@usine/executor 0.0.1 → 0.2.0

package/dist/exe-dev/grants.js

@@ -0,0 +1,104 @@
+import { AttemptId } from "@usine/core/attempt";
+import { RepositoryName } from "@usine/core/repository";
+import { WorkerName } from "@usine/core/worker";
+import { Effect, Ref, Scope } from "effect";
+import { CredentialUnavailableError } from "../executor.js";
+import { keyedLockFor } from "../keyed-lock.js";
+import { CredentialGrantMinutes, } from "./model.js";
+const grantKey = (worker, integration) => `${worker} ${integration}`;
+export const credentialGrantsFor = Effect.fn("ExeDevExecutor.credentialGrantsFor")(function* (options, commands) {
+    const locks = yield* keyedLockFor();
+    const counts = yield* Ref.make(new Map());
+    const grantMinutes = options.credentialGrantMinutes ?? CredentialGrantMinutes.make(65);
+    const acquire = Effect.fn("ExeDevExecutor.acquireGrant")(function* (attemptId, worker, repository, integration) {
+        yield* Effect.annotateCurrentSpan({ attemptId, worker, repository, integration });
+        const scope = yield* Effect.scope;
+        const key = grantKey(worker, integration);
+        yield* locks.withLock(key)(Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+            const current = (yield* Ref.get(counts)).get(key) ?? 0;
+            // Own a reference before attempting the attachment: a failed SSH reply
+            // may still mean the edge accepted it. This reservation is released once
+            // by this scope, and never borrows a sibling's reference on interruption.
+            yield* Ref.update(counts, (currentCounts) => new Map(currentCounts).set(key, current + 1));
+            yield* Scope.addFinalizer(scope, release(attemptId, worker, integration).pipe(Effect.tapError((error) => Effect.logError("Attempt credential cleanup failed", {
+                attemptId,
+                worker,
+                repository,
+                integration,
+                message: error.message,
+            })), Effect.ignore));
+            yield* restore(commands
+                .lobby("prepare", [
+                "integrations",
+                "attach",
+                integration,
+                `vm:${worker}`,
+                "--for",
+                `${grantMinutes}m`,
+            ])
+                .pipe(Effect.mapError((cause) => new CredentialUnavailableError({
+                repository,
+                message: `Could not attach exe.dev GitHub integration ${integration}`,
+                cause,
+            }))));
+            yield* Effect.logInfo("Attached or refreshed time-boxed exe.dev GitHub integration", {
+                attemptId,
+                worker,
+                repository,
+                integration,
+                grantMinutes,
+                activeGrants: current + 1,
+            });
+        })));
+    });
+    const release = Effect.fn("ExeDevExecutor.releaseGrant")(function* (attemptId, worker, integration) {
+        yield* Effect.annotateCurrentSpan({ attemptId, worker, integration });
+        const key = grantKey(worker, integration);
+        yield* locks.withLock(key)(Effect.gen(function* () {
+            const current = (yield* Ref.get(counts)).get(key) ?? 0;
+            if (current === 0) {
+                yield* Effect.logDebug("Credential cleanup was already complete", {
+                    attemptId,
+                    worker,
+                    integration,
+                });
+                return;
+            }
+            if (current > 1) {
+                yield* Ref.update(counts, (currentCounts) => {
+                    const next = new Map(currentCounts);
+                    next.set(key, current - 1);
+                    return next;
+                });
+                yield* Effect.logDebug("Kept the shared exe.dev GitHub integration", {
+                    attemptId,
+                    worker,
+                    integration,
+                    activeGrants: current - 1,
+                });
+                return;
+            }
+            yield* commands
+                .lobby("cleanup", ["integrations", "detach", integration, `vm:${worker}`])
+                .pipe(Effect.tapError((error) => Effect.logWarning("Could not detach the exe.dev GitHub integration", {
+                attemptId,
+                worker,
+                integration,
+                grantMinutes,
+                lapse: `the grant stays attached until its ${grantMinutes}m time-box expires`,
+                message: error.message,
+            })), Effect.ensuring(Ref.update(counts, (currentCounts) => {
+                const next = new Map(currentCounts);
+                next.delete(key);
+                return next;
+            })));
+            yield* Effect.logInfo("Detached exe.dev GitHub integration", {
+                attemptId,
+                worker,
+                integration,
+            });
+        }));
+    });
+    return { acquire };
+});
+//# sourceMappingURL=grants.js.map

