@foro-sh/foro 0.11.0 → 0.12.2

package/dist/_generated-manifest-cases.d.ts

@@ -483,5 +483,233 @@ export declare const rawManifestCases: readonly [{
         readonly ok: false;
         readonly reason: "invalid_shape";
     };
+}, {
+    readonly name: "python-egress-ip-entry";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.20.30.40:5432\"]\n";
+    };
+    readonly expect: {
+        readonly ok: true;
+    };
+}, {
+    readonly name: "python-egress-cidr-entry";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.20.0.0/16:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: true;
+    };
+}, {
+    readonly name: "python-egress-hostname-entry";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"sql.database.windows.net:1433\"]\n";
+    };
+    readonly expect: {
+        readonly ok: true;
+    };
+}, {
+    readonly name: "python-egress-multiple-entries";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"sql.database.windows.net:1433\", \"10.20.30.40:5432\", \"10.20.0.0/16:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: true;
+    };
+}, {
+    readonly name: "python-egress-empty-list-denies-everything";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = []\n";
+    };
+    readonly expect: {
+        readonly ok: true;
+    };
+}, {
+    readonly name: "python-egress-missing-port";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"example.com\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-port-zero";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"example.com:0\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-port-too-high";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"example.com:65536\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-blocked-mail-port";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"smtp.example.com:25\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-metadata-endpoint";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"169.254.169.254:80\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-whole-internet";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"0.0.0.0/0:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-wide-range-swallows-a-reserved-one";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"172.16.0.0/12:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-hostname-over-253-chars";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-string-instead-of-list";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = \"example.com:443\"\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-over-entry-cap";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"h0.example.com:443\", \"h1.example.com:443\", \"h2.example.com:443\", \"h3.example.com:443\", \"h4.example.com:443\", \"h5.example.com:443\", \"h6.example.com:443\", \"h7.example.com:443\", \"h8.example.com:443\", \"h9.example.com:443\", \"h10.example.com:443\", \"h11.example.com:443\", \"h12.example.com:443\", \"h13.example.com:443\", \"h14.example.com:443\", \"h15.example.com:443\", \"h16.example.com:443\", \"h17.example.com:443\", \"h18.example.com:443\", \"h19.example.com:443\", \"h20.example.com:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "node-egress-non-string-entry";
+    readonly files: {
+        readonly "package.json": "{\"name\": \"my-server\", \"main\": \"index.js\", \"foro\": {\"egress\": [443]}}";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-shell-metacharacter";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"evil.com:443; rm -rf /\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-embedded-whitespace";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"evil .com:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-embedded-newline";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"evil.com:443\\nother:80\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-ipv6-literal";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"::1:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-cidr-prefix-out-of-range";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.0.0.0/33:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-link-local-range";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"169.254.0.0/16:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-loopback";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"127.0.0.1:5432\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-platform-bridge-network";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"172.20.0.5:5432\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-submission-port";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"smtp.example.com:587\"]\n";
