niceeval 0.12.2-canary.31 → 0.13.0

package/dist/sandbox/retry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"retry.js","sourceRoot":"","sources":["retry.ts"],"names":[],"mappings":";;AAuBA,gDA+DC;AAtFD,kEAAkE;AAClE,qEAAqE;AACrE,mCAAmC;AACnC,qEAAqE;AACrE,qDAAqD;AACrD,2CAAkH;AAClH,+CAAqC;AACrC,wDAA8E;AAE9E,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,0DAA0D;AAC1D,SAAS,QAAQ,CAAC,OAAe;IAC7B,OAAO,aAAa,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAChE,CAAC;AASM,KAAK,UAAU,kBAAkB,CAAI,MAAwB,EAAE,QAAmD,EAAE,IAAoB,EAAE,QAAyB;AAC1K;;;;;;;GAOG;AACH,SAA+B;IAC3B,KAAK,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC;YACD,OAAO,MAAM,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,IAAA,qCAAyB,EAAC,IAAI,CAAC,IAAI,OAAO,IAAI,YAAY,GAAG,CAAC;gBAC/D,MAAM,CAAC,CAAC;YACZ,kCAAkC;YAClC,IAAI,CAAC,IAAA,oCAAwB,EAAC,IAAI,CAAC,IAAI,CAAC,SAAS;gBAC7C,MAAM,CAAC,CAAC;YACZ,iDAAiD;YACjD,mDAAmD;YACnD,IAAI,IAAI;gBACJ,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,oDAAoD;YACpD,kEAAkE;YAClE,uEAAuE;YACvE,4BAA4B;YAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,IAAA,YAAC,EAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACzI,IAAI,QAAQ;gBACR,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;;gBAE/B,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,CAAC;gBACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACjE,CAAC;oBACO,CAAC;gBACL,IAAI,IAAI;oBACJ,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACD,MAAM,SAAS,EAAE,CAAC;gBACtB,CAAC;gBACD,OAAO,cAAc,EAAE,CAAC;oBACpB,6CAA6C;oBAC7C,4BAA4B;oBAC5B,MAAM,UAAU,GAAG;wBACf,IAAI,EAAE,oCAAoC;wBAC1C,KAAK,EAAE,SAAkB;wBACzB,OAAO,EAAE,IAAA,YAAC,EAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;qBAC9F,CAAC;oBACF,IAAI,QAAQ;wBACR,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;;wBAEhC,IAAA,0BAAgB,EAAC,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACxG,MAAM,CAAC,CAAC;gBACZ,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;AACL,CAAC","sourcesContent":["// provider 无关的 provisioning 退避重试:runtime adapter 对每个内置 provider 的\n// create/provision 步骤套这一层。只有各 provider 自己的 classifyProvisionError 判为\n// 可重试的错误才会退避重试;其它错误第一次就抛出。防泄漏的两道防线\n// (见 docs/feature/sandbox/architecture.md「Provisioning 失败与重试」)中,这里承担\n// 「重试前对账」;kill-on-failure 在各 provider 的 create() 内部。\nimport { isRejectedProvisionError, isRetryableProvisionError, type SandboxProvisionErrorKind } from \"./errors.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { reportActivity, reportDiagnostic } from \"../runner/feedback/sink.ts\";\nimport type { ScopedFeedback } from \"../types.ts\";\nconst MAX_ATTEMPTS = 4;\nconst BASE_DELAY_MS = 1000;\n/** 指数退避 + 全抖动(0.5x~1.5x),避免同一批被限流的 create() 同时醒来再次撞限流。 */\nfunction delayFor(attempt: number): number {\n    return BASE_DELAY_MS * 2 ** attempt * (0.5 + Math.random());\n}\n/**\n * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。不认调用方用的是不是 Effect —— 只要求\n * 两个 async 方法,保持这层 provider 无关。\n */\nexport interface ProvisionSlot {\n    release(): Promise<void>;\n    reacquire(): Promise<void>;\n}\nexport async function withProvisionRetry<T>(create: () => Promise<T>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, \n/**\n * 对账钩子:按 provision token 检索远端、销毁可能已创建的实例。提供时**每次重试前都执行**,\n * 不区分拒绝类还是歧义类——被重试的 create() 闭包跨多个请求,一个 429 可能来自实例已创建\n * 之后的初始化请求,分类不保证远端没有实例。对账排在退避睡眠之后(紧跟失败发出的检索大概率\n * 同样被限流);对账抛错即放弃重试、抛回原始 create 错误。没有对账通道的 provider 不传——\n * 歧义类第一次抛出:宁可判死一个 attempt,不留一台计费的无主实例\n * (见 docs/feature/sandbox/architecture.md)。\n */\nreconcile?: () => Promise<void>): Promise<T> {\n    for (let attempt = 0;; attempt++) {\n        try {\n            return await create();\n        }\n        catch (e) {\n            const kind = classify(e);\n            if (!isRetryableProvisionError(kind) || attempt >= MAX_ATTEMPTS - 1)\n                throw e;\n            // 歧义类:远端可能已有实例,没有对账通道就不能重试,第一次抛出。