@agwab/pi-workflow 0.1.0

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/parent-proxy.js

@@ -0,0 +1,438 @@
+/**
+ * Parent/upstream HTTP proxy support.
+ *
+ * When SRT runs in an environment that requires an HTTP proxy for outbound
+ * internet access (e.g. inside a VM on a host behind a corporate proxy),
+ * SRT's own proxies must chain through that upstream rather than connecting
+ * directly.
+ *
+ * This module provides:
+ *   - config resolution (explicit config -> HTTP_PROXY/HTTPS_PROXY/NO_PROXY env)
+ *   - NO_PROXY matching (hostname suffix + CIDR via net.BlockList). Follows
+ *     golang.org/x/net/http/httpproxy semantics for suffix matching. Note:
+ *     port-specific NO_PROXY entries (e.g. `host:8080`) are matched by host
+ *     only; the port is ignored.
+ *   - a generic CONNECT-tunnel helper that works over Unix socket, TCP, or TLS
+ */
+import { BlockList, connect as netConnect, isIP } from 'node:net';
+import { connect as tlsConnect } from 'node:tls';
+import { URL } from 'node:url';
+import { logForDebugging } from '../utils/debug.js';
+const CONNECT_TIMEOUT_MS = 30000;
+/**
+ * Hop-by-hop headers per RFC 7230 §6.1, plus proxy-specific headers that
+ * MUST NOT be forwarded to the upstream. `transfer-encoding` is included
+ * because we re-frame bodies via Node's client; Content-Length is preserved
+ * end-to-end (Node's llhttp already rejects the TE+CL smuggling vector).
+ */
+const HOP_BY_HOP = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'proxy-connection',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+/**
+ * Resolve the parent proxy config, falling back to the SRT process's own
+ * environment. Note: SRT later overwrites HTTP_PROXY etc. in the *sandboxed
+ * child's* environment to point at itself — but process.env here reflects the
+ * environment SRT itself was launched with, which is what we want.
+ */
+export function resolveParentProxy(cfg) {
+    const http = cfg?.http ?? process.env.HTTP_PROXY ?? process.env.http_proxy ?? undefined;
+    const https = cfg?.https ??
+        process.env.HTTPS_PROXY ??
+        process.env.https_proxy ??
+        // Fall back to HTTP_PROXY for HTTPS if HTTPS_PROXY is unset — this is
+        // the de-facto behaviour of curl and most tooling.
+        http;
+    const noProxyRaw = cfg?.noProxy ?? process.env.NO_PROXY ?? process.env.no_proxy ?? '';
+    if (!http && !https)
+        return undefined;
+    const parse = (u) => {
+        if (!u)
+            return undefined;
+        // Accept schemeless `host:port` like curl does, but reject any scheme
+        // other than http/https.
+        const hasScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(u);
+        const withScheme = hasScheme ? u : `http://${u}`;
+        try {
+            const parsed = new URL(withScheme);
+            if ((parsed.protocol !== 'http:' && parsed.protocol !== 'https:') ||
+                !parsed.hostname) {
+                throw new Error('unsupported scheme or empty host');
+            }
+            return parsed;
+        }
+        catch {
+            logForDebugging(`Invalid parent proxy URL, ignoring: ${redactUserinfo(u)}`, { level: 'error' });
+            return undefined;
+        }
+    };
+    const httpUrl = parse(http);
+    const httpsUrl = parse(https);
+    // If both parsed to undefined, behave as if no parent proxy was configured
+    // rather than returning a husk object that makes callers do bypass checks
+    // for nothing.
+    if (!httpUrl && !httpsUrl)
+        return undefined;
+    return { httpUrl, httpsUrl, noProxy: parseNoProxy(noProxyRaw) };
+}
+function parseNoProxy(raw) {
+    const rules = {
+        all: false,
+        suffixes: [],
+        cidr: new BlockList(),
+    };
+    for (let entry of raw.split(',')) {
+        entry = entry.trim();
+        if (!entry)
+            continue;
+        if (entry === '*') {
+            rules.all = true;
+            continue;
+        }
+        // CIDR?
