@judaharagao/opencode-ssh 1.0.0

package/dist/display/stream.js

@@ -0,0 +1,102 @@
+/**
+ * Real-time SSH output stream handler.
+ * Formats and prepares output chunks for display as they arrive.
+ */
+/**
+ * Create a stream handler that collects and formats output chunks.
+ */
+export function createStreamHandler(sessionId) {
+    const chunks = [];
+    let stdout = "";
+    let stderr = "";
+    return {
+        chunks,
+        onStdout: (data) => {
+            chunks.push({
+                type: "stdout",
+                data,
+                timestamp: Date.now(),
+                sessionId,
+            });
+            stdout += data;
+        },
+        onStderr: (data) => {
+            chunks.push({
+                type: "stderr",
+                data,
+                timestamp: Date.now(),
+                sessionId,
+            });
+            stderr += data;
+        },
+        onInfo: (data) => {
+            chunks.push({
+                type: "info",
+                data,
+                timestamp: Date.now(),
+                sessionId,
+            });
+        },
+        onError: (data) => {
+            chunks.push({
+                type: "error",
+                data,
+                timestamp: Date.now(),
+                sessionId,
+            });
+            stderr += data;
+        },
+        getOutput: () => ({
+            stdout,
+            stderr,
+        }),
+        formatOutput: () => {
+            const lines = [];
+            for (const chunk of chunks) {
+                switch (chunk.type) {
+                    case "stdout":
+                    case "stderr":
+                        // Output is collected and shown as a whole
+                        break;
+                    case "info":
+                        lines.push(`ℹ️ ${chunk.data}`);
+                        break;
+                    case "error":
+                        lines.push(`❌ ${chunk.data}`);
+                        break;
+                }
+            }
+            if (stdout.trim()) {
+                lines.push(stdout.trim());
+            }
+            if (stderr.trim()) {
+                lines.push(`\`\`\`\n${stderr.trim()}\n\`\`\``);
+            }
+            return lines.join("\n");
+        },
+    };
+}
+/**
+ * Format a progress indicator for long-running commands.
+ */
+export function formatProgress(sessionId, command, elapsed) {
+    const elapsedStr = elapsed < 1000
+        ? `${elapsed}ms`
+        : `${(elapsed / 1000).toFixed(1)}s`;
+    return `⏳ [${sessionId}] \`${command}\` — running for ${elapsedStr}...`;
+}
+/**
+ * Format a timeout warning.
+ */
+export function formatTimeout(sessionId, command, timeout) {
+    return [
+        `⏰ **Command timed out**`,
+        "",
+        `- Session: \`${sessionId}\``,
+        `- Command: \`${command}\``,
+        `- Timeout: ${timeout}s`,
+        "",
+        "The command was terminated after exceeding the timeout limit.",
+    ].join("\n");
+}
+//# sourceMappingURL=stream.js.map

package/dist/display/stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/display/stream.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IASnD,MAAM,MAAM,GAAkB,EAAE,CAAA;IAChC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,IAAI,MAAM,GAAG,EAAE,CAAA;IAEf,OAAO;QACL,MAAM;QAEN,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,SAAS;aACV,CAAC,CAAA;YACF,MAAM,IAAI,IAAI,CAAA;QAChB,CAAC;QAED,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,SAAS;aACV,CAAC,CAAA;YACF,MAAM,IAAI,IAAI,CAAA;QAChB,CAAC;QAED,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,SAAS;aACV,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,SAAS;aACV,CAAC,CAAA;YACF,MAAM,IAAI,IAAI,CAAA;QAChB,CAAC;QAED,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAChB,MAAM;YACN,MAAM;SACP,CAAC;QAEF,YAAY,EAAE,GAAG,EAAE;YACjB,MAAM,KAAK,GAAa,EAAE,CAAA;YAE1B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;oBACnB,KAAK,QAAQ,CAAC;oBACd,KAAK,QAAQ;wBACX,2CAA2C;wBAC3C,MAAK;oBACP,KAAK,MAAM;wBACT,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;wBAC9B,MAAK;oBACP,KAAK,OAAO;wBACV,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;wBAC7B,MAAK;gBACT,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;YAC3B,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;YAChD,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAe;IAChF,MAAM,UAAU,GACd,OAAO,GAAG,IAAI;QACZ,CAAC,CAAC,GAAG,OAAO,IAAI;QAChB,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAA;IAEvC,OAAO,MAAM,SAAS,OAAO,OAAO,oBAAoB,UAAU,KAAK,CAAA;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAe;IAC/E,OAAO;QACL,yBAAyB;QACzB,EAAE;QACF,gBAAgB,SAAS,IAAI;QAC7B,gBAAgB,OAAO,IAAI;QAC3B,cAAc,OAAO,GAAG;QACxB,EAAE;QACF,+DAA+D;KAChE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC"}

