@validate.qa/runner 1.0.96 → 1.0.98

package/dist/tar-extract-child.js

@@ -25,6 +25,58 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// ../runner-core/dist/services/isolated-child-host.js
+var require_isolated_child_host = __commonJS({
+  "../runner-core/dist/services/isolated-child-host.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.serveIsolatedChild = serveIsolatedChild;
+    function runFault(fault) {
+      switch (fault) {
+        case "throw-async":
+          setImmediate(() => {
+            throw new Error("injected isolated child crash");
+          });
+          return new Promise(() => {
+          });
+        case "abort":
+          process.abort();
+          break;
+        case "hang":
+          setInterval(() => {
+          }, 1e3);
+          return new Promise(() => {
+          });
+        case "oom": {
+          const hold = [];
+          for (; ; )
+            hold.push(new Array(1e6).fill(hold.length));
+        }
+        case "report-env":
+          return Promise.resolve({ ok: true, env: { ...process.env } });
+        default:
+          break;
+      }
+      return null;
+    }
+    function serveIsolatedChild(markerEnv, handle) {
+      if (typeof process.send !== "function" || process.env[markerEnv] !== "1")
+        return;
+      const reply = (message) => {
+        process.send?.(message, () => process.exit(0));
+      };
+      process.on("disconnect", () => process.exit(1));
+      process.once("message", async (request) => {
+        try {
+          reply(await (runFault(request.fault) ?? handle(request.job)));
+        } catch (err) {
+          reply({ ok: false, message: err instanceof Error ? err.message : String(err) });
+        }
+      });
+    }
+  }
+});
+
 // ../../node_modules/adm-zip/util/constants.js
 var require_constants = __commonJS({
   "../../node_modules/adm-zip/util/constants.js"(exports2, module2) {
@@ -8915,11 +8967,22 @@ var require_tar_isolated = __commonJS({
   "../runner-core/dist/services/tar-isolated.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.TAR_ISOLATED_MAX_CHILDREN_PER_TENANT = exports2.TAR_ISOLATED_MAX_CHILDREN = exports2.TarIsolationError = exports2.TarIsolationUnavailableError = exports2.TAR_ISOLATION_UNAVAILABLE_MESSAGE = exports2.TAR_CHILD_MARKER_ENV = exports2.TAR_ISOLATED_MAX_OLD_SPACE_MB = exports2.TAR_ISOLATED_TIMEOUT_MS = void 0;
+    exports2.IsolationSlots = exports2.SlotPool = exports2.ISOLATED_MIN_CHILD_HEAP_MB = exports2.ISOLATED_MEMORY_MARGIN_MB = exports2.TAR_ISOLATED_MAX_CHILDREN_PER_TENANT = exports2.TAR_ISOLATED_MAX_CHILDREN = exports2.ISOLATED_MAX_CHILDREN = exports2.TarIsolationError = exports2.TarIsolationUnavailableError = exports2.TAR_ISOLATION_UNAVAILABLE_MESSAGE = exports2.TAR_CHILD_MARKER_ENV = exports2.TAR_ISOLATED_MAX_OLD_SPACE_MB = exports2.TAR_ISOLATED_TIMEOUT_MS = void 0;
+    exports2.isolatedChildEnv = isolatedChildEnv;
     exports2.tarChildEnv = tarChildEnv;
+    exports2.resolveIsolatedChildEntry = resolveIsolatedChildEntry;
     exports2.resolveTarChildEntry = resolveTarChildEntry;
+    exports2.deriveIsolatedChildBudget = deriveIsolatedChildBudget;
+    exports2.deriveMaxIsolatedChildren = deriveMaxIsolatedChildren;
+    exports2.effectiveChildHeapMb = effectiveChildHeapMb;
+    exports2.envHeapCap = envHeapCap;
+    exports2.readMemoryLimitBytes = readMemoryLimitBytes;
+    exports2.isolatedChildBudget = isolatedChildBudget;
+    exports2.maxIsolatedChildren = maxIsolatedChildren;
     exports2.tarIsolationLoad = tarIsolationLoad;
+    exports2.isolationLoad = isolationLoad;
     exports2.runTarJobIsolated = runTarJobIsolated;
+    exports2.runIsolatedJob = runIsolatedJob;
     exports2.extractTarGzIsolated = extractTarGzIsolated;
     exports2.extractZipIsolated = extractZipIsolated;
     exports2.slimRepoArchiveIsolated = slimRepoArchiveIsolated;
