@intentic/sandbox-contract 1.312.0 → 1.313.0

package/src/protocol/tunnel-lanes.json

@@ -1,136 +0,0 @@
-[
-    {"method":"GET","path":"/health","lane":"interactive"},
-    {"method":"GET","path":"/diff/raw","lane":"bulk"},
-    {"method":"GET","path":"/speech/status","lane":"interactive"},
-    {"method":"POST","path":"/speech/transcribe","lane":"interactive"},
-    {"method":"GET","path":"/workspace/raw","lane":"bulk"},
-    {"method":"GET","path":"/workspace/thumb","lane":"interactive"},
-    {"method":"GET","path":"/workspace/media","lane":"bulk"},
-    {"method":"POST","path":"/workspace/upload","lane":"bulk"},
-    {"method":"POST","path":"/workspace/upload-diff","lane":"interactive"},
-    {"method":"POST","path":"/workspace/upload-archive","lane":"bulk"},
-    {"method":"POST","path":"/system/ws-ticket","lane":"interactive"},
-    {"method":"GET","path":"/system/terminal","lane":"interactive"},
-    {"method":"GET","path":"/system/sync/ssh","lane":"bulk"},
-    {"method":"GET","path":"/system/browser-profile","lane":"interactive"},
-    {"method":"GET","path":"/system/browser-view","lane":"interactive"},
-    {"method":"POST","path":"/enroll","lane":"interactive"},
-    {"method":"POST","path":"/automations/{id}/fire","lane":"interactive"},
-    {"method":"POST","path":"/workflows/{id}/gate","lane":"interactive"},
-    {"method":"GET","path":"/webchat/widget.js","lane":"interactive"},
-    {"method":"GET","path":"/webchat/{id}/config","lane":"interactive"},
-    {"method":"GET","path":"/webchat/{id}/challenge","lane":"interactive"},
-    {"method":"POST","path":"/webchat/{id}/message","lane":"interactive"},
-    {"method":"GET","path":"/webchat/{id}/messages","lane":"interactive"},
-    {"method":"GET","path":"/webchat/{id}/installs","lane":"interactive"},
-    {"method":"GET","path":"/intake/sdk.js","lane":"interactive"},
-    {"method":"GET","path":"/intake/{id}/config","lane":"interactive"},
-    {"method":"GET","path":"/intake/{id}/challenge","lane":"interactive"},
-    {"method":"POST","path":"/intake/{id}/report","lane":"interactive"},
-    {"method":"GET","path":"/members","lane":"interactive"},
-    {"method":"POST","path":"/members","lane":"interactive"},
-    {"method":"DELETE","path":"/members","lane":"interactive"},
-    {"method":"DELETE","path":"/members/self","lane":"interactive"},
-    {"method":"GET","path":"/environment","lane":"interactive"},
-    {"method":"GET","path":"/environment/contents","lane":"interactive"},
-    {"method":"POST","path":"/environment/approve","lane":"interactive"},
-    {"method":"POST","path":"/environment/reject","lane":"interactive"},
-    {"method":"POST","path":"/environment/runtime-install","lane":"interactive"},
-    {"method":"GET","path":"/engines","lane":"interactive"},
-    {"method":"POST","path":"/engines/channel","lane":"interactive"},
-    {"method":"POST","path":"/engines/update","lane":"interactive"},
-    {"method":"POST","path":"/engines/revert","lane":"interactive"},
-    {"method":"GET","path":"/bundles","lane":"interactive"},
-    {"method":"POST","path":"/bundles","lane":"interactive"},
-    {"method":"DELETE","path":"/bundles","lane":"interactive"},
-    {"method":"POST","path":"/bundles/ticket","lane":"interactive"},
-    {"method":"GET","path":"/bundles/download","lane":"bulk"},
-    {"method":"GET","path":"/definition","lane":"interactive"},
-    {"method":"POST","path":"/definition/diff","lane":"interactive"},
-    {"method":"GET","path":"/definition/workspace","lane":"interactive"},
-    {"method":"POST","path":"/definition/workspace/publish","lane":"interactive"},
-    {"method":"POST","path":"/arrivals/plan","lane":"interactive"},
-    {"method":"GET","path":"/arrivals/hosts","lane":"interactive"},
-    {"method":"POST","path":"/arrivals/scan","lane":"interactive"},
-    {"method":"POST","path":"/arrivals/apply","lane":"interactive"},
-    {"method":"DELETE","path":"/arrivals","lane":"interactive"},
-    {"method":"GET","path":"/extensions/{id}/bundle","lane":"bulk"},
-    {"method":"ALL","path":"/x/*","lane":"interactive"},
-    {"method":"POST","path":"/mcp/extensions/{id}","lane":"interactive"},
-    {"method":"GET","path":"/mcp/extensions/{id}","lane":"interactive"},
-    {"method":"DELETE","path":"/mcp/extensions/{id}","lane":"interactive"},
-    {"method":"GET","path":"/capabilities/connectable","lane":"interactive"},
-    {"method":"POST","path":"/capabilities/ask","lane":"interactive"},
-    {"method":"GET","path":"/sandboxes","lane":"interactive"},
-    {"method":"POST","path":"/sandboxes","lane":"interactive"},
-    {"method":"GET","path":"/wallet/status","lane":"interactive"},
-    {"method":"POST","path":"/wallet/fetch","lane":"interactive"},
-    {"method":"GET","path":"/wallet/history","lane":"interactive"},
-    {"method":"POST","path":"/children/spawn","lane":"interactive"},
-    {"method":"GET","path":"/children/providers","lane":"interactive"},
