niceeval 0.12.1 → 0.12.2-canary.31

package/dist/runner/run.d.cts

@@ -0,0 +1,44 @@
+import { Effect, Cause } from "effect";
+import type { ResolvedJudgeConfig } from "../types.cjs";
+import type { RunOptions } from "./types.cjs";
+declare const RunModeConflictError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => Cause.YieldableError & {
+    readonly _tag: "RunModeConflictError";
+} & Readonly<A>;
+export declare class RunModeConflictError extends RunModeConflictError_base<{
+    readonly keepSandbox: NonNullable<RunOptions["keepSandbox"]>;
+    readonly conflictingExperimentIds: readonly string[];
+    readonly conflictingEvalGroups: readonly {
+        readonly experimentId: string | undefined;
+        readonly evalGroupId: string;
+    }[];
+    readonly message: string;
+}> {
+}
+export type { AgentRun, RunOptions } from "./types.cjs";
+/** Only declared, configured capabilities are prechecked. A missing model or
+ * key is an ordinary consumed-Fact unavailable outcome and does no network I/O. */
+export declare function judgeProbeTargets(evals: readonly (ResolvedJudgeConfig | undefined)[]): ResolvedJudgeConfig[];
+/** `judgeProbeTargets` 的完整形态:除了去重后的探测目标,还给出「哪个 pair 依赖哪个目标」——
+ *  预检失败只作废需要 judge 的那些 pair(见 docs/feature/judge/library.md「派发前预检」),
+ *  所以必须能把探测结局按 pair 归因,不能只知道有几个端点要探。 */
+export declare function judgeProbePlan(evals: ReadonlyArray<{
+    id: string;
+    judge: ResolvedJudgeConfig | undefined;
+}>): {
+    targets: Array<{
+        key: string;
+        judge: ResolvedJudgeConfig;
+    }>;
+    evalKeys: Map<string, string>;
+};
+/**
+ * The Runner is Effect-native from writer acquisition through dispatch and
+ * publication. NodeRuntime is deliberately owned by the CLI/application edge.
+ */
+export declare function runEvals<AttachmentError, AttachmentRequirements>(opts: RunOptions<AttachmentError, AttachmentRequirements>): Effect.Effect<Readonly<{
+    invocationId: string;
+    runIds: readonly string[];
+    startedAt: string;
+    completedAt: string;
+    completion: "completed" | "interrupted";
+}>, unknown, import("../record/index.cjs").RecordFileSystem | import("../record/index.cjs").RecordMaintenanceLock | import("../record/index.cjs").RecordWriterLock | import("../record/index.cjs").RecordEntropy | Exclude<AttachmentRequirements, import("effect/Scope").Scope>>;

package/dist/runner/run.d.mts

@@ -0,0 +1,44 @@
+import { Effect, Cause } from "effect";
+import type { ResolvedJudgeConfig } from "../types.mjs";
+import type { RunOptions } from "./types.mjs";
+declare const RunModeConflictError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => Cause.YieldableError & {
+    readonly _tag: "RunModeConflictError";
+} & Readonly<A>;
+export declare class RunModeConflictError extends RunModeConflictError_base<{
+    readonly keepSandbox: NonNullable<RunOptions["keepSandbox"]>;
+    readonly conflictingExperimentIds: readonly string[];
+    readonly conflictingEvalGroups: readonly {
+        readonly experimentId: string | undefined;
+        readonly evalGroupId: string;
+    }[];
+    readonly message: string;
+}> {
+}
+export type { AgentRun, RunOptions } from "./types.mjs";
+/** Only declared, configured capabilities are prechecked. A missing model or
+ * key is an ordinary consumed-Fact unavailable outcome and does no network I/O. */
+export declare function judgeProbeTargets(evals: readonly (ResolvedJudgeConfig | undefined)[]): ResolvedJudgeConfig[];
+/** `judgeProbeTargets` 的完整形态:除了去重后的探测目标,还给出「哪个 pair 依赖哪个目标」——
+ *  预检失败只作废需要 judge 的那些 pair(见 docs/feature/judge/library.md「派发前预检」),
+ *  所以必须能把探测结局按 pair 归因,不能只知道有几个端点要探。 */
+export declare function judgeProbePlan(evals: ReadonlyArray<{
+    id: string;
+    judge: ResolvedJudgeConfig | undefined;
+}>): {
+    targets: Array<{
+        key: string;
+        judge: ResolvedJudgeConfig;
+    }>;
+    evalKeys: Map<string, string>;
+};
+/**
+ * The Runner is Effect-native from writer acquisition through dispatch and
+ * publication. NodeRuntime is deliberately owned by the CLI/application edge.
+ */
+export declare function runEvals<AttachmentError, AttachmentRequirements>(opts: RunOptions<AttachmentError, AttachmentRequirements>): Effect.Effect<Readonly<{
+    invocationId: string;
+    runIds: readonly string[];
+    startedAt: string;
+    completedAt: string;
+    completion: "completed" | "interrupted";
+}>, unknown, import("../record/index.mjs").RecordFileSystem | import("../record/index.mjs").RecordMaintenanceLock | import("../record/index.mjs").RecordWriterLock | import("../record/index.mjs").RecordEntropy | Exclude<AttachmentRequirements, import("effect/Scope").Scope>>;

package/dist/runner/run.d.ts

@@ -0,0 +1,44 @@
+import { Effect, Cause } from "effect";
+import type { ResolvedJudgeConfig } from "../types.js";
+import type { RunOptions } from "./types.js";
+declare const RunModeConflictError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => Cause.YieldableError & {
+    readonly _tag: "RunModeConflictError";
+} & Readonly<A>;
+export declare class RunModeConflictError extends RunModeConflictError_base<{
+    readonly keepSandbox: NonNullable<RunOptions["keepSandbox"]>;
+    readonly conflictingExperimentIds: readonly string[];
+    readonly conflictingEvalGroups: readonly {
+        readonly experimentId: string | undefined;
+        readonly evalGroupId: string;
+    }[];
+    readonly message: string;
+}> {
+}
+export type { AgentRun, RunOptions } from "./types.js";
+/** Only declared, configured capabilities are prechecked. A missing model or
+ * key is an ordinary consumed-Fact unavailable outcome and does no network I/O. */
+export declare function judgeProbeTargets(evals: readonly (ResolvedJudgeConfig | undefined)[]): ResolvedJudgeConfig[];
+/** `judgeProbeTargets` 的完整形态:除了去重后的探测目标,还给出「哪个 pair 依赖哪个目标」——
+ *  预检失败只作废需要 judge 的那些 pair(见 docs/feature/judge/library.md「派发前预检」),
+ *  所以必须能把探测结局按 pair 归因,不能只知道有几个端点要探。 */
+export declare function judgeProbePlan(evals: ReadonlyArray<{
+    id: string;
+    judge: ResolvedJudgeConfig | undefined;
+}>): {
+    targets: Array<{
+        key: string;
+        judge: ResolvedJudgeConfig;
+    }>;
+    evalKeys: Map<string, string>;
+};
+/**
+ * The Runner is Effect-native from writer acquisition through dispatch and
+ * publication. NodeRuntime is deliberately owned by the CLI/application edge.
