niceeval 0.12.2-canary.31 → 0.13.0

package/dist/sandbox/record/model.d.mts

@@ -1,33 +1,33 @@
 import type { Brand } from "effect";
 import { type PositiveSafeInteger, type SafeIdentifier } from "../../o11y/record/model.mjs";
 /** The durable bound for a provider-native Sandbox identifier. */
-export declare const MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES_V1 = 256;
-export declare const SOURCE_NATIVE_SANDBOX_ID_V1_BRAND: "@niceeval/sandbox/SourceNativeSandboxIdV1";
+export declare const MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES = 256;
+export declare const SOURCE_NATIVE_SANDBOX_ID__BRAND: "@niceeval/sandbox/SourceNativeSandboxId";
 /** A provider-issued identifier preserved verbatim after safe UTF-8 validation. */
-export type SourceNativeSandboxIdV1 = string & Brand.Brand<typeof SOURCE_NATIVE_SANDBOX_ID_V1_BRAND>;
-export interface SandboxFreshReuseV1 {
+export type SourceNativeSandboxId = string & Brand.Brand<typeof SOURCE_NATIVE_SANDBOX_ID__BRAND>;
+export interface SandboxFreshReuse {
     readonly kind: "fresh";
 }
-export interface SandboxPooledReuseV1 {
+export interface SandboxPooledReuse {
     readonly kind: "pooled";
     readonly sandbox: PositiveSafeInteger;
     readonly ordinal: PositiveSafeInteger;
 }
-export type SandboxReuseV1 = SandboxFreshReuseV1 | SandboxPooledReuseV1;
-export interface SandboxNotUsedPayloadV1 {
+export type SandboxReuse = SandboxFreshReuse | SandboxPooledReuse;
+export interface SandboxNotUsedPayload {
     readonly state: "not-used";
 }
-export interface SandboxAssignedPayloadV1 {
+export interface SandboxAssignedPayload {
     readonly state: "assigned";
     readonly provider: SafeIdentifier;
-    readonly sandboxId: SourceNativeSandboxIdV1;
-    readonly reuse: SandboxReuseV1;
+    readonly sandboxId: SourceNativeSandboxId;
+    readonly reuse: SandboxReuse;
 }
-/** The exact durable payload for the Attempt-owned `niceeval.sandbox/v1` family. */
-export type SandboxAttachmentPayloadV1 = SandboxNotUsedPayloadV1 | SandboxAssignedPayloadV1;
+/** Transient sandbox assignment facts used while producing File Changes. */
+export type SandboxAttachmentPayload = SandboxNotUsedPayload | SandboxAssignedPayload;
 /**
  * Sandbox IDs are source-native, so their punctuation and case remain intact.
  * They cannot contain control characters or newlines that would reshape a
  * durable display, and they must round-trip through strict UTF-8.
  */
-export declare function isSourceNativeSandboxIdV1(value: string): value is SourceNativeSandboxIdV1;
+export declare function isSourceNativeSandboxId(value: string): value is SourceNativeSandboxId;

package/dist/sandbox/record/model.d.ts

@@ -1,33 +1,33 @@
 import type { Brand } from "effect";
 import { type PositiveSafeInteger, type SafeIdentifier } from "../../o11y/record/model.js";
 /** The durable bound for a provider-native Sandbox identifier. */
-export declare const MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES_V1 = 256;
-export declare const SOURCE_NATIVE_SANDBOX_ID_V1_BRAND: "@niceeval/sandbox/SourceNativeSandboxIdV1";
+export declare const MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES = 256;
+export declare const SOURCE_NATIVE_SANDBOX_ID__BRAND: "@niceeval/sandbox/SourceNativeSandboxId";
 /** A provider-issued identifier preserved verbatim after safe UTF-8 validation. */
-export type SourceNativeSandboxIdV1 = string & Brand.Brand<typeof SOURCE_NATIVE_SANDBOX_ID_V1_BRAND>;
-export interface SandboxFreshReuseV1 {
+export type SourceNativeSandboxId = string & Brand.Brand<typeof SOURCE_NATIVE_SANDBOX_ID__BRAND>;
+export interface SandboxFreshReuse {
     readonly kind: "fresh";
 }
-export interface SandboxPooledReuseV1 {
+export interface SandboxPooledReuse {
     readonly kind: "pooled";
     readonly sandbox: PositiveSafeInteger;
     readonly ordinal: PositiveSafeInteger;
 }
-export type SandboxReuseV1 = SandboxFreshReuseV1 | SandboxPooledReuseV1;
-export interface SandboxNotUsedPayloadV1 {
+export type SandboxReuse = SandboxFreshReuse | SandboxPooledReuse;
+export interface SandboxNotUsedPayload {
     readonly state: "not-used";
 }
-export interface SandboxAssignedPayloadV1 {
+export interface SandboxAssignedPayload {
     readonly state: "assigned";
     readonly provider: SafeIdentifier;
-    readonly sandboxId: SourceNativeSandboxIdV1;
-    readonly reuse: SandboxReuseV1;
+    readonly sandboxId: SourceNativeSandboxId;
+    readonly reuse: SandboxReuse;
 }
-/** The exact durable payload for the Attempt-owned `niceeval.sandbox/v1` family. */
-export type SandboxAttachmentPayloadV1 = SandboxNotUsedPayloadV1 | SandboxAssignedPayloadV1;
+/** Transient sandbox assignment facts used while producing File Changes. */
+export type SandboxAttachmentPayload = SandboxNotUsedPayload | SandboxAssignedPayload;
 /**
  * Sandbox IDs are source-native, so their punctuation and case remain intact.
  * They cannot contain control characters or newlines that would reshape a
  * durable display, and they must round-trip through strict UTF-8.
  */
-export declare function isSourceNativeSandboxIdV1(value: string): value is SourceNativeSandboxIdV1;
+export declare function isSourceNativeSandboxId(value: string): value is SourceNativeSandboxId;

