@lensmcp/cluster 1.18.3 → 1.18.6

package/executors/gateway/runtime/service-keys.js

@@ -1,49 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.gatewayCacheDir = gatewayCacheDir;
-exports.loadServiceKeys = loadServiceKeys;
-const tslib_1 = require("tslib");
-/**
- * Per-service api keys (be-security: the gateway is the trust boundary).
- * Every pod service gets a stable key in `{cacheDir}/service-keys.json`.
- * - Public routes: the gateway injects the TARGET's key as `x-internal-token` —
- *   pods are only reachable through it (unix sockets aren't on the network).
- * - `internal.<host>` routes: the CALLER must present its own key as `x-api-key`;
- *   the gateway validates it, stamps `x-api-key-id` (caller identity) and
- *   forwards with the target's `x-internal-token`.
- */
-const node_crypto_1 = require("node:crypto");
-const fs = tslib_1.__importStar(require("node:fs"));
-const path = tslib_1.__importStar(require("node:path"));
-/** The gateway's on-disk cache root — shared by service keys AND the TLS cert cache. */
-function gatewayCacheDir(root) {
-    return path.join(root, 'node_modules', '.cache', 'davnx-webpack');
-}
-/** Load (or generate + persist) a stable key per pod service, plus the inverse
- *  key→project map used to authenticate internal callers. Tolerant of a
- *  read-only fs (keys then live only for this process). */
-function loadServiceKeys(root, services) {
-    const keysDir = gatewayCacheDir(root);
-    const keysPath = path.join(keysDir, 'service-keys.json');
-    let serviceKeys = {};
-    try {
-        serviceKeys = JSON.parse(fs.readFileSync(keysPath, 'utf8'));
-    }
-    catch { /* first run */ }
-    let dirty = false;
-    for (const svc of services) {
-        if (!serviceKeys[svc.project]) {
-            serviceKeys[svc.project] = (0, node_crypto_1.randomBytes)(16).toString('hex');
-            dirty = true;
-        }
-    }
-    if (dirty) {
-        try {
-            fs.mkdirSync(keysDir, { recursive: true });
-            fs.writeFileSync(keysPath, JSON.stringify(serviceKeys, null, 2));
-        }
-        catch { /* ro fs */ }
-    }
-    const keyToProject = new Map(Object.entries(serviceKeys).map(([p, k]) => [k, p]));
-    return { serviceKeys, keyToProject };
-}
+"use strict";var d=Object.defineProperty;var i=(e,t)=>d(e,"name",{value:t,configurable:!0});var u=Object.defineProperty,c=i((e,t)=>u(e,"name",{value:t,configurable:!0}),"c");Object.defineProperty(exports,"__esModule",{value:!0}),exports.gatewayCacheDir=gatewayCacheDir,exports.loadServiceKeys=loadServiceKeys;const tslib_1=require("tslib"),node_crypto_1=require("node:crypto"),fs=tslib_1.__importStar(require("node:fs")),path=tslib_1.__importStar(require("node:path"));function gatewayCacheDir(e){return path.join(e,"node_modules",".cache","davnx-webpack")}i(gatewayCacheDir,"gatewayCacheDir"),c(gatewayCacheDir,"gatewayCacheDir");function loadServiceKeys(e,t){const a=gatewayCacheDir(e),n=path.join(a,"service-keys.json");let r={};try{r=JSON.parse(fs.readFileSync(n,"utf8"))}catch{}let s=!1;for(const o of t)r[o.project]||(r[o.project]=(0,node_crypto_1.randomBytes)(16).toString("hex"),s=!0);if(s)try{fs.mkdirSync(a,{recursive:!0}),fs.writeFileSync(n,JSON.stringify(r,null,2))}catch{}const y=new Map(Object.entries(r).map(([o,p])=>[p,o]));return{serviceKeys:r,keyToProject:y}}i(loadServiceKeys,"loadServiceKeys"),c(loadServiceKeys,"loadServiceKeys");

package/executors/gateway/runtime/types.d.ts

@@ -424,4 +424,3 @@ export interface AuthVerdict {
     reason?: GatewayErrorReason;
     detail?: string;
 }
-//# sourceMappingURL=types.d.ts.map

