telegram-ssh-bot 2.0.0 → 2.2.0

package/dist/utils/commandUtils.js

@@ -0,0 +1,94 @@
+/**
+ * Command sanitization utility
+ * Provides safe command execution by sanitizing and validating commands
+ */
+/**
+ * Dangerous patterns that should be blocked or warned about
+ */
+const DANGEROUS_PATTERNS = [
+    { pattern: /;\s*rm\s+-rf/i, description: "rm -rf chain" },
+    { pattern: /\|\s*rm\s+/i, description: "pipe to rm" },
+    { pattern: />\s*\/dev\//i, description: "device redirection" },
+    { pattern: /\$\([^)]+\)/, description: "command substitution" },
+    { pattern: /`[^`]+`/, description: "backtick execution" },
+    { pattern: /\$\{[^}]+\}/, description: "variable expansion" },
+    { pattern: /&&\s*rm/i, description: "chained rm" },
+    { pattern: /\|\|\s*rm/i, description: "or-chained rm" },
+    { pattern: />\s*\//i, description: "root file write" },
+    { pattern: /<\s*\//i, description: "root file read" },
+    { pattern: /sudo\s+/i, description: "sudo commands" },
+    { pattern: /chmod\s+777/i, description: "dangerous permissions" },
+    { pattern: /chown\s+.*:.*\s+\//i, description: "ownership changes" },
+];
+/**
+ * Shell metacharacters that need escaping
+ */
+const SHELL_METACHARACTERS = /[;&|`$\\]/g;
+/**
+ * Sanitize a command for safe execution
+ */
+export function sanitizeCommand(command) {
+    const warnings = [];
+    let sanitized = command.trim();
+    // Check for dangerous patterns
+    for (const { pattern, description } of DANGEROUS_PATTERNS) {
+        if (pattern.test(sanitized)) {
+            warnings.push(`Dangerous pattern detected: ${description}`);
+        }
+    }
+    // Remove null bytes
+    sanitized = sanitized.replace(/\0/g, "");
+    // Escape shell metacharacters for SSH
+    sanitized = sanitized.replace(SHELL_METACHARACTERS, "\\$&");
+    return {
+        original: command,
+        sanitized,
+        warnings,
+        isSafe: warnings.length === 0,
+    };
+}
+/**
+ * Validate a command for execution
+ */
+export function validateCommand(command) {
+    if (!command || command.trim().length === 0) {
+        return { valid: false, error: "Command cannot be empty" };
+    }
+    if (command.length > 10000) {
+        return {
+            valid: false,
+            error: "Command is too long (max 10000 characters)",
+        };
+    }
+    const sanitized = sanitizeCommand(command);
+    // Block commands with dangerous patterns
+    if (sanitized.warnings.length > 0) {
+        return {
+            valid: false,
+            error: `Command contains dangerous patterns: ${sanitized.warnings.join(", ")}`,
+        };
+    }
+    return { valid: true, data: sanitized };
+}
+/**
+ * Parse command arguments safely
+ */
+export function parseCommandArgs(input) {
+    const trimmed = input.trim();
+    const spaceIndex = trimmed.indexOf(" ");
+    if (spaceIndex === -1) {
+        return { command: trimmed, args: "" };
+    }
+    return {
+        command: trimmed.slice(0, spaceIndex),
+        args: trimmed.slice(spaceIndex + 1).trim(),
+    };
+}
+/**
+ * Escape a string for safe use in shell
+ */
+export function escapeShellArg(arg) {
+    // Use single quotes and escape any existing single quotes
+    return `'${arg.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=commandUtils.js.map

package/dist/utils/commandUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandUtils.js","sourceRoot":"","sources":["../../src/utils/commandUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH;;GAEG;AACH,MAAM,kBAAkB,GAAuB;IAC7C,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE;IACzD,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE;IACrD,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC9D,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC/D,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACzD,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC7D,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE;IAClD,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE;IACvD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE;IACtD,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACrD,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE;IACrD,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACjE,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,EAAE;CACrE,CAAC;AAEF;;GAEG;AACH,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAE1C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAE/B,+BAA+B;IAC/B,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,kBAAkB,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEzC,sCAAsC;IACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAE5D,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,SAAS;QACT,QAAQ;QACR,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe;IAEf,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,4CAA4C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAE3C,yCAAyC;IACzC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,wCAAwC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAI5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAExC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACxC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;QACrC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,0DAA0D;IAC1D,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC"}