package/dist/sandbox/record/model.js

@@ -1,10 +1,10 @@
 import { createRequire as __niceevalCreateRequire } from "node:module";
 const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
 const __niceevalCanonical = __niceevalRequire("./model.cjs");
-const __niceevalExport0 = __niceevalCanonical["MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES_V1"];
-export { __niceevalExport0 as MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES_V1 };
-const __niceevalExport1 = __niceevalCanonical["SOURCE_NATIVE_SANDBOX_ID_V1_BRAND"];
-export { __niceevalExport1 as SOURCE_NATIVE_SANDBOX_ID_V1_BRAND };
-const __niceevalExport2 = __niceevalCanonical["isSourceNativeSandboxIdV1"];
-export { __niceevalExport2 as isSourceNativeSandboxIdV1 };
+const __niceevalExport0 = __niceevalCanonical["MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES"];
+export { __niceevalExport0 as MAX_SOURCE_NATIVE_SANDBOX_ID_UTF8_BYTES };
+const __niceevalExport1 = __niceevalCanonical["SOURCE_NATIVE_SANDBOX_ID__BRAND"];
+export { __niceevalExport1 as SOURCE_NATIVE_SANDBOX_ID__BRAND };
+const __niceevalExport2 = __niceevalCanonical["isSourceNativeSandboxId"];
+export { __niceevalExport2 as isSourceNativeSandboxId };
 //# sourceMappingURL=model.js.map

package/dist/sandbox/record/projector.cjs

@@ -1,29 +1,20 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.sandboxProjector = void 0;
-const projector_ts_1 = require("../../projection/projector.cjs");
-const attachment_ts_1 = require("./attachment.cjs");
-function projectSandboxAttachment(value) {
-    const payload = value.payload;
-    if (payload.state === "not-used") {
-        return Object.freeze({ state: "not-used" });
-    }
-    return Object.freeze({
-        state: "assigned",
-        provider: payload.provider,
-        sandboxId: payload.sandboxId,
-        reuse: payload.reuse.kind === "fresh"
-            ? Object.freeze({ kind: "fresh" })
-            : Object.freeze({
-                kind: "pooled",
-                sandbox: payload.reuse.sandbox,
-                ordinal: payload.reuse.ordinal,
-            }),
-    });
+exports.projectSandboxCapture = projectSandboxCapture;
+function projectSandboxCapture(value) {
+    return value.state === "not-used"
+        ? Object.freeze({ state: "not-used" })
+        : Object.freeze({
+            state: "assigned",
+            provider: value.provider,
+            sandboxId: value.sandboxId,
+            reuse: value.reuse.kind === "fresh"
+                ? Object.freeze({ kind: "fresh" })
+                : Object.freeze({
+                    kind: "pooled",
+                    sandbox: value.reuse.sandbox,
+                    ordinal: value.reuse.ordinal,
+                }),
+        });
 }
-/** The public semantic projection for the Attempt-owned Sandbox family. */
-exports.sandboxProjector = (0, projector_ts_1.defineRecordAttachmentProjector)({
-    attachment: attachment_ts_1.sandboxAttachmentFamily,
-    project: projectSandboxAttachment,
-});
 //# sourceMappingURL=projector.cjs.map

package/dist/sandbox/record/projector.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"projector.js","sourceRoot":"","sources":["projector.ts"],"names":[],"mappings":";;;AAAA,gEAAiH;AAEjH,mDAA0D;AAiB1D,SAAS,wBAAwB,CAAC,KAAwD;IACtF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAmB,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,UAAmB;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;YACjC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC;YAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,QAAiB;gBACvB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;aACjC,CAAC;KACT,CAAC,CAAC;AACP,CAAC;AACD,2EAA2E;AAC9D,QAAA,gBAAgB,GAAsD,IAAA,8CAA+B,EAAC;IAC/G,UAAU,EAAE,uCAAuB;IACnC,OAAO,EAAE,wBAAwB;CACpC,CAAC,CAAC","sourcesContent":["import { defineRecordAttachmentProjector, type RecordAttachmentProjector, } from \"../../projection/projector.ts\";\nimport type { RecordAttachmentValue } from \"../../record/attachment/index.ts\";\nimport { sandboxAttachmentFamily } from \"./attachment.ts\";\nimport type { SandboxAttachmentPayloadV1 } from \"./model.ts\";\n/** A durable execution fact projected without Record schema-version terminology. */\nexport type SandboxView = {\n    readonly state: \"not-used\";\n} | {\n    readonly state: \"assigned\";\n    readonly provider: string;\n    readonly sandboxId: string;\n    readonly reuse: {\n        readonly kind: \"fresh\";\n    } | {\n        readonly kind: \"pooled\";\n        readonly sandbox: number;\n        readonly ordinal: number;\n    };\n};\nfunction projectSandboxAttachment(value: RecordAttachmentValue<SandboxAttachmentPayloadV1>): SandboxView {\n    const payload = value.payload;\n    if (payload.state === \"not-used\") {\n        return Object.freeze({ state: \"not-used\" as const });\n    }\n    return Object.freeze({\n        state: \"assigned\" as const,\n        provider: payload.provider,\n        sandboxId: payload.sandboxId,\n        reuse: payload.reuse.kind === \"fresh\"\n            ? Object.freeze({ kind: \"fresh\" as const })\n            : Object.freeze({\n                kind: \"pooled\" as const,\n                sandbox: payload.reuse.sandbox,\n                ordinal: payload.reuse.ordinal,\n            }),\n    });\n}\n/** The public semantic projection for the Attempt-owned Sandbox family. */\nexport const sandboxProjector: RecordAttachmentProjector<\"attempt\", SandboxView> = defineRecordAttachmentProjector({\n    attachment: sandboxAttachmentFamily,\n    project: projectSandboxAttachment,\n});\n"]}
+{"version":3,"file":"projector.js","sourceRoot":"","sources":["projector.ts"],"names":[],"mappings":";;AAGA,sDAeC;AAfD,SAAgB,qBAAqB,CAAC,KAA+B;IACjE,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;QAC7B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAmB,EAAE,CAAC;QAC/C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,UAAmB;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO;gBAC/B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC;gBAC3C,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBACZ,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;oBAC5B,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;iBAC/B,CAAC;SACT,CAAC,CAAC;AACX,CAAC","sourcesContent":["import type { SandboxAttachmentPayload } from \"./model.ts\";\n/** A detached transient view; Sandbox assignment is not a Record projection. */\nexport type SandboxView = SandboxAttachmentPayload;\nexport function projectSandboxCapture(value: SandboxAttachmentPayload): SandboxView {\n    return value.state === \"not-used\"\n        ? Object.freeze({ state: \"not-used\" as const })\n        : Object.freeze({\n            state: \"assigned\" as const,\n            provider: value.provider,\n            sandboxId: value.sandboxId,\n            reuse: value.reuse.kind === \"fresh\"\n                ? Object.freeze({ kind: \"fresh\" as const })\n                : Object.freeze({\n                    kind: \"pooled\" as const,\n                    sandbox: value.reuse.sandbox,\n                    ordinal: value.reuse.ordinal,\n                }),\n        });\n}\n"]}