\n            if (!isRejectedProvisionError(kind) && !reconcile)\n                throw e;\n            // 退避期间只是在睡觉,不是在真的创建沙箱:攥着并发槽位陪跑 setTimeout 会让被限流的\n            // provider 把整批并发名额拖垮成\"看起来卡在个位数并发\"——先还名额,睡醒了再排队要回来。\n            if (slot)\n                await slot.release();\n            // 「activity」而非「diagnostic」—— 这是正常的退避进度,不是需要去重/永久留痕的\n            // warning(与 docker.ts 的镜像拉取进度、vercel.ts 的 session rotate 通知同一个理由,\n            // 见 sink.ts 的 reportActivity 说明)。让 human dashboard 的 active slot 在整个退避\n            // 窗口里有可见更新,而不是冻结到重试成功或耗尽为止。\n            const delayMs = delayFor(attempt);\n            const message = t(\"sandbox.provisionRetry\", { delayMs: Math.round(delayMs), attempt: attempt + 1, maxAttempts: MAX_ATTEMPTS }).trimEnd();\n            if (feedback)\n                feedback.progress({ message });\n            else\n                reportActivity(message);\n            try {\n                await new Promise((resolve) => setTimeout(resolve, delayMs));\n            }\n            finally {\n                if (slot)\n                    await slot.reacquire();\n            }\n            if (reconcile) {\n                try {\n                    await reconcile();\n                }\n                catch (reconcileError) {\n                    // 对账是重试的硬前置:查不到账就重试与盲重试无异。放弃重试,留 diagnostic,\n                    // 抛回原始 create 错误(对账失败不掩盖它)。\n                    const diagnostic = {\n                        code: \"sandbox-provision-reconcile-failed\",\n                        level: \"warning\" as const,\n                        message: t(\"sandbox.provisionReconcileFailed\", { error: String(reconcileError) }).trimEnd(),\n                    };\n                    if (feedback)\n                        feedback.diagnostic(diagnostic);\n                    else\n                        reportDiagnostic({ key: diagnostic.code, severity: diagnostic.level, message: diagnostic.message });\n                    throw e;\n                }\n            }\n        }\n    }\n}\n"]}
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["retry.ts"],"names":[],"mappings":";;AAiCA,gDAwDC;AAzFD,kEAAkE;AAClE,qEAAqE;AACrE,mCAAmC;AACnC,qEAAqE;AACrE,qDAAqD;AACrD,mCAAwC;AACxC,2CAAkH;AAClH,+CAAqC;AACrC,wDAA8E;AAE9E,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,0DAA0D;AAC1D,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC7C,OAAO,aAAa,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC;AACzD,CAAC;AAQD;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,IAA+B,EAAE,IAAkC;IAC9F,IAAI,IAAI,KAAK,SAAS;QAClB,OAAO,IAAI,CAAC;IAChB,OAAO,eAAM,CAAC,iBAAiB,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAChI,CAAC;AACD,SAAgB,kBAAkB,CAAI,MAAiC,EAAE,QAAmD,EAAE,IAAoB,EAAE,QAAyB;AAC7K;;;;;;;GAOG;AACH,SAAwC;IACpC,MAAM,KAAK,GAAG,CAAC,OAAe,EAA6B,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9E,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAA,qCAAyB,EAAC,IAAI,CAAC,IAAI,OAAO,IAAI,YAAY,GAAG,CAAC;gBAC/D,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,kCAAkC;YAClC,IAAI,CAAC,IAAA,oCAAwB,EAAC,IAAI,CAAC,IAAI,CAAC,SAAS;gBAC7C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC;YAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1C,oDAAoD;YACpD,kEAAkE;YAClE,uEAAuE;YACvE,4BAA4B;YAC5B,MAAM,OAAO,GAAG,IAAA,YAAC,EAAC,wBAAwB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACzI,qDAAqD;YACrD,KAAK,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,eAAM,CAAC,QAAQ,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,IAAI,QAAQ;oBACR,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;;oBAE/B,IAAA,wBAAc,EAAC,OAAO,CAAC,CAAC;YAChC,CAAC,CAAC,EAAE,eAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,CAAC;gBACrD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC1B,6CAA6C;oBAC7C,4BAA4B;oBAC5B,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;oBACpC,MAAM,UAAU,GAAG;wBACf,IAAI,EAAE,oCAAoC;wBAC1C,KAAK,EAAE,SAAkB;wBACzB,OAAO,EAAE,IAAA,YAAC,EAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;qBAC9F,CAAC;oBACF,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;wBACpB,IAAI,QAAQ;4BACR,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;;4BAEhC,IAAA,0BAAgB,EAAC,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC5G,CAAC,CAAC,CAAC;oBACH,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrC,CAAC;YACL,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,CAAC;IACT,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC","sourcesContent":["// provider 无关的 provisioning 退避重试:runtime adapter 对每个内置 provider 的\n// create/provision 步骤套这一层。