typescript-virtual-container 1.2.3 → 1.2.5

package/dist/VirtualShell/index.d.ts

@@ -1,7 +1,7 @@
 import { EventEmitter } from "node:events";
 import type { CommandContext, CommandResult } from "../types/commands";
 import type { ShellStream } from "../types/streams";
-import VirtualFileSystem from "../VirtualFileSystem";
+import VirtualFileSystem, { type VfsOptions } from "../VirtualFileSystem";
 import { VirtualUserManager } from "../VirtualUserManager";
 export interface ShellProperties {
     kernel: string;
@@ -15,7 +15,6 @@ export interface ShellProperties {
  * client API.
  */
 declare class VirtualShell extends EventEmitter {
-    basePath: string;
     vfs: VirtualFileSystem;
     users: VirtualUserManager;
     hostname: string;
@@ -26,9 +25,9 @@ declare class VirtualShell extends EventEmitter {
      *
      * @param hostname Virtual hostname used for prompts and idents.
      * @param properties Customizable properties shown in `uname -a` and similar commands.
-     * @param basePath Optional base path for the virtual filesystem (defaults to process.cwd()).
+     * @param vfsOptions Optional VFS persistence options (mode, snapshotPath).
      */
-    constructor(hostname: string, properties?: ShellProperties, basePath?: string);
+    constructor(hostname: string, properties?: ShellProperties, vfsOptions?: VfsOptions);
     /**
      * Ensures initialization is complete before allowing operations.
      * Call this before any authentication or command execution.

package/dist/VirtualShell/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/VirtualShell/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,iBAAiB,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG3D,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACb;AAwCD;;;;;GAKG;AACH,cAAM,YAAa,SAAQ,YAAY;IACtC,QAAQ,EAAE,MAAM,CAAO;IACvB,GAAG,EAAE,iBAAiB,CAAC;IACvB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,CAAC,WAAW,CAAgB;IAEnC;;;;;;OAMG;gBAEF,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,eAAe,EAC5B,QAAQ,CAAC,EAAE,MAAM;IA0BlB;;;OAGG;IACU,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/C;;;;;;OAMG;IACH,UAAU,CACT,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GACvE,IAAI;IASP;;;;;;OAMG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAMrE;;;;;;;OAOG;IAEH,uBAAuB,CACtB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC1C,IAAI;IAgBP;;;;OAIG;IACI,MAAM,IAAI,iBAAiB,GAAG,IAAI;IAIzC;;;;OAIG;IACI,QAAQ,IAAI,kBAAkB,GAAG,IAAI;IAI5C;;;;OAIG;IACI,WAAW,IAAI,MAAM;IAI5B;;;;;;OAMG;IACI,eAAe,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,MAAM,GACtB,IAAI;CAKP;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/VirtualShell/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,iBAAiB,EAAE,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG3D,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACb;AAmBD;;;;;GAKG;AACH,cAAM,YAAa,SAAQ,YAAY;IACtC,GAAG,EAAE,iBAAiB,CAAC;IACvB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,CAAC,WAAW,CAAgB;IAEnC;;;;;;OAMG;gBAEF,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,eAAe,EAC5B,UAAU,CAAC,EAAE,UAAU;IAqBxB;;;OAGG;IACU,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/C;;;;;;OAMG;IACH,UAAU,CACT,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,GACvE,IAAI;IASP;;;;;;OAMG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAMrE;;;;;;;OAOG;IAEH,uBAAuB,CACtB,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC1C,IAAI;IAgBP;;;;OAIG;IACI,MAAM,IAAI,iBAAiB,GAAG,IAAI;IAIzC;;;;OAIG;IACI,QAAQ,IAAI,kBAAkB,GAAG,IAAI;IAI5C;;;;OAIG;IACI,WAAW,IAAI,MAAM;IAI5B;;;;;;OAMG;IACI,eAAe,CACrB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,MAAM,GACtB,IAAI;CAKP;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/VirtualShell/index.js