package/dist/sandbox/record/projector.d.cts

@@ -1,18 +1,4 @@
-import { type RecordAttachmentProjector } from "../../projection/projector.cjs";
-/** A durable execution fact projected without Record schema-version terminology. */
-export type SandboxView = {
-    readonly state: "not-used";
-} | {
-    readonly state: "assigned";
-    readonly provider: string;
-    readonly sandboxId: string;
-    readonly reuse: {
-        readonly kind: "fresh";
-    } | {
-        readonly kind: "pooled";
-        readonly sandbox: number;
-        readonly ordinal: number;
-    };
-};
-/** The public semantic projection for the Attempt-owned Sandbox family. */
-export declare const sandboxProjector: RecordAttachmentProjector<"attempt", SandboxView>;
+import type { SandboxAttachmentPayload } from "./model.cjs";
+/** A detached transient view; Sandbox assignment is not a Record projection. */
+export type SandboxView = SandboxAttachmentPayload;
+export declare function projectSandboxCapture(value: SandboxAttachmentPayload): SandboxView;

package/dist/sandbox/record/projector.d.mts

@@ -1,18 +1,4 @@
-import { type RecordAttachmentProjector } from "../../projection/projector.mjs";
-/** A durable execution fact projected without Record schema-version terminology. */
-export type SandboxView = {
-    readonly state: "not-used";
-} | {
-    readonly state: "assigned";
-    readonly provider: string;
-    readonly sandboxId: string;
-    readonly reuse: {
-        readonly kind: "fresh";
-    } | {
-        readonly kind: "pooled";
-        readonly sandbox: number;
-        readonly ordinal: number;
-    };
-};
-/** The public semantic projection for the Attempt-owned Sandbox family. */
-export declare const sandboxProjector: RecordAttachmentProjector<"attempt", SandboxView>;
+import type { SandboxAttachmentPayload } from "./model.mjs";
+/** A detached transient view; Sandbox assignment is not a Record projection. */
+export type SandboxView = SandboxAttachmentPayload;
+export declare function projectSandboxCapture(value: SandboxAttachmentPayload): SandboxView;

package/dist/sandbox/record/projector.d.ts

@@ -1,18 +1,4 @@
-import { type RecordAttachmentProjector } from "../../projection/projector.js";
-/** A durable execution fact projected without Record schema-version terminology. */
-export type SandboxView = {
-    readonly state: "not-used";
-} | {
-    readonly state: "assigned";
-    readonly provider: string;
-    readonly sandboxId: string;
-    readonly reuse: {
-        readonly kind: "fresh";
-    } | {
-        readonly kind: "pooled";
-        readonly sandbox: number;
-        readonly ordinal: number;
-    };
-};
-/** The public semantic projection for the Attempt-owned Sandbox family. */
-export declare const sandboxProjector: RecordAttachmentProjector<"attempt", SandboxView>;
+import type { SandboxAttachmentPayload } from "./model.js";
+/** A detached transient view; Sandbox assignment is not a Record projection. */
+export type SandboxView = SandboxAttachmentPayload;
+export declare function projectSandboxCapture(value: SandboxAttachmentPayload): SandboxView;

package/dist/sandbox/record/projector.js

@@ -1,6 +1,6 @@
 import { createRequire as __niceevalCreateRequire } from "node:module";
 const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
 const __niceevalCanonical = __niceevalRequire("./projector.cjs");
-const __niceevalExport0 = __niceevalCanonical["sandboxProjector"];
-export { __niceevalExport0 as sandboxProjector };
+const __niceevalExport0 = __niceevalCanonical["projectSandboxCapture"];
+export { __niceevalExport0 as projectSandboxCapture };
 //# sourceMappingURL=projector.js.map

package/dist/sandbox/registry.cjs

@@ -5,6 +5,16 @@ exports.unregisterSandbox = unregisterSandbox;
 exports.liveSandboxCount = liveSandboxCount;
 exports.stopSandbox = stopSandbox;
 exports.stopAllSandboxes = stopAllSandboxes;
+// 活动沙箱登记表 + 强制清理兜底。
+//
+// 中断(Ctrl+C)时,正常路径靠 Effect 的 Sample finalizer 跑 sb.stop() 停容器。但 finalizer
+// 这条路不是 100% 可靠:vsb.stop() 这类远端调用可能慢/挂,用户等不及再按一次 Ctrl+C,进程
+// 就被硬退了 —— 沙箱成了孤儿(只有本身带超时的 provider 才会自己回收它;local 这类不会)。
+//
+// 这里维护一份独立于 Effect 的登记表,让 cli 在「二次中断 / graceful 清理超时 / 正常返回后」
+// 都能直接、带超时地强停所有还活着的沙箱。stop 不再静默吞异常(原 `.catch(() => {})`),失败打到
+// stderr,这样孤儿至少留下痕迹可查。
+const effect_1 = require("effect");
 const index_ts_1 = require("../i18n/index.cjs");
 const sink_ts_1 = require("../runner/feedback/sink.cjs");
 const live = new Set();
@@ -27,15 +37,17 @@ function liveSandboxCount() {
  * 供 Sample finalizer 与兜底强清共用,避免重复实现 stop 语义。
  */
 async function stopSandbox(sb, timeoutMs = DEFAULT_STOP_TIMEOUT_MS) {
-    let timer;
     let stopped = false;
     try {
-        await Promise.race([
-            sb.stop(),
-            new Promise((_, reject) => {
-                timer = setTimeout(() => reject(new Error((0, index_ts_1.t)("sandbox.stopTimeout", { timeoutMs }))), timeoutMs);
-            }),
-        ]);
+        // 超时走 Effect Clock/Sleep:到点 timeoutFail 中断等待 fiber,不再手工维护 timer。
+        // sb.stop() 是 provider Promise 叶子,原样保留,失败/超时都不从登记表移除,供同轮重试。
+        await effect_1.Effect.runPromise(effect_1.Effect.tryPromise({
+            try: () => sb.stop(),
+            catch: (cause) => cause,
+        }).pipe(effect_1.Effect.timeoutFail({
+            duration: timeoutMs,
+            onTimeout: () => new Error((0, index_ts_1.t)("sandbox.stopTimeout", { timeoutMs })),
+        })));
         stopped = true;
     }
     catch (e) {
@@ -50,8 +62,6 @@ async function stopSandbox(sb, timeoutMs = DEFAULT_STOP_TIMEOUT_MS) {
         });
     }
     finally {
-        if (timer)
-            clearTimeout(timer);
         if (stopped)
             live.delete(sb);
     }