@@ -8927,8 +8990,10 @@ var require_tar_isolated = __commonJS({
     var node_child_process_1 = require("child_process");
     var node_fs_1 = require("fs");
     var promises_1 = require("fs/promises");
+    var node_os_1 = require("os");
     var node_path_1 = require("path");
     var node_url_1 = require("url");
+    var node_v8_1 = require("v8");
     var repo_acquire_js_1 = require_repo_acquire();
     exports2.TAR_ISOLATED_TIMEOUT_MS = 5 * 60 * 1e3;
     exports2.TAR_ISOLATED_MAX_OLD_SPACE_MB = 512;
@@ -8957,23 +9022,26 @@ var require_tar_isolated = __commonJS({
       const n = Number(process.env[name]);
       return Number.isSafeInteger(n) && n > 0 ? n : fallback;
     }
-    function tarChildEnv(source = process.env) {
+    function isolatedChildEnv(markerEnv, source = process.env) {
       const env = {};
       for (const key of CHILD_ENV_ALLOWLIST) {
         const value = source[key];
         if (typeof value === "string")
           env[key] = value;
       }
-      env[exports2.TAR_CHILD_MARKER_ENV] = "1";
+      env[markerEnv] = "1";
       return env;
     }
-    function resolveTarChildEntry() {
-      if (typeof __dirname !== "string")
+    function tarChildEnv(source = process.env) {
+      return isolatedChildEnv(exports2.TAR_CHILD_MARKER_ENV, source);
+    }
+    function resolveIsolatedChildEntry(dir, basename) {
+      if (typeof dir !== "string")
         return null;
-      const js = (0, node_path_1.join)(__dirname, `${CHILD_BASENAME}.js`);
+      const js = (0, node_path_1.join)(dir, `${basename}.js`);
       if ((0, node_fs_1.existsSync)(js))
         return { file: js, execArgv: [] };
-      const ts = (0, node_path_1.join)(__dirname, `${CHILD_BASENAME}.ts`);
+      const ts = (0, node_path_1.join)(dir, `${basename}.ts`);
       if (!(0, node_fs_1.existsSync)(ts))
         return null;
       try {
@@ -8982,10 +9050,76 @@ var require_tar_isolated = __commonJS({
         return null;
       }
     }
-    exports2.TAR_ISOLATED_MAX_CHILDREN = 2;
+    function resolveTarChildEntry() {
+      return resolveIsolatedChildEntry(typeof __dirname === "string" ? __dirname : void 0, CHILD_BASENAME);
+    }
+    exports2.ISOLATED_MAX_CHILDREN = 2;
+    exports2.TAR_ISOLATED_MAX_CHILDREN = exports2.ISOLATED_MAX_CHILDREN;
     exports2.TAR_ISOLATED_MAX_CHILDREN_PER_TENANT = 1;
-    function maxChildren() {
-      return positiveIntEnv("REPO_ARCHIVE_EXTRACT_MAX_CHILDREN", exports2.TAR_ISOLATED_MAX_CHILDREN);
+    exports2.ISOLATED_MEMORY_MARGIN_MB = 256;
+    exports2.ISOLATED_MIN_CHILD_HEAP_MB = 256;
+    var MB = 1024 * 1024;
+    function deriveIsolatedChildBudget(input) {
+      const freeMb = (input.memoryLimitBytes - input.heapLimitBytes) / MB - (input.marginMb ?? exports2.ISOLATED_MEMORY_MARGIN_MB);
+      const fit = Math.floor(freeMb / Math.max(1, input.childHeapMb));
+      if (Number.isFinite(fit) && fit >= 1)
+        return { children: Math.min(exports2.ISOLATED_MAX_CHILDREN, fit), heapLimitMb: null };
+      return { children: 1, heapLimitMb: Math.max(exports2.ISOLATED_MIN_CHILD_HEAP_MB, Number.isFinite(freeMb) ? Math.floor(freeMb) : 0) };
+    }
+    function deriveMaxIsolatedChildren(input) {
+      return deriveIsolatedChildBudget(input).children;
+    }
+    function effectiveChildHeapMb(cap, budget) {
+      if (cap.fromEnv || budget.heapLimitMb === null)
+        return cap.mb;
+      return Math.min(cap.mb, budget.heapLimitMb);
+    }
+    function envHeapCap(name, fallback) {
+      const n = Number(process.env[name]);
+      return Number.isSafeInteger(n) && n > 0 ? { mb: n, fromEnv: true } : { mb: fallback, fromEnv: false };
+    }
+    function readMemoryLimitBytes(read = (path) => (0, node_fs_1.readFileSync)(path, "utf8"), total = node_os_1.totalmem) {
+      try {
