@artenx/dshb 0.0.5 → 0.1.1

package/lib/exec-docker/remote-docker-cli.js

@@ -0,0 +1,155 @@
+//#region src/exec-docker/remote-docker-cli.ts
+var RemoteDockerCli = class {
+	ssh;
+	containerId;
+	constructor(ssh, containerId) {
+		this.ssh = ssh;
+		this.containerId = containerId;
+	}
+	async exec(argv, cwd, env = {}, stdinData) {
+		const envFlags = Object.entries(env).map(([k, v]) => ["-e", `${k}=${v}`]).flat();
+		return this.ssh.exec([
+			"docker",
+			"exec",
+			"-w",
+			cwd,
+			...envFlags,
+			this.containerId,
+			...argv
+		], "/", {}, stdinData);
+	}
+	async execShell(command, cwd) {
+		return this.ssh.exec([
+			"docker",
+			"exec",
+			"-w",
+			cwd,
+			this.containerId,
+			"bash",
+			"-c",
+			command
+		], "/");
+	}
+	async readFile(path) {
+		const result = await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"cat",
+			path
+		], "/");
+		return Buffer.from(result.stdout, "utf8");
+	}
+	async writeFile(path, content) {
+		const b64 = (Buffer.isBuffer(content) ? content : Buffer.from(content, "utf8")).toString("base64");
+		await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"bash",
+			"-c",
+			`printf '%s' '${b64}' | base64 -d > '${path.replace(/'/g, "'\\''")}'`
+		], "/");
+	}
+	async listDir(path) {
+		return (await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"ls",
+			"-1pa",
+			"--time-style=+%s",
+			path
+		], "/")).stdout.split("\n").filter((line) => line.trim()).map((line) => {
+			const name = line.replace(/[/@*]$/, "").trim();
+			if (!name) return null;
+			const isDir = line.endsWith("/");
+			const isSymlink = line.endsWith("@");
+			return {
+				name,
+				isDir,
+				isFile: !isDir && !isSymlink,
+				isSymlink,
+				size: 0,
+				mtime: 0
+			};
+		}).filter((e) => e !== null);
+	}
+	async stat(path) {
+		const line = (await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"stat",
+			"-c",
+			"%s %Y %F",
+			path
+		], "/")).stdout.trim();
+		if (!line) return void 0;
+		const parts = line.split(/\s+/);
+		if (parts.length < 3) return void 0;
+		const size = Number(parts[0]);
+		const mtime = Number(parts[1]) * 1e3;
+		const ftype = parts.slice(2).join(" ");
+		return {
+			size,
+			mtime,
+			isDirectory: ftype.includes("directory"),
+			isFile: ftype.includes("regular")
+		};
+	}
+	async mkdir(path) {
+		await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"mkdir",
+			"-p",
+			path
+		], "/");
+	}
+	async remove(path) {
+		await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"rm",
+			"-f",
+			path
+		], "/");
+	}
+	async rename(src, dest) {
+		await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"mv",
+			src,
+			dest
+		], "/");
+	}
+	async ensureRg() {
+		if ((await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"bash",
+			"-c",
+			"command -v rg || echo __missing__"
+		], "/")).stdout.includes("__missing__")) await this.ssh.exec([
+			"docker",
+			"exec",
+			this.containerId,
+			"bash",
+			"-c",
+			"apk add --no-cache ripgrep 2>/dev/null || apt-get install -y ripgrep 2>/dev/null || true"
+		], "/");
+	}
+	async pty(argv, cwd, cols, rows) {
+		throw new Error("remote docker PTY not yet supported");
+	}
+};
+//#endregion
+export { RemoteDockerCli };
+
+//# sourceMappingURL=remote-docker-cli.js.map

