@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/providers/file-upload.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-upload.constants.js","sourceRoot":"","sources":["../../src/providers/file-upload.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkEzC,CAAC","sourcesContent":["export const fileUploadScript = String.raw`\nconst f = require('node:fs'), p = require('node:path'), c = require('node:crypto'), z = require('node:zlib');\nconst [operation, root, input, staging] = process.argv.slice(1);\nconst keys = ['path', 'kind', 'mode', 'size', 'sha256'];\nfunction safe(path) {\n  if (!path || p.isAbsolute(path) || path.includes('\\\\') || path.includes('\\0') || path.split('/').some(x => !x || x === '.' || x === '..' || x.toLowerCase() === '.git')) throw Error('Unsafe upload path');\n  const target = p.resolve(root, path);\n  let parent = p.dirname(target);\n  while (true) {\n    let stat;\n    try { stat = f.lstatSync(parent); } catch (error) { if (error.code !== 'ENOENT') throw error; }\n    if (stat && (!stat.isDirectory() || stat.isSymbolicLink())) throw Error('Upload path traverses non-directory');\n    if (parent === p.resolve(root)) break;\n    parent = p.dirname(parent);\n  }\n  return target;\n}\nasync function inspect(target, path) {\n  const stat = f.lstatSync(target), hash = c.createHash('sha256');\n  if (!stat.isFile() && !stat.isSymbolicLink()) throw Error('Unsupported upload destination');\n  let size = stat.size;\n  if (stat.isSymbolicLink()) { const data = Buffer.from(f.readlinkSync(target)); size = data.length; hash.update(data); }\n  else for await (const chunk of f.createReadStream(target)) hash.update(chunk);\n  return { path, kind: stat.isSymbolicLink() ? 'link' : 'file', mode: stat.mode & 511, size, sha256: hash.digest('hex') };\n}\nfunction same(left, right) { return keys.every(key => left[key] === right[key]); }\n(async () => {\n  if (operation === 'cleanup') { f.rmSync(input, { recursive: true, force: true }); return; }\n  if (operation === 'stage') { f.mkdirSync(input, { mode: 448 }); process.stdout.write(input); return; }\n  const entries = JSON.parse(input);\n  if (operation === 'missing') {\n    const missing = [];\n    for (const entry of entries) {\n      const target = safe(entry.path);\n      let actual;\n      try { actual = await inspect(target, entry.path); } catch (error) { if (error.code !== 'ENOENT') throw error; }\n      if (!actual || !same(actual, entry)) missing.push(entry.path);\n    }\n    process.stdout.write(JSON.stringify(missing)); return;\n  }\n  const records = operation === 'batch' ? JSON.parse(z.gunzipSync(f.readFileSync(p.join(staging, 'payload')), { maxOutputLength: 16777216 }).toString('utf8')) : undefined;\n  if (records && (!Array.isArray(records) || records.length !== entries.length)) throw Error('Invalid upload batch');\n  for (const [index, entry] of entries.entries()) {\n    safe(entry.path);\n    const temporary = p.join(staging, 'entry-' + index);\n    if (records) {\n      const record = records[index];\n      if (!record || !same(record, entry) || typeof record.data !== 'string') throw Error('Invalid upload batch');\n      const data = Buffer.from(record.data, 'base64');\n      if (data.length !== entry.size || c.createHash('sha256').update(data).digest('hex') !== entry.sha256) throw Error('Upload checksum mismatch');\n      if (entry.kind === 'link') f.symlinkSync(data.toString('utf8'), temporary);\n      else { f.writeFileSync(temporary, data, { flag: 'wx', mode: entry.mode }); f.chmodSync(temporary, entry.mode); }\n    } else {\n      if (entry.kind !== 'file') throw Error('Invalid large upload');\n      const actual = await inspect(p.join(staging, 'payload'), entry.path);\n      if (actual.kind !== entry.kind || actual.size !== entry.size || actual.sha256 !== entry.sha256) throw Error('Upload checksum mismatch');\n      f.renameSync(p.join(staging, 'payload'), temporary); f.chmodSync(temporary, entry.mode);\n    }\n  }\n  for (const [index, entry] of entries.entries()) {\n    const target = safe(entry.path);\n    f.mkdirSync(p.dirname(target), { recursive: true });\n    f.renameSync(p.join(staging, 'entry-' + index), target);\n    if (!same(await inspect(target, entry.path), entry)) throw Error('Upload verification failed');\n  }\n})().catch(error => { console.error(error.message); process.exitCode = 1; });\n`;\n"]}

package/dist/providers/file-upload.d.ts

@@ -0,0 +1,2 @@
+import type { FileTransfers, SandboxLease } from "../domain/sandbox.types.ts";
+export declare function uploadBatch(lease: Pick<SandboxLease, "invoke" | "upload">): NonNullable<FileTransfers["uploadBatch"]>;