@@ -1,8 +1,7 @@
-import { randomBytes } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { createCustomCommand, registerCommand, runCommand } from "../commands";
 import { createPerfLogger } from "../utils/perfLogger";
-import VirtualFileSystem from "../VirtualFileSystem";
+import VirtualFileSystem, {} from "../VirtualFileSystem";
 import { VirtualUserManager } from "../VirtualUserManager";
 import { startShell } from "./shell";
 const defaultShellProperties = {
@@ -11,21 +10,6 @@ const defaultShellProperties = {
     arch: "x86_64",
 };
 const perf = createPerfLogger("VirtualShell");
-let cachedRootPassword = null;
-function resolveRootPassword() {
-    if (cachedRootPassword) {
-        return cachedRootPassword;
-    }
-    const configured = process.env.SSH_MIMIC_ROOT_PASSWORD;
-    if (configured && configured.trim().length > 0) {
-        cachedRootPassword = configured.trim();
-        return cachedRootPassword;
-    }
-    const generated = randomBytes(18).toString("base64url");
-    cachedRootPassword = generated;
-    console.warn(`[ssh-mimic] SSH_MIMIC_ROOT_PASSWORD missing; generated ephemeral root password: ${generated}`);
-    return generated;
-}
 function resolveAutoSudoForNewUsers() {
     const configured = process.env.SSH_MIMIC_AUTO_SUDO_NEW_USERS;
     if (!configured) {
@@ -40,7 +24,6 @@ function resolveAutoSudoForNewUsers() {
  * client API.
  */
 class VirtualShell extends EventEmitter {
-    basePath = ".";
     vfs;
     users;
     hostname;
@@ -51,16 +34,15 @@ class VirtualShell extends EventEmitter {
      *
      * @param hostname Virtual hostname used for prompts and idents.
      * @param properties Customizable properties shown in `uname -a` and similar commands.
-     * @param basePath Optional base path for the virtual filesystem (defaults to process.cwd()).
+     * @param vfsOptions Optional VFS persistence options (mode, snapshotPath).
      */
-    constructor(hostname, properties, basePath) {
+    constructor(hostname, properties, vfsOptions) {
         super();
         perf.mark("constructor");
         this.hostname = hostname;
         this.properties = properties || defaultShellProperties;
-        this.basePath = basePath || ".";
-        this.vfs = new VirtualFileSystem(this.basePath);
-        this.users = new VirtualUserManager(this.vfs, resolveRootPassword(), resolveAutoSudoForNewUsers());
+        this.vfs = new VirtualFileSystem(vfsOptions ?? {});
+        this.users = new VirtualUserManager(this.vfs, resolveAutoSudoForNewUsers());
         // Store references to avoid TypeScript "used before assigned" errors
         const vfs = this.vfs;
         const users = this.users;

