@usine/executor 0.2.0 → 0.3.0

package/dist/exe-dev/commands.js

@@ -1,66 +1,20 @@
 import { Effect } from "effect";
-import { ChildProcessSpawner } from "effect/unstable/process";
-import { allowlistedEnvironment, collectCommand, requireSuccess, } from "../child-command.js";
-import { shellCommand } from "./shell.js";
-/**
- * The local SSH client inherits only what SSH itself needs; GitHub and factory
- * credentials from the orchestrator environment never reach it or the VM.
- */
-const SSH_ENVIRONMENT_ALLOWLIST = [
-    "HOME",
-    "LANG",
-    "LC_ALL",
-    "PATH",
-    "SHELL",
-    "SSH_AGENT_PID",
-    "SSH_AUTH_SOCK",
-    "TMPDIR",
-    "USER",
-];
+import { DEFAULT_SSH, remoteCommandsFor, } from "../remote/commands.js";
 export const commandsFor = Effect.fn("ExeDevExecutor.commandsFor")(function* (configuredSsh) {
-    const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
-    const environment = yield* allowlistedEnvironment(SSH_ENVIRONMENT_ALLOWLIST);
-    const ssh = configuredSsh ?? {
-        command: "ssh",
-        // The keepalive pair turns a dead TCP link into a non-zero SSH exit instead
-        // of a silent park, so a lost VM fails the operation.
-        args: ["-o", "BatchMode=yes", "-o", "ServerAliveInterval=30", "-o", "ServerAliveCountMax=4"],
-    };
-    const executeRaw = Effect.fn("ExeDevExecutor.executeRaw")(function* (operation, host, command, args) {
-        yield* Effect.annotateCurrentSpan({ host, operation });
-        return yield* collectCommand(spawner, operation, command, args, {
-            env: environment,
-            extendEnv: false,
-        });
-    });
-    const executeChecked = Effect.fn("ExeDevExecutor.executeChecked")(function* (operation, host, command, args) {
-        const result = yield* executeRaw(operation, host, command, args);
-        return yield* requireSuccess(operation, host, command, args, result);
-    });
-    // Lobby arguments pass unquoted through OpenSSH's argv join, so every value
-    // must be a brand-validated token (WorkerName, IntegrationName,
-    // CredentialGrantMinutes), never free-form text.
-    const lobby = (operation, args) => executeChecked(operation, "exe.dev", ssh.command, [...ssh.args, "exe.dev", ...args]);
+    const shared = yield* remoteCommandsFor;
+    const ssh = configuredSsh ?? DEFAULT_SSH;
+    const childHost = (sshDest) => shared.shellFor(ssh, sshDest);
+    // OpenSSH joins lobby arguments without quoting, so each value must be a brand-validated
+    // token (WorkerName, IntegrationName, CredentialGrantMinutes), never free-form text.
+    const lobby = (operation, args) => shared.local(operation, "exe.dev", ssh.command, [...ssh.args, "exe.dev", ...args]);
     const lobbyJson = (operation, args) => lobby(operation, [...args, "--json"]);
-    const remoteRaw = (operation, sshDest, command, args) => executeRaw(operation, sshDest, ssh.command, [
-        ...ssh.args,
-        sshDest,
-        "--",
-        shellCommand(command, args),
-    ]);
-    const remote = (operation, sshDest, command, args) => executeChecked(operation, sshDest, ssh.command, [
-        ...ssh.args,
-        sshDest,
-        "--",
-        shellCommand(command, args),
-    ]);
     return {
-        environment,
+        shared,
+        childHost,
         lobby,
         lobbyJson,
-        remote,
-        remoteRaw,
-        ssh,
+        remoteRaw: (operation, sshDest, command, args) => shared.inspect(operation, childHost(sshDest), command, args),
+        remote: (operation, sshDest, command, args, context) => shared.run(operation, childHost(sshDest), command, args, context),
     };
 });
 //# sourceMappingURL=commands.js.map

package/dist/exe-dev/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/exe-dev/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA2B1C;;;GAGG;AACH,MAAM,yBAAyB,GAAG;IAChC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,eAAe;IACf,eAAe;IACf,QAAQ;IACR,MAAM;CACE,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC1E,aAA8B;IAE9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,CAAC;IAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,aAAa,IAAI;QAC3B,OAAO,EAAE,KAAK;QACd,4EAA4E;QAC5E,sDAAsD;QACtD,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,uBAAuB,CAAC;KAC7F,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EACjE,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B;QAE3B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9D,GAAG,EAAE,WAAW;YAChB,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACzE,SAA4B,EAC5B,IAAY,EACZ,OAAe,EACf,IAA2B;QAE3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,gEAAgE;IAChE,iDAAiD;IACjD,MAAM,KAAK,GAAG,CACZ,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CACjD,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAEvF,MAAM,SAAS,GAAG,CAChB,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1F,MAAM,SAAS,GAAG,CAChB,SAA4B,EAC5B,OAAuB,EACvB,OAAe,EACf,IAA2B,EAC2B,EAAE,CACxD,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAC1C,GAAG,GAAG,CAAC,IAAI;QACX,OAAO;QACP,IAAI;QACJ,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;KAC5B,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,CACb,SAA4B,EAC5B,OAAuB,EACvB,OAAe,EACf,IAA2B,EACoB,EAAE,CACjD,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;QAC9C,GAAG,GAAG,CAAC,IAAI;QACX,OAAO;QACP,IAAI;QACJ,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC;KAC5B,CAAC,CAAC;IAEL,OAAO;QACL,WAAW;QACX,KAAK;QACL,SAAS;QACT,MAAM;QACN,SAAS;QACT,GAAG;KACqB,CAAC;AAC7B,CAAC,CAAC,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/exe-dev/commands.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,OAAO,EACL,WAAW,EAGX,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AA4B/B,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC1E,aAA0B;IAE1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACxC,MAAM,GAAG,GAAG,aAAa,IAAI,WAAW,CAAC;IACzC,MAAM,SAAS,GAAG,CAAC,OAAuB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE7E,yFAAyF;IACzF,qFAAqF;IACrF,MAAM,KAAK,GAAG,CACZ,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CACjD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAErF,MAAM,SAAS,GAAG,CAChB,SAA4B,EAC5B,IAA2B,EACoB,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE1F,OAAO;QACL,MAAM;QACN,SAAS;QACT,KAAK;QACL,SAAS;QACT,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAC/C,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC;QAC9D,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CACrD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC;KAC3C,CAAC;AAC7B,CAAC,CAAC,CAAC"}

