@usine/executor 0.1.0 → 0.2.0

package/dist/local/{index.js → local.js}

@@ -1,16 +1,20 @@
-import { Attempt, AttemptChannel, AttemptFailure, Instance, Repository } from "@usine/core";
-import { Effect, FileSystem, Layer, Path, Redacted, Ref, Result, Schema, Stream, } from "effect";
+import * as AttemptChannel from "@usine/core/attempt/channel";
+import { RepositoryName } from "@usine/core/repository";
+import { InstanceDirectory } from "@usine/core/instance";
+import { Effect, FileSystem, Layer, Path, Redacted, Result, Schema, Stream, } from "effect";
 import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
 import { allowlistedEnvironment, collectCommand, requireSuccess } from "../child-command.js";
-import { CheckoutRequest, CredentialProvider, Executor, ExecutorError, ExecutorOperationError, logPreflightFailure, WorkerCapabilityError, } from "../index.js";
+import { CheckoutRequest, CredentialProvider, Executor, ExecutorError, ExecutorOperationError, logPreflightFailure, WorkerCapabilityError, } from "../executor.js";
+import { verifyHarnesses } from "../harness-preflight.js";
+import { prepareAttempt } from "../prepared-attempt.js";
 import { keyedLockFor } from "../keyed-lock.js";
-import { provisionWorktree, safeSegment } from "../provision.js";
+import { cacheDirectoryName, isCacheDirectoryName, provisionWorktree, safeSegment, } from "../provision.js";
 import { runHostSessionFor } from "../run-host-session.js";
 const isExecutorError = Schema.is(ExecutorError);
 /**
- * The run host gets a minimal environment, never the orchestrator's: the App
- * private key and every other orchestrator secret must not reach the agent
- * (ADR 0011's single-repo worker token is the only credential it holds).
+ * The run host inherits only these variables. The App private key and every
+ * other orchestrator secret stay out; the single-repo worker token is the only
+ * credential it receives (ADR 0011).
  */
 const HOST_ENVIRONMENT_ALLOWLIST = [
     "HOME",
@@ -22,7 +26,7 @@ const HOST_ENVIRONMENT_ALLOWLIST = [
     "USER",
 ];
 const executorError = (operation, message, cause) => new ExecutorOperationError({ operation, message, cause });
-/** The credential must never survive into a persisted error message. */
+/** Removes the credential from text before it can reach a persisted error message. */
 const scrubbed = (text, credential) => text.replaceAll(Redacted.value(credential), "[REDACTED]");
 const credentialEnvironment = (base, credential) => {
     const token = Redacted.value(credential);
@@ -41,7 +45,6 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
     const path = yield* Path.Path;
     const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
     const fetches = yield* keyedLockFor();
-    const preparedStates = yield* Ref.make(new Map());
     const baseEnvironment = yield* allowlistedEnvironment(HOST_ENVIRONMENT_ALLOWLIST);
     const repositoryUrl = options.repositoryUrl ??
         ((repository) => `https://github.com/${repository}.git`);
@@ -60,9 +63,9 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
     const run = Effect.fn("LocalExecutor.run")(function* (operation, command, args, commandOptions = {}) {
         yield* executeCommand(operation, command, args, commandOptions);
     });
-    // ADR 0006: worktrees never outlive their Attempt. A crashed orchestrator
-    // leaves both directories and bare-cache registrations behind; the sweep
-    // reclaims them at the next layer build, before new Attempts start.
+    // Worktrees never outlive their Attempt (ADR 0006). A crashed orchestrator
+    // leaves directories and bare-cache registrations behind; the sweep reclaims
+    // them at the next layer build, before new Attempts start.
