@usine/executor 0.2.1 → 0.4.0

package/dist/guard.js

@@ -1,74 +1,289 @@
-import { AgentSessionId } from "@usine/core/agent/session";
-import { AttemptFailure, RunawayFailure } from "@usine/core/attempt/failure";
-import { Clock, Effect, Option, Queue } from "effect";
-/** Enforces Attempt ceilings: Holds pause elapsed execution time; reported tokens continue accumulating. */
-export const withAttemptGuard = (limits, io, run) => Effect.gen(function* () {
-    const ended = new Set();
+import { AttemptFailure, RunawayCeiling, RunawayFailure } from "@usine/core/attempt/failure";
+import { Clock, Duration, Effect, Option, Queue } from "effect";
+/** The fraction of a ceiling at which the parent gets one warning steer. */
+const WARNING_FRACTION = 0.8;
+/**
+ * The interval for recording unsupervised time while it grows. An orchestrator that exits
+ * without shutting down loses at most this much (#178).
+ */
+const RECORD_INTERVAL = Duration.seconds(30);
+/** The timeout for the final unsupervised-time record when the guard stops. */
+const LAST_RECORD_GRACE = Duration.seconds(5);
+/** The suffix of every warning steer, after the ceiling's unit. */
+const WARNING_ENDING = "used by this Attempt; commit and push your work now.";
+const WARNING_UNITS = {
+    tokens: "tokens",
+    "wall-clock": "minutes",
+};
+const warning = (ceiling, used, limit) => `${used} of ${limit} ${WARNING_UNITS[ceiling]} ${WARNING_ENDING}`;
+const ceiling = (limit) => ({ limit, warnAt: limit * WARNING_FRACTION });
+/** Stores the session's token count from `envelope` if higher, because reports are cumulative. Returns whether `envelope` was a token report. */
+const recordTokens = (reported, envelope) => {
+    const payload = envelope.payload;
+    if (payload._tag !== "SessionEvent" || payload.event._tag !== "SessionTokensUpdated")
+        return false;
+    const { session, totalTokens } = payload.event;
+    reported.set(session.id, Math.max(reported.get(session.id) ?? 0, totalTokens));
+    return true;
+};
+/** Returns the Hold key: `"parent"` for the parent session, or the session ID for a child. */
+const holdKey = (session) => {
+    switch (session._tag) {
+        case "Parent":
+        case "ParentSession":
+            return "parent";
+        case "Child":
+            return session.sessionId;
+        case "ChildSession":
+            return session.id;
+    }
+};
+/**
+ * Updates the held sessions from `envelope`. An intervention receipt places or removes its
+ * target's Hold; a finished session is never held again, so a late receipt is ignored.
+ */
+const recordHolds = (holds, ended, envelope) => {
+    const payload = envelope.payload;
+    if (payload._tag === "InterventionApplied") {
+        const key = holdKey(payload.intervention.target);
+        if (payload.state.held && !ended.has(key))
+            holds.add(key);
+        else
+            holds.delete(key);
+    }
+    if (payload._tag === "SessionEvent" && payload.event._tag === "SessionFinished") {
+        const key = holdKey(payload.event.session);
+        ended.add(key);
+        holds.delete(key);
+    }
+};
+/** Returns the ceiling whose warning steer `envelope` is: a parent steer that ends with the ceiling's unit and `WARNING_ENDING`. */
+const warnedCeiling = (envelope) => {
+    if (envelope._tag !== "InboundEnvelope" ||
+        envelope.target._tag !== "Parent" ||
+        envelope.payload._tag !== "Steer") {
+        return Option.none();
+    }
+    const message = envelope.payload.message;
+    return Option.fromNullishOr(RunawayCeiling.literals.find((ceiling) => message.endsWith(` ${WARNING_UNITS[ceiling]} ${WARNING_ENDING}`)));
+};
+/** Returns a reattached guard's seed from `unsupervised` and the transcript `envelopes` in append order. */
+export const guardSeed = (transcript, unsupervised) => {
     const tokens = new Map();
+    const warned = new Set();
     const holds = new Set();
-    const changes = yield* Queue.make();
-    const append = Effect.fn("AttemptGuard.append")(function* (direction, envelope) {
-        yield* Effect.annotateCurrentSpan({ attemptId: limits.attemptId });
-        yield* io.append(direction, envelope);
-        if (envelope.payload._tag === "SessionEvent" &&
-            envelope.payload.event._tag === "SessionTokensUpdated") {
-            const { session, totalTokens } = envelope.payload.event;
-            tokens.set(session.id, Math.max(tokens.get(session.id) ?? 0, totalTokens));
-            const consumed = [...tokens.values()].reduce((sum, value) => sum + value, 0);
-            if (consumed >= limits.maxAttemptTokens) {
-                yield* Effect.logWarning("Attempt reached its token limit", {
-                    attemptId: envelope.attemptId,
-                    consumed,
-                    maxAttemptTokens: limits.maxAttemptTokens,
-                });
-                return yield* new RunawayFailure({ ceiling: "tokens" });
-            }
+    const ended = new Set();
+    for (const envelope of transcript) {
+        recordHolds(holds, ended, envelope);
+        recordTokens(tokens, envelope);
+        const sent = warnedCeiling(envelope);
+        if (Option.isSome(sent))
+            warned.add(sent.value);
+    }
+    return { tokens, unsupervised, parentHeld: holds.has("parent"), warned };
+};
+/**
+ * Returns a watcher that sums the highest reported count per session, including the seed;
+ * Holds don't pause it. `resume` checks the restored total immediately, so it can warn or trip
+ * without another report (#178).
+ */
+const tokenWatcher = (attemptId, tokens, warn, seed) => {
+    const reported = new Map(seed.tokens);
+    let warned = seed.warned.has("tokens");
+    /** Trips at the limit, or warns once past the warning point. Returns the total. */
+    const check = Effect.gen(function* () {
+        const consumed = [...reported.values()].reduce((sum, value) => sum + value, 0);
+        if (consumed >= tokens.limit) {
+            yield* Effect.logWarning("Attempt reached its token limit", {
+                attemptId,
+                consumed,
+                maxAttemptTokens: tokens.limit,
+            });
+            return yield* new RunawayFailure({ ceiling: "tokens" });
         }
-        const wasHeld = holds.size > 0;
-        const payload = envelope.payload;
-        if (payload._tag === "InterventionApplied" &&
-            payload.intervention.target._tag === "Child") {
-            const id = payload.intervention.target.sessionId;
-            if (payload.state.held && !ended.has(id))
-                holds.add(id);
-            else
-                holds.delete(id);
+        if (!warned && consumed >= tokens.warnAt) {
+            warned = true;
+            yield* warn("tokens", warning("tokens", consumed, tokens.limit));
