@usine/executor 0.2.0 → 0.3.0

package/dist/memory-preflight.d.ts

@@ -0,0 +1,25 @@
+import { Effect, Schema } from "effect";
+import { type ExecutorOperationError, WorkerCapabilityError } from "./executor.ts";
+/** Swap that the OS allocates on demand, as on macOS. */
+export declare const SwapOnDemand: Schema.TaggedStruct<"SwapOnDemand", {}>;
+declare const WorkerMemory_base: Schema.Class<WorkerMemory, Schema.Struct<{
+    readonly totalBytes: Schema.Int;
+    readonly swap: Schema.Union<readonly [Schema.TaggedStruct<"NoSwap", {}>, Schema.TaggedStruct<"SwapSpace", {
+        readonly bytes: Schema.Int;
+    }>, Schema.TaggedStruct<"SwapOnDemand", {}>]>;
+}>, {}>;
+export declare class WorkerMemory extends WorkerMemory_base {
+}
+/**
+ * Checks that `worker`'s machine can run `maxConcurrentAttempts` concurrent Attempts. Fails
+ * below 1.5 GiB per Attempt or for more than one Attempt without swap; logs a warning below
+ * 3 GiB per Attempt.
+ */
+export declare const verifyWorkerMemory: (worker: string & import("effect/Brand").Brand<"WorkerName">, maxConcurrentAttempts: number, memory: WorkerMemory) => Effect.Effect<undefined, WorkerCapabilityError, never>;
+/**
+ * Runs `verifyWorkerMemory` for a Linux machine whose `/proc/meminfo` is returned by `meminfo`.
+ * Fails if the output lacks MemTotal or SwapTotal.
+ */
+export declare const verifyLinuxMemory: (worker: string & import("effect/Brand").Brand<"WorkerName">, maxConcurrentAttempts: number, meminfo: Effect.Effect<string, ExecutorOperationError, never>) => Effect.Effect<undefined, WorkerCapabilityError, never>;
+export {};
+//# sourceMappingURL=memory-preflight.d.ts.map

package/dist/memory-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-preflight.d.ts","sourceRoot":"","sources":["../src/memory-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAiB,MAAM,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,EAAE,KAAK,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAgBnF,yDAAyD;AACzD,eAAO,MAAM,YAAY,yCAA0C,CAAC;;;;;;;AAKpE,qBAAa,YAAa,SAAQ,iBAGhC;CAAG;AAiCL;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,8KA8C7B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,iBAAiB,uNAkB5B,CAAC"}

package/dist/memory-preflight.js

@@ -0,0 +1,83 @@
+import { Effect, Match, Option, Schema } from "effect";
+import { WorkerCapabilityError } from "./executor.js";
+const GIB = 1024 ** 3;
+// Two Attempts running the usine monorepo gates on a 4 GB Worker without swap made sshd
+// unresponsive (#270).
+const MEMORY_PER_ATTEMPT_WARNING = 3 * GIB;
+const MEMORY_PER_ATTEMPT_MINIMUM = 1.5 * GIB;
+const NoSwap = Schema.TaggedStruct("NoSwap", {});
+/** A fixed swap size in bytes, as reported by Linux. */
+const SwapSpace = Schema.TaggedStruct("SwapSpace", {
+    bytes: Schema.Int.check(Schema.isGreaterThan(0)),
+});
+/** Swap that the OS allocates on demand, as on macOS. */
+export const SwapOnDemand = Schema.TaggedStruct("SwapOnDemand", {});
+const WorkerSwap = Schema.Union([NoSwap, SwapSpace, SwapOnDemand]);
+export class WorkerMemory extends Schema.Class("@usine/executor/WorkerMemory")({
+    totalBytes: Schema.Int.check(Schema.isGreaterThan(0)),
+    swap: WorkerSwap,
+}) {
+}
+const decodeWorkerMemory = Schema.decodeUnknownOption(WorkerMemory);
+const kibibytes = (meminfo, pattern) => Option.map(Option.fromNullishOr(pattern.exec(meminfo)?.[1]), Number);
+/** Parses `/proc/meminfo`. Returns `None` if MemTotal or SwapTotal is missing. */
+const memoryFromMeminfo = (meminfo) => Option.flatMap(Option.all({
+    total: kibibytes(meminfo, /^MemTotal:\s+(\d+) kB$/mu),
+    swap: kibibytes(meminfo, /^SwapTotal:\s+(\d+) kB$/mu),
+}), ({ total, swap }) => decodeWorkerMemory({
+    totalBytes: total * 1024,
+    swap: swap === 0 ? NoSwap.make({}) : SwapSpace.make({ bytes: swap * 1024 }),
+}));
+const gib = (bytes) => `${(bytes / GIB).toFixed(1)} GiB`;
+const swapText = (swap) => Match.valueTags(swap, {
+    NoSwap: () => "none",
+    SwapSpace: ({ bytes }) => gib(bytes),
+    SwapOnDemand: () => "on demand",
+});
+const memoryError = (worker, message, cause) => new WorkerCapabilityError({ worker, capability: "memory", message, cause });
+/**
+ * Checks that `worker`'s machine can run `maxConcurrentAttempts` concurrent Attempts. Fails
+ * below 1.5 GiB per Attempt or for more than one Attempt without swap; logs a warning below
+ * 3 GiB per Attempt.
+ */
+export const verifyWorkerMemory = Effect.fn("Executor.verifyWorkerMemory")(function* (worker, maxConcurrentAttempts, memory) {
+    const perAttempt = memory.totalBytes / maxConcurrentAttempts;
+    const fields = {
+        worker,
+        maxConcurrentAttempts,
+        memory: gib(memory.totalBytes),
+        swap: swapText(memory.swap),
+        perAttempt: gib(perAttempt),
+    };
+    yield* Effect.annotateCurrentSpan(fields);
+    const withoutSwap = memory.swap._tag === "NoSwap";
+    if (perAttempt < MEMORY_PER_ATTEMPT_MINIMUM) {
+        const fitting = Math.floor(memory.totalBytes / MEMORY_PER_ATTEMPT_MINIMUM);
+        const carried = withoutSwap ? Math.min(fitting, 1) : fitting;
+        const advice = carried === 0
+            ? "Add memory to the machine."
+            : `Set max_concurrent_attempts to ${carried} or less, or add memory to the machine.`;
+        return yield* memoryError(worker, `Worker "${worker}" has ${gib(memory.totalBytes)} of memory, which is ${gib(perAttempt)} per attempt with max_concurrent_attempts set to ${maxConcurrentAttempts}. An attempt needs at least ${gib(MEMORY_PER_ATTEMPT_MINIMUM)}. ${advice}`, memory);
+    }
+    if (withoutSwap && maxConcurrentAttempts > 1)
+        return yield* memoryError(worker, `Worker "${worker}" has no swap, and max_concurrent_attempts is ${maxConcurrentAttempts}. Concurrent attempts without swap can make the machine thrash until SSH stops responding. Add swap, or set max_concurrent_attempts to 1.`, memory);
+    if (perAttempt < MEMORY_PER_ATTEMPT_WARNING)
+        yield* Effect.logWarning(`Worker memory is below ${gib(MEMORY_PER_ATTEMPT_WARNING)} per concurrent Attempt`, {
+            ...fields,
+            suggestedMaxConcurrentAttempts: Math.max(1, Math.floor(memory.totalBytes / MEMORY_PER_ATTEMPT_WARNING)),
+        });
+    else
+        yield* Effect.logInfo("Worker memory verified", fields);
+});
+/**
+ * Runs `verifyWorkerMemory` for a Linux machine whose `/proc/meminfo` is returned by `meminfo`.
+ * Fails if the output lacks MemTotal or SwapTotal.
+ */
+export const verifyLinuxMemory = Effect.fn("Executor.verifyLinuxMemory")(function* (worker, maxConcurrentAttempts, meminfo) {
+    const output = yield* meminfo.pipe(Effect.mapError((cause) => memoryError(worker, `Can't read /proc/meminfo on worker "${worker}"`, cause)));
+    const memory = memoryFromMeminfo(output);
+    if (Option.isNone(memory))
+        return yield* memoryError(worker, `/proc/meminfo on worker "${worker}" has no MemTotal or SwapTotal`, new Error(output.slice(0, 200)));
+    yield* verifyWorkerMemory(worker, maxConcurrentAttempts, memory.value);
+});
+//# sourceMappingURL=memory-preflight.js.map

