@empire-builder-kit/nx 1.0.0-beta.4

package/src/local-dev/portless.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EBK_GATEWAY_INTERNAL_PORT = void 0;
+exports.createPortlessForwardPlan = createPortlessForwardPlan;
+exports.applyPrivilegedCommands = applyPrivilegedCommands;
+const node_child_process_1 = require("node:child_process");
+exports.EBK_GATEWAY_INTERNAL_PORT = 54443;
+function createPortlessForwardPlan(targetPlatform = process.platform) {
+    if (targetPlatform === 'win32') {
+        return {
+            install: [],
+            internalPort: 443,
+            platform: targetPlatform,
+            remove: [],
+        };
+    }
+    if (targetPlatform === 'darwin') {
+        // macOS's stock ruleset already evaluates com.apple/* anchors. A dedicated
+        // child anchor avoids replacing or editing /etc/pf.conf.
+        const anchor = 'com.apple/250.EmpireBuilderKit';
+        const rules = `rdr pass on lo0 inet proto tcp from any to 127.0.0.1 port 443 -> 127.0.0.1 port ${exports.EBK_GATEWAY_INTERNAL_PORT}\nrdr pass on lo0 inet6 proto tcp from any to ::1 port 443 -> ::1 port ${exports.EBK_GATEWAY_INTERNAL_PORT}\n`;
+        return {
+            install: [
+                {
+                    args: ['pfctl', '-E'],
+                    command: 'sudo',
+                    label: 'enable the macOS packet filter',
+                },
+                {
+                    args: ['pfctl', '-a', anchor, '-f', '-'],
+                    command: 'sudo',
+                    input: rules,
+                    label: 'install the EBK loopback-only port forward',
+                },
+            ],
+            internalPort: exports.EBK_GATEWAY_INTERNAL_PORT,
+            platform: targetPlatform,
+            remove: [
+                {
+                    args: ['pfctl', '-a', anchor, '-F', 'all'],
+                    command: 'sudo',
+                    label: 'remove the EBK packet-filter anchor',
+                },
+            ],
+        };
+    }
+    if (targetPlatform === 'linux') {
+        const ipv4 = [
+            '-p',
+            'tcp',
+            '-d',
+            '127.0.0.0/8',
+            '--dport',
+            '443',
+            '-j',
+            'REDIRECT',
+            '--to-ports',
+            String(exports.EBK_GATEWAY_INTERNAL_PORT),
+        ];
+        const ipv6 = [
+            '-p',
+            'tcp',
+            '-d',
+            '::1/128',
+            '--dport',
+            '443',
+            '-j',
+            'REDIRECT',
+            '--to-ports',
+            String(exports.EBK_GATEWAY_INTERNAL_PORT),
+        ];
+        return {
+            install: [
+                {
+                    args: ['iptables', '-t', 'nat', '-A', 'OUTPUT', ...ipv4],
+                    command: 'sudo',
+                    label: 'install the EBK IPv4 loopback port forward',
+                },
+                {
+                    args: ['ip6tables', '-t', 'nat', '-A', 'OUTPUT', ...ipv6],
+                    command: 'sudo',
+                    label: 'install the EBK IPv6 loopback port forward',
+                },
+            ],
+            internalPort: exports.EBK_GATEWAY_INTERNAL_PORT,
+            platform: targetPlatform,
+            remove: [
+                {
+                    args: ['iptables', '-t', 'nat', '-D', 'OUTPUT', ...ipv4],
+                    command: 'sudo',
+                    label: 'remove the EBK IPv4 loopback port forward',
+                },
+                {
+                    args: ['ip6tables', '-t', 'nat', '-D', 'OUTPUT', ...ipv6],
+                    command: 'sudo',
+                    label: 'remove the EBK IPv6 loopback port forward',
+                },
+            ],
+        };
+    }
+    throw new Error(`Portless EBK gateway setup is unsupported on ${targetPlatform}.`);
+}
+function applyPrivilegedCommands(commands) {
+    for (const step of commands) {
+        const result = (0, node_child_process_1.spawnSync)(step.command, step.args, {
+            ...(step.input ? { input: step.input } : {}),
+            encoding: 'utf8',
+            stdio: step.input ? ['pipe', 'inherit', 'inherit'] : 'inherit',
+        });
+        if (result.error || result.status !== 0) {
+            throw new Error(`Failed to ${step.label}${result.error ? `: ${result.error.message}` : ` (status ${result.status ?? 'unknown'})`}.`);
+        }
+    }
+}
+//# sourceMappingURL=portless.js.map