         }
-        if (payload._tag === "SessionEvent" && payload.event._tag === "SessionFinished") {
-            ended.add(payload.event.session.id);
-            holds.delete(payload.event.session.id);
+        return consumed;
+    });
+    const observe = (envelope) => recordTokens(reported, envelope) ? Effect.asVoid(check) : Effect.void;
+    const resume = Effect.gen(function* () {
+        yield* Effect.annotateCurrentSpan({ attemptId });
+        const consumed = yield* check;
+        yield* Effect.logDebug("Attempt token total is under its limit as its guard starts", {
+            attemptId,
+            consumed,
+            maxAttemptTokens: tokens.limit,
+            warned,
+        });
+    }).pipe(Effect.withSpan("AttemptGuard.resumeTokens"));
+    return { observe, resume };
+};
+/**
+ * Returns a watcher that counts unsupervised milliseconds on top of the seed, paused while any
+ * session is held. `watch` warns at the warning point unless the warning is already in the
+ * transcript, then trips at the limit. While running, it records the count every
+ * `RECORD_INTERVAL` if it grew, and once more on interruption (#178).
+ */
+const wallClockWatcher = Effect.fn("AttemptGuard.wallClockWatcher")(function* (attemptId, wallClock, warn, record, seed) {
+    const ended = new Set();
+    const holds = new Set(seed.parentHeld ? ["parent"] : []);
+    /** Signals `watch` when supervision changes; one pending signal is enough. */
+    const changed = yield* Queue.sliding(1);
+    /** Whether `watch` has started; nothing is counted before. */
+    let watching = false;
+    /** The unsupervised milliseconds of completed intervals, including the seed. */
+    let counted = Duration.toMillis(seed.unsupervised);
+    /** The start of the current unsupervised interval, or `None` while held or before `watch` runs. */
+    let since = Option.none();
+    /** The unsupervised milliseconds last persisted, initially the seed's. */
+    let recorded = counted;
+    const usedAt = (now) => counted + Option.match(since, { onNone: () => 0, onSome: (began) => now - began });
+    /**
+     * Applies the current Holds at `now`: a Hold ends the current interval, and a release while
+     * `watch` runs starts one.
+     */
+    const supervise = (now) => {
+        if (holds.size > 0) {
+            counted = usedAt(now);
+            since = Option.none();
         }
-        const isHeld = holds.size > 0;
-        if (wasHeld !== isHeld) {
-            yield* Effect.logInfo("Attempt wall-clock supervision changed", {
-                attemptId: envelope.attemptId,
-                heldChildren: holds.size,
-            });
-            yield* Queue.offer(changes, isHeld);
+        else if (watching && Option.isNone(since)) {
+            since = Option.some(now);
         }
+    };
+    const observe = (envelope) => Effect.gen(function* () {
+        const wasHeld = holds.size > 0;
+        recordHolds(holds, ended, envelope);
+        const isHeld = holds.size > 0;
+        if (wasHeld === isHeld)
+            return;
+        supervise(yield* Clock.currentTimeMillis);
+        yield* Effect.logInfo("Attempt wall-clock supervision changed", {
+            attemptId,
+            heldSessions: holds.size,
+            parentHeld: holds.has("parent"),
+            unsupervisedMillis: counted,
+        });
+        yield* Queue.offer(changed, undefined);
     });
-    const guard = Effect.fn("AttemptGuard.watch")(function* () {
-        yield* Effect.annotateCurrentSpan({ attemptId: limits.attemptId });
-        let remaining = limits.maxAttemptMinutes * 60_000;
-        let paused = false;
-        while (remaining > 0) {
-            if (paused) {
-                paused = yield* Queue.take(changes);
+    /** Waits until `until` unsupervised milliseconds are counted and returns the count. Never returns while held. */
+    const unsupervised = Effect.fn("AttemptGuard.unsupervised")(function* (until) {
+        yield* Effect.annotateCurrentSpan({ attemptId, untilMillis: until });
+        for (;;) {
+            if (holds.size > 0) {
+                yield* Queue.take(changed);
                 continue;
             }
-            const began = yield* Clock.currentTimeMillis;
-            const changed = yield* Queue.take(changes).pipe(Effect.timeoutOption(remaining));
-            if (Option.isNone(changed))
-                break;
-            remaining -= (yield* Clock.currentTimeMillis) - began;
-            paused = changed.value;
+            const used = usedAt(yield* Clock.currentTimeMillis);
+            if (used >= until)
+                return used;
+            yield* Queue.take(changed).pipe(Effect.timeoutOption(until - used));
         }
+    });
+    /** Records the unsupervised time if it grew since the last record; logs a failure. */
+    const recordCounted = Effect.fn("AttemptGuard.recordUnsupervised")(function* () {
+        yield* Effect.annotateCurrentSpan({ attemptId });
+        const used = usedAt(yield* Clock.currentTimeMillis);
+        if (used <= recorded) {
+            yield* Effect.logDebug("Attempt unsupervised time has not grown since its last record", {
+                attemptId,
+                unsupervisedMillis: used,
+            });
+            return;
+        }
+        yield* record(Duration.millis(used)).pipe(Effect.tap(() => Effect.sync(() => {
+            recorded = Math.max(recorded, used);
+        })), Effect.tapError((error) => Effect.logWarning("Could not record the Attempt's unsupervised time", {
+            attemptId,
+            unsupervisedMillis: used,
+            errorTag: error._tag,
+        })), Effect.ignore);
+    });
+    // Bounded by LAST_RECORD_GRACE; on timeout, the time since the previous record is lost.
+    const lastRecord = recordCounted().pipe(Effect.timeoutOption(LAST_RECORD_GRACE), Effect.flatMap(Option.match({
+        onSome: () => Effect.void,
+        onNone: () => Effect.logWarning("Recording the Attempt's unsupervised time exceeded its grace as its guard stopped", { attemptId, graceMillis: Duration.toMillis(LAST_RECORD_GRACE) }),
+    })));
+    const watch = Effect.gen(function* () {
+        yield* Effect.annotateCurrentSpan({ attemptId });
+        watching = true;
+        supervise(yield* Clock.currentTimeMillis);
+        if (!seed.warned.has("wall-clock")) {
+            const used = yield* unsupervised(wallClock.warnAt);
+            yield* warn("wall-clock", warning("wall-clock", Math.round(used / 6_000) / 10, wallClock.limit / 60_000));
+        }
+        yield* unsupervised(wallClock.limit);
         yield* Effect.logWarning("Attempt reached its unsupervised wall-clock limit", {
-            attemptId: limits.attemptId,
-            maxAttemptMinutes: limits.maxAttemptMinutes,
