ssh-mcp-pro 1.4.3 → 1.6.0

package/dist/remote/agent-managed-process.d.ts

@@ -0,0 +1,43 @@
+import type { AgentPolicy } from "./types.js";
+type SessionStatus = "running" | "exited" | "stopped" | "timed_out" | "failed";
+type StreamName = "stdout" | "stderr";
+interface OutputEvent {
+    cursor: number;
+    stream: StreamName;
+    text: string;
+}
+/** Agent-local bounded process registry. The control plane never owns a shell process. */
+export declare class ManagedProcessRegistry {
+    private readonly sessions;
+    private closed;
+    start(ownerId: string, agentId: string, args: Record<string, unknown>, stillAuthorized: () => boolean): Promise<{
+        process_id: string;
+        status: SessionStatus;
+        max_runtime_seconds: number;
+    }>;
+    read(ownerId: string, agentId: string, args: Record<string, unknown>, policy: AgentPolicy): {
+        process_id: string;
+        status: SessionStatus;
+        exit_code: number | null;
+        dropped_before_cursor: number;
+        next_cursor: number;
+        chunks: OutputEvent[];
+    };
+    input(ownerId: string, agentId: string, args: Record<string, unknown>): {
+        process_id: string;
+        written_bytes: number;
+        stdin_closed: boolean;
+    };
+    stop(ownerId: string, agentId: string, args: Record<string, unknown>): {
+        process_id: string;
+        status: SessionStatus;
+    };
+    stopAll(): void;
+    dispose(): void;
+    private lookup;
+    private cancel;
+    private append;
+    private pruneFinished;
+}
+export {};
+//# sourceMappingURL=agent-managed-process.d.ts.map

package/dist/remote/agent-managed-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-managed-process.d.ts","sourceRoot":"","sources":["../../src/remote/agent-managed-process.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,YAAY,CAAC;AAE/D,KAAK,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAC/E,KAAK,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACtC,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAmGD,0FAA0F;AAC1F,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,MAAM,CAAS;IAEjB,KAAK,CACT,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,eAAe,EAAE,MAAM,OAAO,GAC7B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC;IAyFtF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW;;;;;;gBAmBvE,WAAW,EAAE;;IAgB/B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;IA8BrE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;IAMpE,OAAO,IAAI,IAAI;IAIf,OAAO,IAAI,IAAI;IAUf,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;IAoBd,OAAO,CAAC,aAAa;CAStB"}

package/dist/remote/agent-managed-process.js

@@ -0,0 +1,291 @@
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { access } from "node:fs/promises";
+import path from "node:path";
+import { StringDecoder } from "node:string_decoder";
+const MAX_ACTIVE = 4;
+const MAX_RETAINED = 20;
+const MAX_BUFFER_BYTES = 64 * 1024;
+const MAX_BUFFER_EVENTS = 512;
+const MAX_INPUT_BYTES = 64 * 1024;
+const MAX_INPUT_PER_CALL = 4096;
+const MAX_RUNTIME_SECONDS = 600;
+const RETAIN_AFTER_EXIT_MS = 2 * 60 * 1000;
+function denied(message, code = "POLICY_DENIED") {
+    return Object.assign(new Error(message), { code });
+}
+function integerArg(value, fallback, min, max, name) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < min || value > max) {
+        throw denied(name + " must be an integer between " + min + " and " + max);
+    }
+    return value;
+}
+function executableShell(command) {
+    if (process.platform === "win32") {
+        return {
+            command: "powershell.exe",
+            args: ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", command],
+        };
+    }
+    return { command: "/bin/sh", args: ["-lc", command] };
+}
+function terminateTree(child) {
+    if (!child.pid) {
+        child.kill("SIGTERM");
+        return;
+    }
+    if (process.platform === "win32") {
+        // Never resolve a privileged OS utility through a potentially writable PATH.
