@usine/executor 0.2.1 → 0.4.0

package/dist/local/credentials.js

@@ -0,0 +1,39 @@
+import { Effect, FileSystem, Redacted } from "effect";
+import { credentialEnvironment, GH_CONFIG, ghHostsConfig } from "../credential-environment.js";
+import { CredentialProvider, ExecutorOperationError } from "../executor.js";
+import { renewableCredential } from "../renewable-credential.js";
+/**
+ * Writes the Attempt's renewed credential to a private temporary directory outside the
+ * checkout, removed when the Attempt scope closes.
+ */
+export const localCredentialsFor = Effect.gen(function* () {
+    const provider = yield* CredentialProvider;
+    const fs = yield* FileSystem.FileSystem;
+    return Effect.fn("LocalExecutor.credentials")(function* (repository, attemptId, permissions, baseEnvironment) {
+        yield* Effect.annotateCurrentSpan({ repository, attemptId, permissions });
+        const directory = yield* fs.makeTempDirectoryScoped({ prefix: "usine-credentials-" });
+        yield* fs.chmod(directory, 0o700);
+        yield* fs.writeFileString(`${directory}/config.yml`, GH_CONFIG, { mode: 0o600 });
+        const { refresh, scrub } = yield* renewableCredential(provider.issue, repository, attemptId, permissions, Effect.fn("LocalExecutor.writeCredential")(function* ({ value }) {
+            // Writes then renames so readers never see a partial token.
+            yield* fs.writeFileString(`${directory}/token.next`, Redacted.value(value), {
+                mode: 0o600,
+            });
+            yield* fs.rename(`${directory}/token.next`, `${directory}/token`);
+            yield* fs.writeFileString(`${directory}/hosts.next`, ghHostsConfig(Redacted.value(value)), {
+                mode: 0o600,
+            });
+            yield* fs.rename(`${directory}/hosts.next`, `${directory}/hosts.yml`);
+        }));
+        return {
+            refresh,
+            scrub,
+            environment: { ...baseEnvironment, ...credentialEnvironment(directory) },
+        };
+    }, (effect) => effect.pipe(Effect.catchTag("PlatformError", (cause) => Effect.fail(new ExecutorOperationError({
+        operation: "prepare",
+        message: "Can't write the attempt's credential files",
+        cause,
+    })))));
+});
+//# sourceMappingURL=credentials.js.map

package/dist/local/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/local/credentials.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAyB,MAAM,gBAAgB,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,OAAO,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAC3C,QAAQ,CAAC,EACP,UAA0B,EAC1B,SAAoB,EACpB,WAA4B,EAC5B,eAAuC;QAEvC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,uBAAuB,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtF,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,SAAS,aAAa,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACnD,QAAQ,CAAC,KAAK,EACd,UAAU,EACV,SAAS,EACT,WAAW,EACX,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAoB;YAC/E,4DAA4D;YAC5D,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,SAAS,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBAC1E,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,aAAa,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;YAClE,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CACvB,GAAG,SAAS,aAAa,EACzB,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EACpC;gBACE,IAAI,EAAE,KAAK;aACZ,CACF,CAAC;YACF,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,aAAa,EAAE,GAAG,SAAS,YAAY,CAAC,CAAC;QACxE,CAAC,CAAC,CACH,CAAC;QACF,OAAO;YACL,OAAO;YACP,KAAK;YACL,WAAW,EAAE,EAAE,GAAG,eAAe,EAAE,GAAG,qBAAqB,CAAC,SAAS,CAAC,EAAE;SACzE,CAAC;IACJ,CAAC,EACD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CACzC,MAAM,CAAC,IAAI,CACT,IAAI,sBAAsB,CAAC;QACzB,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,4CAA4C;QACrD,KAAK;KACN,CAAC,CACH,CACF,CACF,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/local/leftovers.d.ts

@@ -0,0 +1,8 @@
+import type { WorkerName } from "@usine/core/worker";
+import { Effect, FileSystem, Path } from "effect";
+/**
+ * Lists checkout paths under each local Worker's `attempts` directory, once per Worker per
+ * executor. Returns an empty set if the directory doesn't exist.