package/dist/memory-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-preflight.js","sourceRoot":"","sources":["../src/memory-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACvD,OAAO,EAA+B,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEnF,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAEtB,wFAAwF;AACxF,uBAAuB;AACvB,MAAM,0BAA0B,GAAG,CAAC,GAAG,GAAG,CAAC;AAC3C,MAAM,0BAA0B,GAAG,GAAG,GAAG,GAAG,CAAC;AAE7C,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEjD,wDAAwD;AACxD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE;IACjD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;CACjD,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAEpE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAGnE,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,KAAK,CAAe,8BAA8B,CAAC,CAAC;IAC3F,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,EAAE,UAAU;CACjB,CAAC;CAAG;AAEL,MAAM,kBAAkB,GAAG,MAAM,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;AAEpE,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,OAAe,EAAyB,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAEvE,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAA+B,EAAE,CACzE,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,GAAG,CAAC;IACT,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC;IACrD,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,2BAA2B,CAAC;CACtD,CAAC,EACF,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAClB,kBAAkB,CAAC;IACjB,UAAU,EAAE,KAAK,GAAG,IAAI;IACxB,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,EAAE,CAAC;CAC5E,CAAC,CACL,CAAC;AAEJ,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAEzE,MAAM,QAAQ,GAAG,CAAC,IAAgB,EAAU,EAAE,CAC5C,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;IACpB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM;IACpB,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;IACpC,YAAY,EAAE,GAAG,EAAE,CAAC,WAAW;CAChC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,MAAkB,EAAE,OAAe,EAAE,KAAc,EAAE,EAAE,CAC1E,IAAI,qBAAqB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAClF,MAAkB,EAClB,qBAA6B,EAC7B,MAAoB;IAEpB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,GAAG,qBAAqB,CAAC;IAC7D,MAAM,MAAM,GAAG;QACb,MAAM;QACN,qBAAqB;QACrB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9B,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3B,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;KAC5B,CAAC;IACF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;IAClD,IAAI,UAAU,GAAG,0BAA0B,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,0BAA0B,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC7D,MAAM,MAAM,GACV,OAAO,KAAK,CAAC;YACX,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,kCAAkC,OAAO,yCAAyC,CAAC;QACzF,OAAO,KAAK,CAAC,CAAC,WAAW,CACvB,MAAM,EACN,WAAW,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,wBAAwB,GAAG,CAAC,UAAU,CAAC,oDAAoD,qBAAqB,+BAA+B,GAAG,CAAC,0BAA0B,CAAC,KAAK,MAAM,EAAE,EAC3O,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,IAAI,qBAAqB,GAAG,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,WAAW,CACvB,MAAM,EACN,WAAW,MAAM,iDAAiD,qBAAqB,2IAA2I,EAClO,MAAM,CACP,CAAC;IACJ,IAAI,UAAU,GAAG,0BAA0B;QACzC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACtB,0BAA0B,GAAG,CAAC,0BAA0B,CAAC,yBAAyB,EAClF;YACE,GAAG,MAAM;YACT,8BAA8B,EAAE,IAAI,CAAC,GAAG,CACtC,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,GAAG,0BAA0B,CAAC,CAC3D;SACF,CACF,CAAC;;QACC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAChF,MAAkB,EAClB,qBAA6B,EAC7B,OAAsD;IAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,WAAW,CAAC,MAAM,EAAE,uCAAuC,MAAM,GAAG,EAAE,KAAK,CAAC,CAC7E,CACF,CAAC;IACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,WAAW,CACvB,MAAM,EACN,4BAA4B,MAAM,gCAAgC,EAClE,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAChC,CAAC;IACJ,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC"}