+            attemptId,
+            maxAttemptMinutes: wallClock.limit / 60_000,
         });
         return yield* new RunawayFailure({ ceiling: "wall-clock" });
-    });
-    return yield* Effect.raceFirst(run({ append }), guard());
+    }).pipe(Effect.raceFirst(Effect.forever(Effect.sleep(RECORD_INTERVAL).pipe(Effect.andThen(recordCounted())))), Effect.onInterrupt(() => lastRecord), Effect.withSpan("AttemptGuard.watch"));
+    return { observe, watch };
 });
+/**
+ * Arms the configured Attempt ceilings, each with one warning steer at `WARNING_FRACTION` of
+ * its limit. Holds pause the wall clock; tokens keep accumulating. Counts continue from `seed`,
+ * so a reattached Attempt trips at the same totals as without the restart. With no ceiling set,
+ * `sink` is `io` and `tripped` never completes.
+ */
+export const attemptGuard = (limits, io, seed) => {
+    const wallClock = Option.map(limits.maxAttemptMinutes, (minutes) => ceiling(minutes * 60_000));
+    const tokens = Option.map(limits.maxAttemptTokens, ceiling);
+    if (Option.isNone(wallClock) && Option.isNone(tokens)) {
+        return Effect.succeed({ sink: io, tripped: Effect.never });
+    }
+    return Effect.gen(function* () {
+        const warnings = yield* Queue.unbounded();
+        const warn = (ceiling, message) => Effect.logInfo("Warning the Attempt before its ceiling", {
+            attemptId: limits.attemptId,
+            ceiling,
+        }).pipe(Effect.andThen(Queue.offer(warnings, { ceiling, message })), Effect.asVoid);
+        const deliver = Effect.fn("AttemptGuard.deliverWarning")(function* (ceiling, message) {
+            yield* Effect.annotateCurrentSpan({ attemptId: limits.attemptId, ceiling });
+            yield* limits.warn(message).pipe(Effect.tap(() => Effect.logInfo("Delivered the Attempt's ceiling warning", {
+                attemptId: limits.attemptId,
+                ceiling,
+            })), Effect.tapError((error) => Effect.logWarning("Attempt ceiling warning was not delivered", {
+                attemptId: limits.attemptId,
+                ceiling,
+                errorTag: error._tag,
+            })), Effect.ignore);
+        });
+        const meter = Option.map(tokens, (tokens) => tokenWatcher(limits.attemptId, tokens, warn, seed));
+        const clock = yield* Effect.transposeOption(Option.map(wallClock, (wallClock) => wallClockWatcher(limits.attemptId, wallClock, warn, limits.recordUnsupervised, seed)));
+        const sink = {
+            append: Effect.fn("AttemptGuard.append")(function* (direction, envelope) {
+                yield* Effect.annotateCurrentSpan({ attemptId: limits.attemptId });
+                yield* io.append(direction, envelope);
+                if (Option.isSome(meter))
+                    yield* meter.value.observe(envelope);
+                if (Option.isSome(clock))
+                    yield* clock.value.observe(envelope);
+            }),
+            salvage: io.salvage,
+            comments: io.comments,
+            outOfMemory: io.outOfMemory,
+            windows: io.windows,
+            transcript: io.transcript,
+        };
+        const restoredTokens = Option.match(meter, {
+            onNone: () => Effect.never,
+            onSome: ({ resume }) => Effect.andThen(resume, Effect.never),
+        });
+        const wallClockTrip = Option.match(clock, {
+            onNone: () => Effect.never,
+            onSome: ({ watch }) => watch,
+        });
+        // Delivers warnings in a separate loop so a delivery waiting for the parent's channel doesn't
+        // delay a trip (#178).
+        const delivery = Effect.forever(Effect.flatMap(Queue.take(warnings), ({ ceiling, message }) => deliver(ceiling, message)));
+        return {
+            sink,
+            tripped: Effect.raceFirst(Effect.raceFirst(restoredTokens, wallClockTrip), delivery),
+        };
+    });
+};
 //# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEtD,4GAA4G;AAC5G,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAIC,EACD,EAAuB,EACvB,GAAoE,EAClC,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,EAAW,CAAC;IAC7C,MAAM,MAAM,GAAkC,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAC5E,QAAQ,CAAC,EAAE,SAAS,EAAE,QAAQ;QAC5B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACnE,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtC,IACE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc;YACxC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,sBAAsB,EACtD,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;YAC7E,IAAI,QAAQ,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACxC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,iCAAiC,EAAE;oBAC1D,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,QAAQ;oBACR,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACjC,IACE,OAAO,CAAC,IAAI,KAAK,qBAAqB;YACtC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAC5C,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;YACjD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;;gBACnD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAChF,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wCAAwC,EAAE;gBAC9D,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,YAAY,EAAE,KAAK,CAAC,IAAI;aACzB,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CACF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC;QACrD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,SAAS,GAAG,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC;QAClD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO,SAAS,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACpC,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;YACjF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,MAAM;YAClC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC;YACtD,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mDAAmD,EAAE;YAC5E,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;GAGG;AACH,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE9C,mEAAmE;AACnE,MAAM,cAAc,GAAG,sDAAsD,CAAC;AAE9E,MAAM,aAAa,GAAG;IACpB,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,SAAS;CAC0B,CAAC;AAEpD,MAAM,OAAO,GAAG,CAAC,OAAuB,EAAE,IAAY,EAAE,KAAa,EAAU,EAAE,CAC/E,GAAG,IAAI,OAAO,KAAK,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;AA0CpE,MAAM,OAAO,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG,gBAAgB,EAAE,CAAC,CAAC;AAM1F,iJAAiJ;AACjJ,MAAM,YAAY,GAAG,CACnB,QAAqC,EACrC,QAAiC,EACxB,EAAE;IACX,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,sBAAsB;QAClF,OAAO,KAAK,CAAC;IACf,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IAC/C,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,8FAA8F;AAC9F,MAAM,OAAO,GAAG,CAAC,OAAoD,EAAU,EAAE;IAC/E,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,QAAQ,CAAC;QACd,KAAK,eAAe;YAClB,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC,SAAS,CAAC;QAC3B,KAAK,cAAc;YACjB,OAAO,OAAO,CAAC,EAAE,CAAC;IACtB,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,GAAG,CAClB,KAAkB,EAClB,KAAkB,EAClB,QAAiC,EAC3B,EAAE;IACR,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;YACrD,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAChF,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;AACH,CAAC,CAAC;AAEF,oIAAoI;AACpI,MAAM,aAAa,GAAG,CAAC,QAAiC,EAAiC,EAAE;IACzF,IACE,QAAQ,CAAC,IAAI,KAAK,iBAAiB;QACnC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;QACjC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EACjC,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;IACzC,OAAO,MAAM,CAAC,aAAa,CACzB,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACvC,OAAO,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC,CACjE,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,UAAkD,EAClD,YAA+B,EACb,EAAE;IACpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3E,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,YAAY,GAAG,CACnB,SAAoB,EACpB,MAAe,EACf,IAAU,EACV,IAAsB,EACtB,EAAE;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,mFAAmF;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7B,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,iCAAiC,EAAE;gBAC1D,SAAS;gBACT,QAAQ;gBACR,gBAAgB,EAAE,MAAM,CAAC,KAAK;aAC/B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAa,CAAC,QAAQ,EAAE,EAAE,CACrC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;QAC9B,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,4DAA4D,EAAE;YACnF,SAAS;YACT,QAAQ;YACR,gBAAgB,EAAE,MAAM,CAAC,KAAK;YAC9B,MAAM;SACP,CAAC,CAAC;IACL,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAC3E,SAAoB,EACpB,SAAkB,EAClB,IAAU,EACV,MAAgD,EAChD,IAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,8EAA8E;IAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAO,CAAC,CAAC,CAAC;IAC9C,8DAA8D;IAC9D,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,gFAAgF;IAChF,IAAI,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,mGAAmG;IACnG,IAAI,KAAK,GAAG,MAAM,CAAC,IAAI,EAAU,CAAC;IAClC,0EAA0E;IAC1E,IAAI,QAAQ,GAAG,OAAO,CAAC;IACvB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAC7B,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC;IACrF;;;OAGG;IACH,MAAM,SAAS,GAAG,CAAC,GAAW,EAAE,EAAE;QAChC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACxB,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAa,CAAC,QAAQ,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC/B,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO;QAC/B,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,wCAAwC,EAAE;YAC9D,SAAS;YACT,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC/B,kBAAkB,EAAE,OAAO;SAC5B,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACL,iHAAiH;IACjH,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAa;QAClF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,SAAS,CAAC;YACR,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACnB,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpD,IAAI,IAAI,IAAI,KAAK;gBAAE,OAAO,IAAI,CAAC;YAC/B,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,sFAAsF;IACtF,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC;QAC1E,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpD,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACrB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,+DAA+D,EAAE;gBACtF,SAAS;gBACT,kBAAkB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,kDAAkD,EAAE;YACpE,SAAS;YACT,kBAAkB,EAAE,IAAI;YACxB,QAAQ,EAAE,KAAK,CAAC,IAAI;SACrB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,wFAAwF;IACxF,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC,IAAI,CACrC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,EACvC,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,KAAK,CAAC;QACX,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;QACzB,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,UAAU,CACf,mFAAmF,EACnF,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CACjE;KACJ,CAAC,CACH,CACF,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,QAAQ,GAAG,IAAI,CAAC;QAChB,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACnD,KAAK,CAAC,CAAC,IAAI,CACT,YAAY,EACZ,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,KAAK,GAAG,MAAM,CAAC,CAC/E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,mDAAmD,EAAE;YAC5E,SAAS;YACT,iBAAiB,EAAE,SAAS,CAAC,KAAK,GAAG,MAAM;SAC5C,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,SAAS,CACd,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CACpF,EACD,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,EACpC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CACtC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC,CAAC,CAAC;AAkBH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAA0B,EAC1B,EAAuB,EACvB,IAAsB,EACO,EAAE;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,EAGnC,CAAC;QACL,MAAM,IAAI,GAAS,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACtC,MAAM,CAAC,OAAO,CAAC,wCAAwC,EAAE;YACvD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO;SACR,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAChE,OAAuB,EACvB,OAAe;YAEf,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5E,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CACd,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE;gBACxD,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO;aACR,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,2CAA2C,EAAE;gBAC7D,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO;gBACP,QAAQ,EAAE,KAAK,CAAC,IAAI;aACrB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAC1C,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CACnD,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,CACzC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,CAClC,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,CACrF,CACF,CAAC;QACF,MAAM,IAAI,GAAwB;YAChC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,QAAQ;gBACrE,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;gBACnE,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACtC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC/D,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjE,CAAC,CAAC;YACF,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ;YACrB,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,UAAU,EAAE,EAAE,CAAC,UAAU;SAC1B,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;YACzC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK;YAC1B,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;YACxC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK;YAC1B,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK;SAC7B,CAAC,CAAC;QACH,8FAA8F;QAC9F,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAC1F,CAAC;QACF,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC;SACrF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/harness-preflight.d.ts