     const sweepAbandonedWorktrees = Effect.fn("LocalExecutor.sweepAbandonedWorktrees")(function* () {
         if (!(yield* fileSystem.exists(workersRoot)))
             return;
@@ -83,27 +86,52 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
             }
             const reposRoot = path.join(workersRoot, worker, "repos");
             if (yield* fileSystem.exists(reposRoot)) {
-                const caches = yield* fileSystem.readDirectory(reposRoot);
-                for (const cache of caches) {
-                    yield* run("cleanup", "git", [
+                const entries = yield* fileSystem.readDirectory(reposRoot);
+                let pruned = 0;
+                let skipped = 0;
+                let failed = 0;
+                for (const entry of entries) {
+                    if (!isCacheDirectoryName(entry)) {
+                        yield* Effect.logDebug("Skipping a non-cache entry during the local cache sweep", {
+                            worker,
+                            host: "local",
+                            entry,
+                        });
+                        skipped += 1;
+                        continue;
+                    }
+                    const result = yield* run("cleanup", "git", [
                         "--git-dir",
-                        path.join(reposRoot, cache),
+                        path.join(reposRoot, entry),
                         "worktree",
                         "prune",
                     ]).pipe(Effect.tapError((error) => Effect.logWarning("Could not prune a bare cache during the sweep", {
                         worker,
                         host: "local",
-                        cache,
+                        cache: entry,
                         message: error.message,
-                    })), Effect.ignore);
+                    })), Effect.result);
+                    if (Result.isSuccess(result)) {
+                        pruned += 1;
+                    }
+                    else {
+                        failed += 1;
+                    }
                 }
+                yield* Effect.logInfo("Local cache sweep completed", {
+                    worker,
+                    host: "local",
+                    pruned,
+                    skipped,
+                    failed,
+                });
             }
         }
     });
     yield* sweepAbandonedWorktrees().pipe(Effect.tapError((error) => Effect.logWarning("Abandoned-worktree sweep failed; continuing", {
         message: String(error),
     })), Effect.ignore);
-    const preflight = Effect.fn("LocalExecutor.preflight")(function* (worker) {
+    const preflight = Effect.fn("LocalExecutor.preflight")(function* (worker, brains) {
         yield* Effect.annotateCurrentSpan({ worker, host: "local" });
         const gitVersion = (yield* executeCommand("preflight", "git", ["--version"])).trim();
         if (!gitVersion.startsWith("git version ")) {
@@ -126,6 +154,7 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
                 cause: new Error("run-host protocol mismatch"),
             });
         }
+        yield* verifyHarnesses(worker, brains, runHost, (command, args) => executeCommand("preflight", command, args));
         yield* Effect.logInfo("Worker preflight verified", {
             worker,
             host: "local",
@@ -140,9 +169,12 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
             host: "local",
             repository: request.repository,
         });
-        const credential = yield* credentials.issue(request.repository, request.attemptId);
+        yield* verifyHarnesses(request.worker, [request.agent.brain], runHost, (command, args) => executeCommand("preflight", command, args));
+        const credential = yield* Effect.acquireRelease(credentials.issue(request.repository, request.attemptId), (token) => Effect.sync(() => {
+            Redacted.wipeUnsafe(token);
+        }), { interruptible: true });
         const workerRoot = path.join(workersRoot, request.worker);
-        const cache = path.join(workerRoot, "repos", `${safeSegment(request.repository)}.git`);
+        const cache = path.join(workerRoot, "repos", cacheDirectoryName(request.repository));
         const worktree = path.join(workerRoot, "attempts", safeSegment(request.attemptId));
         const environment = credentialEnvironment(baseEnvironment, credential);
         const commandOptions = { env: environment, extendEnv: false };
@@ -154,13 +186,22 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
             cache,
             worktree,
         });
-        const remove = (target) => fileSystem.remove(target, { recursive: true, force: true });
+        const remove = (_operation, target) => fileSystem.remove(target, { recursive: true, force: true });
         const ops = {
             ensureRoots: Effect.andThen(fileSystem.makeDirectory(path.dirname(cache), { recursive: true }), fileSystem.makeDirectory(path.dirname(worktree), { recursive: true })),
             removePath: remove,
             cacheExists: fileSystem.exists(cache),
             promoteStaging: fileSystem.rename(`${cache}.cloning`, cache),
-            git: (args) => executeCommand("prepare", "git", args, commandOptions),
+            git: (operation, args) => Effect.gen(function* () {
+                // Git can echo the ambient token in diagnostics. Scrub before forming
+                // an error or passing its stdout to the revision parser.
