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,mBAAmB,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,GAAG,IAAI,UAAU,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QACrE,MAAM,QAAQ,GAAG,GAAG,IAAI,aAAa,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,GAAG,KAAK,UAAU,CAAC;QACnC,MAAM,SAAS,GAAG,8BAA8B,OAAO,CAAC,UAAU,MAAM,CAAC;QACzE,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,CAAC,MAAc,EAA+C,EAAE,CAC7E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAyC;YAChD,WAAW,EAAE,MAAM,CAAC,MAAM,CACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC9C,IAAI;gBACJ,GAAG,IAAI,QAAQ;gBACf,GAAG,IAAI,WAAW;aACnB,CAAC,CACH;YACD,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC1F,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC3C,OAAO,KAAK,CAAC,CAAC,aAAa,CACzB,gDAAgD,OAAO,CAAC,MAAM,EAAE,EAChE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CACnC,CAAC;YACJ,CAAC,CAAC;YACF,cAAc,EAAE,MAAM,CAAC,MAAM,CAC3B,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAC/D;YACD,GAAG,EAAE,CAAC,IAA2B,EAAiD,EAAE,CAClF,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;SACtD,CAAC;QAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO;aAC5B,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,iEAAiE;YACjE,6DAA6D;YAC7D,KAAK,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YACjF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;gBAC3C,OAAO;gBACP,GAAG,EAAE,SAAS;gBACd,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE;gBACpC,GAAG;aACJ,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACxD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CACH;aACA,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,aAAa,CAAC,sCAAsC,EAAE,KAAK,CAAC,CACjE,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAClF,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,8CAA8C,EAAE;gBAChE,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;YACF,KAAK,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,mDAAmD,EAAE;gBACrE,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;QACJ,CAAC,CAAC,CACH,CACF,CAAC;QAEJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EACvE,QAAyB,EACzB,KAAoB;QAEpB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE;YAC7E,IAAI;YACJ,oBAAoB;YACpB,IAAI;YACJ,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAClC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wDAAwD,EAAE;YAC9E,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO;YACtB,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;SACzE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE;YAC5E,WAAW;YACX,KAAK,CAAC,KAAK;YACX,UAAU;YACV,QAAQ;YACR,SAAS;YACT,QAAQ,CAAC,QAAQ;SAClB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,+CAA+C,EAAE;gBACtE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS;gBAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO;gBACtB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;aACnC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtF,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE;YACzD,WAAW;YACX,KAAK,CAAC,KAAK;YACX,UAAU;YACV,OAAO;SACR,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAyB;QACtF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,oCAAoC,EAAE;YAC1D,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,8CAA8C,EAAE;gBACrE,SAAS;gBACT,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,oEAAoE;QACpE,sEAAsE;QACtE,gDAAgD;QAChD,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACtD,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAClD,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;SACjF,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CACH,CACF,CAAC;QACF,MAAM,OAAO,GAAG;YACd,CAAC,UAAU,EAAE,cAAc,CAAC;YAC5B,CAAC,kBAAkB,EAAE,WAAW,CAAC;SACzB,CAAC;QACX,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,0CAA0C,EAAE;oBACjE,SAAS;oBACT,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO;oBACtB,QAAQ;oBACR,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC;QAC3E,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;QACrE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,EAAE;YACzD,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;QACjB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,OAAO;QACP,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,yEAAyE;AACzE,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,OAA8B,EACyC,EAAE,CACzE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/exe-dev/model.d.ts

