dshb-exec-ssh 0.0.1

package/lib/process-provider.d.ts

@@ -0,0 +1,2 @@
+import { n as SshSubprocessRuntime, t as SshShellExecutor } from "./process-provider-CUgC5gyu.js";
+export { SshShellExecutor, SshSubprocessRuntime };

package/lib/process-provider.js

@@ -0,0 +1,75 @@
+//#region src/process-provider.ts
+var SshShellExecutor = class {
+	executor;
+	constructor(executor) {
+		this.executor = executor;
+	}
+	resolve(request) {
+		return {
+			command: request.command,
+			workdir: request.workdir ?? "/",
+			timeoutMs: request.timeoutMs ?? 6e4,
+			stdoutMaxBytes: request.stdoutMaxBytes ?? 1048576,
+			signal: request.signal,
+			stdin: request.stdin,
+			env: request.env,
+			sandboxPolicy: request.sandboxPolicy
+		};
+	}
+	async run(spec) {
+		const result = await this.executor.exec([
+			"sh",
+			"-c",
+			spec.command
+		], spec.workdir, spec.env ?? {}, spec.stdin !== void 0 ? Buffer.from(spec.stdin) : void 0);
+		const collect = (text) => ({
+			text,
+			truncated: false
+		});
+		return {
+			exitCode: result.code,
+			signal: result.signal ?? null,
+			timedOut: false,
+			aborted: false,
+			timeoutMs: spec.timeoutMs,
+			stdout: collect(result.stdout),
+			stderr: collect(result.stderr)
+		};
+	}
+	start(spec) {
+		return {
+			pid: -1,
+			done: this.run(spec),
+			kill: () => {}
+		};
+	}
+};
+var SshSubprocessRuntime = class {
+	executor;
+	constructor(executor) {
+		this.executor = executor;
+	}
+	spawn(spec) {
+		return {
+			pid: -1,
+			done: this.executor.exec(spec.argv, spec.cwd, spec.env ?? {}).then((r) => ({
+				exitCode: r.code,
+				signal: r.signal ?? null
+			})),
+			kill: () => {}
+		};
+	}
+	async spawnTerminal(spec) {
+		const pty = await this.executor.pty(spec.argv, spec.cwd, spec.env ?? {}, spec.cols ?? 80, spec.rows ?? 24);
+		return {
+			write: (data) => pty.channel.stdin.write(data),
+			resize: (cols, rows) => pty.resize(cols, rows),
+			onData: (cb) => pty.onData((chunk) => cb(chunk.toString("utf8"))),
+			kill: () => pty.kill()
+		};
+	}
+};
+//#endregion
+export { SshShellExecutor, SshSubprocessRuntime };
+
+//# sourceMappingURL=process-provider.js.map

