@remnux/mcp-server 0.1.0

package/dist/config/archive-passwords.txt

@@ -0,0 +1,3 @@
+infected
+malware
+virus

package/dist/connectors/docker.d.ts

@@ -0,0 +1,13 @@
+import type { Connector, ExecOptions, ExecResult } from "./index.js";
+export declare class DockerConnector implements Connector {
+    private docker;
+    private containerName;
+    constructor(containerName: string);
+    execute(command: string[], options?: ExecOptions): Promise<ExecResult>;
+    writeFile(remotePath: string, content: Buffer): Promise<void>;
+    writeFileFromPath(remotePath: string, hostPath: string): Promise<void>;
+    readFileToPath(remotePath: string, hostPath: string): Promise<void>;
+    executeShell(command: string, options?: ExecOptions): Promise<ExecResult>;
+    disconnect(): Promise<void>;
+}
+//# sourceMappingURL=docker.d.ts.map

package/dist/connectors/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../src/connectors/docker.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAKrE,qBAAa,eAAgB,YAAW,SAAS;IAC/C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAS;gBAElB,aAAa,EAAE,MAAM;IAU3B,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAmJ1E,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0C7D,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUtE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAK7E,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAGlC"}

package/dist/connectors/docker.js

@@ -0,0 +1,201 @@
+import Docker from "dockerode";
+import { writeFileSync, unlinkSync, mkdtempSync } from "fs";
+import { tmpdir } from "os";
+import { join, basename } from "path";
+// Output size limit (10MB)
+const MAX_OUTPUT_SIZE = 10 * 1024 * 1024;
+export class DockerConnector {
+    docker;
+    containerName;
+    constructor(containerName) {
+        // Docker container names can only contain [a-zA-Z0-9][a-zA-Z0-9_.-]*
+        const sanitized = containerName.replace(/[^a-zA-Z0-9_.-]/g, "");
+        if (sanitized !== containerName) {
+            throw new Error(`Invalid container name: ${containerName}`);
+        }
+        this.docker = new Docker();
+        this.containerName = containerName;
+    }
+    async execute(command, options = {}) {
+        // Validate command array is not empty
+        if (command.length === 0) {
+            throw new Error("Command array cannot be empty");
+        }
+        const container = this.docker.getContainer(this.containerName);
+        // Check container exists and is running
+        const info = await container.inspect();
+        if (!info.State.Running) {
+            throw new Error(`Container '${this.containerName}' is not running`);
+        }
+        const exec = await container.exec({
+            Cmd: command,
+            AttachStdout: true,
+            AttachStderr: true,
+            WorkingDir: options.cwd || "/home/remnux",
+        });
+        return new Promise((resolve, reject) => {
+            const timeout = options.timeout || 300000;
+            let timedOut = false;
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            let activeStream = null;
+            const timer = setTimeout(async () => {
+                timedOut = true;
+                // Destroy the stream to stop reading output
+                if (activeStream && typeof activeStream.destroy === "function") {
+                    activeStream.destroy();
+                }
+                reject(new Error(`Command timed out after ${timeout / 1000} seconds`));
+            }, timeout);
+            exec.start({ hijack: true, stdin: false }, (err, stream) => {
+                if (err) {
+                    clearTimeout(timer);
+                    return reject(err);
+                }
+                if (!stream) {
+                    clearTimeout(timer);
+                    return reject(new Error("No stream returned from exec"));
+                }
+                // Store stream reference for timeout cleanup
+                activeStream = stream;
+                let stdout = "";
+                let stderr = "";
+                let outputTruncated = false;
+                // Docker multiplexes stdout/stderr in the stream when using hijack mode
+                // Each frame has an 8-byte header: [type(1)][0][0][0][size(4 bytes BE)]
+                // type: 1 = stdout, 2 = stderr
+                let buffer = Buffer.alloc(0);
+                const processBuffer = () => {
+                    // Need at least 8 bytes for the header
+                    while (buffer.length >= 8) {
+                        const streamType = buffer[0]; // 1 = stdout, 2 = stderr
+                        const payloadSize = buffer.readUInt32BE(4);
+                        // Check if we have the full frame
+                        if (buffer.length < 8 + payloadSize) {
+                            break;
+                        }
+                        const payload = buffer.slice(8, 8 + payloadSize).toString("utf8");
+                        buffer = buffer.slice(8 + payloadSize);
+                        if (streamType === 1) {
+                            // stdout
+                            if (stdout.length < MAX_OUTPUT_SIZE) {
+                                stdout += payload;
+                                if (stdout.length >= MAX_OUTPUT_SIZE) {
+                                    stdout = stdout.slice(0, MAX_OUTPUT_SIZE);