package/dist/pre-push-hook.d.ts

@@ -0,0 +1,20 @@
+import type { LoopName } from "@usine/core/loop";
+import { Option } from "effect";
+/**
+ * The hooks directory inside the checkout's git directory for `permissions: read` Loops.
+ * `git worktree remove` deletes it with the checkout.
+ */
+export declare const PRE_PUSH_HOOKS_DIRECTORY = "usine-hooks";
+/**
+ * Returns a pre-push hook that rejects every push with `pushRefusal`, so the Agent sees the
+ * reason instead of GitHub's 403. `git push --no-verify` skips it; the `contents: read` token is
+ * what blocks the push (ADR 0011).
+ */
+export declare const prePushHook: (loop: LoopName) => string;
+/**
+ * Returns `environment` with `core.hooksPath` set to `hooks`, if any, after the entries counted
+ * in `GIT_CONFIG_COUNT`. Environment config overrides repository config, so the hook runs even
+ * if the repository sets `core.hooksPath`.
+ */
+export declare const withGitHooks: (environment: Readonly<Record<string, string>>, hooks: Option.Option<string>) => Record<string, string>;
+//# sourceMappingURL=pre-push-hook.d.ts.map

package/dist/pre-push-hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-push-hook.d.ts","sourceRoot":"","sources":["../src/pre-push-hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;GAGG;AACH,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAQtD;;;;GAIG;AACH,eAAO,MAAM,WAAW,SAAU,QAAQ,KAAG,MACgB,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,YAAY,gBACV,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,SACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAYpB,CAAC"}

package/dist/pre-push-hook.js

@@ -0,0 +1,33 @@
+import { Option } from "effect";
+/**
+ * The hooks directory inside the checkout's git directory for `permissions: read` Loops.
+ * `git worktree remove` deletes it with the checkout.
+ */
+export const PRE_PUSH_HOOKS_DIRECTORY = "usine-hooks";
+const quote = (value) => `'${value.replaceAll("'", `'"'"'`)}'`;
+/** Returns the message printed when a push from a `permissions: read` checkout is rejected. */
+const pushRefusal = (loop) => `usine refused this push: the Loop ${loop} has permissions: read, so its Attempts cannot push to the repository.`;
+/**
+ * Returns a pre-push hook that rejects every push with `pushRefusal`, so the Agent sees the
+ * reason instead of GitHub's 403. `git push --no-verify` skips it; the `contents: read` token is
+ * what blocks the push (ADR 0011).
+ */
+export const prePushHook = (loop) => `#!/bin/sh\necho ${quote(pushRefusal(loop))} >&2\nexit 1\n`;
+/**
+ * Returns `environment` with `core.hooksPath` set to `hooks`, if any, after the entries counted
+ * in `GIT_CONFIG_COUNT`. Environment config overrides repository config, so the hook runs even
+ * if the repository sets `core.hooksPath`.
+ */
+export const withGitHooks = (environment, hooks) => Option.match(hooks, {
+    onNone: () => ({ ...environment }),
+    onSome: (directory) => {
+        const index = Number(environment.GIT_CONFIG_COUNT ?? "0");
+        return {
+            ...environment,
+            GIT_CONFIG_COUNT: String(index + 1),
+            [`GIT_CONFIG_KEY_${index}`]: "core.hooksPath",
+            [`GIT_CONFIG_VALUE_${index}`]: directory,
+        };
+    },
+});
+//# sourceMappingURL=pre-push-hook.js.map

package/dist/pre-push-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-push-hook.js","sourceRoot":"","sources":["../src/pre-push-hook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAEtD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAE/E,+FAA+F;AAC/F,MAAM,WAAW,GAAG,CAAC,IAAc,EAAU,EAAE,CAC7C,qCAAqC,IAAI,wEAAwE,CAAC;AAEpH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAc,EAAU,EAAE,CACpD,mBAAmB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,WAA6C,EAC7C,KAA4B,EACJ,EAAE,CAC1B,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;IAClB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;QAC1D,OAAO;YACL,GAAG,WAAW;YACd,gBAAgB,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;YACnC,CAAC,kBAAkB,KAAK,EAAE,CAAC,EAAE,gBAAgB;YAC7C,CAAC,oBAAoB,KAAK,EAAE,CAAC,EAAE,SAAS;SACzC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/prepared-attempt.d.ts