package/dist/exe-dev/exe-dev.d.ts

@@ -1,8 +1,14 @@
+import type { ClaudeLoginLock } from "@usine/agents/runtime";
+import type { AttemptRuntime } from "@usine/durable/attempt-runtime";
 import { Layer } from "effect";
-import { ChildProcessSpawner } from "effect/unstable/process";
+import type { ChildProcessSpawner } from "effect/unstable/process";
 import { Executor } from "../executor.ts";
 import type { ExeDevExecutorOptions } from "./model.ts";
-/** Runs Attempts on exe.dev Workers over SSH. Requires Node; worker contracts are platform-free. */
-export declare const layer: (options: ExeDevExecutorOptions) => Layer.Layer<Executor, never, ChildProcessSpawner.ChildProcessSpawner>;
+/**
+ * The executor for exe.dev Workers. Each Attempt's Pi parent is a durable task in this process
+ * (`AttemptRuntime`), and its children run on the Worker's VM over SSH. A live Attempt
+ * reattaches to its checkout after an orchestrator restart. Requires Node.
+ */
+export declare const layer: (options: ExeDevExecutorOptions) => Layer.Layer<Executor, never, AttemptRuntime | ClaudeLoginLock | ChildProcessSpawner.ChildProcessSpawner>;
 export { CredentialGrantMinutes, type ExeDevExecutorOptions, GitHubIntegration, IntegrationName, } from "./model.ts";
 //# sourceMappingURL=exe-dev.d.ts.map

package/dist/exe-dev/exe-dev.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exe-dev.d.ts","sourceRoot":"","sources":["../../src/exe-dev/exe-dev.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,EAAiB,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAIL,QAAQ,EAGT,MAAM,gBAAgB,CAAC;AAQxB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AA4MxD,oGAAoG;AACpG,eAAO,MAAM,KAAK,YACP,qBAAqB,KAC7B,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,mBAAmB,CAAC,mBAAmB,CAClB,CAAC;AAEtD,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"exe-dev.d.ts","sourceRoot":"","sources":["../../src/exe-dev/exe-dev.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAU,KAAK,EAAU,MAAM,QAAQ,CAAC;AAC/C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAA8B,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAKtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAqFxD;;;;GAIG;AACH,eAAO,MAAM,KAAK,YACP,qBAAqB,KAC7B,KAAK,CAAC,KAAK,CACZ,QAAQ,EACR,KAAK,EACL,cAAc,GAAG,eAAe,GAAG,mBAAmB,CAAC,mBAAmB,CACpB,CAAC;AAEzD,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/dist/exe-dev/exe-dev.js