package/dist/exe-dev/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/exe-dev/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EACL,sBAAsB,GAGvB,MAAM,YAAY,CAAC;AAEpB,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAE,WAA4B,EAAU,EAAE,CAC5E,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC1F,OAA8B,EAC9B,QAAwB;IAExB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAU,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAkB,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,sBAAsB,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEvF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAChE,SAAoB,EACpB,MAAkB,EAClB,UAA0B,EAC1B,WAA4B;QAE5B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxB,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,uEAAuE;YACvE,yEAAyE;YACzE,0EAA0E;YAC1E,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CAC1C,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC,CAC7C,CAAC;YACF,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CACvB,KAAK,EACL,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE;gBACnD,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,WAAW;gBACX,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC;YACF,KAAK,CAAC,CAAC,OAAO,CACZ,QAAQ;iBACL,KAAK,CAAC,SAAS,EAAE;gBAChB,cAAc;gBACd,QAAQ;gBACR,WAAW;gBACX,MAAM,MAAM,EAAE;gBACd,OAAO;gBACP,GAAG,YAAY,GAAG;aACnB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,0BAA0B,CAAC;gBAC7B,UAAU;gBACV,OAAO,EAAE,+CAA+C,WAAW,EAAE;gBACrE,KAAK;aACN,CAAC,CACL,CACF,CACJ,CAAC;YACF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6DAA6D,EAAE;gBACnF,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,WAAW;gBACX,YAAY;gBACZ,YAAY,EAAE,OAAO,GAAG,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAChE,SAAoB,EACpB,MAAkB,EAClB,WAA4B;QAE5B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,yCAAyC,EAAE;oBAChE,SAAS;oBACT,MAAM;oBACN,WAAW;iBACZ,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE;oBAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;oBACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC3B,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,4CAA4C,EAAE;oBACnE,SAAS;oBACT,MAAM;oBACN,WAAW;oBACX,YAAY,EAAE,OAAO,GAAG,CAAC;iBAC1B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,KAAK,CAAC,CAAC,QAAQ;iBACZ,KAAK,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;iBACzE,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,iDAAiD,EAAE;gBACnE,SAAS;gBACT,MAAM;gBACN,WAAW;gBACX,YAAY;gBACZ,KAAK,EAAE,sCAAsC,YAAY,oBAAoB;gBAC7E,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CACb,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE;gBACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CACH,CACF,CAAC;YACJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;gBAC3D,SAAS;gBACT,MAAM;gBACN,WAAW;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/exe-dev/model.d.ts

@@ -0,0 +1,43 @@
+import { Schema, type Effect } from "effect";
+import type { RunHostCommand } from "../executor.ts";
+/** The name of one exe.dev edge-injected integration. */
+export declare const IntegrationName: Schema.brand<Schema.String, "ExeDevIntegrationName">;
+export type IntegrationName = typeof IntegrationName.Type;
+/**
+ * An SSH destination handed to the local `ssh` client as argv, so anything
+ * that could read as an option (`-oProxyCommand=...`) is unrepresentable.
+ */
+export declare const SshDestination: Schema.brand<Schema.String, "ExeDevSshDestination">;
+export type SshDestination = typeof SshDestination.Type;
+/** An absolute remote home directory that cannot smuggle bytes past shell quoting. */
+export declare const HomePath: Schema.brand<Schema.String, "ExeDevHomePath">;
+export type HomePath = typeof HomePath.Type;
+declare const GitHubIntegration_base: Schema.Class<GitHubIntegration, Schema.Struct<{
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly name: Schema.brand<Schema.String, "ExeDevIntegrationName">;
+}>, {}>;
+/** One standing exe.dev GitHub integration; only its VM attachment is per Attempt. */
+export declare class GitHubIntegration extends GitHubIntegration_base {
+}
+/** How long an exe.dev Worker's repository credential attachment may remain active, in minutes. */
+export declare const CredentialGrantMinutes: Schema.brand<Schema.Int, "ExeDevCredentialGrantMinutes">;
+export type CredentialGrantMinutes = typeof CredentialGrantMinutes.Type;
+/** Repository access and run-host settings for the configured exe.dev Workers. */
+export interface ExeDevExecutorOptions {
+    /** Existing native GitHub integrations, one per repository this Worker may receive. */
+    readonly githubIntegrations: ReadonlyArray<GitHubIntegration>;
+    /** Installed in the baked image; defaults to the published worker executable. */
+    readonly runHost?: RunHostCommand;
+    /** Local SSH executable and its control-plane-only arguments. */
+    readonly ssh?: RunHostCommand;
+    /** Time-box for the edge credential attachment. Defaults to 65 minutes. */
+    readonly credentialGrantMinutes?: CredentialGrantMinutes;
+    /** Grace for delivering a stop request, then for the run host to exit; each wait is bounded separately. Defaults to 10 seconds. */
+    readonly interruptGrace?: Parameters<typeof Effect.timeoutOption>[1];
+}
+export interface VmState {
+    readonly home: HomePath;
+    readonly sshDest: SshDestination;
+}
+export {};
+//# sourceMappingURL=model.d.ts.map

package/dist/exe-dev/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,yDAAyD;AACzD,eAAO,MAAM,eAAe,sDAIiB,CAAC;AAC9C,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,cAAc,qDAIiB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC;AAExD,sFAAsF;AACtF,eAAO,MAAM,QAAQ,+CAIiB,CAAC;AACvC,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;;;;;AAE5C,sFAAsF;AACtF,qBAAa,iBAAkB,SAAQ,sBAKrC;CAAG;AAEL,mGAAmG;AACnG,eAAO,MAAM,sBAAsB,0DAElC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAC;AAExE,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC9D,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,mIAAmI;IACnI,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC"}

package/dist/exe-dev/model.js

@@ -0,0 +1,26 @@
+import { RepositoryName } from "@usine/core/repository";
+import { Schema } from "effect";
+/** The name of one exe.dev edge-injected integration. */
+export const IntegrationName = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9]+(?:[._-][A-Za-z0-9]+)*$/u, {
+    message: "Expected an exe.dev integration name safe for the lobby command boundary",
+})).pipe(Schema.brand("ExeDevIntegrationName"));
+/**
+ * An SSH destination handed to the local `ssh` client as argv, so anything
+ * that could read as an option (`-oProxyCommand=...`) is unrepresentable.
+ */
+export const SshDestination = Schema.String.check(Schema.isPattern(/^(?:[A-Za-z0-9._-]+@)?[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/u, {
+    message: "Expected an exe.dev SSH hostname, optionally prefixed by a user",
+})).pipe(Schema.brand("ExeDevSshDestination"));
+/** An absolute remote home directory that cannot smuggle bytes past shell quoting. */
+export const HomePath = Schema.String.check(Schema.isPattern(/^\/[^\0\r\n]*$/u, {
+    message: "Expected an absolute remote home directory without control bytes",
+})).pipe(Schema.brand("ExeDevHomePath"));
+/** One standing exe.dev GitHub integration; only its VM attachment is per Attempt. */
+export class GitHubIntegration extends Schema.Class("@usine/executor/ExeDevGitHubIntegration")({
+    repository: RepositoryName,
+    name: IntegrationName,
+}) {
+}
+/** How long an exe.dev Worker's repository credential attachment may remain active, in minutes. */
+export const CredentialGrantMinutes = Schema.Int.check(Schema.isGreaterThanOrEqualTo(1)).pipe(Schema.brand("ExeDevCredentialGrantMinutes"));
+//# sourceMappingURL=model.js.map