+        const configuredRoot = process.env.SystemRoot;
+        const windowsRoot = configuredRoot && /^[A-Z]:\\Windows$/iu.test(configuredRoot)
+            ? configuredRoot
+            : String.raw `C:\Windows`;
+        const taskkill = path.win32.join(windowsRoot, "System32", "taskkill.exe");
+        const killer = spawn(taskkill, ["/PID", String(child.pid), "/T", "/F"], {
+            windowsHide: true,
+            stdio: "ignore",
+        });
+        killer.on("error", () => {
+            child.kill("SIGTERM");
+        });
+        killer.on("close", (code) => {
+            if (code !== 0 && child.exitCode === null && child.signalCode === null) {
+                child.kill("SIGTERM");
+            }
+        });
+        killer.unref();
+        return;
+    }
+    try {
+        process.kill(-child.pid, "SIGTERM");
+    }
+    catch {
+        child.kill("SIGTERM");
+    }
+    const timer = setTimeout(() => {
+        try {
+            if (child.pid && child.exitCode === null && child.signalCode === null) {
+                process.kill(-child.pid, "SIGKILL");
+            }
+        }
+        catch {
+            child.kill("SIGKILL");
+        }
+    }, 1500);
+    timer.unref();
+}
+/** Agent-local bounded process registry. The control plane never owns a shell process. */
+export class ManagedProcessRegistry {
+    sessions = new Map();
+    closed = false;
+    async start(ownerId, agentId, args, stillAuthorized) {
+        if (this.closed)
+            throw denied("Agent process manager is closed");
+        const command = args.command;
+        if (typeof command !== "string" || !command.trim() || command.length > 4096) {
+            throw denied("command must be a nonempty string of at most 4096 characters");
+        }
+        const maxRuntime = integerArg(args.max_runtime_seconds, 300, 1, MAX_RUNTIME_SECONDS, "max_runtime_seconds");
+        const cwd = args.cwd;
+        if (cwd !== undefined && (typeof cwd !== "string" || !cwd || cwd.length > 4096)) {
+            throw denied("cwd must be a nonempty path");
+        }
+        if (cwd !== undefined) {
+            try {
+                await access(cwd);
+            }
+            catch {
+                throw denied("cwd is not accessible");
+            }
+        }
+        if (!stillAuthorized())
+            throw denied("shell.exec was revoked before process start", "CAPABILITY_DENIED");
+        this.pruneFinished();
+        const active = [...this.sessions.values()].filter((x) => x.status === "running").length;
+        if (active >= MAX_ACTIVE)
+            throw denied("Too many active managed processes on this agent");
+        const shell = executableShell(command);
+        const child = spawn(shell.command, shell.args, {
+            cwd,
+            stdio: "pipe",
+            windowsHide: true,
+            detached: process.platform !== "win32",
+        });
+        const processId = "proc_" + randomUUID().replaceAll("-", "");
+        const session = {
+            id: processId,
+            ownerId,
+            agentId,
+            child,
+            status: "running",
+            exitCode: null,
+            chunks: [],
+            nextCursor: 0,
+            droppedBeforeCursor: 0,
+            bufferedBytes: 0,
+            inputBytes: 0,
+            timeout: setTimeout(() => {
+                if (session.status === "running") {
+                    session.status = "timed_out";
+                    terminateTree(child);
+                }
+            }, maxRuntime * 1000),
+            decoders: { stdout: new StringDecoder("utf8"), stderr: new StringDecoder("utf8") },
+        };
+        session.timeout.unref();
+        this.sessions.set(processId, session);
+        for (const stream of ["stdout", "stderr"]) {
+            child[stream].on("data", (chunk) => {
+                this.append(session, stream, session.decoders[stream].write(chunk));
+            });
+        }
+        // Writing to a process that exits concurrently must not crash the agent.
