noumen 0.4.0 → 0.6.0

package/dist/ssh.js

@@ -0,0 +1,392 @@
+import {
+  createComputerProxy,
+  createFsProxy
+} from "./chunk-I5SBSOS6.js";
+import "./chunk-DGUM43GV.js";
+
+// src/virtual/ssh-fs.ts
+import * as pathMod from "path";
+var SshFs = class {
+  client;
+  workingDir;
+  sftpSession = null;
+  sftpPromise = null;
+  constructor(opts) {
+    this.client = opts.client;
+    this.workingDir = opts.workingDir ?? "/";
+  }
+  getSftp() {
+    if (this.sftpSession) return Promise.resolve(this.sftpSession);
+    if (this.sftpPromise) return this.sftpPromise;
+    this.sftpPromise = new Promise((resolve2, reject) => {
+      this.client.sftp((err, sftp) => {
+        if (err) {
+          this.sftpPromise = null;
+          reject(err);
+        } else {
+          this.sftpSession = sftp;
+          resolve2(sftp);
+        }
+      });
+    });
+    return this.sftpPromise;
+  }
+  resolvePath(p) {
+    if (p.includes("\0")) {
+      throw new Error("Path contains null bytes");
+    }
+    const normalizedBase = this.workingDir.endsWith("/") ? this.workingDir : this.workingDir + "/";
+    if (p.startsWith("/")) {
+      const normalized = pathMod.normalize(p);
+      if (normalized !== this.workingDir && !normalized.startsWith(normalizedBase)) {
+        throw new Error(
+          `Absolute path "${p}" is outside working directory "${this.workingDir}"`
+        );
+      }
+      return normalized;
+    }
+    const resolved = pathMod.resolve(this.workingDir, p);
+    if (resolved !== this.workingDir && !resolved.startsWith(normalizedBase)) {
+      throw new Error(
+        `Path "${p}" escapes working directory "${this.workingDir}"`
+      );
+    }
+    return resolved;
+  }
+  async readFile(path, _opts) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.readFile(resolved, { encoding: "utf8" }, (err, data) => {
+        if (err) reject(new Error(`SshFs readFile failed: ${err.message}`));
+        else resolve2(data);
+      });
+    });
+  }
+  async readFileBytes(path, maxBytes) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    if (maxBytes === void 0) {
+      return new Promise((resolve2, reject) => {
+        sftp.readFile(resolved, (err, data) => {
+          if (err) reject(new Error(`SshFs readFileBytes failed: ${err.message}`));
+          else resolve2(data);
+        });
+      });
+    }
+    return new Promise((resolve2, reject) => {
+      sftp.open(resolved, "r", (err, handle) => {
+        if (err) {
+          reject(new Error(`SshFs readFileBytes failed: ${err.message}`));
+          return;
+        }
+        const buf = Buffer.alloc(maxBytes);
+        sftp.read(handle, buf, 0, maxBytes, 0, (readErr, bytesRead, readBuf) => {
+          sftp.close(handle, () => {
+          });
+          if (readErr) {
+            reject(new Error(`SshFs readFileBytes failed: ${readErr.message}`));
+          } else {
+            resolve2(readBuf.subarray(0, bytesRead));
+          }
+        });
+      });
+    });
+  }
+  async writeFile(path, content) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    const dir = pathMod.dirname(resolved);
+    await this.mkdirRecursive(sftp, dir);
+    return new Promise((resolve2, reject) => {
+      sftp.writeFile(resolved, content, (err) => {
+        if (err) reject(new Error(`SshFs writeFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async appendFile(path, content) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    const dir = pathMod.dirname(resolved);
+    await this.mkdirRecursive(sftp, dir);
+    return new Promise((resolve2, reject) => {
+      sftp.appendFile(resolved, content, (err) => {
+        if (err) reject(new Error(`SshFs appendFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async deleteFile(path, opts) {
+    const resolved = this.resolvePath(path);
+    if (opts?.recursive) {
+      const sftp2 = await this.getSftp();
+      await this.rmRecursive(sftp2, resolved);
+      return;
+    }
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.unlink(resolved, (err) => {
+        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async mkdir(path, opts) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    if (opts?.recursive) {
+      await this.mkdirRecursive(sftp, resolved);
+      return;
+    }
+    return new Promise((resolve2, reject) => {
+      sftp.mkdir(resolved, (err) => {
+        if (err) reject(new Error(`SshFs mkdir failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+  async readdir(path, _opts) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.readdir(resolved, (err, list) => {
+        if (err) {
+          reject(new Error(`SshFs readdir failed: ${err.message}`));
+          return;
+        }
+        const entries = list.map((item) => ({
+          name: item.filename,
+          path: pathMod.join(resolved, item.filename),
+          isDirectory: item.attrs.isDirectory(),
+          isFile: item.attrs.isFile()
+        }));
+        resolve2(entries);
+      });
+    });
+  }
+  async exists(path) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2) => {
+      sftp.stat(resolved, (err) => {
+        resolve2(!err);
+      });
+    });
+  }
+  async stat(path) {
+    const resolved = this.resolvePath(path);
+    const sftp = await this.getSftp();
+    return new Promise((resolve2, reject) => {
+      sftp.stat(resolved, (err, stats) => {
+        if (err) {
+          reject(new Error(`SshFs stat failed: ${err.message}`));
+          return;
+        }
+        resolve2({
+          size: stats.size,
+          isDirectory: stats.isDirectory(),
+          isFile: stats.isFile(),
+          modifiedAt: stats.mtime > 0 ? new Date(stats.mtime * 1e3) : void 0
+        });
+      });
+    });
+  }
+  async mkdirRecursive(sftp, dir) {
+    const parts = dir.split("/").filter(Boolean);
+    let current = "/";
+    for (const part of parts) {
+      current = pathMod.join(current, part);
+      await new Promise((resolve2) => {
+        sftp.mkdir(current, () => {
+          resolve2();
+        });
+      });
+    }
+  }
+  async rmRecursive(sftp, target) {
+    const isDir = await new Promise((resolve2) => {
+      sftp.stat(target, (err, stats) => {
+        if (err) resolve2(false);
+        else resolve2(stats.isDirectory());
+      });
+    });