+ */
+export declare const workerLeftoversFor: (workersRoot: string) => Effect.Effect<(worker: WorkerName) => Effect.Effect<ReadonlySet<string>, import("effect/PlatformError").PlatformError, never>, never, FileSystem.FileSystem | Path.Path>;
+//# sourceMappingURL=leftovers.d.ts.map

package/dist/local/leftovers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leftovers.d.ts","sourceRoot":"","sources":["../../src/local/leftovers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAGlD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,mMAqB7B,CAAC"}

package/dist/local/leftovers.js

@@ -0,0 +1,23 @@
+import { Effect, FileSystem, Path } from "effect";
+import { listedOncePerWorker } from "../leftovers.js";
+/**
+ * Lists checkout paths under each local Worker's `attempts` directory, once per Worker per
+ * executor. Returns an empty set if the directory doesn't exist.
+ */
+export const workerLeftoversFor = Effect.fn("LocalExecutor.workerLeftoversFor")(function* (workersRoot) {
+    const fileSystem = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    return yield* listedOncePerWorker(Effect.fn("LocalExecutor.listWorkerLeftovers")(function* (worker) {
+        yield* Effect.annotateCurrentSpan({ worker, host: "local" });
+        const root = path.join(workersRoot, worker, "attempts");
+        const entries = (yield* fileSystem.exists(root)) ? yield* fileSystem.readDirectory(root) : [];
+        const checkouts = new Set(entries.map((entry) => path.join(root, entry)));
+        yield* Effect.logInfo("Listed local checkouts left for reconciliation", {
+            worker,
+            host: "local",
+            checkouts: checkouts.size,
+        });
+        return checkouts;
+    }));
+});
+//# sourceMappingURL=leftovers.js.map

package/dist/local/leftovers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leftovers.js","sourceRoot":"","sources":["../../src/local/leftovers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EACvF,WAAmB;IAEnB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,OAAO,KAAK,CAAC,CAAC,mBAAmB,CAC/B,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAkB;QAC1E,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM,SAAS,GAAwB,IAAI,GAAG,CAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC/C,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,gDAAgD,EAAE;YACtE,MAAM;YACN,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,SAAS,CAAC,IAAI;SAC1B,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/local/local.d.ts

@@ -1,20 +1,26 @@
+import { ClaudeLoginLock } from "@usine/agents/runtime";
 import { RepositoryName } from "@usine/core/repository";
 import { InstanceDirectory } from "@usine/core/instance";
+import type { AttemptRuntime } from "@usine/durable/attempt-runtime";
 import { Effect, FileSystem, Layer, Path } from "effect";
-import { ChildProcessSpawner } from "effect/unstable/process";
-import { CredentialProvider, Executor, type RunHostCommand } from "../executor.ts";
-export type { RunHostCommand } from "../executor.ts";
-/** Storage and run-host settings for Attempts executed on the local machine. */
+import { ChildProcessSpawner } from "effect/process";
+import { CredentialProvider, Executor } from "../executor.ts";
+import { type HarnessProbe } from "../harness-preflight.ts";
+export type { HarnessProbe } from "../harness-preflight.ts";
 export interface LocalExecutorOptions {
-    /** Factory folder under which local Worker caches and Attempt checkouts are stored. */
+    /** The directory for local Worker caches and Attempt checkouts. */
     readonly instanceDirectory: InstanceDirectory;
-    /** How to launch the one-shot run host; the composition root resolves it. */
-    readonly runHost: RunHostCommand;
-    /** Repository fetch URL override, for example a local mirror; defaults to the GitHub HTTPS clone URL. */
+    /** Returns the fetch URL for `repository`, for example a local mirror. Defaults to the GitHub HTTPS clone URL. */
     readonly repositoryUrl?: (repository: RepositoryName) => string;
-    /** Grace for delivering a stop request, then for the run host to exit; each wait is bounded separately. Defaults to two seconds. */
+    /** The timeout for the parent task's cancellation, then separately for the Attempt to finish. Defaults to two seconds. */
     readonly interruptGrace?: Parameters<typeof Effect.timeoutOption>[1];
+    /** Defaults to the `@usine/agents/preflight` checks, which send no prompt. */
+    readonly harnessReadiness?: HarnessProbe;
 }
-/** Runs Attempts in isolated checkouts on the local machine. Requires Node; worker contracts are platform-free. */
-export declare const layer: (options: LocalExecutorOptions) => Layer.Layer<Executor, never, CredentialProvider | FileSystem.FileSystem | Path.Path | ChildProcessSpawner.ChildProcessSpawner>;
+/**
+ * The executor for the local machine. Each Attempt runs in its own checkout with its Pi parent
+ * as a durable task in this process (`AttemptRuntime`), so a live Attempt reattaches after an
+ * orchestrator restart. Requires Node.
