niceeval 0.13.2 → 0.13.3

package/dist/cli/program.d.ts

@@ -0,0 +1,352 @@
+import { Cause, Effect } from "effect";
+import { BrowserLauncher, CliArguments, CliInvocationFacts, CliOutput, CliPath, CliReportPlatform, CliTerminal, PackageMetadata, ProjectInitializer } from "./application.js";
+import { ProjectConfiguration } from "./project-configuration.js";
+import type { ExperimentRenamePlan, ExperimentRenameRejected, RenamedExperiment } from "../runner/rename-experiment.js";
+import { ExperimentRenameError } from "../runner/rename-experiment.js";
+import type { InvocationSummary } from "../types.js";
+declare const CliUsageError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => Cause.YieldableError & {
+    readonly _tag: "CliUsageError";
+} & Readonly<A>;
+/** A recoverable command-line usage error. Defects deliberately do not enter this channel. */
+export declare class CliUsageError extends CliUsageError_base<{
+    readonly message: string;
+    readonly exitCode: number;
+}> {
+}
+declare const CliOperationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => Cause.YieldableError & {
+    readonly _tag: "CliOperationError";
+} & Readonly<A>;
+/** A recoverable failure from a concrete CLI-owned boundary (file, process, or dynamic module). */
+export declare class CliOperationError extends CliOperationError_base<{
+    readonly operation: string;
+    readonly cause: unknown;
+    readonly exitCode: number;
+}> {
+}
+export type CliFailure = CliUsageError | CliOperationError;
+/**
+ * Bootstrap owns process signals until an Eval has reached actual dispatch.
+ * The CLI claims the Invocation signal synchronously immediately before
+ * Experiment Host dispatch; it never infers this from argv outside the command
+ * dispatcher.
+ */
+export interface CliInterruptionOwnership {
+    readonly invocationSignal: AbortSignal;
+    /** False means bootstrap already accepted a root-owned first signal. */
+    readonly enterGracefulDispatch: () => boolean;
+    readonly requestInterrupt: () => void;
+}
+/** Bootstrap owns presentation of typed failures; defects and interruption stay in Cause. */
+export declare function renderCliFailure(failure: CliFailure): string;
+export interface Flags {
+    agent?: string;
+    model?: string;
+    attempts?: number;
+    maxConcurrency?: number;
+    maxBuildConcurrency?: number;
+    timeout?: number;
+    earlyExit?: boolean;
+    dry: boolean;
+    force: boolean;
+    rerun?: "failed" | "all";
+    budget?: number;
+    tag?: string;
+    junit?: string;
+    /** `exp` 命令专用:机器面(NDJSON 事件流)。省略即人读文本(见 `resolveOutputForm`)。 */
+    json: boolean;
+    /** `docker profile doctor` 专用：运行一次真实嵌套 Docker 冒烟。 */
+    smoke: boolean;
+    open?: boolean;
+    out?: string;
+    port?: number;
+    host?: string;
+    help: boolean;
+    version: boolean;
+    /** `clean` / `migrate` 专用：确认删除未完成 Run 或在 clean Git restore point 下执行 migration。 */
+    yes: boolean;
+    source?: true | string;
+    execution: boolean;
+    diff: boolean;
+    /** --diff=<路径>(必须 = 连写;空格形式会把路径当 eval id 前缀,按文档如此)。 */
+    diffPath?: string;
+    /** `show @<AttemptId> --execution` 专用：JS 正则，只显示命中的 transcript / tool / command evidence。 */
+    grep?: string;
+    timing?: "summary" | "full";
+    keepSandbox?: "failed" | "all";
+    all: boolean;
+    window?: string;
+    sandboxPath?: string;
+    leaveRunning: boolean;
+    history: boolean;
+    usage: boolean;
+    stats: boolean;
+    /** `show` / `view` 命令专用：默认读取当前项目结果时，按完整 ExperimentId 收窄目标。 */
+    experiment?: string[];
+    /** `show` / `view` / `accept` / `sandbox enter|list|stop` 共用:记录根目录(`.niceeval` 之外的另一个根,如 `publish` 产出的发布根)。 */
+    record?: string;
+    /** `show` / `view` 命令专用：`--run` 可重复；按完整 RunId 去重。 */
+    run?: string[];
+    report?: string;
+    page?: string;
+    theme?: string;
+    /** `sandbox list` 专用:核对强杀路径留下的无主实例。 */
+    orphans: boolean;
+    /** `exp` 命令专用:只对选中实验各执行一次实验级 teardown,不派发 attempt、不跑 setup。 */
