@remnawave/backend-contract 3.4.5 → 3.4.6

package/build/backend/api/controllers/index.d.ts

@@ -12,6 +12,7 @@ export * from './keygen';
 export * from './metadata';
 export * from './node-integrations';
 export * from './node-plugins';
+export * from './node-ssh';
 export * from './nodes';
 export * from './passkeys';
 export * from './remnawave-settings';

package/build/backend/api/controllers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../api/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../api/controllers/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/build/backend/api/controllers/index.js

@@ -28,6 +28,7 @@ __exportStar(require("./keygen"), exports);
 __exportStar(require("./metadata"), exports);
 __exportStar(require("./node-integrations"), exports);
 __exportStar(require("./node-plugins"), exports);
+__exportStar(require("./node-ssh"), exports);
 __exportStar(require("./nodes"), exports);
 __exportStar(require("./passkeys"), exports);
 __exportStar(require("./remnawave-settings"), exports);

package/build/backend/api/controllers/node-ssh.d.ts

@@ -0,0 +1,6 @@
+export declare const NODE_SSH_CONTROLLER: "node-ssh";
+export declare const NODE_SSH_ROUTES: {
+    readonly CREATE_TICKET: (uuid: string) => string;
+    readonly EVALUATE_VAULT: "vault/evaluate";
+};
+//# sourceMappingURL=node-ssh.d.ts.map

package/build/backend/api/controllers/node-ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-ssh.d.ts","sourceRoot":"","sources":["../../../../api/controllers/node-ssh.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,EAAG,UAAmB,CAAC;AAEvD,eAAO,MAAM,eAAe;mCACF,MAAM;;CAEtB,CAAC"}

package/build/backend/api/controllers/node-ssh.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NODE_SSH_ROUTES = exports.NODE_SSH_CONTROLLER = void 0;
+exports.NODE_SSH_CONTROLLER = 'node-ssh';
+exports.NODE_SSH_ROUTES = {
+    CREATE_TICKET: (uuid) => `${uuid}/ticket`, // post
+    EVALUATE_VAULT: 'vault/evaluate', // post
+};

package/build/backend/api/controllers-info.d.ts

@@ -34,6 +34,11 @@ export declare const CONTROLLERS_INFO: {
         readonly description: "";
         readonly resource: "node-plugins";
     };
+    readonly NODE_SSH: {
+        readonly tag: "Node SSH Controller";
+        readonly description: "";
+        readonly resource: "node-ssh";
+    };
     readonly NODE_INTEGRATIONS: {
         readonly tag: "Node Integrations Controller";
         readonly description: "Management of Node Integrations.";

package/build/backend/api/controllers-info.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controllers-info.d.ts","sourceRoot":"","sources":["../../../api/controllers-info.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgJnB,CAAC"}
+{"version":3,"file":"controllers-info.d.ts","sourceRoot":"","sources":["../../../api/controllers-info.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqJnB,CAAC"}

package/build/backend/api/controllers-info.js

@@ -37,6 +37,11 @@ exports.CONTROLLERS_INFO = {
         description: '',
         resource: 'node-plugins',
     },
+    NODE_SSH: {
+        tag: 'Node SSH Controller',
+        description: '',
+        resource: 'node-ssh',
+    },
     NODE_INTEGRATIONS: {
         tag: 'Node Integrations Controller',
         description: 'Management of Node Integrations.',

package/build/backend/api/routes.d.ts

@@ -271,6 +271,10 @@ export declare const REST_API: {
         readonly DELETE: (uuid: string) => string;
         readonly CREATE: "/api/node-integrations/";
     };
+    readonly NODE_SSH: {
+        readonly CREATE_TICKET: (uuid: string) => string;
+        readonly EVALUATE_VAULT: "/api/node-ssh/vault/evaluate";
+    };
     readonly NODE_PLUGINS: {
         readonly GET: (uuid: string) => string;
         readonly GET_ALL: "/api/node-plugins/";