+ */
+export declare const layer: (options: LocalExecutorOptions) => Layer.Layer<Executor, never, AttemptRuntime | ClaudeLoginLock | CredentialProvider | FileSystem.FileSystem | Path.Path | ChildProcessSpawner.ChildProcessSpawner>;
 //# sourceMappingURL=local.d.ts.map

package/dist/local/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/local/local.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EACL,MAAM,EACN,UAAU,EACV,KAAK,EACL,IAAI,EAML,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAgB,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAEL,kBAAkB,EAClB,QAAQ,EAKR,KAAK,cAAc,EAGpB,MAAM,gBAAgB,CAAC;AAaxB,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,uFAAuF;IACvF,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,yGAAyG;IACzG,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,MAAM,CAAC;IAChE,oIAAoI;IACpI,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACtE;AAoVD,mHAAmH;AACnH,eAAO,MAAM,KAAK,YACP,oBAAoB,KAC5B,KAAK,CAAC,KAAK,CACZ,QAAQ,EACR,KAAK,EACL,kBAAkB,GAAG,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC,mBAAmB,CAC3C,CAAC"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/local/local.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAKxD,OAAO,EAAE,cAAc,EAAe,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAOzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EACL,MAAM,EACN,UAAU,EACV,KAAK,EAEL,IAAI,EAIL,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAqB,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAIxE,OAAO,EAGL,kBAAkB,EAClB,QAAQ,EAOT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,yBAAyB,CAAC;AAqBjC,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACnC,mEAAmE;IACnE,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,kHAAkH;IAClH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,MAAM,CAAC;IAChE,0HAA0H;IAC1H,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,8EAA8E;IAC9E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC;CAC1C;AA0gBD;;;;GAIG;AACH,eAAO,MAAM,KAAK,YACP,oBAAoB,KAC5B,KAAK,CAAC,KAAK,CACZ,QAAQ,EACR,KAAK,EACH,cAAc,GACd,eAAe,GACf,kBAAkB,GAClB,UAAU,CAAC,UAAU,GACrB,IAAI,CAAC,IAAI,GACT,mBAAmB,CAAC,mBAAmB,CACY,CAAC"}

package/dist/local/local.js

@@ -1,21 +1,25 @@
+import { workerLeftoversFor } from "./leftovers.js";
+import { localCredentialsFor } from "./credentials.js";
+import { LocalProcess } from "@usine/agents/child-host";
+import { ClaudeLoginLock } from "@usine/agents/runtime";
 import * as AttemptChannel from "@usine/core/attempt/channel";
-import { RepositoryName } from "@usine/core/repository";
+import { InfraFailure } from "@usine/core/attempt/failure";
+import { RepositoryName, safeSegment } from "@usine/core/repository";
 import { InstanceDirectory } from "@usine/core/instance";
-import { Effect, FileSystem, Layer, Path, Redacted, Result, Schema, Stream, } from "effect";
-import { ChildProcess, ChildProcessSpawner } from "effect/unstable/process";
+import { harvestFacts, harvestPostedComments, } from "@usine/core/step/harvest";
+import { Effect, FileSystem, Layer, Option, Path, Result, Schema, } from "effect";
+import { ChildProcessSpawner } from "effect/process";
+import { platform, totalmem } from "node:os";
 import { allowlistedEnvironment, collectCommand, requireSuccess } from "../child-command.js";
-import { CheckoutRequest, CredentialProvider, Executor, ExecutorError, ExecutorOperationError, logPreflightFailure, WorkerCapabilityError, } from "../executor.js";
-import { verifyHarnesses } from "../harness-preflight.js";
-import { prepareAttempt } from "../prepared-attempt.js";
+import { durableSessionFor } from "../durable-session.js";
+import { CheckoutRequest, CredentialProvider, Executor, ExecutorError, ExecutorOperationError, fullPreflight, logPreflightFailure, WorkerCapabilityError, } from "../executor.js";
+import { agentsHarnessProbe, verifyHarnessReadiness, } from "../harness-preflight.js";
+import { childEnvironment, commitIdentity } from "../child-environment.js";
 import { keyedLockFor } from "../keyed-lock.js";
-import { cacheDirectoryName, isCacheDirectoryName, provisionWorktree, safeSegment, } from "../provision.js";
-import { runHostSessionFor } from "../run-host-session.js";
+import { SwapOnDemand, verifyLinuxMemory, verifyWorkerMemory, WorkerMemory, } from "../memory-preflight.js";
+import { cacheDirectoryName, isCacheDirectoryName, keptCheckoutRecovery, linkedWorktree, provisionWorktree, reattachWorktree, recoverWorktree, recoveryFields, } from "../provision.js";
 const isExecutorError = Schema.is(ExecutorError);
-/**
- * The run host inherits only these variables. The App private key and every
- * other orchestrator secret stay out; the single-repo worker token is the only
- * credential it receives (ADR 0011).