+    teardown: boolean;
+    /** `exp --teardown` 专用:请求显式恢复的 sharedState key。 */
+    recoverSharedState?: string;
+    /** `exp --teardown --recover-shared-state` 专用:不可变 lease owner token。 */
+    ownerToken?: string;
+    /** 明确确认记录的 owner 已终止；没有它恢复拒绝执行。 */
+    confirmOwnerTerminated: boolean;
+    /** 明确确认远端外部状态已静止；没有它恢复拒绝执行。 */
+    confirmRemoteQuiesced: boolean;
+}
+export declare const FLAG_OPTIONS: {
+    /** experiment 运行不支持该 flag。要换 agent,请在 `experiments/` 下新增或复制一个配置文件。 */
+    readonly agent: {
+        readonly type: "string";
+    };
+    /** experiment 运行不支持该 flag。要换模型,请新增或复制一个 experiment 文件并修改 `model`。 */
+    readonly model: {
+        readonly type: "string";
+    };
+    /** 每个 eval 运行多少次,常用于 pass@N。 */
+    readonly attempts: {
+        readonly type: "string";
+    };
+    /** 设置同时运行的 eval 数量。 */
+    readonly "max-concurrency": {
+        readonly type: "string";
+    };
+    /** 设置同时进行的 Sandbox 镜像 lookup/build 数量；与 eval 并发独立，默认 2。 */
+    readonly "max-build-concurrency": {
+        readonly type: "string";
+    };
+    /** 单个 attempt 的超时时间,单位毫秒。解析链:`--timeout` > experiment > eval(`defineEval({ timeoutMs })`)> `niceeval.config.ts`,默认无上限(四层都没声明就不设 deadline);config 是缺省底而不是覆盖层,写了 config 不会让 eval 自己声明的上限失效。 */
+    readonly timeout: {
+        readonly type: "string";
+    };
+    /** 整次运行的预算上限(美元)。 */
+    readonly budget: {
+        readonly type: "string";
+    };
+    /** `exp` 命令专用:跑完留下 failed/errored attempt 的 Sandbox 现场(= `--keep-sandbox=failed`);`--keep-sandbox=all` 连 passed 也留。事后用 `niceeval sandbox list/enter/stop` 查看与销毁。 */
+    readonly "keep-sandbox": {
+        readonly type: "boolean";
+    };
+    /** `sandbox stop` 专用:销毁全部留存 Sandbox。 */
+    readonly all: {
+        readonly type: "boolean";
+    };
+    /** `sandbox diff` 专用:只看某个 send 窗口(如 `--window turn2` 或 `--window session2/turn1`);省略输出全部窗口的串联视图。 */
+    readonly window: {
+        readonly type: "string";
+    };
+    /** `sandbox diff` 专用:只看某个文件的 patch;省略输出该窗口的全部文件。 */
+    readonly path: {
+        readonly type: "string";
+    };
+    /** `sandbox enter` 专用:shell 退出后让现场保持运行,不送回休眠。 */
+    readonly "leave-running": {
+        readonly type: "boolean";
+    };
+    /** `sandbox list` 专用:核对强杀(`SIGKILL` / 断电)路径留下的无主沙箱实例(docker + e2b;vercel 无按元数据检索实例的通道,不参与)。只读,不清理;销毁走 `niceeval sandbox prune`。 */
+    readonly orphans: {
+        readonly type: "boolean";
+    };
+    /** 只运行带有该 tag 的 eval(见 `defineEval` 的 `tags`)。 */
+    readonly tag: {
+        readonly type: "string";
+    };
+    /** 额外写一份 JUnit XML 报告到指定路径,供 CI 消费。 */
+    readonly junit: {
+        readonly type: "string";
+    };
+    /** `exp` 运行在 stdout 输出单一有序的 NDJSON 事件流；`exp --dry` 与 `debug` 输出各自的单个 JSON 计划文档。`show` 输出 Host 拥有的内建或自定义单目标机器文档，不形成完整站点或打开第二条取数路径。 */
+    readonly json: {
+        readonly type: "boolean";
+    };
+    /** `docker profile doctor` 专用：启动受限 DinD 容器并运行内层容器。 */
+    readonly smoke: {
+        readonly type: "boolean";
+    };
+    /** `view` 命令专用:把结果查看器静态导出到指定目录。 */
+    readonly out: {
+        readonly type: "string";
+    };
+    /** `view` 命令专用:指定本地服务器监听端口。 */
+    readonly port: {
+        readonly type: "string";
+    };
+    /** `view` 命令专用:指定监听地址；省略时为 127.0.0.1，只写 `--host` 时为 0.0.0.0。非 loopback 监听无认证或 TLS，会向所有可达客户端暴露报告数据。 */
+    readonly host: {
+        readonly type: "string";
+    };
+    /** `show` 专用：按一个 exact Attempt locator 展示已记录的 source snapshot。 */
+    readonly source: {
+        readonly type: "boolean";
+    };
+    /** `show @<AttemptLocator> --execution`：从公开 Record projection 呈现该 Attempt 的 transcript、tool 与 command evidence。 */
+    readonly execution: {
+        readonly type: "boolean";
+    };
+    /** `show @<AttemptLocator> --timing[=summary|full]` 专用：从内建 timing Report 读取该 Attempt 的 runner 阶段树。 */
+    readonly timing: {
+        readonly type: "boolean";
+    };
+    /** `show @<AttemptId> --execution` 专用：JS 正则过滤 retained transcript、tool 与 command evidence。 */