+        child.stdin.on("error", () => undefined);
+        child.on("error", () => {
+            session.status = "failed";
+            session.exitCode = 127;
+            this.append(session, "stderr", "Process could not be started");
+        });
+        child.on("close", (code) => {
+            clearTimeout(session.timeout);
+            for (const stream of ["stdout", "stderr"]) {
+                this.append(session, stream, session.decoders[stream].end());
+            }
+            if (session.status === "running")
+                session.status = "exited";
+            session.exitCode ??= code;
+            if (!this.closed) {
+                session.retention = setTimeout(() => {
+                    this.sessions.delete(session.id);
+                }, RETAIN_AFTER_EXIT_MS);
+                session.retention.unref();
+                this.pruneFinished();
+            }
+        });
+        return { process_id: processId, status: "running", max_runtime_seconds: maxRuntime };
+    }
+    read(ownerId, agentId, args, policy) {
+        const session = this.lookup(ownerId, agentId, args.process_id);
+        const cursor = integerArg(args.cursor, 0, 0, Number.MAX_SAFE_INTEGER, "cursor");
+        const maxBytes = integerArg(args.max_bytes, Math.min(8192, policy.maxOutputBytes), 1024, 32768, "max_bytes");
+        if (maxBytes > policy.maxOutputBytes)
+            throw denied("Output budget is below requested max_bytes");
+        const start = Math.max(cursor, session.droppedBeforeCursor);
+        const result = {
+            process_id: session.id,
+            status: session.status,
+            exit_code: session.exitCode,
+            dropped_before_cursor: session.droppedBeforeCursor,
+            next_cursor: start,
+            chunks: [],
+        };
+        for (const entry of session.chunks) {
+            if (entry.cursor < start)
+                continue;
+            const candidate = {
+                ...result,
+                next_cursor: entry.cursor + 1,
+                chunks: [...result.chunks, entry],
+            };
+            if (Buffer.byteLength(JSON.stringify(candidate), "utf8") > maxBytes)
+                break;
+            result.next_cursor = entry.cursor + 1;
+            result.chunks.push(entry);
+        }
+        return result;
+    }
+    input(ownerId, agentId, args) {
+        const session = this.lookup(ownerId, agentId, args.process_id);
+        const value = args.input;
+        if (typeof value !== "string" || Buffer.byteLength(value) > MAX_INPUT_PER_CALL) {
+            throw denied("input must be a string of at most 4096 bytes");
+        }
+        if (session.status !== "running" ||
+            session.child.stdin.destroyed ||
+            session.child.stdin.writableEnded) {
+            throw denied("Managed process is no longer accepting input");
+        }
+        const bytes = Buffer.byteLength(value);
+        if (session.inputBytes + bytes > MAX_INPUT_BYTES || session.child.stdin.writableLength > 8192) {
+            throw denied("Managed process input budget exceeded");
+        }
+        if (args.close_stdin !== undefined && typeof args.close_stdin !== "boolean") {
+            throw denied("close_stdin must be boolean");
+        }
+        session.inputBytes += bytes;
+        session.child.stdin.write(value);
+        if (args.close_stdin === true)
+            session.child.stdin.end();
+        return {
+            process_id: session.id,
+            written_bytes: bytes,
+            stdin_closed: args.close_stdin === true,
+        };
+    }
+    stop(ownerId, agentId, args) {
+        const session = this.lookup(ownerId, agentId, args.process_id);
+        this.cancel(session);
+        return { process_id: session.id, status: session.status };
+    }
+    stopAll() {
+        for (const session of this.sessions.values())
+            this.cancel(session);
+    }
+    dispose() {
+        this.closed = true;
+        for (const session of this.sessions.values()) {
+            clearTimeout(session.timeout);
+            if (session.retention)
+                clearTimeout(session.retention);
+            this.cancel(session);
+        }
+        this.sessions.clear();
+    }
+    lookup(ownerId, agentId, id) {
+        const item = typeof id === "string" ? this.sessions.get(id) : undefined;
+        if (item?.ownerId !== ownerId || item.agentId !== agentId) {
+            throw denied("Process not found for this agent and user");
+        }
+        return item;
+    }
+    cancel(session) {
+        if (session.status !== "running")
+            return;
+        session.status = "stopped";
+        clearTimeout(session.timeout);
+        terminateTree(session.child);
+    }
+    append(session, stream, text) {
+        if (this.closed || !text)