-    {"method":"POST","path":"/children/wait","lane":"interactive"},
-    {"method":"POST","path":"/children/send","lane":"interactive"},
-    {"method":"POST","path":"/children/answer","lane":"interactive"},
-    {"method":"GET","path":"/children","lane":"interactive"},
-    {"method":"GET","path":"/fleet","lane":"interactive"},
-    {"method":"POST","path":"/fleet/message","lane":"interactive"},
-    {"method":"GET","path":"/fleet/{handle}","lane":"interactive"},
-    {"method":"GET","path":"/listeners/{provider}/state","lane":"interactive"},
-    {"method":"POST","path":"/listeners/{provider}/dispatch","lane":"interactive"},
-    {"method":"POST","path":"/listeners/{provider}/failure","lane":"interactive"},
-    {"method":"POST","path":"/listeners/{provider}/status","lane":"interactive"},
-    {"method":"POST","path":"/ci/webhook/{host}","lane":"interactive"},
-    {"method":"POST","path":"/system/sync/pair","lane":"interactive"},
-    {"method":"POST","path":"/system/hosts/pair","lane":"interactive"},
-    {"method":"POST","path":"/system/hosts/enroll","lane":"interactive"},
-    {"method":"GET","path":"/system/hosts","lane":"interactive"},
-    {"method":"DELETE","path":"/system/hosts/{id}","lane":"interactive"},
-    {"method":"GET","path":"/system/hosts/connect","lane":"interactive"},
-    {"method":"POST","path":"/mcp/hosts/{id}","lane":"interactive"},
-    {"method":"GET","path":"/mcp/hosts/{id}","lane":"interactive"},
-    {"method":"DELETE","path":"/mcp/hosts/{id}","lane":"interactive"},
-    {"method":"POST","path":"/system/webext/pair","lane":"interactive"},
-    {"method":"POST","path":"/system/webext/enroll","lane":"interactive"},
-    {"method":"GET","path":"/system/webext","lane":"interactive"},
-    {"method":"DELETE","path":"/system/webext/{id}","lane":"interactive"},
-    {"method":"GET","path":"/system/webext/connect","lane":"interactive"},
-    {"method":"POST","path":"/mcp/webext/{id}","lane":"interactive"},
-    {"method":"GET","path":"/mcp/webext/{id}","lane":"interactive"},
-    {"method":"DELETE","path":"/mcp/webext/{id}","lane":"interactive"},
-    {"method":"POST","path":"/system/runners/pair","lane":"interactive"},
-    {"method":"POST","path":"/system/runners/enroll","lane":"interactive"},
-    {"method":"GET","path":"/system/runners","lane":"interactive"},
-    {"method":"DELETE","path":"/system/runners/{id}","lane":"interactive"},
-    {"method":"GET","path":"/system/runners/connect","lane":"interactive"},
-    {"method":"POST","path":"/mcp/browser/{id}","lane":"interactive"},
-    {"method":"GET","path":"/mcp/browser/{id}","lane":"interactive"},
-    {"method":"DELETE","path":"/mcp/browser/{id}","lane":"interactive"},
-    {"method":"POST","path":"/system/webext/session","lane":"interactive"},
-    {"method":"POST","path":"/system/webext/lend","lane":"interactive"},
-    {"method":"POST","path":"/system/runners/{id}/definition/sync","lane":"interactive"},
-    {"method":"GET","path":"/system/runners/git/{repo}/info/refs","lane":"bulk"},
-    {"method":"POST","path":"/system/runners/git/{repo}/git-upload-pack","lane":"bulk"},
-    {"method":"POST","path":"/system/runners/git/{repo}/git-receive-pack","lane":"bulk"},
-    {"method":"POST","path":"/system/runners/credentials","lane":"interactive"},
-    {"method":"POST","path":"/system/runners/credentials/refresh","lane":"interactive"},
-    {"method":"ALL","path":"/system/runners/translator/*","lane":"interactive"},
-    {"method":"POST","path":"/system/control/tokens","lane":"interactive"},
-    {"method":"GET","path":"/system/control/tokens","lane":"interactive"},
-    {"method":"DELETE","path":"/system/control/tokens/{id}","lane":"interactive"},
-    {"method":"GET","path":"/system/passkeys","lane":"interactive"},
-    {"method":"POST","path":"/system/passkeys/register/options","lane":"interactive"},
-    {"method":"POST","path":"/system/passkeys/register","lane":"interactive"},
-    {"method":"POST","path":"/system/passkeys/assert/options","lane":"interactive"},
-    {"method":"POST","path":"/system/passkeys/assert","lane":"interactive"},
-    {"method":"POST","path":"/system/passkeys/policy","lane":"interactive"},
-    {"method":"POST","path":"/system/passkeys/recovery","lane":"interactive"},
-    {"method":"DELETE","path":"/system/passkeys/{id}","lane":"interactive"},
-    {"method":"POST","path":"/system/session/recover","lane":"interactive"},
-    {"method":"POST","path":"/system/sessions/revoke","lane":"interactive"},
-    {"method":"POST","path":"/system/access/disable","lane":"interactive"},
-    {"method":"POST","path":"/system/authorized-key","lane":"interactive"},
-    {"method":"GET","path":"/system/sync","lane":"interactive"},
-    {"method":"POST","path":"/system/sync/report","lane":"interactive"},
-    {"method":"DELETE","path":"/system/authorized-key","lane":"interactive"},
-    {"method":"DELETE","path":"/system/authorized-key/{machine}","lane":"interactive"}
-]

