@intentic/machine 1.366.0 → 1.367.0

package/README.md

@@ -910,7 +910,8 @@ it reaches the pipe.
 | Command | Success output |
 |---|---|
 | `keyring setup [--no-hello]` | `{ "ok": true, "path", "askpass": { "installed", "path"? }, "autostart", "setUp": true, "alreadySetUp", "recoveryKey"?, "state"? }` (`recoveryKey` only when this run made the vault) |
-| `keyring status` | `{ "ok": true, "installed", "running", "setUp", "state"?, "askpass": { "installed", "path"? }, "support": { "canSetUp", "why"?, "hello", "platform" } }` |
+| `keyring status` | `{ "ok": true, "installed", "running", "setUp", "state"?, "serviceDown"?, "serviceInstalled"?, "askpass": { "installed", "path"? }, "support": { "canSetUp", "why"?, "hello", "platform" } }` (`serviceInstalled`: the protected service is there and its session helper did not answer, so set up or not is unknown) |
+| `keyring start` | `{ "ok": true, "autostart", "setUp", "state" }`: the session helper started where the service is installed, the service repaired if silent |
 | `keyring unlock [--minutes N]` / `keyring lock` | `{ "ok": true, "unlockedUntil" }` / `{ "ok": true }` |
 | `keyring list` | `{ "ok": true, "entries": [EntryInfo], "backends" }` |
 | `keyring add NAME [--stdin] [rules] [--backend B --ref R [--field F] [--attribute A]] [--replace]` | `{ "ok": true, "name" }` |
@@ -921,7 +922,8 @@ it reaches the pipe.
 | `keyring backend 1password\|bitwarden\|keepassxc [--cli] [--account] [--token-entry] [--password-entry] [--database] [--key-file]` | `{ "ok": true, "backend" }` |
 | `keyring askpass install\|uninstall\|status` | `{ "ok": true, "installed", "path"?, "variables", "file"?, "profile"? }` |
 | `keyring sync status` | `{ "ok": true, "sync": { "key", "peers", "revision" } }` |
-| `keyring upgrade` | `{ "ok": true, "upgraded", "from", "to" }` |
+| `keyring upgrade` | `{ "ok": true, "upgraded", "from", "to" }`. Asks the running keyring first; where it has nobody to ask (no session helper let in), the administrator's yes stands for its own |
+| `keyring reset` | `{ "ok": true, "setAside" }`: Passwords started over for a lost recovery key, after an administrator's yes. The service's vault files move into a `set-aside-<time>` folder beside them (never deleted; the old key still opens them) and `keyring setup` makes a new vault and key |
 | `keyring uninstall` | `{ "ok": true, "removed", "vault", "service" }` |
 
 The rule flags are `--kind password|text`, `--program P`, `--package P`, `--host H`, `--askpass M` (each repeatable;
@@ -933,6 +935,47 @@ user: through `[Environment]::SetEnvironmentVariable` on Windows, and on Linux a
 uninstall` removes the service (an administrator's yes) and puts the vault back in `~/.intentic/keyring`, where it
 stays; set up again, the same recovery key opens it.
 
+### The egress fence
+
+(2026-10-27) A sandbox's traffic to private networks (the LAN, the machine itself, VPN-reachable nets, link-local
+metadata) can be fenced, per sandbox and off by default. `ic` enforces it on the host, never inside the container,
+where the agent is root. This agent decides whether a change asked from the editor may be carried out
+([`device/egress/`](src/device/egress)).
+
+- **The op.** `set-egress` carries a sandbox's whole policy, behind "Manage sandboxes" like every verb that changes one.
+  The agent reads what ic holds (`ic sandbox egress <slug> --json`) and compares. A change that only tightens
+  (`egressOnlyTightens` in the contract) is carried out as it comes. Anything else (an exception added or widened, the
+  fence turned off) needs the owner's passkey over exactly that change. The editor's only way to ic runs through the
+  sandbox's own daemon, which is inside the fence, so the daemon's word cannot be what decides a loosening.
+- **The pin.** The first tightening that carries the owner's passkeys (the daemon fills them in) pins them on this
+  machine: trust on first use, written to the audit log. Pins live in `~/.intentic/machine/egress-pins.json` (0600), one
+  per sandbox, keyed by slug and the sandbox's id from its connect token. A sandbox removed and made again under the
+  same name starts unpinned. A tightening never moves a pin. A loosening signed by a pinned key may only NARROW it to the
+  passkeys the request carries (a passkey the owner deleted drops off); it never adds one. A passkey the owner adds
+  later is trusted here after `intentic-machine egress trust <slug> --reset` on this machine and one save of the fence
+  from the editor, which pins again. `intentic-machine egress trust <slug>` shows a pin. (2026-10-27: a loosening used
+  to move the pin to whatever key list it signed over, but that list is the daemon's word, so a daemon could slip in a
+  key of its own beside the change the owner meant to sign, and hold the pin from then on.)
+- **What a loosening must prove.** The signed text reads as an `EgressChangeDocument` for this machine's id, this
+  environment's key (the one the agent enrolls with), this slug, the revision ic holds now, and the policy asked for. It
+  expires within five minutes. Its `keys` digest matches the passkeys the daemon handed over. The WebAuthn assertion is
+  from a pinned credential, of type `webauthn.get`. Its challenge is the sha256 of the document text, and it ran on a
+  pinned origin, not cross-origin. Its rpIdHash is the pinned rpId, with user presence and user verification. The
+  signature verifies with the pinned key, and a key that counts must count up (the last counter is kept with the pin,
+  spent before ic runs). Every refusal says what to do: sign it, sign again, or change it on the machine with
+  `ic sandbox egress <slug>`. The verifier is the daemon's own, moved to `@intentic/base/webauthn` so both read the
+  same bytes.
+- **The follower.** While this environment's ic advertises `egress` (`ic features --json`, nothing else), the agent
+  keeps `ic sandbox egress --follow` running as a child. ic fences a container the moment docker starts it, so a
+  sandbox Docker Compose recreates is fenced within a second. A follower that exits is started again after 1 s,
+  doubling to a minute, and back to 1 s after a run that held a minute. The minute's `ic sandbox watch` is the
+  backstop, and ic puts the rules back inside it.
+- **What it does not cover.** A sandbox granted "Run commands" (`shell`) on this machine runs commands outside every
+  fence, as this agent. The daemon marks such a sandbox (`hostShell`) so the editor can say so. Until a sandbox's first
+  `set-egress` with passkeys, whoever drives its daemon can pin keys of their own. Any sandbox linked with "Manage
+  sandboxes" can send the first one for a slug on this machine. A pin that looks wrong is reset here and pinned again
+  from the editor.
+
 ### Uninstall
 
