@calltelemetry/ct-lab-mcp 0.1.0

package/dist/src/appliance/executor.js

@@ -0,0 +1,214 @@
+/**
+ * Remote Appliance SSH Executor using pure-JS ssh2 Client
+ *
+ * Connects to Call Telemetry appliances on Port 2222 using Doppler-resolved credentials.
+ * Handles connect & execution timeouts, and guarantees output sanitization & secret redaction.
+ */
+import { Client } from "ssh2";
+import { ApplianceConnectionError, ApplianceAuthenticationError, ApplianceTimeoutError, ApplianceError } from "./types.js";
+import { buildApplianceCommand, normalizeCommandType } from "./commands.js";
+import { credentialResolver } from "../credentials/resolver.js";
+import { defaultRedactor, registerSecret } from "../utils/redactor.js";
+import { logger } from "../utils/logger.js";
+export class ApplianceSshExecutor {
+    resolver;
+    redactor;
+    defaultPort;
+    defaultConnectTimeoutMs;
+    defaultExecutionTimeoutMs;
+    constructor(options = {}) {
+        this.resolver = options.resolver || credentialResolver;
+        this.redactor = options.redactor || defaultRedactor;
+        this.defaultPort = options.defaultPort || 2222;
+        this.defaultConnectTimeoutMs = options.defaultConnectTimeoutMs || 10000;
+        this.defaultExecutionTimeoutMs = options.defaultExecutionTimeoutMs || 30000;
+    }
+    /**
+     * Execute a mediated command on the target appliance over SSH.
+     */
+    async execute(params) {
+        const targetIp = (params.targetIp || params.target || "").trim();
+        if (!targetIp) {
+            throw new ApplianceError("Appliance target IP or hostname is required.");
+        }
+        // Build and validate mediated shell command
+        const command = buildApplianceCommand(params);
+        const action = normalizeCommandType(params);
+        const port = params.port || this.defaultPort;
+        const connectTimeoutMs = params.connectTimeoutMs || this.defaultConnectTimeoutMs;
+        const executionTimeoutMs = params.timeoutMs || this.defaultExecutionTimeoutMs;
+        // Resolve Doppler / Environment VM credentials
+        const resolution = await this.resolver.resolve();
+        const vmCreds = resolution.vmCredentials;
+        const username = vmCreds.username || "admin";
+        const password = vmCreds.password;
+        const privateKey = vmCreds.privateKey;
+        const passphrase = vmCreds.passphrase;
+        // Register credentials with redactor to ensure zero leakage
+        if (password) {
+            this.redactor.registerSecret(password);
+            registerSecret(password);
+        }
+        if (privateKey && typeof privateKey === "string") {
+            this.redactor.registerSecret(privateKey);
+            registerSecret(privateKey);
+        }
+        const startTime = Date.now();
+        return new Promise((resolve, reject) => {
+            let isSettled = false;
+            let connectTimer = null;
+            let execTimer = null;
+            const client = new Client();
+            const cleanup = () => {
+                if (connectTimer) {
+                    clearTimeout(connectTimer);
+                    connectTimer = null;
+                }
+                if (execTimer) {
+                    clearTimeout(execTimer);
+                    execTimer = null;
+                }
+                try {
+                    client.end();
+                    client.destroy();
+                }
+                catch {
+                    // ignore socket teardown error
+                }
+            };
+            const safeReject = (err) => {
+                if (isSettled)
+                    return;
+                isSettled = true;
+                cleanup();
+                const redactedErr = this.redactor.redactError(err);
+                reject(redactedErr);
+            };
+            const safeResolve = (res) => {
+                if (isSettled)
+                    return;
+                isSettled = true;
+                cleanup();
+                resolve(res);
+            };
+            // Set connect timeout timer
+            connectTimer = setTimeout(() => {
+                safeReject(new ApplianceTimeoutError(`SSH connection to ${targetIp}:${port} timed out after ${connectTimeoutMs}ms.`));
+            }, connectTimeoutMs);
+            client.on("error", (err) => {
+                const msg = err.message || "";
+                if (msg.includes("authentication") ||