+                const result = yield* collectCommand(spawner, operation, "git", args, commandOptions);
+                return yield* requireSuccess(operation, "local", "git", args, {
+                    ...result,
+                    stdout: scrubbed(result.stdout, credential),
+                    stderr: scrubbed(result.stderr, credential),
+                });
+            }),
         };
         const prepared = yield* fetches
             .withLock(request.repository)(provisionWorktree({
@@ -172,131 +213,61 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
         }))
             .pipe(Effect.mapError((error) => isExecutorError(error)
             ? error
-            : executorError("prepare", "Attempt workspace preparation failed", error)), Effect.onError(() => Effect.gen(function* () {
-            yield* fileSystem.remove(worktree, { recursive: true, force: true }).pipe(Effect.tapError((error) => Effect.logWarning("Could not remove a partial local workspace", {
-                attemptId: request.attemptId,
-                worker: request.worker,
-                host: "local",
-                worktree,
-                message: String(error),
-            })), Effect.ignore);
-            Redacted.wipeUnsafe(credential);
-        })));
-        yield* Ref.update(preparedStates, (current) => {
-            const next = new Map(current);
-            next.set(request.attemptId, { cache, credential });
-            return next;
-        });
+            : executorError("prepare", "Attempt workspace preparation failed", error)));
         yield* Effect.logInfo("Attempt workspace ready", {
             attemptId: request.attemptId,
             baseCommit: prepared.spec.baseCommit,
             worktree,
         });
-        return prepared;
-    });
-    const spawn = Effect.fn("LocalExecutor.spawnRunHost")(function* (prepared, input) {
+        return {
+            workspace: prepared,
+            launch: (io) => session.launch(prepared, io, (input) => spawn(prepared, credential, input)),
+        };
+    }, prepareAttempt);
+    const spawn = Effect.fn("LocalExecutor.spawnRunHost")(function* (prepared, credential, input) {
         const attemptId = prepared.spec.attemptId;
         yield* Effect.annotateCurrentSpan({
             attemptId,
             worker: prepared.worker,
             host: "local",
         });
-        const stored = (yield* Ref.get(preparedStates)).get(attemptId);
-        if (stored === undefined) {
-            return yield* new AttemptFailure.InfraFailure({
-                message: `Attempt ${attemptId} has no prepared credential`,
-                cause: new Error("prepared Attempt state missing"),
-            });
-        }
+        // A linked worktree's git common dir is the bare cache itself, and Turbo
+        // puts its cache next to the common dir, so an unscoped run from the
+        // worktree would write `repos/.turbo` beside the bare caches. The Worker
+        // cache is shared across that Worker's Attempts and stays out of the
+        // directory the startup sweep treats as cache storage.
+        const turboCache = path.join(workersRoot, prepared.worker, "turbo");
         yield* Effect.logInfo("Launching the run host", {
             attemptId,
             worker: prepared.worker,
             host: "local",
             command: runHost.command,
             worktree: prepared.worktree,
+            turboCache,
         });
         const handle = yield* spawner.spawn(ChildProcess.make(runHost.command, runHost.args, {
             cwd: prepared.worktree,
-            env: credentialEnvironment(baseEnvironment, stored.credential),
+            env: {
+                ...credentialEnvironment(baseEnvironment, credential),
+                TURBO_CACHE_DIR: turboCache,
+            },
             extendEnv: false,
             stdin: { stream: Stream.fromQueue(input), endOnDone: true },
         }));
         return {
             handle,
             host: "local",
-            scrub: (text) => scrubbed(text, stored.credential),
+            scrub: (text) => scrubbed(text, credential),
         };
     });
-    const session = yield* runHostSessionFor({ interruptGrace, spawn });
-    const cleanup = Effect.fn("LocalExecutor.cleanup")(function* (prepared) {
-        const attemptId = prepared.spec.attemptId;
-        yield* Effect.annotateCurrentSpan({
-            attemptId,
-            worker: prepared.worker,
-            host: "local",
-        });
-        yield* Effect.logInfo("Cleaning Attempt workspace", {
-            attemptId,
-            worker: prepared.worker,
-            host: "local",
-            worktree: prepared.worktree,
-        });
-        const state = (yield* Ref.get(preparedStates)).get(attemptId);
-        if (state === undefined) {
-            yield* fileSystem
-                .remove(prepared.worktree, { recursive: true, force: true })
-                .pipe(Effect.mapError((cause) => executorError("cleanup", `Could not remove ${prepared.worktree}`, cause)));
-            return;
-        }
-        const finish = Effect.gen(function* () {
-            const removedFromGit = yield* run("cleanup", "git", [
-                "--git-dir",
-                state.cache,
-                "worktree",
-                "remove",
-                "--force",
-                prepared.worktree,
-            ]).pipe(Effect.result);
-            const removedFromDisk = yield* fileSystem
-                .remove(prepared.worktree, { recursive: true, force: true })