package/build/backend/api/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../api/routes.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,IAAI,EAAG,MAAe,CAAC;AACpC,eAAO,MAAM,YAAY,EAAG,UAAmB,CAAC;AAChD,eAAO,MAAM,WAAW,EAAG,SAAkB,CAAC;AAE9C,eAAO,MAAM,kBAAkB,EAAG,gBAAyB,CAAC;AAC5D,eAAO,MAAM,cAAc,EAAG,uBAAgC,CAAC;AAC/D,eAAO,MAAM,YAAY,EAAG,wBAAiC,CAAC;AAC9D,eAAO,MAAM,WAAW,EAAG,uBAAgC,CAAC;AAE5D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;gCAyBE,MAAM;;;;;;;;;;;qCAcD,MAAM;;gCAGX,MAAM;;;;;oCAOF,MAAM;qCAIL,MAAM;qCAIN,MAAM;;2CAKA,MAAM;;;;;;;;;;;;;;kCAkBf,MAAM;qCAGH,MAAM;4CAEC,MAAM;wDAEM,MAAM;;uCAMvB,MAAM;sCAIP,MAAM;6CAIC,MAAM;mDAIA,MAAM;sDAIH,MAAM;;;6CAMf,MAAM;0CAIT,MAAM;;;;;;;;;;;;;;;;;;;;;;kCAyBd,MAAM;uCAED,MAAM;;;;;;qCASR,MAAM;gCAEX,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAsCT,MAAM;;gCAKH,MAAM;;;;;;;;;;;;;;iDAiBW,MAAM;;;;;;;;;0CAYb,MAAM;6CAIH,MAAM;iDAIF,MAAM;kCAIrB,MAAM;;;6CAMK,MAAM;;0DAKO,MAAM;;;;;;qCAS3B,MAAM;gCAIX,MAAM;sDAIgB,MAAM;6DAIC,MAAM;;;;;;;;;;qCAa9B,MAAM;gCAIX,MAAM;0CAII,MAAM;;uCAKT,MAAM;0CAEH,MAAM;4CAEJ,MAAM;+CAEH,MAAM;;;;;;;;;;yCAWZ,MAAM;8CAED,MAAM;;;;6CAMP,MAAM;;;gDAKH,MAAM;;;;;;;;;;;;;;;;;;;qCAqBjB,MAAM;gCAIX,MAAM;;uCAKC,MAAM;0CAEH,MAAM;;;;;;;;;;;6BAYnB,MAAM;;;gCAIH,MAAM;;;;;;;;6BAST,MAAM;;;gCAIH,MAAM;;;;6BAKT,MAAM;;;gCAIH,MAAM;;;;;;;;;;iCAWL,MAAM;;;oCAIH,MAAM;;;;;;;;;;;;;;;uCAiBH,MAAM;;;;;yCAMJ,MAAM;;;uCAIR,MAAM;6CAEA,MAAM,UAAU,MAAM;;;;+CAKpB,MAAM;qDAEA,MAAM;6CAEd,MAAM;qDAEE,MAAM;0CAEjB,MAAM;kDAEE,MAAM;;;;;iCAMvB,MAAM;oCAEH,MAAM;;;mCAIP,MAAM;sCAEH,MAAM;;;CAIzB,CAAC"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../api/routes.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,IAAI,EAAG,MAAe,CAAC;AACpC,eAAO,MAAM,YAAY,EAAG,UAAmB,CAAC;AAChD,eAAO,MAAM,WAAW,EAAG,SAAkB,CAAC;AAE9C,eAAO,MAAM,kBAAkB,EAAG,gBAAyB,CAAC;AAC5D,eAAO,MAAM,cAAc,EAAG,uBAAgC,CAAC;AAC/D,eAAO,MAAM,YAAY,EAAG,wBAAiC,CAAC;AAC9D,eAAO,MAAM,WAAW,EAAG,uBAAgC,CAAC;AAE5D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;gCAyBE,MAAM;;;;;;;;;;;qCAcD,MAAM;;gCAGX,MAAM;;;;;oCAOF,MAAM;qCAIL,MAAM;qCAIN,MAAM;;2CAKA,MAAM;;;;;;;;;;;;;;kCAkBf,MAAM;qCAGH,MAAM;4CAEC,MAAM;wDAEM,MAAM;;uCAMvB,MAAM;sCAIP,MAAM;6CAIC,MAAM;mDAIA,MAAM;sDAIH,MAAM;;;6CAMf,MAAM;0CAIT,MAAM;;;;;;;;;;;;;;;;;;;;;;kCAyBd,MAAM;uCAED,MAAM;;;;;;qCASR,MAAM;gCAEX,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAsCT,MAAM;;gCAKH,MAAM;;;;;;;;;;;;;;iDAiBW,MAAM;;;;;;;;;0CAYb,MAAM;6CAIH,MAAM;iDAIF,MAAM;kCAIrB,MAAM;;;6CAMK,MAAM;;0DAKO,MAAM;;;;;;qCAS3B,MAAM;gCAIX,MAAM;sDAIgB,MAAM;6DAIC,MAAM;;;;;;;;;;qCAa9B,MAAM;gCAIX,MAAM;0CAII,MAAM;;uCAKT,MAAM;0CAEH,MAAM;4CAEJ,MAAM;+CAEH,MAAM;;;;;;;;;;yCAWZ,MAAM;8CAED,MAAM;;;;6CAMP,MAAM;;;gDAKH,MAAM;;;;;;;;;;;;;;;;;;;qCAqBjB,MAAM;gCAIX,MAAM;;uCAKC,MAAM;0CAEH,MAAM;;;;;;;;;;;6BAYnB,MAAM;;;gCAIH,MAAM;;;;;;;;6BAST,MAAM;;;gCAIH,MAAM;;;;uCAKC,MAAM;;;;6BAKhB,MAAM;;;gCAIH,MAAM;;;;;;;;;;iCAWL,MAAM;;;oCAIH,MAAM;;;;;;;;;;;;;;;uCAiBH,MAAM;;;;;yCAMJ,MAAM;;;uCAIR,MAAM;6CAEA,MAAM,UAAU,MAAM;;;;+CAKpB,MAAM;qDAEA,MAAM;6CAEd,MAAM;qDAEE,MAAM;0CAEjB,MAAM;kDAEE,MAAM;;;;;iCAMvB,MAAM;oCAEH,MAAM;;;mCAIP,MAAM;sCAEH,MAAM;;;CAIzB,CAAC"}

