charness 3.6.0 → 3.7.0

package/dist/remoteRun/safeCopy.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProtectedPathReason = getProtectedPathReason;
+exports.copyFetchedFiles = copyFetchedFiles;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const pathPatterns_1 = require("./pathPatterns");
+const projectConfig_1 = require("./projectConfig");
+const copiedFileModeMask = 0o777;
+function listFetchedEntries(directory, relativeDirectory, found) {
+    for (const entry of fs.readdirSync(directory, { withFileTypes: true })) {
+        const relativePath = relativeDirectory === '' ? entry.name : path.posix.join(relativeDirectory, entry.name);
+        if (entry.isDirectory())
+            listFetchedEntries(path.join(directory, entry.name), relativePath, found);
+        else
+            found.push({ relativePath, kind: entry.isFile() ? 'file' : 'other' });
+    }
+}
+/** Create the directories of `relativeDirectory` under `rootReal`, refusing a symlink or a non-directory on the way. `false` = unsafe. */
+function ensureSafeDirectory(rootReal, relativeDirectory) {
+    let current = rootReal;
+    for (const part of relativeDirectory.split('/').filter((segment) => segment !== '')) {
+        current = path.join(current, part);
+        let stat;
+        try {
+            stat = fs.lstatSync(current);
+        }
+        catch {
+            stat = null;
+        }
+        if (stat === null)
+            fs.mkdirSync(current);
+        else if (!stat.isDirectory())
+            return false;
+    }
+    return true;
+}
+const gitDirectoryName = '.git';
+/** Is `relativePath` the folder `directory` or inside it? `''` is the project root: everything. Case-insensitive, like the disks that make `.Git` the same as `.git`. */
+function checkIsInsideDirectory(relativePath, directory) {
+    if (directory === '')
+        return true;
+    const lowerPath = relativePath.toLowerCase();
+    const lowerDirectory = directory.toLowerCase();
+    return lowerPath === lowerDirectory || lowerPath.startsWith(`${lowerDirectory}/`);
+}
+/**
+ * @description Why a path may never be copied in, whatever a `pull:` pattern says — or `null`. A broad pattern (`**`) is a trust in the
+ * runner for what it names, but some files turn that into code running on the MAIN box: anything under a `.git` (a hook, or
+ * `core.hooksPath` / `fsmonitor` in its `config`, run at the next git command), the project's own `.remote-run` (it decides what is sent,
+ * installed and pulled next time), and anything in a folder git takes hooks from (`hookDirectories`: `getHookDirectories` in `project.ts` —
+ * husky's `.husky`, a `core.hooksPath` inside the project). Compared case-insensitively: on a case-insensitive disk `.Git/hooks` IS
+ * `.git/hooks`. Other tools that run commands at commit (lint-staged and lefthook configs, `package.json` scripts) are not recognised:
+ * that is what keeping `pull:` narrow is for.
+ */
+function getProtectedPathReason(relativePath, hookDirectories = []) {
+    if (relativePath.split('/').some((part) => part.toLowerCase() === gitDirectoryName))
+        return 'inside a .git';
+    if (relativePath.toLowerCase() === projectConfig_1.projectConfigName)
+        return "the project's .remote-run";
+    const hookDirectory = hookDirectories.find((directory) => checkIsInsideDirectory(relativePath, directory));
+    if (hookDirectory !== undefined)
+        return hookDirectory === '' ? 'in a project whose git hooks folder is the project root' : `inside the git hooks folder ${hookDirectory}`;
+    return null;
+}
+/** @description Copy the files of `fetchedRoot` that `patterns` name into `projectRoot`, as the module comment says. */
+function copyFetchedFiles(params) {
+    const isNamed = (0, pathPatterns_1.createPathMatcher)(params.patterns);
+    const rootReal = fs.realpathSync(params.projectRoot);
+    const entries = [];
+    listFetchedEntries(params.fetchedRoot, '', entries);
+    const result = { copied: [], refusedCount: 0 };
+    for (const entry of entries) {
+        const isInside = !entry.relativePath.split('/').includes('..') && !path.isAbsolute(entry.relativePath);
+        if (entry.kind !== 'file' || !isInside || !isNamed(entry.relativePath) || getProtectedPathReason(entry.relativePath, params.hookDirectories) !== null) {
+            result.refusedCount += 1;