+        const slash = entry.indexOf('/');
+        if (slash !== -1) {
+            const ip = entry.slice(0, slash);
+            const prefixStr = entry.slice(slash + 1);
+            const fam = isIP(ip);
+            if (fam && prefixStr !== '' && /^\d+$/.test(prefixStr)) {
+                const prefix = Number(prefixStr);
+                const max = fam === 6 ? 128 : 32;
+                if (prefix >= 0 && prefix <= max) {
+                    try {
+                        rules.cidr.addSubnet(ip, prefix, fam === 6 ? 'ipv6' : 'ipv4');
+                    }
+                    catch {
+                        // BlockList rejected it — ignore this entry.
+                    }
+                    continue;
+                }
+            }
+            // malformed CIDR → ignore (do NOT treat as suffix; `/` isn't a valid
+            // hostname char)
+            continue;
+        }
+        // Hostname suffix. Normalise: lowercase, strip brackets (handling the
+        // `[v6]:port` form), strip leading `*.`, strip a trailing `:port` (unless
+        // the entry is an IP literal — IPv6 addresses contain colons).
+        let v = entry.toLowerCase();
+        const bracketed = /^\[([^\]]+)\](?::\d+)?$/.exec(v);
+        if (bracketed)
+            v = bracketed[1];
+        if (v.startsWith('*.'))
+            v = v.slice(1);
+        const bareFam = isIP(v);
+        if (!bareFam) {
+            const colon = v.lastIndexOf(':');
+            if (colon !== -1 && /^\d+$/.test(v.slice(colon + 1))) {
+                v = v.slice(0, colon);
+            }
+        }
+        else {
+            // Bare IP literal — store as an exact-match /32 or /128 CIDR so that
+            // lookups go through BlockList rather than string suffix matching.
+            try {
+                rules.cidr.addAddress(v, bareFam === 6 ? 'ipv6' : 'ipv4');
+                continue;
+            }
+            catch {
+                // fall through to suffix push
+            }
+        }
+        rules.suffixes.push(v);
+    }
+    return rules;
+}
+/**
+ * Returns true if the given host should bypass the parent proxy and connect
+ * directly. Always bypasses loopback.
+ *
+ * NB: the port is not consulted. NO_PROXY entries of the form `host:port` are
+ * matched by host only (the port suffix is stripped during parsing).
+ */
+export function shouldBypassParentProxy(resolved, host) {
+    const h = stripBrackets(host.toLowerCase().replace(/\.$/, ''));
+    // Always bypass loopback — chaining localhost through an upstream proxy is
+    // never what you want. Covers the whole 127/8 block and IPv4-mapped forms.
+    if (h === 'localhost')
+        return true;
+    const fam = isIP(h);
+    if (fam) {
+        if (LOOPBACK.check(h, fam === 6 ? 'ipv6' : 'ipv4'))
+            return true;
+    }
+    if (resolved.noProxy.all)
+        return true;
+    if (fam) {
+        if (resolved.noProxy.cidr.check(h, fam === 6 ? 'ipv6' : 'ipv4'))
+            return true;
+    }
+    for (const v of resolved.noProxy.suffixes) {
+        if (v.startsWith('.')) {
+            // .example.com matches foo.example.com and example.com
+            if (h === v.slice(1) || h.endsWith(v))
+                return true;
+        }
+        else {
+            // example.com matches example.com and foo.example.com (golang semantics)
+            if (h === v || h.endsWith('.' + v))
+                return true;
+        }
+    }
+    return false;
+}
+const LOOPBACK = (() => {
+    const bl = new BlockList();
+    bl.addSubnet('127.0.0.0', 8, 'ipv4');
+    bl.addAddress('::1', 'ipv6');
+    bl.addSubnet('::ffff:127.0.0.0', 104, 'ipv6'); // v4-mapped loopback
+    return bl;
+})();
+/**
+ * Pick which parent proxy URL to use for a given destination.