+                                    outputTruncated = true;
+                                }
+                            }
+                        }
+                        else if (streamType === 2) {
+                            // stderr
+                            if (stderr.length < MAX_OUTPUT_SIZE) {
+                                stderr += payload;
+                                if (stderr.length >= MAX_OUTPUT_SIZE) {
+                                    stderr = stderr.slice(0, MAX_OUTPUT_SIZE);
+                                    outputTruncated = true;
+                                }
+                            }
+                        }
+                    }
+                };
+                stream.on("data", (chunk) => {
+                    buffer = Buffer.concat([buffer, chunk]);
+                    processBuffer();
+                });
+                stream.on("end", async () => {
+                    if (timedOut)
+                        return;
+                    clearTimeout(timer);
+                    // Process any remaining data
+                    processBuffer();
+                    // If demuxing didn't work (no headers), treat all data as stdout
+                    // This handles the case where TTY is attached or raw mode is used
+                    if (stdout === "" && stderr === "" && buffer.length > 0) {
+                        stdout = buffer.toString("utf8");
+                        if (stdout.length > MAX_OUTPUT_SIZE) {
+                            stdout = stdout.slice(0, MAX_OUTPUT_SIZE);
+                            outputTruncated = true;
+                        }
+                    }
+                    try {
+                        const inspectResult = await exec.inspect();
+                        let finalStdout = stdout.trim();
+                        if (outputTruncated) {
+                            finalStdout += "\n\n[OUTPUT TRUNCATED - exceeded 10MB limit]";
+                        }
+                        resolve({
+                            stdout: finalStdout,
+                            stderr: stderr.trim(),
+                            exitCode: inspectResult.ExitCode ?? 0,
+                        });
+                    }
+                    catch (_inspectErr) {
+                        resolve({
+                            stdout: stdout.trim(),
+                            stderr: stderr.trim(),
+                            exitCode: -1,
+                        });
+                    }
+                });
+                stream.on("error", (streamErr) => {
+                    clearTimeout(timer);
+                    reject(streamErr);
+                });
+            });
+        });
+    }
+    async writeFile(remotePath, content) {
+        const container = this.docker.getContainer(this.containerName);
+        // Check container exists and is running
+        const info = await container.inspect();
+        if (!info.State.Running) {
+            throw new Error(`Container '${this.containerName}' is not running`);
+        }
+        // Create a temp file on the host
+        const tempDir = mkdtempSync(join(tmpdir(), "remnux-upload-"));
+        const filename = basename(remotePath);
+        const tempPath = join(tempDir, filename);
+        try {
+            // Write content to temp file
+            writeFileSync(tempPath, content);
+            // Use docker cp to copy into container
+            // docker cp tempPath containerName:remotePath
+            // Escape single quotes in paths for shell safety (defense-in-depth)
+            const escapedTempPath = tempPath.replace(/'/g, "'\\''");
+            const escapedRemotePath = remotePath.replace(/'/g, "'\\''");
+            const { execSync } = await import("child_process");
+            execSync(`docker cp '${escapedTempPath}' '${this.containerName}:${escapedRemotePath}'`, { stdio: "pipe" });
+            // Files are owned by whatever user the container runs as (typically root)
+        }
+        finally {
+            // Clean up temp file
+            try {
+                unlinkSync(tempPath);
+                const { rmdirSync } = await import("fs");
+                rmdirSync(tempDir);
+            }
+            catch {
+                // Ignore cleanup errors
+            }
+        }
+    }
+    async writeFileFromPath(remotePath, hostPath) {
+        const escapedRemotePath = remotePath.replace(/'/g, "'\\''");
+        const escapedHostPath = hostPath.replace(/'/g, "'\\''");
+        const { execSync } = await import("child_process");
+        execSync(`docker cp '${escapedHostPath}' '${this.containerName}:${escapedRemotePath}'`, { stdio: "pipe" });
+    }
+    async readFileToPath(remotePath, hostPath) {
+        const escapedRemotePath = remotePath.replace(/'/g, "'\\''");
+        const escapedHostPath = hostPath.replace(/'/g, "'\\''");
+        const { execSync } = await import("child_process");
+        execSync(`docker cp '${this.containerName}:${escapedRemotePath}' '${escapedHostPath}'`, { stdio: "pipe" });
+    }
+    async executeShell(command, options = {}) {
+        // Execute command through bash shell to support pipes and redirects
+        return this.execute(["bash", "-c", command], options);
+    }
+    async disconnect() {
+        // Docker client doesn't maintain persistent connections
+    }
+}
+//# sourceMappingURL=docker.js.map