package/dist/providers/file-upload.js

@@ -0,0 +1,146 @@
+import { createHash, randomUUID } from "node:crypto";
+import { copyFile, mkdtemp, open, readlink, rm, writeFile, } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { gzipSync } from "node:zlib";
+import { OutpostError } from "../domain/errors.js";
+import { fileManifest, parseManifest, sameFile, } from "../infrastructure/file-manifest.js";
+import { inspectionFileFlags } from "../infrastructure/inspection-file.constants.js";
+import { safeDestination } from "../infrastructure/files.js";
+import { transfer } from "../infrastructure/transfer.js";
+import { fileBatchLimits } from "./file-batches.constants.js";
+import { fileUploadScript } from "./file-upload.constants.js";
+export function uploadBatch(lease) {
+    return (source, entries, destination, options = {}) => transfer(options, async (signal) => {
+        parseManifest(entries, entries.map((entry) => entry.path));
+        const run = async (operation, input, staging = "", controls = { ...options, signal }) => {
+            const result = await lease.invoke({
+                executable: "node",
+                arguments: [
+                    "-e",
+                    fileUploadScript,
+                    operation,
+                    destination,
+                    input,
+                    staging,
+                ],
+                retain: fileBatchLimits.manifestBytes,
+                ...controls,
+            });
+            if (result.status !== 0)
+                throw new OutpostError("provider", "Remote file upload failed", {
+                    stderr: result.stderr,
+                });
+            return result.stdout;
+        };
+        const staging = await mkdtemp(join(tmpdir(), "outpost-upload-"));
+        try {
+            let pending = [], bytes = 0;
+            const flush = async () => {
+                if (!pending.length)
+                    return;
+                signal.throwIfAborted();
+                for (const entry of pending) {
+                    if (!sameFile(entry, await fileManifest(source, entry.path, signal)))
+                        throw new OutpostError("provider", "Upload source changed", {
+                            path: entry.path,
+                        });
+                }
+                const missing = JSON.parse(await run("missing", JSON.stringify(pending)));
+                if (!Array.isArray(missing) ||
+                    missing.some((path) => typeof path !== "string" ||
+                        !pending.some((entry) => entry.path === path)) ||
+                    new Set(missing).size !== missing.length)
+                    throw new OutpostError("provider", "Invalid destination upload manifest");
+                const selected = pending.filter((entry) => missing.includes(entry.path));
+                if (selected.length) {
+                    const remote = `${destination.replaceAll("\\", "/").replace(/\/$/, "")}/.outpost-upload-${randomUUID()}`;
+                    try {
+                        if ((await run("stage", remote)) !== remote)
+                            throw new OutpostError("provider", "Invalid remote upload staging path");
+                        const payload = join(staging, "payload");
+                        await rm(payload, { force: true });
+                        const large = selected[0].size > fileBatchLimits.bytes;
+                        if (large) {
+                            const entry = selected[0];
+                            await copyFile(await safeDestination(source, entry.path), payload);
+                            if (!sameFile({ ...entry, path: "payload" }, await fileManifest(staging, "payload", signal)))
+                                throw new OutpostError("provider", "Upload source changed", {
+                                    path: entry.path,
+                                });
+                        }
+                        else {
+                            const records = [];
+                            for (const entry of selected) {
+                                signal.throwIfAborted();
+                                const path = await safeDestination(source, entry.path);
+                                const data = entry.kind === "link"
+                                    ? Buffer.from(await readlink(path))
+                                    : await readPayload(path, entry.size, signal);
+                                if (data.length !== entry.size ||
+                                    createHash("sha256").update(data).digest("hex") !==
+                                        entry.sha256 ||
+                                    !sameFile(entry, await fileManifest(source, entry.path, signal)))
+                                    throw new OutpostError("provider", "Upload source changed", { path: entry.path });
+                                records.push({ ...entry, data: data.toString("base64") });
+                            }
+                            await writeFile(payload, gzipSync(Buffer.from(JSON.stringify(records))), { mode: 0o600 });
+                        }
+                        signal.throwIfAborted();
+                        await lease.upload(payload, `${remote}/payload`, {
+                            ...options,
+                            signal,
+                        });
+                        signal.throwIfAborted();
+                        await run(large ? "large" : "batch", JSON.stringify(selected), remote);
+                    }
+                    finally {
+                        await run("cleanup", remote, "", {
+                            deadlineMs: fileBatchLimits.cleanupMs,
+                        }).catch(() => undefined);
+                    }
+                }
+                for (const entry of pending) {
+                    if (!sameFile(entry, await fileManifest(source, entry.path, signal)))
+                        throw new OutpostError("provider", "Upload source changed", {
+                            path: entry.path,
+                        });
+                }
+                signal.throwIfAborted();
+                pending = [];
+                bytes = 0;
+            };
+            for (const entry of entries) {
+                if (Buffer.byteLength(JSON.stringify([entry])) >
+                    fileBatchLimits.argumentBytes)
+                    throw new OutpostError("provider", "Upload path exceeds command size limit");
+                if (pending.length >= fileBatchLimits.entries ||
+                    bytes + entry.size > fileBatchLimits.bytes ||
+                    Buffer.byteLength(JSON.stringify([...pending, entry])) >
+                        fileBatchLimits.argumentBytes)
+                    await flush();
+                pending.push(entry);
+                bytes += entry.size;
+                if (entry.size > fileBatchLimits.bytes)
+                    await flush();
+            }
+            await flush();
+        }
+        finally {
+            await rm(staging, { recursive: true, force: true });
+        }
+    });
+}
+async function readPayload(path, size, signal) {
+    const chunks = [];
+    let bytes = 0;
+    const file = await open(path, inspectionFileFlags);
+    for await (const chunk of file.createReadStream({ signal })) {
+        bytes += chunk.length;
+        if (bytes > size)
+            throw new OutpostError("provider", "Upload source changed", { path });
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks);
+}
+//# sourceMappingURL=file-upload.js.map