只有各 provider 自己的 classifyProvisionError 判为\n// 可重试的错误才会退避重试;其它错误第一次就抛出。防泄漏的两道防线\n// (见 docs/feature/sandbox/architecture.md「Provisioning 失败与重试」)中,这里承担\n// 「重试前对账」;kill-on-failure 在各 provider 的 create() 内部。\nimport { Effect, Random } from \"effect\";\nimport { isRejectedProvisionError, isRetryableProvisionError, type SandboxProvisionErrorKind } from \"./errors.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { reportActivity, reportDiagnostic } from \"../runner/feedback/sink.ts\";\nimport type { ScopedFeedback } from \"../types.ts\";\nconst MAX_ATTEMPTS = 4;\nconst BASE_DELAY_MS = 1000;\n/** 指数退避 + 全抖动(0.5x~1.5x),避免同一批被限流的 create() 同时醒来再次撞限流。 */\nfunction delayFor(attempt: number, jitter: number): number {\n    return BASE_DELAY_MS * 2 ** attempt * (0.5 + jitter);\n}\n/**\n * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。\n */\nexport interface ProvisionSlot {\n    readonly release: Effect.Effect<void>;\n    readonly reacquire: Effect.Effect<void>;\n}\n/**\n * 退避期间只是在睡觉,不是在真的创建沙箱:攥着并发槽位陪跑 setTimeout 会让被限流的\n * provider 把整批并发名额拖垮成\"看起来卡在个位数并发\"——先还名额,睡醒了再排队要回来。\n * acquireUseRelease 在进入可中断睡眠前先登记 reacquire,interruption 不会永久吃掉并发名额。\n */\nfunction sleepWithReleasedSlot(slot: ProvisionSlot | undefined, wait: Effect.Effect<void, unknown>): Effect.Effect<void, unknown> {\n    if (slot === undefined)\n        return wait;\n    return Effect.acquireUseRelease(Effect.suspend(() => slot.release), () => wait, () => Effect.suspend(() => slot.reacquire));\n}\nexport function withProvisionRetry<T>(create: Effect.Effect<T, unknown>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, \n/**\n * 对账钩子:按 provision token 检索远端、销毁可能已创建的实例。提供时**每次重试前都执行**,\n * 不区分拒绝类还是歧义类——被重试的 create() 闭包跨多个请求,一个 429 可能来自实例已创建\n * 之后的初始化请求,分类不保证远端没有实例。对账排在退避睡眠之后(紧跟失败发出的检索大概率\n * 同样被限流);对账抛错即放弃重试、抛回原始 create 错误。没有对账通道的 provider 不传——\n * 歧义类第一次抛出:宁可判死一个 attempt,不留一台计费的无主实例\n * (见 docs/feature/sandbox/architecture.md)。\n */\nreconcile?: Effect.Effect<void, unknown>): Effect.Effect<T, unknown> {\n    const retry = (attempt: number): Effect.Effect<T, unknown> => Effect.gen(function* () {\n        return yield* create.pipe(Effect.catchAll((error) => Effect.gen(function* () {\n            const kind = classify(error);\n            if (!isRetryableProvisionError(kind) || attempt >= MAX_ATTEMPTS - 1)\n                return yield* Effect.fail(error);\n            // 歧义类:远端可能已有实例,没有对账通道就不能重试,第一次抛出。\n            if (!isRejectedProvisionError(kind) && !reconcile)\n                return yield* Effect.fail(error);\n            const jitter = yield* Random.next;\n            const delayMs = delayFor(attempt, jitter);\n            // 「activity」而非「diagnostic」—— 这是正常的退避进度,不是需要去重/永久留痕的\n            // warning(与 docker.ts 的镜像拉取进度、vercel.ts 的 session rotate 通知同一个理由,\n            // 见 sink.ts 的 reportActivity 说明)。让 human dashboard 的 active slot 在整个退避\n            // 窗口里有可见更新,而不是冻结到重试成功或耗尽为止。\n            const message = t(\"sandbox.provisionRetry\", { delayMs: Math.round(delayMs), attempt: attempt + 1, maxAttempts: MAX_ATTEMPTS }).trimEnd();\n            // 严格顺序:release → 反馈 → sleep → reacquire → reconcile。