charness 3.6.0 → 3.7.0

package/dist/remoteRun/runnerClient.js

@@ -0,0 +1,139 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shortCallTimeoutMs = void 0;
+exports.getRunnerScriptPath = getRunnerScriptPath;
+exports.readRunnerScript = readRunnerScript;
+exports.describeSshFailure = describeSshFailure;
+exports.describeRunnerRefusal = describeRunnerRefusal;
+exports.createRunnerClient = createRunnerClient;
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const remoteRunError_1 = require("./remoteRunError");
+const ssh_1 = require("./ssh");
+/**
+ * @description One runner as the rest of remote-run uses it: the uploaded script's subcommands as calls, Pueue through the same
+ * script, and the pieces rsync needs. The script is `remoteRun/runner.sh` at the package root (shipped in `files`, like the STT
+ * sidecar); it is uploaded to `<workDir>/bin/runner-<sha8>.sh` when that file is missing, so two versions of charness on one
+ * runner never clash.
+ */
+const scriptHashLength = 8;
+/** An ordinary call: a prepare may start the Pueue daemon, a result or a kill is quicker. */
+exports.shortCallTimeoutMs = 60 * 1000;
+const scriptUploadTimeoutMs = 60 * 1000;
+/** @description `remoteRun/runner.sh` at the package root, resolved from both `src/remoteRun` (tsx) and `dist/remoteRun` (built): two levels up. */
+function getRunnerScriptPath() {
+    return path.join(fs.realpathSync(__dirname), '..', '..', 'remoteRun', 'runner.sh');
+}
+function readRunnerScript(scriptPath = getRunnerScriptPath()) {
+    const text = fs.readFileSync(scriptPath, 'utf8');
+    return { name: `runner-${(0, crypto_1.createHash)('sha256').update(text).digest('hex').slice(0, scriptHashLength)}.sh`, text };
+}
+/**
+ * @description The first useful line of a failed ssh's stderr, for a message (never the whole text: it may quote the destination). A
+ * rejected key from a process with no ssh-agent (`SSH_AUTH_SOCK` unset — a tracker agent such as Jira's starts with a minimal environment
+ * that has none) says what that means and the way out: a key that is only held by an agent works for a Telegram agent and not for that one.
+ */
+function describeSshFailure(result, env = process.env) {
+    if (result.isTimedOut)
+        return 'ssh: the command ran past its deadline';
+    const lines = result.stderr.split('\n').map((line) => line.trim()).filter((line) => line !== '');
+    const text = lines.length === 0 ? `ssh exited with ${result.exitCode ?? 'a signal'}` : lines[lines.length - 1];
+    if (/host key verification failed/i.test(result.stderr))
+        return `ssh: the host key is not trusted yet — connect once by hand (ssh to this runner) so it is known`;
+    if (/permission denied/i.test(result.stderr)) {
+        const hasAgent = env.SSH_AUTH_SOCK !== undefined && env.SSH_AUTH_SOCK !== '';
+        return hasAgent
+            ? 'ssh: the key was rejected (permission denied)'
+            : 'ssh: the key was rejected (permission denied) — this process has no ssh-agent (SSH_AUTH_SOCK is unset, as for a Jira agent), so the key must work without one: a key file with no passphrase, given as "sshOptions": ["-i", "<path>"] in runners.json';
+    }
+    return text.length > 200 ? `${text.slice(0, 200)}…` : text;
+}
+/** @description The runner script's own refusal in a stderr text («remote-run-runner: no such job: x» → «no such job: x»): the last line, without the script's prefix. */
+function describeRunnerRefusal(stderr, fallback) {
+    const lastLine = stderr.split('\n').map((line) => line.trim()).filter((line) => line !== '').pop();
+    return lastLine === undefined ? fallback : lastLine.replace(/^remote-run-runner: /, '');
+}
+/** @description Create the client of `runner`. `script` and the spawn functions are injectable for the tests. */
+function createRunnerClient(runner, cacheDir, script = readRunnerScript()) {
+    const call = (subcommand, args, options = {}) => (0, ssh_1.runSshCommand)({
+        runner,
+        cacheDir,
+        remoteCommand: (0, ssh_1.buildRunnerScriptCommand)({ runner, scriptName: script.name, subcommand, args }),
+        input: options.input,
+        timeoutMs: options.timeoutMs ?? exports.shortCallTimeoutMs,
+        signal: options.signal,
+    });
+    let absoluteWorkDir = runner.workDir.startsWith('/') ? runner.workDir : null;
+    return {
+        runner,
+        cacheDir,
+        rsyncSshCommand: (0, ssh_1.buildRsyncSshCommand)(runner, cacheDir),
+        async getAbsoluteWorkDir() {
+            if (absoluteWorkDir === null) {
+                const resolved = await call('workdir', []);
+                const first = resolved.stdout.trim().split('\n')[0];
+                if (resolved.exitCode !== 0 || !first.startsWith('/'))
+                    throw new remoteRunError_1.RemoteRunError(`runner "${runner.name}": could not resolve its work dir ${runner.workDir} — ${describeSshFailure(resolved)}`);
+                absoluteWorkDir = first;
+            }
+            return absoluteWorkDir;
+        },
+        async ensureScript(signal) {
+            const exists = await (0, ssh_1.runSshCommand)({ runner, cacheDir, remoteCommand: (0, ssh_1.buildScriptExistsCommand)(runner, script.name), timeoutMs: scriptUploadTimeoutMs, signal });
+            if (exists.exitCode === 0)
+                return;
+            if ((0, ssh_1.checkIsConnectionLost)(exists.exitCode))
+                throw new remoteRunError_1.RunnerUnreachableError(runner.name, describeSshFailure(exists));
+            const upload = await (0, ssh_1.runSshCommand)({ runner, cacheDir, remoteCommand: (0, ssh_1.buildScriptUploadCommand)(runner, script.name), input: script.text, timeoutMs: scriptUploadTimeoutMs, signal });
+            if (upload.exitCode !== 0)
+                throw new remoteRunError_1.RemoteRunError(`could not put the runner script on "${runner.name}" (${runner.workDir}/bin) — ${describeSshFailure(upload)}`);
+        },
+        call,
+        async callOrThrow(subcommand, args, options) {
+            const result = await call(subcommand, args, options);
+            if (result.exitCode !== 0) {
+                const detail = result.stderr.trim() === '' ? describeSshFailure(result) : result.stderr.trim().split('\n').slice(-3).join(' / ');
+                throw new remoteRunError_1.RemoteRunError(`runner "${runner.name}": ${subcommand} failed — ${detail}`);
+            }
+            return result.stdout;
+        },
+        stream(subcommand, args) {
+            return (0, ssh_1.spawnSshStream)({ runner, cacheDir, remoteCommand: (0, ssh_1.buildRunnerScriptCommand)({ runner, scriptName: script.name, subcommand, args }) });
+        },
+    };
+}
+//# sourceMappingURL=runnerClient.js.map

