npm - @nuetzliches/croniq-runner - Versions diffs - 0.3.0 → 0.4.0 - Mend

@nuetzliches/croniq-runner 0.3.0 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (41) hide show

package/dist/options.d.ts CHANGED Viewed

@@ -19,8 +19,22 @@ export interface ResolvedLogWriterOptions {
     shutdownTimeoutMs: number;
 }
 export interface CroniqRunnerOptions {
-    /** Base URL of the Croniq server, e.g. `http://localhost:4000`. */
+    /**
+     * Base URL of the Croniq server, e.g. `http://localhost:4000`.
+     *
+     * `https://` is required unless the host is loopback (`localhost`,
+     * `127.0.0.0/8`, `::1`) — the API key rides along on every request and would
+     * otherwise travel in cleartext. See {@link allowInsecureHttp}.
+     */
     serverUrl: string;
+    /**
+     * Opt in to a cleartext `http://` {@link serverUrl} on a non-loopback host.
+     *
+     * Off by default: without it such a URL is rejected by `resolveOptions`.
+     * With it, the SDK still emits one loud startup warning — the API key then
+     * travels in cleartext on every poll. Default `false`.
+     */
+    allowInsecureHttp?: boolean;
     /**
      * Stable runner identifier. If omitted, the SDK resolves it via
      * `RUNNER_ID` env var → state file under {@link runnerDataDir} →
@@ -62,6 +76,30 @@ export interface CroniqRunnerOptions {
     pollRetryDelayMs?: number;
     /** Idle delay when the runner is at `maxInflight` capacity. Default 500 ms. */
     capacityBackoffMs?: number;
+    /**
+     * How many consecutive `409 Conflict` responses from `POST /v1/work/poll`
+     * the runner tolerates before `run()` rejects with a
+     * `PollInstanceConflictError`. Default 3, range [1, 100].
+     *
+     * A sustained 409 means a second process is registered under the same
+     * `runnerId` and no amount of retrying fixes that. The counter resets on a
+     * successful poll or on any non-409 failure (5xx, network, timeout), which
+     * say nothing about instance ownership.
+     */
+    maxConsecutivePollConflicts?: number;
+    /**
+     * How many consecutive `401 Unauthorized` responses from
+     * `POST /v1/work/poll` the runner tolerates before `run()` rejects with an
+     * `AuthFailedError`. Default 3, range [1, 100].
+     *
+     * The API key is read once and never re-read, so a rejected credential
+     * cannot fix itself; retrying only produces an idle-looking process that
+     * never exits. Not fatal on the first 401 — rotation hands over through an
+     * expiry window (server issue #471) and a race around it should not kill a
+     * healthy runner. The counter resets on a successful poll and on any other
+     * failure: a 5xx says nothing about whether the key is valid.
+     */
+    maxConsecutiveAuthFailures?: number;
     /** Streaming log-writer tunables. */
     logWriter?: LogWriterOptions;
     /** Optional logger for SDK-level diagnostics. Defaults to a console logger that emits warn/error only. */
@@ -69,6 +107,7 @@ export interface CroniqRunnerOptions {
 }
 export interface ResolvedRunnerOptions {
     serverUrl: string;
+    allowInsecureHttp: boolean;
     runnerId: string | undefined;
     runnerIdPrefix: string;
     runnerDataDir: string | undefined;
@@ -82,6 +121,8 @@ export interface ResolvedRunnerOptions {
     drainTimeoutMs: number;
     pollRetryDelayMs: number;
     capacityBackoffMs: number;
+    maxConsecutivePollConflicts: number;
+    maxConsecutiveAuthFailures: number;
     logWriter: ResolvedLogWriterOptions;
     logger: Logger;
 }

package/dist/options.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;~~AAG1C~~,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2FAA2F;IAC3F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wGAAwG;IACxG,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC~~,mEAAmE~~;~~IACnE~~,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iGAAiG;IACjG,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,sFAAsF;IACtF,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,wGAAwG;IACxG,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,qCAAqC;IACrC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAE7B,0GAA0G;IAC1G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,wBAAwB,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,GAAG,qBAAqB,~~CA0CvG~~"}
1	+ {"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2FAA2F;IAC3F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wGAAwG;IACxG,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iGAAiG;IACjG,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,sFAAsF;IACtF,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,wGAAwG;IACxG,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;;;;;OASG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAErC;;;;;;;;;;;OAWG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAEpC,qCAAqC;IACrC,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAE7B,0GAA0G;IAC1G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2BAA2B,EAAE,MAAM,CAAC;IACpC,0BAA0B,EAAE,MAAM,CAAC;IACnC,SAAS,EAAE,wBAAwB,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,GAAG,qBAAqB,CAyEvG"}

package/dist/options.js CHANGED Viewed

@@ -1,3 +1,4 @@
+import { assertSecureServerUrl } from './security.js';
 import { trimTrailingSlashes } from './url.js';
 const DEFAULT_LOG_WRITER = {
     channelCapacity: 256,
@@ -17,10 +18,26 @@ export function resolveOptions(input, defaultLogger) {
     catch {
         throw new TypeError(`CroniqRunnerOptions.serverUrl is not a valid URL: ${input.serverUrl}`);
     }
+    const logger = input.logger ?? defaultLogger;
+    // Fail fast on a cleartext base URL that would leak the API key (#440).