@@ -1,6 +1,28 @@
-import { BrainSpec } from "@usine/core/agent/brain";
-import { Effect } from "effect";
-import { ExecutorOperationError, type RunHostCommand, WorkerCapabilityError } from "./executor.ts";
-/** Uses the installed run host so both adapters check the same worker-side harness contract. */
-export declare const verifyHarnesses: (worker: string & import("effect/Brand").Brand<"WorkerName">, brains: readonly BrainSpec[], runHost: RunHostCommand, execute: (command: string, args: ReadonlyArray<string>) => Effect.Effect<string, ExecutorOperationError>) => Effect.Effect<undefined, import("./executor.ts").CredentialUnavailableError | ExecutorOperationError | WorkerCapabilityError, never>;
+import type { ChildHost } from "@usine/agents/child-host";
+import type { BrainSpec } from "@usine/core/agent/brain";
+import type { HarnessReadiness } from "@usine/core/agent/capability";
+import type { MachineId, WorkerName } from "@usine/core/worker";
+import { Effect, Option } from "effect";
+import { ChildProcessSpawner } from "effect/process";
+import { ExecutorOperationError, WorkerCapabilityError } from "./executor.ts";
+/**
+ * A function that reports one brain's readiness on a Worker. Only a readiness report indicates a
+ * capability gap; transport failures and timeouts are retryable `ExecutorOperationError`s.
+ */
+export type HarnessProbe = (brain: BrainSpec) => Effect.Effect<HarnessReadiness, ExecutorOperationError | WorkerCapabilityError>;
+/**
+ * Probes each distinct brain on `worker`, or on its provisioned `machine` if `Some`, and fails with
+ * a capability error if a harness is unavailable. A Claude probe holds that login's lock in
+ * `logins`, so two preparations never refresh one Claude login concurrently or while a Claude
+ * child starts (#453).
+ */
+export declare const verifyHarnessReadiness: (worker: string & import("effect/Brand").Brand<"WorkerName">, machine: Option.Option<string & import("effect/Brand").Brand<"MachineId">>, brains: readonly BrainSpec[], probe: HarnessProbe, logins: {
+    readonly withLock: (worker: WorkerName, machine: Option.Option<MachineId>) => <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
+}) => Effect.Effect<undefined, import("./executor.ts").CredentialUnavailableError | ExecutorOperationError | WorkerCapabilityError, never>;
+/**
+ * Returns a probe that checks one brain where `host` runs children, with `environment` as the
+ * child's environment (ADR 0011). A timeout or unreachable host is a retryable infrastructure
+ * error.
+ */
+export declare const agentsHarnessProbe: (spawner: ChildProcessSpawner.ChildProcessSpawner["Service"], host: ChildHost, environment: Readonly<Record<string, string>>) => HarnessProbe;
 //# sourceMappingURL=harness-preflight.d.ts.map