 `intentic-machine uninstall [--purge] [--delete-data]` ([`src/uninstall/`](src/uninstall/)). `ic uninstall` is the one
@@ -976,7 +1019,7 @@ person who runs it alone, and either way it never downloads anything.
 
 ## Key files
 
-- [src/commands.ts](src/commands.ts) — the CLI: `device`, `sync`, `keyring`, `sandbox`, `run`, `status`, `doctor`, `upgrade`, `updates`, `uninstall`.
+- [src/commands.ts](src/commands.ts) — the CLI: `device`, `sync`, `keyring`, `sandbox`, `egress`, `run`, `status`, `doctor`, `upgrade`, `updates`, `uninstall`.
 - [src/uninstall/purge.ts](src/uninstall/purge.ts) — `uninstall --purge`: the steps in `steps.ts`, the distros in `distros.ts`, the files in `sweep.ts`, every decision pure in `plan.ts`.
 - [src/resident/resident.ts](src/resident/resident.ts) — the resident process that holds links, pairings and WSL distros; `supervision.ts` beside it starts and stops it through whatever restarts this environment's agent.
 - [src/device/mcp.ts](src/device/mcp.ts) — every tool a sandbox can call on this device.
@@ -988,6 +1031,7 @@ person who runs it alone, and either way it never downloads anything.
 - [src/upkeep/manifest.ts](src/upkeep/manifest.ts) — what the device upkeep finds and puts right; `reconcile.ts` runs it.
 - [src/resident/watchdog.ts](src/resident/watchdog.ts) — the agent's own hang watchdog.
 - [src/release/release-verify.ts](src/release/release-verify.ts) — a downloaded release binary checked against the release's signed `SHA256SUMS`.
+- [src/device/egress/set-egress.ts](src/device/egress/set-egress.ts) — the `set-egress` op: a tightening as it comes, a loosening under the owner's passkey (`proof.ts`), checked against the pins in `pins.ts`; `follower.ts` keeps `ic sandbox egress --follow` running, `trust-command.ts` is `intentic-machine egress trust`.
 - [src/keyring/commands.ts](src/keyring/commands.ts) — `intentic-machine keyring …`; `service.ts` installs, starts, upgrades and removes intentic-keyring, `relay.ts` carries the sandbox's `keyring*` calls to its pipe.
 
 ## Commands

package/dist/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAsInE,eAAO,MAAM,QAAQ,kDA4BnB,CAAC"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAuInE,eAAO,MAAM,QAAQ,kDA8BnB,CAAC"}

package/dist/commands.js

@@ -4,6 +4,7 @@ import { beforeSignInCommand } from "./autostart/before-sign-in.js";
 import { buildCommand, machineUi } from "./cli-ui.js";
 import { runLogPath } from "./config.js";
 import { deviceCommands } from "./device/commands.js";
+import { egressRoutes } from "./device/egress/trust-command.js";
 import { sandboxRoutes } from "./device/sandbox-cli.js";
 import { environmentRoutes, updates } from "./environments/commands.js";
 import { keyringCommands } from "./keyring/commands.js";
@@ -110,6 +111,7 @@ export const commands = buildRouteMap({
             docs: { brief: "The password vault on this computer, which types and hands over secrets for your sandboxes at your word" },
         }),
         sandbox: sandboxRoutes,
+        egress: egressRoutes,
         environment: environmentRoutes,
         run,
         "before-sign-in": beforeSignInCommand,

