@usine/executor 0.1.0 → 0.2.1

package/README.md

@@ -1,56 +1,87 @@
 # @usine/executor
 
-Worker execution for [usine](https://github.com/basaltbytes/usine). The platform-free package root defines five operations: preflight, prepare, launch, cancel, and cleanup. It also owns the credential provider, Worker capability errors, and adapter-neutral request types.
+Worker execution for [usine](https://github.com/basaltbytes/usine). The platform-free package root defines Worker preflight, scoped Attempt preparation, and cancellation. Each prepared Attempt launches its own run host and releases its resources at completion or when its scope closes. It also owns the credential provider, Worker capability errors, and adapter-neutral request types.
+
+## Attempt lifetime
+
+Call `Executor.prepare(request)` inside `Effect.scoped`, then call `prepared.launch(io)`
+once. The returned `PreparedAttempt` owns the checkout and repository access. Its
+`workspace` is an `AttemptWorkspace` descriptor containing the Worker, RunSpec, and
+worktree path; it can be serialized without exposing credentials or live handles.
+
+```ts
+const result = yield* Effect.scoped(
+  Effect.gen(function* () {
+    const prepared = yield* executor.prepare(request)
+    return yield* prepared.launch(transcriptSink)
+  }),
+)
+```
+
+Preparation remains interruptible during clone, fetch, credential requests, and lock
+waits. A failed prepare releases partial acquisitions immediately. An unlaunched
+Attempt releases its resources when the surrounding scope closes. Launch finishes
+cleanup before returning on success, failure, or interruption; closing the owner
+scope also stops a launch running in another fiber. Each Attempt launches at most
+once. Cleanup failures are logged without replacing a successful agent result with
+a retryable failure. Set `CheckoutRequest.maxAttemptMinutes` to bound live run-host
+execution; preparation and resource cleanup are outside that time budget.
+
+Recognizable Effect log lines on run-host stdout are dropped with a warning that records safe shape metadata. Invalid JSON, schema-invalid frames, and protocol sequence violations still fail the Attempt.
+
+This replaces the 0.x `Executor.launch(prepared, io)` and `Executor.cleanup(prepared)`
+methods. Consumers supply a scope instead of coordinating cleanup. The engine's
+`StepExecutor` reservation, execution, and interruption contract remains unchanged.
+
+## Worker preflight
+
+Call `executor.preflight(worker, brains)` with the instance roster’s `BrainSpec` values before scheduling Attempts. Both adapters invoke `usine-run-host --preflight '<brain-json>'` on the Worker. The run host checks each selected harness’s executable and authentication; Codex requires supported CLI 0.144.0 or 0.153.4 and a ChatGPT login, Claude requires its CLI and subscription login, and Pi children require API keys for their selected models.
+
+`prepare` repeats the assigned brain’s probe before acquiring credentials or creating a checkout. This checks roster changes and logouts after startup. A reported capability gap returns `WorkerCapabilityError` and requires operator action. Transport failures and probe timeouts remain infrastructure failures eligible for retry. Custom run hosts must implement the credential-free `HarnessReadiness` response from `@usine/core/agent/capability`.
+
+This replaces exe.dev’s `HarnessLoginCheck` and `harnessLoginChecks` options. Pass the roster to `preflight` so readiness follows the agents the instance actually uses.
 
 ## Local Worker
 
 The Node adapter at `@usine/executor/local` does the following for each Attempt:
 
-- checks Git and the installed run-host protocol without changing worker state;
+- checks Git, the installed run-host protocol, and the assigned harness before accepting work;
 - updates a per-repository bare cache, then creates a detached worktree at the resolved revision;
 - mints one repository credential and passes it only through the child process environment;
-- exchanges protocol-v3 envelopes with `@usine/run-host` over newline-delimited standard input and output, including immutable payload and agent context plus normalized session events;
+- exchanges protocol-v6 envelopes with `@usine/run-host` over newline-delimited standard input and output, including immutable payload, agent context, child-session budget, and normalized session events;
 - interrupts cooperatively before a hard kill, then removes the worktree and wipes the credential.
 
 `LocalExecutorOptions.runHost` can override the child command for another compatible host. The adapter otherwise launches the executable shipped by `@usine/run-host` and rejects a protocol-version mismatch during preflight.
 
+The adapter sets `TURBO_CACHE_DIR` to `.usine/workers/<worker>/turbo` for the run host. Startup cache sweeps prune only the `*.git` cache directories the adapter itself creates under `repos/`; every other entry is skipped and logged at debug level, and each sweep ends with an info log of pruned, skipped, and failed counts.
+
 The local layer requires Effect `FileSystem`, `Path`, and `ChildProcessSpawner` services plus a `CredentialProvider`. Everything is 0.x, so APIs may change. Supply `effect` at the version pinned by the usine workspace.
 
 ## exe.dev Worker
 
 `@usine/executor/exe-dev` runs the same contract on a persistent exe.dev VM. The configured Worker name must match the VM name. The VM image must already contain Git, Node.js 22 or later, the compatible `usine-run-host` executable, and every coding-agent login used by the instance.
 
-Preflight changes no remote state. It reads VM metadata through `ssh exe.dev ls --json`, checks Git and Node.js over SSH, compares the run-host protocol version, runs the configured harness login checks, and asks exe.dev to test each native GitHub integration.
+Preflight creates no checkouts or credential grants. It reads VM metadata through `ssh exe.dev ls --json`, checks Git and Node.js over SSH, compares the run-host protocol version, probes the supplied roster through the remote run host, and asks exe.dev to test each native GitHub integration.
 
-Prepare attaches the repository's integration to the VM with a bounded `--for` grant. It then fetches a bare cached clone from `github.int.exe.xyz` and creates a detached worktree for the Attempt. Launch keeps one SSH process open and carries protocol-v3 frames on that process's standard input and output. Cleanup removes the worktree, prunes its cache registration, and detaches the integration after the last concurrent Attempt using it finishes.
+Prepare attaches the repository's integration to the VM with a bounded `--for` grant. It then fetches a bare cached clone from `github.int.exe.xyz` and creates a detached worktree for the Attempt. Launch keeps one SSH process open and exchanges protocol-v6 frames on that process's standard input and output. Cleanup removes the worktree, prunes its cache registration, and detaches the integration after the last concurrent Attempt using it finishes.
 
