noumen 0.3.0 → 0.5.0

package/dist/ssh.js

@@ -0,0 +1,392 @@
+import {
+  createComputerProxy,
+  createFsProxy
+} from "./chunk-I5SBSOS6.js";
+import "./chunk-DGUM43GV.js";
+
+// src/virtual/ssh-fs.ts
+import * as pathMod from "path";
+var SshFs = class {
+  client;
+  workingDir;
+  sftpSession = null;
+  sftpPromise = null;
+  constructor(opts) {
+    this.client = opts.client;
+    this.workingDir = opts.workingDir ?? "/";
+  }
+  getSftp() {
+    if (this.sftpSession) return Promise.resolve(this.sftpSession);
+    if (this.sftpPromise) return this.sftpPromise;
+    this.sftpPromise = new Promise((resolve2, reject) => {
+      this.client.sftp((err, sftp) => {
+        if (err) {
+          this.sftpPromise = null;
+          reject(err);
+        } else {
+          this.sftpSession = sftp;
+          resolve2(sftp);
+        }
+      });
+    });
+    return this.sftpPromise;
+  }
+  resolvePath(p) {
+    if (p.includes("\0")) {
+      throw new Error("Path contains null bytes");
+    }
+    const normalizedBase = this.workingDir.endsWith("/") ? this.workingDir : this.workingDir + "/";
+    if (p.startsWith("/")) {
+      const normalized = pathMod.normalize(p);
+      if (normalized !== this.workingDir && !normalized.startsWith(normalizedBase)) {
+        throw new Error(
+          `Absolute path "${p}" is outside working directory "${this.workingDir}"`
+        );
+      }
+      return normalized;
+    }
+    const resolved = pathMod.resolve(this.workingDir, p);
+    if (resolved !== this.workingDir && !resolved.startsWith(normalizedBase)) {
+      throw new Error(
+        `Path "${p}" escapes working directory "${this.workingDir}"`
+      );
+    }
+    return resolved;
+  }
+  async readFile(path, _opts) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.readFile(resolved, { encoding: "utf8" }, (err, data) => {
+        if (err) reject(new Error(`SshFs readFile failed: ${err.message}`));
+        else resolve2(data);
+      });
+    });
+  }
+  async readFileBytes(path, maxBytes) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    if (maxBytes === void 0) {
+      return new Promise((resolve2, reject) => {
+        sftp.readFile(resolved, (err, data) => {
+          if (err) reject(new Error(`SshFs readFileBytes failed: ${err.message}`));
+          else resolve2(data);
+        });
+      });
+    }
+    return new Promise((resolve2, reject) => {
+      sftp.open(resolved, "r", (err, handle) => {
+        if (err) {
+          reject(new Error(`SshFs readFileBytes failed: ${err.message}`));
+          return;
+        }
+        const buf = Buffer.alloc(maxBytes);
+        sftp.read(handle, buf, 0, maxBytes, 0, (readErr, bytesRead, readBuf) => {
+          sftp.close(handle, () => {
+          });
+          if (readErr) {
+            reject(new Error(`SshFs readFileBytes failed: ${readErr.message}`));
+          } else {
+            resolve2(readBuf.subarray(0, bytesRead));
+          }
+        });
+      });
+    });
+  }
+  async writeFile(path, content) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    const dir = pathMod.dirname(resolved);
+    await this.mkdirRecursive(sftp, dir);
+    return new Promise((resolve2, reject) => {
+      sftp.writeFile(resolved, content, (err) => {
+        if (err) reject(new Error(`SshFs writeFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async appendFile(path, content) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    const dir = pathMod.dirname(resolved);
+    await this.mkdirRecursive(sftp, dir);
+    return new Promise((resolve2, reject) => {
+      sftp.appendFile(resolved, content, (err) => {
+        if (err) reject(new Error(`SshFs appendFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async deleteFile(path, opts) {
+    const resolved = this.resolvePath(path);
+    if (opts?.recursive) {
+      const sftp2 = await this.getSftp();
+      await this.rmRecursive(sftp2, resolved);
+      return;
+    }
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.unlink(resolved, (err) => {
+        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async mkdir(path, opts) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    if (opts?.recursive) {
+      await this.mkdirRecursive(sftp, resolved);
+      return;
+    }
+    return new Promise((resolve2, reject) => {
+      sftp.mkdir(resolved, (err) => {
+        if (err) reject(new Error(`SshFs mkdir failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async readdir(path, _opts) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.readdir(resolved, (err, list) => {
+        if (err) {
+          reject(new Error(`SshFs readdir failed: ${err.message}`));
+          return;
+        }
+        const entries = list.map((item) => ({
+          name: item.filename,
+          path: pathMod.join(resolved, item.filename),
+          isDirectory: item.attrs.isDirectory(),
+          isFile: item.attrs.isFile()
+        }));
+        resolve2(entries);
+      });
+    });
+  }
+  async exists(path) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2) => {
+      sftp.stat(resolved, (err) => {
+        resolve2(!err);
+      });
+    });
+  }
+  async stat(path) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.stat(resolved, (err, stats) => {
+        if (err) {
+          reject(new Error(`SshFs stat failed: ${err.message}`));
+          return;
+        }
+        resolve2({
+          size: stats.size,
+          isDirectory: stats.isDirectory(),
+          isFile: stats.isFile(),
+          modifiedAt: stats.mtime > 0 ? new Date(stats.mtime * 1e3) : void 0
+        });
+      });
+    });
+  }
+  async mkdirRecursive(sftp, dir) {
+    const parts = dir.split("/").filter(Boolean);
+    let current = "/";
+    for (const part of parts) {
+      current = pathMod.join(current, part);
+      await new Promise((resolve2) => {
+        sftp.mkdir(current, () => {
+          resolve2();
+        });
+      });
+    }
+  }
+  async rmRecursive(sftp, target) {
