@a11ign/screenreader-fleet 0.3.0 → 0.4.0

package/dist/code-drift.d.mts

@@ -31,9 +31,10 @@ export function codeDrift(expected: string, readings: Array<{
 /**
  * Name the deploy route that can actually reach these workers.
  *
- * There are two, they share no mechanism, and the wrong one wastes real time. `worker:deploy` is
- * `utmctl file push` plus a `utmctl` reboot: it takes a VM UUID and fails immediately off macOS, so it
- * cannot touch a physical box. Bare-metal workers are git-cloned and deploy by PULLING, through Ansible.
+ * Only bare-metal workers have one: they are git-cloned and deploy by PULLING, through Ansible. The UTM
+ * route (`a11ign-worker-deploy`, `utmctl file push` plus a `utmctl` reboot, keyed on a VM UUID) is gone: it
+ * pushed from the worker package's `src`, which a built install does not have (#3765), and no fleet box
+ * was ever reachable by it.
  *
  * This printed the utmctl advice unconditionally, including to a fleet of four mini PCs where none of it
  * applies — a tool confidently prescribing a remedy for a different kind of machine. Which kind a worker is

package/dist/fleet-env.d.mts

@@ -90,7 +90,7 @@ export function portFromGroupVars(text: string): number;
  *
  * Exists so a caller can tell a physical box from a local UTM VM, which decides how it is deployed to and
  * therefore what remedy to print. `worker:code` used to tell every stale worker to run `utmctl` and
- * `npm run worker:deploy`, which CANNOT reach a bare-metal box — it is a `utmctl file push` keyed on a VM
+ * `npm run worker:deploy` (since removed, #3765), which CANNOT reach a bare-metal box — it was a `utmctl file push` keyed on a VM
  * UUID and fails immediately off macOS. Following that advice on this fleet wastes the time it takes to
  * discover the tool was describing a different kind of machine.
  *

package/dist/index.mjs

@@ -4,7 +4,9 @@ import { networkInterfaces } from "node:os";
 import { capacityReason, availableHostMemoryMb, workersHostCanRun } from "./host-capacity.mjs";
 import { fleetScriptPaths as fleet_scripts_fleetScriptPaths } from "./src_fleet-scripts_mjs.mjs";
 import { inventoryWorkerUrls } from "./fleet-env.mjs";
-import { warnUtmDeprecated } from "./src_utm-deprecated_mjs.mjs";
+function warnUtmDeprecated(what) {
+    process.stderr.write(`DEPRECATED: ${what} manages a local UTM worker VM. UTM was a testing path and is not the fleet.\nCapture on the bare-metal fleet instead: npm run fleet:status, npm run fleet:deploy. See CLAUDE.md's\n"Working on a Mac" section.\n`);
+}
 const execFileAsync = promisify(execFile);
 const DEFAULT_WORKER = "http://localhost:8765";
 const CTL = fleet_scripts_fleetScriptPaths().workerCtl;

package/dist/worker-code-check.mjs

@@ -33,8 +33,8 @@ function remedyLines(staleUrls, bareMetalUrls) {
     const lines = [
         `\n${staleUrls.length} stale worker(s).`
     ];
-    if (physical.length) lines.push(`\n  ${physical.length} in inventory.yml — bare metal, so they deploy by PULLING:`, "    npm run fleet:deploy", "  `npm run worker:deploy` cannot reach these: it is utmctl, keyed on a VM UUID.");
-    if (vms.length) lines.push(`\n  ${vms.length} not in inventory.yml — local VM(s). A restart via \`utmctl exec\``, "  silently does nothing on some guests; rebooting always picks up a pushed file:", "    npm run worker:deploy");
+    if (physical.length) lines.push(`\n  ${physical.length} in inventory.yml — bare metal, so they deploy by PULLING:`, "    npm run fleet:deploy", "  The UTM push (`a11ign-worker-deploy`) was removed and never reached these.");
+    if (vms.length) lines.push(`\n  ${vms.length} not in inventory.yml — local VM(s). No command deploys to them any more`, "  (`a11ign-worker-deploy` was removed, #3765): re-provision the VM, or declare it in inventory.yml", "  so `npm run fleet:deploy` reaches it.");
     return lines;
 }
 function describeCodeDrift(drift, { when = "before the run", bareMetalUrls = [], sourceDirty = "" } = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@a11ign/screenreader-fleet",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Host-side lifecycle, health and capacity for a fleet of Windows NVDA capture workers: lease one, judge whether it is degrading, and know how many the host can afford.",
   "license": "AGPL-3.0-or-later",
   "type": "module",
@@ -58,8 +58,7 @@
     "a11ign-doctor": "./dist/doctor.mjs",
     "a11ign-worker-code": "./dist/check-worker-code.mjs",
     "a11ign-worker-compare": "./dist/compare-workers.mjs",
-    "a11ign-worker-ctl": "./src/local-worker/worker-ctl.sh",
-    "a11ign-worker-deploy": "./dist/deploy-worker.mjs"
+    "a11ign-worker-ctl": "./src/local-worker/worker-ctl.sh"
   },
   "files": [
     "dist",