+        const raw = read("/sys/fs/cgroup/memory.max").trim();
+        const limit = Number(raw);
+        if (raw !== "max" && Number.isSafeInteger(limit) && limit > 0)
+          return Math.min(limit, total());
+      } catch {
+      }
+      return total();
+    }
+    var memoryLimitCache;
+    var childHeapCaps = /* @__PURE__ */ new Set();
+    function isolatedChildBudget() {
+      const override = Number(process.env.ISOLATED_CHILDREN_MAX ?? process.env.REPO_ARCHIVE_EXTRACT_MAX_CHILDREN);
+      if (Number.isSafeInteger(override) && override > 0)
+        return { children: override, heapLimitMb: null };
+      memoryLimitCache ??= readMemoryLimitBytes();
+      let childHeapMb = 0;
+      for (const cap of childHeapCaps)
+        childHeapMb = Math.max(childHeapMb, cap().mb);
+      return deriveIsolatedChildBudget({
+        memoryLimitBytes: memoryLimitCache,
+        heapLimitBytes: (0, node_v8_1.getHeapStatistics)().heap_size_limit,
+        childHeapMb: childHeapMb || exports2.TAR_ISOLATED_MAX_OLD_SPACE_MB
+      });
+    }
+    function maxIsolatedChildren() {
+      return isolatedChildBudget().children;
+    }
+    var heapReductionLogged = false;
+    function childHeapMbFor(slots, log) {
+      const cap = slots.heapCap();
+      const budget = isolatedChildBudget();
+      const mb = effectiveChildHeapMb(cap, budget);
+      if (mb < cap.mb && !heapReductionLogged) {
+        heapReductionLogged = true;
+        const floored = budget.heapLimitMb === exports2.ISOLATED_MIN_CHILD_HEAP_MB ? ` (the ${exports2.ISOLATED_MIN_CHILD_HEAP_MB} MB floor: the ${exports2.ISOLATED_MEMORY_MARGIN_MB} MB margin is not fully kept)` : "";
+        const line = `[isolated-child] isolated child heap reduced to ${mb} MB to fit memory${floored}; set ISOLATED_CHILDREN_MAX or the kind's heap env knob to override`;
+        console.warn(line);
+        log?.(line);
+      }
+      return mb;
     }
     var SlotPool = class {
       capacity;
@@ -9027,31 +9161,59 @@ var require_tar_isolated = __commonJS({
           this.inUse -= 1;
       }
     };
-    var globalSlots = new SlotPool(maxChildren);
-    var tenantSlots = /* @__PURE__ */ new Map();
-    function tenantPool(key) {
-      let pool = tenantSlots.get(key);
-      if (!pool) {
-        pool = new SlotPool(() => exports2.TAR_ISOLATED_MAX_CHILDREN_PER_TENANT);
-        tenantSlots.set(key, pool);
-      }
-      return pool;
-    }
-    function releaseTenant(key, pool) {
-      pool.release();
-      if (pool.inUse === 0 && pool.queued === 0 && tenantSlots.get(key) === pool)
-        tenantSlots.delete(key);
-    }
+    exports2.SlotPool = SlotPool;
+    var processSlots = new SlotPool(maxIsolatedChildren);
+    var IsolationSlots = class {
+      perTenant;
+      heapCap;
+      global = processSlots;
+      /** Per-tenant pools, created on demand and dropped when idle. */
+      tenants = /* @__PURE__ */ new Map();
+      /** This kind's children still running. */
+      live = /* @__PURE__ */ new Set();
+      constructor(perTenant, heapCap) {
+        this.perTenant = perTenant;
+        this.heapCap = heapCap;
+        childHeapCaps.add(heapCap);
+      }
+      tenantPool(key) {
+        let pool = this.tenants.get(key);
+        if (!pool) {
+          pool = new SlotPool(() => this.perTenant);
+          this.tenants.set(key, pool);
+        }
+        return pool;
+      }
+      /** Drop an idle tenant pool (after a release, or a wait that gave up). */
+      forgetIfIdle(key, pool) {
+        if (pool.inUse === 0 && pool.queued === 0 && this.tenants.get(key) === pool)
+          this.tenants.delete(key);
+      }
+      releaseTenant(key, pool) {
+        pool.release();
+        this.forgetIfIdle(key, pool);
+      }
+      /** This kind's live children, process-wide slots held and waiting, and this kind's jobs waiting behind their own tenant. */