@@ -1,5 +1,35 @@
-import { Effect, Scope } from "effect";
+import type { AttemptId } from "@usine/core/attempt";
+import * as AttemptChannel from "@usine/core/attempt/channel";
+import { type AttemptFailure, InfraFailure, type RunawayCeiling } from "@usine/core/attempt/failure";
+import { type Duration, Effect, Scope } from "effect";
 import type { CheckoutRequest, ExecutorError, PreparedAttempt } from "./executor.ts";
-/** Owns partial preparation and the run host in one child scope, released at the Attempt's end. */
-export declare const prepareAttempt: (acquire: Effect.Effect<PreparedAttempt, ExecutorError, Scope.Scope>, request: CheckoutRequest) => Effect.Effect<PreparedAttempt, ExecutorError, Scope.Scope>;
+import { type AttemptGuardSeed } from "./guard.ts";
+import type { ProvisionedWorktree } from "./provision.ts";
+export type AttemptStop = {
+    readonly _tag: "Cancel";
+} | {
+    readonly _tag: "Runaway";
+    readonly ceiling: RunawayCeiling;
+};
+/** The result of an executor's `acquire`: the prepared Attempt and its salvage handles. */
+export interface AcquiredAttempt extends PreparedAttempt {
+    readonly salvaged: ProvisionedWorktree["salvaged"];
+    readonly recordSalvage: ProvisionedWorktree["recordSalvage"];
+}
+/**
+ * Returns `prepare` and `cancel` for one executor's Attempts, tracked from preparation until
+ * release so `cancel` works at any stage. `cancel`, a failed `prepare`, and `launch` each return
+ * only after the Attempt's resources are released.
+ *
+ * - `stop`: stops the live session and returns whether one existed.
+ * - `registered`: completes when the launch registers the live session.
+ * - `warnParent`: sends the guard's warning steer; can wait for the parent's channel.
+ * - `guardSeed`: returns the guard's initial state. If it fails, the launch records salvage,
+ *   releases the resources, and fails.
+ * - `recordUnsupervised`: persists the guard's unsupervised time for a later reattachment.
+ */
+export declare const preparedAttemptsFor: (stop: (attemptId: AttemptId, reason: AttemptStop) => Effect.Effect<boolean, ExecutorError>, warnParent: (attemptId: AttemptId, intervention: AttemptChannel.Intervention) => Effect.Effect<void, AttemptFailure>, registered: (attemptId: AttemptId) => Effect.Effect<void>, guardSeed: (request: CheckoutRequest, io: AttemptChannel.Sink) => Effect.Effect<AttemptGuardSeed, InfraFailure>, recordUnsupervised: (attemptId: AttemptId, unsupervised: Duration.Duration) => Effect.Effect<void, AttemptFailure>) => Effect.Effect<{
+    prepare: (acquire: Effect.Effect<AcquiredAttempt, ExecutorError, Scope.Scope>, request: CheckoutRequest) => Effect.Effect<PreparedAttempt, ExecutorError, Scope.Scope>;
+    cancel: (attemptId: string & import("effect/Brand").Brand<"AttemptId">) => Effect.Effect<void, import("./executor.ts").CredentialUnavailableError | import("./executor.ts").ExecutorOperationError | import("./executor.ts").WorkerCapabilityError, never>;
+}, never, never>;
 //# sourceMappingURL=prepared-attempt.d.ts.map

package/dist/prepared-attempt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prepared-attempt.d.ts","sourceRoot":"","sources":["../src/prepared-attempt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAoB,KAAK,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErF,mGAAmG;AACnG,eAAO,MAAM,cAAc,YAChB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,WAC1D,eAAe,KACvB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAqDzD,CAAC"}
+{"version":3,"file":"prepared-attempt.d.ts","sourceRoot":"","sources":["../src/prepared-attempt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,cAAc,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,KAAK,cAAc,EACnB,YAAY,EACZ,KAAK,cAAc,EACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,EAAoB,KAAK,EAAE,MAAM,QAAQ,CAAC;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAEnE,2FAA2F;AAC3F,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACnD,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC,eAAe,CAAC,CAAC;CAC9D;AASD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,SACxB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,cAC9E,CACV,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,cAAc,CAAC,YAAY,KACtC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,cAC5B,CAAC,SAAS,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAC9C,CACT,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,cAAc,CAAC,IAAI,KACpB,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,YAAY,CAAC,sBAC9B,CAClB,SAAS,EAAE,SAAS,EACpB,YAAY,EAAE,QAAQ,CAAC,QAAQ,KAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC;uBAwB3B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,WAC1D,eAAe,KACvB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC;;gBAoH7D,CAAC"}