package/dist/hooks.d.ts

@@ -0,0 +1,13 @@
+import type { Hooks } from "@opencode-ai/plugin";
+import type { SecurityMode } from "./config/schema.js";
+/**
+ * Create the SSH plugin hooks.
+ *
+ * Hooks behavior:
+ * - system.transform: Injects SSH availability info into the system prompt
+ * - permission.ask: Handles permission responses for SSH commands
+ * - tool.execute.before: Pre-execution validation (additional safety net)
+ * - tool.execute.after: Post-execution audit metadata
+ */
+export declare function createSshHooks(mode?: SecurityMode, extraBlocklist?: string[]): Hooks;
+//# sourceMappingURL=hooks.d.ts.map

package/dist/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEhD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,IAAI,GAAE,YAAqB,EAC3B,cAAc,GAAE,MAAM,EAAO,GAC5B,KAAK,CAiKP"}

package/dist/hooks.js

@@ -0,0 +1,151 @@
+import { validateCommand } from "./security/validator.js";
+/**
+ * Create the SSH plugin hooks.
+ *
+ * Hooks behavior:
+ * - system.transform: Injects SSH availability info into the system prompt
+ * - permission.ask: Handles permission responses for SSH commands
+ * - tool.execute.before: Pre-execution validation (additional safety net)
+ * - tool.execute.after: Post-execution audit metadata
+ */
+export function createSshHooks(mode = "full", extraBlocklist = []) {
+    let systemInjected = false;
+    return {
+        // ═══════════════════════════════════════════════════════════════
+        // System prompt injection
+        // ═══════════════════════════════════════════════════════════════
+        "experimental.chat.system.transform": async (_input, output) => {
+            if (systemInjected)
+                return;
+            output.system.push([
+                "## SSH Access Plugin (opencode-ssh)",
+                "",
+                "You have SSH access to remote servers via the opencode-ssh plugin.",
+                "",
+                "### Available Tools",
+                "- `ssh.connect` — Establish SSH connection to a remote server",
+                "- `ssh.disconnect` — Close an SSH session",
+                "- `ssh.list_sessions` — List active SSH sessions",
+                "- `ssh.exec` — Execute a command on a remote server",
+                "- `ssh.exec_batch` — Execute multiple commands in sequence",
+                "- `ssh.upload` — Upload a file via SCP/SFTP",
+                "- `ssh.download` — Download a file via SCP/SFTP",
+                "- `ssh.check_command` — Check command safety without executing",
+                "- `ssh.security_policy` — View/modify security policy",
+                "- `ssh.audit_log` — View command execution audit trail",
+                "",
+                "### Security Rules",
+                `**Mode:** ${mode}`,
+                "",
+                "1. **Destructive commands are BLOCKED with no exceptions.**",
+                "   Commands like \`rm -rf /\`, \`mkfs\`, \`dd\`, fork bombs, etc.",
+                "   are permanently blocked and cannot be overridden.",
+                "",
+                "2. **Risky commands require your approval EVERY time.**",
+                "   Commands like \`DROP TABLE\`, \`sudo su\`, \`systemctl stop\`, etc.",
+                "   will prompt you for approval each time they are executed.",
+                "",
+                "3. **NEVER store credentials in chat messages.**",
+                "   Use \`ssh.connect\` with key-based authentication when possible.",
+                "",
+                "4. **Always use \`ssh.check_command\` to preview command safety**",
+                "   before running potentially dangerous operations.",
+                "",
+                "5. **All commands are logged in the audit trail.**",
+                "   Use \`ssh.audit_log\` to review execution history.",
+                "",
+                mode === "restricted"
+                    ? "**RESTRICTED MODE:** Only commands in the allowlist are permitted."
+                    : mode === "read_only"
+                        ? "**READ-ONLY MODE:** Only read-only commands are permitted."
+                        : "**FULL MODE:** All non-blocked commands are permitted.",
+            ].join("\n"));
+            systemInjected = true;
+        },
+        // ═══════════════════════════════════════════════════════════════
+        // Permission handling
+        // ═══════════════════════════════════════════════════════════════
+        "permission.ask": async (input, output) => {
+            const pattern = typeof input.pattern === "string" ? input.pattern : "";
+            // Auto-approve read-only operations
+            if (pattern.includes("ssh.list_sessions") ||
+                pattern.includes("ssh.check_command") ||
+                pattern.includes("ssh.audit_log")) {
+                output.status = "allow";
+                return;
+            }
+            // For risky SSH commands: always ask (never auto-allow)
+            // This ensures the user is prompted every time for risky operations
+            if (pattern.includes("ssh.exec.risky") || pattern.includes("ssh.exec_batch.risky")) {
+                output.status = "ask";
+                return;
+            }
+            // For safe SSH operations: allow with user confirmation
+            // (the ctx.ask already showed the prompt)
+            if (pattern.includes("ssh.connect") ||
+                pattern.includes("ssh.disconnect") ||
+                pattern.includes("ssh.exec") ||
+                pattern.includes("ssh.exec_batch") ||
+                pattern.includes("ssh.upload") ||
+                pattern.includes("ssh.download") ||
+                pattern.includes("ssh.security_policy")) {
+                // Let the user decide (the prompt is shown)
+                output.status = "ask";
+                return;
+            }
+        },
+        // ═══════════════════════════════════════════════════════════════
+        // Pre-execution validation (additional safety net)
+        // ═══════════════════════════════════════════════════════════════
+        "tool.execute.before": async (input, output) => {
+            // Only intercept ssh.exec calls
+            if (input.tool !== "ssh.exec" && input.tool !== "ssh.exec_batch")
+                return;
+            const args = output.args;
+            const command = args.command;
+            if (!command)
+                return;
+            // Final safety check: validate the command one more time
+            const validation = validateCommand(command, mode, extraBlocklist);
+            if (validation.level === "destructive") {
+                throw new Error([
+                    `🚫 DESTRUCTIVE COMMAND BLOCKED: ${command}`,
+                    "",
+                    `Reason: ${validation.reason}`,
+                    `Rule: ${validation.matched_rule}`,
+                    "",
+                    "This command is permanently blocked and cannot be executed.",
+                ].join("\n"));
+            }
+            if (validation.level === "not_in_allowlist") {
+                throw new Error([
+                    `🔒 COMMAND NOT ALLOWED: ${command}`,
+                    "",
+                    `Reason: ${validation.reason}`,
+                    "",
+                    "This command is not permitted in the current security mode.",
+                ].join("\n"));
+            }
+        },
+        // ═══════════════════════════════════════════════════════════════
+        // Post-execution metadata
+        // ═══════════════════════════════════════════════════════════════
+        "tool.execute.after": async (input, output) => {
+            if (!input.tool.startsWith("ssh."))
+                return;
+            const timestamp = new Date().toISOString();
+            if (output.metadata) {
+                output.metadata.ssh_plugin = true;
+                output.metadata.ssh_timestamp = timestamp;
+            }
+        },
+        // ═══════════════════════════════════════════════════════════════
+        // Cleanup on dispose
+        // ═══════════════════════════════════════════════════════════════
+        dispose: async () => {
+            systemInjected = false;
+            // Session cleanup is handled by the manager
+        },
+    };
+}
+//# sourceMappingURL=hooks.js.map

