@lemoncat7/dsh-ssh 0.1.0-alpha.15

package/lib/config.d.ts

@@ -0,0 +1,14 @@
+import Schema from '@deepseek-ai/schemastery';
+export interface Config {
+    statePath: string;
+    exposeWeb: boolean;
+    apiPrefix: string;
+    defaultCommandTimeoutMs: number;
+    maxOutputChars: number;
+    allowPublicBind: boolean;
+}
+export declare const Config: Schema<Config>;
+export interface ResolvedConfig extends Config {
+}
+export declare function resolveConfig(config: Config): ResolvedConfig;
+//# sourceMappingURL=config.d.ts.map

package/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAE7C,MAAM,WAAW,MAAM;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,cAAc,EAAE,MAAM,CAAA;IACtB,eAAe,EAAE,OAAO,CAAA;CACzB;AAED,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,CAOhC,CAAA;AAEF,MAAM,WAAW,cAAe,SAAQ,MAAM;CAAG;AAEjD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAW5D"}

package/lib/config.js

@@ -0,0 +1,31 @@
+import Schema from '@deepseek-ai/schemastery';
+export const Config = Schema.object({
+    statePath: Schema.string().required(),
+    exposeWeb: Schema.boolean().default(true),
+    apiPrefix: Schema.string().default('/ssh-local/v1'),
+    defaultCommandTimeoutMs: Schema.number().min(1000).max(300_000).default(30_000),
+    maxOutputChars: Schema.number().min(1000).max(1_000_000).default(32_000),
+    allowPublicBind: Schema.boolean().default(false),
+});
+export function resolveConfig(config) {
+    const apiPrefix = normalizePrefix(config.apiPrefix ?? '/ssh-local/v1');
+    if (!config.statePath?.trim())
+        throw new Error('dsh-ssh requires statePath');
+    return {
+        statePath: config.statePath,
+        exposeWeb: config.exposeWeb ?? true,
+        apiPrefix,
+        defaultCommandTimeoutMs: config.defaultCommandTimeoutMs ?? 30_000,
+        maxOutputChars: config.maxOutputChars ?? 32_000,
+        allowPublicBind: config.allowPublicBind ?? false,
+    };
+}
+function normalizePrefix(value) {
+    const trimmed = value.trim();
+    const withSlash = trimmed.startsWith('/') ? trimmed : `/${trimmed}`;
+    const normalized = withSlash.endsWith('/') ? withSlash.slice(0, -1) : withSlash;
+    if (!/^\/[a-zA-Z0-9/_-]+$/.test(normalized))
+        throw new Error('apiPrefix must be an absolute URL path');
+    return normalized;
+}
+//# sourceMappingURL=config.js.map

package/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,0BAA0B,CAAA;AAW7C,MAAM,CAAC,MAAM,MAAM,GAAmB,MAAM,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IACnD,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC/E,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACxE,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACjD,CAAC,CAAA;AAIF,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC,CAAA;IACtE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC5E,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,SAAS;QACT,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,MAAM;QACjE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM;QAC/C,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK;KACjD,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAA;IACnE,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/E,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IACtG,OAAO,UAAU,CAAA;AACnB,CAAC"}

package/lib/connector.d.ts

@@ -0,0 +1,30 @@
+import { type Client as SshClient } from 'ssh2';
+import { SshCredentialVault } from './credentials.js';
+import type { SshCredentialPayload, SshProfile } from './domain.js';
+import { SshStore } from './store.js';
+export declare class HostKeyRequiredError extends Error {
+    readonly profileId: string;
+    readonly fingerprint: string;
+    readonly code = "HOST_KEY_REQUIRED";
+    constructor(profileId: string, fingerprint: string);
+}
+export declare class SshConnector {
+    private readonly store;
+    private readonly credentials;
+    constructor(store: SshStore, credentials: SshCredentialVault);
+    connect(profileId: string, signal?: AbortSignal): Promise<ManagedSshConnection>;
+    connectDraft(profile: SshProfile, secrets: SshCredentialPayload, signal?: AbortSignal): Promise<ManagedSshConnection>;
+    private connectRecursive;
+    private connectResolved;
+    private connectJumpChain;
+    private resolveIdentity;
+}
+export declare class ManagedSshConnection {
+    readonly client: SshClient;
+    readonly profile: SshProfile;
+    private readonly parent?;
+    private closed;
+    constructor(client: SshClient, profile: SshProfile, parent?: ManagedSshConnection | undefined);
+    close(): void;
+}
+//# sourceMappingURL=connector.d.ts.map