@@ -0,0 +1,58 @@
+import { Attempt } from "@usine/core";
+import { Schema, type Effect, type Ref } from "effect";
+import type { RunHostCommand } from "../index.ts";
+/** The name of one exe.dev edge-injected integration. */
+export declare const IntegrationName: Schema.brand<Schema.String, "ExeDevIntegrationName">;
+export type IntegrationName = typeof IntegrationName.Type;
+/**
+ * The SSH argv boundary: this string is handed to the local `ssh` client as a
+ * destination, so anything that could read as an option (`-oProxyCommand=...`)
+ * must be unrepresentable, not merely unexpected.
+ */
+export declare const SshDestination: Schema.brand<Schema.String, "ExeDevSshDestination">;
+export type SshDestination = typeof SshDestination.Type;
+/** An absolute remote home directory that cannot smuggle bytes past shell quoting. */
+export declare const HomePath: Schema.brand<Schema.String, "ExeDevHomePath">;
+export type HomePath = typeof HomePath.Type;
+declare const GitHubIntegration_base: Schema.Class<GitHubIntegration, Schema.Struct<{
+    readonly repository: Schema.brand<Schema.String, "RepoName">;
+    readonly name: Schema.brand<Schema.String, "ExeDevIntegrationName">;
+}>, {}>;
+/** One standing exe.dev GitHub integration; only its VM attachment is per Attempt. */
+export declare class GitHubIntegration extends GitHubIntegration_base {
+}
+declare const HarnessLoginCheck_base: Schema.Class<HarnessLoginCheck, Schema.Struct<{
+    readonly harness: Schema.NonEmptyString;
+    readonly command: Schema.NonEmptyString;
+    readonly args: Schema.$Array<Schema.String>;
+}>, {}>;
+/** A harness-owned command that exits zero only while its operator login remains usable. */
+export declare class HarnessLoginCheck extends HarnessLoginCheck_base {
+}
+export declare const CredentialGrantMinutes: Schema.brand<Schema.Int, "ExeDevCredentialGrantMinutes">;
+export type CredentialGrantMinutes = typeof CredentialGrantMinutes.Type;
+export interface ExeDevExecutorOptions {
+    /** Existing native GitHub integrations, one per repository this Worker may receive. */
+    readonly githubIntegrations: ReadonlyArray<GitHubIntegration>;
+    /** Every harness used on this Worker must prove that its operator login is still valid. */
+    readonly harnessLoginChecks: readonly [HarnessLoginCheck, ...ReadonlyArray<HarnessLoginCheck>];
+    /** Installed in the baked image; defaults to the published worker executable. */
+    readonly runHost?: RunHostCommand;
+    /** Local SSH executable and its control-plane-only arguments. */
+    readonly ssh?: RunHostCommand;
+    /** Time-box for the edge credential attachment. Defaults to 65 minutes. */
+    readonly credentialGrantMinutes?: CredentialGrantMinutes;
+    readonly interruptGrace?: Parameters<typeof Effect.timeoutOption>[1];
+}
+export interface VmState {
+    readonly home: HomePath;
+    readonly sshDest: SshDestination;
+}
+export interface PreparedState {
+    readonly cache: string;
+    readonly integration: IntegrationName;
+    readonly vm: VmState;
+}
+export type PreparedStates = Ref.Ref<Map<Attempt.AttemptId, PreparedState>>;
+export {};
+//# sourceMappingURL=model.d.ts.map

package/dist/exe-dev/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAc,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,KAAK,GAAG,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,yDAAyD;AACzD,eAAO,MAAM,eAAe,sDAIiB,CAAC;AAC9C,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,cAAc,qDAIiB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC;AAExD,sFAAsF;AACtF,eAAO,MAAM,QAAQ,+CAIiB,CAAC;AACvC,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;;;;;AAE5C,sFAAsF;AACtF,qBAAa,iBAAkB,SAAQ,sBAKrC;CAAG;;;;;;AAEL,4FAA4F;AAC5F,qBAAa,iBAAkB,SAAQ,sBAMrC;CAAG;AAEL,eAAO,MAAM,sBAAsB,0DAElC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC9D,2FAA2F;IAC3F,QAAQ,CAAC,kBAAkB,EAAE,SAAS,CAAC,iBAAiB,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC/F,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC"}