package/lib/process-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-provider.js","names":[],"sources":["../src/process-provider.ts"],"sourcesContent":["import type { ShellExecRequest, ShellExecSpec, ShellProcess, ShellRunResult } from '@deepseek-ai/dsh-shell'\nimport type { CollectedOutput, SubprocessHandle, SubprocessSpawnSpec, SubprocessTerminalHandle, SubprocessTerminalSpawnSpec } from '@deepseek-ai/dsh-subprocess'\nimport type { SshExecutor } from './executor.js'\n\nexport class SshShellExecutor {\n  constructor(private readonly executor: SshExecutor) {}\n\n  resolve(request: ShellExecRequest): ShellExecSpec {\n    return {\n      command: request.command,\n      workdir: request.workdir ?? '/',\n      timeoutMs: request.timeoutMs ?? 60_000,\n      stdoutMaxBytes: request.stdoutMaxBytes ?? 1024 * 1024,\n      signal: request.signal,\n      stdin: request.stdin,\n      env: request.env,\n      sandboxPolicy: request.sandboxPolicy,\n    } as ShellExecSpec\n  }\n\n  async run(spec: ShellExecSpec): Promise<ShellRunResult> {\n    const result = await this.executor.exec(['sh', '-c', spec.command], spec.workdir, (spec.env ?? {}) as Record<string, string>, spec.stdin !== undefined ? Buffer.from(spec.stdin) : undefined)\n    const collect = (text: string): CollectedOutput => ({ text, truncated: false })\n    return {\n      exitCode: result.code,\n      signal: (result.signal ?? null) as NodeJS.Signals | null,\n      timedOut: false,\n      aborted: false,\n      timeoutMs: spec.timeoutMs,\n      stdout: collect(result.stdout),\n      stderr: collect(result.stderr),\n    } as unknown as ShellRunResult\n  }\n\n  start(spec: ShellExecSpec): ShellProcess {\n    const promise = this.run(spec)\n    const proc: ShellProcess = {\n      pid: -1,\n      done: promise,\n      kill: () => {\n        void promise\n      },\n    } as unknown as ShellProcess\n    return proc\n  }\n}\n\nexport class SshSubprocessRuntime {\n  constructor(private readonly executor: SshExecutor) {}\n\n  spawn(spec: SubprocessSpawnSpec): SubprocessHandle {\n    const promise = this.executor.exec(spec.argv as string[], spec.cwd, (spec.env ?? {}) as Record<string, string>)\n    const handle: SubprocessHandle = {\n      pid: -1,\n      done: promise.then((r) => ({ exitCode: r.code, signal: (r.signal ?? null) as NodeJS.Signals | null })),\n      kill: () => {\n        void promise\n      },\n    } as unknown as SubprocessHandle\n    return handle\n  }\n\n  async spawnTerminal(spec: SubprocessTerminalSpawnSpec): Promise<SubprocessTerminalHandle> {\n    const pty = await this.executor.pty(spec.argv as string[], spec.cwd, (spec.env ?? {}) as Record<string, string>, (spec as { cols?: number }).cols ?? 80, (spec as { rows?: number }).rows ?? 24)\n    const handle: SubprocessTerminalHandle = {\n      write: (data: string) => pty.channel.stdin.write(data),\n      resize: (cols: number, rows: number) => pty.resize(cols, rows),\n      onData: (cb: (data: string) => void) => pty.onData((chunk) => cb(chunk.toString('utf8'))),\n      kill: () => pty.kill(),\n    } as unknown as SubprocessTerminalHandle\n    return handle\n  }\n}\n"],"mappings":";AAIA,IAAa,mBAAb,MAA8B;CACC;CAA7B,YAAY,UAAwC;EAAvB,KAAA,WAAA;CAAwB;CAErD,QAAQ,SAA0C;EAChD,OAAO;GACL,SAAS,QAAQ;GACjB,SAAS,QAAQ,WAAW;GAC5B,WAAW,QAAQ,aAAa;GAChC,gBAAgB,QAAQ,kBAAkB;GAC1C,QAAQ,QAAQ;GAChB,OAAO,QAAQ;GACf,KAAK,QAAQ;GACb,eAAe,QAAQ;EACzB;CACF;CAEA,MAAM,IAAI,MAA8C;EACtD,MAAM,SAAS,MAAM,KAAK,SAAS,KAAK;GAAC;GAAM;GAAM,KAAK;EAAO,GAAG,KAAK,SAAU,KAAK,OAAO,CAAC,GAA8B,KAAK,UAAU,KAAA,IAAY,OAAO,KAAK,KAAK,KAAK,IAAI,KAAA,CAAS;EAC5L,MAAM,WAAW,UAAmC;GAAE;GAAM,WAAW;EAAM;EAC7E,OAAO;GACL,UAAU,OAAO;GACjB,QAAS,OAAO,UAAU;GAC1B,UAAU;GACV,SAAS;GACT,WAAW,KAAK;GAChB,QAAQ,QAAQ,OAAO,MAAM;GAC7B,QAAQ,QAAQ,OAAO,MAAM;EAC/B;CACF;CAEA,MAAM,MAAmC;EASvC,OAAO;GANL,KAAK;GACL,MAHc,KAAK,IAAI,IAGX;GACZ,YAAY,CAEZ;EAEQ;CACZ;AACF;AAEA,IAAa,uBAAb,MAAkC;CACH;CAA7B,YAAY,UAAwC;EAAvB,KAAA,WAAA;CAAwB;CAErD,MAAM,MAA6C;EASjD,OAAO;GANL,KAAK;GACL,MAHc,KAAK,SAAS,KAAK,KAAK,MAAkB,KAAK,KAAM,KAAK,OAAO,CAAC,CAGpE,CAAC,CAAC,MAAM,OAAO;IAAE,UAAU,EAAE;IAAM,QAAS,EAAE,UAAU;GAA+B,EAAE;GACrG,YAAY,CAEZ;EAEU;CACd;CAEA,MAAM,cAAc,MAAsE;EACxF,MAAM,MAAM,MAAM,KAAK,SAAS,IAAI,KAAK,MAAkB,KAAK,KAAM,KAAK,OAAO,CAAC,GAA+B,KAA2B,QAAQ,IAAK,KAA2B,QAAQ,EAAE;EAO/L,OAAO;GALL,QAAQ,SAAiB,IAAI,QAAQ,MAAM,MAAM,IAAI;GACrD,SAAS,MAAc,SAAiB,IAAI,OAAO,MAAM,IAAI;GAC7D,SAAS,OAA+B,IAAI,QAAQ,UAAU,GAAG,MAAM,SAAS,MAAM,CAAC,CAAC;GACxF,YAAY,IAAI,KAAK;EAEX;CACd;AACF"}

