dshb-exec-ssh 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 DSH-HoneyBee Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/cordis.patch.yml

@@ -0,0 +1,3 @@
+- insert:
+    - id: dshb-exec-ssh
+      name: dshb-exec-ssh

package/lib/connection-pool.d.ts

@@ -0,0 +1,25 @@
+import { n as Context } from "./index-CDfaZYyK.js";
+import { n as SshConnection, o as SshSecrets, s as SshTarget } from "./connection-w4OewdmD.js";
+//#region src/connection-pool.d.ts
+interface PooledConnection {
+  target: SshTarget;
+  secrets: SshSecrets;
+  connection: SshConnection;
+}
+declare class SshConnectionPool {
+  private readonly ctx;
+  private readonly pool;
+  constructor(ctx: Context);
+  private key;
+  acquire(target: SshTarget, secrets: SshSecrets): SshConnection;
+  test(target: SshTarget, secrets: SshSecrets): Promise<{
+    ok: boolean;
+    error?: string;
+    category?: string;
+  }>;
+  release(target: SshTarget): void;
+  closeAll(): void;
+}
+//#endregion
+export { PooledConnection, SshConnectionPool };
+//# sourceMappingURL=connection-pool.d.ts.map

package/lib/connection-pool.js

@@ -0,0 +1,54 @@
+import { SshConnection, toConnectionError } from "./connection.js";
+//#region src/connection-pool.ts
+var SshConnectionPool = class {
+	ctx;
+	pool = /* @__PURE__ */ new Map();
+	constructor(ctx) {
+		this.ctx = ctx;
+	}
+	key(target) {
+		return `${target.host}:${target.port}:${target.username}`;
+	}
+	acquire(target, secrets) {
+		const k = this.key(target);
+		const existing = this.pool.get(k);
+		if (existing) return existing.connection;
+		const connection = new SshConnection(target, secrets);
+		this.pool.set(k, {
+			target,
+			secrets,
+			connection
+		});
+		return connection;
+	}
+	async test(target, secrets) {
+		try {
+			const conn = new SshConnection(target, secrets);
+			await conn.getClient();
+			conn.close();
+			return { ok: true };
+		} catch (err) {
+			const e = toConnectionError(err);
+			return {
+				ok: false,
+				error: e.message,
+				category: e.category
+			};
+		}
+	}
+	release(target) {
+		const k = this.key(target);
+		const entry = this.pool.get(k);
+		if (!entry) return;
+		entry.connection.close();
+		this.pool.delete(k);
+	}
+	closeAll() {
+		for (const entry of this.pool.values()) entry.connection.close();
+		this.pool.clear();
+	}
+};
+//#endregion
+export { SshConnectionPool };
+
+//# sourceMappingURL=connection-pool.js.map

package/lib/connection-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-pool.js","names":[],"sources":["../src/connection-pool.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis'\nimport { SshConnection, type SshSecrets, type SshTarget, toConnectionError } from './connection.js'\n\nexport interface PooledConnection {\n  target: SshTarget\n  secrets: SshSecrets\n  connection: SshConnection\n}\n\nexport class SshConnectionPool {\n  private readonly pool = new Map<string, PooledConnection>()\n\n  constructor(private readonly ctx: Context) {}\n\n  private key(target: SshTarget): string {\n    return `${target.host}:${target.port}:${target.username}`\n  }\n\n  acquire(target: SshTarget, secrets: SshSecrets): SshConnection {\n    const k = this.key(target)\n    const existing = this.pool.get(k)\n    if (existing) return existing.connection\n    const connection = new SshConnection(target, secrets)\n    this.pool.set(k, { target, secrets, connection })\n    return connection\n  }\n\n  async test(target: SshTarget, secrets: SshSecrets): Promise<{ ok: boolean; error?: string; category?: string }> {\n    try {\n      const conn = new SshConnection(target, secrets)\n      await conn.getClient()\n      conn.close()\n      return { ok: true }\n    } catch (err) {\n      const e = toConnectionError(err)\n      return { ok: false, error: e.message, category: e.category }\n    }\n  }\n\n  release(target: SshTarget): void {\n    const k = this.key(target)\n    const entry = this.pool.get(k)\n    if (!entry) return\n    entry.connection.close()\n    this.pool.delete(k)\n  }\n\n  closeAll(): void {\n    for (const entry of this.pool.values()) entry.connection.close()\n    this.pool.clear()\n  }\n}\n"],"mappings":";;AASA,IAAa,oBAAb,MAA+B;CAGA;CAF7B,uBAAwB,IAAI,IAA8B;CAE1D,YAAY,KAA+B;EAAd,KAAA,MAAA;CAAe;CAE5C,IAAY,QAA2B;EACrC,OAAO,GAAG,OAAO,KAAK,GAAG,OAAO,KAAK,GAAG,OAAO;CACjD;CAEA,QAAQ,QAAmB,SAAoC;EAC7D,MAAM,IAAI,KAAK,IAAI,MAAM;EACzB,MAAM,WAAW,KAAK,KAAK,IAAI,CAAC;EAChC,IAAI,UAAU,OAAO,SAAS;EAC9B,MAAM,aAAa,IAAI,cAAc,QAAQ,OAAO;EACpD,KAAK,KAAK,IAAI,GAAG;GAAE;GAAQ;GAAS;EAAW,CAAC;EAChD,OAAO;CACT;CAEA,MAAM,KAAK,QAAmB,SAAkF;EAC9G,IAAI;GACF,MAAM,OAAO,IAAI,cAAc,QAAQ,OAAO;GAC9C,MAAM,KAAK,UAAU;GACrB,KAAK,MAAM;GACX,OAAO,EAAE,IAAI,KAAK;EACpB,SAAS,KAAK;GACZ,MAAM,IAAI,kBAAkB,GAAG;GAC/B,OAAO;IAAE,IAAI;IAAO,OAAO,EAAE;IAAS,UAAU,EAAE;GAAS;EAC7D;CACF;CAEA,QAAQ,QAAyB;EAC/B,MAAM,IAAI,KAAK,IAAI,MAAM;EACzB,MAAM,QAAQ,KAAK,KAAK,IAAI,CAAC;EAC7B,IAAI,CAAC,OAAO;EACZ,MAAM,WAAW,MAAM;EACvB,KAAK,KAAK,OAAO,CAAC;CACpB;CAEA,WAAiB;EACf,KAAK,MAAM,SAAS,KAAK,KAAK,OAAO,GAAG,MAAM,WAAW,MAAM;EAC/D,KAAK,KAAK,MAAM;CAClB;AACF"}

