@elie-laloum/outpost 11.1.3 → 11.2.0

package/dist/providers/egress/firewall.d.ts

@@ -0,0 +1,3 @@
+import type { Allowlist } from "./egress.types.ts";
+export declare function egressFirewall(policy: Allowlist): string;
+export declare function egressHeartbeat(): string;

package/dist/providers/egress/firewall.js

@@ -0,0 +1,29 @@
+import { isIP } from "node:net";
+import { egressRuntime } from "./egress.constants.js";
+import { egressCidr } from "./address.js";
+export function egressFirewall(policy) {
+    const destination = (value) => {
+        const cidr = egressCidr(value);
+        return `${isIP(cidr.split("/")[0]) === 4 ? "ip" : "ip6"} daddr ${cidr}`;
+    };
+    return `table inet outpost_egress {
+ set live { type nf_proto; flags timeout; timeout 3s; }
+ chain permitted {
+  ${(policy.denyCidrs ?? []).map((cidr) => `${destination(cidr)} drop`).join("\n  ")}
+  meta skuid ${egressRuntime.uid} meta l4proto { tcp, udp } accept
+  ${(policy.allowCidrs ?? []).map((cidr) => `${destination(cidr)} meta l4proto { tcp, udp } accept`).join("\n  ")}
+ }
+ chain output {
+  type filter hook output priority -150; policy drop;
+  oifname "lo" ip daddr 127.0.0.1 accept
+  oifname "lo" ip6 daddr ::1 accept
+  ip6 hoplimit 255 icmpv6 type { nd-neighbor-solicit, nd-neighbor-advert, nd-router-solicit } accept
+  meta nfproto @live jump permitted
+ }
+ chain forward { type filter hook forward priority 0; policy drop; }
+}`;
+}
+export function egressHeartbeat() {
+    return "flush set inet outpost_egress live\nadd element inet outpost_egress live { ipv4 timeout 3s, ipv6 timeout 3s }";
+}
+//# sourceMappingURL=firewall.js.map

package/dist/providers/egress/firewall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall.js","sourceRoot":"","sources":["../../../src/providers/egress/firewall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,UAAU,cAAc,CAAC,MAAiB;IAC9C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,EAAE,CAAC;IAC3E,CAAC,CAAC;IACF,OAAO;;;IAGL,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;eACrE,aAAa,CAAC,GAAG;IAC5B,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;;;;;;;;;;EAU/G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,+GAA+G,CAAC;AACzH,CAAC","sourcesContent":["import { isIP } from \"node:net\";\nimport { egressRuntime } from \"./egress.constants.ts\";\nimport type { Allowlist } from \"./egress.types.ts\";\nimport { egressCidr } from \"./address.ts\";\n\nexport function egressFirewall(policy: Allowlist): string {\n  const destination = (value: string) => {\n    const cidr = egressCidr(value);\n    return `${isIP(cidr.split(\"/\")[0]!) === 4 ? \"ip\" : \"ip6\"} daddr ${cidr}`;\n  };\n  return `table inet outpost_egress {\n set live { type nf_proto; flags timeout; timeout 3s; }\n chain permitted {\n  ${(policy.denyCidrs ?? []).map((cidr) => `${destination(cidr)} drop`).join(\"\\n  \")}\n  meta skuid ${egressRuntime.uid} meta l4proto { tcp, udp } accept\n  ${(policy.allowCidrs ?? []).map((cidr) => `${destination(cidr)} meta l4proto { tcp, udp } accept`).join(\"\\n  \")}\n }\n chain output {\n  type filter hook output priority -150; policy drop;\n  oifname \"lo\" ip daddr 127.0.0.1 accept\n  oifname \"lo\" ip6 daddr ::1 accept\n  ip6 hoplimit 255 icmpv6 type { nd-neighbor-solicit, nd-neighbor-advert, nd-router-solicit } accept\n  meta nfproto @live jump permitted\n }\n chain forward { type filter hook forward priority 0; policy drop; }\n}`;\n}\n\nexport function egressHeartbeat(): string {\n  return \"flush set inet outpost_egress live\\nadd element inet outpost_egress live { ipv4 timeout 3s, ipv6 timeout 3s }\";\n}\n"]}

package/dist/providers/egress/main.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/providers/egress/main.js

@@ -0,0 +1,90 @@
+import { spawn, execFileSync } from "node:child_process";
+import { writeFileSync, readFileSync, rmSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { validateEgress } from "../../domain/egress.js";
+import { egressRuntime } from "./egress.constants.js";
+import { egressFirewall, egressHeartbeat } from "./firewall.js";
+import { createEgressProxy } from "./proxy.js";
+function run() {
+    if (process.argv[2] === "health") {
+        if (process.argv[3] !== String(egressRuntime.version) ||
+            readFileSync(egressRuntime.ready, "utf8") !==
+                String(egressRuntime.version))
+            throw new Error("Egress not ready");
+        return;
+    }
+    const policy = validateEgress(JSON.parse(process.env.OUTPOST_EGRESS_POLICY ?? "null"));
+    if (policy?.mode !== "allowlist")
+        throw new Error("Allowlist required");
+    if (process.argv[2] === "proxy") {
+        process.setgroups([]);
+        process.setgid(egressRuntime.uid);
+        process.setuid(egressRuntime.uid);
+        const server = createEgressProxy(policy);
+        server.listen(egressRuntime.port, "127.0.0.1", () => process.send?.("ready"));
+        return;
+    }
+    const nft = (input) => execFileSync("nft", ["-f", "-"], {
+        input,
+        timeout: 2_000,
+        stdio: ["pipe", "ignore", "pipe"],
+    });
+    nft(egressFirewall(policy));
+    const child = spawn(process.execPath, [fileURLToPath(import.meta.url), "proxy"], { stdio: ["ignore", "inherit", "inherit", "ipc"] });
+    let heartbeat;
+    const stop = () => {
+        clearInterval(heartbeat);
+        rmSync(egressRuntime.ready, { force: true });
+        try {
+            nft("flush set inet outpost_egress live");
+        }
+        finally {
+            child.kill("SIGKILL");
+        }
+    };
+    child.once("message", (message) => {
+        if (message !== "ready") {
+            stop();
+            return;
+        }
+        const refresh = () => {
+            try {
+                nft(egressHeartbeat());
+            }
+            catch {
+                stop();
+                process.exitCode = 1;
+            }
+        };
+        try {
+            nft(egressHeartbeat());
+        }
+        catch {
+            stop();
+            process.exitCode = 1;
+            return;
+        }
+        writeFileSync(egressRuntime.ready, String(egressRuntime.version), {
+            mode: 0o600,
+        });
+        heartbeat = setInterval(refresh, egressRuntime.heartbeatMs);
+    });
+    child.once("exit", () => {
+        stop();
+        process.exitCode = 1;
+    });
+    child.once("error", () => {
+        stop();
+        process.exitCode = 1;
+    });
+    process.once("SIGTERM", stop);
+    process.once("SIGINT", stop);
+}
+try {
+    run();
+}
+catch {
+    process.stderr.write("Outpost egress startup or health check failed\n");
+    process.exitCode = 1;
+}
+//# sourceMappingURL=main.js.map

