ai-remote 0.1.0

package/dist/protocols/ssh/kex.js

@@ -0,0 +1,177 @@
+import { SshReader, SshWriter, concatBytes, padStart, toBase64, toBase64Url } from "./wire";
+const subtle = globalThis.crypto?.subtle;
+const KEX_ALGORITHMS = {
+  "curve25519-sha256": { type: "x25519", hash: "SHA-256" },
+  "curve25519-sha256@libssh.org": { type: "x25519", hash: "SHA-256" },
+  "ecdh-sha2-nistp256": { type: "ecdh", curve: "P-256", hash: "SHA-256" }
+};
+const HOST_KEY_ALGORITHMS = {
+  "ssh-ed25519": { keyType: "ssh-ed25519", kind: "ed25519" },
+  "rsa-sha2-512": { keyType: "ssh-rsa", kind: "rsa", hash: "SHA-512" },
+  "rsa-sha2-256": { keyType: "ssh-rsa", kind: "rsa", hash: "SHA-256" },
+  "ecdsa-sha2-nistp256": { keyType: "ecdsa-sha2-nistp256", kind: "ecdsa", curve: "P-256", hash: "SHA-256" }
+};
+async function supports(algorithm, usages) {
+  if (!subtle) return false;
+  try {
+    await subtle.generateKey(algorithm, false, usages);
+    return true;
+  } catch {
+    return false;
+  }
+}
+let cachedOffer = null;
+async function negotiableAlgorithms() {
+  if (cachedOffer) return cachedOffer;
+  const [x25519, ed25519] = await Promise.all([
+    supports({ name: "X25519" }, ["deriveBits"]),
+    supports({ name: "Ed25519" }, ["sign", "verify"])
+  ]);
+  const kex = [];
+  if (x25519) kex.push("curve25519-sha256", "curve25519-sha256@libssh.org");
+  kex.push("ecdh-sha2-nistp256");
+  const hostKey = [];
+  if (ed25519) hostKey.push("ssh-ed25519");
+  hostKey.push("rsa-sha2-512", "rsa-sha2-256", "ecdsa-sha2-nistp256");
+  cachedOffer = { kex, hostKey, x25519, ed25519 };
+  return cachedOffer;
+}
+async function createKexClient(algorithmName) {
+  const algorithm = KEX_ALGORITHMS[algorithmName];
+  if (!algorithm) throw new Error(`SSH: unsupported key exchange ${algorithmName}`);
+  if (algorithm.type === "x25519") {
+    const pair2 = await subtle.generateKey({ name: "X25519" }, false, ["deriveBits"]);
+    const publicKey2 = new Uint8Array(await subtle.exportKey("raw", pair2.publicKey));
+    return {
+      hash: algorithm.hash,
+      publicKey: publicKey2,
+      async sharedSecret(serverPublicKey) {
+        if (serverPublicKey.length !== 32) throw new Error("SSH: the host sent a malformed X25519 key.");
+        const peer = await subtle.importKey("raw", serverPublicKey, { name: "X25519" }, false, []);
+        const secret = new Uint8Array(await subtle.deriveBits({ name: "X25519", public: peer }, pair2.privateKey, 256));
+        if (secret.every((byte) => byte === 0)) {
+          throw new Error("SSH: the host sent a degenerate X25519 key.");
+        }
+        return secret;
+      }
+    };
+  }
+  const pair = await subtle.generateKey({ name: "ECDH", namedCurve: algorithm.curve }, false, ["deriveBits"]);
+  const publicKey = new Uint8Array(await subtle.exportKey("raw", pair.publicKey));
+  return {
+    hash: algorithm.hash,
+    publicKey,
+    async sharedSecret(serverPublicKey) {
+      const peer = await subtle.importKey(
+        "raw",
+        serverPublicKey,
+        { name: "ECDH", namedCurve: algorithm.curve },
+        false,