+      load() {
+        let tenantQueued = 0;
+        for (const pool of this.tenants.values())
+          tenantQueued += pool.queued;
+        return { children: this.live.size, slots: this.global.inUse, queued: this.global.queued, tenantQueued };
+      }
+    };
+    exports2.IsolationSlots = IsolationSlots;
+    var tarSlots = new IsolationSlots(exports2.TAR_ISOLATED_MAX_CHILDREN_PER_TENANT, () => envHeapCap("REPO_ARCHIVE_EXTRACT_MAX_OLD_SPACE_MB", exports2.TAR_ISOLATED_MAX_OLD_SPACE_MB));
     function tarIsolationLoad() {
-      let tenantQueued = 0;
-      for (const pool of tenantSlots.values())
-        tenantQueued += pool.queued;
-      return { children: liveChildren.size, slots: globalSlots.inUse, queued: globalSlots.queued, tenantQueued };
+      return tarSlots.load();
+    }
+    function isolationLoad() {
+      return { children: liveChildren.size, slots: processSlots.inUse, queued: processSlots.queued };
     }
     var liveChildren = /* @__PURE__ */ new Set();
     var exitHookInstalled = false;
-    function trackChild(child) {
+    function trackChild(child, slots) {
       liveChildren.add(child);
+      slots.live.add(child);
       if (exitHookInstalled)
         return;
       exitHookInstalled = true;
@@ -9060,6 +9222,23 @@ var require_tar_isolated = __commonJS({
           c.kill("SIGKILL");
       });
     }
+    function untrackChild(child, slots) {
+      liveChildren.delete(child);
+      slots.live.delete(child);
+    }
+    var TAR_CHILD_SPEC = {
+      name: CHILD_BASENAME,
+      dir: typeof __dirname === "string" ? __dirname : void 0,
+      resolveEntry: resolveTarChildEntry,
+      markerEnv: exports2.TAR_CHILD_MARKER_ENV,
+      slots: tarSlots,
+      defaultTimeoutMs: () => positiveIntEnv("REPO_ARCHIVE_EXTRACT_TIMEOUT_MS", exports2.TAR_ISOLATED_TIMEOUT_MS),
+      failureMessage: (subject, detail) => `CONFIG_ISSUE: The ${subject} couldn't be unpacked (${detail}).`,
+      workerName: "archive extractor",
+      childName: "extractor",
+      jobName: "extraction",
+      logPrefix: "[tar-isolated]"
+    };
     function jobCwd(job) {
       switch (job.op) {
         case "extract":
@@ -9073,58 +9252,64 @@ var require_tar_isolated = __commonJS({
       }
     }
     function runTarJobIsolated(job, subject, options = {}) {
-      return runJob(job, subject, options, true);
+      return runJob(TAR_CHILD_SPEC, job, subject, { ...options, cwd: jobCwd(job) }, true);
+    }
+    function runIsolatedJob(spec, job, subject, options = {}) {
+      return runJob(spec, job, subject, options, true);
     }
-    async function runJob(job, subject, options, limited) {
-      const entry = options.testChildFile === void 0 ? resolveTarChildEntry() : options.testChildFile && (0, node_fs_1.existsSync)(options.testChildFile) ? { file: options.testChildFile, execArgv: [] } : null;
+    async function runJob(spec, job, subject, options, limited) {
+      const entry = options.testChildFile === void 0 ? spec.resolveEntry() : options.testChildFile && (0, node_fs_1.existsSync)(options.testChildFile) ? { file: options.testChildFile, execArgv: [] } : null;
       if (!entry)
-        throw new TarIsolationUnavailableError(`${CHILD_BASENAME}.js was not found beside ${typeof __dirname === "string" ? __dirname : "this module"}`);
-      const abortError = () => Object.assign(new Error(`Extraction of the ${subject} was stopped`), { name: "AbortError" });
+        throw new TarIsolationUnavailableError(`${spec.name}.js was not found beside ${spec.dir ?? "this module"}`);
+      const jobTitle = spec.jobName.charAt(0).toUpperCase() + spec.jobName.slice(1);
+      const abortError = () => Object.assign(new Error(`${jobTitle} of the ${subject} was stopped`), { name: "AbortError" });
       if (options.signal?.aborted)
         throw abortError();