package/lib/runner.d.ts

@@ -0,0 +1,13 @@
+//#region src/runner.d.ts
+interface RunnerPayload {
+  argv: string[];
+  cwd: string;
+  env: Record<string, string>;
+}
+declare function encodeRunnerPayload(payload: RunnerPayload): Buffer;
+declare const REMOTE_RUNNER_SCRIPT = "set -u\nif ! command -v base64 >/dev/null 2>&1; then echo \"runner: base64 not found\" >&2; exit 127; fi\ndec() {\n  printf '%s' \"$1\" | base64 -d 2>/dev/null || printf '%s' \"$1\" | base64 -D 2>/dev/null\n}\nreadline_crlf() {\n  IFS= read -r line\n  line=${line%$'\\r'}\n}\nreadline_crlf\ncwd=$(dec \"$line\")\nreadline_crlf\nargc=$(dec \"$line\")\nargv=()\ni=0\nwhile [ \"$i\" -lt \"$argc\" ]; do\n  readline_crlf\n  argv+=(\"$(dec \"$line\")\")\n  i=$((i + 1))\ndone\nreadline_crlf\nenvc=$(dec \"$line\")\nenv_vars=()\ni=0\nwhile [ \"$i\" -lt \"$envc\" ]; do\n  readline_crlf\n  kv=$(dec \"$line\")\n  k=${kv%%=*}\n  v=${kv#*=}\n  env_vars+=(\"$k=$v\")\n  i=$((i + 1))\ndone\nreadline_crlf\n[ \"$line\" = \".\" ] || { echo \"runner: protocol error\" >&2; exit 126; }\ncd \"$cwd\" 2>/dev/null || { echo \"runner: cwd not found: $cwd\" >&2; exit 126; }\nexec env -i HOME=\"$HOME\" PATH=\"${PATH:-/usr/local/bin:/usr/bin:/bin}\" ${env_vars[@]+\"${env_vars[@]}\"} \"${argv[@]}\"\n";
+declare const REMOTE_RUNNER_COMMAND: string;
+declare function isRunnerSafe(command: string): boolean;
+//#endregion
+export { REMOTE_RUNNER_COMMAND, REMOTE_RUNNER_SCRIPT, RunnerPayload, encodeRunnerPayload, isRunnerSafe };
+//# sourceMappingURL=runner.d.ts.map