package/dist/harness-preflight.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-preflight.d.ts","sourceRoot":"","sources":["../src/harness-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,OAAO,EAAgB,MAAM,EAAU,MAAM,QAAQ,CAAC;AACtD,OAAO,EAEL,sBAAsB,EACtB,KAAK,cAAc,EACnB,qBAAqB,EACtB,MAAM,eAAe,CAAC;AAEvB,gGAAgG;AAChG,eAAO,MAAM,eAAe,0IAKf,MAAM,QACT,aAAa,CAAC,MAAM,CAAC,KACxB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,yIA2D7B,CAAC"}
+{"version":3,"file":"harness-preflight.d.ts","sourceRoot":"","sources":["../src/harness-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAG1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAgB,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAuB,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAEnG;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,KAAK,EAAE,SAAS,KACb,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,qBAAqB,CAAC,CAAC;AAErF;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB;;0IAmCZ,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,YAElB,mBAAmB,CAAC,mBAAmB,CAAC,SAAS,CAAC,QACrD,SAAS,eACF,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAC5C,YAcA,CAAC"}

package/dist/harness-preflight.js

@@ -1,36 +1,27 @@
-import { BrainSpec } from "@usine/core/agent/brain";
-import { HarnessReadiness } from "@usine/core/agent/capability";
-import { Array as Arr, Effect, Schema } from "effect";
-import { logPreflightFailure, ExecutorOperationError, WorkerCapabilityError, } from "./executor.js";
-/** Uses the installed run host so both adapters check the same worker-side harness contract. */
-export const verifyHarnesses = Effect.fn("Executor.verifyHarnesses")(function* (worker, brains, runHost, execute) {
-    yield* Effect.annotateCurrentSpan({ worker });
+import { preflight } from "@usine/agents/preflight";
+import { Array as Arr, Effect, Option } from "effect";
+import { ChildProcessSpawner } from "effect/process";
+import { logPreflightFailure, ExecutorOperationError, WorkerCapabilityError } from "./executor.js";
+/**
+ * Probes each distinct brain on `worker`, or on its provisioned `machine` if `Some`, and fails with
+ * a capability error if a harness is unavailable. A Claude probe holds that login's lock in
+ * `logins`, so two preparations never refresh one Claude login concurrently or while a Claude
+ * child starts (#453).
+ */
+export const verifyHarnessReadiness = Effect.fn("Executor.verifyHarnessReadiness")(function* (worker, machine, brains, probe, logins) {
+    const fields = {
+        worker,
+        ...Option.match(machine, { onNone: () => ({}), onSome: (id) => ({ machine: id }) }),
+    };
+    yield* Effect.annotateCurrentSpan(fields);
     const distinct = Arr.dedupe(brains);
     for (const brain of distinct) {
-        // Only a worker's readiness report proves a capability gap. Transport
-        // failures and timeouts remain infrastructure failures eligible for retry.
-        const response = yield* execute(runHost.command, [
-            ...runHost.args,
-            "--preflight",
-            Schema.encodeSync(Schema.fromJsonString(BrainSpec))(brain),
-        ]).pipe(Effect.timeout("75 seconds"), Effect.catchTag("TimeoutError", (cause) => new ExecutorOperationError({
-            operation: "preflight",
-            message: `Worker ${worker} did not finish probing ${brain.harness} readiness`,
-            cause,
-        })));
-        const result = yield* Schema.decodeUnknownEffect(Schema.fromJsonString(HarnessReadiness))(response, { onExcessProperty: "error" }).pipe(Effect.mapError(() => new WorkerCapabilityError({
-            worker,
-            capability: "run-host",
-            message: `Worker ${worker} returned an invalid harness preflight response; update its run host`,
-            cause: new Error("invalid harness readiness response"),
-        })));
-        if (result.harness !== brain.harness)
-            return yield* new WorkerCapabilityError({
-                worker,
-                capability: "run-host",
-                message: `Worker ${worker} returned readiness for the wrong harness`,
-                cause: new Error("harness readiness mismatch"),
-            });
+        const result = yield* brain.harness === "claude"
+            ? Effect.logDebug("Checking Claude under its Claude login lock", {
+                ...fields,
+                model: brain.model,
+            }).pipe(Effect.andThen(logins.withLock(worker, machine)(probe(brain))))
+            : probe(brain);
         if (result._tag === "HarnessUnavailableError")
             return yield* new WorkerCapabilityError({
                 worker,
@@ -47,4 +38,14 @@ export const verifyHarnesses = Effect.fn("Executor.verifyHarnesses")(function* (
     if (distinct.length === 0)
         yield* Effect.logDebug("No rostered harnesses to preflight", { worker });
 }, logPreflightFailure);
+/**
+ * Returns a probe that checks one brain where `host` runs children, with `environment` as the
+ * child's environment (ADR 0011). A timeout or unreachable host is a retryable infrastructure
+ * error.
+ */
+export const agentsHarnessProbe = (spawner, host, environment) => (brain) => preflight(brain, host, environment).pipe(Effect.map((ready) => ready), Effect.catchTag("HarnessUnavailableError", (unavailable) => Effect.succeed(unavailable)), Effect.mapError((cause) => new ExecutorOperationError({
+    operation: "preflight",
+    message: cause.message,
+    cause,
+})), Effect.provideService(ChildProcessSpawner.ChildProcessSpawner, spawner));
 //# sourceMappingURL=harness-preflight.js.map

