typescript-virtual-container 1.1.1-b → 1.1.1-c

package/dist/VirtualShell/shellParser.js

@@ -0,0 +1,207 @@
+/** Parse a shell command line into a structured pipeline */
+export function parseShellPipeline(rawInput) {
+    const trimmed = rawInput.trim();
+    if (!trimmed) {
+        return { commands: [], isValid: true };
+    }
+    const commands = [];
+    const tokenized = tokenizePipeline(trimmed);
+    if (tokenized.error) {
+        return {
+            commands: [],
+            isValid: false,
+            error: tokenized.error,
+        };
+    }
+    const pipeTokens = tokenized.tokens;
+    for (const token of pipeTokens) {
+        const cmd = parseCommandWithRedirections(token);
+        if (!cmd.isValid) {
+            return {
+                commands: [],
+                isValid: false,
+                error: cmd.error,
+            };
+        }
+        if (cmd.command) {
+            commands.push(cmd.command);
+        }
+    }
+    return { commands, isValid: true };
+}
+/** Tokenize input by pipes, respecting quoted strings */
+function tokenizePipeline(input) {
+    const tokens = [];
+    let current = "";
+    let inQuotes = false;
+    let quoteChar = "";
+    let i = 0;
+    while (i < input.length) {
+        const ch = input[i];
+        if ((ch === '"' || ch === "'") && (i === 0 || input[i - 1] !== "\\")) {
+            if (!inQuotes) {
+                inQuotes = true;
+                quoteChar = ch;
+            }
+            else if (ch === quoteChar) {
+                inQuotes = false;
+            }
+            current += ch;
+            i++;
+        }
+        else if (ch === "|" && !inQuotes) {
+            if (!current.trim()) {
+                return {
+                    tokens: [],
+                    error: "Syntax error near unexpected token '|'",
+                };
+            }
+            tokens.push(current.trim());
+            current = "";
+            i++;
+        }
+        else {
+            current += ch;
+            i++;
+        }
+    }
+    if (inQuotes) {
+        return {
+            tokens: [],
+            error: "Syntax error: unterminated quote",
+        };
+    }
+    if (!current.trim()) {
+        return {
+            tokens: [],
+            error: "Syntax error near unexpected token '|'",
+        };
+    }
+    tokens.push(current.trim());
+    return { tokens };
+}
+/** Parse a single command with its redirections (>, >>, <) */
+function parseCommandWithRedirections(token) {
+    const parts = tokenizeCommand(token);
+    if (parts.length === 0) {
+        return { isValid: true };
+    }
+    const cmdParts = [];
+    let inputFile;
+    let outputFile;
+    let appendOutput = false;
+    let i = 0;
+    while (i < parts.length) {
+        const part = parts[i];
+        if (part === "<") {
+            i++;
+            if (i >= parts.length) {
+                return {
+                    isValid: false,
+                    error: "Syntax error: expected filename after <",
+                };
+            }
+            inputFile = parts[i];
+            i++;
+        }
+        else if (part === ">>") {
+            i++;
+            if (i >= parts.length) {
+                return {
+                    isValid: false,
+                    error: "Syntax error: expected filename after >>",
+                };
+            }
+            outputFile = parts[i];
+            appendOutput = true;
+            i++;
+        }
+        else if (part === ">") {
+            i++;
+            if (i >= parts.length) {
+                return {
+                    isValid: false,
+                    error: "Syntax error: expected filename after >",
+                };
+            }
+            outputFile = parts[i];
+            appendOutput = false;
+            i++;
+        }
+        else {
+            cmdParts.push(part);
+            i++;
+        }
+    }
+    if (cmdParts.length === 0) {
+        return { isValid: true };
+    }
+    const name = cmdParts[0].toLowerCase();
+    const args = cmdParts.slice(1);
+    return {
+        command: {
+            name,
+            args,
+            inputFile,
+            outputFile,
+            appendOutput,
+        },
+        isValid: true,
+    };
+}
+/** Tokenize a command, respecting quotes and handling >> vs > */
+function tokenizeCommand(input) {
+    const tokens = [];
