niceeval 0.13.1 → 0.13.2

package/dist/runner/sandbox-pool.cjs

@@ -26,7 +26,16 @@ class ReusableSandboxPool {
     waiters = [];
     creating = 0;
     stopped = false;
+    /** One physical stop operation owns every instance/finalizer exactly once. */
+    stopCompletion;
     runtimeFailures = [];
+    /**
+     * Whole-Experiment physical cleanup ledger. This is intentionally distinct
+     * from `runtimeFailures`: the latter is a per-Attempt diagnostic channel and
+     * is drained once that Attempt seals, whereas this collection is replayed by
+     * the terminal `stop()` even if an entry was retired long before then.
+     */
+    cleanupFailures = [];
     /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */
     materializationOwnerId;
     /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */
@@ -47,9 +56,21 @@ class ReusableSandboxPool {
         this.groupPluginContext = groupPluginContext;
         this.materializationOwnerId = materializationOwnerId ?? plan.pair.evalId;
     }
-    /** 把整座池登记进调用方 Scope；Invocation 中断与正常结束走同一条 stop finalizer。 */
+    /**
+     * Registers only an awaiter in the outer Invocation Scope. The real stop is
+     * initiated by the Experiment lifecycle before its teardown; if the outer
+     * Scope closes first it joins the same single-flight result rather than
+     * repeating provider or plugin finalizers.
+     */
     managed() {
-        return effect_1.Effect.addFinalizer(() => this.stop()).pipe(effect_1.Effect.as(this));
+        return effect_1.Effect.addFinalizer(() => this.stop().pipe(effect_1.Effect.ignore)).pipe(effect_1.Effect.as(this));
+    }
+    /** Closes admission before the Experiment starts physical cleanup. */
+    freeze() {
+        return effect_1.Effect.sync(() => {
+            this.stopped = true;
+            this.wake();
+        });
     }
     /**
      * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。
@@ -109,29 +130,72 @@ class ReusableSandboxPool {
         });
     }
     stop() {
+        return effect_1.Effect.uninterruptibleMask((restore) => effect_1.Effect.gen(this, function* () {
+            const created = yield* effect_1.Deferred.make();
+            const completion = yield* effect_1.Effect.sync(() => {
+                if (this.stopCompletion !== undefined)
+                    return this.stopCompletion;
+                this.stopCompletion = created;
+                this.stopped = true;
+                this.wake();
+                return created;
+            });
+            // A caller joining an already-started stop remains cancelable. The one
+            // caller that starts it cannot be interrupted between publishing the
+            // Deferred and recording its terminal Exit.
+            if (completion !== created)
+                return yield* restore(effect_1.Deferred.await(completion));
+            // Stop must finish every physical cleanup even if the initiating
+            // Invocation is interrupted. Its recorded Exit is replayed to joiners.
+            const exit = yield* effect_1.Effect.exit(this.stopAll());
+            yield* effect_1.Deferred.done(created, exit);
+            if (effect_1.Exit.isFailure(exit))
+                return yield* effect_1.Effect.failCause(exit.cause);
+        }));
+    }
+    stopAll() {
         return effect_1.Effect.gen(this, function* () {
-            this.stopped = true;
-            this.wake();
-            // 已借出的 lease 仍在执行其 Attempt/cleanup；现在关闭 entry Scope 会把 Sandbox 在
-            // 使用中 teardown。创建中的 entry 尚未进 entries，必须等它落入唯一 retire 路径。
+            // Leases own their Attempt scopes. Wait until each lease has returned
+            // before closing provider scopes; this is also the barrier that makes
+            // pool stop safe to place before Experiment teardown.
             while (this.creating > 0 || this.entries.some((entry) => entry.lifecycle._tag === "Leased")) {
                 yield* this.awaitWake();
             }
-            yield* effect_1.Effect.forEach([...this.entries], (entry) => this.retire(entry), {
+            const exits = [];
+            const retired = yield* effect_1.Effect.forEach([...this.entries], (entry) => effect_1.Effect.exit(this.retire(entry)), {
                 concurrency: "unbounded",
-                discard: true,
             });
+            exits.push(...retired);
             if (this.groupPluginContext !== undefined) {
-                yield* effect_1.Effect.forEach(this.groupPlugins.slice(0, this.activatedGroupPlugins).reverse(), (entry) => entry.teardown === undefined
-                    ? effect_1.Effect.void
-                    : (0, cleanup_timeout_ts_1.cleanupCallback)((signal) => entry.teardown({
+                const groupTeardowns = yield* effect_1.Effect.forEach(this.groupPlugins.slice(0, this.activatedGroupPlugins).reverse(), (entry) => entry.teardown === undefined
+                    ? effect_1.Effect.succeed(effect_1.Exit.void)
+                    : effect_1.Effect.exit((0, cleanup_timeout_ts_1.cleanupCallback)((signal) => entry.teardown({
                         ...this.groupPluginContext,
                         signal,
-                    })).pipe(effect_1.Effect.catchAll((cause) => effect_1.Effect.sync(() => this.feedback.diagnostic({
-                        code: "plugin-lifecycle-teardown-failed",
-                        level: "warning",
-                        message: cause instanceof Error ? cause.message : String(cause),
-                    })))), { discard: true });
+                    }))), { concurrency: "unbounded" });
+                for (const exit of groupTeardowns) {
+                    exits.push(exit);
+                    if (effect_1.Exit.isFailure(exit)) {
+                        this.feedback.diagnostic({
+                            code: "plugin-lifecycle-teardown-failed",
+                            level: "warning",
+                            message: String(effect_1.Cause.squash(exit.cause)),
+                        });
+                    }
+                }
+            }
+            const failures = [];
+            for (const exit of exits) {
+                if (effect_1.Exit.isFailure(exit))
+                    failures.push(effect_1.Cause.squash(exit.cause));
+            }
+            // An entry may have been removed by a failed Attempt release before this
+            // terminal sweep. Replaying the durable pool-local ledger makes that
+            // physical Scope/provider cleanup failure visible to Experiment teardown
+            // and therefore to sharedState lease release.
+            failures.push(...this.cleanupFailures.map((failure) => failure.error));
+            if (failures.length > 0) {
+                return yield* effect_1.Effect.fail(new AggregateError([...new Set(failures)], "Sandbox reuse pool cleanup failed."));
             }
         });
     }
@@ -164,33 +228,48 @@ class ReusableSandboxPool {
                 ? { _tag: "Unlimited" }
                 : { _tag: "Bounded", timeoutMs: Math.max(1, minRemainingMs - cleanup_timeout_ts_1.CLEANUP_TIMEOUT_MS), deadlineAt };
             const entryScope = yield* effect_1.Scope.make();
+            // One wrapper per physical materialization. Both provider feedback and
+            // SandboxLayer hook context must use this exact instance: runtime sends
+            // provider release failures through `feedback`, while
+            // `runTeardownHooks` reports through `hookContext.diagnostic`.
+            const lifecycleFeedback = this.lifecycleFeedback();
+            const lifecycleHookContext = {
+                ...this.setupContext,
+                progress: lifecycleFeedback.progress,
+                diagnostic: lifecycleFeedback.diagnostic,
+            };
             const materialized = yield* effect_1.Scope.extend((0, runtime_ts_1.materializeSandboxRunPlan)({
                 plan: this.plan,
                 evalId: this.materializationOwnerId,
                 deadline,
-                feedback: this.feedback,
+                // Runtime intentionally reports SandboxLayer/provider finalizer errors
+                // as diagnostics so it can continue the remaining finalizers. The pool
+                // must nevertheless retain those physical cleanup failures until its
+                // terminal stop; otherwise an early retire can disappear from
+                // `entries` and incorrectly permit sharedState release.
+                feedback: lifecycleFeedback,
                 signal: this.setupContext.signal,
-                hookContext: this.setupContext,
+                hookContext: lifecycleHookContext,
                 buildLocators,
                 ...(this.agent !== undefined ? { agent: this.agent } : {}),
                 ...(this.runTiming !== undefined ? { runTiming: this.runTiming } : {}),
                 provisionSlot: { _tag: "Detached" },
                 services: this.runtimeServices,
                 release: { _tag: "Stop" },
-            }), entryScope).pipe(effect_1.Effect.onError((cause) => effect_1.Scope.close(entryScope, effect_1.Exit.failCause(cause))));
+            }), entryScope).pipe(effect_1.Effect.onError((cause) => this.closeFailedCreateScope(entryScope, effect_1.Exit.failCause(cause), "sandbox.materialize-cleanup")));
             const sandbox = materialized.sandbox;
             // 能力只能来自 provider 实现:探不到就硬失败,没有通用记账兜底(见
             // docs/feature/sandbox/reuse.md「派发前确认」)。
             const lifetime = (0, backend_ts_1.sandboxReuseCapability)(sandbox);
             if (!lifetime) {
-                yield* effect_1.Scope.close(entryScope, effect_1.Exit.void);
+                yield* this.closeFailedCreateScope(entryScope, effect_1.Exit.void, "sandbox.ensure-lifetime-cleanup");
                 return yield* effect_1.Effect.fail(new Error(`sandboxReuse needs the "${capabilities.provider}" provider to confirm sandbox lifetime, but it does not implement ` +
                     "ensureLifetime(minRemainingMs). Only a provider can prove the lifetime is set on its own backend; the runner " +
                     "will not keep local books for it. Use a provider that implements it (docker / e2b / vercel), or drop sandboxReuse."));
             }
-            const confirmed = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs)).pipe(effect_1.Effect.onError((cause) => effect_1.Scope.close(entryScope, effect_1.Exit.failCause(cause))));
+            const confirmed = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs)).pipe(effect_1.Effect.onError((cause) => this.closeFailedCreateScope(entryScope, effect_1.Exit.failCause(cause), "sandbox.ensure-lifetime-cleanup")));
             if (!confirmed.ready) {
-                yield* effect_1.Scope.close(entryScope, effect_1.Exit.void);
+                yield* this.closeFailedCreateScope(entryScope, effect_1.Exit.void, "sandbox.ensure-lifetime-cleanup");
                 return yield* effect_1.Effect.fail(new Error(`sandboxReuse cannot prepare the "${capabilities.provider}" sandbox: ${confirmed.reason}`));
             }
             const prepared = yield* effect_1.Effect.gen(this, function* () {
@@ -221,7 +300,7 @@ class ReusableSandboxPool {
                     ordinal: 0,
                     lifecycle: { _tag: "Idle" },
                 };
-            }).pipe(effect_1.Effect.onError((cause) => effect_1.Scope.close(entryScope, effect_1.Exit.failCause(cause))));
+            }).pipe(effect_1.Effect.onError((cause) => this.closeFailedCreateScope(entryScope, effect_1.Exit.failCause(cause), "sandbox.prepare-cleanup")));
             return prepared;
         });
     }
@@ -246,18 +325,22 @@ class ReusableSandboxPool {
                     ? settled.release.release
                     : { _tag: "Retire" };
                 if (release._tag === "Retire") {
-                    yield* this.retire(entry);
+                    // The Attempt has already sealed. Do not turn its return finalizer
+                    // into a defect; `retire` persists the physical failure and terminal
+                    // `stop()` replays it to Experiment cleanup/lease release.