package/dist/exe-dev/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAG7C,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAChD,MAAM,CAAC,SAAS,CAAC,uCAAuC,EAAE;IACxD,OAAO,EAAE,0EAA0E;CACpF,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAG9C;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/C,MAAM,CAAC,SAAS,CAAC,mEAAmE,EAAE;IACpF,OAAO,EAAE,iEAAiE;CAC3E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAG7C,sFAAsF;AACtF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACzC,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE;IAClC,OAAO,EAAE,kEAAkE;CAC5E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvC,sFAAsF;AACtF,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,KAAK,CACjD,yCAAyC,CAC1C,CAAC;IACA,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,eAAe;CACtB,CAAC;CAAG;AAEL,mGAAmG;AACnG,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3F,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAC7C,CAAC"}

package/dist/exe-dev/preflight.d.ts

@@ -0,0 +1,10 @@
+import type { BrainSpec } from "@usine/core/agent/brain";
+import { Effect } from "effect";
+import { ExecutorOperationError, type RunHostCommand, WorkerCapabilityError } from "../executor.ts";
+import type { ExeDevCommands } from "./commands.ts";
+import { type ExeDevExecutorOptions, type VmState } from "./model.ts";
+export declare const preflightFor: (options: ExeDevExecutorOptions, commands: ExeDevCommands, runHost: RunHostCommand) => Effect.Effect<{
+    preflight: (worker: string & import("effect/Brand").Brand<"WorkerName">, brains: readonly BrainSpec[]) => Effect.Effect<undefined, import("../executor.ts").CredentialUnavailableError | ExecutorOperationError | WorkerCapabilityError, never>;
+    vmFor: (worker: string & import("effect/Brand").Brand<"WorkerName">) => Effect.Effect<VmState, ExecutorOperationError | WorkerCapabilityError, never>;
+}, never, never>;
+//# sourceMappingURL=preflight.d.ts.map

package/dist/exe-dev/preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/exe-dev/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAC7C,OAAO,EACL,sBAAsB,EAEtB,KAAK,cAAc,EACnB,qBAAqB,EAEtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAA4B,KAAK,qBAAqB,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAoBhG,eAAO,MAAM,YAAY;;;gBA2JvB,CAAC"}