+        []
+      );
+      return new Uint8Array(await subtle.deriveBits({ name: "ECDH", public: peer }, pair.privateKey, 256));
+    }
+  };
+}
+function hostKeyType(keyBlob) {
+  return new SshReader(keyBlob).string();
+}
+async function hostKeyFingerprint(keyBlob) {
+  const digest = new Uint8Array(await subtle.digest("SHA-256", keyBlob));
+  return `SHA256:${toBase64(digest).replace(/=+$/, "")}`;
+}
+async function importHostKey(algorithmName, keyBlob) {
+  const algorithm = HOST_KEY_ALGORITHMS[algorithmName];
+  if (!algorithm) throw new Error(`SSH: unsupported host key algorithm ${algorithmName}`);
+  const reader = new SshReader(keyBlob);
+  const keyType = reader.string();
+  if (keyType !== algorithm.keyType) {
+    throw new Error(`SSH: the host key is a ${keyType} but was announced as ${algorithmName}.`);
+  }
+  if (algorithm.kind === "ed25519") {
+    return subtle.importKey("raw", reader.stringBytes(), { name: "Ed25519" }, false, ["verify"]);
+  }
+  if (algorithm.kind === "rsa") {
+    const exponent = reader.mpint();
+    const modulus = reader.mpint();
+    return subtle.importKey(
+      "jwk",
+      { kty: "RSA", n: toBase64Url(modulus), e: toBase64Url(exponent), ext: true },
+      { name: "RSASSA-PKCS1-v1_5", hash: algorithm.hash },
+      false,
+      ["verify"]
+    );
+  }
+  reader.string();
+  return subtle.importKey(
+    "raw",
+    reader.stringBytes(),
+    { name: "ECDSA", namedCurve: algorithm.curve },
+    false,
+    ["verify"]
+  );
+}
+function signatureBytes(algorithmName, signatureBlob) {
+  const reader = new SshReader(signatureBlob);
+  const named = reader.string();
+  if (named !== algorithmName) {
+    throw new Error(`SSH: the host signed with ${named} after agreeing on ${algorithmName}.`);
+  }
+  const raw = reader.stringBytes();
+  if (HOST_KEY_ALGORITHMS[algorithmName]?.kind !== "ecdsa") return raw;
+  const parts = new SshReader(raw);
+  const r = parts.mpint();
+  const s = parts.mpint();
+  return concatBytes(padStart(r, 32), padStart(s, 32));
+}
+async function verifyHostKeySignature({ algorithm, keyBlob, signatureBlob, exchangeHash: exchangeHash2 }) {
+  const { kind, hash } = HOST_KEY_ALGORITHMS[algorithm];
+  const key = await importHostKey(algorithm, keyBlob);
+  const signature = signatureBytes(algorithm, signatureBlob);
+  const parameters = kind === "ecdsa" ? { name: "ECDSA", hash } : kind === "rsa" ? { name: "RSASSA-PKCS1-v1_5" } : { name: "Ed25519" };
+  return subtle.verify(parameters, key, signature, exchangeHash2);
+}
+async function exchangeHash({
+  hash,
+  clientVersion,
+  serverVersion,
+  clientKexInit,
+  serverKexInit,
+  hostKeyBlob,
+  clientPublicKey,
+  serverPublicKey,
+  sharedSecret
+}) {
+  const writer = new SshWriter(1024);
+  writer.string(clientVersion);
+  writer.string(serverVersion);
+  writer.string(clientKexInit);
+  writer.string(serverKexInit);
+  writer.string(hostKeyBlob);
+  writer.string(clientPublicKey);
+  writer.string(serverPublicKey);
+  writer.mpint(sharedSecret);
+  return new Uint8Array(await subtle.digest(hash, writer.take()));
+}