+            continue;
+        }
+        const destination = path.join(rootReal, entry.relativePath);
+        if (!ensureSafeDirectory(rootReal, path.posix.dirname(entry.relativePath) === '.' ? '' : path.posix.dirname(entry.relativePath))) {
+            result.refusedCount += 1;
+            continue;
+        }
+        let existing;
+        try {
+            existing = fs.lstatSync(destination);
+        }
+        catch {
+            existing = null;
+        }
+        if (existing !== null && !existing.isFile()) {
+            result.refusedCount += 1;
+            continue;
+        }
+        const source = path.join(params.fetchedRoot, entry.relativePath);
+        const temporary = `${destination}.remote-run-${process.pid}.tmp`;
+        fs.copyFileSync(source, temporary);
+        fs.chmodSync(temporary, fs.statSync(source).mode & copiedFileModeMask);
+        fs.renameSync(temporary, destination);
+        result.copied.push(entry.relativePath);
+    }
+    return result;
+}
+//# sourceMappingURL=safeCopy.js.map

package/dist/remoteRun/safeCopy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeCopy.js","sourceRoot":"","sources":["../../src/remoteRun/safeCopy.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkEA,wDAMC;AAGD,4CAmCC;AA9GD,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAmD;AACnD,mDAAoD;AAiBpD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,SAAS,kBAAkB,CAAC,SAAiB,EAAE,iBAAyB,EAAE,KAA8D;IACtI,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,MAAM,YAAY,GAAG,iBAAiB,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5G,IAAI,KAAK,CAAC,WAAW,EAAE;YAAE,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;;YAC9F,KAAK,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,0IAA0I;AAC1I,SAAS,mBAAmB,CAAC,QAAgB,EAAE,iBAAyB;IACtE,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,CAAC,EAAE,CAAC;QACpF,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,IAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;aACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,yKAAyK;AACzK,SAAS,sBAAsB,CAAC,YAAoB,EAAE,SAAiB;IACrE,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,SAAS,KAAK,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,YAAoB,EAAE,kBAAqC,EAAE;IAClG,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC;QAAE,OAAO,eAAe,CAAC;IAC5G,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,iCAAiB;QAAE,OAAO,2BAA2B,CAAC;IACzF,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3G,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,+BAA+B,aAAa,EAAE,CAAC;IAC1K,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wHAAwH;AACxH,SAAgB,gBAAgB,CAAC,MAAsH;IACrJ,MAAM,OAAO,GAAG,IAAA,gCAAiB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,OAAO,GAA4D,EAAE,CAAC;IAC5E,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAmB,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvG,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,sBAAsB,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC;YACtJ,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACjI,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,GAAG,WAAW,eAAe,OAAO,CAAC,GAAG,MAAM,CAAC;QACjE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACnC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,kBAAkB,CAAC,CAAC;QACvE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/remoteRun/sendPlan.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @description What goes to the runner and how: the file list (git decides, `.remote-run` trims and opts in), the files held back
+ * because they look like secrets, and the rsync argument lists. Pure — the git calls and the process spawns are elsewhere.
+ *
+ * Sent: tracked and untracked-not-ignored files, submodules included. Never sent: what `.gitignore` names (the runner keeps its own
+ * `node_modules`, `build`, caches), `.git` unless `--with-git`, `exclude:` paths, and secret-looking files unless `send:` names them.
+ */
+/**
+ * rsync decides a file is unchanged when its size and mtime match, and by default the mtime is compared in WHOLE SECONDS: an edit of the
+ * same length within the second of the previous version would be skipped, and the runner would keep the old file. A negative modify
+ * window compares the nanoseconds too (rsync 3.1.3 or newer on both ends; older ones fall back to seconds).
