@calltelemetry/ct-lab-mcp 0.1.0

package/dist/bin/proxmox-mcp.d.ts

@@ -0,0 +1,58 @@
+#!/usr/bin/env node
+/**
+ * Proxmox VE Model Context Protocol (MCP) Server CLI
+ *
+ * Command-line runner supporting Stdio and HTTP/SSE transports,
+ * Doppler credential resolution, custom configuration files,
+ * and graceful lifecycle management.
+ */
+import { Command } from "commander";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { SseServerInstance } from "../src/transports/sse.js";
+import { ServerConfig } from "../src/types/config.js";
+export declare const VERSION = "0.1.0";
+export interface CliOptions {
+    transport: "stdio" | "sse";
+    port: number;
+    host: string;
+    config?: string;
+    dopplerToken?: string;
+    dopplerProject?: string;
+    dopplerConfig?: string;
+    forceMock?: boolean;
+}
+export interface CliExecutionResult {
+    server: McpServer;
+    transport: StdioServerTransport | SseServerInstance;
+    close: () => Promise<void>;
+}
+export interface RunCliOptions {
+    installSignalHandlers?: boolean;
+    suppressLogs?: boolean;
+}
+/**
+ * Builds the Commander CLI program definition.
+ */
+export declare function buildCli(exitOverride?: boolean): Command;
+/**
+ * Parses and validates command-line arguments.
+ */
+export declare function parseCliOptions(argv?: string[], exitOverride?: boolean): {
+    options: CliOptions;
+    program: Command;
+    raw: Record<string, any>;
+};
+/**
+ * Loads and validates a JSON configuration file if specified.
+ */
+export declare function loadConfigFile(configPath: string): Partial<ServerConfig>;
+/**
+ * Runs the Proxmox MCP Server CLI.
+ */
+export declare function runCli(argv?: string[], runOptions?: RunCliOptions): Promise<CliExecutionResult>;
+/**
+ * Detects whether this file was executed directly as the main Node.js entrypoint.
+ */
+export declare function isMainModule(metaUrl: string): boolean;
+//# sourceMappingURL=proxmox-mcp.d.ts.map

package/dist/bin/proxmox-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxmox-mcp.d.ts","sourceRoot":"","sources":["../../bin/proxmox-mcp.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAMH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAIjF,OAAO,EAAmB,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAqB,MAAM,wBAAwB,CAAC;AAKzE,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,OAAO,GAAG,KAAK,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,oBAAoB,GAAG,iBAAiB,CAAC;IACpD,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,YAAY,UAAQ,GAAG,OAAO,CAkCtD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,IAAI,GAAE,MAAM,EAAiB,EAC7B,YAAY,UAAQ,GACnB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAiDrE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAuBxE;AAED;;GAEG;AACH,wBAAsB,MAAM,CAC1B,IAAI,GAAE,MAAM,EAAiB,EAC7B,UAAU,GAAE,aAAkB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CA4H7B;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAcrD"}

package/dist/bin/proxmox-mcp.js

@@ -0,0 +1,248 @@
+#!/usr/bin/env node
+/**
+ * Proxmox VE Model Context Protocol (MCP) Server CLI
+ *
+ * Command-line runner supporting Stdio and HTTP/SSE transports,
+ * Doppler credential resolution, custom configuration files,
+ * and graceful lifecycle management.
+ */
+import process from "node:process";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { Command } from "commander";
+import dotenv from "dotenv";
+import { createMcpServer } from "../src/server/mcp-server.js";
+import { credentialResolver } from "../src/credentials/resolver.js";
+import { startStdioServer } from "../src/transports/stdio.js";
+import { createSseServer } from "../src/transports/sse.js";
+// Load environment variables from .env if present
+dotenv.config();
+export const VERSION = "0.1.0";
+/**
+ * Builds the Commander CLI program definition.
+ */
+export function buildCli(exitOverride = false) {
+    const program = new Command();
+    program
+        .name("proxmox-mcp")
+        .description("Proxmox VE Model Context Protocol (MCP) Server and automated slot scheduler")
+        .version(VERSION, "-v, --version", "Output the current version")
+        .helpOption("-h, --help", "Display help for command")
+        .option("-t, --transport <type>", "Transport mode: 'stdio' or 'sse'", process.env.PROXMOX_MCP_TRANSPORT || "stdio")
+        .option("-p, --port <number>", "Port for SSE transport (default: 3000 or PORT env var)", process.env.PORT || "3000")
+        .option("-H, --host <string>", "Host interface for SSE (default: '127.0.0.1' or HOST env var)", process.env.HOST || "127.0.0.1")
+        .option("-c, --config <path>", "Path to optional JSON configuration file")
+        .option("--doppler-token <token>", "Doppler API token override")
+        .option("--doppler-project <project>", "Doppler project override")
+        .option("--doppler-config <config>", "Doppler environment/config override")
+        .option("--force-mock", "Force in-memory mock hypervisor mode (for testing/offline dev)");
+    if (exitOverride) {
+        program.exitOverride();
+    }
+    return program;
+}
+/**
+ * Parses and validates command-line arguments.
