@apifuse/provider-sdk 2.2.0-beta.16 → 2.2.0-beta.18

package/src/runtime/proxy-nodemaven.ts

@@ -8,6 +8,12 @@ export const NODEMAVEN_FILTER_ENV = "APIFUSE__PROXY__NODEMAVEN_FILTER";
 
 export const NODEMAVEN_GATEWAY_HOST = "gate.nodemaven.com";
 
+export type NodemavenCredentials = {
+	readonly username: string;
+	readonly password: string;
+	readonly filter?: string;
+};
+
 /** Both schemes tunnel bytes end-to-end, preserving the client TLS handshake. */
 export type ProxyProtocol = "http" | "socks5";
 
@@ -44,8 +50,8 @@ function readNodemavenPassword(): string | undefined {
 	return process.env[NODEMAVEN_PASSWORD_ENV]?.trim() || undefined;
 }
 
-function resolveNodemavenFilter(): string {
-	const raw = process.env[NODEMAVEN_FILTER_ENV]?.trim().toLowerCase();
+function resolveNodemavenFilter(value: string | undefined): string {
+	const raw = value?.trim().toLowerCase();
 	if (!raw) return DEFAULT_NODEMAVEN_FILTER;
 	if (!NODEMAVEN_FILTERS.has(raw)) {
 		throw new Error(`${NODEMAVEN_FILTER_ENV} must be "medium" or "high"`);
@@ -133,6 +139,8 @@ function selectPort(protocol: ProxyProtocol, sid: string, poolIndex: number): nu
 
 export type NodemavenSynthesisInput = {
 	policy: ProviderProxyPolicy;
+	/** Explicit credentials; synthesis never reads process-global state. */
+	credentials: NodemavenCredentials;
 	affinityKey: string | undefined;
 	protocol: ProxyProtocol;
 	poolIndex: number;
@@ -159,15 +167,15 @@ export type NodemavenSynthesis = {
  * There is no allocation API — geo/session are encoded in the username.
  */
 export function synthesizeNodemavenProxy(input: NodemavenSynthesisInput): NodemavenSynthesis {
-	const username = readNodemavenUsername();
-	const password = readNodemavenPassword();
+	const username = input.credentials.username.trim();
+	const password = input.credentials.password.trim();
 	if (!username || !password) {
 		throw new Error(
 			`NodeMaven credentials missing: set ${NODEMAVEN_USERNAME_ENV} and ${NODEMAVEN_PASSWORD_ENV}.`,
 		);
 	}
 
-	const filter = resolveNodemavenFilter();
+	const filter = resolveNodemavenFilter(input.credentials.filter);
 	const sid = deriveSid(input.policy, input.affinityKey, input.poolIndex, input.refreshEpoch);
 	const port = selectPort(input.protocol, sid, input.poolIndex);
 	const lifetimeMinutes = nodemavenLifetimeMinutes(input.policy);

package/src/server/serve.ts

@@ -40,7 +40,10 @@ import { createEnvContext } from "../runtime/env.js";
 import { executeOperation } from "../runtime/executor.js";
 import { createHttpClient } from "../runtime/http.js";
 import { wrapWithInstrumentation } from "../runtime/instrumentation.js";
-import { createNativeNetworkClient } from "../runtime/native-network.js";
+import {
+	createEnvVendorCredentialResolver,
+	createNativeNetworkClient,
+} from "../runtime/native-network.js";
 import { getProviderBaseUrl } from "../runtime/provider.js";
 import {
 	PROXY_AUTH_IP_DENIED_CODE,
@@ -376,6 +379,7 @@ function createProviderContext(
 							egress: provider.native.network,
 							proxyPolicy: resolveNativeProxyPolicy(provider),
 							affinityKey: proxyClientOptions.affinityKey,
+							credentials: createEnvVendorCredentialResolver(env),
 						}),
 					},
 				}
@@ -489,6 +493,9 @@ function createAuthFlowContext(
 								egress: provider.native.network,
 								proxyPolicy: resolveNativeProxyPolicy(provider),
 								affinityKey: proxyClientOptions.affinityKey,
+								credentials: createEnvVendorCredentialResolver(
+									createEnvContext(provider.secrets?.map((secret) => secret.name)),
+								),
 							}),
 						},
 					}

package/src/types.ts

@@ -1318,6 +1318,11 @@ export interface NativeTcpEgressRule {
 /**
  * Bounded native TCP egress discovered through a declared bootstrap endpoint.
  * Host suffixes are exact DNS suffixes, not wildcard patterns.
+ * Dynamic rules must declare at least one target host selector through
+ * targetHostSuffixes, targetIpv4Cidrs, and/or targetIpv6Cidrs. Literal grant
+ * sources and targets match only same-family selectors (except exact
+ * sourceHost); DNS names match only host/suffix selectors. IPv4-mapped and
+ * IPv4-compatible IPv6 literals are authorized only by IPv4 CIDRs.
  *
  * Dynamic rules are ordered. The first rule whose source, target, port, and TLS
  * selectors match exclusively owns the grant; its ttlMs and maxGrants bounds
@@ -1328,9 +1333,13 @@ export interface NativeTcpEgressRule {
 export interface NativeTcpDynamicEgressRule {
 	readonly sourceHost?: string;
 	readonly sourceHostSuffixes?: readonly string[];
+	readonly sourceIpv4Cidrs?: readonly string[];
+	readonly sourceIpv6Cidrs?: readonly string[];
 	readonly sourcePorts?: readonly number[];
 	readonly sourcePortRanges?: readonly NativeTcpPortRange[];
-	readonly targetHostSuffixes: readonly string[];
+	readonly targetHostSuffixes?: readonly string[];
+	readonly targetIpv4Cidrs?: readonly string[];
+	readonly targetIpv6Cidrs?: readonly string[];
 	readonly targetPorts?: readonly number[];
 	readonly targetPortRanges?: readonly NativeTcpPortRange[];
 	readonly tls: NativeTcpTlsMode;