@empire-builder-kit/nx 1.0.0-beta.4

package/src/local-dev/gateway.js

@@ -0,0 +1,368 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MachineGateway = exports.GatewayRegistry = void 0;
+exports.negotiateGatewayProtocol = negotiateGatewayProtocol;
+exports.createGatewayCapability = createGatewayCapability;
+exports.sendGatewayCommand = sendGatewayCommand;
+const node_crypto_1 = require("node:crypto");
+const node_https_1 = require("node:https");
+const node_tls_1 = require("node:tls");
+const node_http_1 = require("node:http");
+const node_net_1 = require("node:net");
+const node_net_2 = require("node:net");
+const contracts_js_1 = require("./contracts.js");
+function negotiateGatewayProtocol(range) {
+    if (!Number.isInteger(range.minimum) ||
+        !Number.isInteger(range.maximum) ||
+        range.minimum > range.maximum ||
+        contracts_js_1.GATEWAY_PROTOCOL_VERSION < range.minimum ||
+        contracts_js_1.GATEWAY_PROTOCOL_VERSION > range.maximum) {
+        throw new Error(`Gateway protocol ${contracts_js_1.GATEWAY_PROTOCOL_VERSION} is incompatible with client range ${range.minimum}-${range.maximum}. Run dev-setup --upgrade explicitly or use the HTTPS explicit-port fallback.`);
+    }
+    return contracts_js_1.GATEWAY_PROTOCOL_VERSION;
+}
+function createGatewayCapability() {
+    return (0, node_crypto_1.randomBytes)(32).toString('base64url');
+}
+function capabilityDigest(value) {
+    return (0, node_crypto_1.createHash)('sha256').update(value).digest();
+}
+function validHostname(hostname) {
+    const label = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+    return (/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.ebk\.localhost$/.test(hostname) ||
+        (hostname.length <= 253 &&
+            hostname.endsWith('.test') &&
+            hostname.split('.').every((candidate) => label.test(candidate))));
+}
+class GatewayRegistry {
+    options;
+    #registrations = new Map();
+    #capability;
+    constructor(capability, options = {}) {
+        this.options = options;
+        this.#capability = capabilityDigest(capability);
+    }
+    authorize(capability) {
+        if (typeof capability !== 'string') {
+            throw new Error('Gateway control capability was rejected.');
+        }
+        const presented = capabilityDigest(capability);
+        if (!(0, node_crypto_1.timingSafeEqual)(presented, this.#capability)) {
+            throw new Error('Gateway control capability was rejected.');
+        }
+    }
+    register(request) {
+        this.authorize(request.capability);
+        if (!validHostname(request.hostname)) {
+            throw new Error(`Gateway rejected invalid hostname ${request.hostname}.`);
+        }
+        if (!Number.isInteger(request.proxyPort) ||
+            request.proxyPort < 1024 ||
+            request.proxyPort > 65535) {
+            throw new Error('Gateway proxyPort must be from 1024 through 65535.');
+        }
+        if (request.sessionManifestVersion !== contracts_js_1.SESSION_MANIFEST_VERSION) {
+            throw new Error(`Gateway requires session manifest ${contracts_js_1.SESSION_MANIFEST_VERSION}; client supplied ${request.sessionManifestVersion}.`);
+        }
+        this.expire();
+        const existing = this.#registrations.get(request.hostname);
+        if (existing && existing.sessionId !== request.sessionId) {
+            throw new Error(`Gateway hostname ${request.hostname} is already registered by another checkout.`);
+        }
+        const registration = {
+            clientFrameworkVersion: request.clientFrameworkVersion,
+            expiresAt: (this.options.now?.() ?? Date.now()) + (this.options.ttlMs ?? 15_000),
+            hostname: request.hostname,
+            negotiatedProtocol: negotiateGatewayProtocol(request.protocol),
+            proxyPort: request.proxyPort,
+            sessionId: request.sessionId,
+        };
+        this.#registrations.set(request.hostname, registration);
+        return registration;
+    }
+    heartbeat(hostname, sessionId) {
+        this.expire();
+        const registration = this.#registrations.get(hostname);
+        if (!registration || registration.sessionId !== sessionId) {
+            throw new Error('Gateway heartbeat has no matching registration.');
