@ansible-flow/node 0.0.0-stage → 0.86.0

package/dist/sharedRefs.d.ts

@@ -0,0 +1,22 @@
+import type { FlowDocument, FlowNode } from '@ansible-flow/core/flow/types';
+import type { Finding } from '@ansible-flow/core/flow/validate';
+export interface SharedSource {
+    /** The source flow's version and the subflow at the key path. */
+    version?: number;
+    node?: FlowNode;
+    error?: string;
+}
+/**
+ * The file a shared subflow's `ref.from` names, checked before anything on disk is touched
+ * (AFD-128): a UNC path would make Windows connect to that host and offer the user's credentials,
+ * and a device or a huge file would be read whole. It must be a relative path to a .flow.yaml that
+ * stays, links resolved, inside `root`: the workspace folder, else the folder above the flow's own.
+ */
+export declare function sharedFile(flowFile: string, path: string, root?: string): {
+    file?: string;
+    error?: string;
+};
+/** The source of `from`, for the flow at `flowFile` in the workspace folder `root`. */
+export declare function sharedSource(flowFile: string, from: string, root?: string): SharedSource;
+/** Problems for the flow's shared subflows: a source that is gone, or a newer version of it. */
+export declare function sharedFindings(flowFile: string, doc: FlowDocument, root?: string): Finding[];

package/dist/sharedRefs.js

@@ -0,0 +1,114 @@
+// src/node/sharedRefs.ts
+import { readFileSync, realpathSync, statSync } from "node:fs";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+import { parse } from "yaml";
+import { planCommand } from "@ansible-flow/core/flow/commands";
+import { parseFlow } from "@ansible-flow/core/flow/document";
+import { formatOf } from "@ansible-flow/core/flow/format";
+import { createIdFactory } from "@ansible-flow/core/flow/ids";
+import { modelOf } from "@ansible-flow/core/flow/model";
+import { parseRefFrom, subflowsOf } from "@ansible-flow/core/flow/refs";
+var cache = /* @__PURE__ */ new Map();
+var MAX_BYTES = 2 * 1024 * 1024;
+var within = (root, path) => {
+  const rel = relative(root, path);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+};
+function realOr(path) {
+  try {
+    return realpathSync.native(path);
+  } catch {
+    return path;
+  }
+}
+function sharedFile(flowFile, path, root = dirname(dirname(flowFile))) {
+  if (!path.endsWith(".flow.yaml")) return { error: "not a .flow.yaml file" };
+  if (isAbsolute(path) || /^[\\/]|^[A-Za-z]:|\0/.test(path))
+    return { error: "not a path relative to this flow" };
+  const file = resolve(dirname(flowFile), path);
+  if (!within(resolve(root), file)) return { error: "outside the workspace folder" };
+  const real = realOr(file);
+  if (!within(realOr(resolve(root)), real)) return { error: "outside the workspace folder" };
+  return { file: real };
+}
+function format2(text, doc) {
+  if (formatOf(doc) >= 2) return doc;
+  const upgraded = planCommand(text, { kind: "upgradeFormat" }, { newId: createIdFactory() });
+  return parse(upgraded.text);
+}
+function readFlow(file) {
+  let mtime;
+  try {
+    const stat = statSync(file);
+    if (!stat.isFile()) return { error: "not a file" };
+    if (stat.size > MAX_BYTES) return { error: "larger than 2 MB" };
+    mtime = stat.mtimeMs;
+  } catch {
+    return { error: "no such file" };
+  }
+  const hit = cache.get(file);
+  if (hit && hit.mtime === mtime) return hit;
+  let entry;
+  try {
+    const text = readFileSync(file, "utf8");
+    const parsed = parseFlow(text);
+    const doc = parsed.doc;
+    if (!doc) entry = { mtime, error: parsed.errors[0]?.message ?? "does not parse" };
+    else if (!doc.flow) entry = { mtime, error: "not a flow" };
+    else
+      try {
+        entry = { mtime, doc: format2(text, doc) };
+      } catch (e) {
+        entry = {
+          mtime,
+          error: `format 1, and it cannot be upgraded here (${e.message}): run Upgrade Flow Format on it`
+        };
+      }
+  } catch (e) {
+    entry = { mtime, error: `does not parse: ${e.message}` };
+  }
+  cache.set(file, entry);
+  return entry;
+}
+function sharedSource(flowFile, from, root) {
+  const ref = parseRefFrom(from);
+  if (!ref) return { error: `"${from}" is not <flow file>#<subflow key>` };
+  const where = sharedFile(flowFile, ref.path, root);
+  if (!where.file) return { error: `${ref.path}: ${where.error}` };
+  const { doc, error } = readFlow(where.file);
+  if (!doc) return { error: `${ref.path}: ${error}` };
+  const node = subflowsOf(doc).find((s) => s.path === ref.key)?.node;
+  if (!node) return { error: `${ref.path} has no subflow ${ref.key}` };
+  return { version: Number(doc.flow.version) || 1, node };
+}
+function sharedFindings(flowFile, doc, root) {
+  const out = [];
+  for (const { node, path } of modelOf(doc).nodes.values()) {
+    if (!node.ref) continue;
+    const label = `"${node.title}"`;
+    const src = sharedSource(flowFile, node.ref.from, root);
+    if (src.error)
+      out.push({
+        code: "shared-source",
+        severity: "error",
+        message: `${label} is a copy of ${node.ref.from}, which is gone (${src.error}): fix ref.from, or Unlink to keep it as this flow's own`,
+        path: [...path, "ref", "from"],
+        node: node.id
+      });
+    else if ((src.version ?? 0) > node.ref.version)
+      out.push({
+        code: "shared-source",
+        severity: "info",
+        message: `${label}: ${node.ref.from} is at version ${src.version}, this copy at ${node.ref.version}: Update Shared Subflow copies it again`,
+        path: [...path, "ref", "version"],
+        node: node.id
+      });
+  }
+  return out;
+}
+export {
+  sharedFile,
+  sharedFindings,
+  sharedSource
+};
+//# sourceMappingURL=sharedRefs.js.map