-                .pipe(Effect.mapError((cause) => executorError("cleanup", `Could not remove ${prepared.worktree}`, cause)), Effect.result);
-            const pruned = yield* run("cleanup", "git", [
-                "--git-dir",
-                state.cache,
-                "worktree",
-                "prune",
-            ]).pipe(Effect.result);
-            for (const result of [removedFromGit, removedFromDisk, pruned]) {
-                if (Result.isFailure(result)) {
-                    return yield* result.failure;
-                }
-            }
-        }).pipe(Effect.mapError((cause) => isExecutorError(cause)
-            ? cause
-            : executorError("cleanup", `Could not clean Attempt ${attemptId}`, cause)));
-        yield* finish.pipe(Effect.ensuring(Effect.gen(function* () {
-            yield* Ref.update(preparedStates, (current) => {
-                const next = new Map(current);
-                next.delete(attemptId);
-                return next;
-            });
-            Redacted.wipeUnsafe(state.credential);
-        })));
-        yield* Effect.logInfo("Attempt cleanup completed", {
-            attemptId,
-            worker: prepared.worker,
-            host: "local",
-        });
-    });
+    const session = yield* runHostSessionFor({ interruptGrace });
     return Executor.of({
         kind: "local",
         cancel: session.cancel,
-        cleanup,
-        launch: session.launch,
         preflight,
         prepare,
     });
 });
-/** Node-only local executor; the package root remains platform-free. */
+/** Runs Attempts in isolated checkouts on the local machine. Requires Node; worker contracts are platform-free. */
 export const layer = (options) => Layer.effect(Executor, makeLocalExecutor(options));
-//# sourceMappingURL=index.js.map
+//# sourceMappingURL=local.js.map

package/dist/local/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/local/local.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,cAAc,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EACL,MAAM,EACN,UAAU,EACV,KAAK,EACL,IAAI,EAEJ,QAAQ,EACR,MAAM,EACN,MAAM,EACN,MAAM,GACP,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,sBAAsB,EACtB,mBAAmB,EAGnB,qBAAqB,GAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,GAEZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,iBAAiB,EAAqB,MAAM,wBAAwB,CAAC;AAgB9E,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;AAEjD;;;;GAIG;AACH,MAAM,0BAA0B,GAAG;IACjC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,aAAa,GAAG,CACpB,SAA4B,EAC5B,OAAe,EACf,KAAc,EACU,EAAE,CAAC,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEvF,sFAAsF;AACtF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,UAAqC,EAAU,EAAE,CAC/E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;AAE5D,MAAM,qBAAqB,GAAG,CAC5B,IAA4B,EAC5B,UAAqC,EACrC,EAAE;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO;QACL,GAAG,IAAI;QACP,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;QACnB,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,mBAAmB;QACrC,kBAAkB,EAAE,wEAAwE;KACpF,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,OAA6B,EAAE,EAAE,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,EAAkB,CAAC;IACtD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;IAClF,MAAM,aAAa,GACjB,OAAO,CAAC,aAAa;QACrB,CAAC,CAAC,UAA0B,EAAU,EAAE,CAAC,sBAAsB,UAAU,MAAM,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,WAAW,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE9E,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EACxE,SAA4B,EAC5B,OAAe,EACf,IAA2B,EAC3B,cAAc,GAAgC,EAAE;QAEhD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;YACtE,GAAG,EAAE,eAAe;YACpB,SAAS,EAAE,KAAK;YAChB,GAAG,cAAc;SAClB,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAClD,SAA4B,EAC5B,OAAe,EACf,IAA2B,EAC3B,cAAc,GAAgC,EAAE;QAEhD,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,6EAA6E;IAC7E,2DAA2D;IAC3D,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,uCAAuC,CAAC,CAChF,QAAQ,CAAC;QACP,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAAE,OAAO;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YAChE,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;gBAChE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;oBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;oBACjD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;wBAC3D,MAAM;wBACN,IAAI,EAAE,OAAO;wBACb,QAAQ,EAAE,MAAM;qBACjB,CAAC,CAAC;oBACH,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1D,IAAI,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC3D,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,IAAI,OAAO,GAAG,CAAC,CAAC;gBAChB,IAAI,MAAM,GAAG,CAAC,CAAC;gBACf,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;wBACjC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,yDAAyD,EAAE;4BAChF,MAAM;4BACN,IAAI,EAAE,OAAO;4BACb,KAAK;yBACN,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC,CAAC;wBACb,SAAS;oBACX,CAAC;oBACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE;wBAC1C,WAAW;wBACX,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;wBAC3B,UAAU;wBACV,OAAO;qBACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,+CAA+C,EAAE;wBACjE,MAAM;wBACN,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,KAAK;wBACZ,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;oBACF,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC7B,MAAM,IAAI,CAAC,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;oBACnD,MAAM;oBACN,IAAI,EAAE,OAAO;oBACb,MAAM;oBACN,OAAO;oBACP,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CACF,CAAC;IACF,KAAK,CAAC,CAAC,uBAAuB,EAAE,CAAC,IAAI,CACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,6CAA6C,EAAE;QAC/D,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;KACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAC9D,MAAiC,EACjC,MAAgC;QAEhC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,WAAW;gBACvB,OAAO,EAAE,UAAU,MAAM,uCAAuC;gBAChE,KAAK,EAAE,IAAI,KAAK,CAAC,UAAU,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE;YACpE,GAAG,OAAO,CAAC,IAAI;YACf,oBAAoB;SACrB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,IAAI,QAAQ,KAAK,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,UAAU;gBACtB,OAAO,EAAE,UAAU,MAAM,0BAA0B,QAAQ,IAAI,SAAS,cAAc,cAAc,CAAC,gBAAgB,EAAE;gBACvH,KAAK,EAAE,IAAI,KAAK,CAAC,4BAA4B,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAChE,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAC3C,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE;YACjD,MAAM;YACN,IAAI,EAAE,OAAO;YACb,UAAU;YACV,eAAe,EAAE,cAAc,CAAC,gBAAgB;SACjD,CAAC,CAAC;IACL,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAExB,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAwB;QACpF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACvF,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAC3C,CAAC;QACF,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAC7C,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,EACxD,CAAC,KAAK,EAAE,EAAE,CACR,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC,CAAC,EACJ,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QACnF,MAAM,WAAW,GAAG,qBAAqB,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAW,CAAC;QACvE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;YACnD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK;YACL,QAAQ;SACT,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,CACb,UAAiC,EACjC,MAAc,EACoC,EAAE,CACpD,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAuE;YAC9E,WAAW,EAAE,MAAM,CAAC,OAAO,CACzB,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAClE,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CACtE;YACD,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;YACrC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,KAAK,UAAU,EAAE,KAAK,CAAC;YAC5D,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,sEAAsE;gBACtE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;gBACtF,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE;oBAC5D,GAAG,MAAM;oBACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC;oBAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC,CAAC;SACL,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO;aAC5B,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,iBAAiB,CAAC;YAChB,OAAO;YACP,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,UAAU,EAAE,QAAQ,EAAE;YACxD,GAAG;SACJ,CAAC,CACH;aACA,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,sCAAsC,EAAE,KAAK,CAAC,CAC5E,CACF,CAAC;QAEJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE;YAC/C,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,CAAC,EAAuB,EAAE,EAAE,CAClC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;SAC9E,CAAC;IACJ,CAAC,EAAE,cAAc,CAAC,CAAC;IAEnB,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC7D,QAA0B,EAC1B,UAAqC,EACrC,KAAmB;QAEnB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,yEAAyE;QACzE,qEAAqE;QACrE,yEAAyE;QACzE,qEAAqE;QACrE,uDAAuD;QACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE;YAC9C,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU;SACX,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CACjC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YAC/C,GAAG,EAAE,QAAQ,CAAC,QAAQ;YACtB,GAAG,EAAE;gBACH,GAAG,qBAAqB,CAAC,eAAe,EAAE,UAAU,CAAC;gBACrD,eAAe,EAAE,UAAU;aAC5B;YACD,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5D,CAAC,CACH,CAAC;QACF,OAAO;YACL,MAAM;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;SAC5D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IAE7D,OAAO,QAAQ,CAAC,EAAE,CAAC;QACjB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS;QACT,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,mHAAmH;AACnH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,OAA6B,EAK7B,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC"}

package/dist/prepared-attempt.d.ts

@@ -0,0 +1,5 @@
+import { Effect, Scope } from "effect";
+import type { CheckoutRequest, ExecutorError, PreparedAttempt } from "./executor.ts";
+/** Owns partial preparation and the run host in one child scope, released at the Attempt's end. */
+export declare const prepareAttempt: (acquire: Effect.Effect<PreparedAttempt, ExecutorError, Scope.Scope>, request: CheckoutRequest) => Effect.Effect<PreparedAttempt, ExecutorError, Scope.Scope>;
+//# sourceMappingURL=prepared-attempt.d.ts.map

package/dist/prepared-attempt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared-attempt.d.ts","sourceRoot":"","sources":["../src/prepared-attempt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAoB,KAAK,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErF,mGAAmG;AACnG,eAAO,MAAM,cAAc,YAChB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,WAC1D,eAAe,KACvB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAqDzD,CAAC"}

package/dist/prepared-attempt.js

@@ -0,0 +1,40 @@
+import { InfraFailure } from "@usine/core/attempt/failure";
+import { Effect, Exit, Fiber, Ref, Scope } from "effect";
+/** Owns partial preparation and the run host in one child scope, released at the Attempt's end. */
+export const prepareAttempt = (acquire, request) => Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+    const scope = yield* Scope.fork(yield* Effect.scope);
+    // acquireRelease masks acquisition by default in Effect rc.111. Only the
+    // ownership transfer is masked here; clone, fetch, and lock waits must stop
+    // promptly. Each acquiring implementation registers its own finalizers.
