command: ["node", "--test", "/home/jwoltje/.t3/worktrees/mosaic-stack/magica-row329/packages/bus/tests/host-run.test.mjs"]
TMPDIR: /mnt/storage/scratch/tmp/oEntjx
launch nice: 19
✔ row 280: an occupied TCP port is attempted, refused, and retried with our sshd (91.359013ms)
✔ row 280: every injected picker sample is unprivileged and outside the ephemeral range (0.402429ms)
✔ the executor tests need sshd, ssh, ssh-agent, ssh-add, ssh-keygen and setpriv: a missing one fails, never skips (0.114796ms)
✔ T3: organization.set, limits.set and instances.set refuse hosts, and the writer never runs (24.749073ms)
✔ T4: the value check takes one unencrypted ed25519 key and nothing else (186.403962ms)
✔ T5 to T8: registry, grant, argv shape and allowlist refusals (529.576558ms)
✔ T9: under 1.7 every call needs a decision bound to its host, argv and stdin, spent once (304.941719ms)
✔ T10, T11: argv reaches sudo unchanged after sudo -n -- (336.223417ms)
✔ T12, T13: exit code passes through, the timeout kills the group, output is capped (1526.035218ms)
✔ T14: a host key not in the registry refuses and nothing runs (190.407495ms)
✔ G18: hosts.check with a wrong pin refuses host-key-mismatch and runs nothing on the host (332.111395ms)
✔ N3: a remote exit 255 that prints the pin refusal text is the command result, and an ssh failure keeps its message (320.860467ms)
✔ T15: ssh reads no config file and no user known_hosts (285.960915ms)
✔ T16, T17: key material in output or stdin refuses credential-leak, and no event holds it (664.793841ms)
✔ T18, T19, T20: one call at a time, no key in any argv or env, and nothing left after (4676.060209ms)
✔ T21: revoke kills the call in flight, and the next call refuses (317.157657ms)
✔ T22: events carry host, address, user and argv in clear, and sizes and hashes only (288.225025ms)
✔ T24: no literal gitea and vikunja kind list outside vocabulary.mjs, and the credential use sites are known (21.830042ms)
✔ T25: no role definition lists host.sudo while it is a hard wait (0.557202ms)
✔ T27: the bus child dying takes ssh and ssh-agent with it (348.702638ms)
✔ T27: ssh-add -t drops the key from an agent the test keeps alive (3561.06465ms)
✔ N2: a hung ssh-add is killed at its limit or on abort, and nothing is left running (429.311091ms)
✔ T27: the start sweep keeps a live bus dir and kills only a matching live process (28.055229ms)
✔ T27: the bus start sweeps <configDir>/secrets/run before it listens, and a stray entry stops the start (66.255666ms)
✔ M3: host.run refuses host-not-granted unless the grant record has an approved, spent host grant (185.900047ms)
✔ M3: a host_grants record gives Credentials a store reference at start, and a restart reads its key (108.768545ms)
ℹ tests 26
ℹ suites 0
ℹ pass 26
ℹ fail 0
ℹ cancelled 0
ℹ skipped 0
ℹ todo 0
ℹ duration_ms 14954.804799