package/src/protocol/tunnel-lanes.test.ts

@@ -1,30 +0,0 @@
-import { readFileSync } from "node:fs";
-import { type TunnelLane, tunnelLaneNamed, tunnelLaneOf, tunnelLaneTable } from "./tunnel-lanes.js";
-
-interface LaneCase {
-    readonly host: string;
-    readonly method: string;
-    readonly path: string;
-    readonly lane: TunnelLane;
-}
-
-const read = (name: string): unknown => JSON.parse(readFileSync(new URL(name, import.meta.url), "utf8"));
-const CASES = (read("./ingress-contract.fixture.json") as { lanes: LaneCase[] }).lanes;
-
-test("the table the Rust edge embeds is the raw routes' lanes as they stand (pnpm --filter @intentic/sandbox-contract lanes)", () => {
-    expect(read("./tunnel-lanes.json")).toEqual(tunnelLaneTable());
-});
-
-test("every request the shared fixture names rides the lane it states", () => {
-    expect(CASES.length).toBeGreaterThan(20);
-    for (const { host, method, path, lane } of CASES) {
-        expect({ host, method, path, lane: tunnelLaneOf(host, method, path) }).toEqual({ host, method, path, lane });
-    }
-});
-
-test("a tunnel is interactive unless its upgrade names the bulk lane", () => {
-    expect(tunnelLaneNamed("bulk")).toBe("bulk");
-    expect(tunnelLaneNamed(undefined)).toBe("interactive");
-    expect(tunnelLaneNamed("interactive")).toBe("interactive");
-    expect(tunnelLaneNamed(["bulk", "bulk"])).toBe("interactive");
-});