+    const prepared = yield* restore(acquire).pipe(Scope.provide(scope), Effect.onError((cause) => Scope.close(scope, Exit.failCause(cause))));
+    const unavailable = yield* Ref.make(false);
+    yield* Scope.addFinalizer(scope, Ref.set(unavailable, true));
+    return {
+        workspace: prepared.workspace,
+        launch: Effect.fn("PreparedAttempt.launch")(function* (io) {
+            const attemptId = prepared.workspace.spec.attemptId;
+            yield* Effect.annotateCurrentSpan({ attemptId, worker: prepared.workspace.worker });
+            if (yield* Ref.getAndSet(unavailable, true)) {
+                yield* Effect.logWarning("Attempt was already launched or released", { attemptId });
+                return yield* new InfraFailure({
+                    message: `Attempt ${attemptId} was already launched or released`,
+                    cause: new Error("prepared Attempt is no longer available"),
+                });
+            }
+            // Closing the owner's scope interrupts the session before checkout and
+            // credential finalizers. Interrupting a caller waiting on join must also
+            // stop that scoped fiber, so timeout/cancel completes the handshake first.
+            return yield* Effect.acquireUseRelease(Effect.forkIn(prepared.launch(io).pipe(
+            // End the timer with the live session. Checkout/grant finalizers run
+            // afterward and cannot turn completed agent work into a retry.
+            Effect.timeoutOrElse({
+                duration: `${request.maxAttemptMinutes} minutes`,
+                orElse: () => Effect.fail(new InfraFailure({
+                    message: `Attempt exceeded the ${request.maxAttemptMinutes}-minute budget`,
+                    cause: new Error("attempt timeout"),
+                })),
+            })), scope), Fiber.join, Fiber.interrupt).pipe(Effect.onExit((exit) => Scope.close(scope, exit)));
+        }),
+    };
+}));
+//# sourceMappingURL=prepared-attempt.js.map

package/dist/prepared-attempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared-attempt.js","sourceRoot":"","sources":["../src/prepared-attempt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGzD,mGAAmG;AACnG,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAAmE,EACnE,OAAwB,EACoC,EAAE,CAC9D,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAC3C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CACrE,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IAE7D,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE;YACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;YACpD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,0CAA0C,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACpF,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC;oBAC7B,OAAO,EAAE,WAAW,SAAS,mCAAmC;oBAChE,KAAK,EAAE,IAAI,KAAK,CAAC,yCAAyC,CAAC;iBAC5D,CAAC,CAAC;YACL,CAAC;YACD,uEAAuE;YACvE,yEAAyE;YACzE,2EAA2E;YAC3E,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACpC,MAAM,CAAC,MAAM,CACX,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI;YACtB,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,CAAC,aAAa,CAAC;gBACnB,QAAQ,EAAE,GAAG,OAAO,CAAC,iBAAiB,UAAU;gBAChD,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,IAAI,YAAY,CAAC;oBACf,OAAO,EAAE,wBAAwB,OAAO,CAAC,iBAAiB,gBAAgB;oBAC1E,KAAK,EAAE,IAAI,KAAK,CAAC,iBAAiB,CAAC;iBACpC,CAAC,CACH;aACJ,CAAC,CACH,EACD,KAAK,CACN,EACD,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,CAChB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;KACuB,CAAC;AAC9B,CAAC,CAAC,CACH,CAAC"}

package/dist/provision.d.ts

@@ -1,7 +1,17 @@
+import { RepositoryName } from "@usine/core/repository";
 import { Effect } from "effect";
-import { ExecutorOperationError, PreparedAttempt, type CheckoutRequest } from "./index.ts";
+import { ExecutorOperationError, AttemptWorkspace, type CheckoutRequest } from "./executor.ts";
 export declare const safeSegment: (value: string) => string;
-export interface WorkspaceLayout {
+/** The bare cache directory name for a repository under `repos/`, shared by every adapter. */
+export declare const cacheDirectoryName: (repository: RepositoryName) => string;
+/**
+ * Whether a `repos/` entry is one of our bare caches, decided by the name we
+ * mint rather than by probing contents: a `HEAD` lookup fails with ENOTDIR on
+ * a stray file, and a `.cloning` leftover or a tool's scratch directory must
+ * never reach `git worktree prune`.
+ */
+export declare const isCacheDirectoryName: (entry: string) => boolean;
+interface WorkspaceLayout {
     readonly cache: string;
     readonly staging: string;
     readonly worktree: string;
@@ -9,11 +19,11 @@ export interface WorkspaceLayout {
 /** The adapter-specific primitives; everything else about provisioning is shared. */
 export interface WorkspaceOps<E> {
     readonly ensureRoots: Effect.Effect<void, E>;
-    readonly removePath: (target: string) => Effect.Effect<void, E>;
+    readonly removePath: (operation: "prepare" | "cleanup", target: string) => Effect.Effect<void, E>;
     readonly cacheExists: Effect.Effect<boolean, E>;
     /** Atomically promote the finished staging clone to the cache path. */
     readonly promoteStaging: Effect.Effect<void, E>;
-    readonly git: (args: ReadonlyArray<string>) => Effect.Effect<string, E>;
+    readonly git: (operation: "prepare" | "cleanup", args: ReadonlyArray<string>) => Effect.Effect<string, E>;
 }
 export interface ProvisionOptions<E> {
     readonly request: CheckoutRequest;
@@ -23,11 +33,11 @@ export interface ProvisionOptions<E> {
     readonly ops: WorkspaceOps<E>;
 }
 /**
- * One canonical cached-clone-to-worktree choreography shared by every
- * Executor: clone into a staging sibling and promote on success (an
- * interrupted clone must never leave a half-initialized cache that every
- * later fetch for the repository would poison), fetch the requested
- * revision, and check out a detached worktree at the resolved commit.
