ssh-cli 0.5.2

Native Rust CLI that gives LLMs (Claude Code, Cursor, Windsurf) the ability to operate remote servers via SSH over stdin/stdout
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105

// SPDX-License-Identifier: MIT OR Apache-2.0
// G-ERR-12: unit tests for ssh client (split from monólito client.rs).
#![allow(clippy::unwrap_used, clippy::expect_used)]
    use super::*;
    use secrecy::SecretString;

    fn valid_cfg() -> ConnectionConfig {
        use crate::domain::{SshHost, SshPort, SshUser, TimeoutMs};
        ConnectionConfig {
            host: SshHost::try_new("127.0.0.1").unwrap(),
            port: SshPort::try_new(22).unwrap(),
            username: SshUser::try_new("root").unwrap(),
            password: SecretString::from("senha-exemplo".to_string()),
            key_path: None,
            key_passphrase: None,
            timeout_ms: TimeoutMs::try_new(5000).unwrap(),
            known_hosts_path: None,
            replace_host_key: false,
            tls: None,
            use_agent: false,
            agent_socket: None,
        }
    }
    #[test]
    fn domain_rejects_empty_host() {
        assert!(crate::domain::SshHost::try_new("").is_err());
        assert!(crate::domain::SshHost::try_new("   ").is_err());
    }

    #[test]
    fn validate_requires_auth_material() {
        let mut c = valid_cfg();
        c.password = SecretString::from(String::new());
        c.key_path = None;
        let r = c.validate();
        assert!(r.is_err());
        let msg = r.unwrap_err().to_string();
        assert!(msg.contains("auth") || msg.contains("password") || msg.contains("key"));
    }

    #[test]
    fn domain_rejects_port_zero_and_empty_user() {
        assert!(crate::domain::SshPort::try_new(0).is_err());
        assert!(crate::domain::SshUser::try_new("").is_err());
    }

    #[test]
    fn validate_correct_config_returns_ok() {
        assert!(valid_cfg().validate().is_ok());
    }

    #[test]
    fn debug_does_not_expose_password() {
        let c = valid_cfg();
        let dbg = format!("{c:?}");
        assert!(!dbg.contains("senha-exemplo"));
        assert!(dbg.contains("redacted"));
    }

    #[test]
    fn exec_capture_byte_cap_scales_and_hard_caps() {
        assert_eq!(exec_capture_byte_cap(0), 0);
        assert_eq!(exec_capture_byte_cap(10), 10 * 4 + 4);
        assert_eq!(
            exec_capture_byte_cap(usize::MAX),
            EXEC_CAPTURE_HARD_MAX_BYTES
        );
        assert_eq!(
            exec_capture_byte_cap(EXEC_CAPTURE_HARD_MAX_BYTES),
            EXEC_CAPTURE_HARD_MAX_BYTES
        );
    }

    #[test]
    fn append_capped_respects_limit() {
        let mut buf = Vec::new();
        let mut truncated = false;
        append_capped(&mut buf, b"hello", 3, &mut truncated);
        assert_eq!(buf, b"hel");
        assert!(truncated);
        truncated = false;
        append_capped(&mut buf, b"xx", 3, &mut truncated);
        assert_eq!(buf, b"hel");
        assert!(truncated);
    }

    #[test]
    fn execution_output_debug_does_not_crash() {
        let s = ExecutionOutput {
            stdout: "ok".into(),
            stderr: String::new(),
            exit_code: Some(0),
            truncated_stdout: false,
            truncated_stderr: false,
            duration_ms: 42,
        };
        let _ = format!("{s:?}");
    }

    #[test]
    fn duration_ms_type_compatible() {
        // Static guarantee that Instant::elapsed fits in u64.
        let fake: u64 = 1234;
        assert_eq!(fake, 1234_u64);
    }