package/dist/sharedRefs.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/node/sharedRefs.ts"],
+  "sourcesContent": ["// Shared subflows against their sources (AFD-60): the file a copy names, read from disk (cached by\n// its modification time), its version and the subflow at the key path. The designer turns what is\n// missing or newer into problems with Update and Unlink quick fixes. AFD-128: `ref.from` comes from\n// the flow file, so it may name only a .flow.yaml inside the workspace folder, by relative path.\nimport { readFileSync, realpathSync, statSync } from 'node:fs';\nimport { dirname, isAbsolute, relative, resolve } from 'node:path';\nimport { parse } from 'yaml';\nimport { planCommand } from '../core/flow/commands';\nimport { parseFlow } from '../core/flow/document';\nimport { formatOf } from '../core/flow/format';\nimport { createIdFactory } from '../core/flow/ids';\nimport { modelOf } from '../core/flow/model';\nimport { parseRefFrom, subflowsOf } from '../core/flow/refs';\nimport type { FlowDocument, FlowNode } from '../core/flow/types';\nimport type { Finding } from '../core/flow/validate';\n\nexport interface SharedSource {\n  /** The source flow's version and the subflow at the key path. */\n  version?: number;\n  node?: FlowNode;\n  error?: string;\n}\n\nconst cache = new Map<string, { mtime: number; doc?: FlowDocument; error?: string }>();\n\n/** A flow is read whole on every check; a source bigger than this is not a flow (AFD-128). */\nconst MAX_BYTES = 2 * 1024 * 1024;\n\nconst within = (root: string, path: string) => {\n  const rel = relative(root, path);\n  return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));\n};\n\nfunction realOr(path: string): string {\n  try {\n    return realpathSync.native(path);\n  } catch {\n    return path;\n  }\n}\n\n/**\n * The file a shared subflow's `ref.from` names, checked before anything on disk is touched\n * (AFD-128): a UNC path would make Windows connect to that host and offer the user's credentials,\n * and a device or a huge file would be read whole. It must be a relative path to a .flow.yaml that\n * stays, links resolved, inside `root`: the workspace folder, else the folder above the flow's own.\n */\nexport function sharedFile(\n  flowFile: string,\n  path: string,\n  root = dirname(dirname(flowFile)),\n): { file?: string; error?: string } {\n  if (!path.endsWith('.flow.yaml')) return { error: 'not a .flow.yaml file' };\n  if (isAbsolute(path) || /^[\\\\/]|^[A-Za-z]:|\\0/.test(path))\n    return { error: 'not a path relative to this flow' };\n  const file = resolve(dirname(flowFile), path);\n  if (!within(resolve(root), file)) return { error: 'outside the workspace folder' };\n  const real = realOr(file);\n  if (!within(realOr(resolve(root)), real)) return { error: 'outside the workspace folder' };\n  return { file: real };\n}\n\n/**\n * Copies go into format 2 flows only, so a format 1 source is upgraded in memory first (AFD-62):\n * its legacy ports, `handler` and the like would otherwise land in a level the target cannot edit.\n * The file is left as it is.