ssh-mcp-pro 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +127 -0
- package/ARCHITECTURE.md +145 -0
- package/LICENSE +21 -0
- package/LICENSES/MIT.txt +21 -0
- package/MIGRATION.md +14 -0
- package/README.md +175 -0
- package/REGISTRY_SUBMISSION.md +38 -0
- package/SECURITY.md +40 -0
- package/SECURITY_DECISIONS.md +59 -0
- package/dist/agent-bin.d.ts +3 -0
- package/dist/agent-bin.d.ts.map +1 -0
- package/dist/agent-bin.js +8 -0
- package/dist/agent-bin.js.map +1 -0
- package/dist/audit.d.ts +25 -0
- package/dist/audit.d.ts.map +1 -0
- package/dist/audit.js +50 -0
- package/dist/audit.js.map +1 -0
- package/dist/auth.d.ts +4 -0
- package/dist/auth.d.ts.map +1 -0
- package/dist/auth.js +33 -0
- package/dist/auth.js.map +1 -0
- package/dist/cli.d.ts +16 -0
- package/dist/cli.d.ts.map +1 -0
- package/dist/cli.js +99 -0
- package/dist/cli.js.map +1 -0
- package/dist/config.d.ts +103 -0
- package/dist/config.d.ts.map +1 -0
- package/dist/config.js +490 -0
- package/dist/config.js.map +1 -0
- package/dist/connector-credentials.d.ts +8 -0
- package/dist/connector-credentials.d.ts.map +1 -0
- package/dist/connector-credentials.js +132 -0
- package/dist/connector-credentials.js.map +1 -0
- package/dist/connector-profile.d.ts +17 -0
- package/dist/connector-profile.d.ts.map +1 -0
- package/dist/connector-profile.js +81 -0
- package/dist/connector-profile.js.map +1 -0
- package/dist/container.d.ts +18 -0
- package/dist/container.d.ts.map +1 -0
- package/dist/container.js +52 -0
- package/dist/container.js.map +1 -0
- package/dist/detect.d.ts +7 -0
- package/dist/detect.d.ts.map +1 -0
- package/dist/detect.js +271 -0
- package/dist/detect.js.map +1 -0
- package/dist/ensure.d.ts +17 -0
- package/dist/ensure.d.ts.map +1 -0
- package/dist/ensure.js +531 -0
- package/dist/ensure.js.map +1 -0
- package/dist/errors.d.ts +54 -0
- package/dist/errors.d.ts.map +1 -0
- package/dist/errors.js +84 -0
- package/dist/errors.js.map +1 -0
- package/dist/fs-tools.d.ts +26 -0
- package/dist/fs-tools.d.ts.map +1 -0
- package/dist/fs-tools.js +599 -0
- package/dist/fs-tools.js.map +1 -0
- package/dist/http-rate-limit.d.ts +9 -0
- package/dist/http-rate-limit.d.ts.map +1 -0
- package/dist/http-rate-limit.js +41 -0
- package/dist/http-rate-limit.js.map +1 -0
- package/dist/http-security.d.ts +22 -0
- package/dist/http-security.d.ts.map +1 -0
- package/dist/http-security.js +88 -0
- package/dist/http-security.js.map +1 -0
- package/dist/index.d.ts +10 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +201 -0
- package/dist/index.js.map +1 -0
- package/dist/logging.d.ts +52 -0
- package/dist/logging.d.ts.map +1 -0
- package/dist/logging.js +180 -0
- package/dist/logging.js.map +1 -0
- package/dist/mcp.d.ts +16 -0
- package/dist/mcp.d.ts.map +1 -0
- package/dist/mcp.js +159 -0
- package/dist/mcp.js.map +1 -0
- package/dist/metrics.d.ts +95 -0
- package/dist/metrics.d.ts.map +1 -0
- package/dist/metrics.js +204 -0
- package/dist/metrics.js.map +1 -0
- package/dist/oauth.d.ts +14 -0
- package/dist/oauth.d.ts.map +1 -0
- package/dist/oauth.js +105 -0
- package/dist/oauth.js.map +1 -0
- package/dist/policy.d.ts +64 -0
- package/dist/policy.d.ts.map +1 -0
- package/dist/policy.js +368 -0
- package/dist/policy.js.map +1 -0
- package/dist/process.d.ts +24 -0
- package/dist/process.d.ts.map +1 -0
- package/dist/process.js +212 -0
- package/dist/process.js.map +1 -0
- package/dist/prompts.d.ts +49 -0
- package/dist/prompts.d.ts.map +1 -0
- package/dist/prompts.js +191 -0
- package/dist/prompts.js.map +1 -0
- package/dist/rate-limiter.d.ts +57 -0
- package/dist/rate-limiter.d.ts.map +1 -0
- package/dist/rate-limiter.js +141 -0
- package/dist/rate-limiter.js.map +1 -0
- package/dist/remote/agent-cli.d.ts +2 -0
- package/dist/remote/agent-cli.d.ts.map +1 -0
- package/dist/remote/agent-cli.js +270 -0
- package/dist/remote/agent-cli.js.map +1 -0
- package/dist/remote/agent-executor.d.ts +26 -0
- package/dist/remote/agent-executor.d.ts.map +1 -0
- package/dist/remote/agent-executor.js +400 -0
- package/dist/remote/agent-executor.js.map +1 -0
- package/dist/remote/config.d.ts +3 -0
- package/dist/remote/config.d.ts.map +1 -0
- package/dist/remote/config.js +52 -0
- package/dist/remote/config.js.map +1 -0
- package/dist/remote/control-plane.d.ts +57 -0
- package/dist/remote/control-plane.d.ts.map +1 -0
- package/dist/remote/control-plane.js +1248 -0
- package/dist/remote/control-plane.js.map +1 -0
- package/dist/remote/crypto.d.ts +38 -0
- package/dist/remote/crypto.d.ts.map +1 -0