+    const allowInsecureHttp = input.allowInsecureHttp ?? false;
+    assertSecureServerUrl(input.serverUrl, allowInsecureHttp, 'CroniqRunnerOptions.serverUrl', logger);
     const maxInflight = input.maxInflight ?? 5;
     if (!Number.isInteger(maxInflight) || maxInflight < 1 || maxInflight > 1024) {
         throw new RangeError(`CroniqRunnerOptions.maxInflight must be an integer in [1, 1024], got ${maxInflight}`);
     }
+    const maxConsecutivePollConflicts = input.maxConsecutivePollConflicts ?? 3;
+    if (!Number.isInteger(maxConsecutivePollConflicts) ||
+        maxConsecutivePollConflicts < 1 ||
+        maxConsecutivePollConflicts > 100) {
+        throw new RangeError(`CroniqRunnerOptions.maxConsecutivePollConflicts must be an integer in [1, 100], got ${maxConsecutivePollConflicts}`);
+    }
+    const maxConsecutiveAuthFailures = input.maxConsecutiveAuthFailures ?? 3;
+    if (!Number.isInteger(maxConsecutiveAuthFailures) ||
+        maxConsecutiveAuthFailures < 1 ||
+        maxConsecutiveAuthFailures > 100) {
+        throw new RangeError(`CroniqRunnerOptions.maxConsecutiveAuthFailures must be an integer in [1, 100], got ${maxConsecutiveAuthFailures}`);
+    }
     const logWriter = {
         channelCapacity: input.logWriter?.channelCapacity ?? DEFAULT_LOG_WRITER.channelCapacity,
         batchSizeThreshold: input.logWriter?.batchSizeThreshold ?? DEFAULT_LOG_WRITER.batchSizeThreshold,
@@ -30,6 +47,7 @@ export function resolveOptions(input, defaultLogger) {
     };
     return {
         serverUrl: trimTrailingSlashes(input.serverUrl),
+        allowInsecureHttp,
         runnerId: input.runnerId,
         runnerIdPrefix: input.runnerIdPrefix ?? 'runner',
         runnerDataDir: input.runnerDataDir,
@@ -43,8 +61,10 @@ export function resolveOptions(input, defaultLogger) {
         drainTimeoutMs: input.drainTimeoutMs ?? 30_000,
         pollRetryDelayMs: input.pollRetryDelayMs ?? 5_000,
         capacityBackoffMs: input.capacityBackoffMs ?? 500,
+        maxConsecutivePollConflicts,
+        maxConsecutiveAuthFailures,
         logWriter,
-        logger: input.logger ?? defaultLogger,
+        logger,
     };
 }
 //# sourceMappingURL=options.js.map

package/dist/options.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;~~AA2G~~/C,MAAM,kBAAkB,GAA6B;IACnD,eAAe,EAAE,GAAG;IACpB,kBAAkB,EAAE,EAAE;IACtB,oBAAoB,EAAE,GAAG;IACzB,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,KAA0B,EAAE,aAAqB;IAC9E,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC;QACH,kCAAkC;QAClC,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,qDAAqD,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAAC,wEAAwE,WAAW,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,SAAS,GAA6B;QAC1C,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,IAAI,kBAAkB,CAAC,eAAe;QACvF,kBAAkB,EAAE,KAAK,CAAC,SAAS,EAAE,kBAAkB,IAAI,kBAAkB,CAAC,kBAAkB;QAChG,oBAAoB,EAAE,KAAK,CAAC,SAAS,EAAE,oBAAoB,IAAI,kBAAkB,CAAC,oBAAoB;QACtG,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,IAAI,kBAAkB,CAAC,eAAe;QACvF,iBAAiB,EAAE,KAAK,CAAC,SAAS,EAAE,iBAAiB,IAAI,kBAAkB,CAAC,iBAAiB;KAC9F,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC/C,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,QAAQ;QAChD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7B,WAAW;QACX,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,MAAM;QAChD,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM;QAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,KAAK;QACjD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,GAAG;QACjD,SAAS;QACT,MAAM~~,EAAE,KAAK,CAAC,MAAM,IAAI,aAAa~~;~~KACtC~~,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"options.js","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAuJ/C,MAAM,kBAAkB,GAA6B;IACnD,eAAe,EAAE,GAAG;IACpB,kBAAkB,EAAE,EAAE;IACtB,oBAAoB,EAAE,GAAG;IACzB,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,KAA0B,EAAE,aAAqB;IAC9E,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC;QACH,kCAAkC;QAClC,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,qDAAqD,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAC;IAE7C,wEAAwE;IACxE,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC;IAC3D,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,MAAM,CAAC,CAAC;IAEnG,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAAC,wEAAwE,WAAW,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,2BAA2B,GAAG,KAAK,CAAC,2BAA2B,IAAI,CAAC,CAAC;IAC3E,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,2BAA2B,CAAC;QAC9C,2BAA2B,GAAG,CAAC;QAC/B,2BAA2B,GAAG,GAAG,EACjC,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,uFAAuF,2BAA2B,EAAE,CACrH,CAAC;IACJ,CAAC;IAED,MAAM,0BAA0B,GAAG,KAAK,CAAC,0BAA0B,IAAI,CAAC,CAAC;IACzE,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,0BAA0B,CAAC;QAC7C,0BAA0B,GAAG,CAAC;QAC9B,0BAA0B,GAAG,GAAG,EAChC,CAAC;QACD,MAAM,IAAI,UAAU,CAClB,sFAAsF,0BAA0B,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAA6B;QAC1C,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,IAAI,kBAAkB,CAAC,eAAe;QACvF,kBAAkB,EAAE,KAAK,CAAC,SAAS,EAAE,kBAAkB,IAAI,kBAAkB,CAAC,kBAAkB;QAChG,oBAAoB,EAAE,KAAK,CAAC,SAAS,EAAE,oBAAoB,IAAI,kBAAkB,CAAC,oBAAoB;QACtG,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,eAAe,IAAI,kBAAkB,CAAC,eAAe;QACvF,iBAAiB,EAAE,KAAK,CAAC,SAAS,EAAE,iBAAiB,IAAI,kBAAkB,CAAC,iBAAiB;KAC9F,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC/C,iBAAiB;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,QAAQ;QAChD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7B,WAAW;QACX,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,MAAM;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,MAAM;QAChD,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM;QAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,KAAK;QACjD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,GAAG;QACjD,2BAA2B;QAC3B,0BAA0B;QAC1B,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/runner.