+async function deriveKey({ hash, sharedSecret, exchangeHash: h, letter, sessionId, length }) {
+  const prefix = new SshWriter(64 + h.length).mpint(sharedSecret).take();
+  const seed = concatBytes(prefix, h, new Uint8Array([letter.charCodeAt(0)]), sessionId);
+  let material = new Uint8Array(await subtle.digest(hash, seed));
+  while (material.length < length) {
+    const extension = new Uint8Array(await subtle.digest(hash, concatBytes(prefix, h, material)));
+    material = concatBytes(material, extension);
+  }
+  return material.subarray(0, length);
+}
+export {
+  HOST_KEY_ALGORITHMS,
+  KEX_ALGORITHMS,
+  createKexClient,
+  deriveKey,
+  exchangeHash,
+  hostKeyFingerprint,
+  hostKeyType,
+  negotiableAlgorithms,
+  verifyHostKeySignature
+};
+//# sourceMappingURL=kex.js.map

package/dist/protocols/ssh/kex.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/protocols/ssh/kex.ts"],
+  "sourcesContent": ["// Key exchange and host-key verification.\n//\n// Every algorithm here is one the Web Crypto API implements, because the whole\n// SSH client runs in the browser: X25519 and NIST P-256 for the exchange, and\n// Ed25519, RSA or ECDSA to check the host's signature over it. Nothing is\n// hand-rolled, and nothing that cannot be verified is offered.\n\nimport { SshReader, SshWriter, concatBytes, padStart, toBase64, toBase64Url } from './wire';\n\nconst subtle = globalThis.crypto?.subtle;\n\n/** Key exchange methods, best first. All of them hash with SHA-256. */\nexport const KEX_ALGORITHMS = {\n  'curve25519-sha256': { type: 'x25519', hash: 'SHA-256' },\n  'curve25519-sha256@libssh.org': { type: 'x25519', hash: 'SHA-256' },\n  'ecdh-sha2-nistp256': { type: 'ecdh', curve: 'P-256', hash: 'SHA-256' },\n};\n\n/**\n * Host key signature algorithms. `keyType` is what appears inside the key blob;\n * a modern RSA key is signed with SHA-256 or SHA-512 but still calls itself\n * ssh-rsa, so the two names differ there.\n */\nexport const HOST_KEY_ALGORITHMS = {\n  'ssh-ed25519': { keyType: 'ssh-ed25519', kind: 'ed25519' },\n  'rsa-sha2-512': { keyType: 'ssh-rsa', kind: 'rsa', hash: 'SHA-512' },\n  'rsa-sha2-256': { keyType: 'ssh-rsa', kind: 'rsa', hash: 'SHA-256' },\n  'ecdsa-sha2-nistp256': { keyType: 'ecdsa-sha2-nistp256', kind: 'ecdsa', curve: 'P-256', hash: 'SHA-256' },\n};\n\nasync function supports(algorithm, usages) {\n  if (!subtle) return false;\n  try {\n    await subtle.generateKey(algorithm, false, usages);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nlet cachedOffer = null;\n\n/**\n * What this browser can actually do. X25519 and Ed25519 are recent additions to\n * Web Crypto, so they are probed rather than assumed; the NIST curve and RSA\n * have been there all along and always keep the session possible.