+ */
+export function selectParentProxyUrl(resolved, opts) {
+    if (opts.isHttps)
+        return resolved.httpsUrl ?? resolved.httpUrl;
+    // For plain HTTP we only fall back to HTTPS_PROXY if it was explicitly set
+    // — matches curl's behaviour where HTTP requests go direct if only
+    // HTTPS_PROXY is configured.
+    return resolved.httpUrl;
+}
+/**
+ * Generic CONNECT-tunnel: dial a proxy transport (unix/tcp/tls), send
+ * `CONNECT host:port`, wait for a 2xx, and resolve with the tunnelled socket.
+ * Validates destHost to prevent CRLF injection from untrusted callers.
+ */
+export function openConnectTunnel(opts) {
+    const { destHost, destPort } = opts;
+    // CRLF-injection guard: destHost may originate from an untrusted SOCKS5
+    // DOMAINNAME field. Reject anything that isn't a plain hostname or IP.
+    const bare = stripBrackets(destHost);
+    if (!isValidHost(bare)) {
+        return Promise.reject(new Error(`Invalid destination host for CONNECT: ${JSON.stringify(destHost)}`));
+    }
+    if (!Number.isInteger(destPort) || destPort < 1 || destPort > 65535) {
+        return Promise.reject(new Error(`Invalid destination port: ${destPort}`));
+    }
+    const authority = isIP(bare) === 6 ? `[${bare}]:${destPort}` : `${bare}:${destPort}`;
+    return new Promise((resolve, reject) => {
+        const sock = opts.dial();
+        let settled = false;
+        const fail = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            sock.destroy();
+            reject(err);
+        };
+        const onClose = () => fail(new Error('Proxy closed during CONNECT handshake'));
+        sock.setTimeout(opts.timeoutMs ?? CONNECT_TIMEOUT_MS, () => fail(new Error('CONNECT handshake timed out')));
+        sock.once('error', fail);
+        sock.once('close', onClose);
+        sock.once(opts.readyEvent, () => {
+            sock.write(`CONNECT ${authority} HTTP/1.1\r\n` +
+                `Host: ${authority}\r\n` +
+                (opts.authHeader
+                    ? `Proxy-Authorization: ${opts.authHeader}\r\n`
+                    : '') +
+                '\r\n');
+            let buf = '';
+            const onData = (chunk) => {
+                buf += chunk.toString('latin1');
+                const end = buf.indexOf('\r\n\r\n');
+                if (end === -1) {
+                    // Cap header size to avoid unbounded buffering on a misbehaving proxy.
+                    if (buf.length > 16 * 1024)
+                        fail(new Error('CONNECT response header too large'));
+                    return;
+                }
+                // Pause before detaching the data listener so the stream stops
+                // flowing — otherwise the unshift below (or any bytes arriving
+                // between now and the caller's pipe()) would be dropped.
+                sock.pause();
+                sock.removeListener('data', onData);
+                const statusLine = buf.slice(0, buf.indexOf('\r\n'));
+                if (!/^HTTP\/1\.[01] 2\d\d(?:\s|$)/.test(statusLine)) {
+                    return fail(new Error(`Proxy refused CONNECT: ${statusLine.trim()}`));
+                }
+                // Re-emit any bytes that arrived after the header terminator.
+                const rest = buf.slice(end + 4);
+                if (rest.length)
+                    sock.unshift(Buffer.from(rest, 'latin1'));
+                settled = true;
+                sock.setTimeout(0);
+                sock.removeListener('error', fail);
+                sock.removeListener('close', onClose);
+                resolve(sock);
+            };
+            sock.on('data', onData);
+        });
+    });
+}
+/**
+ * Open a CONNECT tunnel through a parent HTTP(S) proxy specified by URL.
+ * Thin wrapper around openConnectTunnel that dials TCP or TLS based on the
+ * proxy URL scheme.
+ */
+export function connectViaParentProxy(proxyUrl, destHost, destPort) {
+    const proxyHost = stripBrackets(proxyUrl.hostname);
+    const proxyPort = Number(proxyUrl.port) || (proxyUrl.protocol === 'https:' ? 443 : 80);
+    const useTls = proxyUrl.protocol === 'https:';
+    return openConnectTunnel({
+        destHost,
+        destPort,
+        authHeader: proxyAuthHeader(proxyUrl),
+        readyEvent: useTls ? 'secureConnect' : 'connect',
+        dial: () => useTls
+            ? tlsConnect({
+                host: proxyHost,
+                port: proxyPort,
+                // SNI must be a hostname, never an IP literal (RFC 6066 §3).