+    const isDir = await new Promise((resolve2) => {
+      sftp.stat(target, (err, stats) => {
+        if (err) resolve2(false);
+        else resolve2(stats.isDirectory());
+      });
+    });
+    if (!isDir) {
+      return new Promise((resolve2, reject) => {
+        sftp.unlink(target, (err) => {
+          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+          else resolve2();
+        });
+      });
+    }
+    const entries = await new Promise(
+      (resolve2, reject) => {
+        sftp.readdir(target, (err, list) => {
+          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+          else resolve2(list);
+        });
+      }
+    );
+    for (const entry of entries) {
+      await this.rmRecursive(sftp, pathMod.join(target, entry.filename));
+    }
+    return new Promise((resolve2, reject) => {
+      sftp.rmdir(target, (err) => {
+        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+};
+
+// src/virtual/ssh-computer.ts
+var SshComputer = class {
+  client;
+  defaultCwd;
+  defaultTimeout;
+  constructor(opts) {
+    this.client = opts.client;
+    this.defaultCwd = opts.defaultCwd ?? "/";
+    this.defaultTimeout = opts.defaultTimeout ?? 3e4;
+  }
+  async executeCommand(command, opts) {
+    const cwd = opts?.cwd ?? this.defaultCwd;
+    const timeout = opts?.timeout ?? this.defaultTimeout;
+    let envPrefix = "";
+    if (opts?.env) {
+      envPrefix = Object.entries(opts.env).map(([k, v]) => `${k}=${shellEscape(v)}`).join(" ") + " ";
+    }
+    const fullCommand = `cd ${shellEscape(cwd)} && ${envPrefix}${command}`;
+    return new Promise((resolve2, reject) => {
+      this.client.exec(fullCommand, (err, channel) => {
+        if (err) {
+          reject(err);
+          return;
+        }
+        const stdoutBufs = [];
+        const stderrBufs = [];
+        const timer = setTimeout(() => {
+          channel.destroy?.();
+          resolve2({
+            exitCode: 1,
+            stdout: Buffer.concat(stdoutBufs).toString("utf-8"),
+            stderr: Buffer.concat(stderrBufs).toString("utf-8") + "\n[timeout after " + timeout + "ms]"
+          });
+        }, timeout);
+        channel.on("data", (chunk) => {
+          stdoutBufs.push(Buffer.from(chunk));
+        });
+        channel.stderr.on("data", (chunk) => {
+          stderrBufs.push(Buffer.from(chunk));
+        });
+        channel.on("close", (code) => {
+          clearTimeout(timer);
+          resolve2({
+            exitCode: code ?? 0,
+            stdout: Buffer.concat(stdoutBufs).toString("utf-8"),
+            stderr: Buffer.concat(stderrBufs).toString("utf-8")
+          });
+        });
+        channel.on("error", (channelErr) => {
+          clearTimeout(timer);
+          reject(channelErr);
+        });
+      });
+    });
+  }
+};
+function shellEscape(s) {
+  return `'${s.replace(/'/g, "'\\''")}'`;
+}
+
+// src/virtual/ssh-sandbox.ts
+function SshSandbox(opts) {
+  if (opts.client) {
+    const c = opts.client;
+    return {
+      fs: new SshFs({ client: c, workingDir: opts.cwd }),
+      computer: new SshComputer({
+        client: c,
+        defaultCwd: opts.cwd,
+        defaultTimeout: opts.defaultTimeout
+      }),
+      sandboxId: () => opts.host ? `${opts.host}:${opts.port ?? 22}` : void 0
+    };
+  }
+  if (!opts.host) {
+    throw new Error("SshSandbox requires either `client` or `host`");
+  }
+  const fsProxy = createFsProxy();
+  const computerProxy = createComputerProxy();
+  const identifier = `${opts.host}:${opts.port ?? 22}`;
+  let clientRef = null;
+  let autoCreated = false;
+  let initPromise = null;
+  async function doInit() {
+    const modName = "ssh2";
+    const ssh2 = await import(
+      /* webpackIgnore: true */
+      modName
+    );
+    const ClientClass = ssh2.Client ?? ssh2.default?.Client;
+    if (!ClientClass) {
+      throw new Error(
+        "Could not resolve Client class from 'ssh2' package"
+      );
+    }
+    const client = new ClientClass();
+    await new Promise((resolve2, reject) => {
+      client.on("ready", () => resolve2());
+      client.on("error", (err) => reject(err));
+      client.connect({
+        host: opts.host,
+        port: opts.port ?? 22,
+        username: opts.username ?? "root",
+        password: opts.password,
+        privateKey: opts.privateKey,
+        passphrase: opts.passphrase
+      });
+    });
+    clientRef = client;
+    autoCreated = true;
+    fsProxy.setTarget(new SshFs({ client, workingDir: opts.cwd }));
+    computerProxy.setTarget(
+      new SshComputer({
+        client,
+        defaultCwd: opts.cwd,
+        defaultTimeout: opts.defaultTimeout
+      })
+    );
+  }
+  return {
+    fs: fsProxy,
+    computer: computerProxy,
+    sandboxId: () => identifier,
+    init() {
+      if (!initPromise) {
+        initPromise = doInit().catch((err) => {
+          initPromise = null;
+          throw err;
+        });
+      }
+      return initPromise;
+    },
+    async dispose() {
+      if (initPromise) {
+        await initPromise.catch(() => {
+        });
+      }
+      if (!autoCreated || !clientRef) return;
+      try {
+        clientRef.end();
+      } catch {
+      }
+    }
+  };
+}
+export {
+  SshComputer,
+  SshFs,
+  SshSandbox
+};
+//# sourceMappingURL=ssh.js.map