package/dist/remoteRun/runnerClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runnerClient.js","sourceRoot":"","sources":["../../src/remoteRun/runnerClient.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,kDAEC;AAED,4CAGC;AA2BD,gDAYC;AAGD,sDAGC;AAGD,gDA8CC;AAxID,mCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAC7B,qDAA0E;AAE1E,+BASe;AAEf;;;;;GAKG;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,6FAA6F;AAChF,QAAA,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAQxC,oJAAoJ;AACpJ,SAAgB,mBAAmB;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,gBAAgB,CAAC,aAAqB,mBAAmB,EAAE;IACzE,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,UAAU,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;AACnH,CAAC;AAsBD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,MAAoB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC3F,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,wCAAwC,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,MAAM,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/G,IAAI,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,iGAAiG,CAAC;IAClK,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,EAAE,CAAC;QAC7E,OAAO,QAAQ;YACb,CAAC,CAAC,+CAA+C;YACjD,CAAC,CAAC,uPAAuP,CAAC;IAC9P,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,0KAA0K;AAC1K,SAAgB,qBAAqB,CAAC,MAAc,EAAE,QAAgB;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACnG,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,iHAAiH;AACjH,SAAgB,kBAAkB,CAAC,MAAoB,EAAE,QAAgB,EAAE,SAAuB,gBAAgB,EAAE;IAClH,MAAM,IAAI,GAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CACpE,IAAA,mBAAa,EAAC;QACZ,MAAM;QACN,QAAQ;QACR,aAAa,EAAE,IAAA,8BAAwB,EAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9F,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,0BAAkB;QAClD,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEL,IAAI,eAAe,GAAkB,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5F,OAAO;QACL,MAAM;QACN,QAAQ;QACR,eAAe,EAAE,IAAA,0BAAoB,EAAC,MAAM,EAAE,QAAQ,CAAC;QACvD,KAAK,CAAC,kBAAkB;YACtB,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,+BAAc,CAAC,WAAW,MAAM,CAAC,IAAI,qCAAqC,MAAM,CAAC,OAAO,MAAM,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC/L,eAAe,GAAG,KAAK,CAAC;YAC1B,CAAC;YACD,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,MAAM;YACvB,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAa,EAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAA,8BAAwB,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,CAAC;YACjK,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;gBAAE,OAAO;YAClC,IAAI,IAAA,2BAAqB,EAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,uCAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;YACtH,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAa,EAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAA,8BAAwB,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,CAAC;YACrL,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,+BAAc,CAAC,uCAAuC,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrK,CAAC;QACD,IAAI;QACJ,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO;YACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjI,MAAM,IAAI,+BAAc,CAAC,WAAW,MAAM,CAAC,IAAI,MAAM,UAAU,aAAa,MAAM,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,IAAI;YACrB,OAAO,IAAA,oBAAc,EAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAA,8BAAwB,EAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9I,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/remoteRun/runners.d.ts