-      const timeoutMs = options.timeoutMs ?? positiveIntEnv("REPO_ARCHIVE_EXTRACT_TIMEOUT_MS", exports2.TAR_ISOLATED_TIMEOUT_MS);
-      const maxOldSpaceMb = options.maxOldSpaceMb ?? positiveIntEnv("REPO_ARCHIVE_EXTRACT_MAX_OLD_SPACE_MB", exports2.TAR_ISOLATED_MAX_OLD_SPACE_MB);
-      const failure = (reason, detail) => new TarIsolationError(reason, `CONFIG_ISSUE: The ${subject} couldn't be unpacked (${detail}).${options.hint ? ` ${options.hint}` : ""}`);
+      const timeoutMs = options.timeoutMs ?? spec.defaultTimeoutMs();
+      const maxOldSpaceMb = options.maxOldSpaceMb ?? childHeapMbFor(spec.slots, options.log);
+      const failure = (reason, detail) => new TarIsolationError(reason, `${spec.failureMessage(subject, detail)}${options.hint ? ` ${options.hint}` : ""}`);
       if (!limited)
-        return runChild(job, entry, timeoutMs, maxOldSpaceMb, options, failure, abortError);
-      const deadline = Date.now() + timeoutMs;
+        return runChild(spec, job, entry, timeoutMs, maxOldSpaceMb, options, failure, abortError);
+      const queueMs = options.queueTimeoutMs ?? timeoutMs;
+      const deadline = Date.now() + queueMs;
       const queueTimeout = () => {
-        const err = failure("timeout", `no archive extractor was free within ${Math.round(timeoutMs / 1e3)} s`);
-        options.log?.(`[tar-isolated] ${err.message}`);
+        const detail = `no ${spec.workerName} was free within ${Math.round(queueMs / 1e3)} s`;
+        const err = spec.busyMessage ? new TarIsolationError("timeout", spec.busyMessage(subject, detail)) : failure("timeout", detail);
+        options.log?.(`${spec.logPrefix} ${err.message}`);
         return err;
       };
-      const tenant = options.tenantKey ? { key: options.tenantKey, pool: tenantPool(options.tenantKey) } : null;
+      const { slots } = spec;
+      const tenant = options.tenantKey ? { key: options.tenantKey, pool: slots.tenantPool(options.tenantKey) } : null;
       if (tenant) {
-        const got = await tenant.pool.acquire(timeoutMs, options.signal);
+        const got = await tenant.pool.acquire(queueMs, options.signal);
         if (got !== "ok") {
-          if (tenant.pool.inUse === 0 && tenant.pool.queued === 0)
-            tenantSlots.delete(tenant.key);
+          slots.forgetIfIdle(tenant.key, tenant.pool);
           throw got === "aborted" ? abortError() : queueTimeout();
         }
       }
       let holdsGlobal = false;
       try {
-        const got = await globalSlots.acquire(deadline - Date.now(), options.signal);
+        const got = await slots.global.acquire(deadline - Date.now(), options.signal);
         if (got !== "ok")
           throw got === "aborted" ? abortError() : queueTimeout();
         holdsGlobal = true;
         if (options.signal?.aborted)
           throw abortError();
-        return await runChild(job, entry, timeoutMs, maxOldSpaceMb, options, failure, abortError);
+        return await runChild(spec, job, entry, timeoutMs, maxOldSpaceMb, options, failure, abortError);
       } finally {
         if (holdsGlobal)
-          globalSlots.release();
+          slots.global.release();
         if (tenant)
-          releaseTenant(tenant.key, tenant.pool);
+          slots.releaseTenant(tenant.key, tenant.pool);
       }
     }
-    function runChild(job, entry, timeoutMs, maxOldSpaceMb, options, failure, abortError) {
+    function runChild(spec, job, entry, timeoutMs, maxOldSpaceMb, options, failure, abortError) {
       return new Promise((resolvePromise, rejectPromise) => {
         let child;
         try {
           child = (0, node_child_process_1.spawn)(process.execPath, [...entry.execArgv, `--max-old-space-size=${maxOldSpaceMb}`, entry.file], {
-            cwd: jobCwd(job),
-            env: tarChildEnv(),
+            cwd: options.cwd,