+                    yield* this.retire(entry).pipe(effect_1.Effect.catchAll(() => effect_1.Effect.void));
                 }
                 else if (entry.lifecycle._tag !== "Retired") {
                     const reset = yield* effect_1.Effect.either(externalPromise(() => entry.ledger.resetToAnchor()));
                     if (effect_1.Either.isLeft(reset)) {
                         this.runtimeFailures.push(Object.freeze({ stage: "sandbox.reset", error: reset.left }));
+                        this.recordCleanupFailure("sandbox.reset", reset.left);
                         this.feedback.diagnostic({
                             code: "sandbox-reset-failed",
                             level: "warning",
                             message: `Sandbox #${entry.reuseSandbox} reset to anchor failed, retiring the instance: ${(0, util_ts_1.firstLine)((0, util_ts_1.formatThrown)(reset.left))}`,
                         });
-                        yield* this.retire(entry);
+                        yield* this.retire(entry).pipe(effect_1.Effect.catchAll(() => effect_1.Effect.void));
                     }
                     else {
                         entry.lifecycle = { _tag: "Idle" };
@@ -291,11 +374,17 @@ class ReusableSandboxPool {
             const at = this.entries.indexOf(entry);
             if (at >= 0)
                 this.entries.splice(at, 1);
-            yield* effect_1.Scope.close(entry.scope, effect_1.Exit.void).pipe(effect_1.Effect.catchAllCause((cause) => effect_1.Effect.sync(() => this.feedback.diagnostic({
-                code: "sandbox-stop-failed",
-                level: "warning",
-                message: `Sandbox reuse case finalizer failed: ${String(cause)}`,
-            }))));
+            const exit = yield* effect_1.Effect.exit(effect_1.Scope.close(entry.scope, effect_1.Exit.void));
+            if (effect_1.Exit.isFailure(exit)) {
+                const error = this.recordCleanupFailure("sandbox.retire", effect_1.Cause.squash(exit.cause));
+                this.feedback.diagnostic({
+                    code: "sandbox-stop-failed",
+                    level: "warning",
+                    message: `Sandbox reuse case finalizer failed: ${String(error)}`,
+                });
+                this.wake();
+                return yield* effect_1.Effect.fail(error);
+            }
             this.wake();
         });
     }
@@ -313,6 +402,48 @@ class ReusableSandboxPool {
             });
         });
     }
+    /**
+     * A create/ensureLifetime failure can still run provider and Sandbox Scope
+     * finalizers. The entry is not yet in `entries`, so `stopAll()` cannot find
+     * it later; record a close failure now and replay it from the Experiment
+     * lifetime ledger instead of letting an `onError` cleanup failure vanish.
+     */
+    closeFailedCreateScope(scope, exit, stage) {
+        return effect_1.Effect.exit(effect_1.Scope.close(scope, exit)).pipe(effect_1.Effect.flatMap((close) => effect_1.Exit.isFailure(close)
+            ? effect_1.Effect.sync(() => {
+                const error = this.recordCleanupFailure(stage, effect_1.Cause.squash(close.cause));
+                this.feedback.diagnostic({
+                    code: "sandbox-stop-failed",
+                    level: "warning",
+                    message: `Sandbox reuse setup cleanup failed: ${String(error)}`,
+                });
+            })
+            : effect_1.Effect.void));
+    }
+    recordCleanupFailure(stage, cause) {
+        const error = cause instanceof Error ? cause : new Error(String(cause));
+        this.cleanupFailures.push(Object.freeze({ stage, error }));
+        return error;
+    }
+    /**
+     * `materializeSandboxRunPlan` deliberately converts hook/provider cleanup
+     * failures into feedback and continues its Scope.close. Preserve that signal
+     * beside thrown Scope close failures, without changing the public Sandbox
+     * lifecycle API or its diagnostic-only finalizer contract.
+     */
+    lifecycleFeedback() {
+        return {
+            progress: (update) => this.feedback.progress(update),
+            diagnostic: (input) => {
+                this.feedback.diagnostic(input);
+                if (input.code === "sandbox-teardown-failed" ||
+                    input.code === "sandbox-stop-failed" ||
+                    input.code === "plugin-lifecycle-teardown-failed") {
+                    this.recordCleanupFailure("sandbox.lifecycle-diagnostic", new Error(input.message));
+                }
+            },
+        };
+    }
 }
 exports.ReusableSandboxPool = ReusableSandboxPool;
 function externalPromise(run) {

package/dist/runner/sandbox-pool.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-pool.js","sourceRoot":"","sources":["sandbox-pool.ts"],"names":[],"mappings":";;;AAAA,wDAA8D;AAC9D,sDAA4F;AAC5F,kDAA8D;AAC9D,wEAA4E;AAG5E,sDAAqL;AAErL,6DAA2E;AAC3E,2CAAoE;AACpE,wCAAqD;AACrD,mCAA4D;AAqD5D,6DAA6D;AAC7D,MAAa,mBAAmB;IAaC;IAER;IAAmC;IAA2C;IAAmD;IAAuF;IAAuC;IAAuG;IAAwD;IAAqF;IAdvf,OAAO,GAAY,EAAE,CAAC;IACtB,OAAO,GAAsB,EAAE,CAAC;IACzC,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,KAAK,CAAC;IACP,eAAe,GAAwC,EAAE,CAAC;IAC3E,4DAA4D;IAC3C,sBAAsB,CAAS;IAChD,wDAAwD;IAChD,OAAO,GAAG,CAAC,CAAC;IACZ,uBAAuB,GAAG,KAAK,CAAC;IAChC,qBAAqB,CAAU;IAC/B,qBAAqB,GAAG,CAAC,CAAC;IAClC,YAA6B,IAE3B,EAAmB,QAAgB,EAAmB,QAAwB,EAAmB,YAAgC,EAAmB,kBAA0C,uCAA0B,EAAmB,KAAoB,EAAmB,SAAmD,EAAE,sBAA+B,EAAmB,sBAAqC,EAAmB,eAAiD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAmB,kBAAuC;QAFlhB,SAAI,GAAJ,IAAI,CAE/B;QAAmB,aAAQ,GAAR,QAAQ,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAAgB;QAAmB,iBAAY,GAAZ,YAAY,CAAoB;QAAmB,oBAAe,GAAf,eAAe,CAAqD;QAAmB,UAAK,GAAL,KAAK,CAAe;QAAmB,cAAS,GAAT,SAAS,CAA0C;QAAoD,2BAAsB,GAAtB,sBAAsB,CAAe;QAAmB,iBAAY,GAAZ,YAAY,CAAsD;QAAmB,uBAAkB,GAAlB,kBAAkB,CAAqB;QAC3iB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAC7E,CAAC;IACD,8DAA8D;IAC9D,OAAO;QACH,OAAO,eAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,iBAAqC,EAAE,aAA+C;QAC1F,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,MAAM,cAAc,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,uCAAkB,CAAC;YACrE;;;;;;;eAOG;YACH,MAAM,eAAe,GAAG,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;YACxG,SAAS,CAAC;gBACN,IAAI,IAAI,CAAC,OAAO;oBACZ,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBAChF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;gBAC5E,IAAI,KAAK,EAAE,CAAC;oBACR,wDAAwD;oBACxD,iDAAiD;oBACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;oBAC7F,+DAA+D;oBAC/D,0CAA0C;oBAC1C,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACrE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;oBACzD,CAAC;oBACD,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM;wBAC/C,SAAS;oBACb,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC1B,SAAS;gBACb,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;wBACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;wBACvF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC3B,mDAAmD;wBACnD,uDAAuD;wBACvD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;4BACf,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;4BAC5B,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;wBAChF,CAAC;wBACD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;oBAC3D,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;wBACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;wBACnB,IAAI,CAAC,IAAI,EAAE,CAAC;oBAChB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACT,CAAC;gBACD,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,IAAI;QACA,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,iEAAiE;YACjE,0DAA0D;YAC1D,OAAO,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC1F,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,CAAC;YACD,KAAK,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACpE,WAAW,EAAE,WAAW;gBACxB,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACxC,KAAK,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAC3H,CAAC,CAAC,eAAM,CAAC,IAAI;oBACb,CAAC,CAAC,IAAA,oCAAe,EAAC,CAAC,MAAM,EAAE,EAAE,CAAE,KAAK,CAAC,QAAkE,CAAC;wBACpG,GAAG,IAAI,CAAC,kBAAmB;wBAC3B,MAAM;qBACT,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;wBAC3E,IAAI,EAAE,kCAAkC;wBACxC,KAAK,EAAE,SAAS;wBAChB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAClE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,8EAA8E;IAC9E,oBAAoB;QAChB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACO,MAAM,CAAC,cAAsB,EAAE,UAA8B,EAAE,aAA+C;QAClH,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS;gBACxC,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAA8B,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACzE,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;gBACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBAChF,IAAI,CAAC,qBAAqB,GAAG,KAAK,GAAG,CAAC,CAAC;oBACvC,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;wBAC5B,CAAC,CAAC,eAAM,CAAC,IAAI;wBACb,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAE,KAAK,CAAC,KAA+D,CAAC,IAAI,CAAC,kBAAmB,CAAC,CAAC,CAAC,CAAC;gBACnJ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvB,IAAI,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,IAAI,CAAC,qBAAqB,GAAG,cAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACvD,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAA8B,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;YACD,MAAM,YAAY,GAAG,IAAA,uCAA0B,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3J,CAAC;YACD,MAAM,QAAQ,GAA2B,UAAU,KAAK,SAAS;gBAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,uCAAkB,CAAC,EAAE,UAAU,EAAE,CAAC;YACnG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,cAAK,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,cAAK,CAAC,MAAM,CAAC,IAAA,sCAAyB,EAAC;gBAC/D,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,sBAAsB;gBACnC,QAAQ;gBACR,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;gBAChC,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,aAAa;gBACb,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,aAAa,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,eAAe;gBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC5B,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAChG,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;YACrC,wCAAwC;YACxC,yCAAyC;YACzC,MAAM,QAAQ,GAAG,IAAA,mCAAsB,EAAC,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,KAAK,CAAC,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2BAA2B,YAAY,CAAC,QAAQ,oEAAoE;oBACpJ,+GAA+G;oBAC/G,oHAAoH,CAAC,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACxK,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBACnB,KAAK,CAAC,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,IAAI,CAAC,CAAC;gBAC1C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,YAAY,CAAC,QAAQ,cAAc,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACpI,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAA,8BAAkB,EAAC,OAAO,CAAC,CAAC,CAAC;gBACzE,2DAA2D;gBAC3D,wDAAwD;gBACxD,sCAAsC;gBACtC,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;oBAC/B,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,YAAY,CAAC,QAAQ,oHAAoH;wBAC3M,mFAAmF,CAAC,CAAC,CAAC;gBAC9F,CAAC;gBACD,kCAAkC;gBAClC,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gCAAgC,YAAY,CAAC,QAAQ,mCAAmC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACtJ,CAAC;gBACD,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,KAAK,SAAS;oBAC1D,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO;oBAChB,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACpC,OAAO;oBACH,OAAO;oBACP,aAAa,EAAE,YAAY,CAAC,aAAa;oBACzC,KAAK,EAAE,UAAU;oBACjB,QAAQ;oBACR,MAAM;oBACN,YAAY;oBACZ,OAAO,EAAE,CAAC;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAA2B;iBACvD,CAAC;YACN,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAK,CAAC,KAAK,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,OAAO,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC;IACP,CAAC;IACO,KAAK,CAAC,KAAY,EAAE,UAA8B;QACtD,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACrC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YACnB,IAAA,kCAAoB,EAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAChD,IAAI,SAAS,GAAmB;gBAC5B,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;aACnC,CAAC;YACF,wEAAwE;YACxE,2DAA2D;YAC3D,yCAAyC;YACzC,KAAK,CAAC,CAAC,eAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACvD,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW;oBAC9B,OAAO;gBACX,MAAM,OAAO,GAAG,SAAS,CAAC;gBAC1B,SAAS,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAyB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;oBACtE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;oBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBACzB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5B,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;qBACI,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;oBACxF,IAAI,eAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;wBACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;wBACxF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;4BACrB,IAAI,EAAE,sBAAsB;4BAC5B,KAAK,EAAE,SAAS;4BAChB,OAAO,EAAE,YAAY,KAAK,CAAC,YAAY,mDAAmD,IAAA,mBAAS,EAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;yBAClI,CAAC,CAAC;wBACH,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC9B,CAAC;yBACI,CAAC;wBACF,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACvC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC,CAAC,CAAC;YACJ,wEAAwE;YACxE,kCAAkC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAA,gDAA0B,GAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAA,kCAAuB,EAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9G,OAAO;gBACH,OAAO,EAAE,aAAa;gBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,YAAY,EAAE,KAAK,CAAC,OAAO;gBAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBAClC,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;wBACzB,OAAO;oBACX,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC1E,CAAC,CAAC;aACL,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IACD;oDACgD;IACxC,MAAM,CAAC,KAAY;QACvB,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;gBAClC,OAAO;YACX,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC;gBACP,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/B,KAAK,CAAC,CAAC,cAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,aAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACvH,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE;aACnE,CAAC,CAAC,CAAC,CAAC,CAAC;YACN,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IACO,IAAI;QACR,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IACO,SAAS;QACb,OAAO,eAAM,CAAC,KAAK,CAAO,CAAC,MAAM,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,KAAK,IAAI,CAAC;oBACV,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;CACJ;AA5RD,kDA4RC;AACD,SAAS,eAAe,CAAQ,GAAyB;IACrD,OAAO,eAAM,CAAC,UAAU,CAAC;QACrB,GAAG,EAAE,GAAG;QACR,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC9E,CAAC,CAAC;AACP,CAAC","sourcesContent":["import { applyCommandDeadline } from \"../sandbox/deadline.ts\";\nimport { sandboxReuseCapability, type SandboxProviderBackend } from \"../sandbox/backend.ts\";\nimport { makeSandboxAuthorFacade } from \"../sandbox/paths.ts\";\nimport { makeSandboxRequestExecutor } from \"../sandbox/request-executor.ts\";\nimport type { LinkedRunPlan } from \"../sandbox/plan.ts\";\nimport type { BuildKey } from \"../sandbox/identity.ts\";\nimport { materializeSandboxRunPlan, liveSandboxRuntimeServices, sandboxRuntimeCapabilities, type SandboxRuntimeDeadline, type SandboxRuntimeServices, } from \"../sandbox/runtime.ts\";\nimport type { JsonValue, Sandbox, SandboxAgent, SandboxHookContext, SandboxReuseCapability, ScopedFeedback } from \"../types.ts\";\nimport { CLEANUP_TIMEOUT_MS, cleanupCallback } from \"./cleanup-timeout.ts\";\nimport { createChangeLedger, type ChangeLedger } from \"./ledger.ts\";\nimport { firstLine, formatThrown } from \"../util.ts\";\nimport { Cause, Effect, Either, Exit, Scope } from \"effect\";\nimport type { GroupPluginContext, LinkedPluginLifecycle } from \"../plugin/contracts.ts\";\nexport interface ReusableSandboxLease {\n    readonly sandbox: Sandbox;\n    readonly reuseSandbox: number;\n    readonly reuseOrdinal: number;\n    /** 提交本次 Attempt 的归还决策；Scope 退出负责实际 reset/retire，漏提交默认 Retire。 */\n    commit(disposition: ReusableLeaseRelease): Effect.Effect<void>;\n}\nexport type ReusableLeaseRelease = {\n    readonly _tag: \"Reset\";\n} | {\n    readonly _tag: \"Retire\";\n};\n/** A post-attempt physical lifecycle failure observed after its result sealed. */\nexport interface ReusableSandboxPoolRuntimeFailure {\n    readonly stage: \"sandbox.reset\";\n    readonly error: Error;\n}\ntype EntryLifecycle = {\n    readonly _tag: \"Idle\";\n} | {\n    readonly _tag: \"Leased\";\n} | {\n    readonly _tag: \"Retired\";\n};\ninterface Entry {\n    /** 资源面 Sandbox:registry / stop / suspend / ledger / lifetime / deadline 都用它。 */\n    sandbox: Sandbox;\n    /** 物化时的 raw provider backend:只用于逐次租借构建 author facade,不保存 facade/executor。 */\n    authorBackend: SandboxProviderBackend;\n    scope: Scope.CloseableScope;\n    /** provider 自己实现的寿命确认;没有这条能力的实例根本进不来(见 create)。 */\n    lifetime: SandboxReuseCapability;\n    ledger: ChangeLedger;\n    reuseSandbox: number;\n    ordinal: number;\n    lifecycle: EntryLifecycle;\n}\n/** Scope 尚未关闭前，lease 只能在这里两种归还意图之间演进。 */\ntype LeaseReleaseDecision = {\n    readonly _tag: \"Uncommitted\";\n} | {\n    readonly _tag: \"Committed\";\n    readonly release: ReusableLeaseRelease;\n};\n/** 漏 commit 保持 Uncommitted，finalizer 因而 Retire；不再用 boolean 记账。 */\ntype LeaseLifecycle = {\n    readonly _tag: \"Open\";\n    readonly release: LeaseReleaseDecision;\n} | {\n    readonly _tag: \"Finalized\";\n};\n/** 一个 pair-owned physical plan 的按需复用池；实例始终独占借给单条 Attempt。 */\nexport class ReusableSandboxPool {\n    private readonly entries: Entry[] = [];\n    private readonly waiters: Array<() => void> = [];\n    private creating = 0;\n    private stopped = false;\n    private readonly runtimeFailures: ReusableSandboxPoolRuntimeFailure[] = [];\n    /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */\n    private readonly materializationOwnerId: string;\n    /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */\n    private created = 0;\n    private groupPluginSetupStarted = false;\n    private groupPluginSetupError: unknown;\n    private activatedGroupPlugins = 0;\n    constructor(private readonly plan: Extract<LinkedRunPlan, {\n        readonly _tag: \"Sandbox\";\n    }>, private readonly capacity: number, private readonly feedback: ScopedFeedback, private readonly setupContext: SandboxHookContext, private readonly runtimeServices: SandboxRuntimeServices = liveSandboxRuntimeServices, private readonly agent?: SandboxAgent, private readonly runTiming?: import(\"./timing.ts\").RunTimingRecorder, materializationOwnerId?: string, private readonly nextReuseSandboxNumber?: () => number, private readonly groupPlugins: readonly LinkedPluginLifecycle[] = Object.freeze([]), private readonly groupPluginContext?: GroupPluginContext) {\n        this.materializationOwnerId = materializationOwnerId ?? plan.pair.evalId;\n    }\n    /** 把整座池登记进调用方 Scope；Invocation 中断与正常结束走同一条 stop finalizer。 */\n    managed(): Effect.Effect<this, never, Scope.Scope> {\n        return Effect.addFinalizer(() => this.stop()).pipe(Effect.as(this));\n    }\n    /**\n     * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。\n     * `undefined` = 四层都没声明上限:请求的寿命只能覆盖收尾预留——Attempt 本身没有 deadline,\n     * 池无从知道它要跑多久,也不替它编一个数。此后实例被 provider 按自己的 `lifetimeMs` 回收\n     * 就是「不声明上限」的代价(两种时间的分界见 docs/feature/sandbox/reuse.md)。\n     */\n    acquire(attemptDeadlineMs: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<ReusableSandboxLease, Error | import(\"../sandbox/runtime.ts\").SandboxRuntimeMaterializationError, Scope.Scope> {\n        return Effect.gen(this, function* () {\n            const minRemainingMs = (attemptDeadlineMs ?? 0) + CLEANUP_TIMEOUT_MS;\n            /**\n             * 借出期内单条命令的上限从这条线派生(`undefined` = 四层都没声明上限,照旧不发明一条线)。\n             * 实例活得比 attempt 长,所以这条线必须**每次借出重设**——只在 create 时给一次的话,\n             * 第二条 attempt 起就落回 provider SDK 的默认值(e2b 是 60 秒),实验声明的 timeoutMs\n             * 完全不生效(见 sandbox/deadline.ts 的 `SandboxCommandDeadline`)。\n             * 用 minRemainingMs 而不是 attemptDeadlineMs:归还时的分类账复位跑在同一条线下,\n             * 不至于一还回来就撞一条已经过期的线。\n             */\n            const leaseDeadlineAt = attemptDeadlineMs === undefined ? undefined : () => Date.now() + minRemainingMs;\n            for (;;) {\n                if (this.stopped)\n                    return yield* Effect.fail(new Error(\"sandbox reuse pool has been stopped\"));\n                const ready = this.entries.find((entry) => entry.lifecycle._tag === \"Idle\");\n                if (ready) {\n                    // 派发前确认:请求足以覆盖 Attempt deadline 与收尾预留的寿命。不 ready 就停掉这台、\n                    // 交给下一轮创建替代实例(替代实例在 create 里再确认一次,还不行就报错,不反复重建)。\n                    const lifetime = yield* externalPromise(() => ready.lifetime.ensureLifetime(minRemainingMs));\n                    // lifetime 检查是异步 provider I/O；其间 stop() 或另一条 release 可能已经退休这台。\n                    // 只有仍是 Idle 的实例才能真正借出，stop 后让下一轮在入口处统一失败。\n                    if (lifetime.ready && !this.stopped && ready.lifecycle._tag === \"Idle\") {\n                        return yield* this.lease(ready, leaseDeadlineAt?.());\n                    }\n                    if (this.stopped || ready.lifecycle._tag !== \"Idle\")\n                        continue;\n                    yield* this.retire(ready);\n                    continue;\n                }\n                if (this.entries.length + this.creating < this.capacity) {\n                    this.creating += 1;\n                    return yield* Effect.gen(this, function* () {\n                        const created = yield* this.create(minRemainingMs, leaseDeadlineAt?.(), buildLocators);\n                        this.entries.push(created);\n                        // stop 可能在物化期间开始。把刚创建的 entry 先纳入池，再由唯一 retire 路径关闭\n                        // 它自己的 Scope；绝不能把它借给已停止的池，也不能让 stop 在 creating=0 时漏掉它。\n                        if (this.stopped) {\n                            yield* this.retire(created);\n                            return yield* Effect.fail(new Error(\"sandbox reuse pool has been stopped\"));\n                        }\n                        return yield* this.lease(created, leaseDeadlineAt?.());\n                    }).pipe(Effect.ensuring(Effect.sync(() => {\n                        this.creating -= 1;\n                        this.wake();\n                    })));\n                }\n                yield* this.awaitWake();\n            }\n        });\n    }\n    stop(): Effect.Effect<void> {\n        return Effect.gen(this, function* () {\n            this.stopped = true;\n            this.wake();\n            // 已借出的 lease 仍在执行其 Attempt/cleanup；现在关闭 entry Scope 会把 Sandbox 在\n            // 使用中 teardown。创建中的 entry 尚未进 entries，必须等它落入唯一 retire 路径。\n            while (this.creating > 0 || this.entries.some((entry) => entry.lifecycle._tag === \"Leased\")) {\n                yield* this.awaitWake();\n            }\n            yield* Effect.forEach([...this.entries], (entry) => this.retire(entry), {\n                concurrency: \"unbounded\",\n                discard: true,\n            });\n            if (this.groupPluginContext !== undefined) {\n                yield* Effect.forEach(this.groupPlugins.slice(0, this.activatedGroupPlugins).reverse(), (entry) => entry.teardown === undefined\n                    ? Effect.void\n                    : cleanupCallback((signal) => (entry.teardown as (context: GroupPluginContext) => void | Promise<void>)({\n                        ...this.groupPluginContext!,\n                        signal,\n                    })).pipe(Effect.catchAll((cause) => Effect.sync(() => this.feedback.diagnostic({\n                        code: \"plugin-lifecycle-teardown-failed\",\n                        level: \"warning\",\n                        message: cause instanceof Error ? cause.message : String(cause),\n                    })))), { discard: true });\n            }\n        });\n    }\n    /** Drained by the scheduler after the lease Scope sealed the prior result. */\n    drainRuntimeFailures(): readonly ReusableSandboxPoolRuntimeFailure[] {\n        return Object.freeze(this.runtimeFailures.splice(0));\n    }\n    private create(minRemainingMs: number, deadlineAt: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<Entry, Error | import(\"../sandbox/runtime.ts\").SandboxRuntimeMaterializationError> {\n        return Effect.gen(this, function* () {\n            if (this.groupPluginSetupError !