+ */
+export function parseCliOptions(argv = process.argv, exitOverride = false) {
+    const program = buildCli(exitOverride);
+    program.parse(argv);
+    const raw = program.opts();
+    const transportSource = program.getOptionValueSource("transport");
+    const portSource = program.getOptionValueSource("port");
+    const hostSource = program.getOptionValueSource("host");
+    // Validate transport
+    const rawTransport = String(raw.transport || "stdio").toLowerCase();
+    if (rawTransport !== "stdio" && rawTransport !== "sse") {
+        throw new Error(`Invalid transport mode: '${raw.transport}'. Supported transports are 'stdio' and 'sse'.`);
+    }
+    const transport = rawTransport;
+    // Validate port (allow 0 for ephemeral OS port allocation)
+    const parsedPort = parseInt(String(raw.port), 10);
+    if (isNaN(parsedPort) || parsedPort < 0 || parsedPort > 65535) {
+        throw new Error(`Invalid port number: '${raw.port}'. Port must be an integer between 0 and 65535.`);
+    }
+    const host = String(raw.host || "127.0.0.1");
+    const options = {
+        transport,
+        port: parsedPort,
+        host,
+        config: raw.config ? String(raw.config) : undefined,
+        dopplerToken: raw.dopplerToken ? String(raw.dopplerToken) : undefined,
+        dopplerProject: raw.dopplerProject ? String(raw.dopplerProject) : undefined,
+        dopplerConfig: raw.dopplerConfig ? String(raw.dopplerConfig) : undefined,
+        forceMock: Boolean(raw.forceMock),
+    };
+    return {
+        options,
+        program,
+        raw: {
+            ...raw,
+            transportSource,
+            portSource,
+            hostSource,
+        },
+    };
+}
+/**
+ * Loads and validates a JSON configuration file if specified.
+ */
+export function loadConfigFile(configPath) {
+    const resolvedPath = path.resolve(process.cwd(), configPath);
+    if (!fs.existsSync(resolvedPath)) {
+        throw new Error(`Configuration file not found: '${configPath}' (resolved to '${resolvedPath}')`);
+    }
+    try {
+        const rawContent = fs.readFileSync(resolvedPath, "utf-8");
+        const parsed = JSON.parse(rawContent);
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            throw new Error(`Configuration file '${configPath}' must contain a valid JSON object.`);
+        }
+        return parsed;
+    }
+    catch (err) {
+        if (err instanceof SyntaxError) {
+            throw new Error(`Failed to parse configuration file '${configPath}': Invalid JSON - ${err.message}`);
+        }
+        throw err;
+    }
+}
+/**
+ * Runs the Proxmox MCP Server CLI.
+ */
+export async function runCli(argv = process.argv, runOptions = {}) {
+    const { options, raw } = parseCliOptions(argv);
+    // Load config file if specified
+    let fileConfig = {};
+    if (options.config) {
+        fileConfig = loadConfigFile(options.config);
+    }
+    // Precedence: CLI flag > Config file > Environment variables > Defaults
+    const effectiveTransport = raw.transportSource === "cli"
+        ? options.transport
+        : fileConfig.transport || options.transport || "stdio";
+    const effectivePort = raw.portSource === "cli"
+        ? options.port
+        : fileConfig.port !== undefined
+            ? fileConfig.port
+            : options.port;
+    const effectiveHost = raw.hostSource === "cli"
+        ? options.host
+        : fileConfig.host || options.host || "127.0.0.1";
+    const effectiveForceMock = options.forceMock || fileConfig.mockMode || false;
+    let hostConfigs = fileConfig.hosts;
+    if (!hostConfigs || hostConfigs.length === 0) {
+        const resolution = await credentialResolver.resolve({
+            env: process.env,
+            dopplerToken: options.dopplerToken || fileConfig.doppler?.token,
+            dopplerProject: options.dopplerProject || fileConfig.doppler?.project,
+            dopplerConfig: options.dopplerConfig || fileConfig.doppler?.config,
+            forceMock: effectiveForceMock,
+        });
+        hostConfigs = resolution.hosts;
+    }
+    // Create the MCP server instance
+    const server = createMcpServer({
+        hostConfigs,
+    });
+    const installSignals = runOptions.installSignalHandlers !== false;
+    if (effectiveTransport === "sse") {
+        const slotManager = server._context
+            ?.slotManager;
+        const sseServer = createSseServer(server, {
+            port: effectivePort,
+            host: effectiveHost,
+            slotManager,
+        });
+        await sseServer.listen(effectivePort, effectiveHost);
+        const close = async () => {
+            if (!runOptions.suppressLogs) {