package/src/local-worker/worker-ctl.sh

@@ -66,7 +66,7 @@ PORT="${A11Y_PORT:-8765}"
 
 # Accept `--vm=<name>` as well as A11Y_VM_NAME, and accept it in ANY position.
 #
-# `worker:deploy` has always taken `--vm=`, so anyone who has used that reaches for it here too — and this
+# `worker:deploy` (since removed, #3765) always took `--vm=`, so anyone who used that reaches for it here too — and this
 # script silently ignored it, then reported a DIFFERENT VM's state under the name you asked for. Silently,
 # because a stray argument was simply never read. Two tools in one fleet disagreeing about how to name a
 # machine is the kind of paper cut that gets diagnosed as "the guest is broken".

package/src/provisioning/bootstrap-windows-worker.ps1

@@ -589,7 +589,7 @@ if (-not $handedOff) {
   #   - `workerCode` is recorded on every capture so you know what produced it. A worker that
   #     silently updates itself on reboot can span two code versions inside one corpus run, and the
   #     provenance stops meaning anything.
-  #   - `worker:deploy` exists and VERIFIES over /health.code, which shares no failure mode with the
+  #   - `fleet:deploy` VERIFIES over /health.code, which shares no failure mode with the
   #     push. An unattended self-update has no such check.
   #   - one bad push would then brick every box in the fleet at its next restart, simultaneously.
   if (Get-ScheduledTask -TaskName 'a11ybootstrap' -ErrorAction SilentlyContinue) {

package/dist/deploy-worker.d.mts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/deploy-worker.mjs