package/dist/harness-preflight.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness-preflight.js","sourceRoot":"","sources":["../src/harness-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,EAAE,KAAK,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAEvB,gGAAgG;AAChG,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAC5E,MAAkB,EAClB,MAAgC,EAChC,OAAuB,EACvB,OAGkD;IAElD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,sEAAsE;QACtE,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE;YAC/C,GAAG,OAAO,CAAC,IAAI;YACf,aAAa;YACb,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;SAC3D,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAC5B,MAAM,CAAC,QAAQ,CACb,cAAc,EACd,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;YACzB,SAAS,EAAE,WAAW;YACtB,OAAO,EAAE,UAAU,MAAM,2BAA2B,KAAK,CAAC,OAAO,YAAY;YAC7E,KAAK;SACN,CAAC,CACL,CACF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CACvF,QAAQ,EACR,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAC9B,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,GAAG,EAAE,CACH,IAAI,qBAAqB,CAAC;YACxB,MAAM;YACN,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,UAAU,MAAM,sEAAsE;YAC/F,KAAK,EAAE,IAAI,KAAK,CAAC,oCAAoC,CAAC;SACvD,CAAC,CACL,CACF,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAClC,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,UAAU;gBACtB,OAAO,EAAE,UAAU,MAAM,2CAA2C;gBACpE,KAAK,EAAE,IAAI,KAAK,CAAC,4BAA4B,CAAC;aAC/C,CAAC,CAAC;QACL,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAyB;YAC3C,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW;gBACzE,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,EAAE;YACzD,MAAM;YACN,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QACvB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC,EAAE,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"harness-preflight.js","sourceRoot":"","sources":["../src/harness-preflight.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAKpD,OAAO,EAAE,KAAK,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAUnG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAC1F,MAAkB,EAClB,OAAiC,EACjC,MAAgC,EAChC,KAAmB,EACnB,MAAkC;IAElC,MAAM,MAAM,GAAG;QACb,MAAM;QACN,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;KACpF,CAAC;IACF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;YAC9C,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,6CAA6C,EAAE;gBAC7D,GAAG,MAAM;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjB,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAyB;YAC3C,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gBACtC,MAAM;gBACN,UAAU,EAAE,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW;gBACzE,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,EAAE;YACzD,MAAM;YACN,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QACvB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAC7B,CACE,OAA2D,EAC3D,IAAe,EACf,WAA6C,EAC/B,EAAE,CAClB,CAAC,KAAK,EAAE,EAAE,CACR,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC,KAAK,CAAC,EAC9C,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EACxF,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;IACzB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,KAAK;CACN,CAAC,CACL,EACD,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,OAAO,CAAC,CACxE,CAAC"}

package/dist/keyed-lock.d.ts

@@ -3,9 +3,8 @@ export interface KeyedLock<in K> {
     readonly withLock: (key: K) => <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, R>;
 }
 /**
- * One mutex per key. `PartitionedSemaphore` is not this: its `permits` option
- * is one shared pool and the partition key only orders waiters, so
- * `make({ permits: 1 })` serializes every key behind a single global permit.
+ * Returns one mutex per key. `PartitionedSemaphore` doesn't provide this: its `permits` is one
+ * shared pool, so `make({ permits: 1 })` serializes every key.
  */
 export declare const keyedLockFor: <K>() => Effect.Effect<KeyedLock<K>>;
 //# sourceMappingURL=keyed-lock.d.ts.map

package/dist/keyed-lock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keyed-lock.d.ts","sourceRoot":"","sources":["../src/keyed-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAEhD,MAAM,WAAW,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,CACjB,GAAG,EAAE,CAAC,KACH,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;CAC1E;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,CAAC,OAAK,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAcxD,CAAC"}
+{"version":3,"file":"keyed-lock.d.ts","sourceRoot":"","sources":["../src/keyed-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAEhD,MAAM,WAAW,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,CACjB,GAAG,EAAE,CAAC,KACH,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;CAC1E;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,CAAC,OAAK,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAcxD,CAAC"}