+        }
+        registration.expiresAt =
+            (this.options.now?.() ?? Date.now()) + (this.options.ttlMs ?? 15_000);
+        return registration;
+    }
+    unregister(hostname, sessionId) {
+        this.expire();
+        const registration = this.#registrations.get(hostname);
+        if (!registration || registration.sessionId !== sessionId)
+            return false;
+        return this.#registrations.delete(hostname);
+    }
+    resolve(hostname) {
+        this.expire();
+        return this.#registrations.get(hostname);
+    }
+    expire() {
+        const now = this.options.now?.() ?? Date.now();
+        for (const [hostname, registration] of this.#registrations) {
+            if (registration.expiresAt <= now)
+                this.#registrations.delete(hostname);
+        }
+    }
+    get activeCount() {
+        this.expire();
+        return this.#registrations.size;
+    }
+}
+exports.GatewayRegistry = GatewayRegistry;
+const UNTRUSTED_FORWARDING_HEADERS = new Set([
+    'forwarded',
+    'x-forwarded-for',
+    'x-forwarded-host',
+    'x-forwarded-port',
+    'x-forwarded-proto',
+]);
+function gatewayRequestHeaders(headers) {
+    return Object.fromEntries(Object.entries(headers).filter(([name]) => !UNTRUSTED_FORWARDING_HEADERS.has(name.toLowerCase())));
+}
+function requestedHostname(host) {
+    if (!host)
+        return undefined;
+    try {
+        return new URL(`https://${host}`).hostname.toLowerCase();
+    }
+    catch {
+        return undefined;
+    }
+}
+class MachineGateway {
+    registry;
+    options;
+    #https;
+    #ipc;
+    #sockets = new Set();
+    constructor(registry, options) {
+        this.registry = registry;
+        this.options = options;
+    }
+    async listen(port, ipcPath) {
+        if (this.#https || this.#ipc)
+            throw new Error('Gateway is already running.');
+        const secureContext = (0, node_tls_1.createSecureContext)(this.options);
+        const tlsOptions = {
+            ...this.options,
+            SNICallback: (servername, callback) => {
+                if (!this.registry.resolve(servername.toLowerCase())) {
+                    callback(new Error('Unknown EBK fleet SNI host.'));
+                    return;
+                }
+                callback(null, secureContext);
+            },
+        };
+        const onRequest = (request, response) => {
+            const hostname = requestedHostname(request.headers.host);
+            const registration = hostname
+                ? this.registry.resolve(hostname)
+                : undefined;
+            const presentedServername = request.socket.servername;
+            const servername = typeof presentedServername === 'string'
+                ? presentedServername.toLowerCase()
+                : undefined;
+            if (!hostname || !registration || servername !== hostname) {
+                response.writeHead(421, {
+                    'content-type': 'text/plain; charset=utf-8',
+                });
+                response.end('Unknown EBK fleet host.\n');
+                return;
+            }
+            const upstream = (0, node_http_1.request)({
+                headers: gatewayRequestHeaders(request.headers),
+                host: '127.0.0.1',
+                method: request.method,
+                path: request.url,
+                port: registration.proxyPort,
+            }, (upstreamResponse) => {
+                response.writeHead(upstreamResponse.statusCode ?? 502, upstreamResponse.headers);
+                upstreamResponse.pipe(response);
+            });
+            upstream.on('error', () => {
+                if (!response.headersSent)
+                    response.writeHead(502);
+                response.end('Fleet session proxy unavailable.\n');
+            });
+            request.pipe(upstream);
+        };
+        const onUpgrade = (request, socket, head) => {
+            const hostname = requestedHostname(request.headers.host);
+            const registration = hostname
+                ? this.registry.resolve(hostname)
+                : undefined;
+            const presentedServername = request.socket.servername;
+            const servername = typeof presentedServername === 'string'