package/dist/exe-dev/preflight.js

@@ -0,0 +1,82 @@
+import * as AttemptChannel from "@usine/core/attempt/channel";
+import { WorkerName } from "@usine/core/worker";
+import { Effect, Ref, Schema } from "effect";
+import { ExecutorOperationError, logPreflightFailure, WorkerCapabilityError, } from "../executor.js";
+import { verifyHarnesses } from "../harness-preflight.js";
+import { HomePath, SshDestination } from "./model.js";
+const MINIMUM_NODE_MAJOR = 22;
+const Vm = Schema.Struct({
+    vmName: Schema.NonEmptyString,
+    sshDest: SshDestination,
+    status: Schema.NonEmptyString,
+}).pipe(Schema.encodeKeys({ vmName: "vm_name", sshDest: "ssh_dest" }));
+const VmList = Schema.Struct({ vms: Schema.Array(Vm) });
+const decodeVmList = Schema.decodeUnknownEffect(Schema.fromJsonString(VmList));
+const decodeHome = Schema.decodeUnknownEffect(HomePath);
+const capabilityError = (worker, capability, message, cause) => new WorkerCapabilityError({ worker, capability, message, cause });
+export const preflightFor = Effect.fn("ExeDevExecutor.preflightFor")(function* (options, commands, runHost) {
+    const workers = yield* Ref.make(new Map());
+    const resolveVm = Effect.fn("ExeDevExecutor.resolveVm")(function* (worker) {
+        const response = yield* commands.lobbyJson("preflight", ["ls", worker]);
+        const decoded = yield* decodeVmList(response).pipe(Effect.mapError((cause) => capabilityError(worker, "machine", `exe.dev returned invalid machine metadata for Worker ${worker}`, cause)));
+        const vm = decoded.vms.find(({ vmName }) => vmName === worker);
+        if (vm === undefined) {
+            return yield* capabilityError(worker, "machine", `exe.dev has no VM named ${worker}`, new Error("worker VM missing"));
+        }
+        if (vm.status !== "running") {
+            return yield* capabilityError(worker, "machine", `exe.dev VM ${worker} is ${vm.status}, not running`, new Error(`VM status: ${vm.status}`));
+        }
+        const reported = (yield* commands.remote("preflight", vm.sshDest, "printenv", ["HOME"])).trim();
+        const home = yield* decodeHome(reported).pipe(Effect.mapError((cause) => capabilityError(worker, "toolchain", `exe.dev VM ${worker} returned an invalid home directory`, cause)));
+        return { home, sshDest: vm.sshDest };
+    });
+    const asCapability = (worker, capability, message, effect) => effect.pipe(Effect.mapError((cause) => capabilityError(worker, capability, message, cause)));
+    const preflight = Effect.fn("ExeDevExecutor.preflight")(function* (worker, brains) {
+        const vm = yield* resolveVm(worker).pipe(Effect.catchTag("ExecutorOperationError", (cause) => capabilityError(worker, "machine", `Could not reach exe.dev Worker ${worker}`, cause)));
+        yield* Effect.annotateCurrentSpan({ worker, host: vm.sshDest });
+        const gitVersion = (yield* asCapability(worker, "toolchain", `Worker ${worker} cannot run Git`, commands.remote("preflight", vm.sshDest, "git", ["--version"]))).trim();
+        if (!gitVersion.startsWith("git version ")) {
+            return yield* capabilityError(worker, "toolchain", `Worker ${worker} returned an unrecognized Git version`, new Error(gitVersion));
+        }
+        const nodeVersion = (yield* asCapability(worker, "toolchain", `Worker ${worker} cannot run Node.js`, commands.remote("preflight", vm.sshDest, "node", ["--version"]))).trim();
+        const nodeMajor = Number(/^v(?<major>\d+)/u.exec(nodeVersion)?.groups?.major ?? Number.NaN);
+        if (!Number.isSafeInteger(nodeMajor) || nodeMajor < MINIMUM_NODE_MAJOR) {
+            return yield* capabilityError(worker, "toolchain", `Worker ${worker} has Node.js ${nodeVersion || "unknown"}; expected ${MINIMUM_NODE_MAJOR}+`, new Error("Node.js version mismatch"));
+        }
+        const protocol = (yield* asCapability(worker, "run-host", `Worker ${worker} cannot run ${runHost.command}`, commands.remote("preflight", vm.sshDest, runHost.command, [
+            ...runHost.args,
+            "--protocol-version",
+        ]))).trim();
+        if (protocol !== String(AttemptChannel.PROTOCOL_VERSION)) {
+            return yield* capabilityError(worker, "run-host", `Worker ${worker} has run-host protocol ${protocol || "unknown"}; expected ${AttemptChannel.PROTOCOL_VERSION}`, new Error("run-host protocol mismatch"));
+        }
+        yield* verifyHarnesses(worker, brains, runHost, (command, args) => commands.remote("preflight", vm.sshDest, command, args));
+        for (const integration of options.githubIntegrations) {
+            yield* asCapability(worker, "credentials", `exe.dev GitHub integration ${integration.name} is not ready for ${integration.repository}`, commands.lobby("preflight", ["integrations", "test", integration.name]));
+        }
+        yield* Ref.update(workers, (current) => {
+            const next = new Map(current);
+            next.set(worker, vm);
+            return next;
+        });
+        yield* Effect.logInfo("exe.dev Worker preflight verified", {
+            worker,
+            host: vm.sshDest,
+            gitVersion,
+            nodeVersion,
+            protocolVersion: AttemptChannel.PROTOCOL_VERSION,
+            harnesses: [...new Set(brains.map(({ harness }) => harness))].join(","),
+            integrations: options.githubIntegrations.length,
+        });
+    }, logPreflightFailure);
+    // Both resolveVm failures are members of the ExecutorError union prepare
+    // reports, so a stopped VM keeps its typed capability shape.
+    const vmFor = Effect.fn("ExeDevExecutor.vmFor")(function* (worker) {
+        const cached = (yield* Ref.get(workers)).get(worker);
+        if (cached !== undefined)
+            return cached;
+        return yield* resolveVm(worker);
+    });
+    return { preflight, vmFor };
+});
+//# sourceMappingURL=preflight.js.map

package/dist/exe-dev/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/exe-dev/preflight.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,cAAc,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EAEnB,qBAAqB,GAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAAE,QAAQ,EAAE,cAAc,EAA4C,MAAM,YAAY,CAAC;AAEhG,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC,cAAc;IAC7B,OAAO,EAAE,cAAc;IACvB,MAAM,EAAE,MAAM,CAAC,cAAc;CAC9B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;AACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxD,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AAExD,MAAM,eAAe,GAAG,CACtB,MAAkB,EAClB,UAA4B,EAC5B,OAAe,EACf,KAAc,EACS,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAE9F,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAC5E,OAA8B,EAC9B,QAAwB,EACxB,OAAuB;IAEvB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAuB,CAAC,CAAC;IAEhE,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAkB;QACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CACb,MAAM,EACN,SAAS,EACT,wDAAwD,MAAM,EAAE,EAChE,KAAK,CACN,CACF,CACF,CAAC;QACF,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC/D,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,SAAS,EACT,2BAA2B,MAAM,EAAE,EACnC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAC/B,CAAC;QACJ,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,SAAS,EACT,cAAc,MAAM,OAAO,EAAE,CAAC,MAAM,eAAe,EACnD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,CAAC,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChG,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CACb,MAAM,EACN,WAAW,EACX,cAAc,MAAM,qCAAqC,EACzD,KAAK,CACN,CACF,CACF,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAoB,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,CACnB,MAAkB,EAClB,UAA4B,EAC5B,OAAe,EACf,MAAgD,EACP,EAAE,CAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAE/F,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAC/D,MAAkB,EAClB,MAAgC;QAEhC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAClD,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,kCAAkC,MAAM,EAAE,EAAE,KAAK,CAAC,CACtF,CACF,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CACrC,MAAM,EACN,WAAW,EACX,UAAU,MAAM,iBAAiB,EACjC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAC/D,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,WAAW,EACX,UAAU,MAAM,uCAAuC,EACvD,IAAI,KAAK,CAAC,UAAU,CAAC,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CACtC,MAAM,EACN,WAAW,EACX,UAAU,MAAM,qBAAqB,EACrC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAChE,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,kBAAkB,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,WAAW,EACX,UAAU,MAAM,gBAAgB,WAAW,IAAI,SAAS,cAAc,kBAAkB,GAAG,EAC3F,IAAI,KAAK,CAAC,0BAA0B,CAAC,CACtC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CACnC,MAAM,EACN,UAAU,EACV,UAAU,MAAM,eAAe,OAAO,CAAC,OAAO,EAAE,EAChD,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;YACxD,GAAG,OAAO,CAAC,IAAI;YACf,oBAAoB;SACrB,CAAC,CACH,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,QAAQ,KAAK,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,CAAC,eAAe,CAC3B,MAAM,EACN,UAAU,EACV,UAAU,MAAM,0BAA0B,QAAQ,IAAI,SAAS,cAAc,cAAc,CAAC,gBAAgB,EAAE,EAC9G,IAAI,KAAK,CAAC,4BAA4B,CAAC,CACxC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAChE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CACxD,CAAC;QAEF,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACrD,KAAK,CAAC,CAAC,YAAY,CACjB,MAAM,EACN,aAAa,EACb,8BAA8B,WAAW,CAAC,IAAI,qBAAqB,WAAW,CAAC,UAAU,EAAE,EAC3F,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CACxE,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,EAAE;YACzD,MAAM;YACN,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,UAAU;YACV,WAAW;YACX,eAAe,EAAE,cAAc,CAAC,gBAAgB;YAChD,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YACvE,YAAY,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM;SAChD,CAAC,CAAC;IACL,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAExB,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAkB;QAC3E,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC"}