== undefined)\n                return yield* Effect.fail(this.groupPluginSetupError as Error);\n            if (!this.groupPluginSetupStarted && this.groupPluginContext !== undefined) {\n                this.groupPluginSetupStarted = true;\n                const setup = yield* Effect.exit(Effect.forEach(this.groupPlugins, (entry, index) => {\n                    this.activatedGroupPlugins = index + 1;\n                    return entry.setup === undefined\n                        ? Effect.void\n                        : externalPromise(() => Promise.resolve((entry.setup as (context: GroupPluginContext) => void | Promise<void>)(this.groupPluginContext!)));\n                }, { discard: true }));\n                if (Exit.isFailure(setup)) {\n                    this.groupPluginSetupError = Cause.squash(setup.cause);\n                    return yield* Effect.fail(this.groupPluginSetupError as Error);\n                }\n            }\n            const capabilities = sandboxRuntimeCapabilities(this.plan);\n            if (capabilities.reuse._tag === \"Unsupported\") {\n                return yield* Effect.fail(new Error(`sandboxReuse is unsupported by provider ${JSON.stringify(capabilities.provider)}: ${capabilities.reuse.reason}`));\n            }\n            const deadline: SandboxRuntimeDeadline = deadlineAt === undefined\n                ? { _tag: \"Unlimited\" }\n                : { _tag: \"Bounded\", timeoutMs: Math.max(1, minRemainingMs - CLEANUP_TIMEOUT_MS), deadlineAt };\n            const entryScope = yield* Scope.make();\n            const materialized = yield* Scope.extend(materializeSandboxRunPlan({\n                plan: this.plan,\n                evalId: this.materializationOwnerId,\n                deadline,\n                feedback: this.feedback,\n                signal: this.setupContext.signal,\n                hookContext: this.setupContext,\n                buildLocators,\n                ...(this.agent !== undefined ? { agent: this.agent } : {}),\n                ...(this.runTiming !== undefined ? { runTiming: this.runTiming } : {}),\n                provisionSlot: { _tag: \"Detached\" },\n                services: this.runtimeServices,\n                release: { _tag: \"Stop\" },\n            }), entryScope).pipe(Effect.onError((cause) => Scope.close(entryScope, Exit.failCause(cause))));\n            const sandbox = materialized.sandbox;\n            // 能力只能来自 provider 实现:探不到就硬失败,没有通用记账兜底(见\n            // docs/feature/sandbox/reuse.md「派发前确认」)。\n            const lifetime = sandboxReuseCapability(sandbox);\n            if (!lifetime) {\n                yield* Scope.close(entryScope, Exit.void);\n                return yield* Effect.fail(new Error(`sandboxReuse needs the \"${capabilities.provider}\" provider to confirm sandbox lifetime, but it does not implement ` +\n                    \"ensureLifetime(minRemainingMs). Only a provider can prove the lifetime is set on its own backend; the runner \" +\n                    \"will not keep local books for it. Use a provider that implements it (docker / e2b / vercel), or drop sandboxReuse.\"));\n            }\n            const confirmed = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs)).pipe(Effect.onError((cause) => Scope.close(entryScope, Exit.failCause(cause))));\n            if (!confirmed.ready) {\n                yield* Scope.close(entryScope, Exit.void);\n                return yield* Effect.fail(new Error(`sandboxReuse cannot prepare the \"${capabilities.provider}\" sandbox: ${confirmed.reason}`));\n            }\n            const prepared = yield* Effect.gen(this, function* () {\n                const ledger = yield* externalPromise(() => createChangeLedger(sandbox));\n                // root 执行身份下题间 reset 永不安全(Agent 能读上一条 Attempt 留下的私有分类账对象);\n                // 在实例进池、第一条 Attempt 派发前就拒绝,而不是等到归还时才在 resetToAnchor() 里\n                // 暴露(那样首条 Attempt 已经跑完,失败还可能被静默退休吞掉)。\n                if (ledger.rootExecutionIdentity) {\n                    return yield* Effect.fail(new Error(`sandboxReuse cannot reuse the \"${capabilities.provider}\" sandbox: the Agent's execution identity is root and could read private ledger objects left by earlier attempts; ` +\n                        \"use a non-root execution user (declare USER in the image) or disable sandboxReuse\"));\n                }\n                // 建分类账会烧掉寿命:备好之后再确认一次。这次不够就报错收场——\n                // 反复创建同样的替代实例只会反复烧同样的时间(见 reuse.md「派发前确认」)。\n                const afterSetup = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs));\n                if (!afterSetup.ready) {\n                    return yield* Effect.fail(new Error(`sandboxReuse cannot use the \"${capabilities.provider}\" sandbox after baseline setup: ${afterSetup.reason}`));\n                }\n                const reuseSandbox = this.nextReuseSandboxNumber === undefined\n                    ? ++this.created\n                    : this.nextReuseSandboxNumber();\n                return {\n                    sandbox,\n                    authorBackend: materialized.authorBackend,\n                    scope: entryScope,\n                    lifetime,\n                    ledger,\n                    reuseSandbox,\n                    ordinal: 0,\n                    lifecycle: { _tag: \"Idle\" } satisfies EntryLifecycle,\n                };\n            }).pipe(Effect.onError((cause) => Scope.close(entryScope, Exit.failCause(cause))));\n            return prepared;\n        });\n    }\n    private lease(entry: Entry, deadlineAt: number | undefined): Effect.Effect<ReusableSandboxLease, never, Scope.Scope> {\n        return Effect.gen(this, function* () {\n            entry.lifecycle = { _tag: \"Leased\" };\n            entry.ordinal += 1;\n            applyCommandDeadline(entry.sandbox, deadlineAt);\n            let lifecycle: LeaseLifecycle = {\n                _tag: \"Open\",\n                release: { _tag: \"Uncommitted\" },\n            };\n            // 先登记 release/reset finalizer:executor/facade 的封闭 finalizer 在其后登记,Scope\n            // 关闭时按 LIFO 先中断在飞请求、封闭旧 facade,再对资源面执行 reset/retire——reset\n            // 期间不会再有旧 facade 的请求借道写入 ledger/workdir。\n            yield* Effect.addFinalizer(() => Effect.gen(this, function* () {\n                if (lifecycle._tag === \"Finalized\")\n                    return;\n                const settled = lifecycle;\n                lifecycle = { _tag: \"Finalized\" };\n                const release: ReusableLeaseRelease = settled.release._tag === \"Committed\"\n                    ? settled.release.release\n                    : { _tag: \"Retire\" };\n                if (release._tag === \"Retire\") {\n                    yield* this.retire(entry);\n                }\n                else if (entry.lifecycle._tag !== \"Retired\") {\n                    const reset = yield* Effect.either(externalPromise(() => entry.ledger.resetToAnchor()));\n                    if (Either.isLeft(reset)) {\n                        this.runtimeFailures.push(Object.freeze({ stage: \"sandbox.reset\", error: reset.left }));\n                        this.feedback.diagnostic({\n                            code: \"sandbox-reset-failed\",\n                            level: \"warning\",\n                            message: `Sandbox #${entry.reuseSandbox} reset to anchor failed, retiring the instance: ${firstLine(formatThrown(reset.left))}`,\n                        });\n                        yield* this.retire(entry);\n                    }\n                    else {\n                        entry.lifecycle = { _tag: \"Idle\" };\n                    }\n                }\n                this.wake();\n            }));\n            // 每次租借在当前 Attempt Scope 新建 executor 与 author facade:上一轮 facade/executor\n            // 不跨租借复用,不把旧 Runtime 带进新 Attempt。\n            const executor = yield* makeSandboxRequestExecutor();\n            const authorSandbox = makeSandboxAuthorFacade(entry.authorBackend, executor, this.plan.providerPlan.provider);\n            return {\n                sandbox: authorSandbox,\n                reuseSandbox: entry.reuseSandbox,\n                reuseOrdinal: entry.ordinal,\n                commit: (release) => Effect.sync(() => {\n                    if (lifecycle._tag !== \"Open\")\n                        return;\n                    lifecycle = { ...lifecycle, release: { _tag: \"Committed\", release } };\n                }),\n            };\n        });\n    }\n    /** 淘汰一台实例:停资源组并移出池——留在池里会占满容量,\n     *  让后续 acquire 既等不到空闲实例、也创建不出替代实例(等待者永远醒不来)。 */\n    private retire(entry: Entry): Effect.Effect<void> {\n        return Effect.gen(this, function* () {\n            if (entry.lifecycle._tag === \"Retired\")\n                return;\n            entry.lifecycle = { _tag: \"Retired\" };\n            const at = this.entries.indexOf(entry);\n            if (at >= 0)\n                this.entries.splice(at, 1);\n            yield* Scope.close(entry.scope, Exit.void).pipe(Effect.catchAllCause((cause) => Effect.sync(() => this.feedback.diagnostic({\n                code: \"sandbox-stop-failed\",\n                level: \"warning\",\n                message: `Sandbox reuse case finalizer failed: ${String(cause)}`,\n            }))));\n            this.wake();\n        });\n    }\n    private wake(): void {\n        this.waiters.splice(0).forEach((resolve) => resolve());\n    }\n    private awaitWake(): Effect.Effect<void> {\n        return Effect.async<void>((resume) => {\n            const wake = () => resume(Effect.void);\n            this.waiters.push(wake);\n            return Effect.sync(() => {\n                const index = this.waiters.indexOf(wake);\n                if (index >= 0)\n                    this.waiters.splice(index, 1);\n            });\n        });\n    }\n}\nfunction externalPromise<Value>(run: () => Promise<Value>): Effect.Effect<Value, Error> {\n    return Effect.tryPromise({\n        try: run,\n        catch: (cause) => cause instanceof Error ? cause : new Error(String(cause)),\n    });\n}\n"]}