package/lib/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAa,EAAE,KAAK,MAAM,IAAI,SAAS,EAA0C,MAAM,MAAM,CAAA;AAG7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,qBAAa,oBAAqB,SAAQ,KAAK;IAEjC,QAAQ,CAAC,SAAS,EAAE,MAAM;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM;IADpE,QAAQ,CAAC,IAAI,uBAAsB;gBACd,SAAS,EAAE,MAAM,EAAW,WAAW,EAAE,MAAM;CAIrE;AAED,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAY,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAA7C,KAAK,EAAE,QAAQ,EAAmB,WAAW,EAAE,kBAAkB;IAExF,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI/E,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAK7G,gBAAgB;YAUhB,eAAe;YA4Bf,gBAAgB;YAgChB,eAAe;CAS9B;AAED,qBAAa,oBAAoB;IAEnB,QAAQ,CAAC,MAAM,EAAE,SAAS;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU;IAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAD9F,OAAO,CAAC,MAAM,CAAQ;gBACD,MAAM,EAAE,SAAS,EAAW,OAAO,EAAE,UAAU,EAAmB,MAAM,CAAC,EAAE,oBAAoB,YAAA;IACpH,KAAK,IAAI,IAAI;CAMd"}

package/lib/connector.js

@@ -0,0 +1,216 @@
+import ssh2 from 'ssh2';
+import { connectHttpProxy, connectSocks5Proxy } from './proxy.js';
+export class HostKeyRequiredError extends Error {
+    profileId;
+    fingerprint;
+    code = 'HOST_KEY_REQUIRED';
+    constructor(profileId, fingerprint) {
+        super(`Host key confirmation required for ${profileId}: ${fingerprint}`);
+        this.profileId = profileId;
+        this.fingerprint = fingerprint;
+        this.name = 'HostKeyRequiredError';
+    }
+}
+export class SshConnector {
+    store;
+    credentials;
+    constructor(store, credentials) {
+        this.store = store;
+        this.credentials = credentials;
+    }
+    async connect(profileId, signal) {
+        return this.connectRecursive(profileId, new Set(), signal);
+    }
+    async connectDraft(profile, secrets, signal) {
+        const identity = profile.credentialId === undefined ? { profile, secrets } : await this.resolveIdentity(profile);
+        return this.connectResolved(identity.profile, identity.secrets, new Set([profile.id]), signal);
+    }
+    async connectRecursive(profileId, chain, signal) {
+        signal?.throwIfAborted();
+        if (chain.has(profileId))
+            throw new Error(`SSH jump proxy cycle detected at ${profileId}`);
+        const storedProfile = this.store.profile(profileId);
+        if (storedProfile === undefined)
+            throw Object.assign(new Error(`SSH profile ${profileId} was not found`), { status: 404 });
+        const { profile, secrets } = await this.resolveIdentity(storedProfile);
+        const nextChain = new Set(chain).add(profileId);
+        return this.connectResolved(profile, secrets, nextChain, signal);
+    }
+    async connectResolved(profile, secrets, chain, signal) {
+        signal?.throwIfAborted();
+        let socket;
+        let parent;
+        try {
+            if (profile.proxy.type === 'http') {
+                socket = await connectHttpProxy(profile.proxy.host, profile.proxy.port, profile.host, profile.port, {
+                    ...profile.proxy.username === undefined ? {} : { username: profile.proxy.username },
+                    ...secrets.proxyPassword === undefined ? {} : { password: secrets.proxyPassword },
+                }, profile.connectTimeoutMs);
+            }
+            else if (profile.proxy.type === 'socks5') {
+                socket = await connectSocks5Proxy(profile.proxy.host, profile.proxy.port, profile.host, profile.port, {
+                    ...profile.proxy.username === undefined ? {} : { username: profile.proxy.username },
+                    ...secrets.proxyPassword === undefined ? {} : { password: secrets.proxyPassword },
+                }, profile.connectTimeoutMs);
+            }
+            else if (profile.proxy.type === 'jump') {
+                parent = await this.connectJumpChain(profile.proxy.profileIds, chain, signal);
+                socket = await forwardOut(parent.client, profile.host, profile.port);
+            }
+            const client = await connectClient(profile, secrets, socket, signal);
+            return new ManagedSshConnection(client, profile, parent);
+        }
+        catch (error) {
+            socket?.destroy();
+            parent?.close();
+            throw error;
+        }
+    }
+    async connectJumpChain(profileIds, chain, signal) {
+        let parent;
+        let visited = new Set(chain);
+        try {
+            for (const profileId of profileIds) {
+                signal?.throwIfAborted();
+                if (visited.has(profileId))
+                    throw new Error(`SSH jump proxy cycle detected at ${profileId}`);
+                if (parent === undefined) {
+                    parent = await this.connectRecursive(profileId, visited, signal);
+                }
+                else {
+                    const storedProfile = this.store.profile(profileId);
+                    if (storedProfile === undefined)
+                        throw Object.assign(new Error(`SSH profile ${profileId} was not found`), { status: 404 });