+                    msg.includes("All configured authentication methods failed") ||
+                    err.level === "client-authentication") {
+                    safeReject(new ApplianceAuthenticationError(`SSH authentication failed for user '${username}' on ${targetIp}:${port}: ${msg}`));
+                }
+                else if (err.code === "ECONNREFUSED" ||
+                    err.code === "ENOTFOUND" ||
+                    err.code === "EHOSTUNREACH" ||
+                    err.code === "ETIMEDOUT" ||
+                    msg.includes("ECONNREFUSED")) {
+                    safeReject(new ApplianceConnectionError(`SSH connection failed to ${targetIp}:${port} (${err.code || "CONNECTION_ERROR"}): ${msg}`));
+                }
+                else {
+                    safeReject(new ApplianceConnectionError(`SSH error on ${targetIp}:${port}: ${msg}`));
+                }
+            });
+            client.on("ready", () => {
+                // Clear connect timer once connection is established
+                if (connectTimer) {
+                    clearTimeout(connectTimer);
+                    connectTimer = null;
+                }
+                // Set execution timeout timer
+                execTimer = setTimeout(() => {
+                    safeReject(new ApplianceTimeoutError(`Appliance command execution on ${targetIp}:${port} timed out after ${executionTimeoutMs}ms: ${command}`));
+                }, executionTimeoutMs);
+                const execOptions = {
+                    pty: false
+                };
+                client.exec(command, execOptions, (err, stream) => {
+                    if (err) {
+                        safeReject(new ApplianceConnectionError(`Failed to spawn exec channel on ${targetIp}:${port}: ${err.message}`));
+                        return;
+                    }
+                    let rawStdout = "";
+                    let rawStderr = "";
+                    stream.on("data", (data) => {
+                        rawStdout += data.toString();
+                    });
+                    stream.stderr.on("data", (data) => {
+                        rawStderr += data.toString();
+                    });
+                    stream.on("close", (code, _signal) => {
+                        const durationMs = Date.now() - startTime;
+                        const exitCode = code ?? 0;
+                        const redactedStdout = this.redactor.redactString(rawStdout);
+                        const redactedStderr = this.redactor.redactString(rawStderr);
+                        const isRedacted = redactedStdout !== rawStdout || redactedStderr !== rawStderr;
+                        safeResolve({
+                            targetIp,
+                            target: targetIp,
+                            action,
+                            command,
+                            exitCode,
+                            stdout: redactedStdout,
+                            stderr: redactedStderr,
+                            durationMs,
+                            redacted: isRedacted
+                        });
+                    });
+                    stream.on("error", (streamErr) => {
+                        safeReject(new ApplianceConnectionError(`SSH stream error during command execution on ${targetIp}:${port}: ${streamErr.message}`));
+                    });
+                });
+            });
+            // Prepare ssh2 connection config
+            const connectConfig = {
+                host: targetIp,
+                port,
+                username,
+                readyTimeout: connectTimeoutMs,
+                keepaliveInterval: 5000,
+                keepaliveCountMax: 3
+            };
+            if (privateKey) {
+                connectConfig.privateKey = privateKey;
+                if (passphrase) {
+                    connectConfig.passphrase = passphrase;
+                }
+            }
+            else if (password) {
+                connectConfig.password = password;
+            }
+            try {
+                client.connect(connectConfig);
+            }
+            catch (connErr) {
+                const msg = connErr instanceof Error ? connErr.message : String(connErr);
+                safeReject(new ApplianceConnectionError(`Failed to initiate SSH connection to ${targetIp}:${port}: ${msg}`));
+            }
+        });
+    }
+    /**
+     * Test SSH connectivity and authentication against the target appliance.