+ */
+export declare function runEvals<AttachmentError, AttachmentRequirements>(opts: RunOptions<AttachmentError, AttachmentRequirements>): Effect.Effect<Readonly<{
+    invocationId: string;
+    runIds: readonly string[];
+    startedAt: string;
+    completedAt: string;
+    completion: "completed" | "interrupted";
+}>, unknown, import("../record/index.js").RecordFileSystem | import("../record/index.js").RecordMaintenanceLock | import("../record/index.js").RecordWriterLock | import("../record/index.js").RecordEntropy | Exclude<AttachmentRequirements, import("effect/Scope").Scope>>;

package/dist/runner/run.js

@@ -0,0 +1,12 @@
+import { createRequire as __niceevalCreateRequire } from "node:module";
+const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
+const __niceevalCanonical = __niceevalRequire("./run.cjs");
+const __niceevalExport0 = __niceevalCanonical["RunModeConflictError"];
+export { __niceevalExport0 as RunModeConflictError };
+const __niceevalExport1 = __niceevalCanonical["judgeProbePlan"];
+export { __niceevalExport1 as judgeProbePlan };
+const __niceevalExport2 = __niceevalCanonical["judgeProbeTargets"];
+export { __niceevalExport2 as judgeProbeTargets };
+const __niceevalExport3 = __niceevalCanonical["runEvals"];
+export { __niceevalExport3 as runEvals };
+//# sourceMappingURL=run.js.map

package/dist/runner/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sources":[],"names":[],"mappings":""}

package/dist/runner/sandbox-pool.cjs

@@ -0,0 +1,312 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReusableSandboxPool = void 0;
+const deadline_ts_1 = require("../sandbox/deadline.cjs");
+const backend_ts_1 = require("../sandbox/backend.cjs");
+const runtime_ts_1 = require("../sandbox/runtime.cjs");
+const cleanup_timeout_ts_1 = require("./cleanup-timeout.cjs");
+const ledger_ts_1 = require("./ledger.cjs");
+const util_ts_1 = require("../util.cjs");
+const effect_1 = require("effect");
+/** 一个 pair-owned physical plan 的按需复用池；实例始终独占借给单条 Attempt。 */
+class ReusableSandboxPool {
+    plan;
+    capacity;
+    feedback;
+    setupContext;
+    runtimeServices;
+    agent;
+    runTiming;
+    nextReuseSandboxNumber;
+    groupPlugins;
+    groupPluginContext;
+    entries = [];
+    waiters = [];
+    creating = 0;
+    stopped = false;
+    runtimeFailures = [];
+    /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */
+    materializationOwnerId;
+    /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */
+    created = 0;
+    groupPluginSetupStarted = false;
+    groupPluginSetupError;
+    activatedGroupPlugins = 0;
+    constructor(plan, capacity, feedback, setupContext, runtimeServices = runtime_ts_1.liveSandboxRuntimeServices, agent, runTiming, materializationOwnerId, nextReuseSandboxNumber, groupPlugins = Object.freeze([]), groupPluginContext) {
+        this.plan = plan;
+        this.capacity = capacity;
+        this.feedback = feedback;
+        this.setupContext = setupContext;
+        this.runtimeServices = runtimeServices;
+        this.agent = agent;
+        this.runTiming = runTiming;
+        this.nextReuseSandboxNumber = nextReuseSandboxNumber;
+        this.groupPlugins = groupPlugins;
+        this.groupPluginContext = groupPluginContext;
+        this.materializationOwnerId = materializationOwnerId ?? plan.pair.evalId;
+    }
+    /** 把整座池登记进调用方 Scope；Invocation 中断与正常结束走同一条 stop finalizer。 */
+    managed() {
+        return effect_1.Effect.addFinalizer(() => this.stop()).pipe(effect_1.Effect.as(this));
+    }
+    /**
+     * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。
+     * `undefined` = 四层都没声明上限:请求的寿命只能覆盖收尾预留——Attempt 本身没有 deadline,
+     * 池无从知道它要跑多久,也不替它编一个数。此后实例被 provider 按自己的 `lifetimeMs` 回收
+     * 就是「不声明上限」的代价(两种时间的分界见 docs/feature/sandbox/reuse.md)。
+     */
+    acquire(attemptDeadlineMs, buildLocators) {
+        return effect_1.Effect.gen(this, function* () {
+            const minRemainingMs = (attemptDeadlineMs ?? 0) + cleanup_timeout_ts_1.CLEANUP_TIMEOUT_MS;
+            /**
+             * 借出期内单条命令的上限从这条线派生(`undefined` = 四层都没声明上限,照旧不发明一条线)。
+             * 实例活得比 attempt 长,所以这条线必须**每次借出重设**——只在 create 时给一次的话,
+             * 第二条 attempt 起就落回 provider SDK 的默认值(e2b 是 60 秒),实验声明的 timeoutMs
+             * 完全不生效(见 sandbox/deadline.ts 的 `SandboxCommandDeadline`)。
+             * 用 minRemainingMs 而不是 attemptDeadlineMs:归还时的分类账复位跑在同一条线下,
+             * 不至于一还回来就撞一条已经过期的线。
+             */
+            const leaseDeadlineAt = attemptDeadlineMs === undefined ? undefined : () => Date.now() + minRemainingMs;
+            for (;;) {
+                if (this.stopped)
+                    return yield* effect_1.Effect.fail(new Error("sandbox reuse pool has been stopped"));
+                const ready = this.entries.find((entry) => entry.lifecycle._tag === "Idle");
+                if (ready) {
+                    // 派发前确认:请求足以覆盖 Attempt deadline 与收尾预留的寿命。不 ready 就停掉这台、
+                    // 交给下一轮创建替代实例(替代实例在 create 里再确认一次,还不行就报错,不反复重建)。
+                    const lifetime = yield* externalPromise(() => ready.lifetime.ensureLifetime(minRemainingMs));
+                    // lifetime 检查是异步 provider I/O；其间 stop() 或另一条 release 可能已经退休这台。
+                    // 只有仍是 Idle 的实例才能真正借出，stop 后让下一轮在入口处统一失败。
+                    if (lifetime.ready && !this.stopped && ready.lifecycle._tag === "Idle") {
+                        return yield* this.lease(ready, leaseDeadlineAt?.());
+                    }
+                    if (this.stopped || ready.lifecycle._tag !== "Idle")
+                        continue;
+                    yield* this.retire(ready);
+                    continue;
+                }
+                if (this.entries.length + this.creating < this.capacity) {
+                    this.creating += 1;
+                    return yield* effect_1.Effect.gen(this, function* () {
+                        const created = yield* this.create(minRemainingMs, leaseDeadlineAt?.(), buildLocators);
+                        this.entries.push(created);
+                        // stop 可能在物化期间开始。把刚创建的 entry 先纳入池，再由唯一 retire 路径关闭
+                        // 它自己的 Scope；绝不能把它借给已停止的池，也不能让 stop 在 creating=0 时漏掉它。
+                        if (this.stopped) {
+                            yield* this.retire(created);
+                            return yield* effect_1.Effect.fail(new Error("sandbox reuse pool has been stopped"));
+                        }
+                        return yield* this.lease(created, leaseDeadlineAt?.());
+                    }).pipe(effect_1.Effect.ensuring(effect_1.Effect.sync(() => {
+                        this.creating -= 1;
+                        this.wake();
+                    })));
+                }
+                yield* this.awaitWake();
+            }
+        });
+    }
+    stop() {
+        return effect_1.Effect.gen(this, function* () {
+            this.stopped = true;
+            this.wake();
+            // 已借出的 lease 仍在执行其 Attempt/cleanup；现在关闭 entry Scope 会把 Sandbox 在
+            // 使用中 teardown。创建中的 entry 尚未进 entries，必须等它落入唯一 retire 路径。