package/dist/providers/egress/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/providers/egress/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,SAAS,GAAG;IACV,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjC,IACE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;YACjD,YAAY,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC;gBACvC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;YAE/B,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,CACxD,CAAC;IACF,IAAI,MAAM,EAAE,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,SAAU,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,CAAC,MAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,MAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAClD,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CACxB,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAC5B,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE;QAC/B,KAAK;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACL,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EACzC,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CACnD,CAAC;IACF,IAAI,SAAqD,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;QACzC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC;gBACH,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,EAAE,CAAC;gBACP,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC;YACH,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC;YACP,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,aAAa,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE;YAChE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,IAAI,EAAE,CAAC;QACP,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACvB,IAAI,EAAE,CAAC;QACP,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,IAAI,CAAC;IACH,GAAG,EAAE,CAAC;AACR,CAAC;AAAC,MAAM,CAAC;IACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC","sourcesContent":["import { spawn, execFileSync } from \"node:child_process\";\nimport { writeFileSync, readFileSync, rmSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { validateEgress } from \"../../domain/egress.ts\";\nimport { egressRuntime } from \"./egress.constants.ts\";\nimport { egressFirewall, egressHeartbeat } from \"./firewall.ts\";\nimport { createEgressProxy } from \"./proxy.ts\";\n\nfunction run(): void {\n  if (process.argv[2] === \"health\") {\n    if (\n      process.argv[3] !== String(egressRuntime.version) ||\n      readFileSync(egressRuntime.ready, \"utf8\") !==\n        String(egressRuntime.version)\n    )\n      throw new Error(\"Egress not ready\");\n    return;\n  }\n  const policy = validateEgress(\n    JSON.parse(process.env.OUTPOST_EGRESS_POLICY ?? \"null\"),\n  );\n  if (policy?.mode !== \"allowlist\") throw new Error(\"Allowlist required\");\n  if (process.argv[2] === \"proxy\") {\n    process.setgroups!([]);\n    process.setgid!(egressRuntime.uid);\n    process.setuid!(egressRuntime.uid);\n    const server = createEgressProxy(policy);\n    server.listen(egressRuntime.port, \"127.0.0.1\", () =>\n      process.send?.(\"ready\"),\n    );\n    return;\n  }\n  const nft = (input: string) =>\n    execFileSync(\"nft\", [\"-f\", \"-\"], {\n      input,\n      timeout: 2_000,\n      stdio: [\"pipe\", \"ignore\", \"pipe\"],\n    });\n  nft(egressFirewall(policy));\n  const child = spawn(\n    process.execPath,\n    [fileURLToPath(import.meta.url), \"proxy\"],\n    { stdio: [\"ignore\", \"inherit\", \"inherit\", \"ipc\"] },\n  );\n  let heartbeat: ReturnType<typeof setInterval> | undefined;\n  const stop = () => {\n    clearInterval(heartbeat);\n    rmSync(egressRuntime.ready, { force: true });\n    try {\n      nft(\"flush set inet outpost_egress live\");\n    } finally {\n      child.kill(\"SIGKILL\");\n    }\n  };\n  child.once(\"message\", (message: unknown) => {\n    if (message !== \"ready\") {\n      stop();\n      return;\n    }\n    const refresh = () => {\n      try {\n        nft(egressHeartbeat());\n      } catch {\n        stop();\n        process.exitCode = 1;\n      }\n    };\n    try {\n      nft(egressHeartbeat());\n    } catch {\n      stop();\n      process.exitCode = 1;\n      return;\n    }\n    writeFileSync(egressRuntime.ready, String(egressRuntime.version), {\n      mode: 0o600,\n    });\n    heartbeat = setInterval(refresh, egressRuntime.heartbeatMs);\n  });\n  child.once(\"exit\", () => {\n    stop();\n    process.exitCode = 1;\n  });\n  child.once(\"error\", () => {\n    stop();\n    process.exitCode = 1;\n  });\n  process.once(\"SIGTERM\", stop);\n  process.once(\"SIGINT\", stop);\n}\n\ntry {\n  run();\n} catch {\n  process.stderr.write(\"Outpost egress startup or health check failed\\n\");\n  process.exitCode = 1;\n}\n"]}

package/dist/providers/egress/policy.d.ts

@@ -0,0 +1,5 @@
+import type { Allowlist, EgressAddress, EgressResolver } from "./egress.types.ts";
+export declare function egressAccess(policy: Allowlist): {
+    domain: (hostname: string) => boolean;
+    resolve(hostname: string, resolver?: EgressResolver): Promise<EgressAddress>;
+};

package/dist/providers/egress/policy.js

@@ -0,0 +1,54 @@
+import { lookup } from "node:dns/promises";
+import { BlockList, isIP } from "node:net";
+import { egressAddress, egressCidr } from "./address.js";
+function subnets(cidrs) {
+    const result = { ipv4: new BlockList(), ipv6: new BlockList() };
+    for (const cidr of cidrs.map(egressCidr)) {
+        const [address, prefix] = cidr.split("/");
+        const family = isIP(address) === 4 ? "ipv4" : "ipv6";
+        result[family].addSubnet(address, Number(prefix), isIP(address) === 4 ? "ipv4" : "ipv6");
+    }
+    return result;
+}
+export function egressAccess(policy) {
+    const denied = subnets(policy.denyCidrs ?? []);
+    const allowed = subnets(policy.allowCidrs ?? []);
+    const local = subnets(["127.0.0.0/8", "::1/128", "0.0.0.0/8", "::/128"]);
+    const domains = (policy.domains ?? []).map((name) => name.toLowerCase());
+    const matches = (list, address) => {
+        const family = address.family === 4 ? "ipv4" : "ipv6";
+        return list[family].check(address.address, family);
+    };
+    const domain = (hostname) => {
+        if (hostname.length > 253 ||
+            !hostname
+                .split(".")
+                .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label)))
+            return false;
+        return domains.some((pattern) => pattern.startsWith("*.")
+            ? hostname.toLowerCase().endsWith(pattern.slice(1))
+            : hostname.toLowerCase() === pattern);
+    };
+    return {
+        domain,
+        async resolve(hostname, resolver = (name) => lookup(name, { all: true })) {
+            const version = isIP(hostname);
+            if (!version && !domain(hostname))
+                throw new Error("Egress destination denied");
+            const addresses = version
+                ? [{ address: hostname, family: version }]
+                : await resolver(hostname);
+            const selected = addresses
+                .filter((item) => isIP(item.address) === item.family)
+                .map((item) => egressAddress(item.address))
+                .find((address) => isIP(address.address) === address.family &&
+                !matches(local, address) &&
+                !matches(denied, address) &&
+                (domain(hostname) || matches(allowed, address)));
+            if (!selected)
+                throw new Error("Egress destination denied");
+            return selected;
+        },
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/providers/egress/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/providers/egress/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAOzD,SAAS,OAAO,CAAC,KAAwB;IACvC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS,EAAE,EAAE,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CACtB,OAAQ,EACR,MAAM,CAAC,MAAM,CAAC,EACd,IAAI,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CACvC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,CACd,IAAgC,EAChC,OAAsB,EACtB,EAAE;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACtD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,EAAE;QAClC,IACE,QAAQ,CAAC,MAAM,GAAG,GAAG;YACrB,CAAC,QAAQ;iBACN,KAAK,CAAC,GAAG,CAAC;iBACV,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAE1E,OAAO,KAAK,CAAC;QACf,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnD,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CACvC,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,MAAM;QACN,KAAK,CAAC,OAAO,CACX,QAAgB,EAChB,WAA2B,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YAEhE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,OAAO;gBACvB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC1C,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7B,MAAM,QAAQ,GAAG,SAAS;iBACvB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC;iBACpD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;iBAC1C,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CACV,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM;gBACxC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC;gBACxB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;gBACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAClD,CAAC;YACJ,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC5D,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { lookup } from \"node:dns/promises\";\nimport { BlockList, isIP } from \"node:net\";\nimport { egressAddress, egressCidr } from \"./address.ts\";\nimport type {\n  Allowlist,\n  EgressAddress,\n  EgressResolver,\n} from \"./egress.types.ts\";\n\nfunction subnets(cidrs: readonly string[]) {\n  const result = { ipv4: new BlockList(), ipv6: new BlockList() };\n  for (const cidr of cidrs.map(egressCidr)) {\n    const [address, prefix] = cidr.split(\"/\");\n    const family = isIP(address!) === 4 ? \"ipv4\" : \"ipv6\";\n    result[family].addSubnet(\n      address!,\n      Number(prefix),\n      isIP(address!) === 4 ? \"ipv4\" : \"ipv6\",\n    );\n  }\n  return result;\n}\n\nexport function egressAccess(policy: Allowlist) {\n  const denied = subnets(policy.denyCidrs ?? []);\n  const allowed = subnets(policy.allowCidrs ?? []);\n  const local = subnets([\"127.0.0.0/8\", \"::1/128\", \"0.0.0.0/8\", \"::/128\"]);\n  const domains = (policy.domains ?? []).map((name) => name.toLowerCase());\n  const matches = (\n    list: ReturnType<typeof subnets>,\n    address: EgressAddress,\n  ) => {\n    const family = address.family === 4 ? \"ipv4\" : \"ipv6\";\n    return list[family].check(address.address, family);\n  };\n  const domain = (hostname: string) => {\n    if (\n      hostname.length > 253 ||\n      !hostname\n        .split(\".\")\n        .every((label) => /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i.test(label))\n    )\n      return false;\n    return domains.some((pattern) =>\n      pattern.startsWith(\"*.\")\n        ? hostname.toLowerCase().endsWith(pattern.slice(1))\n        : hostname.toLowerCase() === pattern,\n    );\n  };\n  return {\n    domain,\n    async resolve(\n      hostname: string,\n      resolver: EgressResolver = (name) => lookup(name, { all: true }),\n    ): Promise<EgressAddress> {\n      const version = isIP(hostname);\n      if (!version && !domain(hostname))\n        throw new Error(\"Egress destination denied\");\n      const addresses = version\n        ? [{ address: hostname, family: version }]\n        : await resolver(hostname);\n      const selected = addresses\n        .filter((item) => isIP(item.address) === item.family)\n        .map((item) => egressAddress(item.address))\n        .find(\n          (address) =>\n            isIP(address.address) === address.family &&\n            !matches(local, address) &&\n            !matches(denied, address) &&\n            (domain(hostname) || matches(allowed, address)),\n        );\n      if (!selected) throw new Error(\"Egress destination denied\");\n      return selected;\n    },\n  };\n}\n"]}

