niceeval 0.12.2-canary.31 → 0.13.0

package/dist/sandbox/index.js

@@ -59,58 +59,58 @@ const __niceevalExport27 = __niceevalCanonical["createDockerExecutionProfileV1"]
 export { __niceevalExport27 as createDockerExecutionProfileV1 };
 const __niceevalExport28 = __niceevalCanonical["createDockerProfileRegistry"];
 export { __niceevalExport28 as createDockerProfileRegistry };
-const __niceevalExport29 = __niceevalCanonical["createSandboxAttachmentWrite"];
-export { __niceevalExport29 as createSandboxAttachmentWrite };
-const __niceevalExport30 = __niceevalCanonical["credentialIdentityContribution"];
-export { __niceevalExport30 as credentialIdentityContribution };
-const __niceevalExport31 = __niceevalCanonical["decodeDockerExecutionProfileV1"];
-export { __niceevalExport31 as decodeDockerExecutionProfileV1 };
-const __niceevalExport32 = __niceevalCanonical["defineSandbox"];
-export { __niceevalExport32 as defineSandbox };
-const __niceevalExport33 = __niceevalCanonical["defineSandboxCase"];
-export { __niceevalExport33 as defineSandboxCase };
-const __niceevalExport34 = __niceevalCanonical["defineSandboxCommand"];
-export { __niceevalExport34 as defineSandboxCommand };
-const __niceevalExport35 = __niceevalCanonical["dockerComposeBuildProvider"];
-export { __niceevalExport35 as dockerComposeBuildProvider };
-const __niceevalExport36 = __niceevalCanonical["dockerComposeSandbox"];
-export { __niceevalExport36 as dockerComposeSandbox };
-const __niceevalExport37 = __niceevalCanonical["dockerExecutionProfileSemanticPolicyRevisionOf"];
-export { __niceevalExport37 as dockerExecutionProfileSemanticPolicyRevisionOf };
-const __niceevalExport38 = __niceevalCanonical["dockerExecutionProfileV1Digest"];
-export { __niceevalExport38 as dockerExecutionProfileV1Digest };
-const __niceevalExport39 = __niceevalCanonical["dockerProfileDigestOf"];
-export { __niceevalExport39 as dockerProfileDigestOf };
-const __niceevalExport40 = __niceevalCanonical["dockerProfileError"];
-export { __niceevalExport40 as dockerProfileError };
-const __niceevalExport41 = __niceevalCanonical["dockerProfilePublicSummaryOf"];
-export { __niceevalExport41 as dockerProfilePublicSummaryOf };
-const __niceevalExport42 = __niceevalCanonical["dockerProfileSemanticPolicyRevisionOf"];
-export { __niceevalExport42 as dockerProfileSemanticPolicyRevisionOf };
-const __niceevalExport43 = __niceevalCanonical["dockerSandbox"];
-export { __niceevalExport43 as dockerSandbox };
-const __niceevalExport44 = __niceevalCanonical["e2bSandbox"];
-export { __niceevalExport44 as e2bSandbox };
-const __niceevalExport45 = __niceevalCanonical["findComposeBlacklistViolations"];
-export { __niceevalExport45 as findComposeBlacklistViolations };
-const __niceevalExport46 = __niceevalCanonical["indexDockerProfiles"];
-export { __niceevalExport46 as indexDockerProfiles };
-const __niceevalExport47 = __niceevalCanonical["inspectComposeYaml"];
-export { __niceevalExport47 as inspectComposeYaml };
-const __niceevalExport48 = __niceevalCanonical["installTool"];
-export { __niceevalExport48 as installTool };
-const __niceevalExport49 = __niceevalCanonical["isDockerExecutionProfileV1"];
-export { __niceevalExport49 as isDockerExecutionProfileV1 };
-const __niceevalExport50 = __niceevalCanonical["leakGateHintsFromComposeFile"];
-export { __niceevalExport50 as leakGateHintsFromComposeFile };
-const __niceevalExport51 = __niceevalCanonical["localSandbox"];
-export { __niceevalExport51 as localSandbox };
-const __niceevalExport52 = __niceevalCanonical["looksLikeDigestRef"];
-export { __niceevalExport52 as looksLikeDigestRef };
-const __niceevalExport53 = __niceevalCanonical["makeDockerExecutionProfileV1"];
-export { __niceevalExport53 as makeDockerExecutionProfileV1 };
-const __niceevalExport54 = __niceevalCanonical["materializeDockerComposeProviderCase"];