package/dist/ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/virtual/ssh-fs.ts","../src/virtual/ssh-computer.ts","../src/virtual/ssh-sandbox.ts"],"sourcesContent":["import * as pathMod from \"node:path\";\nimport type { VirtualFs, FileEntry, FileStat, ReadOptions } from \"./fs.js\";\nimport type { SshClient, SshSftpSession } from \"./ssh-computer.js\";\n\nexport interface SshFsOptions {\n  /** A connected ssh2 Client instance. */\n  client: SshClient;\n  /** Working directory for relative path resolution (default: /). */\n  workingDir?: string;\n}\n\n/**\n * VirtualFs backed by SFTP file operations over SSH.\n *\n * Uses the ssh2 Client's SFTP subsystem for all file I/O. The SFTP session\n * is opened lazily on the first operation and reused for the lifetime of\n * the SshFs instance.\n *\n * Requires `ssh2` as an optional peer dependency.\n * The caller is responsible for the Client lifecycle.\n */\nexport class SshFs implements VirtualFs {\n  private client: SshClient;\n  private workingDir: string;\n  private sftpSession: SshSftpSession | null = null;\n  private sftpPromise: Promise<SshSftpSession> | null = null;\n\n  constructor(opts: SshFsOptions) {\n    this.client = opts.client;\n    this.workingDir = opts.workingDir ?? \"/\";\n  }\n\n  private getSftp(): Promise<SshSftpSession> {\n    if (this.sftpSession) return Promise.resolve(this.sftpSession);\n    if (this.sftpPromise) return this.sftpPromise;\n    this.sftpPromise = new Promise<SshSftpSession>((resolve, reject) => {\n      this.client.sftp((err, sftp) => {\n        if (err) {\n          this.sftpPromise = null;\n          reject(err);\n        } else {\n          this.sftpSession = sftp;\n          resolve(sftp);\n        }\n      });\n    });\n    return this.sftpPromise;\n  }\n\n  private resolvePath(p: string): string {\n    if (p.includes(\"\\0\")) {\n      throw new Error(\"Path contains null bytes\");\n    }\n    const normalizedBase = this.workingDir.endsWith(\"/\")\n      ? this.workingDir\n      : this.workingDir + \"/\";\n    if (p.startsWith(\"/\")) {\n      const normalized = pathMod.normalize(p);\n      if (\n        normalized !== this.workingDir &&\n        !normalized.startsWith(normalizedBase)\n      ) {\n        throw new Error(\n          `Absolute path \"${p}\" is outside working directory \"${this.workingDir}\"`,\n        );\n      }\n      return normalized;\n    }\n    const resolved = pathMod.resolve(this.workingDir, p);\n    if (\n      resolved !== this.workingDir &&\n      !resolved.startsWith(normalizedBase)\n    ) {\n      throw new Error(\n        `Path \"${p}\" escapes working directory \"${this.workingDir}\"`,\n      );\n    }\n    return resolved;\n  }\n\n  async readFile(path: string, _opts?: ReadOptions): Promise<string> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<string>((resolve, reject) => {\n      sftp.readFile(resolved, { encoding: \"utf8\" }, (err, data) => {\n        if (err) reject(new Error(`SshFs readFile failed: ${err.message}`));\n        else resolve(data as string);\n      });\n    });\n  }\n\n  async readFileBytes(path: string, maxBytes?: number): Promise<Buffer> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n\n    if (maxBytes === undefined) {\n      return new Promise<Buffer>((resolve, reject) => {\n        sftp.readFile(resolved, (err, data) => {\n          if (err) reject(new Error(`SshFs readFileBytes failed: ${err.message}`));\n          else resolve(data);\n        });\n      });\n    }\n\n    return new Promise<Buffer>((resolve, reject) => {\n      sftp.open(resolved, \"r\", (err, handle) => {\n        if (err) {\n          reject(new Error(`SshFs readFileBytes failed: ${err.message}`));\n          return;\n        }\n        const buf = Buffer.alloc(maxBytes);\n        sftp.read(handle, buf, 0, maxBytes, 0, (readErr, bytesRead, readBuf) => {\n          sftp.close(handle, () => {});\n          if (readErr) {\n            reject(new Error(`SshFs readFileBytes failed: ${readErr.message}`));\n          } else {\n            resolve(readBuf.subarray(0, bytesRead));\n          }\n        });\n      });\n    });\n  }\n\n  async writeFile(path: string, content: string): Promise<void> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    const dir = pathMod.dirname(resolved);\n    await this.mkdirRecursive(sftp, dir);\n    return new Promise<void>((resolve, reject) => {\n      sftp.writeFile(resolved, content, (err) => {\n        if (err) reject(new Error(`SshFs writeFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async appendFile(path: string, content: string): Promise<void> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    const dir = pathMod.dirname(resolved);\n    await this.mkdirRecursive(sftp, dir);\n    return new Promise<void>((resolve, reject) => {\n      sftp.appendFile(resolved, content, (err) => {\n        if (err) reject(new Error(`SshFs appendFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async deleteFile(\n    path: string,\n    opts?: { recursive?: boolean },\n  ): Promise<void> {\n    const resolved = this.resolvePath(path);\n    if (opts?.recursive) {\n      const sftp = await this.getSftp();\n      await this.rmRecursive(sftp, resolved);\n      return;\n    }\n    const sftp = await this.getSftp();\n    return new Promise<void>((resolve, reject) => {\n      sftp.unlink(resolved, (err) => {\n        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async mkdir(path: string, opts?: { recursive?: boolean }): Promise<void> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    if (opts?.recursive) {\n      await this.mkdirRecursive(sftp, resolved);\n      return;\n    }\n    return new Promise<void>((resolve, reject) => {\n      sftp.mkdir(resolved, (err) => {\n        if (err) reject(new Error(`SshFs mkdir failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async readdir(\n    path: string,\n    _opts?: { recursive?: boolean },\n  ): Promise<FileEntry[]> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<FileEntry[]>((resolve, reject) => {\n      sftp.readdir(resolved, (err, list) => {\n        if (err) {\n          reject(new Error(`SshFs readdir failed: ${err.message}`));\n          return;\n        }\n        const entries: FileEntry[] = list.map((item) => ({\n          name: item.filename,\n          path: pathMod.join(resolved, item.filename),\n          isDirectory: item.attrs.isDirectory(),\n          isFile: item.attrs.isFile(),\n        }));\n        resolve(entries);\n      });\n    });\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<boolean>((resolve) => {\n      sftp.stat(resolved, (err) => {\n        resolve(!err);\n      });\n    });\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<FileStat>((resolve, reject) => {\n      sftp.stat(resolved, (err, stats) => {\n        if (err) {\n          reject(new Error(`SshFs stat failed: ${err.message}`));\n          return;\n        }\n        resolve({\n          size: stats.size,\n          isDirectory: stats.isDirectory(),\n          isFile: stats.isFile(),\n          modifiedAt: stats.mtime > 0 ? new Date(stats.mtime * 1000) : undefined,\n        });\n      });\n    });\n  }\n\n  private async mkdirRecursive(\n    sftp: SshSftpSession,\n    dir: string,\n  ): Promise<void> {\n    const parts = dir.split(\"/\").filter(Boolean);\n    let current = \"/\";\n    for (const part of parts) {\n      current = pathMod.join(current, part);\n      await new Promise<void>((resolve) => {\n        sftp.mkdir(current, () => {\n          resolve();\n        });\n      });\n    }\n  }\n\n  private async rmRecursive(\n    sftp: SshSftpSession,\n    target: string,\n  ): Promise<void> {\n    const isDir = await new Promise<boolean>((resolve) => {\n      sftp.stat(target, (err, stats) => {\n        if (err) resolve(false);\n        else resolve(stats.isDirectory());\n      });\n    });\n\n    if (!isDir) {\n      return new Promise<void>((resolve, reject) => {\n        sftp.unlink(target, (err) => {\n          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n          else resolve();\n        });\n      });\n    }\n\n    const entries = await new Promise<Array<{ filename: string; attrs: { isDirectory(): boolean } }>>(\n      (resolve, reject) => {\n        sftp.readdir(target, (err, list) => {\n          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n          else resolve(list);\n        });\n      },\n    );\n\n    for (const entry of entries) {\n      await this.rmRecursive(sftp, pathMod.join(target, entry.filename));\n    }\n\n    return new Promise<void>((resolve, reject) => {\n      sftp.rmdir(target, (err) => {\n        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n}\n","import type { VirtualComputer, ExecOptions, CommandResult } from \"./computer.js\";\n\n/**\n * Minimal subset of the ssh2 Channel interface used by SshComputer / SshFs.\n * Avoids a hard import of ssh2 at the module level.\n */\nexport interface SshChannel {\n  on(event: string, listener: (...args: any[]) => void): SshChannel;\n  stderr: { on(event: string, listener: (...args: any[]) => void): unknown };\n  destroy?(): void;\n}\n\n/**\n * Minimal subset of the ssh2 SFTPWrapper interface used by SshFs.\n */\nexport interface SshSftpSession {\n  readFile(\n    path: string,\n    callback: (err: Error | undefined, data: Buffer) => void,\n  ): void;\n  readFile(\n    path: string,\n    opts: { encoding: string },\n    callback: (err: Error | undefined, data: string) => void,\n  ): void;\n  writeFile(\n    path: string,\n    data: string | Buffer,\n    callback: (err: Error | undefined) => void,\n  ): void;\n  appendFile(\n    path: string,\n    data: string | Buffer,\n    callback: (err: Error | undefined) => void,\n  ): void;\n  unlink(path: string, callback: (err: Error | undefined) => void): void;\n  rmdir(path: string, callback: (err: Error | undefined) => void): void;\n  mkdir(path: string, callback: (err: Error | undefined) => void): void;\n  readdir(\n    path: string,\n    callback: (\n      err: Error | undefined,\n      list: Array<{\n        filename: string;\n        longname: string;\n        attrs: { size: number; isDirectory(): boolean; isFile(): boolean; mtime: number; atime: number };\n      }>,\n    ) => void,\n  ): void;\n  stat(\n    path: string,\n    callback: (\n      err: Error | undefined,\n      stats: { size: number; isDirectory(): boolean; isFile(): boolean; mtime: number; atime: number },\n    ) => void,\n  ): void;\n  open(\n    path: string,\n    flags: string,\n    callback: (err: Error | undefined, handle: Buffer) => void,\n  ): void;\n  read(\n    handle: Buffer,\n    buffer: Buffer,\n    offset: number,\n    length: number,\n    position: number,\n    callback: (err: Error | undefined, bytesRead: number, buf: Buffer) => void,\n  ): void;\n  close(handle: Buffer, callback: (err: Error | undefined) => void): void;\n  end(): void;\n}\n\n/**\n * Minimal subset of the ssh2 Client interface used by SshComputer and SshFs.\n * Avoids a hard import of ssh2 at the module level.\n */\nexport interface SshClient {\n  exec(\n    command: string,\n    callback: (err: Error | undefined, channel: SshChannel) => void,\n  ): void;\n  exec(\n    command: string,\n    opts: Record<string, unknown>,\n    callback: (err: Error | undefined, channel: SshChannel) => void,\n  ): void;\n  sftp(\n    callback: (err: Error | undefined, sftp: SshSftpSession) => void,\n  ): void;\n  end(): void;\n  on(event: string, listener: (...args: any[]) => void): this;\n}\n\nexport interface SshComputerOptions {\n  /** A connected ssh2 Client instance. */\n  client: SshClient;\n  /** Default working directory for commands (default: /). */\n  defaultCwd?: string;\n  /** Default timeout in ms for commands (default: 30000). */\n  defaultTimeout?: number;\n}\n\n/**\n * VirtualComputer backed by command execution over SSH.\n *\n * Requires `ssh2` as an optional peer dependency.\n * The caller is responsible for the Client lifecycle (connect, end).\n */\nexport class SshComputer implements VirtualComputer {\n  private client: SshClient;\n  private defaultCwd: string;\n  private defaultTimeout: number;\n\n  constructor(opts: SshComputerOptions) {\n    this.client = opts.client;\n    this.defaultCwd = opts.defaultCwd ?? \"/\";\n    this.defaultTimeout = opts.defaultTimeout ?? 