+    let current = "";
+    let inQuotes = false;
+    let quoteChar = "";
+    let i = 0;
+    while (i < input.length) {
+        const ch = input[i];
+        const next = input[i + 1];
+        // Handle quotes
+        if ((ch === '"' || ch === "'") && (i === 0 || input[i - 1] !== "\\")) {
+            if (!inQuotes) {
+                inQuotes = true;
+                quoteChar = ch;
+            }
+            else if (ch === quoteChar) {
+                inQuotes = false;
+                quoteChar = "";
+            }
+            else {
+                current += ch;
+            }
+            i++;
+        }
+        else if (ch === " " && !inQuotes) {
+            if (current) {
+                tokens.push(current);
+                current = "";
+            }
+            i++;
+        }
+        else if ((ch === ">" || ch === "<") && !inQuotes) {
+            if (current) {
+                tokens.push(current);
+                current = "";
+            }
+            if (ch === ">" && next === ">") {
+                tokens.push(">>");
+                i += 2;
+            }
+            else {
+                tokens.push(ch);
+                i++;
+            }
+        }
+        else {
+            current += ch;
+            i++;
+        }
+    }
+    if (current) {
+        tokens.push(current);
+    }
+    return tokens;
+}

package/dist/VirtualUserManager/index.d.ts

@@ -0,0 +1,168 @@
+import type VirtualFileSystem from "../VirtualFileSystem";
+/** Persisted virtual user credential record. */
+export interface VirtualUserRecord {
+    /** Unique login name. */
+    username: string;
+    /** Per-user random salt used for password hashing. */
+    salt: string;
+    /** Scrypt-derived password hash in hex encoding. */
+    passwordHash: string;
+}
+/** Runtime representation of authenticated SSH session. */
+export interface VirtualActiveSession {
+    /** Stable session identifier (UUID). */
+    id: string;
+    /** Username bound to session. */
+    username: string;
+    /** Virtual terminal identifier (pts/*). */
+    tty: string;
+    /** Remote client IP or host label. */
+    remoteAddress: string;
+    /** ISO-8601 start timestamp. */
+    startedAt: string;
+}
+/**
+ * Persistent user, sudoers, and active-session manager for the shell runtime.
+ *
+ * Passwords are hashed with scrypt and stored in the backing virtual filesystem.
+ */
+export declare class VirtualUserManager {
+    private readonly vfs;
+    private readonly defaultRootPassword;
+    private readonly autoSudoForNewUsers;
+    private readonly usersPath;
+    private readonly sudoersPath;
+    private readonly quotasPath;
+    private readonly authDirPath;
+    private readonly users;
+    private readonly sudoers;
+    private readonly quotas;
+    private readonly activeSessions;
+    private nextTty;
+    /**
+     * Creates a user manager instance backed by a virtual filesystem.
+     *
+     * @param vfs Backing virtual filesystem used for persistence.
+     * @param defaultRootPassword Initial root password used when root is created.
+     * @param autoSudoForNewUsers Whether newly created users are added to sudoers.
+     */
+    constructor(vfs: VirtualFileSystem, defaultRootPassword?: string, autoSudoForNewUsers?: boolean);
+    /**
+     * Loads users/sudoers from disk and ensures root account exists.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Sets max allowed bytes under /home/<username>.
+     *
+     * @param username Target username.
+     * @param maxBytes Quota ceiling in bytes.
+     */
+    setQuotaBytes(username: string, maxBytes: number): Promise<void>;
+    /**
+     * Removes quota for a user.
+     *
+     * @param username Target username.
+     */
+    clearQuota(username: string): Promise<void>;
+    /**
+     * Gets configured quota in bytes for a user.
+     *
+     * @param username Target username.
+     * @returns Quota in bytes, or null when unlimited.
+     */
+    getQuotaBytes(username: string): number | null;
+    /**
+     * Computes current usage under /home/<username>.
+     *
+     * @param username Target username.
+     * @returns Current usage in bytes.
+     */
+    getUsageBytes(username: string): number;
+    /**
+     * Validates that writing file content would not exceed user quota.
+     *
+     * Quotas are enforced only for writes inside /home/<username>.
