@elie-laloum/outpost 3.0.0 → 4.1.0

package/dist/providers/firecracker-command.js

@@ -0,0 +1,114 @@
+import { randomUUID } from "node:crypto";
+import { invariant, OutpostError, positive } from "../domain/errors.js";
+import { executeProcess, quote, requireSuccess, } from "../infrastructure/process.js";
+import { firecrackerDefaults } from "./firecracker.constants.js";
+export function firecrackerSsh(options, script) {
+    const ssh = options.ssh;
+    return {
+        executable: ssh.binary ?? "ssh",
+        arguments: [
+            "-F",
+            "/dev/null",
+            "-T",
+            "-o",
+            "BatchMode=yes",
+            "-o",
+            "IdentitiesOnly=yes",
+            "-o",
+            "StrictHostKeyChecking=yes",
+            "-o",
+            `UserKnownHostsFile=${ssh.knownHosts}`,
+            "-o",
+            "GlobalKnownHostsFile=/dev/null",
+            "-o",
+            "ConnectTimeout=2",
+            "-o",
+            "ServerAliveInterval=2",
+            "-o",
+            "ServerAliveCountMax=2",
+            "-i",
+            ssh.identity,
+            "-p",
+            String(ssh.port ?? 22),
+            "-l",
+            ssh.user,
+            "--",
+            ssh.host,
+            script,
+        ],
+    };
+}
+export function firecrackerCommand(runtime) {
+    return async (command) => {
+        if (runtime.isClosed())
+            throw new OutpostError("provider", "Firecracker sandbox is closed");
+        invariant(!command.interactive && !command.elevated, "Firecracker research provider does not support interactive or elevated commands");
+        command.signal?.throwIfAborted();
+        const variables = { ...runtime.variables, ...command.variables };
+        invariant(Object.keys(variables).every((key) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(key)), "Invalid environment key");
+        const id = `/tmp/outpost-command-${randomUUID()}`;
+        const wrapper = `umask 077; echo $$ > ${quote(id)}; test ! -e ${quote(id + ".cancel")} || exit 130; cd ${quote(command.directory ?? runtime.root)} || exit; exec env ${Object.entries(variables)
+            .map(([key, value]) => quote(`${key}=${value}`))
+            .join(" ")} ${[command.executable, ...(command.arguments ?? [])].map(quote).join(" ")}`;
+        const stop = new AbortController();
+        const signal = command.signal
+            ? AbortSignal.any([command.signal, stop.signal])
+            : stop.signal;
+        const deadlineMs = command.deadlineMs ?? firecrackerDefaults.commandMs;
+        positive(deadlineMs, "deadlineMs");
+        let cancellation;
+        const cancel = () => {
+            cancellation ??= requireSuccess({
+                ...firecrackerSsh(runtime.options, `umask 077; touch ${quote(id + ".cancel")}; if [ -f ${quote(id)} ]; then node -e ${quote("const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),100)")} ${quote(id)}; fi`),
+                deadlineMs: firecrackerDefaults.cleanupMs,
+            }, executeProcess);
+            void cancellation.catch(() => undefined);
+        };
+        signal.addEventListener("abort", cancel, { once: true });
+        const timer = setTimeout(() => stop.abort(new OutpostError("timeout", `Command exceeded ${deadlineMs} ms`)), deadlineMs);
+        let interrupted = false;
+        try {
+            const { directory: _directory, variables: _variables, ...invocation } = command;
+            const result = await runtime.executor({
+                ...invocation,
+                ...(command.observe
+                    ? {
+                        observe: (channel, text) => {
+                            try {
+                                command.observe(channel, text);
+                            }
+                            catch (cause) {
+                                stop.abort(cause);
+                            }
+                        },
+                    }
+                    : {}),
+                signal,
+                ...firecrackerSsh(runtime.options, `setsid --wait sh -c ${quote(wrapper)}`),
+            });
+            signal.throwIfAborted();
+            return result;
+        }
+        catch (cause) {
+            interrupted = true;
+            try {
+                cancel();
+                await cancellation;
+            }
+            catch (cleanup) {
+                throw new AggregateError([cause, cleanup], "Guest cancellation could not be confirmed; release the VM");
+            }
+            throw cause;
+        }
+        finally {
+            clearTimeout(timer);
+            signal.removeEventListener("abort", cancel);
+            if (!interrupted && !runtime.isClosed())
+                await executeProcess({
+                    ...firecrackerSsh(runtime.options, `rm -f -- ${quote(id)}`),
+                    deadlineMs: firecrackerDefaults.cleanupMs,
+                }).catch(() => undefined);
+        }
+    };
+}
+//# sourceMappingURL=firecracker-command.js.map

