fix: cap tran runtime and remove local lock

scripts/src/remote.ts

@@ -6,7 +6,18 @@ import { type UniDeskConfig } from "./config";
 import { type DebugDispatchCommand, isDebugDispatchCommand } from "./debug";
 import { summarizeMicroserviceHealthResponse, summarizeMicroserviceObservation, summarizeMicroserviceProxyResponse } from "./microservices";
 import { parseNetworkPerfOptions, runNetworkPerf } from "./network-perf";
-import { formatSshFailureHint, formatSshRuntimeTimingHint, parseSshInvocation, sshFailureHint, sshRoutePayloadCwd, sshRuntimeTimingHint, wrapSshRemoteCommand } from "./ssh";
+import {
+  formatSshFailureHint,
+  formatSshRuntimeTimeoutHint,
+  formatSshRuntimeTimingHint,
+  parseSshInvocation,
+  sshFailureHint,
+  sshRoutePayloadCwd,
+  sshRuntimeTimeoutHint,
+  sshRuntimeTimeoutMs,
+  sshRuntimeTimingHint,
+  wrapSshRemoteCommand,
+} from "./ssh";
 import { codexJudgeQueryAsync, codexOutputQueryAsync, codexPrPreflightQueryAsync, codexQueuesQueryAsync, codexTaskQueryAsync, codexTasksQueryAsync, codexUnreadTriageAsync } from "./code-queue";
 import { runDecisionCenterCommandAsync } from "./decision-center";
 import {
@@ -898,6 +909,7 @@ async function runRemoteSshWebSocket(
     rows: Number(process.stdout.rows) > 0 ? Number(process.stdout.rows) : 30,
   };
   const openTimeoutMs = Math.max(15000, Number(process.env.UNIDESK_SSH_OPEN_TIMEOUT_MS || 60000));
+  const runtimeTimeoutMs = sshRuntimeTimeoutMs();
   const payload = {
     providerId: invocation.providerId,
     command: wrapSshRemoteCommand(parsed.remoteCommand, parsed.requiredHelpers),
@@ -905,6 +917,7 @@ async function runRemoteSshWebSocket(
     tty: parsed.remoteCommand === null,
     stdinEotOnEnd: parsed.remoteCommand !== null,
     openTimeoutMs,
+    runtimeTimeoutMs,
     cols: size.cols,
     rows: size.rows,
   };
@@ -945,6 +958,7 @@ async function runRemoteSshWebSocket(
 
   return await new Promise<number>((resolve) => {
     const rawMode = parsed.remoteCommand === null && process.stdin.isTTY && typeof process.stdin.setRawMode === "function";
+    let timedOut = false;
     const openTimer = setTimeout(() => {
       if (sessionReady || settled) return;
       process.stderr.write("unidesk remote frontend ssh bridge timed out waiting for provider session\n");
@@ -955,9 +969,26 @@ async function runRemoteSshWebSocket(
         // Ignore close failures while resolving the timeout path.
       }
     }, openTimeoutMs);
+    const runtimeTimer = setTimeout(() => {
+      if (settled) return;
+      timedOut = true;
+      exitCode = 124;
+      process.stderr.write(formatSshRuntimeTimeoutHint(sshRuntimeTimeoutHint({
+        invocation,
+        transport: "frontend-websocket",
+        timeoutMs: runtimeTimeoutMs,
+      })));
+      try {
+        ws.close();
+      } catch {
+        // Ignore close failures while resolving the timeout path.
+      }
+      finish(124);
+    }, runtimeTimeoutMs);
 
     const restore = (): void => {
       clearTimeout(openTimer);
+      clearTimeout(runtimeTimer);
       process.stdin.off("data", onStdinData);
       process.stdin.off("end", onStdinEnd);
       if (rawMode) process.stdin.setRawMode(false);
@@ -966,7 +997,7 @@ async function runRemoteSshWebSocket(
       if (settled) return;
       settled = true;
       restore();
-      const hint = sshFailureHint(invocation.providerId, parsed, code, "");
+      const hint = timedOut ? null : sshFailureHint(invocation.providerId, parsed, code, "");
       if (hint !== null) process.stderr.write(formatSshFailureHint(hint));
       const timingHint = formatSshRuntimeTimingHint(sshRuntimeTimingHint({
         invocation,