 The first prepare on each VM after orchestrator startup sweeps abandoned Attempt worktrees and prunes cached worktree registrations left by a crash. Each sweep removal is isolated and logged: an immovable leftover never blocks its siblings or later prepares, and the sweep runs once per process regardless of partial failures. One-shot lobby and SSH commands carry a ten-minute timeout, and the SSH client sends keepalives so a dead link fails the operation instead of parking it. Cancellation also bounds interrupt persistence and delivery before escalating to a hard kill, so a parked store or remote process cannot stall shutdown; before removing a workspace, cleanup reads the run host's recorded pid on the VM and confirms the process is dead, because killing the local SSH client alone says nothing about the remote side.
 
-Concurrent Attempts against different repositories leave their integrations attached to the VM simultaneously; each grant stays time-boxed, and the refcounted release detaches an integration only after its last Attempt finishes. A failed detach is logged and left to lapse with its time-box.
+Concurrent Attempts against different repositories leave their integrations attached to the VM simultaneously; each grant stays time-boxed, and the refcounted release detaches an integration only after its last Attempt finishes. A failed detach is logged and left to lapse with its time-box. If remote termination cannot be confirmed, cleanup retains the checkout and its Git registration for recovery, logs its location, and still releases the credential grant. Partial preparation rolls back without requiring remote-process confirmation because no run host has launched.
 
 ```ts
-import { Repository } from "@usine/core"
-import {
-  GitHubIntegration,
-  HarnessLoginCheck,
-  IntegrationName,
-  layer,
-} from "@usine/executor/exe-dev"
+import { RepositoryName } from "@usine/core/repository"
+import { layer } from "@usine/executor/exe-dev"
+import { GitHubIntegration, IntegrationName } from "@usine/executor/exe-dev"
 
 const executorLayer = layer({
   githubIntegrations: [
     new GitHubIntegration({
-      repository: Repository.Name.make("acme/widget"),
+      repository: RepositoryName.make("acme/widget"),
       name: IntegrationName.make("usine-acme-widget"),
     }),
   ],
-  harnessLoginChecks: [
-    new HarnessLoginCheck({
-      harness: "codex",
-      command: "codex",
-      args: ["login", "status"],
-    }),
-  ],
+
 })
 ```
 

package/dist/child-command.d.ts

@@ -1,18 +1,21 @@
 import { Effect } from "effect";
 import { ChildProcess, type ChildProcessSpawner } from "effect/unstable/process";
-import { ExecutorOperationError, type ExecutorOperation } from "./index.ts";
+import { ExecutorOperationError, type ExecutorOperation } from "./executor.ts";
 export interface CommandResult {
     readonly exitCode: number;
     readonly stderr: string;
     readonly stdout: string;
 }
 /**
- * The named variables are the only ones a child may inherit; everything else
- * in the orchestrator environment — the App private key above all — stays out.
+ * Returns only the named process variables, so the App private key and every
+ * other orchestrator secret stay out of the child.
  */
 export declare const allowlistedEnvironment: (names: ReadonlyArray<string>) => Effect.Effect<Record<string, string>>;
-/** One bounded child process, output collected whole; the exit code is the caller's. */
+/**
+ * Runs one child process under the timeout and returns its whole output; the
+ * caller decides what the exit code means.
+ */
 export declare const collectCommand: (spawner: ChildProcessSpawner.ChildProcessSpawner["Service"], operation: ExecutorOperation, command: string, args: ReadonlyArray<string>, options: ChildProcess.CommandOptions) => Effect.Effect<CommandResult, ExecutorOperationError>;
-/** Turns a collected result into stdout, logging and failing on a non-zero exit. */
+/** Returns the collected stdout, or logs and fails when the exit code is non-zero. */
 export declare const requireSuccess: (operation: "cancel" | "cleanup" | "launch" | "preflight" | "prepare", host: string, command: string, args: readonly string[], result: CommandResult) => Effect.Effect<string, ExecutorOperationError, never>;
 //# sourceMappingURL=child-command.d.ts.map

package/dist/child-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"child-command.d.ts","sourceRoot":"","sources":["../src/child-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,EAAyB,MAAM,QAAQ,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAKD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,UAC1B,aAAa,CAAC,MAAM,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASpC,CAAC;AAEJ,wFAAwF;AACxF,eAAO,MAAM,cAAc,YAChB,mBAAmB,CAAC,mBAAmB,CAAC,SAAS,CAAC,aAChD,iBAAiB,WACnB,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,WAClB,YAAY,CAAC,cAAc,KACnC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,sBAAsB,CA+BnD,CAAC;AAEJ,oFAAoF;AACpF,eAAO,MAAM,cAAc,+MAsBzB,CAAC"}
+{"version":3,"file":"child-command.d.ts","sourceRoot":"","sources":["../src/child-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,EAAyB,MAAM,QAAQ,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE/E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAKD;;;GAGG;AACH,eAAO,MAAM,sBAAsB,UAC1B,aAAa,CAAC,MAAM,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASpC,CAAC;AAEJ;;;GAGG;AACH,eAAO,MAAM,cAAc,YAChB,mBAAmB,CAAC,mBAAmB,CAAC,SAAS,CAAC,aAChD,iBAAiB,WACnB,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,WAClB,YAAY,CAAC,cAAc,KACnC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,sBAAsB,CA+BnD,CAAC;AAEJ,sFAAsF;AACtF,eAAO,MAAM,cAAc,+MAsBzB,CAAC"}