package/dist/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAGzD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAqB,MAAM,EAC3B,iBAA2B,EAAE;IAE7B,IAAI,cAAc,GAAG,KAAK,CAAA;IAE1B,OAAO;QACL,kEAAkE;QAClE,0BAA0B;QAC1B,kEAAkE;QAClE,oCAAoC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAC7D,IAAI,cAAc;gBAAE,OAAM;YAE1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB;gBACE,qCAAqC;gBACrC,EAAE;gBACF,oEAAoE;gBACpE,EAAE;gBACF,qBAAqB;gBACrB,+DAA+D;gBAC/D,2CAA2C;gBAC3C,kDAAkD;gBAClD,qDAAqD;gBACrD,4DAA4D;gBAC5D,6CAA6C;gBAC7C,iDAAiD;gBACjD,gEAAgE;gBAChE,uDAAuD;gBACvD,wDAAwD;gBACxD,EAAE;gBACF,oBAAoB;gBACpB,aAAa,IAAI,EAAE;gBACnB,EAAE;gBACF,6DAA6D;gBAC7D,mEAAmE;gBACnE,sDAAsD;gBACtD,EAAE;gBACF,yDAAyD;gBACzD,wEAAwE;gBACxE,8DAA8D;gBAC9D,EAAE;gBACF,kDAAkD;gBAClD,qEAAqE;gBACrE,EAAE;gBACF,mEAAmE;gBACnE,qDAAqD;gBACrD,EAAE;gBACF,oDAAoD;gBACpD,uDAAuD;gBACvD,EAAE;gBACF,IAAI,KAAK,YAAY;oBACnB,CAAC,CAAC,oEAAoE;oBACtE,CAAC,CAAC,IAAI,KAAK,WAAW;wBACpB,CAAC,CAAC,4DAA4D;wBAC9D,CAAC,CAAC,wDAAwD;aAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;YAED,cAAc,GAAG,IAAI,CAAA;QACvB,CAAC;QAED,kEAAkE;QAClE,sBAAsB;QACtB,kEAAkE;QAClE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;YAEtE,oCAAoC;YACpC,IACE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBACrC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EACjC,CAAC;gBACD,MAAM,CAAC,MAAM,GAAG,OAAO,CAAA;gBACvB,OAAM;YACR,CAAC;YAED,wDAAwD;YACxD,oEAAoE;YACpE,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACnF,MAAM,CAAC,MAAM,GAAG,KAAK,CAAA;gBACrB,OAAM;YACR,CAAC;YAED,wDAAwD;YACxD,0CAA0C;YAC1C,IACE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAChC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EACvC,CAAC;gBACD,4CAA4C;gBAC5C,MAAM,CAAC,MAAM,GAAG,KAAK,CAAA;gBACrB,OAAM;YACR,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,mDAAmD;QACnD,kEAAkE;QAClE,qBAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC7C,gCAAgC;YAChC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,OAAM;YAExE,MAAM,IAAI,GAAG,MAAM,CAAC,IAA+B,CAAA;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAA;YAElD,IAAI,CAAC,OAAO;gBAAE,OAAM;YAEpB,yDAAyD;YACzD,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAA;YAEjE,IAAI,UAAU,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb;oBACE,mCAAmC,OAAO,EAAE;oBAC5C,EAAE;oBACF,WAAW,UAAU,CAAC,MAAM,EAAE;oBAC9B,SAAS,UAAU,CAAC,YAAY,EAAE;oBAClC,EAAE;oBACF,6DAA6D;iBAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;YACH,CAAC;YAED,IAAI,UAAU,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACb;oBACE,2BAA2B,OAAO,EAAE;oBACpC,EAAE;oBACF,WAAW,UAAU,CAAC,MAAM,EAAE;oBAC9B,EAAE;oBACF,6DAA6D;iBAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;YACH,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,0BAA0B;QAC1B,kEAAkE;QAClE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAM;YAE1C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAC1C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACpB,MAAM,CAAC,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAA;gBACjC,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,SAAS,CAAA;YAC3C,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,qBAAqB;QACrB,kEAAkE;QAClE,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,cAAc,GAAG,KAAK,CAAA;YACtB,4CAA4C;QAC9C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+import type { Plugin } from "@opencode-ai/plugin";
+declare const _default: {
+    id: string;
+    server: Plugin;
+};
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;;;;;AAyBjD,wBAGC"}

