Krikri::BatchScript

Wire protocol for task batching (on by default; --no-batching disables it): builds the bash script that runs several plugin invocations in one SSH round trip, and parses the results back out.

Both directions use base64 framing, never marker strings mixed into a plugin's own stdout/stderr - a shell/command task's captured output could in principle contain anything, including a string that collides with a hand-picked delimiter. Base64's own alphabet structurally can't produce that collision, so this is immune to it rather than merely unlikely to hit it.

The generated script is meant to be piped via a single ssh ... bash -s invocation's stdin. Each step's config is embedded in the script itself (also base64) rather than streamed separately over that same stdin - interleaving "script source" and "step data" on one stdin stream is a well-known footgun (bash's own script-reading can read ahead in blocks, not strictly line-by-line, corrupting the boundary between where the script ends and data begins). A single self-contained script sidesteps that entirely.

Assumes GNU coreutils base64 (supports -w0, no line wrapping) on the target - consistent with this project's existing assumption of a Debian/RHEL-family Linux target elsewhere (dpkg/rpm detection, etc.).