+                ? presentedServername.toLowerCase()
+                : undefined;
+            if (!registration || servername !== hostname) {
+                socket.end('HTTP/1.1 421 Misdirected Request\r\nConnection: close\r\n\r\n');
+                return;
+            }
+            const upstream = (0, node_http_1.request)({
+                headers: gatewayRequestHeaders(request.headers),
+                host: '127.0.0.1',
+                method: request.method,
+                path: request.url,
+                port: registration.proxyPort,
+            });
+            upstream.on('upgrade', (response, upstreamSocket, upstreamHead) => {
+                socket.write(`HTTP/1.1 ${response.statusCode ?? 101} ${response.statusMessage ?? 'Switching Protocols'}\r\n` +
+                    Object.entries(response.headers)
+                        .map(([name, value]) => `${name}: ${Array.isArray(value) ? value.join(', ') : (value ?? '')}\r\n`)
+                        .join('') +
+                    '\r\n');
+                if (head.length)
+                    upstreamSocket.write(head);
+                if (upstreamHead.length)
+                    socket.write(upstreamHead);
+                upstreamSocket.pipe(socket).pipe(upstreamSocket);
+            });
+            upstream.on('error', () => socket.end('HTTP/1.1 502 Bad Gateway\r\nConnection: close\r\n\r\n'));
+            upstream.end();
+        };
+        const servers = ['127.0.0.1', '::1'].map((host) => {
+            const server = (0, node_https_1.createServer)(tlsOptions, onRequest);
+            server.on('connection', (socket) => {
+                this.#sockets.add(socket);
+                socket.once('close', () => this.#sockets.delete(socket));
+            });
+            server.on('upgrade', onUpgrade);
+            return { host, server };
+        });
+        try {
+            for (const { host, server } of servers) {
+                await new Promise((resolve, reject) => {
+                    server.once('error', reject);
+                    server.listen({ host, ipv6Only: host === '::1', port }, () => resolve());
+                });
+            }
+        }
+        catch (error) {
+            await Promise.all(servers.map(({ server }) => new Promise((resolve) => server.listening ? server.close(() => resolve()) : resolve())));
+            throw error;
+        }
+        this.#https = servers.map(({ server }) => server);
+        const ipc = (0, node_net_1.createServer)((socket) => {
+            this.#sockets.add(socket);
+            socket.once('close', () => this.#sockets.delete(socket));
+            let buffer = '';
+            socket.setEncoding('utf8');
+            socket.on('data', (chunk) => {
+                buffer += chunk;
+                if (buffer.length > 64 * 1024) {
+                    socket.end('{"ok":false,"error":"request too large"}\n');
+                    return;
+                }
+                const newline = buffer.indexOf('\n');
+                if (newline < 0)
+                    return;
+                const input = buffer.slice(0, newline);
+                try {
+                    const message = JSON.parse(input);
+                    let value;
+                    if (message.action === 'register')
+                        value = this.registry.register(message);
+                    else if (message.action === 'heartbeat') {
+                        this.registry.authorize(message.capability);
+                        value = this.registry.heartbeat(message.hostname, message.sessionId);
+                    }
+                    else if (message.action === 'unregister') {
+                        this.registry.authorize(message.capability);
+                        value = this.registry.unregister(message.hostname, message.sessionId);
+                    }
+                    else if (message.action === 'status') {
+                        this.registry.authorize(message.capability);
+                        value = {
+                            activeSessions: this.registry.activeCount,
+                            protocolVersion: contracts_js_1.GATEWAY_PROTOCOL_VERSION,
+                        };
+                    }
+                    else