+                    const { profile, secrets } = await this.resolveIdentity(storedProfile);
+                    const socket = await forwardOut(parent.client, profile.host, profile.port);
+                    try {
+                        const client = await connectClient(profile, secrets, socket, signal);
+                        parent = new ManagedSshConnection(client, profile, parent);
+                    }
+                    catch (error) {
+                        socket.destroy();
+                        throw error;
+                    }
+                }
+                visited = new Set(visited).add(profileId);
+            }
+            if (parent === undefined)
+                throw new Error('SSH jump proxy chain is empty');
+            return parent;
+        }
+        catch (error) {
+            parent?.close();
+            throw error;
+        }
+    }
+    async resolveIdentity(profile) {
+        if (profile.credentialId === undefined)
+            return { profile, secrets: await this.credentials.read(profile.id) };
+        const entry = this.store.credentialEntry(profile.credentialId);
+        if (entry === undefined)
+            throw new Error(`SSH credential entry ${profile.credentialId} was not found`);
+        return {
+            profile: { ...profile, username: entry.username, authType: entry.authType },
+            secrets: await this.credentials.readEntry(entry.id),
+        };
+    }
+}
+export class ManagedSshConnection {
+    client;
+    profile;
+    parent;
+    closed = false;
+    constructor(client, profile, parent) {
+        this.client = client;
+        this.profile = profile;
+        this.parent = parent;
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.client.end();
+        this.parent?.close();
+    }
+}
+async function connectClient(profile, secrets, socket, signal) {
+    const config = {
+        host: profile.host,
+        port: profile.port,
+        username: profile.username,
+        readyTimeout: profile.connectTimeoutMs,
+        keepaliveInterval: profile.keepAliveIntervalMs,
+        keepaliveCountMax: 3,
+        hostHash: 'sha256',
+        ...socket === undefined ? {} : { sock: socket },
+    };
+    if (profile.authType === 'password') {
+        if (!secrets.password)
+            throw Object.assign(new Error('SSH password is not configured'), { code: 'CREDENTIAL_MISSING' });
+        config.password = secrets.password;
+    }
+    else if (profile.authType === 'private-key') {
+        if (!secrets.privateKey)
+            throw Object.assign(new Error('SSH private key is not configured'), { code: 'CREDENTIAL_MISSING' });
+        config.privateKey = secrets.privateKey;
+        if (secrets.passphrase)
+            config.passphrase = secrets.passphrase;
+    }
+    else {
+        const agent = process.env.SSH_AUTH_SOCK;
+        if (!agent)
+            throw Object.assign(new Error('SSH_AUTH_SOCK is not available in this DSH process'), { code: 'CREDENTIAL_MISSING' });
+        config.agent = agent;
+    }
+    let observedFingerprint;
+    config.hostVerifier = (fingerprint) => {
+        observedFingerprint = `SHA256:${fingerprint}`;
+        return profile.hostFingerprint !== undefined && timingSafeEqualText(profile.hostFingerprint, observedFingerprint);
+    };
+    const client = new ssh2.Client();
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const abort = () => { client.end(); finishReject(signal?.reason instanceof Error ? signal.reason : new Error('SSH connection was aborted')); };
+        const cleanup = () => {
+            signal?.removeEventListener('abort', abort);
+            client.off('ready', ready);
+            client.off('error', failed);
+        };
+        const finishReject = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            if (profile.hostFingerprint === undefined && observedFingerprint !== undefined)
+                reject(new HostKeyRequiredError(profile.id, observedFingerprint));
+            else
+                reject(error);
+        };
+        const ready = () => { if (settled)
+            return; settled = true; cleanup(); resolve(client); };
+        const failed = (error) => finishReject(error);
+        signal?.addEventListener('abort', abort, { once: true });
+        client.once('ready', ready);
+        client.once('error', failed);
+        try {
+            client.connect(config);
+        }
+        catch (error) {
+            finishReject(error instanceof Error ? error : new Error(String(error)));
+        }
+    });
+}
+function forwardOut(client, host, port) {
+    return new Promise((resolve, reject) => {
+        client.forwardOut('127.0.0.1', 0, host, port, (error, channel) => error ? reject(error) : resolve(channel));
+    });
+}
+function timingSafeEqualText(left, right) {
+    if (left.length !== right.length)
+        return false;
+    let mismatch = 0;
+    for (let index = 0; index < left.length; index += 1)
+        mismatch |= left.charCodeAt(index) ^ right.charCodeAt(index);
+    return mismatch === 0;
+}
+//# sourceMappingURL=connector.js.map