package/dist/exe-dev/shell.d.ts

@@ -0,0 +1,12 @@
+/** Quotes a command and its arguments into one string safe for OpenSSH's remote-command boundary. */
+export declare const shellCommand: (command: string, args: ReadonlyArray<string>) => string;
+/** The pid file sits beside the worktree so the sweep reclaims both together. */
+export declare const runHostPidFile: (worktree: string) => string;
+/** The remote command that starts the run host in its worktree with the edge GitHub host selected. */
+export declare const runHostShellCommand: (worktree: string, command: string, args: ReadonlyArray<string>) => string;
+/**
+ * Confirms a recorded run host is dead before workspace removal: TERM, a
+ * bounded wait, then KILL. `$1` is the pid file; stdout reports the outcome.
+ */
+export declare const RUN_HOST_KILL_SCRIPT: string;
+//# sourceMappingURL=shell.d.ts.map

package/dist/exe-dev/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/exe-dev/shell.ts"],"names":[],"mappings":"AAEA,qGAAqG;AACrG,eAAO,MAAM,YAAY,YAAa,MAAM,QAAQ,aAAa,CAAC,MAAM,CAAC,KAAG,MACzB,CAAC;AAEpD,iFAAiF;AACjF,eAAO,MAAM,cAAc,aAAc,MAAM,KAAG,MAA2B,CAAC;AAE9E,sGAAsG;AACtG,eAAO,MAAM,mBAAmB,aACpB,MAAM,WACP,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,KAC1B,MAIsJ,CAAC;AAE1J;;;GAGG;AACH,eAAO,MAAM,oBAAoB,QAczB,CAAC"}

package/dist/exe-dev/shell.js

@@ -0,0 +1,31 @@
+const quote = (value) => `'${value.replaceAll("'", `'"'"'`)}'`;
+/** Quotes a command and its arguments into one string safe for OpenSSH's remote-command boundary. */
+export const shellCommand = (command, args) => `exec ${[command, ...args].map(quote).join(" ")}`;
+/** The pid file sits beside the worktree so the sweep reclaims both together. */
+export const runHostPidFile = (worktree) => `${worktree}.pid`;
+/** The remote command that starts the run host in its worktree with the edge GitHub host selected. */
+export const runHostShellCommand = (worktree, command, args) => 
+// `$$` names the remote shell that `exec` replaces with the run host, so the
+// pid file identifies the run host itself. Cleanup uses it to confirm the
+// process is gone before removing the worktree.
+`cd ${quote(worktree)} && export GH_HOST=github.int.exe.xyz && printf '%s' "$$" > ${quote(runHostPidFile(worktree))} && ${shellCommand(command, args)}`;
+/**
+ * Confirms a recorded run host is dead before workspace removal: TERM, a
+ * bounded wait, then KILL. `$1` is the pid file; stdout reports the outcome.
+ */
+export const RUN_HOST_KILL_SCRIPT = `
+if test -f "$1"; then
+  pid=$(cat "$1")
+  if kill -TERM "$pid" 2>/dev/null; then
+    n=0
+    while kill -0 "$pid" 2>/dev/null && [ "$n" -lt 10 ]; do sleep 0.5; n=$((n+1)); done
+    if kill -0 "$pid" 2>/dev/null; then kill -KILL "$pid" 2>/dev/null; echo killed; else echo stopped; fi
+  else
+    echo absent
+  fi
+  rm -f "$1"
+else
+  echo no-pidfile
+fi
+`.trim();
+//# sourceMappingURL=shell.js.map