+    if (!isDir) {
+      return new Promise((resolve2, reject) => {
+        sftp.unlink(target, (err) => {
+          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+          else resolve2();
+        });
+      });
+    }
+    const entries = await new Promise(
+      (resolve2, reject) => {
+        sftp.readdir(target, (err, list) => {
+          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+          else resolve2(list);
+        });
+      }
+    );
+    for (const entry of entries) {
+      await this.rmRecursive(sftp, pathMod.join(target, entry.filename));
+    }
+    return new Promise((resolve2, reject) => {
+      sftp.rmdir(target, (err) => {
+        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));
+        else resolve2();
+      });
+    });
+  }
+};
+
+// src/virtual/ssh-computer.ts
+var SshComputer = class {
+  client;
+  defaultCwd;
+  defaultTimeout;
+  constructor(opts) {
+    this.client = opts.client;
+    this.defaultCwd = opts.defaultCwd ?? "/";
+    this.defaultTimeout = opts.defaultTimeout ?? 3e4;
+  }
+  async executeCommand(command, opts) {
+    const cwd = opts?.cwd ?? this.defaultCwd;
+    const timeout = opts?.timeout ?? this.defaultTimeout;
+    let envPrefix = "";
+    if (opts?.env) {
+      envPrefix = Object.entries(opts.env).map(([k, v]) => `${k}=${shellEscape(v)}`).join(" ") + " ";
+    }
+    const fullCommand = `cd ${shellEscape(cwd)} && ${envPrefix}${command}`;
+    return new Promise((resolve2, reject) => {
+      this.client.exec(fullCommand, (err, channel) => {
+        if (err) {
+          reject(err);
+          return;
+        }
+        const stdoutBufs = [];
+        const stderrBufs = [];
+        const timer = setTimeout(() => {
+          channel.destroy?.();
+          resolve2({
+            exitCode: 1,
+            stdout: Buffer.concat(stdoutBufs).toString("utf-8"),
+            stderr: Buffer.concat(stderrBufs).toString("utf-8") + "\n[timeout after " + timeout + "ms]"
+          });
+        }, timeout);
+        channel.on("data", (chunk) => {
+          stdoutBufs.push(Buffer.from(chunk));
+        });
+        channel.stderr.on("data", (chunk) => {
+          stderrBufs.push(Buffer.from(chunk));
+        });
+        channel.on("close", (code) => {
+          clearTimeout(timer);
+          resolve2({
+            exitCode: code ?? 0,
+            stdout: Buffer.concat(stdoutBufs).toString("utf-8"),
+            stderr: Buffer.concat(stderrBufs).toString("utf-8")
+          });
+        });
+        channel.on("error", (channelErr) => {
+          clearTimeout(timer);
+          reject(channelErr);
+        });
+      });
+    });
+  }
+};
+function shellEscape(s) {
+  return `'${s.replace(/'/g, "'\\''")}'`;
+}
+
+// src/virtual/ssh-sandbox.ts
+function SshSandbox(opts) {
+  if (opts.client) {
+    const c = opts.client;
+    return {
+      fs: new SshFs({ client: c, workingDir: opts.cwd }),
+      computer: new SshComputer({
+        client: c,
+        defaultCwd: opts.cwd,
+        defaultTimeout: opts.defaultTimeout
+      }),
+      sandboxId: () => opts.host ? `${opts.host}:${opts.port ?? 22}` : void 0
+    };
+  }
+  if (!opts.host) {
+    throw new Error("SshSandbox requires either `client` or `host`");
+  }
+  const fsProxy = createFsProxy();
+  const computerProxy = createComputerProxy();
+  const identifier = `${opts.host}:${opts.port ?? 22}`;
+  let clientRef = null;
+  let autoCreated = false;
+  let initPromise = null;
+  async function doInit() {
+    const modName = "ssh2";
+    const ssh2 = await import(
+      /* webpackIgnore: true */
+      modName
+    );
+    const ClientClass = ssh2.Client ?? ssh2.default?.Client;
+    if (!ClientClass) {
+      throw new Error(
+        "Could not resolve Client class from 'ssh2' package"
+      );
+    }
+    const client = new ClientClass();
+    await new Promise((resolve2, reject) => {
+      client.on("ready", () => resolve2());
+      client.on("error", (err) => reject(err));
+      client.connect({
+        host: opts.host,
+        port: opts.port ?? 22,
+        username: opts.username ?? "root",
+        password: opts.password,
+        privateKey: opts.privateKey,
+        passphrase: opts.passphrase
+      });
+    });
+    clientRef = client;
+    autoCreated = true;
+    fsProxy.setTarget(new SshFs({ client, workingDir: opts.cwd }));
+    computerProxy.setTarget(
+      new SshComputer({
+        client,
+        defaultCwd: opts.cwd,
+        defaultTimeout: opts.defaultTimeout
+      })
+    );
+  }
+  return {
+    fs: fsProxy,
+    computer: computerProxy,
+    sandboxId: () => identifier,
+    init() {
+      if (!initPromise) {
+        initPromise = doInit().catch((err) => {
+          initPromise = null;
+          throw err;
+        });
+      }
+      return initPromise;
+    },
+    async dispose() {
+      if (initPromise) {
+        await initPromise.catch(() => {
+        });
+      }
+      if (!autoCreated || !clientRef) return;
+      try {
+        clientRef.end();
+      } catch {
+      }
+    }
+  };
+}
+export {
+  SshComputer,
+  SshFs,
+  SshSandbox
+};
+//# sourceMappingURL=ssh.js.map

package/dist/ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/virtual/ssh-fs.ts","../src/virtual/ssh-computer.ts","../src/virtual/ssh-sandbox.ts"],"sourcesContent":["import * as pathMod from \"node:path\";\nimport type { VirtualFs, FileEntry, FileStat, ReadOptions } from \"./fs.js\";\nimport type { SshClient, SshSftpSession } from \"./ssh-computer.js\";\n\nexport interface SshFsOptions {\n  /** A connected ssh2 Client instance. */\n  client: SshClient;\n  /** Working directory for relative path resolution (default: /). */\n  workingDir?: string;\n}\n\n/**\n * VirtualFs backed by SFTP file operations over SSH.\n *\n * Uses the ssh2 Client's SFTP subsystem for all file I/O. The SFTP session\n * is opened lazily on the first operation and reused for the lifetime of\n * the SshFs instance.\n *\n * Requires `ssh2` as an optional peer dependency.\n * The caller is responsible for the Client lifecycle.