package/lib/connection-w4OewdmD.d.ts

@@ -0,0 +1,46 @@
+import { Client } from "ssh2";
+//#region src/connection.d.ts
+interface SshAuthConfig {
+  kind: 'password' | 'key' | 'agent';
+  keyPath?: string;
+}
+interface SshJumpHop {
+  host: string;
+  port?: number;
+  username?: string;
+  keyPath?: string;
+}
+interface SshTarget {
+  host: string;
+  port: number;
+  username: string;
+  auth: SshAuthConfig;
+  jump?: SshJumpHop[];
+}
+interface SshSecrets {
+  password?: string;
+  privateKey?: string;
+  passphrase?: string;
+}
+type SshErrorCategory = 'auth' | 'network' | 'hostkey' | 'timeout' | 'unknown';
+interface SshConnectionError extends Error {
+  category: SshErrorCategory;
+  cause?: unknown;
+}
+declare function classifySshError(err: unknown): SshErrorCategory;
+declare function toConnectionError(err: unknown): SshConnectionError;
+declare class SshConnection {
+  private readonly target;
+  private readonly secrets;
+  private client;
+  private connecting;
+  private closed;
+  constructor(target: SshTarget, secrets: SshSecrets);
+  getClient(): Promise<Client>;
+  private connectWithRetry;
+  private connectOnce;
+  close(): void;
+}
+//#endregion
+export { SshJumpHop as a, classifySshError as c, SshErrorCategory as i, toConnectionError as l, SshConnection as n, SshSecrets as o, SshConnectionError as r, SshTarget as s, SshAuthConfig as t };
+//# sourceMappingURL=connection-w4OewdmD.d.ts.map

package/lib/connection.d.ts

@@ -0,0 +1,2 @@
+import { a as SshJumpHop, c as classifySshError, i as SshErrorCategory, l as toConnectionError, n as SshConnection, o as SshSecrets, r as SshConnectionError, s as SshTarget, t as SshAuthConfig } from "./connection-w4OewdmD.js";
+export { SshAuthConfig, SshConnection, SshConnectionError, SshErrorCategory, SshJumpHop, SshSecrets, SshTarget, classifySshError, toConnectionError };

package/lib/connection.js

@@ -0,0 +1,120 @@
+import { Client } from "ssh2";
+//#region src/connection.ts
+const HANDSHAKE_TIMEOUT_MS = 3e4;
+const MAX_RETRIES = 5;
+const BASE_DELAY_MS = 500;
+function classifySshError(err) {
+	const msg = err instanceof Error ? err.message.toLowerCase() : String(err).toLowerCase();
+	if (msg.includes("all configured authentication methods failed") || msg.includes("auth") || msg.includes("password") || msg.includes("publickey")) return "auth";
+	if (msg.includes("host key") || msg.includes("man-in-the-middle") || msg.includes("fingerprint")) return "hostkey";
+	if (msg.includes("timed out") || msg.includes("timeout") || msg.includes("ready timeout")) return "timeout";
+	if (msg.includes("econnrefused") || msg.includes("econnreset") || msg.includes("enotfound") || msg.includes("connect") || msg.includes("network")) return "network";
+	return "unknown";
+}
+function toConnectionError(err) {
+	const category = classifySshError(err);
+	const message = err instanceof Error ? err.message : String(err);
+	const e = new Error(message);
+	e.category = category;
+	e.cause = err;
+	return e;
+}
+function buildConnectConfig(target, secrets) {
+	const cfg = {
+		host: target.host,
+		port: target.port,
+		username: target.username,
+		readyTimeout: HANDSHAKE_TIMEOUT_MS,
+		keepaliveInterval: 0,
+		keepaliveCountMax: 3
+	};
+	switch (target.auth.kind) {
+		case "password":
+			if (secrets.password) cfg.password = secrets.password;
+			break;
+		case "key":
+			if (secrets.privateKey) {
+				cfg.privateKey = secrets.privateKey;
+				if (secrets.passphrase) cfg.passphrase = secrets.passphrase;
+			}
+			break;
+		case "agent": cfg.agent = process.env.SSH_AUTH_SOCK ?? void 0;
+	}
+	return cfg;
+}
+var SshConnection = class {
+	target;
+	secrets;
+	client = null;
+	connecting = null;
+	closed = false;
+	constructor(target, secrets) {
+		this.target = target;
+		this.secrets = secrets;
+	}
+	async getClient() {
+		if (this.closed) throw toConnectionError(/* @__PURE__ */ new Error("connection closed"));
+		if (this.client) return this.client;
+		if (this.connecting) return this.connecting;
+		this.connecting = this.connectWithRetry();
+		try {
+			this.client = await this.connecting;
+			this.client.on("close", () => {
+				this.client = null;
+			});
+			this.client.on("error", () => {
+				this.client = null;
+			});
+			return this.client;
+		} finally {
+			this.connecting = null;
+		}
+	}
+	async connectWithRetry() {
+		let lastErr;
+		for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+			if (this.closed) throw toConnectionError(/* @__PURE__ */ new Error("connection closed"));
+			try {
+				return await this.connectOnce();
+			} catch (err) {
+				lastErr = err;
+				const cat = classifySshError(err);
+				if (cat === "auth" || cat === "hostkey") throw toConnectionError(err);
+				if (attempt < MAX_RETRIES) {
+					const delay = BASE_DELAY_MS * Math.pow(2, attempt);
+					await new Promise((r) => setTimeout(r, delay));
+					continue;
+				}
+			}
+		}
+		throw toConnectionError(lastErr);
+	}
+	connectOnce() {
+		return new Promise((resolve, reject) => {
+			const client = new Client();
+			let settled = false;
+			const finish = (fn) => {
+				if (settled) return;
+				settled = true;
+				fn();
+			};
+			client.once("ready", () => finish(() => resolve(client)));
+			client.once("error", (err) => finish(() => reject(err)));
+			client.connect(buildConnectConfig(this.target, this.secrets));
+		});
+	}
+	close() {
+		this.closed = true;
+		this.connecting = null;
+		if (this.client) {
+			try {
+				this.client.end();
+			} catch {}
+			this.client = null;
+		}
+	}
+};
+//#endregion
+export { SshConnection, classifySshError, toConnectionError };
+
+//# sourceMappingURL=connection.js.map