package/dist/providers/file-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-upload.js","sourceRoot":"","sources":["../../src/providers/file-upload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,QAAQ,EACR,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAOnD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,QAAQ,GACT,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAE9D,MAAM,UAAU,WAAW,CACzB,KAA8C;IAE9C,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CACpD,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACjC,aAAa,CACX,OAAO,EACP,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CACnC,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,EACf,SAAiB,EACjB,KAAa,EACb,OAAO,GAAG,EAAE,EACZ,WAA4B,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAClD,EAAE;YACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;gBAChC,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE;oBACT,IAAI;oBACJ,gBAAgB;oBAChB,SAAS;oBACT,WAAW;oBACX,KAAK;oBACL,OAAO;iBACR;gBACD,MAAM,EAAE,eAAe,CAAC,aAAa;gBACrC,GAAG,QAAQ;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,2BAA2B,EAAE;oBAC9D,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;YACL,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,IAAI,OAAO,GAAwB,EAAE,EACnC,KAAK,GAAG,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;gBACvB,IAAI,CAAC,OAAO,CAAC,MAAM;oBAAE,OAAO;gBAC5B,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IACE,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAEhE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE;4BAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;yBACjB,CAAC,CAAC;gBACP,CAAC;gBACD,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CACjC,MAAM,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAC9C,CAAC;gBACF,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBACvB,OAAO,CAAC,IAAI,CACV,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,KAAK,QAAQ;wBACxB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAChD;oBACD,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;oBAExC,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,qCAAqC,CACtC,CAAC;gBACJ,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAC7B,CAAC;gBACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,UAAU,EAAE,EAAE,CAAC;oBACzG,IAAI,CAAC;wBACH,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,MAAM;4BACzC,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,oCAAoC,CACrC,CAAC;wBACJ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;wBACzC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC;wBACxD,IAAI,KAAK,EAAE,CAAC;4BACV,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;4BAC3B,MAAM,QAAQ,CACZ,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EACzC,OAAO,CACR,CAAC;4BACF,IACE,CAAC,QAAQ,CACP,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAC7B,MAAM,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAC/C;gCAED,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE;oCAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;iCACjB,CAAC,CAAC;wBACP,CAAC;6BAAM,CAAC;4BACN,MAAM,OAAO,GAAG,EAAE,CAAC;4BACnB,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gCAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;gCACxB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gCACvD,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,MAAM;oCACnB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;oCACnC,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gCAClD,IACE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI;oCAC1B,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wCAC7C,KAAK,CAAC,MAAM;oCACd,CAAC,QAAQ,CACP,KAAK,EACL,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAC/C;oCAED,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,uBAAuB,EACvB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gCACJ,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;4BAC5D,CAAC;4BACD,MAAM,SAAS,CACb,OAAO,EACP,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAC9C,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;wBACJ,CAAC;wBACD,MAAM,CAAC,cAAc,EAAE,CAAC;wBACxB,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,UAAU,EAAE;4BAC/C,GAAG,OAAO;4BACV,MAAM;yBACP,CAAC,CAAC;wBACH,MAAM,CAAC,cAAc,EAAE,CAAC;wBACxB,MAAM,GAAG,CACP,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EACzB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,MAAM,CACP,CAAC;oBACJ,CAAC;4BAAS,CAAC;wBACT,MAAM,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;4BAC/B,UAAU,EAAE,eAAe,CAAC,SAAS;yBACtC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IACE,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAEhE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE;4BAC1D,IAAI,EAAE,KAAK,CAAC,IAAI;yBACjB,CAAC,CAAC;gBACP,CAAC;gBACD,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,GAAG,CAAC,CAAC;YACZ,CAAC,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IACE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1C,eAAe,CAAC,aAAa;oBAE7B,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,wCAAwC,CACzC,CAAC;gBACJ,IACE,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,OAAO;oBACzC,KAAK,GAAG,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC,KAAK;oBAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;wBACpD,eAAe,CAAC,aAAa;oBAE/B,MAAM,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC;gBACpB,IAAI,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC,KAAK;oBAAE,MAAM,KAAK,EAAE,CAAC;YACxD,CAAC;YACD,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,IAAY,EACZ,MAAmB;IAEnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC5D,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,IAAI;YACd,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport {\n  copyFile,\n  mkdtemp,\n  open,\n  readlink,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { gzipSync } from \"node:zlib\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type {\n  FileManifestEntry,\n  FileTransfers,\n  SandboxLease,\n  TransferOptions,\n} from \"../domain/sandbox.types.ts\";\nimport {\n  fileManifest,\n  parseManifest,\n  sameFile,\n} from \"../infrastructure/file-manifest.ts\";\nimport { inspectionFileFlags } from \"../infrastructure/inspection-file.constants.ts\";\nimport { safeDestination } from \"../infrastructure/files.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\nimport { fileBatchLimits } from \"./file-batches.constants.ts\";\nimport { fileUploadScript } from \"./file-upload.constants.ts\";\n\nexport function uploadBatch(\n  lease: Pick<SandboxLease, \"invoke\" | \"upload\">,\n): NonNullable<FileTransfers[\"uploadBatch\"]> {\n  return (source, entries, destination, options = {}) =>\n    transfer(options, async (signal) => {\n      parseManifest(\n        entries,\n        entries.map((entry) => entry.path),\n      );\n      const run = async (\n        operation: string,\n        input: string,\n        staging = \"\",\n        controls: TransferOptions = { ...options, signal },\n      ) => {\n        const result = await lease.invoke({\n          executable: \"node\",\n          arguments: [\n            \"-e\",\n            fileUploadScript,\n            operation,\n            destination,\n            input,\n            staging,\n          ],\n          retain: fileBatchLimits.manifestBytes,\n          ...controls,\n        });\n        if (result.status !== 0)\n          throw new OutpostError(\"provider\", \"Remote file upload failed\", {\n            stderr: result.stderr,\n          });\n        return result.stdout;\n      };\n      const staging = await mkdtemp(join(tmpdir(), \"outpost-upload-\"));\n      try {\n        let pending: FileManifestEntry[] = [],\n          bytes = 0;\n        const flush = async () => {\n          if (!pending.length) return;\n          signal.throwIfAborted();\n          for (const entry of pending) {\n            if (\n              !sameFile(entry, await fileManifest(source, entry.path, signal))\n            )\n              throw new OutpostError(\"provider\", \"Upload source changed\", {\n                path: entry.path,\n              });\n          }\n          const missing: unknown = JSON.parse(\n            await run(\"missing\", JSON.stringify(pending)),\n          );\n          if (\n            !Array.isArray(missing) ||\n            missing.some(\n              (path) =>\n                typeof path !== \"string\" ||\n                !pending.some((entry) => entry.path === path),\n            ) ||\n            new Set(missing).size !== missing.length\n          )\n            throw new OutpostError(\n              \"provider\",\n              \"Invalid destination upload manifest\",\n            );\n          const selected = pending.filter((entry) =>\n            missing.includes(entry.path),\n          );\n          if (selected.length) {\n            const remote = `${destination.replaceAll(\"\\\\\", \"/\").replace(/\\/$/, \"\")}/.outpost-upload-${randomUUID()}`;\n            try {\n              if ((await run(\"stage\", remote)) !== remote)\n                throw new OutpostError(\n                  \"provider\",\n                  \"Invalid remote upload staging path\",\n                );\n              const payload = join(staging, \"payload\");\n              await rm(payload, { force: true });\n              const large = selected[0]!.size > fileBatchLimits.bytes;\n              if (large) {\n                const entry = selected[0]!;\n                await copyFile(\n                  await safeDestination(source, entry.path),\n                  payload,\n                );\n                if (\n                  !sameFile(\n                    { ...entry, path: \"payload\" },\n                    await fileManifest(staging, \"payload\", signal),\n                  )\n                )\n                  throw new OutpostError(\"provider\", \"Upload source changed\", {\n                    path: entry.path,\n                  });\n              } else {\n                const records = [];\n                for (const entry of selected) {\n                  signal.throwIfAborted();\n                  const path = await safeDestination(source, entry.path);\n                  const data =\n                    entry.kind === \"link\"\n                      ? Buffer.from(await readlink(path))\n                      : await readPayload(path, entry.size, signal);\n                  if (\n                    data.length !== entry.size ||\n                    createHash(\"sha256\").update(data).digest(\"hex\") !==\n                      entry.sha256 ||\n                    !sameFile(\n                      entry,\n                      await fileManifest(source, entry.path, signal),\n                    )\n                  )\n                    throw new OutpostError(\n                      \"provider\",\n                      \"Upload source changed\",\n                      { path: entry.path },\n                    );\n                  records.push({ ...entry, data: data.toString(\"base64\") });\n                }\n                await writeFile(\n                  payload,\n                  gzipSync(Buffer.from(JSON.stringify(records))),\n                  { mode: 0o600 },\n                );\n              }\n              signal.throwIfAborted();\n              await lease.upload(payload, `${remote}/payload`, {\n                ...options,\n                signal,\n              });\n              signal.throwIfAborted();\n              await run(\n                large ? \"large\" : \"batch\",\n                JSON.stringify(selected),\n                remote,\n              );\n            } finally {\n              await run(\"cleanup\", remote, \"\", {\n                deadlineMs: fileBatchLimits.cleanupMs,\n              }).catch(() => undefined);\n            }\n          }\n          for (const entry of pending) {\n            if (\n              !sameFile(entry, await fileManifest(source, entry.path, signal))\n            )\n              throw new OutpostError(\"provider\", \"Upload source changed\", {\n                path: entry.path,\n              });\n          }\n          signal.throwIfAborted();\n          pending = [];\n          bytes = 0;\n        };\n        for (const entry of entries) {\n          if (\n            Buffer.byteLength(JSON.stringify([entry])) >\n            fileBatchLimits.argumentBytes\n          )\n            throw new OutpostError(\n              \"provider\",\n              \"Upload path exceeds command size limit\",\n            );\n          if (\n            pending.length >= fileBatchLimits.entries ||\n            bytes + entry.size > fileBatchLimits.bytes ||\n            Buffer.byteLength(JSON.stringify([...pending, entry])) >\n              fileBatchLimits.argumentBytes\n          )\n            await flush();\n          pending.push(entry);\n          bytes += entry.size;\n          if (entry.size > fileBatchLimits.bytes) await flush();\n        }\n        await flush();\n      } finally {\n        await rm(staging, { recursive: true, force: true });\n      }\n    });\n}\n\nasync function readPayload(\n  path: string,\n  size: number,\n  signal: AbortSignal,\n): Promise<Buffer> {\n  const chunks: Buffer[] = [];\n  let bytes = 0;\n  const file = await open(path, inspectionFileFlags);\n  for await (const chunk of file.createReadStream({ signal })) {\n    bytes += chunk.length;\n    if (bytes > size)\n      throw new OutpostError(\"provider\", \"Upload source changed\", { path });\n    chunks.push(chunk);\n  }\n  return Buffer.concat(chunks);\n}\n"]}