-export { __niceevalExport54 as materializeDockerComposeProviderCase };
+const __niceevalExport29 = __niceevalCanonical["credentialIdentityContribution"];
+export { __niceevalExport29 as credentialIdentityContribution };
+const __niceevalExport30 = __niceevalCanonical["decodeDockerExecutionProfileV1"];
+export { __niceevalExport30 as decodeDockerExecutionProfileV1 };
+const __niceevalExport31 = __niceevalCanonical["defineSandbox"];
+export { __niceevalExport31 as defineSandbox };
+const __niceevalExport32 = __niceevalCanonical["defineSandboxCase"];
+export { __niceevalExport32 as defineSandboxCase };
+const __niceevalExport33 = __niceevalCanonical["defineSandboxCommand"];
+export { __niceevalExport33 as defineSandboxCommand };
+const __niceevalExport34 = __niceevalCanonical["dockerComposeBuildProvider"];
+export { __niceevalExport34 as dockerComposeBuildProvider };
+const __niceevalExport35 = __niceevalCanonical["dockerComposeSandbox"];
+export { __niceevalExport35 as dockerComposeSandbox };
+const __niceevalExport36 = __niceevalCanonical["dockerExecutionProfileSemanticPolicyRevisionOf"];
+export { __niceevalExport36 as dockerExecutionProfileSemanticPolicyRevisionOf };
+const __niceevalExport37 = __niceevalCanonical["dockerExecutionProfileV1Digest"];
+export { __niceevalExport37 as dockerExecutionProfileV1Digest };
+const __niceevalExport38 = __niceevalCanonical["dockerProfileDigestOf"];
+export { __niceevalExport38 as dockerProfileDigestOf };
+const __niceevalExport39 = __niceevalCanonical["dockerProfileError"];
+export { __niceevalExport39 as dockerProfileError };
+const __niceevalExport40 = __niceevalCanonical["dockerProfilePublicSummaryOf"];
+export { __niceevalExport40 as dockerProfilePublicSummaryOf };
+const __niceevalExport41 = __niceevalCanonical["dockerProfileSemanticPolicyRevisionOf"];
+export { __niceevalExport41 as dockerProfileSemanticPolicyRevisionOf };
+const __niceevalExport42 = __niceevalCanonical["dockerSandbox"];
+export { __niceevalExport42 as dockerSandbox };
+const __niceevalExport43 = __niceevalCanonical["e2bSandbox"];
+export { __niceevalExport43 as e2bSandbox };
+const __niceevalExport44 = __niceevalCanonical["findComposeBlacklistViolations"];
+export { __niceevalExport44 as findComposeBlacklistViolations };
+const __niceevalExport45 = __niceevalCanonical["indexDockerProfiles"];
+export { __niceevalExport45 as indexDockerProfiles };
+const __niceevalExport46 = __niceevalCanonical["inspectComposeYaml"];
+export { __niceevalExport46 as inspectComposeYaml };
+const __niceevalExport47 = __niceevalCanonical["installTool"];
+export { __niceevalExport47 as installTool };
+const __niceevalExport48 = __niceevalCanonical["isDockerExecutionProfileV1"];
+export { __niceevalExport48 as isDockerExecutionProfileV1 };
+const __niceevalExport49 = __niceevalCanonical["leakGateHintsFromComposeFile"];
+export { __niceevalExport49 as leakGateHintsFromComposeFile };
+const __niceevalExport50 = __niceevalCanonical["localSandbox"];
+export { __niceevalExport50 as localSandbox };
+const __niceevalExport51 = __niceevalCanonical["looksLikeDigestRef"];
+export { __niceevalExport51 as looksLikeDigestRef };
+const __niceevalExport52 = __niceevalCanonical["makeDockerExecutionProfileV1"];
+export { __niceevalExport52 as makeDockerExecutionProfileV1 };
+const __niceevalExport53 = __niceevalCanonical["materializeDockerComposeProviderCase"];
+export { __niceevalExport53 as materializeDockerComposeProviderCase };
+const __niceevalExport54 = __niceevalCanonical["normalizeSandboxCapture"];
+export { __niceevalExport54 as normalizeSandboxCapture };
 const __niceevalExport55 = __niceevalCanonical["parseDockerExecutionProfile"];
 export { __niceevalExport55 as parseDockerExecutionProfile };
 const __niceevalExport56 = __niceevalCanonical["parseDockerExecutionProfileV1"];

