@tiphareth/dsh-hardssh 0.1.2

package/lib/types/switch/switch-fs.d.ts

@@ -0,0 +1,88 @@
+/**
+ * The `ctx.fs` switching facade: routes every filesystem call to the backend
+ * of the SESSION's workspace — a local session operates on the local sandbox,
+ * an SSH-bound workspace on the remote host the workspace is bound to.
+ *
+ * Routing anchor: the cwd the tool call was made under (`resolve`'s
+ * `opts.cwd`, the write/edit `sandboxPolicy.workspaceRoot`). The resolver
+ * ("which SSH workspace owns this cwd?") lives in the deps; a hit routes to
+ * that workspace's remote backend, a miss to the local backend. Later
+ * operations (stat/read/write) receive only the resolved `FsTarget`, so the
+ * backend identity is encoded into the target key — `ssh:<recordId>:<remoteKey>`
+ * for remote targets, bare local keys for local ones — and decoded on every
+ * dispatch. This keeps two SSH workspaces on DIFFERENT hosts (or different
+ * directories on the SAME host) from colliding, and never misroutes a local
+ * target.
+ *
+ * @module dsh-hardssh/switch-fs
+ */
+import { FileSystem } from '@deepseek-ai/dsh-fs';
+import type { FsDirEntry, FsEditOutcome, FsEditRequest, FsInfo, FsPathInfo, FsTarget, FsWriteIntent, FsWriteOutcome } from '@deepseek-ai/dsh-fs';
+import type { SandboxExecutionPolicy, SandboxMode } from '@deepseek-ai/dsh-sandbox';
+import type { Context } from '@deepseek-ai/cordis';
+/** Key namespace: 'ssh:<recordId>:' (legacy) or 'wfs://<id>/' (current)
+ *  for remote/workspace-bound targets. Both decode; new keys emit wfs://. */
+export declare const REMOTE_PREFIX = "ssh:";
+/** New URI-style workspace namespace marker. */
+export declare const WFS_PREFIX = "wfs://";
+/** Strict WFS key prefix (includes the double slash + separator). */
+export declare const WFS_NAMESPACE_MARKER = "wfs://";
+/** Route one cwd anchor to a backend + namespace. */
+export interface WorkspaceWorld {
+    backend: FileSystem;
+    /** '' for local; 'wfs://<id>/' or legacy 'ssh:<recordId>:' for one workspace. */
+    namespace: string;
+    /** The local anchor dir of the SSH workspace ('' for local) — used to
+     *  translate a model-supplied anchor path into the remote root. */
+    anchorPath?: string;
+    /** The remote root of the SSH workspace ('' for local). */
+    remoteRoot?: string;
+}
+/** Routing resolver offered by the mount site. */
+export interface SwitchFsDeps {
+    local: FileSystem;
+    /** The world for a session cwd (undefined = local). */
+    worldFor(cwd: string | undefined): WorkspaceWorld;
+    /** The world owning one namespaced target key (never undefined: every
+     *  key this facade issued maps back). */
+    worldForNamespace(namespace: string): WorkspaceWorld | undefined;
+}
+/** The routing filesystem facade. */
+export declare class SwitchFileSystem extends FileSystem {
+    private readonly deps;
+    private readonly local;
+    constructor(ctx: Context, deps: SwitchFsDeps);
+    /** Sandbox default from the local backend (remote worlds are unconfined —
+     *  the docs/doc of the tool layer reads this once at mount). */
+    get sandboxMode(): SandboxMode | undefined;
+    /** Encode a raw key into the world's namespace. */
+    private encode;
+    /** Decode a namespaced key back to (rawKey, world). Supports both the
+     *  current `wfs://<id>/…` form and the legacy `ssh:<recordId>:…` form. */
+    private decode;
+    resolve(path: string, opts?: {
+        cwd?: string;
+        signal?: AbortSignal;
+    }): Promise<FsTarget>;
+    /** Rewrite `<anchor>/<rest>` to `<remoteRoot>/<rest>` when `path` is the
+     *  anchor or under it; otherwise return `path` unchanged (remote absolute
+     *  paths, relative paths, and foreign local paths all pass through). */
+    private translateAnchorPath;
+    processPath(target: FsTarget): string;
+    fileUrl(target: FsTarget): string;
+    contains(parent: FsTarget, child: FsTarget): boolean;
+    stat(target: FsTarget, signal?: AbortSignal): Promise<FsInfo | undefined>;
+    lstat(path: string, opts?: {
+        cwd?: string;
+    }, signal?: AbortSignal): Promise<FsPathInfo | undefined>;
+    readText(target: FsTarget, signal?: AbortSignal): Promise<string>;
+    streamText(target: FsTarget, signal?: AbortSignal): Promise<AsyncIterable<string>>;
+    readBytes(target: FsTarget, signal: AbortSignal | undefined, maxBytes: number): Promise<Uint8Array>;
+    listDir(target: FsTarget, signal?: AbortSignal): Promise<FsDirEntry[]>;
+    writeText(target: FsTarget, content: string, expected?: FsWriteIntent, signal?: AbortSignal, sandboxPolicy?: SandboxExecutionPolicy): Promise<FsWriteOutcome>;
+    editText(target: FsTarget, edit: FsEditRequest, expected?: {
+        version: ReturnType<typeof import('@deepseek-ai/dsh-fs').FsVersion>;
+    }, signal?: AbortSignal, sandboxPolicy?: Parameters<FileSystem['editText']>[4]): Promise<FsEditOutcome>;
+}
+export default SwitchFileSystem;
+//# sourceMappingURL=switch-fs.d.ts.map