\n */\nexport async function negotiableAlgorithms() {\n  if (cachedOffer) return cachedOffer;\n\n  const [x25519, ed25519] = await Promise.all([\n    supports({ name: 'X25519' }, ['deriveBits']),\n    supports({ name: 'Ed25519' }, ['sign', 'verify']),\n  ]);\n\n  const kex = [];\n  if (x25519) kex.push('curve25519-sha256', 'curve25519-sha256@libssh.org');\n  kex.push('ecdh-sha2-nistp256');\n\n  const hostKey = [];\n  if (ed25519) hostKey.push('ssh-ed25519');\n  hostKey.push('rsa-sha2-512', 'rsa-sha2-256', 'ecdsa-sha2-nistp256');\n\n  cachedOffer = { kex, hostKey, x25519, ed25519 };\n  return cachedOffer;\n}\n\n/** The client half of one key exchange. */\nexport async function createKexClient(algorithmName: string) {\n  const algorithm = KEX_ALGORITHMS[algorithmName];\n  if (!algorithm) throw new Error(`SSH: unsupported key exchange ${algorithmName}`);\n\n  if (algorithm.type === 'x25519') {\n    const pair = await subtle.generateKey({ name: 'X25519' }, false, ['deriveBits']);\n    const publicKey = new Uint8Array(await subtle.exportKey('raw', pair.publicKey));\n    return {\n      hash: algorithm.hash,\n      publicKey,\n      async sharedSecret(serverPublicKey) {\n        if (serverPublicKey.length !== 32) throw new Error('SSH: the host sent a malformed X25519 key.');\n        const peer = await subtle.importKey('raw', serverPublicKey, { name: 'X25519' }, false, []);\n        const secret = new Uint8Array(await subtle.deriveBits({ name: 'X25519', public: peer }, pair.privateKey, 256));\n        if (secret.every((byte) => byte === 0)) {\n          throw new Error('SSH: the host sent a degenerate X25519 key.');\n        }\n        return secret;\n      },\n    };\n  }\n\n  const pair = await subtle.generateKey({ name: 'ECDH', namedCurve: algorithm.curve }, false, ['deriveBits']);\n  const publicKey = new Uint8Array(await subtle.exportKey('raw', pair.publicKey));\n  return {\n    hash: algorithm.hash,\n    publicKey,\n    async sharedSecret(serverPublicKey) {\n      const peer = await subtle.importKey(\n        'raw', serverPublicKey, { name: 'ECDH', namedCurve: algorithm.curve }, false, []\n      );\n      return new Uint8Array(await subtle.deriveBits({ name: 'ECDH', public: peer }, pair.privateKey, 256));\n    },\n  };\n}\n\n/** The key type named inside a host key blob, which the algorithm must match. */\nexport function hostKeyType(keyBlob: Uint8Array) {\n  return new SshReader(keyBlob).string();\n}\n\n/** The SHA256:\u2026 fingerprint OpenSSH prints, so a user can compare it. */\nexport async function hostKeyFingerprint(keyBlob: Uint8Array) {\n  const digest = new Uint8Array(await subtle.digest('SHA-256', keyBlob));\n  return `SHA256:${toBase64(digest).replace(/=+$/, '')}`;\n}\n\nasync function importHostKey(algorithmName: string, keyBlob: Uint8Array) {\n  const algorithm = HOST_KEY_ALGORITHMS[algorithmName];\n  if (!algorithm) throw new Error(`SSH: unsupported host key algorithm ${algorithmName}`);\n\n  const reader = new SshReader(keyBlob);\n  const keyType = reader.string();\n  if (keyType !== algorithm.keyType) {\n    throw new Error(`SSH: the host key is a ${keyType} but was announced as ${algorithmName}.