@@ -1,153 +1,79 @@
-import { RepositoryName } from "@usine/core/repository";
-import { Effect, Exit, Layer, Schema, Scope } from "effect";
-import { ChildProcessSpawner } from "effect/unstable/process";
-import { CheckoutRequest, CredentialUnavailableError, Executor, ExecutorError, ExecutorOperationError, } from "../executor.js";
-import { verifyHarnesses } from "../harness-preflight.js";
-import { prepareAttempt } from "../prepared-attempt.js";
-import { keyedLockFor } from "../keyed-lock.js";
-import { provisionWorktree, safeSegment } from "../provision.js";
-import { attemptChannelFor } from "./channel.js";
+import { RepositoryName, safeSegment } from "@usine/core/repository";
+import { Effect, Layer, Option } from "effect";
+import { CredentialUnavailableError, Executor } from "../executor.js";
+import { remoteExecutorFor } from "../remote/remote.js";
 import { commandsFor } from "./commands.js";
 import { credentialGrantsFor } from "./grants.js";
 import { preflightFor } from "./preflight.js";
-import { RUN_HOST_KILL_SCRIPT, runHostPidFile } from "./shell.js";
-import { abandonedWorktreeSweepFor } from "./sweep.js";
-const isExecutorError = Schema.is(ExecutorError);
-const executorError = (message, cause) => new ExecutorOperationError({ operation: "prepare", message, cause });
+/** The host for which the exe.dev edge injects the GitHub credential. */
+const EDGE_GITHUB_HOST = "github.int.exe.xyz";
+/**
+ * Returns the environment for every child and harvesting command on the VM. It contains no
+ * secrets; the exe.dev edge injects the credential (ADR 0011).
+ */
+const edgeAccess = (machine) => ({
+    shell: machine.shell,
+    environment: { GH_HOST: EDGE_GITHUB_HOST },
+    gitEnvironment: {},
+    refresh: Effect.void,
+    scrub: (text) => text,
+});
 const makeExeDevExecutor = (options) => Effect.gen(function* () {
     const commands = yield* commandsFor(options.ssh);
-    const fetches = yield* keyedLockFor();
     const integrations = new Map(options.githubIntegrations.map(({ name, repository }) => [repository, name]));
     const integrationNames = new Set(options.githubIntegrations.map(({ name }) => name));
-    const runHost = options.runHost ?? { command: "usine-run-host", args: [] };
-    // The grace covers an SSH round trip plus the agent flushing its final
-    // events, not just a local pipe.
-    const interruptGrace = options.interruptGrace ?? "10 seconds";
     if (integrations.size !== options.githubIntegrations.length) {
         return yield* Effect.die(new Error("ExeDevExecutorOptions.githubIntegrations contains duplicate repositories"));
     }
     if (integrationNames.size !== options.githubIntegrations.length) {
         return yield* Effect.die(new Error("ExeDevExecutorOptions.githubIntegrations contains duplicate integration names"));
     }
-    const machines = yield* preflightFor(options, commands, runHost);
+    const machines = yield* preflightFor(options, commands);
     const credentialGrants = yield* credentialGrantsFor(options, commands);
-    const sweepAbandonedWorktrees = yield* abandonedWorktreeSweepFor(commands);
-    const attemptChannel = yield* attemptChannelFor(commands, runHost, interruptGrace);
-    const prepare = Effect.fn("ExeDevExecutor.prepare")(function* (request) {
-        yield* Effect.annotateCurrentSpan({
-            attemptId: request.attemptId,
-            worker: request.worker,
-            repository: request.repository,
-        });
-        const integration = integrations.get(request.repository);
-        if (integration === undefined) {
+    const machineFor = Effect.fn("ExeDevExecutor.machineFor")(function* (worker) {
+        const vm = yield* machines.vmFor(worker);
+        return {
+            shell: commands.childHost(vm.sshDest),
+            workerDirectory: `${vm.home}/.usine/workers/${safeSegment(worker)}`,
+        };
+    });
+    const grantFor = Effect.fn("ExeDevExecutor.grantFor")(function* (repository) {
+        const integration = integrations.get(repository);
+        if (integration === undefined)
             return yield* new CredentialUnavailableError({
-                repository: request.repository,
-                message: `No exe.dev GitHub integration is configured for ${request.repository}`,
+                repository,
+                reason: "refused",
+                message: `No exe.dev GitHub integration is configured for ${repository}`,
                 cause: new Error("repository integration missing"),
             });
-        }
-        const vm = yield* machines.vmFor(request.worker);
-        yield* verifyHarnesses(request.worker, [request.agent.brain], runHost, (command, args) => commands.remote("preflight", vm.sshDest, command, args));
-        const root = `${vm.home}/.usine/workers/${safeSegment(request.worker)}`;
-        const cache = `${root}/repos/${safeSegment(request.repository)}.git`;
-        const worktree = `${root}/attempts/${safeSegment(request.attemptId)}`;
-        const staging = `${cache}.cloning`;
-        const remoteUrl = `https://github.int.exe.xyz/${request.repository}.git`;
-        yield* Effect.annotateCurrentSpan({ host: vm.sshDest });
-        yield* sweepAbandonedWorktrees(request.attemptId, request.worker, vm, root);
-        const remove = (operation, target) => Effect.asVoid(commands.remote(operation, vm.sshDest, "rm", ["-rf", target]));
-        const ops = {
-            ensureRoots: Effect.asVoid(commands.remote("prepare", vm.sshDest, "mkdir", [
-                "-p",
-                `${root}/repos`,
-                `${root}/attempts`,
-            ])),
-            removePath: remove,
-            cacheExists: Effect.gen(function* () {
-                const inspected = yield* commands.remoteRaw("prepare", vm.sshDest, "test", ["-d", cache]);
-                if (inspected.exitCode === 0)
-                    return true;
-                if (inspected.exitCode === 1)
-                    return false;
-                return yield* executorError(`Could not inspect the cached clone on Worker ${request.worker}`, new Error(inspected.stderr.trim()));
-            }),
-            promoteStaging: Effect.asVoid(commands.remote("prepare", vm.sshDest, "mv", [staging, cache])),
-            git: (operation, args) => commands.remote(operation, vm.sshDest, "git", args),
-        };
-        const releaseWorkspace = Effect.fn("ExeDevExecutor.releaseWorkspace")(function* (resource, exit) {
-            yield* Effect.annotateCurrentSpan({
-                attemptId: request.attemptId,
-                worker: request.worker,
-                host: vm.sshDest,
-            });
-            // The remote run host and its checkout form one cleanup dependency:
-            // an SSH exit does not prove the process on the VM has stopped. Never
-            // close the checkout scope unless this independent stop request succeeds.
-            const confirmed = yield* commands.remote("cleanup", vm.sshDest, "sh", [
-                "-c",
-                RUN_HOST_KILL_SCRIPT,
-                "sh",
-                runHostPidFile(resource.workspace.worktree),
-            ]);
-            yield* Effect.logInfo("Confirmed the remote run host before workspace removal", {
-                attemptId: request.attemptId,
-                worker: request.worker,
-                host: vm.sshDest,
-                runHost: confirmed.trim(),
-            });
-            yield* Scope.close(resource.scope, exit);
-        }, (effect) => effect.pipe(Effect.tapError((error) => Effect.logError("Remote termination failed; Attempt checkout retained for recovery", {
-            attemptId: request.attemptId,
-            worker: request.worker,
-            host: vm.sshDest,
-            worktree,
-            message: error.message,
-        })), Effect.ignore));
-        const { workspace: prepared } = yield* fetches
-            .withLock(request.repository)(Effect.gen(function* () {
-            // Credentials belong to the Attempt scope independently of the checkout:
-            // refusing destructive cleanup must still release this grant exactly once.
-            yield* credentialGrants.acquire(request.attemptId, request.worker, request.repository, integration);
-            return yield* Effect.acquireRelease(Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
-                const scope = yield* Scope.make();
-                // Before preparation succeeds no run host can exist. Roll back the
-                // partial checkout unconditionally; only a completed workspace is
-                // transferred to the guarded remote-process release above.
-                const workspace = yield* restore(provisionWorktree({
-                    request,
-                    url: remoteUrl,
-                    host: vm.sshDest,
-                    layout: { cache, staging, worktree },
-                    ops,
-                })).pipe(Scope.provide(scope), Effect.onError((cause) => Scope.close(scope, Exit.failCause(cause))));
-                return { workspace, scope };
-            })), releaseWorkspace, { interruptible: true });
-        }))
-            .pipe(Effect.mapError((cause) => isExecutorError(cause)
-            ? cause
-            : executorError("exe.dev workspace preparation failed", cause)));
-        yield* Effect.logInfo("exe.dev Attempt workspace ready", {
-            attemptId: request.attemptId,
-            worker: request.worker,
-            host: vm.sshDest,
-            repository: request.repository,
-            baseCommit: prepared.spec.baseCommit,
-            worktree,
-        });
         return {
-            workspace: prepared,
-            launch: (io) => attemptChannel.launch(prepared, vm, io),
+            acquire: (attemptId, worker, _permissions, machine) => credentialGrants
+                .acquire(attemptId, worker, repository, integration)
+                .pipe(Effect.as(edgeAccess(machine))),
         };
-    }, prepareAttempt);
-    return Executor.of({
+    });
+    return yield* remoteExecutorFor({
         kind: "exe.dev",
-        cancel: attemptChannel.cancel,
+        spanPrefix: "ExeDevExecutor",
+        label: "exe.dev",
+        commands: commands.shared,
+        machineFor,
         preflight: machines.preflight,
-        prepare,
+        harnessProbe: (machine) => machines.harnessProbe(machine.shell),
+        repositoryUrl: (_machine, repository) => `https://${EDGE_GITHUB_HOST}/${repository}.git`,
+        // exe.dev Workers have no Gateway; every harness uses its own login.
+        gatewayCredential: () => Effect.succeedNone,
+        grantFor,
+        readOnlyAccessGap: Option.some("An exe.dev GitHub integration has the access of exe.dev's GitHub App, which can't be limited to read-only"),
+        reclaim: () => Effect.void,
+        interruptGrace: options.interruptGrace ?? "10 seconds",
     });
 });
-/** Runs Attempts on exe.dev Workers over SSH. Requires Node; worker contracts are platform-free. */
+/**
+ * The executor for exe.dev Workers. Each Attempt's Pi parent is a durable task in this process
+ * (`AttemptRuntime`), and its children run on the Worker's VM over SSH. A live Attempt
+ * reattaches to its checkout after an orchestrator restart. Requires Node.
+ */
 export const layer = (options) => Layer.effect(Executor, makeExeDevExecutor(options));
 export { CredentialGrantMinutes, GitHubIntegration, IntegrationName, } from "./model.js";
 //# sourceMappingURL=exe-dev.js.map