+    readonly grep: {
+        readonly type: "string";
+    };
+    /** 实现收敛占位；目标公开 CLI 通过 Report page 读取 diff 通道。 */
+    readonly diff: {
+        readonly type: "boolean";
+    };
+    /** 实现收敛占位；目标公开 CLI 不提供跨 Run history。 */
+    readonly history: {
+        readonly type: "boolean";
+    };
+    /** 实现收敛占位；目标公开 CLI 通过 Report Calculation 呈现用量。 */
+    readonly usage: {
+        readonly type: "boolean";
+    };
+    /** 实现收敛占位；目标公开 CLI 不提供隐式跨 Run 统计。 */
+    readonly stats: {
+        readonly type: "boolean";
+    };
+    /** `show` / `view` 命令专用：按完整 ExperimentId 收窄当前项目结果；可重复，不接受前缀或逗号列表。 */
+    readonly experiment: {
+        readonly type: "string";
+        readonly multiple: true;
+    };
+    /** `show` / `view` / `accept` / `sandbox enter|list|stop` 共用:指定实际 Record root;CLI 不补接 `.niceeval/record` 或其它后缀。 */
+    readonly record: {
+        readonly type: "string";
+    };
+    /** `show` / `view` 可重复传入 `--run`;每次按完整 RunId 增加一个显式 Run,重复 identity 去重。 */
+    readonly run: {
+        readonly type: "string";
+        readonly multiple: true;
+    };
+    /** `show` / `view` 命令专用：内建 `standard` 或受信任的 Report module 路径。 */
+    readonly report: {
+        readonly type: "string";
+    };
+    /** `show` / `view` 命令专用：内建 Theme 或受信任的闭合 Theme module 路径。 */
+    readonly theme: {
+        readonly type: "string";
+    };
+    /** `show` / `view` 命令专用:选择报告的初始页;`show` 渲染该页并在尾部附其余页索引,`view` 以它作初始路由。未命中的页 id 按用法错误退出并列出可用页 id。 */
+    readonly page: {
+        readonly type: "string";
+    };
+    /** `exp` 命令专用:补齐被强杀打断的实验级 teardown——只对选中的实验各执行一次 teardown(新进程语义),不派发 attempt、不跑 setup;没有遗留登记也照常执行。与 eval 前缀位置参数组合是用法错误。 */
+    readonly teardown: {
+        readonly type: "boolean";
+    };
+    /** `exp --teardown` 专用:显式恢复一个永不自动接管的 sharedState lease；必须同时提供 --owner-token、--confirm-owner-terminated 和 --confirm-remote-quiesced。 */
+    readonly "recover-shared-state": {
+        readonly type: "string";
+    };
+    /** `--recover-shared-state` 专用:要恢复的不可变 owner token；错误或过期 token 不会修改 lease。 */
+    readonly "owner-token": {
+        readonly type: "string";
+    };
+    /** `--recover-shared-state` 专用:确认原 owner 已终止。 */
+    readonly "confirm-owner-terminated": {
+        readonly type: "boolean";
+    };
+    /** `--recover-shared-state` 专用:确认远端外部状态已静止。 */
+    readonly "confirm-remote-quiesced": {
+        readonly type: "boolean";
+    };
+    /** 只打印本次会匹配到的 eval × 运行配置,不实际执行(人读文本或 `--json` 单文档,见「机器怎么读:--json」)。 */
+    readonly dry: {
+        readonly type: "boolean";
+    };
+    /** `sandbox prune` 专用:除 orphan 外也销毁 unverified 实例;`exp` 明确拒绝此 flag,重跑失败项或全部项请用 `--rerun` / `--rerun all`。 */
+    readonly force: {
+        readonly type: "boolean";
+    };
+    /** `exp` 命令专用:重新运行失败项(裸写/failed)或全部项(all),不改变长期指纹。 */
+    readonly rerun: {
+        readonly type: "boolean";
+    };
+    /** 某个 eval 的一次 attempt 通过后,停止该 eval 剩余的 attempts;省略默认关(`attempts` 默认跑满、测完整通过率)。 */
+    readonly "early-exit": {
+        readonly type: "boolean";
+    };
+    /** 强制关闭首过即停,即使实验文件里写了 `earlyExit: true`。 */
+    readonly "no-early-exit": {
+        readonly type: "boolean";
+    };
+    /** `view` 命令专用:启动后自动打开浏览器(默认行为)。 */
+    readonly open: {
+        readonly type: "boolean";
+    };
+    readonly "no-open": {
+        readonly type: "boolean";
+    };
+    /** `clean` / `migrate` 专用：确认不可逆 maintenance 动作或在 clean Git restore point 下执行 migration。 */
+    readonly yes: {
+        readonly type: "boolean";
+    };
+    /** 打印用法说明并退出。 */
+    readonly help: {
+        readonly type: "boolean";
+        readonly short: "h";
+    };
+    /** 打印 niceeval 的版本号并退出。 */
+    readonly version: {
+        readonly type: "boolean";
+        readonly short: "v";
+    };
+};
+/**
+ * Fold the invocation's real fresh results and current Record readbacks at the
+ * same eval identity. This intentionally projects only identity + terminal
+ * verdict; a reused readback is never recreated as an EvalResult.