- package/dist/remote/crypto.js +143 -0
- package/dist/remote/crypto.js.map +1 -0
- package/dist/remote/mcp-tools.d.ts +10 -0
- package/dist/remote/mcp-tools.d.ts.map +1 -0
- package/dist/remote/mcp-tools.js +201 -0
- package/dist/remote/mcp-tools.js.map +1 -0
- package/dist/remote/policy.d.ts +11 -0
- package/dist/remote/policy.d.ts.map +1 -0
- package/dist/remote/policy.js +94 -0
- package/dist/remote/policy.js.map +1 -0
- package/dist/remote/schemas.d.ts +298 -0
- package/dist/remote/schemas.d.ts.map +1 -0
- package/dist/remote/schemas.js +111 -0
- package/dist/remote/schemas.js.map +1 -0
- package/dist/remote/scopes.d.ts +6 -0
- package/dist/remote/scopes.d.ts.map +1 -0
- package/dist/remote/scopes.js +24 -0
- package/dist/remote/scopes.js.map +1 -0
- package/dist/remote/store.d.ts +45 -0
- package/dist/remote/store.d.ts.map +1 -0
- package/dist/remote/store.js +355 -0
- package/dist/remote/store.js.map +1 -0
- package/dist/remote/types.d.ts +183 -0
- package/dist/remote/types.d.ts.map +1 -0
- package/dist/remote/types.js +103 -0
- package/dist/remote/types.js.map +1 -0
- package/dist/remote/util.d.ts +6 -0
- package/dist/remote/util.d.ts.map +1 -0
- package/dist/remote/util.js +45 -0
- package/dist/remote/util.js.map +1 -0
- package/dist/remote/websocket.d.ts +26 -0
- package/dist/remote/websocket.d.ts.map +1 -0
- package/dist/remote/websocket.js +167 -0
- package/dist/remote/websocket.js.map +1 -0
- package/dist/render-http.d.ts +2 -0
- package/dist/render-http.d.ts.map +1 -0
- package/dist/render-http.js +14 -0
- package/dist/render-http.js.map +1 -0
- package/dist/resources.d.ts +19 -0
- package/dist/resources.d.ts.map +1 -0
- package/dist/resources.js +96 -0
- package/dist/resources.js.map +1 -0
- package/dist/retry.d.ts +45 -0
- package/dist/retry.d.ts.map +1 -0
- package/dist/retry.js +120 -0
- package/dist/retry.js.map +1 -0
- package/dist/safety.d.ts +31 -0
- package/dist/safety.d.ts.map +1 -0
- package/dist/safety.js +174 -0
- package/dist/safety.js.map +1 -0
- package/dist/server-http.d.ts +2 -0
- package/dist/server-http.d.ts.map +1 -0
- package/dist/server-http.js +432 -0
- package/dist/server-http.js.map +1 -0
- package/dist/session.d.ts +116 -0
- package/dist/session.d.ts.map +1 -0
- package/dist/session.js +666 -0
- package/dist/session.js.map +1 -0
- package/dist/shell.d.ts +10 -0
- package/dist/shell.d.ts.map +1 -0
- package/dist/shell.js +83 -0
- package/dist/shell.js.map +1 -0
- package/dist/ssh-config.d.ts +94 -0
- package/dist/ssh-config.d.ts.map +1 -0
- package/dist/ssh-config.js +234 -0
- package/dist/ssh-config.js.map +1 -0
- package/dist/streaming.d.ts +36 -0
- package/dist/streaming.d.ts.map +1 -0
- package/dist/streaming.js +140 -0
- package/dist/streaming.js.map +1 -0
- package/dist/telemetry.d.ts +17 -0
- package/dist/telemetry.d.ts.map +1 -0
- package/dist/telemetry.js +101 -0
- package/dist/telemetry.js.map +1 -0
- package/dist/tools/connector.provider.d.ts +28 -0
- package/dist/tools/connector.provider.d.ts.map +1 -0
- package/dist/tools/connector.provider.js +360 -0
- package/dist/tools/connector.provider.js.map +1 -0
- package/dist/tools/ensure.provider.d.ts +18 -0
- package/dist/tools/ensure.provider.d.ts.map +1 -0
- package/dist/tools/ensure.provider.js +173 -0
- package/dist/tools/ensure.provider.js.map +1 -0
- package/dist/tools/fs.provider.d.ts +21 -0
- package/dist/tools/fs.provider.d.ts.map +1 -0
- package/dist/tools/fs.provider.js +259 -0
- package/dist/tools/fs.provider.js.map +1 -0
- package/dist/tools/index.d.ts +4 -0
- package/dist/tools/index.d.ts.map +1 -0
- package/dist/tools/index.js +68 -0
- package/dist/tools/index.js.map +1 -0
- package/dist/tools/metadata.d.ts +11 -0
- package/dist/tools/metadata.d.ts.map +1 -0
- package/dist/tools/metadata.js +10 -0
- package/dist/tools/metadata.js.map +1 -0
- package/dist/tools/output-schemas.d.ts +217 -0
- package/dist/tools/output-schemas.d.ts.map +1 -0
- package/dist/tools/output-schemas.js +300 -0
- package/dist/tools/output-schemas.js.map +1 -0
- package/dist/tools/process.provider.d.ts +22 -0
- package/dist/tools/process.provider.d.ts.map +1 -0
- package/dist/tools/process.provider.js +146 -0
- package/dist/tools/process.provider.js.map +1 -0
- package/dist/tools/registry.d.ts +12 -0
- package/dist/tools/registry.d.ts.map +1 -0
- package/dist/tools/registry.js +163 -0
- package/dist/tools/registry.js.map +1 -0
- package/dist/tools/results.d.ts +4 -0
- package/dist/tools/results.d.ts.map +1 -0
- package/dist/tools/results.js +5 -0
- package/dist/tools/results.js.map +1 -0