\n */\nexport class SshFs implements VirtualFs {\n  private client: SshClient;\n  private workingDir: string;\n  private sftpSession: SshSftpSession | null = null;\n  private sftpPromise: Promise<SshSftpSession> | null = null;\n\n  constructor(opts: SshFsOptions) {\n    this.client = opts.client;\n    this.workingDir = opts.workingDir ?? \"/\";\n  }\n\n  private getSftp(): Promise<SshSftpSession> {\n    if (this.sftpSession) return Promise.resolve(this.sftpSession);\n    if (this.sftpPromise) return this.sftpPromise;\n    this.sftpPromise = new Promise<SshSftpSession>((resolve, reject) => {\n      this.client.sftp((err, sftp) => {\n        if (err) {\n          this.sftpPromise = null;\n          reject(err);\n        } else {\n          this.sftpSession = sftp;\n          resolve(sftp);\n        }\n      });\n    });\n    return this.sftpPromise;\n  }\n\n  private resolvePath(p: string): string {\n    if (p.includes(\"\\0\")) {\n      throw new Error(\"Path contains null bytes\");\n    }\n    const normalizedBase = this.workingDir.endsWith(\"/\")\n      ? this.workingDir\n      : this.workingDir + \"/\";\n    if (p.startsWith(\"/\")) {\n      const normalized = pathMod.normalize(p);\n      if (\n        normalized !== this.workingDir &&\n        !normalized.startsWith(normalizedBase)\n      ) {\n        throw new Error(\n          `Absolute path \"${p}\" is outside working directory \"${this.workingDir}\"`,\n        );\n      }\n      return normalized;\n    }\n    const resolved = pathMod.resolve(this.workingDir, p);\n    if (\n      resolved !== this.workingDir &&\n      !resolved.startsWith(normalizedBase)\n    ) {\n      throw new Error(\n        `Path \"${p}\" escapes working directory \"${this.workingDir}\"`,\n      );\n    }\n    return resolved;\n  }\n\n  async readFile(path: string, _opts?: ReadOptions): Promise<string> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<string>((resolve, reject) => {\n      sftp.readFile(resolved, { encoding: \"utf8\" }, (err, data) => {\n        if (err) reject(new Error(`SshFs readFile failed: ${err.message}`));\n        else resolve(data as string);\n      });\n    });\n  }\n\n  async readFileBytes(path: string, maxBytes?: number): Promise<Buffer> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n\n    if (maxBytes === undefined) {\n      return new Promise<Buffer>((resolve, reject) => {\n        sftp.readFile(resolved, (err, data) => {\n          if (err) reject(new Error(`SshFs readFileBytes failed: ${err.message}`));\n          else resolve(data);\n        });\n      });\n    }\n\n    return new Promise<Buffer>((resolve, reject) => {\n      sftp.open(resolved, \"r\", (err, handle) => {\n        if (err) {\n          reject(new Error(`SshFs readFileBytes failed: ${err.message}`));\n          return;\n        }\n        const buf = Buffer.alloc(maxBytes);\n        sftp.read(handle, buf, 0, maxBytes, 0, (readErr, bytesRead, readBuf) => {\n          sftp.close(handle, () => {});\n          if (readErr) {\n            reject(new Error(`SshFs readFileBytes failed: ${readErr.message}`));\n          } else {\n            resolve(readBuf.subarray(0, bytesRead));\n          }\n        });\n      });\n    });\n  }\n\n  async writeFile(path: string, content: string): Promise<void> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    const dir = pathMod.dirname(resolved);\n    await this.mkdirRecursive(sftp, dir);\n    return new Promise<void>((resolve, reject) => {\n      sftp.writeFile(resolved, content, (err) => {\n        if (err) reject(new Error(`SshFs writeFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async appendFile(path: string, content: string): Promise<void> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    const dir = pathMod.dirname(resolved);\n    await this.mkdirRecursive(sftp, dir);\n    return new Promise<void>((resolve, reject) => {\n      sftp.appendFile(resolved, content, (err) => {\n        if (err) reject(new Error(`SshFs appendFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async deleteFile(\n    path: string,\n    opts?: { recursive?: boolean },\n  ): Promise<void> {\n    const resolved = this.resolvePath(path);\n    if (opts?.recursive) {\n      const sftp = await this.getSftp();\n      await this.rmRecursive(sftp, resolved);\n      return;\n    }\n    const sftp = await this.getSftp();\n    return new Promise<void>((resolve, reject) => {\n      sftp.unlink(resolved, (err) => {\n        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async mkdir(path: string, opts?: { recursive?: boolean }): Promise<void> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    if (opts?.recursive) {\n      await this.mkdirRecursive(sftp, resolved);\n      return;\n    }\n    return new Promise<void>((resolve, reject) => {\n      sftp.mkdir(resolved, (err) => {\n        if (err) reject(new Error(`SshFs mkdir failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n\n  async readdir(\n    path: string,\n    _opts?: { recursive?: boolean },\n  ): Promise<FileEntry[]> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<FileEntry[]>((resolve, reject) => {\n      sftp.readdir(resolved, (err, list) => {\n        if (err) {\n          reject(new Error(`SshFs readdir failed: ${err.message}`));\n          return;\n        }\n        const entries: FileEntry[] = list.map((item) => ({\n          name: item.filename,\n          path: pathMod.join(resolved, item.filename),\n          isDirectory: item.attrs.isDirectory(),\n          isFile: item.attrs.isFile(),\n        }));\n        resolve(entries);\n      });\n    });\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<boolean>((resolve) => {\n      sftp.stat(resolved, (err) => {\n        resolve(!err);\n      });\n    });\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const resolved = this.resolvePath(path);\n    const sftp = await this.getSftp();\n    return new Promise<FileStat>((resolve, reject) => {\n      sftp.stat(resolved, (err, stats) => {\n        if (err) {\n          reject(new Error(`SshFs stat failed: ${err.message}`));\n          return;\n        }\n        resolve({\n          size: stats.size,\n          isDirectory: stats.isDirectory(),\n          isFile: stats.isFile(),\n          modifiedAt: stats.mtime > 0 ? new Date(stats.mtime * 1000) : undefined,\n        });\n      });\n    });\n  }\n\n  private async mkdirRecursive(\n    sftp: SshSftpSession,\n    dir: string,\n  ): Promise<void> {\n    const parts = dir.split(\"/\").filter(Boolean);\n    