@usine/executor 0.2.1 → 0.4.0

package/dist/cloudflare/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/cloudflare/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,YAAY,EAEjB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,WAAW,EAEhB,KAAK,cAAc,EACnB,KAAK,OAAO,EACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAY,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAsC,MAAM,aAAa,CAAC;AAE7E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,eAAO,MAAM,gBAAgB,yGAS3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,gBAAgB,CAAC,IAAI,CAAC;;;;IAuB1D,2DAA2D;;;;AAV7D;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,wBAQvC;CAAG;AAoCL,6FAA6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;IAClE,QAAQ,CAAC,MAAM,EAAE,CACf,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,aAAa,KACnB,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACxD,mDAAmD;IACnD,QAAQ,CAAC,GAAG,EAAE,CACZ,IAAI,EAAE,WAAW,KACd,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACvE,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAC/D,QAAQ,CAAC,WAAW,EAAE,CACpB,IAAI,EAAE,WAAW,EACjB,WAAW,EAAE,kBAAkB,KAC5B,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACxD,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACzF,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAClF,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;CACxF;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;gCAiE3B,CAAC"}

package/dist/cloudflare/client.js

@@ -0,0 +1,108 @@
+import { ACCESS_CLIENT_ID_HEADER, ACCESS_CLIENT_SECRET_HEADER, SandboxApi, } from "@usine/cloudflare";
+import { WorkerName } from "@usine/core/worker";
+import { Effect, Option, Redacted, Schema } from "effect";
+import { HttpClient, HttpClientError, HttpClientRequest } from "effect/http";
+import { HttpApiClient } from "effect/http-api";
+export const SandboxOperation = Schema.Literals([
+    "health",
+    "create",
+    "get",
+    "list",
+    "credentials",
+    "hold",
+    "stop",
+    "destroy",
+]);
+const ACTIONS = {
+    health: "check the Worker's health",
+    create: "create the sandbox",
+    get: "read the sandbox",
+    list: "list the sandboxes",
+    credentials: "renew the sandbox's credentials",
+    hold: "hold the sandbox",
+    stop: "stop the sandbox's commands",
+    destroy: "destroy the sandbox",
+};
+/**
+ * A failed request to the Worker. `message` contains no credential; the request and raw failure
+ * are discarded because create and credential requests contain the installation token and the
+ * provider keys.
+ */
+export class SandboxRequestError extends Schema.TaggedError("@usine/executor/SandboxRequestError")("SandboxRequestError", {
+    worker: WorkerName,
+    operation: SandboxOperation,
+    /** Whether the Worker refused the Access service token. */
+    refused: Schema.Boolean,
+    message: Schema.NonEmptyString,
+}) {
+}
+/** The timeout for one request. Creating a sandbox starts its container. */
+const REQUEST_TIMEOUT = "2 minutes";
+/** Returns the failure reason, built only from the failure's tag, status, and typed fields. */
+const reason = (failure) => {
+    if (HttpClientError.isHttpClientError(failure))
+        return failure.response === undefined
+            ? `no response (${failure.reason._tag})`
+            : failure.response.status === 401
+                ? "the Worker refused the Access service token"
+                : `the Worker returned status ${String(failure.response.status)}`;
+    switch (failure._tag) {
+        case "TimeoutError":
+            return `no response within ${REQUEST_TIMEOUT}`;
+        case "SandboxNotFound":
+            return "the sandbox doesn't exist";
+        case "SandboxConflict":
+            return "the sandbox exists for another Attempt";
+        case "StaleCredentials":
+            return "the sandbox holds credentials that usine issued later";
+        case "ImageNotFound":
+            return "the Worker has no image with that name";
+        case "ContainerUnavailable":
+            return "the sandbox's container isn't running or failed the request";
+        case "SchemaError":
+            return "the Worker's response doesn't match its schema";
+        default:
+            return `the request failed with ${failure._tag}`;
+    }
+};
+const refusedToken = (failure) => HttpClientError.isHttpClientError(failure) && failure.response?.status === 401;
+/**
+ * Returns the client for `address`'s Worker, which sends the Access service token with each
+ * request and lists only `owner`'s sandboxes.
+ */
+export const sandboxClientFor = Effect.fn("CloudflareExecutor.sandboxClientFor")(function* (address, owner) {
+    const client = yield* HttpApiClient.make(SandboxApi, {
+        baseUrl: address.workerUrl,
+        transformClient: HttpClient.mapRequest(HttpClientRequest.setHeaders({
+            [ACCESS_CLIENT_ID_HEADER]: Redacted.value(address.accessClientId),
+            [ACCESS_CLIENT_SECRET_HEADER]: Redacted.value(address.accessClientSecret),
+        })),
+    });
+    const worker = address.name;
+    const request = (operation, effect, fields = {}) => effect.pipe(Effect.timeout(REQUEST_TIMEOUT), Effect.mapError((failure) => new SandboxRequestError({
+        worker,
+        operation,
+        refused: refusedToken(failure),
+        message: `Can't ${ACTIONS[operation]} for cloudflare worker "${worker}": ${reason(failure)}`,
+    })), Effect.tapError((error) => Effect.logWarning("Cloudflare Worker request failed", {
+        worker,
+        operation,
+        message: error.message,
+        ...fields,
+    })), Effect.withSpan(`CloudflareExecutor.${operation}`, { attributes: { worker, ...fields } }));
+    return {
+        health: request("health", client.health.health()),
+        create: (name, body) => request("create", client.sandbox.create({ params: { name }, payload: body }), {
+            sandbox: name,
+        }),
+        get: (name) => request("get", client.sandbox.get({ params: { name } }).pipe(Effect.map(Option.some), Effect.catchTag("SandboxNotFound", () => Effect.succeedNone)), { sandbox: name }),
+        list: request("list", client.registry.list({ query: { owner } }), { owner }),
+        credentials: (name, body) => request("credentials", client.sandbox.credentials({ params: { name }, payload: body }), {
+            sandbox: name,
+        }),
+        hold: (name) => request("hold", client.sandbox.hold({ params: { name } }), { sandbox: name }),
+        stop: (name) => request("stop", client.sandbox.stop({ params: { name } }), { sandbox: name }),
+        destroy: (name) => request("destroy", client.sandbox.destroy({ params: { name } }), { sandbox: name }),
+    };
+});
+//# sourceMappingURL=client.js.map