package/executors/gateway/runtime/types.js

@@ -1,151 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.GATEWAY_KEEPALIVE_TIMEOUT_MS = exports.MAX_PORT_CONFLICT_RETRIES = exports.CHILD_START_FAIL_MS = exports.PORT_FREE_POLL_MS = exports.PORT_FREE_WAIT_MS = exports.LENS_PROBE_COOLDOWN_MS = exports.LENS_PROBE_TIMEOUT_MS = exports.LENS_PROBE_FAILS = exports.LENS_PROBE_GRACE_MS = exports.LENS_PROBE_ENABLED = exports.POD_STALE_RECYCLE_COOLDOWN_MS = exports.POD_STALE_SCAN_MS = exports.POD_RECYCLE_SETTLE_MS = exports.POD_STALE_GRACE_MS = exports.POD_MAX_AGE_MS = exports.POD_RECYCLE_ENABLED = exports.WEDGE_RECYCLE_GRACE_MS = exports.POD_RESPONSE_TIMEOUT_MS = exports.UPSTREAM_HEAL_STEP_MS = exports.UPSTREAM_HEAL_WINDOW_MS = exports.SERVICE_RESTART_WINDOW_MS = exports.SERVICE_MAX_RESTARTS = exports.SERVICE_ERROR_THROTTLE_MS = void 0;
-/** Parse a positive-integer env override; fall back to `def` on missing/NaN/negative. `allowZero` lets a
- *  `0` through (used as a "disable" sentinel, e.g. {@link POD_MAX_AGE_MS}); otherwise `0` also falls back. */
-function envInt(name, def, allowZero = false) {
-    const n = Number(process.env[name]);
-    if (!Number.isFinite(n) || n < 0)
-        return def;
-    if (n === 0)
-        return allowZero ? 0 : def;
-    return n;
-}
-/** Min interval (ms) between repeat 'service error' emits for the SAME service + same error line. */
-exports.SERVICE_ERROR_THROTTLE_MS = 5000;
-/** Self-heal: an unexpectedly-exited pod (crash, not a clean exit or a build error) is auto-respawned
- * after a backoff, capped at {@link SERVICE_MAX_RESTARTS} within {@link SERVICE_RESTART_WINDOW_MS} so a
- * genuinely-broken service doesn't hot-loop the CPU. */
-exports.SERVICE_MAX_RESTARTS = 5;
-exports.SERVICE_RESTART_WINDOW_MS = 60_000;
-/** Self-heal: how long the proxy retries a CONNECTION-class upstream error (a Vite dev server restarting
- * its internal server on a config change → the port refuses for ~1-3s; a pod warming up) before it
- * finally 502s. Retried only BEFORE any response byte is written, and only for a connection error. */
-exports.UPSTREAM_HEAL_WINDOW_MS = 8000;
-exports.UPSTREAM_HEAL_STEP_MS = 300;
-/** Self-heal: how long the proxy waits for a POD to start responding (first byte / headers) before it
- * treats the pod as WEDGED — a child that ACCEPTS its unix socket but never replies (e.g. a stale socket
- * left by an HMR hot-swap). A connection error is caught by http-proxy's error cb immediately, but an
- * accepted-then-silent socket would otherwise pin the request until {@link http-proxy}'s `proxyTimeout`
- * (120s) — the "request pending 2+ minutes" symptom. On this deadline the proxy EVICTS the pod (drops its
- * socket + unlinks the ghost file) so the lifecycle sweeper / scale-from-zero respawns it, and 502s fast.
- * Only fires BEFORE any response byte (a legit long request streams AFTER headers, unaffected).
- * Override with `LENSMCP_POD_RESPONSE_TIMEOUT_MS`. */
-exports.POD_RESPONSE_TIMEOUT_MS = (() => {
-    const n = Number(process.env['LENSMCP_POD_RESPONSE_TIMEOUT_MS']);
-    return Number.isFinite(n) && n > 0 ? n : 30_000;
-})();
-/**
- * Self-heal: how long a service may sit WEDGED — its gateway-spawned parent process ALIVE but with ZERO
- * live pods (an HMR hot-swap evicted the child's socket, and `ensureUp` won't respawn because its
- * `!svc.proc` guard sees the alive parent) — before the sweeper force-RECYCLES it (kill the wedged tree →
- * respawn a fresh pod). This closes the evict→respawn gap: `evictPod` (proxy) empties the pool but never
- * touches `svc.proc`, so a "next request scale-from-zero" is structurally blocked. The grace absorbs a
- * legit in-process hot-swap (the socket is briefly gone, then re-bound). A code (build) error is left to
- * the user's fix but still recycled under the crash-loop cap. Override with `LENSMCP_WEDGE_RECYCLE_GRACE_MS`. */
-exports.WEDGE_RECYCLE_GRACE_MS = (() => {
-    const n = Number(process.env['LENSMCP_WEDGE_RECYCLE_GRACE_MS']);
-    return Number.isFinite(n) && n > 0 ? n : 15_000;
-})();
-/**
- * ZOMBIE-POD RECYCLE (dev only). The exit-respawn (crashed pod) and wedge-recycle (live parent, 0 live
- * pods) self-heals both assume a DEAD or SOCKET-LESS pod. This one catches the third kind: a pod that is
- * ALIVE and reachable (a live socket, answers requests) yet serves a STALE FILESYSTEM VIEW — its dev-server
- * file-watcher degraded (macOS fsevents after long uptime / a sleep-wake) and MISSED files created AFTER it
- * spawned, so it 500s `Failed to resolve import "./x"` for a file that EXISTS on disk (the reported
- * incident: a 17.7h-old vite pod that predated new files by ~6h). The sweeper detects it two ways and
- * recycles the pod (kill → scale-from-zero → a fresh pod re-scans the FS) — but ONLY when the pod is idle
- * (no in-flight request + a brief lull), so an active pod is never interrupted.
- */
-/** Master switch — set `LENSMCP_POD_RECYCLE=0` to disable zombie-pod recycling entirely. Default ON (dev). */
-exports.POD_RECYCLE_ENABLED = process.env['LENSMCP_POD_RECYCLE'] !== '0';
-/** Backstop: recycle a gateway-spawned pod once it is older than this, even with no detected source change