+ */
+export declare const rsyncNanosecondWindowArg = "--modify-window=-1";
+/** @description Does the NAME of `relativePath` look like a secret (`.env`, `.env.*` but not its templates, `*.pem`, `*.p12`, `*.key`, `.npmrc`)? */
+export declare function checkIsSecretLookingFile(relativePath: string): boolean;
+export interface SendListInput {
+    /** What git lists as sendable: tracked + untracked-not-ignored, submodule files included, relative to the project root, all of them present on disk. */
+    files: readonly string[];
+    /** Ignored files that exist (git's `-o -i`), consulted ONLY for what `send:` names. */
+    ignoredFiles: readonly string[];
+    exclude: readonly string[];
+    send: readonly string[];
+}
+export interface SendPlan {
+    /** What is sent, sorted. */
+    files: string[];
+    /** Secret-looking files NOT sent (the caller says which and how to opt in). */
+    heldBack: string[];
+    /** Names with a newline that `exclude:` does not drop: the whole run is refused (the runner reads its lists one name per line). */
+    refused: string[];
+}
+/** @description Turn git's lists into the send plan. `exclude:` beats `send:`; a name with a newline that is not excluded is refused. */
+export declare function planSendList(input: SendListInput): SendPlan;
+/** @description The NUL-separated list `rsync --files-from=- --from0` reads. */
+export declare function formatNulSeparatedList(files: readonly string[]): string;
+/** @description The list the runner diffs between two submits to find deletions: one path per line. */
+export declare function formatManifest(files: readonly string[]): string;
+export interface RsyncSendParams {
+    /** The ssh command rsync runs (`-e`), already joined. */
+    sshCommand: string;
+    /** The project root on this machine. */
+    sourceRoot: string;
+    /** `host:/path/stage/<job>/` */
+    destination: string;
+    /** The runner's current copy, so unchanged files are copied locally instead of sent again; `null` on a first send. */
+    copyDestination: string | null;
+}
+/**
+ * @description `rsync` of the listed files into the job's stage dir. `--copy-dest` (not `--link-dest`): a staged file is a real copy,
+ * so a job that rewrites a file in place (`jest -u`) can never change what a queued job of the same project is going to apply.
+ */
+export declare function buildRsyncSendArgs(params: RsyncSendParams): string[];
+/** @description `rsync` of the project's `.git` directory into the stage dir (`--with-git`). */
+export declare function buildRsyncGitArgs(params: RsyncSendParams): string[];
+/** @description `rsync` of a small local folder (the job's meta files) to `destination`. */
+export declare function buildRsyncMetaArgs(params: {
+    sshCommand: string;
+    sourceDirectory: string;
+    destination: string;
+}): string[];
+/** @description `rsync` of a job's result files into a local temp folder: no symlinks at all, the runner is not trusted to write into the main box. */
+export declare function buildRsyncFetchArgs(params: {
+    sshCommand: string;
+    source: string;
+    destinationDirectory: string;
+}): string[];
+//# sourceMappingURL=sendPlan.d.ts.map

package/dist/remoteRun/sendPlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendPlan.d.ts","sourceRoot":"","sources":["../../src/remoteRun/sendPlan.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AAEH;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,uBAAuB,CAAC;AAM7D,qJAAqJ;AACrJ,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAKtE;AAED,MAAM,WAAW,aAAa;IAC5B,wJAAwJ;IACxJ,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,uFAAuF;IACvF,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,QAAQ;IACvB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mIAAmI;IACnI,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,yIAAyI;AACzI,wBAAgB,YAAY,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAe3D;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAEvE;AAED,uGAAuG;AACvG,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAE/D;AAED,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,sHAAsH;IACtH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAYpE;AAED,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAUnE;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAEzH;AAED,uJAAuJ;AACvJ,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAE1H"}

package/dist/remoteRun/sendPlan.js

@@ -0,0 +1,139 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rsyncNanosecondWindowArg = void 0;
+exports.checkIsSecretLookingFile = checkIsSecretLookingFile;
+exports.planSendList = planSendList;
+exports.formatNulSeparatedList = formatNulSeparatedList;
+exports.formatManifest = formatManifest;
+exports.buildRsyncSendArgs = buildRsyncSendArgs;
+exports.buildRsyncGitArgs = buildRsyncGitArgs;
+exports.buildRsyncMetaArgs = buildRsyncMetaArgs;
+exports.buildRsyncFetchArgs = buildRsyncFetchArgs;
+const path = __importStar(require("path"));
+const pathPatterns_1 = require("./pathPatterns");
+/**
+ * @description What goes to the runner and how: the file list (git decides, `.remote-run` trims and opts in), the files held back
+ * because they look like secrets, and the rsync argument lists. Pure — the git calls and the process spawns are elsewhere.
+ *
+ * Sent: tracked and untracked-not-ignored files, submodules included. Never sent: what `.gitignore` names (the runner keeps its own
+ * `node_modules`, `build`, caches), `.git` unless `--with-git`, `exclude:` paths, and secret-looking files unless `send:` names them.
+ */
+/**
+ * rsync decides a file is unchanged when its size and mtime match, and by default the mtime is compared in WHOLE SECONDS: an edit of the
+ * same length within the second of the previous version would be skipped, and the runner would keep the old file. A negative modify
+ * window compares the nanoseconds too (rsync 3.1.3 or newer on both ends; older ones fall back to seconds).