package/dist/providers/egress/proxy.d.ts

@@ -0,0 +1,2 @@
+import type { Allowlist, EgressResolver } from "./egress.types.ts";
+export declare function createEgressProxy(policy: Allowlist, resolver?: EgressResolver): import("http").Server<typeof import("http").IncomingMessage, typeof import("http").ServerResponse>;

package/dist/providers/egress/proxy.js

@@ -0,0 +1,129 @@
+import { createServer, request } from "node:http";
+import { connect, isIP } from "node:net";
+import { egressRuntime } from "./egress.constants.js";
+import { egressAccess } from "./policy.js";
+import { tlsServerName } from "./tls-hello.js";
+function reject(socket) {
+    socket.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\nContent-Length: 0\r\n\r\n");
+}
+export function createEgressProxy(policy, resolver) {
+    const access = egressAccess(policy);
+    const server = createServer({ maxHeaderSize: egressRuntime.maxHeaderBytes }, (incoming, outgoing) => {
+        void (async () => {
+            const target = new URL(incoming.url ?? "");
+            if (target.protocol !== "http:" ||
+                (target.port && target.port !== "80") ||
+                target.username ||
+                target.password)
+                throw new Error("HTTP destination required");
+            const hostname = target.hostname.replace(/^\[|\]$/g, "");
+            const address = await access.resolve(hostname, resolver);
+            if (incoming.destroyed || outgoing.destroyed)
+                return;
+            const headers = {
+                ...incoming.headers,
+                host: target.host,
+                connection: "close",
+            };
+            for (const key of [
+                "proxy-authorization",
+                "proxy-connection",
+                "upgrade",
+                ...(incoming.headers.connection ?? "")
+                    .toLowerCase()
+                    .split(",")
+                    .map((value) => value.trim()),
+            ])
+                delete headers[key];
+            headers.host = target.host;
+            headers.connection = "close";
+            const upstream = request({
+                hostname: address.address,
+                family: address.family,
+                port: 80,
+                method: incoming.method,
+                path: target.pathname + target.search,
+                headers,
+                agent: false,
+            }, (response) => {
+                outgoing.writeHead(response.statusCode ?? 502, response.headers);
+                response.pipe(outgoing);
+                response.on("error", () => outgoing.destroy());
+            });
+            upstream.setTimeout(egressRuntime.idleMs, () => upstream.destroy());
+            upstream.on("error", () => {
+                if (outgoing.headersSent) {
+                    outgoing.destroy();
+                    return;
+                }
+                outgoing.writeHead(502).end();
+            });
+            incoming.on("aborted", () => upstream.destroy());
+            outgoing.on("close", () => upstream.destroy());
+            incoming.pipe(upstream);
+        })().catch(() => outgoing.writeHead(403).end());
+    });
+    server.on("connect", (request, socket, head) => {
+        socket.on("error", () => socket.destroy());
+        void (async () => {
+            const authority = request.url ?? "";
+            const target = new URL(`https://${authority}`);
+            if (target.username ||
+                target.password ||
+                target.pathname !== "/" ||
+                target.search ||
+                target.hash ||
+                !authority.endsWith(":443"))
+                throw new Error("HTTPS destination required");
+            const hostname = target.hostname.replace(/^\[|\]$/g, "");
+            const address = await access.resolve(hostname, resolver);
+            if (socket.destroyed)
+                return;
+            socket.write("HTTP/1.1 200 Connection Established\r\n\r\n");
+            let buffered = head;
+            const timeout = setTimeout(() => socket.destroy(), egressRuntime.connectMs);
+            socket.once("close", () => clearTimeout(timeout));
+            const receive = (chunk) => {
+                try {
+                    buffered = Buffer.concat([buffered, chunk]);
+                    if (!isIP(hostname)) {
+                        const name = tlsServerName(buffered);
+                        if (name === undefined)
+                            return;
+                        if (name !== hostname.toLowerCase())
+                            throw new Error("TLS server name mismatch");
+                    }
+                    socket.pause();
+                    socket.removeListener("data", receive);
+                    const upstream = connect({
+                        host: address.address,
+                        family: address.family,
+                        port: 443,
+                    });
+                    upstream.on("error", () => socket.destroy());
+                    socket.once("close", () => upstream.destroy());
+                    upstream.once("close", () => socket.end());
+                    upstream.setTimeout(egressRuntime.idleMs, () => upstream.destroy());
+                    upstream.once("connect", () => {
+                        clearTimeout(timeout);
+                        upstream.write(buffered);
+                        socket.pipe(upstream).pipe(socket);
+                        socket.resume();
+                    });
+                }
+                catch {
+                    socket.destroy();
+                }
+            };
+            socket.on("data", receive);
+            receive(Buffer.alloc(0));
+        })().catch(() => reject(socket));
+    });
+    server.on("upgrade", (_request, socket) => reject(socket));
+    server.on("clientError", (_error, socket) => reject(socket));
+    server.requestTimeout = egressRuntime.idleMs;
+    server.headersTimeout = egressRuntime.connectMs;
+    server.maxConnections = egressRuntime.maxConnections;
+    return server;
+}
+//# sourceMappingURL=proxy.js.map