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"~~AAOA~~,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAkB,KAAK,mBAAmB,EAA8B,MAAM,cAAc,CAAC;~~AAGpG~~;;;;;;;GAOG;AACH,qBAAa,YAAY;;gBAaX,OAAO,EAAE,mBAAmB;IAYxC;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,IAAI;IAKhF,gFAAgF;IAChF,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAK5C,qEAAqE;IACrE,IAAI,QAAQ,IAAI,MAAM,CAGrB;IAED,sEAAsE;IACtE,IAAI,QAAQ,IAAI,SAAS,MAAM,EAAE,CAEhC;IAED;;;;OAIG;IACG,GAAG,CAAC,MAAM,GAAE,WAA0C,GAAG,OAAO,CAAC,IAAI,CAAC;IA4C5E;;;OAGG;IACH,YAAY,IAAI,IAAI;~~CA4HrB~~;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAEvE"}
1	+ {"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAgBA,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC5B,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAkB,KAAK,mBAAmB,EAA8B,MAAM,cAAc,CAAC;AAepG;;;;;;;GAOG;AACH,qBAAa,YAAY;;gBAaX,OAAO,EAAE,mBAAmB;IAYxC;;;;OAIG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,sBAAsB,GAAG,IAAI;IAKhF,gFAAgF;IAChF,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI;IAK5C,qEAAqE;IACrE,IAAI,QAAQ,IAAI,MAAM,CAGrB;IAED,sEAAsE;IACtE,IAAI,QAAQ,IAAI,SAAS,MAAM,EAAE,CAEhC;IAED;;;;OAIG;IACG,GAAG,CAAC,MAAM,GAAE,WAA0C,GAAG,OAAO,CAAC,IAAI,CAAC;IA4C5E;;;OAGG;IACH,YAAY,IAAI,IAAI;CA0RrB;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAEvE"}

package/dist/runner.js CHANGED Viewed

@@ -1,13 +1,14 @@
 import { randomBytes } from 'node:crypto';
 import { setMaxListeners } from 'node:events';
 import { anySignal } from './abort.js';
-import { CroniqClient, HttpError } from './client.js';
+import { CroniqClient, HttpError, AuthFailedError, PollInstanceConflictError, RunnerOwnershipDeniedError, isInstanceConflict, isOwnershipDenied, isUnauthorized, } from './client.js';
 import { sleep } from './deferred.js';
 import { ExecutionDispatcher } from './dispatcher.js';
 import { HandlerRegistry, } from './handler.js';
 import { resolveRunnerId } from './identity.js';
 import { consoleLogger } from './logger.js';
 import { resolveOptions } from './options.js';
+import { isSafeExecutionId, previewForLog, rejectAssignmentReason, rejectionAckError, } from './sanitize.js';
 /**
  * The Croniq runner: polls the server for work, dispatches handlers
  * concurrently up to {@link CroniqRunnerOptions.maxInflight}, renews leases
@@ -134,6 +135,13 @@ export class CroniqRunner {
         }
     }
     async #pollLoop(signal) {
+        // Consecutive 409 Conflict responses on poll. Reset by a successful poll
+        // or by any non-409 failure — see `maxConsecutivePollConflicts`.
+        let consecutiveConflicts = 0;
+        // Consecutive 401s, tracked separately: a run of conflicts must not
+        // spend the auth budget, or a duplicate deployment would be reported
+        // as an authentication failure.
+        let consecutiveAuthFailures = 0;
         while (!signal.aborted) {
             // Control-slot polling (issue #176): even at capacity we still poll
             // so the server can deliver cancels via PollResponse.cancel. The
@@ -155,10 +163,74 @@ export class CroniqRunner {
             catch (err) {
                 if (signal.aborted)
                     return;
-                const detail = err instanceof HttpError
-                    ? { status: err.status, status_text: err.statusText }
-                    : { error: String(err) };
-                this.#logger.warn(`poll failed — backing off ${this.#options.pollRetryDelayMs}ms`, detail);
+                // A 403 is permanent (issue #437): the credential is bound to
+                // another runner_id, so the next poll fails identically. Stop with
+                // an actionable error instead of retrying on the poll interval,
+                // which makes a fenced-out runner look merely idle.
+                if (isOwnershipDenied(err)) {
+                    this.#logger.error('fatal: poll refused with 403 Forbidden — this runner\'s credential does not own ' +
+                        'runner_id. Give the runner its own runner_id, or release the existing binding ' +
+                        'with DELETE /v1/runners/{id}', { runner_id: this.#runnerId });
+                    throw new RunnerOwnershipDeniedError(this.#runnerId);
+                }
+                // A 401 says the key was rejected, and the client never re-reads
+                // it, so every later poll presents the same dead credential.
+                // Budgeted rather than fatal at once: rotation hands over through an
+                // expiry window (server issue #471) and a race around it should not
+                // kill a healthy runner (issue #473).