package/dist/exe-dev/model.js

@@ -0,0 +1,33 @@
+import { Attempt, Repository } from "@usine/core";
+import { Schema } from "effect";
+/** The name of one exe.dev edge-injected integration. */
+export const IntegrationName = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9]+(?:[._-][A-Za-z0-9]+)*$/u, {
+    message: "Expected an exe.dev integration name safe for the lobby command boundary",
+})).pipe(Schema.brand("ExeDevIntegrationName"));
+/**
+ * The SSH argv boundary: this string is handed to the local `ssh` client as a
+ * destination, so anything that could read as an option (`-oProxyCommand=...`)
+ * must be unrepresentable, not merely unexpected.
+ */
+export const SshDestination = Schema.String.check(Schema.isPattern(/^(?:[A-Za-z0-9._-]+@)?[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/u, {
+    message: "Expected an exe.dev SSH hostname, optionally prefixed by a user",
+})).pipe(Schema.brand("ExeDevSshDestination"));
+/** An absolute remote home directory that cannot smuggle bytes past shell quoting. */
+export const HomePath = Schema.String.check(Schema.isPattern(/^\/[^\0\r\n]*$/u, {
+    message: "Expected an absolute remote home directory without control bytes",
+})).pipe(Schema.brand("ExeDevHomePath"));
+/** One standing exe.dev GitHub integration; only its VM attachment is per Attempt. */
+export class GitHubIntegration extends Schema.Class("@usine/executor/ExeDevGitHubIntegration")({
+    repository: Repository.Name,
+    name: IntegrationName,
+}) {
+}
+/** A harness-owned command that exits zero only while its operator login remains usable. */
+export class HarnessLoginCheck extends Schema.Class("@usine/executor/ExeDevHarnessLoginCheck")({
+    harness: Schema.NonEmptyString,
+    command: Schema.NonEmptyString,
+    args: Schema.Array(Schema.String),
+}) {
+}
+export const CredentialGrantMinutes = Schema.Int.check(Schema.isGreaterThanOrEqualTo(1)).pipe(Schema.brand("ExeDevCredentialGrantMinutes"));
+//# sourceMappingURL=model.js.map

package/dist/exe-dev/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,MAAM,EAAyB,MAAM,QAAQ,CAAC;AAGvD,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAChD,MAAM,CAAC,SAAS,CAAC,uCAAuC,EAAE;IACxD,OAAO,EAAE,0EAA0E;CACpF,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAG9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/C,MAAM,CAAC,SAAS,CAAC,mEAAmE,EAAE;IACpF,OAAO,EAAE,iEAAiE;CAC3E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAG7C,sFAAsF;AACtF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACzC,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE;IAClC,OAAO,EAAE,kEAAkE;CAC5E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvC,sFAAsF;AACtF,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,KAAK,CACjD,yCAAyC,CAC1C,CAAC;IACA,UAAU,EAAE,UAAU,CAAC,IAAI;IAC3B,IAAI,EAAE,eAAe;CACtB,CAAC;CAAG;AAEL,4FAA4F;AAC5F,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,KAAK,CACjD,yCAAyC,CAC1C,CAAC;IACA,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;CAClC,CAAC;CAAG;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3F,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAC7C,CAAC"}

package/dist/exe-dev/preflight.d.ts

@@ -0,0 +1,9 @@
+import { Effect } from "effect";
+import { ExecutorOperationError, type RunHostCommand, WorkerCapabilityError } from "../index.ts";
+import type { ExeDevCommands } from "./commands.ts";
+import { type ExeDevExecutorOptions, type VmState } from "./model.ts";
+export declare const preflightFor: (options: ExeDevExecutorOptions, commands: ExeDevCommands, runHost: RunHostCommand) => Effect.Effect<{
+    preflight: (worker: string & import("effect/Brand").Brand<"WorkerName">) => Effect.Effect<undefined, import("../index.ts").CredentialUnavailableError | ExecutorOperationError | WorkerCapabilityError, never>;
+    vmFor: (worker: string & import("effect/Brand").Brand<"WorkerName">) => Effect.Effect<VmState, ExecutorOperationError | WorkerCapabilityError, never>;
+}, never, never>;
+//# sourceMappingURL=preflight.d.ts.map