package/build/backend/api/routes.js

@@ -308,6 +308,10 @@ exports.REST_API = {
         DELETE: (uuid) => `${exports.ROOT}/${CONTROLLERS.NODE_INTEGRATIONS_CONTROLLER}/${CONTROLLERS.NODE_INTEGRATIONS_ROUTES.DELETE(uuid)}`,
         CREATE: `${exports.ROOT}/${CONTROLLERS.NODE_INTEGRATIONS_CONTROLLER}/${CONTROLLERS.NODE_INTEGRATIONS_ROUTES.CREATE}`,
     },
+    NODE_SSH: {
+        CREATE_TICKET: (uuid) => `${exports.ROOT}/${CONTROLLERS.NODE_SSH_CONTROLLER}/${CONTROLLERS.NODE_SSH_ROUTES.CREATE_TICKET(uuid)}`,
+        EVALUATE_VAULT: `${exports.ROOT}/${CONTROLLERS.NODE_SSH_CONTROLLER}/${CONTROLLERS.NODE_SSH_ROUTES.EVALUATE_VAULT}`,
+    },
     NODE_PLUGINS: {
         GET: (uuid) => `${exports.ROOT}/${CONTROLLERS.NODE_PLUGINS_CONTROLLER}/${CONTROLLERS.NODE_PLUGINS_ROUTES.GET(uuid)}`,
         GET_ALL: `${exports.ROOT}/${CONTROLLERS.NODE_PLUGINS_CONTROLLER}/${CONTROLLERS.NODE_PLUGINS_ROUTES.GET_ALL}`,

package/build/backend/commands/index.d.ts

@@ -12,6 +12,7 @@ export * from './keygen';
 export * from './metadata';
 export * from './node-integrations';
 export * from './node-plugins';
+export * from './node-ssh';
 export * from './nodes';
 export * from './passkeys';
 export * from './remnawave-settings';

package/build/backend/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../commands/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../commands/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,QAAQ,CAAC;AACvB,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,UAAU,CAAC;AACzB,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,UAAU,CAAC;AACzB,cAAc,SAAS,CAAC"}

package/build/backend/commands/index.js

@@ -28,6 +28,7 @@ __exportStar(require("./keygen"), exports);
 __exportStar(require("./metadata"), exports);
 __exportStar(require("./node-integrations"), exports);
 __exportStar(require("./node-plugins"), exports);
+__exportStar(require("./node-ssh"), exports);
 __exportStar(require("./nodes"), exports);
 __exportStar(require("./passkeys"), exports);
 __exportStar(require("./remnawave-settings"), exports);

package/build/backend/commands/node-ssh/create-ssh-ticket.command.d.ts

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+export declare namespace CreateSshTicketCommand {
+    const url: (uuid: string) => string;
+    const TSQ_url: string;
+    const endpointDetails: import("../../constants").EndpointDetails;
+    const RequestParamSchema: z.ZodObject<{
+        uuid: z.ZodUUID;
+    }, z.core.$strip>;
+    const ResponseSchema: z.ZodObject<{
+        response: z.ZodObject<{
+            ticket: z.ZodString;
+            path: z.ZodString;
+            expiresInSeconds: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    type RequestParam = z.infer<typeof RequestParamSchema>;
+    type Response = z.infer<typeof ResponseSchema>;
+}
+//# sourceMappingURL=create-ssh-ticket.command.d.ts.map

package/build/backend/commands/node-ssh/create-ssh-ticket.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-ssh-ticket.command.d.ts","sourceRoot":"","sources":["../../../../commands/node-ssh/create-ssh-ticket.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,yBAAiB,sBAAsB,CAAC;IAC7B,MAAM,GAAG,0BAAkC,CAAC;IAC5C,MAAM,OAAO,QAAe,CAAC;IAE7B,MAAM,eAAe,2CAK3B,CAAC;IAEK,MAAM,kBAAkB;;qBAE7B,CAAC;IAEI,MAAM,cAAc;;;;;;qBAMzB,CAAC;IAEH,KAAY,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAC9D,KAAY,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;CACzD"}

package/build/backend/commands/node-ssh/create-ssh-ticket.command.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateSshTicketCommand = void 0;
+const zod_1 = require("zod");
+const api_1 = require("../../api");
+const constants_1 = require("../../constants");
+var CreateSshTicketCommand;
+(function (CreateSshTicketCommand) {
+    CreateSshTicketCommand.url = api_1.REST_API.NODE_SSH.CREATE_TICKET;
+    CreateSshTicketCommand.TSQ_url = CreateSshTicketCommand.url(':uuid');
+    CreateSshTicketCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.NODE_SSH_ROUTES.CREATE_TICKET(':uuid'), 'post', 'Create a single-use ticket for opening an SSH terminal session', { scope: 'node-ssh', kind: 'write' });
+    CreateSshTicketCommand.RequestParamSchema = zod_1.z.object({
+        uuid: zod_1.z.uuid().describe('Node UUID'),
+    });
+    CreateSshTicketCommand.ResponseSchema = zod_1.z.object({
+        response: zod_1.z.object({
+            ticket: zod_1.z.string(),
+            path: zod_1.z.string(),
+            expiresInSeconds: zod_1.z.number(),
+        }),
+    });
+})(CreateSshTicketCommand || (exports.CreateSshTicketCommand = CreateSshTicketCommand = {}));