@@ -1,192 +0,0 @@
-#!/usr/bin/env node
-import { pathToFileURL } from "node:url";
-import { execFile, execFileSync } from "node:child_process";
-import { createReadStream, realpathSync } from "node:fs";
-import { promisify } from "node:util";
-import { resolve as external_node_path_resolve } from "node:path";
-import { WORKER_FILES } from "@a11ign/screenreader-worker/worker-files";
-import { codeVersion, workerSourceDir } from "@a11ign/screenreader-worker/code-version";
-import { CAPTURE_PROTOCOL_VERSION } from "@a11ign/screenreader-worker/protocol-version";
-import { requestJson as worker_http_requestJson } from "./worker-http.mjs";
-import { fleetScriptPaths } from "./src_fleet-scripts_mjs.mjs";
-import { refuseUnknownFlags, flagValue } from "./cli-flags.mjs";
-import { sandboxGitEnv } from "./src_git-safe-env_mjs.mjs";
-import { warnUtmDeprecated } from "./src_utm-deprecated_mjs.mjs";
-const MANIFEST_CASES = 1715;
-const CAPTURES_PER_CASE = 2;
-const RECAPTURE_COST = `${(MANIFEST_CASES * CAPTURES_PER_CASE).toLocaleString("en-US")} captures (${MANIFEST_CASES.toLocaleString("en-US")} cases in manifest.json x ${CAPTURES_PER_CASE}, read 2026-09-23T14:26Z; how long that takes depends on the fleet, so time a run rather than trust a figure)`;
-refuseUnknownFlags([
-    "--vm=",
-    "--allow-protocol-change"
-], {
-    entry: import.meta.url,
-    command: "npm run worker:deploy"
-});
-const run = promisify(execFile);
-const NVDA_DIR = workerSourceDir();
-const GUEST_DIR = "C:\\Users\\witness\\a11y-witness\\src\\capture\\nvda";
-const CTL = fleetScriptPaths().workerCtl;
-const LIFECYCLE_TIMEOUT_MS = 420000;
-const POOL_TIMEOUT_MS = 240000;
-const deploy_worker_HEALTH_TIMEOUT_MS = 20000;
-const only = flagValue(process.argv, "vm");
-function hashedFiles() {
-    return WORKER_FILES;
-}
-function localVersion() {
-    return codeVersion(NVDA_DIR);
-}
-async function pool() {
-    const { stdout } = await run(CTL, [
-        "pool"
-    ], {
-        timeout: POOL_TIMEOUT_MS,
-        encoding: "utf8"
-    });
-    const all = JSON.parse(stdout);
-    return only ? all.filter((vm)=>vm.name === only) : all;
-}
-function ctl(action, vmName) {
-    return run(CTL, [
-        action
-    ], {
-        timeout: LIFECYCLE_TIMEOUT_MS,
-        encoding: "utf8",
-        env: {
-            ...process.env,
-            A11Y_VM_NAME: vmName
-        }
-    });
-}
-function push(uuid, file) {
-    return new Promise((done, fail)=>{
-        const child = execFile("utmctl", [
-            "file",
-            "push",
-            uuid,
-            `${GUEST_DIR}\\${file}`
-        ], (error)=>error ? fail(new Error(`push ${file}: ${error.message}`)) : done());
-        if (child.stdin) createReadStream(external_node_path_resolve(NVDA_DIR, file)).pipe(child.stdin);
-    });
-}
-async function healthCode(ip, port) {
-    const response = await worker_http_requestJson(`http://${ip}:${port}/health`, {
-        timeoutMs: deploy_worker_HEALTH_TIMEOUT_MS
-    });
-    if (!response.ok) throw new Error(`HTTP ${response.status} from /health`);
-    if (void 0 === response.json) throw new Error(`invalid JSON from http://${ip}:${port}/health`);
-    return response.json.code;
-}
-const VERIFY_BUDGET_MS = 240000;
-const VERIFY_POLL_MS = 10000;
-async function healthCodeWhenAwake(ip, port) {
-    const deadline = Date.now() + VERIFY_BUDGET_MS;
-    let last = "no answer";
-    let waited = false;
-    while(Date.now() < deadline)try {
-        const actual = await healthCode(ip, port);
-        if (waited) process.stdout.write("\n");
-        return actual;
-    } catch (error) {
-        last = error instanceof Error ? error.message : String(error);
-        if (!waited) process.stdout.write("  waiting for the guest to answer /health ");
-        waited = true;
-        process.stdout.write(".");
-        await new Promise((resolve)=>setTimeout(resolve, VERIFY_POLL_MS));
-    }
-    if (waited) process.stdout.write("\n");
-    throw new Error(`${ip}:${port} never answered /health within ${VERIFY_BUDGET_MS / 1000}s (last: ${last})`);
-}
-async function waitUntilSettled(name, limitMs = 120000) {
-    const deadline = Date.now() + limitMs;
-    while(Date.now() < deadline){
-        const vm = (await pool()).find((v)=>v.name === name);
-        if (!vm || "stopping" !== vm.state) return;
-        await new Promise((resolve)=>setTimeout(resolve, 5000));
-    }
-    process.stdout.write(`  note: ${name} is still stopping; continuing anyway\n`);
-}
-async function deployTo(vm, files, expected) {
-    process.stdout.write(`\n=== ${vm.name} ===\n`);