package/dist/providers/firecracker-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker-command.js","sourceRoot":"","sources":["../../src/providers/firecracker-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAMjE,MAAM,UAAU,cAAc,CAC5B,OAA2B,EAC3B,MAAc;IAEd,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;QAC/B,SAAS,EAAE;YACT,IAAI;YACJ,WAAW;YACX,IAAI;YACJ,IAAI;YACJ,eAAe;YACf,IAAI;YACJ,oBAAoB;YACpB,IAAI;YACJ,2BAA2B;YAC3B,IAAI;YACJ,sBAAsB,GAAG,CAAC,UAAU,EAAE;YACtC,IAAI;YACJ,gCAAgC;YAChC,IAAI;YACJ,kBAAkB;YAClB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,GAAG,CAAC,QAAQ;YACZ,IAAI;YACJ,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YACtB,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,IAAI;YACJ,GAAG,CAAC,IAAI;YACR,MAAM;SACP;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA2B;IAE3B,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,QAAQ,EAAE;YACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;QACtE,SAAS,CACP,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EACzC,iFAAiF,CAClF,CAAC;QACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,SAAS,CACP,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CACrC,EACD,yBAAyB,CAC1B,CAAC;QACF,MAAM,EAAE,GAAG,wBAAwB,UAAU,EAAE,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,wBAAwB,KAAK,CAAC,EAAE,CAAC,eAAe,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,oBAAoB,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CACnL,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAChB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,SAAS,CAAC;QACvE,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACnC,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,cAAc,CAC7B;gBACE,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,oBAAoB,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC,oBAAoB,KAAK,CAAC,+QAA+Q,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,CAC7X;gBACD,UAAU,EAAE,mBAAmB,CAAC,SAAS;aAC1C,EACD,cAAc,CACf,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,IAAI,CAAC,KAAK,CACR,IAAI,YAAY,CAAC,SAAS,EAAE,oBAAoB,UAAU,KAAK,CAAC,CACjE,EACH,UAAU,CACX,CAAC;QACF,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,EACJ,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,EACrB,GAAG,UAAU,EACd,GAAG,OAAO,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;gBACpC,GAAG,UAAU;gBACb,GAAG,CAAC,OAAO,CAAC,OAAO;oBACjB,CAAC,CAAC;wBACE,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;4BACzB,IAAI,CAAC;gCACH,OAAO,CAAC,OAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;4BAClC,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;4BACpB,CAAC;wBACH,CAAC;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM;gBACN,GAAG,cAAc,CACf,OAAO,CAAC,OAAO,EACf,uBAAuB,KAAK,CAAC,OAAO,CAAC,EAAE,CACxC;aACF,CAAC,CAAC;YACH,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC;gBACT,MAAM,YAAY,CAAC;YACrB,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACrC,MAAM,cAAc,CAAC;oBACnB,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3D,UAAU,EAAE,mBAAmB,CAAC,SAAS;iBAC1C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { invariant, OutpostError, positive } from \"../domain/errors.ts\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport { firecrackerDefaults } from \"./firecracker.constants.ts\";\nimport type {\n  FirecrackerOptions,\n  FirecrackerRuntime,\n} from \"./firecracker.types.ts\";\n\nexport function firecrackerSsh(\n  options: FirecrackerOptions,\n  script: string,\n): Command {\n  const ssh = options.ssh;\n  return {\n    executable: ssh.binary ?? \"ssh\",\n    arguments: [\n      \"-F\",\n      \"/dev/null\",\n      \"-T\",\n      \"-o\",\n      \"BatchMode=yes\",\n      \"-o\",\n      \"IdentitiesOnly=yes\",\n      \"-o\",\n      \"StrictHostKeyChecking=yes\",\n      \"-o\",\n      `UserKnownHostsFile=${ssh.knownHosts}`,\n      \"-o\",\n      \"GlobalKnownHostsFile=/dev/null\",\n      \"-o\",\n      \"ConnectTimeout=2\",\n      \"-o\",\n      \"ServerAliveInterval=2\",\n      \"-o\",\n      \"ServerAliveCountMax=2\",\n      \"-i\",\n      ssh.identity,\n      \"-p\",\n      String(ssh.port ?? 22),\n      \"-l\",\n      ssh.user,\n      \"--\",\n      ssh.host,\n      script,\n    ],\n  };\n}\n\nexport function firecrackerCommand(\n  runtime: FirecrackerRuntime,\n): SandboxLease[\"invoke\"] {\n  return async (command) => {\n    if (runtime.isClosed())\n      throw new OutpostError(\"provider\", \"Firecracker sandbox is closed\");\n    invariant(\n      !command.interactive && !command.elevated,\n      \"Firecracker research provider does not support interactive or elevated commands\",\n    );\n    command.signal?.throwIfAborted();\n    const variables = { ...runtime.variables, ...command.variables };\n    invariant(\n      Object.keys(variables).every((key) =>\n        /^[A-Za-z_][A-Za-z0-9_]*$/.test(key),\n      ),\n      \"Invalid environment key\",\n    );\n    const id = `/tmp/outpost-command-${randomUUID()}`;\n    const wrapper = `umask 077; echo $$ > ${quote(id)}; test ! -e ${quote(id + \".cancel\")} || exit 130; cd ${quote(command.directory ?? runtime.root)} || exit; exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} ${[command.executable, ...(command.arguments ?? [])].map(quote).join(\" \")}`;\n    const stop = new AbortController();\n    const signal = command.signal\n      ? AbortSignal.any([command.signal, stop.signal])\n      : stop.signal;\n    const deadlineMs = command.deadlineMs ?? firecrackerDefaults.commandMs;\n    positive(deadlineMs, \"deadlineMs\");\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= requireSuccess(\n        {\n          ...firecrackerSsh(\n            runtime.options,\n            `umask 077; touch ${quote(id + \".cancel\")}; if [ -f ${quote(id)} ]; then node -e ${quote(\"const fs=require('node:fs');const pid=Number(fs.readFileSync(process.argv[1],'utf8'));if(!Number.isSafeInteger(pid)||pid<2)process.exit(1);const kill=s=>{try{process.kill(-pid,s)}catch(e){if(e.code!=='ESRCH')throw e}};kill('SIGTERM');setTimeout(()=>kill('SIGKILL'),100)\")} ${quote(id)}; fi`,\n          ),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        },\n        executeProcess,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    signal.addEventListener(\"abort\", cancel, { once: true });\n    const timer = setTimeout(\n      () =>\n        stop.abort(\n          new OutpostError(\"timeout\", `Command exceeded ${deadlineMs} ms`),\n        ),\n      deadlineMs,\n    );\n    let interrupted = false;\n    try {\n      const {\n        directory: _directory,\n        variables: _variables,\n        ...invocation\n      } = command;\n      const result = await runtime.executor({\n        ...invocation,\n        ...(command.observe\n          ? {\n              observe: (channel, text) => {\n                try {\n                  command.observe!(channel, text);\n                } catch (cause) {\n                  stop.abort(cause);\n                }\n              },\n            }\n          : {}),\n        signal,\n        ...firecrackerSsh(\n          runtime.options,\n          `setsid --wait sh -c ${quote(wrapper)}`,\n        ),\n      });\n      signal.throwIfAborted();\n      return result;\n    } catch (cause) {\n      interrupted = true;\n      try {\n        cancel();\n        await cancellation;\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Guest cancellation could not be confirmed; release the VM\",\n        );\n      }\n      throw cause;\n    } finally {\n      clearTimeout(timer);\n      signal.removeEventListener(\"abort\", cancel);\n      if (!interrupted && !runtime.isClosed())\n        await executeProcess({\n          ...firecrackerSsh(runtime.options, `rm -f -- ${quote(id)}`),\n          deadlineMs: firecrackerDefaults.cleanupMs,\n        }).catch(() => undefined);\n    }\n  };\n}\n"]}

package/dist/providers/firecracker-files.constants.d.ts

@@ -0,0 +1 @@
+export declare const firecrackerFileScript: string;