let current = \"/\";\n    for (const part of parts) {\n      current = pathMod.join(current, part);\n      await new Promise<void>((resolve) => {\n        sftp.mkdir(current, () => {\n          resolve();\n        });\n      });\n    }\n  }\n\n  private async rmRecursive(\n    sftp: SshSftpSession,\n    target: string,\n  ): Promise<void> {\n    const isDir = await new Promise<boolean>((resolve) => {\n      sftp.stat(target, (err, stats) => {\n        if (err) resolve(false);\n        else resolve(stats.isDirectory());\n      });\n    });\n\n    if (!isDir) {\n      return new Promise<void>((resolve, reject) => {\n        sftp.unlink(target, (err) => {\n          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n          else resolve();\n        });\n      });\n    }\n\n    const entries = await new Promise<Array<{ filename: string; attrs: { isDirectory(): boolean } }>>(\n      (resolve, reject) => {\n        sftp.readdir(target, (err, list) => {\n          if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n          else resolve(list);\n        });\n      },\n    );\n\n    for (const entry of entries) {\n      await this.rmRecursive(sftp, pathMod.join(target, entry.filename));\n    }\n\n    return new Promise<void>((resolve, reject) => {\n      sftp.rmdir(target, (err) => {\n        if (err) reject(new Error(`SshFs deleteFile failed: ${err.message}`));\n        else resolve();\n      });\n    });\n  }\n}\n","import type { VirtualComputer, ExecOptions, CommandResult } from \"./computer.js\";\n\n/**\n * Minimal subset of the ssh2 Channel interface used by SshComputer / SshFs.\n * Avoids a hard import of ssh2 at the module level.\n */\nexport interface SshChannel {\n  on(event: string, listener: (...args: any[]) => void): SshChannel;\n  stderr: { on(event: string, listener: (...args: any[]) => void): unknown };\n  destroy?(): void;\n}\n\n/**\n * Minimal subset of the ssh2 SFTPWrapper interface used by SshFs.\n */\nexport interface SshSftpSession {\n  readFile(\n    path: string,\n    callback: (err: Error | undefined, data: Buffer) => void,\n  ): void;\n  readFile(\n    path: string,\n    opts: { encoding: string },\n    callback: (err: Error | undefined, data: string) => void,\n  ): void;\n  writeFile(\n    path: string,\n    data: string | Buffer,\n    callback: (err: Error | undefined) => void,\n  ): void;\n  appendFile(\n    path: string,\n    data: string | Buffer,\n    callback: (err: Error | undefined) => void,\n  ): void;\n  unlink(path: string, callback: (err: Error | undefined) => void): void;\n  rmdir(path: string, callback: (err: Error | undefined) => void): void;\n  mkdir(path: string, callback: (err: Error | undefined) => void): void;\n  readdir(\n    path: string,\n    callback: (\n      err: Error | undefined,\n      list: Array<{\n        filename: string;\n        longname: string;\n        attrs: { size: number; isDirectory(): boolean; isFile(): boolean; mtime: number; atime: number };\n      }>,\n    ) => void,\n  ): void;\n  stat(\n    path: string,\n    callback: (\n      err: Error | undefined,\n      stats: { size: number; isDirectory(): boolean; isFile(): boolean; mtime: number; atime: number },\n    ) => void,\n  ): void;\n  open(\n    path: string,\n    flags: string,\n    callback: (err: Error | undefined, handle: Buffer) => void,\n  ): void;\n  read(\n    handle: Buffer,\n    buffer: Buffer,\n    offset: number,\n    length: number,\n    position: number,\n    callback: (err: Error | undefined, bytesRead: number, buf: Buffer) => void,\n  ): void;\n  close(handle: Buffer, callback: (err: Error | undefined) => void): void;\n  end(): void;\n}\n\n/**\n * Minimal subset of the ssh2 Client interface used by SshComputer and SshFs.\n * Avoids a hard import of ssh2 at the module level.\n */\nexport interface SshClient {\n  exec(\n    command: string,\n    callback: (err: Error | undefined, channel: SshChannel) => void,\n  ): void;\n  exec(\n    command: string,\n    opts: Record<string, unknown>,\n    callback: (err: Error | undefined, channel: SshChannel) => void,\n  ): void;\n  sftp(\n    callback: (err: Error | undefined, sftp: SshSftpSession) => void,\n  ): void;\n  end(): void;\n  on(event: string, listener: (...args: any[]) => void): this;\n}\n\nexport interface SshComputerOptions {\n  /** A connected ssh2 Client instance. */\n  client: SshClient;\n  /** Default working directory for commands (default: /). */\n  defaultCwd?: string;\n  /** Default timeout in ms for commands (default: 30000). */\n  defaultTimeout?: number;\n}\n\n/**\n * VirtualComputer backed by command execution over SSH.\n *\n * Requires `ssh2` as an optional peer dependency.\n * The caller is responsible for the Client lifecycle (connect, end).\n */\nexport class SshComputer implements VirtualComputer {\n  private client: SshClient;\n  private defaultCwd: string;\n  private defaultTimeout: number;\n\n  constructor(opts: SshComputerOptions) {\n    this.client = opts.client;\n    this.defaultCwd = opts.defaultCwd ?? \"/\";\n    this.defaultTimeout = opts.defaultTimeout ?? 30_000;\n  }\n\n  async executeCommand(\n    command: string,\n    opts?: ExecOptions,\n  ): Promise<CommandResult> {\n    const cwd = opts?.cwd ?? this.defaultCwd;\n    const timeout = opts?.timeout ?? this.defaultTimeout;\n\n    let envPrefix = \"\";\n    if (opts?.env) {\n      envPrefix = Object.entries(opts.env)\n        .map(([k, v]) => `${k}=${shellEscape(v)}`)\n        .join(\" \") + \" \";\n    }\n\n    const fullCommand = `cd ${shellEscape(cwd)} && ${envPrefix}${command}`;\n\n    return new Promise<CommandResult>((resolve, reject) => {\n      this.client.exec(fullCommand, (err, channel) => {\n        if (err) {\n          reject(err);\n          return;\n        }\n\n        const stdoutBufs: Buffer[] = [];\n        const stderrBufs: Buffer[] = [];\n\n        const timer = setTimeout(() => {\n          channel.destroy?.();\n          resolve({\n            exitCode: 1,\n            stdout: Buffer.concat(stdoutBufs).toString(\"utf-8\"),\n            stderr:\n              Buffer.concat(stderrBufs).toString(\"utf-8\") +\n              \"\\n[timeout after \" + timeout + \"ms]\",\n          });\n        }, timeout);\n\n        channel.on(\"data\", (chunk: Buffer) => {\n          stdoutBufs.push(Buffer.from(chunk));\n        });\n\n        channel.stderr.on(\"data\", (chunk: Buffer) => {\n          stderrBufs.push(Buffer.from(chunk));\n        });\n\n        channel.on(\"close\", (code: number) => {\n          clearTimeout(timer);\n          resolve({\n            exitCode: code ?? 