package/dist/exe-dev/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/exe-dev/preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAC7C,OAAO,EACL,sBAAsB,EAEtB,KAAK,cAAc,EACnB,qBAAqB,EAEtB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAA4B,KAAK,qBAAqB,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAoBhG,eAAO,MAAM,YAAY;;;gBA6JvB,CAAC"}

package/dist/exe-dev/preflight.js

@@ -0,0 +1,82 @@
+import { AttemptChannel, Worker } from "@usine/core";
+import { Effect, Ref, Schema } from "effect";
+import { ExecutorOperationError, logPreflightFailure, WorkerCapabilityError, } from "../index.js";
+import { HomePath, SshDestination } from "./model.js";
+const MINIMUM_NODE_MAJOR = 22;
+const Vm = Schema.Struct({
+    vmName: Schema.NonEmptyString,
+    sshDest: SshDestination,
+    status: Schema.NonEmptyString,
+}).pipe(Schema.encodeKeys({ vmName: "vm_name", sshDest: "ssh_dest" }));
+const VmList = Schema.Struct({ vms: Schema.Array(Vm) });
+const decodeVmList = Schema.decodeUnknownEffect(Schema.fromJsonString(VmList));
+const decodeHome = Schema.decodeUnknownEffect(HomePath);
+const capabilityError = (worker, capability, message, cause) => new WorkerCapabilityError({ worker, capability, message, cause });
+export const preflightFor = Effect.fn("ExeDevExecutor.preflightFor")(function* (options, commands, runHost) {
+    const workers = yield* Ref.make(new Map());
+    const resolveVm = Effect.fn("ExeDevExecutor.resolveVm")(function* (worker) {
+        const response = yield* commands.lobbyJson("preflight", ["ls", worker]);
+        const decoded = yield* decodeVmList(response).pipe(Effect.mapError((cause) => capabilityError(worker, "machine", `exe.dev returned invalid machine metadata for Worker ${worker}`, cause)));
+        const vm = decoded.vms.find(({ vmName }) => vmName === worker);
+        if (vm === undefined) {
+            return yield* capabilityError(worker, "machine", `exe.dev has no VM named ${worker}`, new Error("worker VM missing"));
+        }
+        if (vm.status !== "running") {
+            return yield* capabilityError(worker, "machine", `exe.dev VM ${worker} is ${vm.status}, not running`, new Error(`VM status: ${vm.status}`));
+        }
+        const reported = (yield* commands.remote("preflight", vm.sshDest, "printenv", ["HOME"])).trim();
+        const home = yield* decodeHome(reported).pipe(Effect.mapError((cause) => capabilityError(worker, "toolchain", `exe.dev VM ${worker} returned an invalid home directory`, cause)));
+        return { home, sshDest: vm.sshDest };
+    });
+    const asCapability = (worker, capability, message, effect) => effect.pipe(Effect.mapError((cause) => capabilityError(worker, capability, message, cause)));
+    const preflight = Effect.fn("ExeDevExecutor.preflight")(function* (worker) {
+        const vm = yield* resolveVm(worker).pipe(Effect.catchTag("ExecutorOperationError", (cause) => capabilityError(worker, "machine", `Could not reach exe.dev Worker ${worker}`, cause)));
+        yield* Effect.annotateCurrentSpan({ worker, host: vm.sshDest });
+        const gitVersion = (yield* asCapability(worker, "toolchain", `Worker ${worker} cannot run Git`, commands.remote("preflight", vm.sshDest, "git", ["--version"]))).trim();
+        if (!gitVersion.startsWith("git version ")) {
+            return yield* capabilityError(worker, "toolchain", `Worker ${worker} returned an unrecognized Git version`, new Error(gitVersion));
+        }
+        const nodeVersion = (yield* asCapability(worker, "toolchain", `Worker ${worker} cannot run Node.js`, commands.remote("preflight", vm.sshDest, "node", ["--version"]))).trim();
+        const nodeMajor = Number(/^v(?<major>\d+)/u.exec(nodeVersion)?.groups?.major ?? Number.NaN);
+        if (!Number.isSafeInteger(nodeMajor) || nodeMajor < MINIMUM_NODE_MAJOR) {
+            return yield* capabilityError(worker, "toolchain", `Worker ${worker} has Node.js ${nodeVersion || "unknown"}; expected ${MINIMUM_NODE_MAJOR}+`, new Error("Node.js version mismatch"));
+        }
+        const protocol = (yield* asCapability(worker, "run-host", `Worker ${worker} cannot run ${runHost.command}`, commands.remote("preflight", vm.sshDest, runHost.command, [
+            ...runHost.args,
+            "--protocol-version",
+        ]))).trim();
+        if (protocol !== String(AttemptChannel.PROTOCOL_VERSION)) {
+            return yield* capabilityError(worker, "run-host", `Worker ${worker} has run-host protocol ${protocol || "unknown"}; expected ${AttemptChannel.PROTOCOL_VERSION}`, new Error("run-host protocol mismatch"));
+        }
+        for (const check of options.harnessLoginChecks) {
+            yield* asCapability(worker, "harness-login", `${check.harness} is not logged in on Worker ${worker}`, commands.remote("preflight", vm.sshDest, check.command, check.args));
+        }
+        for (const integration of options.githubIntegrations) {
+            yield* asCapability(worker, "credentials", `exe.dev GitHub integration ${integration.name} is not ready for ${integration.repository}`, commands.lobby("preflight", ["integrations", "test", integration.name]));
+        }
+        yield* Ref.update(workers, (current) => {
+            const next = new Map(current);
+            next.set(worker, vm);
+            return next;
+        });
+        yield* Effect.logInfo("exe.dev Worker preflight verified", {
+            worker,
+            host: vm.sshDest,
+            gitVersion,
+            nodeVersion,
+            protocolVersion: AttemptChannel.PROTOCOL_VERSION,
+            harnesses: options.harnessLoginChecks.map(({ harness }) => harness).join(","),
+            integrations: options.githubIntegrations.length,
+        });
+    }, logPreflightFailure);
+    // Both resolveVm failures sit inside the ExecutorError union prepare
+    // reports, so a stopped VM keeps its typed capability shape.
+    const vmFor = Effect.fn("ExeDevExecutor.vmFor")(function* (worker) {
+        const cached = (yield* Ref.get(workers)).get(worker);
+        if (cached !== undefined)
+            return cached;
+        return yield* resolveVm(worker);
+    });
+    return { preflight, vmFor };
+});
+//# sourceMappingURL=preflight.js.map