+            while (this.creating > 0 || this.entries.some((entry) => entry.lifecycle._tag === "Leased")) {
+                yield* this.awaitWake();
+            }
+            yield* effect_1.Effect.forEach([...this.entries], (entry) => this.retire(entry), {
+                concurrency: "unbounded",
+                discard: true,
+            });
+            if (this.groupPluginContext !== undefined) {
+                yield* effect_1.Effect.forEach(this.groupPlugins.slice(0, this.activatedGroupPlugins).reverse(), (entry) => entry.teardown === undefined
+                    ? effect_1.Effect.void
+                    : (0, cleanup_timeout_ts_1.cleanupCallback)(() => entry.teardown({
+                        ...this.groupPluginContext,
+                        signal: AbortSignal.timeout(cleanup_timeout_ts_1.CLEANUP_TIMEOUT_MS),
+                    })).pipe(effect_1.Effect.catchAll((cause) => effect_1.Effect.sync(() => this.feedback.diagnostic({
+                        code: "plugin-lifecycle-teardown-failed",
+                        level: "warning",
+                        message: cause instanceof Error ? cause.message : String(cause),
+                    })))), { discard: true });
+            }
+        });
+    }
+    /** Drained by the scheduler after the lease Scope sealed the prior result. */
+    drainRuntimeFailures() {
+        return Object.freeze(this.runtimeFailures.splice(0));
+    }
+    create(minRemainingMs, deadlineAt, buildLocators) {
+        return effect_1.Effect.gen(this, function* () {
+            if (this.groupPluginSetupError !== undefined)
+                return yield* effect_1.Effect.fail(this.groupPluginSetupError);
+            if (!this.groupPluginSetupStarted && this.groupPluginContext !== undefined) {
+                this.groupPluginSetupStarted = true;
+                const setup = yield* effect_1.Effect.exit(effect_1.Effect.forEach(this.groupPlugins, (entry, index) => {
+                    this.activatedGroupPlugins = index + 1;
+                    return entry.setup === undefined
+                        ? effect_1.Effect.void
+                        : externalPromise(() => Promise.resolve(entry.setup(this.groupPluginContext)));
+                }, { discard: true }));
+                if (effect_1.Exit.isFailure(setup)) {
+                    this.groupPluginSetupError = effect_1.Cause.squash(setup.cause);
+                    return yield* effect_1.Effect.fail(this.groupPluginSetupError);
+                }
+            }
+            const capabilities = (0, runtime_ts_1.sandboxRuntimeCapabilities)(this.plan);
+            if (capabilities.reuse._tag === "Unsupported") {
+                return yield* effect_1.Effect.fail(new Error(`sandboxReuse is unsupported by provider ${JSON.stringify(capabilities.provider)}: ${capabilities.reuse.reason}`));
+            }
+            const deadline = deadlineAt === undefined
+                ? { _tag: "Unlimited" }
+                : { _tag: "Bounded", timeoutMs: Math.max(1, minRemainingMs - cleanup_timeout_ts_1.CLEANUP_TIMEOUT_MS), deadlineAt };
+            const entryScope = yield* effect_1.Scope.make();
+            const materialized = yield* effect_1.Scope.extend((0, runtime_ts_1.materializeSandboxRunPlan)({
+                plan: this.plan,
+                evalId: this.materializationOwnerId,
+                deadline,
+                feedback: this.feedback,
+                signal: this.setupContext.signal,
+                hookContext: this.setupContext,
+                buildLocators,
+                ...(this.agent !== undefined ? { agent: this.agent } : {}),
+                ...(this.runTiming !== undefined ? { runTiming: this.runTiming } : {}),
+                provisionSlot: { _tag: "Detached" },
+                services: this.runtimeServices,
+                release: { _tag: "Stop" },
+            }), entryScope).pipe(effect_1.Effect.onError((cause) => effect_1.Scope.close(entryScope, effect_1.Exit.failCause(cause))));
+            const sandbox = materialized.sandbox;
+            // 能力只能来自 provider 实现:探不到就硬失败,没有通用记账兜底(见
+            // docs/feature/sandbox/reuse.md「派发前确认」)。
+            const lifetime = (0, backend_ts_1.sandboxReuseCapability)(sandbox);
+            if (!lifetime) {
+                yield* effect_1.Scope.close(entryScope, effect_1.Exit.void);
+                return yield* effect_1.Effect.fail(new Error(`sandboxReuse needs the "${capabilities.provider}" provider to confirm sandbox lifetime, but it does not implement ` +
+                    "ensureLifetime(minRemainingMs). Only a provider can prove the lifetime is set on its own backend; the runner " +
+                    "will not keep local books for it. Use a provider that implements it (docker / e2b / vercel), or drop sandboxReuse."));
+            }
+            const confirmed = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs)).pipe(effect_1.Effect.onError((cause) => effect_1.Scope.close(entryScope, effect_1.Exit.failCause(cause))));
+            if (!confirmed.ready) {
+                yield* effect_1.Scope.close(entryScope, effect_1.Exit.void);
+                return yield* effect_1.Effect.fail(new Error(`sandboxReuse cannot prepare the "${capabilities.provider}" sandbox: ${confirmed.reason}`));
+            }
+            const prepared = yield* effect_1.Effect.gen(this, function* () {
+                const ledger = yield* externalPromise(() => (0, ledger_ts_1.createChangeLedger)(sandbox));
+                // root 执行身份下题间 reset 永不安全(Agent 能读上一条 Attempt 留下的私有分类账对象);
+                // 在实例进池、第一条 Attempt 派发前就拒绝,而不是等到归还时才在 resetToAnchor() 里
+                // 暴露(那样首条 Attempt 已经跑完,失败还可能被静默退休吞掉)。
+                if (ledger.rootExecutionIdentity) {
+                    return yield* effect_1.Effect.fail(new Error(`sandboxReuse cannot reuse the "${capabilities.provider}" sandbox: the Agent's execution identity is root and could read private ledger objects left by earlier attempts; ` +
+                        "use a non-root execution user (declare USER in the image) or disable sandboxReuse"));
+                }
+                // 建分类账会烧掉寿命:备好之后再确认一次。这次不够就报错收场——
+                // 反复创建同样的替代实例只会反复烧同样的时间(见 reuse.md「派发前确认」)。
+                const afterSetup = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs));
+                if (!afterSetup.ready) {
+                    return yield* effect_1.Effect.fail(new Error(`sandboxReuse cannot use the "${capabilities.provider}" sandbox after baseline setup: ${afterSetup.reason}`));
+                }
+                const reuseSandbox = this.nextReuseSandboxNumber === undefined
+                    ? ++this.created
+                    : this.nextReuseSandboxNumber();
+                return {
+                    sandbox,
+                    scope: entryScope,
+                    lifetime,
+                    ledger,
+                    reuseSandbox,
+                    ordinal: 0,
+                    lifecycle: { _tag: "Idle" },
+                };