@@ -0,0 +1,57 @@
+import { type RunnerCapability, type RunnerProbe, type RunnerReport } from './probe';
+import { type RunnerClient } from './runnerClient';
+import type { RunnerConfig, RunnersConfig } from './runnersConfig';
+/**
+ * @description Which runners exist right now: probe them (in parallel, bounded), remember each one's last answer so an offline runner
+ * still shows what it was, and pick the one a command should use — the named one, or the first in `runners.json` that answers and, with
+ * `--needs`, has the capability.
+ */
+/** The whole probing of all runners ends by then (a dead host costs its ssh connect timeout, once, in parallel with the others). */
+export declare const probeAllTimeoutMs: number;
+export declare function readLastProbe(cacheDir: string, runnerName: string): {
+    seenAtMs: number;
+    probe: RunnerProbe;
+} | null;
+/**
+ * @description Probe one runner: its report is `online` with what it said, or `offline` with why and the last snapshot taken when it
+ * was seen. `signal` is the deadline of the whole view (see {@link probeRunners}): when it fires the ssh calls in flight are killed and the
+ * runner is reported offline — with the snapshot, like any other way of not answering.
+ */
+export declare function probeRunner(client: RunnerClient, nowMs?: number, signal?: AbortSignal, deadlineMs?: number): Promise<RunnerReport>;
+/**
+ * @description Probe every client at once under ONE deadline (20 s): a runner that has not answered by then is reported offline with its
+ * last snapshot and its ssh calls are killed, so the view ends on time and nothing keeps the process alive afterwards. The others are not
+ * held back by it.
+ */
+export declare function probeRunners(clients: readonly RunnerClient[], nowMs?: number, deadlineMs?: number): Promise<RunnerReport[]>;
+export type RunnerPick = {
+    ok: true;
+    runnerName: string;
+} | {
+    ok: false;
+    message: string;
+    exitCode: number;
+};
+/** The `runners` view of why nothing fits, one block per runner. */
+export declare function formatRunnersView(reports: readonly RunnerReport[]): string;
+/**
+ * @description The runner a command should use. `wanted.runner` names one (it must exist, answer and have Pueue); otherwise the first
+ * runner in `config` order that answers, has Pueue and — with `wanted.needs` — the capability. None: the reason and the `runners`
+ * view, exit 125.
+ */
+export declare function pickRunner(config: RunnersConfig, reports: readonly RunnerReport[], wanted: {
+    runner: string | null;
+    needs: RunnerCapability | null;
+}): RunnerPick;
+/**
+ * @description The runner `exec` goes to. `exec` runs in the runner's copy "as the last job left it", so without `--runner` that is the
+ * runner of this project's last job (`lastRunnerName`), not the first one that answers — with several runners the first could hold no copy
+ * of the project, or an old one. No job yet: `null` (any online runner); a last runner that left `runners.json`: `null` and a note.
+ */
+export declare function chooseExecRunnerName(config: RunnersConfig, named: string | null, lastRunnerName: string | null): {
+    runnerName: string | null;
+    note: string | null;
+};
+/** @description The runner of a job id, from the config: an id of a runner that is no longer listed is an error. */
+export declare function findRunnerOfJob(config: RunnersConfig, runnerName: string): RunnerConfig;
+//# sourceMappingURL=runners.d.ts.map

package/dist/remoteRun/runners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../../src/remoteRun/runners.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEnE;;;;GAIG;AAEH,oIAAoI;AACpI,eAAO,MAAM,iBAAiB,QAAY,CAAC;AAc3C,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAAG,IAAI,CAQnH;AAOD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,GAAE,MAAmB,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,GAAE,MAA0B,GAAG,OAAO,CAAC,YAAY,CAAC,CAwBvK;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,KAAK,GAAE,MAAmB,EAAE,UAAU,GAAE,MAA0B,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAQhK;AAED,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7G,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,GAAG,MAAM,CAE1E;AAMD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,YAAY,EAAE,EAAE,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAA;CAAE,GAAG,UAAU,CAoBjK;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG;IAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAInK;AAED,oHAAoH;AACpH,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAIvF"}