+                console.error("[proxmox-mcp] Shutting down SSE server...");
+            }
+            await sseServer.close();
+            await server.close();
+        };
+        if (installSignals) {
+            const handleSig = async (sig) => {
+                console.error(`[proxmox-mcp] Received ${sig}, terminating...`);
+                try {
+                    await close();
+                }
+                catch (err) {
+                    console.error("[proxmox-mcp] Error during shutdown:", err);
+                }
+                finally {
+                    process.exit(0);
+                }
+            };
+            process.once("SIGINT", () => handleSig("SIGINT"));
+            process.once("SIGTERM", () => handleSig("SIGTERM"));
+        }
+        return { server, transport: sseServer, close };
+    }
+    else {
+        // Default stdio transport
+        let activeTransport;
+        const close = async () => {
+            if (!runOptions.suppressLogs) {
+                console.error("[proxmox-mcp] Shutting down stdio server...");
+            }
+            try {
+                await server.close();
+            }
+            catch { }
+            try {
+                if (activeTransport) {
+                    await activeTransport.close();
+                }
+            }
+            catch { }
+        };
+        if (installSignals) {
+            const handleSig = async (sig) => {
+                console.error(`[proxmox-mcp] Received ${sig}, terminating...`);
+                try {
+                    await close();
+                }
+                catch (err) {
+                    console.error("[proxmox-mcp] Error during shutdown:", err);
+                }
+                finally {
+                    process.exit(0);
+                }
+            };
+            process.once("SIGINT", () => handleSig("SIGINT"));
+            process.once("SIGTERM", () => handleSig("SIGTERM"));
+        }
+        activeTransport = await startStdioServer(server, { installSignalHandlers: false });
+        return { server, transport: activeTransport, close };
+    }
+}
+/**
+ * Detects whether this file was executed directly as the main Node.js entrypoint.
+ */
+export function isMainModule(metaUrl) {
+    if (!process.argv[1])
+        return false;
+    try {
+        const scriptPath = fs.realpathSync(process.argv[1]);
+        const modulePath = fs.realpathSync(fileURLToPath(metaUrl));
+        return scriptPath === modulePath;
+    }
+    catch {
+        const raw = process.argv[1];
+        return (raw.endsWith("proxmox-mcp") ||
+            raw.endsWith("proxmox-mcp.ts") ||
+            raw.endsWith("proxmox-mcp.js"));
+    }
+}
+// Auto-run if executed as CLI entrypoint
+if (isMainModule(import.meta.url)) {
+    runCli().catch((err) => {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`[proxmox-mcp] Fatal error: ${msg}`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=proxmox-mcp.js.map

package/dist/bin/proxmox-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxmox-mcp.js","sourceRoot":"","sources":["../../bin/proxmox-mcp.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAqB,MAAM,0BAA0B,CAAC;AAG9E,kDAAkD;AAClD,MAAM,CAAC,MAAM,EAAE,CAAC;AAEhB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAwB/B;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,YAAY,GAAG,KAAK;IAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,aAAa,CAAC;SACnB,WAAW,CAAC,6EAA6E,CAAC;SAC1F,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,4BAA4B,CAAC;SAC/D,UAAU,CAAC,YAAY,EAAE,0BAA0B,CAAC;SACpD,MAAM,CACL,wBAAwB,EACxB,kCAAkC,EAClC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,OAAO,CAC7C;SACA,MAAM,CACL,qBAAqB,EACrB,wDAAwD,EACxD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAC3B;SACA,MAAM,CACL,qBAAqB,EACrB,+DAA+D,EAC/D,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW,CAChC;SACA,MAAM,CAAC,qBAAqB,EAAE,0CAA0C,CAAC;SACzE,MAAM,CAAC,yBAAyB,EAAE,4BAA4B,CAAC;SAC/D,MAAM,CAAC,6BAA6B,EAAE,0BAA0B,CAAC;SACjE,MAAM,CAAC,2BAA2B,EAAE,qCAAqC,CAAC;SAC1E,MAAM,CAAC,cAAc,EAAE,gEAAgE,CAAC,CAAC;IAE5F,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,YAAY,EAAE,CAAC;IACzB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAiB,OAAO,CAAC,IAAI,EAC7B,YAAY,GAAG,KAAK;IAEpB,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACvC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE3B,MAAM,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAExD,qBAAqB;IACrB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,IAAI,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,KAAK,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,4BAA4B,GAAG,CAAC,SAAS,gDAAgD,