- package/dist/tools/session.provider.d.ts +23 -0
- package/dist/tools/session.provider.d.ts.map +1 -0
- package/dist/tools/session.provider.js +299 -0
- package/dist/tools/session.provider.js.map +1 -0
- package/dist/tools/system.provider.d.ts +18 -0
- package/dist/tools/system.provider.d.ts.map +1 -0
- package/dist/tools/system.provider.js +81 -0
- package/dist/tools/system.provider.js.map +1 -0
- package/dist/tools/transfer.provider.d.ts +16 -0
- package/dist/tools/transfer.provider.d.ts.map +1 -0
- package/dist/tools/transfer.provider.js +85 -0
- package/dist/tools/transfer.provider.js.map +1 -0
- package/dist/tools/tunnel.provider.d.ts +18 -0
- package/dist/tools/tunnel.provider.d.ts.map +1 -0
- package/dist/tools/tunnel.provider.js +142 -0
- package/dist/tools/tunnel.provider.js.map +1 -0
- package/dist/tools/types.d.ts +16 -0
- package/dist/tools/types.d.ts.map +1 -0
- package/dist/tools/types.js +2 -0
- package/dist/tools/types.js.map +1 -0
- package/dist/transfer.d.ts +40 -0
- package/dist/transfer.d.ts.map +1 -0
- package/dist/transfer.js +363 -0
- package/dist/transfer.js.map +1 -0
- package/dist/tunnel.d.ts +37 -0
- package/dist/tunnel.d.ts.map +1 -0
- package/dist/tunnel.js +234 -0
- package/dist/tunnel.js.map +1 -0
- package/dist/types.d.ts +341 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js +184 -0
- package/dist/types.js.map +1 -0
- package/docs/docker.md +22 -0
- package/examples/README.md +77 -0
- package/mcp.json +21 -0
- package/package.json +147 -0
- package/registry/ssh-mcp-pro/mcp.json +21 -0
- package/server.json +76 -0
|
@@ -0,0 +1,141 @@
|
|
|
1
|
+
import { logger } from "./logging.js";
|
|
2
|
+
/**
|
|
3
|
+
* Rate limiter using the Sliding Window Log algorithm.
|
|
4
|
+
*/
|
|
5
|
+
export class RateLimiter {
|
|
6
|
+
logs = new Map();
|
|
7
|
+
keyWindowMs = new Map();
|
|
8
|
+
config;
|
|
9
|
+
cleanupTimer;
|
|
10
|
+
destroyed = false;
|
|
11
|
+
constructor(config = {}) {
|
|
12
|
+
this.config = {
|
|
13
|
+
maxRequests: config.maxRequests ?? 100,
|
|
14
|
+
windowMs: config.windowMs ?? 60_000,
|
|
15
|
+
blockOnLimit: config.blockOnLimit ?? true,
|
|
16
|
+
};
|
|
17
|
+
this.cleanupTimer = setInterval(() => this.pruneExpiredLogs(), this.config.windowMs);
|
|
18
|
+
this.cleanupTimer.unref?.();
|
|
19
|
+
}
|
|
20
|
+
/**
|
|
21
|
+
* Check if request is allowed under the rate limit
|
|
22
|
+
*/
|
|
23
|
+
check(key, options = {}) {
|
|
24
|
+
if (this.destroyed) {
|
|
25
|
+
logger.warn("Rate limit check attempted after limiter destroy", { key });
|
|
26
|
+
return {
|
|
27
|
+
allowed: false,
|
|
28
|
+
remaining: 0,
|
|
29
|
+
resetIn: 0,
|
|
30
|
+
blocked: true,
|
|
31
|
+
};
|
|
32
|
+
}
|
|
33
|
+
const maxRequests = options.maxRequests ?? this.config.maxRequests;
|
|
34
|
+
const windowMs = options.windowMs ?? this.config.windowMs;
|
|
35
|
+
const now = Date.now();
|
|
36
|
+
const cutoff = now - windowMs;
|
|
37
|
+
this.keyWindowMs.set(key, windowMs);
|
|
38
|
+
let log = this.logs.get(key);
|
|
39
|
+
if (!log) {
|
|
40
|
+
log = [];
|
|
41
|
+
this.logs.set(key, log);
|
|
42
|
+
}
|
|
43
|
+
let index = 0;
|
|
44
|
+
while (index < log.length && (log[index] ?? 0) <= cutoff) {
|
|
45
|
+
index++;
|
|
46
|
+
}
|
|
47
|
+
if (index > 0) {
|
|
48
|
+
log.splice(0, index);
|
|
49
|
+
}
|
|
50
|
+
const count = log.length;
|
|
51
|
+
if (count >= maxRequests) {
|
|
52
|
+
const oldestInWindow = log[0] ?? now;
|
|
53
|
+
const resetIn = oldestInWindow + windowMs - now;
|
|
54
|
+
logger.warn("Rate limit exceeded (sliding window)", {
|
|
55
|
+
key,
|
|
56
|
+
count,
|
|
57
|
+
max: maxRequests,
|
|
58
|
+
resetIn,
|
|
59
|
+
});
|
|
60
|
+
return {
|
|
61
|
+
allowed: !this.config.blockOnLimit,
|
|
62
|
+
remaining: 0,
|
|
63
|
+
resetIn,
|
|
64
|
+
blocked: this.config.blockOnLimit,
|
|
65
|
+
};
|
|
66
|
+
}
|
|
67
|
+
log.push(now);
|
|
68
|
+
return {
|
|
69
|
+
allowed: true,
|
|
70
|
+
remaining: Math.max(0, maxRequests - log.length),
|
|
71
|
+
resetIn: windowMs,
|
|
72
|
+
blocked: false,
|
|
73
|
+
};
|
|
74
|
+
}
|
|
75
|
+
/**
|
|
76
|
+
* Reset rate limit for a specific key
|
|
77
|
+
*/
|
|
78
|
+
reset(key) {
|
|
79
|
+
this.logs.delete(key);
|
|
80
|
+
this.keyWindowMs.delete(key);
|
|
81
|
+
logger.debug("Rate limit reset", { key });
|
|
82
|
+
}
|
|
83
|
+
/**
|
|
84
|
+
* Get current usage for a key
|
|
85
|
+
*/
|
|
86
|
+
getUsage(key, options = {}) {
|
|
87
|
+
const maxRequests = options.maxRequests ?? this.config.maxRequests;
|
|
88
|
+