package/dist/sandbox/index.mjs

@@ -59,58 +59,58 @@ const __niceevalExport27 = __niceevalCanonical["createDockerExecutionProfileV1"]
 export { __niceevalExport27 as createDockerExecutionProfileV1 };
 const __niceevalExport28 = __niceevalCanonical["createDockerProfileRegistry"];
 export { __niceevalExport28 as createDockerProfileRegistry };
-const __niceevalExport29 = __niceevalCanonical["createSandboxAttachmentWrite"];
-export { __niceevalExport29 as createSandboxAttachmentWrite };
-const __niceevalExport30 = __niceevalCanonical["credentialIdentityContribution"];
-export { __niceevalExport30 as credentialIdentityContribution };
-const __niceevalExport31 = __niceevalCanonical["decodeDockerExecutionProfileV1"];
-export { __niceevalExport31 as decodeDockerExecutionProfileV1 };
-const __niceevalExport32 = __niceevalCanonical["defineSandbox"];
-export { __niceevalExport32 as defineSandbox };
-const __niceevalExport33 = __niceevalCanonical["defineSandboxCase"];
-export { __niceevalExport33 as defineSandboxCase };
-const __niceevalExport34 = __niceevalCanonical["defineSandboxCommand"];
-export { __niceevalExport34 as defineSandboxCommand };
-const __niceevalExport35 = __niceevalCanonical["dockerComposeBuildProvider"];
-export { __niceevalExport35 as dockerComposeBuildProvider };
-const __niceevalExport36 = __niceevalCanonical["dockerComposeSandbox"];
-export { __niceevalExport36 as dockerComposeSandbox };
-const __niceevalExport37 = __niceevalCanonical["dockerExecutionProfileSemanticPolicyRevisionOf"];
-export { __niceevalExport37 as dockerExecutionProfileSemanticPolicyRevisionOf };
-const __niceevalExport38 = __niceevalCanonical["dockerExecutionProfileV1Digest"];
-export { __niceevalExport38 as dockerExecutionProfileV1Digest };
-const __niceevalExport39 = __niceevalCanonical["dockerProfileDigestOf"];
-export { __niceevalExport39 as dockerProfileDigestOf };
-const __niceevalExport40 = __niceevalCanonical["dockerProfileError"];
-export { __niceevalExport40 as dockerProfileError };
-const __niceevalExport41 = __niceevalCanonical["dockerProfilePublicSummaryOf"];
-export { __niceevalExport41 as dockerProfilePublicSummaryOf };
-const __niceevalExport42 = __niceevalCanonical["dockerProfileSemanticPolicyRevisionOf"];
-export { __niceevalExport42 as dockerProfileSemanticPolicyRevisionOf };
-const __niceevalExport43 = __niceevalCanonical["dockerSandbox"];
-export { __niceevalExport43 as dockerSandbox };
-const __niceevalExport44 = __niceevalCanonical["e2bSandbox"];
-export { __niceevalExport44 as e2bSandbox };
-const __niceevalExport45 = __niceevalCanonical["findComposeBlacklistViolations"];
-export { __niceevalExport45 as findComposeBlacklistViolations };
-const __niceevalExport46 = __niceevalCanonical["indexDockerProfiles"];
-export { __niceevalExport46 as indexDockerProfiles };
-const __niceevalExport47 = __niceevalCanonical["inspectComposeYaml"];
-export { __niceevalExport47 as inspectComposeYaml };
-const __niceevalExport48 = __niceevalCanonical["installTool"];
-export { __niceevalExport48 as installTool };
-const __niceevalExport49 = __niceevalCanonical["isDockerExecutionProfileV1"];
-export { __niceevalExport49 as isDockerExecutionProfileV1 };
-const __niceevalExport50 = __niceevalCanonical["leakGateHintsFromComposeFile"];
-export { __niceevalExport50 as leakGateHintsFromComposeFile };
-const __niceevalExport51 = __niceevalCanonical["localSandbox"];
-export { __niceevalExport51 as localSandbox };
-const __niceevalExport52 = __niceevalCanonical["looksLikeDigestRef"];
-export { __niceevalExport52 as looksLikeDigestRef };
-const __niceevalExport53 = __niceevalCanonical["makeDockerExecutionProfileV1"];
-export { __niceevalExport53 as makeDockerExecutionProfileV1 };
-const __niceevalExport54 = __niceevalCanonical["materializeDockerComposeProviderCase"];