+     *
+     * @param username Authenticated user.
+     * @param targetPath Target file path.
+     * @param nextContent New file content.
+     */
+    assertWriteWithinQuota(username: string, targetPath: string, nextContent: string | Buffer): void;
+    /**
+     * Verifies plaintext password against stored record.
+     *
+     * @param username User login name.
+     * @param password Plaintext password candidate.
+     * @returns True when credentials are valid.
+     */
+    verifyPassword(username: string, password: string): boolean;
+    /**
+     * Creates user, home directory, and sudo access entry.
+     *
+     * @param username New username.
+     * @param password Initial plaintext password.
+     */
+    addUser(username: string, password: string): Promise<void>;
+    /**
+     * Deletes existing non-root user account.
+     *
+     * @param username Username to remove.
+     */
+    deleteUser(username: string): Promise<void>;
+    /**
+     * Checks whether user is member of sudoers set.
+     *
+     * @param username Username to test.
+     * @returns True when user can run sudo.
+     */
+    isSudoer(username: string): boolean;
+    /**
+     * Grants sudo access to existing user.
+     *
+     * @param username Username to promote.
+     */
+    addSudoer(username: string): Promise<void>;
+    /**
+     * Revokes sudo access from user.
+     *
+     * @param username Username to demote.
+     */
+    removeSudoer(username: string): Promise<void>;
+    /**
+     * Registers active session and allocates tty id.
+     *
+     * @param username Session username.
+     * @param remoteAddress Session source address.
+     * @returns Registered session descriptor.
+     */
+    registerSession(username: string, remoteAddress: string): VirtualActiveSession;
+    /**
+     * Unregisters active session when connection closes.
+     *
+     * @param sessionId Session identifier; ignored when nullish.
+     */
+    unregisterSession(sessionId: string | null | undefined): void;
+    /**
+     * Updates username/address metadata for existing session.
+     *
+     * @param sessionId Session identifier; ignored when nullish.
+     * @param username New username value.
+     * @param remoteAddress New remote address value.
+     */
+    updateSession(sessionId: string | null | undefined, username: string, remoteAddress: string): void;
+    /**
+     * Lists active sessions sorted by start time.
+     *
+     * @returns Snapshot of active session descriptors.
+     */
+    listActiveSessions(): VirtualActiveSession[];
+    private loadFromVfs;
+    private loadSudoersFromVfs;
+    private loadQuotasFromVfs;
+    private persist;
+    private createRecord;
+    private hashPassword;
+    private validateUsername;
+    private validatePassword;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/VirtualUserManager/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/VirtualUserManager/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,iBAAiB,MAAM,sBAAsB,CAAC;AAE1D,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IACjC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACpC,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,sCAAsC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,qBAAa,kBAAkB;IAmB7B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IApBrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2C;IAC1E,OAAO,CAAC,OAAO,CAAK;IAEpB;;;;;;OAMG;gBAEe,GAAG,EAAE,iBAAiB,EACtB,mBAAmB,GAAE,MAAe,EACpC,mBAAmB,GAAE,OAAc;IAGrD;;OAEG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAYxC;;;;;OAKG;IACU,aAAa,CACzB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAchB;;;;OAIG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxD;;;;;OAKG;IACI,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAIrD;;;;;OAKG;IACI,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAS9C;;;;;;;;OAQG;IACI,sBAAsB,CAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAAG,MAAM,GAC1B,IAAI;IAmCP;;;;;;OAMG;IACI,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IASlE;;;;;OAKG;IACU,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBvE;;;;OAIG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBxD;;;;;OAKG;IACI,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI1C;;;;OAIG;IACU,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD;;;;OAIG;IACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU1D;;;;;;OAMG;IACI,eAAe,CACrB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACnB,oBAAoB;IAavB;;;;OAIG;IACI,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAQpE;;;;;;OAMG;IACI,aAAa,CACnB,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACnB,IAAI;IAiBP;;;;OAIG;IACI,kBAAkB,IAAI,oBAAoB,EAAE;IAMnD,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,iBAAiB;YAwBX,OAAO;IAmCrB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,gBAAgB;CAKxB"}