package/dist/providers/egress/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../src/providers/egress/proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,SAAS,MAAM,CAAC,MAAc;IAC5B,MAAM,CAAC,GAAG,CACR,0EAA0E,CAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAiB,EACjB,QAAyB;IAEzB,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,YAAY,CACzB,EAAE,aAAa,EAAE,aAAa,CAAC,cAAc,EAAE,EAC/C,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACrB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC3C,IACE,MAAM,CAAC,QAAQ,KAAK,OAAO;gBAC3B,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;gBACrC,MAAM,CAAC,QAAQ;gBACf,MAAM,CAAC,QAAQ;gBAEf,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzD,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS;gBAAE,OAAO;YACrD,MAAM,OAAO,GAAG;gBACd,GAAG,QAAQ,CAAC,OAAO;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,UAAU,EAAE,OAAO;aACpB,CAAC;YACF,KAAK,MAAM,GAAG,IAAI;gBAChB,qBAAqB;gBACrB,kBAAkB;gBAClB,SAAS;gBACT,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;qBACnC,WAAW,EAAE;qBACb,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAChC;gBACC,OAAO,OAAO,CAAC,GAA2B,CAAC,CAAC;YAC9C,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3B,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;YAC7B,MAAM,QAAQ,GAAG,OAAO,CACtB;gBACE,QAAQ,EAAE,OAAO,CAAC,OAAO;gBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;gBACrC,OAAO;gBACP,KAAK,EAAE,KAAK;aACb,EACD,CAAC,QAAQ,EAAE,EAAE;gBACX,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,CAAC,CACF,CAAC;YACF,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACxB,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACzB,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YACjD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,CAAC,CACF,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC7C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;YAC/C,IACE,MAAM,CAAC,QAAQ;gBACf,MAAM,CAAC,QAAQ;gBACf,MAAM,CAAC,QAAQ,KAAK,GAAG;gBACvB,MAAM,CAAC,MAAM;gBACb,MAAM,CAAC,IAAI;gBACX,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAE3B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,SAAS;gBAAE,OAAO;YAC7B,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,IAAI,QAAQ,GAAG,IAAI,CAAC;YACpB,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EACtB,aAAa,CAAC,SAAS,CACxB,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;gBAChC,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;oBAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACpB,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;wBACrC,IAAI,IAAI,KAAK,SAAS;4BAAE,OAAO;wBAC/B,IAAI,IAAI,KAAK,QAAQ,CAAC,WAAW,EAAE;4BACjC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;oBAChD,CAAC;oBACD,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBACvC,MAAM,QAAQ,GAAG,OAAO,CAAC;wBACvB,IAAI,EAAE,OAAO,CAAC,OAAO;wBACrB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,IAAI,EAAE,GAAG;qBACV,CAAC,CAAC;oBACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC/C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC3C,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;wBAC5B,YAAY,CAAC,OAAO,CAAC,CAAC;wBACtB,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;wBACzB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACnC,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,CAAC,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC;IAC7C,MAAM,CAAC,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC;IAChD,MAAM,CAAC,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { createServer, request } from \"node:http\";\nimport { connect, isIP } from \"node:net\";\nimport type { Duplex } from \"node:stream\";\nimport { egressRuntime } from \"./egress.constants.ts\";\nimport type { Allowlist, EgressResolver } from \"./egress.types.ts\";\nimport { egressAccess } from \"./policy.ts\";\nimport { tlsServerName } from \"./tls-hello.ts\";\n\nfunction reject(socket: Duplex): void {\n  socket.end(\n    \"HTTP/1.1 403 Forbidden\\r\\nConnection: close\\r\\nContent-Length: 0\\r\\n\\r\\n\",\n  );\n}\n\nexport function createEgressProxy(\n  policy: Allowlist,\n  resolver?: EgressResolver,\n) {\n  const access = egressAccess(policy);\n  const server = createServer(\n    { maxHeaderSize: egressRuntime.maxHeaderBytes },\n    (incoming, outgoing) => {\n      void (async () => {\n        const target = new URL(incoming.url ?? \"\");\n        if (\n          target.protocol !== \"http:\" ||\n          (target.port && target.port !== \"80\") ||\n          target.username ||\n          target.password\n        )\n          throw new Error(\"HTTP destination required\");\n        const hostname = target.hostname.replace(/^\\[|\\]$/g, \"\");\n        const address = await access.resolve(hostname, resolver);\n        if (incoming.destroyed || outgoing.destroyed) return;\n        const headers = {\n          ...incoming.headers,\n          host: target.host,\n          connection: \"close\",\n        };\n        for (const key of [\n          \"proxy-authorization\",\n          \"proxy-connection\",\n          \"upgrade\",\n          ...(incoming.headers.connection ?? \"\")\n            .toLowerCase()\n            .split(\",\")\n            .map((value) => value.trim()),\n        ])\n          delete headers[key as keyof typeof headers];\n        headers.host = target.host;\n        headers.connection = \"close\";\n        const upstream = request(\n          {\n            hostname: address.address,\n            family: address.family,\n            port: 80,\n            method: incoming.method,\n            path: target.pathname + target.search,\n            headers,\n            agent: false,\n          },\n          (response) => {\n            outgoing.writeHead(response.statusCode ?? 502, response.headers);\n            response.pipe(outgoing);\n            response.on(\"error\", () => outgoing.destroy());\n          },\n        );\n        upstream.setTimeout(egressRuntime.idleMs, () => upstream.destroy());\n        upstream.on(\"error\", () => {\n          if (outgoing.headersSent) {\n            outgoing.destroy();\n            return;\n          }\n          outgoing.writeHead(502).end();\n        });\n        incoming.on(\"aborted\", () => upstream.destroy());\n        outgoing.on(\"close\", () => upstream.destroy());\n        incoming.pipe(upstream);\n      })().catch(() => outgoing.writeHead(403).end());\n    },\n  );\n  server.on(\"connect\", (request, socket, head) => {\n    socket.on(\"error\", () => socket.destroy());\n    void (async () => {\n      const authority = request.url ?? \"\";\n      const target = new URL(`https://${authority}`);\n      if (\n        target.username ||\n        target.password ||\n        target.pathname !== \"/\" ||\n        target.search ||\n        target.hash ||\n        !authority.endsWith(\":443\")\n      )\n        throw new Error(\"HTTPS destination required\");\n      const hostname = target.hostname.replace(/^\\[|\\]$/g, \"\");\n      const address = await access.resolve(hostname, resolver);\n      if (socket.destroyed) return;\n      socket.write(\"HTTP/1.1 200 Connection Established\\r\\n\\r\\n\");\n      let buffered = head;\n      const timeout = setTimeout(\n        () => socket.destroy(),\n        egressRuntime.connectMs,\n      );\n      socket.once(\"close\", () => clearTimeout(timeout));\n      const receive = (chunk: Buffer) => {\n        try {\n          buffered = Buffer.concat([buffered, chunk]);\n          if (!isIP(hostname)) {\n            const name = tlsServerName(buffered);\n            if (name === undefined) return;\n            if (name !== hostname.toLowerCase())\n              throw new Error(\"TLS server name mismatch\");\n          }\n          socket.pause();\n          socket.removeListener(\"data\", receive);\n          const upstream = connect({\n            host: address.address,\n            family: address.family,\n            port: 443,\n          });\n          upstream.on(\"error\", () => socket.destroy());\n          socket.once(\"close\", () => upstream.destroy());\n          upstream.once(\"close\", () => socket.end());\n          upstream.setTimeout(egressRuntime.idleMs, () => upstream.destroy());\n          upstream.once(\"connect\", () => {\n            clearTimeout(timeout);\n            upstream.write(buffered);\n            socket.pipe(upstream).pipe(socket);\n            socket.resume();\n          });\n        } catch {\n          socket.destroy();\n        }\n      };\n      socket.on(\"data\", receive);\n      receive(Buffer.alloc(0));\n    })().catch(() => reject(socket));\n  });\n  server.on(\"upgrade\", (_request, socket) => reject(socket));\n  server.on(\"clientError\", (_error, socket) => reject(socket));\n  server.requestTimeout = egressRuntime.idleMs;\n  server.headersTimeout = egressRuntime.connectMs;\n  server.maxConnections = egressRuntime.maxConnections;\n  return server;\n}\n"]}