package/dist/child-command.js

@@ -1,16 +1,19 @@
 import { Array as Arr, Config, Effect, Fiber, Option, Stream } from "effect";
 import { ChildProcess } from "effect/unstable/process";
-import { ExecutorOperationError } from "./index.js";
-/** Every adapter command is bounded: a hung clone or SSH hop must stay cancellable. */
+import { ExecutorOperationError } from "./executor.js";
+/** Bounds every adapter command so a hung clone or SSH hop stays cancellable. */
 const COMMAND_TIMEOUT = "10 minutes";
 /**
- * The named variables are the only ones a child may inherit; everything else
- * in the orchestrator environment — the App private key above all — stays out.
+ * Returns only the named process variables, so the App private key and every
+ * other orchestrator secret stay out of the child.
  */
 export const allowlistedEnvironment = (names) => Effect.forEach(names, (name) => Effect.map(Config.option(Config.string(name)), (value) => Option.map(value, (found) => [name, found]))).pipe(Effect.map((entries) => Object.fromEntries(Arr.getSomes(entries))), 
-// An unreadable process environment at layer build is startup breakage.
+// An unreadable process environment at layer build is a defect, not a failure to handle.
 Effect.orDie);
-/** One bounded child process, output collected whole; the exit code is the caller's. */
+/**
+ * Runs one child process under the timeout and returns its whole output; the
+ * caller decides what the exit code means.
+ */
 export const collectCommand = (spawner, operation, command, args, options) => Effect.scoped(Effect.gen(function* () {
     const handle = yield* spawner.spawn(ChildProcess.make(command, args, options));
     const stdoutFiber = yield* handle.stdout.pipe(Stream.decodeText(), Stream.mkString, Effect.forkChild);
@@ -26,7 +29,7 @@ export const collectCommand = (spawner, operation, command, args, options) => Ef
     message: `${command} could not be executed`,
     cause,
 })));
-/** Turns a collected result into stdout, logging and failing on a non-zero exit. */
+/** Returns the collected stdout, or logs and fails when the exit code is non-zero. */
 export const requireSuccess = Effect.fn("Executor.requireSuccess")(function* (operation, host, command, args, result) {
     if (result.exitCode !== 0) {
         yield* Effect.logWarning("Executor command exited non-zero", {

package/dist/child-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"child-command.js","sourceRoot":"","sources":["../src/child-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7E,OAAO,EAAE,YAAY,EAA4B,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAA0B,MAAM,YAAY,CAAC;AAQ5E,uFAAuF;AACvF,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAA4B,EACW,EAAE,CACzC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAU,CAAC,CACrD,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAClE,wEAAwE;AACxE,MAAM,CAAC,KAAK,CACb,CAAC;AAEJ,wFAAwF;AACxF,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAA2D,EAC3D,SAA4B,EAC5B,OAAe,EACf,IAA2B,EAC3B,OAAoC,EACkB,EAAE,CACxD,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC3C,MAAM,CAAC,UAAU,EAAE,EACnB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC3C,MAAM,CAAC,UAAU,EAAE,EACnB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACxC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;KACxB,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAA0B,CAAC;AAChF,CAAC,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAC/B,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;IACzB,SAAS;IACT,OAAO,EAAE,GAAG,OAAO,wBAAwB;IAC3C,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ,oFAAoF;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAC1E,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B,EAC3B,MAAqB;IAErB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,kCAAkC,EAAE;YAC3D,SAAS;YACT,IAAI;YACJ,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,IAAI,sBAAsB,CAAC;YACvC,SAAS;YACT,OAAO,EAAE,GAAG,OAAO,qBAAqB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACjE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,kCAAkC,CAAC;SACvF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"child-command.js","sourceRoot":"","sources":["../src/child-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7E,OAAO,EAAE,YAAY,EAA4B,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,sBAAsB,EAA0B,MAAM,eAAe,CAAC;AAQ/E,iFAAiF;AACjF,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAA4B,EACW,EAAE,CACzC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAU,CAAC,CACrD,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAClE,yFAAyF;AACzF,MAAM,CAAC,KAAK,CACb,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAA2D,EAC3D,SAA4B,EAC5B,OAAe,EACf,IAA2B,EAC3B,OAAoC,EACkB,EAAE,CACxD,MAAM,CAAC,MAAM,CACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC3C,MAAM,CAAC,UAAU,EAAE,EACnB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC3C,MAAM,CAAC,UAAU,EAAE,EACnB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;IACxC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;KACxB,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAA0B,CAAC;AAChF,CAAC,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAC/B,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;IACzB,SAAS;IACT,OAAO,EAAE,GAAG,OAAO,wBAAwB;IAC3C,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAC1E,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B,EAC3B,MAAqB;IAErB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,kCAAkC,EAAE;YAC3D,SAAS;YACT,IAAI;YACJ,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,IAAI,sBAAsB,CAAC;YACvC,SAAS;YACT,OAAO,EAAE,GAAG,OAAO,qBAAqB,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACjE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,kCAAkC,CAAC;SACvF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/exe-dev/channel.d.ts

@@ -1,8 +1,12 @@
+import type * as AttemptChannel from "@usine/core/attempt/channel";
 import { Effect } from "effect";
 import { ChildProcessSpawner } from "effect/unstable/process";
-import type { RunHostCommand } from "../index.ts";
-import { type RunHostSession } from "../run-host-session.ts";
+import type { AttemptWorkspace, RunHostCommand } from "../executor.ts";
 import type { ExeDevCommands } from "./commands.ts";
-import type { PreparedStates } from "./model.ts";
-export declare const attemptChannelFor: (commands: ExeDevCommands, preparedStates: PreparedStates, runHost: RunHostCommand, interruptGrace: Parameters<typeof Effect.timeoutOption>[1]) => Effect.Effect<RunHostSession, never, ChildProcessSpawner.ChildProcessSpawner>;
+import type { VmState } from "./model.ts";
+export declare const attemptChannelFor: (commands: ExeDevCommands, runHost: RunHostCommand, interruptGrace: import("effect/Duration").Input) => Effect.Effect<{
+    cancel: (attemptId: import("@usine/core/attempt").AttemptId) => Effect.Effect<void, import("../executor.ts").ExecutorError>;
+    intervene: (attemptId: import("@usine/core/attempt").AttemptId, intervention: AttemptChannel.Intervention) => Effect.Effect<void, import("@usine/core/attempt/failure").AttemptFailure>;
+    launch: (prepared: AttemptWorkspace, vm: VmState, io: AttemptChannel.Sink) => Effect.Effect<import("@usine/core/step/result").StepResult, import("@usine/core/attempt/failure").AgentFailure | import("@usine/core/attempt/failure").ChildSessionBudgetFailure | import("@usine/core/attempt/failure").DefectFailure | import("@usine/core/attempt/failure").InfraFailure | import("@usine/core/attempt/failure").RunawayFailure, never>;
+}, never, ChildProcessSpawner.ChildProcessSpawner>;
 //# sourceMappingURL=channel.d.ts.map