package/dist/VirtualUserManager/index.d.ts

@@ -29,7 +29,6 @@ export interface VirtualActiveSession {
  */
 export declare class VirtualUserManager extends EventEmitter {
     private readonly vfs;
-    private readonly defaultRootPassword;
     private readonly autoSudoForNewUsers;
     private static readonly recordCache;
     private static readonly fastPasswordHash;
@@ -49,7 +48,7 @@ export declare class VirtualUserManager extends EventEmitter {
      * @param defaultRootPassword Initial root password used when root is created.
      * @param autoSudoForNewUsers Whether newly created users are added to sudoers.
      */
-    constructor(vfs: VirtualFileSystem, defaultRootPassword?: string, autoSudoForNewUsers?: boolean);
+    constructor(vfs: VirtualFileSystem, autoSudoForNewUsers?: boolean);
     /**
      * Loads users/sudoers from disk and ensures root account exists.
      * Also creates the current system user if not already present.
@@ -107,6 +106,13 @@ export declare class VirtualUserManager extends EventEmitter {
      * @param password Initial plaintext password.
      */
     addUser(username: string, password: string): Promise<void>;
+    /**
+     * Retrieves stored password hash for a user, or null if user does not exist.
+     *
+     * @param username Target username.
+     * @returns Password hash in hex encoding, or null when user is not found.
+     */
+    getPasswordHash(username: string): string | null;
     /**
      * Updates password for an existing user account.
      *
@@ -173,8 +179,40 @@ export declare class VirtualUserManager extends EventEmitter {
     private persist;
     private writeIfChanged;
     private createRecord;
-    private hashPassword;
+    hasPassword(username: string): boolean;
+    /**
+     * Hashes plaintext password with per-user salt using scrypt.
+     *
+     * @param password Plaintext password.
+     * @returns Hex-encoded password hash.
+     */
+    hashPassword(password: string): string;
     private validateUsername;
     private validatePassword;
+    private readonly authorizedKeys;
+    /**
+     * Adds an SSH public key for a user, enabling public-key authentication.
+     *
+     * @param username Target user.
+     * @param algo Key algorithm (e.g. "ssh-rsa", "ssh-ed25519").
+     * @param data Raw key data as a Buffer (the base64-decoded key bytes).
+     */
+    addAuthorizedKey(username: string, algo: string, data: Buffer): void;
+    /**
+     * Removes all authorized keys for a user.
+     *
+     * @param username Target user.
+     */
+    removeAuthorizedKeys(username: string): void;
+    /**
+     * Returns the list of authorized keys for a user.
+     * Returns an empty array when no keys are registered.
+     *
+     * @param username Target user.
+     */
+    getAuthorizedKeys(username: string): Array<{
+        algo: string;
+        data: Buffer;
+    }>;
 }
 //# sourceMappingURL=index.d.ts.map

package/dist/VirtualUserManager/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/VirtualUserManager/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,iBAAiB,MAAM,sBAAsB,CAAC;AAE1D,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IACjC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACpC,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,sCAAsC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;CAClB;AAYD;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;IAqBlD,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAtBrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAwC;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2C;IAC1E,OAAO,CAAC,OAAO,CAAK;IAEpB;;;;;;OAMG;gBAEe,GAAG,EAAE,iBAAiB,EACtB,mBAAmB,GAAE,MAAe,EACpC,mBAAmB,GAAE,OAAc;IAMrD;;;OAGG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAyCxC;;;;;OAKG;IACU,aAAa,CACzB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAehB;;;;OAIG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxD;;;;;OAKG;IACI,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKrD;;;;;OAKG;IACI,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAU9C;;;;;;;;OAQG;IACI,sBAAsB,CAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAAG,MAAM,GAC1B,IAAI;IAoCP;;;;;;OAMG;IACI,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUlE;;;;;OAKG;IACU,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BvE;;;;;OAKG;IACU,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa3E;;;;OAIG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxD;;;;;OAKG;IACI,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAK1C;;;;OAIG;IACU,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvD;;;;OAIG;IACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW1D;;;;;;OAMG;IACI,eAAe,CACrB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACnB,oBAAoB;IAkBvB;;;;OAIG;IACI,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAiBpE;;;;;;OAMG;IACI,aAAa,CACnB,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACnB,IAAI;IAkBP;;;;OAIG;IACI,kBAAkB,IAAI,oBAAoB,EAAE;IAOnD,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,iBAAiB;YAwBX,OAAO;IA0CrB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,YAAY;IAkBpB,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,gBAAgB;CAKxB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/VirtualUserManager/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,iBAAiB,MAAM,sBAAsB,CAAC;AAE1D,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IACjC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,WAAW,oBAAoB;IACpC,wCAAwC;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,sCAAsC;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;CAClB;AAYD;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;IAqBlD,OAAO,CAAC,QAAQ,CAAC,GAAG;IAGpB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IAvBrC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAwC;IAC3E,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAmC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2C;IAC1E,OAAO,CAAC,OAAO,CAAK;IAEpB;;;;;;OAMG;gBAEe,GAAG,EAAE,iBAAiB,EAGtB,mBAAmB,GAAE,OAAc;IAMrD;;;OAGG;IACU,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAsCxC;;;;;OAKG;IACU,aAAa,CACzB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAehB;;;;OAIG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxD;;;;;OAKG;IACI,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKrD;;;;;OAKG;IACI,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAU9C;;;;;;;;OAQG;IACI,sBAAsB,CAC5B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAAG,MAAM,GAC1B,IAAI;IAoCP;;;;;;OAMG;IACI,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUlE;;;;;OAKG;IACU,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BvE;;;;;OAKG;IACI,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAMvD;;;;;OAKG;IACU,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa3E;;;;OAIG;IACU,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxD;;;;;OAKG;IACI,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAK1C;;;;OAIG;IACU,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvD;;;;OAIG;IACU,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW1D;;;;;;OAMG;IACI,eAAe,CACrB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACnB,oBAAoB;IAkBvB;;;;OAIG;IACI,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI;IAiBpE;;;;;;OAMG;IACI,aAAa,CACnB,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,GACnB,IAAI;IAkBP;;;;OAIG;IACI,kBAAkB,IAAI,oBAAoB,EAAE;IAOnD,OAAO,CAAC,WAAW;IA4BnB,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,iBAAiB;YAwBX,OAAO;IA0CrB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,YAAY;IAkBb,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAS7C;;;;;OAKG;IACI,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAQ7C,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IAEJ;;;;;;OAMG;IACI,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAQ3E;;;;OAIG;IACI,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKnD;;;;;OAKG;IACI,iBAAiB,CACvB,QAAQ,EAAE,MAAM,GACd,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAGxC"}

package/dist/VirtualUserManager/index.js

@@ -15,7 +15,6 @@ const perf = createPerfLogger("VirtualUserManager");
  */
 export class VirtualUserManager extends EventEmitter {
     vfs;
-    defaultRootPassword;
     autoSudoForNewUsers;
     static recordCache = new Map();
     static fastPasswordHash = resolveFastPasswordHash();
@@ -35,10 +34,12 @@ export class VirtualUserManager extends EventEmitter {
      * @param defaultRootPassword Initial root password used when root is created.
      * @param autoSudoForNewUsers Whether newly created users are added to sudoers.
      */
-    constructor(vfs, defaultRootPassword = "root", autoSudoForNewUsers = true) {
+    constructor(vfs, 
+    // private readonly defaultRootPassword: string = process.env
+    // .SSH_MIMIC_ROOT_PASSWORD || "root",
+    autoSudoForNewUsers = true) {
         super();
         this.vfs = vfs;
-        this.defaultRootPassword = defaultRootPassword;
         this.autoSudoForNewUsers = autoSudoForNewUsers;
         perf.mark("constructor");
     }
@@ -53,23 +54,26 @@ export class VirtualUserManager extends EventEmitter {
         this.loadQuotasFromVfs();
         let changed = false;
         if (!this.users.has("root")) {
-            this.users.set("root", this.createRecord("root", this.defaultRootPassword));
+            this.users.set("root", this.createRecord("root", ""));
             changed = true;
         }
         this.sudoers.add("root");
         // Auto-create current system user for easier authentication
-        const currentUser = process.env.USER || process.env.USERNAME;
-        if (currentUser && currentUser !== "root" && !this.users.has(currentUser)) {
-            const userPassword = this.defaultRootPassword;
-            this.users.set(currentUser, this.createRecord(currentUser, userPassword));
-            this.sudoers.add(currentUser);
-            changed = true;
-            const homePath = `/home/${currentUser}`;
-            if (!this.vfs.exists(homePath)) {
-                this.vfs.mkdir(homePath, 0o755);
-                this.vfs.writeFile(`${homePath}/README.txt`, `Welcome to the virtual environment, ${currentUser}`);
-            }
-        }
+        // const currentUser = process.env.USER || process.env.USERNAME;
+        // if (currentUser && currentUser !== "root" && !this.users.has(currentUser)) {
+        // 	const userPassword = this.defaultRootPassword;
+        // 	this.users.set(currentUser, this.createRecord(currentUser, userPassword));
+        // 	this.sudoers.add(currentUser);
+        // 	changed = true;
+        // 	const homePath = `/home/${currentUser}`;
+        // 	if (!this.vfs.exists(homePath)) {
+        // 		this.vfs.mkdir(homePath, 0o755);
+        // 		this.vfs.writeFile(
+        // 			`${homePath}/README.txt`,
+        // 			`Welcome to the virtual environment, ${currentUser}`,
+        // 		);
+        // 	}
+        // }
         if (changed) {
             await this.persist();
         }
@@ -178,7 +182,7 @@ export class VirtualUserManager extends EventEmitter {
         if (!record) {
             return false;
         }
-        return this.hashPassword(password, record.salt) === record.passwordHash;
+        return this.hashPassword(password) === record.passwordHash;
     }
     /**
      * Creates user, home directory, and sudo access entry.
@@ -206,6 +210,17 @@ export class VirtualUserManager extends EventEmitter {
         await this.persist();
         this.emit("user:add", { username });
     }
+    /**
+     * Retrieves stored password hash for a user, or null if user does not exist.
+     *
+     * @param username Target username.
+     * @returns Password hash in hex encoding, or null when user is not found.
+     */
+    getPasswordHash(username) {
+        perf.mark("getPasswordHash");
+        const record = this.users.get(username);
+        return record ? record.passwordHash : null;
+    }
     /**
      * Updates password for an existing user account.
      *
@@ -452,16 +467,30 @@ export class VirtualUserManager extends EventEmitter {
         const record = {
             username,
             salt,
-            passwordHash: this.hashPassword(password, salt),
+            passwordHash: this.hashPassword(password),
         };
         VirtualUserManager.recordCache.set(cacheKey, record);
         return record;
     }
-    hashPassword(password, salt) {
+    hasPassword(username) {
+        perf.mark("hasPassword");
+        if (this.getPasswordHash(username) === this.hashPassword("")) {
+            return false;
+        }
+        const record = this.users.get(username);
+        return !!record && !!record.passwordHash;
+    }
+    /**
+     * Hashes plaintext password with per-user salt using scrypt.
+     *
+     * @param password Plaintext password.
+     * @returns Hex-encoded password hash.
+     */
+    hashPassword(password) {
         if (VirtualUserManager.fastPasswordHash) {
-            return createHash("sha256").update(`${salt}:${password}`).digest("hex");
+            return createHash("sha256").update(`${password}`).digest("hex");
         }
-        return scryptSync(password, salt, 32).toString("hex");
+        return scryptSync(password, "", 32).toString("hex");
     }
     validateUsername(username) {
         if (!username || username.trim() === "") {
@@ -476,6 +505,39 @@ export class VirtualUserManager extends EventEmitter {
             throw new Error("invalid password");
         }
     }
+    authorizedKeys = new Map();
+    /**
+     * Adds an SSH public key for a user, enabling public-key authentication.
+     *
+     * @param username Target user.
+     * @param algo Key algorithm (e.g. "ssh-rsa", "ssh-ed25519").
+     * @param data Raw key data as a Buffer (the base64-decoded key bytes).
+     */
+    addAuthorizedKey(username, algo, data) {
+        perf.mark("addAuthorizedKey");
+        const keys = this.authorizedKeys.get(username) ?? [];
+        keys.push({ algo, data });
+        this.authorizedKeys.set(username, keys);
+        this.emit("key:add", { username, algo });
+    }
+    /**
+     * Removes all authorized keys for a user.
+     *
+     * @param username Target user.
+     */
+    removeAuthorizedKeys(username) {
+        this.authorizedKeys.delete(username);
+        this.emit("key:remove", { username });
+    }
+    /**
+     * Returns the list of authorized keys for a user.
+     * Returns an empty array when no keys are registered.
+     *
+     * @param username Target user.
+     */
+    getAuthorizedKeys(username) {
+        return this.authorizedKeys.get(username) ?? [];
+    }
 }
 function normalizeVfsPath(targetPath) {
     const normalized = path.posix.normalize(targetPath);