package/dist/exe-dev/exe-dev.js.map

@@ -1 +1 @@
-{"version":3,"file":"exe-dev.js","sourceRoot":"","sources":["../../src/exe-dev/exe-dev.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAEL,eAAe,EACf,0BAA0B,EAC1B,QAAQ,EACR,aAAa,EACb,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAqB,MAAM,iBAAiB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;AAEjD,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,KAAc,EAA0B,EAAE,CAChF,IAAI,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEvE,MAAM,kBAAkB,GAAG,CAAC,OAA8B,EAAE,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,EAAkB,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC3E,uEAAuE;IACvE,iCAAiC;IACjC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,YAAY,CAAC;IAE9D,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,0EAA0E,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,uBAAuB,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAwB;QACrF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;gBAC3C,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,mDAAmD,OAAO,CAAC,UAAU,EAAE;gBAChF,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACvF,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CACxD,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,mBAAmB,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,GAAG,IAAI,UAAU,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QACrE,MAAM,QAAQ,GAAG,GAAG,IAAI,aAAa,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,GAAG,KAAK,UAAU,CAAC;QACnC,MAAM,SAAS,GAAG,8BAA8B,OAAO,CAAC,UAAU,MAAM,CAAC;QACzE,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,CACb,SAAgC,EAChC,MAAc,EAC+B,EAAE,CAC/C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,GAAG,GAAyC;YAChD,WAAW,EAAE,MAAM,CAAC,MAAM,CACxB,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC9C,IAAI;gBACJ,GAAG,IAAI,QAAQ;gBACf,GAAG,IAAI,WAAW;aACnB,CAAC,CACH;YACD,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC1F,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC1C,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC3C,OAAO,KAAK,CAAC,CAAC,aAAa,CACzB,gDAAgD,OAAO,CAAC,MAAM,EAAE,EAChE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CACnC,CAAC;YACJ,CAAC,CAAC;YACF,cAAc,EAAE,MAAM,CAAC,MAAM,CAC3B,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAC/D;YACD,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;SAC9E,CAAC;QAEF,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CACnE,QAAQ,CAAC,EACP,QAAmF,EACnF,IAAiC;YAEjC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE,CAAC,OAAO;aACjB,CAAC,CAAC;YACH,oEAAoE;YACpE,sEAAsE;YACtE,0EAA0E;YAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE;gBACpE,IAAI;gBACJ,oBAAoB;gBACpB,IAAI;gBACJ,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC5C,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wDAAwD,EAAE;gBAC9E,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE,CAAC,OAAO;gBAChB,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE;aAC1B,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC,EACD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,mEAAmE,EAAE;YACnF,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,QAAQ;YACR,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACJ,CAAC;QAEF,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,OAAO;aAC3C,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,yEAAyE;YACzE,2EAA2E;YAC3E,KAAK,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAC7B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,EAClB,WAAW,CACZ,CAAC;YACF,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CACjC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAClC,mEAAmE;gBACnE,kEAAkE;gBAClE,2DAA2D;gBAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAC9B,iBAAiB,CAAC;oBAChB,OAAO;oBACP,GAAG,EAAE,SAAS;oBACd,IAAI,EAAE,EAAE,CAAC,OAAO;oBAChB,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE;oBACpC,GAAG;iBACJ,CAAC,CACH,CAAC,IAAI,CACJ,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CACrE,CAAC;gBACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAC9B,CAAC,CAAC,CACH,EACD,gBAAgB,EAChB,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CAAC;QACJ,CAAC,CAAC,CACH;aACA,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,KAAK,CAAC;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,aAAa,CAAC,sCAAsC,EAAE,KAAK,CAAC,CACjE,CACF,CAAC;QAEJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iCAAiC,EAAE;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,EAAE,CAAC,OAAO;YAChB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU;YACpC,QAAQ;SACT,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,CAAC,EAAuB,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;SAC7E,CAAC;IACJ,CAAC,EAAE,cAAc,CAAC,CAAC;IAEnB,OAAO,QAAQ,CAAC,EAAE,CAAC;QACjB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,oGAAoG;AACpG,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,OAA8B,EACyC,EAAE,CACzE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEtD,OAAO,EACL,sBAAsB,EAEtB,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"exe-dev.js","sourceRoot":"","sources":["../../src/exe-dev/exe-dev.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE/C,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,yEAAyE;AACzE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,OAAsB,EAAgB,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,OAAO,CAAC,KAAK;IACpB,WAAW,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;IAC1C,cAAc,EAAE,EAAE;IAClB,OAAO,EAAE,MAAM,CAAC,IAAI;IACpB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI;CACtB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,OAA8B,EAAE,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAErF,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,0EAA0E,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,KAAK,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACtB,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEvE,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAkB;QACrF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC;YACrC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,mBAAmB,WAAW,CAAC,MAAM,CAAC,EAAE;SAC5C,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,UAA0B;QACzF,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,WAAW,KAAK,SAAS;YAC3B,OAAO,KAAK,CAAC,CAAC,IAAI,0BAA0B,CAAC;gBAC3C,UAAU;gBACV,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,mDAAmD,UAAU,EAAE;gBACxE,KAAK,EAAE,IAAI,KAAK,CAAC,gCAAgC,CAAC;aACnD,CAAC,CAAC;QACL,OAAO;YACL,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CACpD,gBAAgB;iBACb,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC;iBACnD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;SACL,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAgB;QAC7C,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,gBAAgB;QAC5B,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,UAAU;QACV,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;QAC/D,aAAa,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,WAAW,gBAAgB,IAAI,UAAU,MAAM;QACxF,qEAAqE;QACrE,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW;QAC3C,QAAQ;QACR,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAC5B,2GAA2G,CAC5G;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,YAAY;KACvD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,OAA8B,EAK9B,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEzD,OAAO,EACL,sBAAsB,EAEtB,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC"}