package/src/local-dev/portless.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portless.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/portless.ts"],"names":[],"mappings":";;;AAkBA,8DAkGC;AAED,0DAeC;AArID,2DAA+C;AAElC,QAAA,yBAAyB,GAAG,KAAc,CAAC;AAgBxD,SAAgB,yBAAyB,CACvC,iBAAkC,OAAO,CAAC,QAAQ;IAElD,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,GAAG;YACjB,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;QAChC,2EAA2E;QAC3E,yDAAyD;QACzD,MAAM,MAAM,GAAG,gCAAgC,CAAC;QAChD,MAAM,KAAK,GAAG,mFAAmF,iCAAyB,0EAA0E,iCAAyB,IAAI,CAAC;QAClO,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC;oBACrB,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,gCAAgC;iBACxC;gBACD;oBACE,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC;oBACxC,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,4CAA4C;iBACpD;aACF;YACD,YAAY,EAAE,iCAAyB;YACvC,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE;gBACN;oBACE,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;oBAC1C,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,qCAAqC;iBAC7C;aACF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,KAAK;YACL,IAAI;YACJ,aAAa;YACb,SAAS;YACT,KAAK;YACL,IAAI;YACJ,UAAU;YACV,YAAY;YACZ,MAAM,CAAC,iCAAyB,CAAC;SAClC,CAAC;QACF,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,KAAK;YACL,IAAI;YACJ,SAAS;YACT,SAAS;YACT,KAAK;YACL,IAAI;YACJ,UAAU;YACV,YAAY;YACZ,MAAM,CAAC,iCAAyB,CAAC;SAClC,CAAC;QACF,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;oBACxD,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,4CAA4C;iBACpD;gBACD;oBACE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;oBACzD,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,4CAA4C;iBACpD;aACF;YACD,YAAY,EAAE,iCAAyB;YACvC,QAAQ,EAAE,cAAc;YACxB,MAAM,EAAE;gBACN;oBACE,IAAI,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;oBACxD,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,2CAA2C;iBACnD;gBACD;oBACE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;oBACzD,OAAO,EAAE,MAAM;oBACf,KAAK,EAAE,2CAA2C;iBACnD;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gDAAgD,cAAc,GAAG,CAClE,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CACrC,QAAsC;IAEtC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAA,8BAAS,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAChD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;SAC/D,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG,GAAG,CACpH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/src/local-dev/ports.d.ts

@@ -0,0 +1,10 @@
+export declare const FLEET_PORT_RANGE: {
+    readonly first: 41000;
+    readonly last: 51999;
+};
+export declare function preferredFleetPort(key: string): number;
+export declare function canBindLoopbackPort(port: number): Promise<boolean>;
+export declare function allocateFleetPort(key: string, options?: {
+    isAvailable?: (port: number) => Promise<boolean>;
+    reserved?: ReadonlySet<number>;
+}): Promise<number>;

package/src/local-dev/ports.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FLEET_PORT_RANGE = void 0;
+exports.preferredFleetPort = preferredFleetPort;
+exports.canBindLoopbackPort = canBindLoopbackPort;
+exports.allocateFleetPort = allocateFleetPort;
+const node_crypto_1 = require("node:crypto");
+const node_net_1 = require("node:net");
+exports.FLEET_PORT_RANGE = { first: 41000, last: 51999 };
+function preferredFleetPort(key) {
+    const digest = (0, node_crypto_1.createHash)('sha256').update(key).digest();
+    const size = exports.FLEET_PORT_RANGE.last - exports.FLEET_PORT_RANGE.first + 1;
+    return exports.FLEET_PORT_RANGE.first + (digest.readUInt32BE(0) % size);
+}
+async function canBindLoopbackPort(port) {
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        return false;
+    return new Promise((resolve) => {
+        const server = (0, node_net_1.createServer)();
+        server.unref();
+        server.once('error', () => resolve(false));
+        server.listen({ host: '127.0.0.1', port, exclusive: true }, () => {
+            server.close(() => resolve(true));
+        });
+    });
+}
+async function allocateFleetPort(key, options = {}) {
+    const isAvailable = options.isAvailable ?? canBindLoopbackPort;
+    const first = preferredFleetPort(key);
+    const size = exports.FLEET_PORT_RANGE.last - exports.FLEET_PORT_RANGE.first + 1;
+    for (let offset = 0; offset < size; offset += 1) {
+        const port = exports.FLEET_PORT_RANGE.first +
+            ((first - exports.FLEET_PORT_RANGE.first + offset) % size);
+        if (!options.reserved?.has(port) && (await isAvailable(port)))
+            return port;
+    }
+    throw new Error(`No loopback port is available in ${exports.FLEET_PORT_RANGE.first}-${exports.FLEET_PORT_RANGE.last}.`);
+}
+//# sourceMappingURL=ports.js.map

