@vm0/runner 2.0.2 → 2.0.4

package/index.js

@@ -824,6 +824,28 @@ var SSHClient = class {
       }
     }
   }
+  /**
+   * Write content to a file on the remote VM using sudo
+   * Used for writing to privileged locations like /usr/local/bin
+   */
+  async writeFileWithSudo(remotePath, content) {
+    const encoded = Buffer.from(content).toString("base64");
+    const maxChunkSize = 65e3;
+    if (encoded.length <= maxChunkSize) {
+      await this.execOrThrow(
+        `echo '${encoded}' | base64 -d | sudo tee '${remotePath}' > /dev/null`
+      );
+    } else {
+      await this.execOrThrow(`sudo rm -f '${remotePath}'`);
+      for (let i = 0; i < encoded.length; i += maxChunkSize) {
+        const chunk = encoded.slice(i, i + maxChunkSize);
+        const teeFlag = i === 0 ? "" : "-a";
+        await this.execOrThrow(
+          `echo '${chunk}' | base64 -d | sudo tee ${teeFlag} '${remotePath}' > /dev/null`
+        );
+      }
+    }
+  }
   /**
    * Read a file from the remote VM
    */
@@ -4744,6 +4766,13 @@ var apiErrorSchema = z3.object({
 // ../../packages/core/src/contracts/composes.ts
 import { z as z4 } from "zod";
 var c = initContract();
+var composeVersionQuerySchema = z4.preprocess(
+  (val) => val === void 0 || val === null ? void 0 : String(val),
+  z4.string().min(1, "Missing version query parameter").regex(
+    /^[a-f0-9]{8,64}$|^latest$/i,
+    "Version must be 8-64 hex characters or 'latest'"
+  )
+);
 var agentNameSchema = z4.string().min(3, "Agent name must be at least 3 characters").max(64, "Agent name must be 64 characters or less").regex(
   /^[a-zA-Z0-9][a-zA-Z0-9-]{1,62}[a-zA-Z0-9]$/,
   "Agent name must start and end with letter or number, and contain only letters, numbers, and hyphens"
@@ -4880,7 +4909,7 @@ var composesVersionsContract = c.router({
     path: "/api/agent/composes/versions",
     query: z4.object({
       composeId: z4.string().min(1, "Missing composeId query parameter"),
-      version: z4.string().min(1, "Missing version query parameter")
+      version: composeVersionQuerySchema
     }),
     responses: {
       200: z4.object({
@@ -5191,6 +5220,10 @@ var runNetworkLogsContract = c2.router({
 import { z as z6 } from "zod";
 var c3 = initContract();
 var storageTypeSchema = z6.enum(["volume", "artifact"]);
+var versionQuerySchema = z6.preprocess(
+  (val) => val === void 0 || val === null ? void 0 : String(val),
+  z6.string().regex(/^[a-f0-9]{8,64}$/i, "Version must be 8-64 hex characters").optional()
+);
 var uploadStorageResponseSchema = z6.object({
   name: z6.string(),
   versionId: z6.string(),
@@ -5239,7 +5272,7 @@ var storagesContract = c3.router({
     path: "/api/storages",
     query: z6.object({
       name: z6.string().min(1, "Storage name is required"),
-      version: z6.string().optional()
+      version: versionQuerySchema
     }),
     responses: {
       // Binary response - actual handling done at route level
@@ -5339,7 +5372,7 @@ var storagesDownloadContract = c3.router({
     query: z6.object({
       name: z6.string().min(1, "Storage name is required"),
       type: storageTypeSchema,
-      version: z6.string().optional()
+      version: versionQuerySchema
     }),
     responses: {
       // Normal response with presigned URL
@@ -9050,13 +9083,13 @@ var ENV_JSON_PATH = "/tmp/vm0-env.json";
 async function uploadScripts(ssh) {
   const scripts = getAllScripts();
   await ssh.execOrThrow(
-    `mkdir -p ${SCRIPT_PATHS.baseDir} ${SCRIPT_PATHS.libDir}`
+    `sudo mkdir -p ${SCRIPT_PATHS.baseDir} ${SCRIPT_PATHS.libDir}`
   );
   for (const script of scripts) {
-    await ssh.writeFile(script.path, script.content);
+    await ssh.writeFileWithSudo(script.path, script.content);
   }
   await ssh.execOrThrow(
-    `chmod +x ${SCRIPT_PATHS.baseDir}/*.py ${SCRIPT_PATHS.libDir}/*.py 2>/dev/null || true`
+    `sudo chmod +x ${SCRIPT_PATHS.baseDir}/*.py ${SCRIPT_PATHS.libDir}/*.py 2>/dev/null || true`
   );
 }
 async function downloadStorages(ssh, manifest) {
@@ -9101,7 +9134,7 @@ async function configureDNS(ssh) {
 nameserver 8.8.4.4
 nameserver 1.1.1.1`;
   await ssh.execOrThrow(
-    `rm -f /etc/resolv.conf && echo '${dnsConfig}' > /etc/resolv.conf`
+    `sudo sh -c 'rm -f /etc/resolv.conf && echo "${dnsConfig}" > /etc/resolv.conf'`
   );
 }
 async function executeJob(context, config) {
@@ -9128,7 +9161,7 @@ async function executeJob(context, config) {
     }
     console.log(`[Executor] VM ${vmId} started, guest IP: ${guestIp}`);
     const privateKeyPath = getRunnerSSHKeyPath();
-    const ssh = createVMSSHClient(guestIp, "root", privateKeyPath || void 0);
+    const ssh = createVMSSHClient(guestIp, "user", privateKeyPath || void 0);
     console.log(`[Executor] Waiting for SSH on ${guestIp}...`);
     await ssh.waitUntilReachable(12e4, 2e3);
     console.log(`[Executor] SSH ready on ${guestIp}`);
@@ -9333,7 +9366,7 @@ var statusCommand = new Command2("status").description("Show runner status").act
 });
 
 // src/index.ts
-var version = true ? "2.0.2" : "0.1.0";
+var version = true ? "2.0.4" : "0.1.0";
 program.name("vm0-runner").version(version).description("Self-hosted runner for VM0 agents");
 program.addCommand(startCommand);
 program.addCommand(statusCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/runner",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "description": "Self-hosted runner for VM0 agents",
   "repository": {
     "type": "git",