@usine/executor 0.2.1 → 0.4.0

package/dist/remote/sweep.js

@@ -0,0 +1,117 @@
+import { AttemptId } from "@usine/core/attempt";
+import { WorkerName } from "@usine/core/worker";
+import { Effect, Ref, Schema } from "effect";
+import { ExecutorOperationError } from "../executor.js";
+import { keyedLockFor } from "../keyed-lock.js";
+const SWEEP_CONCURRENCY = 4;
+const directChildSchema = (parent) => {
+    const prefix = `${parent}/`;
+    return Schema.String.check(Schema.makeFilter((value) => {
+        const segment = value.slice(prefix.length);
+        return (value.startsWith(prefix) &&
+            segment.length > 0 &&
+            segment !== "." &&
+            segment !== ".." &&
+            !segment.includes("/"));
+    }, { message: `Expected a direct child of ${parent}` }));
+};
+/** Returns the NUL-separated paths in `output`. Fails if one isn't directly under `parent`. */
+export const directChildren = (operation, parent, output) => Schema.decodeUnknownEffect(Schema.Array(directChildSchema(parent)))(output.split("\0").filter((value) => value.length > 0)).pipe(Effect.mapError((cause) => new ExecutorOperationError({
+    operation,
+    message: `Worker returned an invalid path while listing ${parent}`,
+    cause,
+})));
+/**
+ * Lists paths directly under a Worker's `attempts` directory, creating it first so a new Worker
+ * lists as empty. Verifies that each path is a direct child of `attemptsRoot`.
+ */
+export const attemptPathsOn = Effect.fn("RemoteExecutor.attemptPathsOn")(function* (commands, operation, shell, attemptsRoot) {
+    yield* Effect.annotateCurrentSpan({ host: shell.destination, operation, attemptsRoot });
+    yield* commands.run(operation, shell, "mkdir", ["-p", attemptsRoot]);
+    const output = yield* commands.run(operation, shell, "find", [
+        attemptsRoot,
+        "-mindepth",
+        "1",
+        "-maxdepth",
+        "1",
+        "-print0",
+    ]);
+    return yield* directChildren(operation, attemptsRoot, output);
+});
+/**
+ * Returns a sweep that prunes stale cache registrations once per Worker and keeps crash
+ * leftovers. Only durable Attempt recovery removes an existing checkout.
+ */
+export const abandonedWorktreeSweepFor = Effect.fn("RemoteExecutor.abandonedWorktreeSweepFor")(function* (commands) {
+    const locks = yield* keyedLockFor();
+    const swept = yield* Ref.make(new Set());
+    const sweep = Effect.fn("RemoteExecutor.sweepAbandonedWorktrees")(function* (attemptId, worker, shell, workerDirectory) {
+        const host = shell.destination;
+        yield* Effect.annotateCurrentSpan({ attemptId, worker, host });
+        yield* locks.withLock(worker)(Effect.gen(function* () {
+            if ((yield* Ref.get(swept)).has(worker)) {
+                yield* Effect.logDebug("Remote abandoned-worktree sweep was already complete", {
+                    attemptId,
+                    worker,
+                    host,
+                });
+                return;
+            }
+            // Marked done before running so a failed sweep is not retried before every prepare; the
+            // next process start retries it.
+            yield* Ref.update(swept, (current) => new Set(current).add(worker));
+            const attemptsRoot = `${workerDirectory}/attempts`;
+            const reposRoot = `${workerDirectory}/repos`;
+            yield* Effect.logInfo("Sweeping abandoned Attempt worktrees on the remote Worker", {
+                attemptId,
+                worker,
+                host,
+            });
+            yield* commands.run("prepare", shell, "mkdir", ["-p", reposRoot]);
+            const attempts = yield* attemptPathsOn(commands, "prepare", shell, attemptsRoot);
+            // An unrecognized path can contain unsalvaged work from a crash; only recovery from the
+            // durable Attempt record removes it.
+            yield* Effect.forEach(attempts, (worktree) => Effect.logWarning("Preserving abandoned remote path for salvage reconciliation", {
+                attemptId,
+                worker,
+                host,
+                worktree,
+            }), { discard: true });
+            const caches = yield* commands
+                .run("prepare", shell, "find", [
+                reposRoot,
+                "-mindepth",
+                "1",
+                "-maxdepth",
+                "1",
+                "-type",
+                "d",
+                "-name",
+                "*.git",
+                "-print0",
+            ])
+                .pipe(Effect.flatMap((output) => directChildren("prepare", reposRoot, output)));
+            yield* Effect.forEach(caches, (cache) => commands.run("prepare", shell, "git", ["--git-dir", cache, "worktree", "prune"]).pipe(Effect.tapError((error) => Effect.logWarning("Could not prune a remote cache during the sweep", {
+                attemptId,
+                worker,
+                host,
+                cache,
+                message: error.message,
+            })), Effect.ignore), { concurrency: SWEEP_CONCURRENCY, discard: true });
+            yield* Effect.logInfo("Remote abandoned-worktree sweep completed", {
+                attemptId,
+                worker,
+                host,
+                retained: attempts.length,
+                caches: caches.length,
+            });
+        }).pipe(Effect.tapError((error) => Effect.logWarning("Remote abandoned-worktree sweep failed; continuing", {
+            attemptId,
+            worker,
+            host,
+            message: error.message,
+        })), Effect.ignore));
+    });
+    return sweep;
+});
+//# sourceMappingURL=sweep.js.map