package/dist/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAW,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAA0B,aAAa,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC1G,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAa/C,MAAM,GAAG,GAAG,YAAY,CAAW;IAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,uGAAuG,EAAE;IACxH,UAAU,EAAE;QACR,KAAK,EAAE;YACH,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,0DAA0D,EAAE;YAClG,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,2BAA2B,EAAE;YAE7D,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,wDAAwD,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;SACnI;KACJ;IACD,KAAK,CAAC,IAAI,CAAuB,KAAe;QAC5C,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YAGnB,MAAM,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YACrJ,OAAO;QACX,CAAC;QACD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;YAEjC,EAAE,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;YACvG,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,qCAAqC,GAAG,IAAI,CAAC,CAAC;YACpH,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO;QACX,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC1C,MAAM,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACX,OAAO,CAAC,4CAA4C,EAAE,yCAAyC,UAAU,GAAG,EAAE,mCAAmC,CAAC,CACrJ,CAAC;QACN,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,eAAe,IAAI,CAAC,CAAC;IACnG,CAAC;CACJ,CAAC,CAAC;AAGH,MAAM,OAAO,GAAG,YAAY,CAAC;IACzB,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAC7C,UAAU,EAAE,EAAE;IACd,IAAI;QAEA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe,IAAI,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACJ,CAAC,CAAC;AAQH,MAAM,OAAO,GAAG,YAAY,CAAe;IACvC,IAAI,EAAE,EAAE,KAAK,EAAE,kGAAkG,EAAE;IACnH,UAAU,EAAE;QACR,KAAK,EAAE;YACH,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,yIAAyI;aACnJ;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iGAAiG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;SACrK;KACJ;IACD,KAAK,CAAC,IAAI,CAAuB,KAAmB;QAChD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,EAAE,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC5C,MAAM,cAAc,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9G,CAAC;CACJ,CAAC,CAAC;AAGH,MAAM,YAAY,GAAG,CAAC,EAAM,EAAE,MAAyB,EAAQ,EAAE;IAC7D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3E,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,OAAO;IACX,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAE5B,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CACX,OAAO,CACH,yDAAyD,EACzD,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C,EAC1E,0BAA0B,CAC7B,CACJ,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,4BAA4B,EAAE,8DAA8D,EAAE,qDAAqD,CAAC,CAAC,CAAC;IAClL,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,aAAa,CAAC;IAClC,MAAM,EAAE;QACJ,MAAM,EAAE,aAAa,CAAC;YAClB,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,EAAE,KAAK,EAAE,kEAAkE,EAAE;SACtF,CAAC;QACF,IAAI,EAAE,aAAa,CAAC;YAChB,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,EAAE,KAAK,EAAE,6EAA6E,EAAE;SACjG,CAAC;QAGF,OAAO,EAAE,aAAa,CAAC;YACnB,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,EAAE,KAAK,EAAE,yGAAyG,EAAE;SAC7H,CAAC;QACF,OAAO,EAAE,aAAa;QACtB,WAAW,EAAE,iBAAiB;QAC9B,GAAG;QACH,gBAAgB,EAAE,mBAAmB;QACrC,MAAM;QACN,MAAM;QACN,OAAO;QACP,OAAO;QACP,OAAO;QACP,SAAS;KACZ;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,kEAAkE,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;CACxH,CAAC,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAW,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAA0B,aAAa,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAC1G,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACxF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAa/C,MAAM,GAAG,GAAG,YAAY,CAAW;IAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,uGAAuG,EAAE;IACxH,UAAU,EAAE;QACR,KAAK,EAAE;YACH,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,0DAA0D,EAAE;YAClG,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,2BAA2B,EAAE;YAE7D,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,wDAAwD,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;SACnI;KACJ;IACD,KAAK,CAAC,IAAI,CAAuB,KAAe;QAC5C,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YAGnB,MAAM,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,IAAI,CAAC,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YACrJ,OAAO;QACX,CAAC;QACD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;YAEjC,EAAE,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;YACvG,EAAE,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,qCAAqC,GAAG,IAAI,CAAC,CAAC;YACpH,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO;QACX,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC1C,MAAM,eAAe,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACX,OAAO,CAAC,4CAA4C,EAAE,yCAAyC,UAAU,GAAG,EAAE,mCAAmC,CAAC,CACrJ,CAAC;QACN,CAAC;QACD,EAAE,CAAC,IAAI,CAAC,uCAAuC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,eAAe,IAAI,CAAC,CAAC;IACnG,CAAC;CACJ,CAAC,CAAC;AAGH,MAAM,OAAO,GAAG,YAAY,CAAC;IACzB,IAAI,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAC7C,UAAU,EAAE,EAAE;IACd,IAAI;QAEA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,eAAe,IAAI,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;CACJ,CAAC,CAAC;AAQH,MAAM,OAAO,GAAG,YAAY,CAAe;IACvC,IAAI,EAAE,EAAE,KAAK,EAAE,kGAAkG,EAAE;IACnH,UAAU,EAAE;QACR,KAAK,EAAE;YACH,KAAK,EAAE;gBACH,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,yIAAyI;aACnJ;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iGAAiG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;SACrK;KACJ;IACD,KAAK,CAAC,IAAI,CAAuB,KAAmB;QAChD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,EAAE,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QAC5C,MAAM,cAAc,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9G,CAAC;CACJ,CAAC,CAAC;AAGH,MAAM,YAAY,GAAG,CAAC,EAAM,EAAE,MAAyB,EAAQ,EAAE;IAC7D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3E,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,OAAO;IACX,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAE5B,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CACX,OAAO,CACH,yDAAyD,EACzD,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,2CAA2C,EAC1E,0BAA0B,CAC7B,CACJ,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,4BAA4B,EAAE,8DAA8D,EAAE,qDAAqD,CAAC,CAAC,CAAC;IAClL,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,aAAa,CAAC;IAClC,MAAM,EAAE;QACJ,MAAM,EAAE,aAAa,CAAC;YAClB,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,EAAE,KAAK,EAAE,kEAAkE,EAAE;SACtF,CAAC;QACF,IAAI,EAAE,aAAa,CAAC;YAChB,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,EAAE,KAAK,EAAE,6EAA6E,EAAE;SACjG,CAAC;QAGF,OAAO,EAAE,aAAa,CAAC;YACnB,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,EAAE,KAAK,EAAE,yGAAyG,EAAE;SAC7H,CAAC;QACF,OAAO,EAAE,aAAa;QAEtB,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,iBAAiB;QAC9B,GAAG;QACH,gBAAgB,EAAE,mBAAmB;QACrC,MAAM;QACN,MAAM;QACN,OAAO;QACP,OAAO;QACP,OAAO;QACP,SAAS;KACZ;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,kEAAkE,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;CACxH,CAAC,CAAC"}