package/dist/providers/firecracker-files.constants.js

@@ -0,0 +1,21 @@
+export const firecrackerFileScript = String.raw `
+const fs = require('node:fs'), p = require('node:path'), { pipeline } = require('node:stream/promises');
+const [op, input, extra] = process.argv.slice(1), path = p.resolve(input);
+function safe(target) {
+  for (let current = target; current !== '/'; current = p.dirname(current)) {
+    try { if (fs.lstatSync(current).isSymbolicLink()) throw Error('Transfer destination traverses a symlink'); }
+    catch (error) { if (error.code !== 'ENOENT') throw error; }
+  }
+}
+(async () => {
+  if (op === 'read') { safe(p.dirname(path)); await pipeline(fs.createReadStream(path, { flags: fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW }), process.stdout); return; }
+  safe(path);
+  if (op === 'directory') { fs.mkdirSync(path, { recursive: true }); return; }
+  if (op === 'mode') { fs.chmodSync(path, Number(extra)); return; }
+  fs.mkdirSync(p.dirname(path), { recursive: true });
+  if (op === 'link') { fs.symlinkSync(extra, path); return; }
+  if (op === 'write') { await pipeline(process.stdin, fs.createWriteStream(path, { flags: fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_TRUNC | fs.constants.O_NOFOLLOW, mode: 384 })); return; }
+  throw Error('Unknown transfer operation');
+})().catch(error => { console.error(error.message); process.exitCode = 1; });
+`;
+//# sourceMappingURL=firecracker-files.constants.js.map

package/dist/providers/firecracker-files.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker-files.constants.js","sourceRoot":"","sources":["../../src/providers/firecracker-files.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;CAmB9C,CAAC","sourcesContent":["export const firecrackerFileScript = String.raw`\nconst fs = require('node:fs'), p = require('node:path'), { pipeline } = require('node:stream/promises');\nconst [op, input, extra] = process.argv.slice(1), path = p.resolve(input);\nfunction safe(target) {\n  for (let current = target; current !== '/'; current = p.dirname(current)) {\n    try { if (fs.lstatSync(current).isSymbolicLink()) throw Error('Transfer destination traverses a symlink'); }\n    catch (error) { if (error.code !== 'ENOENT') throw error; }\n  }\n}\n(async () => {\n  if (op === 'read') { safe(p.dirname(path)); await pipeline(fs.createReadStream(path, { flags: fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW }), process.stdout); return; }\n  safe(path);\n  if (op === 'directory') { fs.mkdirSync(path, { recursive: true }); return; }\n  if (op === 'mode') { fs.chmodSync(path, Number(extra)); return; }\n  fs.mkdirSync(p.dirname(path), { recursive: true });\n  if (op === 'link') { fs.symlinkSync(extra, path); return; }\n  if (op === 'write') { await pipeline(process.stdin, fs.createWriteStream(path, { flags: fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_TRUNC | fs.constants.O_NOFOLLOW, mode: 384 })); return; }\n  throw Error('Unknown transfer operation');\n})().catch(error => { console.error(error.message); process.exitCode = 1; });\n`;\n"]}

package/dist/providers/firecracker-files.d.ts

@@ -0,0 +1,3 @@
+import type { SandboxLease } from "../domain/sandbox.types.ts";
+import type { FirecrackerRuntime } from "./firecracker.types.ts";
+export declare function firecrackerFiles(runtime: FirecrackerRuntime): Pick<SandboxLease, "upload" | "download">;

package/dist/providers/firecracker-files.js

@@ -0,0 +1,110 @@
+import { chmod } from "node:fs/promises";
+import { Readable, Writable } from "node:stream";
+import { posix } from "node:path";
+import { OutpostError } from "../domain/errors.js";
+import { binaryExecutor } from "../infrastructure/binary-process.js";
+import { transferDestination } from "../infrastructure/transfer-copy.js";
+import { safeDestination } from "../infrastructure/files.js";
+import { transfer } from "../infrastructure/transfer.js";
+import { downloadTree, uploadTree } from "./cloud-files.js";
+import { manifestScript } from "./cloud-files.constants.js";
+import { firecrackerCommand } from "./firecracker-command.js";
+import { firecrackerDefaults } from "./firecracker.constants.js";
+import { firecrackerFileScript } from "./firecracker-files.constants.js";
+export function firecrackerFiles(runtime) {
+    const invoke = firecrackerCommand(runtime);
+    const run = async (args, signal) => {
+        const result = await invoke({
+            executable: "node",
+            arguments: ["-e", firecrackerFileScript, ...args],
+            signal,
+        });
+        if (result.status !== 0)
+            throw new OutpostError("provider", "Guest file operation failed", {
+                stderr: result.stderr,
+            });
+    };
+    return {
+        upload(source, destination, options = {}) {
+            return transfer(options, async (signal) => {
+                const modes = [];
+                await uploadTree(source, posix.resolve(runtime.root, destination), async (path, data) => {
+                    await firecrackerCommand({
+                        ...runtime,
+                        executor: binaryExecutor({ input: Readable.from([data]) }),
+                    })({
+                        executable: "node",
+                        arguments: ["-e", firecrackerFileScript, "write", path],
+                        signal,
+                    });
+                }, (target, path) => run(["link", path, target], signal), async (path, directory, mode) => {
+                    if (directory) {
+                        await run(["directory", path], signal);
+                        modes.push([path, mode]);
+                        return;
+                    }
+                    await run(["mode", path, String(mode)], signal);
+                }, signal);
+                for (const [path, mode] of modes.reverse())
+                    await run(["mode", path, String(mode)], signal);
+            });
+        },
+        download(source, destination, options = {}) {
+            return transfer(options, async (signal) => {
+                await transferDestination(destination);
+                const remote = posix.resolve(runtime.root, source);
+                const manifest = await invoke({
+                    executable: "node",
+                    arguments: ["-e", manifestScript, remote],
+                    retain: firecrackerDefaults.manifestBytes,
+                    signal,
+                });
+                if (manifest.status !== 0)
+                    throw new OutpostError("provider", "Guest manifest failed", {
+                        stderr: manifest.stderr,
+                    });
+                await downloadTree(remote, destination, manifest.stdout, async (path) => {
+                    const chunks = [];
+                    const output = new Writable({
+                        write(chunk, _encoding, done) {
+                            chunks.push(chunk);
+                            done();
+                        },
+                    });
+                    await firecrackerCommand({
+                        ...runtime,
+                        executor: binaryExecutor({ output }),
+                    })({
+                        executable: "node",
+                        arguments: ["-e", firecrackerFileScript, "read", path],
+                        signal,
+                    });
+                    return Buffer.concat(chunks);
+                }, signal);
+                const entries = JSON.parse(manifest.stdout);
+                if (!Array.isArray(entries))
+                    throw new OutpostError("provider", "Invalid transfer manifest");
+                const records = entries;
+                for (const entry of records.reverse()) {
+                    if (!entry ||
+                        typeof entry !== "object" ||
+                        !("kind" in entry) ||
+                        !("path" in entry) ||
+                        typeof entry.path !== "string" ||
+                        !("mode" in entry) ||
+                        typeof entry.mode !== "number" ||
+                        !Number.isSafeInteger(entry.mode))
+                        throw new OutpostError("provider", "Invalid transfer entry");
+                    if (entry.kind !== "directory")
+                        continue;
+                    signal.throwIfAborted();
+                    const path = entry.path
+                        ? await safeDestination(destination, entry.path)
+                        : destination;
+                    await chmod(path, entry.mode & 0o777);
+                }
+            });
+        },
+    };
+}
+//# sourceMappingURL=firecracker-files.js.map