package/src/local-dev/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/ports.ts"],"names":[],"mappings":";;;AAKA,gDAIC;AAED,kDAUC;AAED,8CAmBC;AA1CD,6CAAyC;AACzC,uCAAwC;AAE3B,QAAA,gBAAgB,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAW,CAAC;AAEvE,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,wBAAgB,CAAC,IAAI,GAAG,wBAAgB,CAAC,KAAK,GAAG,CAAC,CAAC;IAChE,OAAO,wBAAgB,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAClE,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,IAAY;IACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,KAAK,CAAC;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,IAAA,uBAAY,GAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;YAC/D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,UAGI,EAAE;IAEN,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,mBAAmB,CAAC;IAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,wBAAgB,CAAC,IAAI,GAAG,wBAAgB,CAAC,KAAK,GAAG,CAAC,CAAC;IAChE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GACR,wBAAgB,CAAC,KAAK;YACtB,CAAC,CAAC,KAAK,GAAG,wBAAgB,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oCAAoC,wBAAgB,CAAC,KAAK,IAAI,wBAAgB,CAAC,IAAI,GAAG,CACvF,CAAC;AACJ,CAAC"}

package/src/local-dev/proxy.d.ts

@@ -0,0 +1,37 @@
+import { type Server } from 'node:http';
+import type { FleetRoute } from './contracts.js';
+export interface FleetProxyOptions {
+    certificateExpires: string;
+    consumerStage: string;
+    fleetOrigin: URL;
+    foundationStage: string;
+    remoteOrigin: URL;
+    routes: FleetRoute[];
+    safeMethodFallback?: boolean;
+    timeoutMs?: number;
+}
+export interface FleetStatus {
+    certificateExpires: string;
+    consumerStage: string;
+    fleetOrigin: string;
+    foundationStage: string;
+    gatewayRegistration: 'registered' | 'standalone';
+    mode: 'explicit-port' | 'gateway';
+    routes: {
+        name: string;
+        routePrefix: string;
+        state: FleetRoute['state'];
+    }[];
+}
+export declare class FleetSessionProxy {
+    #private;
+    readonly options: FleetProxyOptions;
+    readonly server: Server;
+    constructor(options: FleetProxyOptions);
+    setMode(mode: FleetStatus['mode'], registration: FleetStatus['gatewayRegistration']): void;
+    status(): FleetStatus;
+    listen(port: number): Promise<void>;
+    close(): Promise<void>;
+    private handle;
+    private handleUpgrade;
+}

package/src/local-dev/proxy.js

@@ -0,0 +1,271 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FleetSessionProxy = void 0;
+const node_http_1 = require("node:http");
+const node_https_1 = require("node:https");
+const node_http_2 = require("node:http");
+const SAFE_METHODS = new Set(['GET', 'HEAD', 'OPTIONS']);
+const HOP_BY_HOP = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailer',
+    'transfer-encoding',
+    'upgrade',
+]);
+const UNTRUSTED_FORWARDING_HEADERS = new Set([
+    'forwarded',
+    'x-forwarded-for',
+    'x-forwarded-host',
+    'x-forwarded-port',
+    'x-forwarded-proto',
+]);
+function pathMatches(pathname, prefix) {
+    return (prefix === '/' || pathname === prefix || pathname.startsWith(`${prefix}/`));
+}
+function routeFor(routes, pathname) {
+    return [...routes]
+        .filter((route) => route.adapter && pathMatches(pathname, route.adapter.routePrefix))
+        .sort((left, right) => (right.adapter?.routePrefix.length ?? 0) -
+        (left.adapter?.routePrefix.length ?? 0))[0];
+}
+function requestHeaders(request, options, upstream) {
+    const headers = {};
+    for (const [name, value] of Object.entries(request.headers)) {
+        const normalizedName = name.toLowerCase();
+        if (!HOP_BY_HOP.has(normalizedName) &&
+            !UNTRUSTED_FORWARDING_HEADERS.has(normalizedName)) {
+            headers[name] = value;
+        }
+    }
+    headers.host =
+        upstream.type === 'local' ? options.fleetOrigin.host : upstream.url.host;
+    headers['x-forwarded-for'] = '127.0.0.1';
+    headers['x-forwarded-host'] = options.fleetOrigin.host;
+    headers['x-forwarded-port'] = options.fleetOrigin.port || '443';
+    headers['x-forwarded-proto'] = 'https';
+    return headers;
+}
+function responseHeaders(headers, upstream, options) {
+    const result = {};
+    for (const [name, value] of Object.entries(headers)) {
+        if (!HOP_BY_HOP.has(name.toLowerCase()))
+            result[name] = value;
+    }
+    const location = result.location;
+    if (typeof location === 'string') {
+        try {
+            const resolved = new URL(location, upstream.url);
+            const localFleetHost = upstream.type === 'local' &&