+            env: isolatedChildEnv(spec.markerEnv),
             stdio: ["ignore", "ignore", "pipe", "ipc"],
             serialization: "json",
             windowsHide: true
@@ -9133,7 +9318,7 @@ var require_tar_isolated = __commonJS({
           rejectPromise(new TarIsolationUnavailableError(err instanceof Error ? err.message : String(err)));
           return;
         }
-        trackChild(child);
+        trackChild(child, spec.slots);
         let started = false;
         let timedOut = false;
         let aborted = false;
@@ -9157,7 +9342,7 @@ var require_tar_isolated = __commonJS({
           settled = true;
           clearTimeout(timer);
           options.signal?.removeEventListener("abort", onAbort);
-          liveChildren.delete(child);
+          untrackChild(child, spec.slots);
           fn();
         };
         child.stderr?.setEncoding("utf8");
@@ -9200,18 +9385,18 @@ var require_tar_isolated = __commonJS({
             }
             const tail = stderr.trim();
             if (tail)
-              options.log?.(`[tar-isolated] extractor stderr: ${tail.replace(/\s+/g, " ").slice(-1e3)}`);
+              options.log?.(`${spec.logPrefix} ${spec.childName} stderr: ${tail.replace(/\s+/g, " ").slice(-1e3)}`);
             let err;
             if (timedOut) {
-              err = failure("timeout", `extraction took longer than ${Math.round(timeoutMs / 1e3)} s and was stopped`);
+              err = failure("timeout", `${spec.jobName} took longer than ${Math.round(timeoutMs / 1e3)} s and was stopped`);
             } else if (outOfMemory) {
-              err = failure("oom", `extraction ran out of memory (${maxOldSpaceMb} MB heap cap)`);
+              err = failure("oom", `${spec.jobName} ran out of memory (${maxOldSpaceMb} MB heap cap)`);
             } else if (signal) {
-              err = failure("signal", `the extractor was killed by ${signal}`);
+              err = failure("signal", `the ${spec.childName} was killed by ${signal}`);
             } else {
-              err = failure("crash", `the extractor crashed (exit code ${code ?? "unknown"})`);
+              err = failure("crash", `the ${spec.childName} crashed (exit code ${code ?? "unknown"})`);
             }
-            options.log?.(`[tar-isolated] ${err.message}`);
+            options.log?.(`${spec.logPrefix} ${err.message}`);
             rejectPromise(err);
           });
         });
@@ -9269,7 +9454,7 @@ var require_tar_isolated = __commonJS({
     }
     async function probeTarIsolation(options = {}) {
       try {
-        await runJob({ op: "ping" }, "archive", { timeoutMs: options.timeoutMs ?? 3e4 }, false);
+        await runJob(TAR_CHILD_SPEC, { op: "ping" }, "archive", { timeoutMs: options.timeoutMs ?? 3e4 }, false);
         return { ok: true, detail: `archives are extracted in a separate process (${resolveTarChildEntry()?.file ?? "unknown"})` };
       } catch (err) {
         return { ok: false, detail: err instanceof Error ? err.message : String(err) };
@@ -9575,7 +9760,6 @@ var require_repo_acquire = __commonJS({
     var MAX_TAR_BYTES_AFTER_END = 1024 * 1024;
     var TAR_OVERHEAD_PER_ENTRY = 4096;
     var TAR_OVERHEAD_BASE = 16 * 1024 * 1024;
-    var TAR_COUNTED_TYPES = /* @__PURE__ */ new Set(["File", "OldFile", "ContiguousFile", "Directory", "GNUDumpDir"]);
     function refuseNestedGzip() {
       let head = Buffer.alloc(0);
       return new node_stream_1.Transform({
@@ -9639,7 +9823,7 @@ var require_repo_acquire = __commonJS({
           bad = new Error(`Tar entry too large: ${shownPath} (declared ${size} bytes > ${limits.maxFileBytes} cap)`);
         } else if ((declaredTotal += size) > limits.maxTotalBytes) {
           bad = new Error(`Tar total uncompressed size exceeds ${limits.maxTotalBytes} cap (tar-bomb guard)`);