package/build/backend/commands/node-ssh/evaluate-vault.command.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+export declare namespace EvaluateVaultCommand {
+    const url: "/api/node-ssh/vault/evaluate";
+    const TSQ_url: "/api/node-ssh/vault/evaluate";
+    const endpointDetails: import("../../constants").EndpointDetails;
+    const RequestBodySchema: z.ZodObject<{
+        blinded: z.ZodBase64;
+    }, z.core.$strip>;
+    const ResponseSchema: z.ZodObject<{
+        response: z.ZodObject<{
+            evaluated: z.ZodBase64;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    type RequestBody = z.infer<typeof RequestBodySchema>;
+    type Response = z.infer<typeof ResponseSchema>;
+}
+//# sourceMappingURL=evaluate-vault.command.d.ts.map

package/build/backend/commands/node-ssh/evaluate-vault.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluate-vault.command.d.ts","sourceRoot":"","sources":["../../../../commands/node-ssh/evaluate-vault.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,yBAAiB,oBAAoB,CAAC;IAC3B,MAAM,GAAG,gCAAmC,CAAC;IAC7C,MAAM,OAAO,gCAAM,CAAC;IAEpB,MAAM,eAAe,2CAK3B,CAAC;IAEK,MAAM,iBAAiB;;qBAE5B,CAAC;IAEI,MAAM,cAAc;;;;qBAIzB,CAAC;IAEH,KAAY,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;IAC5D,KAAY,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;CACzD"}

package/build/backend/commands/node-ssh/evaluate-vault.command.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvaluateVaultCommand = void 0;
+const zod_1 = require("zod");
+const api_1 = require("../../api");
+const constants_1 = require("../../constants");
+var EvaluateVaultCommand;
+(function (EvaluateVaultCommand) {
+    EvaluateVaultCommand.url = api_1.REST_API.NODE_SSH.EVALUATE_VAULT;
+    EvaluateVaultCommand.TSQ_url = EvaluateVaultCommand.url;
+    EvaluateVaultCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.NODE_SSH_ROUTES.EVALUATE_VAULT, 'post', 'Oblivious evaluation step for unlocking the SSH key vault', { scope: 'node-ssh', kind: 'write' });
+    EvaluateVaultCommand.RequestBodySchema = zod_1.z.object({
+        blinded: zod_1.z.base64().max(128),
+    });
+    EvaluateVaultCommand.ResponseSchema = zod_1.z.object({
+        response: zod_1.z.object({
+            evaluated: zod_1.z.base64(),
+        }),
+    });
+})(EvaluateVaultCommand || (exports.EvaluateVaultCommand = EvaluateVaultCommand = {}));

package/build/backend/commands/node-ssh/index.d.ts

@@ -0,0 +1,3 @@
+export * from './create-ssh-ticket.command';
+export * from './evaluate-vault.command';
+//# sourceMappingURL=index.d.ts.map

package/build/backend/commands/node-ssh/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../commands/node-ssh/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,0BAA0B,CAAC"}

package/build/backend/commands/node-ssh/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./create-ssh-ticket.command"), exports);
+__exportStar(require("./evaluate-vault.command"), exports);

package/build/backend/constants/errors/errors.d.ts

@@ -1299,5 +1299,15 @@ export declare const ERRORS: {
             httpCode: number;
         };
     };
+    readonly EVALUATE_VAULT_ERROR: {
+        readonly code: "A255";
+        readonly message: "Vault evaluation refused";
+        readonly httpCode: 429;
+    };
+    readonly CREATE_SSH_TICKET_ERROR: {
+        readonly code: "A254";
+        readonly message: "Create SSH ticket error";
+        readonly httpCode: 500;
+    };
 };
 //# sourceMappingURL=errors.d.ts.map

package/build/backend/constants/errors/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../constants/errors/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAwJY,MAAM;;;;;;;;;;wCAUN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA4IN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAsqBN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA6HN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAkDN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA8GN,MAAM;;;;;;CAM3B,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../constants/errors/errors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAwJY,MAAM;;;;;;;;;;wCAUN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA4IN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAsqBN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA6HN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAkDN,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCA8GN,MAAM;;;;;;;;;;;;;;;;CAgB3B,CAAC"}