+ */
+exports.rsyncNanosecondWindowArg = '--modify-window=-1';
+/** A secret-looking file that is only a template of one (`.env.example`) is sent: it holds no secret. */
+const templateEnvSuffixes = ['.example', '.sample', '.template'];
+const secretFileExtensions = ['.pem', '.p12', '.key'];
+/** @description Does the NAME of `relativePath` look like a secret (`.env`, `.env.*` but not its templates, `*.pem`, `*.p12`, `*.key`, `.npmrc`)? */
+function checkIsSecretLookingFile(relativePath) {
+    const name = path.posix.basename(relativePath);
+    if (name === '.npmrc' || name === '.env')
+        return true;
+    if (name.startsWith('.env.'))
+        return !templateEnvSuffixes.some((suffix) => name.endsWith(suffix));
+    return secretFileExtensions.some((extension) => name.endsWith(extension) && name.length > extension.length);
+}
+/** @description Turn git's lists into the send plan. `exclude:` beats `send:`; a name with a newline that is not excluded is refused. */
+function planSendList(input) {
+    const isExcluded = (0, pathPatterns_1.createPathMatcher)(input.exclude);
+    const isOptedIn = (0, pathPatterns_1.createPathMatcher)(input.send);
+    const candidates = new Set(input.files);
+    for (const ignoredFile of input.ignoredFiles) {
+        if (isOptedIn(ignoredFile))
+            candidates.add(ignoredFile);
+    }
+    const plan = { files: [], heldBack: [], refused: [] };
+    for (const file of [...candidates].sort()) {
+        if (isExcluded(file))
+            continue;
+        if (file.includes('\n'))
+            plan.refused.push(file);
+        else if (checkIsSecretLookingFile(file) && !isOptedIn(file))
+            plan.heldBack.push(file);
+        else
+            plan.files.push(file);
+    }
+    return plan;
+}
+/** @description The NUL-separated list `rsync --files-from=- --from0` reads. */
+function formatNulSeparatedList(files) {
+    return files.map((file) => `${file}\0`).join('');
+}
+/** @description The list the runner diffs between two submits to find deletions: one path per line. */
+function formatManifest(files) {
+    return files.map((file) => `${file}\n`).join('');
+}
+/**
+ * @description `rsync` of the listed files into the job's stage dir. `--copy-dest` (not `--link-dest`): a staged file is a real copy,
+ * so a job that rewrites a file in place (`jest -u`) can never change what a queued job of the same project is going to apply.
+ */
+function buildRsyncSendArgs(params) {
+    return [
+        '-a',
+        exports.rsyncNanosecondWindowArg,
+        '--from0',
+        '--files-from=-',
+        ...(params.copyDestination === null ? [] : [`--copy-dest=${params.copyDestination}`]),
+        '-e',
+        params.sshCommand,
+        `${params.sourceRoot}/`,
+        params.destination,
+    ];
+}
+/** @description `rsync` of the project's `.git` directory into the stage dir (`--with-git`). */
+function buildRsyncGitArgs(params) {
+    return [
+        '-a',
+        exports.rsyncNanosecondWindowArg,
+        ...(params.copyDestination === null ? [] : [`--copy-dest=${params.copyDestination}`]),
+        '-e',
+        params.sshCommand,
+        `${params.sourceRoot}/.git/`,
+        `${params.destination}.git/`,
+    ];
+}
+/** @description `rsync` of a small local folder (the job's meta files) to `destination`. */
+function buildRsyncMetaArgs(params) {
+    return ['-rt', '-e', params.sshCommand, `${params.sourceDirectory}/`, params.destination];
+}
+/** @description `rsync` of a job's result files into a local temp folder: no symlinks at all, the runner is not trusted to write into the main box. */
+function buildRsyncFetchArgs(params) {
+    return ['-rt', '--no-links', '-e', params.sshCommand, `${params.source}/`, `${params.destinationDirectory}/`];
+}
+//# sourceMappingURL=sendPlan.js.map

package/dist/remoteRun/sendPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sendPlan.js","sourceRoot":"","sources":["../../src/remoteRun/sendPlan.