-export { __niceevalExport54 as materializeDockerComposeProviderCase };
+const __niceevalExport29 = __niceevalCanonical["credentialIdentityContribution"];
+export { __niceevalExport29 as credentialIdentityContribution };
+const __niceevalExport30 = __niceevalCanonical["decodeDockerExecutionProfileV1"];
+export { __niceevalExport30 as decodeDockerExecutionProfileV1 };
+const __niceevalExport31 = __niceevalCanonical["defineSandbox"];
+export { __niceevalExport31 as defineSandbox };
+const __niceevalExport32 = __niceevalCanonical["defineSandboxCase"];
+export { __niceevalExport32 as defineSandboxCase };
+const __niceevalExport33 = __niceevalCanonical["defineSandboxCommand"];
+export { __niceevalExport33 as defineSandboxCommand };
+const __niceevalExport34 = __niceevalCanonical["dockerComposeBuildProvider"];
+export { __niceevalExport34 as dockerComposeBuildProvider };
+const __niceevalExport35 = __niceevalCanonical["dockerComposeSandbox"];
+export { __niceevalExport35 as dockerComposeSandbox };
+const __niceevalExport36 = __niceevalCanonical["dockerExecutionProfileSemanticPolicyRevisionOf"];
+export { __niceevalExport36 as dockerExecutionProfileSemanticPolicyRevisionOf };
+const __niceevalExport37 = __niceevalCanonical["dockerExecutionProfileV1Digest"];
+export { __niceevalExport37 as dockerExecutionProfileV1Digest };
+const __niceevalExport38 = __niceevalCanonical["dockerProfileDigestOf"];
+export { __niceevalExport38 as dockerProfileDigestOf };
+const __niceevalExport39 = __niceevalCanonical["dockerProfileError"];
+export { __niceevalExport39 as dockerProfileError };
+const __niceevalExport40 = __niceevalCanonical["dockerProfilePublicSummaryOf"];
+export { __niceevalExport40 as dockerProfilePublicSummaryOf };
+const __niceevalExport41 = __niceevalCanonical["dockerProfileSemanticPolicyRevisionOf"];
+export { __niceevalExport41 as dockerProfileSemanticPolicyRevisionOf };
+const __niceevalExport42 = __niceevalCanonical["dockerSandbox"];
+export { __niceevalExport42 as dockerSandbox };
+const __niceevalExport43 = __niceevalCanonical["e2bSandbox"];
+export { __niceevalExport43 as e2bSandbox };
+const __niceevalExport44 = __niceevalCanonical["findComposeBlacklistViolations"];
+export { __niceevalExport44 as findComposeBlacklistViolations };
+const __niceevalExport45 = __niceevalCanonical["indexDockerProfiles"];
+export { __niceevalExport45 as indexDockerProfiles };
+const __niceevalExport46 = __niceevalCanonical["inspectComposeYaml"];
+export { __niceevalExport46 as inspectComposeYaml };
+const __niceevalExport47 = __niceevalCanonical["installTool"];
+export { __niceevalExport47 as installTool };
+const __niceevalExport48 = __niceevalCanonical["isDockerExecutionProfileV1"];
+export { __niceevalExport48 as isDockerExecutionProfileV1 };
+const __niceevalExport49 = __niceevalCanonical["leakGateHintsFromComposeFile"];
+export { __niceevalExport49 as leakGateHintsFromComposeFile };
+const __niceevalExport50 = __niceevalCanonical["localSandbox"];
+export { __niceevalExport50 as localSandbox };
+const __niceevalExport51 = __niceevalCanonical["looksLikeDigestRef"];
+export { __niceevalExport51 as looksLikeDigestRef };
+const __niceevalExport52 = __niceevalCanonical["makeDockerExecutionProfileV1"];
+export { __niceevalExport52 as makeDockerExecutionProfileV1 };
+const __niceevalExport53 = __niceevalCanonical["materializeDockerComposeProviderCase"];
+export { __niceevalExport53 as materializeDockerComposeProviderCase };
+const __niceevalExport54 = __niceevalCanonical["normalizeSandboxCapture"];
+export { __niceevalExport54 as normalizeSandboxCapture };
 const __niceevalExport55 = __niceevalCanonical["parseDockerExecutionProfile"];
 export { __niceevalExport55 as parseDockerExecutionProfile };
 const __niceevalExport56 = __niceevalCanonical["parseDockerExecutionProfileV1"];