package/lib/exec-docker/remote-docker-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-docker-cli.js","names":[],"sources":["../../src/exec-docker/remote-docker-cli.ts"],"sourcesContent":["import type { DockerBackend } from './docker-backend.js'\n\ninterface SshExecutorLike {\n  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{ code: number; stdout: string; stderr: string }>\n}\n\nexport class RemoteDockerCli implements DockerBackend {\n  constructor(\n    private readonly ssh: SshExecutorLike,\n    private readonly containerId: string,\n  ) {}\n\n  async exec(argv: string[], cwd: string, env: Record<string, string> = {}, stdinData?: Buffer): Promise<{ code: number; stdout: string; stderr: string }> {\n    const envFlags = Object.entries(env).map(([k, v]) => ['-e', `${k}=${v}`]).flat()\n    return this.ssh.exec(['docker', 'exec', '-w', cwd, ...envFlags, this.containerId, ...argv], '/', {}, stdinData)\n  }\n\n  async execShell(command: string, cwd: string): Promise<{ code: number; stdout: string; stderr: string }> {\n    return this.ssh.exec(['docker', 'exec', '-w', cwd, this.containerId, 'bash', '-c', command], '/')\n  }\n\n  async readFile(path: string): Promise<Buffer> {\n    const result = await this.ssh.exec(['docker', 'exec', this.containerId, 'cat', path], '/')\n    return Buffer.from(result.stdout, 'utf8')\n  }\n\n  async writeFile(path: string, content: Buffer | string): Promise<void> {\n    const data = Buffer.isBuffer(content) ? content : Buffer.from(content, 'utf8')\n    const b64 = data.toString('base64')\n    await this.ssh.exec(['docker', 'exec', this.containerId, 'bash', '-c', `printf '%s' '${b64}' | base64 -d > '${path.replace(/'/g, \"'\\\\''\")}'`], '/')\n  }\n\n  async listDir(path: string): Promise<Array<{ name: string; isDir: boolean; isFile: boolean; isSymlink: boolean; size: number; mtime: number }>> {\n    const result = await this.ssh.exec(['docker', 'exec', this.containerId, 'ls', '-1pa', '--time-style=+%s', path], '/')\n    return result.stdout\n      .split('\\n')\n      .filter((line) => line.trim())\n      .map((line) => {\n        const name = line.replace(/[/@*]$/, '').trim()\n        if (!name) return null\n        const isDir = line.endsWith('/')\n        const isSymlink = line.endsWith('@')\n        return { name, isDir, isFile: !isDir && !isSymlink, isSymlink, size: 0, mtime: 0 }\n      })\n      .filter((e): e is NonNullable<typeof e> => e !== null)\n  }\n\n  async stat(path: string): Promise<{ size: number; mtime: number; isDirectory: boolean; isFile: boolean } | undefined> {\n    const result = await this.ssh.exec(['docker', 'exec', this.containerId, 'stat', '-c', '%s %Y %F', path], '/')\n    const line = result.stdout.trim()\n    if (!line) return undefined\n    const parts = line.split(/\\s+/)\n    if (parts.length < 3) return undefined\n    const size = Number(parts[0])\n    const mtime = Number(parts[1]) * 1000\n    const ftype = parts.slice(2).join(' ')\n    return { size, mtime, isDirectory: ftype.includes('directory'), isFile: ftype.includes('regular') }\n  }\n\n  async mkdir(path: string): Promise<void> {\n    await this.ssh.exec(['docker', 'exec', this.containerId, 'mkdir', '-p', path], '/')\n  }\n\n  async remove(path: string): Promise<void> {\n    await this.ssh.exec(['docker', 'exec', this.containerId, 'rm', '-f', path], '/')\n  }\n\n  async rename(src: string, dest: string): Promise<void> {\n    await this.ssh.exec(['docker', 'exec', this.containerId, 'mv', src, dest], '/')\n  }\n\n  async ensureRg(): Promise<void> {\n    const result = await this.ssh.exec(['docker', 'exec', this.containerId, 'bash', '-c', 'command -v rg || echo __missing__'], '/')\n    if (result.stdout.includes('__missing__')) {\n      await this.ssh.exec(['docker', 'exec', this.containerId, 'bash', '-c', 'apk add --no-cache ripgrep 2>/dev/null || apt-get install -y ripgrep 2>/dev/null || true'], '/')\n    }\n  }\n\n  async pty(argv: string[], cwd: string, cols: number, rows: number): Promise<{ stream: NodeJS.ReadWriteStream; resize: (c: number, r: number) => void; kill: () => void }> {\n    throw new Error('remote docker PTY not yet supported')\n  }\n}\n"],"mappings":";AAMA,IAAa,kBAAb,MAAsD;CAEjC;CACA;CAFnB,YACE,KACA,aACA;EAFiB,KAAA,MAAA;EACA,KAAA,cAAA;CAChB;CAEH,MAAM,KAAK,MAAgB,KAAa,MAA8B,CAAC,GAAG,WAA+E;EACvJ,MAAM,WAAW,OAAO,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK;EAC/E,OAAO,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ;GAAM;GAAK,GAAG;GAAU,KAAK;GAAa,GAAG;EAAI,GAAG,KAAK,CAAC,GAAG,SAAS;CAChH;CAEA,MAAM,UAAU,SAAiB,KAAwE;EACvG,OAAO,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ;GAAM;GAAK,KAAK;GAAa;GAAQ;GAAM;EAAO,GAAG,GAAG;CAClG;CAEA,MAAM,SAAS,MAA+B;EAC5C,MAAM,SAAS,MAAM,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAO;EAAI,GAAG,GAAG;EACzF,OAAO,OAAO,KAAK,OAAO,QAAQ,MAAM;CAC1C;CAEA,MAAM,UAAU,MAAc,SAAyC;EAErE,MAAM,OADO,OAAO,SAAS,OAAO,IAAI,UAAU,OAAO,KAAK,SAAS,MAAM,EAAA,CAC5D,SAAS,QAAQ;EAClC,MAAM,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAQ;GAAM,gBAAgB,IAAI,mBAAmB,KAAK,QAAQ,MAAM,OAAO,EAAE;EAAE,GAAG,GAAG;CACpJ;CAEA,MAAM,QAAQ,MAAkI;EAE9I,QAAO,MADc,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAM;GAAQ;GAAoB;EAAI,GAAG,GAAG,EAAA,CACtG,OACX,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,KAAK,KAAK,CAAC,CAAC,CAC7B,KAAK,SAAS;GACb,MAAM,OAAO,KAAK,QAAQ,UAAU,EAAE,CAAC,CAAC,KAAK;GAC7C,IAAI,CAAC,MAAM,OAAO;GAClB,MAAM,QAAQ,KAAK,SAAS,GAAG;GAC/B,MAAM,YAAY,KAAK,SAAS,GAAG;GACnC,OAAO;IAAE;IAAM;IAAO,QAAQ,CAAC,SAAS,CAAC;IAAW;IAAW,MAAM;IAAG,OAAO;GAAE;EACnF,CAAC,CAAC,CACD,QAAQ,MAAkC,MAAM,IAAI;CACzD;CAEA,MAAM,KAAK,MAA2G;EAEpH,MAAM,QAAO,MADQ,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAQ;GAAM;GAAY;EAAI,GAAG,GAAG,EAAA,CACxF,OAAO,KAAK;EAChC,IAAI,CAAC,MAAM,OAAO,KAAA;EAClB,MAAM,QAAQ,KAAK,MAAM,KAAK;EAC9B,IAAI,MAAM,SAAS,GAAG,OAAO,KAAA;EAC7B,MAAM,OAAO,OAAO,MAAM,EAAE;EAC5B,MAAM,QAAQ,OAAO,MAAM,EAAE,IAAI;EACjC,MAAM,QAAQ,MAAM,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;EACrC,OAAO;GAAE;GAAM;GAAO,aAAa,MAAM,SAAS,WAAW;GAAG,QAAQ,MAAM,SAAS,SAAS;EAAE;CACpG;CAEA,MAAM,MAAM,MAA6B;EACvC,MAAM,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAS;GAAM;EAAI,GAAG,GAAG;CACpF;CAEA,MAAM,OAAO,MAA6B;EACxC,MAAM,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAM;GAAM;EAAI,GAAG,GAAG;CACjF;CAEA,MAAM,OAAO,KAAa,MAA6B;EACrD,MAAM,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAM;GAAK;EAAI,GAAG,GAAG;CAChF;CAEA,MAAM,WAA0B;EAE9B,KAAI,MADiB,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAQ;GAAM;EAAmC,GAAG,GAAG,EAAA,CACpH,OAAO,SAAS,aAAa,GACtC,MAAM,KAAK,IAAI,KAAK;GAAC;GAAU;GAAQ,KAAK;GAAa;GAAQ;GAAM;EAA0F,GAAG,GAAG;CAE3K;CAEA,MAAM,IAAI,MAAgB,KAAa,MAAc,MAAqH;EACxK,MAAM,IAAI,MAAM,qCAAqC;CACvD;AACF"}