package/dist/device/egress/follower.d.ts

@@ -0,0 +1,20 @@
+import { type Log } from "@intentic/local-agent";
+export interface FollowerChild {
+    readonly exited: Promise<string>;
+    readonly stop: () => void;
+}
+export interface FollowerSeams {
+    readonly advertised: () => Promise<boolean>;
+    readonly spawn: (onLine: (line: string) => void) => FollowerChild;
+    readonly now: () => number;
+}
+export interface Backoff {
+    readonly wait: number;
+    readonly next: number;
+}
+export declare const nextBackoff: (previous: number, startedAt: number, endedAt: number) => Backoff;
+export interface EgressFollower {
+    readonly stop: () => void;
+}
+export declare const startEgressFollower: (log: Log, seams?: FollowerSeams) => EgressFollower;
+//# sourceMappingURL=follower.d.ts.map

package/dist/device/egress/follower.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"follower.d.ts","sourceRoot":"","sources":["../../../src/device/egress/follower.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,KAAK,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAqB1D,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,aAAa,CAAC;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,OAAO;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACzB;AACD,eAAO,MAAM,WAAW,aAAc,MAAM,aAAa,MAAM,WAAW,MAAM,KAAG,OAGlF,CAAC;AAEF,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC;CAC7B;AACD,eAAO,MAAM,mBAAmB,QAAS,GAAG,UAAS,aAAa,KAAyB,cAqD1F,CAAC"}

package/dist/device/egress/follower.js

@@ -0,0 +1,110 @@
+import { spawn } from "node:child_process";
+import { homeDir } from "@intentic/local-agent";
+import { DEVICE_FEATURE_EGRESS } from "@intentic/sandbox-contract/schemas/hosts";
+import { icEgressFollowArgs } from "@intentic/sandbox-contract/schemas/egress";
+import { deviceFeatures, icCandidates } from "../tools/ic-binary.js";
+import { lineSplitter } from "../tools/sandboxes.js";
+const FIRST_BACKOFF_MS = 1_000;
+const MAX_BACKOFF_MS = 60_000;
+const STEADY_MS = 60_000;
+const RECHECK_MS = 10 * 60_000;
+export const nextBackoff = (previous, startedAt, endedAt) => {
+    const wait = endedAt - startedAt >= STEADY_MS ? FIRST_BACKOFF_MS : previous;
+    return { wait, next: Math.min(wait * 2, MAX_BACKOFF_MS) };
+};
+export const startEgressFollower = (log, seams = realFollowerSeams()) => {
+    let stopped = false;
+    let child;
+    let wake;
+    let timer;
+    const pause = async (ms) => await new Promise((resolve) => {
+        wake = resolve;
+        timer = setTimeout(resolve, ms);
+        timer.unref();
+    });
+    const loop = async () => {
+        let backoff = FIRST_BACKOFF_MS;
+        let said = false;
+        for (;;) {
+            if (stopped) {
+                return;
+            }
+            if (!(await seams.advertised().catch(() => false))) {
+                await pause(RECHECK_MS);
+                continue;
+            }
+            if (!said) {
+                log("egress follow: fencing sandboxes as docker starts them (ic sandbox egress --follow)");
+                said = true;
+            }
+            const startedAt = seams.now();
+            child = seams.spawn((line) => log(`egress follow: ${line}`));
+            const ended = await child.exited;
+            child = undefined;
+            if (stopped) {
+                return;
+            }
+            const { wait, next } = nextBackoff(backoff, startedAt, seams.now());
+            backoff = next;
+            log(`egress follow: ${ended}; starting it again in ${Math.round(wait / 1_000)}s (the minute's ic sandbox watch fences sandboxes meanwhile)`);
+            await pause(wait);
+        }
+    };
+    void loop();
+    return {
+        stop: () => {
+            stopped = true;
+            clearTimeout(timer);
+            wake?.();
+            child?.stop();
+        },
+    };
+};
+const spawnFollower = (onLine) => {
+    const candidates = icCandidates(process.platform, homeDir());
+    let current;
+    let stopping = false;
+    const attempt = (index) => new Promise((resolve) => {
+        const binary = candidates[index];
+        if (binary === undefined) {
+            resolve("no ic was found where this agent installs it");
+            return;
+        }
+        const out = lineSplitter(onLine);
+        const err = lineSplitter(onLine);
+        const proc = spawn(binary, icEgressFollowArgs(), { windowsHide: true, stdio: ["pipe", "pipe", "pipe"] });
+        current = proc;
+        proc.stdin.on("error", () => undefined);
+        proc.stdout.setEncoding("utf8").on("data", out.push);
+        proc.stderr.setEncoding("utf8").on("data", err.push);
+        let missing = false;
+        proc.on("error", (error) => {
+            missing = error.code === "ENOENT" && !stopping;
+            if (!missing) {
+                resolve(`it could not run (${error.message})`);
+            }
+        });
+        proc.on("close", (code, signal) => {
+            out.end();
+            err.end();
+            if (missing) {
+                void attempt(index + 1).then(resolve);
+                return;
+            }
+            resolve(signal === null ? `it exited with code ${code ?? 1}` : `it was ended by ${signal}`);
+        });
+    });
+    return {
+        exited: attempt(0),
+        stop: () => {
+            stopping = true;
+            current?.kill();
+        },
+    };
+};
+const realFollowerSeams = () => ({
+    advertised: async () => (await deviceFeatures()).includes(DEVICE_FEATURE_EGRESS),
+    spawn: spawnFollower,
+    now: Date.now,
+});
+//# sourceMappingURL=follower.js.map