+            return;
+        const characters = Array.from(text);
+        for (let offset = 0; offset < characters.length; offset += 128) {
+            const part = characters.slice(offset, offset + 128).join("");
+            const entry = { cursor: session.nextCursor++, stream, text: part };
+            session.chunks.push(entry);
+            session.bufferedBytes += Buffer.byteLength(part, "utf8");
+            while (session.bufferedBytes > MAX_BUFFER_BYTES ||
+                session.chunks.length > MAX_BUFFER_EVENTS) {
+                const removed = session.chunks.shift();
+                if (!removed)
+                    break;
+                session.bufferedBytes -= Buffer.byteLength(removed.text, "utf8");
+                session.droppedBeforeCursor = removed.cursor + 1;
+            }
+        }
+    }
+    pruneFinished() {
+        const finished = [...this.sessions.values()].filter((session) => session.status !== "running");
+        while (finished.length > MAX_RETAINED) {
+            const removed = finished.shift();
+            if (!removed)
+                break;
+            if (removed.retention)
+                clearTimeout(removed.retention);
+            this.sessions.delete(removed.id);
+        }
+    }
+}
+//# sourceMappingURL=agent-managed-process.js.map

package/dist/remote/agent-managed-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-managed-process.js","sourceRoot":"","sources":["../../src/remote/agent-managed-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA0BpD,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,SAAS,MAAM,CAAC,OAAe,EAAE,OAAwB,eAAe;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,QAAgB,EAChB,GAAW,EACX,GAAW,EACX,IAAY;IAEZ,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC5F,MAAM,MAAM,CAAC,IAAI,GAAG,8BAA8B,GAAG,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,KAAqC;IAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,6EAA6E;QAC7E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9C,MAAM,WAAW,GACf,cAAc,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC;YAC1D,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,YAAY,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YACtE,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACvE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,CAAC;IACT,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,OAAO,sBAAsB;IAChB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACtD,MAAM,GAAG,KAAK,CAAC;IAEvB,KAAK,CAAC,KAAK,CACT,OAAe,EACf,OAAe,EACf,IAA6B,EAC7B,eAA8B;QAE9B,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAC5E,MAAM,MAAM,CAAC,8DAA8D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,CAC3B,IAAI,CAAC,mBAAmB,EACxB,GAAG,EACH,CAAC,EACD,mBAAmB,EACnB,qBAAqB,CACtB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;YAChF,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,eAAe,EAAE;YACpB,MAAM,MAAM,CAAC,6CAA6C,EAAE,mBAAmB,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACxF,IAAI,MAAM,IAAI,UAAU;YAAE,MAAM,MAAM,CAAC,iDAAiD,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE;YAC7C,GAAG;YACH,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAmB;YAC9B,EAAE,EAAE,SAAS;YACb,OAAO;YACP,OAAO;YACP,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,CAAC;YACb,mBAAmB,EAAE,CAAC;YACtB,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE;gBACvB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;oBAC7B,aAAa,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;YACrB,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE;SACnF,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;YACnD,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,yEAAyE;QACzE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC1B,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;gBACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC5D,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC,EAAE,oBAAoB,CAAC,CAAC;gBACzB,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAe,EAAE,IAA6B,EAAE,MAAmB;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,UAAU,CACzB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,EACrC,IAAI,EACJ,KAAK,EACL,WAAW,CACZ,CAAC;QACF,IAAI,QAAQ,GAAG,MAAM,CAAC,cAAc;YAClC,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,qBAAqB,EAAE,OAAO,CAAC,mBAAmB;YAClD,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,EAAmB;SAC5B,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;gBAAE,SAAS;YACnC,MAAM,SAAS,GAAG;gBAChB,GAAG,MAAM;gBACT,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBAC7B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;aAClC,CAAC;YACF,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,GAAG,QAAQ;gBAAE,MAAM;YAC3E,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAe,EAAE,IAA6B;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,kBAAkB,EAAE,CAAC;YAC/E,