package/lib/exec-docker/world.d.ts

@@ -0,0 +1,37 @@
+import { DockerBackend } from "./docker-backend.js";
+import { DockerFileSystem } from "./fs-provider.js";
+import { a as NodeTestReport, t as ExecutionWorldProvider } from "../types-C0TtEO7z.js";
+import { DockerShellExecutor, DockerSubprocessRuntime } from "./process-provider.js";
+//#region src/exec-docker/world.d.ts
+interface DockerNodeConfig {
+  nodeId: string;
+  containerId: string;
+}
+interface SshExecutorLike {
+  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{
+    code: number;
+    stdout: string;
+    stderr: string;
+  }>;
+}
+declare class DockerExecutionWorld implements ExecutionWorldProvider {
+  readonly nodeId: string;
+  readonly fs: DockerFileSystem;
+  readonly subprocess: DockerSubprocessRuntime;
+  readonly shell: DockerShellExecutor;
+  readonly backend: DockerBackend;
+  constructor(nodeId: string, backend: DockerBackend);
+  static local(nodeId: string, containerId: string): DockerExecutionWorld;
+  static remote(nodeId: string, containerId: string, sshExecutor: SshExecutorLike): DockerExecutionWorld;
+  ensureDir(remotePath: string): Promise<void>;
+  testConnection(): Promise<NodeTestReport>;
+}
+declare class DockerWorldRegistry {
+  private readonly worlds;
+  get(nodeId: string): DockerExecutionWorld | undefined;
+  ensure(nodeId: string, backend: DockerBackend): DockerExecutionWorld;
+  remove(nodeId: string): void;
+}
+//#endregion
+export { DockerExecutionWorld, DockerNodeConfig, DockerWorldRegistry };
+//# sourceMappingURL=world.d.ts.map

package/lib/exec-docker/world.js

@@ -0,0 +1,62 @@
+import { DockerClient } from "./docker-client.js";
+import { RemoteDockerCli } from "./remote-docker-cli.js";
+import { DockerFileSystem } from "./fs-provider.js";
+import { DockerShellExecutor, DockerSubprocessRuntime } from "./process-provider.js";
+//#region src/exec-docker/world.ts
+var DockerExecutionWorld = class DockerExecutionWorld {
+	nodeId;
+	fs;
+	subprocess;
+	shell;
+	backend;
+	constructor(nodeId, backend) {
+		this.nodeId = nodeId;
+		this.backend = backend;
+		this.fs = new DockerFileSystem(backend);
+		this.subprocess = new DockerSubprocessRuntime(backend);
+		this.shell = new DockerShellExecutor(backend);
+	}
+	static local(nodeId, containerId) {
+		return new DockerExecutionWorld(nodeId, new DockerClient(containerId));
+	}
+	static remote(nodeId, containerId, sshExecutor) {
+		return new DockerExecutionWorld(nodeId, new RemoteDockerCli(sshExecutor, containerId));
+	}
+	async ensureDir(remotePath) {
+		await this.backend.mkdir(remotePath);
+	}
+	async testConnection() {
+		try {
+			return {
+				ok: (await this.backend.exec(["echo", "ok"], "/")).stdout.trim() === "ok",
+				reachable: true
+			};
+		} catch (err) {
+			return {
+				ok: false,
+				reachable: false,
+				error: err instanceof Error ? err.message : String(err)
+			};
+		}
+	}
+};
+var DockerWorldRegistry = class {
+	worlds = /* @__PURE__ */ new Map();
+	get(nodeId) {
+		return this.worlds.get(nodeId);
+	}
+	ensure(nodeId, backend) {
+		const existing = this.worlds.get(nodeId);
+		if (existing) return existing;
+		const world = new DockerExecutionWorld(nodeId, backend);
+		this.worlds.set(nodeId, world);
+		return world;
+	}
+	remove(nodeId) {
+		this.worlds.delete(nodeId);
+	}
+};
+//#endregion
+export { DockerExecutionWorld, DockerWorldRegistry };
+
+//# sourceMappingURL=world.js.map