+                ...(isIP(proxyHost) ? {} : { servername: proxyHost }),
+            })
+            : netConnect(proxyPort, proxyHost),
+    });
+}
+// ---------------------------------------------------------------------------
+// Utilities
+// ---------------------------------------------------------------------------
+export function proxyAuthHeader(proxyUrl) {
+    if (!proxyUrl.username && !proxyUrl.password)
+        return undefined;
+    try {
+        const creds = `${decodeURIComponent(proxyUrl.username)}:${decodeURIComponent(proxyUrl.password)}`;
+        return `Basic ${Buffer.from(creds).toString('base64')}`;
+    }
+    catch {
+        // Malformed percent-encoding in userinfo — fall back to raw values
+        // rather than throwing synchronously into the caller.
+        const creds = `${proxyUrl.username}:${proxyUrl.password}`;
+        return `Basic ${Buffer.from(creds).toString('base64')}`;
+    }
+}
+/**
+ * Strip hop-by-hop and proxy-specific headers before forwarding upstream.
+ * Also strips any headers named in the incoming `Connection` header, per
+ * RFC 7230 §6.1.
+ */
+export function stripHopByHop(h) {
+    const extra = new Set();
+    const connHeader = h.connection;
+    if (connHeader) {
+        for (const tok of String(connHeader).split(',')) {
+            extra.add(tok.trim().toLowerCase());
+        }
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(h)) {
+        const lk = k.toLowerCase();
+        if (!HOP_BY_HOP.has(lk) && !extra.has(lk))
+            out[k] = v;
+    }
+    return out;
+}
+/** Remove surrounding square brackets from an IPv6 literal. */
+export function stripBrackets(host) {
+    return host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
+}
+/** Redact userinfo from a URL for safe logging. */
+export function redactUrl(u) {
+    if (!u)
+        return '-';
+    if (!u.username && !u.password)
+        return u.href;
+    const c = new URL(u.href);
+    c.username = '***';
+    c.password = '***';
+    return c.href;
+}
+function redactUserinfo(raw) {
+    // Best-effort redaction for unparseable URLs.
+    return raw.replace(/\/\/[^@/]*@/, '//***:***@');
+}
+/**
+ * Hostname validation: accepts DNS names and IP literals (without zone IDs).
+ * Primary purpose is to block control characters (CRLF injection, null-byte
+ * DNS truncation) and zone-identifier allowlist bypasses from reaching the
+ * wire or the allowlist matcher.
+ *
+ * IPv6 zone IDs (`fe80::1%eth0`) are rejected because `isIP` accepts a very
+ * permissive zone charset including dots — `::ffff:1.2.3.4%x.allowed.com`
+ * would pass `isIP`, pass a `.endsWith('.allowed.com')` wildcard check, and
+ * then connect to 1.2.3.4 when the OS discards the bogus scope.
+ */
+export function isValidHost(h) {
+    if (!h || h.length > 255)
+        return false;
+    const bare = stripBrackets(h);
+    // Reject zone identifiers outright (see doc comment).
+    if (bare.includes('%'))
+        return false;
+    if (isIP(bare))
+        return true;
+    // DNS label charset. Underscore is permitted for compatibility with real-
+    // world DNS records (_dmarc, _acme-challenge, etc.).
+    return /^[A-Za-z0-9._-]+$/.test(bare);
+}
+/**
+ * Canonicalize a host string via the WHATWG URL parser so that string
+ * comparisons in the allowlist agree with what `net.connect()`/`getaddrinfo()`
+ * will actually dial. This normalizes:
+ *   - inet_aton shorthand (`127.1` → `127.0.0.1`, `2130706433` → `127.0.0.1`)
+ *   - hex/octal octets (`0x7f.0.0.1` → `127.0.0.1`)
+ *   - IPv6 compression (`0:0:0:0:0:0:0:1` → `::1`)
+ *   - trailing dots, case, brackets
+ *
+ * Returns undefined if the input is not a valid URL host.