package/dist/providers/egress/tls-hello.d.ts

@@ -0,0 +1 @@
+export declare function tlsServerName(input: Buffer): string | undefined;

package/dist/providers/egress/tls-hello.js

@@ -0,0 +1,75 @@
+import { egressRuntime } from "./egress.constants.js";
+export function tlsServerName(input) {
+    if (input.length > egressRuntime.maxHelloBytes)
+        throw new Error("TLS hello too large");
+    const fragments = [];
+    let offset = 0;
+    while (offset < input.length) {
+        if (input.length - offset < 5)
+            return undefined;
+        if (input[offset] !== 22 || input[offset + 1] !== 3)
+            throw new Error("TLS ClientHello required");
+        const end = offset + 5 + input.readUInt16BE(offset + 3);
+        if (end > input.length)
+            return undefined;
+        fragments.push(input.subarray(offset + 5, end));
+        if (fragments.length > egressRuntime.maxHelloRecords)
+            throw new Error("Too many TLS hello records");
+        offset = end;
+        const hello = Buffer.concat(fragments);
+        if (hello.length < 4)
+            continue;
+        if (hello[0] !== 1)
+            throw new Error("TLS ClientHello required");
+        const length = hello.readUIntBE(1, 3) + 4;
+        if (length > egressRuntime.maxHelloBytes)
+            throw new Error("TLS hello too large");
+        if (hello.length < length)
+            continue;
+        const data = hello.subarray(0, length);
+        let cursor = 38;
+        const take = (count) => {
+            if (count < 0 || cursor + count > data.length)
+                throw new Error("Malformed TLS hello");
+            const part = data.subarray(cursor, cursor + count);
+            cursor += count;
+            return part;
+        };
+        take(take(1)[0]);
+        take(take(2).readUInt16BE());
+        take(take(1)[0]);
+        const extensions = take(take(2).readUInt16BE());
+        if (cursor !== data.length)
+            throw new Error("Malformed TLS extensions");
+        let position = 0;
+        let name;
+        while (position < extensions.length) {
+            if (position + 4 > extensions.length)
+                throw new Error("Malformed TLS extension");
+            const kind = extensions.readUInt16BE(position);
+            const size = extensions.readUInt16BE(position + 2);
+            position += 4;
+            if (position + size > extensions.length)
+                throw new Error("Malformed TLS extension");
+            const extension = extensions.subarray(position, position + size);
+            position += size;
+            if (kind !== 0)
+                continue;
+            if (name !== undefined)
+                throw new Error("Duplicate TLS server name");
+            if (size < 5 ||
+                extension.readUInt16BE(0) !== size - 2 ||
+                extension[2] !== 0 ||
+                extension.readUInt16BE(3) !== size - 5)
+                throw new Error("Malformed TLS server name");
+            name = extension.subarray(5).toString("utf8");
+            if (!/^[a-z0-9.-]+$/i.test(name))
+                throw new Error("Invalid TLS server name");
+        }
+        if (name !== undefined)
+            return name.toLowerCase();
+        throw new Error("TLS server name required");
+    }
+    return undefined;
+}
+//# sourceMappingURL=tls-hello.js.map

package/dist/providers/egress/tls-hello.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-hello.js","sourceRoot":"","sources":["../../../src/providers/egress/tls-hello.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,aAAa;QAC5C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAChD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACzC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,SAAS,CAAC,MAAM,GAAG,aAAa,CAAC,eAAe;YAClD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,CAAC;QACb,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,GAAG,aAAa,CAAC,aAAa;YACtC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;YAAE,SAAS;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;YAC7B,IAAI,KAAK,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM;gBAC3C,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAChD,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACxE,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,IAAwB,CAAC;QAC7B,OAAO,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM;gBAClC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;YACnD,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,QAAQ,GAAG,IAAI,GAAG,UAAU,CAAC,MAAM;gBACrC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;YACjE,QAAQ,IAAI,IAAI,CAAC;YACjB,IAAI,IAAI,KAAK,CAAC;gBAAE,SAAS;YACzB,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACrE,IACE,IAAI,GAAG,CAAC;gBACR,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;gBACtC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClB,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;gBAEtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC9B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import { egressRuntime } from \"./egress.constants.ts\";\n\nexport function tlsServerName(input: Buffer): string | undefined {\n  if (input.length > egressRuntime.maxHelloBytes)\n    throw new Error(\"TLS hello too large\");\n  const fragments: Buffer[] = [];\n  let offset = 0;\n  while (offset < input.length) {\n    if (input.length - offset < 5) return undefined;\n    if (input[offset] !== 22 || input[offset + 1] !== 3)\n      throw new Error(\"TLS ClientHello required\");\n    const end = offset + 5 + input.readUInt16BE(offset + 3);\n    if (end > input.length) return undefined;\n    fragments.push(input.subarray(offset + 5, end));\n    if (fragments.length > egressRuntime.maxHelloRecords)\n      throw new Error(\"Too many TLS hello records\");\n    offset = end;\n    const hello = Buffer.concat(fragments);\n    if (hello.length < 4) continue;\n    if (hello[0] !== 1) throw new Error(\"TLS ClientHello required\");\n    const length = hello.readUIntBE(1, 3) + 4;\n    if (length > egressRuntime.maxHelloBytes)\n      throw new Error(\"TLS hello too large\");\n    if (hello.length < length) continue;\n    const data = hello.subarray(0, length);\n    let cursor = 38;\n    const take = (count: number) => {\n      if (count < 0 || cursor + count > data.length)\n        throw new Error(\"Malformed TLS hello\");\n      const part = data.subarray(cursor, cursor + count);\n      cursor += count;\n      return part;\n    };\n    take(take(1)[0]!);\n    take(take(2).readUInt16BE());\n    take(take(1)[0]!);\n    const extensions = take(take(2).readUInt16BE());\n    if (cursor !== data.length) throw new Error(\"Malformed TLS extensions\");\n    let position = 0;\n    let name: string | undefined;\n    while (position < extensions.length) {\n      if (position + 4 > extensions.length)\n        throw new Error(\"Malformed TLS extension\");\n      const kind = extensions.readUInt16BE(position);\n      const size = extensions.readUInt16BE(position + 2);\n      position += 4;\n      if (position + size > extensions.length)\n        throw new Error(\"Malformed TLS extension\");\n      const extension = extensions.subarray(position, position + size);\n      position += size;\n      if (kind !== 0) continue;\n      if (name !== undefined) throw new Error(\"Duplicate TLS server name\");\n      if (\n        size < 5 ||\n        extension.readUInt16BE(0) !== size - 2 ||\n        extension[2] !== 0 ||\n        extension.readUInt16BE(3) !== size - 5\n      )\n        throw new Error(\"Malformed TLS server name\");\n      name = extension.subarray(5).toString(\"utf8\");\n      if (!/^[a-z0-9.-]+$/i.test(name))\n        throw new Error(\"Invalid TLS server name\");\n    }\n    if (name !== undefined) return name.toLowerCase();\n    throw new Error(\"TLS server name required\");\n  }\n  return undefined;\n}\n"]}