30_000;\n  }\n\n  async executeCommand(\n    command: string,\n    opts?: ExecOptions,\n  ): Promise<CommandResult> {\n    const cwd = opts?.cwd ?? this.defaultCwd;\n    const timeout = opts?.timeout ?? this.defaultTimeout;\n\n    let envPrefix = \"\";\n    if (opts?.env) {\n      envPrefix = Object.entries(opts.env)\n        .map(([k, v]) => `${k}=${shellEscape(v)}`)\n        .join(\" \") + \" \";\n    }\n\n    const fullCommand = `cd ${shellEscape(cwd)} && ${envPrefix}${command}`;\n\n    return new Promise<CommandResult>((resolve, reject) => {\n      this.client.exec(fullCommand, (err, channel) => {\n        if (err) {\n          reject(err);\n          return;\n        }\n\n        const stdoutBufs: Buffer[] = [];\n        const stderrBufs: Buffer[] = [];\n\n        const timer = setTimeout(() => {\n          channel.destroy?.();\n          resolve({\n            exitCode: 1,\n            stdout: Buffer.concat(stdoutBufs).toString(\"utf-8\"),\n            stderr:\n              Buffer.concat(stderrBufs).toString(\"utf-8\") +\n              \"\\n[timeout after \" + timeout + \"ms]\",\n          });\n        }, timeout);\n\n        channel.on(\"data\", (chunk: Buffer) => {\n          stdoutBufs.push(Buffer.from(chunk));\n        });\n\n        channel.stderr.on(\"data\", (chunk: Buffer) => {\n          stderrBufs.push(Buffer.from(chunk));\n        });\n\n        channel.on(\"close\", (code: number) => {\n          clearTimeout(timer);\n          resolve({\n            exitCode: code ?? 0,\n            stdout: Buffer.concat(stdoutBufs).toString(\"utf-8\"),\n            stderr: Buffer.concat(stderrBufs).toString(\"utf-8\"),\n          });\n        });\n\n        channel.on(\"error\", (channelErr: Error) => {\n          clearTimeout(timer);\n          reject(channelErr);\n        });\n      });\n    });\n  }\n}\n\nfunction shellEscape(s: string): string {\n  return `'${s.replace(/'/g, \"'\\\\''\")}'`;\n}\n","import type { Sandbox } from \"./sandbox.js\";\nimport { SshFs } from \"./ssh-fs.js\";\nimport { SshComputer, type SshClient } from \"./ssh-computer.js\";\nimport { createFsProxy, createComputerProxy } from \"./proxy.js\";\n\nexport interface SshSandboxOptions {\n  /**\n   * A pre-connected ssh2 Client instance. When provided the sandbox uses\n   * this client directly — no auto-connect occurs and `dispose()` will\n   * **not** call `client.end()`.\n   *\n   * When omitted, a new ssh2 Client is created and connected on the first\n   * `init()` call using `host`, `port`, `username`, and the provided\n   * credentials. The client is ended when `dispose()` is called.\n   */\n  client?: SshClient;\n  /**\n   * SSH hostname. Required when `client` is omitted; ignored when `client`\n   * is provided.\n   */\n  host?: string;\n  /** SSH port (default: 22). Only used during auto-connect. */\n  port?: number;\n  /** SSH username (default: \"root\"). Only used during auto-connect. */\n  username?: string;\n  /** Password for password-based authentication. Only used during auto-connect. */\n  password?: string;\n  /** Private key for key-based authentication (PEM string or Buffer). Only used during auto-connect. */\n  privateKey?: string | Buffer;\n  /** Passphrase for an encrypted private key. Only used during auto-connect. */\n  passphrase?: string;\n  /** Working directory on the remote host. */\n  cwd?: string;\n  /** Default timeout (ms) for shell commands. */\n  defaultTimeout?: number;\n}\n\n/**\n * Create a `Sandbox` backed by a remote host over SSH.\n * Requires `ssh2` as an optional peer dependency.\n *\n * **Auto-connect:** When `client` is omitted and `host` is provided,\n * an ssh2 Client is created and connected lazily on the first `init()`\n * call. The connection identifier (`host:port`) is available through\n * `sandboxId()` for session persistence.\n *\n * **Explicit client:** When `client` is provided, `init()` binds it\n * immediately. `dispose()` is a no-op — the caller owns the client's\n * lifecycle.\n *\n * @example\n * ```ts\n * // Auto-connect with private key\n * const sandbox = SshSandbox({\n *   host: \"dev.example.com\",\n *   username: \"deploy\",\n *   privateKey: fs.readFileSync(\"~/.ssh/id_ed25519\"),\n *   cwd: \"/home/deploy/project\",\n * });\n *\n * // Explicit client (lifecycle managed externally)\n * const sandbox = SshSandbox({ client: myConnectedClient, cwd: \"/workspace\" });\n * ```\n */\nexport function SshSandbox(opts: SshSandboxOptions): Sandbox {\n  if (opts.client) {\n    const c = opts.client;\n    return {\n      fs: new SshFs({ client: c, workingDir: opts.cwd }),\n      computer: new SshComputer({\n        client: c,\n        defaultCwd: opts.cwd,\n        defaultTimeout: opts.defaultTimeout,\n      }),\n      sandboxId: () =>\n        opts.host ? `${opts.host}:${opts.port ?? 22}` : undefined,\n    };\n  }\n\n  if (!opts.host) {\n    throw new Error(\"SshSandbox requires either `client` or `host`\");\n  }\n\n  const fsProxy = createFsProxy();\n  const computerProxy = createComputerProxy();\n  const identifier = `${opts.host}:${opts.port ?? 22}`;\n  let clientRef: SshClient | null = null;\n  let autoCreated = false;\n  let initPromise: Promise<void> | null = null;\n\n  async function doInit(): Promise<void> {\n    const modName = \"ssh2\";\n    const ssh2 = await import(/* webpackIgnore: true */ modName);\n    const ClientClass =\n      (ssh2 as any).Client ?? (ssh2 as any).default?.Client;\n    if (!ClientClass) {\n      throw new Error(\n        \"Could not resolve Client class from 'ssh2' package\",\n      );\n    }\n\n    const client: SshClient = new ClientClass();\n    await new Promise<void>((resolve, reject) => {\n      client.on(\"ready\", () => resolve());\n      client.on(\"error\", (err: Error) => reject(err));\n      (client as any).connect({\n        host: opts.host,\n        port: opts.port ?? 