+ */
+export function canonicalizeHost(h) {
+    try {
+        const bare = stripBrackets(h);
+        // WHATWG URL rejects zone IDs and most garbage; it normalizes inet_aton
+        // forms and IPv6 compression. It does NOT strip trailing dots or IPv6
+        // brackets from the output, so we do that ourselves.
+        const bracketed = isIP(bare) === 6 ? `[${bare}]` : bare;
+        const out = new URL(`http://${bracketed}/`).hostname;
+        return stripBrackets(out).replace(/\.$/, '');
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Dial `host:port` directly with a bounded timeout. Shared by the HTTP and
+ * SOCKS direct-connect paths so they get the same timeout behaviour as the
+ * CONNECT-tunnelled paths.
+ */
+export function dialDirect(host, port, timeoutMs = CONNECT_TIMEOUT_MS) {
+    return new Promise((resolve, reject) => {
+        const s = netConnect(port, host);
+        let settled = false;
+        const done = (err) => {
+            if (settled)
+                return;
+            settled = true;
+            s.setTimeout(0);
+            if (err) {
+                s.destroy();
+                reject(err);
+            }
+            else {
+                resolve(s);
+            }
+        };
+        s.setTimeout(timeoutMs, () => done(new Error('connect timed out')));
+        s.once('connect', () => done());
+        s.once('error', done);
+        s.once('close', () => done(new Error('socket closed before connect')));
+    });
+}
+//# sourceMappingURL=parent-proxy.js.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/parent-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parent-proxy.js","sourceRoot":"","sources":["../../src/sandbox/parent-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,UAAU,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AACjE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAenD,MAAM,kBAAkB,GAAG,KAAM,CAAA;AAEjC;;;;;GAKG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,kBAAkB;IAClB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAuB;IAEvB,MAAM,IAAI,GACR,GAAG,EAAE,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS,CAAA;IAC5E,MAAM,KAAK,GACT,GAAG,EAAE,KAAK;QACV,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,sEAAsE;QACtE,mDAAmD;QACnD,IAAI,CAAA;IACN,MAAM,UAAU,GACd,GAAG,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAA;IAEpE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAErC,MAAM,KAAK,GAAG,CAAC,CAAqB,EAAmB,EAAE;QACvD,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACxB,sEAAsE;QACtE,yBAAyB;QACzB,MAAM,SAAS,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACpD,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAA;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;YAClC,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;gBAC7D,CAAC,MAAM,CAAC,QAAQ,EAChB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACrD,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC;QAAC,MAAM,CAAC;YACP,eAAe,CACb,uCAAuC,cAAc,CAAC,CAAC,CAAC,EAAE,EAC1D,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAA;YACD,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;IAC7B,2EAA2E;IAC3E,0EAA0E;IAC1E,eAAe;IACf,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAA;IAE3C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,CAAA;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAiB;QAC1B,GAAG,EAAE,KAAK;QACV,QAAQ,EAAE,EAAE;QACZ,IAAI,EAAE,IAAI,SAAS,EAAE;KACtB,CAAA;IAED,KAAK,IAAI,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QACpB,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,GAAG,IAAI,CAAA;YAChB,SAAQ;QACV,CAAC;QAED,QAAQ;QACR,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YAChC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;YACxC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;YACpB,IAAI,GAAG,IAAI,SAAS,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;gBAChC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;gBAChC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;oBACjC,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;oBAC/D,CAAC;oBAAC,MAAM,CAAC;wBACP,6CAA6C;oBAC/C,CAAC;oBACD,SAAQ;gBACV,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,iBAAiB;YACjB,SAAQ;QACV,CAAC;QAED,sEAAsE;QACtE,0EAA0E;QAC1E,+DAA+D;QAC/D,IAAI,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QAC3B,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnD,IAAI,SAAS;YAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAE,CAAA;QAChC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;YAChC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,mEAAmE;YACnE,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;gBACzD,SAAQ;YACV,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAA6B,EAC7B,IAAY;IAEZ,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;IAE9D,2EAA2E;IAC3E,2EAA2E;IAC3E,IAAI,CAAC,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;IACjE,CAAC;IAED,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IAErC,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;IAC9E,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,uDAAuD;YACvD,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;QACpD,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;QACjD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;IACrB,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,CAAA;IAC1B,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;IACpC,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC5B,EAAE,CAAC,SAAS,CAAC,kBAAkB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA,CAAC,qBAAqB;IACnE,OAAO,EAAE,CAAA;AACX,CAAC,CAAC,EAAE,CAAA;AAEJ;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA6B,EAC7B,IAA