package/lib/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,IAA0E,MAAM,MAAM,CAAA;AAE7F,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAKjE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAExB;IAA4B;IADxC,IAAI,GAAG,mBAAmB,CAAA;IACnC,YAAqB,SAAiB,EAAW,WAAmB;QAClE,KAAK,CAAC,sCAAsC,SAAS,KAAK,WAAW,EAAE,CAAC,CAAA;QADrD,cAAS,GAAT,SAAS,CAAQ;QAAW,gBAAW,GAAX,WAAW,CAAQ;QAElE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACpC,CAAC;CACF;AAED,MAAM,OAAO,YAAY;IACM;IAAkC;IAA/D,YAA6B,KAAe,EAAmB,WAA+B;QAAjE,UAAK,GAAL,KAAK,CAAU;QAAmB,gBAAW,GAAX,WAAW,CAAoB;IAAG,CAAC;IAElG,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,MAAoB;QACnD,OAAO,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAmB,EAAE,OAA6B,EAAE,MAAoB;QACzF,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QAChH,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IAChG,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,KAAkB,EAAE,MAAoB;QACxF,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAA;QAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,aAAa,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,SAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC1H,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAA;QACtE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC/C,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAClE,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAmB,EAAE,OAA6B,EAAE,KAAkB,EAAE,MAAoB;QACxH,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,MAA0B,CAAA;QAC9B,IAAI,MAAwC,CAAA;QAC5C,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAClC,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;oBAClG,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;oBACnF,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE;iBAClF,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;YAC9B,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;oBACpG,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE;oBACnF,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE;iBAClF,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;YAC9B,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzC,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;gBAC7E,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;YACpE,OAAO,IAAI,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,OAAO,EAAE,CAAA;YACjB,MAAM,EAAE,KAAK,EAAE,CAAA;YACf,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,UAAoB,EAAE,KAAkB,EAAE,MAAoB;QAC3F,IAAI,MAAwC,CAAA;QAC5C,IAAI,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;QAC5B,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAA;gBAC5F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;gBAClE,CAAC;qBAAM,CAAC;oBACN,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;oBACnD,IAAI,aAAa,KAAK,SAAS;wBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,SAAS,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;oBAC1H,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,CAAA;oBACtE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;oBAC1E,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;wBACpE,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;oBAC5D,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,CAAC,OAAO,EAAE,CAAA;wBAChB,MAAM,KAAK,CAAA;oBACb,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YAC3C,CAAC;YACD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YAC1E,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,KAAK,EAAE,CAAA;YACf,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,OAAmB;QAC/C,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAA;QAC5G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9D,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,CAAC,YAAY,gBAAgB,CAAC,CAAA;QACtG,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;YAC3E,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;SACpD,CAAA;IACH,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IAEV;IAA4B;IAAsC;IAD/E,MAAM,GAAG,KAAK,CAAA;IACtB,YAAqB,MAAiB,EAAW,OAAmB,EAAmB,MAA6B;QAA/F,WAAM,GAAN,MAAM,CAAW;QAAW,YAAO,GAAP,OAAO,CAAY;QAAmB,WAAM,GAAN,MAAM,CAAuB;IAAG,CAAC;IACxH,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAM;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAA;QACjB,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAA;IACtB,CAAC;CACF;AAED,KAAK,UAAU,aAAa,CAC1B,OAAmB,EACnB,OAAwD,EACxD,MAA0B,EAC1B,MAAoB;IAEpB,MAAM,MAAM,GAAkB;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,gBAAgB;QACtC,iBAAiB,EAAE,OAAO,CAAC,mBAAmB;QAC9C,iBAAiB,EAAE,CAAC;QACpB,QAAQ,EAAE,QAAQ;QAClB,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;KAChD,CAAA;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAA;QACvH,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;IACpC,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,CAAC,UAAU;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAC5H,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QACtC,IAAI,OAAO,CAAC,UAAU;YAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,KAAK;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAChI,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;IACtB,CAAC;IACD,IAAI,mBAAuC,CAAA;IAC3C,MAAM,CAAC,YAAY,GAAG,CAAC,WAAmB,EAAE,EAAE;QAC5C,mBAAmB,GAAG,UAAU,WAAW,EAAE,CAAA;QAC7C,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,mBAAmB,CAAC,OAAO,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAA;IACnH,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAA;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAA,CAAC,CAAC,CAAA;QACnJ,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;YAC1B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC7B,CAAC,CAAA;QACD,MAAM,YAAY,GAAG,CAAC,KAAY,EAAQ,EAAE;YAC1C,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,OAAO,EAAE,CAAA;YACT,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,mBAAmB,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAA;;gBAC5I,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,GAAS,EAAE,GAAG,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA,CAAC,CAAC,CAAA;QAC7F,MAAM,MAAM,GAAG,CAAC,KAAY,EAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAC1D,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,IAAI,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAAC,CAAC;IAC1H,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAiB,EAAE,IAAY,EAAE,IAAY;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IAC7G,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACjH,OAAO,QAAQ,KAAK,CAAC,CAAA;AACvB,CAAC"}