- */
+/** The only process variables passed to an Attempt's git and gh commands (ADR 0011). */
 const HOST_ENVIRONMENT_ALLOWLIST = [
     "HOME",
     "LANG",
@@ -26,31 +30,20 @@ const HOST_ENVIRONMENT_ALLOWLIST = [
     "USER",
 ];
 const executorError = (operation, message, cause) => new ExecutorOperationError({ operation, message, cause });
-/** Removes the credential from text before it can reach a persisted error message. */
-const scrubbed = (text, credential) => text.replaceAll(Redacted.value(credential), "[REDACTED]");
-const credentialEnvironment = (base, credential) => {
-    const token = Redacted.value(credential);
-    return {
-        ...base,
-        GH_TOKEN: token,
-        GITHUB_TOKEN: token,
-        GIT_CONFIG_COUNT: "1",
-        GIT_CONFIG_KEY_0: "credential.helper",
-        GIT_CONFIG_VALUE_0: "!f() { echo username=x-access-token; echo password=$GITHUB_TOKEN; }; f",
-    };
-};
 const makeLocalExecutor = (options) => Effect.gen(function* () {
-    const credentials = yield* CredentialProvider;
+    const credentials = yield* localCredentialsFor;
     const fileSystem = yield* FileSystem.FileSystem;
     const path = yield* Path.Path;
     const spawner = yield* ChildProcessSpawner.ChildProcessSpawner;
     const fetches = yield* keyedLockFor();
+    const logins = yield* ClaudeLoginLock;
     const baseEnvironment = yield* allowlistedEnvironment(HOST_ENVIRONMENT_ALLOWLIST);
+    const harnessReadiness = options.harnessReadiness ?? agentsHarnessProbe(spawner, new LocalProcess(), baseEnvironment);
     const repositoryUrl = options.repositoryUrl ??
         ((repository) => `https://github.com/${repository}.git`);
-    const runHost = options.runHost;
     const interruptGrace = options.interruptGrace ?? "2 seconds";
     const workersRoot = path.join(options.instanceDirectory, ".usine", "workers");
+    const session = yield* durableSessionFor({ interruptGrace });
     const executeCommand = Effect.fn("LocalExecutor.executeCommand")(function* (operation, command, args, commandOptions = {}) {
         yield* Effect.annotateCurrentSpan({ host: "local", operation });
         const result = yield* collectCommand(spawner, operation, command, args, {
@@ -63,27 +56,30 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
     const run = Effect.fn("LocalExecutor.run")(function* (operation, command, args, commandOptions = {}) {
         yield* executeCommand(operation, command, args, commandOptions);
     });
-    // Worktrees never outlive their Attempt (ADR 0006). A crashed orchestrator
-    // leaves directories and bare-cache registrations behind; the sweep reclaims
-    // them at the next layer build, before new Attempts start.
+    // Git can print the token in diagnostics, so output is scrubbed before it's put in an error or
+    // parsed.