package/dist/remote/sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.js","sourceRoot":"","sources":["../../src/remote/sweep.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAA0B,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGhD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,MAAM,iBAAiB,GAAG,CAAC,MAAc,EAAwB,EAAE;IACjE,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CACxB,MAAM,CAAC,UAAU,CACf,CAAC,KAAK,EAAE,EAAE;QACR,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YACxB,OAAO,CAAC,MAAM,GAAG,CAAC;YAClB,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvB,CAAC;IACJ,CAAC,EACD,EAAE,OAAO,EAAE,8BAA8B,MAAM,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,SAA4B,EAC5B,MAAc,EACd,MAAc,EACgD,EAAE,CAChE,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CACjE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACvD,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,sBAAsB,CAAC;IACzB,SAAS;IACT,OAAO,EAAE,iDAAiD,MAAM,EAAE;IAClE,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAChF,QAAwB,EACxB,SAA4B,EAC5B,KAAkB,EAClB,YAAoB;IAEpB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;IACxF,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE;QAC3D,YAAY;QACZ,WAAW;QACX,GAAG;QACH,WAAW;QACX,GAAG;QACH,SAAS;KACV,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CAC5F,QAAQ,CAAC,EAAE,QAAwB;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAc,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAc,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CAAC,QAAQ,CAAC,EACzE,SAAoB,EACpB,MAAkB,EAClB,KAAkB,EAClB,eAAuB;QAEvB,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC;QAC/B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,sDAAsD,EAAE;oBAC7E,SAAS;oBACT,MAAM;oBACN,IAAI;iBACL,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,wFAAwF;YACxF,iCAAiC;YACjC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAEpE,MAAM,YAAY,GAAG,GAAG,eAAe,WAAW,CAAC;YACnD,MAAM,SAAS,GAAG,GAAG,eAAe,QAAQ,CAAC;YAC7C,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,2DAA2D,EAAE;gBACjF,SAAS;gBACT,MAAM;gBACN,IAAI;aACL,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;YAElE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;YACjF,wFAAwF;YACxF,qCAAqC;YACrC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,QAAQ,EACR,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,UAAU,CAAC,6DAA6D,EAAE;gBAC/E,SAAS;gBACT,MAAM;gBACN,IAAI;gBACJ,QAAQ;aACT,CAAC,EACJ,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;YAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,QAAQ;iBAC3B,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE;gBAC7B,SAAS;gBACT,WAAW;gBACX,GAAG;gBACH,WAAW;gBACX,GAAG;gBACH,OAAO;gBACP,GAAG;gBACH,OAAO;gBACP,OAAO;gBACP,SAAS;aACV,CAAC;iBACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAClF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,MAAM,EACN,CAAC,KAAK,EAAE,EAAE,CACR,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CACnF,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,iDAAiD,EAAE;gBACnE,SAAS;gBACT,MAAM;gBACN,IAAI;gBACJ,KAAK;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,EACH,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAClD,CAAC;YAEF,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,2CAA2C,EAAE;gBACjE,SAAS;gBACT,MAAM;gBACN,IAAI;gBACJ,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,oDAAoD,EAAE;YACtE,SAAS;YACT,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC,CACF,CAAC"}

package/dist/renewable-credential.d.ts

@@ -0,0 +1,17 @@
+import type { AttemptId } from "@usine/core/attempt";
+import type { LoopPermissions } from "@usine/core/loop";
+import type { RepositoryName } from "@usine/core/repository";
+import { Effect } from "effect";
+import type { CredentialUnavailableError, WorkerCredential } from "./executor.ts";
+/**
+ * Issues the Attempt's single-repository token with its Loop `permissions`, passes it to
+ * `publish`, and publishes a new one before each expiry until the caller's scope closes. Then
+ * wipes every issued token, so `Redacted.value` throws. Register cleanup for what `publish`
+ * writes before calling this, so the cleanup runs after renewal stops.
+ */
+export declare const renewableCredential: <A, E>(issue: (repository: RepositoryName, attemptId: AttemptId, permissions: LoopPermissions) => Effect.Effect<WorkerCredential, CredentialUnavailableError>, repository: string & import("effect/Brand").Brand<"RepositoryName">, attemptId: string & import("effect/Brand").Brand<"AttemptId">, permissions: "read" | "write", publish: (credential: WorkerCredential) => Effect.Effect<A, E>) => Effect.Effect<{
+    published: A;
+    refresh: () => Effect.Effect<void, E | CredentialUnavailableError, never>;
+    scrub: (text: string) => string;
+}, E | CredentialUnavailableError, import("effect/Scope").Scope>;
+//# sourceMappingURL=renewable-credential.d.ts.map

package/dist/renewable-credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renewable-credential.d.ts","sourceRoot":"","sources":["../src/renewable-credential.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAmB,MAAM,EAA6B,MAAM,QAAQ,CAAC;AAC5E,OAAO,KAAK,EAEV,0BAA0B,EAC1B,gBAAgB,EACjB,MAAM,eAAe,CAAC;AAcvB;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAwD,CAAC,EAAE,CAAC,mVAKpE,gBAAgB,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;;;kBAoD9C,MAAM,KAAG,MAAM;gEAK/B,CAAC"}