+ */
+export declare function foldInvocationEvalStats(summary: Pick<InvocationSummary, "results" | "reusedAttempts">): import("../shared/verdict.js").EvalLevelStats;
+export declare const EXPERIMENT_RENAME_FORMAT: "niceeval.experimentRename";
+export declare const EXPERIMENT_RENAME_SCHEMA_VERSION: 1;
+/**
+ * exp rename 的机器文档:单份 JSON,按 status 判别。
+ * - `plan`(核心计划,可含 `blocked` 阻断原因);
+ * - `rejected`(核心 `renameExperiment` 抛 `ExperimentRenameError` 时的整批拒绝);
+ * - `done`(核心 `RenamedExperiment` = 成功文档)。
+ */
+export type ExperimentRenameJsonDocument = ExperimentRenamePlan | ExperimentRenameRejected | RenamedExperiment;
+/**
+ * 解析 exp rename 的位置参数:必须恰好两个(一个旧 id、一个新 id)。
+ * 纯函数,CLI 与测试共用。
+ */
+export declare function parseExperimentRenamePositionals(args: readonly string[]): {
+    ok: true;
+    oldId: string;
+    newId: string;
+} | {
+    ok: false;
+    kind: "usage";
+};
+/**
+ * exp rename 只允许 --dry / --json;返回第一个被误用的 flag,没有误用返回 undefined。
+ * 与 accept 同一套纪律:node:util parseArgs 已经报未知 flag,这里拒绝那些全局已知、
+ * 但会改变运行/查看语义的 flag。
+ */
+export declare function firstExperimentRenameUnsupportedFlag(flags: Flags): string | undefined;
+/** 人读面:核心计划 → 预览文本。逐条列出迁移与排除;有 `blocked` 时点名阻断原因。 */
+export declare function renderExperimentRenamePlanHuman(plan: ExperimentRenamePlan): string;
+/** 拒绝的人读面:先给 reason 专属文案(点名旧 id、新 id、受影响 eval 与下一步),再补冲突清单。 */
+export declare function renderExperimentRenameRejectedHuman(rejected: ExperimentRenameRejected): string;
+/** 成功的人读面:新 snapshot 路径 + 逐条新 locator。 */
+export declare function renderExperimentRenameDoneHuman(done: RenamedExperiment): string;
+/** 机器面:单份 JSON 文档,不混入人读文本(见 rename.md「命令」)。 */
+export declare function renderExperimentRenameJson(document: ExperimentRenameJsonDocument): string;
+/** 把 renameExperiment 抛出的资格错误投影成 rejected 文档(JSON 与拒绝人读共用)。 */
+export declare function experimentRenameRejectedFromError(error: ExperimentRenameError): ExperimentRenameRejected;
+/** 退出码:可迁移预览与成功执行为 0;blocked 预览 / rejected 整批零写入按失败退出。 */
+export declare function experimentRenameExitCode(document: ExperimentRenameJsonDocument): number;
+export declare const cliProgram: (interruption?: CliInterruptionOwnership) => Effect.Effect<number, CliFailure, import("effect/Scope").Scope | import("../record/platform/services.js").RecordEntropy | import("../record/platform/services.js").RecordGit | ProjectConfiguration | CliArguments | CliInvocationFacts | CliOutput | ProjectInitializer | PackageMetadata | BrowserLauncher | CliPath | CliTerminal | CliReportPlatform | import("../report/host/static.js").ReportFileSystem | import("../report/host/from-record.js").ExecuteReportFromRecordRequirements>;
+export {};

package/dist/cli/program.js

@@ -0,0 +1,36 @@
+import { createRequire as __niceevalCreateRequire } from "node:module";
+const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
+const __niceevalCanonical = __niceevalRequire("./program.cjs");
+const __niceevalExport0 = __niceevalCanonical["CliOperationError"];
+export { __niceevalExport0 as CliOperationError };
+const __niceevalExport1 = __niceevalCanonical["CliUsageError"];
+export { __niceevalExport1 as CliUsageError };
+const __niceevalExport2 = __niceevalCanonical["EXPERIMENT_RENAME_FORMAT"];
+export { __niceevalExport2 as EXPERIMENT_RENAME_FORMAT };
+const __niceevalExport3 = __niceevalCanonical["EXPERIMENT_RENAME_SCHEMA_VERSION"];
+export { __niceevalExport3 as EXPERIMENT_RENAME_SCHEMA_VERSION };
+const __niceevalExport4 = __niceevalCanonical["FLAG_OPTIONS"];
+export { __niceevalExport4 as FLAG_OPTIONS };
+const __niceevalExport5 = __niceevalCanonical["cliProgram"];
+export { __niceevalExport5 as cliProgram };
+const __niceevalExport6 = __niceevalCanonical["experimentRenameExitCode"];
+export { __niceevalExport6 as experimentRenameExitCode };
+const __niceevalExport7 = __niceevalCanonical["experimentRenameRejectedFromError"];
+export { __niceevalExport7 as experimentRenameRejectedFromError };
+const __niceevalExport8 = __niceevalCanonical["firstExperimentRenameUnsupportedFlag"];
+export { __niceevalExport8 as firstExperimentRenameUnsupportedFlag };
+const __niceevalExport9 = __niceevalCanonical["foldInvocationEvalStats"];
+export { __niceevalExport9 as foldInvocationEvalStats };
+const __niceevalExport10 = __niceevalCanonical["parseExperimentRenamePositionals"];
+export { __niceevalExport10 as parseExperimentRenamePositionals };
+const __niceevalExport11 = __niceevalCanonical["renderCliFailure"];
+export { __niceevalExport11 as renderCliFailure };
+const __niceevalExport12 = __niceevalCanonical["renderExperimentRenameDoneHuman"];
+export { __niceevalExport12 as renderExperimentRenameDoneHuman };
+const __niceevalExport13 = __niceevalCanonical["renderExperimentRenameJson"];
+export { __niceevalExport13 as renderExperimentRenameJson };
+const __niceevalExport14 = __niceevalCanonical["renderExperimentRenamePlanHuman"];
+export { __niceevalExport14 as renderExperimentRenamePlanHuman };
+const __niceevalExport15 = __niceevalCanonical["renderExperimentRenameRejectedHuman"];
+export { __niceevalExport15 as renderExperimentRenameRejectedHuman };
+//# sourceMappingURL=program.js.map

package/dist/cli/program.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.js","sources":[],"names":[],"mappings":""}

package/dist/cli/project-configuration.cjs

@@ -0,0 +1,134 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProjectConfigurationLayer = exports.ProjectConfiguration = exports.ConfigModuleLoaderLive = exports.ConfigModuleLoader = exports.ConfigModuleLoadError = exports.ProjectCredentialsLive = exports.ProjectCredentials = exports.ProjectCredentialsConflict = exports.ProjectCredentialsError = void 0;
+/**
+ * Node capabilities used by an application host while observing a project.
+ * They intentionally do not model a general filesystem: credentials delivery
+ * and trusted config-module loading are the two distinct capabilities here.