package/dist/providers/firecracker-command.d.ts

@@ -0,0 +1,5 @@
+import type { Command } from "../domain/command.types.ts";
+import type { SandboxLease } from "../domain/sandbox.types.ts";
+import type { FirecrackerOptions, FirecrackerRuntime } from "./firecracker.types.ts";
+export declare function firecrackerSsh(options: FirecrackerOptions, script: string): Command;
+export declare function firecrackerCommand(runtime: FirecrackerRuntime): SandboxLease["invoke"];

package/dist/providers/firecracker-command.js

@@ -0,0 +1,114 @@
+import { randomUUID } from "node:crypto";
+import { invariant, OutpostError, positive } from "../domain/errors.js";
+import { executeProcess, quote, requireSuccess, } from "../infrastructure/process.js";
+import { firecrackerDefaults } from "./firecracker.constants.js";
+export function firecrackerSsh(options, script) {
+    const ssh = options.ssh;
+    return {
+        executable: ssh.binary ?? "ssh",
+        arguments: [
+            "-F",
+            "/dev/null",
+            "-T",
+            "-o",
+            "BatchMode=yes",
+            "-o",
+            "IdentitiesOnly=yes",
+            "-o",
+            "StrictHostKeyChecking=yes",
+            "-o",
+            `UserKnownHostsFile=${ssh.knownHosts}`,
+            "-o",
+            "GlobalKnownHostsFile=/dev/null",
+            "-o",
+            "ConnectTimeout=2",
+            "-o",
+            "ServerAliveInterval=2",
+            "-o",
+            "ServerAliveCountMax=2",
+            "-i",
+            ssh.identity,
+            "-p",
+            String(ssh.port ?? 22),
+            "-l",
+            ssh.user,
+            "--",
+            ssh.host,
+            script,
+        ],
+    };
+}
+export function firecrackerCommand(runtime) {
+    return async (command) => {
+        if (runtime.isClosed())
+            throw new OutpostError("provider", "Firecracker sandbox is closed");
+        invariant(!command.interactive && !command.elevated, "Firecracker research provider does not support interactive or elevated commands");
+        command.signal?.throwIfAborted();
+        const variables = { ...runtime.variables, ...command.variables };
+        invariant(Object.keys(variables).every((key) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(key)), "Invalid environment key");
+        const id = `/tmp/outpost-command-${randomUUID()}`;
+        const wrapper = `umask 077; echo $$ > ${quote(id)}; test ! -e ${quote(id + ".cancel")} || exit 130; cd ${quote(command.directory ?? runtime.root)} || exit; exec env ${Object.entries(variables)
+            .map(([key, value]) => quote(`${key}=${value}`))
+            .join(" ")} ${[command.executable, ...(command.arguments ?? [])].map(quote).join(" ")}`;
+        const stop = new AbortController();
+        const signal = command.signal
+            ? AbortSignal.any([command.signal, stop.signal])
+            : stop.signal;
+        const deadlineMs = command.deadlineMs ?? firecrackerDefaults.commandMs;
+        positive(deadlineMs, "deadlineMs");
+        let cancellation;
+        const cancel = () => {
+            cancellation ??= requireSuccess({
+                ...firecrackerSsh(runtime.options, `umask 077; touch ${quote(id + ".cancel")}; if [ -f ${quote(id)} ]; then node -e ${quote("const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),100)")} ${quote(id)}; fi`),
+                deadlineMs: firecrackerDefaults.cleanupMs,
+            }, executeProcess);
+            void cancellation.catch(() => undefined);
+        };
+        signal.addEventListener("abort", cancel, { once: true });
+        const timer = setTimeout(() => stop.abort(new OutpostError("timeout", `Command exceeded ${deadlineMs} ms`)), deadlineMs);
+        let interrupted = false;
+        try {
+            const { directory: _directory, variables: _variables, ...invocation } = command;
+            const result = await runtime.executor({
+                ...invocation,
+                ...(command.observe
+                    ? {
+                        observe: (channel, text) => {
+                            try {
+                                command.observe(channel, text);
+                            }
+                            catch (cause) {
+                                stop.abort(cause);
+                            }
+                        },
+                    }
+                    : {}),
+                signal,
+                ...firecrackerSsh(runtime.options, `setsid --wait sh -c ${quote(wrapper)}`),
+            });
+            signal.throwIfAborted();
+            return result;
+        }
+        catch (cause) {
+            interrupted = true;
+            try {
+                cancel();
+                await cancellation;
+            }
+            catch (cleanup) {
+                throw new AggregateError([cause, cleanup], "Guest cancellation could not be confirmed; release the VM");
+            }
+            throw cause;
+        }
+        finally {
+            clearTimeout(timer);
+            signal.removeEventListener("abort", cancel);
+            if (!interrupted && !runtime.isClosed())
+                await executeProcess({
+                    ...firecrackerSsh(runtime.options, `rm -f -- ${quote(id)}`),
+                    deadlineMs: firecrackerDefaults.cleanupMs,
+                }).catch(() => undefined);
+        }
+    };
+}
+//# sourceMappingURL=firecracker-command.js.map

