feat: close AgentRun commander task plane gaps

src/selftest/cases/90-runner-image-tools.ts

@@ -1,19 +1,35 @@
 import assert from "node:assert/strict";
 import { readFile } from "node:fs/promises";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
 import path from "node:path";
 import type { SelfTestCase } from "../harness.js";
 
 const requiredRunnerPackages = Object.freeze(["git", "openssh-client", "ripgrep"]);
+const execFileAsync = promisify(execFile);
 
 const selfTest: SelfTestCase = async (context) => {
   const containerfile = await readFile(path.join(context.root, "deploy/container/Containerfile"), "utf8");
   const apkPackages = installedApkPackages(containerfile);
+  const tran = await readFile(path.join(context.root, "tools/tran"), "utf8");
+  const trans = await readFile(path.join(context.root, "tools/trans"), "utf8");
 
   for (const packageName of requiredRunnerPackages) {
     assert.equal(apkPackages.has(packageName), true, `runner image must install ${packageName}`);
   }
 
-  return { name: "90-runner-image-tools", tests: ["runner image installs required CLI tools"] };
+  assert.equal(tran.startsWith("#!/usr/bin/env bun\n"), true, "tools/tran must be a shebang executable discovered by gitbundle tools");
+  assert.equal(trans.startsWith("#!/bin/sh\n"), true, "tools/trans must be a shebang executable discovered by gitbundle tools");
+  assert.equal(tran.includes("UNIDESK_SSH_CLIENT_TOKEN"), true, "tools/tran must require the scoped UniDesk SSH client token");
+  assert.equal(tran.includes("/ws/ssh"), true, "tools/tran must use the frontend SSH WebSocket path");
+
+  const help = await execFileAsync(path.join(context.root, "tools/tran"), ["--help"], { cwd: context.root, timeout: 10_000 });
+  const parsed = JSON.parse(help.stdout) as { ok?: boolean; supported?: string[]; valuesPrinted?: boolean };
+  assert.equal(parsed.ok, true);
+  assert.equal(parsed.valuesPrinted, false);
+  assert.equal(parsed.supported?.some((line) => line.includes("script")), true);
+
+  return { name: "90-runner-image-tools", tests: ["runner image installs required CLI tools", "gitbundle tran tools are executable and documented"] };
 };
 
 function installedApkPackages(containerfile: string): Set<string> {