\n */\nfunction format2(text: string, doc: FlowDocument): FlowDocument {\n  if (formatOf(doc) >= 2) return doc;\n  const upgraded = planCommand(text, { kind: 'upgradeFormat' }, { newId: createIdFactory() });\n  return parse(upgraded.text) as FlowDocument;\n}\n\nfunction readFlow(file: string): { doc?: FlowDocument; error?: string } {\n  let mtime: number;\n  try {\n    const stat = statSync(file);\n    if (!stat.isFile()) return { error: 'not a file' };\n    if (stat.size > MAX_BYTES) return { error: 'larger than 2 MB' };\n    mtime = stat.mtimeMs;\n  } catch {\n    return { error: 'no such file' };\n  }\n  const hit = cache.get(file);\n  if (hit && hit.mtime === mtime) return hit;\n  let entry: { mtime: number; doc?: FlowDocument; error?: string };\n  try {\n    const text = readFileSync(file, 'utf8');\n    // AFD-147: parseFlow refuses an alias inside what it names (the copy would never end).\n    const parsed = parseFlow(text);\n    const doc = parsed.doc;\n    if (!doc) entry = { mtime, error: parsed.errors[0]?.message ?? 'does not parse' };\n    else if (!doc.flow) entry = { mtime, error: 'not a flow' };\n    else\n      try {\n        entry = { mtime, doc: format2(text, doc) };\n      } catch (e) {\n        entry = {\n          mtime,\n          error: `format 1, and it cannot be upgraded here (${(e as Error).message}): run Upgrade Flow Format on it`,\n        };\n      }\n  } catch (e) {\n    entry = { mtime, error: `does not parse: ${(e as Error).message}` };\n  }\n  cache.set(file, entry);\n  return entry;\n}\n\n/** The source of `from`, for the flow at `flowFile` in the workspace folder `root`. */\nexport function sharedSource(flowFile: string, from: string, root?: string): SharedSource {\n  const ref = parseRefFrom(from);\n  if (!ref) return { error: `\"${from}\" is not <flow file>#<subflow key>` };\n  const where = sharedFile(flowFile, ref.path, root);\n  if (!where.file) return { error: `${ref.path}: ${where.error}` };\n  const { doc, error } = readFlow(where.file);\n  if (!doc) return { error: `${ref.path}: ${error}` };\n  const node = subflowsOf(doc).find((s) => s.path === ref.key)?.node;\n  if (!node) return { error: `${ref.path} has no subflow ${ref.key}` };\n  return { version: Number(doc.flow.version) || 1, node };\n}\n\n/** Problems for the flow's shared subflows: a source that is gone, or a newer version of it. */\nexport function sharedFindings(flowFile: string, doc: FlowDocument, root?: string): Finding[] {\n  const out: Finding[] = [];\n  for (const { node, path } of modelOf(doc).nodes.values()) {\n    if (!node.ref) continue;\n    const label = `\"${node.title}\"`;\n    const src = sharedSource(flowFile, node.ref.from, root);\n    if (src.error)\n      out.push({\n        code: 'shared-source',\n        severity: 'error',\n        message: `${label} is a copy of ${node.ref.from}, which is gone (${src.error}): fix ref.from, or Unlink to keep it as this flow's own`,\n        path: [...path, 'ref', 'from'],\n        node: node.id,\n      });\n    else if ((src.version ?? 0) > node.ref.version)\n      out.push({\n        code: 'shared-source',\n        severity: 'info',\n        message: `${label}: ${node.ref.from} is at version ${src.version}, this copy at ${node.ref.version}: Update Shared Subflow copies it again`,\n        path: [...path, 'ref', 'version'],\n        node: node.id,\n      });\n  }\n  return out;\n}\n"],