package/lib/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","names":[],"sources":["../src/connection.ts"],"sourcesContent":["import { Client, type ConnectConfig } from 'ssh2'\n\nexport interface SshAuthConfig {\n  kind: 'password' | 'key' | 'agent'\n  keyPath?: string\n}\n\nexport interface SshJumpHop {\n  host: string\n  port?: number\n  username?: string\n  keyPath?: string\n}\n\nexport interface SshTarget {\n  host: string\n  port: number\n  username: string\n  auth: SshAuthConfig\n  jump?: SshJumpHop[]\n}\n\nexport interface SshSecrets {\n  password?: string\n  privateKey?: string\n  passphrase?: string\n}\n\nexport type SshErrorCategory = 'auth' | 'network' | 'hostkey' | 'timeout' | 'unknown'\n\nexport interface SshConnectionError extends Error {\n  category: SshErrorCategory\n  cause?: unknown\n}\n\nconst HANDSHAKE_TIMEOUT_MS = 30_000\nconst MAX_RETRIES = 5\nconst BASE_DELAY_MS = 500\n\nexport function classifySshError(err: unknown): SshErrorCategory {\n  const msg = err instanceof Error ? err.message.toLowerCase() : String(err).toLowerCase()\n  if (msg.includes('all configured authentication methods failed') || msg.includes('auth') || msg.includes('password') || msg.includes('publickey')) return 'auth'\n  if (msg.includes('host key') || msg.includes('man-in-the-middle') || msg.includes('fingerprint')) return 'hostkey'\n  if (msg.includes('timed out') || msg.includes('timeout') || msg.includes('ready timeout')) return 'timeout'\n  if (msg.includes('econnrefused') || msg.includes('econnreset') || msg.includes('enotfound') || msg.includes('connect') || msg.includes('network')) return 'network'\n  return 'unknown'\n}\n\nexport function toConnectionError(err: unknown): SshConnectionError {\n  const category = classifySshError(err)\n  const message = err instanceof Error ? err.message : String(err)\n  const e = new Error(message) as SshConnectionError\n  e.category = category\n  e.cause = err\n  return e\n}\n\nfunction buildConnectConfig(target: SshTarget, secrets: SshSecrets): ConnectConfig {\n  const cfg: ConnectConfig = {\n    host: target.host,\n    port: target.port,\n    username: target.username,\n    readyTimeout: HANDSHAKE_TIMEOUT_MS,\n    keepaliveInterval: 0,\n    keepaliveCountMax: 3,\n  }\n  switch (target.auth.kind) {\n    case 'password':\n      if (secrets.password) cfg.password = secrets.password\n      break\n    case 'key':\n      if (secrets.privateKey) {\n        cfg.privateKey = secrets.privateKey\n        if (secrets.passphrase) cfg.passphrase = secrets.passphrase\n      }\n      break\n    case 'agent':\n      cfg.agent = process.env.SSH_AUTH_SOCK ?? undefined\n      break\n  }\n  return cfg\n}\n\nexport class SshConnection {\n  private client: Client | null = null\n  private connecting: Promise<Client> | null = null\n  private closed = false\n\n  constructor(\n    private readonly target: SshTarget,\n    private readonly secrets: SshSecrets,\n  ) {}\n\n  async getClient(): Promise<Client> {\n    if (this.closed) throw toConnectionError(new Error('connection closed'))\n    if (this.client) return this.client\n    if (this.connecting) return this.connecting\n    this.connecting = this.connectWithRetry()\n    try {\n      this.client = await this.connecting\n      this.client.on('close', () => {\n        this.client = null\n      })\n      this.client.on('error', () => {\n        this.client = null\n      })\n      return this.client\n    } finally {\n      this.connecting = null\n    }\n  }\n\n  private async connectWithRetry(): Promise<Client> {\n    let lastErr: unknown\n    for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {\n      if (this.closed) throw toConnectionError(new