+{"version":3,"file":"sandbox-pool.js","sourceRoot":"","sources":["sandbox-pool.ts"],"names":[],"mappings":";;;AAAA,wDAA8D;AAC9D,sDAA4F;AAC5F,kDAA8D;AAC9D,wEAA4E;AAG5E,sDAAqL;AAErL,6DAA2E;AAC3E,2CAAoE;AACpE,wCAAqD;AACrD,mCAAsE;AAgEtE,6DAA6D;AAC7D,MAAa,mBAAmB;IAsBC;IAER;IAAmC;IAA2C;IAAmD;IAAuF;IAAuC;IAAuG;IAAwD;IAAqF;IAvBvf,OAAO,GAAY,EAAE,CAAC;IACtB,OAAO,GAAsB,EAAE,CAAC;IACzC,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,KAAK,CAAC;IACxB,8EAA8E;IACtE,cAAc,CAA+C;IACpD,eAAe,GAAwC,EAAE,CAAC;IAC3E;;;;;OAKG;IACc,eAAe,GAAwC,EAAE,CAAC;IAC3E,4DAA4D;IAC3C,sBAAsB,CAAS;IAChD,wDAAwD;IAChD,OAAO,GAAG,CAAC,CAAC;IACZ,uBAAuB,GAAG,KAAK,CAAC;IAChC,qBAAqB,CAAU;IAC/B,qBAAqB,GAAG,CAAC,CAAC;IAClC,YAA6B,IAE3B,EAAmB,QAAgB,EAAmB,QAAwB,EAAmB,YAAgC,EAAmB,kBAA0C,uCAA0B,EAAmB,KAAoB,EAAmB,SAAmD,EAAE,sBAA+B,EAAmB,sBAAqC,EAAmB,eAAiD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAmB,kBAAuC;QAFlhB,SAAI,GAAJ,IAAI,CAE/B;QAAmB,aAAQ,GAAR,QAAQ,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAAgB;QAAmB,iBAAY,GAAZ,YAAY,CAAoB;QAAmB,oBAAe,GAAf,eAAe,CAAqD;QAAmB,UAAK,GAAL,KAAK,CAAe;QAAmB,cAAS,GAAT,SAAS,CAA0C;QAAoD,2BAAsB,GAAtB,sBAAsB,CAAe;QAAmB,iBAAY,GAAZ,YAAY,CAAsD;QAAmB,uBAAkB,GAAlB,kBAAkB,CAAqB;QAC3iB,IAAI,CAAC,sBAAsB,GAAG,sBAAsB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAC7E,CAAC;IACD;;;;;OAKG;IACH,OAAO;QACH,OAAO,eAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,sEAAsE;IACtE,MAAM;QACF,OAAO,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACpB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IACD;;;;;OAKG;IACH,OAAO,CAAC,iBAAqC,EAAE,aAA+C;QAC1F,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,MAAM,cAAc,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,uCAAkB,CAAC;YACrE;;;;;;;eAOG;YACH,MAAM,eAAe,GAAG,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;YACxG,SAAS,CAAC;gBACN,IAAI,IAAI,CAAC,OAAO;oBACZ,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;gBAChF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;gBAC5E,IAAI,KAAK,EAAE,CAAC;oBACR,wDAAwD;oBACxD,iDAAiD;oBACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;oBAC7F,+DAA+D;oBAC/D,0CAA0C;oBAC1C,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACrE,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;oBACzD,CAAC;oBACD,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM;wBAC/C,SAAS;oBACb,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC1B,SAAS;gBACb,CAAC;gBACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;wBACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,eAAe,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;wBACvF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC3B,mDAAmD;wBACnD,uDAAuD;wBACvD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;4BACf,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;4BAC5B,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;wBAChF,CAAC;wBACD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;oBAC3D,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;wBACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;wBACnB,IAAI,CAAC,IAAI,EAAE,CAAC;oBAChB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACT,CAAC;gBACD,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,IAAI;QACA,OAAO,eAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YACrE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAQ,CAAC,IAAI,EAAiB,CAAC;YACtD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;oBACjC,OAAO,IAAI,CAAC,cAAc,CAAC;gBAC/B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;gBAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC;YACnB,CAAC,CAAC,CAAC;YACH,uEAAuE;YACvE,qEAAqE;YACrE,4CAA4C;YAC5C,IAAI,UAAU,KAAK,OAAO;gBACtB,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,iBAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YACtD,iEAAiE;YACjE,uEAAuE;YACvE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAChD,KAAK,CAAC,CAAC,iBAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,aAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC,CAAC;IACR,CAAC;IACO,OAAO;QACX,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,sEAAsE;YACtE,sEAAsE;YACtE,sDAAsD;YACtD,OAAO,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAC1F,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,KAAK,GAA+B,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;gBACjG,WAAW,EAAE,WAAW;aAC3B,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YACvB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAClJ,CAAC,CAAC,eAAM,CAAC,OAAO,CAAC,aAAI,CAAC,IAAI,CAAC;oBAC3B,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAA,oCAAe,EAAC,CAAC,MAAM,EAAE,EAAE,CAAE,KAAK,CAAC,QAAkE,CAAC;wBAChH,GAAG,IAAI,CAAC,kBAAmB;wBAC3B,MAAM;qBACT,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBACxC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;oBAChC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjB,IAAI,aAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;4BACrB,IAAI,EAAE,kCAAkC;4BACxC,KAAK,EAAE,SAAS;4BAChB,OAAO,EAAE,MAAM,CAAC,cAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;yBAC5C,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAc,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,aAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBACpB,QAAQ,CAAC,IAAI,CAAC,cAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,CAAC;YACD,yEAAyE;YACzE,qEAAqE;YACrE,yEAAyE;YACzE,8CAA8C;YAC9C,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACvE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,oCAAoC,CAAC,CAAC,CAAC;YAChH,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IACD,8EAA8E;IAC9E,oBAAoB;QAChB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACO,MAAM,CAAC,cAAsB,EAAE,UAA8B,EAAE,aAA+C;QAClH,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS;gBACxC,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAA8B,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,CAAC,uBAAuB,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;gBACzE,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;gBACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;oBAChF,IAAI,CAAC,qBAAqB,GAAG,KAAK,GAAG,CAAC,CAAC;oBACvC,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;wBAC5B,CAAC,CAAC,eAAM,CAAC,IAAI;wBACb,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAE,KAAK,CAAC,KAA+D,CAAC,IAAI,CAAC,kBAAmB,CAAC,CAAC,CAAC,CAAC;gBACnJ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvB,IAAI,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,IAAI,CAAC,qBAAqB,GAAG,cAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACvD,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAA8B,CAAC,CAAC;gBACnE,CAAC;YACL,CAAC;YACD,MAAM,YAAY,GAAG,IAAA,uCAA0B,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3J,CAAC;YACD,MAAM,QAAQ,GAA2B,UAAU,KAAK,SAAS;gBAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE;gBACvB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,cAAc,GAAG,uCAAkB,CAAC,EAAE,UAAU,EAAE,CAAC;YACnG,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,cAAK,CAAC,IAAI,EAAE,CAAC;YACvC,uEAAuE;YACvE,wEAAwE;YACxE,sDAAsD;YACtD,+DAA+D;YAC/D,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACnD,MAAM,oBAAoB,GAAuB;gBAC7C,GAAG,IAAI,CAAC,YAAY;gBACpB,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gBACpC,UAAU,EAAE,iBAAiB,CAAC,UAAU;aAC3C,CAAC;YACF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,cAAK,CAAC,MAAM,CAAC,IAAA,sCAAyB,EAAC;gBAC/D,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,IAAI,CAAC,sBAAsB;gBACnC,QAAQ;gBACR,uEAAuE;gBACvE,uEAAuE;gBACvE,qEAAqE;gBACrE,8DAA8D;gBAC9D,wDAAwD;gBACxD,QAAQ,EAAE,iBAAiB;gBAC3B,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM;gBAChC,WAAW,EAAE,oBAAoB;gBACjC,aAAa;gBACb,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,aAAa,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;gBACnC,QAAQ,EAAE,IAAI,CAAC,eAAe;gBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC5B,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC;YAC/I,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;YACrC,wCAAwC;YACxC,yCAAyC;YACzC,MAAM,QAAQ,GAAG,IAAA,mCAAsB,EAAC,OAAO,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACZ,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,aAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;gBAC7F,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2BAA2B,YAAY,CAAC,QAAQ,oEAAoE;oBACpJ,+GAA+G;oBAC/G,oHAAoH,CAAC,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,iCAAiC,CAAC,CAAC,CAAC,CAAC;YAC3N,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBACnB,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,aAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAC;gBAC7F,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,YAAY,CAAC,QAAQ,cAAc,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACpI,CAAC;YACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAA,8BAAkB,EAAC,OAAO,CAAC,CAAC,CAAC;gBACzE,2DAA2D;gBAC3D,wDAAwD;gBACxD,sCAAsC;gBACtC,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;oBAC/B,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,YAAY,CAAC,QAAQ,oHAAoH;wBAC3M,mFAAmF,CAAC,CAAC,CAAC;gBAC9F,CAAC;gBACD,kCAAkC;gBAClC,4CAA4C;gBAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;gBACzF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACpB,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gCAAgC,YAAY,CAAC,QAAQ,mCAAmC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACtJ,CAAC;gBACD,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,KAAK,SAAS;oBAC1D,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO;oBAChB,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACpC,OAAO;oBACH,OAAO;oBACP,aAAa,EAAE,YAAY,CAAC,aAAa;oBACzC,KAAK,EAAE,UAAU;oBACjB,QAAQ;oBACR,MAAM;oBACN,YAAY;oBACZ,OAAO,EAAE,CAAC;oBACV,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAA2B;iBACvD,CAAC;YACN,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,EAAE,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC;YAC9H,OAAO,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC;IACP,CAAC;IACO,KAAK,CAAC,KAAY,EAAE,UAA8B;QACtD,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACrC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;YACnB,IAAA,kCAAoB,EAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAChD,IAAI,SAAS,GAAmB;gBAC5B,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;aACnC,CAAC;YACF,wEAAwE;YACxE,2DAA2D;YAC3D,yCAAyC;YACzC,KAAK,CAAC,CAAC,eAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;gBACvD,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW;oBAC9B,OAAO;gBACX,MAAM,OAAO,GAAG,SAAS,CAAC;gBAC1B,SAAS,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAyB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;oBACtE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;oBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBACzB,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5B,mEAAmE;oBACnE,qEAAqE;oBACrE,2DAA2D;oBAC3D,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvE,CAAC;qBACI,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;oBACxF,IAAI,eAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;wBACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;wBACxF,IAAI,CAAC,oBAAoB,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;wBACvD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;4BACrB,IAAI,EAAE,sBAAsB;4BAC5B,KAAK,EAAE,SAAS;4BAChB,OAAO,EAAE,YAAY,KAAK,CAAC,YAAY,mDAAmD,IAAA,mBAAS,EAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;yBAClI,CAAC,CAAC;wBACH,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC,CAAC;oBACvE,CAAC;yBACI,CAAC;wBACF,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACvC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC,CAAC,CAAC;YACJ,wEAAwE;YACxE,kCAAkC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAA,gDAA0B,GAAE,CAAC;YACrD,MAAM,aAAa,GAAG,IAAA,kCAAuB,EAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9G,OAAO;gBACH,OAAO,EAAE,aAAa;gBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,YAAY,EAAE,KAAK,CAAC,OAAO;gBAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBAClC,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;wBACzB,OAAO;oBACX,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC1E,CAAC,CAAC;aACL,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IACD;oDACgD;IACxC,MAAM,CAAC,KAAY;QACvB,OAAO,eAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC;YAC7B,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;gBAClC,OAAO;YACX,KAAK,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC;gBACP,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,cAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,aAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACrE,IAAI,aAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,cAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACpF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE;iBACnE,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACP,CAAC;IACO,IAAI;QACR,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IACO,SAAS;QACb,OAAO,eAAM,CAAC,KAAK,CAAO,CAAC,MAAM,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACzC,IAAI,KAAK,IAAI,CAAC;oBACV,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACtC,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IACD;;;;;OAKG;IACK,sBAAsB,CAAC,KAA2B,EAAE,IAAiC,EAAE,KAAyJ;QACpP,OAAO,eAAM,CAAC,IAAI,CAAC,cAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC7F,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBACf,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,cAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,EAAE;iBAClE,CAAC,CAAC;YACP,CAAC,CAAC;YACF,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxB,CAAC;IACO,oBAAoB,CAAC,KAAiD,EAAE,KAAc;QAC1F,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;IACjB,CAAC;IACD;;;;;OAKG;IACK,iBAAiB;QACrB,OAAO;YACH,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpD,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;oBACxC,KAAK,CAAC,IAAI,KAAK,qBAAqB;oBACpC,KAAK,CAAC,IAAI,KAAK,kCAAkC,EAAE,CAAC;oBACpD,IAAI,CAAC,oBAAoB,CAAC,8BAA8B,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACxF,CAAC;YACL,CAAC;SACJ,CAAC;IACN,CAAC;CACJ;AA/ZD,kDA+ZC;AACD,SAAS,eAAe,CAAQ,GAAyB;IACrD,OAAO,eAAM,CAAC,UAAU,CAAC;QACrB,GAAG,EAAE,GAAG;QACR,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KAC9E,CAAC,CAAC;AACP,CAAC","sourcesContent":["import { applyCommandDeadline } from \"../sandbox/deadline.ts\";\nimport { sandboxReuseCapability, type SandboxProviderBackend } from \"../sandbox/backend.ts\";\nimport { makeSandboxAuthorFacade } from \"../sandbox/paths.ts\";\nimport { makeSandboxRequestExecutor } from \"../sandbox/request-executor.ts\";\nimport type { LinkedRunPlan } from \"../sandbox/plan.ts\";\nimport type { BuildKey } from \"../sandbox/identity.ts\";\nimport { materializeSandboxRunPlan, liveSandboxRuntimeServices, sandboxRuntimeCapabilities, type SandboxRuntimeDeadline, type SandboxRuntimeServices, } from \"../sandbox/runtime.ts\";\nimport type { JsonValue, Sandbox, SandboxAgent, SandboxHookContext, SandboxReuseCapability, ScopedFeedback } from \"../types.ts\";\nimport { CLEANUP_TIMEOUT_MS, cleanupCallback } from \"./cleanup-timeout.ts\";\nimport { createChangeLedger, type ChangeLedger } from \"./ledger.ts\";\nimport { firstLine, formatThrown } from \"../util.ts\";\nimport { Cause, Deferred, Effect, Either, Exit, Scope } from \"effect\";\nimport type { GroupPluginContext, LinkedPluginLifecycle } from \"../plugin/contracts.ts\";\nexport interface ReusableSandboxLease {\n    readonly sandbox: Sandbox;\n    readonly reuseSandbox: number;\n    readonly reuseOrdinal: number;\n    /** 提交本次 Attempt 的归还决策；Scope 退出负责实际 reset/retire，漏提交默认 Retire。 */\n    commit(disposition: ReusableLeaseRelease): Effect.Effect<void>;\n}\nexport type ReusableLeaseRelease = {\n    readonly _tag: \"Reset\";\n} | {\n    readonly _tag: \"Retire\";\n};\n/** A post-attempt physical lifecycle failure observed after its result sealed. */\nexport interface ReusableSandboxPoolRuntimeFailure {\n    readonly stage: \"sandbox.reset\";\n    readonly error: Error;\n}\n/**\n * A physical Sandbox Scope or reset failure that must remain observable until\n * the owning Experiment has completed its one-and-only pool stop. Unlike\n * `runtimeFailures`, this ledger is deliberately never drained by Attempt\n * result sealing: an early retire may have already removed its entry from the\n * live pool, but it must still make Experiment cleanup fail.\n */\ninterface ReusableSandboxPoolCleanupFailure {\n    readonly stage: \"sandbox.reset\" | \"sandbox.retire\" | \"sandbox.materialize-cleanup\" | \"sandbox.ensure-lifetime-cleanup\" | \"sandbox.prepare-cleanup\" | \"sandbox.lifecycle-diagnostic\";\n    readonly error: Error;\n}\ntype EntryLifecycle = {\n    readonly _tag: \"Idle\";\n} | {\n    readonly _tag: \"Leased\";\n} | {\n    readonly _tag: \"Retired\";\n};\ninterface Entry {\n    /** 资源面 Sandbox:registry / stop / suspend / ledger / lifetime / deadline 都用它。 */\n    sandbox: Sandbox;\n    /** 物化时的 raw provider backend:只用于逐次租借构建 author facade,不保存 facade/executor。 */\n    authorBackend: SandboxProviderBackend;\n    scope: Scope.CloseableScope;\n    /** provider 自己实现的寿命确认;没有这条能力的实例根本进不来(见 create)。 */\n    lifetime: SandboxReuseCapability;\n    ledger: ChangeLedger;\n    reuseSandbox: number;\n    ordinal: number;\n    lifecycle: EntryLifecycle;\n}\n/** Scope 尚未关闭前，lease 只能在这里两种归还意图之间演进。 */\ntype LeaseReleaseDecision = {\n    readonly _tag: \"Uncommitted\";\n} | {\n    readonly _tag: \"Committed\";\n    readonly release: ReusableLeaseRelease;\n};\n/** 漏 commit 保持 Uncommitted，finalizer 因而 Retire；不再用 boolean 记账。 */\ntype LeaseLifecycle = {\n    readonly _tag: \"Open\";\n    readonly release: LeaseReleaseDecision;\n} | {\n    readonly _tag: \"Finalized\";\n};\n/** 一个 pair-owned physical plan 的按需复用池；实例始终独占借给单条 Attempt。 */\nexport class ReusableSandboxPool {\n    private readonly entries: Entry[] = [];\n    private readonly waiters: Array<() => void> = [];\n    private creating = 0;\n    private stopped = false;\n    /** One physical stop operation owns every instance/finalizer exactly once. */\n    private stopCompletion: Deferred.Deferred<void, unknown> | undefined;\n    private readonly runtimeFailures: ReusableSandboxPoolRuntimeFailure[] = [];\n    /**\n     * Whole-Experiment physical cleanup ledger. This is intentionally distinct\n     * from `runtimeFailures`: the latter is a per-Attempt diagnostic channel and\n     * is drained once that Attempt seals, whereas this collection is replayed by\n     * the terminal `stop()` even if an entry was retired long before then.\n     */\n    private readonly cleanupFailures: ReusableSandboxPoolCleanupFailure[] = [];\n    /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */\n    private readonly materializationOwnerId: string;\n    /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */\n    private created = 0;\n    private groupPluginSetupStarted = false;\n    private groupPluginSetupError: unknown;\n    private activatedGroupPlugins = 0;\n    constructor(private readonly plan: Extract<LinkedRunPlan, {\n        readonly _tag: \"Sandbox\";\n    }>, private readonly capacity: number, private readonly feedback: ScopedFeedback, private readonly setupContext: SandboxHookContext, private readonly runtimeServices: SandboxRuntimeServices = liveSandboxRuntimeServices, private readonly agent?: SandboxAgent, private readonly runTiming?: import(\"./timing.ts\").RunTimingRecorder, materializationOwnerId?: string, private readonly nextReuseSandboxNumber?: () => number, private readonly groupPlugins: readonly LinkedPluginLifecycle[] = Object.freeze([]), private readonly groupPluginContext?: GroupPluginContext) {\n        this.materializationOwnerId = materializationOwnerId ?? plan.pair.evalId;\n    }\n    /**\n     * Registers only an awaiter in the outer Invocation Scope. The real stop is\n     * initiated by the Experiment lifecycle before its teardown; if the outer\n     * Scope closes first it joins the same single-flight result rather than\n     * repeating provider or plugin finalizers.\n     */\n    managed(): Effect.Effect<this, never, Scope.Scope> {\n        return Effect.addFinalizer(() => this.stop().pipe(Effect.ignore)).pipe(Effect.as(this));\n    }\n    /** Closes admission before the Experiment starts physical cleanup. */\n    freeze(): Effect.Effect<void> {\n        return Effect.sync(() => {\n            this.stopped = true;\n            this.wake();\n        });\n    }\n    /**\n     * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。\n     * `undefined` = 四层都没声明上限:请求的寿命只能覆盖收尾预留——Attempt 本身没有 deadline,\n     * 池无从知道它要跑多久,也不替它编一个数。此后实例被 provider 按自己的 `lifetimeMs` 回收\n     * 就是「不声明上限」的代价(两种时间的分界见 docs/feature/sandbox/reuse.md)。\n     */\n    acquire(attemptDeadlineMs: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<ReusableSandboxLease, Error | import(\"../sandbox/runtime.ts\").SandboxRuntimeMaterializationError, Scope.Scope> {\n        return Effect.gen(this, function* () {\n            const minRemainingMs = (attemptDeadlineMs ?? 0) + CLEANUP_TIMEOUT_MS;\n            /**\n             * 借出期内单条命令的上限从这条线派生(`undefined` = 四层都没声明上限,照旧不发明一条线)。\n             * 实例活得比 attempt 长,所以这条线必须**每次借出重设**——只在 create 时给一次的话,\n             * 第二条 attempt 起就落回 provider SDK 的默认值(e2b 是 60 秒),实验声明的 timeoutMs\n             * 完全不生效(见 sandbox/deadline.ts 的 `SandboxCommandDeadline`)。\n             * 用 minRemainingMs 而不是 attemptDeadlineMs:归还时的分类账复位跑在同一条线下,\n             * 不至于一还回来就撞一条已经过期的线。\n             */\n            const leaseDeadlineAt = attemptDeadlineMs === undefined ? undefined : () => Date.now() + minRemainingMs;\n            for (;;) {\n                if (this.stopped)\n                    return yield* Effect.fail(new Error(\"sandbox reuse pool has been stopped\"));\n                const ready = this.entries.find((entry) => entry.lifecycle._tag === \"Idle\");\n                if (ready) {\n                    // 派发前确认:请求足以覆盖 Attempt deadline 与收尾预留的寿命。不 ready 就停掉这台、\n                    // 交给下一轮创建替代实例(替代实例在 create 里再确认一次,还不行就报错,不反复重建)。\n                    const lifetime = yield* externalPromise(() => ready.lifetime.ensureLifetime(minRemainingMs));\n                    // lifetime 检查是异步 provider I/O；其间 stop() 或另一条 release 可能已经退休这台。\n                    // 只有仍是 Idle 的实例才能真正借出，stop 后让下一轮在入口处统一失败。\n                    if (lifetime.ready && !this.stopped && ready.lifecycle._tag === \"Idle\") {\n                        return yield* this.lease(ready, leaseDeadlineAt?.());\n                    }\n                    if (this.stopped || ready.lifecycle._tag !== \"Idle\")\n                        continue;\n                    yield* this.retire(ready);\n                    continue;\n                }\n                if (this.entries.length + this.creating < this.capacity) {\n                    this.creating += 1;\n                    return yield* Effect.gen(this, function* () {\n                        const created = yield* this.create(minRemainingMs, leaseDeadlineAt?.(), buildLocators);\n                        this.entries.push(created);\n                        // stop 可能在物化期间开始。把刚创建的 entry 先纳入池，再由唯一 retire 路径关闭\n                        // 它自己的 Scope；绝不能把它借给已停止的池，也不能让 stop 在 creating=0 时漏掉它。\n                        if (this.stopped) {\n                            yield* this.retire(created);\n                            return yield* Effect.fail(new Error(\"sandbox reuse pool has been stopped\"));\n                        }\n                        return yield* this.lease(created, leaseDeadlineAt?.());\n                    }).pipe(Effect.ensuring(Effect.sync(() => {\n                        this.creating -= 1;\n                        this.wake();\n                    })));\n                }\n                yield* this.awaitWake();\n            }\n        });\n    }\n    stop(): Effect.Effect<void, unknown> {\n        return Effect.uninterruptibleMask((restore) => Effect.gen(this, function* () {\n            const created = yield* Deferred.make<void, unknown>();\n            const completion = yield* Effect.sync(() => {\n                if (this.stopCompletion !== undefined)\n                    return this.stopCompletion;\n                this.stopCompletion = created;\n                this.stopped = true;\n                this.wake();\n                return created;\n            });\n            // A caller joining an already-started stop remains cancelable. The one\n            // caller that starts it cannot be interrupted between publishing the\n            // Deferred and recording its terminal Exit.\n            if (completion !== created)\n                return yield* restore(Deferred.await(completion));\n            // Stop must finish every physical cleanup even if the initiating\n            // Invocation is interrupted. Its recorded Exit is replayed to joiners.\n            const exit = yield* Effect.exit(this.stopAll());\n            yield* Deferred.done(created, exit);\n            if (Exit.isFailure(exit))\n                return yield* Effect.failCause(exit.cause);\n        }));\n    }\n    private stopAll(): Effect.Effect<void, unknown> {\n        return Effect.gen(this, function* () {\n            // Leases own their Attempt scopes. Wait until each lease has returned\n            // before closing provider scopes; this is also the barrier that makes\n            // pool stop safe to place before Experiment teardown.\n            while (this.creating > 0 || this.entries.some((entry) => entry.lifecycle._tag === \"Leased\")) {\n                yield* this.awaitWake();\n            }\n            const exits: Exit.Exit<void, unknown>[] = [];\n            const retired = yield* Effect.forEach([...this.entries], (entry) => Effect.exit(this.retire(entry)), {\n                concurrency: \"unbounded\",\n            });\n            exits.push(...retired);\n            if (this.groupPluginContext !