22,\n        username: opts.username ?? \"root\",\n        password: opts.password,\n        privateKey: opts.privateKey,\n        passphrase: opts.passphrase,\n      });\n    });\n\n    clientRef = client;\n    autoCreated = true;\n    fsProxy.setTarget(new SshFs({ client, workingDir: opts.cwd }));\n    computerProxy.setTarget(\n      new SshComputer({\n        client,\n        defaultCwd: opts.cwd,\n        defaultTimeout: opts.defaultTimeout,\n      }),\n    );\n  }\n\n  return {\n    fs: fsProxy,\n    computer: computerProxy,\n    sandboxId: () => identifier,\n\n    init(): Promise<void> {\n      if (!initPromise) {\n        initPromise = doInit().catch((err) => {\n          initPromise = null;\n          throw err;\n        });\n      }\n      return initPromise;\n    },\n\n    async dispose(): Promise<void> {\n      if (initPromise) {\n        await initPromise.catch(() => {});\n      }\n      if (!autoCreated || !clientRef) return;\n      try {\n        clientRef.end();\n      } catch {\n        /* best-effort */\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;AAAA,YAAY,aAAa;AAqBlB,IAAM,QAAN,MAAiC;AAAA,EAC9B;AAAA,EACA;AAAA,EACA,cAAqC;AAAA,EACrC,cAA8C;AAAA,EAEtD,YAAY,MAAoB;AAC9B,SAAK,SAAS,KAAK;AACnB,SAAK,aAAa,KAAK,cAAc;AAAA,EACvC;AAAA,EAEQ,UAAmC;AACzC,QAAI,KAAK,YAAa,QAAO,QAAQ,QAAQ,KAAK,WAAW;AAC7D,QAAI,KAAK,YAAa,QAAO,KAAK;AAClC,SAAK,cAAc,IAAI,QAAwB,CAACA,UAAS,WAAW;AAClE,WAAK,OAAO,KAAK,CAAC,KAAK,SAAS;AAC9B,YAAI,KAAK;AACP,eAAK,cAAc;AACnB,iBAAO,GAAG;AAAA,QACZ,OAAO;AACL,eAAK,cAAc;AACnB,UAAAA,SAAQ,IAAI;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,YAAY,GAAmB;AACrC,QAAI,EAAE,SAAS,IAAI,GAAG;AACpB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AACA,UAAM,iBAAiB,KAAK,WAAW,SAAS,GAAG,IAC/C,KAAK,aACL,KAAK,aAAa;AACtB,QAAI,EAAE,WAAW,GAAG,GAAG;AACrB,YAAM,aAAqB,kBAAU,CAAC;AACtC,UACE,eAAe,KAAK,cACpB,CAAC,WAAW,WAAW,cAAc,GACrC;AACA,cAAM,IAAI;AAAA,UACR,kBAAkB,CAAC,mCAAmC,KAAK,UAAU;AAAA,QACvE;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,UAAM,WAAmB,gBAAQ,KAAK,YAAY,CAAC;AACnD,QACE,aAAa,KAAK,cAClB,CAAC,SAAS,WAAW,cAAc,GACnC;AACA,YAAM,IAAI;AAAA,QACR,SAAS,CAAC,gCAAgC,KAAK,UAAU;AAAA,MAC3D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAc,OAAsC;AACjE,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAgB,CAACA,UAAS,WAAW;AAC9C,WAAK,SAAS,UAAU,EAAE,UAAU,OAAO,GAAG,CAAC,KAAK,SAAS;AAC3D,YAAI,IAAK,QAAO,IAAI,MAAM,0BAA0B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC7D,CAAAA,SAAQ,IAAc;AAAA,MAC7B,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,MAAc,UAAoC;AACpE,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAEhC,QAAI,aAAa,QAAW;AAC1B,aAAO,IAAI,QAAgB,CAACA,UAAS,WAAW;AAC9C,aAAK,SAAS,UAAU,CAAC,KAAK,SAAS;AACrC,cAAI,IAAK,QAAO,IAAI,MAAM,+BAA+B,IAAI,OAAO,EAAE,CAAC;AAAA,cAClE,CAAAA,SAAQ,IAAI;AAAA,QACnB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAEA,WAAO,IAAI,QAAgB,CAACA,UAAS,WAAW;AAC9C,WAAK,KAAK,UAAU,KAAK,CAAC,KAAK,WAAW;AACxC,YAAI,KAAK;AACP,iBAAO,IAAI,MAAM,+BAA+B,IAAI,OAAO,EAAE,CAAC;AAC9D;AAAA,QACF;AACA,cAAM,MAAM,OAAO,MAAM,QAAQ;AACjC,aAAK,KAAK,QAAQ,KAAK,GAAG,UAAU,GAAG,CAAC,SAAS,WAAW,YAAY;AACtE,eAAK,MAAM,QAAQ,MAAM;AAAA,UAAC,CAAC;AAC3B,cAAI,SAAS;AACX,mBAAO,IAAI,MAAM,+BAA+B,QAAQ,OAAO,EAAE,CAAC;AAAA,UACpE,OAAO;AACL,YAAAA,SAAQ,QAAQ,SAAS,GAAG,SAAS,CAAC;AAAA,UACxC;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAU,MAAc,SAAgC;AAC5D,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,UAAM,MAAc,gBAAQ,QAAQ;AACpC,UAAM,KAAK,eAAe,MAAM,GAAG;AACnC,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,UAAU,UAAU,SAAS,CAAC,QAAQ;AACzC,YAAI,IAAK,QAAO,IAAI,MAAM,2BAA2B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC9D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,MAAc,SAAgC;AAC7D,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,UAAM,MAAc,gBAAQ,QAAQ;AACpC,UAAM,KAAK,eAAe,MAAM,GAAG;AACnC,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,WAAW,UAAU,SAAS,CAAC,QAAQ;AAC1C,YAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC/D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WACJ,MACA,MACe;AACf,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,QAAI,MAAM,WAAW;AACnB,YAAMC,QAAO,MAAM,KAAK,QAAQ;AAChC,YAAM,KAAK,YAAYA,OAAM,QAAQ;AACrC;AAAA,IACF;AACA,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAc,CAACD,UAAS,WAAW;AAC5C,WAAK,OAAO,UAAU,CAAC,QAAQ;AAC7B,YAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC/D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAM,MAAc,MAA+C;AACvE,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,QAAI,MAAM,WAAW;AACnB,YAAM,KAAK,eAAe,MAAM,QAAQ;AACxC;AAAA,IACF;AACA,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,MAAM,UAAU,CAAC,QAAQ;AAC5B,YAAI,IAAK,QAAO,IAAI,MAAM,uBAAuB,IAAI,OAAO,EAAE,CAAC;AAAA,YAC1D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QACJ,MACA,OACsB;AACtB,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAqB,CAACA,UAAS,WAAW;AACnD,WAAK,QAAQ,UAAU,CAAC,KAAK,SAAS;AACpC,YAAI,KAAK;AACP,iBAAO,IAAI,MAAM,yBAAyB,IAAI,OAAO,EAAE,CAAC;AACxD;AAAA,QACF;AACA,cAAM,UAAuB,KAAK,IAAI,CAAC,UAAU;AAAA,UAC/C,MAAM,KAAK;AAAA,UACX,MAAc,aAAK,UAAU,KAAK,QAAQ;AAAA,UAC1C,aAAa,KAAK,MAAM,YAAY;AAAA,UACpC,QAAQ,KAAK,MAAM,OAAO;AAAA,QAC5B,EAAE;AACF,QAAAA,SAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,MAAgC;AAC3C,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAiB,CAACA,aAAY;AACvC,WAAK,KAAK,UAAU,CAAC,QAAQ;AAC3B,QAAAA,SAAQ,CAAC,GAAG;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,KAAK,MAAiC;AAC1C,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAkB,CAACA,UAAS,WAAW;AAChD,WAAK,KAAK,UAAU,CAAC,KAAK,UAAU;AAClC,YAAI,KAAK;AACP,iBAAO,IAAI,MAAM,sBAAsB,IAAI,OAAO,EAAE,CAAC;AACrD;AAAA,QACF;AACA,QAAAA,SAAQ;AAAA,UACN,MAAM,MAAM;AAAA,UACZ,aAAa,MAAM,YAAY;AAAA,UAC/B,QAAQ,MAAM,OAAO;AAAA,UACrB,YAAY,MAAM,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ,GAAI,IAAI;AAAA,QAC/D,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,eACZ,MACA,KACe;AACf,UAAM,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AAC3C,QAAI,UAAU;AACd,eAAW,QAAQ,OAAO;AACxB,gBAAkB,aAAK,SAAS,IAAI;AACpC,YAAM,IAAI,QAAc,CAACA,aAAY;AACnC,aAAK,MAAM,SAAS,MAAM;AACxB,UAAAA,SAAQ;AAAA,QACV,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,YACZ,MACA,QACe;AACf,UAAM,QAAQ,MAAM,IAAI,QAAiB,CAACA,aAAY;AACpD,WAAK,KAAK,QAAQ,CAAC,KAAK,UAAU;AAChC,YAAI,IAAK,CAAAA,SAAQ,KAAK;AAAA,YACjB,CAAAA,SAAQ,MAAM,YAAY,CAAC;AAAA,MAClC,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,OAAO;AACV,aAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,aAAK,OAAO,QAAQ,CAAC,QAAQ;AAC3B,cAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,cAC/D,CAAAA,SAAQ;AAAA,QACf,