package/lib/runner.js

@@ -0,0 +1,62 @@
+//#region src/runner.ts
+function encodeLine(value) {
+	return Buffer.from(`${value}\n`, "utf8").toString("base64");
+}
+function encodeRunnerPayload(payload) {
+	const lines = [];
+	lines.push(encodeLine(payload.cwd));
+	lines.push(encodeLine(String(payload.argv.length)));
+	for (const arg of payload.argv) lines.push(encodeLine(arg));
+	const envEntries = Object.entries(payload.env);
+	lines.push(encodeLine(String(envEntries.length)));
+	for (const [k, v] of envEntries) lines.push(encodeLine(`${k}=${v}`));
+	lines.push(".");
+	return Buffer.from(`${lines.join("\n")}\n`, "utf8");
+}
+const RUNNER_SCRIPT = `set -u
+if ! command -v base64 >/dev/null 2>&1; then echo "runner: base64 not found" >&2; exit 127; fi
+dec() {
+  printf '%s' "$1" | base64 -d 2>/dev/null || printf '%s' "$1" | base64 -D 2>/dev/null
+}
+readline_crlf() {
+  IFS= read -r line
+  line=\${line%$'\\r'}
+}
+readline_crlf
+cwd=$(dec "$line")
+readline_crlf
+argc=$(dec "$line")
+argv=()
+i=0
+while [ "$i" -lt "$argc" ]; do
+  readline_crlf
+  argv+=("$(dec "$line")")
+  i=$((i + 1))
+done
+readline_crlf
+envc=$(dec "$line")
+env_vars=()
+i=0
+while [ "$i" -lt "$envc" ]; do
+  readline_crlf
+  kv=$(dec "$line")
+  k=\${kv%%=*}
+  v=\${kv#*=}
+  env_vars+=("$k=$v")
+  i=$((i + 1))
+done
+readline_crlf
+[ "$line" = "." ] || { echo "runner: protocol error" >&2; exit 126; }
+cd "$cwd" 2>/dev/null || { echo "runner: cwd not found: $cwd" >&2; exit 126; }
+exec env -i HOME="$HOME" PATH="\${PATH:-/usr/local/bin:/usr/bin:/bin}" \${env_vars[@]+"\${env_vars[@]}"} "\${argv[@]}"
+`;
+const RUNNER_SCRIPT_B64 = Buffer.from(RUNNER_SCRIPT, "utf8").toString("base64");
+const REMOTE_RUNNER_SCRIPT = RUNNER_SCRIPT;
+const REMOTE_RUNNER_COMMAND = `bash -c "$(echo ${RUNNER_SCRIPT_B64} | base64 -d)"`;
+function isRunnerSafe(command) {
+	return command === REMOTE_RUNNER_COMMAND || command.includes(RUNNER_SCRIPT_B64);
+}
+//#endregion
+export { REMOTE_RUNNER_COMMAND, REMOTE_RUNNER_SCRIPT, encodeRunnerPayload, isRunnerSafe };
+
+//# sourceMappingURL=runner.js.map

package/lib/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","names":[],"sources":["../src/runner.ts"],"sourcesContent":["export interface RunnerPayload {\n  argv: string[]\n  cwd: string\n  env: Record<string, string>\n}\n\nfunction encodeLine(value: string): string {\n  return Buffer.from(`${value}\\n`, 'utf8').toString('base64')\n}\n\nexport function encodeRunnerPayload(payload: RunnerPayload): Buffer {\n  const lines: string[] = []\n  lines.push(encodeLine(payload.cwd))\n  lines.push(encodeLine(String(payload.argv.length)))\n  for (const arg of payload.argv) lines.push(encodeLine(arg))\n  const envEntries = Object.entries(payload.env)\n  lines.push(encodeLine(String(envEntries.length)))\n  for (const [k, v] of envEntries) lines.push(encodeLine(`${k}=${v}`))\n  lines.push('.')\n  return Buffer.from(`${lines.join('\\n')}\\n`, 'utf8')\n}\n\nconst RUNNER_SCRIPT = `set -u\nif ! command -v base64 >/dev/null 2>&1; then echo \"runner: base64 not found\" >&2; exit 127; fi\ndec() {\n  printf '%s' \"$1\" | base64 -d 2>/dev/null || printf '%s' \"$1\" | base64 -D 2>/dev/null\n}\nreadline_crlf() {\n  IFS= read -r line\n  line=\\${line%$'\\\\r'}\n}\nreadline_crlf\ncwd=$(dec \"$line\")\nreadline_crlf\nargc=$(dec \"$line\")\nargv=()\ni=0\nwhile [ \"$i\" -lt \"$argc\" ]; do\n  readline_crlf\n  argv+=(\"$(dec \"$line\")\")\n  i=$((i + 1))\ndone\nreadline_crlf\nenvc=$(dec \"$line\")\nenv_vars=()\ni=0\nwhile [ \"$i\" -lt \"$envc\" ]; do\n  readline_crlf\n  kv=$(dec \"$line\")\n  k=\\${kv%%=*}\n  v=\\${kv#*=}\n  env_vars+=(\"$k=$v\")\n  i=$((i + 1))\ndone\nreadline_crlf\n[ \"$line\" = \".\" ] || { echo \"runner: protocol error\" >&2; exit 126; }\ncd \"$cwd\" 2>/dev/null || { echo \"runner: cwd not found: $cwd\" >&2; exit 126; }\nexec env -i HOME=\"$HOME\" PATH=\"\\${PATH:-/usr/local/bin:/usr/bin:/bin}\" \\${env_vars[@]+\"\\${env_vars[@]}\"} \"\\${argv[@]}\"\n`\n\nconst RUNNER_SCRIPT_B64 = Buffer.from(RUNNER_SCRIPT, 'utf8').toString('base64')\n\nexport const REMOTE_RUNNER_SCRIPT = RUNNER_SCRIPT\n\nexport const REMOTE_RUNNER_COMMAND = `bash -c \"$(echo ${RUNNER_SCRIPT_B64} | base64 -d)\"`\n\nexport function isRunnerSafe(command: string): boolean {\n  return command === REMOTE_RUNNER_COMMAND || command.includes(RUNNER_SCRIPT_B64)\n}\n"],"mappings":";AAMA,SAAS,WAAW,OAAuB;CACzC,OAAO,OAAO,KAAK,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,SAAS,QAAQ;AAC5D;AAEA,SAAgB,oBAAoB,SAAgC;CAClE,MAAM,QAAkB,CAAC;CACzB,MAAM,KAAK,WAAW,QAAQ,GAAG,CAAC;CAClC,MAAM,KAAK,WAAW,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC;CAClD,KAAK,MAAM,OAAO,QAAQ,MAAM,MAAM,KAAK,WAAW,GAAG,CAAC;CAC1D,MAAM,aAAa,OAAO,QAAQ,QAAQ,GAAG;CAC7C,MAAM,KAAK,WAAW,OAAO,WAAW,MAAM,CAAC,CAAC;CAChD,KAAK,MAAM,CAAC,GAAG,MAAM,YAAY,MAAM,KAAK,WAAW,GAAG,EAAE,GAAG,GAAG,CAAC;CACnE,MAAM,KAAK,GAAG;CACd,OAAO,OAAO,KAAK,GAAG,MAAM,KAAK,IAAI,EAAE,KAAK,MAAM;AACpD;AAEA,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCtB,MAAM,oBAAoB,OAAO,KAAK,eAAe,MAAM,CAAC,CAAC,SAAS,QAAQ;AAE9E,MAAa,uBAAuB;AAEpC,MAAa,wBAAwB,mBAAmB,kBAAkB;AAE1E,SAAgB,aAAa,SAA0B;CACrD,OAAO,YAAY,yBAAyB,QAAQ,SAAS,iBAAiB;AAChF"}