package/build/backend/constants/errors/errors.js

@@ -1270,4 +1270,14 @@ exports.ERRORS = {
             httpCode: 400,
         }),
     },
+    EVALUATE_VAULT_ERROR: {
+        code: 'A255',
+        message: 'Vault evaluation refused',
+        httpCode: 429,
+    },
+    CREATE_SSH_TICKET_ERROR: {
+        code: 'A254',
+        message: 'Create SSH ticket error',
+        httpCode: 500,
+    },
 };

package/build/backend/models/index.d.ts

@@ -39,4 +39,5 @@ export * from './webhook';
 export * from './xray-json-advanced';
 export * from './path-params.schema';
 export * from './host-mapper';
+export * from './ssh-terminal.schema';
 //# sourceMappingURL=index.d.ts.map

package/build/backend/models/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../models/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uCAAuC,CAAC;AACtD,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../models/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,eAAe,CAAC;AAC9B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oBAAoB,CAAC;AACnC,cAAc,kCAAkC,CAAC;AACjD,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uCAAuC,CAAC;AACtD,cAAc,uCAAuC,CAAC;AACtD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,yBAAyB,CAAC;AACxC,cAAc,yBAAyB,CAAC;AACxC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kCAAkC,CAAC;AACjD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uCAAuC,CAAC;AACtD,cAAc,yBAAyB,CAAC;AACxC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kBAAkB,CAAC;AACjC,cAAc,iCAAiC,CAAC;AAChD,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,sBAAsB,CAAC;AACrC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC"}

package/build/backend/models/index.js

@@ -55,3 +55,4 @@ __exportStar(require("./webhook"), exports);
 __exportStar(require("./xray-json-advanced"), exports);
 __exportStar(require("./path-params.schema"), exports);
 __exportStar(require("./host-mapper"), exports);
+__exportStar(require("./ssh-terminal.schema"), exports);

package/build/backend/models/ssh-terminal.schema.d.ts

@@ -0,0 +1,95 @@
+import { z } from 'zod';
+export declare const SSH_TERMINAL_WS_PATH = "/api/node-ssh/ws";
+export declare const SSH_TERMINAL_WS_PROTOCOL = "rw";
+export declare const SshOpenMessageSchema: z.ZodObject<{
+    t: z.ZodLiteral<"open">;
+    host: z.ZodString;
+    port: z.ZodNumber;
+    username: z.ZodString;
+    cols: z.ZodNumber;
+    rows: z.ZodNumber;
+}, z.core.$strip>;
+export declare const SshResizeMessageSchema: z.ZodObject<{
+    t: z.ZodLiteral<"resize">;
+    cols: z.ZodNumber;
+    rows: z.ZodNumber;
+}, z.core.$strip>;
+export declare const SshIdentitiesReplySchema: z.ZodObject<{
+    t: z.ZodLiteral<"identities">;
+    id: z.ZodNumber;
+    keys: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export declare const SshSignReplySchema: z.ZodObject<{
+    t: z.ZodLiteral<"sign">;
+    id: z.ZodNumber;
+    signature: z.ZodBase64;
+}, z.core.$strip>;
+export declare const SshHostKeyReplySchema: z.ZodObject<{
+    t: z.ZodLiteral<"hostkey">;
+    id: z.ZodNumber;
+    accept: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const SshClientErrorSchema: z.ZodObject<{
+    t: z.ZodLiteral<"error">;
+    id: z.ZodNumber;
+    message: z.ZodString;
+}, z.core.$strip>;
+/** Browser -> panel. */
+export declare const SshClientMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    t: z.ZodLiteral<"open">;
+    host: z.ZodString;
+    port: z.ZodNumber;
+    username: z.ZodString;
+    cols: z.ZodNumber;
+    rows: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"resize">;
+    cols: z.ZodNumber;
+    rows: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"identities">;
+    id: z.ZodNumber;
+    keys: z.ZodArray<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"sign">;
+    id: z.ZodNumber;
+    signature: z.ZodBase64;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"hostkey">;
+    id: z.ZodNumber;
+    accept: z.ZodBoolean;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"error">;
+    id: z.ZodNumber;
+    message: z.ZodString;
+}, z.core.$strip>], "t">;
+/** Panel -> browser. */
+export declare const SshServerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    t: z.ZodLiteral<"agent-identities">;
+    id: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"agent-sign">;
+    id: z.ZodNumber;
+    publicKey: z.ZodBase64;
+    data: z.ZodBase64;
+    hash: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"hostkey">;
+    id: z.ZodNumber;
+    algo: z.ZodString;
+    fingerprint: z.ZodString;
+    key: z.ZodBase64;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"ready">;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"exit">;
+    code: z.ZodNullable<z.ZodNumber>;
+    signal: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"error">;
+    message: z.ZodString;
+}, z.core.$strip>], "t">;
+export type TSshOpenMessage = z.infer<typeof SshOpenMessageSchema>;
+export type TSshClientMessage = z.infer<typeof SshClientMessageSchema>;
+export type TSshServerMessage = z.infer<typeof SshServerMessageSchema>;
+//# sourceMappingURL=ssh-terminal.schema.d.ts.map