package/dist/remoteRun/runners.js

@@ -0,0 +1,181 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.probeAllTimeoutMs = void 0;
+exports.readLastProbe = readLastProbe;
+exports.probeRunner = probeRunner;
+exports.probeRunners = probeRunners;
+exports.formatRunnersView = formatRunnersView;
+exports.pickRunner = pickRunner;
+exports.chooseExecRunnerName = chooseExecRunnerName;
+exports.findRunnerOfJob = findRunnerOfJob;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const probe_1 = require("./probe");
+const remoteRunError_1 = require("./remoteRunError");
+const exitCodes_1 = require("./exitCodes");
+const runnerClient_1 = require("./runnerClient");
+/**
+ * @description Which runners exist right now: probe them (in parallel, bounded), remember each one's last answer so an offline runner
+ * still shows what it was, and pick the one a command should use — the named one, or the first in `runners.json` that answers and, with
+ * `--needs`, has the capability.
+ */
+/** The whole probing of all runners ends by then (a dead host costs its ssh connect timeout, once, in parallel with the others). */
+exports.probeAllTimeoutMs = 20 * 1000;
+const probeFileSuffix = '.probe.json';
+const millisecondsPerSecond = 1000;
+function getStoredProbePath(cacheDir, runnerName) {
+    return path.join(cacheDir, `${runnerName}${probeFileSuffix}`);
+}
+function readLastProbe(cacheDir, runnerName) {
+    try {
+        const stored = JSON.parse(fs.readFileSync(getStoredProbePath(cacheDir, runnerName), 'utf8'));
+        if (typeof stored.seenAtMs !== 'number' || typeof stored.text !== 'string')
+            return null;
+        return { seenAtMs: stored.seenAtMs, probe: (0, probe_1.parseProbeOutput)(stored.text) };
+    }
+    catch {
+        return null;
+    }
+}
+function writeLastProbe(cacheDir, runnerName, text, seenAtMs) {
+    const stored = { seenAtMs, text };
+    fs.writeFileSync(getStoredProbePath(cacheDir, runnerName), JSON.stringify(stored), { mode: 0o600 });
+}
+/**
+ * @description Probe one runner: its report is `online` with what it said, or `offline` with why and the last snapshot taken when it
+ * was seen. `signal` is the deadline of the whole view (see {@link probeRunners}): when it fires the ssh calls in flight are killed and the
+ * runner is reported offline — with the snapshot, like any other way of not answering.
+ */
+async function probeRunner(client, nowMs = Date.now(), signal, deadlineMs = exports.probeAllTimeoutMs) {
+    const runner = client.runner;
+    const groupLimits = { ...(runner.groups ?? {}) };
+    const offline = (reason) => {
+        const last = readLastProbe(client.cacheDir, runner.name);
+        return {
+            name: runner.name,
+            status: 'offline',
+            reason: signal?.aborted === true ? `no answer within ${Math.round(deadlineMs / millisecondsPerSecond)} s` : reason,
+            lastSeenAtMs: last?.seenAtMs ?? null,
+            lastProbe: last?.probe ?? null,
+            groupLimits,
+        };
+    };
+    try {
+        await client.ensureScript(signal);
+    }
+    catch (error) {
+        if (error instanceof remoteRunError_1.RunnerUnreachableError)
+            return offline(error.reason);
+        return offline(error instanceof Error ? error.message : 'could not prepare the runner');
+    }
+    const result = await client.call('probe', [], { timeoutMs: deadlineMs, signal });
+    if (result.exitCode !== 0)
+        return offline((0, runnerClient_1.describeSshFailure)(result));
+    writeLastProbe(client.cacheDir, runner.name, result.stdout, nowMs);
+    return { name: runner.name, status: 'online', probe: (0, probe_1.parseProbeOutput)(result.stdout), groupLimits };
+}
+/**
+ * @description Probe every client at once under ONE deadline (20 s): a runner that has not answered by then is reported offline with its
+ * last snapshot and its ssh calls are killed, so the view ends on time and nothing keeps the process alive afterwards. The others are not
+ * held back by it.
+ */
+async function probeRunners(clients, nowMs = Date.now(), deadlineMs = exports.probeAllTimeoutMs) {
+    const deadline = new AbortController();
+    const timer = setTimeout(() => deadline.abort(), deadlineMs);
+    try {
+        return await Promise.all(clients.map((client) => probeRunner(client, nowMs, deadline.signal, deadlineMs)));
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** The `runners` view of why nothing fits, one block per runner. */
+function formatRunnersView(reports) {
+    return reports.map(probe_1.formatRunnerBlock).join('\n\n');
+}
+function checkIsUsable(report) {
+    return report.status === 'online' && report.probe.pueueVersion !== null;
+}
+/**
+ * @description The runner a command should use. `wanted.runner` names one (it must exist, answer and have Pueue); otherwise the first
+ * runner in `config` order that answers, has Pueue and — with `wanted.needs` — the capability. None: the reason and the `runners`
+ * view, exit 125.
+ */
+function pickRunner(config, reports, wanted) {
+    if (wanted.runner !== null) {
+        const report = reports.find((candidate) => candidate.name === wanted.runner);
+        if (report === undefined) {
+            return { ok: false, exitCode: exitCodes_1.remoteRunExitCodes.usage, message: `no runner named "${wanted.runner}" in runners.json (configured: ${config.runners.map((runner) => runner.name).join(', ')})` };
+        }
+        if (report.status === 'offline')
+            return { ok: false, exitCode: exitCodes_1.remoteRunExitCodes.failed, message: `runner "${wanted.runner}" is offline (${report.reason})\n${formatRunnersView([report])}` };
+        if (!checkIsUsable(report))
+            return { ok: false, exitCode: exitCodes_1.remoteRunExitCodes.failed, message: `runner "${wanted.runner}" has no Pueue (install it there, see docs/remote-run.md)\n${formatRunnersView([report])}` };
+        if (wanted.needs !== null && !(0, probe_1.checkHasCapability)(report.probe, wanted.needs)) {
+            return { ok: false, exitCode: exitCodes_1.remoteRunExitCodes.failed, message: `runner "${wanted.runner}" cannot do "${wanted.needs}"\n${formatRunnersView([report])}` };
+        }
+        return { ok: true, runnerName: report.name };
+    }
+    for (const runner of config.runners) {
+        const report = reports.find((candidate) => candidate.name === runner.name);
+        if (report === undefined || !checkIsUsable(report))
+            continue;
+        if (wanted.needs === null || (0, probe_1.checkHasCapability)(report.probe, wanted.needs))
+            return { ok: true, runnerName: runner.name };
+    }
+    const reason = wanted.needs === null ? 'no runner is online' : `no online runner can do "${wanted.needs}"`;
+    return { ok: false, exitCode: exitCodes_1.remoteRunExitCodes.failed, message: `${reason}\n${formatRunnersView(reports)}` };
+}
+/**
+ * @description The runner `exec` goes to. `exec` runs in the runner's copy "as the last job left it", so without `--runner` that is the
+ * runner of this project's last job (`lastRunnerName`), not the first one that answers — with several runners the first could hold no copy
+ * of the project, or an old one. No job yet: `null` (any online runner); a last runner that left `runners.json`: `null` and a note.
+ */
+function chooseExecRunnerName(config, named, lastRunnerName) {
+    if (named !== null || lastRunnerName === null)
+        return { runnerName: named, note: null };
+    if (config.runners.some((runner) => runner.name === lastRunnerName))
+        return { runnerName: lastRunnerName, note: null };
+    return { runnerName: null, note: `the runner of this project's last job, "${lastRunnerName}", is not in runners.json any more — using the first online runner` };
+}
+/** @description The runner of a job id, from the config: an id of a runner that is no longer listed is an error. */
+function findRunnerOfJob(config, runnerName) {
+    const runner = config.runners.find((candidate) => candidate.name === runnerName);
+    if (runner === undefined)
+        throw new remoteRunError_1.RemoteRunError(`the job belongs to runner "${runnerName}", which is not in runners.json any more`);
+    return runner;
+}
+//# sourceMappingURL=runners.js.map