+                if (isUnauthorized(err)) {
+                    consecutiveAuthFailures += 1;
+                    if (consecutiveAuthFailures >= this.#options.maxConsecutiveAuthFailures) {
+                        this.#logger.error(`fatal: poll refused with 401 Unauthorized ${consecutiveAuthFailures} times in ` +
+                            'a row — the API key was rejected. It may have been revoked, or its rotation ' +
+                            'grace window may have elapsed. Restart the runner with the current key', { runner_id: this.#runnerId });
+                        throw new AuthFailedError(consecutiveAuthFailures);
+                    }
+                    this.#logger.warn(`poll returned 401 Unauthorized (${consecutiveAuthFailures}/` +
+                        `${this.#options.maxConsecutiveAuthFailures}) — the API key was rejected; ` +
+                        `retrying after ${this.#options.pollRetryDelayMs}ms`, { runner_id: this.#runnerId });
+                    // A 401 is not a 409, so it clears the conflict budget just like
+                    // any other non-409 failure. This branch returns before reaching
+                    // the reset below, so it has to do it here (issue #508).
+                    consecutiveConflicts = 0;
+                    try {
+                        await sleep(this.#options.pollRetryDelayMs, signal);
+                    }
+                    catch {
+                        return;
+                    }
+                    continue;
+                }
+                // Anything that is not a 401 clears the auth budget: a 5xx or a
+                // timeout says nothing about whether the credential is valid.
+                consecutiveAuthFailures = 0;
+                // A 409 means a newer instance has taken this runner_id over
+                // (fencing, issue #374). One is transient — the deposed instance may
+                // win it back — so we back off and retry. A streak of them is a
+                // duplicate deployment, and retrying forever hides it behind a
+                // warning that scrolls past (issue #134 sub-item 1).
+                if (isInstanceConflict(err)) {
+                    consecutiveConflicts += 1;
+                    if (consecutiveConflicts >= this.#options.maxConsecutivePollConflicts) {
+                        this.#logger.error(`fatal: poll refused with 409 Conflict ${consecutiveConflicts} times in a row — ` +
+                            'another runner is registered with this runner_id. Stop the duplicate process ' +
+                            'or rotate the runner_id', { runner_id: this.#runnerId });
+                        throw new PollInstanceConflictError(this.#runnerId, consecutiveConflicts);
+                    }
+                    this.#logger.warn(`poll returned 409 Conflict (${consecutiveConflicts}/` +
+                        `${this.#options.maxConsecutivePollConflicts}) — another runner instance may be ` +
+                        `active; retrying after ${this.#options.pollRetryDelayMs}ms`, { runner_id: this.#runnerId });
+                }
+                else {
+                    // Non-409 transient (5xx, network, timeout) — unrelated to instance
+                    // ownership, so a recovered outage must not accumulate with later
+                    // conflicts.
+                    consecutiveConflicts = 0;
+                    const detail = err instanceof HttpError
+                        ? { status: err.status, status_text: err.statusText }
+                        : { error: String(err) };
+                    this.#logger.warn(`poll failed — backing off ${this.#options.pollRetryDelayMs}ms`, detail);
+                }
                 try {
                     await sleep(this.#options.pollRetryDelayMs, signal);
                 }
@@ -167,6 +239,13 @@ export class CroniqRunner {
                 }
                 continue;
             }
+            // Poll succeeded — the other instance must have died or released the
+            // identity, so the conflict streak starts over. The auth budget starts
+            // over with it: the credential just worked, so an earlier 401 must not
+            // still count against a runner that has been healthy since (issue
+            // #507).
+            consecutiveConflicts = 0;
+            consecutiveAuthFailures = 0;
             this.#handleCancellations(response.cancel);
             if (atCapacity) {
                 // Work is always empty in this branch (server-side capacity
@@ -180,6 +259,14 @@ export class CroniqRunner {
                 continue;
             }
             for (const assignment of response.work) {
+                // Ingest guard: an assignment carrying a control character in either
+                // identifier never reaches a handler, a log record or a telemetry
+                // attribute. See sanitize.ts for the rule and why it is a denylist.
+                const rejected = rejectAssignmentReason(assignment.execution_id, assignment.job_key);
+                if (rejected !== undefined) {
+                    await this.#rejectAssignment(assignment, rejected, signal);
+                    continue;
+                }
                 if (this.#inflight.has(assignment.execution_id))
                     continue;
                 const ac = new AbortController();
@@ -193,13 +280,65 @@ export class CroniqRunner {
             }
         }
     }
+    /**
+     * Handle a work assignment refused by the ingest guard.
+     *
+     * The two cases differ in what the runner can still tell the server:
+     *
+     * - **Unsafe `execution_id`** — nothing. That value is what addresses an ack
+     *   or renew, so there is no way to report anything about this execution.
+     *   The assignment is dropped and the server's lease expires.
+     * - **Unsafe `job_key`, valid `execution_id`** — a failure ack. The handler
+     *   never runs, but the execution completes with an error naming the
+     *   offending field, so the operator sees a dead-lettered execution instead
+     *   of an execution that is silently requeued by the stale-claim reaper and
+     *   refused again on every later poll.
+     *
+     * Awaited rather than fire-and-forget: this path only triggers on malformed
+     * input, so pausing the loop for one small POST costs nothing and keeps the
+     * ordering observable.
+     */
+    async #rejectAssignment(assignment, field, signal) {
+        // Escaped and truncated explicitly: this is the one place a refused value
+        // is rendered, and it is hostile by definition.