package/build/backend/models/ssh-terminal.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-terminal.schema.d.ts","sourceRoot":"","sources":["../../../models/ssh-terminal.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AAEvD,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAI7C,eAAO,MAAM,oBAAoB;;;;;;;iBAO/B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH,wBAAwB;AACxB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAOjC,CAAC;AAEH,wBAAwB;AACxB,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;wBAuBjC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACnE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACvE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/build/backend/models/ssh-terminal.schema.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SshServerMessageSchema = exports.SshClientMessageSchema = exports.SshClientErrorSchema = exports.SshHostKeyReplySchema = exports.SshSignReplySchema = exports.SshIdentitiesReplySchema = exports.SshResizeMessageSchema = exports.SshOpenMessageSchema = exports.SSH_TERMINAL_WS_PROTOCOL = exports.SSH_TERMINAL_WS_PATH = void 0;
+const zod_1 = require("zod");
+exports.SSH_TERMINAL_WS_PATH = '/api/node-ssh/ws';
+exports.SSH_TERMINAL_WS_PROTOCOL = 'rw';
+const requestId = zod_1.z.number().int().nonnegative();
+exports.SshOpenMessageSchema = zod_1.z.object({
+    t: zod_1.z.literal('open'),
+    host: zod_1.z.string().min(1).max(253),
+    port: zod_1.z.number().int().min(1).max(65535),
+    username: zod_1.z.string().min(1).max(64),
+    cols: zod_1.z.number().int().min(1).max(1000),
+    rows: zod_1.z.number().int().min(1).max(1000),
+});
+exports.SshResizeMessageSchema = zod_1.z.object({
+    t: zod_1.z.literal('resize'),
+    cols: zod_1.z.number().int().min(1).max(1000),
+    rows: zod_1.z.number().int().min(1).max(1000),
+});
+exports.SshIdentitiesReplySchema = zod_1.z.object({
+    t: zod_1.z.literal('identities'),
+    id: requestId,
+    keys: zod_1.z.array(zod_1.z.string().min(1).max(4096)).max(16),
+});
+exports.SshSignReplySchema = zod_1.z.object({
+    t: zod_1.z.literal('sign'),
+    id: requestId,
+    signature: zod_1.z.base64().max(2048),
+});
+exports.SshHostKeyReplySchema = zod_1.z.object({
+    t: zod_1.z.literal('hostkey'),
+    id: requestId,
+    accept: zod_1.z.boolean(),
+});
+exports.SshClientErrorSchema = zod_1.z.object({
+    t: zod_1.z.literal('error'),
+    id: requestId,
+    message: zod_1.z.string().max(500),
+});
+/** Browser -> panel. */
+exports.SshClientMessageSchema = zod_1.z.discriminatedUnion('t', [
+    exports.SshOpenMessageSchema,
+    exports.SshResizeMessageSchema,
+    exports.SshIdentitiesReplySchema,
+    exports.SshSignReplySchema,
+    exports.SshHostKeyReplySchema,
+    exports.SshClientErrorSchema,
+]);
+/** Panel -> browser. */
+exports.SshServerMessageSchema = zod_1.z.discriminatedUnion('t', [
+    zod_1.z.object({ t: zod_1.z.literal('agent-identities'), id: requestId }),
+    zod_1.z.object({
+        t: zod_1.z.literal('agent-sign'),
+        id: requestId,
+        publicKey: zod_1.z.base64().max(4096),
+        data: zod_1.z.base64().max(8192),
+        hash: zod_1.z.string().max(16).nullable(),
+    }),
+    zod_1.z.object({
+        t: zod_1.z.literal('hostkey'),
+        id: requestId,
+        algo: zod_1.z.string().max(64),
+        fingerprint: zod_1.z.string().max(128),
+        key: zod_1.z.base64().max(4096),
+    }),
+    zod_1.z.object({ t: zod_1.z.literal('ready') }),
+    zod_1.z.object({
+        t: zod_1.z.literal('exit'),
+        code: zod_1.z.number().int().nullable(),
+        signal: zod_1.z.string().max(32).nullable(),
+    }),
+    zod_1.z.object({ t: zod_1.z.literal('error'), message: zod_1.z.string().max(500) }),
+]);

package/build/frontend/api/controllers/index.js

@@ -28,6 +28,7 @@ __exportStar(require("./keygen"), exports);
 __exportStar(require("./metadata"), exports);
 __exportStar(require("./node-integrations"), exports);
 __exportStar(require("./node-plugins"), exports);
+__exportStar(require("./node-ssh"), exports);
 __exportStar(require("./nodes"), exports);
 __exportStar(require("./passkeys"), exports);
 __exportStar(require("./remnawave-settings"), exports);

package/build/frontend/api/controllers/node-ssh.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NODE_SSH_ROUTES = exports.NODE_SSH_CONTROLLER = void 0;
+exports.NODE_SSH_CONTROLLER = 'node-ssh';
+exports.NODE_SSH_ROUTES = {
+    CREATE_TICKET: (uuid) => `${uuid}/ticket`, // post
+    EVALUATE_VAULT: 'vault/evaluate', // post
+};