package/lib/exec-docker/world.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"world.js","names":[],"sources":["../../src/exec-docker/world.ts"],"sourcesContent":["import type { ExecutionWorldProvider, NodeTestReport } from '../router/types.js'\nimport type { DockerBackend } from './docker-backend.js'\nimport { DockerClient } from './docker-client.js'\nimport { RemoteDockerCli } from './remote-docker-cli.js'\nimport { DockerFileSystem } from './fs-provider.js'\nimport { DockerShellExecutor, DockerSubprocessRuntime } from './process-provider.js'\n\nexport interface DockerNodeConfig {\n  nodeId: string\n  containerId: string\n}\n\ninterface SshExecutorLike {\n  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{ code: number; stdout: string; stderr: string }>\n}\n\nexport class DockerExecutionWorld implements ExecutionWorldProvider {\n  readonly fs: DockerFileSystem\n  readonly subprocess: DockerSubprocessRuntime\n  readonly shell: DockerShellExecutor\n  readonly backend: DockerBackend\n\n  constructor(readonly nodeId: string, backend: DockerBackend) {\n    this.backend = backend\n    this.fs = new DockerFileSystem(backend)\n    this.subprocess = new DockerSubprocessRuntime(backend)\n    this.shell = new DockerShellExecutor(backend)\n  }\n\n  static local(nodeId: string, containerId: string): DockerExecutionWorld {\n    return new DockerExecutionWorld(nodeId, new DockerClient(containerId))\n  }\n\n  static remote(nodeId: string, containerId: string, sshExecutor: SshExecutorLike): DockerExecutionWorld {\n    return new DockerExecutionWorld(nodeId, new RemoteDockerCli(sshExecutor, containerId))\n  }\n\n  async ensureDir(remotePath: string): Promise<void> {\n    await this.backend.mkdir(remotePath)\n  }\n\n  async testConnection(): Promise<NodeTestReport> {\n    try {\n      const result = await this.backend.exec(['echo', 'ok'], '/')\n      return { ok: result.stdout.trim() === 'ok', reachable: true }\n    } catch (err) {\n      return { ok: false, reachable: false, error: err instanceof Error ? err.message : String(err) }\n    }\n  }\n}\n\nexport class DockerWorldRegistry {\n  private readonly worlds = new Map<string, DockerExecutionWorld>()\n\n  get(nodeId: string): DockerExecutionWorld | undefined {\n    return this.worlds.get(nodeId)\n  }\n\n  ensure(nodeId: string, backend: DockerBackend): DockerExecutionWorld {\n    const existing = this.worlds.get(nodeId)\n    if (existing) return existing\n    const world = new DockerExecutionWorld(nodeId, backend)\n    this.worlds.set(nodeId, world)\n    return world\n  }\n\n  remove(nodeId: string): void {\n    this.worlds.delete(nodeId)\n  }\n}\n"],"mappings":";;;;;AAgBA,IAAa,uBAAb,MAAa,qBAAuD;CAM7C;CALrB;CACA;CACA;CACA;CAEA,YAAY,QAAyB,SAAwB;EAAxC,KAAA,SAAA;EACnB,KAAK,UAAU;EACf,KAAK,KAAK,IAAI,iBAAiB,OAAO;EACtC,KAAK,aAAa,IAAI,wBAAwB,OAAO;EACrD,KAAK,QAAQ,IAAI,oBAAoB,OAAO;CAC9C;CAEA,OAAO,MAAM,QAAgB,aAA2C;EACtE,OAAO,IAAI,qBAAqB,QAAQ,IAAI,aAAa,WAAW,CAAC;CACvE;CAEA,OAAO,OAAO,QAAgB,aAAqB,aAAoD;EACrG,OAAO,IAAI,qBAAqB,QAAQ,IAAI,gBAAgB,aAAa,WAAW,CAAC;CACvF;CAEA,MAAM,UAAU,YAAmC;EACjD,MAAM,KAAK,QAAQ,MAAM,UAAU;CACrC;CAEA,MAAM,iBAA0C;EAC9C,IAAI;GAEF,OAAO;IAAE,KAAI,MADQ,KAAK,QAAQ,KAAK,CAAC,QAAQ,IAAI,GAAG,GAAG,EAAA,CACtC,OAAO,KAAK,MAAM;IAAM,WAAW;GAAK;EAC9D,SAAS,KAAK;GACZ,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAAE;EAChG;CACF;AACF;AAEA,IAAa,sBAAb,MAAiC;CAC/B,yBAA0B,IAAI,IAAkC;CAEhE,IAAI,QAAkD;EACpD,OAAO,KAAK,OAAO,IAAI,MAAM;CAC/B;CAEA,OAAO,QAAgB,SAA8C;EACnE,MAAM,WAAW,KAAK,OAAO,IAAI,MAAM;EACvC,IAAI,UAAU,OAAO;EACrB,MAAM,QAAQ,IAAI,qBAAqB,QAAQ,OAAO;EACtD,KAAK,OAAO,IAAI,QAAQ,KAAK;EAC7B,OAAO;CACT;CAEA,OAAO,QAAsB;EAC3B,KAAK,OAAO,OAAO,MAAM;CAC3B;AACF"}

package/lib/exec-ssh/connection-pool.d.ts

@@ -0,0 +1,25 @@
+import { n as SshConnection, o as SshSecrets, s as SshTarget } from "../connection-sIX25pkS.js";
+import { Context } from "@deepseek-ai/cordis";
+//#region src/exec-ssh/connection-pool.d.ts
+interface PooledConnection {
+  target: SshTarget;
+  secrets: SshSecrets;
+  connection: SshConnection;
+}
+declare class SshConnectionPool {
+  private readonly ctx;
+  private readonly pool;
+  constructor(ctx: Context);
+  private key;
+  acquire(target: SshTarget, secrets: SshSecrets): SshConnection;
+  test(target: SshTarget, secrets: SshSecrets): Promise<{
+    ok: boolean;
+    error?: string;
+    category?: string;
+  }>;
+  release(target: SshTarget): void;
+  closeAll(): void;
+}
+//#endregion
+export { PooledConnection, SshConnectionPool };
+//# sourceMappingURL=connection-pool.d.ts.map

package/lib/exec-ssh/connection-pool.js

@@ -0,0 +1,54 @@
+import { SshConnection, toConnectionError } from "./connection.js";
+//#region src/exec-ssh/connection-pool.ts
+var SshConnectionPool = class {
+	ctx;
+	pool = /* @__PURE__ */ new Map();
+	constructor(ctx) {
+		this.ctx = ctx;
+	}
+	key(target) {
+		return `${target.host}:${target.port}:${target.username}`;
+	}
+	acquire(target, secrets) {
+		const k = this.key(target);
+		const existing = this.pool.get(k);
+		if (existing) return existing.connection;
+		const connection = new SshConnection(target, secrets);
+		this.pool.set(k, {
+			target,
+			secrets,
+			connection
+		});
+		return connection;
+	}
+	async test(target, secrets) {
+		try {
+			const conn = new SshConnection(target, secrets);
+			await conn.getClient();
+			conn.close();
+			return { ok: true };
+		} catch (err) {
+			const e = toConnectionError(err);
+			return {
+				ok: false,
+				error: e.message,
+				category: e.category
+			};
+		}
+	}
+	release(target) {
+		const k = this.key(target);
+		const entry = this.pool.get(k);
+		if (!entry) return;
+		entry.connection.close();
+		this.pool.delete(k);
+	}
+	closeAll() {
+		for (const entry of this.pool.values()) entry.connection.close();
+		this.pool.clear();
+	}
+};
+//#endregion
+export { SshConnectionPool };
+
+//# sourceMappingURL=connection-pool.js.map