+  "mappings": ";AAIA,SAAS,cAAc,cAAc,gBAAgB;AACrD,SAAS,SAAS,YAAY,UAAU,eAAe;AACvD,SAAS,aAAa;AACtB,SAAS,mBAAmB;AAC5B,SAAS,iBAAiB;AAC1B,SAAS,gBAAgB;AACzB,SAAS,uBAAuB;AAChC,SAAS,eAAe;AACxB,SAAS,cAAc,kBAAkB;AAWzC,IAAM,QAAQ,oBAAI,IAAmE;AAGrF,IAAM,YAAY,IAAI,OAAO;AAE7B,IAAM,SAAS,CAAC,MAAc,SAAiB;AAC7C,QAAM,MAAM,SAAS,MAAM,IAAI;AAC/B,SAAO,QAAQ,MAAO,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,WAAW,GAAG;AAChE;AAEA,SAAS,OAAO,MAAsB;AACpC,MAAI;AACF,WAAO,aAAa,OAAO,IAAI;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQO,SAAS,WACd,UACA,MACA,OAAO,QAAQ,QAAQ,QAAQ,CAAC,GACG;AACnC,MAAI,CAAC,KAAK,SAAS,YAAY,EAAG,QAAO,EAAE,OAAO,wBAAwB;AAC1E,MAAI,WAAW,IAAI,KAAK,uBAAuB,KAAK,IAAI;AACtD,WAAO,EAAE,OAAO,mCAAmC;AACrD,QAAM,OAAO,QAAQ,QAAQ,QAAQ,GAAG,IAAI;AAC5C,MAAI,CAAC,OAAO,QAAQ,IAAI,GAAG,IAAI,EAAG,QAAO,EAAE,OAAO,+BAA+B;AACjF,QAAM,OAAO,OAAO,IAAI;AACxB,MAAI,CAAC,OAAO,OAAO,QAAQ,IAAI,CAAC,GAAG,IAAI,EAAG,QAAO,EAAE,OAAO,+BAA+B;AACzF,SAAO,EAAE,MAAM,KAAK;AACtB;AAOA,SAAS,QAAQ,MAAc,KAAiC;AAC9D,MAAI,SAAS,GAAG,KAAK,EAAG,QAAO;AAC/B,QAAM,WAAW,YAAY,MAAM,EAAE,MAAM,gBAAgB,GAAG,EAAE,OAAO,gBAAgB,EAAE,CAAC;AAC1F,SAAO,MAAM,SAAS,IAAI;AAC5B;AAEA,SAAS,SAAS,MAAsD;AACtE,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,SAAS,IAAI;AAC1B,QAAI,CAAC,KAAK,OAAO,EAAG,QAAO,EAAE,OAAO,aAAa;AACjD,QAAI,KAAK,OAAO,UAAW,QAAO,EAAE,OAAO,mBAAmB;AAC9D,YAAQ,KAAK;AAAA,EACf,QAAQ;AACN,WAAO,EAAE,OAAO,eAAe;AAAA,EACjC;AACA,QAAM,MAAM,MAAM,IAAI,IAAI;AAC1B,MAAI,OAAO,IAAI,UAAU,MAAO,QAAO;AACvC,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,aAAa,MAAM,MAAM;AAEtC,UAAM,SAAS,UAAU,IAAI;AAC7B,UAAM,MAAM,OAAO;AACnB,QAAI,CAAC,IAAK,SAAQ,EAAE,OAAO,OAAO,OAAO,OAAO,CAAC,GAAG,WAAW,iBAAiB;AAAA,aACvE,CAAC,IAAI,KAAM,SAAQ,EAAE,OAAO,OAAO,aAAa;AAAA;AAEvD,UAAI;AACF,gBAAQ,EAAE,OAAO,KAAK,QAAQ,MAAM,GAAG,EAAE;AAAA,MAC3C,SAAS,GAAG;AACV,gBAAQ;AAAA,UACN;AAAA,UACA,OAAO,6CAA8C,EAAY,OAAO;AAAA,QAC1E;AAAA,MACF;AAAA,EACJ,SAAS,GAAG;AACV,YAAQ,EAAE,OAAO,OAAO,mBAAoB,EAAY,OAAO,GAAG;AAAA,EACpE;AACA,QAAM,IAAI,MAAM,KAAK;AACrB,SAAO;AACT;AAGO,SAAS,aAAa,UAAkB,MAAc,MAA6B;AACxF,QAAM,MAAM,aAAa,IAAI;AAC7B,MAAI,CAAC,IAAK,QAAO,EAAE,OAAO,IAAI,IAAI,qCAAqC;AACvE,QAAM,QAAQ,WAAW,UAAU,IAAI,MAAM,IAAI;AACjD,MAAI,CAAC,MAAM,KAAM,QAAO,EAAE,OAAO,GAAG,IAAI,IAAI,KAAK,MAAM,KAAK,GAAG;AAC/D,QAAM,EAAE,KAAK,MAAM,IAAI,SAAS,MAAM,IAAI;AAC1C,MAAI,CAAC,IAAK,QAAO,EAAE,OAAO,GAAG,IAAI,IAAI,KAAK,KAAK,GAAG;AAClD,QAAM,OAAO,WAAW,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,GAAG,GAAG;AAC9D,MAAI,CAAC,KAAM,QAAO,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,IAAI,GAAG,GAAG;AACnE,SAAO,EAAE,SAAS,OAAO,IAAI,KAAK,OAAO,KAAK,GAAG,KAAK;AACxD;AAGO,SAAS,eAAe,UAAkB,KAAmB,MAA0B;AAC5F,QAAM,MAAiB,CAAC;AACxB,aAAW,EAAE,MAAM,KAAK,KAAK,QAAQ,GAAG,EAAE,MAAM,OAAO,GAAG;AACxD,QAAI,CAAC,KAAK,IAAK;AACf,UAAM,QAAQ,IAAI,KAAK,KAAK;AAC5B,UAAM,MAAM,aAAa,UAAU,KAAK,IAAI,MAAM,IAAI;AACtD,QAAI,IAAI;AACN,UAAI,KAAK;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,GAAG,KAAK,iBAAiB,KAAK,IAAI,IAAI,oBAAoB,IAAI,KAAK;AAAA,QAC5E,MAAM,CAAC,GAAG,MAAM,OAAO,MAAM;AAAA,QAC7B,MAAM,KAAK;AAAA,MACb,CAAC;AAAA,cACO,IAAI,WAAW,KAAK,KAAK,IAAI;AACrC,UAAI,KAAK;AAAA,QACP,MAAM;AAAA,QACN,UAAU;AAAA,QACV,SAAS,GAAG,KAAK,KAAK,KAAK,IAAI,IAAI,kBAAkB,IAAI,OAAO,kBAAkB,KAAK,IAAI,OAAO;AAAA,QAClG,MAAM,CAAC,GAAG,MAAM,OAAO,SAAS;AAAA,QAChC,MAAM,KAAK;AAAA,MACb,CAAC;AAAA,EACL;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/ssh/exec.d.ts