+    };
+    readonly expect: {
+        readonly ok: false;
+        readonly reason: "invalid_egress";
+    };
+}, {
+    readonly name: "python-egress-private-ranges-stay-allowlistable";
+    readonly files: {
+        readonly "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.20.30.40:5432\", \"192.168.1.0/24:443\"]\n";
+    };
+    readonly expect: {
+        readonly ok: true;
+    };
 }];
 //# sourceMappingURL=_generated-manifest-cases.d.ts.map

package/dist/_generated-manifest-cases.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_generated-manifest-cases.d.ts","sourceRoot":"","sources":["../src/_generated-manifest-cases.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4hBnB,CAAA"}
+{"version":3,"file":"_generated-manifest-cases.d.ts","sourceRoot":"","sources":["../src/_generated-manifest-cases.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB;aAEzB,IAAM,EAAE,gBAAgB;aACxB,KAAO;iBACL,gBAAgB,EAAE,mCAAmC;iBACrD,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,yBAAyB;aACjC,KAAO;iBACL,gBAAgB,EAAE,uCAAuC;iBACzD,SAAS,EAAE,EAAE;;aAEf,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,4BAA4B;aACpC,KAAO;iBACL,gBAAgB,EAAE,kFAAkF;;aAEtG,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,mBAAmB;aAC3B,KAAO;iBACL,gBAAgB,EAAE,oMAAoM;;aAExN,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,8BAA8B;aACtC,KAAO;iBACL,gBAAgB,EAAE,uEAAuE;iBACzF,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,kCAAkC;aAC1C,KAAO;iBACL,gBAAgB,EAAE,wEAAwE;iBAC1F,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,oEAAoE;aAC5E,KAAO;iBACL,gBAAgB,EAAE,sFAAsF;iBACxG,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,yBAAyB;;;aAIrC,IAAM,EAAE,6CAA6C;aACrD,KAAO;iBACL,gBAAgB,EAAE,2FAA2F;;aAE/G,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,8CAA8C;aACtD,KAAO;iBACL,gBAAgB,EAAE,mCAAmC;iBACrD,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,sBAAsB;aAC9B,KAAO;iBACL,gBAAgB,EAAE,mCAAmC;;aAEvD,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,6BAA6B;aACrC,KAAO;iBACL,gBAAgB,EAAE,iFAAiF;;aAErG,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,4BAA4B;aACpC,KAAO;iBACL,gBAAgB,EAAE,+EAA+E;;aAEnG,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,kCAAkC;aAC1C,KAAO;iBACL,gBAAgB,EAAE,wFAAwF;;aAE5G,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,gCAAgC;aACxC,KAAO;iBACL,gBAAgB,EAAE,+EAA+E;;aAEnG,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,uCAAuC;aAC/C,KAAO;iBACL,gBAAgB,EAAE,+EAA+E;;aAEnG,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,6BAA6B;aACrC,KAAO;iBACL,gBAAgB,EAAE,qGAAqG;;aAEzH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,kCAAkC;aAC1C,KAAO;iBACL,gBAAgB,EAAE,4GAA4G;;aAEhI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,yBAAyB;aACjC,KAAO;iBACL,gBAAgB,EAAE,4GAA4G;;aAEhI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,2BAA2B;aACnC,KAAO;iBACL,gBAAgB,EAAE,gHAAgH;;aAEpI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,gCAAgC;aACxC,KAAO;iBACL,gBAAgB,EAAE,oGAAoG;;aAExH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,0CAA0C;aAClD,KAAO;iBACL,gBAAgB,EAAE,yGAAyG;;aAE7H,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,yBAAyB;;;aAIrC,IAAM,EAAE,yDAAyD;aACjE,KAAO;iBACL,gBAAgB,EAAE,gEAAgE;iBAClF,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,yBAAyB;;;aAIrC,IAAM,EAAE,6CAA6C;aACrD,KAAO;iBACL,gBAAgB,EAAE,wGAAwG;;aAE5H,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,yBAAyB;;;aAIrC,IAAM,EAAE,2BAA2B;aACnC,KAAO;iBACL,gBAAgB,EAAE,kGAAkG;;aAEtH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,iBAAiB;;;aAI7B,IAAM,EAAE,kDAAkD;aAC1D,KAAO;iBACL,gBAAgB,EAAE,kGAAkG;;aAEtH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,iBAAiB;;;aAI7B,IAAM,EAAE,kDAAkD;aAC1D,KAAO;iBACL,gBAAgB,EAAE,mCAAmC;iBACrD,cAAc,EAAE,mDAAmD;iBACnE,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,iBAAiB;;;aAI7B,IAAM,EAAE,8CAA8C;aACtD,KAAO;iBACL,gBAAgB,EAAE,wEAAwE;iBAC1F,cAAc,EAAE,sFAAsF;iBACtG,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,iBAAiB;;;aAI7B,IAAM,EAAE,6CAA6C;aACrD,KAAO;iBACL,gBAAgB,EAAE,wEAAwE;iBAC1F,cAAc,EAAE,8BAA8B;iBAC9C,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,2CAA2C;aACnD,KAAO;iBACL,gBAAgB,EAAE,mCAAmC;iBACrD,cAAc,EAAE,sFAAsF;iBACtG,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,uCAAuC;aAC/C,KAAO;iBACL,WAAW,EAAE,0CAA0C;iBACvD,WAAW,EAAE,EAAE;;aAEjB,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,kBAAkB;;;aAI9B,IAAM,EAAE,oCAAoC;aAC5C,KAAO;iBACL,