- *  (a long-lived pod is the one whose watcher degrades). `0` disables the age backstop. Override
- *  `LENSMCP_POD_MAX_AGE_MS`. Default 4h. */
-exports.POD_MAX_AGE_MS = envInt('LENSMCP_POD_MAX_AGE_MS', 4 * 60 * 60_000, true);
-/** A pod is "stale" when the source file SET changed (a file added/removed — NOT a content change, so
- *  ordinary saves never recycle) more than this AFTER the pod spawned. The grace absorbs clock skew + the
- *  pod's own first-compile writes. Override `LENSMCP_POD_STALE_GRACE_MS`. Default 10s. */
-exports.POD_STALE_GRACE_MS = envInt('LENSMCP_POD_STALE_GRACE_MS', 10_000);
-/** Recycle only after the pod has been quiet this long (0 in-flight AND lastUsed older than this) — a busy
- *  pod is never interrupted; the recycle lands in an inter-request lull. Override
- *  `LENSMCP_POD_RECYCLE_SETTLE_MS`. Default 8s. */
-exports.POD_RECYCLE_SETTLE_MS = envInt('LENSMCP_POD_RECYCLE_SETTLE_MS', 8_000);
-/** How often the sweeper rescans the workspace source file SET signature (a bounded, async, non-blocking
- *  walk). Override `LENSMCP_POD_STALE_SCAN_MS`. Default 30s. */
-exports.POD_STALE_SCAN_MS = envInt('LENSMCP_POD_STALE_SCAN_MS', 30_000);
-/** Per-service cooldown between staleness recycles — stops a source-churn burst (codegen) thrash-recycling
- *  the same pod. Override `LENSMCP_POD_STALE_RECYCLE_COOLDOWN_MS`. Default 60s. */
-exports.POD_STALE_RECYCLE_COOLDOWN_MS = envInt('LENSMCP_POD_STALE_RECYCLE_COOLDOWN_MS', 60_000);
-/**
- * LENS-CHILD LIVENESS PROBE (dev only). The FOURTH failure mode, and the one that wedges an app in a
- * PERMANENT 502 with nothing in the log: a gateway-spawned vite that is ALIVE but NOT LISTENING. Child
- * health was modelled ONLY as "has the process exited", so a vite whose HTTP listener closes/faults while
- * its event loop stays held open (by the lensmcp plugin's WS server + the bridge connections) is INVISIBLE:
- * `viteChildren` still holds it as live, no `lens child vite exited` line is ever logged, and the
- * exit-driven auto-heal never fires. Worked failure (foodguard, 2026-07-29): two 43-minute-old vite children
- * (pids 89518/89519) that had both printed `VITE ready in 1005 ms` + `Local: http://localhost:4200/`, yet
- * `lsof -nP -p 89519` showed ZERO LISTEN sockets and `lsof -iTCP:4200 -sTCP:LISTEN` was empty —
- * `https://app.foodguard.local` 502'd indefinitely until the pids were hand-killed (the exit handler then
- * respawned them and the app returned 200 within 8s). So the sweeper now TCP-probes each live child's pinned
- * port and SIGKILLs a confirmed wedge, letting the proven exit→auto-heal path do the rest.
- */
-/** Master switch for the liveness probe. Deliberately INDEPENDENT of {@link POD_RECYCLE_ENABLED}: a user who
- *  sets `LENSMCP_POD_RECYCLE=0` to stop staleness churn still wants a wedged 502 healed. Set
- *  `LENSMCP_LENS_PROBE=0` to disable. Default ON (dev). */
-exports.LENS_PROBE_ENABLED = process.env['LENSMCP_LENS_PROBE'] !== '0';
-/** Spawn grace: a child is never probed (and so never recycled) until it has had this long to BIND its port
- *  — a cold vite/nx boot in a big monorepo takes many seconds, and killing a still-booting dev server would
- *  be a self-inflicted outage. Override `LENSMCP_LENS_PROBE_GRACE_MS`. Default 45s. */
-exports.LENS_PROBE_GRACE_MS = envInt('LENSMCP_LENS_PROBE_GRACE_MS', 45_000);
-/** CONSECUTIVE probe failures required before a recycle — one blip (a momentary accept backlog, a laptop
- *  sleep-wake, a GC pause) must never recycle a healthy dev server. Floored at 2 by
- *  {@link lensChildWedged}. Override `LENSMCP_LENS_PROBE_FAILS`. Default 2. */
-exports.LENS_PROBE_FAILS = envInt('LENSMCP_LENS_PROBE_FAILS', 2);
-/** Per-probe TCP connect timeout. Short: a listening socket accepts a loopback connect in microseconds, so
- *  anything slower is indistinguishable from absent. Override `LENSMCP_LENS_PROBE_TIMEOUT_MS`. Default 1s. */
-exports.LENS_PROBE_TIMEOUT_MS = envInt('LENSMCP_LENS_PROBE_TIMEOUT_MS', 1_000);
-/**
- * Anti-thrash window for a WEDGE heal — deliberately SEPARATE from
- * {@link POD_STALE_RECYCLE_COOLDOWN_MS}, and short.
- *
- * The two cooldowns bound opposite risks. A STALENESS recycle is an optimization (the pod still serves;
- * its fs view may be behind), so throttling it hard is free — foodguard sets that override to 15min to bound
- * the recycle churn a busy monorepo generates. A WEDGE is a hard outage: the pod is alive but has NO
- * listener, so every request is a `gateway.unavailable` 502 until something kills it. Recycling a wedged pod
- * can never be "unnecessary" — the only thing a long cooldown buys there is a longer outage.
- *
- * Worked failure (foodguard, 2026-07-30): the wedge probe shipped reusing the staleness cooldown, so that
- * workspace's 15min override silently gated it too — the dashboard sat at 502 with the probe correctly
- * detecting the wedge and then declining to act, and a human killed the pod by hand (three times in one
- * session). Override `LENSMCP_LENS_PROBE_COOLDOWN_MS`. Default 30s — long enough that a pod which wedges
- * immediately on respawn backs off instead of spinning, short enough that a wedge is a blip, not an outage.