package/dist/exe-dev/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/exe-dev/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EAEnB,qBAAqB,GAEtB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAA4C,MAAM,YAAY,CAAC;AAEhG,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC,cAAc;IAC7B,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,MAAM,CAAC,cAAc;CAC9B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxD,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AAExD,MAAM,eAAe,GAAG,CACtB,MAAmB,EACnB,UAA4B,EAC5B,OAAe,EACf,KAAc,EACS,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAE9F,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAC5E,OAA8B,EAC9B,QAAwB,EACxB,OAAuB;IAEvB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAwB,CAAC,CAAC;IAEjE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAmB;QACpF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CACb,MAAM,EACN,SAAS,EACT,wDAAwD,MAAM,EAAE,EAChE,KAAK,CACN,CACF,CACF,CAAC;QACF,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC/D,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,SAAS,EACT,2BAA2B,MAAM,EAAE,EACnC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAC/B,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,SAAS,EACT,cAAc,MAAM,OAAO,EAAE,CAAC,MAAM,eAAe,EACnD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,CAAC,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChG,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CACb,MAAM,EACN,WAAW,EACX,cAAc,MAAM,qCAAqC,EACzD,KAAK,CACN,CACF,CACF,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAoB,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,CACnB,MAAmB,EACnB,UAA4B,EAC5B,OAAe,EACf,MAAgD,EACP,EAAE,CAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAE/F,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAmB;QACpF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAClD,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,kCAAkC,MAAM,EAAE,EAAE,KAAK,CAAC,CACtF,CACF,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CACrC,MAAM,EACN,WAAW,EACX,UAAU,MAAM,iBAAiB,EACjC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAC/D,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,WAAW,EACX,UAAU,MAAM,uCAAuC,EACvD,IAAI,KAAK,CAAC,UAAU,CAAC,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CACtC,MAAM,EACN,WAAW,EACX,UAAU,MAAM,qBAAqB,EACrC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAChE,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,kBAAkB,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,WAAW,EACX,UAAU,MAAM,gBAAgB,WAAW,IAAI,SAAS,cAAc,kBAAkB,GAAG,EAC3F,IAAI,KAAK,CAAC,0BAA0B,CAAC,CACtC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CACnC,MAAM,EACN,UAAU,EACV,UAAU,MAAM,eAAe,OAAO,CAAC,OAAO,EAAE,EAChD,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;YACxD,GAAG,OAAO,CAAC,IAAI;YACf,oBAAoB;SACrB,CAAC,CACH,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,QAAQ,KAAK,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,UAAU,EACV,UAAU,MAAM,0BAA0B,QAAQ,IAAI,SAAS,cAAc,cAAc,CAAC,gBAAgB,EAAE,EAC9G,IAAI,KAAK,CAAC,4BAA4B,CAAC,CACxC,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/C,KAAK,CAAC,CAAC,YAAY,CACjB,MAAM,EACN,eAAe,EACf,GAAG,KAAK,CAAC,OAAO,+BAA+B,MAAM,EAAE,EACvD,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CACpE,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACrD,KAAK,CAAC,CAAC,YAAY,CACjB,MAAM,EACN,aAAa,EACb,8BAA8B,WAAW,CAAC,IAAI,qBAAqB,WAAW,CAAC,UAAU,EAAE,EAC3F,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CACxE,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,EAAE;YACzD,MAAM;YACN,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,UAAU;YACV,WAAW;YACX,eAAe,EAAE,cAAc,CAAC,gBAAgB;YAChD,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7E,YAAY,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM;SAChD,CAAC,CAAC;IACL,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAExB,qEAAqE;IACrE,6DAA6D;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAmB;QAC5E,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC"}