package/dist/providers/firecracker-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker-files.js","sourceRoot":"","sources":["../../src/providers/firecracker-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAGzE,MAAM,UAAU,gBAAgB,CAC9B,OAA2B;IAE3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,EAAE,IAAc,EAAE,MAAmB,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,GAAG,IAAI,CAAC;YACjD,MAAM;SACP,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YACrB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,EAAE;gBAChE,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;IACP,CAAC,CAAC;IACF,OAAO;QACL,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACtC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,KAAK,GAAuB,EAAE,CAAC;gBACrC,MAAM,UAAU,CACd,MAAM,EACN,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,EACxC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;oBACnB,MAAM,kBAAkB,CAAC;wBACvB,GAAG,OAAO;wBACV,QAAQ,EAAE,cAAc,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;qBAC3D,CAAC,CAAC;wBACD,UAAU,EAAE,MAAM;wBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,CAAC;wBACvD,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC,EACD,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,EACrD,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;oBAC9B,IAAI,SAAS,EAAE,CAAC;wBACd,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;wBACvC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;wBACzB,OAAO;oBACT,CAAC;oBACD,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAClD,CAAC,EACD,MAAM,CACP,CAAC;gBACF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;oBACxC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACxC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;oBAC5B,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC;oBACzC,MAAM,EAAE,mBAAmB,CAAC,aAAa;oBACzC,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACvB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,EAAE;wBAC1D,MAAM,EAAE,QAAQ,CAAC,MAAM;qBACxB,CAAC,CAAC;gBACL,MAAM,YAAY,CAChB,MAAM,EACN,WAAW,EACX,QAAQ,CAAC,MAAM,EACf,KAAK,EAAE,IAAI,EAAE,EAAE;oBACb,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;wBAC1B,KAAK,CAAC,KAAa,EAAE,SAAS,EAAE,IAAI;4BAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACnB,IAAI,EAAE,CAAC;wBACT,CAAC;qBACF,CAAC,CAAC;oBACH,MAAM,kBAAkB,CAAC;wBACvB,GAAG,OAAO;wBACV,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;qBACrC,CAAC,CAAC;wBACD,UAAU,EAAE,MAAM;wBAClB,SAAS,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,CAAC;wBACtD,MAAM;qBACP,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC,EACD,MAAM,CACP,CAAC;gBACF,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;oBACzB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;gBAClE,MAAM,OAAO,GAAc,OAAO,CAAC;gBACnC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;oBACtC,IACE,CAAC,KAAK;wBACN,OAAO,KAAK,KAAK,QAAQ;wBACzB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;wBAClB,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;wBAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC9B,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;wBAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;wBAEjC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;oBAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;wBAAE,SAAS;oBACzC,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;wBACrB,CAAC,CAAC,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;wBAChD,CAAC,CAAC,WAAW,CAAC;oBAChB,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { chmod } from \"node:fs/promises\";\nimport { Readable, Writable } from \"node:stream\";\nimport { posix } from \"node:path\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport { binaryExecutor } from \"../infrastructure/binary-process.ts\";\nimport { transferDestination } from \"../infrastructure/transfer-copy.ts\";\nimport { safeDestination } from \"../infrastructure/files.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\nimport { downloadTree, uploadTree } from \"./cloud-files.ts\";\nimport { manifestScript } from \"./cloud-files.constants.ts\";\nimport { firecrackerCommand } from \"./firecracker-command.ts\";\nimport { firecrackerDefaults } from \"./firecracker.constants.ts\";\nimport { firecrackerFileScript } from \"./firecracker-files.constants.ts\";\nimport type { FirecrackerRuntime } from \"./firecracker.types.ts\";\n\nexport function firecrackerFiles(\n  runtime: FirecrackerRuntime,\n): Pick<SandboxLease, \"upload\" | \"download\"> {\n  const invoke = firecrackerCommand(runtime);\n  const run = async (args: string[], signal: AbortSignal) => {\n    const result = await invoke({\n      executable: \"node\",\n      arguments: [\"-e\", firecrackerFileScript, ...args],\n      signal,\n    });\n    if (result.status !== 0)\n      throw new OutpostError(\"provider\", \"Guest file operation failed\", {\n        stderr: result.stderr,\n      });\n  };\n  return {\n    upload(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        const modes: [string, number][] = [];\n        await uploadTree(\n          source,\n          posix.resolve(runtime.root, destination),\n          async (path, data) => {\n            await firecrackerCommand({\n              ...runtime,\n              executor: binaryExecutor({ input: Readable.from([data]) }),\n            })({\n              executable: \"node\",\n              arguments: [\"-e\", firecrackerFileScript, \"write\", path],\n              signal,\n            });\n          },\n          (target, path) => run([\"link\", path, target], signal),\n          async (path, directory, mode) => {\n            if (directory) {\n              await run([\"directory\", path], signal);\n              modes.push([path, mode]);\n              return;\n            }\n            await run([\"mode\", path, String(mode)], signal);\n          },\n          signal,\n        );\n        for (const [path, mode] of modes.reverse())\n          await run([\"mode\", path, String(mode)], signal);\n      });\n    },\n    download(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        await transferDestination(destination);\n        const remote = posix.resolve(runtime.root, source);\n        const manifest = await invoke({\n          executable: \"node\",\n          arguments: [\"-e\", manifestScript, remote],\n          retain: firecrackerDefaults.manifestBytes,\n          signal,\n        });\n        if (manifest.status !== 0)\n          throw new OutpostError(\"provider\", \"Guest manifest failed\", {\n            stderr: manifest.stderr,\n          });\n        await downloadTree(\n          remote,\n          destination,\n          manifest.stdout,\n          async (path) => {\n            const chunks: Buffer[] = [];\n            const output = new Writable({\n              write(chunk: Buffer, _encoding, done) {\n                chunks.push(chunk);\n                done();\n              },\n            });\n            await firecrackerCommand({\n              ...runtime,\n              executor: binaryExecutor({ output }),\n            })({\n              executable: \"node\",\n              arguments: [\"-e\", firecrackerFileScript, \"read\", path],\n              signal,\n            });\n            return Buffer.concat(chunks);\n          },\n          signal,\n        );\n        const entries: unknown = JSON.parse(manifest.stdout);\n        if (!Array.isArray(entries))\n          throw new OutpostError(\"provider\", \"Invalid transfer manifest\");\n        const records: unknown[] = entries;\n        for (const entry of records.reverse()) {\n          if (\n            !entry ||\n            typeof entry !== \"object\" ||\n            !(\"kind\" in entry) ||\n            !(\"path\" in entry) ||\n            typeof entry.path !== \"string\" ||\n            !(\"mode\" in entry) ||\n            typeof entry.mode !== \"number\" ||\n            !Number.isSafeInteger(entry.mode)\n          )\n            throw new OutpostError(\"provider\", \"Invalid transfer entry\");\n          if (entry.kind !== \"directory\") continue;\n          signal.throwIfAborted();\n          const path = entry.path\n            ? await safeDestination(destination, entry.path)\n            : destination;\n          await chmod(path, entry.mode & 0o777);\n        }\n      });\n    },\n  };\n}\n"]}