package/dist/exe-dev/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/exe-dev/shell.ts"],"names":[],"mappings":"AAAA,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAE/E,qGAAqG;AACrG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,IAA2B,EAAU,EAAE,CACnF,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAEpD,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,GAAG,QAAQ,MAAM,CAAC;AAE9E,sGAAsG;AACtG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,QAAgB,EAChB,OAAe,EACf,IAA2B,EACnB,EAAE;AACV,6EAA6E;AAC7E,0EAA0E;AAC1E,gDAAgD;AAChD,MAAM,KAAK,CAAC,QAAQ,CAAC,+DAA+D,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAE1J;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;CAcnC,CAAC,IAAI,EAAE,CAAC"}

package/dist/exe-dev/sweep.d.ts

@@ -0,0 +1,10 @@
+import { Effect } from "effect";
+import type { ExeDevCommands } from "./commands.ts";
+import type { VmState } from "./model.ts";
+/**
+ * Reclaims crash leftovers once per Worker before this process starts work on
+ * its VM. Each removal is isolated and each failure is logged, so one immovable
+ * leftover never blocks the sweep's siblings or a future prepare.
+ */
+export declare const abandonedWorktreeSweepFor: (commands: ExeDevCommands) => Effect.Effect<(attemptId: string & import("effect/Brand").Brand<"AttemptId">, worker: string & import("effect/Brand").Brand<"WorkerName">, vm: VmState, root: string) => Effect.Effect<void, never, never>, never, never>;
+//# sourceMappingURL=sweep.d.ts.map

package/dist/exe-dev/sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.d.ts","sourceRoot":"","sources":["../../src/exe-dev/sweep.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAG7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAwC1C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,yPAiIrC,CAAC"}

package/dist/exe-dev/sweep.js

@@ -0,0 +1,117 @@
+import { AttemptId } from "@usine/core/attempt";
+import { WorkerName } from "@usine/core/worker";
+import { Effect, Ref, Schema } from "effect";
+import { ExecutorOperationError } from "../executor.js";
+import { keyedLockFor } from "../keyed-lock.js";
+const SWEEP_CONCURRENCY = 4;
+const directChildSchema = (parent) => {
+    const prefix = `${parent}/`;
+    return Schema.String.check(Schema.makeFilter((value) => {
+        const segment = value.slice(prefix.length);
+        return (value.startsWith(prefix) &&
+            segment.length > 0 &&
+            segment !== "." &&
+            segment !== ".." &&
+            !segment.includes("/"));
+    }, { message: `Expected a direct child of ${parent}` }));
+};
+const directChildren = (parent, output) => Schema.decodeUnknownEffect(Schema.Array(directChildSchema(parent)))(output.split("\0").filter((value) => value.length > 0)).pipe(Effect.mapError((cause) => new ExecutorOperationError({
+    operation: "prepare",
+    message: `Worker returned an invalid path while sweeping ${parent}`,
+    cause,
+})));
+/**
+ * Reclaims crash leftovers once per Worker before this process starts work on
+ * its VM. Each removal is isolated and each failure is logged, so one immovable
+ * leftover never blocks the sweep's siblings or a future prepare.
+ */
+export const abandonedWorktreeSweepFor = Effect.fn("ExeDevExecutor.abandonedWorktreeSweepFor")(function* (commands) {
+    const locks = yield* keyedLockFor();
+    const swept = yield* Ref.make(new Set());
+    const sweep = Effect.fn("ExeDevExecutor.sweepAbandonedWorktrees")(function* (attemptId, worker, vm, root) {
+        yield* Effect.annotateCurrentSpan({ attemptId, worker, host: vm.sshDest });
+        yield* locks.withLock(worker)(Effect.gen(function* () {
+            if ((yield* Ref.get(swept)).has(worker)) {
+                yield* Effect.logDebug("exe.dev abandoned-worktree sweep was already complete", {
+                    attemptId,
+                    worker,
+                    host: vm.sshDest,
+                });
+                return;
+            }
+            // Mark the sweep done before it runs. A partial sweep must not retry in
+            // front of every prepare; the next process start reclaims what failed.
+            yield* Ref.update(swept, (current) => new Set(current).add(worker));
+            const attemptsRoot = `${root}/attempts`;
+            const reposRoot = `${root}/repos`;
+            yield* Effect.logInfo("Sweeping abandoned exe.dev Attempt worktrees", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+            });
+            yield* commands.remote("prepare", vm.sshDest, "mkdir", ["-p", attemptsRoot, reposRoot]);
+            const attempts = yield* commands
+                .remote("prepare", vm.sshDest, "find", [
+                attemptsRoot,
+                "-mindepth",
+                "1",
+                "-maxdepth",
+                "1",
+                "-print0",
+            ])
+                .pipe(Effect.flatMap((output) => directChildren(attemptsRoot, output)));
+            const failures = yield* Ref.make(0);
+            yield* Effect.forEach(attempts, (worktree) => Effect.logInfo("Sweeping abandoned exe.dev Attempt worktree", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                worktree,
+            }).pipe(Effect.andThen(commands.remote("prepare", vm.sshDest, "rm", ["-rf", worktree])), Effect.tapError((error) => Effect.logWarning("Could not remove an abandoned exe.dev worktree", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                worktree,
+                message: error.message,
+            }).pipe(Effect.andThen(Ref.update(failures, (count) => count + 1)))), Effect.ignore), { concurrency: SWEEP_CONCURRENCY, discard: true });
+            const caches = yield* commands
+                .remote("prepare", vm.sshDest, "find", [
+                reposRoot,
+                "-mindepth",
+                "1",
+                "-maxdepth",
+                "1",
+                "-type",
+                "d",
+                "-name",
+                "*.git",
+                "-print0",
+            ])
+                .pipe(Effect.flatMap((output) => directChildren(reposRoot, output)));
+            yield* Effect.forEach(caches, (cache) => commands
+                .remote("prepare", vm.sshDest, "git", ["--git-dir", cache, "worktree", "prune"])
+                .pipe(Effect.tapError((error) => Effect.logWarning("Could not prune an exe.dev cache during the sweep", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                cache,
+                message: error.message,
+            })), Effect.ignore), { concurrency: SWEEP_CONCURRENCY, discard: true });
+            const failed = yield* Ref.get(failures);
+            yield* Effect.logInfo("exe.dev abandoned-worktree sweep completed", {
+                attemptId,
+                worker,
+                host: vm.sshDest,
+                removed: attempts.length - failed,
+                failed,
+                caches: caches.length,
+            });
+        }).pipe(Effect.tapError((error) => Effect.logWarning("exe.dev abandoned-worktree sweep failed; continuing", {
+            attemptId,
+            worker,
+            host: vm.sshDest,
+            message: error.message,
+        })), Effect.ignore));
+    });
+    return sweep;
+});
+//# sourceMappingURL=sweep.js.map