`);\n  }\n\n  if (algorithm.kind === 'ed25519') {\n    return subtle.importKey('raw', reader.stringBytes(), { name: 'Ed25519' }, false, ['verify']);\n  }\n\n  if (algorithm.kind === 'rsa') {\n    const exponent = reader.mpint();\n    const modulus = reader.mpint();\n    return subtle.importKey(\n      'jwk',\n      { kty: 'RSA', n: toBase64Url(modulus), e: toBase64Url(exponent), ext: true },\n      { name: 'RSASSA-PKCS1-v1_5', hash: algorithm.hash },\n      false,\n      ['verify']\n    );\n  }\n\n  reader.string(); // curve name, already implied by the algorithm\n  return subtle.importKey(\n    'raw', reader.stringBytes(), { name: 'ECDSA', namedCurve: algorithm.curve }, false, ['verify']\n  );\n}\n\n/** Unwrap the signature blob, which names its own algorithm again. */\nfunction signatureBytes(algorithmName: string, signatureBlob: Uint8Array) {\n  const reader = new SshReader(signatureBlob);\n  const named = reader.string();\n  if (named !== algorithmName) {\n    throw new Error(`SSH: the host signed with ${named} after agreeing on ${algorithmName}.`);\n  }\n\n  const raw = reader.stringBytes();\n  if (HOST_KEY_ALGORITHMS[algorithmName]?.kind !== 'ecdsa') return raw;\n\n  // ECDSA signatures arrive as two mpints and Web Crypto wants them as a fixed\n  // width pair.\n  const parts = new SshReader(raw);\n  const r = parts.mpint();\n  const s = parts.mpint();\n  return concatBytes(padStart(r, 32), padStart(s, 32));\n}\n\n/**\n * Check that the host owns the key it presented, by verifying its signature\n * over the exchange hash. A failure here is fatal: it is what stands between\n * the session and a machine in the middle of it.\n */\nexport async function verifyHostKeySignature({ algorithm, keyBlob, signatureBlob, exchangeHash }) {\n  const { kind, hash } = HOST_KEY_ALGORITHMS[algorithm];\n  const key = await importHostKey(algorithm, keyBlob);\n  const signature = signatureBytes(algorithm, signatureBlob);\n\n  // Only ECDSA needs the digest named at verification time; the other two\n  // carry it on the key itself.\n  const parameters = kind === 'ecdsa'\n    ? { name: 'ECDSA', hash }\n    : kind === 'rsa' ? { name: 'RSASSA-PKCS1-v1_5' } : { name: 'Ed25519' };\n\n  return subtle.verify(parameters, key, signature, exchangeHash);\n}\n\n/**\n * The exchange hash H (RFC 4253 section 8), which both sides compute from the\n * same inputs and the host signs.\n */\nexport async function exchangeHash({\n  hash,\n  clientVersion,\n  serverVersion,\n  clientKexInit,\n  serverKexInit,\n  hostKeyBlob,\n  clientPublicKey,\n  serverPublicKey,\n  sharedSecret,\n}) {\n  const writer = new SshWriter(1024);\n  writer.string(clientVersion);\n  writer.string(serverVersion);\n  writer.string(clientKexInit);\n  writer.string(serverKexInit);\n  writer.string(hostKeyBlob);\n  writer.string(clientPublicKey);\n  writer.string(serverPublicKey);\n  writer.mpint(sharedSecret);\n  return new Uint8Array(await subtle.digest(hash, writer.take()));\n}\n\n/**\n * Derive one key from the exchange (RFC 4253 section 7.2), extending it with\n * further hash rounds when the cipher wants more bytes than one digest.\n */\nexport async function deriveKey({ hash, sharedSecret, exchangeHash: h, letter, sessionId, length }) {\n  const prefix = new SshWriter(64 + h.length).mpint(sharedSecret).take();\n  const seed = concatBytes(prefix, h, new Uint8Array([letter.charCodeAt(0)]), sessionId);\n\n  let material = new Uint8Array(await subtle.digest(hash, seed));\n  while (material.length < length) {\n    const extension = new Uint8Array(await subtle.digest(hash, concatBytes(prefix, h, material)));\n    material = concatBytes(material, extension);\n  }\n  return material.subarray(0, length);\n}\n"],