package/dist/commands/chmod.d.ts

@@ -0,0 +1,3 @@
+import type { ShellModule } from "../types/commands";
+export declare const chmodCommand: ShellModule;
+//# sourceMappingURL=chmod.d.ts.map

package/dist/commands/chmod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chmod.d.ts","sourceRoot":"","sources":["../../src/commands/chmod.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,eAAO,MAAM,YAAY,EAAE,WA6B1B,CAAC"}

package/dist/commands/chmod.js

@@ -0,0 +1,31 @@
+import { assertPathAccess, resolvePath } from "./helpers";
+export const chmodCommand = {
+    name: "chmod",
+    params: ["<mode> <file>"],
+    run: ({ authUser, shell, cwd, args }) => {
+        const [modeArg, fileArg] = args;
+        if (!modeArg || !fileArg) {
+            return { stderr: "chmod: missing operand", exitCode: 1 };
+        }
+        const filePath = resolvePath(cwd, fileArg);
+        try {
+            assertPathAccess(authUser, filePath, "chmod");
+            if (!shell.vfs.exists(filePath)) {
+                return {
+                    stderr: `chmod: ${fileArg}: No such file or directory`,
+                    exitCode: 1,
+                };
+            }
+            const mode = parseInt(modeArg, 8);
+            if (Number.isNaN(mode)) {
+                return { stderr: `chmod: invalid mode: ${modeArg}`, exitCode: 1 };
+            }
+            shell.vfs.chmod(filePath, mode);
+            return { exitCode: 0 };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { stderr: `chmod: ${msg}`, exitCode: 1 };
+        }
+    },
+};

package/dist/commands/cp.d.ts

@@ -0,0 +1,3 @@
+import type { ShellModule } from "../types/commands";
+export declare const cpCommand: ShellModule;
+//# sourceMappingURL=cp.d.ts.map

package/dist/commands/cp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cp.d.ts","sourceRoot":"","sources":["../../src/commands/cp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,eAAO,MAAM,SAAS,EAAE,WAuEvB,CAAC"}

package/dist/commands/cp.js

@@ -0,0 +1,68 @@
+import { ifFlag } from "./command-helpers";
+import { assertPathAccess, resolvePath } from "./helpers";
+export const cpCommand = {
+    name: "cp",
+    params: ["[-r] <source> <dest>"],
+    run: ({ authUser, shell, cwd, args }) => {
+        const recursive = ifFlag(args, ["-r", "-R", "--recursive"]);
+        const positionals = args.filter((a) => !a.startsWith("-"));
+        const [srcArg, destArg] = positionals;
+        if (!srcArg || !destArg) {
+            return { stderr: "cp: missing operand", exitCode: 1 };
+        }
+        const srcPath = resolvePath(cwd, srcArg);
+        const destPath = resolvePath(cwd, destArg);
+        try {
+            assertPathAccess(authUser, srcPath, "cp");
+            assertPathAccess(authUser, destPath, "cp");
+            if (!shell.vfs.exists(srcPath)) {
+                return {
+                    stderr: `cp: ${srcArg}: No such file or directory`,
+                    exitCode: 1,
+                };
+            }
+            const srcStat = shell.vfs.stat(srcPath);
+            if (srcStat.type === "directory") {
+                if (!recursive) {
+                    return {
+                        stderr: `cp: ${srcArg}: is a directory (use -r)`,
+                        exitCode: 1,
+                    };
+                }
+                const copyDir = (from, to) => {
+                    shell.vfs.mkdir(to, 0o755);
+                    for (const entry of shell.vfs.list(from)) {
+                        const fromEntry = `${from}/${entry}`;
+                        const toEntry = `${to}/${entry}`;
+                        const stat = shell.vfs.stat(fromEntry);
+                        if (stat.type === "directory") {
+                            copyDir(fromEntry, toEntry);
+                        }
+                        else {
+                            const content = shell.vfs.readFileRaw(fromEntry);
+                            shell.writeFileAsUser(authUser, toEntry, content);
+                        }
+                    }
+                };
+                const finalDest = shell.vfs.exists(destPath) &&
+                    shell.vfs.stat(destPath).type === "directory"
+                    ? `${destPath}/${srcArg.split("/").pop()}`
+                    : destPath;
+                copyDir(srcPath, finalDest);
+            }
+            else {
+                const finalDest = shell.vfs.exists(destPath) &&
+                    shell.vfs.stat(destPath).type === "directory"
+                    ? `${destPath}/${srcArg.split("/").pop()}`
+                    : destPath;
+                const content = shell.vfs.readFileRaw(srcPath);
+                shell.writeFileAsUser(authUser, finalDest, content);
+            }
+            return { exitCode: 0 };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { stderr: `cp: ${msg}`, exitCode: 1 };
+        }
+    },
+};