package/dist/renewable-credential.js

@@ -0,0 +1,58 @@
+import { Clock, DateTime, Effect, Redacted, SynchronizedRef } from "effect";
+/** The remaining lifetime, in milliseconds, below which a new token is issued. */
+const RENEWAL_WINDOW_MILLIS = 5 * 60_000;
+/**
+ * Issues the Attempt's single-repository token with its Loop `permissions`, passes it to
+ * `publish`, and publishes a new one before each expiry until the caller's scope closes. Then
+ * wipes every issued token, so `Redacted.value` throws. Register cleanup for what `publish`
+ * writes before calling this, so the cleanup runs after renewal stops.
+ */
+export const renewableCredential = Effect.fn("Executor.renewableCredential")(function* (issue, repository, attemptId, permissions, publish) {
+    yield* Effect.annotateCurrentSpan({ repository, attemptId, permissions });
+    const issued = new Set();
+    yield* Effect.addFinalizer(() => Effect.sync(() => {
+        for (const token of issued)
+            Redacted.wipeUnsafe(token);
+    }));
+    const publishFresh = Effect.fn("Executor.publishCredential")(function* () {
+        yield* Effect.annotateCurrentSpan({ repository, attemptId, permissions });
+        const credential = yield* issue(repository, attemptId, permissions);
+        issued.add(credential.value);
+        const published = yield* publish(credential);
+        yield* Effect.logInfo("Published renewed Attempt repository credential", {
+            repository,
+            attemptId,
+            permissions,
+            expiresAt: DateTime.formatIso(credential.expiresAt),
+        });
+        return { expiresAt: credential.expiresAt, published };
+    });
+    const first = yield* publishFresh();
+    const expiry = yield* SynchronizedRef.make(first.expiresAt);
+    const refresh = Effect.fn("Executor.refreshCredential")(function* () {
+        yield* Effect.annotateCurrentSpan({ repository, attemptId });
+        yield* SynchronizedRef.updateEffect(expiry, (expiresAt) => Effect.gen(function* () {
+            const now = yield* Clock.currentTimeMillis;
+            if (DateTime.toEpochMillis(expiresAt) - now > RENEWAL_WINDOW_MILLIS)
+                return expiresAt;
+            return (yield* publishFresh()).expiresAt;
+        }));
+    });
+    // Forked in a scope opened before the checkout finalizers, so renewal continues through
+    // salvage and stops before the published credential is removed.
+    yield* Effect.forever(Effect.sleep("30 seconds").pipe(Effect.andThen(refresh()), Effect.tapError((error) => Effect.logWarning("Attempt credential renewal failed; will retry", {
+        repository,
+        attemptId,
+        message: String(error),
+    })), Effect.ignore)).pipe(Effect.forkScoped);
+    return {
+        published: first.published,
+        refresh,
+        scrub: (text) => {
+            for (const token of issued)
+                text = text.replaceAll(Redacted.value(token), "[REDACTED]");
+            return text;
+        },
+    };
+});
+//# sourceMappingURL=renewable-credential.js.map

package/dist/renewable-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renewable-credential.js","sourceRoot":"","sources":["../src/renewable-credential.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAO5E,kFAAkF;AAClF,MAAM,qBAAqB,GAAG,CAAC,GAAG,MAAM,CAAC;AAWzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EACpF,KAA6C,EAC7C,UAA0B,EAC1B,SAAoB,EACpB,WAA4B,EAC5B,OAA8D;IAE9D,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CACH,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC;QACpE,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,iDAAiD,EAAE;YACvE,UAAU;YACV,SAAS;YACT,WAAW;YACX,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;SACpD,CAAC,CAAC;QACH,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC;QAC/D,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC3C,IAAI,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,GAAG,GAAG,qBAAqB;gBAAE,OAAO,SAAS,CAAC;YACtF,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC;QAC3C,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,wFAAwF;IACxF,gEAAgE;IAChE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EACzB,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,+CAA+C,EAAE;QACjE,UAAU;QACV,SAAS;QACT,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;KACvB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO;QACP,KAAK,EAAE,CAAC,IAAY,EAAU,EAAE;YAC9B,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;KACkC,CAAC;AACxC,CAAC,CAAC,CAAC"}

package/dist/salvage.d.ts

@@ -0,0 +1,38 @@
+import type { AttemptId } from "@usine/core/attempt";
+import { type SalvageRef, SalvagePartlyPushed, SalvagePushed, SalvageRejected, SalvageRetained } from "@usine/core/attempt/salvage";
+import { CommitSha } from "@usine/core/repository";
+import type { WorkerName } from "@usine/core/worker";
+import { Effect, Option } from "effect";
+export interface SalvageOptions<E extends Error> {
+    readonly attemptId: AttemptId;
+    readonly worker: WorkerName;
+    readonly host: string;
+    readonly worktree: string;
+    readonly baseCommit: Option.Option<CommitSha>;
+    readonly ref: SalvageRef;
+    /** An earlier salvage that the remote rejected; its commit isn't pushed again. */
+    readonly rejected: Option.Option<SalvageRejected>;
+    /**
+     * Runs git with the Worker's repository credentials and the Attempt's `commitIdentity`, which
+     * authors and commits the salvage commit. `salvageWorktree` prepends `-C <worktree>`.
+     */
+    readonly git: (args: ReadonlyArray<string>) => Effect.Effect<string, E>;
+}
+/**
+ * Returns the operator-facing line for the run drawer: the failure's message followed by its
+ * cause's message, if the cause has one. For a failed command, the cause is the stderr, which
+ * local and SSH executors scrub of the Attempt's token.
+ */
+export declare const failureMessage: (failure: Error) => string;
+/**
+ * Commits the changes in an unsuccessful Attempt's checkout and pushes HEAD to its salvage ref
+ * before the worktree is removed. The commit leaves out package stores and build caches, even if
+ * the Attempt staged them, and what Git ignores. Skips a checkout with nothing to push beyond its
+ * base commit, or whose commit the remote rejected in `rejected`. If the push fails, or the
+ * commit leaves out a file larger than GitHub accepts, keeps the worktree and reports its path.
+ * If the inspection or the commit fails while the checkout's head can still be the rejected
+ * commit, returns `rejected` again, so that the next recovery doesn't push that commit either.
+ * Never fails; skipped and failed stages are logged.
+ */
+export declare const salvageWorktree: <E extends Error>(options: SalvageOptions<E>) => Effect.Effect<Option.Option<SalvagePartlyPushed | SalvagePushed | SalvageRejected | SalvageRetained>, never, never>;
+//# sourceMappingURL=salvage.d.ts.map