package/dist/sandbox/registry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["registry.ts"],"names":[],"mappings":";;AAgBA,0CAEC;AAED,8CAEC;AACD,4CAEC;AAMD,kCA6BC;AAKD,4CAYC;AAnED,+CAAqC;AACrC,wDAA8D;AAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;AAChC,oDAAoD;AACpD,yDAAyD;AACzD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,SAAgB,eAAe,CAAC,EAAW;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC;AACD,sDAAsD;AACtD,SAAgB,iBAAiB,CAAC,EAAW;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AACD,SAAgB,gBAAgB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC;AACrB,CAAC;AACD;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAAC,EAAW,EAAE,SAAS,GAAG,uBAAuB;IAC9E,IAAI,KAAgD,CAAC;IACrD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACD,MAAM,OAAO,CAAC,IAAI,CAAC;YACf,EAAE,CAAC,IAAI,EAAE;YACT,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC7B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACpG,CAAC,CAAC;SACL,CAAC,CAAC;QACH,OAAO,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,+DAA+D;QAC/D,oDAAoD;QACpD,IAAA,0BAAgB,EAAC;YACb,GAAG,EAAE,qBAAqB;YAC1B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,IAAA,YAAC,EAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;YAC9E,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACP,CAAC;YACO,CAAC;QACL,IAAI,KAAK;YACL,YAAY,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,OAAO;YACP,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;AACL,CAAC;AACD;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CAAC,SAAS,GAAG,uBAAuB;IACtE,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAChB,OAAO,CAAC,CAAC;IACb,IAAA,0BAAgB,EAAC;QACb,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC,MAAM,CAAC;AACtB,CAAC","sourcesContent":["// 活动沙箱登记表 + 强制清理兜底。\n//\n// 中断(Ctrl+C)时,正常路径靠 Effect 的 Sample finalizer 跑 sb.stop() 停容器。但 finalizer\n// 这条路不是 100% 可靠:vsb.stop() 这类远端调用可能慢/挂,用户等不及再按一次 Ctrl+C,进程\n// 就被硬退了 —— 沙箱成了孤儿(只有本身带超时的 provider 才会自己回收它;local 这类不会)。\n//\n// 这里维护一份独立于 Effect 的登记表,让 cli 在「二次中断 / graceful 清理超时 / 正常返回后」\n// 都能直接、带超时地强停所有还活着的沙箱。stop 不再静默吞异常(原 `.catch(() => {})`),失败打到\n// stderr,这样孤儿至少留下痕迹可查。\nimport type { Sandbox } from \"../types.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { reportDiagnostic } from \"../runner/feedback/sink.ts\";\nconst live = new Set<Sandbox>();\n// 单个 stop 的默认超时:vsb.stop() 偶发慢/挂,清理不能无限等。到点就放弃、记一笔,\n// 让流程继续走到退出 —— 没停掉的沙箱会继续运行并计费,直到 provider 自己的超时(如果有)回收它。\nconst DEFAULT_STOP_TIMEOUT_MS = 8000;\nexport function registerSandbox(sb: Sandbox): void {\n    live.add(sb);\n}\n/** 留存提交成功后把沙箱移出本次 run 的内存强清集合(不 stop——现场归持久注册表管理)。 */\nexport function unregisterSandbox(sb: Sandbox): void {\n    live.delete(sb);\n}\nexport function liveSandboxCount(): number {\n    return live.size;\n}\n/**\n * 带超时地停单个沙箱。只有真实成功才从登记表移除；失败 / 超时保留所有权，让同轮后续\n * 强清可以重试，进程退出后也仍可由 provider 元数据认领。异常打到 stderr 不再静默吞。\n * 供 Sample finalizer 与兜底强清共用,避免重复实现 stop 语义。\n */\nexport async function stopSandbox(sb: Sandbox, timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<void> {\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    let stopped = false;\n    try {\n        await Promise.race([\n            sb.stop(),\n            new Promise<never>((_, reject) => {\n                timer = setTimeout(() => reject(new Error(t(\"sandbox.stopTimeout\", { timeoutMs }))), timeoutMs);\n            }),\n        ]);\n        stopped = true;\n    }\n    catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        // 稳定 key 不含具体 sandbox id:同一类失败(如 provider 限流导致大批 stop 超时)去重折叠成\n        // 一条永久事件、count 累加,而不是刷屏出几十行几乎相同的诊断;具体是哪个沙箱失败进 data。\n        reportDiagnostic({\n            key: \"sandbox-stop-failed\",\n            severity: \"warning\",\n            message: t(\"sandbox.stopFailed\", { id: sb.sandboxId, message: msg }).trimEnd(),\n            data: { sandboxId: sb.sandboxId, message: msg },\n        });\n    }\n    finally {\n        if (timer)\n            clearTimeout(timer);\n        if (stopped)\n            live.delete(sb);\n    }\n}\n/**\n * 兜底强清:并发停掉所有还登记着的沙箱(各自带超时、各自兜错,绝不抛)。返回尝试停的数量。\n * cli 在二次中断 / graceful 清理超时 / 正常返回后调用 —— 正常跑完时登记表已空,是个 no-op。