package/dist/index.js

@@ -0,0 +1,19 @@
+import { createSshTools } from "./tools.js";
+import { createSshHooks } from "./hooks.js";
+import { resolveConfig } from "./config/defaults.js";
+const SshPlugin = async (_ctx, options) => {
+    // ── Resolve configuration ──
+    const config = resolveConfig(options);
+    // ── Create tools and hooks with resolved config ──
+    const tools = createSshTools(config.mode, config.max_sessions, config.default_timeout, config.blocklist_extra);
+    const hooks = createSshHooks(config.mode, config.blocklist_extra);
+    return {
+        tool: tools,
+        ...hooks,
+    };
+};
+export default {
+    id: "opencode-ssh",
+    server: SshPlugin,
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,MAAM,SAAS,GAAW,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;IAChD,8BAA8B;IAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAkC,CAAC,CAAA;IAEhE,oDAAoD;IACpD,MAAM,KAAK,GAAG,cAAc,CAC1B,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,eAAe,CACvB,CAAA;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,CAAA;IAEjE,OAAO;QACL,IAAI,EAAE,KAAK;QACX,GAAG,KAAK;KACT,CAAA;AACH,CAAC,CAAA;AAED,eAAe;IACb,EAAE,EAAE,cAAc;IAClB,MAAM,EAAE,SAAS;CAClB,CAAA"}

package/dist/security/allowlist.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Allowlist for SSH command execution.
+ * Used in "restricted" and "read_only" security modes.
+ */
+export interface AllowlistEntry {
+    /** Regex pattern to match */
+    pattern: RegExp;
+    /** Description of the allowed command */
+    description: string;
+}
+/**
+ * Get read-only allowed commands.
+ */
+export declare function getReadOnlyCommands(): AllowlistEntry[];
+/**
+ * Get safe write commands (used in "restricted" mode).
+ */
+export declare function getSafeWriteCommands(): AllowlistEntry[];
+/**
+ * Get all allowed commands for a given mode.
+ */
+export declare function getAllowedCommands(mode: "full" | "restricted" | "read_only"): AllowlistEntry[];
+//# sourceMappingURL=allowlist.d.ts.map

package/dist/security/allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../src/security/allowlist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAA;CACpB;AA+ED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,cAAc,EAAE,CAEtD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,EAAE,CAEvD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,cAAc,EAAE,CAS9F"}