package/dist/exe-dev/channel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/exe-dev/channel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,KAAK,EAAmB,cAAc,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAwC,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,eAAO,MAAM,iBAAiB,EAAE,CAC9B,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,cAAc,EAC9B,OAAO,EAAE,cAAc,EACvB,cAAc,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KACvD,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,mBAAmB,CAAC,mBAAmB,CAwD/E,CAAC"}
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/exe-dev/channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,cAAc,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,eAAO,MAAM,iBAAiB;;;uBAkDP,gBAAgB,MAAM,OAAO,MAAM,cAAc,CAAC,IAAI;kDAG3E,CAAC"}

package/dist/exe-dev/channel.js

@@ -1,33 +1,25 @@
-import { AttemptFailure } from "@usine/core";
-import { Effect, Ref, Stream } from "effect";
+import { Effect, Stream } from "effect";
 import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
 import { runHostSessionFor } from "../run-host-session.js";
 import { runHostShellCommand } from "./shell.js";
-export const attemptChannelFor = Effect.fn("ExeDevExecutor.attemptChannelFor")(function* (commands, preparedStates, runHost, interruptGrace) {
+export const attemptChannelFor = Effect.fn("ExeDevExecutor.attemptChannelFor")(function* (commands, runHost, interruptGrace) {
     const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
-    const spawn = Effect.fn("ExeDevExecutor.spawnRunHost")(function* (prepared, input) {
+    const spawn = Effect.fn("ExeDevExecutor.spawnRunHost")(function* (prepared, vm, input) {
         const attemptId = prepared.spec.attemptId;
-        const state = (yield* Ref.get(preparedStates)).get(attemptId);
-        if (state === undefined) {
-            return yield* new AttemptFailure.InfraFailure({
-                message: `Attempt ${attemptId} has no prepared exe.dev workspace`,
-                cause: new Error("prepared Attempt state missing"),
-            });
-        }
         yield* Effect.annotateCurrentSpan({
             attemptId,
             worker: prepared.worker,
-            host: state.vm.sshDest,
+            host: vm.sshDest,
         });
         yield* Effect.logInfo("Launching the run host over SSH", {
             attemptId,
             worker: prepared.worker,
-            host: state.vm.sshDest,
+            host: vm.sshDest,
             worktree: prepared.worktree,
         });
         const handle = yield* spawner.spawn(ChildProcess.make(commands.ssh.command, [
             ...commands.ssh.args,
-            state.vm.sshDest,
+            vm.sshDest,
             "--",
             runHostShellCommand(prepared.worktree, runHost.command, runHost.args),
         ], {
@@ -35,11 +27,16 @@ export const attemptChannelFor = Effect.fn("ExeDevExecutor.attemptChannelFor")(f
             extendEnv: false,
             stdin: { stream: Stream.fromQueue(input), endOnDone: true },
         }));
-        // Identity scrub is safe here because this process never holds a secret
-        // the run host could echo: credentials are edge-injected on the VM by the
-        // exe.dev integration. Revisit if any credential ever crosses this seam.
-        return { handle, host: state.vm.sshDest, scrub: (text) => text };
+        // Nothing to scrub: this process never has a secret the run host could echo,
+        // because the exe.dev integration injects credentials on the VM. If a
+        // credential ever passes through this process, scrub it here.
+        return { handle, host: vm.sshDest, scrub: (text) => text };
     });
-    return yield* runHostSessionFor({ interruptGrace, spawn });
+    const session = yield* runHostSessionFor({ interruptGrace });
+    return {
+        cancel: session.cancel,
+        intervene: session.intervene,
+        launch: (prepared, vm, io) => session.launch(prepared, io, (input) => spawn(prepared, vm, input)),
+    };
 });
 //# sourceMappingURL=channel.js.map

package/dist/exe-dev/channel.js.map

@@ -1 +1 @@
-{"version":3,"file":"channel.js","sourceRoot":"","sources":["../../src/exe-dev/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAA0C,MAAM,wBAAwB,CAAC;AAGnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAKuD,MAAM,CAAC,EAAE,CAC5F,kCAAkC,CACnC,CAAC,QAAQ,CAAC,EACT,QAAwB,EACxB,cAA8B,EAC9B,OAAuB,EACvB,cAA0D;IAE1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAC9D,QAAyB,EACzB,KAAmB;QAEnB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,YAAY,CAAC;gBAC5C,OAAO,EAAE,WAAW,SAAS,oCAAoC;gBACjE,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;YACvD,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO;YACtB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CACjC,YAAY,CAAC,IAAI,CACf,QAAQ,CAAC,GAAG,CAAC,OAAO,EACpB;YACE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI;YACpB,KAAK,CAAC,EAAE,CAAC,OAAO;YAChB,IAAI;YACJ,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;SACtE,EACD;YACE,GAAG,EAAE,QAAQ,CAAC,WAAW;YACzB,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5D,CACF,CACF,CAAC;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC"}
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../../src/exe-dev/channel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAAE,iBAAiB,EAAqB,MAAM,wBAAwB,CAAC;AAG9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EACtF,QAAwB,EACxB,OAAuB,EACvB,cAA0D;IAE1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAC9D,QAA0B,EAC1B,EAAW,EACX,KAAmB;QAEnB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,EAAE,CAAC,OAAO;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;YACvD,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CACjC,YAAY,CAAC,IAAI,CACf,QAAQ,CAAC,GAAG,CAAC,OAAO,EACpB;YACE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI;YACpB,EAAE,CAAC,OAAO;YACV,IAAI;YACJ,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;SACtE,EACD;YACE,GAAG,EAAE,QAAQ,CAAC,WAAW;YACzB,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE;SAC5D,CACF,CACF,CAAC;QACF,6EAA6E;QAC7E,sEAAsE;QACtE,8DAA8D;QAC9D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IAC7D,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,CAAC,QAA0B,EAAE,EAAW,EAAE,EAAuB,EAAE,EAAE,CAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;KACtE,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/exe-dev/commands.d.ts