package/lib/credentials.d.ts

@@ -0,0 +1,25 @@
+import { type CredentialProvider } from '@deepseek-ai/dsh-credentials';
+import { type SshCredentialPayload } from './domain.js';
+export declare class SshCredentialVault {
+    private readonly provider;
+    constructor(provider: CredentialProvider);
+    describe(profileId: string): Promise<{
+        configured: boolean;
+        writable: boolean;
+        fields: string[];
+    }>;
+    read(profileId: string): Promise<SshCredentialPayload>;
+    write(profileId: string, patch: SshCredentialPayload): Promise<void>;
+    replace(profileId: string, value: SshCredentialPayload): Promise<void>;
+    delete(profileId: string): Promise<void>;
+    describeEntry(entryId: string): Promise<{
+        configured: boolean;
+        writable: boolean;
+        fields: string[];
+    }>;
+    readEntry(entryId: string): Promise<SshCredentialPayload>;
+    writeEntry(entryId: string, patch: SshCredentialPayload): Promise<void>;
+    replaceEntry(entryId: string, value: SshCredentialPayload): Promise<void>;
+    deleteEntry(entryId: string): Promise<void>;
+}
+//# sourceMappingURL=credentials.d.ts.map

package/lib/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,kBAAkB,EAAoB,MAAM,8BAA8B,CAAA;AACvG,OAAO,EAAkB,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAKvE,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,kBAAkB;IAEnD,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAMlG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAOtD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAUpE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKtE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAMrG,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAOzD,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IASvE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzE,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGlD"}