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;QAC/D,CAAC;QACD,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS;YAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EACjC,CAAC;YACD,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,UAAU,GAAG,KAAK,GAAG,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,EAAE,CAAC;YAC9F,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5E,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACzD,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;SACxC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAe,EAAE,IAA6B;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO;QACL,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,OAAO,CAAC,SAAS;gBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAEO,MAAM,CAAC,OAAe,EAAE,OAAe,EAAE,EAAW;QAC1D,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,IAAI,EAAE,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC1D,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,OAAuB;QACpC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACzC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QAC3B,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAEO,MAAM,CAAC,OAAuB,EAAE,MAAkB,EAAE,IAAY;QACtE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,OAAO;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzD,OACE,OAAO,CAAC,aAAa,GAAG,gBAAgB;gBACxC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,iBAAiB,EACzC,CAAC;gBACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO;oBAAE,MAAM;gBACpB,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACjE,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO;gBAAE,MAAM;YACpB,IAAI,OAAO,CAAC,SAAS;gBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}

package/dist/remote/control-plane.d.ts

@@ -19,11 +19,14 @@ export declare class RemoteControlPlane {
     readonly oauth: OAuthHandler;
     readonly agentHandler: AgentWebSocketHandler;
     readonly dashboard: WebDashboardHandler;
+    private readonly enrollment;
     constructor(config?: RemoteConfig);
     initialize(): Promise<void>;
     close(): void;
     private cleanupEphemeralState;
     private handleGoogleOAuthCallback;
+    /** Keep credential-exchange routes together without inflating OAuth dispatch complexity. */
+    private handleOAuthGrantRequest;
     private handleOAuthRequest;
     handleHttp(req: IncomingMessage, res: ServerResponse, pathname: string): Promise<boolean>;
     handleUpgrade(req: IncomingMessage, socket: Duplex, head: Buffer<ArrayBufferLike>, pathname: string): boolean;
@@ -41,8 +44,6 @@ export declare class RemoteControlPlane {
     private authenticate;
     private sendUnauthorized;
     private callRemoteTool;
-    private createEnrollmentToken;
-    private installCommand;
     private updateAgentPolicy;
     private revokeAgent;
     private dispatchAction;

package/dist/remote/control-plane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/remote/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,OAAO,EAWL,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAkBrB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAMV,YAAY,EAKb,MAAM,YAAY,CAAC;AAKpB,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAa;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;gBAE5B,MAAM,eAAqB;IAoCjC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,KAAK,IAAI,IAAI;IAiBb,OAAO,CAAC,qBAAqB;YAaf,yBAAyB;YASzB,kBAAkB;IAoC1B,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgD/F,aAAa,CACX,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO;YAII,SAAS;IAoEvB;;;;OAIG;YACW,eAAe;YA8Cf,iBAAiB;YA8CjB,SAAS;YAyCT,mBAAmB;YAkCnB,iBAAiB;YAsDjB,YAAY;IAiB1B,OAAO,CAAC,gBAAgB;YAWV,cAAc;IA4D5B,OAAO,CAAC,qBAAqB;IAmD7B,OAAO,CAAC,cAAc;IA8BtB,OAAO,CAAC,iBAAiB;IAsDzB,OAAO,CAAC,WAAW;YAkBL,cAAc;IA4H5B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,iBAAiB;CAM1B;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI5E;AAED,wBAAgB,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,GAAG,MAAM,CAE/E"}
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/remote/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,OAAO,EAWL,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAiBrB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EACL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAMV,YAAY,EAKb,MAAM,YAAY,CAAC;AAKpB,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAa;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;gBAExC,MAAM,eAAqB;IAwCjC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,KAAK,IAAI,IAAI;IAiBb,OAAO,CAAC,qBAAqB;YAaf,yBAAyB;IASvC,4FAA4F;YAC9E,uBAAuB;YAgBvB,kBAAkB;IAmC1B,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgD/F,aAAa,CACX,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO;YAII,SAAS;IAoEvB;;;;OAIG;YACW,eAAe;YA8Cf,iBAAiB;YA8CjB,SAAS;YAyCT,mBAAmB;YAkCnB,iBAAiB;YAsDjB,YAAY;IAiB1B,OAAO,CAAC,gBAAgB;YAWV,cAAc;IA4D5B,OAAO,CAAC,iBAAiB;IAsDzB,OAAO,CAAC,WAAW;YAkBL,cAAc;IA4H5B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,iBAAiB;CAM1B;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI5E;AAED,wBAAgB,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,GAAG,MAAM,CAE/E"}