package/dist/providers/firecracker-machine.d.ts

@@ -0,0 +1,3 @@
+import type { FirecrackerMachine, FirecrackerOptions } from "./firecracker.types.ts";
+export declare function validateFirecracker(options: FirecrackerOptions): void;
+export declare function firecrackerMachine(options: FirecrackerOptions, signal?: AbortSignal): Promise<FirecrackerMachine>;

package/dist/providers/firecracker-machine.js

@@ -0,0 +1,155 @@
+import { createHash } from "node:crypto";
+import { spawn } from "node:child_process";
+import { constants } from "node:fs";
+import { access, chmod, copyFile, mkdir, mkdtemp, rm, writeFile, } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { isAbsolute, join } from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+import { invariant, OutpostError, positive } from "../domain/errors.js";
+import { registerCleanup } from "../infrastructure/shutdown.js";
+import { firecrackerDefaults } from "./firecracker.constants.js";
+export function validateFirecracker(options) {
+    invariant(!("egress" in options) || options.egress === undefined, "Firecracker cannot enforce Outpost egress policies; configure host networking explicitly");
+    for (const path of [
+        options.binary,
+        options.kernel,
+        options.rootfs,
+        options.home,
+        options.root ?? firecrackerDefaults.root,
+        options.ssh.identity,
+        options.ssh.knownHosts,
+    ])
+        invariant(isAbsolute(path) && !path.includes("\0"), "Firecracker paths must be absolute");
+    invariant(/^[a-zA-Z0-9_.-]{1,15}$/.test(options.tap), "Invalid TAP interface");
+    invariant(/^([a-fA-F0-9]{2}:){5}[a-fA-F0-9]{2}$/.test(options.guestMac), "Invalid guest MAC address");
+    invariant(/^[a-zA-Z0-9_.:-]+$/.test(options.ssh.host) &&
+        !options.ssh.host.startsWith("-"), "Invalid SSH host");
+    invariant(/^[a-zA-Z0-9_-]+$/.test(options.ssh.user), "Invalid SSH user");
+    for (const value of [
+        options.cpus ?? firecrackerDefaults.cpus,
+        options.memoryMb ?? firecrackerDefaults.memoryMb,
+        options.ssh.port ?? 22,
+    ])
+        invariant(Number.isSafeInteger(value) && value > 0, "Firecracker resource limits and SSH port must be positive integers");
+    positive(options.bootDeadlineMs ?? firecrackerDefaults.bootDeadlineMs, "bootDeadlineMs");
+}
+export async function firecrackerMachine(options, signal) {
+    invariant(process.platform === "linux", "Firecracker requires Linux and KVM");
+    signal?.throwIfAborted();
+    await access("/dev/kvm", constants.R_OK | constants.W_OK);
+    await Promise.all([
+        access(options.binary, constants.X_OK),
+        access(options.kernel, constants.R_OK),
+        access(options.rootfs, constants.R_OK),
+        access(options.ssh.identity, constants.R_OK),
+        access(options.ssh.knownHosts, constants.R_OK),
+    ]);
+    const lock = join(tmpdir(), `outpost-firecracker-tap-${options.tap}.lock`);
+    await mkdir(lock, { mode: 0o700 });
+    const endpoint = createHash("sha256")
+        .update(`${options.ssh.host}:${options.ssh.port ?? 22}`)
+        .digest("hex");
+    const transportLock = join(tmpdir(), `outpost-firecracker-ssh-${endpoint}.lock`);
+    try {
+        await mkdir(transportLock, { mode: 0o700 });
+    }
+    catch (cause) {
+        return failedAllocation([lock], cause);
+    }
+    let directory;
+    try {
+        directory = await mkdtemp(join(tmpdir(), "outpost-firecracker-"));
+    }
+    catch (cause) {
+        return failedAllocation([lock, transportLock], cause);
+    }
+    try {
+        await copyFile(options.rootfs, join(directory, "rootfs.ext4"), constants.COPYFILE_FICLONE);
+        await chmod(join(directory, "rootfs.ext4"), 0o600);
+        signal?.throwIfAborted();
+        await writeFile(join(directory, "config.json"), JSON.stringify({
+            "boot-source": {
+                kernel_image_path: options.kernel,
+                boot_args: options.bootArgs,
+            },
+            drives: [
+                {
+                    drive_id: "rootfs",
+                    path_on_host: join(directory, "rootfs.ext4"),
+                    is_root_device: true,
+                    is_read_only: false,
+                },
+            ],
+            "machine-config": {
+                vcpu_count: options.cpus ?? firecrackerDefaults.cpus,
+                mem_size_mib: options.memoryMb ?? firecrackerDefaults.memoryMb,
+            },
+            "network-interfaces": [
+                {
+                    iface_id: "net1",
+                    guest_mac: options.guestMac,
+                    host_dev_name: options.tap,
+                },
+            ],
+        }), { mode: 0o600 });
+    }
+    catch (cause) {
+        return failedAllocation([directory, lock, transportLock], cause);
+    }
+    const child = spawn(options.binary, [
+        "--api-sock",
+        join(directory, "api.sock"),
+        "--config-file",
+        join(directory, "config.json"),
+    ], { stdio: "ignore" });
+    let exited = false;
+    const exit = new Promise((resolve) => {
+        child.once("error", () => {
+            exited = true;
+            resolve();
+        });
+        child.once("exit", () => {
+            exited = true;
+            resolve();
+        });
+    });
+    let releasing;
+    let closed = false;
+    let unregister = () => { };
+    const release = () => (releasing ??= (async () => {
+        closed = true;
+        if (!exited)
+            child.kill("SIGTERM");
+        await Promise.race([exit, delay(200, undefined, { ref: false })]);
+        if (!exited)
+            child.kill("SIGKILL");
+        await Promise.race([
+            exit,
+            delay(firecrackerDefaults.cleanupMs, undefined, { ref: false }),
+        ]);
+        if (!exited)
+            throw new OutpostError("provider", `VM termination uncertain; private disk retained at ${directory}`);
+        await rm(directory, { recursive: true, force: true });
+        await rm(lock, { recursive: true, force: true });
+        await rm(transportLock, { recursive: true, force: true });
+        unregister();
+    })().catch((cause) => {
+        releasing = undefined;
+        throw cause;
+    }));
+    unregister = registerCleanup(release, () => {
+        if (!exited)
+            child.kill("SIGKILL");
+    });
+    return { directory, isClosed: () => closed || exited, release };
+}
+async function failedAllocation(paths, cause) {
+    const results = await Promise.allSettled(paths.map((path) => rm(path, { recursive: true, force: true })));
+    const failures = results
+        .filter((result) => result.status === "rejected")
+        .map((result) => result.reason);
+    if (failures.length)
+        throw new AggregateError([cause, ...failures], "Firecracker allocation and cleanup failed; inspect retained temporary resources");
+    throw cause;
+}
+//# sourceMappingURL=firecracker-machine.js.map