+     */
+    async testConnection(targetIp, port, timeoutMs) {
+        try {
+            const result = await this.execute({
+                targetIp,
+                port: port || this.defaultPort,
+                commandType: "status",
+                timeoutMs: timeoutMs || 5000,
+                connectTimeoutMs: timeoutMs || 5000
+            });
+            return result.exitCode === 0;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.warn(`Appliance SSH testConnection failed for ${targetIp}:${port || this.defaultPort}: ${msg}`);
+            return false;
+        }
+    }
+}
+export const applianceSshExecutor = new ApplianceSshExecutor();
+//# sourceMappingURL=executor.js.map

package/dist/src/appliance/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/appliance/executor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAA8B,MAAM,MAAM,CAAC;AAC1D,OAAO,EAIL,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,EACrB,cAAc,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAsB,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAkB,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAU5C,MAAM,OAAO,oBAAoB;IACvB,QAAQ,CAAqB;IAC7B,QAAQ,CAAiB;IACzB,WAAW,CAAS;IACpB,uBAAuB,CAAS;IAChC,yBAAyB,CAAS;IAE1C,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC;QACvD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAC/C,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,KAAK,CAAC;QACxE,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,IAAI,KAAK,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAA2B;QACvC,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,cAAc,CAAC,8CAA8C,CAAC,CAAC;QAC3E,CAAC;QAED,4CAA4C;QAC5C,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAE5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;QAC7C,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,uBAAuB,CAAC;QACjF,MAAM,kBAAkB,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,yBAAyB,CAAC;QAE9E,+CAA+C;QAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC;QAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAEtC,4DAA4D;QAC5D,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACvC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1D,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,IAAI,YAAY,GAA0B,IAAI,CAAC;YAC/C,IAAI,SAAS,GAA0B,IAAI,CAAC;YAE5C,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,YAAY,EAAE,CAAC;oBACjB,YAAY,CAAC,YAAY,CAAC,CAAC;oBAC3B,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;gBACD,IAAI,SAAS,EAAE,CAAC;oBACd,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,+BAA+B;gBACjC,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,UAAU,GAAG,CAAC,GAAU,EAAE,EAAE;gBAChC,IAAI,SAAS;oBAAE,OAAO;gBACtB,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,CAAC,WAAW,CAAC,CAAC;YACtB,CAAC,CAAC;YAEF,MAAM,WAAW,GAAG,CAAC,GAAwB,EAAE,EAAE;gBAC/C,IAAI,SAAS;oBAAE,OAAO;gBACtB,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,CAAC;YAEF,4BAA4B;YAC5B,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,UAAU,CACR,IAAI,qBAAqB,CACvB,qBAAqB,QAAQ,IAAI,IAAI,oBAAoB,gBAAgB,KAAK,CAC/E,CACF,CAAC;YACJ,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAErB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAA8C,EAAE,EAAE;gBACpE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC9B,IACE,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC;oBAC9B,GAAG,CAAC,QAAQ,CAAC,8CAA8C,CAAC;oBAC5D,GAAG,CAAC,KAAK,KAAK,uBAAuB,EACrC,CAAC;oBACD,UAAU,CACR,IAAI,4BAA4B,CAC9B,uCAAuC,QAAQ,QAAQ,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAClF,CACF,CAAC;gBACJ,CAAC;qBAAM,IACL,GAAG,CAAC,IAAI,KAAK,cAAc;oBAC3B,GAAG,CAAC,IAAI,KAAK,WAAW;oBACxB,GAAG,CAAC,IAAI,KAAK,cAAc;oBAC3B,GAAG,CAAC,IAAI,KAAK,WAAW;oBACxB,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC5B,CAAC;oBACD,UAAU,CACR,IAAI,wBAAwB,CAC1B,4BAA4B,QAAQ,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,kBAAkB,MAAM,GAAG,EAAE,CAC3F,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,UAAU,CACR,IAAI,wBAAwB,CAC1B,gBAAgB,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAC3C,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,qDAAqD;gBACrD,IAAI,YAAY,EAAE,CAAC;oBACjB,YAAY,CAAC,YAAY,CAAC,CAAC;oBAC3B,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;gBAED,8BAA8B;gBAC9B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC1B,UAAU,CACR,IAAI,qBAAqB,CACvB,kCAAkC,QAAQ,IAAI,IAAI,oBAAoB,kBAAkB,OAAO,OAAO,EAAE,CACzG,CACF,CAAC;gBACJ,CAAC,EAAE,kBAAkB,CAAC,CAAC;gBAEvB,MAAM,WAAW,GAAgB;oBAC/B,GAAG,EAAE,KAAK;iBACX,CAAC;gBAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;oBAChD,IAAI,GAAG,EAAE,CAAC;wBACR,UAAU,CACR,IAAI,wBAAwB,CAC1B,mCAAmC,QAAQ,IAAI,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