+                resolved.hostname === options.fleetOrigin.hostname &&
+                (resolved.port === '' || resolved.port === options.fleetOrigin.port);
+            if (resolved.origin === upstream.url.origin || localFleetHost) {
+                result.location = new URL(`${resolved.pathname}${resolved.search}${resolved.hash}`, options.fleetOrigin).toString();
+            }
+        }
+        catch {
+            // Preserve invalid/relative application locations rather than inventing one.
+        }
+    }
+    const cookies = result['set-cookie'];
+    if (Array.isArray(cookies)) {
+        result['set-cookie'] = cookies.map((cookie) => cookie.replace(/;\s*Domain=[^;]+/gi, ''));
+    }
+    result['x-ebk-upstream'] = upstream.type;
+    result['x-ebk-consumer-stage'] = options.consumerStage;
+    result['x-ebk-foundation-stage'] = options.foundationStage;
+    return result;
+}
+function selectUpstream(request, options) {
+    const requestUrl = new URL(request.url ?? '/', options.fleetOrigin);
+    const route = routeFor(options.routes, requestUrl.pathname);
+    if (!route || !route.selected) {
+        return { route, type: 'development', url: options.remoteOrigin };
+    }
+    if (route.state === 'ready' && route.upstream) {
+        return { route, type: 'local', url: route.upstream };
+    }
+    const method = request.method?.toUpperCase() ?? 'GET';
+    if (options.safeMethodFallback && SAFE_METHODS.has(method)) {
+        return { route, type: 'development', url: options.remoteOrigin };
+    }
+    return undefined;
+}
+function proxyPath(request, upstream) {
+    const input = new URL(request.url ?? '/', 'https://fleet.invalid');
+    const base = upstream.pathname.endsWith('/')
+        ? upstream.pathname.slice(0, -1)
+        : upstream.pathname;
+    return `${base}${input.pathname}${input.search}` || '/';
+}
+class FleetSessionProxy {
+    options;
+    server;
+    #mode = 'gateway';
+    #registration = 'standalone';
+    #sockets = new Set();
+    constructor(options) {
+        this.options = options;
+        this.server = (0, node_http_2.createServer)((request, response) => {
+            void this.handle(request, response);
+        });
+        this.server.on('connection', (socket) => {
+            this.#sockets.add(socket);
+            socket.once('close', () => this.#sockets.delete(socket));
+        });
+        this.server.on('upgrade', (request, socket, head) => {
+            this.handleUpgrade(request, socket, head);
+        });
+    }
+    setMode(mode, registration) {
+        this.#mode = mode;
+        this.#registration = registration;
+    }
+    status() {
+        return {
+            certificateExpires: this.options.certificateExpires,
+            consumerStage: this.options.consumerStage,
+            fleetOrigin: this.options.fleetOrigin.toString(),
+            foundationStage: this.options.foundationStage,
+            gatewayRegistration: this.#registration,
+            mode: this.#mode,
+            routes: this.options.routes.map((route) => ({
+                name: route.name,
+                routePrefix: route.adapter?.routePrefix ?? '',
+                state: route.state,
+            })),
+        };
+    }
+    async listen(port) {
+        await new Promise((resolve, reject) => {
+            this.server.once('error', reject);
+            this.server.listen(port, '127.0.0.1', () => {
+                this.server.off('error', reject);
+                resolve();
+            });
+        });
+    }
+    async close() {
+        for (const socket of this.#sockets)
+            socket.destroy();
+        if (!this.server.listening)
+            return;
+        await new Promise((resolve, reject) => this.server.close((error) => (error ? reject(error) : resolve())));
+    }
+    async handle(request, response) {
+        if (new URL(request.url ?? '/', this.options.fleetOrigin).pathname ===
+            '/_ebk/fleet') {
+            response.writeHead(200, {
+                'cache-control': 'no-store',
+                'content-type': 'application/json; charset=utf-8',
+            });
+            response.end(`${JSON.stringify(this.status(), null, 2)}\n`);
+            return;
+        }
+        const selected = selectUpstream(request, this.options);
+        if (!selected) {
+            response.writeHead(503, {
+                'content-type': 'application/json; charset=utf-8',
+                'retry-after': '2',
+                'x-ebk-consumer-stage': this.options.consumerStage,
+                'x-ebk-foundation-stage': this.options.foundationStage,