package/dist/utils/fileUtils.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Async file operations utility
+ */
+/**
+ * Check if a file exists
+ */
+export declare function fileExists(filePath: string): Promise<boolean>;
+/**
+ * Ensure a directory exists, create if it doesn't
+ */
+export declare function ensureDir(dirPath: string): Promise<void>;
+/**
+ * Read a file as string
+ */
+export declare function readFile(filePath: string): Promise<string>;
+/**
+ * Read a file as JSON
+ */
+export declare function readJsonFile<T>(filePath: string): Promise<T>;
+/**
+ * Write string to a file
+ */
+export declare function writeFile(filePath: string, content: string): Promise<void>;
+/**
+ * Write object as JSON to a file
+ */
+export declare function writeJsonFile<T>(filePath: string, data: T, pretty?: boolean): Promise<void>;
+/**
+ * Delete a file
+ */
+export declare function deleteFile(filePath: string): Promise<void>;
+/**
+ * Get file stats
+ */
+export declare function getFileStats(filePath: string): Promise<{
+    size: number;
+    createdAt: Date;
+    modifiedAt: Date;
+}>;
+//# sourceMappingURL=fileUtils.d.ts.map

package/dist/utils/fileUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileUtils.d.ts","sourceRoot":"","sources":["../../src/utils/fileUtils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAUH;;GAEG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnE;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9D;AAED;;GAEG;AACH,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAahE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAUlE;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,CAAC,EACP,MAAM,GAAE,OAAc,GACrB,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5D,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,CAAC;CAClB,CAAC,CAiBD"}

package/dist/utils/fileUtils.js

@@ -0,0 +1,114 @@
+/**
+ * Async file operations utility
+ */
+import { promises as fs } from "fs";
+import * as path from "path";
+import { FileNotFoundError, FileReadError, FileWriteError, } from "../errors/index.js";
+/**
+ * Check if a file exists
+ */
+export async function fileExists(filePath) {
+    try {
+        await fs.access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Ensure a directory exists, create if it doesn't
+ */
+export async function ensureDir(dirPath) {
+    try {
+        await fs.mkdir(dirPath, { recursive: true });
+    }
+    catch (error) {
+        throw new FileWriteError(dirPath, error instanceof Error ? error : new Error(String(error)));
+    }
+}
+/**
+ * Read a file as string
+ */
+export async function readFile(filePath) {
+    try {
+        const content = await fs.readFile(filePath, "utf-8");
+        return content;
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            throw new FileNotFoundError(filePath);
+        }
+        throw new FileReadError(filePath, error instanceof Error ? error : new Error(String(error)));
+    }
+}
+/**
+ * Read a file as JSON
+ */
+export async function readJsonFile(filePath) {
+    const content = await readFile(filePath);
+    try {
+        return JSON.parse(content);
+    }
+    catch (error) {
+        throw new FileReadError(filePath, error instanceof Error ? error : new Error(String(error)));
+    }
+}
+/**
+ * Write string to a file
+ */
+export async function writeFile(filePath, content) {
+    try {
+        // Ensure parent directory exists
+        const dir = path.dirname(filePath);
+        await ensureDir(dir);
+        await fs.writeFile(filePath, content, "utf-8");
+    }
+    catch (error) {
+        if (error instanceof FileNotFoundError || error instanceof FileWriteError) {
+            throw error;
+        }
+        throw new FileWriteError(filePath, error instanceof Error ? error : new Error(String(error)));
+    }
+}
+/**
+ * Write object as JSON to a file
+ */
+export async function writeJsonFile(filePath, data, pretty = true) {
+    const content = pretty ? JSON.stringify(data, null, 2) : JSON.stringify(data);
+    await writeFile(filePath, content);
+}
+/**
+ * Delete a file
+ */
+export async function deleteFile(filePath) {
+    try {
+        await fs.unlink(filePath);
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            throw new FileNotFoundError(filePath);
+        }
+        throw new FileWriteError(filePath, error instanceof Error ? error : new Error(String(error)));
+    }
+}
+/**
+ * Get file stats
+ */
+export async function getFileStats(filePath) {
+    try {
+        const stats = await fs.stat(filePath);
+        return {
+            size: stats.size,
+            createdAt: stats.birthtime,
+            modifiedAt: stats.mtime,
+        };
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            throw new FileNotFoundError(filePath);
+        }
+        throw new FileReadError(filePath, error instanceof Error ? error : new Error(String(error)));
+    }
+}
+//# sourceMappingURL=fileUtils.js.map