+        const preview = previewForLog(assignment[field]);
+        const ackable = field === 'job_key';
+        this.#logger.warn('rejected work assignment with unsafe identifier', {
+            field,
+            value: preview,
+            acked: ackable,
+        });
+        if (!ackable)
+            return;
+        try {
+            await this.#client.ack({
+                runner_id: this.#runnerId,
+                execution_id: assignment.execution_id,
+                status: 'failure',
+                attempt: assignment.attempt,
+                duration_ms: 0,
+                error: rejectionAckError(field, assignment[field]),
+            }, signal);
+        }
+        catch (err) {
+            this.#logger.warn('failed to ack a rejected work assignment', {
+                execution_id: assignment.execution_id,
+                error: String(err),
+            });
+        }
+    }
     #handleCancellations(cancelIds) {
         if (cancelIds.length === 0)
             return;
         for (const id of cancelIds) {
+            // Cancel ids are server-supplied too. An unsafe one can never match an
+            // in-flight key (those were validated on ingest), but checking here
+            // keeps the value out of the log line below on any code path.
+            if (!isSafeExecutionId(id))
+                continue;
             const ac = this.#inflight.get(id);
             if (ac && !ac.signal.aborted) {
-                this.#logger.info(`server requested cancellation of execution ${id}`, { execution_id: id });
+                this.#logger.info('server requested cancellation', { execution_id: id });
                 ac.abort();
             }
         }

package/dist/runner.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EACL,eAAe,GAGhB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAe,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,cAAc,EAAwD,MAAM,cAAc,CAAC;AAGpG;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACd,QAAQ,CAAwB;IAChC,OAAO,CAAe;IACtB,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IAClC,OAAO,CAAS;IAChB,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IAE1C,SAAS,CAAqB;IAC9B,WAAW,CAAkC;IAC7C,IAAI,GAAG,KAAK,CAAC;IAEb,YAAY,OAA4B;QACtC,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAAC;YAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACtC,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAc,EAAE,OAAmB,EAAE,IAA6B;QACvE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,iBAAiB,CAAC,OAAmB;QACnC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,IAAI,QAAQ;QACV,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,sEAAsE;IACtE,IAAI,QAAQ;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,SAAsB,IAAI,eAAe,EAAE,CAAC,MAAM;QAC1D,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAI,CAAC,SAAS,GAAG,eAAe,CAC9B;YACE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAChC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAC5C,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;SAC3C,EACD,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,CAAC;YACzC,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAC9B,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;YAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ;YAC9D,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;SACxC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,eAAe,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAmB;QAC9C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAuB;oBAClC,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,SAAS,EAAE,IAAI,CAAC,SAAU;oBAC1B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;iBACzC,CAAC;gBACF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;oBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBACjE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;oBAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;gBAC7E,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,yBAAyB,KAAK,CAAC,MAAM,oCAAoC;oBACvE,wCAAwC,EAC1C,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAmB;QACjC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,oEAAoE;YACpE,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAEpE,MAAM,OAAO,GAAgB;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAU;gBAC1B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBACxC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBACvC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACpC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aACzB,CAAC;YAEF,IAAI,QAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACnF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,MAAM,CAAC,OAAO;oBAAE,OAAO;gBAC3B,MAAM,MAAM,GAAG,GAAG,YAAY,SAAS;oBACrC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE;oBACrD,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC3F,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE3C,IAAI,UAAU,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,8DAA8D;gBAC9D,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,SAAS;YACX,CAAC;YAED,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;oBAAE,SAAS;gBAC1D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAEhD,iEAAiE;gBACjE,KAAK,IAAI,CAAC,WAAY;qBACnB,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC;qBAChC,OAAO,CAAC,GAAG,EAAE;oBACZ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACjD,CAAC,CAAC,CAAC;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,SAAmB;QACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACnC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC5F,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,oCAAoC,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,EACpG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CACzE,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACxD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,iDAAiD,EAC5F,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAC/B,CAAC;YACF,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO;oBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACrC,CAAC;YACD,6DAA6D;YAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACxC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;gBAC5D,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC"}
1	+ {"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EACL,YAAY,EACZ,SAAS,EACT,eAAe,EACf,yBAAyB,EACzB,0BAA0B,EAC1B,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EACL,eAAe,GAGhB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAe,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,cAAc,EAAwD,MAAM,cAAc,CAAC;AAOpG,OAAO,EACL,iBAAiB,EACjB,aAAa,EAEb,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IACd,QAAQ,CAAwB;IAChC,OAAO,CAAe;IACtB,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;IAClC,OAAO,CAAS;IAChB,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IAE1C,SAAS,CAAqB;IAC9B,WAAW,CAAkC;IAC7C,IAAI,GAAG,KAAK,CAAC;IAEb,YAAY,OAA4B;QACtC,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,YAAY,CAAC;YAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;YAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5B,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACtC,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAc,EAAE,OAAmB,EAAE,IAA6B;QACvE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,iBAAiB,CAAC,OAAmB;QACnC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,IAAI,QAAQ;QACV,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