@@ -1,7 +1,7 @@
 import { Effect } from "effect";
 import { ChildProcessSpawner } from "effect/unstable/process";
 import { type CommandResult } from "../child-command.ts";
-import type { ExecutorOperation, ExecutorOperationError, RunHostCommand } from "../index.ts";
+import type { ExecutorOperation, ExecutorOperationError, RunHostCommand } from "../executor.ts";
 import type { SshDestination } from "./model.ts";
 export interface ExeDevCommands {
     readonly environment: Record<string, string>;

package/dist/exe-dev/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/exe-dev/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,CACd,SAAS,EAAE,iBAAiB,EAC5B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,CAClB,SAAS,EAAE,iBAAiB,EAC5B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,CAClB,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,CACf,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CACpD;AAmBD,eAAO,MAAM,WAAW;;uBAuCT,iBAAiB,QACtB,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;2BAInC,iBAAiB,QACtB,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;wBAgBnC,iBAAiB,WACnB,cAAc,WACd,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;2BAjBnC,iBAAiB,WACnB,cAAc,WACd,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC;;kDA6BvD,CAAC"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/exe-dev/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,CACd,SAAS,EAAE,iBAAiB,EAC5B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,CAClB,SAAS,EAAE,iBAAiB,EAC5B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,CAClB,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,CACf,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CACpD;AAkBD,eAAO,MAAM,WAAW;;uBAuCT,iBAAiB,QACtB,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;2BAInC,iBAAiB,QACtB,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;wBAgBnC,iBAAiB,WACnB,cAAc,WACd,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;2BAjBnC,iBAAiB,WACnB,cAAc,WACd,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,KAC1B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC;;kDA6BvD,CAAC"}

package/dist/exe-dev/commands.js

@@ -3,9 +3,8 @@ import { ChildProcessSpawner } from "effect/unstable/process";
 import { allowlistedEnvironment, collectCommand, requireSuccess, } from "../child-command.js";
 import { shellCommand } from "./shell.js";
 /**
- * The local SSH process receives only what SSH itself needs. In particular,
- * GitHub and factory credentials from the orchestrator environment never
- * cross into either the SSH client or the VM.
+ * The local SSH client inherits only what SSH itself needs; GitHub and factory
+ * credentials from the orchestrator environment never reach it or the VM.
  */
 const SSH_ENVIRONMENT_ALLOWLIST = [
     "HOME",
@@ -23,8 +22,8 @@ export const commandsFor = Effect.fn("ExeDevExecutor.commandsFor")(function* (co
     const environment = yield* allowlistedEnvironment(SSH_ENVIRONMENT_ALLOWLIST);
     const ssh = configuredSsh ?? {
         command: "ssh",
-        // The keepalive pair turns a dead TCP link into a non-zero SSH exit
-        // instead of a silent forever-park: a lost VM must fail the operation.
+        // The keepalive pair turns a dead TCP link into a non-zero SSH exit instead
+        // of a silent park, so a lost VM fails the operation.
         args: ["-o", "BatchMode=yes", "-o", "ServerAliveInterval=30", "-o", "ServerAliveCountMax=4"],
     };
     const executeRaw = Effect.fn("ExeDevExecutor.executeRaw")(function* (operation, host, command, args) {
@@ -38,9 +37,9 @@ export const commandsFor = Effect.fn("ExeDevExecutor.commandsFor")(function* (co
         const result = yield* executeRaw(operation, host, command, args);
         return yield* requireSuccess(operation, host, command, args, result);
     });
-    // Lobby arguments ride unquoted through OpenSSH's argv join. Every value
-    // passed here must be a brand-validated token (Worker.Name,
-    // IntegrationName, CredentialGrantMinutes); never pass free-form text.
+    // Lobby arguments pass unquoted through OpenSSH's argv join, so every value
+    // must be a brand-validated token (WorkerName, IntegrationName,
+    // CredentialGrantMinutes), never free-form text.
     const lobby = (operation, args) => executeChecked(operation, "exe.dev", ssh.command, [...ssh.args, "exe.dev", ...args]);
     const lobbyJson = (operation, args) => lobby(operation, [...args, "--json"]);
     const remoteRaw = (operation, sshDest, command, args) => executeRaw(operation, sshDest, ssh.command, [