package/dist/device/egress/follower.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"follower.js","sourceRoot":"","sources":["../../../src/device/egress/follower.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAY,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AASrD,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,MAAM,UAAU,GAAG,EAAE,GAAG,MAAM,CAAC;AAmB/B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAE,OAAe,EAAW,EAAE;IACzF,MAAM,IAAI,GAAG,OAAO,GAAG,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;AAC9D,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAQ,EAAE,KAAK,GAAkB,iBAAiB,EAAE,EAAkB,EAAE;IACxG,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAgC,CAAC;IACrC,IAAI,IAA8B,CAAC;IACnC,IAAI,KAAiC,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,EAAE,EAAU,EAAiB,EAAE,CAC9C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAChC,IAAI,GAAG,OAAO,CAAC;QACf,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAChC,KAAK,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IACP,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACnC,IAAI,OAAO,GAAG,gBAAgB,CAAC;QAC/B,IAAI,IAAI,GAAG,KAAK,CAAC;QAEjB,SAAS,CAAC;YACN,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO;YACX,CAAC;YAED,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAEjD,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;gBACxB,SAAS;YACb,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACR,GAAG,CAAC,qFAAqF,CAAC,CAAC;gBAC3F,IAAI,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YAC9B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,CAAC;YAE7D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YACjC,KAAK,GAAG,SAAS,CAAC;YAClB,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO;YACX,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,CAAC,kBAAkB,KAAK,0BAA0B,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAE7I,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACL,CAAC,CAAC;IACF,KAAK,IAAI,EAAE,CAAC;IACZ,OAAO;QACH,IAAI,EAAE,GAAG,EAAE;YACP,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,EAAE,EAAE,CAAC;YACT,KAAK,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAKF,MAAM,aAAa,GAAG,CAAC,MAA8B,EAAiB,EAAE;IACpE,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7D,IAAI,OAA6C,CAAC;IAClD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,CAAC,KAAa,EAAmB,EAAE,CAC/C,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,8CAA8C,CAAC,CAAC;YACxD,OAAO;QACX,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YAC9C,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,CAAC,qBAAqB,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;YACnD,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC9B,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,IAAI,OAAO,EAAE,CAAC;gBACV,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtC,OAAO;YACX,CAAC;YACD,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACP,OAAO;QACH,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,GAAG,EAAE;YACP,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,CAAC;QACpB,CAAC;KACJ,CAAC;AACN,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,GAAkB,EAAE,CAAC,CAAC;IAC5C,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChF,KAAK,EAAE,aAAa;IACpB,GAAG,EAAE,IAAI,CAAC,GAAG;CAChB,CAAC,CAAC"}

package/dist/device/egress/pins.d.ts

@@ -0,0 +1,37 @@
+import { type EgressOwnerKeys } from "@intentic/sandbox-contract/schemas/egress";
+import { z } from "zod";
+export declare const egressPinsPath: string;
+declare const EgressPinSchema: z.ZodObject<{
+    slug: z.ZodString;
+    sandboxId: z.ZodNullable<z.ZodString>;
+    owner: z.ZodObject<{
+        rpId: z.ZodString;
+        origins: z.ZodArray<z.ZodString>;
+        keys: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>, z.ZodLiteral<-8>]>;
+            jwk: z.ZodRecord<z.ZodString, z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    counters: z.ZodRecord<z.ZodString, z.ZodInt>;
+    pinnedAt: z.ZodNumber;
+    pinnedBy: z.ZodString;
+    replacedAt: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type EgressPin = z.infer<typeof EgressPinSchema>;
+export interface PinnedSandbox {
+    readonly slug: string;
+    readonly sandboxId: string | null;
+}
+export interface EgressPinStore {
+    readonly read: (sandbox: PinnedSandbox) => Promise<EgressPin | undefined>;
+    readonly list: (slug?: string) => Promise<readonly EgressPin[]>;
+    readonly write: (pin: EgressPin) => Promise<void>;
+    readonly reset: (slug: string) => Promise<number>;
+}
+export declare const sameOwnerKeys: (a: EgressOwnerKeys, b: EgressOwnerKeys) => boolean;
+export declare const narrowsOwnerKeys: (next: EgressOwnerKeys, pinned: EgressOwnerKeys) => boolean;
+export declare const egressPinStore: (path?: string, dir?: string) => EgressPinStore;
+export {};
+//# sourceMappingURL=pins.d.ts.map

package/dist/device/egress/pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.d.ts","sourceRoot":"","sources":["../../../src/device/egress/pins.ts"],"names":[],"mappings":"AAKA,OAAO,EAAgC,KAAK,eAAe,EAAyB,MAAM,2CAA2C,CAAC;AACtI,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,cAAc,QAAoC,CAAC;AAEhE,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;iBAWnB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAE3B,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAE1E,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC;IAEhE,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElD,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACrD;AAGD,eAAO,MAAM,aAAa,MAAO,eAAe,KAAK,eAAe,KAAG,OAA8E,CAAC;AAMtJ,eAAO,MAAM,gBAAgB,SAAU,eAAe,UAAU,eAAe,KAAG,OAIjF,CAAC;AAsBF,eAAO,MAAM,cAAc,UAAU,MAAM,QAAwB,MAAM,KAAa,cAkBrF,CAAC"}