package/dist/exe-dev/grants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/exe-dev/grants.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAO,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,YAAY,CAAC;AAKpB,eAAO,MAAM,mBAAmB;;gBA2I9B,CAAC"}
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/exe-dev/grants.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAO,KAAK,EAAY,MAAM,QAAQ,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,YAAY,CAAC;AAOpB,eAAO,MAAM,mBAAmB;;gBA0K9B,CAAC"}

package/dist/exe-dev/grants.js

@@ -1,10 +1,11 @@
 import { AttemptId } from "@usine/core/attempt";
 import { RepositoryName } from "@usine/core/repository";
 import { WorkerName } from "@usine/core/worker";
-import { Effect, Ref, Scope } from "effect";
+import { Effect, Ref, Scope, Schedule } from "effect";
 import { CredentialUnavailableError } from "../executor.js";
 import { keyedLockFor } from "../keyed-lock.js";
 import { CredentialGrantMinutes, } from "./model.js";
+const RENEWAL_RETRY_INTERVAL = "1 minute";
 const grantKey = (worker, integration) => `${worker} ${integration}`;
 export const credentialGrantsFor = Effect.fn("ExeDevExecutor.credentialGrantsFor")(function* (options, commands) {
     const locks = yield* keyedLockFor();
@@ -14,11 +15,18 @@ export const credentialGrantsFor = Effect.fn("ExeDevExecutor.credentialGrantsFor
         yield* Effect.annotateCurrentSpan({ attemptId, worker, repository, integration });
         const scope = yield* Effect.scope;
         const key = grantKey(worker, integration);
+        const attach = commands.lobby("prepare", [
+            "integrations",
+            "attach",
+            integration,
+            `vm:${worker}`,
+            "--for",
+            `${grantMinutes}m`,
+        ]);
         yield* locks.withLock(key)(Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
             const current = (yield* Ref.get(counts)).get(key) ?? 0;
-            // Own a reference before attempting the attachment: a failed SSH reply
-            // may still mean the edge accepted it. This reservation is released once
-            // by this scope, and never borrows a sibling's reference on interruption.
+            // Counts the reference before attaching, because a failed SSH reply can still mean the edge
+            // accepted the attachment. This scope's finalizer releases it exactly once.
             yield* Ref.update(counts, (currentCounts) => new Map(currentCounts).set(key, current + 1));
             yield* Scope.addFinalizer(scope, release(attemptId, worker, integration).pipe(Effect.tapError((error) => Effect.logError("Attempt credential cleanup failed", {
                 attemptId,
@@ -27,18 +35,10 @@ export const credentialGrantsFor = Effect.fn("ExeDevExecutor.credentialGrantsFor
                 integration,
                 message: error.message,
             })), Effect.ignore));
-            yield* restore(commands
-                .lobby("prepare", [
-                "integrations",
-                "attach",
-                integration,
-                `vm:${worker}`,
-                "--for",
-                `${grantMinutes}m`,
-            ])
-                .pipe(Effect.mapError((cause) => new CredentialUnavailableError({
+            yield* restore(attach.pipe(Effect.mapError((cause) => new CredentialUnavailableError({
                 repository,
-                message: `Could not attach exe.dev GitHub integration ${integration}`,
+                reason: "unreachable",
+                message: `Can't attach exe.dev GitHub integration "${integration}"`,
                 cause,
             }))));
             yield* Effect.logInfo("Attached or refreshed time-boxed exe.dev GitHub integration", {
@@ -50,6 +50,26 @@ export const credentialGrantsFor = Effect.fn("ExeDevExecutor.credentialGrantsFor
                 activeGrants: current + 1,
             });
         })));
+        // Renews at half the grant length until the scope closes and retries a failed renewal every
+        // minute. Finalizers stop this fiber before releasing the reference, after checkout cleanup.
+        const renew = Effect.fn("ExeDevExecutor.renewGrant")(function* () {
+            yield* Effect.annotateCurrentSpan({ attemptId, worker, repository, integration });
+            yield* locks.withLock(key)(attach);
+            yield* Effect.logInfo("Renewed exe.dev credential grant", {
+                attemptId,
+                worker,
+                repository,
+                integration,
+                grantMinutes,
+            });
+        });
+        yield* Effect.forever(Effect.sleep(`${grantMinutes * 30} seconds`).pipe(Effect.andThen(renew().pipe(Effect.tapError((error) => Effect.logError("Credential grant renewal failed; retrying in one minute", {
+            attemptId,
+            worker,
+            repository,
+            integration,
+            message: error.message,
+        })), Effect.retry(Schedule.spaced(RENEWAL_RETRY_INTERVAL)))), Effect.ignore)).pipe(Effect.forkScoped);
     });
     const release = Effect.fn("ExeDevExecutor.releaseGrant")(function* (attemptId, worker, integration) {
         yield* Effect.annotateCurrentSpan({ attemptId, worker, integration });