- */
-exports.LENS_PROBE_COOLDOWN_MS = envInt('LENSMCP_LENS_PROBE_COOLDOWN_MS', 30_000);
-/**
- * RESPAWN-INTO-A-HELD-PORT (the EADDRINUSE self-inflicted crash). The auto-heal respawned after a FIXED
- * backoff while the previous child still held the pinned port — vite's `--strictPort` then exits code=1 on
- * bind, burning a heal attempt and EXTENDING the 502 window. Observed in the gateway log:
- * `Error: listen EADDRINUSE: address already in use 127.0.0.1:50059` immediately followed by
- * `lens child vite exited (code=1 sig=null); auto-healing in 3s (attempt 2).` (3 such events in one log).
- * Two fixes: WAIT for the port to become bindable before spawning, and classify a bind-race exit as
- * RETRYABLE so it does not consume the crash-loop budget a real code fault does.
- */
-/** How long a respawn polls for its pinned port to become bindable before spawning anyway (past the budget
- *  the normal heal backoff takes over). Override `LENSMCP_PORT_FREE_WAIT_MS`. Default 10s. */
-exports.PORT_FREE_WAIT_MS = envInt('LENSMCP_PORT_FREE_WAIT_MS', 10_000);
-/** Poll interval while waiting for a port to free. Override `LENSMCP_PORT_FREE_POLL_MS`. Default 250ms. */
-exports.PORT_FREE_POLL_MS = envInt('LENSMCP_PORT_FREE_POLL_MS', 250);
-/** A non-zero exit sooner than this is a START failure (it never bound); later means the child RAN and so
- *  had the port, which cannot be a bind race. Override `LENSMCP_CHILD_START_FAIL_MS`. Default 10s. */
-exports.CHILD_START_FAIL_MS = envInt('LENSMCP_CHILD_START_FAIL_MS', 10_000);
-/** Ultimate backstop: after this many CONSECUTIVE bind-race exits for one label, stop forgiving them and
- *  fall back to the normal exponential backoff (so a permanently-squatted port can't 10s-loop forever).
- *  Override `LENSMCP_MAX_PORT_CONFLICT_RETRIES`. Default 5. */
-exports.MAX_PORT_CONFLICT_RETRIES = envInt('LENSMCP_MAX_PORT_CONFLICT_RETRIES', 5);
-/** Inbound keep-alive idle window for the front door. MUST exceed every client's pooled-socket idle timeout
- *  so the SERVER never closes a keep-alive socket a client is about to reuse — otherwise both sides race the
- *  same deadline and the truncated request surfaces as a spurious front-door `400` (see
- *  `classifyClientError`). Node's server default is 5s and a Node client agent's is ~5s, i.e. exactly tied.
- *  Override `LENSMCP_KEEPALIVE_TIMEOUT_MS`. Default 76s. */
-exports.GATEWAY_KEEPALIVE_TIMEOUT_MS = envInt('LENSMCP_KEEPALIVE_TIMEOUT_MS', 76_000);
+"use strict";var R=Object.defineProperty;var e=(_,E)=>R(_,"name",{value:E,configurable:!0});var O=Object.defineProperty,L=e((_,E)=>O(_,"name",{value:E,configurable:!0}),"L");Object.defineProperty(exports,"__esModule",{value:!0}),exports.GATEWAY_KEEPALIVE_TIMEOUT_MS=exports.MAX_PORT_CONFLICT_RETRIES=exports.CHILD_START_FAIL_MS=exports.PORT_FREE_POLL_MS=exports.PORT_FREE_WAIT_MS=exports.LENS_PROBE_COOLDOWN_MS=exports.LENS_PROBE_TIMEOUT_MS=exports.LENS_PROBE_FAILS=exports.LENS_PROBE_GRACE_MS=exports.LENS_PROBE_ENABLED=exports.POD_STALE_RECYCLE_COOLDOWN_MS=exports.POD_STALE_SCAN_MS=exports.POD_RECYCLE_SETTLE_MS=exports.POD_STALE_GRACE_MS=exports.POD_MAX_AGE_MS=exports.POD_RECYCLE_ENABLED=exports.WEDGE_RECYCLE_GRACE_MS=exports.POD_RESPONSE_TIMEOUT_MS=exports.UPSTREAM_HEAL_STEP_MS=exports.UPSTREAM_HEAL_WINDOW_MS=exports.SERVICE_RESTART_WINDOW_MS=exports.SERVICE_MAX_RESTARTS=exports.SERVICE_ERROR_THROTTLE_MS=void 0;function envInt(_,E,M=!1){const S=Number(process.env[_]);return!Number.isFinite(S)||S<0?E:S===0?M?0:E:S}e(envInt,"envInt"),L(envInt,"envInt"),exports.SERVICE_ERROR_THROTTLE_MS=5e3,exports.SERVICE_MAX_RESTARTS=5,exports.SERVICE_RESTART_WINDOW_MS=6e4,exports.UPSTREAM_HEAL_WINDOW_MS=8e3,exports.UPSTREAM_HEAL_STEP_MS=300,exports.POD_RESPONSE_TIMEOUT_MS=(()=>{const _=Number(process.env.LENSMCP_POD_RESPONSE_TIMEOUT_MS);return Number.isFinite(_)&&_>0?_:3e4})(),exports.WEDGE_RECYCLE_GRACE_MS=(()=>{const _=Number(process.env.LENSMCP_WEDGE_RECYCLE_GRACE_MS);return Number.isFinite(_)&&_>0?_:15e3})(),exports.POD_RECYCLE_ENABLED=process.env.LENSMCP_POD_RECYCLE!=="0",exports.POD_MAX_AGE_MS=envInt("LENSMCP_POD_MAX_AGE_MS",240*6e4,!0),exports.POD_STALE_GRACE_MS=envInt("LENSMCP_POD_STALE_GRACE_MS",1e4),exports.POD_RECYCLE_SETTLE_MS=envInt("LENSMCP_POD_RECYCLE_SETTLE_MS",8e3),exports.POD_STALE_SCAN_MS=envInt("LENSMCP_POD_STALE_SCAN_MS",3e4),exports.POD_STALE_RECYCLE_COOLDOWN_MS=envInt("LENSMCP_POD_STALE_RECYCLE_COOLDOWN_MS",6e4),exports.LENS_PROBE_ENABLED=process.env.LENSMCP_LENS_PROBE!=="0",exports.LENS_PROBE_GRACE_MS=envInt("LENSMCP_LENS_PROBE_GRACE_MS",45e3),exports.LENS_PROBE_FAILS=envInt("LENSMCP_LENS_PROBE_FAILS",2),exports.LENS_PROBE_TIMEOUT_MS=envInt("LENSMCP_LENS_PROBE_TIMEOUT_MS",1e3),exports.LENS_PROBE_COOLDOWN_MS=envInt("LENSMCP_LENS_PROBE_COOLDOWN_MS",3e4),exports.PORT_FREE_WAIT_MS=envInt("LENSMCP_PORT_FREE_WAIT_MS",1e4),exports.PORT_FREE_POLL_MS=envInt("LENSMCP_PORT_FREE_POLL_MS",250),exports.CHILD_START_FAIL_MS=envInt("LENSMCP_CHILD_START_FAIL_MS",1e4),exports.MAX_PORT_CONFLICT_RETRIES=envInt("LENSMCP_MAX_PORT_CONFLICT_RETRIES",5),exports.GATEWAY_KEEPALIVE_TIMEOUT_MS=envInt("LENSMCP_KEEPALIVE_TIMEOUT_MS",76e3);