package/dist/providers/firecracker-command.js

@@ -59,14 +59,13 @@ export function firecrackerCommand(runtime) {
         let cancellation;
         const cancel = () => {
             cancellation ??= requireSuccess({
-                ...firecrackerSsh(runtime.options, `umask 077; touch ${quote(id + ".cancel")}; if [ -f ${quote(id)} ]; then node -e ${quote("const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),100)")} ${quote(id)}; fi`),
+                ...firecrackerSsh(runtime.options, `umask 077; touch ${quote(id + ".cancel")}; if [ -f ${quote(id)} ]; then node -e ${quote("const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),500)")} ${quote(id)}; fi`),
                 deadlineMs: firecrackerDefaults.cleanupMs,
             }, executeProcess);
             void cancellation.catch(() => undefined);
         };
         signal.addEventListener("abort", cancel, { once: true });
         const timer = setTimeout(() => stop.abort(new OutpostError("timeout", `Command exceeded ${deadlineMs} ms`)), deadlineMs);
-        let interrupted = false;
         try {
             const { directory: _directory, variables: _variables, ...invocation } = command;
             const result = await runtime.executor({
@@ -84,13 +83,20 @@ export function firecrackerCommand(runtime) {
                     }
                     : {}),
                 signal,
-                ...firecrackerSsh(runtime.options, `setsid --wait sh -c ${quote(wrapper)}`),
+                ...firecrackerSsh(runtime.options, `setsid --wait sh -c ${quote(wrapper)}; status=$?; printf '%s' "$status" > ${quote(id + ".status")}; exit "$status"`),
             });
             signal.throwIfAborted();
+            if (result.status === 255) {
+                const status = await executeProcess({
+                    ...firecrackerSsh(runtime.options, `cat ${quote(id + ".status")}`),
+                    deadlineMs: firecrackerDefaults.cleanupMs,
+                });
+                if (status.status !== 0 || status.stdout.trim() !== "255")
+                    throw new OutpostError("provider", "Guest SSH connection failed before command completion", { unavailable: "SSH connection failure" });
+            }
             return result;
         }
         catch (cause) {
-            interrupted = true;
             try {
                 cancel();
                 await cancellation;
@@ -103,9 +109,9 @@ export function firecrackerCommand(runtime) {
         finally {
             clearTimeout(timer);
             signal.removeEventListener("abort", cancel);
-            if (!interrupted && !runtime.isClosed())
+            if (!runtime.isClosed())
                 await executeProcess({
-                    ...firecrackerSsh(runtime.options, `rm -f -- ${quote(id)}`),
+                    ...firecrackerSsh(runtime.options, `rm -f -- ${quote(id)} ${quote(id + ".cancel")} ${quote(id + ".status")}`),
                     deadlineMs: firecrackerDefaults.cleanupMs,
                 }).catch(() => undefined);
         }