package/dist/remoteRun/runners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.js","sourceRoot":"","sources":["../../src/remoteRun/runners.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,sCAQC;AAYD,kCAwBC;AAOD,oCAQC;AAKD,8CAEC;AAWD,gCAoBC;AAOD,oDAIC;AAGD,0CAIC;AAvJD,uCAAyB;AACzB,2CAA6B;AAC7B,mCAOiB;AACjB,qDAA0E;AAC1E,2CAAiD;AACjD,iDAAuE;AAGvE;;;;GAIG;AAEH,oIAAoI;AACvH,QAAA,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAQnC,SAAS,kBAAkB,CAAC,QAAgB,EAAE,UAAkB;IAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,GAAG,eAAe,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,aAAa,CAAC,QAAgB,EAAE,UAAkB;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAgB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1G,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxF,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAA,wBAAgB,EAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,UAAkB,EAAE,IAAY,EAAE,QAAgB;IAC1F,MAAM,MAAM,GAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,EAAE,CAAC,aAAa,CAAC,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAAC,MAAoB,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE,EAAE,MAAoB,EAAE,aAAqB,yBAAiB;IAC9I,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,WAAW,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,MAAc,EAAgB,EAAE;QAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAClH,YAAY,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI;YACpC,SAAS,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI;YAC9B,WAAW;SACZ,CAAC;IACJ,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,uCAAsB;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,IAAA,iCAAkB,EAAC,MAAM,CAAC,CAAC,CAAC;IACtE,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAA,wBAAgB,EAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAAC,OAAgC,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE,EAAE,aAAqB,yBAAiB;IACrI,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7G,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAID,oEAAoE;AACpE,SAAgB,iBAAiB,CAAC,OAAgC;IAChE,OAAO,OAAO,CAAC,GAAG,CAAC,yBAAiB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,MAAqB,EAAE,OAAgC,EAAE,MAAiE;IACnJ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,8BAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,oBAAoB,MAAM,CAAC,MAAM,kCAAkC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClM,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,8BAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,MAAM,iBAAiB,MAAM,CAAC,MAAM,MAAM,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/L,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,8BAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,MAAM,8DAA8D,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC;QACpN,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,8BAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,KAAK,MAAM,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9J,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7D,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,IAAA,0BAAkB,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5H,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,4BAA4B,MAAM,CAAC,KAAK,GAAG,CAAC;IAC3G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,8BAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;AACjH,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,MAAqB,EAAE,KAAoB,EAAE,cAA6B;IAC7G,IAAI,KAAK,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxF,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,2CAA2C,cAAc,oEAAoE,EAAE,CAAC;AACnK,CAAC;AAED,oHAAoH;AACpH,SAAgB,eAAe,CAAC,MAAqB,EAAE,UAAkB;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACjF,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,+BAAc,CAAC,8BAA8B,UAAU,0CAA0C,CAAC,CAAC;IACvI,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/remoteRun/runnersConfig.d.ts