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,4DAKC;AAqBD,oCAeC;AAGD,wDAEC;AAGD,wCAEC;AAiBD,gDAYC;AAGD,8CAUC;AAGD,gDAEC;AAGD,kDAEC;AA9HD,2CAA6B;AAC7B,iDAAmD;AAEnD;;;;;;GAMG;AAEH;;;;GAIG;AACU,QAAA,wBAAwB,GAAG,oBAAoB,CAAC;AAE7D,yGAAyG;AACzG,MAAM,mBAAmB,GAAsB,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACpF,MAAM,oBAAoB,GAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzE,qJAAqJ;AACrJ,SAAgB,wBAAwB,CAAC,YAAoB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAClG,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAC9G,CAAC;AAoBD,yIAAyI;AACzI,SAAgB,YAAY,CAAC,KAAoB;IAC/C,MAAM,UAAU,GAAG,IAAA,gCAAiB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAA,gCAAiB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,KAAK,CAAC,KAAK,CAAC,CAAC;IAChD,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,WAAW,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC5C,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACjF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAgB,sBAAsB,CAAC,KAAwB;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,uGAAuG;AACvG,SAAgB,cAAc,CAAC,KAAwB;IACrD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAaD;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,MAAuB;IACxD,OAAO;QACL,IAAI;QACJ,gCAAwB;QACxB,SAAS;QACT,gBAAgB;QAChB,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QACrF,IAAI;QACJ,MAAM,CAAC,UAAU;QACjB,GAAG,MAAM,CAAC,UAAU,GAAG;QACvB,MAAM,CAAC,WAAW;KACnB,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAgB,iBAAiB,CAAC,MAAuB;IACvD,OAAO;QACL,IAAI;QACJ,gCAAwB;QACxB,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QACrF,IAAI;QACJ,MAAM,CAAC,UAAU;QACjB,GAAG,MAAM,CAAC,UAAU,QAAQ;QAC5B,GAAG,MAAM,CAAC,WAAW,OAAO;KAC7B,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAgB,kBAAkB,CAAC,MAA4E;IAC7G,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,eAAe,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;AAC5F,CAAC;AAED,uJAAuJ;AACvJ,SAAgB,mBAAmB,CAAC,MAA4E;IAC9G,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,oBAAoB,GAAG,CAAC,CAAC;AAChH,CAAC"}

package/dist/remoteRun/ssh.d.ts

@@ -0,0 +1,62 @@
+import { type ChildProcessWithoutNullStreams } from 'child_process';
+import type { RunnerConfig } from './runnersConfig';
+/** @description Where remote-run keeps its local cache (ssh control sockets, the last probe of each runner): `${XDG_CACHE_HOME:-~/.cache}/charness/remote-run`. */
+export declare function getRemoteRunCacheDir(env?: NodeJS.ProcessEnv, homeDir?: string): string;
+/** @description Create the cache dir (mode 0700) and its ssh folder. */
+export declare function ensureRemoteRunCacheDir(cacheDir: string): void;
+/** @description The ssh options of every call to `runner` (without the destination): the operator's own first — ssh keeps the first value of an option — then ours. */
+export declare function buildSshArgs(runner: Pick<RunnerConfig, 'sshOptions'>, cacheDir: string): string[];
+/** @description One word quoted for a POSIX shell (`shellSingleQuote`; an already plain word stays as it is, so the commands read well in a log). */
+export declare function quoteShellWord(word: string): string;
+/** @description The words of an argument list as one string rsync's `-e` and a shell both read back as the same words. */
+export declare function joinShellWords(words: readonly string[]): string;
+/** @description The `-e` command of rsync: `ssh <options> <destination>` is rsync's to complete, so this is `ssh <options>`. */
+export declare function buildRsyncSshCommand(runner: Pick<RunnerConfig, 'sshOptions'>, cacheDir: string): string;
+/** @description A path for the REMOTE shell: a leading `~` stays unquoted so the runner's shell expands it. */
+export declare function quoteRemotePath(remotePath: string): string;
+export interface RunnerScriptCall {
+    runner: Pick<RunnerConfig, 'workDir' | 'pueue'>;
+    /** `runner-<sha8>.sh` */
+    scriptName: string;
+    subcommand: string;
+    /** After the work dir the script always gets first. */
+    args: readonly string[];
+}
+/** @description The command line that runs one subcommand of the uploaded script on the runner (Pueue's binary and config through the environment). */
+export declare function buildRunnerScriptCommand(call: RunnerScriptCall): string;
+/** @description The command that writes the script from stdin into `<workDir>/bin/` unless it is already there (a temp file and a rename, so a half upload is never run). */
+export declare function buildScriptUploadCommand(runner: Pick<RunnerConfig, 'workDir'>, scriptName: string): string;
+export declare function buildScriptExistsCommand(runner: Pick<RunnerConfig, 'workDir'>, scriptName: string): string;
+/** The exit status ssh itself reports when it could not run the command. */
+export declare const sshFailureExitCode = 255;
+/**
+ * @description Did the ssh call end because the CONNECTION failed (ssh's own status 255, or a process that was killed), rather than
+ * because the command on the runner ended with a status of its own? The runner script's refusals exit 125 and a job's code is whatever its
+ * command returned, so only this one is worth opening the connection again for.