package/dist/cloudflare/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/cloudflare/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAI3B,UAAU,GAOX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC9C,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,MAAM;IACN,aAAa;IACb,MAAM;IACN,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAGH,MAAM,OAAO,GAAG;IACd,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,oBAAoB;IAC5B,GAAG,EAAE,kBAAkB;IACvB,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,iCAAiC;IAC9C,IAAI,EAAE,kBAAkB;IACxB,IAAI,EAAE,6BAA6B;IACnC,OAAO,EAAE,qBAAqB;CACqB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,CACzD,qCAAqC,CACtC,CAAC,qBAAqB,EAAE;IACvB,MAAM,EAAE,UAAU;IAClB,SAAS,EAAE,gBAAgB;IAC3B,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,OAAO,EAAE,MAAM,CAAC,cAAc;CAC/B,CAAC;CAAG;AAEL,4EAA4E;AAC5E,MAAM,eAAe,GAAG,WAAW,CAAC;AAEpC,+FAA+F;AAC/F,MAAM,MAAM,GAAG,CAAC,OAAkC,EAAU,EAAE;IAC5D,IAAI,eAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC5C,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS;YACnC,CAAC,CAAC,gBAAgB,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG;YACxC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAC/B,CAAC,CAAC,6CAA6C;gBAC/C,CAAC,CAAC,8BAA8B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IACxE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,cAAc;YACjB,OAAO,sBAAsB,eAAe,EAAE,CAAC;QACjD,KAAK,iBAAiB;YACpB,OAAO,2BAA2B,CAAC;QACrC,KAAK,iBAAiB;YACpB,OAAO,wCAAwC,CAAC;QAClD,KAAK,kBAAkB;YACrB,OAAO,uDAAuD,CAAC;QACjE,KAAK,eAAe;YAClB,OAAO,wCAAwC,CAAC;QAClD,KAAK,sBAAsB;YACzB,OAAO,6DAA6D,CAAC;QACvE,KAAK,aAAa;YAChB,OAAO,gDAAgD,CAAC;QAC1D;YACE,OAAO,2BAA2B,OAAO,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,OAAkC,EAAW,EAAE,CACnE,eAAe,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,CAAC;AAyBjF;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CAAC,qCAAqC,CAAC,CAAC,QAAQ,CAAC,EACxF,OAAgC,EAChC,KAAmB;IAEnB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE;QACnD,OAAO,EAAE,OAAO,CAAC,SAAS;QAC1B,eAAe,EAAE,UAAU,CAAC,UAAU,CACpC,iBAAiB,CAAC,UAAU,CAAC;YAC3B,CAAC,uBAAuB,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YACjE,CAAC,2BAA2B,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAC1E,CAAC,CACH;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5B,MAAM,OAAO,GAAG,CACd,SAA2B,EAC3B,MAA2B,EAC3B,MAAM,GAAqC,EAAE,EAC7C,EAAE,CACF,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAC/B,MAAM,CAAC,QAAQ,CACb,CAAC,OAAO,EAAE,EAAE,CACV,IAAI,mBAAmB,CAAC;QACtB,MAAM;QACN,SAAS;QACT,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;QAC9B,OAAO,EAAE,SAAS,OAAO,CAAC,SAAS,CAAC,2BAA2B,MAAM,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE;KAC7F,CAAC,CACL,EACD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,UAAU,CAAC,kCAAkC,EAAE;QACpD,MAAM;QACN,SAAS;QACT,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,MAAM;KACV,CAAC,CACH,EACD,MAAM,CAAC,QAAQ,CAAC,sBAAsB,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAC1F,CAAC;IACJ,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACrB,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;YAC5E,OAAO,EAAE,IAAI;SACd,CAAC;QACJ,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CACZ,OAAO,CACL,KAAK,EACL,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EACvB,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAC7D,EACD,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB;QACH,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAC5E,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAC1B,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;YACtF,OAAO,EAAE,IAAI;SACd,CAAC;QACJ,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7F,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7F,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAChB,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;KAC9D,CAAC;AAC5B,CAAC,CAAC,CAAC"}