package/dist/providers/firecracker-machine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker-machine.js","sourceRoot":"","sources":["../../src/providers/firecracker-machine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,KAAK,EACL,OAAO,EACP,EAAE,EACF,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAMjE,MAAM,UAAU,mBAAmB,CAAC,OAA2B;IAC7D,SAAS,CACP,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EACtD,0FAA0F,CAC3F,CAAC;IACF,KAAK,MAAM,IAAI,IAAI;QACjB,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,MAAM;QACd,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI;QACxC,OAAO,CAAC,GAAG,CAAC,QAAQ;QACpB,OAAO,CAAC,GAAG,CAAC,UAAU;KACvB;QACC,SAAS,CACP,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EACxC,oCAAoC,CACrC,CAAC;IACJ,SAAS,CACP,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAC1C,uBAAuB,CACxB,CAAC;IACF,SAAS,CACP,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC7D,2BAA2B,CAC5B,CAAC;IACF,SAAS,CACP,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACzC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EACnC,kBAAkB,CACnB,CAAC;IACF,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACzE,KAAK,MAAM,KAAK,IAAI;QAClB,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI;QACxC,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAC,QAAQ;QAChD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;KACvB;QACC,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EACxC,oEAAoE,CACrE,CAAC;IACJ,QAAQ,CACN,OAAO,CAAC,cAAc,IAAI,mBAAmB,CAAC,cAAc,EAC5D,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA2B,EAC3B,MAAoB;IAEpB,SAAS,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,oCAAoC,CAAC,CAAC;IAC9E,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,MAAM,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC;KAC/C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IAC3E,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;SAClC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;SACvD,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,MAAM,aAAa,GAAG,IAAI,CACxB,MAAM,EAAE,EACR,2BAA2B,QAAQ,OAAO,CAC3C,CAAC;IACF,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,gBAAgB,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,gBAAgB,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,CACZ,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAC9B,SAAS,CAAC,gBAAgB,CAC3B,CAAC;QACF,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,SAAS,CACb,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAC9B,IAAI,CAAC,SAAS,CAAC;YACb,aAAa,EAAE;gBACb,iBAAiB,EAAE,OAAO,CAAC,MAAM;gBACjC,SAAS,EAAE,OAAO,CAAC,QAAQ;aAC5B;YACD,MAAM,EAAE;gBACN;oBACE,QAAQ,EAAE,QAAQ;oBAClB,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;oBAC5C,cAAc,EAAE,IAAI;oBACpB,YAAY,EAAE,KAAK;iBACpB;aACF;YACD,gBAAgB,EAAE;gBAChB,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,mBAAmB,CAAC,IAAI;gBACpD,YAAY,EAAE,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAC,QAAQ;aAC/D;YACD,oBAAoB,EAAE;gBACpB;oBACE,QAAQ,EAAE,MAAM;oBAChB,SAAS,EAAE,OAAO,CAAC,QAAQ;oBAC3B,aAAa,EAAE,OAAO,CAAC,GAAG;iBAC3B;aACF;SACF,CAAC,EACF,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,gBAAgB,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,MAAM,EACd;QACE,YAAY;QACZ,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;QAC3B,eAAe;QACf,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;KAC/B,EACD,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAC;IACF,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,MAAM,GAAG,IAAI,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,GAAG,IAAI,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,SAAoC,CAAC;IACzC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;QACzB,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,IAAI;YACJ,KAAK,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAChE,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YACT,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,sDAAsD,SAAS,EAAE,CAClE,CAAC;QACJ,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,UAAU,EAAE,CAAC;IACf,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACnB,SAAS,GAAG,SAAS,CAAC;QACtB,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC,CAAC;IACN,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE;QACzC,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,KAAwB,EACxB,KAAc;IAEd,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAChE,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;SAChD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM;QACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,EACpB,iFAAiF,CAClF,CAAC;IACJ,MAAM,KAAK,CAAC;AACd,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { spawn } from \"node:child_process\";\nimport { constants } from \"node:fs\";\nimport {\n  access,\n  chmod,\n  copyFile,\n  mkdir,\n  mkdtemp,\n  rm,\n  writeFile,\n} from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { isAbsolute, join } from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport { invariant, OutpostError, positive } from \"../domain/errors.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { firecrackerDefaults } from \"./firecracker.constants.ts\";\nimport type {\n  FirecrackerMachine,\n  FirecrackerOptions,\n} from \"./firecracker.types.ts\";\n\nexport function validateFirecracker(options: FirecrackerOptions): void {\n  invariant(\n    !(\"egress\" in options) || options.egress === undefined,\n    \"Firecracker cannot enforce Outpost egress policies; configure host networking explicitly\",\n  );\n  for (const path of [\n    options.binary,\n    options.kernel,\n    options.rootfs,\n    options.home,\n    options.root ?? firecrackerDefaults.root,\n    options.ssh.identity,\n    options.ssh.knownHosts,\n  ])\n    invariant(\n      isAbsolute(path) && !path.includes(\"\\0\"),\n      \"Firecracker paths must be absolute\",\n    );\n  invariant(\n    /^[a-zA-Z0-9_.