@@ -0,0 +1,39 @@
+export interface Command {
+    command: string;
+    args: string[];
+}
+export interface Outcome {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}
+/**
+ * Windows ships bsdtar in System32. A GNU tar earlier on the PATH (Git for Windows) reads
+ * `C:\x` as a remote host, so tar is always that one there.
+ */
+export declare function tarExe(): string;
+/** ssh's last line that says something, without its banner noise: why a connection failed. */
+export declare function sshWhy(stderr: string): string;
+/** Runs a command to its end. `input` is written to it and closed; never rejects. */
+export declare function run(c: Command, options?: {
+    input?: string | Buffer;
+    timeoutMs?: number;
+    binary?: boolean;
+}): Promise<Outcome & {
+    out: Buffer;
+}>;
+/**
+ * Pipes the output of one or more commands, one after the other, into another command's input;
+ * resolves with the exit codes (`from`: the first that is not 0, else 0).
+ */
+export declare function pipe(from: (Command & {
+    cwd?: string;
+}) | (Command & {
+    cwd?: string;
+})[], to: Command, options?: {
+    timeoutMs?: number;
+}): Promise<{
+    from: number | null;
+    to: number | null;
+    stderr: string;
+}>;

package/dist/ssh/exec.js

@@ -0,0 +1,13 @@
+import {
+  pipe,
+  run,
+  sshWhy,
+  tarExe
+} from "../chunks/chunk-FG53MLUX.js";
+export {
+  pipe,
+  run,
+  sshWhy,
+  tarExe
+};
+//# sourceMappingURL=exec.js.map

package/dist/ssh/exec.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/ssh/remote.d.ts