0B;IAE1B,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAA;IAC9D,2EAA2E;IAC3E,mEAAmE;IACnE,6BAA6B;IAC7B,OAAO,QAAQ,CAAC,OAAO,CAAA;AACzB,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA0B;IAC1D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAA;IAEnC,wEAAwE;IACxE,uEAAuE;IACvE,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACpC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,KAAK,CACP,yCAAyC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CACpE,CACF,CAAA;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,KAAK,EAAE,CAAC;QACpE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,SAAS,GACb,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAA;IAEpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QACxB,IAAI,OAAO,GAAG,KAAK,CAAA;QAEnB,MAAM,IAAI,GAAG,CAAC,GAAU,EAAE,EAAE;YAC1B,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,IAAI,CAAC,OAAO,EAAE,CAAA;YACd,MAAM,CAAC,GAAG,CAAC,CAAA;QACb,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,IAAI,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAA;QAE1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,IAAI,kBAAkB,EAAE,GAAG,EAAE,CACzD,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAC/C,CAAA;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAE3B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;YAC9B,IAAI,CAAC,KAAK,CACR,WAAW,SAAS,eAAe;gBACjC,SAAS,SAAS,MAAM;gBACxB,CAAC,IAAI,CAAC,UAAU;oBACd,CAAC,CAAC,wBAAwB,IAAI,CAAC,UAAU,MAAM;oBAC/C,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,CACT,CAAA;YAED,IAAI,GAAG,GAAG,EAAE,CAAA;YACZ,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC/B,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;gBAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;gBACnC,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;oBACf,uEAAuE;oBACvE,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;wBACxB,IAAI,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAA;oBACtD,OAAM;gBACR,CAAC;gBACD,+DAA+D;gBAC/D,+DAA+D;gBAC/D,yDAAyD;gBACzD,IAAI,CAAC,KAAK,EAAE,CAAA;gBACZ,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;gBAEnC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;gBACpD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrD,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,0BAA0B,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;gBACvE,CAAC;gBAED,8DAA8D;gBAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;gBAC/B,IAAI,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;gBAE1D,OAAO,GAAG,IAAI,CAAA;gBACd,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;gBAClB,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;gBAClC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACrC,OAAO,CAAC,IAAI,CAAC,CAAA;YACf,CAAC,CAAA;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAAa,EACb,QAAgB,EAChB,QAAgB;IAEhB,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAClD,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAA;IAE7C,OAAO,iBAAiB,CAAC;QACvB,QAAQ;QACR,QAAQ;QACR,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC;QACrC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS;QAChD,IAAI,EAAE,GAAG,EAAE,CACT,MAAM;YACJ,CAAC,CAAC,UAAU,CAAC;gBACT,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,SAAS;gBACf,6DAA6D;gBAC7D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;aACtD,CAAC;YACJ,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAAC,QAAa;IAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC9D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;QACjG,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,sDAAsD;QACtD,MAAM,KAAK,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAA;QACzD,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAA;IACzD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,CAAsB;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAA;IAC/B,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAwB,EAAE,CAAA;IACnC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC9E,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,SAAS,CAAC,CAAkB;IAC1C,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAA;IAClB,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,CAAC,CAAC,IAAI,CAAA;IAC7C,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAA;IAClB,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAA;IAClB,OAAO,CAAC,CAAC,IAAI,CAAA;AACf,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,8CAA8C;IAC9C,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,YAAY,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAA;IACtC,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;IAC7B,sDAAsD;IACtD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,IAAI,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3B,0EAA0E;IAC1E,qDAAqD;IACrD,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC7B,wEAAwE;QACxE,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,SAAS,GAAG,CAAC,CAAC,QAAQ,CAAA;QACpD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,IAAY,EACZ,SAAS,GAAG,kBAAkB;IAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAChC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;YAC3B,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;YACf,IAAI,GAAG,EAAE,CAAC;gBACR,CAAC,CAAC,OAAO,EAAE,CAAA;gBACX,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,CAAC,CAAC,CAAA;YACZ,CAAC;QACH,CAAC,CAAA;QACD,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAA;QACnE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;QAC/B,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACrB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/request-filter.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Request-level filter hook for the forward proxy.