\n */\nexport async function stopAllSandboxes(timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<number> {\n    const all = [...live];\n    if (all.length === 0)\n        return 0;\n    reportDiagnostic({\n        key: \"sandbox-force-cleanup\",\n        severity: \"warning\",\n        message: t(\"sandbox.forceCleanup\", { count: all.length }).trimEnd(),\n        data: { count: all.length },\n    });\n    await Promise.allSettled(all.map((sb) => stopSandbox(sb, timeoutMs)));\n    return all.length;\n}\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["registry.ts"],"names":[],"mappings":";;AAiBA,0CAEC;AAED,8CAEC;AACD,4CAEC;AAMD,kCA6BC;AAKD,4CAYC;AA9ED,oBAAoB;AACpB,EAAE;AACF,0EAA0E;AAC1E,2DAA2D;AAC3D,yDAAyD;AACzD,EAAE;AACF,8DAA8D;AAC9D,8DAA8D;AAC9D,uBAAuB;AACvB,mCAAgC;AAEhC,+CAAqC;AACrC,wDAA8D;AAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;AAChC,oDAAoD;AACpD,yDAAyD;AACzD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,SAAgB,eAAe,CAAC,EAAW;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC;AACD,sDAAsD;AACtD,SAAgB,iBAAiB,CAAC,EAAW;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AACD,SAAgB,gBAAgB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC;AACrB,CAAC;AACD;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAAC,EAAW,EAAE,SAAS,GAAG,uBAAuB;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACD,iEAAiE;QACjE,4DAA4D;QAC5D,MAAM,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,UAAU,CAAC;YACtC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE;YACpB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;SAC1B,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,WAAW,CAAC;YACvB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;SACtE,CAAC,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,+DAA+D;QAC/D,oDAAoD;QACpD,IAAA,0BAAgB,EAAC;YACb,GAAG,EAAE,qBAAqB;YAC1B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,IAAA,YAAC,EAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;YAC9E,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACP,CAAC;YACO,CAAC;QACL,IAAI,OAAO;YACP,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;AACL,CAAC;AACD;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CAAC,SAAS,GAAG,uBAAuB;IACtE,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAChB,OAAO,CAAC,CAAC;IACb,IAAA,0BAAgB,EAAC;QACb,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC,MAAM,CAAC;AACtB,CAAC","sourcesContent":["// 活动沙箱登记表 + 强制清理兜底。\n//\n// 中断(Ctrl+C)时,正常路径靠 Effect 的 Sample finalizer 跑 sb.stop() 停容器。但 finalizer\n// 这条路不是 100% 可靠:vsb.stop() 这类远端调用可能慢/挂,用户等不及再按一次 Ctrl+C,进程\n// 就被硬退了 —— 沙箱成了孤儿(只有本身带超时的 provider 才会自己回收它;local 这类不会)。\n//\n// 这里维护一份独立于 Effect 的登记表,让 cli 在「二次中断 / graceful 清理超时 / 正常返回后」\n// 都能直接、带超时地强停所有还活着的沙箱。stop 不再静默吞异常(原 `.catch(() => {})`),失败打到\n// stderr,这样孤儿至少留下痕迹可查。\nimport { Effect } from \"effect\";\nimport type { Sandbox } from \"../types.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { reportDiagnostic } from \"../runner/feedback/sink.ts\";\nconst live = new Set<Sandbox>();\n// 单个 stop 的默认超时:vsb.stop() 偶发慢/挂,清理不能无限等。到点就放弃、记一笔,\n// 让流程继续走到退出 —— 没停掉的沙箱会继续运行并计费,直到 provider 自己的超时(如果有)回收它。\nconst DEFAULT_STOP_TIMEOUT_MS = 8000;\nexport function registerSandbox(sb: Sandbox): void {\n    live.add(sb);\n}\n/** 留存提交成功后把沙箱移出本次 run 的内存强清集合(不 stop——现场归持久注册表管理)。 */\nexport function unregisterSandbox(sb: Sandbox): void {\n    live.delete(sb);\n}\nexport function liveSandboxCount(): number {\n    return live.size;\n}\n/**\n * 带超时地停单个沙箱。只有真实成功才从登记表移除；失败 / 超时保留所有权，让同轮后续\n * 强清可以重试，进程退出后也仍可由 provider 元数据认领。异常打到 stderr 不再静默吞。\n * 供 Sample finalizer 与兜底强清共用,避免重复实现 stop 语义。\n */\nexport async function stopSandbox(sb: Sandbox, timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<void> {\n    let stopped = false;\n    try {\n        // 超时走 Effect Clock/Sleep:到点 timeoutFail 中断等待 fiber,不再手工维护 timer。\n        // sb.stop() 是 provider Promise 叶子,原样保留,失败/超时都不从登记表移除,供同轮重试。\n        await Effect.runPromise(Effect.tryPromise({\n            try: () => sb.stop(),\n            catch: (cause) => cause,\n        }).pipe(Effect.timeoutFail({\n            duration: timeoutMs,\n            onTimeout: () => new Error(t(\"sandbox.stopTimeout\", { timeoutMs })),\n        })));\n        stopped = true;\n    }\n    catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        // 稳定 key 不含具体 sandbox id:同一类失败(如 provider 限流导致大批 stop 超时)去重折叠成\n        // 一条永久事件、count 累加,而不是刷屏出几十行几乎相同的诊断;具体是哪个沙箱失败进 data。\n        reportDiagnostic({\n            key: \"sandbox-stop-failed\",\n            severity: \"warning\",\n            message: t(\"sandbox.stopFailed\", { id: sb.sandboxId, message: msg }).trimEnd(),\n            data: { sandboxId: sb.sandboxId, message: msg },\n        });\n    }\n    finally {\n        if (stopped)\n            live.delete(sb);\n    }\n}\n/**\n * 兜底强清:并发停掉所有还登记着的沙箱(各自带超时、各自兜错,绝不抛)。返回尝试停的数量。\n * cli 在二次中断 / graceful 清理超时 / 正常返回后调用 —— 正常跑完时登记表已空,是个 no-op。\n */\nexport async function stopAllSandboxes(timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<number> {\n    const all = [...live];\n    if (all.length === 0)\n        return 0;\n    reportDiagnostic({\n        key: \"sandbox-force-cleanup\",\n        severity: \"warning\",\n        message: t(\"sandbox.forceCleanup\", { count: all.length }).trimEnd(),\n        data: { count: all.length },\n    });\n    await Promise.allSettled(all.map((sb) => stopSandbox(sb, timeoutMs)));\n    return all.length;\n}\n"]}