package/dist/providers/firecracker-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"firecracker-command.js","sourceRoot":"","sources":["../../src/providers/firecracker-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAMjE,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,MAAc;IAEd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,SAAS,EAAE;YACT,IAAI;YACJ,WAAW;YACX,IAAI;YACJ,IAAI;YACJ,eAAe;YACf,IAAI;YACJ,oBAAoB;YACpB,IAAI;YACJ,2BAA2B;YAC3B,IAAI;YACJ,sBAAsB,GAAG,CAAC,UAAU,EAAE;YACtC,IAAI;YACJ,gCAAgC;YAChC,IAAI;YACJ,kBAAkB;YAClB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,GAAG,CAAC,QAAQ;YACZ,IAAI;YACJ,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACtB,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA2B;IAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;QACtE,SAAS,CACP,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EACzC,iFAAiF,CAClF,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CACrC,EACD,yBAAyB,CAC1B,CAAC;QACF,MAAM,EAAE,GAAG,wBAAwB,UAAU,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,wBAAwB,KAAK,CAAC,EAAE,CAAC,eAAe,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,oBAAoB,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CACnL,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAChB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,SAAS,CAAC;QACvE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnC,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,cAAc,CAC7B;gBACE,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,oBAAoB,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC,oBAAoB,KAAK,CAAC,+QAA+Q,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,CAC7X;gBACD,UAAU,EAAE,mBAAmB,CAAC,SAAS;aAC1C,EACD,cAAc,CACf,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,IAAI,CAAC,KAAK,CACR,IAAI,YAAY,CAAC,SAAS,EAAE,oBAAoB,UAAU,KAAK,CAAC,CACjE,EACH,UAAU,CACX,CAAC;QACF,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,EACJ,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,GAAG,UAAU,EACd,GAAG,OAAO,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gBACpC,GAAG,UAAU;gBACb,GAAG,CAAC,OAAO,CAAC,OAAO;oBACjB,CAAC,CAAC;wBACE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;4BACzB,IAAI,CAAC;gCACH,OAAO,CAAC,OAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;4BAClC,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;4BACpB,CAAC;wBACH,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM;gBACN,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,uBAAuB,KAAK,CAAC,OAAO,CAAC,EAAE,CACxC;aACF,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC;gBACT,MAAM,YAAY,CAAC;YACrB,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACrC,MAAM,cAAc,CAAC;oBACnB,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3D,UAAU,EAAE,mBAAmB,CAAC,SAAS;iBAC1C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { invariant, OutpostError, positive } from \"../domain/errors.ts\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport { firecrackerDefaults } from \"./firecracker.constants.ts\";\nimport type {\n  FirecrackerOptions,\n  FirecrackerRuntime,\n} from \"./firecracker.types.ts\";\n\nexport function firecrackerSsh(\n  options: FirecrackerOptions,\n  script: string,\n): Command {\n  const ssh = options.ssh;\n  return {\n    executable: ssh.binary ?? (options.jailer ? \"/usr/bin/ssh\" : \"ssh\"),\n    arguments: [\n      \"-F\",\n      \"/dev/null\",\n      \"-T\",\n      \"-o\",\n      \"BatchMode=yes\",\n      \"-o\",\n      \"IdentitiesOnly=yes\",\n      \"-o\",\n      \"StrictHostKeyChecking=yes\",\n      \"-o\",\n      `UserKnownHostsFile=${ssh.knownHosts}`,\n      \"-o\",\n      \"GlobalKnownHostsFile=/dev/null\",\n      \"-o\",\n      \"ConnectTimeout=2\",\n      \"-o\",\n      \"ServerAliveInterval=2\",\n      \"-o\",\n      \"ServerAliveCountMax=2\",\n      \"-i\",\n      ssh.identity,\n      \"-p\",\n      String(ssh.port ?? 22),\n      \"-l\",\n      ssh.user,\n      \"--\",\n      ssh.host,\n      script,\n    ],\n  };\n}\n\nexport function firecrackerCommand(\n  runtime: FirecrackerRuntime,\n): SandboxLease[\"invoke\"] {\n  return async (command) => {\n    if (runtime.isClosed())\n      throw new OutpostError(\"provider\", \"Firecracker sandbox is closed\");\n    invariant(\n      !command.interactive && !command.elevated,\n      \"Firecracker research provider does not support interactive or elevated commands\",\n    );\n    command.signal?.throwIfAborted();\n    const variables = { ...runtime.variables, ...command.variables };\n    invariant(\n      Object.keys(variables).every((key) =>\n        /^[A-Za-z_][A-Za-z0-9_]*$/.test(key),\n      ),\n      \"Invalid environment key\",\n    );\n    const id = `/tmp/outpost-command-${randomUUID()}`;\n    const wrapper = `umask 077; echo $$ > ${quote(id)}; test ! -e ${quote(id + \".cancel\")} || exit 130; cd ${quote(command.directory ?? runtime.root)} || exit; exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} ${[command.executable, ...(command.arguments ?? [])].map(quote).join(\" \")}`;\n    const stop = new AbortController();\n    const signal = command.signal\n      ? AbortSignal.any([command.signal, stop.signal])\n      : stop.signal;\n    const deadlineMs = command.deadlineMs ?? firecrackerDefaults.commandMs;\n    positive(deadlineMs, \"deadlineMs\");\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= requireSuccess(\n        {\n          ...firecrackerSsh(\n            runtime.options,\n            `umask 077; touch ${quote(id + \".cancel\")}; if [ -f ${quote(id)} ]; then node -e ${quote(\"const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),100)\")} ${quote(id)}; fi`,\n          ),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        },\n        executeProcess,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    signal.addEventListener(\"abort\", cancel, { once: true });\n    const timer = setTimeout(\n      () =>\n        stop.abort(\n          new OutpostError(\"timeout\", `Command exceeded ${deadlineMs} ms`),\n        ),\n      deadlineMs,\n    );\n    let interrupted = false;\n    try {\n      const {\n        directory: _directory,\n        variables: _variables,\n        ...invocation\n      } = command;\n      const result = await runtime.executor({\n        ...invocation,\n        ...(command.observe\n          ? {\n              observe: (channel, text) => {\n                try {\n                  command.observe!(channel, text);\n                } catch (cause) {\n                  stop.abort(cause);\n                }\n              },\n            }\n          : {}),\n        signal,\n        ...firecrackerSsh(\n          runtime.options,\n          `setsid --wait sh -c ${quote(wrapper)}`,\n        ),\n      });\n      signal.throwIfAborted();\n      return result;\n    } catch (cause) {\n      interrupted = true;\n      try {\n        cancel();\n        await cancellation;\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Guest cancellation could not be confirmed; release the VM\",\n        );\n      }\n      throw cause;\n    } finally {\n      clearTimeout(timer);\n      signal.removeEventListener(\"abort\", cancel);\n      if (!interrupted && !runtime.isClosed())\n        await executeProcess({\n          ...firecrackerSsh(runtime.options, `rm -f -- ${quote(id)}`),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        }).catch(() => undefined);\n    }\n  };\n}\n"]}
+{"version":3,"file":"firecracker-command.js","sourceRoot":"","sources":["../../src/providers/firecracker-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAMjE,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,MAAc;IAEd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,SAAS,EAAE;YACT,IAAI;YACJ,WAAW;YACX,IAAI;YACJ,IAAI;YACJ,eAAe;YACf,IAAI;YACJ,oBAAoB;YACpB,IAAI;YACJ,2BAA2B;YAC3B,IAAI;YACJ,sBAAsB,GAAG,CAAC,UAAU,EAAE;YACtC,IAAI;YACJ,gCAAgC;YAChC,IAAI;YACJ,kBAAkB;YAClB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,GAAG,CAAC,QAAQ;YACZ,IAAI;YACJ,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACtB,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA2B;IAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;QACtE,SAAS,CACP,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EACzC,iFAAiF,CAClF,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CACrC,EACD,yBAAyB,CAC1B,CAAC;QACF,MAAM,EAAE,GAAG,wBAAwB,UAAU,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,wBAAwB,KAAK,CAAC,EAAE,CAAC,eAAe,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,oBAAoB,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CACnL,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAChB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,SAAS,CAAC;QACvE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnC,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,cAAc,CAC7B;gBACE,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,oBAAoB,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC,oBAAoB,KAAK,CAAC,+QAA+Q,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,CAC7X;gBACD,UAAU,EAAE,mBAAmB,CAAC,SAAS;aAC1C,EACD,cAAc,CACf,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,IAAI,CAAC,KAAK,CACR,IAAI,YAAY,CAAC,SAAS,EAAE,oBAAoB,UAAU,KAAK,CAAC,CACjE,EACH,UAAU,CACX,CAAC;QACF,IAAI,CAAC;YACH,MAAM,EACJ,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,GAAG,UAAU,EACd,GAAG,OAAO,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gBACpC,GAAG,UAAU;gBACb,GAAG,CAAC,OAAO,CAAC,OAAO;oBACjB,CAAC,CAAC;wBACE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;4BACzB,IAAI,CAAC;gCACH,OAAO,CAAC,OAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;4BAClC,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;4BACpB,CAAC;wBACH,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM;gBACN,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,uBAAuB,KAAK,CAAC,OAAO,CAAC,wCAAwC,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,kBAAkB,CACrH;aACF,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;oBAClC,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;oBAClE,UAAU,EAAE,mBAAmB,CAAC,SAAS;iBAC1C,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,KAAK;oBACvD,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,uDAAuD,EACvD,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAC1C,CAAC;YACN,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC;gBACT,MAAM,YAAY,CAAC;YACrB,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACrB,MAAM,cAAc,CAAC;oBACnB,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,YAAY,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,EAAE,CAC1E;oBACD,UAAU,EAAE,mBAAmB,CAAC,SAAS;iBAC1C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { invariant, OutpostError, positive } from \"../domain/errors.ts\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport { firecrackerDefaults } from \"./firecracker.constants.ts\";\nimport type {\n  FirecrackerOptions,\n  FirecrackerRuntime,\n} from \"./firecracker.types.ts\";\n\nexport function firecrackerSsh(\n  options: FirecrackerOptions,\n  script: string,\n): Command {\n  const ssh = options.ssh;\n  return {\n    executable: ssh.binary ?? (options.jailer ? \"/usr/bin/ssh\" : \"ssh\"),\n    arguments: [\n      \"-F\",\n      \"/dev/null\",\n      \"-T\",\n      \"-o\",\n      \"BatchMode=yes\",\n      \"-o\",\n      \"IdentitiesOnly=yes\",\n      \"-o\",\n      \"StrictHostKeyChecking=yes\",\n      \"-o\",\n      `UserKnownHostsFile=${ssh.knownHosts}`,\n      \"-o\",\n      \"GlobalKnownHostsFile=/dev/null\",\n      \"-o\",\n      \"ConnectTimeout=2\",\n      \"-o\",\n      \"ServerAliveInterval=2\",\n      \"-o\",\n      \"ServerAliveCountMax=2\",\n      \"-i\",\n      ssh.identity,\n      \"-p\",\n      String(ssh.port ?? 22),\n      \"-l\",\n      ssh.user,\n      \"--\",\n      ssh.host,\n      script,\n    ],\n  };\n}\n\nexport function firecrackerCommand(\n  runtime: FirecrackerRuntime,\n): SandboxLease[\"invoke\"] {\n  return async (command) => {\n    if (runtime.isClosed())\n      throw new OutpostError(\"provider\", \"Firecracker sandbox is closed\");\n    invariant(\n      !command.interactive && !command.elevated,\n      \"Firecracker research provider does not support interactive or elevated commands\",\n    );\n    command.signal?.throwIfAborted();\n    const variables = { ...runtime.variables, ...command.variables };\n    invariant(\n      Object.keys(variables).every((key) =>\n        /^[A-Za-z_][A-Za-z0-9_]*$/.test(key),\n      ),\n      \"Invalid environment key\",\n    );\n    const id = `/tmp/outpost-command-${randomUUID()}`;\n    const wrapper = `umask 077; echo $$ > ${quote(id)}; test ! -e ${quote(id + \".cancel\")} || exit 130; cd ${quote(command.directory ?? runtime.root)} || exit; exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} ${[command.executable, ...(command.arguments ?? [])].map(quote).join(\" \")}`;\n    const stop = new AbortController();\n    const signal = command.signal\n      ? AbortSignal.any([command.signal, stop.signal])\n      : stop.signal;\n    const deadlineMs = command.deadlineMs ?? firecrackerDefaults.commandMs;\n    positive(deadlineMs, \"deadlineMs\");\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= requireSuccess(\n        {\n          ...firecrackerSsh(\n            runtime.options,\n            `umask 077; touch ${quote(id + \".cancel\")}; if [ -f ${quote(id)} ]; then node -e ${quote(\"const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),500)\")} ${quote(id)}; fi`,\n          ),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        },\n        executeProcess,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    signal.addEventListener(\"abort\", cancel, { once: true });\n    const timer = setTimeout(\n      () =>\n        stop.abort(\n          new OutpostError(\"timeout\", `Command exceeded ${deadlineMs} ms`),\n        ),\n      deadlineMs,\n    );\n    try {\n      const {\n        directory: _directory,\n        variables: _variables,\n        ...invocation\n      } = command;\n      const result = await runtime.executor({\n        ...invocation,\n        ...(command.observe\n          ? {\n              observe: (channel, text) => {\n                try {\n                  command.observe!(channel, text);\n                } catch (cause) {\n                  stop.abort(cause);\n                }\n              },\n            }\n          : {}),\n        signal,\n        ...firecrackerSsh(\n          runtime.options,\n          `setsid --wait sh -c ${quote(wrapper)}; status=$?; printf '%s' \"$status\" > ${quote(id + \".status\")}; exit \"$status\"`,\n        ),\n      });\n      signal.throwIfAborted();\n      if (result.status === 255) {\n        const status = await executeProcess({\n          ...firecrackerSsh(runtime.options, `cat ${quote(id + \".status\")}`),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        });\n        if (status.status !== 0 || status.stdout.trim() !== \"255\")\n          throw new OutpostError(\n            \"provider\",\n            \"Guest SSH connection failed before command completion\",\n            { unavailable: \"SSH connection failure\" },\n          );\n      }\n      return result;\n    } catch (cause) {\n      try {\n        cancel();\n        await cancellation;\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Guest cancellation could not be confirmed; release the VM\",\n        );\n      }\n      throw cause;\n    } finally {\n      clearTimeout(timer);\n      signal.removeEventListener(\"abort\", cancel);\n      if (!runtime.isClosed())\n        await executeProcess({\n          ...firecrackerSsh(\n            runtime.options,\n            `rm -f -- ${quote(id)} ${quote(id + \".cancel\")} ${quote(id + \".status\")}`,\n          ),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        }).catch(() => undefined);\n    }\n  };\n}\n"]}