+ */
+const effect_1 = require("effect");
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const load_config_ts_1 = require("../load-config.cjs");
+class ProjectCredentialsError extends effect_1.Data.TaggedError("ProjectCredentialsError") {
+}
+exports.ProjectCredentialsError = ProjectCredentialsError;
+class ProjectCredentialsConflict extends effect_1.Data.TaggedError("ProjectCredentialsConflict") {
+}
+exports.ProjectCredentialsConflict = ProjectCredentialsConflict;
+class ProjectCredentials extends effect_1.Context.Tag("niceeval/cli/ProjectCredentials")() {
+}
+exports.ProjectCredentials = ProjectCredentials;
+function normalizedCwd(cwd) {
+    return (0, node_path_1.resolve)(cwd);
+}
+function applyMissingEnvironment(raw) {
+    for (const line of raw.split("\n")) {
+        const entry = line.trim();
+        if (entry.length === 0 || entry.startsWith("#"))
+            continue;
+        const equals = entry.indexOf("=");
+        if (equals < 0)
+            continue;
+        const key = entry.slice(0, equals).trim();
+        if (key.length === 0 || process.env[key] !== undefined)
+            continue;
+        let value = entry.slice(equals + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        process.env[key] = value;
+    }
+}
+/** One Layer-owned state machine; failed preparation deliberately returns to idle. */
+exports.ProjectCredentialsLive = effect_1.Layer.effect(ProjectCredentials, effect_1.Effect.gen(function* () {
+    let state = { _tag: "idle" };
+    const mutex = yield* effect_1.Effect.makeSemaphore(1);
+    const prepare = (inputCwd) => effect_1.Effect.suspend(() => {
+        const cwd = normalizedCwd(inputCwd);
+        return effect_1.Effect.gen(function* () {
+            const fresh = yield* effect_1.Deferred.make();
+            // This is the complete atomic decision. No waiting or Node I/O occurs
+            // while the semaphore is held, so completion can always re-enter it.
+            const decision = yield* mutex.withPermits(1)(effect_1.Effect.sync(() => {
+                if (state._tag === "prepared") {
+                    return state.cwd === cwd
+                        ? { _tag: "ready" }
+                        : { _tag: "conflict", preparedCwd: state.cwd };
+                }
+                if (state._tag === "preparing") {
+                    return state.cwd === cwd
+                        ? { _tag: "await", done: state.done }
+                        : { _tag: "conflict", preparedCwd: state.cwd };
+                }
+                state = { _tag: "preparing", cwd, done: fresh };
+                return { _tag: "start", done: fresh };
+            }));
+            if (decision._tag === "ready")
+                return;
+            if (decision._tag === "conflict") {
+                return yield* effect_1.Effect.fail(new ProjectCredentialsConflict({
+                    preparedCwd: decision.preparedCwd,
+                    requestedCwd: cwd,
+                }));
+            }
+            if (decision._tag === "start") {
+                // Daemon ownership makes an interrupted initiating caller harmless:
+                // it still settles the shared Deferred and restores idle on failure.
+                yield* effect_1.Effect.forkDaemon(effect_1.Effect.tryPromise({
+                    try: async () => {
+                        const path = (0, node_path_1.join)(cwd, ".env");
+                        if ((0, node_fs_1.existsSync)(path))
+                            applyMissingEnvironment(await (0, promises_1.readFile)(path, "utf8"));
+                    },
+                    catch: (cause) => new ProjectCredentialsError({ cwd, operation: "read-dotenv", cause }),
+                }).pipe(effect_1.Effect.exit, effect_1.Effect.flatMap((exit) => mutex.withPermits(1)(effect_1.Effect.gen(function* () {
+                    if (state._tag === "preparing" && state.done === decision.done) {
+                        state = exit._tag === "Success" ? { _tag: "prepared", cwd } : { _tag: "idle" };
+                    }
+                    yield* effect_1.Deferred.done(decision.done, exit);
+                })))));
+            }
+            return yield* effect_1.Deferred.await(decision.done);
+        });
+    });
+    return { prepare };
+}));
+class ConfigModuleLoadError extends effect_1.Data.TaggedError("ConfigModuleLoadError") {
+}
+exports.ConfigModuleLoadError = ConfigModuleLoadError;
+class ConfigModuleLoader extends effect_1.Context.Tag("niceeval/cli/ConfigModuleLoader")() {
+}
+exports.ConfigModuleLoader = ConfigModuleLoader;
+/** Serial module loader. A failed rebuild never hands out a previous Config. */
+exports.ConfigModuleLoaderLive = effect_1.Layer.effect(ConfigModuleLoader, effect_1.Effect.gen(function* () {
+    let canonical;
+    const mutex = yield* effect_1.Effect.makeSemaphore(1);
+    const load = (operation, inputCwd) => mutex.withPermits(1)(effect_1.Effect.tryPromise({
+        try: async () => {
+            const cwd = normalizedCwd(inputCwd);
+            if (operation === "loadOnce" && canonical?.cwd === cwd)
+                return canonical.config;
+            const config = await (operation === "rebuild" ? (0, load_config_ts_1.rebuildConfigModule)(cwd) : (0, load_config_ts_1.loadConfigModuleOnce)(cwd));
+            canonical = { cwd, config };
+            return config;
+        },
+        catch: (cause) => new ConfigModuleLoadError({ cwd: normalizedCwd(inputCwd), operation, cause }),
+    }));
+    return { loadOnce: (cwd) => load("loadOnce", cwd), rebuild: (cwd) => load("rebuild", cwd) };
+}));
+class ProjectConfiguration extends effect_1.Context.Tag("niceeval/cli/ProjectConfiguration")() {