package/dist/keyed-lock.js

@@ -1,8 +1,7 @@
 import { Effect, Ref, Semaphore } from "effect";
 /**
- * One mutex per key. `PartitionedSemaphore` is not this: its `permits` option
- * is one shared pool and the partition key only orders waiters, so
- * `make({ permits: 1 })` serializes every key behind a single global permit.
+ * Returns one mutex per key. `PartitionedSemaphore` doesn't provide this: its `permits` is one
+ * shared pool, so `make({ permits: 1 })` serializes every key.
  */
 export const keyedLockFor = () => Effect.map(Ref.make(new Map()), (locks) => ({
     withLock: (key) => {

package/dist/keyed-lock.js.map

@@ -1 +1 @@
-{"version":3,"file":"keyed-lock.js","sourceRoot":"","sources":["../src/keyed-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAQhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAmC,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClE,QAAQ,EAAE,CAAC,GAAM,EAAE,EAAE;QACnB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;YAChE,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAU,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,CAAU,MAA8B,EAA0B,EAAE,CACzE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF,CAAC,CAAC,CAAC"}
+{"version":3,"file":"keyed-lock.js","sourceRoot":"","sources":["../src/keyed-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAQhD;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAmC,EAAE,CAC/D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClE,QAAQ,EAAE,CAAC,GAAM,EAAE,EAAE;QACnB,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;YAChE,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvB,OAAO,CAAC,OAAO,EAAE,IAAI,CAAU,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO,CAAU,MAA8B,EAA0B,EAAE,CACzE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;CACF,CAAC,CAAC,CAAC"}

package/dist/leftovers.d.ts

@@ -0,0 +1,9 @@
+import type { WorkerName } from "@usine/core/worker";
+import { Effect } from "effect";
+/**
+ * Caches `list` per Worker for the life of one executor; concurrent callers share one listing.
+ * Failures are cached too, so an unreachable Worker is listed once and its checkouts stay until
+ * the next start.
+ */
+export declare const listedOncePerWorker: <A, E>(list: (worker: WorkerName) => Effect.Effect<A, E>) => Effect.Effect<(worker: WorkerName) => Effect.Effect<A, E, never>, never, never>;
+//# sourceMappingURL=leftovers.d.ts.map

package/dist/leftovers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leftovers.d.ts","sourceRoot":"","sources":["../src/leftovers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAS,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEvC;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAwD,CAAC,EAAE,CAAC,iBAC3E,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,4BAcjC,UAAU,8CAC1B,CAAC"}

package/dist/leftovers.js

@@ -0,0 +1,14 @@
+import { Cache, Effect } from "effect";
+/**
+ * Caches `list` per Worker for the life of one executor; concurrent callers share one listing.
+ * Failures are cached too, so an unreachable Worker is listed once and its checkouts stay until
+ * the next start.
+ */
+export const listedOncePerWorker = Effect.fn("Executor.listedOncePerWorker")(function* (list) {
+    const listed = yield* Cache.make({
+        capacity: Number.POSITIVE_INFINITY,
+        lookup: (worker) => list(worker).pipe(Effect.tapError((error) => Effect.logWarning("Could not list leftover checkouts; this Worker is not reconciled until the next start", { worker, message: String(error) }))),
+    });
+    return (worker) => Cache.get(listed, worker);
+});
+//# sourceMappingURL=leftovers.js.map

package/dist/leftovers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leftovers.js","sourceRoot":"","sources":["../src/leftovers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EACpF,IAAiD;IAEjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,iBAAiB;QAClC,MAAM,EAAE,CAAC,MAAkB,EAAE,EAAE,CAC7B,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACf,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CACf,uFAAuF,EACvF,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CACnC,CACF,CACF;KACJ,CAAC,CAAC;IACH,OAAO,CAAC,MAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC"}

package/dist/local/credentials.d.ts

@@ -0,0 +1,21 @@
+import { Effect, FileSystem } from "effect";
+import { CredentialProvider, ExecutorOperationError } from "../executor.ts";
+/**
+ * Writes the Attempt's renewed credential to a private temporary directory outside the
+ * checkout, removed when the Attempt scope closes.
+ */
+export declare const localCredentialsFor: Effect.Effect<(repository: string & import("effect/Brand").Brand<"RepositoryName">, attemptId: string & import("effect/Brand").Brand<"AttemptId">, permissions: "read" | "write", baseEnvironment: Record<string, string>) => Effect.Effect<{
+    refresh: () => Effect.Effect<void, import("../executor.ts").CredentialUnavailableError | import("effect/PlatformError").PlatformError, never>;
+    scrub: (text: string) => string;
+    environment: {
+        GH_CONFIG_DIR: string;
+        GH_PROMPT_DISABLED: string;
+        USINE_GITHUB_TOKEN_FILE: string;
+        GIT_CONFIG_COUNT: string;
+        GIT_CONFIG_KEY_0: string;
+        GIT_CONFIG_VALUE_0: string;
+        GIT_CONFIG_KEY_1: string;
+        GIT_CONFIG_VALUE_1: string;
+    };
+}, import("../executor.ts").CredentialUnavailableError | ExecutorOperationError, import("effect/Scope").Scope>, never, CredentialProvider | FileSystem.FileSystem>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/local/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/local/credentials.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAY,MAAM,QAAQ,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAyB,MAAM,gBAAgB,CAAC;AAGnG;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;kKAsD9B,CAAC"}