package/dist/device/egress/pins.js

@@ -0,0 +1,58 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { queueOnFile } from "@intentic/base/fs";
+import { parseJsonWith } from "@intentic/base/json";
+import { writeSecretFile } from "@intentic/local-agent";
+import { canonicalEgressOwnerKeysJson, EgressOwnerKeysSchema } from "@intentic/sandbox-contract/schemas/egress";
+import { z } from "zod";
+import { baseDir } from "../../config.js";
+export const egressPinsPath = join(baseDir, "egress-pins.json");
+const EgressPinSchema = z.object({
+    slug: z.string().min(1),
+    sandboxId: z.string().nullable(),
+    owner: EgressOwnerKeysSchema,
+    counters: z.record(z.string(), z.int().nonnegative()),
+    pinnedAt: z.number(),
+    pinnedBy: z.string(),
+    replacedAt: z.number().optional(),
+});
+const EgressPinsFileSchema = z.object({ v: z.literal(1), pins: z.array(EgressPinSchema) });
+export const sameOwnerKeys = (a, b) => canonicalEgressOwnerKeysJson(a) === canonicalEgressOwnerKeysJson(b);
+export const narrowsOwnerKeys = (next, pinned) => {
+    const keyText = (key) => canonicalEgressOwnerKeysJson({ rpId: "", origins: [""], keys: [{ ...key, name: undefined }] });
+    const held = new Set(pinned.keys.map(keyText));
+    return next.rpId === pinned.rpId && next.origins.every((origin) => pinned.origins.includes(origin)) && next.keys.every((key) => held.has(keyText(key)));
+};
+const readFileOf = async (path) => {
+    const raw = await readFile(path, "utf8").catch((error) => {
+        if (error.code === "ENOENT") {
+            return undefined;
+        }
+        throw error;
+    });
+    if (raw === undefined) {
+        return { v: 1, pins: [] };
+    }
+    const parsed = parseJsonWith(raw, EgressPinsFileSchema);
+    if (parsed === undefined) {
+        throw new Error(`${path} does not read as this agent's passkey pins. Move it aside and pin again, or restore it from a backup.`);
+    }
+    return parsed;
+};
+export const egressPinStore = (path = egressPinsPath, dir = baseDir) => {
+    const update = async (change) => await queueOnFile(path, async () => {
+        const { next, answer } = change(await readFileOf(path));
+        await writeSecretFile(path, dir, `${JSON.stringify(next, undefined, 2)}\n`);
+        return answer;
+    });
+    return {
+        read: async ({ slug, sandboxId }) => (await readFileOf(path)).pins.find((pin) => pin.slug === slug && pin.sandboxId === sandboxId),
+        list: async (slug) => (await readFileOf(path)).pins.filter((pin) => slug === undefined || pin.slug === slug),
+        write: async (pin) => await update((file) => ({ next: { v: 1, pins: [...file.pins.filter((held) => held.slug !== pin.slug), pin] }, answer: undefined })),
+        reset: async (slug) => await update((file) => ({
+            next: { v: 1, pins: file.pins.filter((held) => held.slug !== slug) },
+            answer: file.pins.filter((held) => held.slug === slug).length,
+        })),
+    };
+};
+//# sourceMappingURL=pins.js.map

package/dist/device/egress/pins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pins.js","sourceRoot":"","sources":["../../../src/device/egress/pins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAwB,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AACtI,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAU1C,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAEhE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,qBAAqB;IAE5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAEpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;AAqB3F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAkB,EAAE,CAAkB,EAAW,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC,KAAK,4BAA4B,CAAC,CAAC,CAAC,CAAC;AAMtJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAqB,EAAE,MAAuB,EAAW,EAAE;IACxF,MAAM,OAAO,GAAG,CAAC,GAAoC,EAAU,EAAE,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACjK,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5J,CAAC,CAAC;AAIF,MAAM,UAAU,GAAG,KAAK,EAAE,IAAY,EAA2B,EAAE;IAC/D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wGAAwG,CAAC,CAAC;IACrI,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAI,GAAW,cAAc,EAAE,GAAG,GAAW,OAAO,EAAkB,EAAE;IACnG,MAAM,MAAM,GAAG,KAAK,EAAK,MAAuF,EAAc,EAAE,CAC5H,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC,CAAC;IACP,OAAO;QACH,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC;QAClI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC;QAC5G,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACjB,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvI,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAClB,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpB,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE;YACpE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM;SAChE,CAAC,CAAC;KACV,CAAC;AACN,CAAC,CAAC"}

package/dist/device/egress/proof.d.ts

@@ -0,0 +1,25 @@
+import { type EgressOwnerKeys, type EgressPolicy, type EgressProof } from "@intentic/sandbox-contract/schemas/egress";
+import type { EgressPin } from "./pins.js";
+export declare class EgressRefusal extends Error {
+}
+export declare const egressChallengeOf: (documentText: string) => string;
+export declare const ownerKeysDigest: (owner: EgressOwnerKeys) => string;
+export declare const looseningText: (slug: string, from: EgressPolicy, to: EgressPolicy) => string;
+export interface ProofCheck {
+    readonly proof: EgressProof;
+    readonly slug: string;
+    readonly asked: EgressPolicy;
+    readonly revision: string;
+    readonly machineId: string;
+    readonly environment: string;
+    readonly ownerKeys: EgressOwnerKeys | undefined;
+    readonly pin: EgressPin;
+    readonly now: number;
+}
+export interface VerifiedProof {
+    readonly keyId: string;
+    readonly counter: number;
+    readonly ownerKeysSigned: boolean;
+}
+export declare const verifyEgressProof: (check: ProofCheck) => VerifiedProof;
+//# sourceMappingURL=proof.d.ts.map

package/dist/device/egress/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../../src/device/egress/proof.ts"],"names":[],"mappings":"AAGA,OAAO,EAQH,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,WAAW,EACnB,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAM3C,qBAAa,aAAc,SAAQ,KAAK;CAAG;AAM3C,eAAO,MAAM,iBAAiB,iBAAkB,MAAM,KAAG,MAAqE,CAAC;AAG/H,eAAO,MAAM,eAAe,UAAW,eAAe,KAAG,MAAwD,CAAC;AAWlH,eAAO,MAAM,aAAa,SAAU,MAAM,QAAQ,YAAY,MAAM,YAAY,KAAG,MAUlF,CAAC;AAEF,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAE1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACrC;AAyCD,eAAO,MAAM,iBAAiB,UAAW,UAAU,KAAG,aA0BrD,CAAC"}