package/dist/connectors/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/connectors/docker.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAGtC,2BAA2B;AAC3B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,MAAM,OAAO,eAAe;IAClB,MAAM,CAAS;IACf,aAAa,CAAS;IAE9B,YAAY,aAAqB;QAC/B,qEAAqE;QACrE,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAChE,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,2BAA2B,aAAa,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAiB,EAAE,UAAuB,EAAE;QACxD,sCAAsC;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE/D,wCAAwC;QACxC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,aAAa,kBAAkB,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC;YAChC,GAAG,EAAE,OAAO;YACZ,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,GAAG,IAAI,cAAc;SAC1C,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;YAC1C,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,8DAA8D;YAC9D,IAAI,YAAY,GAAQ,IAAI,CAAC;YAE7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;gBAClC,QAAQ,GAAG,IAAI,CAAC;gBAChB,4CAA4C;gBAC5C,IAAI,YAAY,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC/D,YAAY,CAAC,OAAO,EAAE,CAAC;gBACzB,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC;YACzE,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACzD,IAAI,GAAG,EAAE,CAAC;oBACR,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;gBAED,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBAC3D,CAAC;gBAED,6CAA6C;gBAC7C,YAAY,GAAG,MAAM,CAAC;gBAEtB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,eAAe,GAAG,KAAK,CAAC;gBAE5B,wEAAwE;gBACxE,wEAAwE;gBACxE,+BAA+B;gBAC/B,IAAI,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAE7B,MAAM,aAAa,GAAG,GAAG,EAAE;oBACzB,uCAAuC;oBACvC,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;wBAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB;wBACvD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;wBAE3C,kCAAkC;wBAClC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,WAAW,EAAE,CAAC;4BACpC,MAAM;wBACR,CAAC;wBAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBAClE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;wBAEvC,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;4BACrB,SAAS;4BACT,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gCACpC,MAAM,IAAI,OAAO,CAAC;gCAClB,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;oCACrC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;oCAC1C,eAAe,GAAG,IAAI,CAAC;gCACzB,CAAC;4BACH,CAAC;wBACH,CAAC;6BAAM,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;4BAC5B,SAAS;4BACT,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gCACpC,MAAM,IAAI,OAAO,CAAC;gCAClB,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;oCACrC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;oCAC1C,eAAe,GAAG,IAAI,CAAC;gCACzB,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAClC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;oBACxC,aAAa,EAAE,CAAC;gBAClB,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;oBAC1B,IAAI,QAAQ;wBAAE,OAAO;oBACrB,YAAY,CAAC,KAAK,CAAC,CAAC;oBAEpB,6BAA6B;oBAC7B,aAAa,EAAE,CAAC;oBAEhB,iEAAiE;oBACjE,kEAAkE;oBAClE,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACxD,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBACjC,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;4BACpC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;4BAC1C,eAAe,GAAG,IAAI,CAAC;wBACzB,CAAC;oBACH,CAAC;oBAED,IAAI,CAAC;wBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;wBAE3C,IAAI,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;wBAChC,IAAI,eAAe,EAAE,CAAC;4BACpB,WAAW,IAAI,8CAA8C,CAAC;wBAChE,CAAC;wBAED,OAAO,CAAC;4BACN,MAAM,EAAE,WAAW;4BACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;4BACrB,QAAQ,EAAE,aAAa,CAAC,QAAQ,IAAI,CAAC;yBACtC,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,WAAW,EAAE,CAAC;wBACrB,OAAO,CAAC;4BACN,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;4BACrB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;4BACrB,QAAQ,EAAE,CAAC,CAAC;yBACb,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,SAAgB,EAAE,EAAE;oBACtC,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpB,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,OAAe;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAE/D,wCAAwC;QACxC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,aAAa,kBAAkB,CAAC,CAAC;QACtE,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,6BAA6B;YAC7B,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAEjC,uCAAuC;YACvC,8CAA8C;YAC9C,oEAAoE;YACpE,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;YACnD,QAAQ,CACN,cAAc,eAAe,MAAM,IAAI,CAAC,aAAa,IAAI,iBAAiB,GAAG,EAC7E,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;YAEF,0EAA0E;QAC5E,CAAC;gBAAS,CAAC;YACT,qBAAqB;YACrB,IAAI,CAAC;gBACH,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;QAC1D,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACnD,QAAQ,CACN,cAAc,eAAe,MAAM,IAAI,CAAC,aAAa,IAAI,iBAAiB,GAAG,EAC7E,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,QAAgB;QACvD,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACnD,QAAQ,CACN,cAAc,IAAI,CAAC,aAAa,IAAI,iBAAiB,MAAM,eAAe,GAAG,EAC7E,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,UAAuB,EAAE;QAC3D,oEAAoE;QACpE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,wDAAwD;IAC1D,CAAC;CACF"}