package/dist/salvage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"salvage.d.ts","sourceRoot":"","sources":["../src/salvage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAEL,KAAK,UAAU,EACf,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,eAAe,EAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAkB,MAAM,QAAQ,CAAC;AAwBxD,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,KAAK;IAC7C,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACzE;AAMD;;;;GAIG;AACH,eAAO,MAAM,cAAc,YAAa,KAAK,KAAG,MAM/C,CAAC;AA+BF;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,GAAoD,CAAC,SAAS,KAAK,oJAmL7F,CAAC"}

package/dist/salvage.js

@@ -0,0 +1,198 @@
+import { SalvagePartlyPushed, SalvagePushed, SalvageRejected, SalvageRetained, } from "@usine/core/attempt/salvage";
+import { CommitSha } from "@usine/core/repository";
+import { Effect, Option, Result, Schema } from "effect";
+const PUSH_TIMEOUT = "2 minutes";
+/** GitHub refuses a push with a file larger than 100 MiB. */
+const GITHUB_FILE_LIMIT_BYTES = 100 * 1024 * 1024;
+/** GitHub's code for a push refused for a file over its size limit, in the push's stderr. */
+const LARGE_FILES_REFUSAL = /\bGH001\b/u;
+/** The package stores and build caches that the salvage commit leaves out at any depth. */
+const CACHE_DIRECTORIES = [".pnpm-store", "node_modules", ".turbo"];
+const CACHE_PATHS = CACHE_DIRECTORIES.map((directory) => `:(glob)**/${directory}/**`);
+/**
+ * The checkout's paths that the salvage commits: everything that Git doesn't ignore, except
+ * package stores and build caches.
+ */
+const SALVAGED_PATHS = [
+    ".",
+    ...CACHE_DIRECTORIES.map((directory) => `:(exclude,glob)**/${directory}/**`),
+];
+const decodeCommit = Schema.decodeUnknownEffect(CommitSha);
+const decodeCauseMessage = Schema.decodeUnknownOption(Schema.Struct({ message: Schema.String }));
+/**
+ * Returns the operator-facing line for the run drawer: the failure's message followed by its
+ * cause's message, if the cause has one. For a failed command, the cause is the stderr, which
+ * local and SSH executors scrub of the Attempt's token.
+ */
+export const failureMessage = (failure) => {
+    const detail = Option.match(decodeCauseMessage(failure.cause), {
+        onNone: () => "",
+        onSome: ({ message }) => message.trim(),
+    });
+    return detail.length === 0 ? failure.message : `${failure.message}: ${detail}`;
+};
+/**
+ * Returns the staged files in the `ls-tree -r -l -z` listing of the index's tree that are larger
+ * than GitHub accepts.
+ */
+const oversizedIn = (listing, staged) => listing.split("\0").flatMap((entry) => {
+    // <mode> SP <type> SP <object> SP <padded size> TAB <path>
+    const tab = entry.indexOf("\t");
+    if (tab < 0)
+        return [];
+    const [, type, , size] = entry.slice(0, tab).split(/ +/u);
+    const path = entry.slice(tab + 1);
+    return type === "blob" && Number(size) > GITHUB_FILE_LIMIT_BYTES && staged.has(path)
+        ? [{ path, size: Number(size) }]
+        : [];
+});
+const describeFiles = (files) => files.map(({ path, size }) => `${path} (${(size / 1024 / 1024).toFixed(1)} MiB)`).join(", ");
+/** Returns the operator-facing reason that a salvage keeps the checkout of `files`. */
+const leftOutMessage = (files) => `The checkout has files larger than GitHub's 100 MiB limit, which the salvage can't push: ${describeFiles(files)}`;
+/**
+ * Commits the changes in an unsuccessful Attempt's checkout and pushes HEAD to its salvage ref
+ * before the worktree is removed. The commit leaves out package stores and build caches, even if
+ * the Attempt staged them, and what Git ignores. Skips a checkout with nothing to push beyond its
+ * base commit, or whose commit the remote rejected in `rejected`. If the push fails, or the
+ * commit leaves out a file larger than GitHub accepts, keeps the worktree and reports its path.
+ * If the inspection or the commit fails while the checkout's head can still be the rejected
+ * commit, returns `rejected` again, so that the next recovery doesn't push that commit either.
+ * Never fails; skipped and failed stages are logged.
+ */
+export const salvageWorktree = Effect.fn("Executor.salvageWorktree")(function* (options) {
+    const fields = {
+        attemptId: options.attemptId,
+        worker: options.worker,
+        host: options.host,
+        worktree: options.worktree,
+    };
+    yield* Effect.annotateCurrentSpan(fields);
+    const git = (args) => options.git(["-C", options.worktree, ...args]);
+    const head = () => git(["rev-parse", "HEAD"]).pipe(Effect.flatMap((output) => decodeCommit(output.trim())));
+    /**
+     * Returns what the salvage keeps of a checkout that it couldn't inspect or commit, at `current`
+     * if its head is known. While `current` can be the commit of the recorded rejection, that's the
+     * rejection; otherwise it's the retained checkout, at the base commit if the head is unknown.
+     */
+    const unsalvaged = (message, current) => {
+        const rejected = Option.filter(options.rejected, ({ commit }) => Option.isNone(current) || Option.contains(current, commit));
+        if (Option.isSome(rejected))
+            return Effect.logWarning("Keeping the recorded rejection of the Attempt's salvage, so that recovery doesn't push its commit again", { ...fields, ref: options.ref, commit: rejected.value.commit, message }).pipe(Effect.as(Option.some(rejected.value)));
+        const commit = Option.orElse(current, () => options.baseCommit);
+        return Effect.succeed(Option.some(new SalvageRetained({ path: options.worktree, commit, message })));
+    };
+    const inspected = yield* Effect.all({