package/dist/exe-dev/shell.d.ts

@@ -0,0 +1,12 @@
+/** One shell-safe command string for OpenSSH's remote-command boundary. */
+export declare const shellCommand: (command: string, args: ReadonlyArray<string>) => string;
+/** Sibling of the worktree, so the sweep reclaims it with the other leftovers. */
+export declare const runHostPidFile: (worktree: string) => string;
+/** The run host needs a working directory and one public edge-host selector. */
+export declare const runHostShellCommand: (worktree: string, command: string, args: ReadonlyArray<string>) => string;
+/**
+ * Confirms a recorded run host is dead before workspace removal: TERM first,
+ * a bounded wait, then KILL. `$1` is the pid file; stdout reports the outcome.
+ */
+export declare const RUN_HOST_KILL_SCRIPT: string;
+//# sourceMappingURL=shell.d.ts.map

package/dist/exe-dev/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/exe-dev/shell.ts"],"names":[],"mappings":"AAEA,2EAA2E;AAC3E,eAAO,MAAM,YAAY,YAAa,MAAM,QAAQ,aAAa,CAAC,MAAM,CAAC,KAAG,MACzB,CAAC;AAEpD,kFAAkF;AAClF,eAAO,MAAM,cAAc,aAAc,MAAM,KAAG,MAA2B,CAAC;AAE9E,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,aACpB,MAAM,WACP,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,KAC1B,MAIsJ,CAAC;AAE1J;;;GAGG;AACH,eAAO,MAAM,oBAAoB,QAczB,CAAC"}