+    const credentialedGit = (credential, author) => {
+        const environment = { ...credential.environment, ...commitIdentity(author) };
+        return (operation, args) => Effect.gen(function* () {
+            yield* credential.refresh();
+            const result = yield* collectCommand(spawner, operation, "git", args, {
+                env: environment,
+                extendEnv: false,
+            });
+            return yield* requireSuccess(operation, "local", "git", args, {
+                ...result,
+                stdout: credential.scrub(result.stdout),
+                stderr: credential.scrub(result.stderr),
+            });
+        });
+    };
+    // Startup only prunes worktree registrations whose directories are gone; recovery removes
+    // checkouts. Unknown leftovers and checkouts awaiting reattachment stay on disk.
     const sweepAbandonedWorktrees = Effect.fn("LocalExecutor.sweepAbandonedWorktrees")(function* () {
         if (!(yield* fileSystem.exists(workersRoot)))
             return;
         const workers = yield* fileSystem.readDirectory(workersRoot);
         for (const worker of workers) {
-            const attemptsRoot = path.join(workersRoot, worker, "attempts");
-            if (yield* fileSystem.exists(attemptsRoot)) {
-                const leftovers = yield* fileSystem.readDirectory(attemptsRoot);
-                for (const leftover of leftovers) {
-                    const target = path.join(attemptsRoot, leftover);
-                    yield* Effect.logInfo("Sweeping abandoned Attempt worktree", {
-                        worker,
-                        host: "local",
-                        worktree: target,
-                    });
-                    yield* fileSystem.remove(target, { recursive: true, force: true });
-                }
-            }
             const reposRoot = path.join(workersRoot, worker, "repos");
             if (yield* fileSystem.exists(reposRoot)) {
                 const entries = yield* fileSystem.readDirectory(reposRoot);
@@ -131,144 +127,221 @@ const makeLocalExecutor = (options) => Effect.gen(function* () {
     yield* sweepAbandonedWorktrees().pipe(Effect.tapError((error) => Effect.logWarning("Abandoned-worktree sweep failed; continuing", {
         message: String(error),
     })), Effect.ignore);
-    const preflight = Effect.fn("LocalExecutor.preflight")(function* (worker, brains) {
-        yield* Effect.annotateCurrentSpan({ worker, host: "local" });
+    const workerLeftovers = yield* workerLeftoversFor(workersRoot);
+    const harvestCommand = (operation, worktree, credential, environment) => (command, args) => Effect.gen(function* () {
+        yield* credential.refresh();
+        const result = yield* collectCommand(spawner, operation, command, args, {
+            cwd: worktree,
+            env: environment,
+            extendEnv: false,
+        });
+        const stdout = yield* requireSuccess(operation, "local", command, args, {
+            ...result,
+            stdout: credential.scrub(result.stdout),
+            stderr: credential.scrub(result.stderr),
+        });
+        return stdout === "" ? [] : stdout.replace(/\n$/u, "").split("\n");
+    });
+    const recover = Effect.fn("LocalExecutor.recover")(function* (attempt, record, commitAuthor) {
+        yield* Effect.annotateCurrentSpan({ ...recoveryFields(attempt), host: "local" });
+        yield* session.stopForRecovery(attempt);
+        const root = path.join(workersRoot, attempt.worker);
+        const worktree = path.join(root, "attempts", safeSegment(attempt.attemptId));
+        const present = (yield* workerLeftovers(attempt.worker)).has(worktree) &&
+            (yield* fileSystem.exists(worktree));
+        yield* session.recoverPostedComments(attempt, present
+            ? Option.some((spec, windows) => Effect.scoped(Effect.gen(function* () {
+                const credential = yield* credentials(attempt.repository, attempt.attemptId, attempt.permissions, baseEnvironment);
+                return yield* harvestPostedComments(spec, harvestCommand("cleanup", worktree, credential, credential.environment), windows);
+            })))
+            : Option.none(), record);
+        if (!present)
+            return;
+        yield* reconcileCheckout(attempt, worktree, record.salvage, commitAuthor);
+    });
+    /**
+     * Salvages `attempt`'s checkout at `worktree` with a new credential, records the salvage
+     * through `record`, and removes the checkout once its work is pushed. See `recoverWorktree`.
+     */
+    const reconcileCheckout = Effect.fn("LocalExecutor.reconcileCheckout")(function* (attempt, worktree, record, commitAuthor) {
+        yield* Effect.annotateCurrentSpan({ attemptId: attempt.attemptId, worker: attempt.worker });
+        const cache = path.join(workersRoot, attempt.worker, "repos", cacheDirectoryName(attempt.repository));
+        const removeCheckout = (git) => Effect.asVoid(git(["--git-dir", cache, "worktree", "remove", "--force", worktree]));
+        if (attempt.succeeded || attempt.permissions === "read") {
+            const git = (args) => executeCommand("cleanup", "git", args);
+            return yield* recoverWorktree({ attempt, host: "local", worktree, git, removeCheckout: removeCheckout(git) }, record);
+        }
+        const author = yield* commitAuthor;
+        yield* Effect.scoped(Effect.gen(function* () {
+            const credential = yield* credentials(attempt.repository, attempt.attemptId, attempt.permissions, baseEnvironment);
+            const git = credentialedGit(credential, author);
+            const inCheckout = (args) => git("cleanup", args);
+            yield* recoverWorktree({
+                attempt,
+                host: "local",
+                worktree,
+                git: inCheckout,
+                removeCheckout: removeCheckout(inCheckout),
+            }, record);
+        }));
+    });
+    /**
+     * Reconciles the checkout at `worktree` that the launch of `request` kept while its parent
+     * task's stop was unconfirmed. Does nothing if the checkout is gone.