+        head: head(),
+        status: git(["status", "--porcelain", "--untracked-files=all", "--", ...SALVAGED_PATHS]),
+    }).pipe(Effect.result);
+    if (Result.isFailure(inspected)) {
+        const message = failureMessage(inspected.failure);
+        yield* Effect.logError("Could not inspect the Attempt worktree for salvage", {
+            ...fields,
+            message,
+        });
+        return yield* unsalvaged(message, Option.none());
+    }
+    const dirty = inspected.success.status.trim().length > 0;
+    /**
+     * Commits the salvaged paths without the files larger than GitHub accepts, and returns the
+     * checkout's head and the files left out.
+     */
+    const snapshot = (current) => Effect.gen(function* () {
+        yield* git(["add", "--all", "--", ...SALVAGED_PATHS]);
+        // Exclusion pathspecs don't unstage the caches that the Attempt's own `git add` staged.
+        yield* git(["reset", "--quiet", "--", ...CACHE_PATHS]);
+        const staged = (yield* git(["diff", "--cached", "--name-only", "--no-renames", "-z"]))
+            .split("\0")
+            .filter((path) => path.length > 0);
+        if (staged.length === 0)
+            return { commit: current, leftOut: [] };
+        const tree = (yield* git(["write-tree"])).trim();
+        const oversized = oversizedIn(yield* git(["ls-tree", "-r", "-l", "-z", tree]), new Set(staged));
+        if (oversized.length > 0) {
+            yield* git([
+                "--literal-pathspecs",
+                "reset",
+                "--quiet",
+                "--",
+                ...oversized.map(({ path }) => path),
+            ]);
+            yield* Effect.logWarning("Left files larger than GitHub's 100 MiB limit out of the salvage commit", { ...fields, files: describeFiles(oversized) });
+        }
+        if (staged.length === oversized.length)
+            return { commit: current, leftOut: oversized };
+        yield* git([
+            "-c",
+            "commit.gpgsign=false",
+            "commit",
+            "--quiet",
+            "--no-verify",
+            "--message",
+            `wip(usine): salvage attempt ${options.attemptId}`,
+        ]);
+        return { commit: yield* head(), leftOut: oversized };
+    });
+    let commit = inspected.success.head;
+    let leftOut = [];
+    if (dirty) {
+        const committed = yield* snapshot(commit).pipe(Effect.result);
+        if (Result.isFailure(committed)) {
+            const message = failureMessage(committed.failure);
+            yield* Effect.logError("Could not commit the Attempt's uncommitted changes", {
+                ...fields,
+                message,
+            });
+            return yield* unsalvaged(message, Option.some(commit));
+        }
+        ({ commit, leftOut } = committed.success);
+    }
+    if (Option.contains(options.baseCommit, commit)) {
+        if (leftOut.length === 0) {
+            yield* Effect.logInfo("Nothing to salvage from the Attempt worktree", fields);
+            return Option.none();
+        }
+        const message = leftOutMessage(leftOut);
+        yield* Effect.logWarning("Nothing to push but files larger than GitHub's limit; retaining the Attempt worktree", { ...fields, commit, message });
+        return Option.some(new SalvageRetained({ path: options.worktree, commit: Option.some(commit), message }));
+    }
+    const rejected = Option.filter(options.rejected, (salvage) => salvage.commit === commit);
+    if (Option.isSome(rejected)) {
+        yield* Effect.logInfo("The remote rejected this salvage commit before; retaining the Attempt worktree without pushing it again", { ...fields, ref: options.ref, commit });
+        return Option.some(rejected.value);
+    }
+    const pushFailure = yield* git([
+        "push",
+        "--force",
+        "--no-verify",
+        "origin",
+        `${commit}:refs/heads/${options.ref}`,
+    ]).pipe(Effect.timeoutOption(PUSH_TIMEOUT), Effect.match({
+        onFailure: (failure) => Option.some(failureMessage(failure)),
+        onSuccess: Option.match({
+            onNone: () => Option.some(`git push didn't finish within ${PUSH_TIMEOUT}`),
+            onSome: () => Option.none(),
+        }),
+    }));
+    if (Option.isSome(pushFailure)) {
+        const message = pushFailure.value;
+        if (LARGE_FILES_REFUSAL.test(message)) {
+            yield* Effect.logError("GitHub refused the salvage push for a file over its size limit; retaining the Attempt worktree, which recovery doesn't push again until its commit changes", { ...fields, ref: options.ref, commit, message });
+            return Option.some(new SalvageRejected({ path: options.worktree, commit, message }));
+        }
+        yield* Effect.logError("Salvage push failed; retaining the Attempt worktree", {
+            ...fields,
+            ref: options.ref,
+            commit,
+            message,
+        });
+        return Option.some(new SalvageRetained({ path: options.worktree, commit: Option.some(commit), message }));
+    }
+    if (leftOut.length > 0) {
+        const message = leftOutMessage(leftOut);
+        yield* Effect.logWarning("Salvaged the Attempt's work without files larger than GitHub's limit; retaining the Attempt worktree, which has their only copy", { ...fields, ref: options.ref, commit, message });
+        return Option.some(new SalvagePartlyPushed({ ref: options.ref, commit, path: options.worktree, message }));
+    }
+    yield* Effect.logInfo("Salvaged the Attempt's work", { ...fields, ref: options.ref, commit });
+    return Option.some(new SalvagePushed({ ref: options.ref, commit }));
+});
+//# sourceMappingURL=salvage.js.map

