command: ["timeout", "-k", "10", "1800", "node", "--test", "/home/jwoltje/.t3/worktrees/mosaic-stack/magica-row329/packages/bus/tests/host-run.test.mjs"]
TMPDIR: /mnt/storage/scratch/tmp/BU48EX
begin: {"utc": "2026-10-24T21:31:17.417+00:00", "load1": "3.13"}
launch nice: 19
✔ row 280: an occupied TCP port is attempted, refused, and retried with our sshd (89.115057ms)
✔ row 280: every injected picker sample is unprivileged and outside the ephemeral range (0.359153ms)
✔ the executor tests need sshd, ssh, ssh-agent, ssh-add, ssh-keygen and setpriv: a missing one fails, never skips (0.105538ms)
✔ T3: organization.set, limits.set and instances.set refuse hosts, and the writer never runs (24.679622ms)
✔ T4: the value check takes one unencrypted ed25519 key and nothing else (201.007963ms)
✔ T5 to T8: registry, grant, argv shape and allowlist refusals (516.394575ms)
✔ T9: under 1.7 every call needs a decision bound to its host, argv and stdin, spent once (294.797122ms)
✔ T10, T11: argv reaches sudo unchanged after sudo -n -- (274.701348ms)
✔ T12, T13: exit code passes through, the timeout kills the group, output is capped (1499.581177ms)
✔ T14: a host key not in the registry refuses and nothing runs (174.485366ms)
✔ G18: hosts.check with a wrong pin refuses host-key-mismatch and runs nothing on the host (317.456396ms)
✔ N3: a remote exit 255 that prints the pin refusal text is the command result, and an ssh failure keeps its message (303.375045ms)
✔ T15: ssh reads no config file and no user known_hosts (270.405711ms)
✔ T16, T17: key material in output or stdin refuses credential-leak, and no event holds it (655.718535ms)
✔ T18, T19, T20: one call at a time, no key in any argv or env, and nothing left after (4652.92337ms)
✔ T21: revoke kills the call in flight, and the next call refuses (305.97951ms)
✔ T22: events carry host, address, user and argv in clear, and sizes and hashes only (261.929802ms)
✔ T24: no literal gitea and vikunja kind list outside vocabulary.mjs, and the credential use sites are known (41.423166ms)
✔ T25: no role definition lists host.sudo while it is a hard wait (0.5194ms)
✔ T27: the bus child dying takes ssh and ssh-agent with it (316.803066ms)
✔ T27: ssh-add -t drops the key from an agent the test keeps alive (3556.902707ms)
✔ N2: a hung ssh-add is killed at its limit or on abort, and nothing is left running (429.649056ms)
✔ T27: the start sweep keeps a live bus dir and kills only a matching live process (26.892106ms)
✔ T27: the bus start sweeps <configDir>/secrets/run before it listens, and a stray entry stops the start (52.911346ms)
✔ M3: host.run refuses host-not-granted unless the grant record has an approved, spent host grant (149.417261ms)
✔ M3: a host_grants record gives Credentials a store reference at start, and a restart reads its key (112.967845ms)
ℹ tests 26
ℹ suites 0
ℹ pass 26
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 14657.505831