package/dist/connectors/index.d.ts

@@ -0,0 +1,27 @@
+export interface ExecOptions {
+    timeout?: number;
+    cwd?: string;
+}
+export interface ExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}
+export interface Connector {
+    execute(command: string[], options?: ExecOptions): Promise<ExecResult>;
+    executeShell(command: string, options?: ExecOptions): Promise<ExecResult>;
+    writeFile(remotePath: string, content: Buffer): Promise<void>;
+    writeFileFromPath(remotePath: string, hostPath: string): Promise<void>;
+    readFileToPath(remotePath: string, hostPath: string): Promise<void>;
+    disconnect(): Promise<void>;
+}
+export interface ConnectorConfig {
+    mode: "docker" | "ssh" | "local";
+    container?: string;
+    host?: string;
+    user?: string;
+    port?: number;
+    password?: string;
+}
+export declare function createConnector(config: ConnectorConfig): Promise<Connector>;
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/connectors/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACvE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAuBjF"}

package/dist/connectors/index.js

@@ -0,0 +1,23 @@
+export async function createConnector(config) {
+    switch (config.mode) {
+        case "docker":
+            const { DockerConnector } = await import("./docker.js");
+            return new DockerConnector(config.container || "remnux");
+        case "ssh":
+            const { SSHConnector } = await import("./ssh.js");
+            if (!config.host)
+                throw new Error("SSH mode requires --host");
+            return new SSHConnector({
+                host: config.host,
+                user: config.user || "remnux",
+                port: config.port || 22,
+                ...(config.password ? { password: config.password } : {}),
+            });
+        case "local":
+            const { LocalConnector } = await import("./local.js");
+            return new LocalConnector();
+        default:
+            throw new Error(`Unknown connection mode: ${config.mode}`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/connectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/connectors/index.ts"],"names":[],"mappings":"AA6BA,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAuB;IAC3D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACxD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;QAE3D,KAAK,KAAK;YACR,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9D,OAAO,IAAI,YAAY,CAAC;gBACtB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;gBACvB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1D,CAAC,CAAC;QAEL,KAAK,OAAO;YACV,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YACtD,OAAO,IAAI,cAAc,EAAE,CAAC;QAE9B;YACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/connectors/local.d.ts