Error('connection closed'))\n      try {\n        return await this.connectOnce()\n      } catch (err) {\n        lastErr = err\n        const cat = classifySshError(err)\n        if (cat === 'auth' || cat === 'hostkey') throw toConnectionError(err)\n        if (attempt < MAX_RETRIES) {\n          const delay = BASE_DELAY_MS * Math.pow(2, attempt)\n          await new Promise((r) => setTimeout(r, delay))\n          continue\n        }\n      }\n    }\n    throw toConnectionError(lastErr)\n  }\n\n  private connectOnce(): Promise<Client> {\n    return new Promise((resolve, reject) => {\n      const client = new Client()\n      let settled = false\n      const finish = (fn: () => void) => {\n        if (settled) return\n        settled = true\n        fn()\n      }\n      client.once('ready', () => finish(() => resolve(client)))\n      client.once('error', (err: unknown) => finish(() => reject(err)))\n      client.connect(buildConnectConfig(this.target, this.secrets))\n    })\n  }\n\n  close(): void {\n    this.closed = true\n    this.connecting = null\n    if (this.client) {\n      try {\n        this.client.end()\n      } catch {}\n      this.client = null\n    }\n  }\n}\n"],"mappings":";;AAmCA,MAAM,uBAAuB;AAC7B,MAAM,cAAc;AACpB,MAAM,gBAAgB;AAEtB,SAAgB,iBAAiB,KAAgC;CAC/D,MAAM,MAAM,eAAe,QAAQ,IAAI,QAAQ,YAAY,IAAI,OAAO,GAAG,CAAC,CAAC,YAAY;CACvF,IAAI,IAAI,SAAS,8CAA8C,KAAK,IAAI,SAAS,MAAM,KAAK,IAAI,SAAS,UAAU,KAAK,IAAI,SAAS,WAAW,GAAG,OAAO;CAC1J,IAAI,IAAI,SAAS,UAAU,KAAK,IAAI,SAAS,mBAAmB,KAAK,IAAI,SAAS,aAAa,GAAG,OAAO;CACzG,IAAI,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,SAAS,KAAK,IAAI,SAAS,eAAe,GAAG,OAAO;CAClG,IAAI,IAAI,SAAS,cAAc,KAAK,IAAI,SAAS,YAAY,KAAK,IAAI,SAAS,WAAW,KAAK,IAAI,SAAS,SAAS,KAAK,IAAI,SAAS,SAAS,GAAG,OAAO;CAC1J,OAAO;AACT;AAEA,SAAgB,kBAAkB,KAAkC;CAClE,MAAM,WAAW,iBAAiB,GAAG;CACrC,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;CAC/D,MAAM,IAAI,IAAI,MAAM,OAAO;CAC3B,EAAE,WAAW;CACb,EAAE,QAAQ;CACV,OAAO;AACT;AAEA,SAAS,mBAAmB,QAAmB,SAAoC;CACjF,MAAM,MAAqB;EACzB,MAAM,OAAO;EACb,MAAM,OAAO;EACb,UAAU,OAAO;EACjB,cAAc;EACd,mBAAmB;EACnB,mBAAmB;CACrB;CACA,QAAQ,OAAO,KAAK,MAApB;EACE,KAAK;GACH,IAAI,QAAQ,UAAU,IAAI,WAAW,QAAQ;GAC7C;EACF,KAAK;GACH,IAAI,QAAQ,YAAY;IACtB,IAAI,aAAa,QAAQ;IACzB,IAAI,QAAQ,YAAY,IAAI,aAAa,QAAQ;GACnD;GACA;EACF,KAAK,SACH,IAAI,QAAQ,QAAQ,IAAI,iBAAiB,KAAA;CAE7C;CACA,OAAO;AACT;AAEA,IAAa,gBAAb,MAA2B;CAMN;CACA;CANnB,SAAgC;CAChC,aAA6C;CAC7C,SAAiB;CAEjB,YACE,QACA,SACA;EAFiB,KAAA,SAAA;EACA,KAAA,UAAA;CAChB;CAEH,MAAM,YAA6B;EACjC,IAAI,KAAK,QAAQ,MAAM,kCAAkB,IAAI,MAAM,mBAAmB,CAAC;EACvE,IAAI,KAAK,QAAQ,OAAO,KAAK;EAC7B,IAAI,KAAK,YAAY,OAAO,KAAK;EACjC,KAAK,aAAa,KAAK,iBAAiB;EACxC,IAAI;GACF,KAAK,SAAS,MAAM,KAAK;GACzB,KAAK,OAAO,GAAG,eAAe;IAC5B,KAAK,SAAS;GAChB,CAAC;GACD,KAAK,OAAO,GAAG,eAAe;IAC5B,KAAK,SAAS;GAChB,CAAC;GACD,OAAO,KAAK;EACd,UAAU;GACR,KAAK,aAAa;EACpB;CACF;CAEA,MAAc,mBAAoC;EAChD,IAAI;EACJ,KAAK,IAAI,UAAU,GAAG,WAAW,aAAa,WAAW;GACvD,IAAI,KAAK,QAAQ,MAAM,kCAAkB,IAAI,MAAM,mBAAmB,CAAC;GACvE,IAAI;IACF,OAAO,MAAM,KAAK,YAAY;GAChC,SAAS,KAAK;IACZ,UAAU;IACV,MAAM,MAAM,iBAAiB,GAAG;IAChC,IAAI,QAAQ,UAAU,QAAQ,WAAW,MAAM,kBAAkB,GAAG;IACpE,IAAI,UAAU,aAAa;KACzB,MAAM,QAAQ,gBAAgB,KAAK,IAAI,GAAG,OAAO;KACjD,MAAM,IAAI,SAAS,MAAM,WAAW,GAAG,KAAK,CAAC;KAC7C;IACF;GACF;EACF;EACA,MAAM,kBAAkB,OAAO;CACjC;CAEA,cAAuC;EACrC,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,SAAS,IAAI,OAAO;GAC1B,IAAI,UAAU;GACd,MAAM,UAAU,OAAmB;IACjC,IAAI,SAAS;IACb,UAAU;IACV,GAAG;GACL;GACA,OAAO,KAAK,eAAe,aAAa,QAAQ,MAAM,CAAC,CAAC;GACxD,OAAO,KAAK,UAAU,QAAiB,aAAa,OAAO,GAAG,CAAC,CAAC;GAChE,OAAO,QAAQ,mBAAmB,KAAK,QAAQ,KAAK,OAAO,CAAC;EAC9D,CAAC;CACH;CAEA,QAAc;EACZ,KAAK,SAAS;EACd,KAAK,aAAa;EAClB,IAAI,KAAK,QAAQ;GACf,IAAI;IACF,KAAK,OAAO,IAAI;GAClB,QAAQ,CAAC;GACT,KAAK,SAAS;EAChB;CACF;AACF"}