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,YAA+B,CAAC;IAElD,2DAA2D;IAC3D,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,KAAK,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,yBAAyB,GAAG,CAAC,IAAI,iDAAiD,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAe;QAC1B,SAAS;QACT,IAAI,EAAE,UAAU;QAChB,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACnD,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QACrE,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,aAAa,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;KAClC,CAAC;IAEF,OAAO;QACL,OAAO;QACP,OAAO;QACP,GAAG,EAAE;YACH,GAAG,GAAG;YACN,eAAe;YACf,UAAU;YACV,UAAU;SACX;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,kCAAkC,UAAU,mBAAmB,YAAY,IAAI,CAChF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,qCAAqC,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,MAA+B,CAAC;IACzC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,uCAAuC,UAAU,qBAAqB,GAAG,CAAC,OAAO,EAAE,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAAiB,OAAO,CAAC,IAAI,EAC7B,aAA4B,EAAE;IAE9B,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAE/C,gCAAgC;IAChC,IAAI,UAAU,GAA0B,EAAE,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,wEAAwE;IACxE,MAAM,kBAAkB,GACtB,GAAG,CAAC,eAAe,KAAK,KAAK;QAC3B,CAAC,CAAC,OAAO,CAAC,SAAS;QACnB,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;IAE3D,MAAM,aAAa,GACjB,GAAG,CAAC,UAAU,KAAK,KAAK;QACtB,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;YAC/B,CAAC,CAAC,UAAU,CAAC,IAAI;YACjB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAEnB,MAAM,aAAa,GACjB,GAAG,CAAC,UAAU,KAAK,KAAK;QACtB,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IAErD,MAAM,kBAAkB,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC;IAE7E,IAAI,WAAW,GAAoC,UAAU,CAAC,KAAK,CAAC;IAEpE,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC;YAClD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,UAAU,CAAC,OAAO,EAAE,KAAK;YAC/D,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO;YACrE,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,UAAU,CAAC,OAAO,EAAE,MAAM;YAClE,SAAS,EAAE,kBAAkB;SAC9B,CAAC,CAAC;QACH,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC;IACjC,CAAC;IAED,iCAAiC;IACjC,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,UAAU,CAAC,qBAAqB,KAAK,KAAK,CAAC;IAElE,IAAI,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,WAAW,GAAI,MAA0D,CAAC,QAAQ;YACtF,EAAE,WAAW,CAAC;QAEhB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,EAAE;YACxC,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,aAAa;YACnB,WAAW;SACZ,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAErD,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;gBACtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,kBAAkB,CAAC,CAAC;gBAC/D,IAAI,CAAC;oBACH,MAAM,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC7D,CAAC;wBAAS,CAAC;oBACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,0BAA0B;QAC1B,IAAI,eAAiD,CAAC;QAEtD,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,IAAI,CAAC;gBACH,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;gBAChC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;gBACtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,kBAAkB,CAAC,CAAC;gBAC/D,IAAI,CAAC;oBACH,MAAM,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;gBAC7D,CAAC;wBAAS,CAAC;oBACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,eAAe,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC;QAEnF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,OAAO,UAAU,KAAK,UAAU,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,yCAAyC;AACzC,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/appliance/commands.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Mediated Call Telemetry Appliance CLI Command Builder & Validator
+ *
+ * Translates structured command invocations into validated shell command strings.
+ * Enforces strict input validation and shell injection prevention.
+ */
+import { ApplianceCommandType, ApplianceExecParams } from "./types.js";
+export declare const APPROVED_CONTAINERS: Set<string>;
+/**
+ * Validate that an input string does not contain any shell injection metacharacters.
+ */
+export declare function assertNoInjectionTokens(input: string, fieldName?: string): void;
+/**
+ * Validate SQL table name identifier.
+ */
+export declare function validateTableName(tableName: string): void;
+/**
+ * Validate log tail line count (must be an integer between 1 and 5000).
+ */
+export declare function validateLogTail(tail: unknown): number;
+/**
+ * Validate container name against approved Call Telemetry containers.
+ */
+export declare function validateContainerName(container: string): void;
+/**
+ * Normalize action/commandType string from parameters.