+ *
+ * Library consumers supply a `filterRequest` callback via
+ * `network.filterRequest`. It receives the parsed HTTP request (web-standard
+ * `Request`) and returns a decision. Applies to plain HTTP through the proxy
+ * and, when `tlsTerminate` is configured, to terminated HTTPS. The proxy
+ * enforces the decision; the library does not bless any matching DSL.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { Readable } from 'node:stream';
+export type RequestDecision = {
+    action: 'allow' | 'deny';
+    /**
+     * Human-readable reason. For denials this is surfaced to the sandboxed
+     * client in the response body so the agent can tell a policy block from a
+     * network failure.
+     */
+    reason?: string;
+};
+/**
+ * Called once per HTTP request that the proxy parses.
+ *
+ * - `request` is a web-standard `Request`: method, URL, headers, and a lazy
+ *   `request.body` stream (one branch of a tee — reading it does not consume
+ *   the bytes that get forwarded upstream). `request.signal` aborts when the
+ *   client disconnects.
+ * - **Throwing or rejecting denies the request.** This is the failure
+ *   contract for a security boundary: a buggy policy fails closed.
+ */
+export type FilterRequestCallback = (request: Request) => Promise<RequestDecision>;
+/**
+ * Build a `Request`, run the callback, and if denied write the 403 response
+ * and return `null`. On allow, returns the body stream the caller must pipe
+ * upstream — this is the original `IncomingMessage` when no tee was needed
+ * (GET/HEAD/OPTIONS), or the upstream-side branch of the tee otherwise.
+ * Callers must pipe the returned stream (not `req`) to the outbound request.
+ *
+ * For methods that carry a body, `req` is converted to a web stream and
+ * `tee()`'d: one branch goes to the callback's `Request.body`, the other is
+ * returned for the caller to forward. If the callback never reads its
+ * branch, we cancel it after the decision so the tee does not buffer the
+ * entire upload.
+ */
+export declare function decideAndRespond(filterRequest: FilterRequestCallback, req: IncomingMessage, res: ServerResponse, url: string, signal: AbortSignal): Promise<Readable | null>;
+//# sourceMappingURL=request-filter.d.ts.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/request-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-filter.d.ts","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGtC,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,eAAe,CAAC,CAAA;AAI7B;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,qBAAqB,EACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAsD1B"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/request-filter.js

@@ -0,0 +1,106 @@
+/**
+ * Request-level filter hook for the forward proxy.
+ *
+ * Library consumers supply a `filterRequest` callback via
+ * `network.filterRequest`. It receives the parsed HTTP request (web-standard
+ * `Request`) and returns a decision. Applies to plain HTTP through the proxy
+ * and, when `tlsTerminate` is configured, to terminated HTTPS. The proxy
+ * enforces the decision; the library does not bless any matching DSL.
+ */
+import { Readable } from 'node:stream';
+import { logForDebugging } from '../utils/debug.js';
+const BODYLESS_METHODS = new Set(['GET', 'HEAD', 'OPTIONS']);
+/**
+ * Build a `Request`, run the callback, and if denied write the 403 response
+ * and return `null`. On allow, returns the body stream the caller must pipe
+ * upstream — this is the original `IncomingMessage` when no tee was needed
+ * (GET/HEAD/OPTIONS), or the upstream-side branch of the tee otherwise.