package/dist/utils/fileUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fileUtils.js","sourceRoot":"","sources":["../../src/utils/fileUtils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,cAAc,GACf,MAAM,oBAAoB,CAAC;AAE5B;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,cAAc,CACtB,OAAO,EACP,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,QAAQ,EACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,QAAgB;IACpD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CACrB,QAAQ,EACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,OAAe;IAEf,IAAI,CAAC;QACH,iCAAiC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YAC1E,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,QAAQ,EACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,IAAO,EACP,SAAkB,IAAI;IAEtB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9E,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,QAAQ,EACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IAKjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,KAAK;SACxB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,QAAQ,EACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Utility modules index - exports all utilities
+ */
+export * from "./commandUtils.js";
+export * from "./fileUtils.js";
+export * from "./pathUtils.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,7 @@
+/**
+ * Utility modules index - exports all utilities
+ */
+export * from "./commandUtils.js";
+export * from "./fileUtils.js";
+export * from "./pathUtils.js";
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC"}

package/dist/utils/pathUtils.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Path validation utility
+ * Provides safe path handling and traversal prevention
+ */
+import type { ValidationResult } from "../types/index.js";
+/**
+ * Validate a path for safe file operations
+ */
+export declare function validatePath(inputPath: string, basePath?: string): ValidationResult<string>;
+/**
+ * Validate a host address
+ */
+export declare function validateHost(host: string): ValidationResult<string>;
+/**
+ * Validate a port number
+ */
+export declare function validatePort(port: number): ValidationResult<number>;
+/**
+ * Parse and validate a port from string
+ */
+export declare function parsePort(portStr: string): ValidationResult<number>;
+/**
+ * Get the directory name from a path
+ */
+export declare function getDirName(filePath: string): string;
+/**
+ * Get the base name from a path
+ */
+export declare function getBaseName(filePath: string): string;
+/**
+ * Join path segments safely
+ */
+export declare function joinPaths(...segments: string[]): string;
+/**
+ * Expand tilde (~) in path to home directory
+ * @param inputPath - Path that may contain tilde
+ * @returns Path with tilde expanded to home directory
+ */
+export declare function expandTilde(inputPath: string): string;
+//# sourceMappingURL=pathUtils.d.ts.map

package/dist/utils/pathUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathUtils.d.ts","sourceRoot":"","sources":["../../src/utils/pathUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AA2B1D;;GAEG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,GAChB,gBAAgB,CAAC,MAAM,CAAC,CAgC1B;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAgCnE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAUnE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAQnE;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CASrD"}