-]{1,15}$/.test(options.tap),\n    \"Invalid TAP interface\",\n  );\n  invariant(\n    /^([a-fA-F0-9]{2}:){5}[a-fA-F0-9]{2}$/.test(options.guestMac),\n    \"Invalid guest MAC address\",\n  );\n  invariant(\n    /^[a-zA-Z0-9_.:-]+$/.test(options.ssh.host) &&\n      !options.ssh.host.startsWith(\"-\"),\n    \"Invalid SSH host\",\n  );\n  invariant(/^[a-zA-Z0-9_-]+$/.test(options.ssh.user), \"Invalid SSH user\");\n  for (const value of [\n    options.cpus ?? firecrackerDefaults.cpus,\n    options.memoryMb ?? firecrackerDefaults.memoryMb,\n    options.ssh.port ?? 22,\n  ])\n    invariant(\n      Number.isSafeInteger(value) && value > 0,\n      \"Firecracker resource limits and SSH port must be positive integers\",\n    );\n  positive(\n    options.bootDeadlineMs ?? firecrackerDefaults.bootDeadlineMs,\n    \"bootDeadlineMs\",\n  );\n}\n\nexport async function firecrackerMachine(\n  options: FirecrackerOptions,\n  signal?: AbortSignal,\n): Promise<FirecrackerMachine> {\n  invariant(process.platform === \"linux\", \"Firecracker requires Linux and KVM\");\n  signal?.throwIfAborted();\n  await access(\"/dev/kvm\", constants.R_OK | constants.W_OK);\n  await Promise.all([\n    access(options.binary, constants.X_OK),\n    access(options.kernel, constants.R_OK),\n    access(options.rootfs, constants.R_OK),\n    access(options.ssh.identity, constants.R_OK),\n    access(options.ssh.knownHosts, constants.R_OK),\n  ]);\n  const lock = join(tmpdir(), `outpost-firecracker-tap-${options.tap}.lock`);\n  await mkdir(lock, { mode: 0o700 });\n  const endpoint = createHash(\"sha256\")\n    .update(`${options.ssh.host}:${options.ssh.port ?? 22}`)\n    .digest(\"hex\");\n  const transportLock = join(\n    tmpdir(),\n    `outpost-firecracker-ssh-${endpoint}.lock`,\n  );\n  try {\n    await mkdir(transportLock, { mode: 0o700 });\n  } catch (cause) {\n    return failedAllocation([lock], cause);\n  }\n  let directory: string;\n  try {\n    directory = await mkdtemp(join(tmpdir(), \"outpost-firecracker-\"));\n  } catch (cause) {\n    return failedAllocation([lock, transportLock], cause);\n  }\n  try {\n    await copyFile(\n      options.rootfs,\n      join(directory, \"rootfs.ext4\"),\n      constants.COPYFILE_FICLONE,\n    );\n    await chmod(join(directory, \"rootfs.ext4\"), 0o600);\n    signal?.throwIfAborted();\n    await writeFile(\n      join(directory, \"config.json\"),\n      JSON.stringify({\n        \"boot-source\": {\n          kernel_image_path: options.kernel,\n          boot_args: options.bootArgs,\n        },\n        drives: [\n          {\n            drive_id: \"rootfs\",\n            path_on_host: join(directory, \"rootfs.ext4\"),\n            is_root_device: true,\n            is_read_only: false,\n          },\n        ],\n        \"machine-config\": {\n          vcpu_count: options.cpus ?? firecrackerDefaults.cpus,\n          mem_size_mib: options.memoryMb ?? firecrackerDefaults.memoryMb,\n        },\n        \"network-interfaces\": [\n          {\n            iface_id: \"net1\",\n            guest_mac: options.guestMac,\n            host_dev_name: options.tap,\n          },\n        ],\n      }),\n      { mode: 0o600 },\n    );\n  } catch (cause) {\n    return failedAllocation([directory, lock, transportLock], cause);\n  }\n  const child = spawn(\n    options.binary,\n    [\n      \"--api-sock\",\n      join(directory, \"api.sock\"),\n      \"--config-file\",\n      join(directory, \"config.json\"),\n    ],\n    { stdio: \"ignore\" },\n  );\n  let exited = false;\n  const exit = new Promise<void>((resolve) => {\n    child.once(\"error\", () => {\n      exited = true;\n      resolve();\n    });\n    child.once(\"exit\", () => {\n      exited = true;\n      resolve();\n    });\n  });\n  let releasing: Promise<void> | undefined;\n  let closed = false;\n  let unregister = () => {};\n  const release = () =>\n    (releasing ??= (async () => {\n      closed = true;\n      if (!exited) child.kill(\"SIGTERM\");\n      await Promise.race([exit, delay(200, undefined, { ref: false })]);\n      if (!exited) child.kill(\"SIGKILL\");\n      await Promise.race([\n        exit,\n        delay(firecrackerDefaults.cleanupMs, undefined, { ref: false }),\n      ]);\n      if (!exited)\n        throw new OutpostError(\n          \"provider\",\n          `VM termination uncertain; private disk retained at ${directory}`,\n        );\n      await rm(directory, { recursive: true, force: true });\n      await rm(lock, { recursive: true, force: true });\n      await rm(transportLock, { recursive: true, force: true });\n      unregister();\n    })().catch((cause) => {\n      releasing = undefined;\n      throw cause;\n    }));\n  unregister = registerCleanup(release, () => {\n    if (!exited) child.kill(\"SIGKILL\");\n  });\n  return { directory, isClosed: () => closed || exited, release };\n}\n\nasync function failedAllocation(\n  paths: readonly string[],\n  cause: unknown,\n): Promise<never> {\n  const results = await Promise.allSettled(\n    paths.map((path) => rm(path, { recursive: true, force: true })),\n  );\n  const failures = results\n    .filter((result) => result.status === \"rejected\")\n    .map((result) => result.reason);\n  if (failures.length)\n    throw new AggregateError(\n      [cause, ...failures],\n      \"Firecracker allocation and cleanup failed; inspect retained temporary resources\",\n    );\n  throw cause;\n}\n"]}