package/dist/sandbox/request-executor.cjs

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SandboxRequestExecutorClosedError = void 0;
+exports.makeSandboxRequestExecutor = makeSandboxRequestExecutor;
+// Scope-bound Sandbox 请求执行器:公开 Sandbox Promise 方法内部唯一的 Effect 运行入口。
+//
+// executor 在所属 Effect 内创建,捕获当时的 Runtime 与 owner Scope。每个请求 fork 成
+// owner Scope 的子 fiber 并登记追踪;Scope 关闭时由 Effect 机制统一中断所有在飞请求,
+// 关闭后的新调用稳定以 SandboxRequestExecutorClosedError 拒绝。不同 Scope 各自捕获自己的
+// Runtime/Scope,互不串用。
+//
+// 这里不使用 Effect.runPromise* / Runtime.runPromise*(关闭中的 Scope 下语义不受控)、
+// 默认 Runtime、daemon fiber 或原生 timer;Promise 桥接沿用 FiberHandle.runtimePromise
+// 的 observer 模式(Fiber 退出时 resolve/reject)。
+const effect_1 = require("effect");
+class SandboxRequestExecutorClosedError extends Error {
+    name = "SandboxRequestExecutorClosedError";
+    constructor() {
+        super("sandbox request executor is closed; new requests are rejected");
+    }
+}
+exports.SandboxRequestExecutorClosedError = SandboxRequestExecutorClosedError;
+/**
+ * 只能在所属 Effect 内创建(需要当前 Runtime 与 owner Scope)。返回的 executor 供
+ * Promise facade 边界同步调用;Effect 运行只经由捕获的 Runtime 与 Scope,不落默认 Runtime。
+ */
+function makeSandboxRequestExecutor() {
+    return effect_1.Effect.gen(function* () {
+        const runtime = yield* effect_1.Effect.runtime();
+        const scope = yield* effect_1.Effect.scope;
+        const inFlight = new Set();
+        let closed = false;
+        yield* effect_1.Scope.addFinalizer(scope, effect_1.Effect.sync(() => {
+            closed = true;
+        }));
+        const run = (operation) => {
+            if (closed)
+                return Promise.reject(new SandboxRequestExecutorClosedError());
+            // 外层 fiber 只负责把请求 fork 进 owner Scope 后立即结束;真正的请求 fiber 是
+            // Scope 子节点,Scope 关闭时被统一中断。
+            const outer = effect_1.Runtime.runFork(runtime)(effect_1.Effect.forkIn(operation, scope));
+            return new Promise((resolve, reject) => {
+                outer.addObserver((outerExit) => {
+                    if (effect_1.Exit.isFailure(outerExit)) {
+                        reject(effect_1.Cause.squash(outerExit.cause));
+                        return;
+                    }
+                    const child = outerExit.value;
+                    inFlight.add(child);
+                    child.addObserver((exit) => {
+                        inFlight.delete(child);
+                        if (effect_1.Exit.isSuccess(exit))
+                            resolve(exit.value);
+                        else
+                            reject(effect_1.Cause.squash(exit.cause));
+                    });
+                });
+            });
+        };
+        return { run, inFlight: () => inFlight.size };
+    });
+}
+//# sourceMappingURL=request-executor.cjs.map

package/dist/sandbox/request-executor.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-executor.js","sourceRoot":"","sources":["request-executor.ts"],"names":[],"mappings":";;;AA2BA,gEAmCC;AA9DD,oEAAoE;AACpE,EAAE;AACF,kEAAkE;AAClE,6DAA6D;AAC7D,mEAAmE;AACnE,sBAAsB;AACtB,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,2CAA2C;AAC3C,mCAAoE;AACpE,MAAa,iCAAkC,SAAQ,KAAK;IACtC,IAAI,GAAG,mCAAmC,CAAC;IAC7D;QACI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC3E,CAAC;CACJ;AALD,8EAKC;AAOD;;;GAGG;AACH,SAAgB,0BAA0B;IACtC,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,OAAO,EAAS,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,KAAK,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;QACjE,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,CAAC,CAAC,cAAK,CAAC,YAAY,CAAC,KAAK,EAAE,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YAC9C,MAAM,GAAG,IAAI,CAAC;QAClB,CAAC,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,CAAO,SAA8B,EAAc,EAAE;YAC7D,IAAI,MAAM;gBACN,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,iCAAiC,EAAE,CAAC,CAAC;YACnE,yDAAyD;YACzD,4BAA4B;YAC5B,MAAM,KAAK,GAAG,gBAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,eAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACtC,KAAK,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,EAAE;oBAC5B,IAAI,aAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC5B,MAAM,CAAC,cAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;wBACtC,OAAO;oBACX,CAAC;oBACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;oBAC9B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBACpB,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,EAAE;wBACvB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBACvB,IAAI,aAAI,CAAC,SAAS,CAAC,IAAI,CAAC;4BACpB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;4BAEpB,MAAM,CAAC,cAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QACP,CAAC,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["// Scope-bound Sandbox 请求执行器:公开 Sandbox Promise 方法内部唯一的 Effect 运行入口。\n//\n// executor 在所属 Effect 内创建,捕获当时的 Runtime 与 owner Scope。每个请求 fork 成\n// owner Scope 的子 fiber 并登记追踪;Scope 关闭时由 Effect 机制统一中断所有在飞请求,\n// 关闭后的新调用稳定以 SandboxRequestExecutorClosedError 拒绝。不同 Scope 各自捕获自己的\n// Runtime/Scope,互不串用。\n//\n// 这里不使用 Effect.runPromise* / Runtime.runPromise*(关闭中的 Scope 下语义不受控)、\n// 默认 Runtime、daemon fiber 或原生 timer;Promise 桥接沿用 FiberHandle.runtimePromise\n// 的 observer 模式(Fiber 退出时 resolve/reject)。\nimport { Cause, Effect, Exit, Fiber, Runtime, Scope } from \"effect\";\nexport class SandboxRequestExecutorClosedError extends Error {\n    override readonly name = \"SandboxRequestExecutorClosedError\";\n    constructor() {\n        super(\"sandbox request executor is closed; new requests are rejected\");\n    }\n}\nexport interface SandboxRequestExecutor {\n    /** 把请求 Effect 作为 owner Scope 的子 fiber 启动,返回公开 Promise。 */\n    run<A, E>(operation: Effect.Effect<A, E>): Promise<A>;\n    /** 当前在飞请求数;用于诊断与验收,不承担调度。 */\n    readonly inFlight: () => number;\n}\n/**\n * 只能在所属 Effect 内创建(需要当前 Runtime 与 owner Scope)。返回的 executor 供\n * Promise facade 边界同步调用;Effect 运行只经由捕获的 Runtime 与 Scope,不落默认 Runtime。\n */\nexport function makeSandboxRequestExecutor(): Effect.Effect<SandboxRequestExecutor, never, Scope.Scope> {\n    return Effect.gen(function* () {\n        const runtime = yield* Effect.runtime<never>();\n        const scope = yield* Effect.scope;\n        const inFlight = new Set<Fiber.RuntimeFiber<unknown, unknown>>();\n        let closed = false;\n        yield* Scope.addFinalizer(scope, Effect.sync(() => {\n            closed = true;\n        }));\n        const run = <A, E>(operation: Effect.Effect<A, E>): Promise<A> => {\n            if (closed)\n                return Promise.reject(new SandboxRequestExecutorClosedError());\n            // 外层 fiber 只负责把请求 fork 进 owner Scope 后立即结束;真正的请求 fiber 是\n            // Scope 子节点,Scope 关闭时被统一中断。\n            const outer = Runtime.runFork(runtime)(Effect.forkIn(operation, scope));\n            return new Promise<A>((resolve, reject) => {\n                outer.addObserver((outerExit) => {\n                    if (Exit.isFailure(outerExit)) {\n                        reject(Cause.squash(outerExit.cause));\n                        return;\n                    }\n                    const child = outerExit.value;\n                    inFlight.add(child);\n                    child.addObserver((exit) => {\n                        inFlight.delete(child);\n                        if (Exit.isSuccess(exit))\n                            resolve(exit.value);\n                        else\n                            reject(Cause.squash(exit.cause));\n                    });\n                });\n            });\n        };\n        return { run, inFlight: () => inFlight.size };\n    });\n}\n"]}