package/dist/prepared-attempt.js

@@ -1,40 +1,110 @@
-import { InfraFailure } from "@usine/core/attempt/failure";
-import { Effect, Exit, Fiber, Ref, Scope } from "effect";
-/** Owns partial preparation and the run host in one child scope, released at the Attempt's end. */
-export const prepareAttempt = (acquire, request) => Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
-    const scope = yield* Scope.fork(yield* Effect.scope);
-    // acquireRelease masks acquisition by default in Effect rc.111. Only the
-    // ownership transfer is masked here; clone, fetch, and lock waits must stop
-    // promptly. Each acquiring implementation registers its own finalizers.
-    const prepared = yield* restore(acquire).pipe(Scope.provide(scope), Effect.onError((cause) => Scope.close(scope, Exit.failCause(cause))));
-    const unavailable = yield* Ref.make(false);
-    yield* Scope.addFinalizer(scope, Ref.set(unavailable, true));
-    return {
-        workspace: prepared.workspace,
-        launch: Effect.fn("PreparedAttempt.launch")(function* (io) {
-            const attemptId = prepared.workspace.spec.attemptId;
-            yield* Effect.annotateCurrentSpan({ attemptId, worker: prepared.workspace.worker });
-            if (yield* Ref.getAndSet(unavailable, true)) {
-                yield* Effect.logWarning("Attempt was already launched or released", { attemptId });
-                return yield* new InfraFailure({
-                    message: `Attempt ${attemptId} was already launched or released`,
-                    cause: new Error("prepared Attempt is no longer available"),
-                });
-            }
-            // Closing the owner's scope interrupts the session before checkout and
-            // credential finalizers. Interrupting a caller waiting on join must also
-            // stop that scoped fiber, so timeout/cancel completes the handshake first.
-            return yield* Effect.acquireUseRelease(Effect.forkIn(prepared.launch(io).pipe(
-            // End the timer with the live session. Checkout/grant finalizers run
-            // afterward and cannot turn completed agent work into a retry.
-            Effect.timeoutOrElse({
-                duration: `${request.maxAttemptMinutes} minutes`,
-                orElse: () => Effect.fail(new InfraFailure({
-                    message: `Attempt exceeded the ${request.maxAttemptMinutes}-minute budget`,
-                    cause: new Error("attempt timeout"),
-                })),
-            })), scope), Fiber.join, Fiber.interrupt).pipe(Effect.onExit((exit) => Scope.close(scope, exit)));
-        }),
-    };
-}));
+import * as AttemptChannel from "@usine/core/attempt/channel";
+import { InfraFailure, } from "@usine/core/attempt/failure";
+import { Cause, Deferred, Effect, Exit, Fiber, Ref, Scope } from "effect";
+import { attemptGuard } from "./guard.js";
+/**
+ * Returns `prepare` and `cancel` for one executor's Attempts, tracked from preparation until
+ * release so `cancel` works at any stage. `cancel`, a failed `prepare`, and `launch` each return
+ * only after the Attempt's resources are released.
+ *
+ * - `stop`: stops the live session and returns whether one existed.
+ * - `registered`: completes when the launch registers the live session.
+ * - `warnParent`: sends the guard's warning steer; can wait for the parent's channel.
+ * - `guardSeed`: returns the guard's initial state. If it fails, the launch records salvage,
+ *   releases the resources, and fails.
+ * - `recordUnsupervised`: persists the guard's unsupervised time for a later reattachment.
+ */
+export const preparedAttemptsFor = (stop, warnParent, registered, guardSeed, recordUnsupervised) => Effect.sync(() => {
+    const attempts = new Map();
+    const cancel = Effect.fn("PreparedAttempt.cancel")(function* (attemptId) {
+        yield* Effect.annotateCurrentSpan({ attemptId });
+        const active = attempts.get(attemptId);
+        if (active === undefined) {
+            yield* Effect.logDebug("Attempt cancellation was a no-op", { attemptId });
+            return;
+        }
+        yield* Ref.set(active.unavailable, true);
+        // With a live session, stops it so its terminal envelope and typed errors are kept. Before
+        // registration, closing the scope interrupts preparation or process spawn.
+        if (!(yield* stop(attemptId, { _tag: "Cancel" }))) {
+            yield* Effect.logInfo("Canceling Attempt before its channel is ready", { attemptId });
+            yield* active.release(Exit.void);
+        }
+        else {
+            yield* active.released;
+        }
+    }, Effect.uninterruptible);
+    /** Runs preparation and the live session in one child scope that closes when the Attempt ends. */
+    const prepare = (acquire, request) => Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+        const scope = yield* Scope.fork(yield* Effect.scope);
+        const unavailable = yield* Ref.make(false);
+        const released = yield* Deferred.make();
+        // Scope.close returns immediately when another fiber is already closing the scope, so the
+        // owner and a concurrent cancel both wait for `released`, set by the first-registered
+        // (last-run) finalizer.
+        const release = (exit) => Scope.close(scope, exit).pipe(Effect.andThen(Deferred.await(released)));
+        attempts.set(request.attemptId, {
+            unavailable,
+            release,
+            released: Deferred.await(released),
+        });
+        yield* Scope.addFinalizer(scope, Effect.suspend(() => {
+            attempts.delete(request.attemptId);
+            return Deferred.succeed(released, undefined);
+        }));
+        yield* Scope.addFinalizer(scope, Ref.set(unavailable, true));
+        // A separate child scope, so the acquiring fiber is interrupted before its resources are
+        // released.
+        const resources = yield* Scope.fork(scope);
+        const acquiring = yield* Effect.forkIn(Scope.provide(acquire, resources), scope);
+        const prepared = yield* restore(Fiber.join(acquiring)).pipe(Effect.onError((cause) => release(Exit.failCause(cause))));
+        /** Releases the Attempt's resources, then fails if its salvage couldn't be recorded. */
+        const releaseSalvaged = (exit) => release(exit).pipe(Effect.andThen(Effect.asVoid(prepared.salvaged)));
+        return {
+            workspace: prepared.workspace,
+            launch: Effect.fn("PreparedAttempt.launch")(function* (io) {
+                const attemptId = prepared.workspace.spec.attemptId;
+                yield* Effect.annotateCurrentSpan({ attemptId, worker: prepared.workspace.worker });
+                if (yield* Ref.getAndSet(unavailable, true)) {
+                    yield* Effect.logWarning("Attempt was already launched or released", { attemptId });
+                    return yield* new InfraFailure({
+                        message: `Attempt ${attemptId} was already launched or released`,
+                        cause: new Error("prepared attempt is no longer available"),
+                    });
+                }
+                // If the seed can't be read, records salvage and releases the checkout without launching, so
+                // the Run's next Attempt starts from it. On interruption, such as process shutdown, the
+                // owner's scope handles the checkout.
+                const seed = yield* guardSeed(request, io).pipe(Effect.onExit((exit) => Exit.isSuccess(exit) || Cause.hasInterruptsOnly(exit.cause)
+                    ? Effect.void
+                    : Effect.logWarning("The Attempt's runaway guard cannot start; releasing its checkout without launching it", { attemptId }).pipe(Effect.andThen(prepared.recordSalvage(io.salvage)), Effect.andThen(releaseSalvaged(exit)))));
+                const guard = yield* attemptGuard({
+                    attemptId,
+                    maxAttemptMinutes: request.maxAttemptMinutes,
+                    maxAttemptTokens: request.maxAttemptTokens,
+                    warn: (message) => warnParent(attemptId, new AttemptChannel.Intervention({
+                        operator: "engine",
+                        target: new AttemptChannel.ParentTarget(),
+                        action: new AttemptChannel.Steer({ message }),
+                    })),
+                    recordUnsupervised: (unsupervised) => recordUnsupervised(attemptId, unsupervised),
+                }, io, seed);
+                // Starts the clock only after the launch registers its session. A remote launch first waits
+                // for the Worker's liveness watch, and a seed with no time left could trip before there's a
+                // session to stop.
+                const tripped = registered(attemptId).pipe(Effect.andThen(guard.tripped), Effect.tapError(({ ceiling }) => stop(attemptId, { _tag: "Runaway", ceiling }).pipe(Effect.tapError((error) => Effect.logWarning("Could not stop the runaway Attempt", {
+                    attemptId,
+                    ceiling,
+                    errorTag: error._tag,
+                })), Effect.ignore)));
+                yield* prepared.recordSalvage(io.salvage);
+                // Closing the owner's scope interrupts the session before the checkout and credential
+                // finalizers. acquireUseRelease interrupts the forked fiber when the caller waiting on join
+                // is interrupted.
+                return yield* Effect.acquireUseRelease(Effect.forkIn(Effect.raceFirst(prepared.launch(guard.sink), tripped), scope), Fiber.join, Fiber.interrupt).pipe(Effect.onExit((exit) => releaseSalvaged(exit)));
+            }),
+        };
+    }));
+    return { prepare, cancel };
+});
 //# sourceMappingURL=prepared-attempt.js.map