package/src/protocol/tunnel-lanes.ts

@@ -1,32 +0,0 @@
-import { sandboxSubdomain } from "../ids/hostnames.js";
-import { hostOwnerId } from "./ingress-contract.js";
-import { RAW_ROUTE_LIST } from "./raw-routes.js";
-import { servedRoute } from "./routes.js";
-
-// Each sandbox dials two tunnels, and each browser request rides one, so a transfer never queues a keystroke, a call or
-// an event frame behind it on one TCP connection. The front dials both (_sandbox/front tunnel.rs); the edge
-// (_platform/ingress lanes.rs) picks by the table this file emits, and falls back to the other lane while the one picked
-// is not held.
-
-export type TunnelLane = "interactive" | "bulk";
-
-// Names a tunnel's lane on its upgrade; a tunnel that names none is the interactive one.
-export const INGRESS_LANE_HEADER = "x-intentic-lane";
-
-export const tunnelLaneNamed = (header: string | string[] | undefined): TunnelLane => (header === "bulk" ? "bulk" : "interactive");
-
-// A preview's dev server (every label but the daemon's own) is bulk: a page load is hundreds of requests and its assets
-// can be large. The daemon's routes are interactive unless their policy says otherwise (RouteMeta `lane`).
-export const tunnelLaneOf = (host: string, method: string, path: string): TunnelLane => {
-    const id = hostOwnerId(host);
-    const label = host.split(":")[0]?.split(".")[0] ?? "";
-    if (id === undefined || label !== sandboxSubdomain(id)) {
-        return "bulk";
-    }
-    return servedRoute(RAW_ROUTE_LIST, [], method, path)?.meta.lane ?? "interactive";
-};
-
-// The raw routes in registration order with the lane each rides: what the Rust edge matches a daemon request against,
-// written to tunnel-lanes.json by scripts/write-lanes.mjs since the edge cannot run this file.
-export const tunnelLaneTable = (): { readonly method: string; readonly path: string; readonly lane: TunnelLane }[] =>
-    RAW_ROUTE_LIST.map(({ method, path, meta }) => ({ method, path, lane: meta.lane ?? "interactive" }));

package/src/protocol/upgrade-relay.ts

@@ -1,28 +0,0 @@
-import type { ClientRequest } from "node:http";
-import type { Duplex } from "node:stream";
-
-// `upstream` is the client's handshake replayed; a 101 is echoed and bytes flow raw, any other answer ends the socket.
-export const relayUpgrade = (upstream: ClientRequest, socket: Duplex, head: Buffer): void => {
-    upstream.on("error", () => socket.destroy());
-    upstream.on("response", (answer) => {
-        socket.end(`HTTP/1.1 ${answer.statusCode ?? 502} ${answer.statusMessage ?? ""}\r\n\r\n`);
-    });
-    upstream.on("upgrade", (answer, upstreamSocket, upstreamHead) => {
-        const lines: string[] = [];
-        for (let index = 0; index < answer.rawHeaders.length; index += 2) {
-            lines.push(`${answer.rawHeaders[index]}: ${answer.rawHeaders[index + 1]}`);
-        }
-        socket.write(`HTTP/1.1 101 Switching Protocols\r\n${lines.join("\r\n")}\r\n\r\n`);
-        if (upstreamHead.length > 0) {
-            socket.write(upstreamHead);
-        }
-        if (head.length > 0) {
-            upstreamSocket.write(head);
-        }
-        upstreamSocket.on("error", () => socket.destroy());
-        socket.on("error", () => upstreamSocket.destroy());
-        upstreamSocket.pipe(socket);
-        socket.pipe(upstreamSocket);
-    });
-    upstream.end();
-};