package/lib/world.d.ts

@@ -0,0 +1,79 @@
+import { n as SshSubprocessRuntime, t as SshShellExecutor } from "./process-provider-CUgC5gyu.js";
+import { SshConnectionPool } from "./connection-pool.js";
+import { SshExecutor } from "./executor.js";
+import { SshFileSystem } from "./fs-provider.js";
+import { ExecutionWorldProvider, NodeTestReport } from "dshb-router/types";
+//#region src/world.d.ts
+interface SshNodeConfig {
+  nodeId: string;
+  host: string;
+  port: number;
+  username: string;
+  auth: {
+    kind: 'password' | 'key' | 'agent';
+    keyPath?: string;
+  };
+  secrets: {
+    password?: string;
+    privateKey?: string;
+    passphrase?: string;
+  };
+  jump?: Array<{
+    host: string;
+    port?: number;
+    username?: string;
+    keyPath?: string;
+  }>;
+}
+declare class SshExecutionWorld implements ExecutionWorldProvider {
+  readonly nodeId: string;
+  private readonly config;
+  readonly fs: SshFileSystem;
+  readonly subprocess: SshSubprocessRuntime;
+  readonly shell: SshShellExecutor;
+  readonly executor: SshExecutor;
+  constructor(nodeId: string, config: SshNodeConfig, pool: SshConnectionPool, audit?: (nodeId: string, op: string, target: string, result: string) => void);
+  ensureDir(remotePath: string): Promise<void>;
+  testConnection(): Promise<NodeTestReport>;
+}
+interface NodeRegistryLike {
+  get(id: string): {
+    id: string;
+    type: string;
+    ssh?: {
+      host: string;
+      port: number;
+      username: string;
+      auth: {
+        kind: 'password' | 'key' | 'agent';
+        keyPath?: string;
+      };
+      jump?: Array<{
+        host: string;
+        port?: number;
+        username?: string;
+        keyPath?: string;
+      }>;
+    };
+  } | undefined;
+  getSecrets(id: string): Promise<{
+    password?: string;
+    privateKey?: string;
+    passphrase?: string;
+  } | undefined>;
+}
+declare class SshWorldRegistry {
+  private readonly pool;
+  private readonly nodeRegistry?;
+  private readonly audit?;
+  private readonly worlds;
+  constructor(pool: SshConnectionPool, nodeRegistry?: NodeRegistryLike | undefined, audit?: ((nodeId: string, op: string, target: string, result: string) => void) | undefined);
+  register(config: SshNodeConfig): SshExecutionWorld;
+  get(nodeId: string): SshExecutionWorld | undefined;
+  ensure(nodeId: string): Promise<SshExecutionWorld | undefined>;
+  remove(nodeId: string): void;
+  clear(): void;
+}
+//#endregion
+export { SshExecutionWorld, SshNodeConfig, SshWorldRegistry };
+//# sourceMappingURL=world.d.ts.map