package/lib/exec-ssh/connection-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-pool.js","names":[],"sources":["../../src/exec-ssh/connection-pool.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis'\nimport { SshConnection, type SshSecrets, type SshTarget, toConnectionError } from './connection.js'\n\nexport interface PooledConnection {\n  target: SshTarget\n  secrets: SshSecrets\n  connection: SshConnection\n}\n\nexport class SshConnectionPool {\n  private readonly pool = new Map<string, PooledConnection>()\n\n  constructor(private readonly ctx: Context) {}\n\n  private key(target: SshTarget): string {\n    return `${target.host}:${target.port}:${target.username}`\n  }\n\n  acquire(target: SshTarget, secrets: SshSecrets): SshConnection {\n    const k = this.key(target)\n    const existing = this.pool.get(k)\n    if (existing) return existing.connection\n    const connection = new SshConnection(target, secrets)\n    this.pool.set(k, { target, secrets, connection })\n    return connection\n  }\n\n  async test(target: SshTarget, secrets: SshSecrets): Promise<{ ok: boolean; error?: string; category?: string }> {\n    try {\n      const conn = new SshConnection(target, secrets)\n      await conn.getClient()\n      conn.close()\n      return { ok: true }\n    } catch (err) {\n      const e = toConnectionError(err)\n      return { ok: false, error: e.message, category: e.category }\n    }\n  }\n\n  release(target: SshTarget): void {\n    const k = this.key(target)\n    const entry = this.pool.get(k)\n    if (!entry) return\n    entry.connection.close()\n    this.pool.delete(k)\n  }\n\n  closeAll(): void {\n    for (const entry of this.pool.values()) entry.connection.close()\n    this.pool.clear()\n  }\n}\n"],"mappings":";;AASA,IAAa,oBAAb,MAA+B;CAGA;CAF7B,uBAAwB,IAAI,IAA8B;CAE1D,YAAY,KAA+B;EAAd,KAAA,MAAA;CAAe;CAE5C,IAAY,QAA2B;EACrC,OAAO,GAAG,OAAO,KAAK,GAAG,OAAO,KAAK,GAAG,OAAO;CACjD;CAEA,QAAQ,QAAmB,SAAoC;EAC7D,MAAM,IAAI,KAAK,IAAI,MAAM;EACzB,MAAM,WAAW,KAAK,KAAK,IAAI,CAAC;EAChC,IAAI,UAAU,OAAO,SAAS;EAC9B,MAAM,aAAa,IAAI,cAAc,QAAQ,OAAO;EACpD,KAAK,KAAK,IAAI,GAAG;GAAE;GAAQ;GAAS;EAAW,CAAC;EAChD,OAAO;CACT;CAEA,MAAM,KAAK,QAAmB,SAAkF;EAC9G,IAAI;GACF,MAAM,OAAO,IAAI,cAAc,QAAQ,OAAO;GAC9C,MAAM,KAAK,UAAU;GACrB,KAAK,MAAM;GACX,OAAO,EAAE,IAAI,KAAK;EACpB,SAAS,KAAK;GACZ,MAAM,IAAI,kBAAkB,GAAG;GAC/B,OAAO;IAAE,IAAI;IAAO,OAAO,EAAE;IAAS,UAAU,EAAE;GAAS;EAC7D;CACF;CAEA,QAAQ,QAAyB;EAC/B,MAAM,IAAI,KAAK,IAAI,MAAM;EACzB,MAAM,QAAQ,KAAK,KAAK,IAAI,CAAC;EAC7B,IAAI,CAAC,OAAO;EACZ,MAAM,WAAW,MAAM;EACvB,KAAK,KAAK,OAAO,CAAC;CACpB;CAEA,WAAiB;EACf,KAAK,MAAM,SAAS,KAAK,KAAK,OAAO,GAAG,MAAM,WAAW,MAAM;EAC/D,KAAK,KAAK,MAAM;CAClB;AACF"}

package/lib/exec-ssh/connection.d.ts

@@ -0,0 +1,2 @@
+import { a as SshJumpHop, c as classifySshError, i as SshErrorCategory, l as toConnectionError, n as SshConnection, o as SshSecrets, r as SshConnectionError, s as SshTarget, t as SshAuthConfig } from "../connection-sIX25pkS.js";
+export { SshAuthConfig, SshConnection, SshConnectionError, SshErrorCategory, SshJumpHop, SshSecrets, SshTarget, classifySshError, toConnectionError };

package/lib/exec-ssh/connection.js

@@ -0,0 +1,125 @@
+import { Client } from "ssh2";
+//#region src/exec-ssh/connection.ts
+const HANDSHAKE_TIMEOUT_MS = 3e4;
+const MAX_RETRIES = 5;
+const BASE_DELAY_MS = 500;
+function classifySshError(err) {
+	const msg = err instanceof Error ? err.message.toLowerCase() : String(err).toLowerCase();
+	if (msg.includes("all configured authentication methods failed") || msg.includes("auth") || msg.includes("password") || msg.includes("publickey")) return "auth";
+	if (msg.includes("host key") || msg.includes("man-in-the-middle") || msg.includes("fingerprint")) return "hostkey";
+	if (msg.includes("timed out") || msg.includes("timeout") || msg.includes("ready timeout")) return "timeout";
+	if (msg.includes("econnrefused") || msg.includes("econnreset") || msg.includes("enotfound") || msg.includes("connect") || msg.includes("network")) return "network";
+	return "unknown";
+}
+function toConnectionError(err) {
+	const category = classifySshError(err);
+	const message = err instanceof Error ? err.message : String(err);
+	const e = new Error(message);
+	e.category = category;
+	e.cause = err;
+	return e;
+}
+function buildConnectConfig(target, secrets) {
+	const cfg = {
+		host: target.host,
+		port: target.port,
+		username: target.username,
+		readyTimeout: HANDSHAKE_TIMEOUT_MS,
+		keepaliveInterval: 0,
+		keepaliveCountMax: 3
+	};
+	switch (target.auth.kind) {
+		case "password":
+			if (secrets.password) cfg.password = secrets.password;
+			break;
+		case "key":
+			if (secrets.privateKey) {
+				cfg.privateKey = secrets.privateKey;
+				if (secrets.passphrase) cfg.passphrase = secrets.passphrase;
+			}
+			break;
+		case "agent": cfg.agent = process.env.SSH_AUTH_SOCK ?? void 0;
+	}
+	return cfg;
+}
+var SshConnection = class {
+	target;
+	secrets;
+	client = null;
+	connecting = null;
+	closed = false;
+	constructor(target, secrets) {
+		this.target = target;
+		this.secrets = secrets;
+	}
+	async getClient() {
+		if (this.closed) throw toConnectionError(/* @__PURE__ */ new Error("connection closed"));
+		if (this.client) return this.client;
+		if (this.connecting) return this.connecting;
+		this.connecting = this.connectWithRetry();
+		try {
+			this.client = await this.connecting;
+			this.client.on("close", () => {
+				this.client = null;
+			});
+			this.client.on("error", () => {
+				this.client = null;
+			});
+			return this.client;
+		} finally {
+			this.connecting = null;
+		}
+	}
+	async connectWithRetry() {
+		let lastErr;
+		for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+			if (this.closed) throw toConnectionError(/* @__PURE__ */ new Error("connection closed"));
+			try {
+				return await this.connectOnce();
+			} catch (err) {
+				lastErr = err;
+				const cat = classifySshError(err);
+				if (cat === "auth" || cat === "hostkey") throw toConnectionError(err);
+				if (attempt < MAX_RETRIES) {
+					const delay = BASE_DELAY_MS * Math.pow(2, attempt);
+					await new Promise((r) => setTimeout(r, delay));
+					continue;
+				}
+			}
+		}
+		throw toConnectionError(lastErr);
+	}
+	connectOnce() {
+		return new Promise((resolve, reject) => {
+			const client = new Client();
+			let settled = false;
+			const finish = (fn) => {
+				if (settled) return;
+				settled = true;
+				fn();
+			};
+			client.once("ready", () => finish(() => resolve(client)));
+			client.on("error", (err) => {
+				try {
+					client.end();
+				} catch {}
+				finish(() => reject(err));
+			});
+			client.connect(buildConnectConfig(this.target, this.secrets));
+		});
+	}
+	close() {
+		this.closed = true;
+		this.connecting = null;
+		if (this.client) {
+			try {
+				this.client.end();
+			} catch {}
+			this.client = null;
+		}
+	}
+};
+//#endregion
+export { SshConnection, classifySshError, toConnectionError };
+
+//# sourceMappingURL=connection.js.map