package/lib/credentials.js

@@ -0,0 +1,84 @@
+import { credentialKey } from '@deepseek-ai/dsh-credentials';
+import { compactSecrets } from './domain.js';
+const SCOPE = 'dsh-ssh';
+const VAULT_SCOPE = 'dsh-ssh-vault';
+export class SshCredentialVault {
+    provider;
+    constructor(provider) {
+        this.provider = provider;
+    }
+    async describe(profileId) {
+        const info = await this.provider.describeRecord(credentialKey(SCOPE, profileId));
+        const payload = await this.read(profileId);
+        return { configured: info.configured, writable: info.writable, fields: Object.keys(payload) };
+    }
+    async read(profileId) {
+        const record = await this.provider.readRecord(credentialKey(SCOPE, profileId));
+        if (record === undefined)
+            return {};
+        if (record.kind !== 'grant')
+            throw new Error(`SSH credential ${profileId} has an incompatible record type`);
+        return parsePayload(record.payload);
+    }
+    async write(profileId, patch) {
+        const key = credentialKey(SCOPE, profileId);
+        await this.provider.modifyRecord(key, async (current) => {
+            if (current !== undefined && current.kind !== 'grant')
+                throw new Error(`SSH credential ${profileId} has an incompatible record type`);
+            const previous = current === undefined ? {} : parsePayload(current.payload);
+            const payload = compactSecrets({ ...previous, ...patch });
+            return { kind: 'grant', payload };
+        });
+    }
+    async replace(profileId, value) {
+        const payload = compactSecrets(value);
+        await this.provider.modifyRecord(credentialKey(SCOPE, profileId), async () => ({ kind: 'grant', payload }));
+    }
+    async delete(profileId) {
+        await this.provider.deleteRecord(credentialKey(SCOPE, profileId));
+    }
+    async describeEntry(entryId) {
+        const info = await this.provider.describeRecord(credentialKey(VAULT_SCOPE, entryId));
+        const payload = await this.readEntry(entryId);
+        return { configured: info.configured, writable: info.writable, fields: Object.keys(payload) };
+    }
+    async readEntry(entryId) {
+        const record = await this.provider.readRecord(credentialKey(VAULT_SCOPE, entryId));
+        if (record === undefined)
+            return {};
+        if (record.kind !== 'grant')
+            throw new Error(`SSH vault entry ${entryId} has an incompatible record type`);
+        return parsePayload(record.payload);
+    }
+    async writeEntry(entryId, patch) {
+        const key = credentialKey(VAULT_SCOPE, entryId);
+        await this.provider.modifyRecord(key, async (current) => {
+            if (current !== undefined && current.kind !== 'grant')
+                throw new Error(`SSH vault entry ${entryId} has an incompatible record type`);
+            const previous = current === undefined ? {} : parsePayload(current.payload);
+            return { kind: 'grant', payload: compactSecrets({ ...previous, ...patch }) };
+        });
+    }
+    async replaceEntry(entryId, value) {
+        await this.provider.modifyRecord(credentialKey(VAULT_SCOPE, entryId), async () => ({ kind: 'grant', payload: compactSecrets(value) }));
+    }
+    async deleteEntry(entryId) {
+        await this.provider.deleteRecord(credentialKey(VAULT_SCOPE, entryId));
+    }
+}
+function parsePayload(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new Error('stored SSH credential payload is invalid');
+    const input = value;
+    const result = {};
+    for (const field of ['password', 'privateKey', 'passphrase', 'proxyPassword']) {
+        const candidate = input[field];
+        if (candidate !== undefined) {
+            if (typeof candidate !== 'string' || candidate.length === 0)
+                throw new Error(`stored SSH credential field ${field} is invalid`);
+            result[field] = candidate;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=credentials.js.map

package/lib/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA6C,MAAM,8BAA8B,CAAA;AACvG,OAAO,EAAE,cAAc,EAA6B,MAAM,aAAa,CAAA;AAEvE,MAAM,KAAK,GAAG,SAAS,CAAA;AACvB,MAAM,WAAW,GAAG,eAAe,CAAA;AAEnC,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,QAA4B;QAA5B,aAAQ,GAAR,QAAQ,CAAoB;IAAG,CAAC;IAE7D,KAAK,CAAC,QAAQ,CAAC,SAAiB;QAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QAChF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1C,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;IAC/F,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QAC9E,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QACnC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,kCAAkC,CAAC,CAAA;QAC3G,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,KAA2B;QACxD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QAC3C,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACpD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,kCAAkC,CAAC,CAAA;YACrI,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;YACzD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAwB,CAAA;QACzD,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,KAA2B;QAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;QACrC,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IAC7G,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QACpF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QAC7C,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;IAC/F,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;QAClF,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QACnC,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,kCAAkC,CAAC,CAAA;QAC1G,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACrC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,KAA2B;QAC3D,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC/C,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,EAAC,OAAO,EAAC,EAAE;YACpD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,OAAO,kCAAkC,CAAC,CAAA;YACpI,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC3E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC,EAAwB,CAAA;QACpG,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,KAA2B;QAC7D,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;IACxI,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;IACvE,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IACpI,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,CAAU,EAAE,CAAC;QACvF,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,aAAa,CAAC,CAAA;YAC/H,MAAM,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/lib/directory.d.ts