const windowMs = options.windowMs ?? this.keyWindowMs.get(key) ?? this.config.windowMs;
|
|
89
|
+
const now = Date.now();
|
|
90
|
+
const cutoff = now - windowMs;
|
|
91
|
+
const log = this.logs.get(key);
|
|
92
|
+
if (!log) {
|
|
93
|
+
return null;
|
|
94
|
+
}
|
|
95
|
+
const activeLog = log.filter((timestamp) => timestamp > cutoff);
|
|
96
|
+
if (activeLog.length === 0) {
|
|
97
|
+
return null;
|
|
98
|
+
}
|
|
99
|
+
const oldestInWindow = activeLog[0] ?? now;
|
|
100
|
+
return {
|
|
101
|
+
count: activeLog.length,
|
|
102
|
+
remaining: Math.max(0, maxRequests - activeLog.length),
|
|
103
|
+
resetIn: oldestInWindow + windowMs - now,
|
|
104
|
+
};
|
|
105
|
+
}
|
|
106
|
+
/**
|
|
107
|
+
* Cleanup expired logs
|
|
108
|
+
*/
|
|
109
|
+
pruneExpiredLogs() {
|
|
110
|
+
const now = Date.now();
|
|
111
|
+
let cleaned = 0;
|
|
112
|
+
for (const [key, log] of this.logs) {
|
|
113
|
+
const windowMs = this.keyWindowMs.get(key) ?? this.config.windowMs;
|
|
114
|
+
const keyCutoff = now - windowMs;
|
|
115
|
+
const activeLog = log.filter((timestamp) => timestamp > keyCutoff);
|
|
116
|
+
if (activeLog.length === 0) {
|
|
117
|
+
this.logs.delete(key);
|
|
118
|
+
this.keyWindowMs.delete(key);
|
|
119
|
+
cleaned++;
|
|
120
|
+
continue;
|
|
121
|
+
}
|
|
122
|
+
this.logs.set(key, activeLog);
|
|
123
|
+
}
|
|
124
|
+
if (cleaned > 0) {
|
|
125
|
+
logger.debug("Rate limiter cleanup", { cleaned });
|
|
126
|
+
}
|
|
127
|
+
}
|
|
128
|
+
/**
|
|
129
|
+
* Destroy the rate limiter
|
|
130
|
+
*/
|
|
131
|
+
destroy() {
|
|
132
|
+
if (this.cleanupTimer) {
|
|
133
|
+
clearInterval(this.cleanupTimer);
|
|
134
|
+
this.cleanupTimer = undefined;
|
|
135
|
+
}
|
|
136
|
+
this.logs.clear();
|
|
137
|
+
this.keyWindowMs.clear();
|
|
138
|
+
this.destroyed = true;
|
|
139
|
+
}
|
|
140
|
+
}
|
|
141
|
+
//# sourceMappingURL=rate-limiter.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../src/rate-limiter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AA0BtC;;GAEG;AACH,MAAM,OAAO,WAAW;IACL,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,CAAoB;IACnC,YAAY,CAA6B;IACzC,SAAS,GAAG,KAAK,CAAC;IAE1B,YAAY,SAAqC,EAAE;QACjD,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,GAAG;YACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;SAC1C,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrF,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAW,EAAE,UAAiC,EAAE;QACpD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;QAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAEpC,IAAI,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;YACzD,KAAK,EAAE,CAAC;QACV,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;QACzB,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;YACrC,MAAM,OAAO,GAAG,cAAc,GAAG,QAAQ,GAAG,GAAG,CAAC;YAEhD,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBAClD,GAAG;gBACH,KAAK;gBACL,GAAG,EAAE,WAAW;gBAChB,OAAO;aACR,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;gBAClC,SAAS,EAAE,CAAC;gBACZ,OAAO;gBACP,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;aAClC,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEd,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC;YAChD,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAW;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,GAAW,EACX,UAAiC,EAAE;QAEnC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;QAChE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAC3C,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;YACtD,OAAO,EAAE,cAAc,GAAG,QAAQ,GAAG,GAAG;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACnE,MAAM,SAAS,GAAG,GAAG,GAAG,QAAQ,CAAC;YACjC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;YACnE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7B,OAAO,EAAE,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;CACF"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"agent-cli.d.ts","sourceRoot":"","sources":["../../src/remote/agent-cli.ts"],"names":[],"mappings":"AA2TA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B/D"}
|
|
@@ -0,0 +1,270 @@
|
|
|
1
|
+
import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
|
|
2
|
+
import os from "node:os";
|
|
3
|
+
import path from "node:path";
|
|
4
|
+
import { AgentExecutor, defaultHostMetadata } from "./agent-executor.js";
|
|
5
|
+
import { ensurePemKeyPair, nowIso, randomToken, signEnvelope, verifyEnvelope, } from "./crypto.js";
|
|
6
|
+
import { parseControlPlaneEnvelope, parseAgentPolicy } from "./schemas.js";
|
|
7
|
+
function output(line) {
|
|
8
|
+
process.stdout.write(`${line}\n`);
|
|
9
|
+
}
|
|
10