,sEAAsE;IACtE,IAAI,QAAQ;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,SAAsB,IAAI,eAAe,EAAE,CAAC,MAAM;QAC1D,IAAI,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,IAAI,CAAC,SAAS,GAAG,eAAe,CAC9B;YACE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAChC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;YAC5C,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;SAC3C,EACD,IAAI,CAAC,OAAO,CACb,CAAC;QAEF,IAAI,CAAC,WAAW,GAAG,IAAI,mBAAmB,CAAC;YACzC,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAC9B,MAAM,EAAE,IAAI,CAAC,OAAO;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE;YAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ;YAC9D,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;SACxC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAE1C,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,wEAAwE;QACxE,gEAAgE;QAChE,eAAe,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,MAAmB;QAC9C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAuB;oBAClC,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,SAAS,EAAE,IAAI,CAAC,SAAU;oBAC1B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;iBACzC,CAAC;gBACF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;oBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBACjE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;oBAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;gBAC7E,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,yBAAyB,KAAK,CAAC,MAAM,oCAAoC;oBACvE,wCAAwC,EAC1C,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAmB;QACjC,yEAAyE;QACzE,iEAAiE;QACjE,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,oEAAoE;QACpE,qEAAqE;QACrE,gCAAgC;QAChC,IAAI,uBAAuB,GAAG,CAAC,CAAC;QAEhC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,oEAAoE;YACpE,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAEpE,MAAM,OAAO,GAAgB;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAU;gBAC1B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;gBACxC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBACvC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACpC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;aACzB,CAAC;YAEF,IAAI,QAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YACnF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,MAAM,CAAC,OAAO;oBAAE,OAAO;gBAC3B,8DAA8D;gBAC9D,mEAAmE;gBACnE,gEAAgE;gBAChE,oDAAoD;gBACpD,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAChB,kFAAkF;wBAChF,gFAAgF;wBAChF,8BAA8B,EAChC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,CAC/B,CAAC;oBACF,MAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC;gBACxD,CAAC;gBACD,iEAAiE;gBACjE,6DAA6D;gBAC7D,qEAAqE;gBACrE,oEAAoE;gBACpE,sCAAsC;gBACtC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,uBAAuB,IAAI,CAAC,CAAC;oBAC7B,IAAI,uBAAuB,IAAI,IAAI,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC;wBACxE,IAAI,CAAC,OAAO,CAAC,KAAK,CAChB,6CAA6C,uBAAuB,YAAY;4BAC9E,8EAA8E;4BAC9E,wEAAwE,EAC1E,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,CAC/B,CAAC;wBACF,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;oBACrD,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,mCAAmC,uBAAuB,GAAG;wBAC3D,GAAG,IAAI,CAAC,QAAQ,CAAC,0BAA0B,gCAAgC;wBAC3E,kBAAkB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EACtD,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,CAC/B,CAAC;oBACF,iEAAiE;oBACjE,iEAAiE;oBACjE,yDAAyD;oBACzD,oBAAoB,GAAG,CAAC,CAAC;oBACzB,IAAI,CAAC;wBACH,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;oBACtD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO;oBACT,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,gEAAgE;gBAChE,8DAA8D;gBAC9D,uBAAuB,GAAG,CAAC,CAAC;gBAC5B,6DAA6D;gBAC7D,qEAAqE;gBACrE,gEAAgE;gBAChE,+DAA+D;gBAC/D,qDAAqD;gBACrD,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,oBAAoB,IAAI,CAAC,CAAC;oBAC1B,IAAI,oBAAoB,IAAI,IAAI,CAAC,QAAQ,CAAC,2BAA2B,EAAE,CAAC;wBACtE,IAAI,CAAC,OAAO,CAAC,KAAK,CAChB,yCAAyC,oBAAoB,oBAAoB;4BAC/E,+EAA+E;4BAC/E,yBAAyB,EAC3B,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,CAC/B,CAAC;wBACF,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,SAAU,EAAE,oBAAoB,CAAC,CAAC;oBAC7E,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,+BAA+B,oBAAoB,GAAG;wBACpD,GAAG,IAAI,CAAC,QAAQ,CAAC,2BAA2B,qCAAqC;wBACjF,0BAA0B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAC9D,EAAE,SAAS,EAAE,IAAI,CAAC,SAAU,EAAE,CAC/B,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,oEAAoE;oBACpE,kEAAkE;oBAClE,aAAa;oBACb,oBAAoB,GAAG,CAAC,CAAC;oBACzB,MAAM,MAAM,GAAG,GAAG,YAAY,SAAS;wBACrC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE;wBACrD,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC7F,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;gBACtD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,SAAS;YACX,CAAC;YAED,qEAAqE;YACrE,uEAAuE;YACvE,uEAAuE;YACvE,kEAAkE;YAClE,SAAS;YACT,oBAAoB,GAAG,CAAC,CAAC;YACzB,uBAAuB,GAAG,CAAC,CAAC;YAE5B,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE3C,IAAI,UAAU,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,8DAA8D;gBAC9D,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,SAAS;YACX,CAAC;YAED,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvC,qEAAqE;gBACrE,kEAAkE;gBAClE,oEAAoE;gBACpE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;gBACrF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAC3D,SAAS;gBACX,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;oBAAE,SAAS;gBAC1D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;gBACjC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAEhD,iEAAiE;gBACjE,KAAK,IAAI,CAAC,WAAY;qBACnB,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC;qBAChC,OAAO,CAAC,GAAG,EAAE;oBACZ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBACjD,CAAC,CAAC,CAAC;YACP,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,iBAAiB,CACrB,UAA0B,EAC1B,KAAoB,EACpB,MAAmB;QAEnB,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iDAAiD,EAAE;YACnE,KAAK;YACL,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QACH,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB;gBACE,SAAS,EAAE,IAAI,CAAC,SAAU;gBAC1B,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,WAAW,EAAE,CAAC;gBACd,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;aACnD,EACD,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBAC5D,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oBAAoB,CAAC,SAAmB;QACtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACnC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,uEAAuE;YACvE,oEAAoE;YACpE,8DAA8D;YAC9D,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAAE,SAAS;YACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;gBACzE,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,oCAAoC,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,EACpG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CACzE,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACxD,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,iDAAiD,EAC5F,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAC/B,CAAC;YACF,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO;oBAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YACrC,CAAC;YACD,6DAA6D;YAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACxC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;gBAC5D,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC"}

package/dist/sanitize.d.ts ADDED Viewed

@@ -0,0 +1,82 @@
+/**
+ * Hygiene for server-supplied strings.