package/dist/providers/firecracker-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker-command.js","sourceRoot":"","sources":["../../src/providers/firecracker-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAMjE,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,MAAc;IAEd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;QAC/B,SAAS,EAAE;YACT,IAAI;YACJ,WAAW;YACX,IAAI;YACJ,IAAI;YACJ,eAAe;YACf,IAAI;YACJ,oBAAoB;YACpB,IAAI;YACJ,2BAA2B;YAC3B,IAAI;YACJ,sBAAsB,GAAG,CAAC,UAAU,EAAE;YACtC,IAAI;YACJ,gCAAgC;YAChC,IAAI;YACJ,kBAAkB;YAClB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,GAAG,CAAC,QAAQ;YACZ,IAAI;YACJ,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACtB,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA2B;IAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;QACtE,SAAS,CACP,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EACzC,iFAAiF,CAClF,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CACrC,EACD,yBAAyB,CAC1B,CAAC;QACF,MAAM,EAAE,GAAG,wBAAwB,UAAU,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,wBAAwB,KAAK,CAAC,EAAE,CAAC,eAAe,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,oBAAoB,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CACnL,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAChB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,SAAS,CAAC;QACvE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnC,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,cAAc,CAC7B;gBACE,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,oBAAoB,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC,oBAAoB,KAAK,CAAC,+QAA+Q,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,CAC7X;gBACD,UAAU,EAAE,mBAAmB,CAAC,SAAS;aAC1C,EACD,cAAc,CACf,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,IAAI,CAAC,KAAK,CACR,IAAI,YAAY,CAAC,SAAS,EAAE,oBAAoB,UAAU,KAAK,CAAC,CACjE,EACH,UAAU,CACX,CAAC;QACF,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,EACJ,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,GAAG,UAAU,EACd,GAAG,OAAO,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gBACpC,GAAG,UAAU;gBACb,GAAG,CAAC,OAAO,CAAC,OAAO;oBACjB,CAAC,CAAC;wBACE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;4BACzB,IAAI,CAAC;gCACH,OAAO,CAAC,OAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;4BAClC,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;4BACpB,CAAC;wBACH,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM;gBACN,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,uBAAuB,KAAK,CAAC,OAAO,CAAC,EAAE,CACxC;aACF,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC;gBACT,MAAM,YAAY,CAAC;YACrB,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACrC,MAAM,cAAc,CAAC;oBACnB,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3D,UAAU,EAAE,mBAAmB,CAAC,SAAS;iBAC1C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { invariant, OutpostError, positive } from \"../domain/errors.ts\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport { firecrackerDefaults } from \"./firecracker.constants.ts\";\nimport type {\n  FirecrackerOptions,\n  FirecrackerRuntime,\n} from \"./firecracker.types.ts\";\n\nexport function firecrackerSsh(\n  options: FirecrackerOptions,\n  script: string,\n): Command {\n  const ssh = options.ssh;\n  return {\n    executable: ssh.binary ?? \"ssh\",\n    arguments: [\n      \"-F\",\n      \"/dev/null\",\n      \"-T\",\n      \"-o\",\n      \"BatchMode=yes\",\n      \"-o\",\n      \"IdentitiesOnly=yes\",\n      \"-o\",\n      \"StrictHostKeyChecking=yes\",\n      \"-o\",\n      `UserKnownHostsFile=${ssh.knownHosts}`,\n      \"-o\",\n      \"GlobalKnownHostsFile=/dev/null\",\n      \"-o\",\n      \"ConnectTimeout=2\",\n      \"-o\",\n      \"ServerAliveInterval=2\",\n      \"-o\",\n      \"ServerAliveCountMax=2\",\n      \"-i\",\n      ssh.identity,\n      \"-p\",\n      String(ssh.port ?? 22),\n      \"-l\",\n      ssh.user,\n      \"--\",\n      ssh.host,\n      script,\n    ],\n  };\n}\n\nexport function firecrackerCommand(\n  runtime: FirecrackerRuntime,\n): SandboxLease[\"invoke\"] {\n  return async (command) => {\n    if (runtime.isClosed())\n      throw new OutpostError(\"provider\", \"Firecracker sandbox is closed\");\n    invariant(\n      !command.interactive && !command.elevated,\n      \"Firecracker research provider does not support interactive or elevated commands\",\n    );\n    command.signal?.throwIfAborted();\n    const variables = { ...runtime.variables, ...command.variables };\n    invariant(\n      Object.keys(variables).every((key) =>\n        /^[A-Za-z_][A-Za-z0-9_]*$/.test(key),\n      ),\n      \"Invalid environment key\",\n    );\n    const id = `/tmp/outpost-command-${randomUUID()}`;\n    const wrapper = `umask 077; echo $$ > ${quote(id)}; test ! -e ${quote(id + \".cancel\")} || exit 130; cd ${quote(command.directory ?? runtime.root)} || exit; exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} ${[command.executable, ...(command.arguments ?? [])].map(quote).join(\" \")}`;\n    const stop = new AbortController();\n    const signal = command.signal\n      ? AbortSignal.any([command.signal, stop.signal])\n      : stop.signal;\n    const deadlineMs = command.deadlineMs ?? firecrackerDefaults.commandMs;\n    positive(deadlineMs, \"deadlineMs\");\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= requireSuccess(\n        {\n          ...firecrackerSsh(\n            runtime.options,\n            `umask 077; touch ${quote(id + \".cancel\")}; if [ -f ${quote(id)} ]; then node -e ${quote(\"const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),100)\")} ${quote(id)}; fi`,\n          ),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        },\n        executeProcess,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    signal.addEventListener(\"abort\", cancel, { once: true });\n    const timer = setTimeout(\n      () =>\n        stop.abort(\n          new OutpostError(\"timeout\", `Command exceeded ${deadlineMs} ms`),\n        ),\n      deadlineMs,\n    );\n    let interrupted = false;\n    try {\n      const {\n        directory: _directory,\n        variables: _variables,\n        ...invocation\n      } = command;\n      const result = await runtime.executor({\n        ...invocation,\n        ...(command.observe\n          ? {\n              observe: (channel, text) => {\n                try {\n                  command.observe!(channel, text);\n                } catch (cause) {\n                  stop.abort(cause);\n                }\n              },\n            }\n          : {}),\n        signal,\n        ...firecrackerSsh(\n          runtime.options,\n          `setsid --wait sh -c ${quote(wrapper)}`,\n        ),\n      });\n      signal.throwIfAborted();\n      return result;\n    } catch (cause) {\n      interrupted = true;\n      try {\n        cancel();\n        await cancellation;\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Guest cancellation could not be confirmed; release the VM\",\n        );\n      }\n      throw cause;\n    } finally {\n      clearTimeout(timer);\n      signal.removeEventListener(\"abort\", cancel);\n      if (!interrupted && !runtime.isClosed())\n        await executeProcess({\n          ...firecrackerSsh(runtime.options, `rm -f -- ${quote(id)}`),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        }).catch(() => undefined);\n    }\n  };\n}\n"]}