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+import { type ConfigFileLoad } from '../configDirFile';
+/** The group every runner has; its parallel limit may be set, it never needs `group add`. */
+export declare const defaultPueueGroup = "default";
+declare const runnerSchema: z.ZodObject<{
+    name: z.ZodString;
+    ssh: z.ZodString;
+    sshOptions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    workDir: z.ZodString;
+    pueue: z.ZodOptional<z.ZodObject<{
+        bin: z.ZodOptional<z.ZodString>;
+        config: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    groups: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+}, z.core.$strict>;
+declare const runnersConfigSchema: z.ZodObject<{
+    runners: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        ssh: z.ZodString;
+        sshOptions: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        workDir: z.ZodString;
+        pueue: z.ZodOptional<z.ZodObject<{
+            bin: z.ZodOptional<z.ZodString>;
+            config: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        groups: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** @name RunnerConfig @description One runner as the file describes it. */
+export type RunnerConfig = z.infer<typeof runnerSchema>;
+/** @name RunnersConfig @description The whole file. */
+export type RunnersConfig = z.infer<typeof runnersConfigSchema>;
+/** @description Where the file lives: beside the user's global charness env file, whatever `ENV_FILE` says (it is per OS user, not per instance). */
+export declare function getRunnersConfigPath(homeDir?: string): string;
+/** @description The file's current content (stamp-cached): missing = no runners, invalid = its errors and the last good config of this process, if any. */
+export declare function loadRunnersConfig(homeDir?: string): ConfigFileLoad<RunnersConfig>;
+/** @description Forget the cached loads (tests that swap files under one path). */
+export declare function resetRunnersConfigCache(): void;
+/** @description Does any runner exist right now? The bot MCP's instructions mention remote-run only while one does. */
+export declare function checkIsRemoteRunOffered(homeDir?: string): boolean;
+/** @description The parallel limits of a runner's groups as the `name=n,name=n` string the runner script applies, in the order of the file (the runner applies each pair on its own, so the order carries no meaning). */
+export declare function formatGroupLimits(groups: RunnerConfig['groups']): string;
+export {};
+//# sourceMappingURL=runnersConfig.d.ts.map

package/dist/remoteRun/runnersConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runnersConfig.d.ts","sourceRoot":"","sources":["../../src/remoteRun/runnersConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAoB/E,6FAA6F;AAC7F,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAE3C,QAAA,MAAM,YAAY;;;;;;;;;;kBAOhB,CAAC;AAEH,QAAA,MAAM,mBAAmB;;;;;;;;;;;;kBAEgJ,CAAC;AAE1K,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,uDAAuD;AACvD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qJAAqJ;AACrJ,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,MAAqB,GAAG,MAAM,CAE3E;AAYD,2JAA2J;AAC3J,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,MAAqB,GAAG,cAAc,CAAC,aAAa,CAAC,CAE/F;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAED,uHAAuH;AACvH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,MAAqB,GAAG,OAAO,CAG/E;AAED,0NAA0N;AAC1N,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,GAAG,MAAM,CAExE"}