+                        throw new Error('Unknown gateway IPC action.');
+                    socket.end(`${JSON.stringify({ ok: true, value })}\n`);
+                }
+                catch (error) {
+                    socket.end(`${JSON.stringify({ ok: false, error: error instanceof Error ? error.message : String(error) })}\n`);
+                }
+            });
+        });
+        try {
+            await new Promise((resolve, reject) => {
+                ipc.once('error', reject);
+                ipc.listen(ipcPath, () => resolve());
+            });
+            if (process.platform !== 'win32') {
+                const { chmodSync } = await Promise.resolve().then(() => require('node:fs'));
+                chmodSync(ipcPath, 0o600);
+            }
+            this.#ipc = ipc;
+        }
+        catch (error) {
+            await Promise.all(servers.map(({ server }) => new Promise((resolve) => server.close(() => resolve()))));
+            this.#https = undefined;
+            throw error;
+        }
+    }
+    async close() {
+        const servers = [];
+        if (this.#ipc)
+            servers.push(this.#ipc);
+        if (this.#https)
+            servers.push(...this.#https);
+        this.#ipc = undefined;
+        this.#https = undefined;
+        for (const socket of this.#sockets)
+            socket.destroy();
+        this.#sockets.clear();
+        await Promise.all(servers.map((server) => new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())))));
+    }
+}
+exports.MachineGateway = MachineGateway;
+async function sendGatewayCommand(ipcPath, message, timeoutMs = 2_000) {
+    return new Promise((resolve, reject) => {
+        const socket = (0, node_net_2.connect)(ipcPath);
+        let settled = false;
+        let contents = '';
+        const finish = (error, value) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            socket.destroy();
+            if (error)
+                reject(error);
+            else
+                resolve(value);
+        };
+        const timeout = setTimeout(() => finish(new Error('Gateway IPC request timed out.')), timeoutMs);
+        socket.setEncoding('utf8');
+        socket.on('connect', () => socket.write(`${JSON.stringify(message)}\n`));
+        socket.on('data', (chunk) => {
+            contents += chunk;
+            const newline = contents.indexOf('\n');
+            if (newline < 0)
+                return;
+            try {
+                const response = JSON.parse(contents.slice(0, newline));
+                if (!response.ok)
+                    throw new Error(response.error ?? 'Gateway rejected request.');
+                finish(undefined, response.value);
+            }
+            catch (error) {
+                finish(error instanceof Error ? error : new Error(String(error)));
+            }
+        });
+        socket.on('error', (error) => finish(error));
+        socket.on('end', () => {
+            if (!settled)
+                finish(new Error('Gateway closed IPC without a response.'));
+        });
+    });
+}
+//# sourceMappingURL=gateway.js.map

package/src/local-dev/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/gateway.ts"],"names":[],"mappings":";;;AAqCA,4DAgBC;AAED,0DAEC;AAsYD,gDA6CC;AA5eD,6CAAuE;AACvE,2CAGoB;AACpB,uCAA+D;AAC/D,yCAAmD;AACnD,uCAGkB;AAClB,uCAAmC;AAEnC,iDAGwB;AAqBxB,SAAgB,wBAAwB,CAAC,KAGxC;IACC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO;QAC7B,uCAAwB,GAAG,KAAK,CAAC,OAAO;QACxC,uCAAwB,GAAG,KAAK,CAAC,OAAO,EACxC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,oBAAoB,uCAAwB,sCAAsC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,+EAA+E,CAChM,CAAC;IACJ,CAAC;IACD,OAAO,uCAAwB,CAAC;AAClC,CAAC;AAED,SAAgB,uBAAuB;IACrC,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,KAAK,GAAG,wCAAwC,CAAC;IACvD,OAAO,CACL,wDAAwD,CAAC,IAAI,CAAC,QAAQ,CAAC;QACvE,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG;YACrB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,MAAa,eAAe;IAMf;IALX,cAAc,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC/C,WAAW,CAAS;IAE7B,YACE,UAAkB,EACT,UAAkD,EAAE;QAApD,YAAO,GAAP,OAAO,CAA6C;QAE7D,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED,SAAS,CAAC,UAAmB;QAC3B,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAA,6BAAe,EAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