+     */
+    const reconcileKept = Effect.fn("LocalExecutor.reconcileKept")(function* (request, worktree, record) {
+        yield* Effect.annotateCurrentSpan({ attemptId: request.attemptId, worker: request.worker });
+        if (!(yield* fileSystem.exists(worktree))) {
+            yield* Effect.logInfo("The kept checkout is gone; nothing to reconcile", {
+                attemptId: request.attemptId,
+                worker: request.worker,
+                worktree,
+            });
+            return;
+        }
+        yield* reconcileCheckout(keptCheckoutRecovery(request), worktree, record, Effect.succeed(request.commitAuthor));
+    }, (effect) => effect.pipe(Effect.catchTag("PlatformError", (cause) => Effect.fail(executorError("cleanup", "Can't reconcile the kept local checkout", cause)))));
+    const preflight = Effect.fn("LocalExecutor.preflight")(function* (worker, brains, maxConcurrentAttempts) {
+        yield* Effect.annotateCurrentSpan({ worker, host: "local", maxConcurrentAttempts });
         const gitVersion = (yield* executeCommand("preflight", "git", ["--version"])).trim();
         if (!gitVersion.startsWith("git version ")) {
             return yield* new WorkerCapabilityError({
                 worker,
                 capability: "toolchain",
-                message: `Worker ${worker} returned an unrecognized git version`,
+                message: `Worker "${worker}" returned an unrecognized Git version`,
                 cause: new Error(gitVersion),
             });
         }
-        const reported = (yield* executeCommand("preflight", runHost.command, [
-            ...runHost.args,
-            "--protocol-version",
-        ])).trim();
-        if (reported !== String(AttemptChannel.PROTOCOL_VERSION)) {
-            return yield* new WorkerCapabilityError({
-                worker,
-                capability: "run-host",
-                message: `Worker ${worker} has run-host protocol ${reported || "unknown"}; expected ${AttemptChannel.PROTOCOL_VERSION}`,
-                cause: new Error("run-host protocol mismatch"),
-            });
-        }
-        yield* verifyHarnesses(worker, brains, runHost, (command, args) => executeCommand("preflight", command, args));
+        // macOS has no /proc/meminfo and adds swap files as memory runs short.
+        yield* platform() === "darwin"
+            ? verifyWorkerMemory(worker, maxConcurrentAttempts, new WorkerMemory({ totalBytes: totalmem(), swap: SwapOnDemand.make({}) }))
+            : verifyLinuxMemory(worker, maxConcurrentAttempts, executeCommand("preflight", "cat", ["/proc/meminfo"]));
+        yield* verifyHarnessReadiness(worker, Option.none(), brains, harnessReadiness, logins);
         yield* Effect.logInfo("Worker preflight verified", {
             worker,
             host: "local",
             gitVersion,
-            protocolVersion: AttemptChannel.PROTOCOL_VERSION,
         });
+        return fullPreflight;
     }, logPreflightFailure);
+    // Attempt commands receive only the allowlist and the Attempt's credential, never this
+    // process's environment, which contains the App private key (ADR 0011).
+    const attemptEnvironment = (workspace, credential) => ({
+        ...credential.environment,
+        // Turbo writes its cache next to the git common dir, which for a linked worktree is the bare
+        // cache. One cache per Worker, outside the directory the startup sweep treats as cache storage.