+ * The clone-to-worktree sequence every Executor shares: clone into a staging
+ * sibling and promote it on success, so an interrupted clone never leaves a
+ * half-initialized cache that later fetches would poison; then fetch the
+ * requested revision and check out a detached worktree at the resolved commit.
  */
-export declare const provisionWorktree: <E>(options: ProvisionOptions<E>) => Effect.Effect<PreparedAttempt, E | ExecutorOperationError, never>;
+export declare const provisionWorktree: <E>(options: ProvisionOptions<E>) => Effect.Effect<AttemptWorkspace, E | ExecutorOperationError, import("effect/Scope").Scope>;
+export {};
 //# sourceMappingURL=provision.d.ts.map

package/dist/provision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../src/provision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,eAAe,EAEf,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,WAAW,UAAW,MAAM,KAAG,MAAoD,CAAC;AAIjG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qFAAqF;AACrF,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAsD,CAAC,oGA6EnF,CAAC"}
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../src/provision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAa,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAEhB,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,WAAW,UAAW,MAAM,KAAG,MAAoD,CAAC;AAIjG,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,eAAgB,cAAc,KAAG,MACT,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,UAAW,MAAM,KAAG,OACmC,CAAC;AAIzF,UAAU,eAAe;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qFAAqF;AACrF,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,CACZ,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAsD,CAAC,4HAwJnF,CAAC"}

package/dist/provision.js

@@ -1,14 +1,24 @@
-import { AttemptChannel, Repository } from "@usine/core";
+import * as AttemptChannel from "@usine/core/attempt/channel";
+import { RepositoryName, CommitSha } from "@usine/core/repository";
 import { Effect, Schema } from "effect";
-import { ExecutorOperationError, PreparedAttempt, WorktreePath, } from "./index.js";
+import { ExecutorOperationError, AttemptWorkspace, WorktreePath, } from "./executor.js";
 export const safeSegment = (value) => value.replaceAll(/[^A-Za-z0-9_.-]/gu, "_");
-const decodeCommit = Schema.decodeUnknownEffect(Repository.CommitSha);
+const CACHE_DIRECTORY_SUFFIX = ".git";
+/** The bare cache directory name for a repository under `repos/`, shared by every adapter. */
+export const cacheDirectoryName = (repository) => `${safeSegment(repository)}${CACHE_DIRECTORY_SUFFIX}`;
 /**
- * One canonical cached-clone-to-worktree choreography shared by every
- * Executor: clone into a staging sibling and promote on success (an
- * interrupted clone must never leave a half-initialized cache that every
- * later fetch for the repository would poison), fetch the requested
- * revision, and check out a detached worktree at the resolved commit.
+ * Whether a `repos/` entry is one of our bare caches, decided by the name we
+ * mint rather than by probing contents: a `HEAD` lookup fails with ENOTDIR on
+ * a stray file, and a `.cloning` leftover or a tool's scratch directory must
+ * never reach `git worktree prune`.
+ */
+export const isCacheDirectoryName = (entry) => entry.length > CACHE_DIRECTORY_SUFFIX.length && entry.endsWith(CACHE_DIRECTORY_SUFFIX);
+const decodeCommit = Schema.decodeUnknownEffect(CommitSha);
+/**
+ * The clone-to-worktree sequence every Executor shares: clone into a staging
+ * sibling and promote it on success, so an interrupted clone never leaves a
+ * half-initialized cache that later fetches would poison; then fetch the
+ * requested revision and check out a detached worktree at the resolved commit.