package/lib/env-scrub.d.ts

@@ -0,0 +1,7 @@
+//#region src/env-scrub.d.ts
+declare function shouldScrubVar(name: string): boolean;
+declare function scrubEnv(env: Record<string, string>): Record<string, string>;
+declare const RUNNER_ENV_HINTS: string[];
+//#endregion
+export { RUNNER_ENV_HINTS, scrubEnv, shouldScrubVar };
+//# sourceMappingURL=env-scrub.d.ts.map

package/lib/env-scrub.js

@@ -0,0 +1,40 @@
+//#region src/env-scrub.ts
+const DANGEROUS_PREFIXES = [
+	"DSH",
+	"MCAI",
+	"OPENAI",
+	"ANTHROPIC",
+	"DEEPSEEK",
+	"LLM",
+	"API_KEY",
+	"TOKEN",
+	"SECRET",
+	"PASSWORD",
+	"CREDENTIAL"
+];
+function shouldScrubVar(name) {
+	const upper = name.toUpperCase();
+	return DANGEROUS_PREFIXES.some((p) => upper === p || upper.startsWith(`${p}_`));
+}
+function scrubEnv(env) {
+	const result = {};
+	for (const [key, value] of Object.entries(env)) if (!shouldScrubVar(key)) result[key] = value;
+	return result;
+}
+const RUNNER_ENV_HINTS = [
+	"DSH_*",
+	"MCAI_*",
+	"OPENAI*",
+	"ANTHROPIC*",
+	"DEEPSEEK*",
+	"LLM_*",
+	"API_KEY*",
+	"TOKEN*",
+	"SECRET*",
+	"PASSWORD*",
+	"CREDENTIAL*"
+];
+//#endregion
+export { RUNNER_ENV_HINTS, scrubEnv, shouldScrubVar };
+
+//# sourceMappingURL=env-scrub.js.map