+            }).pipe(effect_1.Effect.onError((cause) => effect_1.Scope.close(entryScope, effect_1.Exit.failCause(cause))));
+            return prepared;
+        });
+    }
+    lease(entry, deadlineAt) {
+        entry.lifecycle = { _tag: "Leased" };
+        entry.ordinal += 1;
+        (0, deadline_ts_1.applyCommandDeadline)(entry.sandbox, deadlineAt);
+        let lifecycle = {
+            _tag: "Open",
+            release: { _tag: "Uncommitted" },
+        };
+        const lease = {
+            sandbox: entry.sandbox,
+            reuseSandbox: entry.reuseSandbox,
+            reuseOrdinal: entry.ordinal,
+            commit: (release) => effect_1.Effect.sync(() => {
+                if (lifecycle._tag !== "Open")
+                    return;
+                lifecycle = { ...lifecycle, release: { _tag: "Committed", release } };
+            }),
+        };
+        return effect_1.Effect.addFinalizer(() => effect_1.Effect.gen(this, function* () {
+            if (lifecycle._tag === "Finalized")
+                return;
+            const settled = lifecycle;
+            lifecycle = { _tag: "Finalized" };
+            const release = settled.release._tag === "Committed"
+                ? settled.release.release
+                : { _tag: "Retire" };
+            if (release._tag === "Retire") {
+                yield* this.retire(entry);
+            }
+            else if (entry.lifecycle._tag !== "Retired") {
+                const reset = yield* effect_1.Effect.either(externalPromise(() => entry.ledger.resetToAnchor()));
+                if (effect_1.Either.isLeft(reset)) {
+                    this.runtimeFailures.push(Object.freeze({ stage: "sandbox.reset", error: reset.left }));
+                    this.feedback.diagnostic({
+                        code: "sandbox-reset-failed",
+                        level: "warning",
+                        message: `Sandbox #${entry.reuseSandbox} reset to anchor failed, retiring the instance: ${(0, util_ts_1.firstLine)((0, util_ts_1.formatThrown)(reset.left))}`,
+                    });
+                    yield* this.retire(entry);
+                }
+                else {
+                    entry.lifecycle = { _tag: "Idle" };
+                }
+            }
+            this.wake();
+        })).pipe(effect_1.Effect.as(lease));
+    }
+    /** 淘汰一台实例:停资源组并移出池——留在池里会占满容量,
+     *  让后续 acquire 既等不到空闲实例、也创建不出替代实例(等待者永远醒不来)。 */
+    retire(entry) {
+        return effect_1.Effect.gen(this, function* () {
+            if (entry.lifecycle._tag === "Retired")
+                return;
+            entry.lifecycle = { _tag: "Retired" };
+            const at = this.entries.indexOf(entry);
+            if (at >= 0)
+                this.entries.splice(at, 1);
+            yield* effect_1.Scope.close(entry.scope, effect_1.Exit.void).pipe(effect_1.Effect.catchAllCause((cause) => effect_1.Effect.sync(() => this.feedback.diagnostic({
+                code: "sandbox-stop-failed",
+                level: "warning",
+                message: `Sandbox reuse case finalizer failed: ${String(cause)}`,
+            }))));
+            this.wake();
+        });
+    }
+    wake() {
+        this.waiters.splice(0).forEach((resolve) => resolve());
+    }
+    awaitWake() {
+        return effect_1.Effect.async((resume) => {
+            const wake = () => resume(effect_1.Effect.void);
+            this.waiters.push(wake);
+            return effect_1.Effect.sync(() => {
+                const index = this.waiters.indexOf(wake);
+                if (index >= 0)
+                    this.waiters.splice(index, 1);
+            });
+        });
+    }
+}
+exports.ReusableSandboxPool = ReusableSandboxPool;
+function externalPromise(run) {
+    return effect_1.Effect.tryPromise({
+        try: run,
+        catch: (cause) => cause instanceof Error ? cause : new Error(String(cause)),
+    });
+}
+//# sourceMappingURL=sandbox-pool.cjs.map

package/dist/runner/sandbox-pool.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-pool.js","sourceRoot":"","sources":["sandbox-pool.ts"],"names":[],"mappings":";;;AAAA,wDAA8D;AAC9D,sDAA+D;AAG/D,sDAAqL;AAErL,6DAA2E;AAC3E,2CAAoE;AACpE,wCAAqD;AACrD,mCAA4D;AAkD5D,6DAA6D;AAC7D,MAAa,mBAAmB;IAaC;IAER;IAAmC;IAA2C;IAAmD;IAAuF;IAAuC;IAAuG;IAAwD;IAAqF;IAdvf,OAAO,GAAY,EAAE,CAAC;IACtB,OAAO,GAAsB,EAAE,CAAC;IACzC,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,KAAK,CAAC;IACP,eAAe,GAAwC,EAAE,CAAC;IAC3E,4DAA4D;IAC3C,sBAAsB,CAAS;IAChD,wDAAwD;IAChD,OAAO,GAAG,CAAC,CAAC;IACZ,uBAAuB,GAAG,KAAK,CAAC;IAChC,qBAAqB,CAAU;IAC/B,qBAAqB,GAAG,CAAC,CAAC;IAClC,YAA6B,IAE3B,EAAmB,QAAgB,EAAmB,QAAwB,EAAmB,YAAgC,EAAmB,kBAA0C,uCAA0B,EAAmB,KAAoB,EAAmB,SAAmD,EAAE,sBAA+B,EAAmB,sBAAqC,EAAmB,eAAiD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAmB,kBAAuC;QAFlhB,SAAI,GAAJ,IAAI,CAE/B;QAAmB,aAAQ,GAAR,QAAQ,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAAgB;QAAmB,iBAAY,GAAZ,YAAY,CAAoB;QAAmB,oBAAe,GAAf,eAAe,CAAqD;QAAmB,UAAK,GAAL,KAAK,CAAe;QAAmB,cAAS,GAAT,SAAS,CAA0C;QAAoD,2BAAsB,GAAtB,sBAAsB,CAAe;QAAmB,iBAAY,GAAZ,YAAY,CAAsD;QAAmB,uBAAkB,GAAlB,kBAAkB,CAAqB;QAC3iB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAC7E,CAAC;IACD,8DAA8D;IAC9D,OAAO;QACH,OAAO,eAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,iBAAqC,EAAE,aAA+C;QAC1F,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,MAAM,cAAc,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,uCAAkB,CAAC;YACrE;;;;;;;eAOG;YACH,MAAM,eAAe,GAAG,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;YACxG,SAAS,CAAC;gBACN,IAAI,IAAI,CAAC,OAAO;oBACZ,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBAChF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;gBAC5E,IAAI,KAAK,EAAE,CAAC;oBACR,wDAAwD;oBACxD,iDAAiD;oBACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;oBAC7F,+DAA+D;oBAC/D,0CAA0C;oBAC1C,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACrE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;oBACzD,CAAC;oBACD,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM;wBAC/C,SAAS;oBACb,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC1B,SAAS;gBACb,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;wBACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;wBACvF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC3B,mDAAmD;wBACnD,uDAAuD;wBACvD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;4BACf,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;4BAC5B,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;wBAChF,CAAC;wBACD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;oBAC3D,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;wBACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;wBACnB,IAAI,CAAC,IAAI,EAAE,CAAC;oBAChB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACT,CAAC;gBACD,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,IAAI;QACA,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,iEAAiE;YACjE,0DAA0D;YAC1D,OAAO,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC1F,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,CAAC;YACD,KAAK,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACpE,WAAW,EAAE,WAAW;gBACxB,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACxC,KAAK,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAC3H,CAAC,CAAC,eAAM,CAAC,IAAI;oBACb,CAAC,CAAC,IAAA,oCAAe,EAAC,GAAG,EAAE,CAAE,KAAK,CAAC,QAAkE,CAAC;wBAC9F,GAAG,IAAI,CAAC,kBAAmB;wBAC3B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,uCAAkB,CAAC;qBAClD,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;wBAC3E,IAAI,EAAE,kCAAkC;wBACxC,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAClE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,8EAA8E;IAC9E,oBAAoB;QAChB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACO,MAAM,CAAC,cAAsB,EAAE,UAA8B,EAAE,aAA+C;QAClH,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS;gBACxC,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAA8B,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACzE,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;gBACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBAChF,IAAI,CAAC,qBAAqB,GAAG,KAAK,GAAG,CAAC,CAAC;oBACvC,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;wBAC5B,CAAC,CAAC,eAAM,CAAC,IAAI;wBACb,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAE,KAAK,CAAC,KAA+D,CAAC,IAAI,CAAC,kBAAmB,CAAC,CAAC,CAAC,CAAC;gBACnJ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvB,IAAI,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,IAAI,CAAC,qBAAqB,GAAG,cAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACvD,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAA8B,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;YACD,MAAM,YAAY,GAAG,IAAA,uCAA0B,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3J,CAAC;YACD,MAAM,QAAQ,GAA2B,UAAU,KAAK,SAAS;gBAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,uCAAkB,CAAC,EAAE,UAAU,EAAE,CAAC;YACnG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,cAAK,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,cAAK,CAAC,MAAM,CAAC,IAAA,sCAAyB,EAAC;gBAC/D,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,sBAAsB;gBACnC,QAAQ;gBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;gBAChC,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,aAAa;gBACb,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,aAAa,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,eAAe;gBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC5B,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAChG,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;YACrC,wCAAwC;YACxC,yCAAyC;YACzC,MAAM,QAAQ,GAAG,IAAA,mCAAsB,EAAC,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,KAAK,CAAC,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2BAA2B,YAAY,CAAC,QAAQ,oEAAoE;oBACpJ,+GAA+G;oBAC/G,oHAAoH,CAAC,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBACnB,KAAK,CAAC,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,YAAY,CAAC,QAAQ,cAAc,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACpI,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAA,8BAAkB,EAAC,OAAO,CAAC,CAAC,CAAC;gBACzE,2DAA2D;gBAC3D,wDAAwD;gBACxD,sCAAsC;gBACtC,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;oBAC/B,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,YAAY,CAAC,QAAQ,oHAAoH;wBAC3M,mFAAmF,CAAC,CAAC,CAAC;gBAC9F,CAAC;gBACD,kCAAkC;gBAClC,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gCAAgC,YAAY,CAAC,QAAQ,mCAAmC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACtJ,CAAC;gBACD,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,KAAK,SAAS;oBAC1D,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO;oBAChB,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACpC,OAAO;oBACH,OAAO;oBACP,KAAK,EAAE,UAAU;oBACjB,QAAQ;oBACR,MAAM;oBACN,YAAY;oBACZ,OAAO,EAAE,CAAC;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAA2B;iBACvD,CAAC;YACN,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,OAAO,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC;IACP,CAAC;IACO,KAAK,CAAC,KAAY,EAAE,UAA8B;QACtD,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACnB,IAAA,kCAAoB,EAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,SAAS,GAAmB;YAC5B,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;SACnC,CAAC;QACF,MAAM,KAAK,GAAyB;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,OAAO;YAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClC,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;oBACzB,OAAO;gBACX,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YAC1E,CAAC,CAAC;SACL,CAAC;QACF,OAAO,eAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YACvD,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW;gBAC9B,OAAO;YACX,MAAM,OAAO,GAAG,SAAS,CAAC;YAC1B,SAAS,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAClC,MAAM,OAAO,GAAyB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;gBACtE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;iBACI,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;gBACxF,IAAI,eAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACxF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;wBACrB,IAAI,EAAE,sBAAsB;wBAC5B,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,YAAY,KAAK,CAAC,YAAY,mDAAmD,IAAA,mBAAS,EAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;qBAClI,CAAC,CAAC;oBACH,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;qBACI,CAAC;oBACF,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACvC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD;oDACgD;IACxC,MAAM,CAAC,KAAY;QACvB,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;gBAClC,OAAO;YACX,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC;gBACP,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/B,KAAK,CAAC,CAAC,cAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,aAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvH,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE;aACnE,CAAC,CAAC,CAAC,CAAC,CAAC;YACN,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IACO,IAAI;QACR,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IACO,SAAS;QACb,OAAO,eAAM,CAAC,KAAK,CAAO,CAAC,MAAM,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,KAAK,IAAI,CAAC;oBACV,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AAlRD,kDAkRC;AACD,SAAS,eAAe,CAAQ,GAAyB;IACrD,OAAO,eAAM,CAAC,UAAU,CAAC;QACrB,GAAG,EAAE,GAAG;QACR,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC9E,CAAC,CAAC;AACP,CAAC","sourcesContent":["import { applyCommandDeadline } from \"../sandbox/deadline.ts\";\nimport { sandboxReuseCapability } from \"../sandbox/backend.ts\";\nimport type { LinkedRunPlan } from \"../sandbox/plan.ts\";\nimport type { BuildKey } from \"../sandbox/identity.ts\";\nimport { materializeSandboxRunPlan, liveSandboxRuntimeServices, sandboxRuntimeCapabilities, type SandboxRuntimeDeadline, type SandboxRuntimeServices, } from \"../sandbox/runtime.ts\";\nimport type { JsonValue, Sandbox, SandboxAgent, SandboxHookContext, SandboxReuseCapability, ScopedFeedback } from \"../types.ts\";\nimport { CLEANUP_TIMEOUT_MS, cleanupCallback } from \"./cleanup-timeout.ts\";\nimport { createChangeLedger, type ChangeLedger } from \"./ledger.ts\";\nimport { firstLine, formatThrown } from \"../util.ts\";\nimport { Cause, Effect, Either, Exit, Scope } from \"effect\";\nimport type { GroupPluginContext, LinkedPluginLifecycle } from \"../plugin/contracts.ts\";\nexport interface ReusableSandboxLease {\n    readonly sandbox: Sandbox;\n    readonly reuseSandbox: number;\n    readonly reuseOrdinal: number;\n    /** 提交本次 Attempt 的归还决策；Scope 退出负责实际 reset/retire，漏提交默认 Retire。 */\n    commit(disposition: ReusableLeaseRelease): Effect.Effect<void>;\n}\nexport type ReusableLeaseRelease = {\n    readonly _tag: \"Reset\";\n} | {\n    readonly _tag: \"Retire\";\n};\n/** A post-attempt physical lifecycle failure observed after its result sealed. */\nexport interface ReusableSandboxPoolRuntimeFailure {\n    readonly stage: \"sandbox.reset\";\n    readonly error: Error;\n}\ntype EntryLifecycle = {\n    readonly _tag: \"Idle\";\n} | {\n    readonly _tag: \"Leased\";\n} | {\n    readonly _tag: \"Retired\";\n};\ninterface Entry {\n    sandbox: Sandbox;\n    scope: Scope.CloseableScope;\n    /** provider 自己实现的寿命确认;没有这条能力的实例根本进不来(见 create)。 */\n    lifetime: SandboxReuseCapability;\n    ledger: ChangeLedger;\n    reuseSandbox: number;\n    ordinal: number;\n    lifecycle: EntryLifecycle;\n}\n/** Scope 尚未关闭前，lease 只能在这里两种归还意图之间演进。 */\ntype LeaseReleaseDecision = {\n    readonly _tag: \"Uncommitted\";\n} | {\n    readonly _tag: \"Committed\";\n    readonly release: ReusableLeaseRelease;\n};\n/** 漏 commit 保持 Uncommitted，finalizer 因而 Retire；不再用 boolean 记账。 */\ntype LeaseLifecycle = {\n    readonly _tag: \"Open\";\n    readonly release: LeaseReleaseDecision;\n} | {\n    readonly _tag: \"Finalized\";\n};\n/** 一个 pair-owned physical plan 的按需复用池；实例始终独占借给单条 Attempt。 */\nexport class ReusableSandboxPool {\n    private readonly entries: Entry[] = [];\n    private readonly waiters: Array<() => void> = [];\n    private creating = 0;\n    private stopped = false;\n    private readonly runtimeFailures: ReusableSandboxPoolRuntimeFailure[] = [];\n    /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */\n    private readonly materializationOwnerId: string;\n    /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */\n    private created = 0;\n    private groupPluginSetupStarted = false;\n    private groupPluginSetupError: unknown;\n    private activatedGroupPlugins = 0;\n    constructor(private readonly plan: Extract<LinkedRunPlan, {\n        readonly _tag: \"Sandbox\";\n    }>, private readonly capacity: number, private readonly feedback: ScopedFeedback, private readonly setupContext: SandboxHookContext, private readonly runtimeServices: SandboxRuntimeServices = liveSandboxRuntimeServices, private readonly agent?: SandboxAgent, private readonly runTiming?: import(\"./timing.ts\").RunTimingRecorder, materializationOwnerId?: string, private readonly nextReuseSandboxNumber?: () => number, private readonly groupPlugins: readonly LinkedPluginLifecycle[] = Object.freeze([]), private readonly groupPluginContext?: GroupPluginContext) {\n        this.materializationOwnerId = materializationOwnerId ?? plan.pair.evalId;\n    }\n    /** 把整座池登记进调用方 Scope；Invocation 中断与正常结束走同一条 stop finalizer。 */\n    managed(): Effect.Effect<this, never, Scope.Scope> {\n        return Effect.addFinalizer(() => this.stop()).pipe(Effect.as(this));\n    }\n    /**\n     * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。\n     * `undefined` = 四层都没声明上限:请求的寿命只能覆盖收尾预留——Attempt 本身没有 deadline,\n     * 池无从知道它要跑多久,也不替它编一个数。此后实例被 provider 按自己的 `lifetimeMs` 回收\n     * 就是「不声明上限」的代价(两种时间的分界见 docs/feature/sandbox/reuse.md)。\n     */\n    acquire(attemptDeadlineMs: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<ReusableSandboxLease, Error | import(\"../sandbox/runtime.ts\").SandboxRuntimeMaterializationError, Scope.Scope> {\n        return Effect.gen(this, function* () {\n            const minRemainingMs = (attemptDeadlineMs ?? 0) + CLEANUP_TIMEOUT_MS;\n            /**\n             * 借出期内单条命令的上限从这条线派生(`undefined` = 四层都没声明上限,照旧不发明一条线)。\n             * 实例活得比 attempt 长,所以这条线必须**每次借出重设**——只在 create 时给一次的话,\n             * 第二条 attempt 起就落回 provider SDK 的默认值(e2b 是 60 秒),实验声明的 timeoutMs\n             * 完全不生效(见 sandbox/deadline.ts 的 `SandboxCommandDeadline`)。\n             * 用 minRemainingMs 而不是 attemptDeadlineMs:归还时的分类账复位跑在同一条线下,\n             * 不至于一还回来就撞一条已经过期的线。\n             */\n            const leaseDeadlineAt = attemptDeadlineMs === undefined ? undefined : () => Date.now() + minRemainingMs;\n            for (;;) {\n                if (this.stopped)\n                    return yield* Effect.fail(new Error(\"sandbox reuse pool has been stopped\"));\n                const ready = this.entries.find((entry) => entry.lifecycle._tag === \"Idle\");\n                if (ready) {\n                    // 派发前确认:请求足以覆盖 Attempt deadline 与收尾预留的寿命。不 ready 就停掉这台、\n                    // 交给下一轮创建替代实例(替代实例在 create 里再确认一次,还不行就报错,不反复重建)。\n                    const lifetime = yield* externalPromise(() => ready.lifetime.ensureLifetime(minRemainingMs));\n                    // lifetime 检查是异步 provider I/O；其间 stop() 或另一条 release 可能已经退休这台。\n                    // 只有仍是 Idle 的实例才能真正借出，stop 后让下一轮在入口处统一失败。\n                    if (lifetime.ready && !this.stopped && ready.lifecycle._tag === \"Idle\") {\n                        return yield* this.lease(ready, leaseDeadlineAt?.());\n                    }\n                    if (this.stopped || ready.lifecycle._tag !== \"Idle\")\n                        continue;\n                    yield* this.retire(ready);\n                    continue;\n                }\n                if (this.entries.length + this.creating < this.capacity) {\n                    this.creating += 1;\n                    return yield* Effect.gen(this, function* () {\n                        const created = yield* this.create(minRemainingMs, leaseDeadlineAt?.(), buildLocators);\n                        this.entries.push(created);\n                        // stop 可能在物化期间开始。把刚创建的 entry 先纳入池，再由唯一 retire 路径关闭\n                        // 它自己的 Scope；绝不能把它借给已停止的池，也不能让 stop 在 creating=0 时漏掉它。\n                        if (this.stopped) {\n                            yield* this.retire(created);\n                            return yield* Effect.fail(new Error(\"sandbox reuse pool has been stopped\"));\n                        }\n                        return yield* this.lease(created, leaseDeadlineAt?.());\n                    }).pipe(Effect.ensuring(Effect.sync(() => {\n                        this.creating -= 1;\n                        this.wake();\n                    })));\n                }\n                yield* this.awaitWake();\n            }\n        });\n    }\n    stop(): Effect.Effect<void> {\n        return Effect.gen(this, function* () {\n            this.stopped = true;\n            this.wake();\n            // 已借出的 lease 仍在执行其 Attempt/cleanup；现在关闭 entry Scope 会把 Sandbox 在\n            // 使用中 teardown。创建中的 entry 尚未进 entries，必须等它落入唯一 retire 路径。\n            while (this.creating > 0 || this.entries.some((entry) => entry.lifecycle._tag === \"Leased\")) {\n                yield* this.awaitWake();\n            }\n            yield* Effect.forEach([...this.entries], (entry) => this.retire(entry), {\n                concurrency: \"unbounded\",\n                discard: true,\n            });\n            if (this.groupPluginContext !