|
+
function configPath() {
|
|
11
|
+
return (process.env.SSHAUTOMATOR_AGENT_CONFIG ?? path.join(os.homedir(), ".sshautomator", "agent.json"));
|
|
12
|
+
}
|
|
13
|
+
function keyPath() {
|
|
14
|
+
return path.join(path.dirname(configPath()), "agent-ed25519.json");
|
|
15
|
+
}
|
|
16
|
+
function loadConfig() {
|
|
17
|
+
return JSON.parse(readFileSync(configPath(), "utf8"));
|
|
18
|
+
}
|
|
19
|
+
function requireConfig() {
|
|
20
|
+
if (!existsSync(configPath())) {
|
|
21
|
+
throw new Error([
|
|
22
|
+
"Agent is not enrolled.",
|
|
23
|
+
"Enroll this host first with:",
|
|
24
|
+
" npx --yes --package ssh-mcp-pro@latest ssh-mcp-pro-agent enroll --server <url> --token <one-time-token> --alias <alias>",
|
|
25
|
+
].join("\n"));
|
|
26
|
+
}
|
|
27
|
+
return loadConfig();
|
|
28
|
+
}
|
|
29
|
+
function saveConfig(config) {
|
|
30
|
+
const target = configPath();
|
|
31
|
+
mkdirSync(path.dirname(target), { recursive: true });
|
|
32
|
+
writeFileSync(target, JSON.stringify(config, null, 2), { mode: 0o600 });
|
|
33
|
+
}
|
|
34
|
+
function parseFlag(argv, name) {
|
|
35
|
+
const index = argv.indexOf(name);
|
|
36
|
+
return index >= 0 ? argv[index + 1] : undefined;
|
|
37
|
+
}
|
|
38
|
+
async function postJson(url, payload) {
|
|
39
|
+
const response = await fetch(url, {
|
|
40
|
+
method: "POST",
|
|
41
|
+
headers: { "Content-Type": "application/json" },
|
|
42
|
+
body: JSON.stringify(payload),
|
|
43
|
+
});
|
|
44
|
+
const data = await response.json();
|
|
45
|
+
if (!response.ok) {
|
|
46
|
+
throw new Error(`HTTP ${response.status}: ${JSON.stringify(data)}`);
|
|
47
|
+
}
|
|
48
|
+
if (!data || typeof data !== "object" || Array.isArray(data)) {
|
|
49
|
+
throw new Error("Expected JSON object response");
|
|
50
|
+
}
|
|
51
|
+
return data;
|
|
52
|
+
}
|
|
53
|
+
function requireString(value, name) {
|
|
54
|
+
if (typeof value !== "string" || value.length === 0) {
|
|
55
|
+
throw new Error(`${name} is required`);
|
|
56
|
+
}
|
|
57
|
+
return value;
|
|
58
|
+
}
|
|
59
|
+
function requirePolicy(value) {
|
|
60
|
+
try {
|
|
61
|
+
return parseAgentPolicy(value);
|
|
62
|
+
}
|
|
63
|
+
catch {
|
|
64
|
+
throw new Error("Agent policy is missing from enrollment response");
|
|
65
|
+
}
|
|
66
|
+
}
|
|
67
|
+
function runtimeWebSocket() {
|
|
68
|
+
const candidate = globalThis
|
|
69
|
+
.WebSocket;
|
|
70
|
+
if (!candidate) {
|
|
71
|
+
throw new Error("This Node.js runtime does not expose WebSocket. Use Node 22.22+ or Node 24.");
|
|
72
|
+
}
|
|
73
|
+
return candidate;
|
|
74
|
+
}
|
|
75
|
+
async function enroll(argv) {
|
|
76
|
+
const server = parseFlag(argv, "--server")?.replace(/\/+$/u, "");
|
|
77
|
+
const token = parseFlag(argv, "--token");
|
|
78
|
+
const alias = parseFlag(argv, "--alias") ?? os.hostname();
|
|
79
|
+
if (!server || !token) {
|
|
80
|
+
throw new Error("Usage: ssh-mcp-pro-agent enroll --server <url> --token <token> --alias <alias>");
|
|
81
|
+
}
|
|
82
|
+
const keyPair = ensurePemKeyPair(keyPath());
|
|
83
|
+
const response = await postJson(`${server}/api/agents/enroll`, {
|
|
84
|
+
token,
|
|
85
|
+
public_key: keyPair.publicKeyPem,
|
|
86
|
+
alias,
|
|
87
|
+
agent_version: process.env.npm_package_version ?? "unknown",
|
|
88
|
+
host: defaultHostMetadata(),
|
|
89
|
+
});
|
|
90
|
+
const config = {
|
|
91
|
+
server,
|
|
92
|
+
agentId: requireString(response.agent_id, "agent_id"),
|
|
93
|
+
alias: requireString(response.alias, "alias"),
|
|
94
|
+
publicKeyPem: keyPair.publicKeyPem,
|
|
95
|
+
privateKeyPem: keyPair.privateKeyPem,
|
|
96
|
+
controlPlanePublicKeyPem: requireString(response.control_plane_public_key, "control_plane_public_key"),
|
|
97
|
+
policy: requirePolicy(response.policy),
|
|
98
|
+
websocketUrl: requireString(response.websocket_url, "websocket_url"),
|
|
99
|
+
enrolledAt: nowIso(),
|
|
100
|
+
};
|
|
101
|
+
saveConfig(config);
|
|
102
|
+
output(`Agent enrolled: ${config.agentId} (${config.alias})`);
|
|
103
|
+
output(`Config: ${configPath()}`);
|
|
104
|
+
}
|
|
105
|
+
async function runAgent() {
|
|
106
|
+
const config = requireConfig();
|
|
107
|
+
const WebSocketCtor = runtimeWebSocket();
|
|
108
|
+
const executor = new AgentExecutor(config.policy, config.privateKeyPem);
|
|
109
|
+
const seenActions = new Map();
|
|
110
|
+
function rememberAction(actionId, deadline) {
|
|
111
|
+
const now = Date.now();
|
|
112
|
+
for (const [seenActionId, expiresAt] of seenActions.entries()) {
|
|
113
|
+
if (expiresAt <= now) {
|
|
114
|
+
seenActions.delete(seenActionId);