0,\n            stdout: Buffer.concat(stdoutBufs).toString(\"utf-8\"),\n            stderr: Buffer.concat(stderrBufs).toString(\"utf-8\"),\n          });\n        });\n\n        channel.on(\"error\", (channelErr: Error) => {\n          clearTimeout(timer);\n          reject(channelErr);\n        });\n      });\n    });\n  }\n}\n\nfunction shellEscape(s: string): string {\n  return `'${s.replace(/'/g, \"'\\\\''\")}'`;\n}\n","import type { Sandbox } from \"./sandbox.js\";\nimport { SshFs } from \"./ssh-fs.js\";\nimport { SshComputer, type SshClient } from \"./ssh-computer.js\";\nimport { createFsProxy, createComputerProxy } from \"./proxy.js\";\n\nexport interface SshSandboxOptions {\n  /**\n   * A pre-connected ssh2 Client instance. When provided the sandbox uses\n   * this client directly — no auto-connect occurs and `dispose()` will\n   * **not** call `client.end()`.\n   *\n   * When omitted, a new ssh2 Client is created and connected on the first\n   * `init()` call using `host`, `port`, `username`, and the provided\n   * credentials. The client is ended when `dispose()` is called.\n   */\n  client?: SshClient;\n  /**\n   * SSH hostname. Required when `client` is omitted; ignored when `client`\n   * is provided.\n   */\n  host?: string;\n  /** SSH port (default: 22). Only used during auto-connect. */\n  port?: number;\n  /** SSH username (default: \"root\"). Only used during auto-connect. */\n  username?: string;\n  /** Password for password-based authentication. Only used during auto-connect. */\n  password?: string;\n  /** Private key for key-based authentication (PEM string or Buffer). Only used during auto-connect. */\n  privateKey?: string | Buffer;\n  /** Passphrase for an encrypted private key. Only used during auto-connect. */\n  passphrase?: string;\n  /** Working directory on the remote host. */\n  cwd?: string;\n  /** Default timeout (ms) for shell commands. */\n  defaultTimeout?: number;\n}\n\n/**\n * Create a `Sandbox` backed by a remote host over SSH.\n * Requires `ssh2` as an optional peer dependency.\n *\n * **Auto-connect:** When `client` is omitted and `host` is provided,\n * an ssh2 Client is created and connected lazily on the first `init()`\n * call. The connection identifier (`host:port`) is available through\n * `sandboxId()` for session persistence.\n *\n * **Explicit client:** When `client` is provided, `init()` binds it\n * immediately. `dispose()` is a no-op — the caller owns the client's\n * lifecycle.\n *\n * @example\n * ```ts\n * // Auto-connect with private key\n * const sandbox = SshSandbox({\n *   host: \"dev.example.com\",\n *   username: \"deploy\",\n *   privateKey: fs.readFileSync(\"~/.ssh/id_ed25519\"),\n *   cwd: \"/home/deploy/project\",\n * });\n *\n * // Explicit client (lifecycle managed externally)\n * const sandbox = SshSandbox({ client: myConnectedClient, cwd: \"/workspace\" });\n * ```\n */\nexport function SshSandbox(opts: SshSandboxOptions): Sandbox {\n  if (opts.client) {\n    const c = opts.client;\n    return {\n      fs: new SshFs({ client: c, workingDir: opts.cwd }),\n      computer: new SshComputer({\n        client: c,\n        defaultCwd: opts.cwd,\n        defaultTimeout: opts.defaultTimeout,\n      }),\n      sandboxId: () =>\n        opts.host ? `${opts.host}:${opts.port ?? 22}` : undefined,\n    };\n  }\n\n  if (!opts.host) {\n    throw new Error(\"SshSandbox requires either `client` or `host`\");\n  }\n\n  const fsProxy = createFsProxy();\n  const computerProxy = createComputerProxy();\n  const identifier = `${opts.host}:${opts.port ?? 22}`;\n  let clientRef: SshClient | null = null;\n  let autoCreated = false;\n  let initPromise: Promise<void> | null = null;\n\n  async function doInit(): Promise<void> {\n    const modName = \"ssh2\";\n    const ssh2 = await import(/* webpackIgnore: true */ modName);\n    const ClientClass =\n      (ssh2 as any).Client ?? (ssh2 as any).default?.Client;\n    if (!ClientClass) {\n      throw new Error(\n        \"Could not resolve Client class from 'ssh2' package\",\n      );\n    }\n\n    const client: SshClient = new ClientClass();\n    await new Promise<void>((resolve, reject) => {\n      client.on(\"ready\", () => resolve());\n      client.on(\"error\", (err: Error) => reject(err));\n      (client as any).connect({\n        host: opts.host,\n        port: opts.port ?? 22,\n        username: opts.username ?? \"root\",\n        password: opts.password,\n        privateKey: opts.privateKey,\n        passphrase: opts.passphrase,\n      });\n    });\n\n    clientRef = client;\n    autoCreated = true;\n    fsProxy.setTarget(new SshFs({ client, workingDir: opts.cwd }));\n    computerProxy.setTarget(\n      new SshComputer({\n        client,\n        defaultCwd: opts.cwd,\n        defaultTimeout: opts.defaultTimeout,\n      }),\n    );\n  }\n\n  return {\n    fs: fsProxy,\n    computer: computerProxy,\n    sandboxId: () => identifier,\n\n    init(): Promise<void> {\n      if (!initPromise) {\n        initPromise = doInit().catch((err) => {\n          initPromise = null;\n          throw err;\n        });\n      }\n      return initPromise;\n    },\n\n    async dispose(): Promise<void> {\n      if (initPromise) {\n        await initPromise.catch(() => {});\n      }\n      if (!autoCreated || !clientRef) return;\n      try {\n        clientRef.end();\n      } catch {\n        /* best-effort */\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;AAAA,YAAY,aAAa;AAqBlB,IAAM,QAAN,MAAiC;AAAA,EAC9B;AAAA,EACA;AAAA,EACA,cAAqC;AAAA,EACrC,cAA8C;AAAA,EAEtD,YAAY,MAAoB;AAC9B,SAAK,SAAS,KAAK;AACnB,SAAK,aAAa,KAAK,cAAc;AAAA,EACvC;AAAA,EAEQ,UAAmC;AACzC,QAAI,KAAK,YAAa,QAAO,QAAQ,QAAQ,KAAK,WAAW;AAC7D,QAAI,KAAK,YAAa,QAAO,KAAK;AAClC,SAAK,cAAc,IAAI,QAAwB,CAACA,UAAS,WAAW;AAClE,WAAK,OAAO,KAAK,CAAC,KAAK,SAAS;AAC9B,YAAI,KAAK;AACP,eAAK,cAAc;AACnB,iBAAO,GAAG;AAAA,QACZ,OAAO;AACL,eAAK,cAAc;AACnB,UAAAA,SAAQ,IAAI;AAAA,QACd;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,YAAY,GAAmB;AACrC,QAAI,EAAE,SAAS,IAAI,GAAG;AACpB,YAAM,IAAI,MAAM,0BAA0B;AAAA,IAC5C;AACA,UAAM,iBAAiB,KAAK,WAAW,SAAS,GAAG,IAC/C,KAAK,aACL,KAAK,aAAa;AACtB,QAAI,EAAE,WAAW,GAAG,GAAG;AACrB,YAAM,aAAqB,kBAAU,CAAC;AACtC,UACE,eAAe,KAAK,cACpB,CAAC,WAAW,WAAW,cAAc,GACrC;AACA,cAAM,IAAI;AAAA,UACR,kBAAkB,CAAC,mCAAmC,KAAK,UAAU;AAAA,QACvE;AAAA,MACF;AACA,aAAO;AAAA,IACT;AACA,UAAM,WAAmB,gBAAQ,KAAK,YAAY,CAAC;AACnD,QACE,aAAa,KAAK,cAClB,CAAC,SAAS,WAAW,cAAc,GACnC;AACA,YAAM,IAAI;AAAA,QACR,SAAS,CAAC,gCAAgC,KAAK,UAAU;AAAA,MAC3D;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAc,OAAsC;AACjE,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAgB,CAACA,UAAS,WAAW;AAC9C,WAAK,SAAS,UAAU,EAAE,UAAU,OAAO,GAAG,CAAC,KAAK,SAAS;AAC3D,YAAI,IAAK,QAAO,IAAI,MAAM,0BAA0B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC7D,CAAAA,SAAQ,IAAc;AAAA,MAC7B,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,MAAc,UAAoC;AACpE,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAEhC,QAAI,aAAa,QAAW;AAC1B,aAAO,IAAI,QAAgB,CAACA,UAAS,WAAW;AAC9C,aAAK,SAAS,UAAU,CAAC,KAAK,SAAS;AACrC,cAAI,IAAK,QAAO,IAAI,MAAM,+BAA+B,IAAI,OAAO,EAAE,CAAC;AAAA,cAClE,CAAAA,SAAQ,IAAI;AAAA,QACnB,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAEA,WAAO,IAAI,QAAgB,CAACA,UAAS,WAAW;AAC9C,WAAK,KAAK,UAAU,KAAK,CAAC,KAAK,WAAW;AACxC,YAAI,KAAK;AACP,iBAAO,IAAI,MAAM,+BAA+B,IAAI,OAAO,EAAE,CAAC;AAC9D;AAAA,QACF;AACA,cAAM,MAAM,OAAO,MAAM,QAAQ;AACjC,aAAK,KAAK,QAAQ,KAAK,GAAG,UAAU,GAAG,CAAC,SAAS,WAAW,YAAY;AACtE,eAAK,MAAM,QAAQ,MAAM;AAAA,UAAC,CAAC;AAC3B,cAAI,SAAS;AACX,mBAAO,IAAI,MAAM,+BAA+B,QAAQ,OAAO,EAAE,CAAC;AAAA,UACpE,OAAO;AACL,YAAAA,SAAQ,QAAQ,SAAS,GAAG,SAAS,CAAC;AAAA,UACxC;AAAA,QACF,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAU,MAAc,SAAgC;AAC5D,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,UAAM,MAAc,gBAAQ,QAAQ;AACpC,UAAM,KAAK,eAAe,MAAM,GAAG;AACnC,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,UAAU,UAAU,SAAS,CAAC,QAAQ;AACzC,YAAI,IAAK,QAAO,IAAI,MAAM,2BAA2B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC9D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,MAAc,SAAgC;AAC7D,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,UAAM,MAAc,gBAAQ,QAAQ;AACpC,UAAM,KAAK,eAAe,MAAM,GAAG;AACnC,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,WAAW,UAAU,SAAS,CAAC,QAAQ;AAC1C,YAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC/D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WACJ,MACA,MACe;AACf,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,QAAI,MAAM,WAAW;AACnB,YAAMC,QAAO,MAAM,KAAK,QAAQ;AAChC,YAAM,KAAK,YAAYA,OAAM,QAAQ;AACrC;AAAA,IACF;AACA,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAc,CAACD,UAAS,WAAW;AAC5C,WAAK,OAAO,UAAU,CAAC,QAAQ;AAC7B,YAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC/D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,MAAM,MAAc,MAA+C;AACvE,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,QAAI,MAAM,WAAW;AACnB,YAAM,KAAK,eAAe,MAAM,QAAQ;AACxC;AAAA,IACF;AACA,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,MAAM,UAAU,CAAC,QAAQ;AAC5B,YAAI,IAAK,QAAO,IAAI,MAAM,uBAAuB,IAAI,OAAO,EAAE,CAAC;AAAA,YAC1D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QACJ,MACA,OACsB;AACtB,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAqB,CAACA,UAAS,WAAW;AACnD,WAAK,QAAQ,UAAU,CAAC,KAAK,SAAS;AACpC,YAAI,KAAK;AACP,iBAAO,IAAI,MAAM,yBAAyB,IAAI,OAAO,EAAE,CAAC;AACxD;AAAA,QACF;AACA,cAAM,UAAuB,KAAK,IAAI,CAAC,UAAU;AAAA,UAC/C,MAAM,KAAK;AAAA,UACX,MAAc,aAAK,UAAU,KAAK,QAAQ;AAAA,UAC1C,aAAa,KAAK,MAAM,YAAY;AAAA,UACpC,QAAQ,KAAK,MAAM,OAAO;AAAA,QAC5B,EAAE;AACF,QAAAA,SAAQ,OAAO;AAAA,MACjB,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,MAAgC;AAC3C,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAiB,CAACA,aAAY;AACvC,WAAK,KAAK,UAAU,CAAC,QAAQ;AAC3B,QAAAA,SAAQ,CAAC,GAAG;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,KAAK,MAAiC;AAC1C,UAAM,WAAW,KAAK,YAAY,IAAI;AACtC,UAAM,OAAO,MAAM,KAAK,QAAQ;AAChC,WAAO,IAAI,QAAkB,CAACA,UAAS,WAAW;AAChD,WAAK,KAAK,UAAU,CAAC,KAAK,UAAU;AAClC,YAAI,KAAK;AACP,iBAAO,IAAI,MAAM,sBAAsB,IAAI,OAAO,EAAE,CAAC;AACrD;AAAA,QACF;AACA,QAAAA,SAAQ;AAAA,UACN,MAAM,MAAM;AAAA,UACZ,aAAa,MAAM,YAAY;AAAA,UAC/B,QAAQ,MAAM,OAAO;AAAA,UACrB,YAAY,MAAM,QAAQ,IAAI,IAAI,KAAK,MAAM,QAAQ,GAAI,IAAI;AAAA,QAC/D,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,eACZ,MACA,KACe;AACf,UAAM,QAAQ,IAAI,MAAM,GAAG,EAAE,OAAO,OAAO;AAC3C,QAAI,UAAU;AACd,eAAW,QAAQ,OAAO;AACxB,gBAAkB,aAAK,SAAS,IAAI;AACpC,YAAM,IAAI,QAAc,CAACA,aAAY;AACnC,aAAK,MAAM,SAAS,MAAM;AACxB,UAAAA,SAAQ;AAAA,QACV,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,YACZ,MACA,QACe;AACf,UAAM,QAAQ,MAAM,IAAI,QAAiB,CAACA,aAAY;AACpD,WAAK,KAAK,QAAQ,CAAC,KAAK,UAAU;AAChC,YAAI,IAAK,CAAAA,SAAQ,KAAK;AAAA,YACjB,CAAAA,SAAQ,MAAM,YAAY,CAAC;AAAA,MAClC,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,OAAO;AACV,aAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,aAAK,OAAO,QAAQ,CAAC,QAAQ;AAC3B,cAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,cAC/D,CAAAA,SAAQ;AAAA,QACf,CAAC;AAAA,MACH,CAAC;AAAA,IACH;AAEA,UAAM,UAAU,MAAM,IAAI;AAAA,MACxB,CAACA,UAAS,WAAW;AACnB,aAAK,QAAQ,QAAQ,CAAC,KAAK,SAAS;AAClC,cAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,cAC/D,CAAAA,SAAQ,IAAI;AAAA,QACnB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,eAAW,SAAS,SAAS;AAC3B,YAAM,KAAK,YAAY,MAAc,aAAK,QAAQ,MAAM,QAAQ,CAAC;AAAA,IACnE;AAEA,WAAO,IAAI,QAAc,CAACA,UAAS,WAAW;AAC5C,WAAK,MAAM,QAAQ,CAAC,QAAQ;AAC1B,YAAI,IAAK,QAAO,IAAI,MAAM,4BAA4B,IAAI,OAAO,EAAE,CAAC;AAAA,YAC/D,CAAAA,SAAQ;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;;;ACtLO,IAAM,cAAN,MAA6C;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,MAA0B;AACpC,SAAK,SAAS,KAAK;AACnB,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,iBAAiB,KAAK,kBAAkB;AAAA,EAC/C;AAAA,EAEA,MAAM,eACJ,SACA,MACwB;AACxB,UAAM,MAAM,MAAM,OAAO,KAAK;AAC9B,UAAM,UAAU,MAAM,WAAW,KAAK;AAEtC,QAAI,YAAY;AAChB,QAAI,MAAM,KAAK;AACb,kBAAY,OAAO,QAAQ,KAAK,GAAG,EAChC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,CAAC,EAAE,EACxC,KAAK,GAAG,IAAI;AAAA,IACjB;AAEA,UAAM,cAAc,MAAM,YAAY,GAAG,CAAC,OAAO,SAAS,GAAG,OAAO;AAEpE,WAAO,IAAI,QAAuB,CAACE,UAAS,WAAW;AACrD,WAAK,OAAO,KAAK,aAAa,CAAC,KAAK,YAAY;AAC9C,YAAI,KAAK;AACP,iBAAO,GAAG;AACV;AAAA,QACF;AAEA,cAAM,aAAuB,CAAC;AAC9B,cAAM,aAAuB,CAAC;AAE9B,cAAM,QAAQ,WAAW,MAAM;AAC7B,kBAAQ,UAAU;AAClB,UAAAA,SAAQ;AAAA,YACN,UAAU;AAAA,YACV,QAAQ,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO;AAAA,YAClD,QACE,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO,IAC1C,sBAAsB,UAAU;AAAA,UACpC,CAAC;AAAA,QACH,GAAG,OAAO;AAEV,gBAAQ,GAAG,QAAQ,CAAC,UAAkB;AACpC,qBAAW,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,QACpC,CAAC;AAED,gBAAQ,OAAO,GAAG,QAAQ,CAAC,UAAkB;AAC3C,qBAAW,KAAK,OAAO,KAAK,KAAK,CAAC;AAAA,QACpC,CAAC;AAED,gBAAQ,GAAG,SAAS,CAAC,SAAiB;AACpC,uBAAa,KAAK;AAClB,UAAAA,SAAQ;AAAA,YACN,UAAU,QAAQ;AAAA,YAClB,QAAQ,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO;AAAA,YAClD,QAAQ,OAAO,OAAO,UAAU,EAAE,SAAS,OAAO;AAAA,UACpD,CAAC;AAAA,QACH,CAAC;AAED,gBAAQ,GAAG,SAAS,CAAC,eAAsB;AACzC,uBAAa,KAAK;AAClB,iBAAO,UAAU;AAAA,QACnB,CAAC;AAAA,MACH,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AACF;AAEA,SAAS,YAAY,GAAmB;AACtC,SAAO,IAAI,EAAE,QAAQ,MAAM,OAAO,CAAC;AACrC;;;ACzHO,SAAS,WAAW,MAAkC;AAC3D,MAAI,KAAK,QAAQ;AACf,UAAM,IAAI,KAAK;AACf,WAAO;AAAA,MACL,IAAI,IAAI,MAAM,EAAE,QAAQ,GAAG,YAAY,KAAK,IAAI,CAAC;AAAA,MACjD,UAAU,IAAI,YAAY;AAAA,QACxB,QAAQ;AAAA,QACR,YAAY,KAAK;AAAA,QACjB,gBAAgB,KAAK;AAAA,MACvB,CAAC;AAAA,MACD,WAAW,MACT,KAAK,OAAO,GAAG,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,KAAK;AAAA,IACpD;AAAA,EACF;AAEA,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAEA,QAAM,UAAU,cAAc;AAC9B,QAAM,gBAAgB,oBAAoB;AAC1C,QAAM,aAAa,GAAG,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE;AAClD,MAAI,YAA8B;AAClC,MAAI,cAAc;AAClB,MAAI,cAAoC;AAExC,iBAAe,SAAwB;AACrC,UAAM,UAAU;AAChB,UAAM,OAAO,MAAM;AAAA;AAAA,MAAiC;AAAA;AACpD,UAAM,cACH,KAAa,UAAW,KAAa,SAAS;AACjD,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAoB,IAAI,YAAY;AAC1C,UAAM,IAAI,QAAc,CAACC,UAAS,WAAW;AAC3C,aAAO,GAAG,SAAS,MAAMA,SAAQ,CAAC;AAClC,aAAO,GAAG,SAAS,CAAC,QAAe,OAAO,GAAG,CAAC;AAC9C,MAAC,OAAe,QAAQ;AAAA,QACtB,MAAM,KAAK;AAAA,QACX,MAAM,KAAK,QAAQ;AAAA,QACnB,UAAU,KAAK,YAAY;AAAA,QAC3B,UAAU,KAAK;AAAA,QACf,YAAY,KAAK;AAAA,QACjB,YAAY,KAAK;AAAA,MACnB,CAAC;AAAA,IACH,CAAC;AAED,gBAAY;AACZ,kBAAc;AACd,YAAQ,UAAU,IAAI,MAAM,EAAE,QAAQ,YAAY,KAAK,IAAI,CAAC,CAAC;AAC7D,kBAAc;AAAA,MACZ,IAAI,YAAY;AAAA,QACd;AAAA,QACA,YAAY,KAAK;AAAA,QACjB,gBAAgB,KAAK;AAAA,MACvB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,UAAU;AAAA,IACV,WAAW,MAAM;AAAA,IAEjB,OAAsB;AACpB,UAAI,CAAC,aAAa;AAChB,sBAAc,OAAO,EAAE,MAAM,CAAC,QAAQ;AACpC,wBAAc;AACd,gBAAM;AAAA,QACR,CAAC;AAAA,MACH;AACA,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,UAAyB;AAC7B,UAAI,aAAa;AACf,cAAM,YAAY,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAClC;AACA,UAAI,CAAC,eAAe,CAAC,UAAW;AAChC,UAAI;AACF,kBAAU,IAAI;AAAA,MAChB,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AACF;","names":["resolve","sftp","resolve","resolve"]}

package/dist/{types-RPKUTu1k.d.ts → types-DhXwOQwD.d.ts}

@@ -1,93 +1,7 @@
-import { c as CheckpointConfig, F as FileCheckpointState, D as DiffStats, d as FileCheckpointSnapshot, S as StreamEvent, e as ContentPart } from './types-LrU4LRmX.js';
+import { c as CheckpointConfig, F as FileCheckpointState, D as DiffStats, d as FileCheckpointSnapshot, S as StreamEvent, e as ContentPart } from './types-kiGBF35b.js';
+import { a as VirtualFs, V as VirtualComputer } from './computer-BPdxSo6X.js';
 import { a as PermissionMode, b as PermissionResult } from './types-CD0rUKKT.js';
 
-interface FileEntry {
-    name: string;
-    path: string;
-    isDirectory: boolean;
-    isFile: boolean;
-    size?: number;
-}
-interface FileStat {
-    size: number;
-    isDirectory: boolean;
-    isFile: boolean;
-    createdAt?: Date;
-    modifiedAt?: Date;
-}
-interface ReadOptions {
-    encoding?: BufferEncoding;
-    /**
-     * Maximum number of bytes to read. When set, only the first `maxBytes`
-     * bytes are returned (decoded as a string). Implementations that do not
-     * support this option may ignore it and return the full content.
-     */
-    maxBytes?: number;
-}
-/**
- * Sandboxed filesystem interface.
- *
- * `VirtualFs` is noumen's primary isolation boundary for file I/O. Every
- * built-in tool that touches the filesystem (ReadFile, WriteFile, EditFile)
- * delegates to this interface — the agent never accesses `node:fs` directly.
- *
- * Swap implementations to control where files live and what the agent can reach:
- * - `LocalFs`   — reads/writes on the host filesystem (no isolation, for local dev)
- * - `SpritesFs` — reads/writes inside a remote sprites.dev container (full sandbox)
- * - Custom      — implement this interface for Docker volumes, E2B, S3, in-memory, etc.
- */
-interface VirtualFs {
-    readFile(path: string, opts?: ReadOptions): Promise<string>;
-    /**
-     * Read raw bytes from a file. Used for binary content (images, PDFs).
-     * Implementations SHOULD cap the read at `maxBytes` to prevent OOM on
-     * very large files. When `maxBytes` is omitted, the entire file is read.
-     *
-     * Returns a Buffer (Node.js) or Uint8Array.
-     */
-    readFileBytes?(path: string, maxBytes?: number): Promise<Buffer>;
-    writeFile(path: string, content: string): Promise<void>;
-    appendFile(path: string, content: string): Promise<void>;
-    deleteFile(path: string, opts?: {
-        recursive?: boolean;
-    }): Promise<void>;
-    mkdir(path: string, opts?: {
-        recursive?: boolean;
-    }): Promise<void>;
-    readdir(path: string, opts?: {
-        recursive?: boolean;
-    }): Promise<FileEntry[]>;
-    exists(path: string): Promise<boolean>;
-    stat(path: string): Promise<FileStat>;
-}
-
-interface ExecOptions {
-    timeout?: number;
-    cwd?: string;
-    env?: Record<string, string>;
-    signal?: AbortSignal;
-}
-interface CommandResult {
-    exitCode: number;
-    stdout: string;
-    stderr: string;
-}
-/**
- * Sandboxed shell execution interface.
- *
- * `VirtualComputer` is noumen's primary isolation boundary for command
- * execution. Every built-in tool that runs shell commands (Bash, Glob, Grep)
- * delegates to this interface — the agent never spawns processes directly.
- *
- * Swap implementations to control where and how commands run:
- * - `LocalComputer`   — runs on the host machine (no isolation, for local dev)
- * - `SpritesComputer`  — runs in a remote sprites.dev container (full sandbox)
- * - Custom             — implement this interface for Docker, E2B, Daytona, etc.
- */
-interface VirtualComputer {
-    executeCommand(command: string, opts?: ExecOptions): Promise<CommandResult>;
-}
-
 /**
  * Zod integration utilities. Users bring their own `zod` dependency — these
  * helpers accept duck-typed schemas so we don't force a hard dependency.