package/dist/salvage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"salvage.js","sourceRoot":"","sources":["../src/salvage.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,eAAe,GAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExD,MAAM,YAAY,GAAG,WAAW,CAAC;AAEjC,6DAA6D;AAC7D,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,6FAA6F;AAC7F,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEzC,2FAA2F;AAC3F,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;AAEpE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,aAAa,SAAS,KAAK,CAAC,CAAC;AAEtF;;;GAGG;AACH,MAAM,cAAc,GAAG;IACrB,GAAG;IACH,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,SAAS,KAAK,CAAC;CAC7E,CAAC;AAkBF,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAE3D,MAAM,kBAAkB,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAEjG;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAc,EAAU,EAAE;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAC7D,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;QAChB,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE;KACxC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;AACjF,CAAC,CAAC;AAQF;;;GAGG;AACH,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,MAA2B,EAAgC,EAAE,CACjG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;IACpC,2DAA2D;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,IAAI,EAAE,AAAD,EAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAClC,OAAO,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,uBAAuB,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAClF,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,KAAmC,EAAU,EAAE,CACpE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE/F,uFAAuF;AACvF,MAAM,cAAc,GAAG,CAAC,KAAmC,EAAU,EAAE,CACrE,4FAA4F,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAErH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAC5E,OAA0B;IAE1B,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;IACF,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,IAA2B,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,GAAG,EAAE,CAChB,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE3F;;;;OAIG;IACH,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,OAAiC,EAAE,EAAE;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAC3E,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACzB,OAAO,MAAM,CAAC,UAAU,CACtB,yGAAyG,EACzG,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CACxE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAiB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,OAAO,CACnB,MAAM,CAAC,IAAI,CAAiB,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAC9F,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,IAAI,EAAE,IAAI,EAAE;QACZ,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,uBAAuB,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,CAAC;KACzF,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,oDAAoD,EAAE;YAC3E,GAAG,MAAM;YACT,OAAO;SACR,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAEzD;;;OAGG;IACH,MAAM,QAAQ,GAAG,CAAC,OAAkB,EAAE,EAAE,CACtC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;QACtD,wFAAwF;QACxF,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;aACnF,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,WAAW,CAC3B,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,CAChB,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,GAAG,CAAC;gBACT,qBAAqB;gBACrB,OAAO;gBACP,SAAS;gBACT,IAAI;gBACJ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;aACrC,CAAC,CAAC;YACH,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACtB,yEAAyE,EACzE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACvF,KAAK,CAAC,CAAC,GAAG,CAAC;YACT,IAAI;YACJ,sBAAsB;YACtB,QAAQ;YACR,SAAS;YACT,aAAa;YACb,WAAW;YACX,+BAA+B,OAAO,CAAC,SAAS,EAAE;SACnD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEL,IAAI,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,IAAI,OAAO,GAAiC,EAAE,CAAC;IAC/C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAClD,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,oDAAoD,EAAE;gBAC3E,GAAG,MAAM;gBACT,OAAO;aACR,CAAC,CAAC;YACH,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,8CAA8C,EAAE,MAAM,CAAC,CAAC;YAC9E,OAAO,MAAM,CAAC,IAAI,EAAkB,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACtB,sFAAsF,EACtF,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAC/B,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,yGAAyG,EACzG,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,CACxC,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAiB,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC;QAC7B,MAAM;QACN,SAAS;QACT,aAAa;QACb,QAAQ;QACR,GAAG,MAAM,eAAe,OAAO,CAAC,GAAG,EAAE;KACtC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,EAClC,MAAM,CAAC,KAAK,CAAC;QACX,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5D,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;YACtB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,iCAAiC,YAAY,EAAE,CAAC;YAC1E,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAU;SACpC,CAAC;KACH,CAAC,CACH,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC;QAClC,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CACpB,4JAA4J,EAC5J,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CACjD,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CACjE,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,qDAAqD,EAAE;YAC5E,GAAG,MAAM;YACT,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM;YACN,OAAO;SACR,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACtB,iIAAiI,EACjI,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CACjD,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CACvF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,IAAI,CAAiB,IAAI,aAAa,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC"}