package/executors/gateway/runtime/upgrade.d.ts

@@ -19,4 +19,3 @@ export interface UpgradeDeps {
 }
 export type UpgradeListener = (req: http.IncomingMessage, socket: stream.Duplex, head: Buffer) => void;
 export declare function createUpgrade(deps: UpgradeDeps): UpgradeListener;
-//# sourceMappingURL=upgrade.d.ts.map

package/executors/gateway/runtime/upgrade.js

@@ -1,71 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createUpgrade = createUpgrade;
-const manifest_1 = require("../manifest");
-const discovery_1 = require("./discovery");
-const edge_1 = require("./edge");
-function createUpgrade(deps) {
-    const { rt, auth, proxy, hooks } = deps;
-    const match = (req) => (0, manifest_1.matchRoute)(rt.routes, (req.headers.host || '').split(':')[0], req.url ?? '/');
-    const run = async (req, socket, head) => {
-        for (const h of edge_1.GATEWAY_OWNED_HEADERS)
-            delete req.headers[h];
-        const route = match(req);
-        if (!route) {
-            socket.destroy();
-            return;
-        }
-        const ctx = hooks.upgradeContext(req, socket, undefined);
-        ctx.route = route;
-        if (route.internal) {
-            const v = auth.internal(req, route, undefined);
-            if (!v.ok) {
-                socket.destroy();
-                return;
-            } // no valid key → no internal WS
-            ctx.caller = v.caller;
-        }
-        else {
-            const v = auth.public(req, route, undefined);
-            if (!v.ok) {
-                socket.destroy();
-                return;
-            }
-            ctx.claims = v.claims;
-            // afterAuth (= builtin middleware first, then user hooks) — public branch only
-            if (hooks.has('afterAuth')) {
-                await hooks.run('afterAuth', ctx);
-                if (ctx.responded())
-                    return;
-            }
-        }
-        if (route.pool && rt.serviceKeys[route.project]) {
-            req.headers['x-internal-token'] = rt.serviceKeys[route.project];
-        }
-        if (route.prependPrefix && !req.url?.startsWith(route.prependPrefix)) {
-            req.url = route.prependPrefix + (req.url ?? '/');
-        }
-        if (hooks.has('onUpgrade')) {
-            await hooks.run('onUpgrade', ctx);
-            if (ctx.responded())
-                return;
-        }
-        const target = route.pool
-            ? (() => { const s = (0, discovery_1.pickSock)(route.pool, rt.scanTtlMs); return s ? { socketPath: s } : undefined; })()
-            : route.target;
-        if (!target) {
-            socket.destroy();
-            return;
-        }
-        proxy.proxy.ws(req, socket, head, { target, changeOrigin: !route.pool, agent: proxy.agentForTarget(target) }, () => socket.destroy());
-    };
-    return (req, socket, head) => {
-        // Guard the handed-off socket IMMEDIATELY: on 'upgrade' the http layer removes its OWN listeners,
-        // so until proxy.ws attaches handlers (an `await` away in `run`) a client abort (ECONNRESET — an
-        // HMR socket torn mid-upgrade) would be an unhandled 'error' event → the whole daemon dies. And a
-        // rejection out of `run` (a throwing auth/hook) must likewise cost the ONE socket, never the
-        // process — a floating promise rejection is fatal by default.
-        socket.on('error', () => socket.destroy());
-        run(req, socket, head).catch(() => socket.destroy());
-    };
-}
+"use strict";var v=Object.defineProperty;var p=(i,n)=>v(i,"name",{value:n,configurable:!0});var y=Object.defineProperty,a=p((i,n)=>y(i,"name",{value:n,configurable:!0}),"a");Object.defineProperty(exports,"__esModule",{value:!0}),exports.createUpgrade=createUpgrade;const manifest_1=require("../manifest"),discovery_1=require("./discovery"),edge_1=require("./edge");function createUpgrade(i){const{rt:n,auth:l,proxy:f,hooks:c}=i,h=a(e=>(0,manifest_1.matchRoute)(n.routes,(e.headers.host||"").split(":")[0],e.url??"/"),"match"),g=a(async(e,t,d)=>{for(const o of edge_1.GATEWAY_OWNED_HEADERS)delete e.headers[o];const r=h(e);if(!r){t.destroy();return}const s=c.upgradeContext(e,t,void 0);if(s.route=r,r.internal){const o=l.internal(e,r,void 0);if(!o.ok){t.destroy();return}s.caller=o.caller}else{const o=l.public(e,r,void 0);if(!o.ok){t.destroy();return}if(s.claims=o.claims,c.has("afterAuth")&&(await c.run("afterAuth",s),s.responded()))return}if(r.pool&&n.serviceKeys[r.project]&&(e.headers["x-internal-token"]=n.serviceKeys[r.project]),r.prependPrefix&&!e.url?.startsWith(r.prependPrefix)&&(e.url=r.prependPrefix+(e.url??"/")),c.has("onUpgrade")&&(await c.run("onUpgrade",s),s.responded()))return;const u=r.pool?(()=>{const o=(0,discovery_1.pickSock)(r.pool,n.scanTtlMs);return o?{socketPath:o}:void 0})():r.target;if(!u){t.destroy();return}f.proxy.ws(e,t,d,{target:u,changeOrigin:!r.pool,agent:f.agentForTarget(u)},()=>t.destroy())},"run");return(e,t,d)=>{t.on("error",()=>t.destroy()),g(e,t,d).catch(()=>t.destroy())}}p(createUpgrade,"createUpgrade"),a(createUpgrade,"createUpgrade");

package/executors/gateway/runtime/workspace-registry.d.ts

@@ -37,4 +37,3 @@ export declare function unregisterWorkspace(key: string, file?: string): void;
  * (recycled pids fail the start-time comparison instead of impersonating a live gateway).
  */
 export declare function isWorkspaceLive(entry: Pick<WorkspaceEntry, 'pid' | 'procStamp'>): boolean;
-//# sourceMappingURL=workspace-registry.d.ts.map