-    await ctl("up", vm.name);
-    for (const file of files){
-        await push(vm.uuid, file);
-        process.stdout.write(`  pushed ${file}\n`);
-    }
-    process.stdout.write("  rebooting (utmctl exec cannot be trusted to restart the worker) ...\n");
-    await ctl("stop", vm.name);
-    await ctl("up", vm.name);
-    try {
-        const fresh = await pool();
-        const back = fresh.find((v)=>v.name === vm.name);
-        if (!back?.ip) throw new Error(`${vm.name} did not come back with an address`);
-        const actual = await healthCodeWhenAwake(back.ip, back.port);
-        const ok = actual === expected;
-        process.stdout.write(`  /health.code ${actual} ${ok ? "== expected" : `!= expected ${expected}`}\n`);
-        return ok;
-    } finally{
-        if ("started" !== vm.state) await ctl("stop", vm.name).catch(()=>void 0);
-    }
-}
-function guardProtocolChange() {
-    const inTree = String(CAPTURE_PROTOCOL_VERSION);
-    let committed;
-    try {
-        committed = /CAPTURE_PROTOCOL_VERSION = (\d+)/.exec(execFileSync("git", [
-            "-C",
-            NVDA_DIR,
-            "show",
-            "HEAD:./protocol-version.mjs"
-        ], {
-            encoding: "utf8",
-            env: sandboxGitEnv()
-        }))?.[1];
-    } catch  {
-        try {
-            execFileSync("git", [
-                "rev-parse",
-                "--verify",
-                "HEAD"
-            ], {
-                stdio: "ignore",
-                env: sandboxGitEnv()
-            });
-            process.stdout.write(`  note: cannot compare CAPTURE_PROTOCOL_VERSION against HEAD — ${external_node_path_resolve(NVDA_DIR, "protocol-version.mjs")} is not in HEAD.\n        Expected for a brand-new or just-moved file; if the path moved, fix it here or this guard is off.\n`);
-        } catch  {}
-        return;
-    }
-    if (!inTree || !committed || inTree === committed) return;
-    if (process.argv.includes("--allow-protocol-change")) return void process.stdout.write(`\nDeploying CAPTURE_PROTOCOL_VERSION ${committed} -> ${inTree} as requested. Every cached capture is now invalid and the next run will recapture all of them.\n`);
-    process.stderr.write(`\nREFUSING TO DEPLOY: the working tree has CAPTURE_PROTOCOL_VERSION = ${inTree}, but HEAD has ${committed}.\n\nThat value is a capture-cache key, so deploying it invalidates all cached captures and forces a\nfull recapture: ${RECAPTURE_COST}. If a \`worker:code\` STALE report sent you here, the stale\nhash is probably caused by this uncommitted bump rather than by the guests being out of date.\n\n  git stash                            # deploy without the bump, or\n  npm run worker:deploy -- --allow-protocol-change   # deploy it deliberately\n`);
-    process.exit(3);
-}
-async function main() {
-    warnUtmDeprecated("npm run worker:deploy");
-    guardProtocolChange();
-    const files = hashedFiles();
-    const expected = localVersion();
-    const vms = await pool();
-    if (!vms.length) {
-        process.stderr.write(only ? `no local worker VM named ${only}\n` : "no local worker VMs registered\n");
-        process.exit(2);
-    }
-    process.stdout.write(`Deploying ${files.length} file(s) to ${vms.length} worker(s)\n`);
-    process.stdout.write(`Files: ${files.join(", ")}\nExpected code: ${expected}\n`);
-    const failed = [];
-    for (const vm of vms){
-        try {
-            if (!await deployTo(vm, files, expected)) failed.push(vm.name);
-        } catch (error) {
-            process.stdout.write(`  FAILED: ${error.message}\n`);
-            failed.push(vm.name);
-        }
-        await waitUntilSettled(vm.name);
-    }
-    process.stdout.write(`\n${vms.length - failed.length}/${vms.length} worker(s) on ${expected}\n`);
-    if (failed.length) {
-        process.stdout.write(`stale or failed: ${failed.join(", ")}\n`);
-        process.stdout.write("Re-run this command; if it persists, the guest is not rebooting — see docs/nvda-worker-runbook.md\n");
-    }
-    process.exit(failed.length ? 1 : 0);
-}
-if (import.meta.url === pathToFileURL(process.argv[1] ? realpathSync(process.argv[1]) : "").href) await main();

package/dist/src_utm-deprecated_mjs.mjs

@@ -1,4 +0,0 @@
-function warnUtmDeprecated(what) {
-    process.stderr.write(`DEPRECATED: ${what} manages a local UTM worker VM. UTM was a testing path and is not the fleet.\nCapture on the bare-metal fleet instead: npm run fleet:status, npm run fleet:deploy. See CLAUDE.md's\n"Working on a Mac" section.\n`);
-}
-export { warnUtmDeprecated };