+ *
+ * `job_key` and `execution_id` arrive from the Croniq server and are echoed
+ * into logs and telemetry. The threat actor is a malicious or compromised
+ * server — but not only: in a multi-tenant deployment anyone who can name a
+ * job key in the Croniqfile controls a string that round-trips to every
+ * runner unchanged. A value carrying CRLF forges log records; one carrying
+ * ANSI escapes repaints the operator's terminal.
+ *
+ * Two layers defend against that:
+ *
+ * 1. {@link assertSafeAssignmentIdentifiers} rejects an assignment whose
+ *    identifiers fall outside the shape Croniq itself defines, so hostile
+ *    values never enter the SDK.
+ * 2. {@link escapeControlChars} escapes anything a terminal would interpret,
+ *    applied wherever this SDK renders text itself (see `logger.ts`).
+ */
+/**
+ * Maximum accepted `job_key` length, counted in Unicode scalar values.
+ *
+ * The server stores job keys in an unbounded `TEXT` column
+ * (`crates/croniq-store/src/migrations/001_initial.sql`), so this bound is the
+ * SDK's own. 256 is far above any plausible `namespace:name:variant` while
+ * still bounding what a single log line can be made to hold.
+ */
+export declare const MAX_JOB_KEY_LENGTH = 256;
+/**
+ * Maximum accepted `execution_id` length. The server always emits a v4 UUID
+ * (36 characters); 64 leaves room for the shorter opaque ids used by mock
+ * servers and the conformance suite.
+ */
+export declare const MAX_EXECUTION_ID_LENGTH = 64;
+/**
+ * Escape every character a terminal interprets rather than prints: the C0
+ * range (including ESC, `0x1B`, which introduces every ANSI sequence), DEL,
+ * and the C1 range.
+ *
+ * This mirrors what Go's `slog` handlers do for attribute values, and is
+ * applied here because this SDK's console logger writes the message itself.
+ * Field maps do not need it — they are rendered with `JSON.stringify`, which
+ * already escapes these.
+ */
+export declare function escapeControlChars(value: string): string;
+/**
+ * Render a rejected value for a diagnostic: escaped so it cannot forge a
+ * record, and truncated so an over-long value cannot flood the log either.
+ */
+export declare function previewForLog(value: unknown, maxLength?: number): string;
+/**
+ * True when `value` is a job key this runner is willing to act on: non-empty,
+ * within {@link MAX_JOB_KEY_LENGTH} scalar values, and free of control
+ * characters. Iteration is over scalar values (`for…of`), not UTF-16 code
+ * units, so an astral character counts once and a surrogate pair is never
+ * inspected half at a time.
+ */
+export declare function isSafeJobKey(value: unknown): value is string;
+/** True when `value` is an execution id this runner is willing to act on. */
+export declare function isSafeExecutionId(value: unknown): value is string;
+/** The identifier that makes a work assignment unacceptable. */
+export type RejectedField = 'execution_id' | 'job_key';
+/**
+ * Names the identifier that makes a work assignment unacceptable, or
+ * `undefined` when both pass. Only the field name is returned — the offending
+ * value is reported separately, escaped, so the diagnostic cannot itself become
+ * the injection vector.
+ *
+ * The two outcomes are handled differently by the caller, and the order here
+ * is what makes that possible. An unsafe `execution_id` leaves nothing to
+ * address the server with, so the assignment is dropped silently. An unsafe
+ * `job_key` with a *valid* `execution_id` can still be acked as a failure, so
+ * the operator gets a dead-lettered execution naming the problem instead of a
+ * silent requeue loop.
+ */
+export declare function rejectAssignmentReason(executionId: unknown, jobKey: unknown): RejectedField | undefined;
+/**
+ * The `error` string acked for an assignment rejected on `job_key`. Names the
+ * field and shows the offending value escaped, so the dead-letter row explains
+ * itself without carrying a live payload.
+ */
+export declare function rejectionAckError(field: RejectedField, value: unknown): string;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/sanitize.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../src/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAkC1C;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAcxD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,SAAM,GAAG,MAAM,CASrE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAQ5D;AAED,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAOjE;AAED,gEAAgE;AAChE,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,SAAS,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,OAAO,EACpB,MAAM,EAAE,OAAO,GACd,aAAa,GAAG,SAAS,CAI3B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAE9E"}

package/dist/sanitize.js ADDED Viewed

@@ -0,0 +1,157 @@
+/**
+ * Hygiene for server-supplied strings.
+ *
+ * `job_key` and `execution_id` arrive from the Croniq server and are echoed
+ * into logs and telemetry. The threat actor is a malicious or compromised
+ * server — but not only: in a multi-tenant deployment anyone who can name a
+ * job key in the Croniqfile controls a string that round-trips to every
+ * runner unchanged. A value carrying CRLF forges log records; one carrying
+ * ANSI escapes repaints the operator's terminal.
+ *
+ * Two layers defend against that:
+ *
+ * 1. {@link assertSafeAssignmentIdentifiers} rejects an assignment whose
+ *    identifiers fall outside the shape Croniq itself defines, so hostile
+ *    values never enter the SDK.
+ * 2. {@link escapeControlChars} escapes anything a terminal would interpret,
+ *    applied wherever this SDK renders text itself (see `logger.ts`).
+ */
+/**
+ * Maximum accepted `job_key` length, counted in Unicode scalar values.
+ *
+ * The server stores job keys in an unbounded `TEXT` column
+ * (`crates/croniq-store/src/migrations/001_initial.sql`), so this bound is the
+ * SDK's own. 256 is far above any plausible `namespace:name:variant` while
+ * still bounding what a single log line can be made to hold.
+ */
+export const MAX_JOB_KEY_LENGTH = 256;
+/**
+ * Maximum accepted `execution_id` length. The server always emits a v4 UUID
+ * (36 characters); 64 leaves room for the shorter opaque ids used by mock
+ * servers and the conformance suite.