package/lib/world.js

@@ -0,0 +1,95 @@
+import { SshExecutor } from "./executor.js";
+import { SshFileSystem } from "./fs-provider.js";
+import { SshShellExecutor, SshSubprocessRuntime } from "./process-provider.js";
+//#region src/world.ts
+var SshExecutionWorld = class {
+	nodeId;
+	config;
+	fs;
+	subprocess;
+	shell;
+	executor;
+	constructor(nodeId, config, pool, audit) {
+		this.nodeId = nodeId;
+		this.config = config;
+		const target = {
+			host: config.host,
+			port: config.port,
+			username: config.username,
+			auth: config.auth,
+			jump: config.jump
+		};
+		const connection = pool.acquire(target, config.secrets);
+		this.executor = new SshExecutor(connection, nodeId, audit ? (op, t, r) => audit(nodeId, op, t, r) : void 0);
+		this.fs = new SshFileSystem(this.executor);
+		this.subprocess = new SshSubprocessRuntime(this.executor);
+		this.shell = new SshShellExecutor(this.executor);
+	}
+	async ensureDir(remotePath) {
+		await this.executor.exec([
+			"mkdir",
+			"-p",
+			remotePath
+		], "/");
+	}
+	async testConnection() {
+		try {
+			return {
+				ok: (await this.executor.exec(["echo", "ok"], "/")).stdout.trim() === "ok",
+				reachable: true
+			};
+		} catch (err) {
+			return {
+				ok: false,
+				reachable: false,
+				error: err instanceof Error ? err.message : String(err)
+			};
+		}
+	}
+};
+var SshWorldRegistry = class {
+	pool;
+	nodeRegistry;
+	audit;
+	worlds = /* @__PURE__ */ new Map();
+	constructor(pool, nodeRegistry, audit) {
+		this.pool = pool;
+		this.nodeRegistry = nodeRegistry;
+		this.audit = audit;
+	}
+	register(config) {
+		const world = new SshExecutionWorld(config.nodeId, config, this.pool, this.audit);
+		this.worlds.set(config.nodeId, world);
+		return world;
+	}
+	get(nodeId) {
+		return this.worlds.get(nodeId);
+	}
+	async ensure(nodeId) {
+		const existing = this.worlds.get(nodeId);
+		if (existing) return existing;
+		if (!this.nodeRegistry) return void 0;
+		const node = this.nodeRegistry.get(nodeId);
+		if (!node || node.type !== "remote-ssh" && node.type !== "remote-docker" || !node.ssh) return void 0;
+		const secrets = await this.nodeRegistry.getSecrets(nodeId) ?? {};
+		return this.register({
+			nodeId,
+			host: node.ssh.host,
+			port: node.ssh.port,
+			username: node.ssh.username,
+			auth: node.ssh.auth,
+			secrets,
+			jump: node.ssh.jump
+		});
+	}
+	remove(nodeId) {
+		if (this.worlds.get(nodeId)) this.worlds.delete(nodeId);
+	}
+	clear() {
+		this.worlds.clear();
+	}
+};
+//#endregion
+export { SshExecutionWorld, SshWorldRegistry };
+
+//# sourceMappingURL=world.js.map