package/dist/remoteRun/runnersConfig.js

@@ -0,0 +1,107 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultPueueGroup = void 0;
+exports.getRunnersConfigPath = getRunnersConfigPath;
+exports.loadRunnersConfig = loadRunnersConfig;
+exports.resetRunnersConfigCache = resetRunnersConfigCache;
+exports.checkIsRemoteRunOffered = checkIsRemoteRunOffered;
+exports.formatGroupLimits = formatGroupLimits;
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const zod_1 = require("zod");
+const configDirFile_1 = require("../configDirFile");
+const legacyNames_1 = require("../legacyNames");
+/**
+ * @description `~/.config/charness/runners.json` — the machines `charness remote-run` may use, written by hand (phase 1). ONE file per
+ * OS user, deliberately NOT in an instance's `DATA_DIR`: an agent's environment does not say which instance it belongs to (a Jira agent
+ * has neither `ENV_FILE` nor `DATA_DIR`), so every charness instance of the user shares it.
+ *
+ *   { "runners": [{ "name": "box1", "ssh": "runner@box1.example", "workDir": "/home/runner/charness-runner",
+ *                   "sshOptions": ["-i", "/home/user/.ssh/runner_key"],
+ *                   "pueue": { "bin": "/home/runner/.local/bin/pueue", "config": "/home/runner/.config/pueue/pueue.yml" },
+ *                   "groups": { "default": 2, "emulator": 1 } }] }
+ *
+ * Validation is strict (an unknown key, a bad name, a duplicate is an error that names the field and echoes no value). The loader is
+ * the shared stamp-cached one, so the bot's MCP can ask "is any runner listed?" on every connect for the cost of one `stat`.
+ */
+const configFileName = 'runners.json';
+const runnerNamePattern = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const groupNamePattern = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
+/** The group every runner has; its parallel limit may be set, it never needs `group add`. */
+exports.defaultPueueGroup = 'default';
+const runnerSchema = zod_1.z.strictObject({
+    name: zod_1.z.string().regex(runnerNamePattern, 'must be lowercase letters, digits and single dashes'),
+    ssh: zod_1.z.string().min(1).refine((destination) => !destination.startsWith('-') && !/\s/.test(destination), 'must be an ssh destination (user@host or a host alias): no spaces, not an option'),
+    sshOptions: zod_1.z.array(zod_1.z.string()).optional(),
+    workDir: zod_1.z.string().min(1).refine((workDir) => workDir.startsWith('/') || workDir === '~' || workDir.startsWith('~/'), 'must be an absolute path on the runner or start with ~/'),
+    pueue: zod_1.z.strictObject({ bin: zod_1.z.string().min(1).optional(), config: zod_1.z.string().min(1).optional() }).optional(),
+    groups: zod_1.z.record(zod_1.z.string().regex(groupNamePattern, 'is not a valid group name'), zod_1.z.number().int().positive()).optional(),
+});
+const runnersConfigSchema = zod_1.z.strictObject({
+    runners: zod_1.z.array(runnerSchema),
+}).refine((config) => new Set(config.runners.map((runner) => runner.name)).size === config.runners.length, { path: ['runners'], message: 'runner names must be unique' });
+/** @description Where the file lives: beside the user's global charness env file, whatever `ENV_FILE` says (it is per OS user, not per instance). */
+function getRunnersConfigPath(homeDir = os.homedir()) {
+    return path.join(path.dirname((0, legacyNames_1.resolveGlobalConfigEnvPath)(homeDir)), configFileName);
+}
+const loader = (0, configDirFile_1.createConfigFileLoader)({
+    fileName: configFileName,
+    createEmpty: () => ({ runners: [] }),
+    validate: (parsedJson) => {
+        const parsed = runnersConfigSchema.safeParse(parsedJson);
+        if (parsed.success)
+            return { ok: true, config: parsed.data };
+        return { ok: false, errors: parsed.error.issues.map((issue) => `${configFileName} ${issue.path.join('.') || '(root)'}: ${issue.message}`) };
+    },
+});
+/** @description The file's current content (stamp-cached): missing = no runners, invalid = its errors and the last good config of this process, if any. */
+function loadRunnersConfig(homeDir = os.homedir()) {
+    return loader.load(getRunnersConfigPath(homeDir));
+}
+/** @description Forget the cached loads (tests that swap files under one path). */
+function resetRunnersConfigCache() {
+    loader.resetCache();
+}
+/** @description Does any runner exist right now? The bot MCP's instructions mention remote-run only while one does. */
+function checkIsRemoteRunOffered(homeDir = os.homedir()) {
+    const load = loadRunnersConfig(homeDir);
+    return (load.config?.runners.length ?? 0) > 0;
+}
+/** @description The parallel limits of a runner's groups as the `name=n,name=n` string the runner script applies, in the order of the file (the runner applies each pair on its own, so the order carries no meaning). */
+function formatGroupLimits(groups) {
+    return Object.entries(groups ?? {}).map(([groupName, parallel]) => `${groupName}=${parallel}`).join(',');
+}
+//# sourceMappingURL=runnersConfig.js.map