\n            yield* sleepWithReleasedSlot(slot, Effect.zipRight(Effect.sync(() => {\n                if (feedback)\n                    feedback.progress({ message });\n                else\n                    reportActivity(message);\n            }), Effect.sleep(delayMs)));\n            if (reconcile) {\n                const outcome = yield* reconcile.pipe(Effect.either);\n                if (outcome._tag === \"Left\") {\n                    // 对账是重试的硬前置:查不到账就重试与盲重试无异。放弃重试,留 diagnostic,\n                    // 抛回原始 create 错误(对账失败不掩盖它)。\n                    const reconcileError = outcome.left;\n                    const diagnostic = {\n                        code: \"sandbox-provision-reconcile-failed\",\n                        level: \"warning\" as const,\n                        message: t(\"sandbox.provisionReconcileFailed\", { error: String(reconcileError) }).trimEnd(),\n                    };\n                    yield* Effect.sync(() => {\n                        if (feedback)\n                            feedback.diagnostic(diagnostic);\n                        else\n                            reportDiagnostic({ key: diagnostic.code, severity: diagnostic.level, message: diagnostic.message });\n                    });\n                    return yield* Effect.fail(error);\n                }\n            }\n            return yield* retry(attempt + 1);\n        })));\n    });\n    return retry(0);\n}\n"]}

package/dist/sandbox/retry.d.cts

@@ -1,14 +1,14 @@
+import { Effect } from "effect";
 import { type SandboxProvisionErrorKind } from "./errors.cjs";
 import type { ScopedFeedback } from "../types.cjs";
 /**
- * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。不认调用方用的是不是 Effect —— 只要求
- * 两个 async 方法,保持这层 provider 无关。
+ * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。
  */
 export interface ProvisionSlot {
-    release(): Promise<void>;
-    reacquire(): Promise<void>;
+    readonly release: Effect.Effect<void>;
+    readonly reacquire: Effect.Effect<void>;
 }
-export declare function withProvisionRetry<T>(create: () => Promise<T>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, 
+export declare function withProvisionRetry<T>(create: Effect.Effect<T, unknown>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, 
 /**
  * 对账钩子:按 provision token 检索远端、销毁可能已创建的实例。提供时**每次重试前都执行**,
  * 不区分拒绝类还是歧义类——被重试的 create() 闭包跨多个请求,一个 429 可能来自实例已创建
@@ -17,4 +17,4 @@ export declare function withProvisionRetry<T>(create: () => Promise<T>, classify
  * 歧义类第一次抛出:宁可判死一个 attempt,不留一台计费的无主实例
  * (见 docs/feature/sandbox/architecture.md)。
  */
-reconcile?: () => Promise<void>): Promise<T>;
+reconcile?: Effect.Effect<void, unknown>): Effect.Effect<T, unknown>;

package/dist/sandbox/retry.d.mts

@@ -1,14 +1,14 @@
+import { Effect } from "effect";
 import { type SandboxProvisionErrorKind } from "./errors.mjs";
 import type { ScopedFeedback } from "../types.mjs";
 /**
- * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。不认调用方用的是不是 Effect —— 只要求
- * 两个 async 方法,保持这层 provider 无关。
+ * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。
  */
 export interface ProvisionSlot {
-    release(): Promise<void>;
-    reacquire(): Promise<void>;
+    readonly release: Effect.Effect<void>;
+    readonly reacquire: Effect.Effect<void>;
 }
-export declare function withProvisionRetry<T>(create: () => Promise<T>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, 
+export declare function withProvisionRetry<T>(create: Effect.Effect<T, unknown>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, 
 /**
  * 对账钩子:按 provision token 检索远端、销毁可能已创建的实例。提供时**每次重试前都执行**,
  * 不区分拒绝类还是歧义类——被重试的 create() 闭包跨多个请求,一个 429 可能来自实例已创建
@@ -17,4 +17,4 @@ export declare function withProvisionRetry<T>(create: () => Promise<T>, classify
  * 歧义类第一次抛出:宁可判死一个 attempt,不留一台计费的无主实例
  * (见 docs/feature/sandbox/architecture.md)。
  */
-reconcile?: () => Promise<void>): Promise<T>;
+reconcile?: Effect.Effect<void, unknown>): Effect.Effect<T, unknown>;

package/dist/sandbox/retry.d.ts

@@ -1,14 +1,14 @@
+import { Effect } from "effect";