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,MAAM,IAAI;AAAA,MACxB,CAACA,UAAS,WAAW;AACnB,aAAK,QAAQ,QAAQ,CAAC,KAAK,SAAS;AAClC,cAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,cAC/D,CAAAA,SAAQ,IAAI;AAAA,QACnB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,eAAW,SAAS,SAAS;AAC3B,YAAM,KAAK,YAAY,MAAc,aAAK,QAAQ,MAAM,QAAQ,CAAC;AAAA,IACnE;AAEA,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,MAAM,QAAQ,CAAC,QAAQ;AAC1B,YAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC/D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;;;ACtLO,IAAM,cAAN,MAA6C;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,MAA0B;AACpC,SAAK,SAAS,KAAK;AACnB,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,iBAAiB,KAAK,kBAAkB;AAAA,EAC/C;AAAA,EAEA,MAAM,eACJ,SACA,MACwB;AACxB,UAAM,MAAM,MAAM,OAAO,KAAK;AAC9B,UAAM,UAAU,MAAM,WAAW,KAAK;AAEtC,QAAI,YAAY;AAChB,QAAI,MAAM,KAAK;AACb,kBAAY,OAAO,QAAQ,KAAK,GAAG,EAChC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,EACxC,KAAK,GAAG,IAAI;AAAA,IACjB;AAEA,UAAM,cAAc,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,GAAG,OAAO;AAEpE,WAAO,IAAI,QAAuB,CAACE,UAAS,WAAW;AACrD,WAAK,OAAO,KAAK,aAAa,CAAC,KAAK,YAAY;AAC9C,YAAI,KAAK;AACP,iBAAO,GAAG;AACV;AAAA,QACF;AAEA,cAAM,aAAuB,CAAC;AAC9B,cAAM,aAAuB,CAAC;AAE9B,cAAM,QAAQ,WAAW,MAAM;AAC7B,kBAAQ,UAAU;AAClB,UAAAA,SAAQ;AAAA,YACN,UAAU;AAAA,YACV,QAAQ,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO;AAAA,YAClD,QACE,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO,IAC1C,sBAAsB,UAAU;AAAA,UACpC,CAAC;AAAA,QACH,GAAG,OAAO;AAEV,gBAAQ,GAAG,QAAQ,CAAC,UAAkB;AACpC,qBAAW,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,QACpC,CAAC;AAED,gBAAQ,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAC3C,qBAAW,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,QACpC,CAAC;AAED,gBAAQ,GAAG,SAAS,CAAC,SAAiB;AACpC,uBAAa,KAAK;AAClB,UAAAA,SAAQ;AAAA,YACN,UAAU,QAAQ;AAAA,YAClB,QAAQ,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO;AAAA,YAClD,QAAQ,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO;AAAA,UACpD,CAAC;AAAA,QACH,CAAC;AAED,gBAAQ,GAAG,SAAS,CAAC,eAAsB;AACzC,uBAAa,KAAK;AAClB,iBAAO,UAAU;AAAA,QACnB,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;AAEA,SAAS,YAAY,GAAmB;AACtC,SAAO,IAAI,EAAE,QAAQ,MAAM,OAAO,CAAC;AACrC;;;ACzHO,SAAS,WAAW,MAAkC;AAC3D,MAAI,KAAK,QAAQ;AACf,UAAM,IAAI,KAAK;AACf,WAAO;AAAA,MACL,IAAI,IAAI,MAAM,EAAE,QAAQ,GAAG,YAAY,KAAK,IAAI,CAAC;AAAA,MACjD,UAAU,IAAI,YAAY;AAAA,QACxB,QAAQ;AAAA,QACR,YAAY,KAAK;AAAA,QACjB,gBAAgB,KAAK;AAAA,MACvB,CAAC;AAAA,MACD,WAAW,MACT,KAAK,OAAO,GAAG,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,KAAK;AAAA,IACpD;AAAA,EACF;AAEA,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAEA,QAAM,UAAU,cAAc;AAC9B,QAAM,gBAAgB,oBAAoB;AAC1C,QAAM,aAAa,GAAG,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE;AAClD,MAAI,YAA8B;AAClC,MAAI,cAAc;AAClB,MAAI,cAAoC;AAExC,iBAAe,SAAwB;AACrC,UAAM,UAAU;AAChB,UAAM,OAAO,MAAM;AAAA;AAAA,MAAiC;AAAA;AACpD,UAAM,cACH,KAAa,UAAW,KAAa,SAAS;AACjD,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAoB,IAAI,YAAY;AAC1C,UAAM,IAAI,QAAc,CAACC,UAAS,WAAW;AAC3C,aAAO,GAAG,SAAS,MAAMA,SAAQ,CAAC;AAClC,aAAO,GAAG,SAAS,CAAC,QAAe,OAAO,GAAG,CAAC;AAC9C,MAAC,OAAe,QAAQ;AAAA,QACtB,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,UAAU,KAAK,YAAY;AAAA,QAC3B,UAAU,KAAK;AAAA,QACf,YAAY,KAAK;AAAA,QACjB,YAAY,KAAK;AAAA,MACnB,CAAC;AAAA,IACH,CAAC;AAED,gBAAY;AACZ,kBAAc;AACd,YAAQ,UAAU,IAAI,MAAM,EAAE,QAAQ,YAAY,KAAK,IAAI,CAAC,CAAC;AAC7D,kBAAc;AAAA,MACZ,IAAI,YAAY;AAAA,QACd;AAAA,QACA,YAAY,KAAK;AAAA,QACjB,gBAAgB,KAAK;AAAA,MACvB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,WAAW,MAAM;AAAA,IAEjB,OAAsB;AACpB,UAAI,CAAC,aAAa;AAChB,sBAAc,OAAO,EAAE,MAAM,CAAC,QAAQ;AACpC,wBAAc;AACd,gBAAM;AAAA,QACR,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,UAAyB;AAC7B,UAAI,aAAa;AACf,cAAM,YAAY,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAClC;AACA,UAAI,CAAC,eAAe,CAAC,UAAW;AAChC,UAAI;AACF,kBAAU,IAAI;AAAA,MAChB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACF;","names":["resolve","sftp","resolve","resolve"]}

package/dist/{types-RPKUTu1k.d.ts → types-BA87bHPV.d.ts}

@@ -1,93 +1,7 @@
 import { c as CheckpointConfig, F as FileCheckpointState, D as DiffStats, d as FileCheckpointSnapshot, S as StreamEvent, e as ContentPart } from './types-LrU4LRmX.js';
+import { a as VirtualFs, V as VirtualComputer } from './computer-BPdxSo6X.js';
 import { a as PermissionMode, b as PermissionResult } from './types-CD0rUKKT.js';
 
-interface FileEntry {
-    name: string;
-    path: string;
-    isDirectory: boolean;
-    isFile: boolean;
-    size?: number;
-}
-interface FileStat {
-    size: number;
-    isDirectory: boolean;
-    isFile: boolean;
-    createdAt?: Date;
-    modifiedAt?: Date;
-}
-interface ReadOptions {
-    encoding?: BufferEncoding;
-    /**
-     * Maximum number of bytes to read. When set, only the first `maxBytes`
-     * bytes are returned (decoded as a string). Implementations that do not
-     * support this option may ignore it and return the full content.
-     */
-    maxBytes?: number;
-}
-/**
- * Sandboxed filesystem interface.
- *
- * `VirtualFs` is noumen's primary isolation boundary for file I/O. Every
- * built-in tool that touches the filesystem (ReadFile, WriteFile, EditFile)
- * delegates to this interface — the agent never accesses `node:fs` directly.
- *
- * Swap implementations to control where files live and what the agent can reach:
- * - `LocalFs`   — reads/writes on the host filesystem (no isolation, for local dev)
- * - `SpritesFs` — reads/writes inside a remote sprites.dev container (full sandbox)
- * - Custom      — implement this interface for Docker volumes, E2B, S3, in-memory, etc.
- */
-interface VirtualFs {
-    readFile(path: string, opts?: ReadOptions): Promise<string>;
-    /**
-     * Read raw bytes from a file. Used for binary content (images, PDFs).
-     * Implementations SHOULD cap the read at `maxBytes` to prevent OOM on
-     * very large files. When `maxBytes` is omitted, the entire file is read.
-     *
-     * Returns a Buffer (Node.js) or Uint8Array.