@@ -0,0 +1,8 @@
+import { SshConnector } from './connector.js';
+import type { SessionInjection } from './domain.js';
+import { SshStore } from './store.js';
+export declare function sessionDirectory(injection: SessionInjection, profileId: string): string;
+export declare function resolveRemoteDirectory(connector: SshConnector, profileId: string, requested: string, signal?: AbortSignal): Promise<string>;
+export declare function setSessionDirectory(store: SshStore, connector: SshConnector, sessionId: string, profileId: string, requested: string, signal?: AbortSignal): Promise<string>;
+export declare function normalizeRemoteDirectory(value: unknown): string;
+//# sourceMappingURL=directory.d.ts.map

package/lib/directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.d.ts","sourceRoot":"","sources":["../src/directory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAKrC,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,YAAY,EACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CAejB;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,QAAQ,EACf,SAAS,EAAE,YAAY,EACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAO/D"}

package/lib/directory.js

@@ -0,0 +1,45 @@
+import { executeSshCommand } from './exec.js';
+const DIRECTORY_PROBE_TIMEOUT_MS = 10_000;
+const DIRECTORY_PROBE_OUTPUT_CHARS = 8_192;
+export function sessionDirectory(injection, profileId) {
+    return injection.workingDirectories[profileId] ?? '~';
+}
+export async function resolveRemoteDirectory(connector, profileId, requested, signal) {
+    const cwd = normalizeRemoteDirectory(requested);
+    const result = await executeSshCommand(connector, profileId, 'pwd -P', DIRECTORY_PROBE_TIMEOUT_MS, DIRECTORY_PROBE_OUTPUT_CHARS, signal, cwd);
+    if (result.exitCode !== 0)
+        throw directoryProbeError(result);
+    const resolved = result.stdout.trim().split(/\r?\n/).at(-1)?.trim();
+    if (!resolved?.startsWith('/'))
+        throw new Error('SSH directory did not resolve to an absolute path');
+    return normalizeRemoteDirectory(resolved);
+}
+export async function setSessionDirectory(store, connector, sessionId, profileId, requested, signal) {
+    const injection = store.injection(sessionId);
+    if (injection === undefined || !injection.profileIds.includes(profileId)) {
+        throw Object.assign(new Error('SSH profile is not injected into this DSH session'), { status: 403 });
+    }
+    const cwd = await resolveRemoteDirectory(connector, profileId, requested, signal);
+    await store.update(state => {
+        const current = state.injections.find(item => item.sessionId === sessionId);
+        if (current === undefined || !current.profileIds.includes(profileId))
+            throw new Error('SSH session injection changed while resolving the directory');
+        current.workingDirectories[profileId] = cwd;
+        current.updatedAt = Date.now();
+    });
+    return cwd;
+}
+export function normalizeRemoteDirectory(value) {
+    if (typeof value !== 'string')
+        throw Object.assign(new Error('cwd must be a string'), { status: 400 });
+    const cwd = value.trim();
+    if (cwd.length === 0 || cwd.length > 4096 || /[\0\r\n]/.test(cwd)) {
+        throw Object.assign(new Error('cwd must contain 1-4096 characters without line breaks'), { status: 400 });
+    }
+    return cwd;
+}
+function directoryProbeError(result) {
+    const detail = result.stderr.trim() || result.stdout.trim() || `exit ${String(result.exitCode)}`;
+    return Object.assign(new Error(`Cannot use SSH directory: ${detail}`), { status: 400 });
+}
+//# sourceMappingURL=directory.js.map

package/lib/directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.js","sourceRoot":"","sources":["../src/directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAmB,MAAM,WAAW,CAAA;AAK9D,MAAM,0BAA0B,GAAG,MAAM,CAAA;AACzC,MAAM,4BAA4B,GAAG,KAAK,CAAA;AAE1C,MAAM,UAAU,gBAAgB,CAAC,SAA2B,EAAE,SAAiB;IAC7E,OAAO,SAAS,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,GAAG,CAAA;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAuB,EACvB,SAAiB,EACjB,SAAiB,EACjB,MAAoB;IAEpB,MAAM,GAAG,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAA;IAC/C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,SAAS,EACT,SAAS,EACT,QAAQ,EACR,0BAA0B,EAC1B,4BAA4B,EAC5B,MAAM,EACN,GAAG,CACJ,CAAA;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IACnE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACpG,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAA;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAe,EACf,SAAuB,EACvB,SAAiB,EACjB,SAAiB,EACjB,SAAiB,EACjB,MAAoB;IAEpB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IAC5C,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,sBAAsB,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IACjF,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;QAC3E,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QACpJ,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,GAAG,CAAA;QAC3C,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAChC,CAAC,CAAC,CAAA;IACF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACtG,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACxB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wDAAwD,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IAC3G,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAkB;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAA;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;AACzF,CAAC"}