package/dist/providers/firecracker-files.constants.d.ts

@@ -0,0 +1 @@
+export declare const firecrackerFileScript: string;

package/dist/providers/firecracker-files.constants.js

@@ -0,0 +1,21 @@
+export const firecrackerFileScript = String.raw `
+const fs = require('node:fs'), p = require('node:path'), { pipeline } = require('node:stream/promises');
+const [op, input, extra] = process.argv.slice(1), path = p.resolve(input);
+function safe(target) {
+  for (let current = target; current !== '/'; current = p.dirname(current)) {
+    try { if (fs.lstatSync(current).isSymbolicLink()) throw Error('Transfer destination traverses a symlink'); }
+    catch (error) { if (error.code !== 'ENOENT') throw error; }
+  }
+}
+(async () => {
+  if (op === 'read') { safe(p.dirname(path)); await pipeline(fs.createReadStream(path, { flags: fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW }), process.stdout); return; }
+  safe(path);
+  if (op === 'directory') { fs.mkdirSync(path, { recursive: true }); return; }
+  if (op === 'mode') { fs.chmodSync(path, Number(extra)); return; }
+  fs.mkdirSync(p.dirname(path), { recursive: true });
+  if (op === 'link') { fs.symlinkSync(extra, path); return; }
+  if (op === 'write') { await pipeline(process.stdin, fs.createWriteStream(path, { flags: fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_TRUNC | fs.constants.O_NOFOLLOW, mode: 384 })); return; }
+  throw Error('Unknown transfer operation');
+})().catch(error => { console.error(error.message); process.exitCode = 1; });
+`;
+//# sourceMappingURL=firecracker-files.constants.js.map

package/dist/providers/firecracker-files.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker-files.constants.js","sourceRoot":"","sources":["../../src/providers/firecracker-files.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;CAmB9C,CAAC","sourcesContent":["export const firecrackerFileScript = String.raw`\nconst fs = require('node:fs'), p = require('node:path'), { pipeline } = require('node:stream/promises');\nconst [op, input, extra] = process.argv.slice(1), path = p.resolve(input);\nfunction safe(target) {\n  for (let current = target; current !== '/'; current = p.dirname(current)) {\n    try { if (fs.lstatSync(current).isSymbolicLink()) throw Error('Transfer destination traverses a symlink'); }\n    catch (error) { if (error.code !== 'ENOENT') throw error; }\n  }\n}\n(async () => {\n  if (op === 'read') { safe(p.dirname(path)); await pipeline(fs.createReadStream(path, { flags: fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW }), process.stdout); return; }\n  safe(path);\n  if (op === 'directory') { fs.mkdirSync(path, { recursive: true }); return; }\n  if (op === 'mode') { fs.chmodSync(path, Number(extra)); return; }\n  fs.mkdirSync(p.dirname(path), { recursive: true });\n  if (op === 'link') { fs.symlinkSync(extra, path); return; }\n  if (op === 'write') { await pipeline(process.stdin, fs.createWriteStream(path, { flags: fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_TRUNC | fs.constants.O_NOFOLLOW, mode: 384 })); return; }\n  throw Error('Unknown transfer operation');\n})().catch(error => { console.error(error.message); process.exitCode = 1; });\n`;\n"]}