package/dist/remote/control-plane.js

@@ -3,14 +3,16 @@ import { createMcpHandler, isLegacyRequest, McpServer } from "@modelcontextproto
 import { toMcpWebRequest, sendMcpWebResponse } from "../mcp-http-web.js";
 import { ensurePemKeyPair, hashSecret, id, keyId, loadJwtKeyPair, nowIso, randomToken, signEnvelope, verifyRemoteAccessToken, } from "./crypto.js";
 import { loadRemoteConfig } from "./config.js";
-import { isRecord, asString, negotiateMcpProtocolVersion, quotePosixArg, quotePowerShellArg, addNoStore, safeError, isValidEd25519PublicKey, readJson, sanitizeAgent, } from "./http-util.js";
+import { isRecord, asString, negotiateMcpProtocolVersion, addNoStore, safeError, isValidEd25519PublicKey, readJson, sanitizeAgent, } from "./http-util.js";
 import { listRemoteToolDescriptors } from "./mcp-tools.js";
-import { createAgentPolicy, mergeCustomPolicy } from "./policy.js";
+import { mergeCustomPolicy } from "./policy.js";
+import { safeStoredActionArgs } from "./action-record-sanitize.js";
 import { parseAgentHostMetadata } from "./schemas.js";
 import { hasCapability } from "./scopes.js";
 import { RemoteStore } from "./store.js";
 import { OAuthHandler } from "./oauth-handler.js";
 import { WebDashboardHandler } from "./web-dashboard.js";
+import { AgentEnrollmentService } from "./agent-enrollment.js";
 import { AgentWebSocketHandler, } from "./agent-handler.js";
 import { TOOL_CAPABILITY_MAP } from "./types.js";
 import { jsonResponse } from "./util.js";
@@ -28,12 +30,14 @@ export class RemoteControlPlane {
     oauth;
     agentHandler;
     dashboard;
+    enrollment;
     constructor(config = loadRemoteConfig()) {
         this.config = config;
         this.store = new RemoteStore(config.databaseUrl);
         this.controlPlaneKeyPair = ensurePemKeyPair(config.controlPlaneSigningKeyPath);
         this.oauth = new OAuthHandler(config, this.store, this.authorizeTransactions, () => this.requireJwtKeyPair(), (event) => this.audit(event));
         this.agentHandler = new AgentWebSocketHandler(config, this.store, this.agentConnections, this.agentHelloNonces, this.pendingActions, (event) => this.audit(event));
+        this.enrollment = new AgentEnrollmentService(this.config, this.store, (event) => this.audit(event));
         this.dashboard = new WebDashboardHandler({
             config: this.config,
             store: this.store,
@@ -41,7 +45,7 @@ export class RemoteControlPlane {
             agentHandler: this.agentHandler,
             getJwtKeyPair: () => this.requireJwtKeyPair(),
             audit: (event) => this.audit(event),
-            createEnrollmentToken: (principal, args) => this.createEnrollmentToken(principal, args),
+            createEnrollmentToken: (principal, args) => this.enrollment.createEnrollmentToken(principal, args),
             updateAgentPolicy: (principal, agent, policy) => this.updateAgentPolicy(principal, agent, policy),
             revokeAgent: (principal, agent) => this.revokeAgent(principal, agent),
             resolveAgent: (userId, value) => this.resolveAgent(userId, value),
@@ -87,6 +91,18 @@ export class RemoteControlPlane {
             return;
         await this.oauth.handleGoogleCallback(req, res);
     }
+    /** Keep credential-exchange routes together without inflating OAuth dispatch complexity. */
+    async handleOAuthGrantRequest(req, res, pathname) {
+        if (pathname === "/oauth/token" && req.method === "POST") {
+            await this.oauth.handleToken(req, res);
+            return true;
+        }
+        if (pathname === "/oauth/revoke" && req.method === "POST") {
+            await this.oauth.handleRevoke(req, res);
+            return true;
+        }
+        return false;
+    }
     async handleOAuthRequest(req, res, pathname) {
         if (pathname === "/oauth/register" && req.method === "POST") {
             await this.oauth.handleRegister(req, res);
@@ -108,8 +124,7 @@ export class RemoteControlPlane {
             await this.handleGoogleOAuthCallback(req, res);
             return true;
         }
-        if (pathname === "/oauth/token" && req.method === "POST") {
-            await this.oauth.handleToken(req, res);
+        if (await this.handleOAuthGrantRequest(req, res, pathname)) {
             return true;
         }
         if (pathname === "/oauth/jwks.json" && req.method === "GET") {
@@ -315,7 +330,7 @@ export class RemoteControlPlane {
         const principal = await this.authenticate(req);
         if (pathname === "/api/agents/enrollment-tokens" && req.method === "POST") {