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
if (seenActions.has(actionId)) {
|
|
118
|
+
return false;
|
|
119
|
+
}
|
|
120
|
+
seenActions.set(actionId, new Date(deadline).getTime());
|
|
121
|
+
while (seenActions.size > 10_000) {
|
|
122
|
+
const oldest = seenActions.keys().next().value;
|
|
123
|
+
if (!oldest) {
|
|
124
|
+
break;
|
|
125
|
+
}
|
|
126
|
+
seenActions.delete(oldest);
|
|
127
|
+
}
|
|
128
|
+
return true;
|
|
129
|
+
}
|
|
130
|
+
await new Promise((resolve, reject) => {
|
|
131
|
+
const ws = new WebSocketCtor(config.websocketUrl);
|
|
132
|
+
ws.onopen = () => {
|
|
133
|
+
const hello = {
|
|
134
|
+
type: "agent.hello",
|
|
135
|
+
agent_id: config.agentId,
|
|
136
|
+
timestamp: nowIso(),
|
|
137
|
+
nonce: randomToken(16),
|
|
138
|
+
capabilities: Object.entries(config.policy.capabilities)
|
|
139
|
+
.filter(([, enabled]) => enabled)
|
|
140
|
+
.map(([capability]) => capability),
|
|
141
|
+
agent_version: process.env.npm_package_version ?? "unknown",
|
|
142
|
+
host: defaultHostMetadata(),
|
|
143
|
+
signature: "",
|
|
144
|
+
};
|
|
145
|
+
hello.signature = signEnvelope(hello, config.privateKeyPem);
|
|
146
|
+
ws.send(JSON.stringify(hello));
|
|
147
|
+
output(`Agent connected: ${config.agentId}`);
|
|
148
|
+
};
|
|
149
|
+
ws.onmessage = (event) => {
|
|
150
|
+
void (async () => {
|
|
151
|
+
const raw = typeof event.data === "string"
|
|
152
|
+
? event.data
|
|
153
|
+
: Buffer.from(event.data).toString("utf8");
|
|
154
|
+
const payload = JSON.parse(raw);
|
|
155
|
+
if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
|
|
156
|
+
return;
|
|
157
|
+
}
|
|
158
|
+
let envelope;
|
|
159
|
+
try {
|
|
160
|
+
envelope = parseControlPlaneEnvelope(payload);
|
|
161
|
+
}
|
|
162
|
+
catch {
|
|
163
|
+
return;
|
|
164
|
+
}
|
|
165
|
+
if (envelope.agent_id !== config.agentId) {
|
|
166
|
+
return;
|
|
167
|
+
}
|
|
168
|
+
if (!verifyEnvelope(envelope, config.controlPlanePublicKeyPem)) {
|
|
169
|
+
return;
|
|
170
|
+
}
|
|
171
|
+
if (envelope.type === "policy.update") {
|
|
172
|
+
const update = envelope;
|
|
173
|
+
config.policy = update.policy;
|
|
174
|
+
executor.updatePolicy(update.policy);
|
|
175
|
+
saveConfig(config);
|
|
176
|
+
return;
|
|
177
|
+
}
|
|
178
|
+
const action = envelope;
|
|
179
|
+
if (seenActions.has(action.action_id)) {
|
|
180
|
+
return;
|
|
181
|
+
}
|
|
182
|
+
if (new Date(action.deadline).getTime() < Date.now()) {
|
|
183
|
+
return;
|
|
184
|
+
}
|
|
185
|
+
if (action.policy_version !== config.policy.version &&
|
|
186
|
+
action.policy_version !== config.policy.version + 1) {
|
|
187
|
+
return;
|
|
188
|
+
}
|
|
189
|
+
rememberAction(action.action_id, action.deadline);
|
|
190
|
+
const result = await executor.execute(action);
|
|
191
|
+
ws.send(JSON.stringify(result));
|
|
192
|
+
})().catch((error) => {
|
|
193
|
+
process.stderr.write(`Agent action failed: ${error instanceof Error ? error.message : String(error)}\n`);
|
|
194
|
+
});
|
|
195
|
+
};
|
|
196
|
+
ws.onerror = (event) => reject(new Error(`WebSocket error: ${String(event)}`));
|
|
197
|
+
ws.onclose = () => resolve();
|
|
198
|
+
});
|
|
199
|
+
}
|
|
200
|
+
function status() {
|
|
201
|
+
if (!existsSync(configPath())) {
|
|
202
|
+
output("Agent is not enrolled.");
|
|
203
|
+
return;
|
|
204
|
+
}
|
|
205
|
+
const config = loadConfig();
|
|
206
|
+
output(`Agent ID: ${config.agentId}`);
|
|
207
|
+
output(`Alias: ${config.alias}`);
|
|
208
|
+
output(`Server: ${config.server}`);
|
|
209
|
+
output(`Profile: ${config.policy.profile}`);
|
|
210
|
+
output(`Config: ${configPath()}`);
|
|
211
|
+
}
|
|
212
|
+
function installService() {
|
|
213
|
+
const config = existsSync(configPath()) ? loadConfig() : undefined;
|
|
214
|
+
const command = `ssh-mcp-pro-agent run`;
|
|
215
|
+
if (process.platform === "win32") {
|
|
216
|
+
output("Windows service installation requires an elevated PowerShell session.");
|
|
217
|
+
output(`Use a service manager such as NSSM or PowerShell Scheduled Task to run: ${command}`);
|
|
218
|
+
output(`Agent config: ${configPath()}`);
|
|
219
|
+
return;
|
|
220
|
+
}
|
|
221
|
+
if (process.platform === "darwin") {
|
|
222
|
+
output("Create a launchd plist that runs:");
|
|
223
|
+
output(command);
|
|
224
|
+
output(`Agent config: ${configPath()}`);
|
|
225
|
+
return;
|
|
226
|
+
}
|
|
227
|
+
output("Create a systemd service with ExecStart:");
|
|
228
|
+
output(command);
|
|
229
|
+
output(`User=${process.env.USER ?? "sshautomator"}`);
|
|