package/build/frontend/api/controllers-info.js

@@ -37,6 +37,11 @@ exports.CONTROLLERS_INFO = {
         description: '',
         resource: 'node-plugins',
     },
+    NODE_SSH: {
+        tag: 'Node SSH Controller',
+        description: '',
+        resource: 'node-ssh',
+    },
     NODE_INTEGRATIONS: {
         tag: 'Node Integrations Controller',
         description: 'Management of Node Integrations.',

package/build/frontend/api/routes.js

@@ -308,6 +308,10 @@ exports.REST_API = {
         DELETE: (uuid) => `${exports.ROOT}/${CONTROLLERS.NODE_INTEGRATIONS_CONTROLLER}/${CONTROLLERS.NODE_INTEGRATIONS_ROUTES.DELETE(uuid)}`,
         CREATE: `${exports.ROOT}/${CONTROLLERS.NODE_INTEGRATIONS_CONTROLLER}/${CONTROLLERS.NODE_INTEGRATIONS_ROUTES.CREATE}`,
     },
+    NODE_SSH: {
+        CREATE_TICKET: (uuid) => `${exports.ROOT}/${CONTROLLERS.NODE_SSH_CONTROLLER}/${CONTROLLERS.NODE_SSH_ROUTES.CREATE_TICKET(uuid)}`,
+        EVALUATE_VAULT: `${exports.ROOT}/${CONTROLLERS.NODE_SSH_CONTROLLER}/${CONTROLLERS.NODE_SSH_ROUTES.EVALUATE_VAULT}`,
+    },
     NODE_PLUGINS: {
         GET: (uuid) => `${exports.ROOT}/${CONTROLLERS.NODE_PLUGINS_CONTROLLER}/${CONTROLLERS.NODE_PLUGINS_ROUTES.GET(uuid)}`,
         GET_ALL: `${exports.ROOT}/${CONTROLLERS.NODE_PLUGINS_CONTROLLER}/${CONTROLLERS.NODE_PLUGINS_ROUTES.GET_ALL}`,

package/build/frontend/commands/index.js

@@ -28,6 +28,7 @@ __exportStar(require("./keygen"), exports);
 __exportStar(require("./metadata"), exports);
 __exportStar(require("./node-integrations"), exports);
 __exportStar(require("./node-plugins"), exports);
+__exportStar(require("./node-ssh"), exports);
 __exportStar(require("./nodes"), exports);
 __exportStar(require("./passkeys"), exports);
 __exportStar(require("./remnawave-settings"), exports);

package/build/frontend/commands/node-ssh/create-ssh-ticket.command.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateSshTicketCommand = void 0;
+const zod_1 = require("zod");
+const api_1 = require("../../api");
+const constants_1 = require("../../constants");
+var CreateSshTicketCommand;
+(function (CreateSshTicketCommand) {
+    CreateSshTicketCommand.url = api_1.REST_API.NODE_SSH.CREATE_TICKET;
+    CreateSshTicketCommand.TSQ_url = CreateSshTicketCommand.url(':uuid');
+    CreateSshTicketCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.NODE_SSH_ROUTES.CREATE_TICKET(':uuid'), 'post', 'Create a single-use ticket for opening an SSH terminal session', { scope: 'node-ssh', kind: 'write' });
+    CreateSshTicketCommand.RequestParamSchema = zod_1.z.object({
+        uuid: zod_1.z.uuid().describe('Node UUID'),
+    });
+    CreateSshTicketCommand.ResponseSchema = zod_1.z.object({
+        response: zod_1.z.object({
+            ticket: zod_1.z.string(),
+            path: zod_1.z.string(),
+            expiresInSeconds: zod_1.z.number(),
+        }),
+    });
+})(CreateSshTicketCommand || (exports.CreateSshTicketCommand = CreateSshTicketCommand = {}));

package/build/frontend/commands/node-ssh/evaluate-vault.command.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvaluateVaultCommand = void 0;
+const zod_1 = require("zod");
+const api_1 = require("../../api");
+const constants_1 = require("../../constants");
+var EvaluateVaultCommand;
+(function (EvaluateVaultCommand) {
+    EvaluateVaultCommand.url = api_1.REST_API.NODE_SSH.EVALUATE_VAULT;
+    EvaluateVaultCommand.TSQ_url = EvaluateVaultCommand.url;
+    EvaluateVaultCommand.endpointDetails = (0, constants_1.getEndpointDetails)(api_1.NODE_SSH_ROUTES.EVALUATE_VAULT, 'post', 'Oblivious evaluation step for unlocking the SSH key vault', { scope: 'node-ssh', kind: 'write' });
+    EvaluateVaultCommand.RequestBodySchema = zod_1.z.object({
+        blinded: zod_1.z.base64().max(128),
+    });
+    EvaluateVaultCommand.ResponseSchema = zod_1.z.object({
+        response: zod_1.z.object({
+            evaluated: zod_1.z.base64(),
+        }),
+    });
+})(EvaluateVaultCommand || (exports.EvaluateVaultCommand = EvaluateVaultCommand = {}));