,OAAmC;QAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC5E,CAAC;QACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;YACpC,OAAO,CAAC,SAAS,GAAG,IAAI;YACxB,OAAO,CAAC,SAAS,GAAG,KAAK,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,sBAAsB,KAAK,uCAAwB,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,qCAAqC,uCAAwB,qBAAqB,OAAO,CAAC,sBAAsB,GAAG,CACpH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,CAAC,QAAQ,6CAA6C,CAClF,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAwB;YACxC,sBAAsB,EAAE,OAAO,CAAC,sBAAsB;YACtD,SAAS,EACP,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;YACvE,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,kBAAkB,EAAE,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC9D,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACxD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,SAAS,CAAC,QAAgB,EAAE,SAAiB;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,YAAY,CAAC,SAAS;YACpB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;QACxE,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,UAAU,CAAC,QAAgB,EAAE,SAAiB;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxE,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3D,IAAI,YAAY,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,IAAI,WAAW;QACb,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;IAClC,CAAC;CACF;AA5FD,0CA4FC;AAED,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;CACpB,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAC5B,OAAgD;IAEhD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAC5B,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAClE,CACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAwB;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAa,cAAc;IAMd;IACA;IANX,MAAM,CAAiB;IACvB,IAAI,CAAa;IACjB,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7B,YACW,QAAyB,EACzB,OAAwD;QADxD,aAAQ,GAAR,QAAQ,CAAiB;QACzB,YAAO,GAAP,OAAO,CAAiD;IAChE,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,OAAe;QACxC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI;YAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG;YACjB,GAAG,IAAI,CAAC,OAAO;YACf,WAAW,EAAE,CACX,UAAkB,EAClB,QAGS,EACT,EAAE;gBACF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBACrD,QAAQ,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBACD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YAChC,CAAC;SACF,CAAC;QACF,MAAM,SAAS,GAA4C,CACzD,OAAO,EACP,QAAQ,EACR,EAAE;YACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,QAAQ;gBAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACjC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,mBAAmB,GAAI,OAAO,CAAC,MAAoB,CAAC,UAAU,CAAC;YACrE,MAAM,UAAU,GACd,OAAO,mBAAmB,KAAK,QAAQ;gBACrC,CAAC,CAAC,mBAAmB,CAAC,WAAW,EAAE;gBACnC,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC1D,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,cAAc,EAAE,2BAA2B;iBAC5C,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,IAAA,mBAAW,EAC1B;gBACE,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC/C,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,YAAY,CAAC,SAAS;aAC7B,EACD,CAAC,gBAAgB,EAAE,EAAE;gBACnB,QAAQ,CAAC,SAAS,CAChB,gBAAgB,CAAC,UAAU,IAAI,GAAG,EAClC,gBAAgB,CAAC,OAAO,CACzB,CAAC;gBACF,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC,CACF,CAAC;YACF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACxB,IAAI,CAAC,QAAQ,CAAC,WAAW;oBAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnD,QAAQ,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC,CAAC;QACF,MAAM,SAAS,GAAG,CAChB,OAA4C,EAC5C,MAAc,EACd,IAAY,EACZ,EAAE;YACF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,YAAY,GAAG,QAAQ;gBAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACjC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,mBAAmB,GAAI,OAAO,CAAC,MAAoB,CAAC,UAAU,CAAC;YACrE,MAAM,UAAU,GACd,OAAO,mBAAmB,KAAK,QAAQ;gBACrC,CAAC,CAAC,mBAAmB,CAAC,WAAW,EAAE;gBACnC,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,CAAC,YAAY,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,CAAC,GAAG,CACR,+DAA+D,CAChE,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,IAAA,mBAAW,EAAC;gBAC3B,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC/C,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,GAAG;gBACjB,IAAI,EAAE,YAAY,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE;gBAChE,MAAM,CAAC,KAAK,CACV,YAAY,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,aAAa,IAAI,qBAAqB,MAAM;oBAC7F,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;yBAC7B,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAC5E;yBACA,IAAI,CAAC,EAAE,CAAC;oBACX,MAAM,CACT,CAAC;gBACF,IAAI,IAAI,CAAC,MAAM;oBAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,YAAY,CAAC,MAAM;oBAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACpD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CACxB,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CACpE,CAAC;YACF,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAChD,MAAM,MAAM,GAAG,IAAA,yBAAiB,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACxD,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;gBACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC7B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAC3D,OAAO,EAAE,CACV,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CACT,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACb,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAC5B,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAC7D,CACJ,CACF,CAAC;YACF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAElD,MAAM,GAAG,GAAG,IAAA,uBAAe,EAAC,CAAC,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC1B,MAAM,IAAI,KAAK,CAAC;gBAChB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;oBAC9B,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;oBACzD,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,OAAO,GAAG,CAAC;oBAAE,OAAO;gBACxB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAcY,CAAC;oBAC7C,IAAI,KAAc,CAAC;oBACnB,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;wBAC/B,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;yBACrC,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBACxC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;wBAC5C,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAC7B,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,CAClB,CAAC;oBACJ,CAAC;yBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;wBAC3C,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;wBAC5C,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAC9B,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,CAClB,CAAC;oBACJ,CAAC;yBAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBACvC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;wBAC5C,KAAK,GAAG;4BACN,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;4BACzC,eAAe,EAAE,uCAAwB;yBAC1C,CAAC;oBACJ,CAAC;;wBAAM,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBACtD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;gBACzD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,GAAG,CACR,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CACpG,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,EAAE,SAAS,EAAE,GAAG,2CAAa,SAAS,EAAC,CAAC;gBAC9C,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CACT,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACb,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAChE,CACF,CAAC;YACF,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,GAAgC,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CACT,CAAC,MAAM,EAAE,EAAE,CACT,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACpC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC7D,CACJ,CACF,CAAC;IACJ,CAAC;CACF;AAzPD,wCAyPC;AAIM,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,OAAgB,EAChB,SAAS,GAAG,KAAK;IAEjB,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,IAAA,kBAAO,EAAC,OAAO,CAAC,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,KAAS,EAAE,EAAE;YAC1C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,CAAC,KAAU,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,EACzD,SAAS,CACV,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,QAAQ,IAAI,KAAK,CAAC;YAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO;YACxB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAIrD,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,EAAE;oBACd,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,2BAA2B,CAAC,CAAC;gBACjE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/src/local-dev/identity.d.ts

@@ -0,0 +1,16 @@
+export declare function requirePersonalFleetStage(stage: string): string;
+export declare function createFleetId(options: {