CACtE,CACF,CAAC;wBACF,OAAO;oBACT,CAAC;oBAED,IAAI,SAAS,GAAG,EAAE,CAAC;oBACnB,IAAI,SAAS,GAAG,EAAE,CAAC;oBAEnB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAqB,EAAE,EAAE;wBAC1C,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC/B,CAAC,CAAC,CAAC;oBAEH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAqB,EAAE,EAAE;wBACjD,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC/B,CAAC,CAAC,CAAC;oBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,OAAsB,EAAE,EAAE;wBACjE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;wBAC1C,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC;wBAE3B,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;wBAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;wBAE7D,MAAM,UAAU,GACd,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,CAAC;wBAE/D,WAAW,CAAC;4BACV,QAAQ;4BACR,MAAM,EAAE,QAAQ;4BAChB,MAAM;4BACN,OAAO;4BACP,QAAQ;4BACR,MAAM,EAAE,cAAc;4BACtB,MAAM,EAAE,cAAc;4BACtB,UAAU;4BACV,QAAQ,EAAE,UAAU;yBACrB,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;oBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,SAAgB,EAAE,EAAE;wBACtC,UAAU,CACR,IAAI,wBAAwB,CAC1B,gDAAgD,QAAQ,IAAI,IAAI,KAAK,SAAS,CAAC,OAAO,EAAE,CACzF,CACF,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,iCAAiC;YACjC,MAAM,aAAa,GAAkB;gBACnC,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,QAAQ;gBACR,YAAY,EAAE,gBAAgB;gBAC9B,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,CAAC;aACrB,CAAC;YAEF,IAAI,UAAU,EAAE,CAAC;gBACf,aAAa,CAAC,UAAU,GAAG,UAAU,CAAC;gBACtC,IAAI,UAAU,EAAE,CAAC;oBACf,aAAa,CAAC,UAAU,GAAG,UAAU,CAAC;gBACxC,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,EAAE,CAAC;gBACpB,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACpC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,OAAgB,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzE,UAAU,CAAC,IAAI,wBAAwB,CAAC,wCAAwC,QAAQ,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,IAAa,EAAE,SAAkB;QACtE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBAChC,QAAQ;gBACR,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,WAAW;gBAC9B,WAAW,EAAE,QAAQ;gBACrB,SAAS,EAAE,SAAS,IAAI,IAAI;gBAC5B,gBAAgB,EAAE,SAAS,IAAI,IAAI;aACpC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,2CAA2C,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,GAAG,EAAE,CAAC,CAAC;YACvG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,EAAE,CAAC"}

package/dist/src/appliance/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Appliance Module Barrel File
+ */
+export * from "./types.js";
+export * from "./commands.js";
+export * from "./executor.js";
+export * from "./mock.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/appliance/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/appliance/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC"}

package/dist/src/appliance/index.js

@@ -0,0 +1,8 @@
+/**
+ * Appliance Module Barrel File
+ */
+export * from "./types.js";
+export * from "./commands.js";
+export * from "./executor.js";
+export * from "./mock.js";
+//# sourceMappingURL=index.js.map

package/dist/src/appliance/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/appliance/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC"}

package/dist/src/appliance/mock.d.ts

@@ -0,0 +1,66 @@
+/**
+ * High-Fidelity Mock Appliance Executor
+ *
+ * Provides offline simulation of mediated Call Telemetry appliance CLI execution,
+ * realistic output payloads, dynamic secret redaction, and simulated error states.
+ */
+import { ApplianceExecParams, ApplianceExecResult, IApplianceExecutor } from "./types.js";
+import { SecretRedactor } from "../utils/redactor.js";
+export type MockFailureType = "connect_timeout" | "exec_timeout" | "conn_refused" | "auth_failed" | "exit_code_error" | null;
+export type CustomCommandHandler = (params: ApplianceExecParams) => Partial<ApplianceExecResult> | Promise<Partial<ApplianceExecResult>>;
+export declare class MockApplianceExecutor implements IApplianceExecutor {
+    private redactor;
+    private history;
+    private simulatedFailure;
+    private simulatedExitCode;
+    private simulatedStderr;
+    private simulatedLatencyMs;
+    private customHandlers;
+    constructor(redactor?: SecretRedactor);
+    /**
+     * Set simulated failure mode for testing error handling.
+     */
+    setSimulatedFailure(failure: MockFailureType): void;
+    /**
+     * Set simulated non-zero exit code and stderr message.
+     */
+    setSimulatedExitCode(exitCode: number, stderr?: string): void;
+    /**
+     * Set simulated execution delay.
+     */
+    setLatency(latencyMs: number): void;
+    /**
+     * Register a custom handler for a specific command action.