package/dist/exe-dev/grants.js.map

@@ -1 +1 @@
-{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/exe-dev/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EACL,sBAAsB,GAGvB,MAAM,YAAY,CAAC;AAEpB,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAE,WAA4B,EAAU,EAAE,CAC5E,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC1F,OAA8B,EAC9B,QAAwB;IAExB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAU,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAkB,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,sBAAsB,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEvF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAChE,SAAoB,EACpB,MAAkB,EAClB,UAA0B,EAC1B,WAA4B;QAE5B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxB,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,uEAAuE;YACvE,yEAAyE;YACzE,0EAA0E;YAC1E,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CAC1C,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC,CAC7C,CAAC;YACF,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CACvB,KAAK,EACL,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE;gBACnD,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,WAAW;gBACX,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC;YACF,KAAK,CAAC,CAAC,OAAO,CACZ,QAAQ;iBACL,KAAK,CAAC,SAAS,EAAE;gBAChB,cAAc;gBACd,QAAQ;gBACR,WAAW;gBACX,MAAM,MAAM,EAAE;gBACd,OAAO;gBACP,GAAG,YAAY,GAAG;aACnB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,0BAA0B,CAAC;gBAC7B,UAAU;gBACV,OAAO,EAAE,+CAA+C,WAAW,EAAE;gBACrE,KAAK;aACN,CAAC,CACL,CACF,CACJ,CAAC;YACF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6DAA6D,EAAE;gBACnF,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,WAAW;gBACX,YAAY;gBACZ,YAAY,EAAE,OAAO,GAAG,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAChE,SAAoB,EACpB,MAAkB,EAClB,WAA4B;QAE5B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,yCAAyC,EAAE;oBAChE,SAAS;oBACT,MAAM;oBACN,WAAW;iBACZ,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE;oBAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;oBACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC3B,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,4CAA4C,EAAE;oBACnE,SAAS;oBACT,MAAM;oBACN,WAAW;oBACX,YAAY,EAAE,OAAO,GAAG,CAAC;iBAC1B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,KAAK,CAAC,CAAC,QAAQ;iBACZ,KAAK,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;iBACzE,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,iDAAiD,EAAE;gBACnE,SAAS;gBACT,MAAM;gBACN,WAAW;gBACX,YAAY;gBACZ,KAAK,EAAE,sCAAsC,YAAY,oBAAoB;gBAC7E,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CACb,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE;gBACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CACH,CACF,CAAC;YACJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;gBAC3D,SAAS;gBACT,MAAM;gBACN,WAAW;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/exe-dev/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EACL,sBAAsB,GAGvB,MAAM,YAAY,CAAC;AAEpB,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAE1C,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAE,WAA4B,EAAU,EAAE,CAC5E,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC;AAE7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC1F,OAA8B,EAC9B,QAAwB;IAExB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAU,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAkB,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,sBAAsB,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEvF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAChE,SAAoB,EACpB,MAAkB,EAClB,UAA0B,EAC1B,WAA4B;QAE5B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE;YACvC,cAAc;YACd,QAAQ;YACR,WAAW;YACX,MAAM,MAAM,EAAE;YACd,OAAO;YACP,GAAG,YAAY,GAAG;SACnB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxB,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,4FAA4F;YAC5F,4EAA4E;YAC5E,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CAC1C,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC,CAC7C,CAAC;YACF,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CACvB,KAAK,EACL,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE;gBACnD,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,WAAW;gBACX,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC;YACF,KAAK,CAAC,CAAC,OAAO,CACZ,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,0BAA0B,CAAC;gBAC7B,UAAU;gBACV,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,4CAA4C,WAAW,GAAG;gBACnE,KAAK;aACN,CAAC,CACL,CACF,CACF,CAAC;YACF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6DAA6D,EAAE;gBACnF,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,WAAW;gBACX,YAAY;gBACZ,YAAY,EAAE,OAAO,GAAG,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CACF,CAAC;QACF,4FAA4F;QAC5F,6FAA6F;QAC7F,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC;YAC5D,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YAClF,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YACnC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,kCAAkC,EAAE;gBACxD,SAAS;gBACT,MAAM;gBACN,UAAU;gBACV,WAAW;gBACX,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,CAC/C,MAAM,CAAC,OAAO,CACZ,KAAK,EAAE,CAAC,IAAI,CACV,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,QAAQ,CAAC,yDAAyD,EAAE;YACzE,SAAS;YACT,MAAM;YACN,UAAU;YACV,WAAW;YACX,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,EACD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CACtD,CACF,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAChE,SAAoB,EACpB,MAAkB,EAClB,WAA4B;QAE5B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAClB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,yCAAyC,EAAE;oBAChE,SAAS;oBACT,MAAM;oBACN,WAAW;iBACZ,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE;oBAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;oBACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC3B,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,4CAA4C,EAAE;oBACnE,SAAS;oBACT,MAAM;oBACN,WAAW;oBACX,YAAY,EAAE,OAAO,GAAG,CAAC;iBAC1B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,KAAK,CAAC,CAAC,QAAQ;iBACZ,KAAK,CAAC,SAAS,EAAE,CAAC,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;iBACzE,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,iDAAiD,EAAE;gBACnE,SAAS;gBACT,MAAM;gBACN,WAAW;gBACX,YAAY;gBACZ,KAAK,EAAE,sCAAsC,YAAY,oBAAoB;gBAC7E,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CACb,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE;gBACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CACH,CACF,CAAC;YACJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,qCAAqC,EAAE;gBAC3D,SAAS;gBACT,MAAM;gBACN,WAAW;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/exe-dev/model.d.ts