package/dist/providers/local-files.d.ts

@@ -0,0 +1,2 @@
+import type { SandboxLease } from "../domain/sandbox.types.ts";
+export declare function localFiles(root: string, isClosed: () => boolean): Pick<SandboxLease, "upload" | "download">;

package/dist/providers/local-files.js

@@ -0,0 +1,24 @@
+import { basename, resolve } from "node:path";
+import { invariant, OutpostError } from "../domain/errors.js";
+import { inside } from "../infrastructure/files.js";
+import { copyTransfer, transferDestination, transferTarget, } from "../infrastructure/transfer-copy.js";
+import { transfer } from "../infrastructure/transfer.js";
+export function localFiles(root, isClosed) {
+    const copy = (source, destination, contents, options) => transfer(options, async (signal) => {
+        if (isClosed())
+            throw new OutpostError("provider", "Local sandbox is closed");
+        await transferDestination(destination);
+        if (source === destination)
+            return;
+        const target = await transferTarget(basename(source), destination, contents);
+        if (source === target)
+            return;
+        invariant(!inside(source, target), "Cannot copy a directory into itself");
+        await copyTransfer(source, target, signal);
+    });
+    return {
+        upload: (source, destination, options = {}) => copy(resolve(source), resolve(root, destination), /[\\/]\.$/.test(source), options),
+        download: (source, destination, options = {}) => copy(resolve(root, source), resolve(destination), /[\\/]\.$/.test(source), options),
+    };
+}
+//# sourceMappingURL=local-files.js.map

package/dist/providers/local-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-files.js","sourceRoot":"","sources":["../../src/providers/local-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,cAAc,GACf,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEzD,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,QAAuB;IAEvB,MAAM,IAAI,GAAG,CACX,MAAc,EACd,WAAmB,EACnB,QAAiB,EACjB,OAAwB,EACxB,EAAE,CACF,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACjC,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO;QACnC,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,QAAQ,CAAC,MAAM,CAAC,EAChB,WAAW,EACX,QAAQ,CACT,CAAC;QACF,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO;QAC9B,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAC1E,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IACL,OAAO;QACL,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAC5C,IAAI,CACF,OAAO,CAAC,MAAM,CAAC,EACf,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,EAC1B,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EACvB,OAAO,CACR;QACH,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAC9C,IAAI,CACF,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EACrB,OAAO,CAAC,WAAW,CAAC,EACpB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EACvB,OAAO,CACR;KACJ,CAAC;AACJ,CAAC","sourcesContent":["import { basename, resolve } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease, TransferOptions } from \"../domain/sandbox.types.ts\";\nimport { inside } from \"../infrastructure/files.ts\";\nimport {\n  copyTransfer,\n  transferDestination,\n  transferTarget,\n} from \"../infrastructure/transfer-copy.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\n\nexport function localFiles(\n  root: string,\n  isClosed: () => boolean,\n): Pick<SandboxLease, \"upload\" | \"download\"> {\n  const copy = (\n    source: string,\n    destination: string,\n    contents: boolean,\n    options: TransferOptions,\n  ) =>\n    transfer(options, async (signal) => {\n      if (isClosed())\n        throw new OutpostError(\"provider\", \"Local sandbox is closed\");\n      await transferDestination(destination);\n      if (source === destination) return;\n      const target = await transferTarget(\n        basename(source),\n        destination,\n        contents,\n      );\n      if (source === target) return;\n      invariant(!inside(source, target), \"Cannot copy a directory into itself\");\n      await copyTransfer(source, target, signal);\n    });\n  return {\n    upload: (source, destination, options = {}) =>\n      copy(\n        resolve(source),\n        resolve(root, destination),\n        /[\\\\/]\\.$/.test(source),\n        options,\n      ),\n    download: (source, destination, options = {}) =>\n      copy(\n        resolve(root, source),\n        resolve(destination),\n        /[\\\\/]\\.$/.test(source),\n        options,\n      ),\n  };\n}\n"]}