package/build/frontend/commands/node-ssh/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./create-ssh-ticket.command"), exports);
+__exportStar(require("./evaluate-vault.command"), exports);

package/build/frontend/constants/errors/errors.js

@@ -1270,4 +1270,14 @@ exports.ERRORS = {
             httpCode: 400,
         }),
     },
+    EVALUATE_VAULT_ERROR: {
+        code: 'A255',
+        message: 'Vault evaluation refused',
+        httpCode: 429,
+    },
+    CREATE_SSH_TICKET_ERROR: {
+        code: 'A254',
+        message: 'Create SSH ticket error',
+        httpCode: 500,
+    },
 };

package/build/frontend/models/index.js

@@ -55,3 +55,4 @@ __exportStar(require("./webhook"), exports);
 __exportStar(require("./xray-json-advanced"), exports);
 __exportStar(require("./path-params.schema"), exports);
 __exportStar(require("./host-mapper"), exports);
+__exportStar(require("./ssh-terminal.schema"), exports);

package/build/frontend/models/ssh-terminal.schema.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SshServerMessageSchema = exports.SshClientMessageSchema = exports.SshClientErrorSchema = exports.SshHostKeyReplySchema = exports.SshSignReplySchema = exports.SshIdentitiesReplySchema = exports.SshResizeMessageSchema = exports.SshOpenMessageSchema = exports.SSH_TERMINAL_WS_PROTOCOL = exports.SSH_TERMINAL_WS_PATH = void 0;
+const zod_1 = require("zod");
+exports.SSH_TERMINAL_WS_PATH = '/api/node-ssh/ws';
+exports.SSH_TERMINAL_WS_PROTOCOL = 'rw';
+const requestId = zod_1.z.number().int().nonnegative();
+exports.SshOpenMessageSchema = zod_1.z.object({
+    t: zod_1.z.literal('open'),
+    host: zod_1.z.string().min(1).max(253),
+    port: zod_1.z.number().int().min(1).max(65535),
+    username: zod_1.z.string().min(1).max(64),
+    cols: zod_1.z.number().int().min(1).max(1000),
+    rows: zod_1.z.number().int().min(1).max(1000),
+});
+exports.SshResizeMessageSchema = zod_1.z.object({
+    t: zod_1.z.literal('resize'),
+    cols: zod_1.z.number().int().min(1).max(1000),
+    rows: zod_1.z.number().int().min(1).max(1000),
+});
+exports.SshIdentitiesReplySchema = zod_1.z.object({
+    t: zod_1.z.literal('identities'),
+    id: requestId,
+    keys: zod_1.z.array(zod_1.z.string().min(1).max(4096)).max(16),
+});
+exports.SshSignReplySchema = zod_1.z.object({
+    t: zod_1.z.literal('sign'),
+    id: requestId,
+    signature: zod_1.z.base64().max(2048),
+});
+exports.SshHostKeyReplySchema = zod_1.z.object({
+    t: zod_1.z.literal('hostkey'),
+    id: requestId,
+    accept: zod_1.z.boolean(),
+});
+exports.SshClientErrorSchema = zod_1.z.object({
+    t: zod_1.z.literal('error'),
+    id: requestId,
+    message: zod_1.z.string().max(500),
+});
+/** Browser -> panel. */
+exports.SshClientMessageSchema = zod_1.z.discriminatedUnion('t', [
+    exports.SshOpenMessageSchema,
+    exports.SshResizeMessageSchema,
+    exports.SshIdentitiesReplySchema,
+    exports.SshSignReplySchema,
+    exports.SshHostKeyReplySchema,
+    exports.SshClientErrorSchema,
+]);
+/** Panel -> browser. */
+exports.SshServerMessageSchema = zod_1.z.discriminatedUnion('t', [
+    zod_1.z.object({ t: zod_1.z.literal('agent-identities'), id: requestId }),
+    zod_1.z.object({
+        t: zod_1.z.literal('agent-sign'),
+        id: requestId,
+        publicKey: zod_1.z.base64().max(4096),
+        data: zod_1.z.base64().max(8192),
+        hash: zod_1.z.string().max(16).nullable(),
+    }),
+    zod_1.z.object({
+        t: zod_1.z.literal('hostkey'),
+        id: requestId,
+        algo: zod_1.z.string().max(64),
+        fingerprint: zod_1.z.string().max(128),
+        key: zod_1.z.base64().max(4096),
+    }),
+    zod_1.z.object({ t: zod_1.z.literal('ready') }),
+    zod_1.z.object({
+        t: zod_1.z.literal('exit'),
+        code: zod_1.z.number().int().nullable(),
+        signal: zod_1.z.string().max(32).nullable(),
+    }),
+    zod_1.z.object({ t: zod_1.z.literal('error'), message: zod_1.z.string().max(500) }),
+]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnawave/backend-contract",
-  "version": "3.4.5",
+  "version": "3.4.6",
   "description": "A contract library for Remnawave Backend. It can be used in backend and frontend.",
   "keywords": [],
   "homepage": "https://github.com/remnawave",