package/lib/exec-ssh/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","names":[],"sources":["../../src/exec-ssh/connection.ts"],"sourcesContent":["import { Client, type ConnectConfig } from 'ssh2'\n\nexport interface SshAuthConfig {\n  kind: 'password' | 'key' | 'agent'\n  keyPath?: string\n}\n\nexport interface SshJumpHop {\n  host: string\n  port?: number\n  username?: string\n  keyPath?: string\n}\n\nexport interface SshTarget {\n  host: string\n  port: number\n  username: string\n  auth: SshAuthConfig\n  jump?: SshJumpHop[]\n}\n\nexport interface SshSecrets {\n  password?: string\n  privateKey?: string\n  passphrase?: string\n}\n\nexport type SshErrorCategory = 'auth' | 'network' | 'hostkey' | 'timeout' | 'unknown'\n\nexport interface SshConnectionError extends Error {\n  category: SshErrorCategory\n  cause?: unknown\n}\n\nconst HANDSHAKE_TIMEOUT_MS = 30_000\nconst MAX_RETRIES = 5\nconst BASE_DELAY_MS = 500\n\nexport function classifySshError(err: unknown): SshErrorCategory {\n  const msg = err instanceof Error ? err.message.toLowerCase() : String(err).toLowerCase()\n  if (msg.includes('all configured authentication methods failed') || msg.includes('auth') || msg.includes('password') || msg.includes('publickey')) return 'auth'\n  if (msg.includes('host key') || msg.includes('man-in-the-middle') || msg.includes('fingerprint')) return 'hostkey'\n  if (msg.includes('timed out') || msg.includes('timeout') || msg.includes('ready timeout')) return 'timeout'\n  if (msg.includes('econnrefused') || msg.includes('econnreset') || msg.includes('enotfound') || msg.includes('connect') || msg.includes('network')) return 'network'\n  return 'unknown'\n}\n\nexport function toConnectionError(err: unknown): SshConnectionError {\n  const category = classifySshError(err)\n  const message = err instanceof Error ? err.message : String(err)\n  const e = new Error(message) as SshConnectionError\n  e.category = category\n  e.cause = err\n  return e\n}\n\nfunction buildConnectConfig(target: SshTarget, secrets: SshSecrets): ConnectConfig {\n  const cfg: ConnectConfig = {\n    host: target.host,\n    port: target.port,\n    username: target.username,\n    readyTimeout: HANDSHAKE_TIMEOUT_MS,\n    keepaliveInterval: 0,\n    keepaliveCountMax: 3,\n  }\n  switch (target.auth.kind) {\n    case 'password':\n      if (secrets.password) cfg.password = secrets.password\n      break\n    case 'key':\n      if (secrets.privateKey) {\n        cfg.privateKey = secrets.privateKey\n        if (secrets.passphrase) cfg.passphrase = secrets.passphrase\n      }\n      break\n    case 'agent':\n      cfg.agent = process.env.SSH_AUTH_SOCK ?? undefined\n      break\n  }\n  return cfg\n}\n\nexport class SshConnection {\n  private client: Client | null = null\n  private connecting: Promise<Client> | null = null\n  private closed = false\n\n  constructor(\n    private readonly target: SshTarget,\n    private readonly secrets: SshSecrets,\n  ) {}\n\n  async getClient(): Promise<Client> {\n    if (this.closed) throw toConnectionError(new Error('connection closed'))\n    if (this.client) return this.client\n    if (this.connecting) return this.connecting\n    this.connecting = this.connectWithRetry()\n    try {\n      this.client = await this.connecting\n      this.client.on('close', () => {\n        this.client = null\n      })\n      this.client.on('error', () => {\n        this.client = null\n      })\n      return this.client\n    } finally {\n      this.connecting = null\n    }\n  }\n\n  private async connectWithRetry(): Promise<Client> {\n    let lastErr: unknown\n    for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {\n      if (this.closed) throw toConnectionError(new Error('connection closed'))\n      try {\n        return await this.connectOnce()\n      } catch (err) {\n        lastErr = err\n        const cat = classifySshError(err)\n        if (cat === 'auth' || cat === 'hostkey') throw toConnectionError(err)\n        if (attempt < MAX_RETRIES) {\n          const delay = BASE_DELAY_MS * Math.pow(2, attempt)\n          await new Promise((r) => setTimeout(r, delay))\n          continue\n        }\n      }\n    }\n    throw toConnectionError(lastErr)\n  }\n\n  private connectOnce(): Promise<Client> {\n    return new Promise((resolve, reject) => {\n      const client = new Client()\n      let settled = false\n      const finish = (fn: () => void) => {\n        if (settled) return\n        settled = true\n        fn()\n      }\n      client.once('ready', () => finish(() => resolve(client)))\n      client.on('error', (err: unknown) => {\n        try {\n          client.end()\n        } catch {\n          // client already torn down\n        }\n        finish(() => reject(err))\n      })\n      client.connect(buildConnectConfig(this.target, this.secrets))\n    })\n  }\n\n  close(): void {\n    this.closed = true\n    this.connecting = null\n    if (this.client) {\n      try {\n        this.client.end()\n      } catch {}\n      this.client = null\n    }\n  }\n}\n"],"mappings":";;AAmCA,MAAM,uBAAuB;AAC7B,MAAM,cAAc;AACpB,MAAM,gBAAgB;AAEtB,SAAgB,iBAAiB,KAAgC;CAC/D,MAAM,MAAM,eAAe,QAAQ,IAAI,QAAQ,YAAY,IAAI,OAAO,GAAG,CAAC,CAAC,YAAY;CACvF,IAAI,IAAI,SAAS,8CAA8C,KAAK,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,UAAU,KAAK,IAAI,SAAS,WAAW,GAAG,OAAO;CAC1J,IAAI,IAAI,SAAS,UAAU,KAAK,IAAI,SAAS,mBAAmB,KAAK,IAAI,SAAS,aAAa,GAAG,OAAO;CACzG,IAAI,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,SAAS,KAAK,IAAI,SAAS,eAAe,GAAG,OAAO;CAClG,IAAI,IAAI,SAAS,cAAc,KAAK,IAAI,SAAS,YAAY,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,SAAS,KAAK,IAAI,SAAS,SAAS,GAAG,OAAO;CAC1J,OAAO;AACT;AAEA,SAAgB,kBAAkB,KAAkC;CAClE,MAAM,WAAW,iBAAiB,GAAG;CACrC,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAC/D,MAAM,IAAI,IAAI,MAAM,OAAO;CAC3B,EAAE,WAAW;CACb,EAAE,QAAQ;CACV,OAAO;AACT;AAEA,SAAS,mBAAmB,QAAmB,SAAoC;CACjF,MAAM,MAAqB;EACzB,MAAM,OAAO;EACb,MAAM,OAAO;EACb,UAAU,OAAO;EACjB,cAAc;EACd,mBAAmB;EACnB,mBAAmB;CACrB;CACA,QAAQ,OAAO,KAAK,MAApB;EACE,KAAK;GACH,IAAI,QAAQ,UAAU,IAAI,WAAW,QAAQ;GAC7C;EACF,KAAK;GACH,IAAI,QAAQ,YAAY;IACtB,IAAI,aAAa,QAAQ;IACzB,IAAI,QAAQ,YAAY,IAAI,aAAa,QAAQ;GACnD;GACA;EACF,KAAK,SACH,IAAI,QAAQ,QAAQ,IAAI,iBAAiB,KAAA;CAE7C;CACA,OAAO;AACT;AAEA,IAAa,gBAAb,MAA2B;CAMN;CACA;CANnB,SAAgC;CAChC,aAA6C;CAC7C,SAAiB;CAEjB,YACE,QACA,SACA;EAFiB,KAAA,SAAA;EACA,KAAA,UAAA;CAChB;CAEH,MAAM,YAA6B;EACjC,IAAI,KAAK,QAAQ,MAAM,kCAAkB,IAAI,MAAM,mBAAmB,CAAC;EACvE,IAAI,KAAK,QAAQ,OAAO,KAAK;EAC7B,IAAI,KAAK,YAAY,OAAO,KAAK;EACjC,KAAK,aAAa,KAAK,iBAAiB;EACxC,IAAI;GACF,KAAK,SAAS,MAAM,KAAK;GACzB,KAAK,OAAO,GAAG,eAAe;IAC5B,KAAK,SAAS;GAChB,CAAC;GACD,KAAK,OAAO,GAAG,eAAe;IAC5B,KAAK,SAAS;GAChB,CAAC;GACD,OAAO,KAAK;EACd,UAAU;GACR,KAAK,aAAa;EACpB;CACF;CAEA,MAAc,mBAAoC;EAChD,IAAI;EACJ,KAAK,IAAI,UAAU,GAAG,WAAW,aAAa,WAAW;GACvD,IAAI,KAAK,QAAQ,MAAM,kCAAkB,IAAI,MAAM,mBAAmB,CAAC;GACvE,IAAI;IACF,OAAO,MAAM,KAAK,YAAY;GAChC,SAAS,KAAK;IACZ,UAAU;IACV,MAAM,MAAM,iBAAiB,GAAG;IAChC,IAAI,QAAQ,UAAU,QAAQ,WAAW,MAAM,kBAAkB,GAAG;IACpE,IAAI,UAAU,aAAa;KACzB,MAAM,QAAQ,gBAAgB,KAAK,IAAI,GAAG,OAAO;KACjD,MAAM,IAAI,SAAS,MAAM,WAAW,GAAG,KAAK,CAAC;KAC7C;IACF;GACF;EACF;EACA,MAAM,kBAAkB,OAAO;CACjC;CAEA,cAAuC;EACrC,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,SAAS,IAAI,OAAO;GAC1B,IAAI,UAAU;GACd,MAAM,UAAU,OAAmB;IACjC,IAAI,SAAS;IACb,UAAU;IACV,GAAG;GACL;GACA,OAAO,KAAK,eAAe,aAAa,QAAQ,MAAM,CAAC,CAAC;GACxD,OAAO,GAAG,UAAU,QAAiB;IACnC,IAAI;KACF,OAAO,IAAI;IACb,QAAQ,CAER;IACA,aAAa,OAAO,GAAG,CAAC;GAC1B,CAAC;GACD,OAAO,QAAQ,mBAAmB,KAAK,QAAQ,KAAK,OAAO,CAAC;EAC9D,CAAC;CACH;CAEA,QAAc;EACZ,KAAK,SAAS;EACd,KAAK,aAAa;EAClB,IAAI,KAAK,QAAQ;GACf,IAAI;IACF,KAAK,OAAO,IAAI;GAClB,QAAQ,CAAC;GACT,KAAK,SAAS;EAChB;CACF;AACF"}

