typescript-virtual-container 1.1.3 → 1.1.5

package/dist/SSHMimic/index.js

@@ -1,5 +1,7 @@
+import { EventEmitter } from "node:events";
 import { Server as SshServer } from "ssh2";
 import { VirtualShell } from "../VirtualShell";
+import { runExec } from "./exec";
 import { loadOrCreateHostKey } from "./hostKey";
 /**
  * SSH server facade that wires the virtual shell runtime into ssh2 sessions.
@@ -8,7 +10,7 @@ import { loadOrCreateHostKey } from "./hostKey";
  * Create an instance, call {@link SshMimic.start}, and stop it with
  * {@link SshMimic.stop} when your process exits.
  */
-class SshMimic {
+class SshMimic extends EventEmitter {
     port;
     server;
     shell;
@@ -21,6 +23,7 @@ class SshMimic {
      * @param shell Optional preconfigured virtual shell instance to reuse.
      */
     constructor({ port, hostname = "typescript-vm", shell = new VirtualShell(hostname), }) {
+        super();
         this.port = port;
         this.shellHostname = hostname;
         this.server = null;
@@ -34,6 +37,8 @@ class SshMimic {
     async start() {
         const shell = this.shell;
         const privateKey = loadOrCreateHostKey();
+        // Ensure VirtualShell is fully initialized before accepting connections
+        await shell.ensureInitialized();
         this.server = new SshServer({
             hostKeys: [privateKey],
             ident: `SSH-2.0-${shell.hostname}`,
@@ -41,17 +46,23 @@ class SshMimic {
             let authUser = "root";
             let remoteAddress = "unknown";
             let sessionId = null;
+            this.emit("client:connect");
             client.on("authentication", (ctx) => {
                 shell;
                 if (ctx.method === "password") {
                     const candidateUser = ctx.username || "root";
                     remoteAddress = ctx.ip ?? remoteAddress;
                     if (!shell.users.verifyPassword(candidateUser, ctx.password ?? "")) {
+                        this.emit("auth:failure", {
+                            username: candidateUser,
+                            remoteAddress,
+                        });
                         ctx.reject();
                         return;
                     }
                     authUser = candidateUser;
                     sessionId = shell.users.registerSession(authUser, remoteAddress).id;
+                    this.emit("auth:success", { username: authUser, remoteAddress });
                     const homePath = `/home/${authUser}`;
                     if (!shell.vfs.exists(homePath)) {
                         shell.vfs.mkdir(homePath, 0o755);
@@ -65,6 +76,7 @@ class SshMimic {
             });
             client.on("close", () => {
                 shell.users.unregisterSession(sessionId);
+                this.emit("client:disconnect", { user: authUser });
                 sessionId = null;
             });
             client.on("ready", () => {
@@ -85,16 +97,19 @@ class SshMimic {
                         shell?.startInteractiveSession(stream, authUser, sessionId, remoteAddress, terminalSize);
                     });
                     session.on("exec", (acceptExec, _rejectExec, info) => {
-                        const _stream = acceptExec();
-                        shell?.executeCommand(info.command.trim(), authUser, `/home/${authUser}`);
+                        const stream = acceptExec();
+                        if (stream) {
+                            runExec(stream, info.command.trim(), authUser, shell.hostname, shell);
+                        }
                     });
                 });
             });
         });
         return new Promise((resolve, reject) => {
             this.server?.once("error", (err) => reject(err));
-            this.server?.listen(this.port, "127.0.0.1", () => {
+            this.server?.listen(this.port, "0.0.0.0", () => {
                 console.log(`SSH Mimic listening on port ${this.port}`);
+                this.emit("start", { port: this.port });
                 resolve(this.port);
             });
         });
@@ -106,8 +121,10 @@ class SshMimic {
         if (this.server) {
             this.server.close(() => {
                 console.log("SSH Mimic stopped");
+                this.emit("stop");
             });
         }
     }
 }
+export { SftpMimic } from "./sftp";
 export { SshMimic };

package/dist/SSHMimic/sftp.d.ts

@@ -0,0 +1,48 @@
+/** biome-ignore-all lint/style/useNamingConvention: const as enum */
+import { EventEmitter } from "node:events";
+import { Server as SshServer } from "ssh2";
+import type VirtualFileSystem from "../VirtualFileSystem";
+import { VirtualShell } from "../VirtualShell";
+import type { VirtualUserManager } from "../VirtualUserManager";
+export interface SftpMimicOptions {
+    port: number;
+    hostname?: string;
+    shell?: VirtualShell;
+    vfs?: VirtualFileSystem;
+    users?: VirtualUserManager;
+}
+export declare class SftpMimic extends EventEmitter {
+    port: number;
+    server: SshServer | null;
+    private readonly hostname;
+    private readonly shell;
+    private readonly vfs;
+    private readonly users;
+    private nextHandleId;
+    private handles;
+    constructor({ port, hostname, shell, vfs, users, }: SftpMimicOptions);
+    private getVfs;
+    private getUsers;
+    start(): Promise<number>;
+    stop(): void;
+    /**
+     * Resolves SFTP request paths with proper handling of relative paths.
+     * Relative paths (including ".") are resolved relative to the user's home directory.
+     * This is standard SFTP behavior where the "working directory" is always the home.
+     */
+    private resolveRequestPath;
+    /**
+     * Verifies that a target path is confined within the user's home directory.
+     * This implements chroot-like behavior for security.
+     * @param targetPath - The normalized target path
+     * @param authUser - The authenticated username
+     * @returns true if path is within home, false if traversal attempt detected
+     */
+    private isPathWithinHome;
+    private createAttrs;
+    private openHandle;
+    private getHandle;
+    private closeHandle;
+    private attachSftpHandlers;
+}
+//# sourceMappingURL=sftp.d.ts.map

package/dist/SSHMimic/sftp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sftp.d.ts","sourceRoot":"","sources":["../../src/SSHMimic/sftp.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,KAAK,iBAAiB,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AA2HhE,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACxB,KAAK,CAAC,EAAE,kBAAkB,CAAC;CAC3B;AAED,qBAAa,SAAU,SAAQ,YAAY;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAoB;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,OAAO,CAAiC;gBAEpC,EACX,IAAI,EACJ,QAA0B,EAC1B,KAAK,EACL,GAAG,EACH,KAAK,GACL,EAAE,gBAAgB;IAuBnB,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,QAAQ;IAIH,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAwJ9B,IAAI,IAAI,IAAI;IASnB;;;;OAIG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;;;;;OAMG;IACH,OAAO,CAAC,gBAAgB;IAkBxB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,kBAAkB;CA6a1B"}