package/dist/ssh/api-keys.d.ts

@@ -0,0 +1,36 @@
+import type { Harness } from "@usine/core/agent/brain";
+import { Effect, Option, Redacted } from "effect";
+import { type RemoteCommands } from "../remote/commands.ts";
+import type { RemoteAccess } from "../remote/machine.ts";
+import type { MachineGateway, SshMachine, SshWorkerAddress } from "./model.ts";
+/** Returns whether the Gateway holds a credential for `harness`'s provider. */
+export declare const gatewayHolds: (gateway: Option.Option<MachineGateway>, harness: Harness) => boolean;
+/**
+ * Returns the API key that each Attempt on a Worker's machine gets for `harness`, or `None` if
+ * the Worker isn't provisioned, the provisioner sets no key, or the Gateway has the provider's
+ * credential.
+ */
+export declare const provisionedApiKey: (worker: {
+    readonly address: SshWorkerAddress;
+    readonly gateway: Option.Option<MachineGateway>;
+}, harness: Harness) => Option.Option<Redacted.Redacted<string>>;
+/**
+ * Returns `access` with the provisioner's API keys among the Attempt's secrets. With an OpenAI
+ * key, also writes the Attempt's Codex home, which `holdCodexHome` gives it, with
+ * `CODEX_API_KEY_CONFIG`.
+ */
+export declare const withApiKeys: (commands: RemoteCommands, holdCodexHome: (machine: SshMachine, attemptId: string & import("effect/Brand").Brand<"AttemptId">) => Effect.Effect<string, never, import("effect/Scope").Scope>, machine: SshMachine, attemptId: string & import("effect/Brand").Brand<"AttemptId">, access: RemoteAccess, operation: "cancel" | "cleanup" | "launch" | "preflight" | "prepare") => Effect.Effect<RemoteAccess | {
+    readOnlyPaths: ReadonlyArray<string>;
+    gitEnvironment: Readonly<Record<string, string>>;
+    refresh: Effect.Effect<void, import("../executor.ts").ExecutorError>;
+    shell: import("@usine/agents/child-host").RemoteShell;
+    secrets: {
+        [x: string]: Redacted.Redacted<string>;
+    };
+    writablePaths: string[];
+    environment: Readonly<Record<string, string>> | {
+        CODEX_HOME: string;
+    };
+    scrub: (text: string) => string;
+}, import("../executor.ts").ExecutorOperationError, import("effect/Scope").Scope>;
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/ssh/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/ssh/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,KAAK,cAAc,EAAgB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AA4B/E,+EAA+E;AAC/E,eAAO,MAAM,YAAY,YAAa,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,OAAO,KAAG,OAKrF,CAAC;AAEJ;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,WACpB;IAAE,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;CAAE,WACtF,OAAO,KACf,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAOzC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;kBAsCN,MAAM;iFAMtB,CAAC"}

package/dist/ssh/api-keys.js

@@ -0,0 +1,72 @@
+import { Effect, Option, Redacted } from "effect";
+import { sendingShell } from "../remote/commands.js";
+import { writeMachineFiles } from "./gateway/attachments.js";
+/** The provider each harness needs a credential from. Pi children run only on local Workers. */
+const PROVIDER_OF_HARNESS = {
+    claude: Option.some("anthropic"),
+    codex: Option.some("openai"),
+    pi: Option.none(),
+};
+/** The variable with the OpenAI API key that Codex's `model_provider` reads (`env_key`). */
+const OPENAI_KEY_VARIABLE = "OPENAI_API_KEY";
+/**
+ * Codex's `config.toml` for an OpenAI API key in `OPENAI_API_KEY`: a `model_provider` that
+ * sends the Responses API to `api.openai.com` and needs no login. The file contains no key.
+ */
+const CODEX_API_KEY_CONFIG = [
+    'model_provider = "usine-openai"',
+    "",
+    "[model_providers.usine-openai]",
+    'name = "OpenAI API key"',
+    'base_url = "https://api.openai.com/v1"',
+    `env_key = "${OPENAI_KEY_VARIABLE}"`,
+    'wire_api = "responses"',
+    "requires_openai_auth = false",
+    "",
+].join("\n");
+/** Returns whether the Gateway holds a credential for `harness`'s provider. */
+export const gatewayHolds = (gateway, harness) => Option.exists(gateway, ({ settings }) => Option.exists(PROVIDER_OF_HARNESS[harness], (provider) => settings.llmProviders.includes(provider)));
+/**
+ * Returns the API key that each Attempt on a Worker's machine gets for `harness`, or `None` if
+ * the Worker isn't provisioned, the provisioner sets no key, or the Gateway has the provider's
+ * credential.
+ */
+export const provisionedApiKey = (worker, harness) => {
+    const { machine } = worker.address;
+    if (machine._tag !== "Provisioned" || gatewayHolds(worker.gateway, harness))
+        return Option.none();
+    return Option.flatMap(PROVIDER_OF_HARNESS[harness], (provider) => machine.provisioner.apiKeys[provider]);
+};
+/**
+ * Returns `access` with the provisioner's API keys among the Attempt's secrets. With an OpenAI
+ * key, also writes the Attempt's Codex home, which `holdCodexHome` gives it, with
+ * `CODEX_API_KEY_CONFIG`.
+ */
+export const withApiKeys = Effect.fn("SshExecutor.withApiKeys")(function* (commands, holdCodexHome, machine, attemptId, access, operation) {
+    const anthropic = provisionedApiKey(machine, "claude");
+    const openai = provisionedApiKey(machine, "codex");
+    const secrets = Object.fromEntries([
+        ...Option.toArray(Option.map(anthropic, (key) => ["ANTHROPIC_API_KEY", key])),
+        ...Option.toArray(Option.map(openai, (key) => [OPENAI_KEY_VARIABLE, key])),
+    ]);
+    if (Object.keys(secrets).length === 0)
+        return access;
+    const codexHome = yield* Effect.transposeOption(Option.map(openai, () => holdCodexHome(machine, attemptId).pipe(Effect.tap((home) => writeMachineFiles(commands, operation, machine.shell, [
+        [`${home}/config.toml`, CODEX_API_KEY_CONFIG],
+    ])))));
+    const values = Object.values(secrets).map(Redacted.value);
+    return {
+        ...access,
+        // An Attempt container gets the secrets when it starts; without one, the SSH connection
+        // sends them.
+        shell: sendingShell(access.shell, secrets),
+        secrets: { ...access.secrets, ...secrets },
+        writablePaths: [...access.writablePaths, ...Option.toArray(codexHome)],
+        environment: Option.match(codexHome, {
+            onNone: () => access.environment,
+            onSome: (home) => ({ ...access.environment, CODEX_HOME: home }),
+        }),
+        scrub: (text) => values.reduce((scrubbed, value) => scrubbed.replaceAll(value, "<redacted>"), access.scrub(text)),
+    };
+});
+//# sourceMappingURL=api-keys.js.map