+     */
+    setCustomHandler(action: string, handler: CustomCommandHandler): void;
+    /**
+     * Clear all custom handlers.
+     */
+    clearCustomHandlers(): void;
+    /**
+     * Get all executed command parameter history.
+     */
+    getHistory(): ApplianceExecParams[];
+    /**
+     * Get the last executed command parameters.
+     */
+    getLastExecuted(): ApplianceExecParams | undefined;
+    /**
+     * Clear command execution history.
+     */
+    clearHistory(): void;
+    /**
+     * Reset mock executor to default clean state.
+     */
+    reset(): void;
+    /**
+     * Execute mediated appliance command in mock environment.
+     */
+    execute(params: ApplianceExecParams): Promise<ApplianceExecResult>;
+    /**
+     * Test connection in mock environment.
+     */
+    testConnection(targetIp: string, port?: number, timeoutMs?: number): Promise<boolean>;
+}
+export declare const mockApplianceExecutor: MockApplianceExecutor;
+//# sourceMappingURL=mock.d.ts.map

package/dist/src/appliance/mock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock.d.ts","sourceRoot":"","sources":["../../../src/appliance/mock.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAKnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAC;AAEvE,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,cAAc,GACd,aAAa,GACb,iBAAiB,GACjB,IAAI,CAAC;AAET,MAAM,MAAM,oBAAoB,GAAG,CACjC,MAAM,EAAE,mBAAmB,KACxB,OAAO,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAE1E,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,gBAAgB,CAAyB;IACjD,OAAO,CAAC,iBAAiB,CAAa;IACtC,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,kBAAkB,CAAc;IACxC,OAAO,CAAC,cAAc,CAAgD;gBAE1D,QAAQ,CAAC,EAAE,cAAc;IAIrC;;OAEG;IACH,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAInD;;OAEG;IACH,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAE,MAAiD,GAAG,IAAI;IAKvG;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAInC;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,IAAI;IAIrE;;OAEG;IACH,mBAAmB,IAAI,IAAI;IAI3B;;OAEG;IACH,UAAU,IAAI,mBAAmB,EAAE;IAInC;;OAEG;IACH,eAAe,IAAI,mBAAmB,GAAG,SAAS;IAIlD;;OAEG;IACH,YAAY,IAAI,IAAI;IAIpB;;OAEG;IACH,KAAK,IAAI,IAAI;IASb;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA2SxE;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAM5F;AAED,eAAO,MAAM,qBAAqB,uBAA8B,CAAC"}

package/dist/src/appliance/mock.js

@@ -0,0 +1,339 @@
+/**
+ * High-Fidelity Mock Appliance Executor
+ *
+ * Provides offline simulation of mediated Call Telemetry appliance CLI execution,
+ * realistic output payloads, dynamic secret redaction, and simulated error states.
+ */
+import { ApplianceConnectionError, ApplianceAuthenticationError, ApplianceTimeoutError, ApplianceError } from "./types.js";
+import { buildApplianceCommand, normalizeCommandType } from "./commands.js";
+import { defaultRedactor } from "../utils/redactor.js";
+export class MockApplianceExecutor {
+    redactor;
+    history = [];
+    simulatedFailure = null;
+    simulatedExitCode = 0;
+    simulatedStderr = "";
+    simulatedLatencyMs = 10;
+    customHandlers = new Map();
+    constructor(redactor) {
+        this.redactor = redactor || defaultRedactor;
+    }
+    /**
+     * Set simulated failure mode for testing error handling.
+     */
+    setSimulatedFailure(failure) {
+        this.simulatedFailure = failure;
+    }
+    /**
+     * Set simulated non-zero exit code and stderr message.
+     */
+    setSimulatedExitCode(exitCode, stderr = "Command execution failed on appliance.") {
+        this.simulatedExitCode = exitCode;
+        this.simulatedStderr = stderr;
+    }
+    /**
+     * Set simulated execution delay.
+     */
+    setLatency(latencyMs) {
+        this.simulatedLatencyMs = Math.max(0, latencyMs);
+    }
+    /**
+     * Register a custom handler for a specific command action.
+     */
+    setCustomHandler(action, handler) {
+        this.customHandlers.set(action.toLowerCase().trim().replace(/\s+/g, "_"), handler);
+    }
+    /**
+     * Clear all custom handlers.