package/dist/remoteRun/runnersConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runnersConfig.js","sourceRoot":"","sources":["../../src/remoteRun/runnersConfig.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,oDAEC;AAaD,8CAEC;AAGD,0DAEC;AAGD,0DAGC;AAGD,8CAEC;AA9ED,uCAAyB;AACzB,2CAA6B;AAC7B,6BAAwB;AACxB,oDAA+E;AAC/E,gDAA4D;AAE5D;;;;;;;;;;;;GAYG;AAEH,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AACvD,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,6FAA6F;AAChF,QAAA,iBAAiB,GAAG,SAAS,CAAC;AAE3C,MAAM,YAAY,GAAG,OAAC,CAAC,YAAY,CAAC;IAClC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,EAAE,qDAAqD,CAAC;IAChG,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,kFAAkF,CAAC;IAC3L,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,yDAAyD,CAAC;IACjL,KAAK,EAAE,OAAC,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7G,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1H,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,OAAC,CAAC,YAAY,CAAC;IACzC,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,YAAY,CAAC;CAC/B,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;AAO1K,qJAAqJ;AACrJ,SAAgB,oBAAoB,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAA,wCAA0B,EAAC,OAAO,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,MAAM,GAAG,IAAA,sCAAsB,EAAgB;IACnD,QAAQ,EAAE,cAAc;IACxB,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACpC,QAAQ,EAAE,CAAC,UAAU,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IAC9I,CAAC;CACF,CAAC,CAAC;AAEH,2JAA2J;AAC3J,SAAgB,iBAAiB,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;IAC9D,OAAO,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,mFAAmF;AACnF,SAAgB,uBAAuB;IACrC,MAAM,CAAC,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,uHAAuH;AACvH,SAAgB,uBAAuB,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;IACpE,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,0NAA0N;AAC1N,SAAgB,iBAAiB,CAAC,MAA8B;IAC9D,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,IAAI,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3G,CAAC"}

package/dist/remoteRun/safeCopy.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @description Bring a job's result files into the project, from a temp folder the runner's files were rsynced into. The runner is not
+ * trusted to write into the main box: only REGULAR files whose project-relative path a `pull:` pattern names are copied — never one that
+ * {@link getProtectedPathReason} protects; a symlink,
+ * a special file, a path no pattern names, or a destination that would pass through a symlink or over a directory of the project is
+ * refused and only counted. Nothing outside the project root can be reached: paths come from walking the temp folder, and every
+ * destination directory is checked component by component.
+ */
+export interface SafeCopyResult {
+    copied: string[];
+    /** Files seen in the fetched folder that were not copied (symlinks, special files, paths no pattern names, unsafe destinations). */
+    refusedCount: number;
+}
+/**
+ * @description Why a path may never be copied in, whatever a `pull:` pattern says — or `null`. A broad pattern (`**`) is a trust in the
+ * runner for what it names, but some files turn that into code running on the MAIN box: anything under a `.git` (a hook, or
+ * `core.hooksPath` / `fsmonitor` in its `config`, run at the next git command), the project's own `.remote-run` (it decides what is sent,
+ * installed and pulled next time), and anything in a folder git takes hooks from (`hookDirectories`: `getHookDirectories` in `project.ts` —
+ * husky's `.husky`, a `core.hooksPath` inside the project). Compared case-insensitively: on a case-insensitive disk `.Git/hooks` IS
+ * `.git/hooks`. Other tools that run commands at commit (lint-staged and lefthook configs, `package.json` scripts) are not recognised:
+ * that is what keeping `pull:` narrow is for.
+ */
+export declare function getProtectedPathReason(relativePath: string, hookDirectories?: readonly string[]): string | null;
+/** @description Copy the files of `fetchedRoot` that `patterns` name into `projectRoot`, as the module comment says. */
+export declare function copyFetchedFiles(params: {
+    fetchedRoot: string;
+    projectRoot: string;
+    patterns: readonly string[];
+    hookDirectories?: readonly string[];
+}): SafeCopyResult;
+//# sourceMappingURL=safeCopy.d.ts.map

package/dist/remoteRun/safeCopy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeCopy.d.ts","sourceRoot":"","sources":["../../src/remoteRun/safeCopy.ts"],"names":[],"mappings":"AAKA;;;;;;;GAOG;AAEH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,oIAAoI;IACpI,YAAY,EAAE,MAAM,CAAC;CACtB;AAuCD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,GAAG,IAAI,CAMnH;AAED,wHAAwH;AACxH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,cAAc,CAmCvK"}