== undefined) {\n                const groupTeardowns = yield* Effect.forEach(this.groupPlugins.slice(0, this.activatedGroupPlugins).reverse(), (entry) => entry.teardown === undefined\n                    ? Effect.succeed(Exit.void)\n                    : Effect.exit(cleanupCallback((signal) => (entry.teardown as (context: GroupPluginContext) => void | Promise<void>)({\n                        ...this.groupPluginContext!,\n                        signal,\n                    }))), { concurrency: \"unbounded\" });\n                for (const exit of groupTeardowns) {\n                    exits.push(exit);\n                    if (Exit.isFailure(exit)) {\n                        this.feedback.diagnostic({\n                            code: \"plugin-lifecycle-teardown-failed\",\n                            level: \"warning\",\n                            message: String(Cause.squash(exit.cause)),\n                        });\n                    }\n                }\n            }\n            const failures: unknown[] = [];\n            for (const exit of exits) {\n                if (Exit.isFailure(exit))\n                    failures.push(Cause.squash(exit.cause));\n            }\n            // An entry may have been removed by a failed Attempt release before this\n            // terminal sweep. Replaying the durable pool-local ledger makes that\n            // physical Scope/provider cleanup failure visible to Experiment teardown\n            // and therefore to sharedState lease release.\n            failures.push(...this.cleanupFailures.map((failure) => failure.error));\n            if (failures.length > 0) {\n                return yield* Effect.fail(new AggregateError([...new Set(failures)], \"Sandbox reuse pool cleanup failed.\"));\n            }\n        });\n    }\n    /** Drained by the scheduler after the lease Scope sealed the prior result. */\n    drainRuntimeFailures(): readonly ReusableSandboxPoolRuntimeFailure[] {\n        return Object.freeze(this.runtimeFailures.splice(0));\n    }\n    private create(minRemainingMs: number, deadlineAt: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<Entry, Error | import(\"../sandbox/runtime.ts\").SandboxRuntimeMaterializationError> {\n        return Effect.gen(this, function* () {\n            if (this.groupPluginSetupError !== undefined)\n                return yield* Effect.fail(this.groupPluginSetupError as Error);\n            if (!this.groupPluginSetupStarted && this.groupPluginContext !== undefined) {\n                this.groupPluginSetupStarted = true;\n                const setup = yield* Effect.exit(Effect.forEach(this.groupPlugins, (entry, index) => {\n                    this.activatedGroupPlugins = index + 1;\n                    return entry.setup === undefined\n                        ? Effect.void\n                        : externalPromise(() => Promise.resolve((entry.setup as (context: GroupPluginContext) => void | Promise<void>)(this.groupPluginContext!)));\n                }, { discard: true }));\n                if (Exit.isFailure(setup)) {\n                    this.groupPluginSetupError = Cause.squash(setup.cause);\n                    return yield* Effect.fail(this.groupPluginSetupError as Error);\n                }\n            }\n            const capabilities = sandboxRuntimeCapabilities(this.plan);\n            if (capabilities.reuse._tag === \"Unsupported\") {\n                return yield* Effect.fail(new Error(`sandboxReuse is unsupported by provider ${JSON.stringify(capabilities.provider)}: ${capabilities.reuse.reason}`));\n            }\n            const deadline: SandboxRuntimeDeadline = deadlineAt === undefined\n                ? { _tag: \"Unlimited\" }\n                : { _tag: \"Bounded\", timeoutMs: Math.max(1, minRemainingMs - CLEANUP_TIMEOUT_MS), deadlineAt };\n            const entryScope = yield* Scope.make();\n            // One wrapper per physical materialization. Both provider feedback and\n            // SandboxLayer hook context must use this exact instance: runtime sends\n            // provider release failures through `feedback`, while\n            // `runTeardownHooks` reports through `hookContext.diagnostic`.\n            const lifecycleFeedback = this.lifecycleFeedback();\n            const lifecycleHookContext: SandboxHookContext = {\n                ...this.setupContext,\n                progress: lifecycleFeedback.progress,\n                diagnostic: lifecycleFeedback.diagnostic,\n            };\n            const materialized = yield* Scope.extend(materializeSandboxRunPlan({\n                plan: this.plan,\n                evalId: this.materializationOwnerId,\n                deadline,\n                // Runtime intentionally reports SandboxLayer/provider finalizer errors\n                // as diagnostics so it can continue the remaining finalizers. The pool\n                // must nevertheless retain those physical cleanup failures until its\n                // terminal stop; otherwise an early retire can disappear from\n                // `entries` and incorrectly permit sharedState release.\n                feedback: lifecycleFeedback,\n                signal: this.setupContext.signal,\n                hookContext: lifecycleHookContext,\n                buildLocators,\n                ...(this.agent !== undefined ? { agent: this.agent } : {}),\n                ...(this.runTiming !== undefined ? { runTiming: this.runTiming } : {}),\n                provisionSlot: { _tag: \"Detached\" },\n                services: this.runtimeServices,\n                release: { _tag: \"Stop\" },\n            }), entryScope).pipe(Effect.onError((cause) => this.closeFailedCreateScope(entryScope, Exit.failCause(cause), \"sandbox.materialize-cleanup\")));\n            const sandbox = materialized.sandbox;\n            // 能力只能来自 provider 实现:探不到就硬失败,没有通用记账兜底(见\n            // docs/feature/sandbox/reuse.md「派发前确认」)。\n            const lifetime = sandboxReuseCapability(sandbox);\n            if (!lifetime) {\n                yield* this.closeFailedCreateScope(entryScope, Exit.void, \"sandbox.ensure-lifetime-cleanup\");\n                return yield* Effect.fail(new Error(`sandboxReuse needs the \"${capabilities.provider}\" provider to confirm sandbox lifetime, but it does not implement ` +\n                    \"ensureLifetime(minRemainingMs). Only a provider can prove the lifetime is set on its own backend; the runner \" +\n                    \"will not keep local books for it. Use a provider that implements it (docker / e2b / vercel), or drop sandboxReuse.\"));\n            }\n            const confirmed = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs)).pipe(Effect.onError((cause) => this.closeFailedCreateScope(entryScope, Exit.failCause(cause), \"sandbox.ensure-lifetime-cleanup\")));\n            if (!confirmed.ready) {\n                yield* this.closeFailedCreateScope(entryScope, Exit.void, \"sandbox.ensure-lifetime-cleanup\");\n                return yield* Effect.fail(new Error(`sandboxReuse cannot prepare the \"${capabilities.provider}\" sandbox: ${confirmed.reason}`));\n            }\n            const prepared = yield* Effect.gen(this, function* () {\n                const ledger = yield* externalPromise(() => createChangeLedger(sandbox));\n                // root 执行身份下题间 reset 永不安全(Agent 能读上一条 Attempt 留下的私有分类账对象);\n                // 在实例进池、第一条 Attempt 派发前就拒绝,而不是等到归还时才在 resetToAnchor() 里\n                // 暴露(那样首条 Attempt 已经跑完,失败还可能被静默退休吞掉)。\n                if (ledger.rootExecutionIdentity) {\n                    return yield* Effect.fail(new Error(`sandboxReuse cannot reuse the \"${capabilities.provider}\" sandbox: the Agent's execution identity is root and could read private ledger objects left by earlier attempts; ` +\n                        \"use a non-root execution user (declare USER in the image) or disable sandboxReuse\"));\n                }\n                // 建分类账会烧掉寿命:备好之后再确认一次。这次不够就报错收场——\n                // 反复创建同样的替代实例只会反复烧同样的时间(见 reuse.md「派发前确认」)。\n                const afterSetup = yield* externalPromise(() => lifetime.ensureLifetime(minRemainingMs));\n                if (!afterSetup.ready) {\n                    return yield* Effect.fail(new Error(`sandboxReuse cannot use the \"${capabilities.provider}\" sandbox after baseline setup: ${afterSetup.reason}`));\n                }\n                const reuseSandbox = this.nextReuseSandboxNumber === undefined\n                    ? ++this.created\n                    : this.nextReuseSandboxNumber();\n                return {\n                    sandbox,\n                    authorBackend: materialized.authorBackend,\n                    scope: entryScope,\n                    lifetime,\n                    ledger,\n                    reuseSandbox,\n                    ordinal: 0,\n                    lifecycle: { _tag: \"Idle\" } satisfies EntryLifecycle,\n                };\n            }).pipe(Effect.onError((cause) => this.closeFailedCreateScope(entryScope, Exit.failCause(cause), \"sandbox.prepare-cleanup\")));\n            return prepared;\n        });\n    }\n    private lease(entry: Entry, deadlineAt: number | undefined): Effect.Effect<ReusableSandboxLease, never, Scope.Scope> {\n        return Effect.gen(this, function* () {\n            entry.lifecycle = { _tag: \"Leased\" };\n            entry.ordinal += 1;\n            applyCommandDeadline(entry.sandbox, deadlineAt);\n            let lifecycle: LeaseLifecycle = {\n                _tag: \"Open\",\n                release: { _tag: \"Uncommitted\" },\n            };\n            // 先登记 release/reset finalizer:executor/facade 的封闭 finalizer 在其后登记,Scope\n            // 关闭时按 LIFO 先中断在飞请求、封闭旧 facade,再对资源面执行 reset/retire——reset\n            // 期间不会再有旧 facade 的请求借道写入 ledger/workdir。\n            yield* Effect.addFinalizer(() => Effect.gen(this, function* () {\n                if (lifecycle._tag === \"Finalized\")\n                    return;\n                const settled = lifecycle;\n                lifecycle = { _tag: \"Finalized\" };\n                const release: ReusableLeaseRelease = settled.release._tag === \"Committed\"\n                    ? settled.release.release\n                    : { _tag: \"Retire\" };\n                if (release._tag === \"Retire\") {\n                    // The Attempt has already sealed. Do not turn its return finalizer\n                    // into a defect; `retire` persists the physical failure and terminal\n                    // `stop()` replays it to Experiment cleanup/lease release.\n                    yield* this.retire(entry).pipe(Effect.catchAll(() => Effect.void));\n                }\n                else if (entry.lifecycle._tag !== \"Retired\") {\n                    const reset = yield* Effect.either(externalPromise(() => entry.ledger.resetToAnchor()));\n                    if (Either.isLeft(reset)) {\n                        this.runtimeFailures.push(Object.freeze({ stage: \"sandbox.reset\", error: reset.left }));\n                        this.recordCleanupFailure(\"sandbox.reset\", reset.left);\n                        this.feedback.diagnostic({\n                            code: \"sandbox-reset-failed\",\n                            level: \"warning\",\n                            message: `Sandbox #${entry.reuseSandbox} reset to anchor failed, retiring the instance: ${firstLine(formatThrown(reset.left))}`,\n                        });\n                        yield* this.retire(entry).pipe(Effect.catchAll(() => Effect.void));\n                    }\n                    else {\n                        entry.lifecycle = { _tag: \"Idle\" };\n                    }\n                }\n                this.wake();\n            }));\n            // 每次租借在当前 Attempt Scope 新建 executor 与 author facade:上一轮 facade/executor\n            // 不跨租借复用,不把旧 Runtime 带进新 Attempt。