+ */
+export declare function normalizeCommandType(params: ApplianceExecParams): ApplianceCommandType;
+/**
+ * Build and validate the exact shell command string to execute on the remote appliance.
+ */
+export declare function buildApplianceCommand(params: ApplianceExecParams): string;
+//# sourceMappingURL=commands.d.ts.map

package/dist/src/appliance/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../src/appliance/commands.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EAEpB,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,mBAAmB,aAW9B,CAAC;AAuBH;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,GAAE,MAAgB,GAAG,IAAI,CAUxF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAYzD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAcrD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAY7D;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,mBAAmB,GAAG,oBAAoB,CAKtF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAqLzE"}

package/dist/src/appliance/commands.js

@@ -0,0 +1,241 @@
+/**
+ * Mediated Call Telemetry Appliance CLI Command Builder & Validator
+ *
+ * Translates structured command invocations into validated shell command strings.
+ * Enforces strict input validation and shell injection prevention.
+ */
+import { InvalidCommandViolationError } from "./types.js";
+// Approved Call Telemetry service containers
+export const APPROVED_CONTAINERS = new Set([
+    "calltelemetry-web-1",
+    "calltelemetry-db-1",
+    "calltelemetry-nats-1",
+    "calltelemetry-jtapi-sidecar-1",
+    "calltelemetry-ct-media-1",
+    "calltelemetry-seaweedfs-1",
+    "calltelemetry-grafana-1",
+    "calltelemetry-caddy-1",
+    "calltelemetry-redis-1",
+    "calltelemetry-worker-1"
+]);
+// Table name regex: standard SQL identifier (or "all" for vacuum)
+const TABLE_NAME_REGEX = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+// Banned shell metacharacters and injection tokens
+const BANNED_SHELL_TOKENS = /[;&|`$()<>\n\r\0]/;
+// Approved command prefixes for raw / whitelisted execution
+const APPROVED_RAW_PREFIXES = [
+    "sudo /home/calltelemetry/cli.sh",
+    "/home/calltelemetry/cli.sh",
+    "cli.sh",
+    "docker ps",
+    "docker logs",
+    "journalctl",
+    "systemctl status",
+    "cat /etc/os-release",
+    "hostname",
+    "uptime",
+    "echo"
+];
+/**
+ * Validate that an input string does not contain any shell injection metacharacters.
+ */
+export function assertNoInjectionTokens(input, fieldName = "Input") {
+    if (typeof input !== "string") {
+        throw new InvalidCommandViolationError(`${fieldName} must be a string.`);
+    }
+    if (BANNED_SHELL_TOKENS.test(input)) {
+        throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: ${fieldName} contains illegal shell injection metacharacters: ${input}`);
+    }
+}
+/**
+ * Validate SQL table name identifier.
+ */
+export function validateTableName(tableName) {
+    if (!tableName || typeof tableName !== "string") {
+        throw new InvalidCommandViolationError("Table name must be a non-empty string.");
+    }
+    assertNoInjectionTokens(tableName, "Table name");
+    if (!TABLE_NAME_REGEX.test(tableName)) {
+        throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: Table name '${tableName}' contains illegal characters. Identifier must match ^[a-zA-Z_][a-zA-Z0-9_]*$`);
+    }
+}
+/**
+ * Validate log tail line count (must be an integer between 1 and 5000).
+ */
+export function validateLogTail(tail) {
+    if (tail === undefined || tail === null) {
+        return 100;
+    }
+    const num = typeof tail === "number" ? tail : Number(tail);
+    if (!Number.isInteger(num) || num < 1 || num > 5000) {
+        throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: logTail must be an integer between 1 and 5000 lines (received: ${tail}).`);
+    }
+    return num;
+}
+/**
+ * Validate container name against approved Call Telemetry containers.
+ */
+export function validateContainerName(container) {
+    if (!container || typeof container !== "string") {
+        throw new InvalidCommandViolationError("Container name must be a non-empty string.");
+    }
+    assertNoInjectionTokens(container, "Container name");
+    if (!APPROVED_CONTAINERS.has(container)) {
+        throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: Container '${container}' is not an approved Call Telemetry service container.`);
+    }
+}
+/**
+ * Normalize action/commandType string from parameters.
+ */
+export function normalizeCommandType(params) {
+    const raw = params.commandType || params.action || "status";
+    const normalized = raw.trim().toLowerCase().replace(/\s+/g, "_");
+    return normalized;
+}
+/**
+ * Build and validate the exact shell command string to execute on the remote appliance.