package/lib/env-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-scrub.js","names":[],"sources":["../src/env-scrub.ts"],"sourcesContent":["const DANGEROUS_PREFIXES = ['DSH', 'MCAI', 'OPENAI', 'ANTHROPIC', 'DEEPSEEK', 'LLM', 'API_KEY', 'TOKEN', 'SECRET', 'PASSWORD', 'CREDENTIAL']\n\nexport function shouldScrubVar(name: string): boolean {\n  const upper = name.toUpperCase()\n  return DANGEROUS_PREFIXES.some((p) => upper === p || upper.startsWith(`${p}_`))\n}\n\nexport function scrubEnv(env: Record<string, string>): Record<string, string> {\n  const result: Record<string, string> = {}\n  for (const [key, value] of Object.entries(env)) {\n    if (!shouldScrubVar(key)) result[key] = value\n  }\n  return result\n}\n\nexport const RUNNER_ENV_HINTS = [\n  'DSH_*',\n  'MCAI_*',\n  'OPENAI*',\n  'ANTHROPIC*',\n  'DEEPSEEK*',\n  'LLM_*',\n  'API_KEY*',\n  'TOKEN*',\n  'SECRET*',\n  'PASSWORD*',\n  'CREDENTIAL*',\n]\n"],"mappings":";AAAA,MAAM,qBAAqB;CAAC;CAAO;CAAQ;CAAU;CAAa;CAAY;CAAO;CAAW;CAAS;CAAU;CAAY;AAAY;AAE3I,SAAgB,eAAe,MAAuB;CACpD,MAAM,QAAQ,KAAK,YAAY;CAC/B,OAAO,mBAAmB,MAAM,MAAM,UAAU,KAAK,MAAM,WAAW,GAAG,EAAE,EAAE,CAAC;AAChF;AAEA,SAAgB,SAAS,KAAqD;CAC5E,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,GAAG,GAC3C,IAAI,CAAC,eAAe,GAAG,GAAG,OAAO,OAAO;CAE1C,OAAO;AACT;AAEA,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF"}

package/lib/executor.d.ts

@@ -0,0 +1,46 @@
+import { n as SshConnection } from "./connection-w4OewdmD.js";
+//#region src/executor.d.ts
+interface ExecResult {
+  code: number;
+  signal?: string;
+  stdout: string;
+  stderr: string;
+}
+declare class SshExecutor {
+  private readonly connection;
+  private readonly nodeId;
+  private readonly audit?;
+  private sftpCache;
+  constructor(connection: SshConnection, nodeId?: string, audit?: ((op: string, target: string, result: string) => void) | undefined);
+  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<ExecResult>;
+  sftp(): Promise<import('ssh2').SFTPWrapper>;
+  readFile(path: string): Promise<Buffer>;
+  writeFile(path: string, content: Buffer | string): Promise<void>;
+  listDir(path: string): Promise<Array<{
+    name: string;
+    isDir: boolean;
+    isFile: boolean;
+    isSymlink: boolean;
+    size: number;
+    mtime: number;
+  }>>;
+  stat(path: string): Promise<{
+    size: number;
+    mtime: number;
+    isDirectory: boolean;
+    isFile: boolean;
+  } | undefined>;
+  mkdir(path: string): Promise<void>;
+  remove(path: string): Promise<void>;
+  rename(src: string, dest: string): Promise<void>;
+  ensureRg(): Promise<void>;
+  pty(argv: string[], cwd: string, _env: Record<string, string>, cols: number, rows: number): Promise<{
+    channel: import('ssh2').ClientChannel;
+    onData: (cb: (chunk: Buffer) => void) => void;
+    resize: (cols: number, rows: number) => void;
+    kill: () => void;
+  }>;
+}
+//#endregion
+export { ExecResult, SshExecutor };
+//# sourceMappingURL=executor.d.ts.map

package/lib/executor.js

@@ -0,0 +1,212 @@
+import { REMOTE_RUNNER_COMMAND, encodeRunnerPayload } from "./runner.js";
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+//#region src/executor.ts
+var SshExecutor = class {
+	connection;
+	nodeId;
+	audit;
+	sftpCache = null;
+	constructor(connection, nodeId = "unknown", audit) {
+		this.connection = connection;
+		this.nodeId = nodeId;
+		this.audit = audit;
+	}
+	async exec(argv, cwd, env = {}, stdinData) {
+		const client = await this.connection.getClient();
+		const body = encodeRunnerPayload({
+			argv,
+			cwd,
+			env
+		});
+		const input = stdinData ? Buffer.concat([body, stdinData]) : body;
+		return new Promise((resolve, reject) => {
+			client.exec(REMOTE_RUNNER_COMMAND, (err, channel) => {
+				if (err) {
+					reject(err);
+					return;
+				}
+				const stdout = [];
+				const stderr = [];
+				channel.stdout.on("data", (chunk) => stdout.push(chunk));
+				channel.stderr.on("data", (chunk) => stderr.push(chunk));
+				channel.on("close", (code, signal) => {
+					this.audit?.("exec", argv.join(" "), `code=${code ?? 0}`);
+					resolve({
+						code: code ?? 0,
+						signal,
+						stdout: Buffer.concat(stdout).toString("utf8"),
+						stderr: Buffer.concat(stderr).toString("utf8")
+					});
+				});
+				channel.on("error", reject);
+				channel.end(input);
+			});
+		});
+	}
+	async sftp() {
+		if (this.sftpCache) return this.sftpCache;
+		const client = await this.connection.getClient();
+		this.sftpCache = new Promise((resolve, reject) => {
+			client.sftp((err, sftp) => {
+				if (err) reject(err);
+				else resolve(sftp);
+			});
+		});
+		return this.sftpCache;
+	}
+	async readFile(path) {
+		const sftp = await this.sftp();
+		return new Promise((resolve, reject) => {
+			sftp.readFile(path, (err, data) => err ? reject(err) : resolve(data));
+		});
+	}
+	async writeFile(path, content) {
+		const sftp = await this.sftp();
+		const tmp = `${path}.dshb-tmp-${process.pid}-${Date.now()}`;
+		return new Promise((resolve, reject) => {
+			sftp.writeFile(tmp, content, (writeErr) => {
+				if (writeErr) {
+					reject(writeErr);
+					return;
+				}
+				sftp.ext_openssh_rename(tmp, path, (renameErr) => {
+					if (renameErr) reject(renameErr);
+					else {
+						this.audit?.("write", path, "ok");
+						resolve();
+					}
+				});
+			});
+		});
+	}
+	async listDir(path) {
+		const sftp = await this.sftp();
+		return new Promise((resolve, reject) => {
+			sftp.readdir(path, (err, list) => {
+				if (err) {
+					reject(err);
+					return;
+				}
+				resolve(list.map((e) => ({
+					name: e.filename,
+					isDir: e.attrs.isDirectory(),
+					isFile: e.attrs.isFile(),
+					isSymlink: e.attrs.isSymbolicLink(),
+					size: Number(e.attrs.size),
+					mtime: e.attrs.mtime * 1e3
+				})));
+			});
+		});
+	}
+	async stat(path) {
+		const sftp = await this.sftp();
+		return new Promise((resolve) => {
+			sftp.stat(path, (err, stats) => {
+				if (err) {
+					resolve(void 0);
+					return;
+				}
+				resolve({
+					size: Number(stats.size),
+					mtime: stats.mtime * 1e3,
+					isDirectory: stats.isDirectory(),
+					isFile: stats.isFile()
+				});
+			});
+		});
+	}
+	async mkdir(path) {
+		const sftp = await this.sftp();
+		return new Promise((resolve, reject) => {
+			sftp.mkdir(path, (err) => err ? reject(err) : resolve());
+		});
+	}
+	async remove(path) {
+		const sftp = await this.sftp();
+		return new Promise((resolve, reject) => {
+			sftp.unlink(path, (err) => {
+				if (err) reject(err);
+				else {
+					this.audit?.("remove", path, "ok");
+					resolve();
+				}
+			});
+		});
+	}
+	async rename(src, dest) {
+		const sftp = await this.sftp();
+		return new Promise((resolve, reject) => {
+			sftp.ext_openssh_rename(src, dest, (err) => {
+				if (err) reject(err);
+				else {
+					this.audit?.("move", `${src} -> ${dest}`, "ok");
+					resolve();
+				}
+			});
+		});
+	}
+	async ensureRg() {
+		if ((await this.exec([
+			"sh",
+			"-c",
+			"command -v rg || echo \"__DShB_RG_MISSING__\""
+		], "/")).stdout.includes("__DShB_RG_MISSING__")) {
+			const localRg = process.env.DSHB_LOCAL_RG ?? findLocalRg();
+			if (!localRg) return;
+			const remoteRgDir = "~/.dshb/bin";
+			await this.exec([
+				"mkdir",
+				"-p",
+				remoteRgDir
+			], "/");
+			const remoteRg = `${remoteRgDir}/rg`;
+			const content = readFileSync(localRg);
+			await this.writeFile(remoteRg, content);
+			await this.exec([
+				"chmod",
+				"+x",
+				remoteRg
+			], "/");
+		}
+	}
+	async pty(argv, cwd, _env, cols, rows) {
+		const client = await this.connection.getClient();
+		const q = (s) => `'${s.replace(/'/g, "'\\''")}'`;
+		const cmdParts = argv.map(q);
+		const command = `bash -c 'cd "$0" && exec env -i HOME="$HOME" PATH="\${PATH:-/usr/local/bin:/usr/bin:/bin}" "$@"' ${q(cwd)} ${cmdParts.join(" ")}`;
+		return new Promise((resolve, reject) => {
+			client.exec(command, { pty: {
+				cols,
+				rows,
+				term: "xterm-256color"
+			} }, (err, channel) => {
+				if (err) {
+					reject(err);
+					return;
+				}
+				resolve({
+					channel,
+					onData: (cb) => channel.on("data", cb),
+					resize: (c, r) => channel.setWindow(c, r, 0, 0),
+					kill: () => channel.close()
+				});
+			});
+		});
+	}
+};
+function findLocalRg() {
+	const candidates = [
+		join(homedir(), ".dsh", "node_modules", ".bin", "rg"),
+		join(homedir(), ".dsh", "node_modules", "@vscode", "ripgrep", "bin", "rg"),
+		join(homedir(), "go", "bin", "rg"),
+		"/usr/local/bin/rg",
+		"/usr/bin/rg"
+	];
+	for (const c of candidates) if (existsSync(c)) return c;
+}
+//#endregion
+export { SshExecutor };
+
+//# sourceMappingURL=executor.js.map