@@ -1,38 +1,34 @@
+import type { SshDestination } from "@usine/core/worker";
 import { Schema, type Effect } from "effect";
-import type { RunHostCommand } from "../executor.ts";
-/** The name of one exe.dev edge-injected integration. */
+import type { SshCommand } from "@usine/agents/child-host";
 export declare const IntegrationName: Schema.brand<Schema.String, "ExeDevIntegrationName">;
 export type IntegrationName = typeof IntegrationName.Type;
-/**
- * An SSH destination handed to the local `ssh` client as argv, so anything
- * that could read as an option (`-oProxyCommand=...`) is unrepresentable.
- */
-export declare const SshDestination: Schema.brand<Schema.String, "ExeDevSshDestination">;
-export type SshDestination = typeof SshDestination.Type;
-/** An absolute remote home directory that cannot smuggle bytes past shell quoting. */
+/** An absolute remote home directory path without NUL, CR, or LF bytes. */
 export declare const HomePath: Schema.brand<Schema.String, "ExeDevHomePath">;
 export type HomePath = typeof HomePath.Type;
 declare const GitHubIntegration_base: Schema.Class<GitHubIntegration, Schema.Struct<{
+    /** Must be unique across integrations. */
     readonly repository: Schema.brand<Schema.String, "RepositoryName">;
+    /**
+     * The integration name on exe.dev, unique in the options. Each Attempt attaches it to the
+     * Worker's VM for `credentialGrantMinutes`.
+     */
     readonly name: Schema.brand<Schema.String, "ExeDevIntegrationName">;
 }>, {}>;
-/** One standing exe.dev GitHub integration; only its VM attachment is per Attempt. */
+/** An existing exe.dev GitHub integration, attached to the Worker's VM per Attempt. */
 export declare class GitHubIntegration extends GitHubIntegration_base {
 }
-/** How long an exe.dev Worker's repository credential attachment may remain active, in minutes. */
+/** The duration of one credential attachment, in minutes. */
 export declare const CredentialGrantMinutes: Schema.brand<Schema.Int, "ExeDevCredentialGrantMinutes">;
 export type CredentialGrantMinutes = typeof CredentialGrantMinutes.Type;
-/** Repository access and run-host settings for the configured exe.dev Workers. */
 export interface ExeDevExecutorOptions {
-    /** Existing native GitHub integrations, one per repository this Worker may receive. */
+    /** Existing exe.dev GitHub integrations, one per repository. */
     readonly githubIntegrations: ReadonlyArray<GitHubIntegration>;
-    /** Installed in the baked image; defaults to the published worker executable. */
-    readonly runHost?: RunHostCommand;
-    /** Local SSH executable and its control-plane-only arguments. */
-    readonly ssh?: RunHostCommand;
-    /** Time-box for the edge credential attachment. Defaults to 65 minutes. */
+    /** The local SSH command for lobby, VM, and child commands. */
+    readonly ssh?: SshCommand;
+    /** The length of each credential attachment, in minutes, renewed at half this length. Defaults to 65. */
     readonly credentialGrantMinutes?: CredentialGrantMinutes;
-    /** Grace for delivering a stop request, then for the run host to exit; each wait is bounded separately. Defaults to 10 seconds. */
+    /** The timeout for the parent task's cancellation, then separately for the Attempt to finish. Defaults to 10 seconds. */
     readonly interruptGrace?: Parameters<typeof Effect.timeoutOption>[1];
 }
 export interface VmState {

package/dist/exe-dev/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,yDAAyD;AACzD,eAAO,MAAM,eAAe,sDAIiB,CAAC;AAC9C,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,cAAc,qDAIiB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAC;AAExD,sFAAsF;AACtF,eAAO,MAAM,QAAQ,+CAIiB,CAAC;AACvC,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;;;;;AAE5C,sFAAsF;AACtF,qBAAa,iBAAkB,SAAQ,sBAKrC;CAAG;AAEL,mGAAmG;AACnG,eAAO,MAAM,sBAAsB,0DAElC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAC;AAExE,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC9D,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,mIAAmI;IACnI,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D,eAAO,MAAM,eAAe,sDAKiB,CAAC;AAC9C,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAC;AAE1D,2EAA2E;AAC3E,eAAO,MAAM,QAAQ,+CAIiB,CAAC;AACvC,MAAM,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC;;IAM1C,0CAA0C;;IAE1C;;;OAGG;;;AATL,uFAAuF;AACvF,qBAAa,iBAAkB,SAAQ,sBAUrC;CAAG;AAEL,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,0DAElC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,gEAAgE;IAChE,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAC9D,+DAA+D;IAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,yGAAyG;IACzG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,yHAAyH;IACzH,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;CAClC"}