package/dist/sandbox/io-retry.cjs

@@ -3,27 +3,31 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.withSandboxIoRetry = withSandboxIoRetry;
 // 已创建 Sandbox 的幂等文件 IO 重试。命令执行、appendLog、stop 不经过这里：
 // 它们可能有不可重复的副作用，框架不能在调用者不知情时重跑。
+const effect_1 = require("effect");
 const errors_ts_1 = require("./errors.cjs");
 const DEFAULT_MAX_ATTEMPTS = 3;
 const DEFAULT_BASE_DELAY_MS = 250;
-async function withSandboxIoRetry(operation, options = {}) {
+/**
+ * operation 是 Provider Promise 叶子被 `Effect.tryPromise` 适配过**一次**后的 Effect：
+ * 失败通道里就是原始错误对象，重试耗尽时原样抛回，不包一层新的错误。
+ * 等待用 `Effect.sleep`、抖动用 `Random.next`，确定性验证交给 TestClock / 固定 Random。
+ */
+function withSandboxIoRetry(operation, options = {}) {
     const maxAttempts = Math.max(1, options.maxAttempts ?? DEFAULT_MAX_ATTEMPTS);
     const baseDelayMs = Math.max(0, options.baseDelayMs ?? DEFAULT_BASE_DELAY_MS);
     const classify = options.classify ?? errors_ts_1.classifySandboxIoError;
-    const random = options.random ?? Math.random;
-    const sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-    for (let attempt = 1;; attempt += 1) {
-        try {
-            return await operation();
-        }
-        catch (error) {
+    const retry = (attempt) => effect_1.Effect.gen(function* () {
+        return yield* operation.pipe(effect_1.Effect.catchAll((error) => effect_1.Effect.gen(function* () {
             const kind = classify(error);
             if (!(0, errors_ts_1.isRetryableSandboxIoError)(kind) || attempt >= maxAttempts)
-                throw error;
-            const delayMs = baseDelayMs * 2 ** (attempt - 1) * (0.5 + random());
-            options.onRetry?.({ attempt, delayMs, kind, error });
-            await sleep(delayMs);
-        }
-    }
+                return yield* effect_1.Effect.fail(error);
+            const jitter = yield* effect_1.Random.next;
+            const delayMs = baseDelayMs * 2 ** (attempt - 1) * (0.5 + jitter);
+            yield* effect_1.Effect.sync(() => options.onRetry?.({ attempt, delayMs, kind, error }));
+            yield* effect_1.Effect.sleep(delayMs);
+            return yield* retry(attempt + 1);
+        })));
+    });
+    return retry(1);
 }
 //# sourceMappingURL=io-retry.cjs.map

package/dist/sandbox/io-retry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"io-retry.js","sourceRoot":"","sources":["io-retry.ts"],"names":[],"mappings":";;AAoBA,gDAmBC;AAvCD,qDAAqD;AACrD,gCAAgC;AAChC,2CAA0G;AAC1G,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAgB3B,KAAK,UAAU,kBAAkB,CAAI,SAA2B,EAAE,UAAiC,EAAE;IACxG,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kCAAsB,CAAC;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,KAAK,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC;YACD,OAAO,MAAM,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAA,qCAAyB,EAAC,IAAI,CAAC,IAAI,OAAO,IAAI,WAAW;gBAC1D,MAAM,KAAK,CAAC;YAChB,MAAM,OAAO,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;AACL,CAAC","sourcesContent":["// 已创建 Sandbox 的幂等文件 IO 重试。命令执行、appendLog、stop 不经过这里：\n// 它们可能有不可重复的副作用，框架不能在调用者不知情时重跑。\nimport { classifySandboxIoError, isRetryableSandboxIoError, type SandboxIoErrorKind, } from \"./errors.ts\";\nconst DEFAULT_MAX_ATTEMPTS = 3;\nconst DEFAULT_BASE_DELAY_MS = 250;\nexport interface SandboxIoRetryOptions {\n    maxAttempts?: number;\n    baseDelayMs?: number;\n    classify?: (error: unknown) => SandboxIoErrorKind;\n    /** 内部可观察挂点；runner feedback 接入后由统一包装层注入。 */\n    onRetry?: (event: {\n        attempt: number;\n        delayMs: number;\n        kind: SandboxIoErrorKind;\n        error: unknown;\n    }) => void;\n    /** 仅供确定性单测注入。 */\n    random?: () => number;\n    sleep?: (ms: number) => Promise<void>;\n}\nexport async function withSandboxIoRetry<T>(operation: () => Promise<T>, options: SandboxIoRetryOptions = {}): Promise<T> {\n    const maxAttempts = Math.max(1, options.maxAttempts ?? DEFAULT_MAX_ATTEMPTS);\n    const baseDelayMs = Math.max(0, options.baseDelayMs ?? DEFAULT_BASE_DELAY_MS);\n    const classify = options.classify ?? classifySandboxIoError;\n    const random = options.random ?? Math.random;\n    const sleep = options.sleep ?? ((ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms)));\n    for (let attempt = 1;; attempt += 1) {\n        try {\n            return await operation();\n        }\n        catch (error) {\n            const kind = classify(error);\n            if (!isRetryableSandboxIoError(kind) || attempt >= maxAttempts)\n                throw error;\n            const delayMs = baseDelayMs * 2 ** (attempt - 1) * (0.5 + random());\n            options.onRetry?.({ attempt, delayMs, kind, error });\n            await sleep(delayMs);\n        }\n    }\n}\n"]}
+{"version":3,"file":"io-retry.js","sourceRoot":"","sources":["io-retry.ts"],"names":[],"mappings":";;AAuBA,gDAiBC;AAxCD,qDAAqD;AACrD,gCAAgC;AAChC,mCAAwC;AACxC,2CAA0G;AAC1G,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAalC;;;;GAIG;AACH,SAAgB,kBAAkB,CAAI,SAAoC,EAAE,UAAiC,EAAE;IAC3G,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kCAAsB,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,OAAe,EAA6B,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9E,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAA,qCAAyB,EAAC,IAAI,CAAC,IAAI,OAAO,IAAI,WAAW;gBAC1D,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC;YAClC,MAAM,OAAO,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;YAClE,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC/E,KAAK,CAAC,CAAC,eAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,CAAC;IACT,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC","sourcesContent":["// 已创建 Sandbox 的幂等文件 IO 重试。命令执行、appendLog、stop 不经过这里：\n// 它们可能有不可重复的副作用，框架不能在调用者不知情时重跑。\nimport { Effect, Random } from \"effect\";\nimport { classifySandboxIoError, isRetryableSandboxIoError, type SandboxIoErrorKind, } from \"./errors.ts\";\nconst DEFAULT_MAX_ATTEMPTS = 3;\nconst DEFAULT_BASE_DELAY_MS = 250;\nexport interface SandboxIoRetryOptions {\n    maxAttempts?: number;\n    baseDelayMs?: number;\n    classify?: (error: unknown) => SandboxIoErrorKind;\n    /** 内部可观察挂点；runner feedback 接入后由统一包装层注入。 */\n    onRetry?: (event: {\n        attempt: number;\n        delayMs: number;\n        kind: SandboxIoErrorKind;\n        error: unknown;\n    }) => void;\n}\n/**\n * operation 是 Provider Promise 叶子被 `Effect.tryPromise` 适配过**一次**后的 Effect：\n * 失败通道里就是原始错误对象，重试耗尽时原样抛回，不包一层新的错误。\n * 等待用 `Effect.sleep`、抖动用 `Random.next`，确定性验证交给 TestClock / 固定 Random。\n */\nexport function withSandboxIoRetry<T>(operation: Effect.Effect<T, unknown>, options: SandboxIoRetryOptions = {}): Effect.Effect<T, unknown> {\n    const maxAttempts = Math.max(1, options.maxAttempts ?? DEFAULT_MAX_ATTEMPTS);\n    const baseDelayMs = Math.max(0, options.baseDelayMs ?? DEFAULT_BASE_DELAY_MS);\n    const classify = options.classify ?? classifySandboxIoError;\n    const retry = (attempt: number): Effect.Effect<T, unknown> => Effect.gen(function* () {\n        return yield* operation.pipe(Effect.catchAll((error) => Effect.gen(function* () {\n            const kind = classify(error);\n            if (!isRetryableSandboxIoError(kind) || attempt >= maxAttempts)\n                return yield* Effect.fail(error);\n            const jitter = yield* Random.next;\n            const delayMs = baseDelayMs * 2 ** (attempt - 1) * (0.5 + jitter);\n            yield* Effect.sync(() => options.onRetry?.({ attempt, delayMs, kind, error }));\n            yield* Effect.sleep(delayMs);\n            return yield* retry(attempt + 1);\n        })));\n    });\n    return retry(1);\n}\n"]}