             const body = await readJson(req);
-            const result = this.createEnrollmentToken(principal, body);
+            const result = this.enrollment.createEnrollmentToken(principal, body);
             jsonResponse(res, 201, result, addNoStore());
             return;
         }
@@ -456,11 +471,11 @@ export class RemoteControlPlane {
             return { agents: this.store.listAgents(principal.userId).map(sanitizeAgent) };
         }
         if (tool === "create_enrollment_token") {
-            return this.createEnrollmentToken(principal, args);
+            return this.enrollment.createEnrollmentToken(principal, args);
         }
         if (tool === "get_agent_install_command") {
             const agent = this.requireAgent(principal.userId, args);
-            return this.installCommand(agent, undefined);
+            return this.enrollment.installCommand(agent, undefined);
         }
         if (tool === "update_agent_policy") {
             const agent = this.requireAgent(principal.userId, args);
@@ -490,77 +505,6 @@ export class RemoteControlPlane {
         const actionResult = await this.dispatchAction(principal, agent, tool, capability, args);
         return { action: actionResult };
     }
-    createEnrollmentToken(principal, args) {
-        if (!hasCapability(principal.capabilities, "agents.admin")) {
-            throw safeError("INVALID_SCOPE", "agents:admin scope is required", 403);
-        }
-        const alias = asString(args.alias)?.trim();
-        if (!alias) {
-            throw safeError("FORBIDDEN", "alias is required");
-        }
-        const profile = asString(args.requested_profile) ?? "read-only";
-        const policy = createAgentPolicy(profile === "operations" || profile === "full-admin" ? profile : "read-only");
-        const now = nowIso();
-        const existing = this.store.getAgentByAlias(principal.userId, alias);
-        if (existing && existing.status !== "revoked") {
-            throw safeError("FORBIDDEN", "Agent alias already exists");
-        }
-        const agent = {
-            id: id("agt"),
-            userId: principal.userId,
-            alias,
-            status: "pending",
-            profile: policy.profile,
-            policy,
-            policyVersion: policy.version,
-            createdAt: now,
-            updatedAt: now,
-        };
-        const token = randomToken(32);
-        this.store.insertAgent(agent);
-        this.store.insertEnrollmentToken({
-            id: id("enr"),
-            agentId: agent.id,
-            userId: principal.userId,
-            tokenHash: hashSecret(token),
-            expiresAt: new Date(Date.now() + this.config.enrollmentTokenTtlSeconds * 1000).toISOString(),
-            createdAt: now,
-        });
-        this.audit({
-            userId: principal.userId,
-            agentId: agent.id,
-            eventType: "enrollment_token_created",
-            severity: "info",
-            metadata: { alias, profile: policy.profile },
-        });
-        return { ...this.installCommand(agent, token), enrollment_token: token };
-    }
-    installCommand(agent, token) {
-        const tokenArgument = token ?? "<create-a-new-enrollment-token>";
-        const posixBase = [
-            "npx --yes --package ssh-mcp-pro@latest ssh-mcp-pro-agent enroll",
-            `--server ${quotePosixArg(this.config.publicBaseUrl)}`,
-            `--token ${quotePosixArg(tokenArgument)}`,
-            `--alias ${quotePosixArg(agent.alias)}`,
-        ].join(" ");
-        const powershellBase = [
-            "npx --yes --package ssh-mcp-pro@latest ssh-mcp-pro-agent enroll",
-            `--server ${quotePowerShellArg(this.config.publicBaseUrl)}`,
-            `--token ${quotePowerShellArg(tokenArgument)}`,
-            `--alias ${quotePowerShellArg(agent.alias)}`,
-        ].join(" ");
-        return {
-            agent_id: agent.id,
-            alias: agent.alias,
-            token_recoverable: Boolean(token),
-            commands: {
-                npm: posixBase,
-                run: "npx --yes --package ssh-mcp-pro@latest ssh-mcp-pro-agent run",
-                windows: powershellBase,
-            },
-            expires_in_seconds: token ? this.config.enrollmentTokenTtlSeconds : undefined,
-        };
-    }
     updateAgentPolicy(principal, agent, value) {
         if (!hasCapability(principal.capabilities, "agents.admin")) {
             throw safeError("INVALID_SCOPE", "agents:admin scope is required", 403);
@@ -654,7 +598,7 @@ export class RemoteControlPlane {
             agentId: agent.id,
             tool,
             capability,
-            args,
+            args: safeStoredActionArgs(tool, args),
             status: "sent",
             issuedAt,
             deadline,