+ */
+export function buildApplianceCommand(params) {
+    const action = normalizeCommandType(params);
+    const args = params.args || params.params || {};
+    switch (action) {
+        case "status":
+            return "sudo /home/calltelemetry/cli.sh status";
+        case "jtapi_status":
+        case "jtapi status":
+            return "sudo /home/calltelemetry/cli.sh jtapi status";
+        case "health":
+        case "health_report":
+            return "sudo /home/calltelemetry/cli.sh health report --pretty";
+        case "diag": {
+            const sub = (args.subcommand || args.service || "network").toString().toLowerCase().trim();
+            assertNoInjectionTokens(sub, "Diag subcommand");
+            if (sub === "network" || sub === "database" || sub === "service") {
+                return `sudo /home/calltelemetry/cli.sh diag ${sub}`;
+            }
+            throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: Unsupported diag subcommand '${sub}'. Allowed: network, database, service.`);
+        }
+        case "diag_network":
+        case "diag network":
+            return "sudo /home/calltelemetry/cli.sh diag network";
+        case "diag_database":
+        case "diag database":
+            return "sudo /home/calltelemetry/cli.sh diag database";
+        case "diag_service":
+        case "diag service":
+            return "sudo /home/calltelemetry/cli.sh diag service";
+        case "db_status":
+        case "db status":
+            return "sudo /home/calltelemetry/cli.sh db status";
+        case "db_size":
+        case "db size":
+            return "sudo /home/calltelemetry/cli.sh db size";
+        case "db_tables":
+        case "db tables": {
+            if (args.table) {
+                validateTableName(args.table);
+                return `sudo /home/calltelemetry/cli.sh db tables ${args.table}`;
+            }
+            return "sudo /home/calltelemetry/cli.sh db tables";
+        }
+        case "db_vacuum":
+        case "db vacuum": {
+            const table = args.table || "all";
+            validateTableName(table);
+            const flags = [];
+            if (args.vacuumFull)
+                flags.push("--full");
+            if (args.vacuumAnalyze)
+                flags.push("--analyze");
+            const flagStr = flags.length > 0 ? ` ${flags.join(" ")}` : "";
+            return `sudo /home/calltelemetry/cli.sh db vacuum ${table}${flagStr}`;
+        }
+        case "db_compact":
+        case "db compact":
+            return "sudo /home/calltelemetry/cli.sh db compact";
+        case "db_backup":
+        case "db backup":
+            return "sudo /home/calltelemetry/cli.sh db backup";
+        case "db_list":
+        case "db list":
+            return "sudo /home/calltelemetry/cli.sh db list";
+        case "migrate": {
+            const sub = (args.subcommand || "status").toString().toLowerCase().trim();
+            assertNoInjectionTokens(sub, "Migrate subcommand");
+            if (sub === "status") {
+                return "sudo /home/calltelemetry/cli.sh migrate status";
+            }
+            if (sub === "legacy") {
+                return "sudo /home/calltelemetry/cli.sh migrate legacy --json";
+            }
+            if (sub === "run") {
+                return "sudo /home/calltelemetry/cli.sh migrate run";
+            }
+            if (sub === "drain") {
+                return "sudo /home/calltelemetry/cli.sh migrate drain";
+            }
+            throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: Unsupported migrate subcommand '${sub}'. Allowed: status, legacy, run, drain.`);
+        }
+        case "migrate_status":
+        case "migrate status":
+            return "sudo /home/calltelemetry/cli.sh migrate status";
+        case "migrate_legacy":
+        case "migrate legacy":
+            return "sudo /home/calltelemetry/cli.sh migrate legacy --json";
+        case "migrate_run":
+        case "migrate run":
+            return "sudo /home/calltelemetry/cli.sh migrate run";
+        case "migrate_drain":
+        case "migrate drain":
+            return "sudo /home/calltelemetry/cli.sh migrate drain";
+        case "docker": {
+            const sub = (args.subcommand || "ps").toString().toLowerCase().trim();
+            assertNoInjectionTokens(sub, "Docker subcommand");
+            if (sub === "ps") {
+                return "docker ps --format 'table {{.Names}}\t{{.Status}}\t{{.Image}}\t{{.Ports}}'";
+            }
+            if (sub === "logs") {
+                const container = args.container || "calltelemetry-web-1";
+                validateContainerName(container);
+                const tail = validateLogTail(args.logTail);
+                return `docker logs --tail ${tail} ${container}`;
+            }