\n            const executor = yield* makeSandboxRequestExecutor();\n            const authorSandbox = makeSandboxAuthorFacade(entry.authorBackend, executor, this.plan.providerPlan.provider);\n            return {\n                sandbox: authorSandbox,\n                reuseSandbox: entry.reuseSandbox,\n                reuseOrdinal: entry.ordinal,\n                commit: (release) => Effect.sync(() => {\n                    if (lifecycle._tag !== \"Open\")\n                        return;\n                    lifecycle = { ...lifecycle, release: { _tag: \"Committed\", release } };\n                }),\n            };\n        });\n    }\n    /** 淘汰一台实例:停资源组并移出池——留在池里会占满容量,\n     *  让后续 acquire 既等不到空闲实例、也创建不出替代实例(等待者永远醒不来)。 */\n    private retire(entry: Entry): Effect.Effect<void, Error> {\n        return Effect.gen(this, function* () {\n            if (entry.lifecycle._tag === \"Retired\")\n                return;\n            entry.lifecycle = { _tag: \"Retired\" };\n            const at = this.entries.indexOf(entry);\n            if (at >= 0)\n                this.entries.splice(at, 1);\n            const exit = yield* Effect.exit(Scope.close(entry.scope, Exit.void));\n            if (Exit.isFailure(exit)) {\n                const error = this.recordCleanupFailure(\"sandbox.retire\", Cause.squash(exit.cause));\n                this.feedback.diagnostic({\n                    code: \"sandbox-stop-failed\",\n                    level: \"warning\",\n                    message: `Sandbox reuse case finalizer failed: ${String(error)}`,\n                });\n                this.wake();\n                return yield* Effect.fail(error);\n            }\n            this.wake();\n        });\n    }\n    private wake(): void {\n        this.waiters.splice(0).forEach((resolve) => resolve());\n    }\n    private awaitWake(): Effect.Effect<void> {\n        return Effect.async<void>((resume) => {\n            const wake = () => resume(Effect.void);\n            this.waiters.push(wake);\n            return Effect.sync(() => {\n                const index = this.waiters.indexOf(wake);\n                if (index >= 0)\n                    this.waiters.splice(index, 1);\n            });\n        });\n    }\n    /**\n     * A create/ensureLifetime failure can still run provider and Sandbox Scope\n     * finalizers. The entry is not yet in `entries`, so `stopAll()` cannot find\n     * it later; record a close failure now and replay it from the Experiment\n     * lifetime ledger instead of letting an `onError` cleanup failure vanish.\n     */\n    private closeFailedCreateScope(scope: Scope.CloseableScope, exit: Exit.Exit<unknown, unknown>, stage: Extract<ReusableSandboxPoolCleanupFailure[\"stage\"], \"sandbox.materialize-cleanup\" | \"sandbox.ensure-lifetime-cleanup\" | \"sandbox.prepare-cleanup\">): Effect.Effect<void> {\n        return Effect.exit(Scope.close(scope, exit)).pipe(Effect.flatMap((close) => Exit.isFailure(close)\n            ? Effect.sync(() => {\n                const error = this.recordCleanupFailure(stage, Cause.squash(close.cause));\n                this.feedback.diagnostic({\n                    code: \"sandbox-stop-failed\",\n                    level: \"warning\",\n                    message: `Sandbox reuse setup cleanup failed: ${String(error)}`,\n                });\n            })\n            : Effect.void));\n    }\n    private recordCleanupFailure(stage: ReusableSandboxPoolCleanupFailure[\"stage\"], cause: unknown): Error {\n        const error = cause instanceof Error ? cause : new Error(String(cause));\n        this.cleanupFailures.push(Object.freeze({ stage, error }));\n        return error;\n    }\n    /**\n     * `materializeSandboxRunPlan` deliberately converts hook/provider cleanup\n     * failures into feedback and continues its Scope.close. Preserve that signal\n     * beside thrown Scope close failures, without changing the public Sandbox\n     * lifecycle API or its diagnostic-only finalizer contract.\n     */\n    private lifecycleFeedback(): ScopedFeedback {\n        return {\n            progress: (update) => this.feedback.progress(update),\n            diagnostic: (input) => {\n                this.feedback.diagnostic(input);\n                if (input.code === \"sandbox-teardown-failed\" ||\n                    input.code === \"sandbox-stop-failed\" ||\n                    input.code === \"plugin-lifecycle-teardown-failed\") {\n                    this.recordCleanupFailure(\"sandbox.lifecycle-diagnostic\", new Error(input.message));\n                }\n            },\n        };\n    }\n}\nfunction externalPromise<Value>(run: () => Promise<Value>): Effect.Effect<Value, Error> {\n    return Effect.tryPromise({\n        try: run,\n        catch: (cause) => cause instanceof Error ? cause : new Error(String(cause)),\n    });\n}\n"]}

package/dist/runner/sandbox-pool.d.cts

@@ -37,7 +37,16 @@ export declare class ReusableSandboxPool {
     private readonly waiters;
     private creating;
     private stopped;
+    /** One physical stop operation owns every instance/finalizer exactly once. */
+    private stopCompletion;
     private readonly runtimeFailures;
+    /**
+     * Whole-Experiment physical cleanup ledger. This is intentionally distinct
+     * from `runtimeFailures`: the latter is a per-Attempt diagnostic channel and
+     * is drained once that Attempt seals, whereas this collection is replayed by
+     * the terminal `stop()` even if an entry was retired long before then.
+     */
+    private readonly cleanupFailures;
     /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */
     private readonly materializationOwnerId;
     /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */
@@ -48,8 +57,15 @@ export declare class ReusableSandboxPool {
     constructor(plan: Extract<LinkedRunPlan, {
         readonly _tag: "Sandbox";
     }>, capacity: number, feedback: ScopedFeedback, setupContext: SandboxHookContext, runtimeServices?: SandboxRuntimeServices, agent?: SandboxAgent | undefined, runTiming?: import("./timing.cjs").RunTimingRecorder | undefined, materializationOwnerId?: string, nextReuseSandboxNumber?: (() => number) | undefined, groupPlugins?: readonly LinkedPluginLifecycle[], groupPluginContext?: GroupPluginContext | undefined);
-    /** 把整座池登记进调用方 Scope；Invocation 中断与正常结束走同一条 stop finalizer。 */
+    /**
+     * Registers only an awaiter in the outer Invocation Scope. The real stop is
+     * initiated by the Experiment lifecycle before its teardown; if the outer
+     * Scope closes first it joins the same single-flight result rather than
+     * repeating provider or plugin finalizers.
+     */
     managed(): Effect.Effect<this, never, Scope.Scope>;
+    /** Closes admission before the Experiment starts physical cleanup. */
+    freeze(): Effect.Effect<void>;
     /**
      * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。
      * `undefined` = 四层都没声明上限:请求的寿命只能覆盖收尾预留——Attempt 本身没有 deadline,
@@ -57,7 +73,8 @@ export declare class ReusableSandboxPool {
      * 就是「不声明上限」的代价(两种时间的分界见 docs/feature/sandbox/reuse.md)。
      */
     acquire(attemptDeadlineMs: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<ReusableSandboxLease, Error | import("../sandbox/runtime.cjs").SandboxRuntimeMaterializationError, Scope.Scope>;
-    stop(): Effect.Effect<void>;
+    stop(): Effect.Effect<void, unknown>;
+    private stopAll;
     /** Drained by the scheduler after the lease Scope sealed the prior result. */
     drainRuntimeFailures(): readonly ReusableSandboxPoolRuntimeFailure[];
     private create;
@@ -67,4 +84,19 @@ export declare class ReusableSandboxPool {
     private retire;
     private wake;
     private awaitWake;
+    /**
+     * A create/ensureLifetime failure can still run provider and Sandbox Scope
+     * finalizers. The entry is not yet in `entries`, so `stopAll()` cannot find
+     * it later; record a close failure now and replay it from the Experiment
+     * lifetime ledger instead of letting an `onError` cleanup failure vanish.
+     */
+    private closeFailedCreateScope;
+    private recordCleanupFailure;
+    /**
+     * `materializeSandboxRunPlan` deliberately converts hook/provider cleanup
+     * failures into feedback and continues its Scope.close. Preserve that signal
+     * beside thrown Scope close failures, without changing the public Sandbox
+     * lifecycle API or its diagnostic-only finalizer contract.
+     */
+    private lifecycleFeedback;
 }

package/dist/runner/sandbox-pool.d.mts

@@ -37,7 +37,16 @@ export declare class ReusableSandboxPool {
     private readonly waiters;
     private creating;
     private stopped;
+    /** One physical stop operation owns every instance/finalizer exactly once. */
+    private stopCompletion;
     private readonly runtimeFailures;
+    /**
+     * Whole-Experiment physical cleanup ledger. This is intentionally distinct
+     * from `runtimeFailures`: the latter is a per-Attempt diagnostic channel and
+     * is drained once that Attempt seals, whereas this collection is replayed by
+     * the terminal `stop()` even if an entry was retired long before then.
+     */
+    private readonly cleanupFailures;
     /** Provider 可观察的物理 owner；Group 池不能随首个未携入成员改用另一个 Eval ID。 */
     private readonly materializationOwnerId;
     /** 本次 Run 内的 Sandbox 编号计数器;淘汰的实例不让号,编号在结果里永远指向同一个实例。 */
@@ -48,8 +57,15 @@ export declare class ReusableSandboxPool {
     constructor(plan: Extract<LinkedRunPlan, {
         readonly _tag: "Sandbox";
     }>, capacity: number, feedback: ScopedFeedback, setupContext: SandboxHookContext, runtimeServices?: SandboxRuntimeServices, agent?: SandboxAgent | undefined, runTiming?: import("./timing.mjs").RunTimingRecorder | undefined, materializationOwnerId?: string, nextReuseSandboxNumber?: (() => number) | undefined, groupPlugins?: readonly LinkedPluginLifecycle[], groupPluginContext?: GroupPluginContext | undefined);
-    /** 把整座池登记进调用方 Scope；Invocation 中断与正常结束走同一条 stop finalizer。 */
+    /**
+     * Registers only an awaiter in the outer Invocation Scope. The real stop is
+     * initiated by the Experiment lifecycle before its teardown; if the outer
+     * Scope closes first it joins the same single-flight result rather than
+     * repeating provider or plugin finalizers.
+     */
     managed(): Effect.Effect<this, never, Scope.Scope>;
+    /** Closes admission before the Experiment starts physical cleanup. */
+    freeze(): Effect.Effect<void>;
     /**
      * @param attemptDeadlineMs 这条 Attempt 实际生效的超时上限(解析链见 runner/timeout.ts)。
      * `undefined` = 四层都没声明上限:请求的寿命只能覆盖收尾预留——Attempt 本身没有 deadline,
@@ -57,7 +73,8 @@ export declare class ReusableSandboxPool {
      * 就是「不声明上限」的代价(两种时间的分界见 docs/feature/sandbox/reuse.md)。
      */
     acquire(attemptDeadlineMs: number | undefined, buildLocators: ReadonlyMap<BuildKey, JsonValue>): Effect.Effect<ReusableSandboxLease, Error | import("../sandbox/runtime.mjs").SandboxRuntimeMaterializationError, Scope.Scope>;
-    stop(): Effect.Effect<void>;
+    stop(): Effect.Effect<void, unknown>;
+    private stopAll;
     /** Drained by the scheduler after the lease Scope sealed the prior result. */
     drainRuntimeFailures(): readonly ReusableSandboxPoolRuntimeFailure[];
     private create;
@@ -67,4 +84,19 @@ export declare class ReusableSandboxPool {
     private retire;
     private wake;
     private awaitWake;
+    /**
+     * A create/ensureLifetime failure can still run provider and Sandbox Scope
+     * finalizers. The entry is not yet in `entries`, so `stopAll()` cannot find
+     * it later; record a close failure now and replay it from the Experiment
+     * lifetime ledger instead of letting an `onError` cleanup failure vanish.
+     */
+    private closeFailedCreateScope;
+    private recordCleanupFailure;
+    /**
+     * `materializeSandboxRunPlan` deliberately converts hook/provider cleanup
+     * failures into feedback and continues its Scope.close. Preserve that signal
+     * beside thrown Scope close failures, without changing the public Sandbox
+     * lifecycle API or its diagnostic-only finalizer contract.
+     */
+    private lifecycleFeedback;
 }