package/dist/commands/find.d.ts

@@ -0,0 +1,3 @@
+import type { ShellModule } from "../types/commands";
+export declare const findCommand: ShellModule;
+//# sourceMappingURL=find.d.ts.map

package/dist/commands/find.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"find.d.ts","sourceRoot":"","sources":["../../src/commands/find.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,eAAO,MAAM,WAAW,EAAE,WAwDzB,CAAC"}

package/dist/commands/find.js

@@ -0,0 +1,48 @@
+import { getFlag } from "./command-helpers";
+import { assertPathAccess, resolvePath } from "./helpers";
+export const findCommand = {
+    name: "find",
+    params: ["[path] [-name <pattern>] [-type f|d]"],
+    run: ({ authUser, shell, cwd, args }) => {
+        const namePattern = getFlag(args, ["-name"]);
+        const typeFilter = getFlag(args, ["-type"]);
+        const positionals = args.filter((a) => !a.startsWith("-") && a !== namePattern && a !== typeFilter);
+        const rootArg = positionals[0] ?? ".";
+        const rootPath = resolvePath(cwd, rootArg);
+        try {
+            assertPathAccess(authUser, rootPath, "find");
+            if (!shell.vfs.exists(rootPath)) {
+                return {
+                    stderr: `find: ${rootArg}: No such file or directory`,
+                    exitCode: 1,
+                };
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { stderr: `find: ${msg}`, exitCode: 1 };
+        }
+        const nameRegex = namePattern
+            ? new RegExp(`^${namePattern.replace(/\./g, "\\.").replace(/\*/g, ".*").replace(/\?/g, ".")}$`)
+            : null;
+        const results = [];
+        const walk = (currentPath, display) => {
+            const stat = shell.vfs.stat(currentPath);
+            const matchesType = !typeFilter ||
+                (typeFilter === "f" && stat.type === "file") ||
+                (typeFilter === "d" && stat.type === "directory");
+            const matchesName = !nameRegex || nameRegex.test(currentPath.split("/").pop() ?? "");
+            if (matchesType && matchesName)
+                results.push(display);
+            if (stat.type === "directory") {
+                for (const entry of shell.vfs.list(currentPath)) {
+                    const full = `${currentPath}/${entry}`;
+                    const disp = `${display}/${entry}`;
+                    walk(full, disp);
+                }
+            }
+        };
+        walk(rootPath, rootArg);
+        return { stdout: results.join("\n"), exitCode: 0 };
+    },
+};

package/dist/commands/grep.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grep.d.ts","sourceRoot":"","sources":["../../src/commands/grep.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,eAAO,MAAM,WAAW,EAAE,WA2EzB,CAAC"}
+{"version":3,"file":"grep.d.ts","sourceRoot":"","sources":["../../src/commands/grep.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,eAAO,MAAM,WAAW,EAAE,WA2FzB,CAAC"}