+     */
+    clearCustomHandlers() {
+        this.customHandlers.clear();
+    }
+    /**
+     * Get all executed command parameter history.
+     */
+    getHistory() {
+        return [...this.history];
+    }
+    /**
+     * Get the last executed command parameters.
+     */
+    getLastExecuted() {
+        return this.history[this.history.length - 1];
+    }
+    /**
+     * Clear command execution history.
+     */
+    clearHistory() {
+        this.history = [];
+    }
+    /**
+     * Reset mock executor to default clean state.
+     */
+    reset() {
+        this.history = [];
+        this.simulatedFailure = null;
+        this.simulatedExitCode = 0;
+        this.simulatedStderr = "";
+        this.simulatedLatencyMs = 10;
+        this.customHandlers.clear();
+    }
+    /**
+     * Execute mediated appliance command in mock environment.
+     */
+    async execute(params) {
+        const targetIp = (params.targetIp || params.target || "").trim();
+        if (!targetIp) {
+            throw new ApplianceError("Appliance target IP or hostname is required.");
+        }
+        // Build and strictly validate command
+        const command = buildApplianceCommand(params);
+        const action = normalizeCommandType(params);
+        this.history.push({ ...params, targetIp });
+        if (this.simulatedLatencyMs > 0) {
+            await new Promise((r) => setTimeout(r, this.simulatedLatencyMs));
+        }
+        // Handle simulated failure states
+        if (this.simulatedFailure === "connect_timeout") {
+            throw new ApplianceTimeoutError(`SSH connection to ${targetIp}:${params.port || 2222} timed out after ${params.connectTimeoutMs || 10000}ms.`);
+        }
+        if (this.simulatedFailure === "exec_timeout") {
+            throw new ApplianceTimeoutError(`Appliance command execution on ${targetIp}:${params.port || 2222} timed out after ${params.timeoutMs || 30000}ms: ${command}`);
+        }
+        if (this.simulatedFailure === "conn_refused") {
+            throw new ApplianceConnectionError(`SSH connection failed to ${targetIp}:${params.port || 2222} (ECONNREFUSED): connect ECONNREFUSED ${targetIp}:${params.port || 2222}`);
+        }
+        if (this.simulatedFailure === "auth_failed") {
+            throw new ApplianceAuthenticationError(`SSH authentication failed for user 'admin' on ${targetIp}:${params.port || 2222}: All configured authentication methods failed`);
+        }
+        if (this.simulatedFailure === "exit_code_error" || this.simulatedExitCode !== 0) {
+            const exitCode = this.simulatedExitCode || 1;
+            const rawStderr = this.simulatedStderr || `Error executing command: ${command}`;
+            const redactedStderr = this.redactor.redactString(rawStderr);
+            return {
+                targetIp,
+                target: targetIp,
+                action,
+                command,
+                exitCode,
+                stdout: "",
+                stderr: redactedStderr,
+                durationMs: this.simulatedLatencyMs,
+                redacted: redactedStderr !== rawStderr
+            };
+        }
+        // Check custom handler (check normalized action, raw params.action, or raw params.commandType)
+        const rawActionKey = (params.action || "").toLowerCase().trim().replace(/\s+/g, "_");
+        const rawCommandTypeKey = (params.commandType || "").toLowerCase().trim().replace(/\s+/g, "_");
+        const matchedHandler = this.customHandlers.get(action) ||
+            (rawActionKey ? this.customHandlers.get(rawActionKey) : undefined) ||
+            (rawCommandTypeKey ? this.customHandlers.get(rawCommandTypeKey) : undefined);
+        if (matchedHandler) {
+            const customRes = await matchedHandler(params);
+            const rawStdout = customRes.stdout || "";
+            const rawStderr = customRes.stderr || "";
+            const redactedStdout = this.redactor.redactString(rawStdout);
+            const redactedStderr = this.redactor.redactString(rawStderr);
+            return {
+                targetIp,
+                target: targetIp,
+                action,
+                command,
+                exitCode: customRes.exitCode ?? 0,
+                stdout: redactedStdout,
+                stderr: redactedStderr,
+                durationMs: customRes.durationMs ?? this.simulatedLatencyMs,
+                redacted: customRes.redacted ?? (redactedStdout !== rawStdout || redactedStderr !== rawStderr)
+            };