 import { type SandboxProvisionErrorKind } from "./errors.js";
 import type { ScopedFeedback } from "../types.js";
 /**
- * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。不认调用方用的是不是 Effect —— 只要求
- * 两个 async 方法,保持这层 provider 无关。
+ * 调用方(runtime.ts)持有的并发槽位的临时归还/收回。
  */
 export interface ProvisionSlot {
-    release(): Promise<void>;
-    reacquire(): Promise<void>;
+    readonly release: Effect.Effect<void>;
+    readonly reacquire: Effect.Effect<void>;
 }
-export declare function withProvisionRetry<T>(create: () => Promise<T>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, 
+export declare function withProvisionRetry<T>(create: Effect.Effect<T, unknown>, classify: (e: unknown) => SandboxProvisionErrorKind, slot?: ProvisionSlot, feedback?: ScopedFeedback, 
 /**
  * 对账钩子:按 provision token 检索远端、销毁可能已创建的实例。提供时**每次重试前都执行**,
  * 不区分拒绝类还是歧义类——被重试的 create() 闭包跨多个请求,一个 429 可能来自实例已创建
@@ -17,4 +17,4 @@ export declare function withProvisionRetry<T>(create: () => Promise<T>, classify
  * 歧义类第一次抛出:宁可判死一个 attempt,不留一台计费的无主实例
  * (见 docs/feature/sandbox/architecture.md)。
  */
-reconcile?: () => Promise<void>): Promise<T>;
+reconcile?: Effect.Effect<void, unknown>): Effect.Effect<T, unknown>;

package/dist/sandbox/runtime.cjs

@@ -176,6 +176,7 @@ function wrapSingleSandbox(backend, context, facts) {
     };
     return Object.freeze({
         sandbox,
+        authorBackend: backend,
         group,
         caseKind: context.plan.providerPlan.caseKind,
         caseKey: context.plan.providerPlan.build.caseKey,
@@ -215,16 +216,13 @@ function normalizeMaterialized(materialized, context) {
     return Object.freeze({ ...materialized, sandbox, group });
 }
 function materializationEffect(context, acquire) {
-    return effect_1.Effect.tryPromise({
-        try: acquire,
-        catch: (cause) => runtimeFailure(context, "sandbox.materialization-failed", cause),
-    });
+    return acquire.pipe(effect_1.Effect.mapError((cause) => runtimeFailure(context, "sandbox.materialization-failed", cause)));
 }
 function materializeDockerComposeProviderPlan(plan, context) {
     const materialize = context.services._tag === "Live"
         ? compose_ts_1.materializeDockerComposeProviderCase
         : context.services.materializeCompose;
-    return materializationEffect(context, async () => normalizeMaterialized(await materialize({
+    return materializationEffect(context, materialize({
         evalId: context.evalId,
         profile: context.evalId,
         mainService: plan.workspaceService,
@@ -245,25 +243,21 @@ function materializeDockerComposeProviderPlan(plan, context) {
         feedback: context.feedback,
         provisionSlot: boundProvisionSlot(context),
         lifetimeMs: configuredLifetime(plan.lifetime),
-    }), context));
+    }).pipe(effect_1.Effect.map((materialized) => normalizeMaterialized(materialized, context))));
 }
 function materializeDockerfileProviderPlan(plan, context) {
     return effect_1.Option.match(effect_1.Option.fromNullable(context.buildLocators.get(plan.buildKey)), {
         onNone: () => effect_1.Effect.fail(runtimeFailure(context, "sandbox.build-locator-missing", new Error(`Dockerfile build ${plan.buildKey} has no prepared locator.`))),
         onSome: (locator) => typeof locator !== "string"
             ? effect_1.Effect.fail(runtimeFailure(context, "sandbox.materialization-failed", new TypeError(`Dockerfile build locator for ${plan.buildKey} must be a string.`)))
-            : effect_1.Effect.flatMap(resolveDockerfileAgentImage(plan, context, locator).pipe(effect_1.Effect.mapError((cause) => runtimeFailure(context, "sandbox.materialization-failed", cause))), (resolved) => effect_1.Effect.flatMap(effect_1.Effect.try({
-                try: () => context.hookContext.fact("agent.image.cache", resolved.status),
-                catch: (cause) => runtimeFailure(context, "sandbox.materialization-failed", cause),