package/dist/sandbox/request-executor.d.cts

@@ -0,0 +1,16 @@
+import { Effect, Scope } from "effect";
+export declare class SandboxRequestExecutorClosedError extends Error {
+    readonly name = "SandboxRequestExecutorClosedError";
+    constructor();
+}
+export interface SandboxRequestExecutor {
+    /** 把请求 Effect 作为 owner Scope 的子 fiber 启动,返回公开 Promise。 */
+    run<A, E>(operation: Effect.Effect<A, E>): Promise<A>;
+    /** 当前在飞请求数;用于诊断与验收,不承担调度。 */
+    readonly inFlight: () => number;
+}
+/**
+ * 只能在所属 Effect 内创建(需要当前 Runtime 与 owner Scope)。返回的 executor 供
+ * Promise facade 边界同步调用;Effect 运行只经由捕获的 Runtime 与 Scope,不落默认 Runtime。
+ */
+export declare function makeSandboxRequestExecutor(): Effect.Effect<SandboxRequestExecutor, never, Scope.Scope>;

package/dist/sandbox/request-executor.d.mts

@@ -0,0 +1,16 @@
+import { Effect, Scope } from "effect";
+export declare class SandboxRequestExecutorClosedError extends Error {
+    readonly name = "SandboxRequestExecutorClosedError";
+    constructor();
+}
+export interface SandboxRequestExecutor {
+    /** 把请求 Effect 作为 owner Scope 的子 fiber 启动,返回公开 Promise。 */
+    run<A, E>(operation: Effect.Effect<A, E>): Promise<A>;
+    /** 当前在飞请求数;用于诊断与验收,不承担调度。 */
+    readonly inFlight: () => number;
+}
+/**
+ * 只能在所属 Effect 内创建(需要当前 Runtime 与 owner Scope)。返回的 executor 供
+ * Promise facade 边界同步调用;Effect 运行只经由捕获的 Runtime 与 Scope,不落默认 Runtime。
+ */
+export declare function makeSandboxRequestExecutor(): Effect.Effect<SandboxRequestExecutor, never, Scope.Scope>;

package/dist/sandbox/request-executor.d.ts

@@ -0,0 +1,16 @@
+import { Effect, Scope } from "effect";
+export declare class SandboxRequestExecutorClosedError extends Error {
+    readonly name = "SandboxRequestExecutorClosedError";
+    constructor();
+}
+export interface SandboxRequestExecutor {
+    /** 把请求 Effect 作为 owner Scope 的子 fiber 启动,返回公开 Promise。 */
+    run<A, E>(operation: Effect.Effect<A, E>): Promise<A>;
+    /** 当前在飞请求数;用于诊断与验收,不承担调度。 */
+    readonly inFlight: () => number;
+}
+/**
+ * 只能在所属 Effect 内创建(需要当前 Runtime 与 owner Scope)。返回的 executor 供
+ * Promise facade 边界同步调用;Effect 运行只经由捕获的 Runtime 与 Scope,不落默认 Runtime。
+ */
+export declare function makeSandboxRequestExecutor(): Effect.Effect<SandboxRequestExecutor, never, Scope.Scope>;

package/dist/sandbox/request-executor.js

@@ -0,0 +1,8 @@
+import { createRequire as __niceevalCreateRequire } from "node:module";
+const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
+const __niceevalCanonical = __niceevalRequire("./request-executor.cjs");
+const __niceevalExport0 = __niceevalCanonical["SandboxRequestExecutorClosedError"];
+export { __niceevalExport0 as SandboxRequestExecutorClosedError };
+const __niceevalExport1 = __niceevalCanonical["makeSandboxRequestExecutor"];
+export { __niceevalExport1 as makeSandboxRequestExecutor };
+//# sourceMappingURL=request-executor.js.map

package/dist/sandbox/request-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-executor.js","sources":[],"names":[],"mappings":""}