+            throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: Unsupported docker subcommand '${sub}'. Allowed: ps, logs.`);
+        }
+        case "docker_ps":
+        case "docker ps":
+            return "docker ps --format 'table {{.Names}}\t{{.Status}}\t{{.Image}}\t{{.Ports}}'";
+        case "docker_logs":
+        case "logs": {
+            const container = args.container || "calltelemetry-web-1";
+            validateContainerName(container);
+            const tail = validateLogTail(args.logTail);
+            return `docker logs --tail ${tail} ${container}`;
+        }
+        case "journalctl":
+        case "system_logs": {
+            const tail = validateLogTail(args.logTail);
+            return `journalctl -u docker-compose-app --no-pager -n ${tail}`;
+        }
+        case "version":
+            return "cli.sh version && grep '^CT_RELEASE_VERSION=' /home/calltelemetry/.env";
+        case "raw_whitelisted":
+        case "raw": {
+            const rawCmd = args.rawCommand;
+            if (!rawCmd || typeof rawCmd !== "string" || !rawCmd.trim()) {
+                throw new InvalidCommandViolationError("INVALID_COMMAND_VIOLATION: rawCommand is required for 'raw' action.");
+            }
+            const trimmed = rawCmd.trim();
+            assertNoInjectionTokens(trimmed, "Raw command");
+            // Verify approved prefix
+            const isApproved = APPROVED_RAW_PREFIXES.some((prefix) => trimmed.startsWith(prefix));
+            if (!isApproved) {
+                throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: Raw command '${trimmed}' does not start with an approved command prefix.`);
+            }
+            return trimmed;
+        }
+        default:
+            throw new InvalidCommandViolationError(`INVALID_COMMAND_VIOLATION: Unsupported appliance command action '${action}'.`);
+    }
+}
+//# sourceMappingURL=commands.js.map

package/dist/src/appliance/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../../src/appliance/commands.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAGL,4BAA4B,EAC7B,MAAM,YAAY,CAAC;AAEpB,6CAA6C;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IACjD,qBAAqB;IACrB,oBAAoB;IACpB,sBAAsB;IACtB,+BAA+B;IAC/B,0BAA0B;IAC1B,2BAA2B;IAC3B,yBAAyB;IACzB,uBAAuB;IACvB,uBAAuB;IACvB,wBAAwB;CACzB,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAEpD,mDAAmD;AACnD,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,4DAA4D;AAC5D,MAAM,qBAAqB,GAAG;IAC5B,iCAAiC;IACjC,4BAA4B;IAC5B,QAAQ;IACR,WAAW;IACX,aAAa;IACb,YAAY;IACZ,kBAAkB;IAClB,qBAAqB;IACrB,UAAU;IACV,QAAQ;IACR,MAAM;CACP,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,YAAoB,OAAO;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,4BAA4B,CAAC,GAAG,SAAS,oBAAoB,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,4BAA4B,CACpC,8BAA8B,SAAS,qDAAqD,KAAK,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,4BAA4B,CAAC,wCAAwC,CAAC,CAAC;IACnF,CAAC;IAED,uBAAuB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAEjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,4BAA4B,CACpC,0CAA0C,SAAS,+EAA+E,CACnI,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,4BAA4B,CACpC,6FAA6F,IAAI,IAAI,CACtG,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,4BAA4B,CAAC,4CAA4C,CAAC,CAAC;IACvF,CAAC;IAED,uBAAuB,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAErD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,4BAA4B,CACpC,yCAAyC,SAAS,wDAAwD,CAC3G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA2B;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC5D,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEjE,OAAO,UAAkC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA2B;IAC/D,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAEhD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,wCAAwC,CAAC;QAElD,KAAK,cAAc,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,8CAA8C,CAAC;QAExD,KAAK,QAAQ,CAAC;QACd,KAAK,eAAe;YAClB,OAAO,wDAAwD,CAAC;QAElE,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3F,uBAAuB,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;YAChD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACjE,OAAO,wCAAwC,GAAG,EAAE,CAAC;YACvD,CAAC;YACD,MAAM,IAAI,4BAA4B,CACpC,2DAA2D,GAAG,yCAAyC,CACxG,CAAC;QACJ,CAAC;QAED,KAAK,cAAc,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,8CAA8C,CAAC;QAExD,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,+CAA+C,CAAC;QAEzD,KAAK,cAAc,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,8CAA8C,CAAC;QAExD,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,2CAA2C,CAAC;QAErD,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,yCAAyC,CAAC;QAEnD,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC9B,OAAO,6CAA6C,IAAI,CAAC,KAAK,EAAE,CAAC;YACnE,CAAC;YACD,OAAO,2CAA2C,CAAC;QACrD,CAAC;QAED,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;YAClC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAEzB,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,UAAU;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,aAAa;gBAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAEhD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,6CAA6C,KAAK,GAAG,OAAO,EAAE,CAAC;QACxE,CAAC;QAED,KAAK,YAAY,CAAC;QAClB,KAAK,YAAY;YACf,OAAO,4CAA4C,CAAC;QAEtD,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,2CAA2C,CAAC;QAErD,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,yCAAyC,CAAC;QAEnD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YAC1E,uBAAuB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACnD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,OAAO,gDAAgD,CAAC;YAC1D,CAAC;YACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,OAAO,uDAAuD,CAAC;YACjE,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,OAAO,6CAA6C,CAAC;YACvD,CAAC;YACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;gBACpB,OAAO,+CAA+C,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,4BAA4B,CACpC,8DAA8D,GAAG,yCAAyC,CAC3G,CAAC;QACJ,CAAC;QAED,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB;YACnB,OAAO,gDAAgD,CAAC;QAE1D,KAAK,gBAAgB,CAAC;QACtB,KAAK,gBAAgB;YACnB,OAAO,uDAAuD,CAAC;QAEjE,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,6CAA6C,CAAC;QAEvD,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,+CAA+C,CAAC;QAEzD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YACtE,uBAAuB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;YAClD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,4EAA4E,CAAC;YACtF,CAAC;YACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;gBAC1D,qBAAqB,CAAC,SAAS,CAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC3C,OAAO,sBAAsB,IAAI,IAAI,SAAS,EAAE,CAAC;YACnD,CAAC;YACD,MAAM,IAAI,4BAA4B,CACpC,6DAA6D,GAAG,uBAAuB,CACxF,CAAC;QACJ,CAAC;QAED,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,4EAA4E,CAAC;QAEtF,KAAK,aAAa,CAAC;QACnB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;YAC1D,qBAAqB,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,sBAAsB,IAAI,IAAI,SAAS,EAAE,CAAC;QACnD,CAAC;QAED,KAAK,YAAY,CAAC;QAClB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,kDAAkD,IAAI,EAAE,CAAC;QAClE,CAAC;QAED,KAAK,SAAS;YACZ,OAAO,wEAAwE,CAAC;QAElF,KAAK,iBAAiB,CAAC;QACvB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;YAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC5D,MAAM,IAAI,4BAA4B,CAAC,qEAAqE,CAAC,CAAC;YAChH,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,uBAAuB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAEhD,yBAAyB;YACzB,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,4BAA4B,CACpC,2CAA2C,OAAO,mDAAmD,CACtG,CAAC;YACJ,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAED;YACE,MAAM,IAAI,4BAA4B,CACpC,oEAAoE,MAAM,IAAI,CAC/E,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/src/appliance/executor.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Remote Appliance SSH Executor using pure-JS ssh2 Client
+ *
+ * Connects to Call Telemetry appliances on Port 2222 using Doppler-resolved credentials.
+ * Handles connect & execution timeouts, and guarantees output sanitization & secret redaction.
+ */
+import { ApplianceExecParams, ApplianceExecResult, IApplianceExecutor } from "./types.js";
+import { CredentialResolver } from "../credentials/resolver.js";
+import { SecretRedactor } from "../utils/redactor.js";
+export interface ApplianceSshExecutorOptions {
+    resolver?: CredentialResolver;
+    redactor?: SecretRedactor;
+    defaultPort?: number;
+    defaultConnectTimeoutMs?: number;
+    defaultExecutionTimeoutMs?: number;
+}
+export declare class ApplianceSshExecutor implements IApplianceExecutor {
+    private resolver;
+    private redactor;
+    private defaultPort;
+    private defaultConnectTimeoutMs;
+    private defaultExecutionTimeoutMs;
+    constructor(options?: ApplianceSshExecutorOptions);
+    /**
+     * Execute a mediated command on the target appliance over SSH.
+     */
+    execute(params: ApplianceExecParams): Promise<ApplianceExecResult>;
+    /**
+     * Test SSH connectivity and authentication against the target appliance.
+     */
+    testConnection(targetIp: string, port?: number, timeoutMs?: number): Promise<boolean>;
+}
+export declare const applianceSshExecutor: ApplianceSshExecutor;
+//# sourceMappingURL=executor.d.ts.map

package/dist/src/appliance/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/appliance/executor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAKnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAsB,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,cAAc,EAAmC,MAAM,sBAAsB,CAAC;AAGvF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,qBAAa,oBAAqB,YAAW,kBAAkB;IAC7D,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,uBAAuB,CAAS;IACxC,OAAO,CAAC,yBAAyB,CAAS;gBAE9B,OAAO,GAAE,2BAAgC;IAQrD;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA0NxE;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAgB5F;AAED,eAAO,MAAM,oBAAoB,sBAA6B,CAAC"}