package/dist/utils/pathUtils.js

@@ -0,0 +1,140 @@
+/**
+ * Path validation utility
+ * Provides safe path handling and traversal prevention
+ */
+import * as path from "path";
+/**
+ * Allowed base paths for file operations
+ */
+const ALLOWED_PATHS = [
+    "/home",
+    "/var/log",
+    "/var/www",
+    "/etc/nginx",
+    "/etc/systemd",
+    "/opt",
+    "/tmp",
+];
+/**
+ * Forbidden paths that should never be accessed
+ */
+const FORBIDDEN_PATHS = [
+    "/etc/shadow",
+    "/etc/passwd",
+    "/root/.ssh",
+    "/etc/ssh",
+    "/proc",
+    "/sys",
+];
+/**
+ * Validate a path for safe file operations
+ */
+export function validatePath(inputPath, basePath) {
+    // Resolve the path
+    const resolved = path.resolve(basePath || "/", inputPath);
+    const normalized = path.normalize(resolved);
+    // Check for path traversal attempts
+    if (inputPath.includes("..")) {
+        return { valid: false, error: "Path traversal detected" };
+    }
+    // Check for null bytes
+    if (inputPath.includes("\0")) {
+        return { valid: false, error: "Invalid null byte in path" };
+    }
+    // Check forbidden paths
+    for (const forbidden of FORBIDDEN_PATHS) {
+        if (normalized.startsWith(forbidden)) {
+            return { valid: false, error: "Access to path is forbidden" };
+        }
+    }
+    // Check allowed paths (if whitelist mode)
+    const isAllowed = ALLOWED_PATHS.some((allowed) => normalized.startsWith(allowed));
+    if (!isAllowed) {
+        return { valid: false, error: "Path is not in allowed list" };
+    }
+    return { valid: true, data: normalized };
+}
+/**
+ * Validate a host address
+ */
+export function validateHost(host) {
+    if (!host || host.trim().length === 0) {
+        return { valid: false, error: "Host cannot be empty" };
+    }
+    const trimmed = host.trim();
+    // Check for valid hostname or IP format
+    const hostnameRegex = /^[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*$/;
+    const ipv4Regex = /^(\d{1,3}\.){3}\d{1,3}$/;
+    const ipv6Regex = /^([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}$/;
+    const isValidHost = hostnameRegex.test(trimmed) ||
+        ipv4Regex.test(trimmed) ||
+        ipv6Regex.test(trimmed);
+    if (!isValidHost) {
+        return { valid: false, error: "Invalid host format" };
+    }
+    // Validate IPv4 octets if it's an IPv4 address
+    if (ipv4Regex.test(trimmed)) {
+        const octets = trimmed.split(".").map(Number);
+        const validOctets = octets.every((octet) => octet >= 0 && octet <= 255);
+        if (!validOctets) {
+            return { valid: false, error: "Invalid IPv4 address" };
+        }
+    }
+    return { valid: true, data: trimmed };
+}
+/**
+ * Validate a port number
+ */
+export function validatePort(port) {
+    if (!Number.isInteger(port)) {
+        return { valid: false, error: "Port must be an integer" };
+    }
+    if (port < 1 || port > 65535) {
+        return { valid: false, error: "Port must be between 1 and 65535" };
+    }
+    return { valid: true, data: port };
+}
+/**
+ * Parse and validate a port from string
+ */
+export function parsePort(portStr) {
+    const parsed = parseInt(portStr, 10);
+    if (isNaN(parsed)) {
+        return { valid: false, error: "Invalid port number" };
+    }
+    return validatePort(parsed);
+}
+/**
+ * Get the directory name from a path
+ */
+export function getDirName(filePath) {
+    return path.dirname(filePath);
+}
+/**
+ * Get the base name from a path
+ */
+export function getBaseName(filePath) {
+    return path.basename(filePath);
+}
+/**
+ * Join path segments safely
+ */
+export function joinPaths(...segments) {
+    return path.join(...segments);
+}
+/**
+ * Expand tilde (~) in path to home directory
+ * @param inputPath - Path that may contain tilde
+ * @returns Path with tilde expanded to home directory
+ */
+export function expandTilde(inputPath) {
+    if (inputPath.startsWith("~/")) {
+        const home = process.env.HOME ?? "/root";
+        return path.join(home, inputPath.slice(2));
+    }
+    if (inputPath === "~") {
+        return process.env.HOME ?? "/root";
+    }
+    return inputPath;
+}
+//# sourceMappingURL=pathUtils.js.map

package/dist/utils/pathUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathUtils.js","sourceRoot":"","sources":["../../src/utils/pathUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B;;GAEG;AACH,MAAM,aAAa,GAAa;IAC9B,OAAO;IACP,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,MAAM;IACN,MAAM;CACP,CAAC;AAEF;;GAEG;AACH,MAAM,eAAe,GAAa;IAChC,aAAa;IACb,aAAa;IACb,YAAY;IACZ,UAAU;IACV,OAAO;IACP,MAAM;CACP,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,SAAiB,EACjB,QAAiB;IAEjB,mBAAmB;IACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE5C,oCAAoC;IACpC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED,uBAAuB;IACvB,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC9D,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,SAAS,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/C,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAC/B,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE5B,wCAAwC;IACxC,MAAM,aAAa,GACjB,+FAA+F,CAAC;IAClG,MAAM,SAAS,GAAG,yBAAyB,CAAC;IAC5C,MAAM,SAAS,GAAG,0CAA0C,CAAC;IAE7D,MAAM,WAAW,GACf,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QACvB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE1B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACxD,CAAC;IAED,+CAA+C;IAC/C,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IACrE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAErC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACxD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,GAAG,QAAkB;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -1,25 +1,51 @@
 {
   "name": "telegram-ssh-bot",
-  "version": "2.0.0",
+  "version": "2.2.0",
+  "description": "A Telegram bot for secure SSH server management and remote command execution",
   "type": "module",
   "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "author": "farhanzzg",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/farhanzzg/telegram-ssh.git"
+  },
+  "bugs": {
+    "url": "https://github.com/farhanzzg/telegram-ssh/issues"
+  },
+  "homepage": "https://github.com/farhanzzg/telegram-ssh#readme",
   "bin": {
     "telegram-ssh-bot": "./dist/index.js"
   },
   "files": [
     "dist/**/*",
-    "README.md",
-    "LICENSE"
+    "scripts/**/*",
+    "deploy/.env.example",
+    "README.md"
   ],
   "engines": {
     "node": ">=18.0.0"
   },
   "keywords": [
     "telegram",
+    "telegram-bot",
     "ssh",
+    "ssh-client",
     "bot",
     "remote",
-    "server-management"
+    "server-management",
+    "server-administration",
+    "devops",
+    "remote-access",
+    "command-execution",
+    "terminal"
   ],
   "pkg": {
     "scripts": "dist/**/*.js",
@@ -54,7 +80,7 @@
     "start": "node dist/index.js",
     "dev": "tsc --watch",
     "clean": "rm -rf dist",
-    "postinstall": "node -e \"console.log('Telegram SSH Bot installed. Run: telegram-ssh-bot')\"",
+    "postinstall": "node scripts/postinstall.js",
     "build:binary": "npm run build && pkg .",
     "build:binary:linux": "npm run build && pkg . --targets node18-linux-x64",
     "build:binary:macos": "npm run build && pkg . --targets node18-macos-x64",