package/executors/gateway/runtime/workspace-registry.js

@@ -1,99 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.processStamp = processStamp;
-exports.registryPath = registryPath;
-exports.readWorkspaces = readWorkspaces;
-exports.registerWorkspace = registerWorkspace;
-exports.unregisterWorkspace = unregisterWorkspace;
-exports.isWorkspaceLive = isWorkspaceLive;
-const tslib_1 = require("tslib");
-/**
- * The GLOBAL workspace registry — `~/.lensmcp/workspaces.json`. Each gateway upserts its own workspace
- * on start and drops it on a graceful stop, so the shared landing page at `lensmcp.local/` can list EVERY
- * workspace LensMCP knows about (not just the one whose gateway currently owns :443). It's the persistence
- * seam the multi-workspace daemon (planning/multi-workspace-gateway.md) builds on: today it powers the
- * root chooser; the daemon will read the same file to decide which workspaces to host.
- *
- * Concurrency: read-modify-write, best-effort. Writes are rare (start/stop only) and the file is tiny, so
- * a lost update at most drops one entry from the listing until the next start — never a correctness issue.
- */
-const node_child_process_1 = require("node:child_process");
-const fs = tslib_1.__importStar(require("node:fs"));
-const os = tslib_1.__importStar(require("node:os"));
-const path = tslib_1.__importStar(require("node:path"));
-/**
- * The start-time identity stamp for a pid (`''` when `ps` is unavailable — Windows, restricted
- * environments — or the process is gone). Start time is immutable for the life of a process and
- * survives in no recycled successor, which makes it the cheapest cross-platform-ish identity proof.
- */
-function processStamp(pid) {
-    if (!pid || pid <= 0 || process.platform === 'win32')
-        return '';
-    try {
-        return (0, node_child_process_1.execFileSync)('ps', ['-p', String(pid), '-o', 'lstart='], {
-            encoding: 'utf8',
-            timeout: 2_000,
-            stdio: ['ignore', 'pipe', 'ignore'],
-        }).trim();
-    }
-    catch {
-        return '';
-    }
-}
-/** `~/.lensmcp/workspaces.json` — override the home dir via `LENSMCP_HOME` (tests). */
-function registryPath() {
-    const home = process.env['LENSMCP_HOME'] || os.homedir();
-    return path.join(home, '.lensmcp', 'workspaces.json');
-}
-function readWorkspaces(file = registryPath()) {
-    try {
-        const raw = JSON.parse(fs.readFileSync(file, 'utf8'));
-        if (!Array.isArray(raw))
-            return [];
-        // tolerate partial/corrupt entries — keep only well-formed ones.
-        return raw.filter((e) => !!e && typeof e.key === 'string' && typeof e.base === 'string');
-    }
-    catch {
-        return [];
-    }
-}
-function writeWorkspaces(list, file = registryPath()) {
-    try {
-        fs.mkdirSync(path.dirname(file), { recursive: true });
-        fs.writeFileSync(file, JSON.stringify(list, null, 2));
-    }
-    catch {
-        /* best-effort — a read-only home or a race must never crash the gateway */
-    }
-}
-/** Upsert this workspace (keyed by `key`) — called on gateway start. */
-function registerWorkspace(entry, file = registryPath()) {
-    const list = readWorkspaces(file).filter((e) => e.key !== entry.key);
-    list.push(entry);
-    list.sort((a, b) => a.key.localeCompare(b.key));
-    writeWorkspaces(list, file);
-}
-/** Drop this workspace — called on a graceful gateway stop. */
-function unregisterWorkspace(key, file = registryPath()) {
-    writeWorkspaces(readWorkspaces(file).filter((e) => e.key !== key), file);
-}
-/**
- * Is the gateway that registered this workspace still alive? `process.kill(pid, 0)` throws ESRCH if
- * not — and when the entry carries a `procStamp`, the pid must ALSO still be the SAME process
- * (recycled pids fail the start-time comparison instead of impersonating a live gateway).
- */
-function isWorkspaceLive(entry) {
-    if (!entry.pid || entry.pid <= 0)
-        return false;
-    try {
-        process.kill(entry.pid, 0);
-    }
-    catch (e) {
-        if (e.code !== 'EPERM')
-            return false; // EPERM = exists but not signalable; ESRCH = gone
-    }
-    if (!entry.procStamp)
-        return true; // legacy entry / no-ps platform — pid liveness is all we have
-    const now = processStamp(entry.pid);
-    return now === '' ? true : now === entry.procStamp; // '' = ps unavailable here — don't false-negative
-}
+"use strict";var p=Object.defineProperty;var i=(e,r)=>p(e,"name",{value:r,configurable:!0});var c=Object.defineProperty,s=i((e,r)=>c(e,"name",{value:r,configurable:!0}),"s");Object.defineProperty(exports,"__esModule",{value:!0}),exports.processStamp=processStamp,exports.registryPath=registryPath,exports.readWorkspaces=readWorkspaces,exports.registerWorkspace=registerWorkspace,exports.unregisterWorkspace=unregisterWorkspace,exports.isWorkspaceLive=isWorkspaceLive;const tslib_1=require("tslib"),node_child_process_1=require("node:child_process"),fs=tslib_1.__importStar(require("node:fs")),os=tslib_1.__importStar(require("node:os")),path=tslib_1.__importStar(require("node:path"));function processStamp(e){if(!e||e<=0||process.platform==="win32")return"";try{return(0,node_child_process_1.execFileSync)("ps",["-p",String(e),"-o","lstart="],{encoding:"utf8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim()}catch{return""}}i(processStamp,"processStamp"),s(processStamp,"processStamp");function registryPath(){const e=process.env.LENSMCP_HOME||os.homedir();return path.join(e,".lensmcp","workspaces.json")}i(registryPath,"registryPath"),s(registryPath,"registryPath");function readWorkspaces(e=registryPath()){try{const r=JSON.parse(fs.readFileSync(e,"utf8"));return Array.isArray(r)?r.filter(t=>!!t&&typeof t.key=="string"&&typeof t.base=="string"):[]}catch{return[]}}i(readWorkspaces,"readWorkspaces"),s(readWorkspaces,"readWorkspaces");function writeWorkspaces(e,r=registryPath()){try{fs.mkdirSync(path.dirname(r),{recursive:!0}),fs.writeFileSync(r,JSON.stringify(e,null,2))}catch{}}i(writeWorkspaces,"writeWorkspaces"),s(writeWorkspaces,"writeWorkspaces");function registerWorkspace(e,r=registryPath()){const t=readWorkspaces(r).filter(o=>o.key!==e.key);t.push(e),t.sort((o,n)=>o.key.localeCompare(n.key)),writeWorkspaces(t,r)}i(registerWorkspace,"registerWorkspace"),s(registerWorkspace,"registerWorkspace");function unregisterWorkspace(e,r=registryPath()){writeWorkspaces(readWorkspaces(r).filter(t=>t.key!==e),r)}i(unregisterWorkspace,"unregisterWorkspace"),s(unregisterWorkspace,"unregisterWorkspace");function isWorkspaceLive(e){if(!e.pid||e.pid<=0)return!1;try{process.kill(e.pid,0)}catch(t){if(t.code!=="EPERM")return!1}if(!e.procStamp)return!0;const r=processStamp(e.pid);return r===""?!0:r===e.procStamp}i(isWorkspaceLive,"isWorkspaceLive"),s(isWorkspaceLive,"isWorkspaceLive");

package/executors/gateway/ssrf-guard.d.ts

@@ -94,4 +94,3 @@ type LookupCallback = (err: NodeJS.ErrnoException | null, address?: string | Loo
  */
 export declare function pinnedLookup(addresses: readonly string[]): (hostname: string, options: unknown, callback?: LookupCallback) => void;
 export {};
-//# sourceMappingURL=ssrf-guard.d.ts.map