package/dist/commands/grep.js

@@ -2,11 +2,15 @@ import { parseArgs } from "./command-helpers";
 import { assertPathAccess, resolvePath } from "./helpers";
 export const grepCommand = {
     name: "grep",
-    params: ["[-i] [-v] <pattern> [file...]"],
+    params: ["[-i] [-v] [-n] [-r] <pattern> [file...]"],
     run: ({ authUser, shell, cwd, args, stdin }) => {
-        const { flags, positionals } = parseArgs(args, { flags: ["-i", "-v"] });
+        const { flags, positionals } = parseArgs(args, {
+            flags: ["-i", "-v", "-n", "-r"],
+        });
         const caseInsensitive = flags.has("-i");
         const invertMatch = flags.has("-v");
+        const showLineNumbers = flags.has("-n");
+        const recursive = flags.has("-r");
         const pattern = positionals[0];
         const files = positionals.slice(1);
         if (!pattern) {
@@ -14,51 +18,73 @@ export const grepCommand = {
         }
         let regex;
         try {
-            const flags = caseInsensitive ? "gmi" : "gm";
-            regex = new RegExp(pattern, flags);
+            // No "g" flag — avoids the stateful lastIndex problem with regex.test()
+            const regexFlags = caseInsensitive ? "mi" : "m";
+            regex = new RegExp(pattern, regexFlags);
         }
         catch {
             return { stderr: `grep: invalid regex: ${pattern}`, exitCode: 1 };
         }
-        const results = [];
-        if (files.length === 0) {
-            if (!stdin) {
-                return { stdout: "", exitCode: 1 };
-            }
-            const lines = stdin.split("\n");
-            for (const line of lines) {
-                regex.lastIndex = 0;
+        const matchLines = (content, prefix = "") => {
+            const lines = content.split("\n");
+            const out = [];
+            for (let i = 0; i < lines.length; i++) {
+                const line = lines[i] ?? "";
                 const matches = regex.test(line);
                 const shouldInclude = invertMatch ? !matches : matches;
                 if (shouldInclude) {
-                    results.push(line);
+                    const lineLabel = showLineNumbers ? `${i + 1}:` : "";
+                    out.push(`${prefix}${lineLabel}${line}`);
                 }
             }
-            return {
-                stdout: results.length > 0 ? results.join("\n") : "",
-                exitCode: results.length > 0 ? 0 : 1,
+            return out;
+        };
+        const readPaths = (base) => {
+            if (!shell.vfs.exists(base))
+                return [];
+            const stat = shell.vfs.stat(base);
+            if (stat.type === "file")
+                return [base];
+            if (!recursive)
+                return [];
+            const paths = [];
+            const walk = (dir) => {
+                for (const entry of shell.vfs.list(dir)) {
+                    const full = `${dir}/${entry}`;
+                    const s = shell.vfs.stat(full);
+                    if (s.type === "file")
+                        paths.push(full);
+                    else
+                        walk(full);
+                }
             };
+            walk(base);
+            return paths;
+        };
+        const results = [];
+        if (files.length === 0) {
+            if (!stdin)
+                return { stdout: "", exitCode: 1 };
+            results.push(...matchLines(stdin));
         }
-        for (const file of files) {
-            const target = resolvePath(cwd, file);
-            try {
-                assertPathAccess(authUser, target, "grep");
-                const content = shell.vfs.readFile(target);
-                const lines = content.split("\n");
-                for (const line of lines) {
-                    regex.lastIndex = 0;
-                    const matches = regex.test(line);
-                    const shouldInclude = invertMatch ? !matches : matches;
-                    if (shouldInclude) {
-                        results.push(line);
-                    }
+        else {
+            const resolvedPaths = files.flatMap((f) => {
+                const target = resolvePath(cwd, f);
+                return readPaths(target).map((p) => ({ file: f, path: p }));
+            });
+            for (const { file, path: filePath } of resolvedPaths) {
+                try {
+                    assertPathAccess(authUser, filePath, "grep");
+                    const content = shell.vfs.readFile(filePath);
+                    const prefix = resolvedPaths.length > 1 ? `${file}:` : "";
+                    results.push(...matchLines(content, prefix));
+                }
+                catch {
+                    return {
+                        stderr: `grep: ${file}: No such file or directory`,
+                        exitCode: 1,
+                    };
                 }
-            }
-            catch {
-                return {
-                    stderr: `grep: ${file}: No such file or directory`,
-                    exitCode: 1,
-                };
             }
         }
         return {