package/dist/exe-dev/sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.js","sourceRoot":"","sources":["../../src/exe-dev/sweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAIhD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAwB,EAAE;IACjE,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CACxB,MAAM,CAAC,UAAU,CACf,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YACxB,OAAO,CAAC,MAAM,GAAG,CAAC;YAClB,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvB,CAAC;IACJ,CAAC,EACD,EAAE,OAAO,EAAE,8BAA8B,MAAM,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,MAAc,EACd,MAAc,EACgD,EAAE,CAChE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CACjE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACvD,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;IACzB,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,kDAAkD,MAAM,EAAE;IACnE,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CAC5F,QAAQ,CAAC,EAAE,QAAwB;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAc,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAc,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CAAC,QAAQ,CAAC,EACzE,SAAoB,EACpB,MAAkB,EAClB,EAAW,EACX,IAAY;QAEZ,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,uDAAuD,EAAE;oBAC9E,SAAS;oBACT,MAAM;oBACN,IAAI,EAAE,EAAE,CAAC,OAAO;iBACjB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAEpE,MAAM,YAAY,GAAG,GAAG,IAAI,WAAW,CAAC;YACxC,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,CAAC;YAClC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,8CAA8C,EAAE;gBACpE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;aACjB,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;YAExF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ;iBAC7B,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE;gBACrC,YAAY;gBACZ,WAAW;gBACX,GAAG;gBACH,WAAW;gBACX,GAAG;gBACH,SAAS;aACV,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,QAAQ,EACR,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,OAAO,CAAC,6CAA6C,EAAE;gBAC5D,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,QAAQ;aACT,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAC/E,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,gDAAgD,EAAE;gBAClE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,QAAQ;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CACpE,EACD,MAAM,CAAC,MAAM,CACd,EACH,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAClD,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ;iBAC3B,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE;gBACrC,SAAS;gBACT,WAAW;gBACX,GAAG;gBACH,WAAW;gBACX,GAAG;gBACH,OAAO;gBACP,GAAG;gBACH,OAAO;gBACP,OAAO;gBACP,SAAS;aACV,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACvE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,MAAM,EACN,CAAC,KAAK,EAAE,EAAE,CACR,QAAQ;iBACL,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;iBAC/E,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,mDAAmD,EAAE;gBACrE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,KAAK;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,EACL,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAClD,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,4CAA4C,EAAE;gBAClE,SAAS;gBACT,MAAM;gBACN,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,MAAM;gBACjC,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,qDAAqD,EAAE;YACvE,SAAS;YACT,MAAM;YACN,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC,CACF,CAAC"}