+        }
+        // Generate realistic Call Telemetry CLI outputs
+        let rawStdout = "";
+        let rawStderr = "";
+        let exitCode = 0;
+        const args = params.args || params.params || {};
+        switch (action) {
+            case "status":
+                rawStdout = [
+                    "Call Telemetry Appliance Stack Status:",
+                    "  calltelemetry-web-1:          Up (healthy) - Port 443 -> 4000",
+                    "  calltelemetry-db-1:           Up (healthy) - PostgreSQL 16.2",
+                    "  calltelemetry-nats-1:         Up (healthy) - NATS JetStream 2.10",
+                    "  calltelemetry-jtapi-sidecar-1: Up (healthy) - Connected to CUCM 192.168.125.10",
+                    "  calltelemetry-seaweedfs-1:    Up (healthy) - S3 Storage",
+                    "  calltelemetry-grafana-1:      Up (healthy) - Metrics Dashboard",
+                    "  calltelemetry-caddy-1:        Up (healthy) - Reverse Proxy",
+                    "System Health: GREEN (All services running)",
+                    `Appliance IP: ${targetIp}`
+                ].join("\n");
+                break;
+            case "jtapi_status":
+            case "jtapi status":
+                rawStdout = JSON.stringify({
+                    status: "connected",
+                    sidecar_healthy: true,
+                    cucm_host: "192.168.125.10",
+                    monitored_devices_count: 42,
+                    cti_port_status: "in_service",
+                    rtp_streamer_status: "ready",
+                    active_calls: 0
+                }, null, 2);
+                break;
+            case "health":
+            case "health_report":
+                rawStdout = [
+                    "=== Call Telemetry Health Diagnostic Report ===",
+                    "CPU Load: 12% (16 cores)",
+                    "Memory: 4120 MB / 8192 MB (50.3% used)",
+                    "Disk (/data): 14.2 GB / 60.0 GB (23.7% used)",
+                    "Database Connections: 8 / 100 active",
+                    "NATS Memory: 42 MB / 512 MB",
+                    "Overall Diagnostic Verdict: HEALTHY"
+                ].join("\n");
+                break;
+            case "diag":
+            case "diag_network":
+            case "diag network":
+                rawStdout = "Gateway 192.168.124.1: Reachable (0.4ms)\nDNS 1.1.1.1: OK\nCUCM 192.168.125.10:2748: REACHABLE";
+                break;
+            case "diag_database":
+            case "diag database":
+                rawStdout = "PostgreSQL Ping: 0.8ms\nCache Hit Ratio: 99.4%\nDeadlocks: 0\nActive Queries: 3";
+                break;
+            case "diag_service":
+            case "diag service":
+                rawStdout = "docker-compose-app.service: active (running) since Wed 2026-08-19 18:00:00 UTC";
+                break;
+            case "db_status":
+            case "db status":
+                rawStdout = "Database: calltelemetry_prod\nSize: 4.2 GB\nConnections: 8\nStatus: ONLINE";
+                break;
+            case "db_size":
+            case "db size":
+                rawStdout = "4509715660 bytes (4.2 GB)";
+                break;
+            case "db_tables":
+            case "db tables": {
+                const table = args.table;
+                if (table) {
+                    rawStdout = `Table: ${table} (Size: 1.2 GB, Rows: 850,000, Total Index Size: 340 MB)`;
+                }
+                else {
+                    rawStdout = [
+                        "Table: cdr_records (Size: 2.1 GB, Rows: 1,450,200)",
+                        "Table: audit_logs (Size: 320 MB, Rows: 120,000)",
+                        "Table: phone_devices (Size: 45 MB, Rows: 8,400)",
+                        "Table: slot_leases (Size: 12 MB, Rows: 1,200)"
+                    ].join("\n");
+                }
+                break;
+            }
+            case "db_vacuum":
+            case "db vacuum": {
+                const table = args.table || "all";
+                const fullFlag = args.vacuumFull ? " (FULL)" : "";
+                const analyzeFlag = args.vacuumAnalyze ? " (ANALYZE)" : "";
+                rawStdout = `VACUUM${fullFlag}${analyzeFlag} on table '${table}' completed in 1.42s (lock_timeout=30s injected). 0 dead rows removed.`;
+                break;
+            }
+            case "db_compact":
+            case "db compact":
+                rawStdout = "Database compaction completed. Reclaimed 1.2 GB disk space.";