package/dist/prepared-attempt.js.map

@@ -1 +1 @@
-{"version":3,"file":"prepared-attempt.js","sourceRoot":"","sources":["../src/prepared-attempt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAGzD,mGAAmG;AACnG,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,OAAmE,EACnE,OAAwB,EACoC,EAAE,CAC9D,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAC3C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACpB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CACrE,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;IAE7D,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE;YACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;YACpD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,0CAA0C,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBACpF,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC;oBAC7B,OAAO,EAAE,WAAW,SAAS,mCAAmC;oBAChE,KAAK,EAAE,IAAI,KAAK,CAAC,yCAAyC,CAAC;iBAC5D,CAAC,CAAC;YACL,CAAC;YACD,uEAAuE;YACvE,yEAAyE;YACzE,2EAA2E;YAC3E,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACpC,MAAM,CAAC,MAAM,CACX,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI;YACtB,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,CAAC,aAAa,CAAC;gBACnB,QAAQ,EAAE,GAAG,OAAO,CAAC,iBAAiB,UAAU;gBAChD,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,IAAI,YAAY,CAAC;oBACf,OAAO,EAAE,wBAAwB,OAAO,CAAC,iBAAiB,gBAAgB;oBAC1E,KAAK,EAAE,IAAI,KAAK,CAAC,iBAAiB,CAAC;iBACpC,CAAC,CACH;aACJ,CAAC,CACH,EACD,KAAK,CACN,EACD,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,CAChB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC;KACuB,CAAC;AAC9B,CAAC,CAAC,CACH,CAAC"}
+{"version":3,"file":"prepared-attempt.js","sourceRoot":"","sources":["../src/prepared-attempt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,cAAc,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAEL,YAAY,GAEb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAiB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEzF,OAAO,EAAE,YAAY,EAAyB,MAAM,YAAY,CAAC;AAoBjE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,IAA0F,EAC1F,UAGwC,EACxC,UAAyD,EACzD,SAGkD,EAClD,kBAGwC,EACxC,EAAE,CACF,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;IACf,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAoB;QAChF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,kCAAkC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACzC,2FAA2F;QAC3F,2EAA2E;QAC3E,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,+CAA+C,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACtF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACzB,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAE3B,kGAAkG;IAClG,MAAM,OAAO,GAAG,CACd,OAAmE,EACnE,OAAwB,EACoC,EAAE,CAC9D,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAQ,CAAC;QAC9C,0FAA0F;QAC1F,sFAAsF;QACtF,wBAAwB;QACxB,MAAM,OAAO,GAA4B,CAAC,IAAI,EAAE,EAAE,CAChD,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1E,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE;YAC9B,WAAW;YACX,OAAO;YACP,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;SACnC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CACvB,KAAK,EACL,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC,CAAC,CACH,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,yFAAyF;QACzF,YAAY;QACZ,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAC1D,CAAC;QAEF,wFAAwF;QACxF,MAAM,eAAe,GAAG,CAAC,IAAiC,EAAE,EAAE,CAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEvE,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;gBACpD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpF,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;oBAC5C,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,0CAA0C,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;oBACpF,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC;wBAC7B,OAAO,EAAE,WAAW,SAAS,mCAAmC;wBAChE,KAAK,EAAE,IAAI,KAAK,CAAC,yCAAyC,CAAC;qBAC5D,CAAC,CAAC;gBACL,CAAC;gBACD,6FAA6F;gBAC7F,wFAAwF;gBACxF,sCAAsC;gBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACrB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;oBACzD,CAAC,CAAC,MAAM,CAAC,IAAI;oBACb,CAAC,CAAC,MAAM,CAAC,UAAU,CACf,uFAAuF,EACvF,EAAE,SAAS,EAAE,CACd,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,EAClD,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CACtC,CACN,CACF,CAAC;gBACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAC/B;oBACE,SAAS;oBACT,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;oBAC5C,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;oBAC1C,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,UAAU,CACR,SAAS,EACT,IAAI,cAAc,CAAC,YAAY,CAAC;wBAC9B,QAAQ,EAAE,QAAQ;wBAClB,MAAM,EAAE,IAAI,cAAc,CAAC,YAAY,EAAE;wBACzC,MAAM,EAAE,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;qBAC9C,CAAC,CACH;oBACH,kBAAkB,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC;iBAClF,EACD,EAAE,EACF,IAAI,CACL,CAAC;gBACF,4FAA4F;gBAC5F,4FAA4F;gBAC5F,mBAAmB;gBACnB,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CACxC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAC7B,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9B,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,oCAAoC,EAAE;oBACtD,SAAS;oBACT,OAAO;oBACP,QAAQ,EAAE,KAAK,CAAC,IAAI;iBACrB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CACF,CAAC;gBACF,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC1C,sFAAsF;gBACtF,4FAA4F;gBAC5F,kBAAkB;gBAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAC5E,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,SAAS,CAChB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC;SACuB,CAAC;IAC9B,CAAC,CAAC,CACH,CAAC;IAEJ,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC,CAAC,CAAC"}