package/lib/domain.d.ts

@@ -0,0 +1,121 @@
+export type SshAuthType = 'password' | 'private-key' | 'agent';
+export type ProxyConfig = {
+    type: 'none';
+} | {
+    type: 'http';
+    host: string;
+    port: number;
+    username?: string;
+} | {
+    type: 'socks5';
+    host: string;
+    port: number;
+    username?: string;
+} | {
+    type: 'jump';
+    profileIds: string[];
+};
+export interface SshProfile {
+    id: string;
+    name: string;
+    group?: string;
+    host: string;
+    port: number;
+    username: string;
+    authType: SshAuthType;
+    credentialId?: string;
+    hostFingerprint?: string;
+    proxy: ProxyConfig;
+    keepAliveIntervalMs: number;
+    connectTimeoutMs: number;
+    terminalType: string;
+    tags: string[];
+    createdAt: number;
+    updatedAt: number;
+}
+export interface CredentialEntry {
+    id: string;
+    name: string;
+    username: string;
+    authType: Exclude<SshAuthType, 'agent'>;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface SshCredentialPayload {
+    password?: string;
+    privateKey?: string;
+    passphrase?: string;
+    proxyPassword?: string;
+}
+export type ForwardKind = 'local' | 'remote' | 'dynamic';
+export interface ForwardRule {
+    id: string;
+    profileId: string;
+    name: string;
+    kind: ForwardKind;
+    bindHost: string;
+    bindPort: number;
+    targetHost?: string;
+    targetPort?: number;
+    autoStart: boolean;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface SessionInjection {
+    sessionId: string;
+    profileIds: string[];
+    permission: 'exec' | 'terminal';
+    requireCommandApproval: boolean;
+    workingDirectories: Record<string, string>;
+    updatedAt: number;
+}
+export interface SshSettings {
+    allowPublicBind: boolean;
+    defaultCommandTimeoutMs: number;
+    maxOutputChars: number;
+}
+export interface SshState {
+    schemaVersion: 1;
+    profiles: SshProfile[];
+    credentialEntries: CredentialEntry[];
+    forwardRules: ForwardRule[];
+    injections: SessionInjection[];
+    settings: SshSettings;
+}
+export interface ProfileDraft {
+    name: string;
+    group?: string;
+    host: string;
+    port?: number;
+    username: string;
+    authType: SshAuthType;
+    credentialId?: string;
+    hostFingerprint?: string;
+    proxy?: ProxyConfig;
+    keepAliveIntervalMs?: number;
+    connectTimeoutMs?: number;
+    terminalType?: string;
+    tags?: string[];
+}
+export interface CredentialEntryDraft {
+    name: string;
+    username: string;
+    authType: Exclude<SshAuthType, 'agent'>;
+}
+export interface ForwardDraft {
+    profileId: string;
+    name: string;
+    kind: ForwardKind;
+    bindHost?: string;
+    bindPort: number;
+    targetHost?: string;
+    targetPort?: number;
+    autoStart?: boolean;
+}
+export declare function normalizeProfileDraft(value: unknown): ProfileDraft;
+export declare function normalizeCredentialEntryDraft(value: unknown): CredentialEntryDraft;
+export declare function normalizeForwardDraft(value: unknown): ForwardDraft;
+export declare function normalizeSecrets(value: unknown): SshCredentialPayload;
+export declare function compactSecrets(value: SshCredentialPayload): SshCredentialPayload;
+export declare function isLoopbackHost(host: string): boolean;
+//# sourceMappingURL=domain.d.ts.map

package/lib/domain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domain.d.ts","sourceRoot":"","sources":["../src/domain.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,OAAO,CAAA;AAC9D,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE1C,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,WAAW,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,WAAW,CAAA;IAClB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,gBAAgB,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;IACvC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;AAExD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAA;IAC/B,sBAAsB,EAAE,OAAO,CAAA;IAC/B,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC1C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,OAAO,CAAA;IACxB,uBAAuB,EAAE,MAAM,CAAA;IAC/B,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,aAAa,EAAE,CAAC,CAAA;IAChB,QAAQ,EAAE,UAAU,EAAE,CAAA;IACtB,iBAAiB,EAAE,eAAe,EAAE,CAAA;IACpC,YAAY,EAAE,WAAW,EAAE,CAAA;IAC3B,UAAU,EAAE,gBAAgB,EAAE,CAAA;IAC9B,QAAQ,EAAE,WAAW,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,WAAW,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAoBlE;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAQlF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CAiBlE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAYrE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAEhF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGpD"}