+ */
+export declare function checkIsConnectionLost(exitCode: number | null): boolean;
+export interface SshRunResult {
+    /** `null` when the process was killed (a timeout). */
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    isTimedOut: boolean;
+}
+export interface SshRunParams {
+    runner: Pick<RunnerConfig, 'ssh' | 'sshOptions'>;
+    cacheDir: string;
+    remoteCommand: string;
+    /** Written to the command's stdin, then closed. */
+    input?: string;
+    /** The deadline; the ssh process is killed when it passes. */
+    timeoutMs: number;
+    /** Ends the call from outside (a caller's own, shared deadline): the ssh process is killed and the result says it was cut off. */
+    signal?: AbortSignal;
+}
+/** @description Run one command on the runner and collect its output, with a deadline. */
+export declare function runSshCommand(params: SshRunParams): Promise<SshRunResult>;
+/** @description Start a long-lived ssh command whose streams the caller handles itself (the lease, `exec`, `wait`); the caller owns its deadline and its end. */
+export declare function spawnSshStream(params: Omit<SshRunParams, 'input' | 'timeoutMs'>): ChildProcessWithoutNullStreams;
+/** @description Close the master connection of a runner (`ssh -O exit`), best effort: a lingering master is harmless (ControlPersist ends it) but a test wants none left. */
+export declare function closeSshMaster(runner: Pick<RunnerConfig, 'ssh' | 'sshOptions'>, cacheDir: string): Promise<void>;
+//# sourceMappingURL=ssh.d.ts.map

package/dist/remoteRun/ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.d.ts","sourceRoot":"","sources":["../../src/remoteRun/ssh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAK3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAmBpD,mKAAmK;AACnK,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,OAAO,GAAE,MAAqB,GAAG,MAAM,CAGjH;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAI9D;AAED,uKAAuK;AACvK,wBAAgB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAajG;AAID,qJAAqJ;AACrJ,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,0HAA0H;AAC1H,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAE/D;AAED,gIAAgI;AAChI,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvG;AAED,+GAA+G;AAC/G,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC;IAChD,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CACzB;AAED,uJAAuJ;AACvJ,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAOvE;AAED,6KAA6K;AAC7K,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAK1G;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE1G;AAED,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAEtE;AAED,MAAM,WAAW,YAAY;IAC3B,sDAAsD;IACtD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,YAAY,CAAC,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;IAClB,kIAAkI;IAClI,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAgCzE;AAED,iKAAiK;AACjK,wBAAgB,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,WAAW,CAAC,GAAG,8BAA8B,CAEhH;AAED,6KAA6K;AAC7K,wBAAgB,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAahH"}

package/dist/remoteRun/ssh.js

@@ -0,0 +1,202 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sshFailureExitCode = void 0;
+exports.getRemoteRunCacheDir = getRemoteRunCacheDir;
+exports.ensureRemoteRunCacheDir = ensureRemoteRunCacheDir;
+exports.buildSshArgs = buildSshArgs;
+exports.quoteShellWord = quoteShellWord;
+exports.joinShellWords = joinShellWords;
+exports.buildRsyncSshCommand = buildRsyncSshCommand;
+exports.quoteRemotePath = quoteRemotePath;
+exports.buildRunnerScriptCommand = buildRunnerScriptCommand;
+exports.buildScriptUploadCommand = buildScriptUploadCommand;
+exports.buildScriptExistsCommand = buildScriptExistsCommand;
+exports.checkIsConnectionLost = checkIsConnectionLost;
+exports.runSshCommand = runSshCommand;
+exports.spawnSshStream = spawnSshStream;
+exports.closeSshMaster = closeSshMaster;
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const tmuxExec_1 = require("../utils/tmuxExec");
+/**
+ * @description Everything that touches ssh: the argument lists (pure, unit-tested), the quoting for the remote shell, and the process
+ * helpers. Always non-interactive (`BatchMode`: a password or an unknown host key is an error, never a prompt), host keys checked as the
+ * operator's ssh config says (never `StrictHostKeyChecking=no`), one master connection per runner shared by the several short calls of a
+ * run (`ControlMaster`), and every spawned command with a deadline: a blocked connection must end in time, not hang the agent.