+ */
+export const MAX_EXECUTION_ID_LENGTH = 64;
+/**
+ * Whether `codePoint` is one a terminal interprets rather than prints: the C0
+ * range (`U+0000`–`U+001F`, covering NUL, CR, LF and the ESC that introduces
+ * every ANSI sequence), DEL (`U+007F`), and the C1 range
+ * (`U+0080`–`U+009F`).
+ *
+ * This is the rule for `job_key`, and it is a *denylist* on purpose. An
+ * allowlist — say, the character set `Lexer::is_ident_char` accepts for an
+ * unquoted key in `crates/croniq-config/src/lexer.rs` — would reject keys a
+ * legitimate server can issue: `parse_job_key` (`parser.rs:687-717`) also
+ * accepts a `QuotedString` and then enforces only the "two or three
+ * colon-separated parts" rule, so `job "billing:monthly invoice" { … }` is
+ * legal DSL today, and `POST /v1/jobs` constrains the key not at all. Dropping
+ * such an assignment would strand a valid configuration.
+ *
+ * Rejecting the control classes instead blocks precisely the log-forgery and
+ * ANSI-injection payloads without touching anything legitimate. An interior
+ * space is accepted; so is any other printable scalar value, in any script.
+ */
+function isControlScalar(codePoint) {
+    return codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f);
+}
+/**
+ * Accepted `execution_id` shape. The server generates these as v4 UUIDs
+ * (`Uuid::new_v4()`), which is a strict subset of this pattern; the pattern is
+ * kept slightly wider so opaque ids from mock servers and older builds still
+ * round-trip. What it excludes is what matters: control characters, ESC,
+ * whitespace, and anything else a terminal or log parser reacts to.
+ */
+const EXECUTION_ID_PATTERN = /^[A-Za-z0-9._:-]+$/;
+/**
+ * Escape every character a terminal interprets rather than prints: the C0
+ * range (including ESC, `0x1B`, which introduces every ANSI sequence), DEL,
+ * and the C1 range.
+ *
+ * This mirrors what Go's `slog` handlers do for attribute values, and is
+ * applied here because this SDK's console logger writes the message itself.
+ * Field maps do not need it — they are rendered with `JSON.stringify`, which
+ * already escapes these.
+ */
+export function escapeControlChars(value) {
+    // eslint-disable-next-line no-control-regex
+    return value.replace(/[\u0000-\u001F\u007F-\u009F]/g, (ch) => {
+        switch (ch) {
+            case '\n':
+                return '\\n';
+            case '\r':
+                return '\\r';
+            case '\t':
+                return '\\t';
+            default:
+                return `\\u${ch.charCodeAt(0).toString(16).padStart(4, '0')}`;
+        }
+    });
+}
+/**
+ * Render a rejected value for a diagnostic: escaped so it cannot forge a
+ * record, and truncated so an over-long value cannot flood the log either.
+ */
+export function previewForLog(value, maxLength = 120) {
+    const text = typeof value === 'string' ? value : String(value);
+    // Slice by scalar values, not UTF-16 code units, so truncation cannot leave
+    // a lone surrogate behind.
+    const scalars = [...text];
+    const clipped = scalars.length > maxLength
+        ? `${scalars.slice(0, maxLength).join('')}…`
+        : text;
+    return escapeControlChars(clipped);
+}
+/**
+ * True when `value` is a job key this runner is willing to act on: non-empty,
+ * within {@link MAX_JOB_KEY_LENGTH} scalar values, and free of control
+ * characters. Iteration is over scalar values (`for…of`), not UTF-16 code
+ * units, so an astral character counts once and a surrogate pair is never
+ * inspected half at a time.
+ */
+export function isSafeJobKey(value) {
+    if (typeof value !== 'string' || value.length === 0)
+        return false;
+    let scalars = 0;
+    for (const ch of value) {
+        if (++scalars > MAX_JOB_KEY_LENGTH)
+            return false;
+        if (isControlScalar(ch.codePointAt(0)))
+            return false;
+    }
+    return true;
+}
+/** True when `value` is an execution id this runner is willing to act on. */
+export function isSafeExecutionId(value) {
+    return (typeof value === 'string' &&
+        value.length > 0 &&
+        value.length <= MAX_EXECUTION_ID_LENGTH &&
+        EXECUTION_ID_PATTERN.test(value));
+}
+/**
+ * Names the identifier that makes a work assignment unacceptable, or
+ * `undefined` when both pass. Only the field name is returned — the offending
+ * value is reported separately, escaped, so the diagnostic cannot itself become
+ * the injection vector.
+ *
+ * The two outcomes are handled differently by the caller, and the order here
+ * is what makes that possible. An unsafe `execution_id` leaves nothing to
+ * address the server with, so the assignment is dropped silently. An unsafe
+ * `job_key` with a *valid* `execution_id` can still be acked as a failure, so
+ * the operator gets a dead-lettered execution naming the problem instead of a
+ * silent requeue loop.
+ */
+export function rejectAssignmentReason(executionId, jobKey) {
+    if (!isSafeExecutionId(executionId))
+        return 'execution_id';
+    if (!isSafeJobKey(jobKey))
+        return 'job_key';
+    return undefined;
+}
+/**
+ * The `error` string acked for an assignment rejected on `job_key`. Names the
+ * field and shows the offending value escaped, so the dead-letter row explains
+ * itself without carrying a live payload.
+ */
+export function rejectionAckError(field, value) {
+    return `rejected by runner: unsafe ${field} ${previewForLog(value)}`;
+}
+//# sourceMappingURL=sanitize.js.map