@@ -0,0 +1,40 @@
+import type { Environment } from '@ansible-flow/core/run/environment';
+import { type HostFacts } from '@ansible-flow/core/run/ssh';
+export type SshEnv = Extract<Environment, {
+    kind: 'ssh';
+}>;
+/** The repository and the probe on the host, as they are here now. */
+export declare function syncWorkspace(env: SshEnv, paths: {
+    root: string;
+    probe: string;
+}, 
+/** Folders of the repository copied whatever .gitignore says. */
+include?: readonly string[]): Promise<string | undefined>;
+/** Puts a file of the run folder on the host (its inputs, a generated config). */
+export declare function putRunFile(env: SshEnv, runDir: string, name: string, text: string): Promise<string | undefined>;
+/**
+ * Follows a file of the run folder on the host into the same file here, so what reads the local
+ * one (the live summary on the canvas) sees the run as it goes. `stop` ends the following and
+ * then writes the whole file once more: nothing the last moments wrote is lost.
+ */
+export declare function followRunFile(env: SshEnv, runDir: string, name: string, local: string): {
+    stop(): Promise<void>;
+};
+/**
+ * AFD-247: a scenario's folder (its build of the flow, inventory and vars) on the host, as the
+ * run folder `runDir`. `events`: a folder in it for an image's own user to write the events to.
+ */
+export declare function putRunFolder(env: SshEnv, runDir: string, events?: string): Promise<string | undefined>;
+/** A file of the run folder on the host, read whole into the same file here. */
+export declare function fetchRunFile(env: SshEnv, runDir: string, name: string, local: string): Promise<void>;
+/** Removes the run's folder on the host (its inputs are not kept there). */
+export declare function removeRunDir(env: SshEnv, runDir: string): Promise<void>;
+/** Brings the catalog dumps the probe wrote on the host into the cache here. */
+export declare function fetchCache(env: SshEnv, localCache: string): Promise<string | undefined>;
+/** What the host has; an error when it cannot be reached. */
+export declare function hostFacts(host: string): Promise<{
+    facts?: HostFacts;
+    error?: string;
+}>;
+/** Copies one file to the host, readable by the account alone (a vault password file). */
+export declare function copyFile(env: Pick<SshEnv, 'host' | 'dir'>, content: Buffer, remotePath: string): Promise<string | undefined>;

package/dist/ssh/remote.js

@@ -0,0 +1,25 @@
+import {
+  copyFile,
+  fetchCache,
+  fetchRunFile,
+  followRunFile,
+  hostFacts,
+  putRunFile,
+  putRunFolder,
+  removeRunDir,
+  syncWorkspace
+} from "../chunks/chunk-RETJPSKL.js";
+import "../chunks/chunk-THNSGAKN.js";
+import "../chunks/chunk-FG53MLUX.js";
+export {
+  copyFile,
+  fetchCache,
+  fetchRunFile,
+  followRunFile,
+  hostFacts,
+  putRunFile,
+  putRunFolder,
+  removeRunDir,
+  syncWorkspace
+};
+//# sourceMappingURL=remote.js.map

package/dist/ssh/remote.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/ssh/sshRun.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/ssh/sshRun.js