package/dist/providers/firecracker-files.d.ts

@@ -0,0 +1,3 @@
+import type { SandboxLease } from "../domain/sandbox.types.ts";
+import type { FirecrackerRuntime } from "./firecracker.types.ts";
+export declare function firecrackerFiles(runtime: FirecrackerRuntime): Pick<SandboxLease, "upload" | "download">;

package/dist/providers/firecracker-files.js

@@ -0,0 +1,110 @@
+import { chmod } from "node:fs/promises";
+import { Readable, Writable } from "node:stream";
+import { posix } from "node:path";
+import { OutpostError } from "../domain/errors.js";
+import { binaryExecutor } from "../infrastructure/binary-process.js";
+import { transferDestination } from "../infrastructure/transfer-copy.js";
+import { safeDestination } from "../infrastructure/files.js";
+import { transfer } from "../infrastructure/transfer.js";
+import { downloadTree, uploadTree } from "./cloud-files.js";
+import { manifestScript } from "./cloud-files.constants.js";
+import { firecrackerCommand } from "./firecracker-command.js";
+import { firecrackerDefaults } from "./firecracker.constants.js";
+import { firecrackerFileScript } from "./firecracker-files.constants.js";
+export function firecrackerFiles(runtime) {
+    const invoke = firecrackerCommand(runtime);
+    const run = async (args, signal) => {
+        const result = await invoke({
+            executable: "node",
+            arguments: ["-e", firecrackerFileScript, ...args],
+            signal,
+        });
+        if (result.status !== 0)
+            throw new OutpostError("provider", "Guest file operation failed", {
+                stderr: result.stderr,
+            });
+    };
+    return {
+        upload(source, destination, options = {}) {
+            return transfer(options, async (signal) => {
+                const modes = [];
+                await uploadTree(source, posix.resolve(runtime.root, destination), async (path, data) => {
+                    await firecrackerCommand({
+                        ...runtime,
+                        executor: binaryExecutor({ input: Readable.from([data]) }),
+                    })({
+                        executable: "node",
+                        arguments: ["-e", firecrackerFileScript, "write", path],
+                        signal,
+                    });
+                }, (target, path) => run(["link", path, target], signal), async (path, directory, mode) => {
+                    if (directory) {
+                        await run(["directory", path], signal);
+                        modes.push([path, mode]);
+                        return;
+                    }
+                    await run(["mode", path, String(mode)], signal);
+                }, signal);
+                for (const [path, mode] of modes.reverse())
+                    await run(["mode", path, String(mode)], signal);
+            });
+        },
+        download(source, destination, options = {}) {
+            return transfer(options, async (signal) => {
+                await transferDestination(destination);
+                const remote = posix.resolve(runtime.root, source);
+                const manifest = await invoke({
+                    executable: "node",
+                    arguments: ["-e", manifestScript, remote],
+                    retain: firecrackerDefaults.manifestBytes,
+                    signal,
+                });
+                if (manifest.status !== 0)
+                    throw new OutpostError("provider", "Guest manifest failed", {
+                        stderr: manifest.stderr,
+                    });
+                await downloadTree(remote, destination, manifest.stdout, async (path) => {
+                    const chunks = [];
+                    const output = new Writable({
+                        write(chunk, _encoding, done) {
+                            chunks.push(chunk);
+                            done();
+                        },
+                    });
+                    await firecrackerCommand({
+                        ...runtime,
+                        executor: binaryExecutor({ output }),
+                    })({
+                        executable: "node",
+                        arguments: ["-e", firecrackerFileScript, "read", path],
+                        signal,
+                    });
+                    return Buffer.concat(chunks);
+                }, signal);
+                const entries = JSON.parse(manifest.stdout);
+                if (!Array.isArray(entries))
+                    throw new OutpostError("provider", "Invalid transfer manifest");
+                const records = entries;
+                for (const entry of records.reverse()) {
+                    if (!entry ||
+                        typeof entry !== "object" ||
+                        !("kind" in entry) ||
+                        !("path" in entry) ||
+                        typeof entry.path !== "string" ||
+                        !("mode" in entry) ||
+                        typeof entry.mode !== "number" ||
+                        !Number.isSafeInteger(entry.mode))
+                        throw new OutpostError("provider", "Invalid transfer entry");
+                    if (entry.kind !== "directory")
+                        continue;
+                    signal.throwIfAborted();
+                    const path = entry.path
+                        ? await safeDestination(destination, entry.path)
+                        : destination;
+                    await chmod(path, entry.mode & 0o777);
+                }
+            });
+        },
+    };
+}
+//# sourceMappingURL=firecracker-files.js.map