package/scripts/build.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+set -e
+
+echo "Building Telegram SSH Bot..."
+
+# Clean previous builds
+rm -rf dist build
+
+# Compile TypeScript
+echo "Compiling TypeScript..."
+npm run build
+
+# Create build directory
+mkdir -p build
+
+# Build binaries for current platform
+echo "Creating binary executable..."
+npx pkg . --targets node18-linux-x64 --output build/telegram-ssh-bot
+
+echo "Build complete! Binary available at: build/telegram-ssh-bot"

package/scripts/postinstall.js

@@ -0,0 +1,87 @@
+#!/usr/bin/env node
+/**
+ * Post-install script for npm/pnpm global installation
+ * Sets up the .env configuration file if it doesn't exist
+ */
+
+import { envFileExists, main } from "./setup-env.js";
+
+/**
+ * Check if this is a global installation
+ * @returns {boolean} True if running as a global install
+ */
+function isGlobalInstall() {
+  // Check various npm config indicators for global install
+  const npmConfigGlobal = process.env.npm_config_global;
+  const npmPackageConfig = process.env.npm_package_config;
+
+  // npm_config_global is 'true' when installed with -g flag
+  if (npmConfigGlobal === "true") {
+    return true;
+  }
+
+  // Check if we're in a global node_modules directory
+  // This is a heuristic that works for most cases
+  const cwd = process.cwd();
+  if (
+    cwd.includes("node_modules") &&
+    (cwd.includes("/usr/local") ||
+      cwd.includes("/usr/lib") ||
+      cwd.includes("/lib/node_modules") ||
+      cwd.includes(".npm-global") ||
+      cwd.includes(".pnpm-global"))
+  ) {
+    return true;
+  }
+
+  // Check for pnpm global install
+  if (
+    process.env.npm_config_user_agent &&
+    process.env.npm_config_user_agent.includes("pnpm")
+  ) {
+    // pnpm sets different paths for global installs
+    if (cwd.includes("pnpm-global") || cwd.includes(".pnpm-global")) {
+      return true;
+    }
+  }
+
+  return false;
+}
+
+/**
+ * Run the postinstall script
+ */
+function runPostinstall() {
+  // Only run for global installations
+  if (!isGlobalInstall()) {
+    console.log("Local installation detected. Skipping .env setup.");
+    console.log(
+      "For global installation, the .env file would be created at ~/.config/telegram-ssh-bot/.env",
+    );
+    return;
+  }
+
+  console.log("Global installation detected. Setting up configuration...");
+
+  // Check if .env already exists
+  if (envFileExists()) {
+    console.log("Configuration file already exists. Skipping setup.");
+    console.log("Configuration location: ~/.config/telegram-ssh-bot/.env");
+    return;
+  }
+
+  // Run the main setup function
+  const result = main({ generateKey: true, silent: false });
+
+  if (result.success) {
+    console.log("\nConfiguration setup complete!");
+    console.log(
+      'Run "telegram-ssh-bot" to start the bot after configuring your credentials.',
+    );
+  } else {
+    console.error("Configuration setup failed:", result.message);
+  }
+}
+
+// Run the postinstall script
+runPostinstall();