@cloud-cli/on 1.8.1 → 1.9.1

package/README.md

@@ -82,6 +82,9 @@ concurrency:
   group: release-${inputs.repo}
   cancel-in-progress: true
 
+# Every tag must be advertised by the worker that claims this workflow.
+tags: [linux, docker]
+
 steps:
   - id: checkout
     name: Checkout Code Repository
@@ -147,7 +150,7 @@ npx @cloud-cli/on [command] [options]
 | Command             | Description                                                                              |
 | ------------------- | ---------------------------------------------------------------------------------------- |
 | **`start-server`**  | Runs Webhook Ingress Gateway (the HTTP server receiving webhooks).                       |
-| **`start-workers`** | Runs Worker Polling loops (Scalable Workers).                                            |
+| **`start-workers`** | Runs the event-driven worker scheduler (Scalable Workers).                              |
 | **`validate`**      | Parses and validates all YAML workflows in your workflows folder without executing jobs. |
 
 ### CLI and Environment Options
@@ -159,8 +162,12 @@ npx @cloud-cli/on [command] [options]
 | `-d` | `--database`  | -                     | `RUNNER_DATABASE_URL` | SQLite database file path or HTTP URL.    |
 | `-w` | `--workflows` | `on/`                 | `RUNNER_WORKFLOWS`    | Directory where workflow YAML files live. |
 | `-p` | `--port`      | `11235`               | `PORT`                | Port for the Ingress HTTP server.         |
-| `-k` | `--workers`   | `5`                   | `RUNNER_WORKERS`      | Number of worker loop threads to spawn.   |
+| `-k` | `--workers`   | `5`                   | `RUNNER_WORKERS`      | Maximum concurrent jobs on this node.     |
 |      |               |                       | `RUNNER_ADMIN_SECRET` | Admin token to refresh secrets via API    |
+|      |               |                       | `RUNNER_SERVER_URL`   | Webhook server URL used by workers.       |
+|      |               |                       | `RUNNER_TAGS`         | Comma-separated worker capability tags.  |
+
+Set the same non-empty `RUNNER_ADMIN_SECRET` on the server and workers to publish live job-status refresh events. Job availability and the 60-second recovery refresh continue to work without it.
 
 ### Secrets
 
@@ -172,11 +179,13 @@ You can customize engine behavior using `runner.config.mjs` in your project root
 
 ```javascript
 // runner.config.mjs
-import { HtmlReporter, SlackReporter, JsonFileReporter } from '@cloud-cli/on/reporters';
+import { GitHubStatusPlugin } from '@cloud-cli/on';
 
 export default {
   port: 3000,
   workers: 5,
+  serverUrl: 'https://runner.example.com/',
+  tags: ['linux', 'docker'],
   workflows: '/home/workflows/',
   storagePath: '/tmp/workspaces',
   database: 'https://remote.db.com/',
@@ -186,18 +195,19 @@ export default {
     NODE_ENV: 'production',
   },
 
-  // Custom execution reporters
-  reporters: [
-    new JsonFileReporter({ outputDir: './reports/json' }),
-    new HtmlReporter({ outputDir: './reports/html' }),
-    new SlackReporter({
-      webhookUrl: process.env.SLACK_WEBHOOK_URL,
-      channel: '#ci-deployments',
+  plugins: [
+    new GitHubStatusPlugin({
+      token: process.env.SECRET_GITHUB_TOKEN,
+      context: 'on',
     }),
   ],
 };
 ```
 
+The GitHub status plugin publishes commit states when a workflow starts and finishes. Its token needs permission to write commit statuses for the target repository.
+
+Run details are available as HTML at `/runs/:id` and as sanitized JSON at `/api/runs/:id`. The HTML view refreshes reactively through job-specific SSE events while a run is active. Both representations omit raw webhook bodies, sensitive input fields, execution environment values, and internal rerun state.
+
 ---
 
 ## 📐 Deterministic Evaluation Rules

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG5D,wBAAsB,UAAU,CAAC,MAAM,KAAA,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAyBrE;AAED,wBAAgB,aAAa,CAAC,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,GAAG,YAAY,CAY7G;AAED,wBAAgB,SAAS,SAsBxB;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB9F"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG5D,wBAAsB,UAAU,CAAC,MAAM,KAAA,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAyBrE;AAED,wBAAgB,aAAa,CAAC,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,gBAAgB,GAAG,YAAY,CAgB7G;AAED,wBAAgB,SAAS,SAwBxB;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC;IAAE,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB9F"}

package/dist/events.d.ts

@@ -0,0 +1,12 @@
+import type http from 'node:http';
+export type RunnerEvent = 'jobs.available' | 'jobs.changed';
+export declare class EventBroker {
+    private clients;
+    private nextId;
+    private readonly maxClients;
+    subscribe(req: http.IncomingMessage, res: http.ServerResponse): void;
+    publish(event: RunnerEvent, data?: Record<string, unknown>): void;
+    close(): void;
+}
+export declare function consumeRunnerEvents(serverUrl: string, signal: AbortSignal, onEvent: (event: RunnerEvent, data: Record<string, unknown>) => void, onOpen?: () => void): Promise<void>;
+//# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,cAAc,CAAC;AAE5D,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAkD;IACjE,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAQ;IAEnC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI;IAuBpE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAUrE,KAAK,IAAI,IAAI;CAOd;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,EACpE,MAAM,CAAC,EAAE,MAAM,IAAI,GAClB,OAAO,CAAC,IAAI,CAAC,CA4Bf"}

package/dist/index.d.ts

@@ -1,5 +1,3 @@
 #!/usr/bin/env node
-export { HtmlReporter } from './reporters/html.reporter.js';
-export { JsonFileReporter } from './reporters/json-file.reporter.js';
-export { SlackReporter } from './reporters/slack.reporter.js';
+export { GitHubStatusPlugin } from './plugins/github-status.plugin.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAYA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAYA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC"}