== undefined) {\n                yield* Effect.forEach(this.groupPlugins.slice(0, this.activatedGroupPlugins).reverse(), (entry) => entry.teardown === undefined\n                    ? Effect.void\n                    : cleanupCallback(() => (entry.teardown as (context: GroupPluginContext) => void | Promise<void>)({\n                        ...this.groupPluginContext!,\n                        signal: AbortSignal.timeout(CLEANUP_TIMEOUT_MS),\n                    })).pipe(Effect.catchAll((cause) => Effect.sync(() => this.feedback.diagnostic({\n                        code: \"plugin-lifecycle-teardown-failed\",\n                        level: \"warning\",\n                        message: cause instanceof Error ? cause.message : String(cause),\n                    })))), { discard: true });\n            }\n        });\n    }\n    /** Drained by the scheduler after the lease Scope sealed the prior result. */\n    drainRuntimeFailures(): readonly ReusableSandboxPoolRuntimeFailure[] {\n        return Object.freeze(this.runtimeFailures.splice(0));\n    }\n    private create(minRemainingMs: number, deadlineAt: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<Entry, Error | import(\"../sandbox/runtime.ts\").SandboxRuntimeMaterializationError> {\n        return Effect.gen(this, function* () {\n            if (this.groupPluginSetupError !== undefined)\n                return yield* Effect.fail(this.groupPluginSetupError as Error);\n            if (!this.groupPluginSetupStarted && this.groupPluginContext !== undefined) {\n                this.groupPluginSetupStarted = true;\n                const setup = yield* Effect.exit(Effect.forEach(this.groupPlugins, (entry, index) => {\n                    this.activatedGroupPlugins = index + 1;\n                    return entry.setup === undefined\n                        ? Effect.void\n                        : externalPromise(() => Promise.resolve((entry.setup as (context: GroupPluginContext) => void | Promise<void>)(this.groupPluginContext!)));\n                }, { discard: true }));\n                if (Exit.isFailure(setup)) {\n                    this.groupPluginSetupError = Cause.squash(setup.cause);\n                    return yield* Effect.fail(this.groupPluginSetupError as Error);\n                }\n            }\n            const capabilities = sandboxRuntimeCapabilities(this.plan);\n            if (capabilities.reuse._tag === \"Unsupported\") {\n                return yield* Effect.fail(new Error(`sandboxReuse is unsupported by provider ${JSON.stringify(capabilities.provider)}: ${capabilities.reuse.reason}`));\n            }\n            const deadline: SandboxRuntimeDeadline = deadlineAt === undefined\n                ? { _tag: \"Unlimited\" }\n                : { _tag: \"Bounded\", timeoutMs: Math.max(1, minRemainingMs - CLEANUP_TIMEOUT_MS), deadlineAt };\n            const entryScope = yield* Scope.make();\n            const materialized = yield* Scope.extend(materializeSandboxRunPlan({\n                plan: this.plan,\n                evalId: this.materializationOwnerId,\n                deadline,\n                feedback: this.feedback,\n                signal: this.setupContext.signal,\n                hookContext: this.setupContext,\n                buildLocators,\n                ...(this.agent !== undefined ? { agent: this.agent } : {}),\n                ...(this.runTiming !== undefined ? { runTiming: this.runTiming } : {}),\n                provisionSlot: { _tag: \"Detached\" },\n                services: this.runtimeServices,\n                release: { _tag: \"Stop\" },\n            }), entryScope).pipe(Effect.onError((cause) => Scope.close(entryScope, Exit.failCause(cause))));\n            const sandbox = materialized.sandbox;\n            // 能力只能来自 provider 实现:探不到就硬失败,没有通用记账兜底(见\n            // docs/feature/sandbox/reuse.md「派发前确认」)。\n            const lifetime = sandboxReuseCapability(sandbox);\n            if (!lifetime) {\n                yield* Scope.close(entryScope, Exit.void);\n                return yield* Effect.fail(new Error(`sandboxReuse needs the \"${capabilities.provider}\" provider to confirm sandbox lifetime, but it does not implement ` +\n                    \"ensureLifetime(minRemainingMs). Only a provider can prove the lifetime is set on its own backend; the runner \" +\n                    \"will not keep local books for it. Use a provider that implements it (docker / e2b / vercel), or drop sandboxReuse.\"));\n            }\n            const confirmed = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs)).pipe(Effect.onError((cause) => Scope.close(entryScope, Exit.failCause(cause))));\n            if (!confirmed.ready) {\n                yield* Scope.close(entryScope, Exit.void);\n                return yield* Effect.fail(new Error(`sandboxReuse cannot prepare the \"${capabilities.provider}\" sandbox: ${confirmed.reason}`));\n            }\n            const prepared = yield* Effect.gen(this, function* () {\n                const ledger = yield* externalPromise(() => createChangeLedger(sandbox));\n                // root 执行身份下题间 reset 永不安全(Agent 能读上一条 Attempt 留下的私有分类账对象);\n                // 在实例进池、第一条 Attempt 派发前就拒绝,而不是等到归还时才在 resetToAnchor() 里\n                // 暴露(那样首条 Attempt 已经跑完,失败还可能被静默退休吞掉)。\n                if (ledger.rootExecutionIdentity) {\n                    return yield* Effect.fail(new Error(`sandboxReuse cannot reuse the \"${capabilities.provider}\" sandbox: the Agent's execution identity is root and could read private ledger objects left by earlier attempts; ` +\n                        \"use a non-root execution user (declare USER in the image) or disable sandboxReuse\"));\n                }\n                // 建分类账会烧掉寿命:备好之后再确认一次。这次不够就报错收场——\n                // 反复创建同样的替代实例只会反复烧同样的时间(见 reuse.md「派发前确认」)。\n                const afterSetup = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs));\n                if (!afterSetup.ready) {\n                    return yield* Effect.fail(new Error(`sandboxReuse cannot use the \"${capabilities.provider}\" sandbox after baseline setup: ${afterSetup.reason}`));\n                }\n                const reuseSandbox = this.nextReuseSandboxNumber === undefined\n                    ? ++this.created\n                    : this.nextReuseSandboxNumber();\n                return {\n                    sandbox,\n                    scope: entryScope,\n                    lifetime,\n                    ledger,\n                    reuseSandbox,\n                    ordinal: 0,\n                    lifecycle: { _tag: \"Idle\" } satisfies EntryLifecycle,\n                };\n            }).pipe(Effect.onError((cause) => Scope.close(entryScope, Exit.failCause(cause))));\n            return prepared;\n        });\n    }\n    private lease(entry: Entry, deadlineAt: number | undefined): Effect.Effect<ReusableSandboxLease, never, Scope.Scope> {\n        entry.lifecycle = { _tag: \"Leased\" };\n        entry.ordinal += 1;\n        applyCommandDeadline(entry.sandbox, deadlineAt);\n        let lifecycle: LeaseLifecycle = {\n            _tag: \"Open\",\n            release: { _tag: \"Uncommitted\" },\n        };\n        const lease: ReusableSandboxLease = {\n            sandbox: entry.sandbox,\n            reuseSandbox: entry.reuseSandbox,\n            reuseOrdinal: entry.ordinal,\n            commit: (release) => Effect.sync(() => {\n                if (lifecycle._tag !