+        TURBO_CACHE_DIR: path.join(workersRoot, workspace.worker, "turbo"),
+    });
+    const harvest = (workspace, credential, environment, windows) => harvestFacts(workspace.spec, harvestCommand("launch", workspace.worktree, credential, environment), windows).pipe(Effect.mapError((error) => new InfraFailure({
+        message: `Can't harvest the attempt's checkout: ${error.message}`,
+        cause: error,
+    })));
     const prepare = Effect.fn("LocalExecutor.prepare")(function* (request) {
         yield* Effect.annotateCurrentSpan({
             attemptId: request.attemptId,
             worker: request.worker,
             host: "local",
             repository: request.repository,
+            loop: request.loop,
+            permissions: request.permissions,
+            reattach: request.reattach,
         });
-        yield* verifyHarnesses(request.worker, [request.agent.brain], runHost, (command, args) => executeCommand("preflight", command, args));
-        const credential = yield* Effect.acquireRelease(credentials.issue(request.repository, request.attemptId), (token) => Effect.sync(() => {
-            Redacted.wipeUnsafe(token);
-        }), { interruptible: true });
+        yield* verifyHarnessReadiness(request.worker, Option.none(), [request.agent.brain], harnessReadiness, logins);
+        const credential = yield* credentials(request.repository, request.attemptId, request.permissions, baseEnvironment);
         const workerRoot = path.join(workersRoot, request.worker);
         const cache = path.join(workerRoot, "repos", cacheDirectoryName(request.repository));
         const worktree = path.join(workerRoot, "attempts", safeSegment(request.attemptId));
-        const environment = credentialEnvironment(baseEnvironment, credential);
-        const commandOptions = { env: environment, extendEnv: false };
-        yield* Effect.logInfo("Preparing Attempt workspace", {
+        yield* Effect.logInfo(request.reattach
+            ? "Reattaching the Attempt to its checkout"
+            : "Preparing Attempt workspace", {
             attemptId: request.attemptId,
             worker: request.worker,
             repository: request.repository,
             revision: request.revision,
+            loop: request.loop,
+            permissions: request.permissions,
             cache,
             worktree,
         });
         const remove = (_operation, target) => fileSystem.remove(target, { recursive: true, force: true });
-        const ops = {
-            ensureRoots: Effect.andThen(fileSystem.makeDirectory(path.dirname(cache), { recursive: true }), fileSystem.makeDirectory(path.dirname(worktree), { recursive: true })),
+        const host = {
             removePath: remove,
             cacheExists: fileSystem.exists(cache),
+            git: credentialedGit(credential, request.commitAuthor),
+        };
+        const ops = {
+            ...host,
+            ensureRoots: Effect.andThen(fileSystem.makeDirectory(path.dirname(cache), { recursive: true }), fileSystem.makeDirectory(path.dirname(worktree), { recursive: true })),
             promoteStaging: fileSystem.rename(`${cache}.cloning`, cache),
-            git: (operation, args) => Effect.gen(function* () {
-                // Git can echo the ambient token in diagnostics. Scrub before forming
-                // an error or passing its stdout to the revision parser.
-                const result = yield* collectCommand(spawner, operation, "git", args, commandOptions);
-                return yield* requireSuccess(operation, "local", "git", args, {
-                    ...result,
-                    stdout: scrubbed(result.stdout, credential),
-                    stderr: scrubbed(result.stderr, credential),
-                });
-            }),
+            checkout: linkedWorktree(host, { cache, worktree }, (target, content) => fileSystem
+                .makeDirectory(path.dirname(target), { recursive: true })
+                .pipe(Effect.andThen(fileSystem.writeFileString(target, content, { mode: 0o755 })))),
         };
-        const prepared = yield* fetches
-            .withLock(request.repository)(provisionWorktree({
-            request,
-            url: repositoryUrl(request.repository),
-            host: "local",
-            layout: { cache, staging: `${cache}.cloning`, worktree },
-            ops,
-        }))
-            .pipe(Effect.mapError((error) => isExecutorError(error)
+        const acquire = Effect.gen(function* () {
+            if (!request.reattach)
+                return yield* fetches.withLock(request.repository)(provisionWorktree({
+                    request,
+                    url: repositoryUrl(request.repository),
+                    host: "local",
+                    layout: { cache, staging: `${cache}.cloning`, worktree },
+                    ops,
+                }));
+            if (!(yield* fileSystem.exists(worktree)))