package/dist/security/allowlist.js

@@ -0,0 +1,105 @@
+/**
+ * Allowlist for SSH command execution.
+ * Used in "restricted" and "read_only" security modes.
+ */
+// ─── READ-ONLY COMMANDS (always allowed) ───────────────────────────
+const READ_ONLY_COMMANDS = [
+    { pattern: /^ls\b/, description: "List directory contents" },
+    { pattern: /^ll\b/, description: "List directory contents (long)" },
+    { pattern: /^la\b/, description: "List all files including hidden" },
+    { pattern: /^cat\b/, description: "Display file contents" },
+    { pattern: /^head\b/, description: "Display first lines of a file" },
+    { pattern: /^tail\b/, description: "Display last lines of a file" },
+    { pattern: /^less\b/, description: "View file contents pager" },
+    { pattern: /^more\b/, description: "View file contents" },
+    { pattern: /^grep\b/, description: "Search text patterns" },
+    { pattern: /^rg\b/, description: "Ripgrep search" },
+    { pattern: /^find\b/, description: "Find files" },
+    { pattern: /^which\b/, description: "Locate a command" },
+    { pattern: /^whereis\b/, description: "Locate binary, source, man" },
+    { pattern: /^whoami\b/, description: "Print current user" },
+    { pattern: /^id\b/, description: "Print user/group IDs" },
+    { pattern: /^pwd\b/, description: "Print working directory" },
+    { pattern: /^echo\b/, description: "Print text" },
+    { pattern: /^date\b/, description: "Print date and time" },
+    { pattern: /^uptime\b/, description: "System uptime" },
+    { pattern: /^uname\b/, description: "System information" },
+    { pattern: /^hostname\b/, description: "Print hostname" },
+    { pattern: /^df\b/, description: "Disk space usage" },
+    { pattern: /^du\b/, description: "Directory space usage" },
+    { pattern: /^free\b/, description: "Memory usage" },
+    { pattern: /^ps\b/, description: "Process status" },
+    { pattern: /^top\b/, description: "Process monitor (read-only)" },
+    { pattern: /^htop\b/, description: "Process monitor (enhanced)" },
+    { pattern: /^wc\b/, description: "Word/line/byte count" },
+    { pattern: /^file\b/, description: "Determine file type" },
+    { pattern: /^stat\b/, description: "Display file status" },
+    { pattern: /^tree\b/, description: "Directory tree display" },
+    { pattern: /^du\b/, description: "Disk usage" },
+    { pattern: /^diff\b/, description: "Compare files" },
+    { pattern: /^md5sum\b/, description: "MD5 checksum" },
+    { pattern: /^sha256sum\b/, description: "SHA256 checksum" },
+    { pattern: /^env\b/, description: "Print environment variables" },
+    { pattern: /^printenv\b/, description: "Print environment variable" },
+    { pattern: /^history\b/, description: "Command history" },
+    { pattern: /^man\b/, description: "Manual pages" },
+    { pattern: /^tldr\b/, description: "Simplified man pages" },
+    { pattern: /^ping\b/, description: "Network connectivity test" },
+    { pattern: /^dig\b/, description: "DNS lookup" },
+    { pattern: /^nslookup\b/, description: "DNS lookup" },
+    { pattern: /^host\b/, description: "DNS lookup" },
+    { pattern: /^curl\s+.*\s+-I\b/, description: "HTTP HEAD request via curl" },
+    { pattern: /^git\s+(status|log|diff|show|branch|remote)\b/, description: "Git read-only commands" },
+    { pattern: /^docker\s+ps\b/, description: "List Docker containers" },
+    { pattern: /^docker\s+images\b/, description: "List Docker images" },
+    { pattern: /^docker\s+logs\b/, description: "View Docker container logs" },
+    { pattern: /^docker\s+inspect\b/, description: "Inspect Docker object" },
+    { pattern: /^kubectl\s+get\b/, description: "Kubernetes get resources" },
+    { pattern: /^kubectl\s+describe\b/, description: "Kubernetes describe resource" },
+    { pattern: /^kubectl\s+logs\b/, description: "Kubernetes pod logs" },
+    { pattern: /^kubectl\s+top\b/, description: "Kubernetes resource usage" },
+    { pattern: /^systemctl\s+status\b/, description: "Service status" },
+    { pattern: /^systemctl\s+list\b/, description: "List services" },
+    { pattern: /^journalctl\b/, description: "View systemd journal" },
+];
+// ─── SAFE WRITE COMMANDS (allowed in "restricted" mode) ────────────
+const SAFE_WRITE_COMMANDS = [
+    { pattern: /^mkdir\b/, description: "Create directory" },
+    { pattern: /^touch\b/, description: "Create empty file" },
+    { pattern: /^cp\b/, description: "Copy files" },
+    { pattern: /^mv\b/, description: "Move/rename files" },
+    { pattern: /^nano\b/, description: "Text editor" },
+    { pattern: /^vim\b/, description: "Text editor" },
+    { pattern: /^vi\b/, description: "Text editor" },
+    { pattern: /^git\s+(add|commit|push|pull|checkout|merge|stash)\b/, description: "Git write commands" },
+    { pattern: /^npm\s+(install|run|test|build)\b/, description: "NPM commands" },
+    { pattern: /^yarn\s+(add|run|test|build)\b/, description: "Yarn commands" },
+    { pattern: /^pnpm\s+(add|run|test|build)\b/, description: "PNPM commands" },
+    { pattern: /^bun\s+(install|run|test|build)\b/, description: "Bun commands" },
+];
+/**
+ * Get read-only allowed commands.
+ */
+export function getReadOnlyCommands() {
+    return [...READ_ONLY_COMMANDS];
+}
+/**
+ * Get safe write commands (used in "restricted" mode).
+ */
+export function getSafeWriteCommands() {