package/dist/cloudflare/cloudflare.d.ts

@@ -0,0 +1,17 @@
+import { ClaudeLoginLock } from "@usine/agents/runtime";
+import { AttemptRuntime } from "@usine/durable/attempt-runtime";
+import { Layer } from "effect";
+import type { HttpClient } from "effect/http";
+import type { ChildProcessSpawner } from "effect/process";
+import { CredentialProvider, Executor } from "../executor.ts";
+import type { CloudflareExecutorOptions } from "./model.ts";
+/**
+ * The executor for `cloudflare` Workers. Each Attempt runs in its own sandbox, which the
+ * Worker deployed from `@usine/cloudflare` creates; its Pi parent is a durable task in this
+ * process (`AttemptRuntime`), and each child and git command runs in the sandbox through the
+ * sandbox shell. A live Attempt reattaches to its sandbox after an orchestrator restart.
+ * Requires Node.
+ */
+export declare const layer: (options: CloudflareExecutorOptions) => Layer.Layer<Executor, never, AttemptRuntime | ClaudeLoginLock | ChildProcessSpawner.ChildProcessSpawner | CredentialProvider | HttpClient.HttpClient>;
+export type { CloudflareExecutorOptions, CloudflareProviderKey, CloudflareWorkerAddress, } from "./model.ts";
+//# sourceMappingURL=cloudflare.d.ts.map

package/dist/cloudflare/cloudflare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/cloudflare/cloudflare.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA0BxD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAOL,KAAK,EAMN,MAAM,QAAQ,CAAC;AAChB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAI1D,OAAO,EAEL,kBAAkB,EAClB,QAAQ,EAOT,MAAM,gBAAgB,CAAC;AAgBxB,OAAO,KAAK,EAAE,yBAAyB,EAA2B,MAAM,YAAY,CAAC;AA+mCrF;;;;;;GAMG;AACH,eAAO,MAAM,KAAK,YACP,yBAAyB,KACjC,KAAK,CAAC,KAAK,CACZ,QAAQ,EACR,KAAK,EACH,cAAc,GACd,eAAe,GACf,mBAAmB,CAAC,mBAAmB,GACvC,kBAAkB,GAClB,UAAU,CAAC,UAAU,CACmC,CAAC;AAE7D,YAAY,EACV,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,YAAY,CAAC"}