package/dist/device/egress/proof.js

@@ -0,0 +1,86 @@
+import { createHash } from "node:crypto";
+import { parseJsonWith } from "@intentic/base/json";
+import { base64url, verifyAuthentication, WebAuthnError } from "@intentic/base/webauthn";
+import { canonicalEgressOwnerKeysJson, canonicalEgressPolicy, canonicalEgressPolicyJson, EGRESS_HOST, EGRESS_PROOF_MAX_AGE_MS, EgressChangeDocumentSchema, } from "@intentic/sandbox-contract/schemas/egress";
+export class EgressRefusal extends Error {
+}
+const sha256 = (bytes) => createHash("sha256").update(bytes).digest();
+const sha256Hex = (text) => sha256(Buffer.from(text, "utf8")).toString("hex");
+export const egressChallengeOf = (documentText) => base64url.encode(sha256(Buffer.from(documentText, "utf8")));
+export const ownerKeysDigest = (owner) => sha256Hex(canonicalEgressOwnerKeysJson(owner));
+const reachText = (entry) => {
+    const where = entry.to === EGRESS_HOST ? "the machine itself" : entry.to;
+    const ports = entry.ports === undefined ? "" : ` port${entry.ports.length === 1 ? "" : "s"} ${entry.ports.join(", ")}`;
+    const protocol = entry.protocol === undefined ? "" : ports === "" ? ` (${entry.protocol} only)` : `/${entry.protocol}`;
+    return `${where}${ports}${protocol}`;
+};
+export const looseningText = (slug, from, to) => {
+    if (to.profile === "open") {
+        return `this change turns the egress fence of "${slug}" off, so it reaches your network and this machine again`;
+    }
+    const reach = (entry) => JSON.stringify([entry.to, entry.ports ?? null, entry.protocol ?? null]);
+    const before = new Set(canonicalEgressPolicy(from).allow.map(reach));
+    const opened = canonicalEgressPolicy(to).allow.filter((entry) => !before.has(reach(entry)));
+    return opened.length === 0
+        ? `this change loosens the egress fence of "${slug}"`
+        : `this change opens ${opened.map(reachText).join(", ")} to "${slug}"`;
+};
+const minutes = (ms) => `${Math.round(ms / 60_000)} minutes`;
+const checkDocument = (check) => {
+    const document = parseJsonWith(check.proof.document, EgressChangeDocumentSchema);
+    if (document === undefined) {
+        throw new EgressRefusal("What your passkey signed is not an intentic egress change this agent can read (v1, intentic-egress-change). Sign the change again.");
+    }
+    if (document.machineId !== check.machineId) {
+        throw new EgressRefusal(`The change you signed is for another machine (${document.machineId}), not this one (${check.machineId}). Sign it again for this machine.`);
+    }
+    if (document.environment !== check.environment) {
+        throw new EgressRefusal(`The change you signed is for another side of this computer (${document.environment}); this agent is ${check.environment}. Sign it again from the sandbox's own row.`);
+    }
+    if (document.slug !== check.slug) {
+        throw new EgressRefusal(`The change you signed is for sandbox "${document.slug}", not "${check.slug}". Sign the change for "${check.slug}".`);
+    }
+    if (document.basedOn !== check.revision) {
+        throw new EgressRefusal(`The egress policy of "${check.slug}" changed since you signed. Look at it again and sign again.`);
+    }
+    if (canonicalEgressPolicyJson(document.policy) !== canonicalEgressPolicyJson(check.asked)) {
+        throw new EgressRefusal(`The policy you signed is not the one this request asks for on "${check.slug}". Sign the change again.`);
+    }
+    if (document.expiresAt <= check.now) {
+        throw new EgressRefusal(`Your signature over this change expired (a signed change holds for ${minutes(EGRESS_PROOF_MAX_AGE_MS)}). Sign again.`);
+    }
+    if (document.expiresAt > check.now + EGRESS_PROOF_MAX_AGE_MS) {
+        throw new EgressRefusal(`The signed change says it holds until ${new Date(document.expiresAt).toISOString()}, more than ${minutes(EGRESS_PROOF_MAX_AGE_MS)} ahead of this machine's clock. Check the clocks of this machine and the device you signed on, then sign again.`);
+    }
+    if (check.ownerKeys !== undefined && document.keys !== ownerKeysDigest(check.ownerKeys)) {
+        throw new EgressRefusal("The passkeys this request carries are not the ones you signed over. Reload the page and sign again.");
+    }
+    return document.keys;
+};
+export const verifyEgressProof = (check) => {
+    const signedKeys = checkDocument(check);
+    const { assertion } = check.proof;
+    const key = check.pin.owner.keys.find((pinned) => pinned.id === assertion.id);
+    if (key === undefined || assertion.rawId !== assertion.id) {
+        const names = check.pin.owner.keys.map((pinned) => pinned.name ?? pinned.id).join(", ");
+        throw new EgressRefusal(`The passkey you signed with is not one this machine pinned for "${check.slug}"${names === "" ? "" : ` (it trusts ${names})`}. Sign with one of those, or change it on the machine itself with \`ic sandbox egress ${check.slug}\`.`);
+    }
+    const counter = check.pin.counters[key.id] ?? 0;
+    try {
+        const verified = verifyAuthentication(assertion, {
+            challenge: egressChallengeOf(check.proof.document),
+            origin: check.pin.owner.origins,
+            rpId: check.pin.owner.rpId,
+            publicKey: { alg: key.alg, jwk: key.jwk },
+            counter,
+        });
+        return { keyId: key.id, counter: verified.counter, ownerKeysSigned: check.ownerKeys !== undefined && signedKeys === ownerKeysDigest(check.ownerKeys) };
+    }
+    catch (error) {
+        if (error instanceof WebAuthnError) {
+            throw new EgressRefusal(`Your passkey's signature over this change did not check out on this machine: ${error.message}. Sign again.`);
+        }
+        throw error;
+    }
+};
+//# sourceMappingURL=proof.js.map