package/dist/provision.d.ts

@@ -1,14 +1,15 @@
+import type { AttemptFailure } from "@usine/core/attempt/failure";
+import * as AttemptChannel from "@usine/core/attempt/channel";
+import { type AttemptRecovery, type AttemptSalvage, SalvagePushed } from "@usine/core/attempt/salvage";
 import { RepositoryName } from "@usine/core/repository";
-import { Effect } from "effect";
+import { Effect, Option } from "effect";
 import { ExecutorOperationError, AttemptWorkspace, type CheckoutRequest } from "./executor.ts";
-export declare const safeSegment: (value: string) => string;
-/** The bare cache directory name for a repository under `repos/`, shared by every adapter. */
+/** Returns the bare cache directory name for `repository` under `repos/`. */
 export declare const cacheDirectoryName: (repository: RepositoryName) => string;
 /**
- * Whether a `repos/` entry is one of our bare caches, decided by the name we
- * mint rather than by probing contents: a `HEAD` lookup fails with ENOTDIR on
- * a stray file, and a `.cloning` leftover or a tool's scratch directory must
- * never reach `git worktree prune`.
+ * Returns whether a `repos/` entry is a bare cache, by name only. Probing `HEAD` fails with
+ * ENOTDIR on a stray file, and a `.cloning` leftover or another tool's directory must never be
+ * passed to `git worktree prune`.
  */
 export declare const isCacheDirectoryName: (entry: string) => boolean;
 interface WorkspaceLayout {
@@ -16,14 +17,16 @@ interface WorkspaceLayout {
     readonly staging: string;
     readonly worktree: string;
 }
-/** The adapter-specific primitives; everything else about provisioning is shared. */
+/** Executor-specific operations for the shared provisioning code. */
 export interface WorkspaceOps<E> {
     readonly ensureRoots: Effect.Effect<void, E>;
     readonly removePath: (operation: "prepare" | "cleanup", target: string) => Effect.Effect<void, E>;
     readonly cacheExists: Effect.Effect<boolean, E>;
-    /** Atomically promote the finished staging clone to the cache path. */
+    /** Atomically moves the finished staging clone to the cache path. */
     readonly promoteStaging: Effect.Effect<void, E>;
     readonly git: (operation: "prepare" | "cleanup", args: ReadonlyArray<string>) => Effect.Effect<string, E>;
+    /** Writes `content` to `path` on the Worker's machine, creating its directory, and makes it executable. */
+    readonly writeExecutable: (path: string, content: string) => Effect.Effect<void, E>;
 }
 export interface ProvisionOptions<E> {
     readonly request: CheckoutRequest;
@@ -32,12 +35,72 @@ export interface ProvisionOptions<E> {
     readonly layout: WorkspaceLayout;
     readonly ops: WorkspaceOps<E>;
 }
+export interface ProvisionedWorktree {
+    readonly workspace: AttemptWorkspace;
+    /** Waits for the workspace scope to close and returns the salvage, or `None` after a successful Attempt or a clean worktree. */
+    readonly salvaged: Effect.Effect<Option.Option<AttemptSalvage>, AttemptFailure>;
+    /** Sets the salvage sink; call before launch. If salvage isn't recorded, cleanup keeps the worktree on disk. */
+    readonly recordSalvage: (record: AttemptChannel.Sink["salvage"]) => Effect.Effect<void>;
+    /**
+     * Skips checkout removal when the scope closes, so a restart can reattach the parent task or
+     * repeat a harvest whose result was not stored.
+     */
+    readonly keepForReattach: Effect.Effect<void>;
+    /**
+     * The hooks directory for the children's git (`withGitHooks`), set only for a
+     * `permissions: read` Loop. If `None`, the repository's own hooks apply.
+     */
+    readonly gitHooks: Option.Option<string>;
+}
+interface ReleaseOptions<E> {
+    readonly request: CheckoutRequest;
+    readonly host: string;
+    readonly layout: Pick<WorkspaceLayout, "cache" | "worktree">;
+    readonly ops: Pick<WorkspaceOps<E>, "cacheExists" | "git" | "removePath">;
+}
+/**
+ * Clones into a staging directory and promotes it on success, fetches the requested revision,
+ * and checks out a detached worktree at the resolved commit, applying the previous Attempt's
+ * salvage if the request resumes one. Registers the release finalizer before the first
+ * filesystem change.
+ */
+export declare const provisionWorktree: <E extends Error>(options: ProvisionOptions<E>) => Effect.Effect<{
+    workspace: AttemptWorkspace;
+    salvaged: Effect.Effect<Option.Option<SalvagePushed | import("@usine/core/attempt/salvage").SalvageRetained>, import("@usine/core/attempt/failure").AgentFailure | import("@usine/core/attempt/failure").BlockedFailure | import("@usine/core/attempt/failure").ChildSessionBudgetFailure | import("@usine/core/attempt/failure").DefectFailure | import("@usine/core/attempt/failure").InfraFailure | import("@usine/core/attempt/failure").QuestionFailure | import("@usine/core/attempt/failure").RunawayFailure, never>;
+    recordSalvage: (record: AttemptChannel.Sink["salvage"]) => Effect.Effect<void, never, never>;
+    keepForReattach: Effect.Effect<void, never, never>;
+    gitHooks: Option.Option<string>;
+}, E | ExecutorOperationError, import("effect/Scope").Scope>;
+export interface ReattachOptions<E> extends ReleaseOptions<E> {
+    readonly ops: Pick<WorkspaceOps<E>, "cacheExists" | "git" | "removePath" | "writeExecutable">;
+    /** The RunSpec from the parent's durable request. */
+    readonly spec: AttemptChannel.RunSpec;
+}
+/**
+ * Reuses an Attempt's checkout after an orchestrator restart without cloning, fetching, or
+ * checking out. The same release as a new checkout salvages and removes it when the Attempt
+ * ends.
+ */
+export declare const reattachWorktree: <E extends Error>(options: ReattachOptions<E>) => Effect.Effect<{
+    workspace: AttemptWorkspace;
+    salvaged: Effect.Effect<Option.Option<SalvagePushed | import("@usine/core/attempt/salvage").SalvageRetained>, import("@usine/core/attempt/failure").AgentFailure | import("@usine/core/attempt/failure").BlockedFailure | import("@usine/core/attempt/failure").ChildSessionBudgetFailure | import("@usine/core/attempt/failure").DefectFailure | import("@usine/core/attempt/failure").InfraFailure | import("@usine/core/attempt/failure").QuestionFailure | import("@usine/core/attempt/failure").RunawayFailure, never>;
+    recordSalvage: (record: AttemptChannel.Sink["salvage"]) => Effect.Effect<void, never, never>;
+    keepForReattach: Effect.Effect<void, never, never>;
+    gitHooks: Option.Option<string>;
+}, E, import("effect/Scope").Scope>;
+export interface RecoveryOptions<E> {
+    readonly attempt: AttemptRecovery;
+    readonly host: string;
+    readonly worktree: string;
+    readonly cache: string;
+    /** Runs git with the Worker's repository credentials. */
+    readonly git: (args: ReadonlyArray<string>) => Effect.Effect<string, E>;
+}
 /**
- * The clone-to-worktree sequence every Executor shares: clone into a staging
- * sibling and promote it on success, so an interrupted clone never leaves a
- * half-initialized cache that later fetches would poison; then fetch the
- * requested revision and check out a detached worktree at the resolved commit.
+ * Reconciles a checkout left by an earlier process: salvages it without a known base, records
+ * the result, and removes the worktree only after its work is pushed. Checkouts of succeeded
+ * Attempts and of `permissions: read` Loops are removed without salvage.
  */
-export declare const provisionWorktree: <E>(options: ProvisionOptions<E>) => Effect.Effect<AttemptWorkspace, E | ExecutorOperationError, import("effect/Scope").Scope>;
+export declare const recoverWorktree: <E extends Error, RecordError>(options: RecoveryOptions<E>, record: (salvage: AttemptSalvage) => Effect.Effect<void, RecordError>) => Effect.Effect<void, E | RecordError, never>;
 export {};
 //# sourceMappingURL=provision.d.ts.map