@@ -0,0 +1,10 @@
+import type { Connector, ExecOptions, ExecResult } from "./index.js";
+export declare class LocalConnector implements Connector {
+    execute(command: string[], options?: ExecOptions): Promise<ExecResult>;
+    executeShell(command: string, options?: ExecOptions): Promise<ExecResult>;
+    writeFile(remotePath: string, content: Buffer): Promise<void>;
+    writeFileFromPath(remotePath: string, hostPath: string): Promise<void>;
+    readFileToPath(remotePath: string, hostPath: string): Promise<void>;
+    disconnect(): Promise<void>;
+}
+//# sourceMappingURL=local.d.ts.map

package/dist/connectors/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/connectors/local.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAqBrE,qBAAa,cAAe,YAAW,SAAS;IACxC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IA8E1E,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAK7E,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAGlC"}

package/dist/connectors/local.js

@@ -0,0 +1,105 @@
+import { spawn } from "child_process";
+import { copyFileSync, writeFileSync } from "fs";
+// Output size limit (10MB)
+const MAX_OUTPUT_SIZE = 10 * 1024 * 1024;
+// Allowed environment variables for tool execution
+// Only pass essential vars to prevent leaking sensitive data
+const ALLOWED_ENV_VARS = [
+    "PATH",
+    "HOME",
+    "USER",
+    "SHELL",
+    "TERM",
+    "LANG",
+    "LC_ALL",
+    "TZ",
+    // Tool-specific vars that may be needed
+    "PYTHONPATH",
+    "JAVA_HOME",
+];
+export class LocalConnector {
+    async execute(command, options = {}) {
+        // Validate command array is not empty
+        if (command.length === 0) {
+            throw new Error("Command array cannot be empty");
+        }
+        const timeout = options.timeout || 300000;
+        const [cmd, ...args] = command;
+        // Filter environment variables to only allowed ones
+        const filteredEnv = {};
+        for (const key of ALLOWED_ENV_VARS) {
+            if (process.env[key]) {
+                filteredEnv[key] = process.env[key];
+            }
+        }
+        return new Promise((resolve, reject) => {
+            let timedOut = false;
+            let stdout = "";
+            let stderr = "";
+            let outputTruncated = false;
+            const proc = spawn(cmd, args, {
+                cwd: options.cwd,
+                env: filteredEnv,
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+            const timer = setTimeout(() => {
+                timedOut = true;
+                proc.kill("SIGKILL");
+                reject(new Error(`Command timed out after ${timeout / 1000} seconds`));
+            }, timeout);
+            proc.stdout.on("data", (data) => {
+                if (stdout.length < MAX_OUTPUT_SIZE) {
+                    stdout += data.toString();
+                    if (stdout.length >= MAX_OUTPUT_SIZE) {
+                        stdout = stdout.slice(0, MAX_OUTPUT_SIZE);
+                        outputTruncated = true;
+                    }
+                }
+            });
+            proc.stderr.on("data", (data) => {
+                if (stderr.length < MAX_OUTPUT_SIZE) {
+                    stderr += data.toString();
+                    if (stderr.length >= MAX_OUTPUT_SIZE) {
+                        stderr = stderr.slice(0, MAX_OUTPUT_SIZE);
+                        outputTruncated = true;
+                    }
+                }
+            });
+            proc.on("error", (err) => {
+                clearTimeout(timer);
+                reject(err);
+            });
+            proc.on("close", (code) => {
+                if (timedOut)
+                    return;
+                clearTimeout(timer);
+                let finalStdout = stdout.trim();
+                if (outputTruncated) {
+                    finalStdout += "\n\n[OUTPUT TRUNCATED - exceeded 10MB limit]";
+                }
+                resolve({
+                    stdout: finalStdout,
+                    stderr: stderr.trim(),
+                    exitCode: code ?? 0,
+                });
+            });
+        });
+    }
+    async executeShell(command, options = {}) {
+        // Execute command through bash shell to support pipes and redirects
+        return this.execute(["bash", "-c", command], options);
+    }
+    async writeFile(remotePath, content) {
+        writeFileSync(remotePath, content);
+    }
+    async writeFileFromPath(remotePath, hostPath) {
+        copyFileSync(hostPath, remotePath);
+    }
+    async readFileToPath(remotePath, hostPath) {
+        copyFileSync(remotePath, hostPath);
+    }
+    async disconnect() {
+        // No persistent connection for local mode
+    }
+}
+//# sourceMappingURL=local.js.map