-            }), () => materializationEffect(context, async () => {
-                const { DockerSandbox, classifyProvisionError, reconcileProvision } = await __niceevalDynamicImport("./docker.cjs");
+            : effect_1.Effect.flatMap(resolveDockerfileAgentImage(plan, context, locator).pipe(effect_1.Effect.mapError((cause) => runtimeFailure(context, "sandbox.materialization-failed", cause))), (resolved) => materializationEffect(context, effect_1.Effect.gen(function* () {
+                const { DockerSandbox, classifyProvisionError, reconcileProvision } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./docker.cjs"));
                 const managed = plan.profileBinding === undefined
                     ? undefined
-                    : await managedContainerSession(plan.profileBinding, plan.resources);
+                    : yield* (0, backend_ts_1.providerBoundaryEffect)(() => managedContainerSession(plan.profileBinding, plan.resources));
                 const provisionToken = managed?.reservation.provisionToken ?? (0, node_crypto_1.randomUUID)();
-                let backend;
-                try {
-                    backend = await (0, retry_ts_1.withProvisionRetry)(() => DockerSandbox.create({
+                return yield* effect_1.Effect.gen(function* () {
+                    const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => DockerSandbox.create({
                         ...deadlineOptions(context.deadline),
                         runtime: "node24",
                         image: resolved.locator,
@@ -287,20 +281,18 @@ function materializeDockerfileProviderPlan(plan, context) {
                             },
                             afterStop: managed?.finish,
                         }),
-                    }), classifyProvisionError, boundProvisionSlot(context), context.feedback, () => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath));
+                    })), classifyProvisionError, boundProvisionSlot(context), context.feedback, (0, backend_ts_1.providerBoundaryEffect)(() => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath)));
                     if (managed !== undefined) {
-                        await (0, runtime_ts_1.commitDockerProfileReservation)(managed.lease, managed.reservation.reservationId, {
+                        yield* (0, backend_ts_1.providerBoundaryEffect)(() => (0, runtime_ts_1.commitDockerProfileReservation)(managed.lease, managed.reservation.reservationId, {
                             containerId: backend.sandboxId,
                             ...(backend.managedNetworkId === undefined ? {} : { networkId: backend.managedNetworkId }),
                             attemptId: context.evalId,
-                        });
+                        }));
                     }
-                }
-                catch (error) {
-                    await managed?.finish().catch(() => undefined);
-                    throw error;
-                }
-                return wrapSingleSandbox(backend, context, { image: resolved.locator });
+                    return wrapSingleSandbox(backend, context, { image: resolved.locator });
+                }).pipe(effect_1.Effect.onError(() => managed === undefined
+                    ? effect_1.Effect.void
+                    : (0, backend_ts_1.providerBoundaryEffect)(() => managed.finish()).pipe(effect_1.Effect.ignore)));
             }))),
     });
 }
@@ -379,7 +371,6 @@ function buildDockerfileAgentImageWithServices(input, request, targetPlatform, s
         // build cause，而不是在 cleanup 路径把 interruption/defect 改写成 typed failure。
         (sandbox) => (0, backend_ts_1.providerBoundaryEffect)(() => sandbox.stop()).pipe(effect_1.Effect.catchAll(() => effect_1.Effect.void)));
         yield* (0, provisioner_ts_1.runAgentEnsure)([request.ensure], [request.installer], provisioned.operations, {