@@ -642,4 +556,4 @@ interface Tool {
     call(args: Record<string, unknown>, ctx: ToolContext): Promise<ToolResult>;
 }
 
-export { type ZodLikeSchema as $, type PermissionDeniedHookInput as A, type PermissionRequestHookInput as B, type CommandResult as C, DiagnosticRegistry as D, type ExecOptions as E, type FileEntry as F, type RetryAttemptHookInput as G, type HookDefinition as H, type SafeParseResult as I, type JsonSchemaType as J, type SessionEndHookInput as K, type LspServerConfig as L, type MemoryUpdateHookInput as M, type NotificationHookInput as N, type SessionStartHookInput as O, type PostToolUseFailureHookInput as P, type SubagentStartHookInput as Q, type ReadOptions as R, type SubagentConfig as S, type Tool as T, type SubagentStopHookInput as U, type VirtualFs as V, type Task as W, type TaskCreateInput as X, type TaskStatus as Y, type TaskUpdateInput as Z, type ToolParameters as _, type LspServerState as a, formatZodValidationError as a0, registerZodToJsonSchema as a1, zodToJsonSchema as a2, type LspDiagnostic as b, type LspLocation as c, type LspOperation as d, LspServerManager as e, type LspSymbol as f, type ToolResult as g, type ToolContext as h, type FileStat as i, type VirtualComputer as j, type SubagentRun as k, TaskStore as l, FileCheckpointManager as m, type FileStateCacheConfig as n, type HookEvent as o, type HookInput as p, type PostToolUseFailureHookOutput as q, type PostToolUseHookInput as r, type PostToolUseHookOutput as s, type PreToolUseHookInput as t, type PreToolUseHookOutput as u, type FileState as v, FileStateCache as w, type FileWriteHookInput as x, type HookOutput as y, type ModelSwitchHookInput as z };
+export { type SessionEndHookInput as A, type SessionStartHookInput as B, type SubagentStartHookInput as C, DiagnosticRegistry as D, type SubagentStopHookInput as E, FileCheckpointManager as F, type Task as G, type HookDefinition as H, type TaskCreateInput as I, type JsonSchemaType as J, type TaskStatus as K, type LspServerConfig as L, type MemoryUpdateHookInput as M, type NotificationHookInput as N, type TaskUpdateInput as O, type PostToolUseFailureHookInput as P, type ToolParameters as Q, type RetryAttemptHookInput as R, type SubagentConfig as S, type Tool as T, formatZodValidationError as U, registerZodToJsonSchema as V, zodToJsonSchema as W, type ZodLikeSchema as Z, type LspServerState as a, type LspDiagnostic as b, type LspLocation as c, type LspOperation as d, LspServerManager as e, type LspSymbol as f, type ToolResult as g, type ToolContext as h, type SubagentRun as i, TaskStore as j, type FileStateCacheConfig as k, type HookEvent as l, type HookInput as m, type PostToolUseFailureHookOutput as n, type PostToolUseHookInput as o, type PostToolUseHookOutput as p, type PreToolUseHookInput as q, type PreToolUseHookOutput as r, type FileState as s, FileStateCache as t, type FileWriteHookInput as u, type HookOutput as v, type ModelSwitchHookInput as w, type PermissionDeniedHookInput as x, type PermissionRequestHookInput as y, type SafeParseResult as z };

package/dist/{types-LrU4LRmX.d.ts → types-kiGBF35b.d.ts}

@@ -225,6 +225,17 @@ interface CustomTitleEntry {
     title: string;
     timestamp: string;
 }
+/**
+ * AI-generated session title. Persisted separately from `custom-title`
+ * so user-set titles always win regardless of write order. Reader logic
+ * prefers `custom-title` over `ai-title`.
+ */
+interface AiTitleEntry {
+    type: "ai-title";
+    sessionId: string;
+    title: string;
+    timestamp: string;
+}
 interface MetadataEntry {
     type: "metadata";
     sessionId: string;
@@ -265,12 +276,20 @@ interface ContentReplacementEntry {
     timestamp: string;
     replacements: ContentReplacementRecord[];
 }
-type Entry = MessageEntry | CompactBoundaryEntry | SummaryEntry | CustomTitleEntry | MetadataEntry | ToolResultOverflowEntry | FileCheckpointEntry | ContentReplacementEntry | SnipBoundaryEntry;
+type Entry = MessageEntry | CompactBoundaryEntry | SummaryEntry | CustomTitleEntry | AiTitleEntry | MetadataEntry | ToolResultOverflowEntry | FileCheckpointEntry | ContentReplacementEntry | SnipBoundaryEntry;
 interface SessionInfo {
     sessionId: string;
     createdAt: string;
     lastMessageAt: string;
+    /**
+     * Effective title for display. When both a user-set (`custom-title`) and
+     * an AI-generated (`ai-title`) entry exist, the user-set one wins.
+     */
     title?: string;
+    /** User-set title, if any. */
+    customTitle?: string;
+    /** AI-generated title, if any. */
+    aiTitle?: string;
     messageCount: number;
 }
 interface ToolResult {
@@ -388,6 +407,18 @@ type StreamEvent = {
     type: "session_resumed";
     sessionId: string;
     messageCount: number;
+}
+/**
+ * Title change event. `noumen` defines the shape so consumers can wire
+ * renames + auto-titles into the same stream as other StreamEvents, but
+ * does not emit it internally: callers synthesize it after
+ * `Agent.setCustomTitle` / `Agent.autoTitleIfMissing` resolves.
+ */
+ | {
+    type: "title_updated";
+    sessionId: string;
+    title: string;
+    source: "custom" | "ai";
 } | {
     type: "checkpoint_snapshot";
     messageId: string;
@@ -556,6 +587,13 @@ interface ChatParams {
 }
 interface AIProvider {
     chat(params: ChatParams): AsyncIterable<ChatStreamChunk>;
+    /**
+     * Optional fallback model name, used when no `model` is provided at the
+     * Thread / Agent level. Consumers should pass explicit models when they
+     * can, but this lets each provider ship a sensible default without
+     * forcing Thread to hardcode provider-specific strings.
+     */
+    readonly defaultModel?: string;
 }
 /**
  * Extended error type that providers can throw to convey retry-relevant metadata.
@@ -572,4 +610,4 @@ declare class ChatStreamError extends Error {
     });
 }
 
-export { createCheckpointState as $, type AIProvider as A, type FileCheckpointBackup as B, type ChatParams as C, type DiffStats as D, type Entry as E, type FileCheckpointState as F, type FileCheckpointEntry as G, type ImageUrlContent as H, type ImageContent as I, type JsonSchemaOutputFormat as J, type JsonObjectOutputFormat as K, type MemoryType as L, type ModelPricing as M, type MessageEntry as N, type OutputFormat as O, type MetadataEntry as P, type SerializedMessage as Q, type RunOptions as R, type StreamEvent as S, type ToolDefinition as T, type UUID as U, type SnipBoundaryEntry as V, type SummaryEntry as W, type SystemMessage as X, type TextContent as Y, type ToolParameterProperty as Z, type UserMessage as _, type ChatStreamChunk as a, type ChatMessage as b, type CheckpointConfig as c, type FileCheckpointSnapshot as d, type ContentPart as e, type ContentReplacementRecord as f, type SessionInfo as g, type UsageRecord as h, type CostSummary as i, type ModelUsageSummary as j, type ChatCompletionUsage as k, type ThinkingConfig as l, type MemoryConfig as m, type ToolResult as n, type ToolCallContent as o, type MemoryProvider as p, type MemoryEntry as q, type AssistantMessage as r, type ToolResultMessage as s, type ToolResultOverflowEntry as t, type ChatStreamChoice as u, type ChatStreamDelta as v, ChatStreamError as w, type CompactBoundaryEntry as x, type ContentReplacementEntry as y, type CustomTitleEntry as z };
+export { type UserMessage as $, type AIProvider as A, type CustomTitleEntry as B, type ChatParams as C, type DiffStats as D, type Entry as E, type FileCheckpointState as F, type FileCheckpointBackup as G, type FileCheckpointEntry as H, type ImageContent as I, type JsonSchemaOutputFormat as J, type ImageUrlContent as K, type JsonObjectOutputFormat as L, type ModelPricing as M, type MemoryType as N, type OutputFormat as O, type MessageEntry as P, type MetadataEntry as Q, type RunOptions as R, type StreamEvent as S, type ToolDefinition as T, type UUID as U, type SerializedMessage as V, type SnipBoundaryEntry as W, type SummaryEntry as X, type SystemMessage as Y, type TextContent as Z, type ToolParameterProperty as _, type ChatStreamChunk as a, createCheckpointState as a0, type ChatMessage as b, type CheckpointConfig as c, type FileCheckpointSnapshot as d, type ContentPart as e, type ContentReplacementRecord as f, type SessionInfo as g, type UsageRecord as h, type CostSummary as i, type ModelUsageSummary as j, type ChatCompletionUsage as k, type ThinkingConfig as l, type MemoryConfig as m, type ToolResult as n, type ToolCallContent as o, type MemoryProvider as p, type MemoryEntry as q, type AssistantMessage as r, type ToolResultMessage as s, type ToolResultOverflowEntry as t, type AiTitleEntry as u, type ChatStreamChoice as v, type ChatStreamDelta as w, ChatStreamError as x, type CompactBoundaryEntry as y, type ContentReplacementEntry as z };