+    return [...SAFE_WRITE_COMMANDS];
+}
+/**
+ * Get all allowed commands for a given mode.
+ */
+export function getAllowedCommands(mode) {
+    switch (mode) {
+        case "read_only":
+            return getReadOnlyCommands();
+        case "restricted":
+            return [...getReadOnlyCommands(), ...getSafeWriteCommands()];
+        case "full":
+            return []; // Only blocklist applies in full mode
+    }
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/security/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/security/allowlist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,sEAAsE;AACtE,MAAM,kBAAkB,GAAqB;IAC3C,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC5D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,gCAAgC,EAAE;IACnE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,iCAAiC,EAAE;IACpE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC3D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,+BAA+B,EAAE;IACpE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACnE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,0BAA0B,EAAE;IAC/D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACzD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC3D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACnD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE;IACjD,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACxD,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,4BAA4B,EAAE;IACpE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC3D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE;IACzD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC7D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE;IACjD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC1D,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE;IACtD,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC1D,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACzD,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACrD,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC1D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE;IACnD,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACnD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACjE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,4BAA4B,EAAE;IACjE,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE;IACzD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC1D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC1D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,wBAAwB,EAAE;IAC7D,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE;IAC/C,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE;IACpD,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE;IACrD,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE;IAC3D,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;IACjE,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,4BAA4B,EAAE;IACrE,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE;IACzD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;IAClD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC3D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE;IAChE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE;IAChD,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE;IACrD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE;IACjD,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,4BAA4B,EAAE;IAC3E,EAAE,OAAO,EAAE,+CAA+C,EAAE,WAAW,EAAE,wBAAwB,EAAE;IACnG,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,wBAAwB,EAAE;IACpE,EAAE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACpE,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,4BAA4B,EAAE;IAC1E,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACxE,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,0BAA0B,EAAE;IACxE,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACjF,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACpE,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACzE,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACnE,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,eAAe,EAAE;IAChE,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,sBAAsB,EAAE;CAClE,CAAA;AAED,sEAAsE;AACtE,MAAM,mBAAmB,GAAqB;IAC5C,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACxD,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACzD,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE;IAC/C,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACtD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE;IAClD,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE;IACjD,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE;IAChD,EAAE,OAAO,EAAE,sDAAsD,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACtG,EAAE,OAAO,EAAE,mCAAmC,EAAE,WAAW,EAAE,cAAc,EAAE;IAC7E,EAAE,OAAO,EAAE,gCAAgC,EAAE,WAAW,EAAE,eAAe,EAAE;IAC3E,EAAE,OAAO,EAAE,gCAAgC,EAAE,WAAW,EAAE,eAAe,EAAE;IAC3E,EAAE,OAAO,EAAE,mCAAmC,EAAE,WAAW,EAAE,cAAc,EAAE;CAC9E,CAAA;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAA;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,GAAG,mBAAmB,CAAC,CAAA;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAyC;IAC1E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,mBAAmB,EAAE,CAAA;QAC9B,KAAK,YAAY;YACf,OAAO,CAAC,GAAG,mBAAmB,EAAE,EAAE,GAAG,oBAAoB,EAAE,CAAC,CAAA;QAC9D,KAAK,MAAM;YACT,OAAO,EAAE,CAAA,CAAC,sCAAsC;IACpD,CAAC;AACH,CAAC"}