package/dist/exe-dev/shell.js

@@ -0,0 +1,31 @@
+const quote = (value) => `'${value.replaceAll("'", `'"'"'`)}'`;
+/** One shell-safe command string for OpenSSH's remote-command boundary. */
+export const shellCommand = (command, args) => `exec ${[command, ...args].map(quote).join(" ")}`;
+/** Sibling of the worktree, so the sweep reclaims it with the other leftovers. */
+export const runHostPidFile = (worktree) => `${worktree}.pid`;
+/** The run host needs a working directory and one public edge-host selector. */
+export const runHostShellCommand = (worktree, command, args) => 
+// `$$` names the remote shell that `exec` replaces with the run host, so the
+// pid file identifies the run host itself; cleanup uses it to confirm the
+// process is gone before destroying the worktree under it.
+`cd ${quote(worktree)} && export GH_HOST=github.int.exe.xyz && printf '%s' "$$" > ${quote(runHostPidFile(worktree))} && ${shellCommand(command, args)}`;
+/**
+ * Confirms a recorded run host is dead before workspace removal: TERM first,
+ * a bounded wait, then KILL. `$1` is the pid file; stdout reports the outcome.
+ */
+export const RUN_HOST_KILL_SCRIPT = `
+if test -f "$1"; then
+  pid=$(cat "$1")
+  if kill -TERM "$pid" 2>/dev/null; then
+    n=0
+    while kill -0 "$pid" 2>/dev/null && [ "$n" -lt 10 ]; do sleep 0.5; n=$((n+1)); done
+    if kill -0 "$pid" 2>/dev/null; then kill -KILL "$pid" 2>/dev/null; echo killed; else echo stopped; fi
+  else
+    echo absent
+  fi
+  rm -f "$1"
+else
+  echo no-pidfile
+fi
+`.trim();
+//# sourceMappingURL=shell.js.map

package/dist/exe-dev/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/exe-dev/shell.ts"],"names":[],"mappings":"AAAA,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAE/E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,IAA2B,EAAU,EAAE,CACnF,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAEpD,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,GAAG,QAAQ,MAAM,CAAC;AAE9E,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,QAAgB,EAChB,OAAe,EACf,IAA2B,EACnB,EAAE;AACV,6EAA6E;AAC7E,0EAA0E;AAC1E,2DAA2D;AAC3D,MAAM,KAAK,CAAC,QAAQ,CAAC,+DAA+D,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAE1J;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;CAcnC,CAAC,IAAI,EAAE,CAAC"}

package/dist/exe-dev/sweep.d.ts

@@ -0,0 +1,12 @@
+import { Effect } from "effect";
+import type { ExeDevCommands } from "./commands.ts";
+import type { VmState } from "./model.ts";
+/**
+ * Reclaims crash leftovers once, before this process starts work on a VM.
+ * Every removal is isolated: one immovable leftover must never block the
+ * sweep's siblings or, worse, every future prepare on the Worker — so the
+ * sweep is marked done even when parts of it failed, and each failure is
+ * logged instead of propagated.
+ */
+export declare const abandonedWorktreeSweepFor: (commands: ExeDevCommands) => Effect.Effect<(attemptId: string & import("effect/Brand").Brand<"AttemptId">, worker: string & import("effect/Brand").Brand<"WorkerName">, vm: VmState, root: string) => Effect.Effect<void, never, never>, never, never>;
+//# sourceMappingURL=sweep.d.ts.map

package/dist/exe-dev/sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.d.ts","sourceRoot":"","sources":["../../src/exe-dev/sweep.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAwC1C;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,yPAkIrC,CAAC"}