-            fact: () => { },
             coordinator: effect_1.Option.some(new provisioner_ts_1.ArtifactPrepareCoordinator()),
             targetPlatform,
             signal,
@@ -389,15 +380,14 @@ function buildDockerfileAgentImageWithServices(input, request, targetPlatform, s
     }));
 }
 function materializeDockerImageProviderPlan(plan, context) {
-    return materializationEffect(context, async () => {
-        const { DockerSandbox, classifyProvisionError, reconcileProvision } = await __niceevalDynamicImport("./docker.cjs");
+    return materializationEffect(context, effect_1.Effect.gen(function* () {
+        const { DockerSandbox, classifyProvisionError, reconcileProvision } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./docker.cjs"));
         const managed = plan.profileBinding === undefined
             ? undefined
-            : await managedContainerSession(plan.profileBinding, plan.resources);
+            : yield* (0, backend_ts_1.providerBoundaryEffect)(() => managedContainerSession(plan.profileBinding, plan.resources));
         const provisionToken = managed?.reservation.provisionToken ?? (0, node_crypto_1.randomUUID)();
-        let backend;
-        try {
-            backend = await (0, retry_ts_1.withProvisionRetry)(() => DockerSandbox.create({
+        return yield* effect_1.Effect.gen(function* () {
+            const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => DockerSandbox.create({
                 ...deadlineOptions(context.deadline),
                 runtime: "node24",
                 image: plan.image,
@@ -421,28 +411,26 @@ function materializeDockerImageProviderPlan(plan, context) {
                     },
                     afterStop: managed?.finish,
                 }),
-            }), classifyProvisionError, boundProvisionSlot(context), context.feedback, () => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath));
+            })), classifyProvisionError, boundProvisionSlot(context), context.feedback, (0, backend_ts_1.providerBoundaryEffect)(() => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath)));
             if (managed !== undefined) {
-                await (0, runtime_ts_1.commitDockerProfileReservation)(managed.lease, managed.reservation.reservationId, {
+                yield* (0, backend_ts_1.providerBoundaryEffect)(() => (0, runtime_ts_1.commitDockerProfileReservation)(managed.lease, managed.reservation.reservationId, {
                     containerId: backend.sandboxId,
                     ...(backend.managedNetworkId === undefined ? {} : { networkId: backend.managedNetworkId }),
                     attemptId: context.evalId,
-                });
+                }));
             }
-        }
-        catch (error) {
-            await managed?.finish().catch(() => undefined);
-            throw error;
-        }
-        return wrapSingleSandbox(backend, context, { image: plan.image });
-    });
+            return wrapSingleSandbox(backend, context, { image: plan.image });
+        }).pipe(effect_1.Effect.onError(() => managed === undefined
+            ? effect_1.Effect.void
+            : (0, backend_ts_1.providerBoundaryEffect)(() => managed.finish()).pipe(effect_1.Effect.ignore)));
+    }));
 }
 function materializeE2BProviderPlan(plan, context) {
-    return materializationEffect(context, async () => {
+    return materializationEffect(context, effect_1.Effect.gen(function* () {
         const lifetime = e2bLifetimeRequest(plan.lifetime, context.deadline);
-        const { E2BSandbox, classifyProvisionError, reconcileProvision } = await __niceevalDynamicImport("./e2b.cjs");
+        const { E2BSandbox, classifyProvisionError, reconcileProvision } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./e2b.cjs"));
         const provisionToken = (0, node_crypto_1.randomUUID)();