@@ -0,0 +1,24 @@
+// src/node/ssh/sshRun.ts
+import { spawn } from "node:child_process";
+var [names = "", command, ...args] = process.argv.slice(2);
+if (!command) {
+  process.stderr.write("afd-ssh-run: nothing to run\n");
+  process.exit(2);
+}
+var child = spawn(command, args, { stdio: ["pipe", "inherit", "inherit"], windowsHide: true });
+child.on("error", (e) => {
+  process.stderr.write(`Could not start ${command}: ${e.message}
+`);
+  process.exit(127);
+});
+child.stdin?.on("error", () => void 0);
+for (const name of names.split(",").filter(Boolean)) {
+  const value = process.env[name] ?? "";
+  child.stdin?.write(`${Buffer.from(value, "utf8").toString("base64")}
+`);
+}
+child.stdin?.end();
+for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"])
+  process.on(signal, () => child.kill(signal));
+child.on("close", (code, signal) => process.exit(code ?? (signal ? 143 : 1)));
+//# sourceMappingURL=sshRun.js.map

package/dist/ssh/sshRun.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/node/ssh/sshRun.ts"],
+  "sourcesContent": ["// AFD-247: starts a run's `ssh` with the run's secrets on its input. A run is a VS Code task, and\n// a task's process gets its input from the terminal; ssh passes no environment to the host. So\n// the task runs this instead: it takes the secret values from its own environment, writes each as\n// one base64 line to ssh's input, and from then on is ssh (its output, its exit code, its\n// signals). The values are never arguments, on this machine or on the host.\n//\n// Usage: afd-ssh-run <NAME>[,<NAME>\u2026] <ssh> <ssh arguments\u2026>\nimport { spawn } from 'node:child_process';\n\nconst [names = '', command, ...args] = process.argv.slice(2);\nif (!command) {\n  process.stderr.write('afd-ssh-run: nothing to run\\n');\n  process.exit(2);\n}\nconst child = spawn(command, args, { stdio: ['pipe', 'inherit', 'inherit'], windowsHide: true });\nchild.on('error', (e) => {\n  process.stderr.write(`Could not start ${command}: ${e.message}\\n`);\n  process.exit(127);\n});\nchild.stdin?.on('error', () => undefined);\nfor (const name of names.split(',').filter(Boolean)) {\n  const value = process.env[name] ?? '';\n  child.stdin?.write(`${Buffer.from(value, 'utf8').toString('base64')}\\n`);\n}\nchild.stdin?.end();\nfor (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP'] as const)\n  process.on(signal, () => child.kill(signal));\nchild.on('close', (code, signal) => process.exit(code ?? (signal ? 143 : 1)));\n"],
+  "mappings": ";AAOA,SAAS,aAAa;AAEtB,IAAM,CAAC,QAAQ,IAAI,SAAS,GAAG,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC;AAC3D,IAAI,CAAC,SAAS;AACZ,UAAQ,OAAO,MAAM,+BAA+B;AACpD,UAAQ,KAAK,CAAC;AAChB;AACA,IAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,OAAO,CAAC,QAAQ,WAAW,SAAS,GAAG,aAAa,KAAK,CAAC;AAC/F,MAAM,GAAG,SAAS,CAAC,MAAM;AACvB,UAAQ,OAAO,MAAM,mBAAmB,OAAO,KAAK,EAAE,OAAO;AAAA,CAAI;AACjE,UAAQ,KAAK,GAAG;AAClB,CAAC;AACD,MAAM,OAAO,GAAG,SAAS,MAAM,MAAS;AACxC,WAAW,QAAQ,MAAM,MAAM,GAAG,EAAE,OAAO,OAAO,GAAG;AACnD,QAAM,QAAQ,QAAQ,IAAI,IAAI,KAAK;AACnC,QAAM,OAAO,MAAM,GAAG,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,QAAQ,CAAC;AAAA,CAAI;AACzE;AACA,MAAM,OAAO,IAAI;AACjB,WAAW,UAAU,CAAC,UAAU,WAAW,QAAQ;AACjD,UAAQ,GAAG,QAAQ,MAAM,MAAM,KAAK,MAAM,CAAC;AAC7C,MAAM,GAAG,SAAS,CAAC,MAAM,WAAW,QAAQ,KAAK,SAAS,SAAS,MAAM,EAAE,CAAC;",
+  "names": []
+}