package/dist/sandbox/io-retry.d.cts

@@ -1,3 +1,4 @@
+import { Effect } from "effect";
 import { type SandboxIoErrorKind } from "./errors.cjs";
 export interface SandboxIoRetryOptions {
     maxAttempts?: number;
@@ -10,8 +11,10 @@ export interface SandboxIoRetryOptions {
         kind: SandboxIoErrorKind;
         error: unknown;
     }) => void;
-    /** 仅供确定性单测注入。 */
-    random?: () => number;
-    sleep?: (ms: number) => Promise<void>;
 }
-export declare function withSandboxIoRetry<T>(operation: () => Promise<T>, options?: SandboxIoRetryOptions): Promise<T>;
+/**
+ * operation 是 Provider Promise 叶子被 `Effect.tryPromise` 适配过**一次**后的 Effect：
+ * 失败通道里就是原始错误对象，重试耗尽时原样抛回，不包一层新的错误。
+ * 等待用 `Effect.sleep`、抖动用 `Random.next`，确定性验证交给 TestClock / 固定 Random。
+ */
+export declare function withSandboxIoRetry<T>(operation: Effect.Effect<T, unknown>, options?: SandboxIoRetryOptions): Effect.Effect<T, unknown>;

package/dist/sandbox/io-retry.d.mts

@@ -1,3 +1,4 @@
+import { Effect } from "effect";
 import { type SandboxIoErrorKind } from "./errors.mjs";
 export interface SandboxIoRetryOptions {
     maxAttempts?: number;
@@ -10,8 +11,10 @@ export interface SandboxIoRetryOptions {
         kind: SandboxIoErrorKind;
         error: unknown;
     }) => void;
-    /** 仅供确定性单测注入。 */
-    random?: () => number;
-    sleep?: (ms: number) => Promise<void>;
 }
-export declare function withSandboxIoRetry<T>(operation: () => Promise<T>, options?: SandboxIoRetryOptions): Promise<T>;
+/**
+ * operation 是 Provider Promise 叶子被 `Effect.tryPromise` 适配过**一次**后的 Effect：
+ * 失败通道里就是原始错误对象，重试耗尽时原样抛回，不包一层新的错误。
+ * 等待用 `Effect.sleep`、抖动用 `Random.next`，确定性验证交给 TestClock / 固定 Random。
+ */
+export declare function withSandboxIoRetry<T>(operation: Effect.Effect<T, unknown>, options?: SandboxIoRetryOptions): Effect.Effect<T, unknown>;

package/dist/sandbox/io-retry.d.ts

@@ -1,3 +1,4 @@
+import { Effect } from "effect";
 import { type SandboxIoErrorKind } from "./errors.js";
 export interface SandboxIoRetryOptions {
     maxAttempts?: number;
@@ -10,8 +11,10 @@ export interface SandboxIoRetryOptions {
         kind: SandboxIoErrorKind;
         error: unknown;
     }) => void;
-    /** 仅供确定性单测注入。 */
-    random?: () => number;
-    sleep?: (ms: number) => Promise<void>;
 }
-export declare function withSandboxIoRetry<T>(operation: () => Promise<T>, options?: SandboxIoRetryOptions): Promise<T>;
+/**
+ * operation 是 Provider Promise 叶子被 `Effect.tryPromise` 适配过**一次**后的 Effect：
+ * 失败通道里就是原始错误对象，重试耗尽时原样抛回，不包一层新的错误。
+ * 等待用 `Effect.sleep`、抖动用 `Random.next`，确定性验证交给 TestClock / 固定 Random。
+ */
+export declare function withSandboxIoRetry<T>(operation: Effect.Effect<T, unknown>, options?: SandboxIoRetryOptions): Effect.Effect<T, unknown>;