-        } else if (TAR_COUNTED_TYPES.has(String(entry.type)) && !isUnsafeEntryName(path) && ++entries > limits.maxEntries) {
+        } else if (++entries > limits.maxEntries) {
           bad = new Error(`Tar has too many entries: > ${limits.maxEntries} cap`);
         }
         if (bad)
@@ -10052,36 +10236,11 @@ var require_tar_extract_child = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     var promises_1 = require("fs/promises");
+    var isolated_child_host_js_1 = require_isolated_child_host();
     var repo_acquire_js_1 = require_repo_acquire();
     var repo_snapshot_slim_js_1 = require_repo_snapshot_slim();
     var tar_isolated_js_1 = require_tar_isolated();
-    async function handle(request) {
-      switch (request.fault) {
-        case "throw-async":
-          setImmediate(() => {
-            throw new Error("injected tar child crash");
-          });
-          return new Promise(() => {
-          });
-        case "abort":
-          process.abort();
-          break;
-        case "hang":
-          setInterval(() => {
-          }, 1e3);
-          return new Promise(() => {
-          });
-        case "oom": {
-          const hold = [];
-          for (; ; )
-            hold.push(new Array(1e6).fill(hold.length));
-        }
-        case "report-env":
-          return { ok: true, env: { ...process.env } };
-        default:
-          break;
-      }
-      const { job } = request;
+    async function handle(job) {
       switch (job.op) {
         case "ping":
           return { ok: true };
@@ -10099,19 +10258,7 @@ var require_tar_extract_child = __commonJS({
           return { ok: false, message: "Unknown isolated tar job" };
       }
     }
-    function reply(message) {
-      process.send?.(message, () => process.exit(0));
-    }
-    if (typeof process.send === "function" && process.env[tar_isolated_js_1.TAR_CHILD_MARKER_ENV] === "1") {
-      process.on("disconnect", () => process.exit(1));
-      process.once("message", async (request) => {
-        try {
-          reply(await handle(request));
-        } catch (err) {
-          reply({ ok: false, message: err instanceof Error ? err.message : String(err) });
-        }
-      });
-    }
+    (0, isolated_child_host_js_1.serveIsolatedChild)(tar_isolated_js_1.TAR_CHILD_MARKER_ENV, handle);
   }
 });
 

package/dist/tar-extract-child.mjs

@@ -5,22 +5,19 @@ import {
   require_repo_acquire,
   require_repo_snapshot_slim,
   require_tar_isolated
-} from "./chunk-2BYRCDXC.mjs";
+} from "./chunk-J4ST6MFT.mjs";
 
-// ../runner-core/dist/services/tar-extract-child.js
-var require_tar_extract_child = __commonJS({
-  "../runner-core/dist/services/tar-extract-child.js"(exports) {
+// ../runner-core/dist/services/isolated-child-host.js
+var require_isolated_child_host = __commonJS({
+  "../runner-core/dist/services/isolated-child-host.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    var promises_1 = __require("fs/promises");
-    var repo_acquire_js_1 = require_repo_acquire();
-    var repo_snapshot_slim_js_1 = require_repo_snapshot_slim();
-    var tar_isolated_js_1 = require_tar_isolated();
-    async function handle(request) {
-      switch (request.fault) {
+    exports.serveIsolatedChild = serveIsolatedChild;
+    function runFault(fault) {
+      switch (fault) {
         case "throw-async":
           setImmediate(() => {
-            throw new Error("injected tar child crash");
+            throw new Error("injected isolated child crash");
           });
           return new Promise(() => {
           });
@@ -38,11 +35,41 @@ var require_tar_extract_child = __commonJS({
             hold.push(new Array(1e6).fill(hold.length));
         }
         case "report-env":
-          return { ok: true, env: { ...process.env } };
+          return Promise.resolve({ ok: true, env: { ...process.env } });
         default:
           break;
       }
-      const { job } = request;
+      return null;
+    }
+    function serveIsolatedChild(markerEnv, handle) {
+      if (typeof process.send !== "function" || process.env[markerEnv] !== "1")
+        return;
+      const reply = (message) => {
+        process.send?.(message, () => process.exit(0));
+      };
+      process.on("disconnect", () => process.exit(1));
+      process.once("message", async (request) => {
+        try {
+          reply(await (runFault(request.fault) ?? handle(request.job)));
+        } catch (err) {
+          reply({ ok: false, message: err instanceof Error ? err.message : String(err) });
+        }
+      });
+    }
+  }
+});
+
+// ../runner-core/dist/services/tar-extract-child.js
+var require_tar_extract_child = __commonJS({
+  "../runner-core/dist/services/tar-extract-child.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    var promises_1 = __require("fs/promises");
+    var isolated_child_host_js_1 = require_isolated_child_host();
+    var repo_acquire_js_1 = require_repo_acquire();
+    var repo_snapshot_slim_js_1 = require_repo_snapshot_slim();
+    var tar_isolated_js_1 = require_tar_isolated();
+    async function handle(job) {
       switch (job.op) {
         case "ping":
           return { ok: true };
@@ -60,19 +87,7 @@ var require_tar_extract_child = __commonJS({
           return { ok: false, message: "Unknown isolated tar job" };
       }
     }
-    function reply(message) {
-      process.send?.(message, () => process.exit(0));
-    }
-    if (typeof process.send === "function" && process.env[tar_isolated_js_1.TAR_CHILD_MARKER_ENV] === "1") {
-      process.on("disconnect", () => process.exit(1));
-      process.once("message", async (request) => {
-        try {
-          reply(await handle(request));
-        } catch (err) {
-          reply({ ok: false, message: err instanceof Error ? err.message : String(err) });
-        }
-      });
-    }
+    (0, isolated_child_host_js_1.serveIsolatedChild)(tar_isolated_js_1.TAR_CHILD_MARKER_ENV, handle);
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@validate.qa/runner",
-  "version": "1.0.96",
+  "version": "1.0.98",
   "description": "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
   "bin": {
     "validate-runner": "dist/cli.js"
@@ -8,7 +8,7 @@
   "scripts": {
     "build": "tsup",
     "dev": "tsx src/cli.ts",
-    "test": "node --import tsx --test src/retry-on-429.test.ts src/version-check.test.ts src/poll-interval.test.ts src/services/auth-state.test.ts src/run-no-longer-active.test.ts",
+    "test": "node --import tsx --test src/retry-on-429.test.ts src/version-check.test.ts src/poll-interval.test.ts src/services/auth-state.test.ts src/run-no-longer-active.test.ts src/heartbeat-active-runs.test.ts src/result-post-structure-413.test.ts src/result-shed-routes-413.test.ts src/result-media-stale-epoch.test.ts",
     "test:mobile": "node --import tsx --test --test-concurrency=2 src/runner.mobile-ai-env.test.ts src/mobile-device-queue.test.ts src/device-lease.test.ts src/runner-watchdog.test.ts src/result-payload-budget.test.ts src/result-media-upload.test.ts src/services/appium-*.test.ts src/services/*mobile*.test.ts src/services/mobile/*.test.ts",
     "smoke:installed": "node scripts/installed-run-smoke.mjs",
     "prepublishOnly": "npm run build"
@@ -26,13 +26,14 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.6.1",
-    "@playwright/mcp": "^0.0.68",
-    "@playwright/test": "1.59.0-alpha-1771104257000",
+    "@playwright/test": "1.64.1",
     "axe-core": "4.14.0",
     "commander": "^13.1.0",
     "dotenv": "^16.4.5",
     "mockttp": "^4.4.2",
-    "openai": "^4.73.0"
+    "openai": "^4.73.0",
+    "playwright": "1.64.1",
+    "playwright-core": "1.64.1"
   },
   "devDependencies": {
     "@types/node": "^24.10.1",