package/dist/ssh/sync.d.ts

@@ -0,0 +1,22 @@
+import { type SshTarget } from '@ansible-flow/core/run/ssh';
+/** Forgets what was sent: the next sync copies everything again (tests, a changed host). */
+export declare function forgetSynced(): void;
+/** The files to copy, relative with forward slashes, and which of them Git marks executable. */
+export declare function listFiles(root: string, include?: readonly string[]): Promise<{
+    files: string[];
+    exec: Set<string>;
+}>;
+export interface SyncResult {
+    ok: boolean;
+    /** Files sent and files deleted on the host. */
+    sent: number;
+    removed: number;
+    error?: string;
+}
+/**
+ * Makes `<target.dir>/<into>` on the host hold the files of `root`. Nothing is run when nothing
+ * changed since the last sync of this session.
+ */
+export declare function syncFolder(target: SshTarget, root: string, into: string, 
+/** Folders of `root` copied whatever .gitignore says. */
+include?: readonly string[]): Promise<SyncResult>;

package/dist/ssh/sync.js

@@ -0,0 +1,12 @@
+import {
+  forgetSynced,
+  listFiles,
+  syncFolder
+} from "../chunks/chunk-THNSGAKN.js";
+import "../chunks/chunk-FG53MLUX.js";
+export {
+  forgetSynced,
+  listFiles,
+  syncFolder
+};
+//# sourceMappingURL=sync.js.map

package/dist/ssh/sync.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/timeouts.d.ts

@@ -0,0 +1,38 @@
+export declare const TIMEOUTS: {
+    /** The probe's first answer: the first start may pull the image. */
+    readonly probeReady: 180000;
+    /** A probe call without a timeout of its own. */
+    readonly probeCall: 60000;
+    /** The inventory read for a run's confirmation or the Inventory lens. */
+    readonly probeInventory: 120000;
+    /** The roles of a repository (catalog, Code mode). */
+    readonly probeRoles: 120000;
+    /** Compiling the generated code and roles (Code mode, the syntax check). */
+    readonly probeCompile: 180000;
+    /** Reading every collection's docs for the module catalog. */
+    readonly catalogDump: number;
+    /** Indexing the collection docs in a worker (seconds for a full environment; AFD-163). */
+    readonly catalogIndex: number;
+    /** One AWX REST request without data (idle). */
+    readonly awxRequest: 30000;
+    /** One AWX REST request from start to end, however slowly the data comes (AFD-161). */
+    readonly awxRequestTotal: 120000;
+    /** Between two polls of a running AWX job, workflow or project update. */
+    readonly awxPoll: 2000;
+    /** A finished AWX job's events keep arriving for a while. */
+    readonly awxEventsGrace: 20000;
+    /** An AWX project update before a template is set up. */
+    readonly awxProjectSync: 180000;
+    /** AFD-276: one Ansible Flow Server request without data. */
+    readonly runnerRequest: 30000;
+    /** AFD-276: between two looks at a run on the server. */
+    readonly runnerPoll: 2000;
+    /** A designer panel loading (PNG export opens one). */
+    readonly designerReady: 30000;
+    /** A designer panel drawing a PNG. */
+    readonly designerPng: 60000;
+    /** Test mode: a designer panel's DOM summary. */
+    readonly designerInspect: 10000;
+    /** Typing in a text editor settles before the designer parses again. */
+    readonly typingSettles: 150;
+};

package/dist/timeouts.js

@@ -0,0 +1,7 @@
+import {
+  TIMEOUTS
+} from "./chunks/chunk-IIFP6UQR.js";
+export {
+  TIMEOUTS
+};
+//# sourceMappingURL=timeouts.js.map

package/dist/timeouts.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/package.json

@@ -1,6 +1,37 @@
 {
   "name": "@ansible-flow/node",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.86.0",
+  "description": "Ansible Flow Designer for Node hosts: layout, the probe client, runs, the AWX client, the module catalog and SSH.",
+  "license": "MIT",
+  "homepage": "https://github.com/ChistokhinSV/ansible-flow-designer/blob/main/docs/packages.md",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ChistokhinSV/ansible-flow-designer.git"
+  },
+  "bugs": {
+    "url": "https://github.com/ChistokhinSV/ansible-flow-designer/issues"
+  },
+  "type": "module",
+  "exports": {
+    "./package.json": "./package.json",
+    "./*": {
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=22.13"
+  },
+  "dependencies": {
+    "@ansible-flow/core": "0.86.0",
+    "elkjs": "0.12.0",
+    "jsonc-parser": "3.3.1",
+    "yaml": "2.9.1"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}