-     */
-    readFileBytes?(path: string, maxBytes?: number): Promise<Buffer>;
-    writeFile(path: string, content: string): Promise<void>;
-    appendFile(path: string, content: string): Promise<void>;
-    deleteFile(path: string, opts?: {
-        recursive?: boolean;
-    }): Promise<void>;
-    mkdir(path: string, opts?: {
-        recursive?: boolean;
-    }): Promise<void>;
-    readdir(path: string, opts?: {
-        recursive?: boolean;
-    }): Promise<FileEntry[]>;
-    exists(path: string): Promise<boolean>;
-    stat(path: string): Promise<FileStat>;
-}
-
-interface ExecOptions {
-    timeout?: number;
-    cwd?: string;
-    env?: Record<string, string>;
-    signal?: AbortSignal;
-}
-interface CommandResult {
-    exitCode: number;
-    stdout: string;
-    stderr: string;
-}
-/**
- * Sandboxed shell execution interface.
- *
- * `VirtualComputer` is noumen's primary isolation boundary for command
- * execution. Every built-in tool that runs shell commands (Bash, Glob, Grep)
- * delegates to this interface — the agent never spawns processes directly.
- *
- * Swap implementations to control where and how commands run:
- * - `LocalComputer`   — runs on the host machine (no isolation, for local dev)
- * - `SpritesComputer`  — runs in a remote sprites.dev container (full sandbox)
- * - Custom             — implement this interface for Docker, E2B, Daytona, etc.
- */
-interface VirtualComputer {
-    executeCommand(command: string, opts?: ExecOptions): Promise<CommandResult>;
-}
-
 /**
  * Zod integration utilities. Users bring their own `zod` dependency — these
  * helpers accept duck-typed schemas so we don't force a hard dependency.
@@ -642,4 +556,4 @@ interface Tool {
     call(args: Record<string, unknown>, ctx: ToolContext): Promise<ToolResult>;
 }
 
-export { type ZodLikeSchema as $, type PermissionDeniedHookInput as A, type PermissionRequestHookInput as B, type CommandResult as C, DiagnosticRegistry as D, type ExecOptions as E, type FileEntry as F, type RetryAttemptHookInput as G, type HookDefinition as H, type SafeParseResult as I, type JsonSchemaType as J, type SessionEndHookInput as K, type LspServerConfig as L, type MemoryUpdateHookInput as M, type NotificationHookInput as N, type SessionStartHookInput as O, type PostToolUseFailureHookInput as P, type SubagentStartHookInput as Q, type ReadOptions as R, type SubagentConfig as S, type Tool as T, type SubagentStopHookInput as U, type VirtualFs as V, type Task as W, type TaskCreateInput as X, type TaskStatus as Y, type TaskUpdateInput as Z, type ToolParameters as _, type LspServerState as a, formatZodValidationError as a0, registerZodToJsonSchema as a1, zodToJsonSchema as a2, type LspDiagnostic as b, type LspLocation as c, type LspOperation as d, LspServerManager as e, type LspSymbol as f, type ToolResult as g, type ToolContext as h, type FileStat as i, type VirtualComputer as j, type SubagentRun as k, TaskStore as l, FileCheckpointManager as m, type FileStateCacheConfig as n, type HookEvent as o, type HookInput as p, type PostToolUseFailureHookOutput as q, type PostToolUseHookInput as r, type PostToolUseHookOutput as s, type PreToolUseHookInput as t, type PreToolUseHookOutput as u, type FileState as v, FileStateCache as w, type FileWriteHookInput as x, type HookOutput as y, type ModelSwitchHookInput as z };
+export { type SessionEndHookInput as A, type SessionStartHookInput as B, type SubagentStartHookInput as C, DiagnosticRegistry as D, type SubagentStopHookInput as E, FileCheckpointManager as F, type Task as G, type HookDefinition as H, type TaskCreateInput as I, type JsonSchemaType as J, type TaskStatus as K, type LspServerConfig as L, type MemoryUpdateHookInput as M, type NotificationHookInput as N, type TaskUpdateInput as O, type PostToolUseFailureHookInput as P, type ToolParameters as Q, type RetryAttemptHookInput as R, type SubagentConfig as S, type Tool as T, formatZodValidationError as U, registerZodToJsonSchema as V, zodToJsonSchema as W, type ZodLikeSchema as Z, type LspServerState as a, type LspDiagnostic as b, type LspLocation as c, type LspOperation as d, LspServerManager as e, type LspSymbol as f, type ToolResult as g, type ToolContext as h, type SubagentRun as i, TaskStore as j, type FileStateCacheConfig as k, type HookEvent as l, type HookInput as m, type PostToolUseFailureHookOutput as n, type PostToolUseHookInput as o, type PostToolUseHookOutput as p, type PreToolUseHookInput as q, type PreToolUseHookOutput as r, type FileState as s, FileStateCache as t, type FileWriteHookInput as u, type HookOutput as v, type ModelSwitchHookInput as w, type PermissionDeniedHookInput as x, type PermissionRequestHookInput as y, type SafeParseResult as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "noumen",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "type": "module",
   "description": "Programmatic AI agent runtime with pluggable providers and sandboxed virtual infrastructure",
   "main": "./dist/index.js",
@@ -69,6 +69,26 @@
     "./jsonrpc": {
       "import": "./dist/jsonrpc/index.js",
       "types": "./dist/jsonrpc/index.d.ts"
+    },
+    "./docker": {
+      "import": "./dist/docker.js",
+      "types": "./dist/docker.d.ts"
+    },
+    "./e2b": {
+      "import": "./dist/e2b.js",
+      "types": "./dist/e2b.d.ts"
+    },
+    "./freestyle": {
+      "import": "./dist/freestyle.js",
+      "types": "./dist/freestyle.d.ts"
+    },
+    "./ssh": {
+      "import": "./dist/ssh.js",
+      "types": "./dist/ssh.d.ts"
+    },
+    "./sprites": {
+      "import": "./dist/sprites.js",
+      "types": "./dist/sprites.d.ts"
     }
   },
   "files": [
@@ -97,6 +117,7 @@
     "google-auth-library": ">=9.0.0",
     "openai": "^4.85.0",
     "sharp": ">=0.33.0",
+    "ssh2": ">=1.0.0",
     "vscode-jsonrpc": "^8.2.1",
     "ws": ">=8.0.0"
   },
@@ -142,6 +163,9 @@
     },
     "sharp": {
       "optional": true
+    },
+    "ssh2": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -170,6 +194,9 @@
     "test": "vitest run",
     "dev": "concurrently -n lib,web -c blue,magenta \"tsup --watch\" \"pnpm --filter noumen-docs dev\"",
     "cli": "tsx src/cli/index.ts",
+    "version:major": "npm version major --no-git-tag-version",
+    "version:minor": "npm version minor --no-git-tag-version",
+    "version:patch": "npm version patch --no-git-tag-version",
     "publish:lib": "pnpm publish --access public --no-git-checks"
   }
 }