+ * Callers must pipe the returned stream (not `req`) to the outbound request.
+ *
+ * For methods that carry a body, `req` is converted to a web stream and
+ * `tee()`'d: one branch goes to the callback's `Request.body`, the other is
+ * returned for the caller to forward. If the callback never reads its
+ * branch, we cancel it after the decision so the tee does not buffer the
+ * entire upload.
+ */
+export async function decideAndRespond(filterRequest, req, res, url, signal) {
+    let forCallback;
+    let forUpstream = req;
+    if (!BODYLESS_METHODS.has(req.method ?? 'GET')) {
+        const web = Readable.toWeb(req);
+        const [a, b] = web.tee();
+        forCallback = a;
+        forUpstream = Readable.fromWeb(b);
+    }
+    let webReq;
+    try {
+        webReq = new Request(url, {
+            method: req.method,
+            headers: incomingHeaders(req),
+            signal,
+            ...(forCallback ? { body: forCallback, duplex: 'half' } : {}),
+        });
+    }
+    catch (err) {
+        // Malformed URL/headers from the client — deny rather than crash.
+        deny(res, {
+            action: 'deny',
+            reason: `malformed request: ${err.message}`,
+        });
+        void forCallback?.cancel();
+        forUpstream.destroy();
+        return null;
+    }
+    let decision;
+    try {
+        decision = await filterRequest(webReq);
+    }
+    catch (err) {
+        decision = {
+            action: 'deny',
+            reason: `filterRequest threw: ${err.message}`,
+        };
+    }
+    // If the callback didn't read its branch, cancel it so tee() stops
+    // buffering bytes nobody will consume. If it did, the tee already buffered
+    // whatever was read; the upstream branch sees the same bytes.
+    if (forCallback && !webReq.bodyUsed) {
+        void forCallback.cancel();
+    }
+    if (decision.action === 'allow') {
+        logForDebugging(`[request-filter] allow ${req.method} ${url}`);
+        return forUpstream;
+    }
+    deny(res, decision);
+    forUpstream.destroy();
+    return null;
+}
+function deny(res, decision) {
+    const reason = decision.reason ?? 'denied by filterRequest';
+    logForDebugging(`[request-filter] deny: ${reason}`);
+    if (res.headersSent) {
+        res.destroy();
+        return;
+    }
+    res.writeHead(403, {
+        'Content-Type': 'text/plain',
+        'X-Proxy-Error': 'blocked-by-sandbox-runtime',
+    });
+    res.end(reason + '\n');
+}
+function incomingHeaders(req) {
+    const h = new Headers();
+    for (const [k, v] of Object.entries(req.headers)) {
+        if (v === undefined)
+            continue;
+        if (Array.isArray(v)) {
+            for (const vv of v)
+                h.append(k, vv);
+        }
+        else {
+            h.append(k, v);
+        }
+    }
+    return h;
+}
+//# sourceMappingURL=request-filter.js.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/request-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-filter.js","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AA0BnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAoC,EACpC,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,MAAmB;IAEnB,IAAI,WAAmD,CAAA;IACvD,IAAI,WAAW,GAAa,GAAG,CAAA;IAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAA;QAC7D,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAA;QACxB,WAAW,GAAG,CAAC,CAAA;QACf,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;YAC7B,MAAM;YACN,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE;SACvD,CAAC,CAAA;QACF,KAAK,WAAW,EAAE,MAAM,EAAE,CAAA;QAC1B,WAAW,CAAC,OAAO,EAAE,CAAA;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,QAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,GAAG;YACT,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE;SACzD,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAA;IAC3B,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,eAAe,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;QAC9D,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnB,WAAW,CAAC,OAAO,EAAE,CAAA;IACrB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,QAAyB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,yBAAyB,CAAA;IAC3D,eAAe,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAA;IACnD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,EAAE,CAAA;QACb,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,YAAY;QAC5B,eAAe,EAAE,4BAA4B;KAC9C,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,CAAC,GAAG,IAAI,OAAO,EAAE,CAAA;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,EAAE,IAAI,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC"}