package/dist/security/blocklist.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Command Blocklist for SSH plugin.
+ *
+ * Commands are categorized into two levels:
+ * - DESTRUCTIVE: 100% blocked, no exceptions, no override possible
+ * - RISKY: Blocked by default, requires user approval via permission prompt every time
+ */
+export type CommandLevel = "destructive" | "risky" | "safe";
+export interface BlocklistEntry {
+    /** Regex pattern to match against the command */
+    pattern: RegExp;
+    /** Human-readable description of why this is blocked */
+    reason: string;
+    /** Level of danger */
+    level: CommandLevel;
+    /** Unique rule ID for audit logging */
+    id: string;
+}
+/**
+ * Get all built-in blocklist entries.
+ */
+export declare function getBuiltinBlocklist(): BlocklistEntry[];
+/**
+ * Get only destructive commands.
+ */
+export declare function getDestructiveCommands(): BlocklistEntry[];
+/**
+ * Get only risky commands.
+ */
+export declare function getRiskyCommands(): BlocklistEntry[];
+/**
+ * Create custom blocklist entries from user-provided regex patterns.
+ */
+export declare function createCustomEntries(patterns: string[], level?: CommandLevel): BlocklistEntry[];
+//# sourceMappingURL=blocklist.d.ts.map

package/dist/security/blocklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocklist.d.ts","sourceRoot":"","sources":["../../src/security/blocklist.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,OAAO,GAAG,MAAM,CAAA;AAE3D,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAA;IACf,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAA;IACd,sBAAsB;IACtB,KAAK,EAAE,YAAY,CAAA;IACnB,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAA;CACX;AAgUD;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,cAAc,EAAE,CAEtD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,cAAc,EAAE,CAEzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,cAAc,EAAE,CAEnD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAAE,EAClB,KAAK,GAAE,YAAsB,GAC5B,cAAc,EAAE,CAOlB"}