+                break;
+            case "db_backup":
+            case "db backup":
+                rawStdout = "Backup created: /data/backups/calltelemetry_backup_20260819_190000.pgdump (Size: 840 MB)";
+                break;
+            case "db_list":
+            case "db list":
+                rawStdout = [
+                    "- calltelemetry_backup_20260819_190000.pgdump (840 MB)",
+                    "- calltelemetry_backup_20260818_190000.pgdump (832 MB)"
+                ].join("\n");
+                break;
+            case "migrate":
+            case "migrate_status":
+            case "migrate status":
+                rawStdout = "All 42 Ecto migrations up-to-date.";
+                break;
+            case "migrate_legacy":
+            case "migrate legacy":
+                rawStdout = JSON.stringify({
+                    legacy_drains: { completed: true, drained_partitions: 12, pending: 0 },
+                    oban_rollups: { active: false, backfilled: 45000 }
+                }, null, 2);
+                break;
+            case "migrate_run":
+            case "migrate run":
+                rawStdout = "Running migrations: 20260819000000_add_ct_lab_tables.exs ... Done (0.042s)";
+                break;
+            case "migrate_drain":
+            case "migrate drain":
+                rawStdout = "Partition drain executed. 0 stale partitions remaining.";
+                break;
+            case "docker":
+            case "docker_ps":
+            case "docker ps":
+                rawStdout = [
+                    "NAMES\tSTATUS\tIMAGE\tPORTS",
+                    "calltelemetry-web-1\tUp 4 hours (healthy)\tcalltelemetry/web:0.8.7\t443->4000",
+                    "calltelemetry-db-1\tUp 4 hours (healthy)\tpostgres:16.2\t5432/tcp",
+                    "calltelemetry-nats-1\tUp 4 hours (healthy)\tnats:2.10\t4222/tcp",
+                    "calltelemetry-jtapi-sidecar-1\tUp 4 hours (healthy)\tcalltelemetry/jtapi:0.8.7\t8080/tcp"
+                ].join("\n");
+                break;
+            case "docker_logs":
+            case "logs": {
+                const container = args.container || "calltelemetry-web-1";
+                const tail = args.logTail || 100;
+                rawStdout = [
+                    `=== Docker logs for ${container} (tail ${tail}) ===`,
+                    `[info] Application started successfully on ${targetIp}`,
+                    `[info] Secret token dp.pt.secret_token_from_doppler_xyz loaded into memory.`,
+                    `[info] Connected to postgresql://postgres:super-secret-postgres-password-12345@db:5432/calltelemetry_prod`,
+                    `[info] Ready to accept requests.`
+                ].join("\n");
+                break;
+            }
+            case "journalctl":
+            case "system_logs": {
+                const tail = args.logTail || 100;
+                rawStdout = `Systemd service docker-compose-app (last ${tail} lines): active (running) since 2026-08-19 18:00:00 UTC.`;
+                break;
+            }
+            case "version":
+                rawStdout = "cli.sh version 0.8.7\nCT_RELEASE_VERSION=0.8.7-stable";
+                break;
+            case "raw_whitelisted":
+            case "raw":
+                rawStdout = `Output of raw command: ${args.rawCommand || "echo ok"}`;
+                break;
+            default:
+                rawStdout = `Executed ${action} on ${targetIp}`;
+        }
+        const redactedStdout = this.redactor.redactString(rawStdout);
+        const redactedStderr = this.redactor.redactString(rawStderr);
+        const isRedacted = redactedStdout !== rawStdout || redactedStderr !== rawStderr;
+        return {
+            targetIp,
+            target: targetIp,
+            action,
+            command,
+            exitCode,
+            stdout: redactedStdout,
+            stderr: redactedStderr,
+            durationMs: this.simulatedLatencyMs,
+            redacted: isRedacted
+        };
+    }
+    /**
+     * Test connection in mock environment.
+     */
+    async testConnection(targetIp, port, timeoutMs) {
+        if (this.simulatedFailure === "conn_refused" || this.simulatedFailure === "connect_timeout" || this.simulatedFailure === "auth_failed") {
+            return false;
+        }
+        return Boolean(targetIp && targetIp.trim().length > 0);
+    }
+}
+export const mockApplianceExecutor = new MockApplianceExecutor();
+//# sourceMappingURL=mock.js.map