package/lib/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","names":[],"sources":["../src/executor.ts"],"sourcesContent":["import { existsSync, readFileSync } from 'node:fs'\nimport { homedir } from 'node:os'\nimport { join } from 'node:path'\nimport { encodeRunnerPayload, REMOTE_RUNNER_COMMAND, type RunnerPayload } from './runner.js'\nimport type { SshConnection } from './connection.js'\n\nexport interface ExecResult {\n  code: number\n  signal?: string\n  stdout: string\n  stderr: string\n}\n\nexport class SshExecutor {\n  private sftpCache: Promise<import('ssh2').SFTPWrapper> | null = null\n\n  constructor(\n    private readonly connection: SshConnection,\n    private readonly nodeId = 'unknown',\n    private readonly audit?: (op: string, target: string, result: string) => void,\n  ) {}\n\n  async exec(argv: string[], cwd: string, env: Record<string, string> = {}, stdinData?: Buffer): Promise<ExecResult> {\n    const client = await this.connection.getClient()\n    const payload: RunnerPayload = { argv, cwd, env }\n    const body = encodeRunnerPayload(payload)\n    const input = stdinData ? Buffer.concat([body, stdinData]) : body\n    return new Promise((resolve, reject) => {\n      client.exec(REMOTE_RUNNER_COMMAND, (err, channel) => {\n        if (err) {\n          reject(err)\n          return\n        }\n        const stdout: Buffer[] = []\n        const stderr: Buffer[] = []\n        channel.stdout.on('data', (chunk: Buffer) => stdout.push(chunk))\n        channel.stderr.on('data', (chunk: Buffer) => stderr.push(chunk))\n        channel.on('close', (code: number, signal: string) => {\n          this.audit?.('exec', argv.join(' '), `code=${code ?? 0}`)\n          resolve({\n            code: code ?? 0,\n            signal,\n            stdout: Buffer.concat(stdout).toString('utf8'),\n            stderr: Buffer.concat(stderr).toString('utf8'),\n          })\n        })\n        channel.on('error', reject)\n        channel.end(input)\n      })\n    })\n  }\n\n  async sftp(): Promise<import('ssh2').SFTPWrapper> {\n    if (this.sftpCache) return this.sftpCache\n    const client = await this.connection.getClient()\n    this.sftpCache = new Promise((resolve, reject) => {\n      client.sftp((err, sftp) => {\n        if (err) reject(err)\n        else resolve(sftp)\n      })\n    })\n    return this.sftpCache\n  }\n\n  async readFile(path: string): Promise<Buffer> {\n    const sftp = await this.sftp()\n    return new Promise((resolve, reject) => {\n      sftp.readFile(path, (err, data) => (err ? reject(err) : resolve(data)))\n    })\n  }\n\n  async writeFile(path: string, content: Buffer | string): Promise<void> {\n    const sftp = await this.sftp()\n    const tmp = `${path}.dshb-tmp-${process.pid}-${Date.now()}`\n    return new Promise((resolve, reject) => {\n      sftp.writeFile(tmp, content, (writeErr) => {\n        if (writeErr) {\n          reject(writeErr)\n          return\n        }\n        sftp.ext_openssh_rename(tmp, path, (renameErr) => {\n          if (renameErr) reject(renameErr)\n          else {\n            this.audit?.('write', path, 'ok')\n            resolve()\n          }\n        })\n      })\n    })\n  }\n\n  async listDir(path: string): Promise<Array<{ name: string; isDir: boolean; isFile: boolean; isSymlink: boolean; size: number; mtime: number }>> {\n    const sftp = await this.sftp()\n    return new Promise((resolve, reject) => {\n      sftp.readdir(path, (err, list) => {\n        if (err) {\n          reject(err)\n          return\n        }\n        resolve(\n          list.map((e) => ({\n            name: e.filename,\n            isDir: e.attrs.isDirectory(),\n            isFile: e.attrs.isFile(),\n            isSymlink: e.attrs.isSymbolicLink(),\n            size: Number(e.attrs.size),\n            mtime: e.attrs.mtime * 1000,\n          })),\n        )\n      })\n    })\n  }\n\n  async stat(path: string): Promise<{ size: number; mtime: number; isDirectory: boolean; isFile: boolean } | undefined> {\n    const sftp = await this.sftp()\n    return new Promise((resolve) => {\n      sftp.stat(path, (err, stats) => {\n        if (err) {\n          resolve(undefined)\n          return\n        }\n        resolve({ size: Number(stats.size), mtime: stats.mtime * 1000, isDirectory: stats.isDirectory(), isFile: stats.isFile() })\n      })\n    })\n  }\n\n  async mkdir(path: string): Promise<void> {\n    const sftp = await this.sftp()\n    return new Promise((resolve, reject) => {\n      sftp.mkdir(path, (err) => (err ? reject(err) : resolve()))\n    })\n  }\n\n  async remove(path: string): Promise<void> {\n    const sftp = await this.sftp()\n    return new Promise((resolve, reject) => {\n      sftp.unlink(path, (err) => {\n        if (err) reject(err)\n        else {\n          this.audit?.('remove', path, 'ok')\n          resolve()\n        }\n      })\n    })\n  }\n\n  async rename(src: string, dest: string): Promise<void> {\n    const sftp = await this.sftp()\n    return new Promise((resolve, reject) => {\n      sftp.ext_openssh_rename(src, dest, (err) => {\n        if (err) reject(err)\n        else {\n          this.audit?.