package/dist/exe-dev/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/exe-dev/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA2B1C;;;;GAIG;AACH,MAAM,yBAAyB,GAAG;IAChC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,eAAe;IACf,eAAe;IACf,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC1E,aAA8B;IAE9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,aAAa,IAAI;QAC3B,OAAO,EAAE,KAAK;QACd,oEAAoE;QACpE,uEAAuE;QACvE,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,CAAC;KAC7F,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EACjE,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B;QAE3B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9D,GAAG,EAAE,WAAW;YAChB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACzE,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B;QAE3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,4DAA4D;IAC5D,uEAAuE;IACvE,MAAM,KAAK,GAAG,CACZ,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CACjD,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAEvF,MAAM,SAAS,GAAG,CAChB,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1F,MAAM,SAAS,GAAG,CAChB,SAA4B,EAC5B,OAAuB,EACvB,OAAe,EACf,IAA2B,EAC2B,EAAE,CACxD,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAC1C,GAAG,GAAG,CAAC,IAAI;QACX,OAAO;QACP,IAAI;QACJ,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;KAC5B,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,CACb,SAA4B,EAC5B,OAAuB,EACvB,OAAe,EACf,IAA2B,EACoB,EAAE,CACjD,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAC9C,GAAG,GAAG,CAAC,IAAI;QACX,OAAO;QACP,IAAI;QACJ,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;KAC5B,CAAC,CAAC;IAEL,OAAO;QACL,WAAW;QACX,KAAK;QACL,SAAS;QACT,MAAM;QACN,SAAS;QACT,GAAG;KACqB,CAAC;AAC7B,CAAC,CAAC,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/exe-dev/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA2B1C;;;GAGG;AACH,MAAM,yBAAyB,GAAG;IAChC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,eAAe;IACf,eAAe;IACf,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC1E,aAA8B;IAE9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,aAAa,IAAI;QAC3B,OAAO,EAAE,KAAK;QACd,4EAA4E;QAC5E,sDAAsD;QACtD,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,CAAC;KAC7F,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EACjE,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B;QAE3B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9D,GAAG,EAAE,WAAW;YAChB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACzE,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B;QAE3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,gEAAgE;IAChE,iDAAiD;IACjD,MAAM,KAAK,GAAG,CACZ,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CACjD,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAEvF,MAAM,SAAS,GAAG,CAChB,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1F,MAAM,SAAS,GAAG,CAChB,SAA4B,EAC5B,OAAuB,EACvB,OAAe,EACf,IAA2B,EAC2B,EAAE,CACxD,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAC1C,GAAG,GAAG,CAAC,IAAI;QACX,OAAO;QACP,IAAI;QACJ,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;KAC5B,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,CACb,SAA4B,EAC5B,OAAuB,EACvB,OAAe,EACf,IAA2B,EACoB,EAAE,CACjD,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAC9C,GAAG,GAAG,CAAC,IAAI;QACX,OAAO;QACP,IAAI;QACJ,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;KAC5B,CAAC,CAAC;IAEL,OAAO;QACL,WAAW;QACX,KAAK;QACL,SAAS;QACT,MAAM;QACN,SAAS;QACT,GAAG;KACqB,CAAC;AAC7B,CAAC,CAAC,CAAC"}

package/dist/exe-dev/exe-dev.d.ts

@@ -0,0 +1,8 @@
+import { Layer } from "effect";
+import { ChildProcessSpawner } from "effect/unstable/process";
+import { Executor } from "../executor.ts";
+import type { ExeDevExecutorOptions } from "./model.ts";
+/** Runs Attempts on exe.dev Workers over SSH. Requires Node; worker contracts are platform-free. */
+export declare const layer: (options: ExeDevExecutorOptions) => Layer.Layer<Executor, never, ChildProcessSpawner.ChildProcessSpawner>;
+export { CredentialGrantMinutes, type ExeDevExecutorOptions, GitHubIntegration, IntegrationName, } from "./model.ts";
+//# sourceMappingURL=exe-dev.d.ts.map

package/dist/exe-dev/exe-dev.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exe-dev.d.ts","sourceRoot":"","sources":["../../src/exe-dev/exe-dev.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,EAAiB,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAIL,QAAQ,EAGT,MAAM,gBAAgB,CAAC;AAQxB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AA6MxD,oGAAoG;AACpG,eAAO,MAAM,KAAK,YACP,qBAAqB,KAC7B,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,mBAAmB,CAClB,CAAC;AAEtD,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/dist/exe-dev/exe-dev.js