+  "mappings": "AAOA,SAAS,WAAW,WAAW,aAAa,UAAU,UAAU,mBAAmB;AAEnF,MAAM,SAAS,WAAW,QAAQ;AAG3B,MAAM,iBAAiB;AAAA,EAC5B,qBAAqB,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,EACvD,gCAAgC,EAAE,MAAM,UAAU,MAAM,UAAU;AAAA,EAClE,sBAAsB,EAAE,MAAM,QAAQ,OAAO,SAAS,MAAM,UAAU;AACxE;AAOO,MAAM,sBAAsB;AAAA,EACjC,eAAe,EAAE,SAAS,eAAe,MAAM,UAAU;AAAA,EACzD,gBAAgB,EAAE,SAAS,WAAW,MAAM,OAAO,MAAM,UAAU;AAAA,EACnE,gBAAgB,EAAE,SAAS,WAAW,MAAM,OAAO,MAAM,UAAU;AAAA,EACnE,uBAAuB,EAAE,SAAS,uBAAuB,MAAM,SAAS,OAAO,SAAS,MAAM,UAAU;AAC1G;AAEA,eAAe,SAAS,WAAW,QAAQ;AACzC,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI;AACF,UAAM,OAAO,YAAY,WAAW,OAAO,MAAM;AACjD,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAI,cAAc;AAOlB,eAAsB,uBAAuB;AAC3C,MAAI,YAAa,QAAO;AAExB,QAAM,CAAC,QAAQ,OAAO,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC1C,SAAS,EAAE,MAAM,SAAS,GAAG,CAAC,YAAY,CAAC;AAAA,IAC3C,SAAS,EAAE,MAAM,UAAU,GAAG,CAAC,QAAQ,QAAQ,CAAC;AAAA,EAClD,CAAC;AAED,QAAM,MAAM,CAAC;AACb,MAAI,OAAQ,KAAI,KAAK,qBAAqB,8BAA8B;AACxE,MAAI,KAAK,oBAAoB;AAE7B,QAAM,UAAU,CAAC;AACjB,MAAI,QAAS,SAAQ,KAAK,aAAa;AACvC,UAAQ,KAAK,gBAAgB,gBAAgB,qBAAqB;AAElE,gBAAc,EAAE,KAAK,SAAS,QAAQ,QAAQ;AAC9C,SAAO;AACT;AAGA,eAAsB,gBAAgB,eAAuB;AAC3D,QAAM,YAAY,eAAe,aAAa;AAC9C,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,iCAAiC,aAAa,EAAE;AAEhF,MAAI,UAAU,SAAS,UAAU;AAC/B,UAAMA,QAAO,MAAM,OAAO,YAAY,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC;AAC/E,UAAMC,aAAY,IAAI,WAAW,MAAM,OAAO,UAAU,OAAOD,MAAK,SAAS,CAAC;AAC9E,WAAO;AAAA,MACL,MAAM,UAAU;AAAA,MAChB,WAAAC;AAAA,MACA,MAAM,aAAa,iBAAiB;AAClC,YAAI,gBAAgB,WAAW,GAAI,OAAM,IAAI,MAAM,4CAA4C;AAC/F,cAAM,OAAO,MAAM,OAAO,UAAU,OAAO,iBAAiB,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC;AACzF,cAAM,SAAS,IAAI,WAAW,MAAM,OAAO,WAAW,EAAE,MAAM,UAAU,QAAQ,KAAK,GAAGD,MAAK,YAAY,GAAG,CAAC;AAC7G,YAAI,OAAO,MAAM,CAAC,SAAS,SAAS,CAAC,GAAG;AACtC,gBAAM,IAAI,MAAM,6CAA6C;AAAA,QAC/D;AACA,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,MAAM,OAAO,YAAY,EAAE,MAAM,QAAQ,YAAY,UAAU,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;AAC1G,QAAM,YAAY,IAAI,WAAW,MAAM,OAAO,UAAU,OAAO,KAAK,SAAS,CAAC;AAC9E,SAAO;AAAA,IACL,MAAM,UAAU;AAAA,IAChB;AAAA,IACA,MAAM,aAAa,iBAAiB;AAClC,YAAM,OAAO,MAAM,OAAO;AAAA,QACxB;AAAA,QAAO;AAAA,QAAiB,EAAE,MAAM,QAAQ,YAAY,UAAU,MAAM;AAAA,QAAG;AAAA,QAAO,CAAC;AAAA,MACjF;AACA,aAAO,IAAI,WAAW,MAAM,OAAO,WAAW,EAAE,MAAM,QAAQ,QAAQ,KAAK,GAAG,KAAK,YAAY,GAAG,CAAC;AAAA,IACrG;AAAA,EACF;AACF;AAGO,SAAS,YAAY,SAAqB;AAC/C,SAAO,IAAI,UAAU,OAAO,EAAE,OAAO;AACvC;AAGA,eAAsB,mBAAmB,SAAqB;AAC5D,QAAM,SAAS,IAAI,WAAW,MAAM,OAAO,OAAO,WAAW,OAAO,CAAC;AACrE,SAAO,UAAU,SAAS,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC;AACtD;AAEA,eAAe,cAAc,eAAuB,SAAqB;AACvE,QAAM,YAAY,oBAAoB,aAAa;AACnD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,uCAAuC,aAAa,EAAE;AAEtF,QAAM,SAAS,IAAI,UAAU,OAAO;AACpC,QAAM,UAAU,OAAO,OAAO;AAC9B,MAAI,YAAY,UAAU,SAAS;AACjC,UAAM,IAAI,MAAM,0BAA0B,OAAO,yBAAyB,aAAa,GAAG;AAAA,EAC5F;AAEA,MAAI,UAAU,SAAS,WAAW;AAChC,WAAO,OAAO,UAAU,OAAO,OAAO,YAAY,GAAG,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;AAAA,EAC7F;AAEA,MAAI,UAAU,SAAS,OAAO;AAC5B,UAAM,WAAW,OAAO,MAAM;AAC9B,UAAM,UAAU,OAAO,MAAM;AAC7B,WAAO,OAAO;AAAA,MACZ;AAAA,MACA,EAAE,KAAK,OAAO,GAAG,YAAY,OAAO,GAAG,GAAG,YAAY,QAAQ,GAAG,KAAK,KAAK;AAAA,MAC3E,EAAE,MAAM,qBAAqB,MAAM,UAAU,KAAK;AAAA,MAClD;AAAA,MACA,CAAC,QAAQ;AAAA,IACX;AAAA,EACF;AAEA,SAAO,OAAO;AACd,SAAO,OAAO;AAAA,IACZ;AAAA,IAAO,OAAO,YAAY;AAAA,IAAG,EAAE,MAAM,SAAS,YAAY,UAAU,MAAM;AAAA,IAAG;AAAA,IAAO,CAAC,QAAQ;AAAA,EAC/F;AACF;AAGA,SAAS,eAAe,eAAuB,eAA2B;AACxE,QAAM,SAAS,IAAI,UAAU,aAAa;AAC1C,QAAM,QAAQ,OAAO,OAAO;AAC5B,MAAI,UAAU,eAAe;AAC3B,UAAM,IAAI,MAAM,6BAA6B,KAAK,sBAAsB,aAAa,GAAG;AAAA,EAC1F;AAEA,QAAM,MAAM,OAAO,YAAY;AAC/B,MAAI,oBAAoB,aAAa,GAAG,SAAS,QAAS,QAAO;AAIjE,QAAM,QAAQ,IAAI,UAAU,GAAG;AAC/B,QAAM,IAAI,MAAM,MAAM;AACtB,QAAM,IAAI,MAAM,MAAM;AACtB,SAAO,YAAY,SAAS,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,CAAC;AACrD;AAOA,eAAsB,uBAAuB,EAAE,WAAW,SAAS,eAAe,cAAAE,cAAa,GAAG;AAChG,QAAM,EAAE,MAAM,KAAK,IAAI,oBAAoB,SAAS;AACpD,QAAM,MAAM,MAAM,cAAc,WAAW,OAAO;AAClD,QAAM,YAAY,eAAe,WAAW,aAAa;AAIzD,QAAM,aAAa,SAAS,UACxB,EAAE,MAAM,SAAS,KAAK,IACtB,SAAS,QAAQ,EAAE,MAAM,oBAAoB,IAAI,EAAE,MAAM,UAAU;AAEvE,SAAO,OAAO,OAAO,YAAY,KAAK,WAAWA,aAAY;AAC/D;AAMA,eAAsB,aAAa;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAAG;AACD,QAAM,SAAS,IAAI,UAAU,IAAI;AACjC,SAAO,OAAO,aAAa;AAC3B,SAAO,OAAO,aAAa;AAC3B,SAAO,OAAO,aAAa;AAC3B,SAAO,OAAO,aAAa;AAC3B,SAAO,OAAO,WAAW;AACzB,SAAO,OAAO,eAAe;AAC7B,SAAO,OAAO,eAAe;AAC7B,SAAO,MAAM,YAAY;AACzB,SAAO,IAAI,WAAW,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK,CAAC,CAAC;AAChE;AAMA,eAAsB,UAAU,EAAE,MAAM,cAAc,cAAc,GAAG,QAAQ,WAAW,OAAO,GAAG;AAClG,QAAM,SAAS,IAAI,UAAU,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,EAAE,KAAK;AACrE,QAAM,OAAO,YAAY,QAAQ,GAAG,IAAI,WAAW,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,SAAS;AAErF,MAAI,WAAW,IAAI,WAAW,MAAM,OAAO,OAAO,MAAM,IAAI,CAAC;AAC7D,SAAO,SAAS,SAAS,QAAQ;AAC/B,UAAM,YAAY,IAAI,WAAW,MAAM,OAAO,OAAO,MAAM,YAAY,QAAQ,GAAG,QAAQ,CAAC,CAAC;AAC5F,eAAW,YAAY,UAAU,SAAS;AAAA,EAC5C;AACA,SAAO,SAAS,SAAS,GAAG,MAAM;AACpC;",
+  "names": ["pair", "publicKey", "exchangeHash"]
+}

package/dist/protocols/ssh/messages.js

@@ -0,0 +1,55 @@
+const MSG = {
+  DISCONNECT: 1,
+  IGNORE: 2,
+  UNIMPLEMENTED: 3,
+  DEBUG: 4,
+  SERVICE_REQUEST: 5,
+  SERVICE_ACCEPT: 6,
+  EXT_INFO: 7,
+  KEXINIT: 20,
+  NEWKEYS: 21,
+  KEX_ECDH_INIT: 30,
+  KEX_ECDH_REPLY: 31,
+  USERAUTH_REQUEST: 50,
+  USERAUTH_FAILURE: 51,
+  USERAUTH_SUCCESS: 52,
+  USERAUTH_BANNER: 53,
+  USERAUTH_INFO_REQUEST: 60,
+  USERAUTH_INFO_RESPONSE: 61,
+  GLOBAL_REQUEST: 80,
+  REQUEST_SUCCESS: 81,
+  REQUEST_FAILURE: 82,
+  CHANNEL_OPEN: 90,
+  CHANNEL_OPEN_CONFIRMATION: 91,
+  CHANNEL_OPEN_FAILURE: 92,
+  CHANNEL_WINDOW_ADJUST: 93,
+  CHANNEL_DATA: 94,
+  CHANNEL_EXTENDED_DATA: 95,
+  CHANNEL_EOF: 96,
+  CHANNEL_CLOSE: 97,
+  CHANNEL_REQUEST: 98,
+  CHANNEL_SUCCESS: 99,
+  CHANNEL_FAILURE: 100
+};
+const EXTENDED_DATA_STDERR = 1;