package/dist/provision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../src/provision.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAa,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AACxC,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAEhB,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,WAAW,UAAW,MAAM,KAAG,MAAoD,CAAC;AAIjG,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,eAAgB,cAAc,KAAG,MACT,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,UAAW,MAAM,KAAG,OACmC,CAAC;AAIzF,UAAU,eAAe;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qFAAqF;AACrF,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,CACZ,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAAsD,CAAC,4HAwJnF,CAAC"}
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../src/provision.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,KAAK,cAAc,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,aAAa,EACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAA0B,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAsB,MAAM,EAAQ,MAAM,EAAuB,MAAM,QAAQ,CAAC;AACvF,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAEhB,KAAK,eAAe,EACrB,MAAM,eAAe,CAAC;AAMvB,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,eAAgB,cAAc,KAAG,MACT,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,UAAW,MAAM,KAAG,OACmC,CAAC;AAIzF,UAAU,eAAe;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qEAAqE;AACrE,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClG,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAChD,qEAAqE;IACrE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,CACZ,SAAS,EAAE,SAAS,GAAG,SAAS,EAChC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9B,2GAA2G;IAC3G,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,gIAAgI;IAChI,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IAChF,gHAAgH;IAChH,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxF;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CAC1C;AAED,UAAU,cAAc,CAAC,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,GAAG,UAAU,CAAC,CAAC;IAC7D,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,YAAY,CAAC,CAAC;CAC3E;AA4SD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAC5B,CAAC,SAAS,KAAK;;;4BA/JW,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;;;4DAmQxD,CAAC;AAEH,MAAM,WAAW,eAAe,CAAC,CAAC,CAAE,SAAQ,cAAc,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,GAAG,KAAK,GAAG,YAAY,GAAG,iBAAiB,CAAC,CAAC;IAC9F,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAqD,CAAC,SAAS,KAAK;;;4BAhRrE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC;;;mCAwSxD,CAAC;AAEH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACzE;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAC1B,CAAC,SAAS,KAAK,EACf,WAAW,iDAGO,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,gDA0BrE,CAAC"}