package/dist/connectors/local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/connectors/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAGjD,2BAA2B;AAC3B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,mDAAmD;AACnD,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG;IACvB,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,wCAAwC;IACxC,YAAY;IACZ,WAAW;CACZ,CAAC;AAEF,MAAM,OAAO,cAAc;IACzB,KAAK,CAAC,OAAO,CAAC,OAAiB,EAAE,UAAuB,EAAE;QACxD,sCAAsC;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;QAC1C,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC;QAE/B,oDAAoD;QACpD,MAAM,WAAW,GAAsB,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,eAAe,GAAG,KAAK,CAAC;YAE5B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;gBAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC;YACzE,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACtC,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;oBACpC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;wBACrC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;wBAC1C,eAAe,GAAG,IAAI,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;gBACtC,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;oBACpC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1B,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;wBACrC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;wBAC1C,eAAe,GAAG,IAAI,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChC,IAAI,eAAe,EAAE,CAAC;oBACpB,WAAW,IAAI,8CAA8C,CAAC;gBAChE,CAAC;gBAED,OAAO,CAAC;oBACN,MAAM,EAAE,WAAW;oBACnB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;oBACrB,QAAQ,EAAE,IAAI,IAAI,CAAC;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,UAAuB,EAAE;QAC3D,oEAAoE;QACpE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,OAAe;QACjD,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,QAAgB;QAC1D,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,QAAgB;QACvD,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,0CAA0C;IAC5C,CAAC;CACF"}

package/dist/connectors/ssh.d.ts

@@ -0,0 +1,21 @@
+import type { Connector, ExecOptions, ExecResult } from "./index.js";
+export interface SSHConfig {
+    host: string;
+    user: string;
+    port: number;
+    privateKey?: string;
+    password?: string;
+}
+export declare class SSHConnector implements Connector {
+    private config;
+    private client;
+    constructor(config: SSHConfig);
+    private connect;
+    execute(command: string[], options?: ExecOptions): Promise<ExecResult>;
+    executeShell(command: string, options?: ExecOptions): Promise<ExecResult>;
+    writeFile(remotePath: string, content: Buffer): Promise<void>;
+    writeFileFromPath(remotePath: string, hostPath: string): Promise<void>;
+    readFileToPath(remotePath: string, hostPath: string): Promise<void>;
+    disconnect(): Promise<void>;
+}
+//# sourceMappingURL=ssh.d.ts.map

package/dist/connectors/ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.d.ts","sourceRoot":"","sources":["../../src/connectors/ssh.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAKrE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,YAAa,YAAW,SAAS;IAC5C,OAAO,CAAC,MAAM,CAAY;IAC1B,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,EAAE,SAAS;YAIf,OAAO;IAiCf,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAgF1E,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC;IAmE7E,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B7D,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BtE,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BnE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAMlC"}