230
|
+
output(`Agent=${config?.agentId ?? "not-enrolled"}`);
|
|
231
|
+
}
|
|
232
|
+
function uninstallService() {
|
|
233
|
+
if (process.platform === "win32") {
|
|
234
|
+
output("Remove the Windows service or scheduled task that runs ssh-mcp-pro-agent run.");
|
|
235
|
+
return;
|
|
236
|
+
}
|
|
237
|
+
if (process.platform === "darwin") {
|
|
238
|
+
output("Unload and remove the launchd plist that runs ssh-mcp-pro-agent run.");
|
|
239
|
+
return;
|
|
240
|
+
}
|
|
241
|
+
output("Disable and remove the systemd service that runs ssh-mcp-pro-agent run.");
|
|
242
|
+
}
|
|
243
|
+
export async function runAgentCli(argv) {
|
|
244
|
+
const command = argv[0] ?? "help";
|
|
245
|
+
switch (command) {
|
|
246
|
+
case "enroll":
|
|
247
|
+
await enroll(argv.slice(1));
|
|
248
|
+
break;
|
|
249
|
+
case "run":
|
|
250
|
+
await runAgent();
|
|
251
|
+
break;
|
|
252
|
+
case "status":
|
|
253
|
+
status();
|
|
254
|
+
break;
|
|
255
|
+
case "install-service":
|
|
256
|
+
installService();
|
|
257
|
+
break;
|
|
258
|
+
case "uninstall-service":
|
|
259
|
+
uninstallService();
|
|
260
|
+
break;
|
|
261
|
+
default:
|
|
262
|
+
output("Usage:");
|
|
263
|
+
output(" ssh-mcp-pro-agent enroll --server <url> --token <token> --alias <alias>");
|
|
264
|
+
output(" ssh-mcp-pro-agent run");
|
|
265
|
+
output(" ssh-mcp-pro-agent status");
|
|
266
|
+
output(" ssh-mcp-pro-agent install-service");
|
|
267
|
+
output(" ssh-mcp-pro-agent uninstall-service");
|
|
268
|
+
}
|
|
269
|
+
}
|
|
270
|
+
//# sourceMappingURL=agent-cli.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"agent-cli.js","sourceRoot":"","sources":["../../src/remote/agent-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EACL,gBAAgB,EAChB,MAAM,EACN,WAAW,EACX,YAAY,EACZ,cAAc,GAEf,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AA0B3E,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,YAAY,CAAC,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,OAAO;IACd,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAAoB,CAAC;AAC3E,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb;YACE,wBAAwB;YACxB,8BAA8B;YAC9B,2HAA2H;SAC5H,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,MAAuB;IACzC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,OAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,SAAS,GAAI,UAAqE;SACrF,SAAS,CAAC;IACb,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAc;IAClC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAe,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,oBAAoB,EAAE;QAC7D,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,YAAY;QAChC,KAAK;QACL,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS;QAC3D,IAAI,EAAE,mBAAmB,EAA8B;KACxD,CAAC,CAAC;IACH,MAAM,MAAM,GAAoB;QAC9B,MAAM;QACN,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QACrD,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QAC7C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,wBAAwB,EAAE,aAAa,CACrC,QAAQ,CAAC,wBAAwB,EACjC,0BAA0B,CAC3B;QACD,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtC,YAAY,EAAE,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC;QACpE,UAAU,EAAE,MAAM,EAAE;KACrB,CAAC;IACF,UAAU,CAAC,MAAM,CAAC,CAAC;IACnB,MAAM,CAAC,mBAAmB,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;IAC9D,MAAM,CAAC,WAAW,UAAU,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,SAAS,cAAc,CAAC,QAAgB,EAAE,QAAgB;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;gBACrB,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,WAAW,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM;YACR,CAAC;YACD,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAClD,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;YACf,MAAM,KAAK,GAAuB;gBAChC,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,MAAM,CAAC,OAAO;gBACxB,SAAS,EAAE,MAAM,EAAE;gBACnB,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;gBACtB,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;qBACrD,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC;qBAChC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,UAAwD,CAAC;gBAClF,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,SAAS;gBAC3D,IAAI,EAAE,mBAAmB,EAAE;gBAC3B,SAAS,EAAE,EAAE;aACd,CAAC;YACF,KAAK,CAAC,SAAS,GAAG,YAAY,CAC5B,KAA2C,EAC3C,MAAM,CAAC,aAAa,CACrB,CAAC;YACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,oBAAoB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,EAAE,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;YACvB,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,GAAG,GACP,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;gBAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACtE,OAAO;gBACT,CAAC;gBACD,IAAI,QAAsD,CAAC;gBAC3D,IAAI,CAAC;oBACH,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;gBAChD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;oBACzC,OAAO;gBACT,CAAC;gBACD,IACE,CAAC,cAAc,CACb,QAA8C,EAC9C,MAAM,CAAC,wBAAwB,CAChC,EACD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBACtC,MAAM,MAAM,GAAG,QAAQ,CAAC;oBACxB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC9B,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACrC,UAAU,CAAC,MAAM,CAAC,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,QAAQ,CAAC;gBACxB,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;oBACtC,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBACrD,OAAO;gBACT,CAAC;gBACD,IACE,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO;oBAC/C,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,EACnD,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC9C,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CACnF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM;IACb,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,aAAa,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,MAAM,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,WAAW,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,MAAM,CAAC,YAAY,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,WAAW,UAAU,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,OAAO,GAAG,uBAAuB,CAAC;IACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,uEAAuE,CAAC,CAAC;QAChF,MAAM,CAAC,2EAA2E,OAAO,EAAE,CAAC,CAAC;QAC7F,MAAM,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,mCAAmC,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,CAAC;QAChB,MAAM,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACnD,MAAM,CAAC,OAAO,CAAC,CAAC;IAChB,MAAM,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,MAAM,EAAE,OAAO,IAAI,cAAc,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,+EAA+E,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,sEAAsE,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IACD,MAAM,CAAC,yEAAyE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAClC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,QAAQ;YACX,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM;QACR,KAAK,KAAK;YACR,MAAM,QAAQ,EAAE,CAAC;YACjB,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,EAAE,CAAC;YACT,MAAM;QACR,KAAK,iBAAiB;YACpB,cAAc,EAAE,CAAC;YACjB,MAAM;QACR,KAAK,mBAAmB;YACtB,gBAAgB,EAAE,CAAC;YACnB,MAAM;QACR;YACE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjB,MAAM,CAAC,2EAA2E,CAAC,CAAC;YACpF,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAClC,MAAM,CAAC,4BAA4B,CAAC,CAAC;YACrC,MAAM,CAAC,qCAAqC,CAAC,CAAC;YAC9C,MAAM,CAAC,uCAAuC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
import type { ActionRequestEnvelope, ActionResultEnvelope, AgentPolicy } from "./types.js";
|
|
2
|
+
export declare class AgentExecutor {
|
|
3
|
+
private policy;
|
|
4
|
+
private readonly privateKeyPem;
|
|
5
|
+
constructor(policy: AgentPolicy, privateKeyPem: string);
|
|
6
|
+
updatePolicy(policy: AgentPolicy): void;
|
|
7
|
+
execute(action: ActionRequestEnvelope): Promise<ActionResultEnvelope>;
|
|
8
|
+
private executeAllowed;
|
|
9
|
+
private getSystemStatus;
|
|
10
|
+
private tailLogs;
|
|
11
|
+
private restartService;
|
|
12
|
+
private dockerLogs;
|
|
13
|
+
private dockerRestart;
|
|
14
|
+
private fileRead;
|
|
15
|
+
private fileWrite;
|
|
16
|
+
private runShell;
|
|
17
|
+
private runShellAsRoot;
|
|
18
|
+
private signResult;
|
|
19
|
+
}
|
|
20
|
+
export declare function defaultHostMetadata(): {
|
|
21
|
+
hostname: string;
|
|
22
|
+
os: string;
|
|
23
|
+
arch: NodeJS.Architecture;
|
|
24
|
+
platform: NodeJS.Platform;
|
|
25
|
+
};
|
|
26
|
+
//# sourceMappingURL=agent-executor.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"agent-executor.d.ts","sourceRoot":"","sources":["../../src/remote/agent-executor.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,WAAW,EAEZ,MAAM,YAAY,CAAC;AAiNpB,qBAAa,aAAa;IAEtB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,QAAQ,CAAC,aAAa;gBADtB,MAAM,EAAE,WAAW,EACV,aAAa,EAAE,MAAM;IAGxC,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAIjC,OAAO,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAwC7D,cAAc;IAsD5B,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,QAAQ;IA2ChB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,UAAU;IAiBlB,OAAO,CAAC,aAAa;YAaP,QAAQ;YAeR,SAAS;YAUT,QAAQ;IAgBtB,OAAO,CAAC,cAAc;IAqBtB,OAAO,CAAC,UAAU;CAMnB;AAED,wBAAgB,mBAAmB;;;;;EAOlC"}
|