package/lib/world.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"world.js","names":[],"sources":["../src/world.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis'\nimport type { ExecutionWorldProvider, NodeTestReport } from 'dshb-router/types'\nimport { sharedWorldResolver } from 'dshb-router/resolve'\nimport { SshConnectionPool } from './connection-pool.js'\nimport { SshExecutor } from './executor.js'\nimport { SshFileSystem } from './fs-provider.js'\nimport { SshShellExecutor, SshSubprocessRuntime } from './process-provider.js'\n\nexport interface SshNodeConfig {\n  nodeId: string\n  host: string\n  port: number\n  username: string\n  auth: { kind: 'password' | 'key' | 'agent'; keyPath?: string }\n  secrets: { password?: string; privateKey?: string; passphrase?: string }\n  jump?: Array<{ host: string; port?: number; username?: string; keyPath?: string }>\n}\n\nexport class SshExecutionWorld implements ExecutionWorldProvider {\n  readonly fs: SshFileSystem\n  readonly subprocess: SshSubprocessRuntime\n  readonly shell: SshShellExecutor\n  readonly executor: SshExecutor\n\n  constructor(\n    readonly nodeId: string,\n    private readonly config: SshNodeConfig,\n    pool: SshConnectionPool,\n    audit?: (nodeId: string, op: string, target: string, result: string) => void,\n  ) {\n    const target = {\n      host: config.host,\n      port: config.port,\n      username: config.username,\n      auth: config.auth,\n      jump: config.jump,\n    }\n    const connection = pool.acquire(target, config.secrets)\n    this.executor = new SshExecutor(connection, nodeId, audit ? (op, t, r) => audit(nodeId, op, t, r) : undefined)\n    this.fs = new SshFileSystem(this.executor)\n    this.subprocess = new SshSubprocessRuntime(this.executor)\n    this.shell = new SshShellExecutor(this.executor)\n  }\n\n  async ensureDir(remotePath: string): Promise<void> {\n    await this.executor.exec(['mkdir', '-p', remotePath], '/')\n  }\n\n  async testConnection(): Promise<NodeTestReport> {\n    try {\n      const result = await this.executor.exec(['echo', 'ok'], '/')\n      return { ok: result.stdout.trim() === 'ok', reachable: true }\n    } catch (err) {\n      return { ok: false, reachable: false, error: err instanceof Error ? err.message : String(err) }\n    }\n  }\n}\n\ninterface NodeRegistryLike {\n  get(id: string): { id: string; type: string; ssh?: { host: string; port: number; username: string; auth: { kind: 'password' | 'key' | 'agent'; keyPath?: string }; jump?: Array<{ host: string; port?: number; username?: string; keyPath?: string }> } } | undefined\n  getSecrets(id: string): Promise<{ password?: string; privateKey?: string; passphrase?: string } | undefined>\n}\n\nexport class SshWorldRegistry {\n  private readonly worlds = new Map<string, SshExecutionWorld>()\n\n  constructor(\n    private readonly pool: SshConnectionPool,\n    private readonly nodeRegistry?: NodeRegistryLike,\n    private readonly audit?: (nodeId: string, op: string, target: string, result: string) => void,\n  ) {}\n\n  register(config: SshNodeConfig): SshExecutionWorld {\n    const world = new SshExecutionWorld(config.nodeId, config, this.pool, this.audit)\n    this.worlds.set(config.nodeId, world)\n    return world\n  }\n\n  get(nodeId: string): SshExecutionWorld | undefined {\n    return this.worlds.get(nodeId)\n  }\n\n  async ensure(nodeId: string): Promise<SshExecutionWorld | undefined> {\n    const existing = this.worlds.get(nodeId)\n    if (existing) return existing\n    if (!this.nodeRegistry) return undefined\n    const node = this.nodeRegistry.get(nodeId)\n    if (!node || (node.type !