+    checkoutPath: string;
+    stage: string;
+    workspaceName: string;
+}): string;
+export declare function normalizeFleetHostSuffix(suffix?: string): string;
+export declare function createFleetHostname(fleetId: string, suffix?: string): string;
+export declare function isLoopbackAddress(address: string): boolean;
+export declare function resolveFleetHostname(hostname: string, lookup?: (hostname: string, options: {
+    all: true;
+    verbatim: true;
+}) => Promise<{
+    address: string;
+    family: number;
+}[]>): Promise<readonly string[]>;

package/src/local-dev/identity.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requirePersonalFleetStage = requirePersonalFleetStage;
+exports.createFleetId = createFleetId;
+exports.normalizeFleetHostSuffix = normalizeFleetHostSuffix;
+exports.createFleetHostname = createFleetHostname;
+exports.isLoopbackAddress = isLoopbackAddress;
+exports.resolveFleetHostname = resolveFleetHostname;
+const node_crypto_1 = require("node:crypto");
+const node_dns_1 = require("node:dns");
+const node_fs_1 = require("node:fs");
+const canonicalStages = new Set(['development', 'staging', 'production']);
+const dnsLabelPattern = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+function label(value) {
+    return value
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .replace(/-+/g, '-');
+}
+function requirePersonalFleetStage(stage) {
+    const normalized = label(stage.trim());
+    if (!normalized ||
+        normalized !== stage.trim() ||
+        canonicalStages.has(normalized)) {
+        throw new Error('Fleet development requires a lowercase personal or preview stage, not development, staging, or production.');
+    }
+    return normalized;
+}
+function createFleetId(options) {
+    const stage = requirePersonalFleetStage(options.stage);
+    const workspace = label(options.workspaceName);
+    if (!workspace)
+        throw new Error('Workspace name cannot form a DNS label.');
+    let checkout;
+    try {
+        checkout = (0, node_fs_1.realpathSync)(options.checkoutPath);
+    }
+    catch {
+        checkout = options.checkoutPath;
+    }
+    const digest = (0, node_crypto_1.createHash)('sha256')
+        .update(`${checkout}\0${workspace}\0${stage}`)
+        .digest('hex')
+        .slice(0, 10);
+    const suffix = `-${stage}-${digest}`;
+    const available = 63 - suffix.length;
+    const prefix = workspace.slice(0, Math.max(1, available)).replace(/-+$/g, '');
+    const result = `${prefix}${suffix}`;
+    if (!/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(result)) {
+        throw new Error(`Fleet ID ${result} is not a valid DNS label.`);
+    }
+    return result;
+}
+function normalizeFleetHostSuffix(suffix = 'ebk.localhost') {
+    const normalizedSuffix = suffix.toLowerCase().replace(/^\.+|\.+$/g, '');
+    if (normalizedSuffix.length > 253 ||
+        normalizedSuffix
+            .split('.')
+            .some((candidate) => !dnsLabelPattern.test(candidate))) {
+        throw new Error('Fleet host suffix must contain valid DNS labels.');
+    }
+    if (normalizedSuffix.endsWith('.local')) {
+        throw new Error('.local uses multicast DNS and is not supported for EBK fleet origins.');
+    }
+    if (normalizedSuffix !== 'ebk.localhost' &&
+        !normalizedSuffix.endsWith('.test')) {
+        throw new Error('Fleet host suffix must be ebk.localhost or an explicitly managed .test suffix.');
+    }
+    return normalizedSuffix;
+}
+function createFleetHostname(fleetId, suffix = 'ebk.localhost') {
+    const normalizedSuffix = normalizeFleetHostSuffix(suffix);
+    return `${fleetId}.${normalizedSuffix}`;
+}
+function isLoopbackAddress(address) {
+    if (address === '::1' || address === '0:0:0:0:0:0:0:1')
+        return true;
+    const octets = address.split('.').map(Number);
+    return (octets.length === 4 &&
+        octets.every((octet) => Number.isInteger(octet) && octet >= 0 && octet <= 255) &&
+        octets[0] === 127);
+}
+async function resolveFleetHostname(hostname, lookup = (name, options) => node_dns_1.promises.lookup(name, options)) {
+    let records;
+    try {
+        records = await lookup(hostname, { all: true, verbatim: true });
+    }
+    catch (error) {