package/dist/device/egress/proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.js","sourceRoot":"","sources":["../../../src/device/egress/proof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzF,OAAO,EACH,4BAA4B,EAC5B,qBAAqB,EACrB,yBAAyB,EACzB,WAAW,EACX,uBAAuB,EAEvB,0BAA0B,GAI7B,MAAM,2CAA2C,CAAC;AAOnD,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C,MAAM,MAAM,GAAG,CAAC,KAA0B,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AACnG,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAG9F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,YAAoB,EAAU,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAG/H,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAsB,EAAU,EAAE,CAAC,SAAS,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;AAGlH,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAU,EAAE;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvH,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvH,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC;AACzC,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,IAAkB,EAAE,EAAgB,EAAU,EAAE;IACxF,IAAI,EAAE,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,0CAA0C,IAAI,0DAA0D,CAAC;IACpH,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,KAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC;IACtH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC;QACtB,CAAC,CAAC,4CAA4C,IAAI,GAAG;QACrD,CAAC,CAAC,qBAAqB,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;AAC/E,CAAC,CAAC;AAwBF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC;AAG7E,MAAM,aAAa,GAAG,CAAC,KAAiB,EAAU,EAAE;IAChD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACjF,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,aAAa,CAAC,oIAAoI,CAAC,CAAC;IAClK,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,aAAa,CAAC,iDAAiD,QAAQ,CAAC,SAAS,oBAAoB,KAAK,CAAC,SAAS,oCAAoC,CAAC,CAAC;IACxK,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,aAAa,CACnB,+DAA+D,QAAQ,CAAC,WAAW,oBAAoB,KAAK,CAAC,WAAW,6CAA6C,CACxK,CAAC;IACN,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,yCAAyC,QAAQ,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,2BAA2B,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAClJ,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,yBAAyB,KAAK,CAAC,IAAI,8DAA8D,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,aAAa,CAAC,kEAAkE,KAAK,CAAC,IAAI,2BAA2B,CAAC,CAAC;IACrI,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,aAAa,CAAC,sEAAsE,OAAO,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IACpJ,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,uBAAuB,EAAE,CAAC;QAC3D,MAAM,IAAI,aAAa,CACnB,yCAAyC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,eAAe,OAAO,CAAC,uBAAuB,CAAC,iHAAiH,CACtP,CAAC;IACN,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,aAAa,CAAC,qGAAqG,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACzB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAiB,EAAiB,EAAE;IAClE,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,IAAI,aAAa,CACnB,mEAAmE,KAAK,CAAC,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,GAAG,yFAAyF,KAAK,CAAC,IAAI,KAAK,CACvO,CAAC;IACN,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE;YAC7C,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;YAClD,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;YAC/B,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI;YAC1B,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;YACzC,OAAO;SACV,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,KAAK,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IAC3J,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,aAAa,CAAC,gFAAgF,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;QAC1I,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC,CAAC"}

package/dist/device/egress/set-egress.d.ts

@@ -0,0 +1,30 @@
+import type { DeviceScopes } from "@intentic/sandbox-contract/schemas/capabilities";
+import { type EgressOwnerKeys, type EgressPolicy, type EgressProof, type EgressStatus } from "@intentic/sandbox-contract/schemas/egress";
+import { type EgressPinStore, type PinnedSandbox } from "./pins.js";
+export interface SetEgressAsk {
+    readonly slug: string;
+    readonly policy: EgressPolicy;
+    readonly proof: EgressProof | undefined;
+    readonly ownerKeys: EgressOwnerKeys | undefined;
+    readonly via: string;
+}
+export interface SetEgressSeams {
+    readonly sandbox: (slug: string) => Promise<PinnedSandbox>;
+    readonly status: (slug: string) => Promise<EgressStatus>;
+    readonly apply: (slug: string, policy: EgressPolicy, onLine: (line: string) => void) => Promise<void>;
+    readonly identity: () => Promise<{
+        readonly machineId: string;
+        readonly environment: string;
+    }>;
+    readonly pins: EgressPinStore;
+    readonly audit: (entry: {
+        tool: string;
+        ok: boolean;
+        detail: string;
+    }) => void;
+    readonly now: () => number;
+}
+export declare const egressStatusFrom: (stdout: string) => EgressStatus | undefined;
+export declare const setEgressWith: (ask: SetEgressAsk, seams: SetEgressSeams, onLine: (line: string) => void) => Promise<string>;
+export declare const setEgress: (ask: SetEgressAsk, scopes: DeviceScopes, onLine: (line: string) => void) => Promise<string>;
+//# sourceMappingURL=set-egress.d.ts.map

package/dist/device/egress/set-egress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-egress.d.ts","sourceRoot":"","sources":["../../../src/device/egress/set-egress.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iDAAiD,CAAC;AACpF,OAAO,EAGH,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,YAAY,EAEpB,MAAM,2CAA2C,CAAC;AAQnD,OAAO,EAAkB,KAAK,cAAc,EAAoC,KAAK,aAAa,EAAiB,MAAM,WAAW,CAAC;AAQrI,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC;IAEhD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACxB;AAGD,MAAM,WAAW,cAAc;IAE3B,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IACzD,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtG,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/F,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;CAC9B;AAGD,eAAO,MAAM,gBAAgB,WAAY,MAAM,KAAG,YAAY,GAAG,SAMhE,CAAC;AA4FF,eAAO,MAAM,aAAa,QAAe,YAAY,SAAS,cAAc,UAAU,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAG,OAAO,CAAC,MAAM,CAW5H,CAAC;AAqCF,eAAO,MAAM,SAAS,QAAe,YAAY,UAAU,YAAY,UAAU,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAG,OAAO,CAAC,MAAM,CAGvH,CAAC"}