== 'remote-ssh' && node.type !== 'remote-docker') || !node.ssh) return undefined\n    const secrets = (await this.nodeRegistry.getSecrets(nodeId)) ?? {}\n    return this.register({\n      nodeId,\n      host: node.ssh.host,\n      port: node.ssh.port,\n      username: node.ssh.username,\n      auth: node.ssh.auth,\n      secrets,\n      jump: node.ssh.jump,\n    })\n  }\n\n  remove(nodeId: string): void {\n    const world = this.worlds.get(nodeId)\n    if (world) {\n      this.worlds.delete(nodeId)\n    }\n  }\n\n  clear(): void {\n    this.worlds.clear()\n  }\n}\n"],"mappings":";;;;AAkBA,IAAa,oBAAb,MAAiE;CAOpD;CACQ;CAPnB;CACA;CACA;CACA;CAEA,YACE,QACA,QACA,MACA,OACA;EAJS,KAAA,SAAA;EACQ,KAAA,SAAA;EAIjB,MAAM,SAAS;GACb,MAAM,OAAO;GACb,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,MAAM,OAAO;GACb,MAAM,OAAO;EACf;EACA,MAAM,aAAa,KAAK,QAAQ,QAAQ,OAAO,OAAO;EACtD,KAAK,WAAW,IAAI,YAAY,YAAY,QAAQ,SAAS,IAAI,GAAG,MAAM,MAAM,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAA,CAAS;EAC7G,KAAK,KAAK,IAAI,cAAc,KAAK,QAAQ;EACzC,KAAK,aAAa,IAAI,qBAAqB,KAAK,QAAQ;EACxD,KAAK,QAAQ,IAAI,iBAAiB,KAAK,QAAQ;CACjD;CAEA,MAAM,UAAU,YAAmC;EACjD,MAAM,KAAK,SAAS,KAAK;GAAC;GAAS;GAAM;EAAU,GAAG,GAAG;CAC3D;CAEA,MAAM,iBAA0C;EAC9C,IAAI;GAEF,OAAO;IAAE,KAAI,MADQ,KAAK,SAAS,KAAK,CAAC,QAAQ,IAAI,GAAG,GAAG,EAAA,CACvC,OAAO,KAAK,MAAM;IAAM,WAAW;GAAK;EAC9D,SAAS,KAAK;GACZ,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;GAAE;EAChG;CACF;AACF;AAOA,IAAa,mBAAb,MAA8B;CAIT;CACA;CACA;CALnB,yBAA0B,IAAI,IAA+B;CAE7D,YACE,MACA,cACA,OACA;EAHiB,KAAA,OAAA;EACA,KAAA,eAAA;EACA,KAAA,QAAA;CAChB;CAEH,SAAS,QAA0C;EACjD,MAAM,QAAQ,IAAI,kBAAkB,OAAO,QAAQ,QAAQ,KAAK,MAAM,KAAK,KAAK;EAChF,KAAK,OAAO,IAAI,OAAO,QAAQ,KAAK;EACpC,OAAO;CACT;CAEA,IAAI,QAA+C;EACjD,OAAO,KAAK,OAAO,IAAI,MAAM;CAC/B;CAEA,MAAM,OAAO,QAAwD;EACnE,MAAM,WAAW,KAAK,OAAO,IAAI,MAAM;EACvC,IAAI,UAAU,OAAO;EACrB,IAAI,CAAC,KAAK,cAAc,OAAO,KAAA;EAC/B,MAAM,OAAO,KAAK,aAAa,IAAI,MAAM;EACzC,IAAI,CAAC,QAAS,KAAK,SAAS,gBAAgB,KAAK,SAAS,mBAAoB,CAAC,KAAK,KAAK,OAAO,KAAA;EAChG,MAAM,UAAW,MAAM,KAAK,aAAa,WAAW,MAAM,KAAM,CAAC;EACjE,OAAO,KAAK,SAAS;GACnB;GACA,MAAM,KAAK,IAAI;GACf,MAAM,KAAK,IAAI;GACf,UAAU,KAAK,IAAI;GACnB,MAAM,KAAK,IAAI;GACf;GACA,MAAM,KAAK,IAAI;EACjB,CAAC;CACH;CAEA,OAAO,QAAsB;EAE3B,IADc,KAAK,OAAO,IAAI,MACtB,GACN,KAAK,OAAO,OAAO,MAAM;CAE7B;CAEA,QAAc;EACZ,KAAK,OAAO,MAAM;CACpB;AACF"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "dshb-exec-ssh",
+  "version": "0.0.1",
+  "description": "DSHB 远程 SSH 执行世界（exec 行协议 / SFTP / PTY over ssh2）",
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": "./lib/index.js",
+    "./connection": "./lib/connection.js",
+    "./connection-pool": "./lib/connection-pool.js",
+    "./env-scrub": "./lib/env-scrub.js",
+    "./executor": "./lib/executor.js",
+    "./fs-provider": "./lib/fs-provider.js",
+    "./process-provider": "./lib/process-provider.js",
+    "./world": "./lib/world.js",
+    "./runner": "./lib/runner.js",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "dependencies": {
+    "dshb-router": "0.0.1",
+    "ssh2": "^1.16.0"
+  },
+  "devDependencies": {
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-fs": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-sandbox": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-shell": "^0.1.1-rc.2",
+    "@deepseek-ai/dsh-subprocess": "^0.1.1-rc.2",
+    "@types/ssh2": "^1.15.6"
+  },
+  "types": "lib/index.d.ts",
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc --noEmit"
+  }
+}