-        const backend = await (0, retry_ts_1.withProvisionRetry)(() => E2BSandbox.create({
+        const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => E2BSandbox.create({
             ...deadlineOptions(context.deadline),
             runtime: "node24",
             template: plan.template,
@@ -451,33 +439,33 @@ function materializeE2BProviderPlan(plan, context) {
             pathPrepend: plan.pathPrepend,
             provisionToken,
             runIdentity: (0, run_identity_ts_1.currentRunIdentity)(),
-        }), classifyProvisionError, boundProvisionSlot(context), context.feedback, () => reconcileProvision(provisionToken));
+        })), classifyProvisionError, boundProvisionSlot(context), context.feedback, (0, backend_ts_1.providerBoundaryEffect)(() => reconcileProvision(provisionToken)));
         return wrapSingleSandbox(backend, context, { template: plan.template });
-    });
+    }));
 }
 function materializeVercelProviderPlan(plan, context) {
-    return materializationEffect(context, async () => {
-        const { VercelSandbox, classifyProvisionError } = await __niceevalDynamicImport("./vercel.cjs");
-        const backend = await (0, retry_ts_1.withProvisionRetry)(() => VercelSandbox.create({
+    return materializationEffect(context, effect_1.Effect.gen(function* () {
+        const { VercelSandbox, classifyProvisionError } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./vercel.cjs"));
+        const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => VercelSandbox.create({
             ...deadlineOptions(context.deadline),
             runtime: "node24",
             snapshotId: plan.snapshotId,
             lifetimeMs: configuredLifetime(plan.lifetime),
             pathPrepend: plan.pathPrepend,
             feedback: context.feedback,
-        }), classifyProvisionError, boundProvisionSlot(context), context.feedback);
+        })), classifyProvisionError, boundProvisionSlot(context), context.feedback);
         return wrapSingleSandbox(backend, context, { snapshotId: plan.snapshotId });
-    });
+    }));
 }
 function materializeLocalProviderPlan(plan, context) {
-    return materializationEffect(context, async () => {
-        const { LocalSandbox } = await __niceevalDynamicImport("./local.cjs");
-        return wrapSingleSandbox(await LocalSandbox.create({
+    return materializationEffect(context, effect_1.Effect.gen(function* () {
+        const { LocalSandbox } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./local.cjs"));
+        return wrapSingleSandbox(yield* (0, backend_ts_1.providerBoundaryEffect)(() => LocalSandbox.create({
             ...deadlineOptions(context.deadline),
             dir: plan.directory,
             pathPrepend: plan.pathPrepend,
-        }), context, { directory: plan.directory });
-    });
+        })), context, { directory: plan.directory });
+    }));
 }
 function materializeCustomProviderPlan(plan, context, create) {
     return effect_1.Effect.flatMap(create({ deadline: context.deadline, runtime: "node24", feedback: context.feedback }).pipe(effect_1.Effect.mapError((cause) => runtimeFailure(context, "sandbox.materialization-failed", cause))), (sandbox) => effect_1.Effect.try({
@@ -502,6 +490,9 @@ function materializeCustomCaseProviderPlan(plan, context, materialize) {
             const result = validateCustomCaseMaterializeResult(rawResult, plan.services);
             return normalizeMaterialized({
                 sandbox: result.sandbox,
+                // 自定义 case 的显式适配点:author 返回的公共 Sandbox 在这里降成 provider backend,
+                // 供 attempt-scope author facade 使用;resource facade 仍由 normalizeMaterialized 归一。
+                authorBackend: (0, backend_ts_1.customSandboxBackend)(result.sandbox),
                 ...(result.services._tag === "Available" ? { services: result.services.value } : {}),
                 group: result.group,
                 caseKind: "custom",