package/executors/gateway/ssrf-guard.js

@@ -1,190 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SsrfBlockedError = void 0;
-exports.isBlockedAddress = isBlockedAddress;
-exports.assertFetchableUrl = assertFetchableUrl;
-exports.safeFetch = safeFetch;
-exports.pinnedLookup = pinnedLookup;
-/**
- * SSRF guard for OUTBOUND fetches of a request- or config-supplied URL.
- *
- * The prod gateway today never fetches an attacker-controlled URL — upstreams
- * are pinned in the manifest, the JWKS URL is operator env, and reply-from /
- * undici do not chase redirects. This module exists so that the MOMENT a sink
- * IS added (a remote-MCP / OpenAPI schema import, a webhook callback, a
- * dynamically-discovered upstream — anything that fetches a URL it did not
- * author) there is a ready, tested guard to wrap it with, instead of a naive
- * `if (host === '127.0.0.1')` string check that the classic bypasses defeat.
- *
- * It defends the three canonical bypasses:
- *   1. DNS name that RESOLVES to an internal IP (`127.0.0.1.nip.io`, rebinding)
- *      → we resolve the host and check the RESOLVED addresses, not the string.
- *   2. Redirect chase (`/redirect` 3xx → loopback) → `safeFetch` re-validates
- *      EVERY hop with `redirect:'manual'`; it never blindly follows a Location.
- *   3. IPv4-mapped IPv6 loopback (`[::ffff:127.0.0.1]`, `[::ffff:7f00:1]`) →
- *      `net.BlockList` normalizes mapped forms against the IPv4 rules.
- *
- * Residual TOCTOU: between the resolve-and-check and the socket connect, a
- * rebinding resolver could flip the record. Close it by pinning the connection
- * to the validated address(es) with `pinnedLookup()` (pass to
- * `new http.Agent({ lookup })` or an undici `connect:{ lookup }` dispatcher).
- *
- * Defaults are operator-overridable but FAIL CLOSED: anything unparseable, any
- * non-http(s) scheme, embedded credentials, an empty host, or a host that
- * resolves to no records is rejected.
- */
-const node_net_1 = require("node:net");
-const promises_1 = require("node:dns/promises");
-/** Thrown for every blocked URL — carries a machine-readable `reason` and, when
- *  the block was an address, the offending `address` (the resolved IP, not the
- *  hostname, so logs show what the name actually pointed at). */
-class SsrfBlockedError extends Error {
-    constructor(reason, url, address, cause) {
-        super(`SSRF guard blocked ${url ?? 'request'}: ${reason}${address ? ` (${address})` : ''}`, cause !== undefined ? { cause } : undefined);
-        this.name = 'SsrfBlockedError';
-        this.reason = reason;
-        this.url = url;
-        this.address = address;
-    }
-}
-exports.SsrfBlockedError = SsrfBlockedError;
-/** The internal / non-routable ranges an outbound fetch must never reach.
- *  Mapped IPv4-in-IPv6 (`::ffff:a.b.c.d`) is matched by the IPv4 rules — verified
- *  in the spec — so we do NOT blanket-block `::ffff:0:0/96` (mapped *public*
- *  IPv4 is legitimate). */
-function buildDefaultBlockList() {
-    const b = new node_net_1.BlockList();
-    // ── IPv4 ──
-    b.addSubnet('0.0.0.0', 8, 'ipv4'); // "this host" / 0.0.0.0
-    b.addSubnet('10.0.0.0', 8, 'ipv4'); // RFC1918 private
-    b.addSubnet('100.64.0.0', 10, 'ipv4'); // RFC6598 CGNAT
-    b.addSubnet('127.0.0.0', 8, 'ipv4'); // loopback
-    b.addSubnet('169.254.0.0', 16, 'ipv4'); // link-local incl. cloud metadata 169.254.169.254
-    b.addSubnet('172.16.0.0', 12, 'ipv4'); // RFC1918 private (172.16–172.31)
-    b.addSubnet('192.0.0.0', 24, 'ipv4'); // IETF protocol assignments
-    b.addSubnet('192.168.0.0', 16, 'ipv4'); // RFC1918 private
-    b.addSubnet('198.18.0.0', 15, 'ipv4'); // benchmarking
-    b.addSubnet('240.0.0.0', 4, 'ipv4'); // reserved + 255.255.255.255 broadcast
-    // ── IPv6 ──
-    b.addAddress('::', 'ipv6'); // unspecified
-    b.addAddress('::1', 'ipv6'); // loopback
-    b.addSubnet('fc00::', 7, 'ipv6'); // unique-local (ULA)
-    b.addSubnet('fe80::', 10, 'ipv6'); // link-local
-    return b;
-}
-const DEFAULT_BLOCK_LIST = buildDefaultBlockList();
-/** True if `ip` (a literal address) falls in a blocked range. Mapped IPv6 is
- *  normalized by BlockList; an unparseable string is treated as blocked. */
-function isBlockedAddress(ip, blockList = DEFAULT_BLOCK_LIST) {
-    const fam = (0, node_net_1.isIP)(ip);
-    if (fam === 0)
-        return true; // not an IP → fail closed
-    return blockList.check(ip, fam === 6 ? 'ipv6' : 'ipv4');
-}
-const stripBrackets = (host) => host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
-const defaultResolve = async (host) => (await (0, promises_1.lookup)(host, { all: true, verbatim: true })).map((r) => r.address);
-/**
- * Validate that `rawUrl` is safe to fetch. Rejects (throws `SsrfBlockedError`)
- * a malformed URL, a disallowed scheme, embedded credentials, a missing host,
- * a literal internal IP, or a host that resolves to ANY internal address.
- * Returns the parsed URL and the validated address set on success.
- */
-async function assertFetchableUrl(rawUrl, opts = {}) {
-    const protocols = opts.allowedProtocols ?? ['http:', 'https:'];
-    let url;
-    try {
-        url = new URL(rawUrl);
-    }
-    catch {
-        throw new SsrfBlockedError('malformed-url', String(rawUrl));
-    }
-    if (!protocols.includes(url.protocol)) {
-        throw new SsrfBlockedError(`scheme-not-allowed:${url.protocol}`, url.href);
-    }
-    if (url.username !== '' || url.password !== '') {
-        throw new SsrfBlockedError('embedded-credentials', url.href);
-    }
-    const hostname = stripBrackets(url.hostname);
-    if (hostname === '')
-        throw new SsrfBlockedError('missing-host', url.href);
-    if (opts.allowPrivate) {
-        return { url, hostname, addresses: (0, node_net_1.isIP)(hostname) ? [hostname] : [] };
-    }
-    const blockList = opts.blockList ?? DEFAULT_BLOCK_LIST;
-    // Literal IP (covers IPv4, IPv6, and IPv4-mapped IPv6 like [::ffff:127.0.0.1]).
-    if ((0, node_net_1.isIP)(hostname) !== 0) {
-        if (isBlockedAddress(hostname, blockList)) {
-            throw new SsrfBlockedError('blocked-address', url.href, hostname);
-        }
-        return { url, hostname, addresses: [hostname] };
-    }
-    // DNS name → resolve and check EVERY record (defeats nip.io / rebinding).
-    const resolve = opts.resolve ?? defaultResolve;
-    let addresses;
-    try {
-        addresses = await resolve(hostname);
-    }
-    catch (e) {
-        throw new SsrfBlockedError('dns-resolution-failed', url.href, undefined, e);
-    }
-    if (addresses.length === 0)
-        throw new SsrfBlockedError('dns-no-records', url.href);
-    for (const addr of addresses) {