gBAAgB,EAAE,yGAAyG;;aAE7H,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,eAAe;;;aAI3B,IAAM,EAAE,oBAAoB;aAC5B,KAAO;iBACL,gBAAgB,EAAE,2GAA2G;;aAE/H,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,eAAe;;;aAI3B,IAAM,EAAE,2CAA2C;aACnD,KAAO;iBACL,gBAAgB,EAAE,gGAAgG;;aAEpH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,eAAe;;;aAI3B,IAAM,EAAE,cAAc;aACtB,KAAO;iBACL,gBAAgB,EAAE,yFAAyF;;aAE7G,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,cAAc;;;aAI1B,IAAM,EAAE,eAAe;aACvB,KAAO;iBACL,gBAAgB,EAAE,4FAA4F;;aAEhH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,cAAc;;;aAI1B,IAAM,EAAE,uBAAuB;aAC/B,KAAO;iBACL,gBAAgB,EAAE,2FAA2F;;aAE/G,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,cAAc;;;aAI1B,IAAM,EAAE,oBAAoB;aAC5B,KAAO;iBACL,gBAAgB,EAAE,2FAA2F;;aAE/G,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,cAAc;;;aAI1B,IAAM,EAAE,kBAAkB;aAC1B,KAAO;iBACL,gBAAgB,EAAE,8FAA8F;;aAElH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,cAAc;;;aAI1B,IAAM,EAAE,sCAAsC;aAC9C,KAAO;iBACL,gBAAgB,EAAE,6GAA6G;;aAEjI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,4BAA4B;;;aAIxC,IAAM,EAAE,mCAAmC;aAC3C,KAAO;iBACL,gBAAgB,EAAE,4GAA4G;;aAEhI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,4BAA4B;;;aAIxC,IAAM,EAAE,uBAAuB;aAC/B,KAAO;iBACL,gBAAgB,EAAE,kCAAkC;;aAEtD,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,eAAe;;;aAI3B,IAAM,EAAE,cAAc;aACtB,KAAO;iBACL,cAAc,EAAE,wDAAwD;;aAE1E,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,kBAAkB;aAC1B,KAAO;iBACL,cAAc,EAAE,8DAA8D;;aAEhF,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,cAAc;aACtB,KAAO;iBACL,cAAc,EAAE,sEAAsE;;aAExF,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,qBAAqB;aAC7B,KAAO;iBACL,cAAc,EAAE,2BAA2B;iBAC3C,UAAU,EAAE,EAAE;;aAEhB,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,oBAAoB;aAC5B,KAAO;iBACL,cAAc,EAAE,sFAAsF;;aAExG,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,6CAA6C;aACrD,KAAO;iBACL,cAAc,EAAE,4FAA4F;;aAE9G,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,gDAAgD;aACxD,KAAO;iBACL,cAAc,EAAE,4FAA4F;;aAE9G,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,iBAAiB;aACzB,KAAO;iBACL,cAAc,EAAE,0KAA0K;;aAE5L,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,oBAAoB;aAC5B,KAAO;iBACL,cAAc,EAAE,2BAA2B;;aAE7C,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,oBAAoB;;;aAIhC,IAAM,EAAE,+CAA+C;aACvD,KAAO;iBACL,cAAc,EAAE,qFAAqF;;aAEvG,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,yBAAyB;;;aAIrC,IAAM,EAAE,2CAA2C;aACnD,KAAO;iBACL,cAAc,EAAE,8FAA8F;;aAEhH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,yBAAyB;;;aAIrC,IAAM,EAAE,mCAAmC;aAC3C,KAAO;iBACL,cAAc,EAAE,+FAA+F;;aAEjH,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,4BAA4B;;;aAIxC,IAAM,EAAE,0BAA0B;aAClC,KAAO;iBACL,cAAc,EAAE,aAAa;;aAE/B,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,eAAe;;;aAI3B,IAAM,EAAE,wBAAwB;aAChC,KAAO;iBACL,gBAAgB,EAAE,+GAA+G;;aAEnI,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,0BAA0B;aAClC,KAAO;iBACL,gBAAgB,EAAE,+GAA+G;;aAEnI,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,8BAA8B;aACtC,KAAO;iBACL,gBAAgB,EAAE,4HAA4H;;aAEhJ,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,gCAAgC;aACxC,KAAO;iBACL,gBAAgB,EAAE,wKAAwK;;aAE5L,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,4CAA4C;aACpD,KAAO;iBACL,gBAAgB,EAAE,2FAA2F;;aAE/G,MAAQ;iBACN,EAAI;;;aAIN,IAAM,EAAE,4BAA4B;aACpC,KAAO;iBACL,gBAAgB,EAAE,0GAA0G;;aAE9H,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,yBAAyB;aACjC,KAAO;iBACL,gBAAgB,EAAE,4GAA4G;;aAEhI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,6BAA6B;aACrC,KAAO;iBACL,gBAAgB,EAAE,gHAAgH;;aAEpI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,iCAAiC;aACzC,KAAO;iBACL,gBAAgB,EAAE,kHAAkH;;aAEtI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,iCAAiC;aACzC,KAAO;iBACL,gBAAgB,EAAE,iHAAiH;;aAErI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,8BAA8B;aACtC,KAAO;iBACL,gBAAgB,EAAE,4GAA4G;;aAEhI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,kDAAkD;aAC1D,KAAO;iBACL,gBAAgB,EAAE,gHAAgH;;aAEpI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,uCAAuC;aAC/C,KAAO;iBACL,gBAAgB,EAAE,iWAAiW;;aAErX,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,sCAAsC;aAC9C,KAAO;iBACL,gBAAgB,EAAE,4GAA4G;;aAEhI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,8BAA8B;aACtC,KAAO;iBACL,gBAAgB,EAAE,4lBAA4lB;;aAEhnB,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,8BAA8B;aACtC,KAAO;iBACL,cAAc,EAAE,kFAAkF;;aAEpG,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,mCAAmC;aAC3C,KAAO;iBACL,gBAAgB,EAAE,qHAAqH;;aAEzI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,mCAAmC;aAC3C,KAAO;iBACL,gBAAgB,EAAE,4GAA4G;;aAEhI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,gCAAgC;aACxC,KAAO;iBACL,gBAAgB,EAAE,sHAAsH;;aAE1I,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,4BAA4B;aACpC,KAAO;iBACL,gBAAgB,EAAE,sGAAsG;;aAE1H,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,wCAAwC;aAChD,KAAO;iBACL,gBAAgB,EAAE,8GAA8G;;aAElI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,gCAAgC;aACxC,KAAO;iBACL,gBAAgB,EAAE,iHAAiH;;aAErI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,wBAAwB;aAChC,KAAO;iBACL,gBAAgB,EAAE,6GAA6G;;aAEjI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,uCAAuC;aAC/C,KAAO;iBACL,gBAAgB,EAAE,8GAA8G;;aAElI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,+BAA+B;aACvC,KAAO;iBACL,gBAAgB,EAAE,mHAAmH;;aAEvI,MAAQ;iBACN,EAAI;iBACJ,MAAQ,EAAE,gBAAgB;;;aAI5B,IAAM,EAAE,iDAAiD;aACzD,KAAO;iBACL,gBAAgB,EAAE,uIAAuI;;aAE3J,MAAQ;iBACN,EAAI;;EAGA,CAAA"}

package/dist/_generated-manifest-cases.js

@@ -539,5 +539,259 @@ export const rawManifestCases = [
             "ok": false,
             "reason": "invalid_shape"
         }
+    },
+    {
+        "name": "python-egress-ip-entry",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.20.30.40:5432\"]\n"
+        },
+        "expect": {
+            "ok": true
+        }
+    },
+    {
+        "name": "python-egress-cidr-entry",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.20.0.0/16:443\"]\n"
+        },
+        "expect": {
+            "ok": true
+        }
+    },
+    {
+        "name": "python-egress-hostname-entry",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"sql.database.windows.net:1433\"]\n"
+        },
+        "expect": {
+            "ok": true
+        }
+    },
+    {
+        "name": "python-egress-multiple-entries",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"sql.database.windows.net:1433\", \"10.20.30.40:5432\", \"10.20.0.0/16:443\"]\n"
+        },
+        "expect": {
+            "ok": true
+        }
+    },
+    {
+        "name": "python-egress-empty-list-denies-everything",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = []\n"
+        },
+        "expect": {
+            "ok": true
+        }
+    },
+    {
+        "name": "python-egress-missing-port",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"example.com\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-port-zero",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"example.com:0\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-port-too-high",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"example.com:65536\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-blocked-mail-port",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"smtp.example.com:25\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-metadata-endpoint",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"169.254.169.254:80\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-whole-internet",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"0.0.0.0/0:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-wide-range-swallows-a-reserved-one",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"172.16.0.0/12:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-hostname-over-253-chars",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa.aaaa:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-string-instead-of-list",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = \"example.com:443\"\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-over-entry-cap",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"h0.example.com:443\", \"h1.example.com:443\", \"h2.example.com:443\", \"h3.example.com:443\", \"h4.example.com:443\", \"h5.example.com:443\", \"h6.example.com:443\", \"h7.example.com:443\", \"h8.example.com:443\", \"h9.example.com:443\", \"h10.example.com:443\", \"h11.example.com:443\", \"h12.example.com:443\", \"h13.example.com:443\", \"h14.example.com:443\", \"h15.example.com:443\", \"h16.example.com:443\", \"h17.example.com:443\", \"h18.example.com:443\", \"h19.example.com:443\", \"h20.example.com:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "node-egress-non-string-entry",
+        "files": {