+                'x-ebk-upstream': 'local',
+            });
+            response.end(`${JSON.stringify({ error: 'selected local slice is unavailable', route: request.url })}\n`);
+            return;
+        }
+        const method = request.method?.toUpperCase() ?? 'GET';
+        const mayRetryWithoutBody = selected.type === 'local' &&
+            this.options.safeMethodFallback === true &&
+            SAFE_METHODS.has(method) &&
+            request.headers['transfer-encoding'] === undefined &&
+            Number(request.headers['content-length'] ?? '0') === 0;
+        let retried = false;
+        const dispatch = (upstream, replay) => {
+            const transport = upstream.url.protocol === 'https:' ? node_https_1.request : node_http_1.request;
+            const requestOptions = {
+                headers: requestHeaders(request, this.options, upstream),
+                hostname: upstream.url.hostname,
+                method: request.method,
+                path: proxyPath(request, upstream.url),
+                port: upstream.url.port || (upstream.url.protocol === 'https:' ? 443 : 80),
+                protocol: upstream.url.protocol,
+                timeout: this.options.timeoutMs ?? 30_000,
+            };
+            let upstreamResponded = false;
+            const upstreamRequest = transport(requestOptions, (upstreamResponse) => {
+                upstreamResponded = true;
+                response.writeHead(upstreamResponse.statusCode ?? 502, responseHeaders(upstreamResponse.headers, upstream, this.options));
+                upstreamResponse.pipe(response);
+            });
+            upstreamRequest.on('timeout', () => upstreamRequest.destroy(new Error('upstream connection timed out')));
+            upstreamRequest.on('error', () => {
+                if (upstreamResponded || response.headersSent) {
+                    response.destroy();
+                    return;
+                }
+                if (mayRetryWithoutBody && !retried && !response.headersSent) {
+                    retried = true;
+                    dispatch({ type: 'development', url: this.options.remoteOrigin }, true);
+                    return;
+                }
+                if (!response.headersSent) {
+                    response.writeHead(502, {
+                        'content-type': 'application/json; charset=utf-8',
+                        'x-ebk-consumer-stage': this.options.consumerStage,
+                        'x-ebk-foundation-stage': this.options.foundationStage,
+                        'x-ebk-upstream': upstream.type,
+                    });
+                }
+                response.end(`${JSON.stringify({ error: `${upstream.type} upstream unavailable` })}\n`);
+            });
+            if (replay)
+                upstreamRequest.end();
+            else
+                request.pipe(upstreamRequest);
+        };
+        dispatch(selected, false);
+    }
+    handleUpgrade(request, socket, head) {
+        const selected = selectUpstream(request, this.options);
+        if (!selected ||
+            (selected.type === 'local' && selected.route?.adapter?.websocket !== true)) {
+            socket.end('HTTP/1.1 503 Service Unavailable\r\nConnection: close\r\n\r\n');
+            return;
+        }
+        const transport = selected.url.protocol === 'https:' ? node_https_1.request : node_http_1.request;
+        const upstream = transport({
+            headers: {
+                ...requestHeaders(request, this.options, selected),
+                connection: 'Upgrade',
+                upgrade: request.headers.upgrade,
+            },
+            hostname: selected.url.hostname,
+            method: request.method,
+            path: proxyPath(request, selected.url),
+            port: selected.url.port || (selected.url.protocol === 'https:' ? 443 : 80),
+            protocol: selected.url.protocol,
+        });
+        upstream.on('upgrade', (response, upstreamSocket, upstreamHead) => {
+            socket.write(`HTTP/1.1 ${response.statusCode ?? 101} ${response.statusMessage ?? 'Switching Protocols'}\r\n` +
+                Object.entries(response.headers)
+                    .map(([name, value]) => `${name}: ${Array.isArray(value) ? value.join(', ') : (value ?? '')}\r\n`)
+                    .join('') +
+                '\r\n');
+            if (upstreamHead.length)
+                socket.write(upstreamHead);
+            if (head.length)
+                upstreamSocket.write(head);
+            upstreamSocket.pipe(socket).pipe(upstreamSocket);
+        });