-        if (isBlockedAddress(addr, blockList)) {
-            throw new SsrfBlockedError('blocked-resolved-address', url.href, addr);
-        }
-    }
-    return { url, hostname, addresses };
-}
-/**
- * A `fetch` that validates the target — and re-validates every redirect hop —
- * with the SSRF guard. Redirects are handled manually (`redirect:'manual'`) so
- * a 3xx Location to an internal host is checked BEFORE it is followed, never
- * chased blindly. Returns the final non-redirect `Response`.
- *
- * Note: each hop re-issues with the original `init` (method + body preserved —
- * the security-relevant worst case for 307/308). A streamed request body cannot
- * be replayed across hops.
- */
-async function safeFetch(rawUrl, init = {}, opts = {}) {
-    const doFetch = opts.fetchImpl ?? globalThis.fetch;
-    const maxRedirects = opts.maxRedirects ?? 5;
-    let current = rawUrl;
-    for (let hop = 0;; hop++) {
-        const { url } = await assertFetchableUrl(current, opts); // re-validate THIS hop
-        const res = await doFetch(url, { ...init, redirect: 'manual' });
-        const location = res.headers.get('location');
-        if (res.status >= 300 && res.status < 400 && location) {
-            if (hop >= maxRedirects)
-                throw new SsrfBlockedError('too-many-redirects', url.href);
-            current = new URL(location, url).href; // resolve relative; loop re-validates next hop
-            continue;
-        }
-        return res;
-    }
-}
-/**
- * A `dns.lookup`-compatible function that ONLY ever returns the pre-validated
- * `addresses`. Pass it to `new http.Agent({ lookup })` or an undici
- * `connect:{ lookup }` dispatcher so the socket connects to an address the
- * guard already cleared — closing the DNS-rebinding TOCTOU between check and
- * connect. Use the `addresses` from `assertFetchableUrl()`.
- */
-function pinnedLookup(addresses) {
-    const recs = addresses.map((address) => ({
-        address,
-        family: (0, node_net_1.isIP)(address) === 6 ? 6 : 4,
-    }));
-    return (hostname, options, callback) => {
-        const cb = (typeof options === 'function' ? options : callback);
-        const all = typeof options === 'object' && options !== null && options.all === true;
-        if (recs.length === 0) {
-            cb(new Error(`SSRF guard: no pinned address for ${hostname}`));
-            return;
-        }
-        if (all)
-            cb(null, recs);
-        else
-            cb(null, recs[0].address, recs[0].family);
-    };
-}
+"use strict";var h=Object.defineProperty;var l=(e,t)=>h(e,"name",{value:t,configurable:!0});var u=Object.defineProperty,i=l((e,t)=>u(e,"name",{value:t,configurable:!0}),"i");Object.defineProperty(exports,"__esModule",{value:!0}),exports.SsrfBlockedError=void 0,exports.isBlockedAddress=isBlockedAddress,exports.assertFetchableUrl=assertFetchableUrl,exports.safeFetch=safeFetch,exports.pinnedLookup=pinnedLookup;const node_net_1=require("node:net"),promises_1=require("node:dns/promises");class SsrfBlockedError extends Error{static{l(this,"SsrfBlockedError")}static{i(this,"SsrfBlockedError")}constructor(t,o,s,r){super(`SSRF guard blocked ${o??"request"}: ${t}${s?` (${s})`:""}`,r!==void 0?{cause:r}:void 0),this.name="SsrfBlockedError",this.reason=t,this.url=o,this.address=s}}exports.SsrfBlockedError=SsrfBlockedError;function buildDefaultBlockList(){const e=new node_net_1.BlockList;return e.addSubnet("0.0.0.0",8,"ipv4"),e.addSubnet("10.0.0.0",8,"ipv4"),e.addSubnet("100.64.0.0",10,"ipv4"),e.addSubnet("127.0.0.0",8,"ipv4"),e.addSubnet("169.254.0.0",16,"ipv4"),e.addSubnet("172.16.0.0",12,"ipv4"),e.addSubnet("192.0.0.0",24,"ipv4"),e.addSubnet("192.168.0.0",16,"ipv4"),e.addSubnet("198.18.0.0",15,"ipv4"),e.addSubnet("240.0.0.0",4,"ipv4"),e.addAddress("::","ipv6"),e.addAddress("::1","ipv6"),e.addSubnet("fc00::",7,"ipv6"),e.addSubnet("fe80::",10,"ipv6"),e}l(buildDefaultBlockList,"buildDefaultBlockList"),i(buildDefaultBlockList,"buildDefaultBlockList");const DEFAULT_BLOCK_LIST=buildDefaultBlockList();function isBlockedAddress(e,t=DEFAULT_BLOCK_LIST){const o=(0,node_net_1.isIP)(e);return o===0?!0:t.check(e,o===6?"ipv6":"ipv4")}l(isBlockedAddress,"isBlockedAddress"),i(isBlockedAddress,"isBlockedAddress");const stripBrackets=i(e=>e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,"stripBrackets"),defaultResolve=i(async e=>(await(0,promises_1.lookup)(e,{all:!0,verbatim:!0})).map(t=>t.address),"defaultResolve");async function assertFetchableUrl(e,t={}){const o=t.allowedProtocols??["http:","https:"];let s;try{s=new URL(e)}catch{throw new SsrfBlockedError("malformed-url",String(e))}if(!o.includes(s.protocol))throw new SsrfBlockedError(`scheme-not-allowed:${s.protocol}`,s.href);if(s.username!==""||s.password!=="")throw new SsrfBlockedError("embedded-credentials",s.href);const r=stripBrackets(s.hostname);if(r==="")throw new SsrfBlockedError("missing-host",s.href);if(t.allowPrivate)return{url:s,hostname:r,addresses:(0,node_net_1.isIP)(r)?[r]:[]};const d=t.blockList??DEFAULT_BLOCK_LIST;if((0,node_net_1.isIP)(r)!==0){if(isBlockedAddress(r,d))throw new SsrfBlockedError("blocked-address",s.href,r);return{url:s,hostname:r,addresses:[r]}}const c=t.resolve??defaultResolve;let a;try{a=await c(r)}catch(n){throw new SsrfBlockedError("dns-resolution-failed",s.href,void 0,n)}if(a.length===0)throw new SsrfBlockedError("dns-no-records",s.href);for(const n of a)if(isBlockedAddress(n,d))throw new SsrfBlockedError("blocked-resolved-address",s.href,n);return{url:s,hostname:r,addresses:a}}l(assertFetchableUrl,"assertFetchableUrl"),i(assertFetchableUrl,"assertFetchableUrl");async function safeFetch(e,t={},o={}){const s=o.fetchImpl??globalThis.fetch,r=o.maxRedirects??5;let d=e;for(let c=0;;c++){const{url:a}=await assertFetchableUrl(d,o),n=await s(a,{...t,redirect:"manual"}),f=n.headers.get("location");if(n.status>=300&&n.status<400&&f){if(c>=r)throw new SsrfBlockedError("too-many-redirects",a.href);d=new URL(f,a).href;continue}return n}}l(safeFetch,"safeFetch"),i(safeFetch,"safeFetch");function pinnedLookup(e){const t=e.map(o=>({address:o,family:(0,node_net_1.isIP)(o)===6?6:4}));return(o,s,r)=>{const d=typeof s=="function"?s:r,c=typeof s=="object"&&s!==null&&s.all===!0;if(t.length===0){d(new Error(`SSRF guard: no pinned address for ${o}`));return}c?d(null,t):d(null,t[0].address,t[0].family)}}l(pinnedLookup,"pinnedLookup"),i(pinnedLookup,"pinnedLookup");

package/executors/serve/serve.impl.d.ts

@@ -22,4 +22,3 @@ declare function serveExecutor(options: ServeExecutorSchema, context: ExecutorCo
     baseUrl?: string;
 }>;
 export default serveExecutor;
-//# sourceMappingURL=serve.impl.d.ts.map