+}
+exports.ProjectConfiguration = ProjectConfiguration;
+/** Application composition only: callers must provide concrete capabilities. */
+exports.ProjectConfigurationLayer = effect_1.Layer.effect(ProjectConfiguration, effect_1.Effect.gen(function* () {
+    const credentials = yield* ProjectCredentials;
+    const loader = yield* ConfigModuleLoader;
+    return {
+        prepare: credentials.prepare,
+        load: (cwd) => credentials.prepare(cwd).pipe(effect_1.Effect.zipRight(loader.loadOnce(cwd))),
+        rebuild: (cwd) => credentials.prepare(cwd).pipe(effect_1.Effect.zipRight(loader.rebuild(cwd))),
+    };
+}));
+//# sourceMappingURL=project-configuration.cjs.map

package/dist/cli/project-configuration.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-configuration.js","sourceRoot":"","sources":["project-configuration.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,mCAAgE;AAChE,qCAAqC;AACrC,+CAA4C;AAC5C,yCAA0C;AAC1C,sDAA8E;AAE9E,MAAa,uBAAwB,SAAQ,aAAI,CAAC,WAAW,CAAC,yBAAyB,CAIrF;CACD;AALD,0DAKC;AACD,MAAa,0BAA2B,SAAQ,aAAI,CAAC,WAAW,CAAC,4BAA4B,CAG3F;CACD;AAJD,gEAIC;AAMD,MAAa,kBAAmB,SAAQ,gBAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,EAAiD;CACtI;AADD,gDACC;AAWD,SAAS,aAAa,CAAC,GAAW;IAC9B,OAAO,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AACD,SAAS,uBAAuB,CAAC,GAAW;IACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAC3C,SAAS;QACb,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,GAAG,CAAC;YACV,SAAS;QACb,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAClD,SAAS;QACb,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC7B,CAAC;AACL,CAAC;AACD,sFAAsF;AACzE,QAAA,sBAAsB,GAAG,cAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvF,IAAI,KAAK,GAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAkD,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,GAAG,EAAE;QACtG,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,iBAAQ,CAAC,IAAI,EAAiC,CAAC;YACpE,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC5B,OAAO,KAAK,CAAC,GAAG,KAAK,GAAG;wBACpB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE;wBAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChE,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC7B,OAAO,KAAK,CAAC,GAAG,KAAK,GAAG;wBACpB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;wBAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBAChE,CAAC;gBACD,KAAK,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;gBAChD,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACnD,CAAC,CAAC,CAAC,CAAC;YACJ,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO;gBACzB,OAAO;YACX,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC;oBACrD,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,YAAY,EAAE,GAAG;iBACpB,CAAC,CAAC,CAAC;YACR,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,oEAAoE;gBACpE,qEAAqE;gBACrE,KAAK,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,UAAU,CAAC;oBACvC,GAAG,EAAE,KAAK,IAAI,EAAE;wBACZ,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;wBAC/B,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC;4BAChB,uBAAuB,CAAC,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;oBAC9D,CAAC;oBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,uBAAuB,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;iBAC1F,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,EAAE,eAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;oBACnF,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;wBAC7D,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnF,CAAC;oBACD,KAAK,CAAC,CAAC,iBAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC9C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACX,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,iBAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAsC,CAAC;AAC3D,CAAC,CAAC,CAAC,CAAC;AACJ,MAAa,qBAAsB,SAAQ,aAAI,CAAC,WAAW,CAAC,uBAAuB,CAIjF;CACD;AALD,sDAKC;AAKD,MAAa,kBAAmB,SAAQ,gBAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,EAAiD;CACtI;AADD,gDACC;AACD,gFAAgF;AACnE,QAAA,sBAAsB,GAAG,cAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACvF,IAAI,SAGS,CAAC;IACd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,SAAiC,EAAE,QAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC;QACzG,GAAG,EAAE,KAAK,IAAI,EAAE;YACZ,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,SAAS,KAAK,UAAU,IAAI,SAAS,EAAE,GAAG,KAAK,GAAG;gBAClD,OAAO,SAAS,CAAC,MAAM,CAAC;YAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,oCAAmB,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,qCAAoB,EAAC,GAAG,CAAC,CAAC,CAAC;YACtG,SAAS,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;KAClG,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAsC,CAAC;AACpI,CAAC,CAAC,CAAC,CAAC;AAOJ,MAAa,oBAAqB,SAAQ,gBAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,EAAqD;CAC9I;AADD,oDACC;AACD,gFAAgF;AACnE,QAAA,yBAAyB,GAAG,cAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,eAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC5F,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IACzC,OAAO;QACH,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;KAClD,CAAC;AAC5C,CAAC,CAAC,CAAC,CAAC","sourcesContent":["/**\n * Node capabilities used by an application host while observing a project.\n * They intentionally do not model a general filesystem: credentials delivery\n * and trusted config-module loading are the two distinct capabilities here.