package/dist/providers/firecracker-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker-files.js","sourceRoot":"","sources":["../../src/providers/firecracker-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,MAAM,UAAU,gBAAgB,CAC9B,OAA2B;IAE3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,EAAE,IAAc,EAAE,MAAmB,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;YACjD,MAAM;SACP,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YACrB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,EAAE;gBAChE,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;IACP,CAAC,CAAC;IACF,OAAO;QACL,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACtC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,KAAK,GAAuB,EAAE,CAAC;gBACrC,MAAM,UAAU,CACd,MAAM,EACN,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,EACxC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;oBACnB,MAAM,kBAAkB,CAAC;wBACvB,GAAG,OAAO;wBACV,QAAQ,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;qBAC3D,CAAC,CAAC;wBACD,UAAU,EAAE,MAAM;wBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC;wBACvD,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC,EACD,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EACrD,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;oBAC9B,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;wBACvC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;wBACzB,OAAO;oBACT,CAAC;oBACD,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC,EACD,MAAM,CACP,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;oBACxC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACxC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;oBAC5B,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC;oBACzC,MAAM,EAAE,mBAAmB,CAAC,aAAa;oBACzC,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACvB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE;wBAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB,CAAC,CAAC;gBACL,MAAM,YAAY,CAChB,MAAM,EACN,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,KAAK,EAAE,IAAI,EAAE,EAAE;oBACb,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;wBAC1B,KAAK,CAAC,KAAa,EAAE,SAAS,EAAE,IAAI;4BAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACnB,IAAI,EAAE,CAAC;wBACT,CAAC;qBACF,CAAC,CAAC;oBACH,MAAM,kBAAkB,CAAC;wBACvB,GAAG,OAAO;wBACV,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;qBACrC,CAAC,CAAC;wBACD,UAAU,EAAE,MAAM;wBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,CAAC;wBACtD,MAAM;qBACP,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC,EACD,MAAM,CACP,CAAC;gBACF,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;gBAClE,MAAM,OAAO,GAAc,OAAO,CAAC;gBACnC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;oBACtC,IACE,CAAC,KAAK;wBACN,OAAO,KAAK,KAAK,QAAQ;wBACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;wBAClB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;wBAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC9B,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;wBAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;wBAEjC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;oBAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;wBAAE,SAAS;oBACzC,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;wBACrB,CAAC,CAAC,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;wBAChD,CAAC,CAAC,WAAW,CAAC;oBAChB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { chmod } from \"node:fs/promises\";\nimport { Readable, Writable } from \"node:stream\";\nimport { posix } from \"node:path\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport { binaryExecutor } from \"../infrastructure/binary-process.ts\";\nimport { transferDestination } from \"../infrastructure/transfer-copy.ts\";\nimport { safeDestination } from \"../infrastructure/files.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\nimport { downloadTree, uploadTree } from \"./cloud-files.ts\";\nimport { manifestScript } from \"./cloud-files.constants.ts\";\nimport { firecrackerCommand } from \"./firecracker-command.ts\";\nimport { firecrackerDefaults } from \"./firecracker.constants.ts\";\nimport { firecrackerFileScript } from \"./firecracker-files.constants.ts\";\nimport type { FirecrackerRuntime } from \"./firecracker.types.ts\";\n\nexport function firecrackerFiles(\n  runtime: FirecrackerRuntime,\n): Pick<SandboxLease, \"upload\" | \"download\"> {\n  const invoke = firecrackerCommand(runtime);\n  const run = async (args: string[], signal: AbortSignal) => {\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", firecrackerFileScript, ...args],\n      signal,\n    });\n    if (result.status !== 0)\n      throw new OutpostError(\"provider\", \"Guest file operation failed\", {\n        stderr: result.stderr,\n      });\n  };\n  return {\n    upload(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        const modes: [string, number][] = [];\n        await uploadTree(\n          source,\n          posix.resolve(runtime.root, destination),\n          async (path, data) => {\n            await firecrackerCommand({\n              ...runtime,\n              executor: binaryExecutor({ input: Readable.from([data]) }),\n            })({\n              executable: \"node\",\n              arguments: [\"-e\", firecrackerFileScript, \"write\", path],\n              signal,\n            });\n          },\n          (target, path) => run([\"link\", path, target], signal),\n          async (path, directory, mode) => {\n            if (directory) {\n              await run([\"directory\", path], signal);\n              modes.push([path, mode]);\n              return;\n            }\n            await run([\"mode\", path, String(mode)], signal);\n          },\n          signal,\n        );\n        for (const [path, mode] of modes.reverse())\n          await run([\"mode\", path, String(mode)], signal);\n      });\n    },\n    download(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        await transferDestination(destination);\n        const remote = posix.resolve(runtime.root, source);\n        const manifest = await invoke({\n          executable: \"node\",\n          arguments: [\"-e\", manifestScript, remote],\n          retain: firecrackerDefaults.manifestBytes,\n          signal,\n        });\n        if (manifest.status !== 0)\n          throw new OutpostError(\"provider\", \"Guest manifest failed\", {\n            stderr: manifest.stderr,\n          });\n        await downloadTree(\n          remote,\n          destination,\n          manifest.stdout,\n          async (path) => {\n            const chunks: Buffer[] = [];\n            const output = new Writable({\n              write(chunk: Buffer, _encoding, done) {\n                chunks.push(chunk);\n                done();\n              },\n            });\n            await firecrackerCommand({\n              ...runtime,\n              executor: binaryExecutor({ output }),\n            })({\n              executable: \"node\",\n              arguments: [\"-e\", firecrackerFileScript, \"read\", path],\n              signal,\n            });\n            return Buffer.concat(chunks);\n          },\n          signal,\n        );\n        const entries: unknown = JSON.parse(manifest.stdout);\n        if (!Array.isArray(entries))\n          throw new OutpostError(\"provider\", \"Invalid transfer manifest\");\n        const records: unknown[] = entries;\n        for (const entry of records.reverse()) {\n          if (\n            !entry ||\n            typeof entry !== \"object\" ||\n            !(\"kind\" in entry) ||\n            !(\"path\" in entry) ||\n            typeof entry.path !== \"string\" ||\n            !(\"mode\" in entry) ||\n            typeof entry.mode !== \"number\" ||\n            !Number.isSafeInteger(entry.mode)\n          )\n            throw new OutpostError(\"provider\", \"Invalid transfer entry\");\n          if (entry.kind !== \"directory\") continue;\n          signal.throwIfAborted();\n          const path = entry.path\n            ? await safeDestination(destination, entry.path)\n            : destination;\n          await chmod(path, entry.mode & 0o777);\n        }\n      });\n    },\n  };\n}\n"]}

package/dist/providers/firecracker-machine.d.ts

@@ -0,0 +1,3 @@
+import type { FirecrackerMachine, FirecrackerOptions } from "./firecracker.types.ts";
+export declare function validateFirecracker(options: FirecrackerOptions): void;
+export declare function firecrackerMachine(options: FirecrackerOptions, signal?: AbortSignal): Promise<FirecrackerMachine>;