('move', `${src} -> ${dest}`, 'ok')\n          resolve()\n        }\n      })\n    })\n  }\n\n  async ensureRg(): Promise<void> {\n    const result = await this.exec(['sh', '-c', 'command -v rg || echo \"__DShB_RG_MISSING__\"'], '/')\n    if (result.stdout.includes('__DShB_RG_MISSING__')) {\n      const localRg = process.env.DSHB_LOCAL_RG ?? findLocalRg()\n      if (!localRg) return\n      const remoteRgDir = '~/.dshb/bin'\n      await this.exec(['mkdir', '-p', remoteRgDir], '/')\n      const remoteRg = `${remoteRgDir}/rg`\n      const content = readFileSync(localRg)\n      await this.writeFile(remoteRg, content)\n      await this.exec(['chmod', '+x', remoteRg], '/')\n    }\n  }\n\n  async pty(argv: string[], cwd: string, _env: Record<string, string>, cols: number, rows: number): Promise<{ channel: import('ssh2').ClientChannel; onData: (cb: (chunk: Buffer) => void) => void; resize: (cols: number, rows: number) => void; kill: () => void }> {\n    const client = await this.connection.getClient()\n    const q = (s: string) => `'${s.replace(/'/g, \"'\\\\''\")}'`\n    const cmdParts = argv.map(q)\n    const command = `bash -c 'cd \"$0\" && exec env -i HOME=\"$HOME\" PATH=\"\\${PATH:-/usr/local/bin:/usr/bin:/bin}\" \"$@\"' ${q(cwd)} ${cmdParts.join(' ')}`\n    return new Promise((resolve, reject) => {\n      client.exec(\n        command,\n        { pty: { cols, rows, term: 'xterm-256color' } },\n        (err, channel) => {\n          if (err) {\n            reject(err)\n            return\n          }\n          resolve({\n            channel,\n            onData: (cb) => channel.on('data', cb),\n            resize: (c, r) => channel.setWindow(c, r, 0, 0),\n            kill: () => channel.close(),\n          })\n        },\n      )\n    })\n  }\n}\n\nfunction findLocalRg(): string | undefined {\n  const candidates = [\n    join(homedir(), '.dsh', 'node_modules', '.bin', 'rg'),\n    join(homedir(), '.dsh', 'node_modules', '@vscode', 'ripgrep', 'bin', 'rg'),\n    join(homedir(), 'go', 'bin', 'rg'),\n    '/usr/local/bin/rg',\n    '/usr/bin/rg',\n  ]\n  for (const c of candidates) if (existsSync(c)) return c\n  return undefined\n}\n"],"mappings":";;;;;AAaA,IAAa,cAAb,MAAyB;CAIJ;CACA;CACA;CALnB,YAAgE;CAEhE,YACE,YACA,SAA0B,WAC1B,OACA;EAHiB,KAAA,aAAA;EACA,KAAA,SAAA;EACA,KAAA,QAAA;CAChB;CAEH,MAAM,KAAK,MAAgB,KAAa,MAA8B,CAAC,GAAG,WAAyC;EACjH,MAAM,SAAS,MAAM,KAAK,WAAW,UAAU;EAE/C,MAAM,OAAO,oBAAoB;GADA;GAAM;GAAK;EACL,CAAC;EACxC,MAAM,QAAQ,YAAY,OAAO,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI;EAC7D,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,OAAO,KAAK,wBAAwB,KAAK,YAAY;IACnD,IAAI,KAAK;KACP,OAAO,GAAG;KACV;IACF;IACA,MAAM,SAAmB,CAAC;IAC1B,MAAM,SAAmB,CAAC;IAC1B,QAAQ,OAAO,GAAG,SAAS,UAAkB,OAAO,KAAK,KAAK,CAAC;IAC/D,QAAQ,OAAO,GAAG,SAAS,UAAkB,OAAO,KAAK,KAAK,CAAC;IAC/D,QAAQ,GAAG,UAAU,MAAc,WAAmB;KACpD,KAAK,QAAQ,QAAQ,KAAK,KAAK,GAAG,GAAG,QAAQ,QAAQ,GAAG;KACxD,QAAQ;MACN,MAAM,QAAQ;MACd;MACA,QAAQ,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;MAC7C,QAAQ,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;KAC/C,CAAC;IACH,CAAC;IACD,QAAQ,GAAG,SAAS,MAAM;IAC1B,QAAQ,IAAI,KAAK;GACnB,CAAC;EACH,CAAC;CACH;CAEA,MAAM,OAA4C;EAChD,IAAI,KAAK,WAAW,OAAO,KAAK;EAChC,MAAM,SAAS,MAAM,KAAK,WAAW,UAAU;EAC/C,KAAK,YAAY,IAAI,SAAS,SAAS,WAAW;GAChD,OAAO,MAAM,KAAK,SAAS;IACzB,IAAI,KAAK,OAAO,GAAG;SACd,QAAQ,IAAI;GACnB,CAAC;EACH,CAAC;EACD,OAAO,KAAK;CACd;CAEA,MAAM,SAAS,MAA+B;EAC5C,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,SAAS,OAAO,KAAK,SAAU,MAAM,OAAO,GAAG,IAAI,QAAQ,IAAI,CAAE;EACxE,CAAC;CACH;CAEA,MAAM,UAAU,MAAc,SAAyC;EACrE,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,MAAM,MAAM,GAAG,KAAK,YAAY,QAAQ,IAAI,GAAG,KAAK,IAAI;EACxD,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,UAAU,KAAK,UAAU,aAAa;IACzC,IAAI,UAAU;KACZ,OAAO,QAAQ;KACf;IACF;IACA,KAAK,mBAAmB,KAAK,OAAO,cAAc;KAChD,IAAI,WAAW,OAAO,SAAS;UAC1B;MACH,KAAK,QAAQ,SAAS,MAAM,IAAI;MAChC,QAAQ;KACV;IACF,CAAC;GACH,CAAC;EACH,CAAC;CACH;CAEA,MAAM,QAAQ,MAAkI;EAC9I,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,QAAQ,OAAO,KAAK,SAAS;IAChC,IAAI,KAAK;KACP,OAAO,GAAG;KACV;IACF;IACA,QACE,KAAK,KAAK,OAAO;KACf,MAAM,EAAE;KACR,OAAO,EAAE,MAAM,YAAY;KAC3B,QAAQ,EAAE,MAAM,OAAO;KACvB,WAAW,EAAE,MAAM,eAAe;KAClC,MAAM,OAAO,EAAE,MAAM,IAAI;KACzB,OAAO,EAAE,MAAM,QAAQ;IACzB,EAAE,CACJ;GACF,CAAC;EACH,CAAC;CACH;CAEA,MAAM,KAAK,MAA2G;EACpH,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,OAAO,IAAI,SAAS,YAAY;GAC9B,KAAK,KAAK,OAAO,KAAK,UAAU;IAC9B,IAAI,KAAK;KACP,QAAQ,KAAA,CAAS;KACjB;IACF;IACA,QAAQ;KAAE,MAAM,OAAO,MAAM,IAAI;KAAG,OAAO,MAAM,QAAQ;KAAM,aAAa,MAAM,YAAY;KAAG,QAAQ,MAAM,OAAO;IAAE,CAAC;GAC3H,CAAC;EACH,CAAC;CACH;CAEA,MAAM,MAAM,MAA6B;EACvC,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,MAAM,OAAO,QAAS,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAE;EAC3D,CAAC;CACH;CAEA,MAAM,OAAO,MAA6B;EACxC,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,OAAO,OAAO,QAAQ;IACzB,IAAI,KAAK,OAAO,GAAG;SACd;KACH,KAAK,QAAQ,UAAU,MAAM,IAAI;KACjC,QAAQ;IACV;GACF,CAAC;EACH,CAAC;CACH;CAEA,MAAM,OAAO,KAAa,MAA6B;EACrD,MAAM,OAAO,MAAM,KAAK,KAAK;EAC7B,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,KAAK,mBAAmB,KAAK,OAAO,QAAQ;IAC1C,IAAI,KAAK,OAAO,GAAG;SACd;KACH,KAAK,QAAQ,QAAQ,GAAG,IAAI,MAAM,QAAQ,IAAI;KAC9C,QAAQ;IACV;GACF,CAAC;EACH,CAAC;CACH;CAEA,MAAM,WAA0B;EAE9B,KAAI,MADiB,KAAK,KAAK;GAAC;GAAM;GAAM;EAA6C,GAAG,GAAG,EAAA,CACpF,OAAO,SAAS,qBAAqB,GAAG;GACjD,MAAM,UAAU,QAAQ,IAAI,iBAAiB,YAAY;GACzD,IAAI,CAAC,SAAS;GACd,MAAM,cAAc;GACpB,MAAM,KAAK,KAAK;IAAC;IAAS;IAAM;GAAW,GAAG,GAAG;GACjD,MAAM,WAAW,GAAG,YAAY;GAChC,MAAM,UAAU,aAAa,OAAO;GACpC,MAAM,KAAK,UAAU,UAAU,OAAO;GACtC,MAAM,KAAK,KAAK;IAAC;IAAS;IAAM;GAAQ,GAAG,GAAG;EAChD;CACF;CAEA,MAAM,IAAI,MAAgB,KAAa,MAA8B,MAAc,MAAiL;EAClQ,MAAM,SAAS,MAAM,KAAK,WAAW,UAAU;EAC/C,MAAM,KAAK,MAAc,IAAI,EAAE,QAAQ,MAAM,OAAO,EAAE;EACtD,MAAM,WAAW,KAAK,IAAI,CAAC;EAC3B,MAAM,UAAU,oGAAoG,EAAE,GAAG,EAAE,GAAG,SAAS,KAAK,GAAG;EAC/I,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,OAAO,KACL,SACA,EAAE,KAAK;IAAE;IAAM;IAAM,MAAM;GAAiB,EAAE,IAC7C,KAAK,YAAY;IAChB,IAAI,KAAK;KACP,OAAO,GAAG;KACV;IACF;IACA,QAAQ;KACN;KACA,SAAS,OAAO,QAAQ,GAAG,QAAQ,EAAE;KACrC,SAAS,GAAG,MAAM,QAAQ,UAAU,GAAG,GAAG,GAAG,CAAC;KAC9C,YAAY,QAAQ,MAAM;IAC5B,CAAC;GACH,CACF;EACF,CAAC;CACH;AACF;AAEA,SAAS,cAAkC;CACzC,MAAM,aAAa;EACjB,KAAK,QAAQ,GAAG,QAAQ,gBAAgB,QAAQ,IAAI;EACpD,KAAK,QAAQ,GAAG,QAAQ,gBAAgB,WAAW,WAAW,OAAO,IAAI;EACzE,KAAK,QAAQ,GAAG,MAAM,OAAO,IAAI;EACjC;EACA;CACF;CACA,KAAK,MAAM,KAAK,YAAY,IAAI,WAAW,CAAC,GAAG,OAAO;AAExD"}