package/dist/sandbox/retry.cjs

@@ -6,16 +6,27 @@ exports.withProvisionRetry = withProvisionRetry;
 // 可重试的错误才会退避重试;其它错误第一次就抛出。防泄漏的两道防线
 // (见 docs/feature/sandbox/architecture.md「Provisioning 失败与重试」)中,这里承担
 // 「重试前对账」;kill-on-failure 在各 provider 的 create() 内部。
+const effect_1 = require("effect");
 const errors_ts_1 = require("./errors.cjs");
 const index_ts_1 = require("../i18n/index.cjs");
 const sink_ts_1 = require("../runner/feedback/sink.cjs");
 const MAX_ATTEMPTS = 4;
 const BASE_DELAY_MS = 1000;
 /** 指数退避 + 全抖动(0.5x~1.5x),避免同一批被限流的 create() 同时醒来再次撞限流。 */
-function delayFor(attempt) {
-    return BASE_DELAY_MS * 2 ** attempt * (0.5 + Math.random());
+function delayFor(attempt, jitter) {
+    return BASE_DELAY_MS * 2 ** attempt * (0.5 + jitter);
 }
-async function withProvisionRetry(create, classify, slot, feedback, 
+/**
+ * 退避期间只是在睡觉,不是在真的创建沙箱:攥着并发槽位陪跑 setTimeout 会让被限流的
+ * provider 把整批并发名额拖垮成"看起来卡在个位数并发"——先还名额,睡醒了再排队要回来。
+ * acquireUseRelease 在进入可中断睡眠前先登记 reacquire,interruption 不会永久吃掉并发名额。
+ */
+function sleepWithReleasedSlot(slot, wait) {
+    if (slot === undefined)
+        return wait;
+    return effect_1.Effect.acquireUseRelease(effect_1.Effect.suspend(() => slot.release), () => wait, () => effect_1.Effect.suspend(() => slot.reacquire));
+}
+function withProvisionRetry(create, classify, slot, feedback, 
 /**
  * 对账钩子:按 provision token 检索远端、销毁可能已创建的实例。提供时**每次重试前都执行**,
  * 不区分拒绝类还是歧义类——被重试的 create() 闭包跨多个请求,一个 429 可能来自实例已创建
@@ -25,58 +36,51 @@ async function withProvisionRetry(create, classify, slot, feedback,
  * (见 docs/feature/sandbox/architecture.md)。
  */
 reconcile) {
-    for (let attempt = 0;; attempt++) {
-        try {
-            return await create();
-        }
-        catch (e) {
-            const kind = classify(e);
+    const retry = (attempt) => effect_1.Effect.gen(function* () {
+        return yield* create.pipe(effect_1.Effect.catchAll((error) => effect_1.Effect.gen(function* () {
+            const kind = classify(error);
             if (!(0, errors_ts_1.isRetryableProvisionError)(kind) || attempt >= MAX_ATTEMPTS - 1)
-                throw e;
+                return yield* effect_1.Effect.fail(error);
             // 歧义类:远端可能已有实例,没有对账通道就不能重试,第一次抛出。
             if (!(0, errors_ts_1.isRejectedProvisionError)(kind) && !reconcile)
-                throw e;
-            // 退避期间只是在睡觉,不是在真的创建沙箱:攥着并发槽位陪跑 setTimeout 会让被限流的
-            // provider 把整批并发名额拖垮成"看起来卡在个位数并发"——先还名额,睡醒了再排队要回来。
-            if (slot)
-                await slot.release();
+                return yield* effect_1.Effect.fail(error);
+            const jitter = yield* effect_1.Random.next;
+            const delayMs = delayFor(attempt, jitter);
             // 「activity」而非「diagnostic」—— 这是正常的退避进度,不是需要去重/永久留痕的
             // warning(与 docker.ts 的镜像拉取进度、vercel.ts 的 session rotate 通知同一个理由,
             // 见 sink.ts 的 reportActivity 说明)。让 human dashboard 的 active slot 在整个退避
             // 窗口里有可见更新,而不是冻结到重试成功或耗尽为止。
-            const delayMs = delayFor(attempt);
             const message = (0, index_ts_1.t)("sandbox.provisionRetry", { delayMs: Math.round(delayMs), attempt: attempt + 1, maxAttempts: MAX_ATTEMPTS }).trimEnd();
-            if (feedback)
-                feedback.progress({ message });
-            else
-                (0, sink_ts_1.reportActivity)(message);
-            try {
-                await new Promise((resolve) => setTimeout(resolve, delayMs));
-            }
-            finally {
-                if (slot)
-                    await slot.reacquire();
-            }
+            // 严格顺序:release → 反馈 → sleep → reacquire → reconcile。
+            yield* sleepWithReleasedSlot(slot, effect_1.Effect.zipRight(effect_1.Effect.sync(() => {
+                if (feedback)
+                    feedback.progress({ message });
+                else
+                    (0, sink_ts_1.reportActivity)(message);
+            }), effect_1.Effect.sleep(delayMs)));
             if (reconcile) {
-                try {
-                    await reconcile();
-                }
-                catch (reconcileError) {
+                const outcome = yield* reconcile.pipe(effect_1.Effect.either);
+                if (outcome._tag === "Left") {
                     // 对账是重试的硬前置:查不到账就重试与盲重试无异。放弃重试,留 diagnostic,
                     // 抛回原始 create 错误(对账失败不掩盖它)。
+                    const reconcileError = outcome.left;
                     const diagnostic = {
                         code: "sandbox-provision-reconcile-failed",
                         level: "warning",
                         message: (0, index_ts_1.t)("sandbox.provisionReconcileFailed", { error: String(reconcileError) }).trimEnd(),
                     };
-                    if (feedback)
-                        feedback.diagnostic(diagnostic);
-                    else
-                        (0, sink_ts_1.reportDiagnostic)({ key: diagnostic.code, severity: diagnostic.level, message: diagnostic.message });
-                    throw e;
+                    yield* effect_1.Effect.sync(() => {
+                        if (feedback)
+                            feedback.diagnostic(diagnostic);
+                        else
+                            (0, sink_ts_1.reportDiagnostic)({ key: diagnostic.code, severity: diagnostic.level, message: diagnostic.message });
+                    });
+                    return yield* effect_1.Effect.fail(error);
                 }
             }
-        }
-    }
+            return yield* retry(attempt + 1);
+        })));
+    });
+    return retry(0);
 }
 //# sourceMappingURL=retry.cjs.map