+        throw new Error(`Fleet hostname ${hostname} does not resolve. An explicit port cannot fix resolver failure. ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const addresses = [
+        ...new Set(records.map(({ address }) => address)),
+    ];
+    if (addresses.length === 0 ||
+        addresses.some((address) => !isLoopbackAddress(address))) {
+        throw new Error(`Fleet hostname ${hostname} must resolve only to loopback; received ${addresses.join(', ') || 'no addresses'}.`);
+    }
+    return addresses;
+}
+//# sourceMappingURL=identity.js.map

package/src/local-dev/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/identity.ts"],"names":[],"mappings":";;AAeA,8DAYC;AAED,sCA0BC;AAED,4DAwBC;AAED,kDAGC;AAED,8CAUC;AAED,oDA4BC;AAhID,6CAAyC;AACzC,uCAA2C;AAC3C,qCAAuC;AAEvC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1E,MAAM,eAAe,GAAG,wCAAwC,CAAC;AAEjE,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,yBAAyB,CAAC,KAAa;IACrD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,IACE,CAAC,UAAU;QACX,UAAU,KAAK,KAAK,CAAC,IAAI,EAAE;QAC3B,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,aAAa,CAAC,OAI7B;IACC,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC3E,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,GAAG,QAAQ,KAAK,SAAS,KAAK,KAAK,EAAE,CAAC;SAC7C,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IACpC,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,4BAA4B,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,wBAAwB,CAAC,MAAM,GAAG,eAAe;IAC/D,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACxE,IACE,gBAAgB,CAAC,MAAM,GAAG,GAAG;QAC7B,gBAAgB;aACb,KAAK,CAAC,GAAG,CAAC;aACV,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,IACE,gBAAgB,KAAK,eAAe;QACpC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAe,EAAE,MAAM,GAAG,eAAe;IAC3E,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,GAAG,OAAO,IAAI,gBAAgB,EAAE,CAAC;AAC1C,CAAC;AAED,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,CACL,MAAM,CAAC,MAAM,KAAK,CAAC;QACnB,MAAM,CAAC,KAAK,CACV,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CACjE;QACD,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAClB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,oBAAoB,CACxC,QAAgB,EAChB,SAGsD,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACtE,mBAAG,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;IAE3B,IAAI,OAA8C,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,oEAAoE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvJ,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAa;QAC1B,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;KAC1D,CAAC;IACF,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kBAAkB,QAAQ,4CAA4C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,GAAG,CAChH,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/src/local-dev/index.d.ts

@@ -0,0 +1,7 @@
+export * from './contracts.js';
+export * from './gateway.js';
+export * from './identity.js';
+export * from './ports.js';
+export * from './portless.js';
+export * from './proxy.js';
+export * from './tls.js';

package/src/local-dev/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./contracts.js"), exports);
+tslib_1.__exportStar(require("./gateway.js"), exports);
+tslib_1.__exportStar(require("./identity.js"), exports);
+tslib_1.__exportStar(require("./ports.js"), exports);
+tslib_1.__exportStar(require("./portless.js"), exports);
+tslib_1.__exportStar(require("./proxy.js"), exports);
+tslib_1.__exportStar(require("./tls.js"), exports);
+//# sourceMappingURL=index.js.map

package/src/local-dev/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/index.ts"],"names":[],"mappings":";;;AAAA,yDAA+B;AAC/B,uDAA6B;AAC7B,wDAA8B;AAC9B,qDAA2B;AAC3B,wDAA8B;AAC9B,qDAA2B;AAC3B,mDAAyB"}

package/src/local-dev/portless.d.ts

@@ -0,0 +1,15 @@
+export declare const EBK_GATEWAY_INTERNAL_PORT: 54443;
+export interface PrivilegedCommand {
+    args: string[];
+    command: string;
+    input?: string;
+    label: string;
+}
+export interface PortlessForwardPlan {
+    install: PrivilegedCommand[];
+    internalPort: number;
+    platform: NodeJS.Platform;
+    remove: PrivilegedCommand[];
+}
+export declare function createPortlessForwardPlan(targetPlatform?: NodeJS.Platform): PortlessForwardPlan;
+export declare function applyPrivilegedCommands(commands: readonly PrivilegedCommand[]): void;