+        upstream.on('response', (response) => {
+            socket.end(`HTTP/1.1 ${response.statusCode ?? 502} ${response.statusMessage ?? 'Bad Gateway'}\r\nConnection: close\r\n\r\n`);
+        });
+        upstream.on('error', () => socket.end('HTTP/1.1 502 Bad Gateway\r\nConnection: close\r\n\r\n'));
+        upstream.end();
+    }
+}
+exports.FleetSessionProxy = FleetSessionProxy;
+//# sourceMappingURL=proxy.js.map

package/src/local-dev/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/proxy.ts"],"names":[],"mappings":";;;AAAA,yCAAwE;AACxE,2CAAqD;AACrD,yCAKmB;AAInB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACzD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AACH,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;CACpB,CAAC,CAAC;AAuBH,SAAS,WAAW,CAAC,QAAgB,EAAE,MAAc;IACnD,OAAO,CACL,MAAM,KAAK,GAAG,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAA6B,EAAE,QAAgB;IAC/D,OAAO,CAAC,GAAG,MAAM,CAAC;SACf,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CACpE;SACA,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;QACxC,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAC1C,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,cAAc,CACrB,OAAwB,EACxB,OAA0B,EAC1B,QAAqD;IAErD,MAAM,OAAO,GAAkD,EAAE,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,IACE,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC;YAC/B,CAAC,4BAA4B,CAAC,GAAG,CAAC,cAAc,CAAC,EACjD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI;QACV,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;IAC3E,OAAO,CAAC,iBAAiB,CAAC,GAAG,WAAW,CAAC;IACzC,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;IACvD,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,KAAK,CAAC;IAChE,OAAO,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CACtB,OAAmC,EACnC,QAAqD,EACrD,OAA0B;IAE1B,MAAM,MAAM,GAAkD,EAAE,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAChE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,cAAc,GAClB,QAAQ,CAAC,IAAI,KAAK,OAAO;gBACzB,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,WAAW,CAAC,QAAQ;gBAClD,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;gBAC9D,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,CACvB,GAAG,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,EACxD,OAAO,CAAC,WAAW,CACpB,CAAC,QAAQ,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;IACzC,MAAM,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IACvD,MAAM,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,OAAwB,EACxB,OAA0B;IAE1B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;IACtD,IAAI,OAAO,CAAC,kBAAkB,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,OAAwB,EAAE,QAAa;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,uBAAuB,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC1C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,GAAG,IAAI,GAAG,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC;AAC1D,CAAC;AAED,MAAa,iBAAiB;IAMP;IALZ,MAAM,CAAS;IACxB,KAAK,GAAwB,SAAS,CAAC;IACvC,aAAa,GAAuC,YAAY,CAAC;IACjE,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7B,YAAqB,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAA,wBAAY,EAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC/C,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE;YACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAClD,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CACL,IAAyB,EACzB,YAAgD;QAEhD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;IACpC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,kBAAkB,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB;YACnD,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;YACzC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE;YAChD,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;YAC7C,mBAAmB,EAAE,IAAI,CAAC,aAAa;YACvC,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE;gBAC7C,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO;QACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAClE,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAAwB,EAAE,QAAwB;QACrE,IACE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,QAAQ;YAC9D,aAAa,EACb,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,eAAe,EAAE,UAAU;gBAC3B,cAAc,EAAE,iCAAiC;aAClD,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,cAAc,EAAE,iCAAiC;gBACjD,aAAa,EAAE,GAAG;gBAClB,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;gBAClD,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACtD,gBAAgB,EAAE,OAAO;aAC1B,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CACV,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAC5F,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,KAAK,CAAC;QACtD,MAAM,mBAAmB,GACvB,QAAQ,CAAC,IAAI,KAAK,OAAO;YACzB,IAAI,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI;YACxC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YACxB,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,KAAK,SAAS;YAClD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,CACf,QAAqD,EACrD,MAAe,EACf,EAAE;YACF,MAAM,SAAS,GACb,QAAQ,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAY,CAAC,CAAC,CAAC,mBAAW,CAAC;YAClE,MAAM,cAAc,GAAmB;gBACrC,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;gBACxD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC;gBACtC,IAAI,EACF,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;gBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,MAAM;aAC1C,CAAC;YACF,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,MAAM,eAAe,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC,gBAAgB,EAAE,EAAE;gBACrE,iBAAiB,GAAG,IAAI,CAAC;gBACzB,QAAQ,CAAC,SAAS,CAChB,gBAAgB,CAAC,UAAU,IAAI,GAAG,EAClC,eAAe,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAClE,CAAC;gBACF,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;YACH,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CACjC,eAAe,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CACpE,CAAC;YACF,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC/B,IAAI,iBAAiB,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC9C,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,IAAI,mBAAmB,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC7D,OAAO,GAAG,IAAI,CAAC;oBACf,QAAQ,CACN,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EACvD,IAAI,CACL,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;oBAC1B,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;wBACtB,cAAc,EAAE,iCAAiC;wBACjD,sBAAsB,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa;wBAClD,wBAAwB,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;wBACtD,gBAAgB,EAAE,QAAQ,CAAC,IAAI;qBAChC,CAAC,CAAC;gBACL,CAAC;gBACD,QAAQ,CAAC,GAAG,CACV,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,IAAI,uBAAuB,EAAE,CAAC,IAAI,CAC1E,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,eAAe,CAAC,GAAG,EAAE,CAAC;;gBAC7B,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC,CAAC;QACF,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAEO,aAAa,CACnB,OAAwB,EACxB,MAAc,EACd,IAAY;QAEZ,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IACE,CAAC,QAAQ;YACT,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,KAAK,IAAI,CAAC,EAC1E,CAAC;YACD,MAAM,CAAC,GAAG,CACR,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GACb,QAAQ,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAY,CAAC,CAAC,CAAC,mBAAW,CAAC;QAClE,MAAM,QAAQ,GAAG,SAAS,CAAC;YACzB,OAAO,EAAE;gBACP,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;gBAClD,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO;aACjC;YACD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC;YACtC,IAAI,EACF,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;SAChC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE;YAChE,MAAM,CAAC,KAAK,CACV,YAAY,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,aAAa,IAAI,qBAAqB,MAAM;gBAC7F,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;qBAC7B,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAC5E;qBACA,IAAI,CAAC,EAAE,CAAC;gBACX,MAAM,CACT,CAAC;YACF,IAAI,YAAY,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,MAAM;gBAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,CACR,YAAY,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,aAAa,IAAI,aAAa,+BAA+B,CACjH,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CACxB,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CACpE,CAAC;QACF,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;CACF;AAjND,8CAiNC"}

package/src/local-dev/tls.d.ts

@@ -0,0 +1,24 @@
+export interface LocalTlsPaths {
+    appData: string;
+    capability: string;
+    intermediateCertificate: string;
+    intermediateKey: string;
+    leafCertificate: string;
+    leafKey: string;
+    rootCertificate: string;
+    rootKey: string;
+    gatewayPid: string;
+    gatewaySocket: string;
+    gatewayState: string;
+}
+export declare function defaultLocalDevAppData(environment?: NodeJS.ProcessEnv): string;
+export declare function localTlsPaths(appData?: string): LocalTlsPaths;
+export declare function createLocalIpcPath(base: string, identity: string): string;
+export declare function assertPrivateKeyPermissions(path: string): void;
+export declare function createLocalTlsState(options: {
+    appData?: string;
+    capability: string;
+    force?: boolean;
+    hostSuffix?: string;
+}): LocalTlsPaths;
+export declare function removeLocalTlsState(appData?: string): void;