Ssh Host

DESTRUCTIVE. Run one argv vector on the host over SSH and return the exit code plus output hashes; each element is a literal argv word, never interpolated into a shell string, but argv can change or break the host and exec cannot roll that back. A non-zero remote exit is data, except 255, which ssh reserves for its own failures and is always reported as a transport error. Never put a secret in argv; stdout and stderr are persisted sensitive-marked and returned only when return_output is set.

DESTRUCTIVE. Push bytes to an absolute path on the host over stdin, atomically: a temporary file in the destination directory is written, chmod'ed and renamed over the destination, overwriting it. Converges on bytes and mode: an unchanged file is not rewritten and no new resource version is written, while a mode-only difference is a chmod. Returns the path, byte count, SHA-256 and whether anything changed; an unwritable path or a destination that is a directory is an error and leaves no partial

READ-ONLY. Poll until the host answers SSH with acceptable host keys or the timeout expires; returns reachable and the accepted host keys with fingerprints. A strict or already-recorded key mismatch is refused immediately; insecure_tofu records the first keys seen for later runs.