package/dist/providers/firecracker.constants.d.ts

@@ -0,0 +1,10 @@
+export declare const firecrackerDefaults: {
+    readonly root: "/workspace";
+    readonly cpus: 2;
+    readonly memoryMb: 2048;
+    readonly bootDeadlineMs: 60000;
+    readonly commandMs: 600000;
+    readonly probeMs: 2000;
+    readonly cleanupMs: 5000;
+    readonly manifestBytes: number;
+};

package/dist/providers/firecracker.constants.js

@@ -0,0 +1,11 @@
+export const firecrackerDefaults = {
+    root: "/workspace",
+    cpus: 2,
+    memoryMb: 2048,
+    bootDeadlineMs: 60_000,
+    commandMs: 600_000,
+    probeMs: 2000,
+    cleanupMs: 5000,
+    manifestBytes: 16 * 1024 * 1024,
+};
+//# sourceMappingURL=firecracker.constants.js.map

package/dist/providers/firecracker.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecracker.constants.js","sourceRoot":"","sources":["../../src/providers/firecracker.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,IAAI;IACd,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,OAAO;IAClB,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CACvB,CAAC","sourcesContent":["export const firecrackerDefaults = {\n  root: \"/workspace\",\n  cpus: 2,\n  memoryMb: 2048,\n  bootDeadlineMs: 60_000,\n  commandMs: 600_000,\n  probeMs: 2000,\n  cleanupMs: 5000,\n  manifestBytes: 16 * 1024 * 1024,\n} as const;\n"]}

package/dist/providers/firecracker.d.ts

@@ -0,0 +1,4 @@
+import type { SandboxProvider } from "../domain/sandbox.types.ts";
+import type { FirecrackerOptions } from "./firecracker.types.ts";
+export type { FirecrackerOptions } from "./firecracker.types.ts";
+export declare function firecracker(options: FirecrackerOptions): SandboxProvider;

package/dist/providers/firecracker.js

@@ -0,0 +1,103 @@
+import { setTimeout as delay } from "node:timers/promises";
+import { OutpostError } from "../domain/errors.js";
+import { executeProcess, quote } from "../infrastructure/process.js";
+import { firecrackerCommand, firecrackerSsh } from "./firecracker-command.js";
+import { firecrackerDefaults } from "./firecracker.constants.js";
+import { firecrackerFiles } from "./firecracker-files.js";
+import { firecrackerMachine, validateFirecracker, } from "./firecracker-machine.js";
+export function firecracker(options) {
+    validateFirecracker(options);
+    let allocated = false;
+    return {
+        name: "firecracker",
+        placement: "remote",
+        variables: { ...options.variables },
+        async acquire(context) {
+            if (allocated)
+                throw new OutpostError("provider", "This Firecracker provider already owns its TAP; create separate configurations for concurrent VMs");
+            allocated = true;
+            let machine;
+            try {
+                machine = await firecrackerMachine(options, context.signal);
+            }
+            catch (cause) {
+                allocated = false;
+                throw cause;
+            }
+            const root = options.root ?? firecrackerDefaults.root;
+            let closed = false;
+            const active = new Set();
+            const stop = new AbortController();
+            const runtime = {
+                options,
+                root,
+                variables: context.variables,
+                executor: executeProcess,
+                isClosed: () => closed || machine.isClosed(),
+            };
+            let releasing;
+            const release = () => (releasing ??= (async () => {
+                closed = true;
+                stop.abort(new OutpostError("aborted", "Firecracker sandbox disposed"));
+                await Promise.allSettled([...active]);
+                await machine.release();
+                allocated = false;
+            })().catch((cause) => {
+                releasing = undefined;
+                throw cause;
+            }));
+            try {
+                const deadline = Date.now() +
+                    (options.bootDeadlineMs ?? firecrackerDefaults.bootDeadlineMs);
+                while (true) {
+                    context.signal?.throwIfAborted();
+                    if (machine.isClosed())
+                        throw new OutpostError("provider", "Firecracker exited before guest readiness");
+                    const result = await executeProcess({
+                        ...firecrackerSsh(options, `test "$HOME" = ${quote(options.home)} && node -e 'if(Number(process.versions.node.split(".")[0])<24)process.exit(1)' && command -v git setsid tar >/dev/null && mkdir -p ${quote(root)}`),
+                        deadlineMs: Math.max(1, Math.min(firecrackerDefaults.probeMs, deadline - Date.now())),
+                        ...(context.signal ? { signal: context.signal } : {}),
+                    }).catch((cause) => {
+                        context.signal?.throwIfAborted();
+                        return { status: 1, stdout: "", stderr: String(cause) };
+                    });
+                    if (machine.isClosed())
+                        throw new OutpostError("provider", "Firecracker exited during guest readiness");
+                    if (result.status === 0)
+                        break;
+                    if (Date.now() >= deadline)
+                        throw new OutpostError("timeout", "Firecracker guest SSH/prerequisites did not become ready", { stderr: result.stderr });
+                    await delay(100, undefined, { signal: context.signal });
+                }
+            }
+            catch (cause) {
+                try {
+                    await release();
+                }
+                catch (cleanup) {
+                    throw new AggregateError([cause, cleanup], "Firecracker acquisition and cleanup failed");
+                }
+                throw cause;
+            }
+            const invoke = firecrackerCommand(runtime);
+            const files = firecrackerFiles(runtime);
+            const track = (operation, signal) => {
+                if (closed)
+                    return Promise.reject(new OutpostError("provider", "Firecracker sandbox is closed"));
+                const pending = operation(signal ? AbortSignal.any([signal, stop.signal]) : stop.signal);
+                active.add(pending);
+                void pending.then(() => active.delete(pending), () => active.delete(pending));
+                return pending;
+            };
+            return {
+                root,
+                home: options.home,
+                invoke: (command) => track((signal) => invoke({ ...command, signal }), command.signal),
+                upload: (source, destination, options = {}) => track((signal) => files.upload(source, destination, { ...options, signal }), options.signal),
+                download: (source, destination, options = {}) => track((signal) => files.download(source, destination, { ...options, signal }), options.signal),
+                release,
+            };
+        },
+    };
+}
+//# sourceMappingURL=firecracker.js.map