+const DISCONNECT_REASON = {
+  1: "the host reported a protocol error",
+  2: "the host could not agree on a key exchange method",
+  3: "the key exchange failed",
+  5: "the host ran out of resources",
+  6: "the connection was lost below SSH",
+  7: "the host application ended the connection",
+  8: "too many connections",
+  9: "authentication was cancelled by the user",
+  10: "no more authentication methods are available",
+  11: "the host closed the connection",
+  12: "authentication was cancelled by the host",
+  14: "the host refused the authentication attempt",
+  15: "the host closed the connection while authenticating"
+};
+export {
+  DISCONNECT_REASON,
+  EXTENDED_DATA_STDERR,
+  MSG
+};
+//# sourceMappingURL=messages.js.map

package/dist/protocols/ssh/messages.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/protocols/ssh/messages.ts"],
+  "sourcesContent": ["// SSH message numbers and the human wording for a disconnect (RFC 4250, 4253).\n\nexport const MSG = {\n  DISCONNECT: 1,\n  IGNORE: 2,\n  UNIMPLEMENTED: 3,\n  DEBUG: 4,\n  SERVICE_REQUEST: 5,\n  SERVICE_ACCEPT: 6,\n  EXT_INFO: 7,\n  KEXINIT: 20,\n  NEWKEYS: 21,\n  KEX_ECDH_INIT: 30,\n  KEX_ECDH_REPLY: 31,\n  USERAUTH_REQUEST: 50,\n  USERAUTH_FAILURE: 51,\n  USERAUTH_SUCCESS: 52,\n  USERAUTH_BANNER: 53,\n  USERAUTH_INFO_REQUEST: 60,\n  USERAUTH_INFO_RESPONSE: 61,\n  GLOBAL_REQUEST: 80,\n  REQUEST_SUCCESS: 81,\n  REQUEST_FAILURE: 82,\n  CHANNEL_OPEN: 90,\n  CHANNEL_OPEN_CONFIRMATION: 91,\n  CHANNEL_OPEN_FAILURE: 92,\n  CHANNEL_WINDOW_ADJUST: 93,\n  CHANNEL_DATA: 94,\n  CHANNEL_EXTENDED_DATA: 95,\n  CHANNEL_EOF: 96,\n  CHANNEL_CLOSE: 97,\n  CHANNEL_REQUEST: 98,\n  CHANNEL_SUCCESS: 99,\n  CHANNEL_FAILURE: 100,\n};\n\n/** SSH_EXTENDED_DATA_STDERR. */\nexport const EXTENDED_DATA_STDERR = 1;\n\nexport const DISCONNECT_REASON = {\n  1: 'the host reported a protocol error',\n  2: 'the host could not agree on a key exchange method',\n  3: 'the key exchange failed',\n  5: 'the host ran out of resources',\n  6: 'the connection was lost below SSH',\n  7: 'the host application ended the connection',\n  8: 'too many connections',\n  9: 'authentication was cancelled by the user',\n  10: 'no more authentication methods are available',\n  11: 'the host closed the connection',\n  12: 'authentication was cancelled by the host',\n  14: 'the host refused the authentication attempt',\n  15: 'the host closed the connection while authenticating',\n};\n"],
+  "mappings": "AAEO,MAAM,MAAM;AAAA,EACjB,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,OAAO;AAAA,EACP,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,UAAU;AAAA,EACV,SAAS;AAAA,EACT,SAAS;AAAA,EACT,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,uBAAuB;AAAA,EACvB,wBAAwB;AAAA,EACxB,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,2BAA2B;AAAA,EAC3B,sBAAsB;AAAA,EACtB,uBAAuB;AAAA,EACvB,cAAc;AAAA,EACd,uBAAuB;AAAA,EACvB,aAAa;AAAA,EACb,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,iBAAiB;AACnB;AAGO,MAAM,uBAAuB;AAE7B,MAAM,oBAAoB;AAAA,EAC/B,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AAAA,EACJ,IAAI;AACN;",
+  "names": []
+}