+ */
+const connectTimeoutSeconds = 15;
+const serverAliveIntervalSeconds = 15;
+const serverAliveCountMax = 3;
+const controlPersistSeconds = 60;
+/** The longest a unix socket path may be (sun_path, with a margin); ssh refuses a longer ControlPath. */
+const unixSocketPathLimit = 100;
+/** `%C` in a ControlPath expands to a 40-character hash. */
+const controlPathHashLength = 40;
+const cacheDirectoryMode = 0o700;
+/** @description Where remote-run keeps its local cache (ssh control sockets, the last probe of each runner): `${XDG_CACHE_HOME:-~/.cache}/charness/remote-run`. */
+function getRemoteRunCacheDir(env = process.env, homeDir = os.homedir()) {
+    const cacheHome = env.XDG_CACHE_HOME !== undefined && env.XDG_CACHE_HOME !== '' ? env.XDG_CACHE_HOME : path.join(homeDir, '.cache');
+    return path.join(cacheHome, 'charness', 'remote-run');
+}
+/** @description Create the cache dir (mode 0700) and its ssh folder. */
+function ensureRemoteRunCacheDir(cacheDir) {
+    fs.mkdirSync(path.join(cacheDir, 'ssh'), { recursive: true, mode: cacheDirectoryMode });
+    fs.chmodSync(cacheDir, cacheDirectoryMode);
+    fs.chmodSync(path.join(cacheDir, 'ssh'), cacheDirectoryMode);
+}
+/** @description The ssh options of every call to `runner` (without the destination): the operator's own first — ssh keeps the first value of an option — then ours. */
+function buildSshArgs(runner, cacheDir) {
+    const controlDirectory = path.join(cacheDir, 'ssh');
+    const isControlPathShortEnough = controlDirectory.length + 1 + controlPathHashLength <= unixSocketPathLimit;
+    return [
+        ...(runner.sshOptions ?? []),
+        '-o', 'BatchMode=yes',
+        '-o', `ConnectTimeout=${connectTimeoutSeconds}`,
+        '-o', `ServerAliveInterval=${serverAliveIntervalSeconds}`,
+        '-o', `ServerAliveCountMax=${serverAliveCountMax}`,
+        ...(isControlPathShortEnough
+            ? ['-o', 'ControlMaster=auto', '-o', `ControlPath=${path.join(controlDirectory, '%C')}`, '-o', `ControlPersist=${controlPersistSeconds}`]
+            : ['-o', 'ControlMaster=no']),
+    ];
+}
+const safeWordPattern = /^[A-Za-z0-9_@%+=:,./-]+$/;
+/** @description One word quoted for a POSIX shell (`shellSingleQuote`; an already plain word stays as it is, so the commands read well in a log). */
+function quoteShellWord(word) {
+    return word !== '' && safeWordPattern.test(word) ? word : (0, tmuxExec_1.shellSingleQuote)(word);
+}
+/** @description The words of an argument list as one string rsync's `-e` and a shell both read back as the same words. */
+function joinShellWords(words) {
+    return words.map(quoteShellWord).join(' ');
+}
+/** @description The `-e` command of rsync: `ssh <options> <destination>` is rsync's to complete, so this is `ssh <options>`. */
+function buildRsyncSshCommand(runner, cacheDir) {
+    return joinShellWords(['ssh', ...buildSshArgs(runner, cacheDir)]);
+}
+/** @description A path for the REMOTE shell: a leading `~` stays unquoted so the runner's shell expands it. */
+function quoteRemotePath(remotePath) {
+    if (remotePath === '~')
+        return '~';
+    if (remotePath.startsWith('~/'))
+        return `~/${quoteShellWord(remotePath.slice(2))}`;
+    return quoteShellWord(remotePath);
+}
+/** @description The command line that runs one subcommand of the uploaded script on the runner (Pueue's binary and config through the environment). */
+function buildRunnerScriptCommand(call) {
+    const environment = [
+        ...(call.runner.pueue?.bin === undefined ? [] : [`PUEUE_BIN=${quoteRemotePath(call.runner.pueue.bin)}`]),
+        ...(call.runner.pueue?.config === undefined ? [] : [`PUEUE_CONFIG=${quoteRemotePath(call.runner.pueue.config)}`]),
+    ];
+    const scriptPath = `${quoteRemotePath(call.runner.workDir)}/bin/${call.scriptName}`;
+    return [...environment, 'bash', scriptPath, call.subcommand, quoteRemotePath(call.runner.workDir), ...call.args.map(quoteShellWord)].join(' ');
+}