package/dist/executor.d.ts

@@ -0,0 +1,118 @@
+import { Agent } from "@usine/core/agent";
+import { BrainSpec } from "@usine/core/agent/brain";
+import { AttemptId } from "@usine/core/attempt";
+import * as AttemptChannel from "@usine/core/attempt/channel";
+import { AttemptFailure } from "@usine/core/attempt/failure";
+import { RepositoryName } from "@usine/core/repository";
+import { WorkerName, WorkerKind } from "@usine/core/worker";
+import { StepResult } from "@usine/core/step/result";
+import { Context, Effect, Redacted, Schema, Scope } from "effect";
+/** The Worker operation that failed during readiness checks or an Attempt's lifecycle. */
+export declare const ExecutorOperation: Schema.Literals<readonly ["preflight", "prepare", "launch", "cancel", "cleanup"]>;
+export type ExecutorOperation = typeof ExecutorOperation.Type;
+/** A prerequisite a Worker must satisfy before it can accept Attempts. */
+export declare const WorkerCapability: Schema.Literals<readonly ["machine", "toolchain", "run-host", "harness-login", "credentials"]>;
+export type WorkerCapability = typeof WorkerCapability.Type;
+declare const ExecutorOperationError_base: Schema.Class<ExecutorOperationError, Schema.TaggedStruct<"ExecutorOperationError", {
+    readonly operation: Schema.Literals<readonly ["preflight", "prepare", "launch", "cancel", "cleanup"]>;
+    readonly message: Schema.NonEmptyString;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+/** A Worker operation failed before its requested work completed. */
+export declare class ExecutorOperationError extends ExecutorOperationError_base {
+}
+declare const CredentialUnavailableError_base: Schema.Class<CredentialUnavailableError, Schema.TaggedStruct<"CredentialUnavailableError", {
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly message: Schema.NonEmptyString;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+/** A Worker could not obtain access to the repository assigned to an Attempt. */
+export declare class CredentialUnavailableError extends CredentialUnavailableError_base {
+}
+declare const WorkerCapabilityError_base: Schema.Class<WorkerCapabilityError, Schema.TaggedStruct<"WorkerCapabilityError", {
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly capability: Schema.Literals<readonly ["machine", "toolchain", "run-host", "harness-login", "credentials"]>;
+    readonly message: Schema.NonEmptyString;
+    readonly cause: Schema.Defect;
+}>, import("effect/Cause").YieldableError>;
+/** A verify-only preflight found a Worker capability missing or incompatible. */
+export declare class WorkerCapabilityError extends WorkerCapabilityError_base {
+}
+/** A readiness, access, or lifecycle failure reported by a Worker operation. */
+export declare const ExecutorError: Schema.Union<readonly [typeof ExecutorOperationError, typeof CredentialUnavailableError, typeof WorkerCapabilityError]>;
+export type ExecutorError = typeof ExecutorError.Type;
+/** Logs every preflight refusal so a missing capability is explainable from logs alone. */
+export declare const logPreflightFailure: <A, R>(effect: Effect.Effect<A, ExecutorError, R>) => Effect.Effect<A, ExecutorError, R>;
+/** Process command for a one-shot run host or a preflight capability probe. */
+export interface RunHostCommand {
+    readonly command: string;
+    readonly args: ReadonlyArray<string>;
+}
+declare const CheckoutRequest_base: Schema.Class<CheckoutRequest, Schema.Struct<{
+    readonly attemptId: Schema.brand<Schema.NonEmptyString, "AttemptId">;
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    readonly revision: Schema.brand<Schema.String, "RepositoryRevision">;
+    readonly payload: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+    readonly task: Schema.brand<Schema.String, "AttemptTask">;
+    readonly agent: typeof Agent;
+    readonly parentModel: Schema.Option<Schema.brand<Schema.String, "ModelId">>;
+    readonly maxChildren: Schema.brand<Schema.Int, "ChildSessionBudget">;
+    /** Maximum minutes of live run-host execution; preparation and resource cleanup are outside this budget. */
+    readonly maxAttemptMinutes: Schema.Int;
+    readonly parentEffort: Schema.Literals<readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"]>;
+}>, {}>;
+/** The repository, revision, and Agent task assigned to a Worker for one fresh Attempt checkout. */
+export declare class CheckoutRequest extends CheckoutRequest_base {
+}
+/** One Attempt's disposable checkout directory. */
+export declare const WorktreePath: Schema.brand<Schema.NonEmptyString, "WorktreePath">;
+export type WorktreePath = typeof WorktreePath.Type;
+declare const AttemptWorkspace_base: Schema.Class<AttemptWorkspace, Schema.Struct<{
+    readonly worker: Schema.brand<Schema.String, "WorkerName">;
+    readonly spec: typeof AttemptChannel.RunSpec;
+    readonly worktree: Schema.brand<Schema.NonEmptyString, "WorktreePath">;
+}>, {}>;
+/** The serializable location and RunSpec of an Attempt checkout. Owning this record does not grant access to live resources or credentials. */
+export declare class AttemptWorkspace extends AttemptWorkspace_base {
+}
+/**
+ * One prepared Attempt with a scoped checkout and repository access. Use it within
+ * the scope that prepared it. Closing that scope stops any active run host before
+ * removing the checkout and releasing credentials, including when launch never starts.
+ */
+export interface PreparedAttempt {
+    /** Checkout metadata suitable for inspection or serialization; contains no credentials. */
+    readonly workspace: AttemptWorkspace;
+    /**
+     * Runs this Attempt once, recording channel activity through `io`. Completion,
+     * failure, or interruption releases its resources before returning. Cleanup
+     * failures are logged without replacing the agent's outcome or retrying its work.
+     * Reusing an Attempt after launch or release fails with an infrastructure error.
+     */
+    readonly launch: (io: AttemptChannel.Sink) => Effect.Effect<StepResult, AttemptFailure>;
+}
+declare const CredentialProvider_base: Context.ServiceClass<CredentialProvider, "@usine/executor/CredentialProvider", {
+    readonly issue: (repository: RepositoryName, attemptId: AttemptId) => Effect.Effect<Redacted.Redacted<string>, CredentialUnavailableError>;
+}>;
+/** Mints exactly one repository-scoped credential for each prepared Attempt. */
+export declare class CredentialProvider extends CredentialProvider_base {
+}
+declare const Executor_base: Context.ServiceClass<Executor, "@usine/executor/Executor", {
+    readonly kind: WorkerKind;
+    /** Verifies Git, the run host, and each rostered brain in the Worker environment; never installs tools or logs in. */
+    readonly preflight: (worker: WorkerName, brains: ReadonlyArray<BrainSpec>) => Effect.Effect<void, ExecutorError>;
+    /**
+     * Verifies the assigned brain before acquiring a fresh Attempt in the caller's scope. Clone, fetch, and lock waits
+     * remain interruptible; partial preparation releases everything already acquired
+     * before reporting failure. Each request must identify a fresh Attempt.
+     */
+    readonly prepare: (request: CheckoutRequest) => Effect.Effect<PreparedAttempt, ExecutorError, Scope.Scope>;
+    /** Requests an active Attempt to stop, allowing a grace period before forcing termination. */
+    readonly cancel: (attemptId: AttemptId) => Effect.Effect<void, ExecutorError>;
+}>;
+/** Prepares isolated checkouts, runs Attempts on a Worker, and releases their resources (ADR 0006). */
+export declare class Executor extends Executor_base {
+}
+export {};
+//# sourceMappingURL=executor.d.ts.map