package/lib/types/switch/switch-subprocess.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The `ctx.subprocess` switching facade: routes every spawn to the execution
+ * world of the SESSION's workspace — local sessions spawn locally, SSH-bound
+ * workspaces spawn on the bound host. The routing anchor is the spawn spec's
+ * `cwd` (bash tools default it to the session cwd); the resolver lives in
+ * the deps. One instance provides `ctx.subprocess` after the profile patch
+ * disabled the plain subprocess row, like the fs facade.
+ *
+ * @module dsh-hardssh/switch-subprocess
+ */
+import { SubprocessRuntime } from '@deepseek-ai/dsh-subprocess';
+import type { SubprocessHandle, SubprocessSpawnSpec, SubprocessTerminalHandle, SubprocessTerminalSpawnSpec } from '@deepseek-ai/dsh-subprocess';
+import type { Context } from '@deepseek-ai/cordis';
+/** Route one spawn cwd to a runtime. */
+export interface SwitchSubprocessDeps {
+    local: SubprocessRuntime;
+    /** The runtime for a spawn cwd (undefined = local). */
+    worldFor(cwd: string | undefined): SubprocessRuntime;
+}
+/** Workspace-routing subprocess facade. */
+export declare class SwitchSubprocessRuntime extends SubprocessRuntime {
+    private readonly deps;
+    constructor(ctx: Context, deps: SwitchSubprocessDeps);
+    /** The runtime for one spec (by its cwd). */
+    private runtimeFor;
+    /** @inheritdoc */
+    resolveExecutable(command: string, env?: Readonly<Record<string, string>>, signal?: AbortSignal): Promise<string>;
+    /** @inheritdoc */
+    spawn(spec: SubprocessSpawnSpec): SubprocessHandle;
+    /** @inheritdoc */
+    spawnTerminal(spec: SubprocessTerminalSpawnSpec): Promise<SubprocessTerminalHandle>;
+}
+export default SwitchSubprocessRuntime;
+//# sourceMappingURL=switch-subprocess.d.ts.map

package/lib/types/tools.d.ts

@@ -0,0 +1,12 @@
+import type { SshEngine } from './ssh/engine.ts';
+import { RemoteSearchService } from './remote-search.ts';
+import type { SshWorkspaceLedger } from './ledger.ts';
+/** Tool-set dependencies. */
+export interface WorkspaceToolsDeps {
+    engine: SshEngine;
+    ledger: SshWorkspaceLedger;
+    search: RemoteSearchService;
+}
+/** Build every remote_* tool (registered by the host half). */
+export declare function makeWorkspaceTools(deps: WorkspaceToolsDeps): import("@deepseek-ai/dsh-tools").ToolDefinition[];
+//# sourceMappingURL=tools.d.ts.map

package/package.json

@@ -0,0 +1,134 @@
+{
+  "name": "@tiphareth/dsh-hardssh",
+  "description": "Generic workspace base for the dsh harness (local + remote workspace providers with per-workspace routing), with SSH as one concrete provider: enter SSH mode from the session header, browse/edit remote files in a new left panel, let the local harness operate the remote server through remote_* agent tools, and manage hosts through the ssh_* tools and the SSH panel (legacy dsh-ssh merged in).",
+  "version": "0.1.2",
+  "type": "module",
+  "keywords": [
+    "dsh",
+    "deepseek-harness",
+    "dsh-plugin",
+    "workspace",
+    "ssh",
+    "remote-development",
+    "sftp"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "main": "lib/index.js",
+  "types": "lib/types/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/types/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./fs": {
+      "types": "./lib/types/fs.d.ts",
+      "default": "./lib/fs.js"
+    },
+    "./subprocess": {
+      "types": "./lib/types/subprocess.d.ts",
+      "default": "./lib/subprocess.js"
+    },
+    "./client": {
+      "types": "./lib/types/client/index.d.ts",
+      "default": "./lib/client.js"
+    },
+    "./src/*": "./src/*",
+    "./package.json": "./package.json"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-ui-settings"
+      ],
+      "platform": "web"
+    }
+  },
+  "scripts": {
+    "build": "tsc -b && tsdown",
+    "bundle": "tsdown",
+    "watch": "tsdown --watch",
+    "typecheck": "tsc -b --pretty false",
+    "test": "vitest run",
+    "prepare": "tsdown"
+  },
+  "dependencies": {
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/xterm": "^6.0.0",
+    "ssh2": "^1.17.0",
+    "ws": "^8.18.0"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-runtime": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-sidebar": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs-sandbox": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.2-alpha.3",
+    "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subprocess": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subprocess-local": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-timeout": "^0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.3",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-connection": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-locale": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-sidebar": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-client-ui-workspace": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs-local": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-fs-sandbox": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-host-webserver": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-invariants": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-llm": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-sandbox": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-scope": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-settings": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subprocess": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-subprocess-local": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-system-prompt": "0.1.2-alpha.3",
+    "@deepseek-ai/schemastery": "^3.18.1",
+    "@deepseek-ai/dsh-timeout": "0.1.2-alpha.3",
+    "@deepseek-ai/dsh-tools": "0.1.2-alpha.3",
+    "@types/node": "^22.20.0",
+    "@types/react": "~18.3.1",
+    "@types/react-dom": "^18.3.5",
+    "@types/ssh2": "^1.15.5",
+    "@types/ws": "^8.5.13",
+    "jsdom": "catalog:",
+    "react": "catalog:",
+    "react-dom": "catalog:",
+    "tsdown": "catalog:",
+    "typescript": "catalog:",
+    "vitest": "catalog:"
+  },
+  "files": [
+    "lib/*.js",
+    "lib/types/**/*.d.ts",
+    "src",
+    "cordis.patch.yml",
+    "README.md"
+  ],
+  "license": "BSD-3-Clause"
+}