@@ -0,0 +1,154 @@
+import { RepositoryName } from "@usine/core/repository";
+import { Effect, Exit, Layer, Schema, Scope } from "effect";
+import { ChildProcessSpawner } from "effect/unstable/process";
+import { CheckoutRequest, CredentialUnavailableError, Executor, ExecutorError, ExecutorOperationError, } from "../executor.js";
+import { verifyHarnesses } from "../harness-preflight.js";
+import { prepareAttempt } from "../prepared-attempt.js";
+import { keyedLockFor } from "../keyed-lock.js";
+import { provisionWorktree, safeSegment } from "../provision.js";
+import { attemptChannelFor } from "./channel.js";
+import { commandsFor } from "./commands.js";
+import { credentialGrantsFor } from "./grants.js";
+import { preflightFor } from "./preflight.js";
+import { RUN_HOST_KILL_SCRIPT, runHostPidFile } from "./shell.js";
+import { abandonedWorktreeSweepFor } from "./sweep.js";
+const isExecutorError = Schema.is(ExecutorError);
+const executorError = (message, cause) => new ExecutorOperationError({ operation: "prepare", message, cause });
+const makeExeDevExecutor = (options) => Effect.gen(function* () {
+    const commands = yield* commandsFor(options.ssh);
+    const fetches = yield* keyedLockFor();
+    const integrations = new Map(options.githubIntegrations.map(({ name, repository }) => [repository, name]));
+    const integrationNames = new Set(options.githubIntegrations.map(({ name }) => name));
+    const runHost = options.runHost ?? { command: "usine-run-host", args: [] };
+    // The grace covers an SSH round trip plus the agent flushing its final
+    // events, not just a local pipe.
+    const interruptGrace = options.interruptGrace ?? "10 seconds";
+    if (integrations.size !== options.githubIntegrations.length) {
+        return yield* Effect.die(new Error("ExeDevExecutorOptions.githubIntegrations contains duplicate repositories"));
+    }
+    if (integrationNames.size !== options.githubIntegrations.length) {
+        return yield* Effect.die(new Error("ExeDevExecutorOptions.githubIntegrations contains duplicate integration names"));
+    }
+    const machines = yield* preflightFor(options, commands, runHost);
+    const credentialGrants = yield* credentialGrantsFor(options, commands);
+    const sweepAbandonedWorktrees = yield* abandonedWorktreeSweepFor(commands);
+    const attemptChannel = yield* attemptChannelFor(commands, runHost, interruptGrace);
+    const prepare = Effect.fn("ExeDevExecutor.prepare")(function* (request) {
+        yield* Effect.annotateCurrentSpan({
+            attemptId: request.attemptId,
+            worker: request.worker,
+            repository: request.repository,
+        });
+        const integration = integrations.get(request.repository);
+        if (integration === undefined) {
+            return yield* new CredentialUnavailableError({
+                repository: request.repository,
+                message: `No exe.dev GitHub integration is configured for ${request.repository}`,
+                cause: new Error("repository integration missing"),
+            });
+        }
+        const vm = yield* machines.vmFor(request.worker);
+        yield* verifyHarnesses(request.worker, [request.agent.brain], runHost, (command, args) => commands.remote("preflight", vm.sshDest, command, args));
+        const root = `${vm.home}/.usine/workers/${safeSegment(request.worker)}`;
+        const cache = `${root}/repos/${safeSegment(request.repository)}.git`;
+        const worktree = `${root}/attempts/${safeSegment(request.attemptId)}`;
+        const staging = `${cache}.cloning`;
+        const remoteUrl = `https://github.int.exe.xyz/${request.repository}.git`;
+        yield* Effect.annotateCurrentSpan({ host: vm.sshDest });
+        yield* sweepAbandonedWorktrees(request.attemptId, request.worker, vm, root);
+        const remove = (operation, target) => Effect.asVoid(commands.remote(operation, vm.sshDest, "rm", ["-rf", target]));
+        const ops = {
+            ensureRoots: Effect.asVoid(commands.remote("prepare", vm.sshDest, "mkdir", [
+                "-p",
+                `${root}/repos`,
+                `${root}/attempts`,
+            ])),
+            removePath: remove,
+            cacheExists: Effect.gen(function* () {
+                const inspected = yield* commands.remoteRaw("prepare", vm.sshDest, "test", ["-d", cache]);
+                if (inspected.exitCode === 0)
+                    return true;
+                if (inspected.exitCode === 1)
+                    return false;
+                return yield* executorError(`Could not inspect the cached clone on Worker ${request.worker}`, new Error(inspected.stderr.trim()));
+            }),
+            promoteStaging: Effect.asVoid(commands.remote("prepare", vm.sshDest, "mv", [staging, cache])),
+            git: (operation, args) => commands.remote(operation, vm.sshDest, "git", args),
+        };
+        const releaseWorkspace = Effect.fn("ExeDevExecutor.releaseWorkspace")(function* (resource, exit) {
+            yield* Effect.annotateCurrentSpan({
+                attemptId: request.attemptId,
+                worker: request.worker,
+                host: vm.sshDest,
+            });
+            // The remote run host and its checkout form one cleanup dependency:
+            // an SSH exit does not prove the process on the VM has stopped. Never
+            // close the checkout scope unless this independent stop request succeeds.
+            const confirmed = yield* commands.remote("cleanup", vm.sshDest, "sh", [
+                "-c",
+                RUN_HOST_KILL_SCRIPT,
+                "sh",
+                runHostPidFile(resource.workspace.worktree),
+            ]);
+            yield* Effect.logInfo("Confirmed the remote run host before workspace removal", {
+                attemptId: request.attemptId,
+                worker: request.worker,
+                host: vm.sshDest,
+                runHost: confirmed.trim(),
+            });
+            yield* Scope.close(resource.scope, exit);
+        }, (effect) => effect.pipe(Effect.tapError((error) => Effect.logError("Remote termination failed; Attempt checkout retained for recovery", {
+            attemptId: request.attemptId,
+            worker: request.worker,
+            host: vm.sshDest,
+            worktree,
+            message: error.message,
+        })), Effect.ignore));
+        const { workspace: prepared } = yield* fetches
+            .withLock(request.repository)(Effect.gen(function* () {
+            // Credentials belong to the Attempt scope independently of the checkout:
+            // refusing destructive cleanup must still release this grant exactly once.
+            yield* credentialGrants.acquire(request.attemptId, request.worker, request.repository, integration);
+            return yield* Effect.acquireRelease(Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+                const scope = yield* Scope.make();
+                // Before preparation succeeds no run host can exist. Roll back the
+                // partial checkout unconditionally; only a completed workspace is
+                // transferred to the guarded remote-process release above.
+                const workspace = yield* restore(provisionWorktree({
+                    request,
+                    url: remoteUrl,
+                    host: vm.sshDest,
+                    layout: { cache, staging, worktree },
+                    ops,
+                })).pipe(Scope.provide(scope), Effect.onError((cause) => Scope.close(scope, Exit.failCause(cause))));
+                return { workspace, scope };
+            })), releaseWorkspace, { interruptible: true });
+        }))
+            .pipe(Effect.mapError((cause) => isExecutorError(cause)
+            ? cause
+            : executorError("exe.dev workspace preparation failed", cause)));
+        yield* Effect.logInfo("exe.dev Attempt workspace ready", {
+            attemptId: request.attemptId,
+            worker: request.worker,
+            host: vm.sshDest,
+            repository: request.repository,
+            baseCommit: prepared.spec.baseCommit,
+            worktree,
+        });
+        return {
+            workspace: prepared,
+            launch: (io) => attemptChannel.launch(prepared, vm, io),
+        };
+    }, prepareAttempt);
+    return Executor.of({
+        kind: "exe.dev",
+        cancel: attemptChannel.cancel,
+        intervene: attemptChannel.intervene,
+        preflight: machines.preflight,
+        prepare,
+    });
+});
+/** Runs Attempts on exe.dev Workers over SSH. Requires Node; worker contracts are platform-free. */
+export const layer = (options) => Layer.effect(Executor, makeExeDevExecutor(options));
+export { CredentialGrantMinutes, GitHubIntegration, IntegrationName, } from "./model.js";
+//# sourceMappingURL=exe-dev.js.map