package/dist/ssh/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/ssh/api-keys.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAuB,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,gGAAgG;AAChG,MAAM,mBAAmB,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE;CACoD,CAAC;AAExE,4FAA4F;AAC5F,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAE7C;;;GAGG;AACH,MAAM,oBAAoB,GAAG;IAC3B,iCAAiC;IACjC,EAAE;IACF,gCAAgC;IAChC,yBAAyB;IACzB,wCAAwC;IACxC,cAAc,mBAAmB,GAAG;IACpC,wBAAwB;IACxB,8BAA8B;IAC9B,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,+EAA+E;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAsC,EAAE,OAAgB,EAAW,EAAE,CAChG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACtC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvD,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACzC,CACF,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAA+F,EAC/F,OAAgB,EAC0B,EAAE;IAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;IACnC,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IAClG,OAAO,MAAM,CAAC,OAAO,CACnB,mBAAmB,CAAC,OAAO,CAAC,EAC5B,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CACpD,CAAC;AACJ,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EACvE,QAAwB,EACxB,aAAiC,EACjC,OAAmB,EACnB,SAAoB,EACpB,MAAoB,EACpB,SAA4B;IAE5B,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC;QACjC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAU,CAAC,CAAC;QACtF,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAU,CAAC,CAAC;KACpF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,eAAe,CAC7C,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CACtB,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE;QACpD,CAAC,GAAG,IAAI,cAAc,EAAE,oBAAoB,CAAC;KAC9C,CAAC,CACH,CACF,CACF,CACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO;QACL,GAAG,MAAM;QACT,wFAAwF;QACxF,cAAc;QACd,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;QAC1C,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE;QAC1C,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE;YACnC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW;YAChC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SAChE,CAAC;QACF,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CACtB,MAAM,CAAC,MAAM,CACX,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,EAC7D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CACnB;KACmB,CAAC;AAC3B,CAAC,CAAC,CAAC"}

package/dist/ssh/codex-homes.d.ts

@@ -0,0 +1,21 @@
+import type { AttemptId } from "@usine/core/attempt";
+import { Effect } from "effect";
+import type { RemoteCommands } from "../remote/commands.ts";
+import type { SshMachine } from "./model.ts";
+/** Returns the Codex home of `attemptId` in the Worker directory `workerDirectory`. */
+export declare const codexHomeIn: (workerDirectory: string, attemptId: AttemptId) => string;
+/** Returns the Attempt's Codex home on `machine`, which Codex also writes its sessions to. */
+export declare const attemptCodexHome: (machine: SshMachine, attemptId: AttemptId) => string;
+/**
+ * Tracks the Codex homes that Attempts in this process use. `hold` gives an Attempt its Codex
+ * home and removes the directory when the caller's scope closes. `sweep` removes the Codex homes
+ * on a long-lived machine that no Attempt holds and whose Attempt has no checkout there, which
+ * a crash or a failed removal left.
+ */
+export declare const codexHomesFor: (commands: RemoteCommands) => Effect.Effect<{
+    hold: (machine: SshMachine, attemptId: string & import("effect/Brand").Brand<"AttemptId">) => Effect.Effect<string, never, import("effect/Scope").Scope>;
+    sweep: (machine: SshMachine) => Effect.Effect<void, import("../executor.ts").ExecutorOperationError, never>;
+}, never, never>;
+/** The Codex homes of the SSH executor's Attempts. See `codexHomesFor`. */
+export type CodexHomes = Effect.Success<ReturnType<typeof codexHomesFor>>;
+//# sourceMappingURL=codex-homes.d.ts.map

package/dist/ssh/codex-homes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-homes.d.ts","sourceRoot":"","sources":["../../src/ssh/codex-homes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,MAAM,EAAO,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAe7C,uFAAuF;AACvF,eAAO,MAAM,WAAW,oBAAqB,MAAM,aAAa,SAAS,KAAG,MACtB,CAAC;AAEvD,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,YAAa,UAAU,aAAa,SAAS,KAAG,MAC5B,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,aAAa;;;gBAsFxB,CAAC;AAEH,2EAA2E;AAC3E,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC"}