+            "package.json": "{\"name\": \"my-server\", \"main\": \"index.js\", \"foro\": {\"egress\": [443]}}"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-shell-metacharacter",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"evil.com:443; rm -rf /\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-embedded-whitespace",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"evil .com:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-embedded-newline",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"evil.com:443\\nother:80\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-ipv6-literal",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"::1:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-cidr-prefix-out-of-range",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.0.0.0/33:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-link-local-range",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"169.254.0.0/16:443\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-loopback",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"127.0.0.1:5432\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-platform-bridge-network",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"172.20.0.5:5432\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-submission-port",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"smtp.example.com:587\"]\n"
+        },
+        "expect": {
+            "ok": false,
+            "reason": "invalid_egress"
+        }
+    },
+    {
+        "name": "python-egress-private-ranges-stay-allowlistable",
+        "files": {
+            "pyproject.toml": "[project]\nname = \"my-server\"\n\n[tool.foro]\nentrypoint = \"server.py\"\negress = [\"10.20.30.40:5432\", \"192.168.1.0/24:443\"]\n"
+        },
+        "expect": {
+            "ok": true
+        }
     }
 ];

package/dist/manifest-cases.d.ts

@@ -15,7 +15,7 @@
 /** Mirrors `ManifestRejectionReason` in foro-sh/platform's `@foro/types`.
  *  Kept in sync deliberately: it is what makes a reason added on one side a
  *  compile error on the other. */
-export type ManifestRejectionReason = 'missing_manifest' | 'unsupported_language' | 'invalid_yaml' | 'invalid_shape' | 'invalid_name' | 'invalid_entrypoint' | 'invalid_build_path' | 'invalid_runtime' | 'invalid_runtime_version' | 'invalid_port' | 'invalid_dependency_manager' | 'unsupported_project' | 'unknown_field';
+export type ManifestRejectionReason = 'missing_manifest' | 'unsupported_language' | 'invalid_yaml' | 'invalid_shape' | 'invalid_name' | 'invalid_entrypoint' | 'invalid_build_path' | 'invalid_runtime' | 'invalid_runtime_version' | 'invalid_port' | 'invalid_dependency_manager' | 'unsupported_project' | 'unknown_field' | 'invalid_egress';
 export interface ManifestCase {
     /** Stable identifier, unique across the table - use it as the test name. */
     readonly name: string;

package/dist/manifest-cases.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-cases.d.ts","sourceRoot":"","sources":["../src/manifest-cases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;kCAEkC;AAClC,MAAM,MAAM,uBAAuB,GAC/B,kBAAkB,GAClB,sBAAsB,GACtB,cAAc,GACd,eAAe,GACf,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,yBAAyB,GACzB,cAAc,GACd,4BAA4B,GAC5B,qBAAqB,GACrB,eAAe,CAAA;AAEnB,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;oDAEgD;IAChD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,QAAQ,CAAC,MAAM,EACX;QAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GACrB;QAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,CAAA;CACrE;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,YAAY,EAAqB,CAAA"}
+{"version":3,"file":"manifest-cases.d.ts","sourceRoot":"","sources":["../src/manifest-cases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;kCAEkC;AAClC,MAAM,MAAM,uBAAuB,GAC/B,kBAAkB,GAClB,sBAAsB,GACtB,cAAc,GACd,eAAe,GACf,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,yBAAyB,GACzB,cAAc,GACd,4BAA4B,GAC5B,qBAAqB,GACrB,eAAe,GACf,gBAAgB,CAAA;AAEpB,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;oDAEgD;IAChD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,QAAQ,CAAC,MAAM,EACX;QAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GACrB;QAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;KAAE,CAAA;CACrE;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,YAAY,EAAqB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@foro-sh/foro",
-    "version": "0.11.0",
+    "version": "0.12.2",
     "description": "TypeScript SDK for Foro",
     "type": "module",
     "main": "dist/index.js",
@@ -48,7 +48,7 @@
         "node": ">=18"
     },
     "devDependencies": {
-        "@types/node": "^20.11.0",
-        "typescript": "^5.6.3"
+        "@types/node": "^26.2.0",
+        "typescript": "^7.0.2"
     }
 }