package/lib/exec-ssh/env-scrub.d.ts

@@ -0,0 +1,7 @@
+//#region src/exec-ssh/env-scrub.d.ts
+declare function shouldScrubVar(name: string): boolean;
+declare function scrubEnv(env: Record<string, string>): Record<string, string>;
+declare const RUNNER_ENV_HINTS: string[];
+//#endregion
+export { RUNNER_ENV_HINTS, scrubEnv, shouldScrubVar };
+//# sourceMappingURL=env-scrub.d.ts.map

package/lib/exec-ssh/env-scrub.js

@@ -0,0 +1,40 @@
+//#region src/exec-ssh/env-scrub.ts
+const DANGEROUS_PREFIXES = [
+	"DSH",
+	"MCAI",
+	"OPENAI",
+	"ANTHROPIC",
+	"DEEPSEEK",
+	"LLM",
+	"API_KEY",
+	"TOKEN",
+	"SECRET",
+	"PASSWORD",
+	"CREDENTIAL"
+];
+function shouldScrubVar(name) {
+	const upper = name.toUpperCase();
+	return DANGEROUS_PREFIXES.some((p) => upper === p || upper.startsWith(`${p}_`));
+}
+function scrubEnv(env) {
+	const result = {};
+	for (const [key, value] of Object.entries(env)) if (!shouldScrubVar(key)) result[key] = value;
+	return result;
+}
+const RUNNER_ENV_HINTS = [
+	"DSH_*",
+	"MCAI_*",
+	"OPENAI*",
+	"ANTHROPIC*",
+	"DEEPSEEK*",
+	"LLM_*",
+	"API_KEY*",
+	"TOKEN*",
+	"SECRET*",
+	"PASSWORD*",
+	"CREDENTIAL*"
+];
+//#endregion
+export { RUNNER_ENV_HINTS, scrubEnv, shouldScrubVar };
+
+//# sourceMappingURL=env-scrub.js.map

package/lib/exec-ssh/env-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-scrub.js","names":[],"sources":["../../src/exec-ssh/env-scrub.ts"],"sourcesContent":["const DANGEROUS_PREFIXES = ['DSH', 'MCAI', 'OPENAI', 'ANTHROPIC', 'DEEPSEEK', 'LLM', 'API_KEY', 'TOKEN', 'SECRET', 'PASSWORD', 'CREDENTIAL']\n\nexport function shouldScrubVar(name: string): boolean {\n  const upper = name.toUpperCase()\n  return DANGEROUS_PREFIXES.some((p) => upper === p || upper.startsWith(`${p}_`))\n}\n\nexport function scrubEnv(env: Record<string, string>): Record<string, string> {\n  const result: Record<string, string> = {}\n  for (const [key, value] of Object.entries(env)) {\n    if (!shouldScrubVar(key)) result[key] = value\n  }\n  return result\n}\n\nexport const RUNNER_ENV_HINTS = [\n  'DSH_*',\n  'MCAI_*',\n  'OPENAI*',\n  'ANTHROPIC*',\n  'DEEPSEEK*',\n  'LLM_*',\n  'API_KEY*',\n  'TOKEN*',\n  'SECRET*',\n  'PASSWORD*',\n  'CREDENTIAL*',\n]\n"],"mappings":";AAAA,MAAM,qBAAqB;CAAC;CAAO;CAAQ;CAAU;CAAa;CAAY;CAAO;CAAW;CAAS;CAAU;CAAY;AAAY;AAE3I,SAAgB,eAAe,MAAuB;CACpD,MAAM,QAAQ,KAAK,YAAY;CAC/B,OAAO,mBAAmB,MAAM,MAAM,UAAU,KAAK,MAAM,WAAW,GAAG,EAAE,EAAE,CAAC;AAChF;AAEA,SAAgB,SAAS,KAAqD;CAC5E,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAC3C,IAAI,CAAC,eAAe,GAAG,GAAG,OAAO,OAAO;CAE1C,OAAO;AACT;AAEA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF"}

package/lib/exec-ssh/executor.d.ts

@@ -0,0 +1,46 @@
+import { n as SshConnection } from "../connection-sIX25pkS.js";
+//#region src/exec-ssh/executor.d.ts
+interface ExecResult {
+  code: number;
+  signal?: string;
+  stdout: string;
+  stderr: string;
+}
+declare class SshExecutor {
+  private readonly connection;
+  private readonly nodeId;
+  private readonly audit?;
+  private sftpCache;
+  constructor(connection: SshConnection, nodeId?: string, audit?: ((op: string, target: string, result: string) => void) | undefined);
+  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<ExecResult>;
+  sftp(): Promise<import('ssh2').SFTPWrapper>;
+  readFile(path: string): Promise<Buffer>;
+  writeFile(path: string, content: Buffer | string): Promise<void>;
+  listDir(path: string): Promise<Array<{
+    name: string;
+    isDir: boolean;
+    isFile: boolean;
+    isSymlink: boolean;
+    size: number;
+    mtime: number;
+  }>>;
+  stat(path: string): Promise<{
+    size: number;
+    mtime: number;
+    isDirectory: boolean;
+    isFile: boolean;
+  } | undefined>;
+  mkdir(path: string): Promise<void>;
+  remove(path: string): Promise<void>;
+  rename(src: string, dest: string): Promise<void>;
+  ensureRg(): Promise<void>;
+  pty(argv: string[], cwd: string, _env: Record<string, string>, cols: number, rows: number): Promise<{
+    channel: import('ssh2').ClientChannel;
+    onData: (cb: (chunk: Buffer) => void) => void;
+    resize: (cols: number, rows: number) => void;
+    kill: () => void;
+  }>;
+}
+//#endregion
+export { ExecResult, SshExecutor };
+//# sourceMappingURL=executor.d.ts.map