  */
 export const provisionWorktree = Effect.fn("Executor.provisionWorktree")(function* (options) {
     const { layout, ops, request } = options;
@@ -18,23 +28,77 @@ export const provisionWorktree = Effect.fn("Executor.provisionWorktree")(functio
         host: options.host,
         repository: request.repository,
     });
-    yield* ops.ensureRoots;
-    yield* ops.removePath(layout.worktree);
-    if (yield* ops.cacheExists) {
-        yield* ops.git(["--git-dir", layout.cache, "remote", "set-url", "origin", options.url]);
-    }
-    else {
-        yield* ops.removePath(layout.staging);
-        yield* ops.git(["clone", "--bare", "--filter=blob:none", options.url, layout.staging]).pipe(Effect.onError(() => ops.removePath(layout.staging).pipe(Effect.tapError((error) => Effect.logWarning("Could not remove a partial clone", {
+    const cleanup = (resource, effect) => effect.pipe(Effect.tapError((error) => Effect.logError("Attempt cleanup operation failed", {
+        attemptId: request.attemptId,
+        worker: request.worker,
+        host: options.host,
+        worktree: layout.worktree,
+        resource,
+        message: String(error),
+    })), Effect.ignore);
+    // Register before any filesystem mutation. This also covers failed worktree
+    // creation, which can leave both a directory and a bare-cache registration.
+    yield* Effect.addFinalizer(Effect.fn("Executor.releaseWorktree")(function* () {
+        yield* Effect.annotateCurrentSpan({
+            attemptId: request.attemptId,
+            worker: request.worker,
+            repository: request.repository,
+            host: options.host,
+        });
+        yield* Effect.logInfo("Cleaning Attempt workspace", {
             attemptId: request.attemptId,
             worker: request.worker,
             host: options.host,
-            staging: layout.staging,
+            worktree: layout.worktree,
+        });
+        const cacheExists = yield* ops.cacheExists.pipe(Effect.tapError((error) => Effect.logWarning("Could not inspect cache during cleanup", {
+            attemptId: request.attemptId,
             message: String(error),
-        })), Effect.ignore)));
-        yield* ops.promoteStaging;
+        })), Effect.orElseSucceed(() => false));
+        if (cacheExists) {
+            yield* cleanup("git-worktree", ops.git("cleanup", [
+                "--git-dir",
+                layout.cache,
+                "worktree",
+                "remove",
+                "--force",
+                layout.worktree,
+            ]));
+        }
+        yield* cleanup("worktree-directory", ops.removePath("cleanup", layout.worktree));
+        if (cacheExists) {
+            yield* cleanup("cache-registration", ops.git("cleanup", ["--git-dir", layout.cache, "worktree", "prune"]));
+        }
+    }));
+    yield* ops.ensureRoots;
+    yield* ops.removePath("prepare", layout.worktree);
+    if (yield* ops.cacheExists) {
+        yield* ops.git("prepare", [
+            "--git-dir",
+            layout.cache,
+            "remote",
+            "set-url",
+            "origin",
+            options.url,
+        ]);
+    }
+    else {
+        // Staging belongs to this locked clone only. Release it before unlocking,
+        // including interruption between clone completion and cache promotion.
+        yield* Effect.scoped(Effect.gen(function* () {
+            yield* Effect.addFinalizer(() => cleanup("partial-clone", ops.removePath("cleanup", layout.staging)));
+            yield* ops.removePath("prepare", layout.staging);
+            yield* ops.git("prepare", [
+                "clone",
+                "--bare",
+                "--filter=blob:none",
+                options.url,
+                layout.staging,
+            ]);
+            yield* ops.promoteStaging;
+        }));
     }
-    yield* ops.git([
+    yield* ops.git("prepare", [
         "--git-dir",
         layout.cache,
         "fetch",
@@ -43,13 +107,18 @@ export const provisionWorktree = Effect.fn("Executor.provisionWorktree")(functio
         "origin",
         request.revision,
     ]);
-    const resolved = (yield* ops.git(["--git-dir", layout.cache, "rev-parse", "FETCH_HEAD"])).trim();
+    const resolved = (yield* ops.git("prepare", [
+        "--git-dir",
+        layout.cache,
+        "rev-parse",
+        "FETCH_HEAD",
+    ])).trim();
     const baseCommit = yield* decodeCommit(resolved).pipe(Effect.mapError((cause) => new ExecutorOperationError({
         operation: "prepare",
         message: "git returned an invalid object id",
         cause,
     })));
-    yield* ops.git([
+    yield* ops.git("prepare", [
         "--git-dir",
         layout.cache,
         "worktree",
@@ -58,7 +127,7 @@ export const provisionWorktree = Effect.fn("Executor.provisionWorktree")(functio
         layout.worktree,
         baseCommit,
     ]);
-    return new PreparedAttempt({
+    return new AttemptWorkspace({
         worker: request.worker,
         spec: new AttemptChannel.RunSpec({
             attemptId: request.attemptId,
@@ -69,6 +138,8 @@ export const provisionWorktree = Effect.fn("Executor.provisionWorktree")(functio
             task: request.task,
             agent: request.agent,
             parentModel: request.parentModel,
+            maxChildren: request.maxChildren,
+            parentEffort: request.parentEffort,
         }),
         worktree: WorktreePath.make(layout.worktree),
     });