+/** @description The command that writes the script from stdin into `<workDir>/bin/` unless it is already there (a temp file and a rename, so a half upload is never run). */
+function buildScriptUploadCommand(runner, scriptName) {
+    const binDirectory = `${quoteRemotePath(runner.workDir)}/bin`;
+    const target = `${binDirectory}/${scriptName}`;
+    const temporary = `${binDirectory}/.${scriptName}.$$`;
+    return `mkdir -p ${binDirectory} && cat > ${temporary} && chmod 755 ${temporary} && mv -f ${temporary} ${target}`;
+}
+function buildScriptExistsCommand(runner, scriptName) {
+    return `test -f ${quoteRemotePath(runner.workDir)}/bin/${scriptName}`;
+}
+/** The exit status ssh itself reports when it could not run the command. */
+exports.sshFailureExitCode = 255;
+/**
+ * @description Did the ssh call end because the CONNECTION failed (ssh's own status 255, or a process that was killed), rather than
+ * because the command on the runner ended with a status of its own? The runner script's refusals exit 125 and a job's code is whatever its
+ * command returned, so only this one is worth opening the connection again for.
+ */
+function checkIsConnectionLost(exitCode) {
+    return exitCode === null || exitCode === exports.sshFailureExitCode;
+}
+/** @description Run one command on the runner and collect its output, with a deadline. */
+function runSshCommand(params) {
+    return new Promise((resolve) => {
+        const child = (0, child_process_1.spawn)('ssh', [...buildSshArgs(params.runner, params.cacheDir), params.runner.ssh, params.remoteCommand], { stdio: ['pipe', 'pipe', 'pipe'] });
+        let stdout = '';
+        let stderr = '';
+        let isTimedOut = false;
+        const cutOff = () => {
+            isTimedOut = true;
+            child.kill('SIGKILL');
+        };
+        const timer = setTimeout(cutOff, params.timeoutMs);
+        if (params.signal?.aborted === true)
+            cutOff();
+        else
+            params.signal?.addEventListener('abort', cutOff, { once: true });
+        const settle = () => {
+            clearTimeout(timer);
+            params.signal?.removeEventListener('abort', cutOff);
+        };
+        child.stdout.setEncoding('utf8');
+        child.stderr.setEncoding('utf8');
+        child.stdout.on('data', (chunk) => { stdout += chunk; });
+        child.stderr.on('data', (chunk) => { stderr += chunk; });
+        child.stdin.on('error', () => { });
+        child.on('error', (error) => {
+            settle();
+            resolve({ exitCode: exports.sshFailureExitCode, stdout, stderr: `${stderr}${error.message}\n`, isTimedOut });
+        });
+        child.on('close', (exitCode) => {
+            settle();
+            resolve({ exitCode, stdout, stderr, isTimedOut });
+        });
+        child.stdin.end(params.input ?? '');
+    });
+}
+/** @description Start a long-lived ssh command whose streams the caller handles itself (the lease, `exec`, `wait`); the caller owns its deadline and its end. */
+function spawnSshStream(params) {
+    return (0, child_process_1.spawn)('ssh', [...buildSshArgs(params.runner, params.cacheDir), params.runner.ssh, params.remoteCommand], { stdio: ['pipe', 'pipe', 'pipe'] });
+}
+/** @description Close the master connection of a runner (`ssh -O exit`), best effort: a lingering master is harmless (ControlPersist ends it) but a test wants none left. */
+function closeSshMaster(runner, cacheDir) {
+    return new Promise((resolve) => {
+        const child = (0, child_process_1.spawn)('ssh', [...buildSshArgs(runner, cacheDir), '-O', 'exit', runner.ssh], { stdio: 'ignore' });
+        const timer = setTimeout(() => child.kill('SIGKILL'), connectTimeoutSeconds * 1000);
+        child.on('close', () => {
+            clearTimeout(timer);
+            resolve();
+        });
+        child.on('error', () => {
+            clearTimeout(timer);
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=ssh.js.map