== \"Open\")\n                    return;\n                lifecycle = { ...lifecycle, release: { _tag: \"Committed\", release } };\n            }),\n        };\n        return Effect.addFinalizer(() => Effect.gen(this, function* () {\n            if (lifecycle._tag === \"Finalized\")\n                return;\n            const settled = lifecycle;\n            lifecycle = { _tag: \"Finalized\" };\n            const release: ReusableLeaseRelease = settled.release._tag === \"Committed\"\n                ? settled.release.release\n                : { _tag: \"Retire\" };\n            if (release._tag === \"Retire\") {\n                yield* this.retire(entry);\n            }\n            else if (entry.lifecycle._tag !== \"Retired\") {\n                const reset = yield* Effect.either(externalPromise(() => entry.ledger.resetToAnchor()));\n                if (Either.isLeft(reset)) {\n                    this.runtimeFailures.push(Object.freeze({ stage: \"sandbox.reset\", error: reset.left }));\n                    this.feedback.diagnostic({\n                        code: \"sandbox-reset-failed\",\n                        level: \"warning\",\n                        message: `Sandbox #${entry.reuseSandbox} reset to anchor failed, retiring the instance: ${firstLine(formatThrown(reset.left))}`,\n                    });\n                    yield* this.retire(entry);\n                }\n                else {\n                    entry.lifecycle = { _tag: \"Idle\" };\n                }\n            }\n            this.wake();\n        })).pipe(Effect.as(lease));\n    }\n    /** 淘汰一台实例:停资源组并移出池——留在池里会占满容量,\n     *  让后续 acquire 既等不到空闲实例、也创建不出替代实例(等待者永远醒不来)。 */\n    private retire(entry: Entry): Effect.Effect<void> {\n        return Effect.gen(this, function* () {\n            if (entry.lifecycle._tag === \"Retired\")\n                return;\n            entry.lifecycle = { _tag: \"Retired\" };\n            const at = this.entries.indexOf(entry);\n            if (at >= 0)\n                this.entries.splice(at, 1);\n            yield* Scope.close(entry.scope, Exit.void).pipe(Effect.catchAllCause((cause) => Effect.sync(() => this.feedback.diagnostic({\n                code: \"sandbox-stop-failed\",\n                level: \"warning\",\n                message: `Sandbox reuse case finalizer failed: ${String(cause)}`,\n            }))));\n            this.wake();\n        });\n    }\n    private wake(): void {\n        this.waiters.splice(0).forEach((resolve) => resolve());\n    }\n    private awaitWake(): Effect.Effect<void> {\n        return Effect.async<void>((resume) => {\n            const wake = () => resume(Effect.void);\n            this.waiters.push(wake);\n            return Effect.sync(() => {\n                const index = this.waiters.indexOf(wake);\n                if (index >= 0)\n                    this.waiters.splice(index, 1);\n            });\n        });\n    }\n}\nfunction externalPromise<Value>(run: () => Promise<Value>): Effect.Effect<Value, Error> {\n    return Effect.tryPromise({\n        try: run,\n        catch: (cause) => cause instanceof Error ? cause : new Error(String(cause)),\n    });\n}\n"]}

package/dist/runner/sandbox-pool.d.cts

@@ -0,0 +1,70 @@
+import type { LinkedRunPlan } from "../sandbox/plan.cjs";
+import type { BuildKey } from "../sandbox/identity.cjs";
+import { type SandboxRuntimeServices } from "../sandbox/runtime.cjs";
+import type { JsonValue, Sandbox, SandboxAgent, SandboxHookContext, ScopedFeedback } from "../types.cjs";
+import { Effect, Scope } from "effect";
+import type { GroupPluginContext, LinkedPluginLifecycle } from "../plugin/contracts.cjs";
+export interface ReusableSandboxLease {
+    readonly sandbox: Sandbox;
+    readonly reuseSandbox: number;
+    readonly reuseOrdinal: number;
+    /** 提交本次 Attempt 的归还决策；Scope 退出负责实际 reset/retire，漏提交默认 Retire。 */
+    commit(disposition: ReusableLeaseRelease): Effect.Effect<void>;
+}
+export type ReusableLeaseRelease = {
+    readonly _tag: "Reset";
+} | {
+    readonly _tag: "Retire";
+};
+/** A post-attempt physical lifecycle failure observed after its result sealed. */
+export interface ReusableSandboxPoolRuntimeFailure {
+    readonly stage: "sandbox.reset";
+    readonly error: Error;
+}
+/** 一个 pair-owned physical plan 的按需复用池；实例始终独占借给单条 Attempt。 */
+export declare class ReusableSandboxPool {
+    private readonly plan;
+    private readonly capacity;
+    private readonly feedback;
+    private readonly setupContext;
+    private readonly runtimeServices;
+    private readonly agent?;
+    private readonly runTiming?;
+    private readonly nextReuseSandboxNumber?;
+    private readonly groupPlugins;
+    private readonly groupPluginContext?;
+    private readonly entries;
+    private readonly waiters;
+    private creating;
+    private stopped;
+    private readonly runtimeFailures;
+    /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */
+    private readonly materializationOwnerId;
+    /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */
+    private created;
+    private groupPluginSetupStarted;
+    private groupPluginSetupError;
+    private activatedGroupPlugins;
+    constructor(plan: Extract<LinkedRunPlan, {
+        readonly _tag: "Sandbox";
+    }>, capacity: number, feedback: ScopedFeedback, setupContext: SandboxHookContext, runtimeServices?: SandboxRuntimeServices, agent?: SandboxAgent | undefined, runTiming?: import("./timing.cjs").RunTimingRecorder | undefined, materializationOwnerId?: string, nextReuseSandboxNumber?: (() => number) | undefined, groupPlugins?: readonly LinkedPluginLifecycle[], groupPluginContext?: GroupPluginContext | undefined);
+    /** 把整座池登记进调用方 Scope；Invocation 中断与正常结束走同一条 stop finalizer。 */
+    managed(): Effect.Effect<this, never, Scope.Scope>;
+    /**
+     * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。
+     * `undefined` = 四层都没声明上限:请求的寿命只能覆盖收尾预留——Attempt 本身没有 deadline,
+     * 池无从知道它要跑多久,也不替它编一个数。此后实例被 provider 按自己的 `lifetimeMs` 回收
+     * 就是「不声明上限」的代价(两种时间的分界见 docs/feature/sandbox/reuse.md)。
+     */
+    acquire(attemptDeadlineMs: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<ReusableSandboxLease, Error | import("../sandbox/runtime.cjs").SandboxRuntimeMaterializationError, Scope.Scope>;
+    stop(): Effect.Effect<void>;
+    /** Drained by the scheduler after the lease Scope sealed the prior result. */
+    drainRuntimeFailures(): readonly ReusableSandboxPoolRuntimeFailure[];
+    private create;
+    private lease;
+    /** 淘汰一台实例:停资源组并移出池——留在池里会占满容量,
+     *  让后续 acquire 既等不到空闲实例、也创建不出替代实例(等待者永远醒不来)。 */
+    private retire;
+    private wake;
+    private awaitWake;
+}