\n */\nimport { Context, Data, Deferred, Effect, Layer } from \"effect\";\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { join, resolve } from \"node:path\";\nimport { loadConfigModuleOnce, rebuildConfigModule } from \"../load-config.ts\";\nimport type { Config } from \"../runner/types.ts\";\nexport class ProjectCredentialsError extends Data.TaggedError(\"ProjectCredentialsError\")<{\n    readonly cwd: string;\n    readonly operation: \"read-dotenv\";\n    readonly cause: unknown;\n}> {\n}\nexport class ProjectCredentialsConflict extends Data.TaggedError(\"ProjectCredentialsConflict\")<{\n    readonly preparedCwd: string;\n    readonly requestedCwd: string;\n}> {\n}\nexport type ProjectCredentialsFailure = ProjectCredentialsError | ProjectCredentialsConflict;\nexport interface ProjectCredentialsService {\n    /** Deliver missing credential variables from this project's .env exactly once. */\n    readonly prepare: (cwd: string) => Effect.Effect<void, ProjectCredentialsFailure>;\n}\nexport class ProjectCredentials extends Context.Tag(\"niceeval/cli/ProjectCredentials\")<ProjectCredentials, ProjectCredentialsService>() {\n}\ntype CredentialState = {\n    readonly _tag: \"idle\";\n} | {\n    readonly _tag: \"preparing\";\n    readonly cwd: string;\n    readonly done: Deferred.Deferred<void, ProjectCredentialsError>;\n} | {\n    readonly _tag: \"prepared\";\n    readonly cwd: string;\n};\nfunction normalizedCwd(cwd: string): string {\n    return resolve(cwd);\n}\nfunction applyMissingEnvironment(raw: string): void {\n    for (const line of raw.split(\"\\n\")) {\n        const entry = line.trim();\n        if (entry.length === 0 || entry.startsWith(\"#\"))\n            continue;\n        const equals = entry.indexOf(\"=\");\n        if (equals < 0)\n            continue;\n        const key = entry.slice(0, equals).trim();\n        if (key.length === 0 || process.env[key] !== undefined)\n            continue;\n        let value = entry.slice(equals + 1).trim();\n        if ((value.startsWith('\"') && value.endsWith('\"')) || (value.startsWith(\"'\") && value.endsWith(\"'\"))) {\n            value = value.slice(1, -1);\n        }\n        process.env[key] = value;\n    }\n}\n/** One Layer-owned state machine; failed preparation deliberately returns to idle. */\nexport const ProjectCredentialsLive = Layer.effect(ProjectCredentials, Effect.gen(function* () {\n    let state: CredentialState = { _tag: \"idle\" };\n    const mutex = yield* Effect.makeSemaphore(1);\n    const prepare = (inputCwd: string): Effect.Effect<void, ProjectCredentialsFailure> => Effect.suspend(() => {\n        const cwd = normalizedCwd(inputCwd);\n        return Effect.gen(function* () {\n            const fresh = yield* Deferred.make<void, ProjectCredentialsError>();\n            // This is the complete atomic decision. No waiting or Node I/O occurs\n            // while the semaphore is held, so completion can always re-enter it.\n            const decision = yield* mutex.withPermits(1)(Effect.sync(() => {\n                if (state._tag === \"prepared\") {\n                    return state.cwd === cwd\n                        ? { _tag: \"ready\" as const }\n                        : { _tag: \"conflict\" as const, preparedCwd: state.cwd };\n                }\n                if (state._tag === \"preparing\") {\n                    return state.cwd === cwd\n                        ? { _tag: \"await\" as const, done: state.done }\n                        : { _tag: \"conflict\" as const, preparedCwd: state.cwd };\n                }\n                state = { _tag: \"preparing\", cwd, done: fresh };\n                return { _tag: \"start\" as const, done: fresh };\n            }));\n            if (decision._tag === \"ready\")\n                return;\n            if (decision._tag === \"conflict\") {\n                return yield* Effect.fail(new ProjectCredentialsConflict({\n                    preparedCwd: decision.preparedCwd,\n                    requestedCwd: cwd,\n                }));\n            }\n            if (decision._tag === \"start\") {\n                // Daemon ownership makes an interrupted initiating caller harmless:\n                // it still settles the shared Deferred and restores idle on failure.\n                yield* Effect.forkDaemon(Effect.tryPromise({\n                    try: async () => {\n                        const path = join(cwd, \".env\");\n                        if (existsSync(path))\n                            applyMissingEnvironment(await readFile(path, \"utf8\"));\n                    },\n                    catch: (cause) => new ProjectCredentialsError({ cwd, operation: \"read-dotenv\", cause }),\n                }).pipe(Effect.exit, Effect.flatMap((exit) => mutex.withPermits(1)(Effect.gen(function* () {\n                    if (state._tag === \"preparing\" && state.done === decision.done) {\n                        state = exit._tag === \"Success\" ? { _tag: \"prepared\", cwd } : { _tag: \"idle\" };\n                    }\n                    yield* Deferred.done(decision.done, exit);\n                })))));\n            }\n            return yield* Deferred.await(decision.done);\n        });\n    });\n    return { prepare } satisfies ProjectCredentialsService;\n}));\nexport class ConfigModuleLoadError extends Data.TaggedError(\"ConfigModuleLoadError\")<{\n    readonly cwd: string;\n    readonly operation: \"loadOnce\" | \"rebuild\";\n    readonly cause: unknown;\n}> {\n}\nexport interface ConfigModuleLoaderService {\n    readonly loadOnce: (cwd: string) => Effect.Effect<Config, ConfigModuleLoadError>;\n    readonly rebuild: (cwd: string) => Effect.Effect<Config, ConfigModuleLoadError>;\n}\nexport class ConfigModuleLoader extends Context.Tag(\"niceeval/cli/ConfigModuleLoader\")<ConfigModuleLoader, ConfigModuleLoaderService>() {\n}\n/** Serial module loader. A failed rebuild never hands out a previous Config. */\nexport const ConfigModuleLoaderLive = Layer.effect(ConfigModuleLoader, Effect.gen(function* () {\n    let canonical: {\n        cwd: string;\n        config: Config;\n    } | undefined;\n    const mutex = yield* Effect.makeSemaphore(1);\n    const load = (operation: \"loadOnce\" | \"rebuild\", inputCwd: string) => mutex.withPermits(1)(Effect.tryPromise({\n        try: async () => {\n            const cwd = normalizedCwd(inputCwd);\n            if (operation === \"loadOnce\" && canonical?.cwd === cwd)\n                return canonical.config;\n            const config = await (operation === \"rebuild\" ? rebuildConfigModule(cwd) : loadConfigModuleOnce(cwd));\n            canonical = { cwd, config };\n            return config;\n        },\n        catch: (cause) => new ConfigModuleLoadError({ cwd: normalizedCwd(inputCwd), operation, cause }),\n    }));\n    return { loadOnce: (cwd) => load(\"loadOnce\", cwd), rebuild: (cwd) => load(\"rebuild\", cwd) } satisfies ConfigModuleLoaderService;\n}));\n/** The sole CLI application facade fixes the required credentials → config order. */\nexport interface ProjectConfigurationService {\n    readonly prepare: (cwd: string) => Effect.Effect<void, ProjectCredentialsFailure>;\n    readonly load: (cwd: string) => Effect.Effect<Config, ProjectCredentialsFailure | ConfigModuleLoadError>;\n    readonly rebuild: (cwd: string) => Effect.Effect<Config, ProjectCredentialsFailure | ConfigModuleLoadError>;\n}\nexport class ProjectConfiguration extends Context.Tag(\"niceeval/cli/ProjectConfiguration\")<ProjectConfiguration, ProjectConfigurationService>() {\n}\n/** Application composition only: callers must provide concrete capabilities. */\nexport const ProjectConfigurationLayer = Layer.effect(ProjectConfiguration, Effect.gen(function* () {\n    const credentials = yield* ProjectCredentials;\n    const loader = yield* ConfigModuleLoader;\n    return {\n        prepare: credentials.prepare,\n        load: (cwd) => credentials.prepare(cwd).pipe(Effect.zipRight(loader.loadOnce(cwd))),\n        rebuild: (cwd) => credentials.prepare(cwd).pipe(Effect.zipRight(loader.rebuild(cwd))),\n    } satisfies ProjectConfigurationService;\n}));\n"]}

package/dist/cli/project-configuration.d.cts

@@ -0,0 +1,64 @@
+/**
+ * Node capabilities used by an application host while observing a project.
+ * They intentionally do not model a general filesystem: credentials delivery
+ * and trusted config-module loading are the two distinct capabilities here.
+ */
+import { Context, Effect, Layer } from "effect";
+import type { Config } from "../runner/types.cjs";
+declare const ProjectCredentialsError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ProjectCredentialsError";
+} & Readonly<A>;
+export declare class ProjectCredentialsError extends ProjectCredentialsError_base<{
+    readonly cwd: string;
+    readonly operation: "read-dotenv";
+    readonly cause: unknown;
+}> {
+}
+declare const ProjectCredentialsConflict_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ProjectCredentialsConflict";
+} & Readonly<A>;
+export declare class ProjectCredentialsConflict extends ProjectCredentialsConflict_base<{
+    readonly preparedCwd: string;
+    readonly requestedCwd: string;
+}> {
+}
+export type ProjectCredentialsFailure = ProjectCredentialsError | ProjectCredentialsConflict;
+export interface ProjectCredentialsService {
+    /** Deliver missing credential variables from this project's .env exactly once. */
+    readonly prepare: (cwd: string) => Effect.Effect<void, ProjectCredentialsFailure>;
+}
+declare const ProjectCredentials_base: Context.TagClass<ProjectCredentials, "niceeval/cli/ProjectCredentials", ProjectCredentialsService>;
+export declare class ProjectCredentials extends ProjectCredentials_base {
+}
+/** One Layer-owned state machine; failed preparation deliberately returns to idle. */
+export declare const ProjectCredentialsLive: Layer.Layer<ProjectCredentials, never, never>;
+declare const ConfigModuleLoadError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ConfigModuleLoadError";
+} & Readonly<A>;
+export declare class ConfigModuleLoadError extends ConfigModuleLoadError_base<{
+    readonly cwd: string;
+    readonly operation: "loadOnce" | "rebuild";
+    readonly cause: unknown;
+}> {
+}
+export interface ConfigModuleLoaderService {
+    readonly loadOnce: (cwd: string) => Effect.Effect<Config, ConfigModuleLoadError>;
+    readonly rebuild: (cwd: string) => Effect.Effect<Config, ConfigModuleLoadError>;
+}
+declare const ConfigModuleLoader_base: Context.TagClass<ConfigModuleLoader, "niceeval/cli/ConfigModuleLoader", ConfigModuleLoaderService>;
+export declare class ConfigModuleLoader extends ConfigModuleLoader_base {
+}
+/** Serial module loader. A failed rebuild never hands out a previous Config. */
+export declare const ConfigModuleLoaderLive: Layer.Layer<ConfigModuleLoader, never, never>;
+/** The sole CLI application facade fixes the required credentials → config order. */
+export interface ProjectConfigurationService {
+    readonly prepare: (cwd: string) => Effect.Effect<void, ProjectCredentialsFailure>;
+    readonly load: (cwd: string) => Effect.Effect<Config, ProjectCredentialsFailure | ConfigModuleLoadError>;
+    readonly rebuild: (cwd: string) => Effect.Effect<Config, ProjectCredentialsFailure | ConfigModuleLoadError>;
+}
+declare const ProjectConfiguration_base: Context.TagClass<ProjectConfiguration, "niceeval/cli/ProjectConfiguration", ProjectConfigurationService>;
+export declare class ProjectConfiguration extends ProjectConfiguration_base {
+}
+/** Application composition only: callers must provide concrete capabilities. */
+export declare const ProjectConfigurationLayer: Layer.Layer<ProjectConfiguration, never, ProjectCredentials | ConfigModuleLoader>;
+export {};