package/dist/sandbox/keep.cjs

@@ -13,6 +13,11 @@ exports.openInteractiveShell = openInteractiveShell;
 exports.execInDetached = execInDetached;
 exports.detachedCapabilityGap = detachedCapabilityGap;
 exports.assertProviderKeepable = assertProviderKeepable;
+// 留存生命周期的 sandbox/ 域内路由:in-run 的 suspend(留存提交后转休眠)与事后命令
+// (`niceeval sandbox list/enter/stop`)用的 detached 能力(不需要原来的 run 进程或 Sandbox
+// 实例还活着)。provider 名的行为分支只允许出现在 sandbox/ 内(见 docs/architecture.md);
+// 运行器与评分路径不感知 provider 名。
+const effect_1 = require("effect");
 const ledger_paths_ts_1 = require("./ledger-paths.cjs");
 const backend_ts_1 = require("./backend.cjs");
 /** provider 是否参与留存(defineSandbox 自定义 provider 不参与,创建前报错)。 */
@@ -216,59 +221,81 @@ async function wakeDetached(provider, sandboxId) {
     }
 }
 async function waitForDetachedDockerReadiness(container, user) {
-    const deadline = Date.now() + 30000;
-    let lastExit;
-    while (Date.now() <= deadline) {
-        try {
-            const execution = await container.exec({
-                Cmd: ["docker", "info"],
-                User: user,
-                AttachStdout: true,
-                AttachStderr: true,
-            });
-            const stream = await execution.start({});
-            const destroyStream = () => stream.destroy();
-            const remaining = deadline - Date.now();
-            if (remaining <= 0) {
-                destroyStream();
-                break;
-            }
-            let timer;
-            const completed = new Promise((resolvePromise, reject) => {
-                stream.on("end", () => resolvePromise("completed"));
-                stream.on("error", reject);
-                stream.resume();
-            });
-            const timedOut = new Promise((resolvePromise) => {
-                timer = setTimeout(() => {
-                    destroyStream();
-                    resolvePromise("timed-out");
-                }, remaining);
-            });
-            let outcome;
-            try {
-                outcome = await Promise.race([completed, timedOut]);
-            }
-            finally {
-                if (timer !== undefined)
-                    clearTimeout(timer);
-            }
-            if (outcome === "timed-out")
-                break;
-            lastExit = (await execution.inspect()).ExitCode;
-            if (lastExit === 0)
-                return;
-        }
-        catch {
-            lastExit = undefined;
-        }
-        const remaining = deadline - Date.now();
-        if (remaining <= 0)
-            break;
-        await new Promise((resolvePromise) => setTimeout(resolvePromise, Math.min(250, remaining)));
-    }
-    throw new Error(`Docker DinD sandbox did not become ready after wake as user ${JSON.stringify(user)}` +
+    return effect_1.Effect.runPromise(waitForDetachedDockerReadinessEffect(container, user));
+}
+/**
+ * 轮询是 NiceEval 内部策略:deadline 用 `Clock.currentTimeMillis`、间隔与竞速用 `Clock.sleep`,
+ * 与原来 `Date.now()` + `setTimeout` 的 30s 窗口 / 250ms 间隔 / 剩余量封顶公式完全一致。
+ * 超时或中断都在 Effect fiber 上收束,不再手工管理 timer 或 stream 之外的计时器。
+ */
+function waitForDetachedDockerReadinessEffect(container, user) {
+    const readinessError = (lastExit) => new Error(`Docker DinD sandbox did not become ready after wake as user ${JSON.stringify(user)}` +
         (lastExit === undefined ? "" : ` (docker info exit ${lastExit ?? "unknown"})`));
+    const pollAgain = (deadline, lastExit) => effect_1.Clock.currentTimeMillis.pipe(effect_1.Effect.flatMap((now) => {
+        const remaining = deadline - now;
+        if (remaining <= 0)
+            return effect_1.Effect.fail(readinessError(lastExit));
+        return effect_1.Clock.sleep(Math.min(250, remaining)).pipe(effect_1.Effect.zipRight(attempt(deadline, lastExit)));
+    }));
+    const attempt = (deadline, lastExit) => effect_1.Clock.currentTimeMillis.pipe(effect_1.Effect.flatMap((now) => {
+        if (now > deadline)
+            return effect_1.Effect.fail(readinessError(lastExit));
+        return dockerInfoProbe(container, user, deadline - now).pipe(effect_1.Effect.flatMap((outcome) => {
+            if (outcome._tag === "timed-out")
+                return effect_1.Effect.fail(readinessError(lastExit));
+            if (outcome._tag === "failed")
+                return pollAgain(deadline, undefined);
+            if (outcome.exitCode === 0)
+                return effect_1.Effect.succeed(undefined);
+            return pollAgain(deadline, outcome.exitCode);
+        }));
+    }));
+    return effect_1.Clock.currentTimeMillis.pipe(effect_1.Effect.flatMap((now) => attempt(now + 30000, undefined)));
+}
+/**
+ * 单轮探测:exec `docker info` → 起 stream → 与剩余时间竞速。exec/stream/inspect 都是 dockerode
+ * (Node 进程/stream 叶子),留在 Promise 面由 `tryPromise`/`async` 适配;只有「等多久」和
+ * 「到点后做什么」是 NiceEval 内部的,走 Effect Clock + 中断。
+ */
+function dockerInfoProbe(container, user, timeoutMs) {
+    const startProbe = effect_1.Effect.tryPromise({
+        try: () => container
+            .exec({
+            Cmd: ["docker", "info"],
+            User: user,
+            AttachStdout: true,
+            AttachStderr: true,
+        })
+            .then((execution) => execution.start({}).then((stream) => ({ execution, stream }))),
+        catch: (cause) => cause,
+    });
+    const probeOne = (execution, stream) => {
+        const destroyStream = () => stream.destroy();
+        if (timeoutMs <= 0) {
+            destroyStream();
+            return effect_1.Effect.succeed({ _tag: "timed-out" });
+        }
+        const completed = effect_1.Effect.async((resume) => {
+            stream.on("end", () => resume(effect_1.Effect.succeed("completed")));
+            stream.on("error", () => resume(effect_1.Effect.succeed("failed")));
+            stream.resume();
+        });
+        const timedOut = effect_1.Clock.sleep(timeoutMs).pipe(effect_1.Effect.map(() => {
+            destroyStream();
+            return "timed-out";
+        }));
+        return effect_1.Effect.race(completed, timedOut).pipe(effect_1.Effect.flatMap((outcome) => {
+            if (outcome === "timed-out")
+                return effect_1.Effect.succeed({ _tag: "timed-out" });
+            if (outcome === "failed")
+                return effect_1.Effect.succeed({ _tag: "failed" });
+            return effect_1.Effect.tryPromise({
+                try: () => execution.inspect(),
+                catch: (cause) => cause,
+            }).pipe(effect_1.Effect.map((info) => ({ _tag: "completed", exitCode: info.ExitCode })), effect_1.Effect.catchAll(() => effect_1.Effect.succeed({ _tag: "failed" })));
+        }));
+    };
+    return startProbe.pipe(effect_1.Effect.flatMap(({ execution, stream }) => probeOne(execution, stream)), effect_1.Effect.catchAll(() => effect_1.Effect.succeed({ _tag: "failed" })));
 }
 /** 送回休眠(enter 退出后 / history、diff 读完后)。 */
 async function suspendDetached(provider, sandboxId) {