package/dist/exe-dev/exe-dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exe-dev.js","sourceRoot":"","sources":["../../src/exe-dev/exe-dev.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAEL,eAAe,EACf,0BAA0B,EAC1B,QAAQ,EACR,aAAa,EACb,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAqB,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;AAEjD,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,KAAc,EAA0B,EAAE,CAChF,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEvE,MAAM,kBAAkB,GAAG,CAAC,OAA8B,EAAE,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,EAAkB,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC3E,uEAAuE;IACvE,iCAAiC;IACjC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,YAAY,CAAC;IAE9D,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,0EAA0E,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,uBAAuB,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAwB;QACrF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;gBAC3C,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,mDAAmD,OAAO,CAAC,UAAU,EAAE;gBAChF,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACvF,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CACxD,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,mBAAmB,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,GAAG,IAAI,UAAU,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QACrE,MAAM,QAAQ,GAAG,GAAG,IAAI,aAAa,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,GAAG,KAAK,UAAU,CAAC;QACnC,MAAM,SAAS,GAAG,8BAA8B,OAAO,CAAC,UAAU,MAAM,CAAC;QACzE,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,CACb,SAAgC,EAChC,MAAc,EAC+B,EAAE,CAC/C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAyC;YAChD,WAAW,EAAE,MAAM,CAAC,MAAM,CACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC9C,IAAI;gBACJ,GAAG,IAAI,QAAQ;gBACf,GAAG,IAAI,WAAW;aACnB,CAAC,CACH;YACD,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC1F,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC3C,OAAO,KAAK,CAAC,CAAC,aAAa,CACzB,gDAAgD,OAAO,CAAC,MAAM,EAAE,EAChE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CACnC,CAAC;YACJ,CAAC,CAAC;YACF,cAAc,EAAE,MAAM,CAAC,MAAM,CAC3B,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAC/D;YACD,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;SAC9E,CAAC;QAEF,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CACnE,QAAQ,CAAC,EACP,QAAmF,EACnF,IAAiC;YAEjC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE,CAAC,OAAO;aACjB,CAAC,CAAC;YACH,oEAAoE;YACpE,sEAAsE;YACtE,0EAA0E;YAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE;gBACpE,IAAI;gBACJ,oBAAoB;gBACpB,IAAI;gBACJ,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC5C,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wDAAwD,EAAE;gBAC9E,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE;aAC1B,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC,EACD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,mEAAmE,EAAE;YACnF,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,QAAQ;YACR,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACJ,CAAC;QAEF,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO;aAC3C,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,yEAAyE;YACzE,2EAA2E;YAC3E,KAAK,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAC7B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,EAClB,WAAW,CACZ,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CACjC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAClC,mEAAmE;gBACnE,kEAAkE;gBAClE,2DAA2D;gBAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAC9B,iBAAiB,CAAC;oBAChB,OAAO;oBACP,GAAG,EAAE,SAAS;oBACd,IAAI,EAAE,EAAE,CAAC,OAAO;oBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE;oBACpC,GAAG;iBACJ,CAAC,CACH,CAAC,IAAI,CACJ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CACrE,CAAC;gBACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC9B,CAAC,CAAC,CACH,EACD,gBAAgB,EAChB,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CAAC;QACJ,CAAC,CAAC,CACH;aACA,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,aAAa,CAAC,sCAAsC,EAAE,KAAK,CAAC,CACjE,CACF,CAAC;QAEJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,CAAC,EAAuB,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;SAC7E,CAAC;IACJ,CAAC,EAAE,cAAc,CAAC,CAAC;IAEnB,OAAO,QAAQ,CAAC,EAAE,CAAC;QACjB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,SAAS,EAAE,cAAc,CAAC,SAAS;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,oGAAoG;AACpG,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,OAA8B,EACyC,EAAE,CACzE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEtD,OAAO,EACL,sBAAsB,EAEtB,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/dist/exe-dev/grants.d.ts

@@ -1,9 +1,8 @@
-import { Effect } from "effect";
-import { CredentialUnavailableError } from "../index.ts";
+import { Effect, Scope } from "effect";
+import { CredentialUnavailableError } from "../executor.ts";
 import type { ExeDevCommands } from "./commands.ts";
 import { type ExeDevExecutorOptions } from "./model.ts";
 export declare const credentialGrantsFor: (options: ExeDevExecutorOptions, commands: ExeDevCommands) => Effect.Effect<{
-    acquire: (worker: string & import("effect/Brand").Brand<"WorkerName">, repository: string & import("effect/Brand").Brand<"RepoName">, integration: string & import("effect/Brand").Brand<"ExeDevIntegrationName">) => Effect.Effect<void, CredentialUnavailableError, never>;
-    release: (worker: string & import("effect/Brand").Brand<"WorkerName">, integration: string & import("effect/Brand").Brand<"ExeDevIntegrationName">) => Effect.Effect<void, import("../index.ts").ExecutorOperationError, never>;
+    acquire: (attemptId: string & import("effect/Brand").Brand<"AttemptId">, worker: string & import("effect/Brand").Brand<"WorkerName">, repository: string & import("effect/Brand").Brand<"RepositoryName">, integration: string & import("effect/Brand").Brand<"ExeDevIntegrationName">) => Effect.Effect<void, CredentialUnavailableError, Scope.Scope>;
 }, never, never>;
 //# sourceMappingURL=grants.d.ts.map

package/dist/exe-dev/grants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/exe-dev/grants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAO,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,YAAY,CAAC;AAKpB,eAAO,MAAM,mBAAmB;;;gBA6G9B,CAAC"}
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/exe-dev/grants.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAO,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,YAAY,CAAC;AAKpB,eAAO,MAAM,mBAAmB;;gBA2I9B,CAAC"}