package/dist/exe-dev/model.js

@@ -1,26 +1,23 @@
 import { RepositoryName } from "@usine/core/repository";
 import { Schema } from "effect";
-/** The name of one exe.dev edge-injected integration. */
 export const IntegrationName = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9]+(?:[._-][A-Za-z0-9]+)*$/u, {
-    message: "Expected an exe.dev integration name safe for the lobby command boundary",
+    message: "Expected an exe.dev integration name of letters and digits, separated by single dots, underscores, or hyphens",
 })).pipe(Schema.brand("ExeDevIntegrationName"));
-/**
- * An SSH destination handed to the local `ssh` client as argv, so anything
- * that could read as an option (`-oProxyCommand=...`) is unrepresentable.
- */
-export const SshDestination = Schema.String.check(Schema.isPattern(/^(?:[A-Za-z0-9._-]+@)?[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/u, {
-    message: "Expected an exe.dev SSH hostname, optionally prefixed by a user",
-})).pipe(Schema.brand("ExeDevSshDestination"));
-/** An absolute remote home directory that cannot smuggle bytes past shell quoting. */
+/** An absolute remote home directory path without NUL, CR, or LF bytes. */
 export const HomePath = Schema.String.check(Schema.isPattern(/^\/[^\0\r\n]*$/u, {
     message: "Expected an absolute remote home directory without control bytes",
 })).pipe(Schema.brand("ExeDevHomePath"));
-/** One standing exe.dev GitHub integration; only its VM attachment is per Attempt. */
+/** An existing exe.dev GitHub integration, attached to the Worker's VM per Attempt. */
 export class GitHubIntegration extends Schema.Class("@usine/executor/ExeDevGitHubIntegration")({
+    /** Must be unique across integrations. */
     repository: RepositoryName,
+    /**
+     * The integration name on exe.dev, unique in the options. Each Attempt attaches it to the
+     * Worker's VM for `credentialGrantMinutes`.
+     */
     name: IntegrationName,
 }) {
 }
-/** How long an exe.dev Worker's repository credential attachment may remain active, in minutes. */
+/** The duration of one credential attachment, in minutes. */
 export const CredentialGrantMinutes = Schema.Int.check(Schema.isGreaterThanOrEqualTo(1)).pipe(Schema.brand("ExeDevCredentialGrantMinutes"));
 //# sourceMappingURL=model.js.map

package/dist/exe-dev/model.js.map

@@ -1 +1 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAG7C,yDAAyD;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAChD,MAAM,CAAC,SAAS,CAAC,uCAAuC,EAAE;IACxD,OAAO,EAAE,0EAA0E;CACpF,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAG9C;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAC/C,MAAM,CAAC,SAAS,CAAC,mEAAmE,EAAE;IACpF,OAAO,EAAE,iEAAiE;CAC3E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAG7C,sFAAsF;AACtF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACzC,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE;IAClC,OAAO,EAAE,kEAAkE;CAC5E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvC,sFAAsF;AACtF,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,KAAK,CACjD,yCAAyC,CAC1C,CAAC;IACA,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,eAAe;CACtB,CAAC;CAAG;AAEL,mGAAmG;AACnG,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3F,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAC7C,CAAC"}
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../src/exe-dev/model.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAG7C,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAChD,MAAM,CAAC,SAAS,CAAC,uCAAuC,EAAE;IACxD,OAAO,EACL,+GAA+G;CAClH,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAG9C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CACzC,MAAM,CAAC,SAAS,CAAC,iBAAiB,EAAE;IAClC,OAAO,EAAE,kEAAkE;CAC5E,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGvC,uFAAuF;AACvF,MAAM,OAAO,iBAAkB,SAAQ,MAAM,CAAC,KAAK,CACjD,yCAAyC,CAC1C,CAAC;IACA,0CAA0C;IAC1C,UAAU,EAAE,cAAc;IAC1B;;;OAGG;IACH,IAAI,EAAE,eAAe;CACtB,CAAC;CAAG;AAEL,6DAA6D;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3F,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAC7C,CAAC"}

package/dist/exe-dev/preflight.d.ts

@@ -1,10 +1,14 @@
+import type { RemoteShell } from "@usine/agents/child-host";
+import { ClaudeLoginLock } from "@usine/agents/runtime";
 import type { BrainSpec } from "@usine/core/agent/brain";
 import { Effect } from "effect";
-import { ExecutorOperationError, type RunHostCommand, WorkerCapabilityError } from "../executor.ts";
+import { ChildProcessSpawner } from "effect/unstable/process";
+import { ExecutorOperationError, WorkerCapabilityError } from "../executor.ts";
 import type { ExeDevCommands } from "./commands.ts";
 import { type ExeDevExecutorOptions, type VmState } from "./model.ts";
-export declare const preflightFor: (options: ExeDevExecutorOptions, commands: ExeDevCommands, runHost: RunHostCommand) => Effect.Effect<{
-    preflight: (worker: string & import("effect/Brand").Brand<"WorkerName">, brains: readonly BrainSpec[]) => Effect.Effect<undefined, import("../executor.ts").CredentialUnavailableError | ExecutorOperationError | WorkerCapabilityError, never>;
+export declare const preflightFor: (options: ExeDevExecutorOptions, commands: ExeDevCommands) => Effect.Effect<{
+    preflight: (worker: string & import("effect/Brand").Brand<"WorkerName">, brains: readonly BrainSpec[], maxConcurrentAttempts: number) => Effect.Effect<undefined, import("../executor.ts").CredentialUnavailableError | ExecutorOperationError | WorkerCapabilityError, never>;
     vmFor: (worker: string & import("effect/Brand").Brand<"WorkerName">) => Effect.Effect<VmState, ExecutorOperationError | WorkerCapabilityError, never>;
-}, never, never>;
+    harnessProbe: (shell: RemoteShell) => import("../harness-preflight.ts").HarnessProbe;
+}, never, ChildProcessSpawner.ChildProcessSpawner | ClaudeLoginLock>;
 //# sourceMappingURL=preflight.d.ts.map