+                return yield* executorError("prepare", "The reattached attempt's checkout no longer exists", new Error(worktree));
+            const { spec } = yield* session.storedRequest(request.attemptId);
+            return yield* reattachWorktree({
+                request,
+                host: "local",
+                layout: { worktree },
+                ops,
+                spec,
+            });
+        });
+        const prepared = yield* acquire.pipe(Effect.mapError((error) => isExecutorError(error)
             ? error
-            : executorError("prepare", "Attempt workspace preparation failed", error)));
+            : executorError("prepare", "Can't prepare the attempt workspace", error)));
         yield* Effect.logInfo("Attempt workspace ready", {
             attemptId: request.attemptId,
-            baseCommit: prepared.spec.baseCommit,
+            baseCommit: prepared.workspace.spec.baseCommit,
+            resume: Option.map(prepared.workspace.spec.resume, ({ ref }) => ref),
+            reattach: request.reattach,
             worktree,
         });
+        const environment = childEnvironment(attemptEnvironment(prepared.workspace, credential), request.commitAuthor, prepared.gitHooks);
         return {
-            workspace: prepared,
-            launch: (io) => session.launch(prepared, io, (input) => spawn(prepared, credential, input)),
-        };
-    }, prepareAttempt);
-    const spawn = Effect.fn("LocalExecutor.spawnRunHost")(function* (prepared, credential, input) {
-        const attemptId = prepared.spec.attemptId;
-        yield* Effect.annotateCurrentSpan({
-            attemptId,
-            worker: prepared.worker,
-            host: "local",
-        });
-        // A linked worktree's git common dir is the bare cache itself, and Turbo
-        // puts its cache next to the common dir, so an unscoped run from the
-        // worktree would write `repos/.turbo` beside the bare caches. The Worker
-        // cache is shared across that Worker's Attempts and stays out of the
-        // directory the startup sweep treats as cache storage.
-        const turboCache = path.join(workersRoot, prepared.worker, "turbo");
-        yield* Effect.logInfo("Launching the run host", {
-            attemptId,
-            worker: prepared.worker,
-            host: "local",
-            command: runHost.command,
-            worktree: prepared.worktree,
-            turboCache,
-        });
-        const handle = yield* spawner.spawn(ChildProcess.make(runHost.command, runHost.args, {
-            cwd: prepared.worktree,
-            env: {
-                ...credentialEnvironment(baseEnvironment, credential),
-                TURBO_CACHE_DIR: turboCache,
-            },
-            extendEnv: false,
-            stdin: { stream: Stream.fromQueue(input), endOnDone: true },
-        }));
-        return {
-            handle,
-            host: "local",
-            scrub: (text) => scrubbed(text, credential),
+            workspace: prepared.workspace,
+            launch: (io) => session.launch(prepared.workspace, io, {
+                host: new LocalProcess(),
+                machine: Option.none(),
+                environment,
+                // Local Workers have no Gateway; every harness uses its own login.
+                gatewayCredential: Effect.succeedNone,
+                harvest: (windows) => harvest(prepared.workspace, credential, environment, windows),
+                harvestComments: (windows) => harvestPostedComments(prepared.workspace.spec, harvestCommand("launch", prepared.workspace.worktree, credential, environment), windows),
+                keepForReattach: prepared.keepForReattach,
+                keepUntilStopped: prepared.keepUntilStopped,
+                reconcileKept: (record) => reconcileKept(request, worktree, record),
+            }),
+            salvaged: prepared.salvaged,
+            recordSalvage: prepared.recordSalvage,
         };
-    });
-    const session = yield* runHostSessionFor({ interruptGrace });
+    }, session.prepare);
     return Executor.of({
         kind: "local",
+        recover: (attempt, record, commitAuthor) => recover(attempt, record, commitAuthor).pipe(Effect.catchTag("PlatformError", (cause) => Effect.fail(executorError("cleanup", "Can't reconcile the local salvage", cause)))),
         cancel: session.cancel,
         intervene: session.intervene,
+        isLive: session.isLive,
+        outcome: session.outcome,
         preflight,
         prepare,
+        sweep: Effect.void,
     });
 });
-/** Runs Attempts in isolated checkouts on the local machine. Requires Node; worker contracts are platform-free. */
+/**
+ * The executor for the local machine. Each Attempt runs in its own checkout with its Pi parent
+ * as a durable task in this process (`AttemptRuntime`), so a live Attempt reattaches after an
+ * orchestrator restart. Requires Node.
+ */
 export const layer = (options) => Layer.effect(Executor, makeLocalExecutor(options));
 //# sourceMappingURL=local.js.map