@smthrs/platform-node 0.0.0-stage → 1.0.0-rc.4

package/dist/esm/EgressHttpClient.d.ts

@@ -0,0 +1,106 @@
+/**
+ * The outbound HTTP client a Node process should use, read off its environment.
+ *
+ * `@effect/platform-node` ships `NodeHttpClient.layerUndici`, and its
+ * dispatcher is a bare Undici `Agent`. A bare `Agent` dials every origin
+ * directly: it does not read `HTTP_PROXY`, `HTTPS_PROXY` or `NO_PROXY`, and
+ * nothing at the call site says so. That is invisible on a developer machine
+ * with open egress and fatal inside a sandbox whose egress is default-deny
+ * behind a named proxy — the request leaves for the origin, the firewall drops
+ * it, and the only symptom is a transport failure far from the composition
+ * that chose the client.
+ *
+ * This module is the one place that decision is made. {@link layer} is the
+ * client every Node host composition installs; it honours the proxy the
+ * environment names. Requests without a web destination use a shared pool;
+ * web requests receive a fresh pinned dispatcher.
+ *
+ * The rule for loopback is fixed here, not by the environment: `localhost`,
+ * `127.0.0.1` and `[::1]` are always reached directly, even when the
+ * environment names a proxy and no exclusion, and every other origin follows
+ * `NO_PROXY`. A proxy is how a process leaves its machine, and
+ * `--remote http://127.0.0.1:3000` is not leaving it. The exemption is those
+ * three names and nothing wider: Undici matches `NO_PROXY` entries by name,
+ * never by resolved address, so `127.0.0.2` or a hostname that resolves to
+ * loopback is an origin like any other and goes through the proxy.
+ *
+ * @since 1.0.0-rc.0
+ */
+import type * as Undici from "../vendor/node/Undici.js";
+import { GrantStore } from "@smthrs/kernel/GrantStore";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Schema from "effect/Schema";
+import * as Scope from "effect/Scope";
+import { HttpClient } from "effect/unstable/http/HttpClient";
+declare const EgressAddressError_base: Schema.Class<EgressAddressError, Schema.TaggedStruct<"@smthrs/platform-node/EgressAddressError", {
+    readonly code: Schema.Literal<"no_approved_address">;
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A pinned connection asked for an address family none of the authorized
+ * addresses has. It is the `cause` of the `TransportError` the request fails
+ * with; `code` is always `no_approved_address`.
+ *
+ * @category errors
+ * @since 1.0.0
+ */
+export declare class EgressAddressError extends EgressAddressError_base {
+    readonly name = "EgressAddressError";
+}
+/**
+ * An Undici dispatcher that routes through the egress proxy the supplied
+ * environment names, or a direct one when it names none.
+ *
+ * The proxy variables are read in the order Undici itself reads them,
+ * lowercase first, and passed explicitly rather than left to
+ * `EnvHttpProxyAgent`'s own ambient lookup: a host serving a guest's
+ * environment is not the guest, and the pool has to follow the record it was
+ * handed. Loopback is always direct; see {@link exclusions}. Each dispatcher is
+ * acquired in the caller's scope and destroyed with it, so a composition that
+ * builds several still owns every pool it opened.
+ *
+ * @param environment the environment record whose proxy variables decide the route
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export declare const dispatcher: (environment: Readonly<Record<string, string | undefined>>) => Effect.Effect<Undici.Dispatcher, never, Scope.Scope>;
+/**
+ * The Undici `HttpClient` to install, given the environment the process runs in.
+ *
+ * Use this wherever `NodeHttpClient.layerUndici` would otherwise be provided
+ * under a layer that takes `HttpClient` from context — a model transport, a
+ * judge, a fetch rule, a host bundle. The two differ only in whether the pool
+ * honours `HTTP_PROXY`/`HTTPS_PROXY`/`NO_PROXY`, which is the difference
+ * between a request that reaches the gateway from inside a default-deny
+ * sandbox and one the firewall drops.
+ *
+ * @param environment the environment record whose proxy variables decide the route
+ * @category layers
+ * @since 1.0.0-rc.0
+ */
+export declare const layer: (environment: Readonly<Record<string, string | undefined>>) => Layer.Layer<HttpClient>;
+/**
+ * Owns one replaceable Undici pool in the caller's scope. Each replacement
+ * receives the same middleware and closes the previous pool.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const rebuildableTransport: (acquire: Effect.Effect<Undici.Dispatcher, never, Scope.Scope>, decorate?: (client: HttpClient) => Effect.Effect<HttpClient>) => Effect.Effect<{
+    readonly client: HttpClient;
+    readonly rebuild: Effect.Effect<HttpClient>;
+}, never, Scope.Scope>;
+/**
+ * A model transport whose replacements retain the caller's grant store and
+ * environment proxy policy. Pass it to RequestExecutor.makeWith in the host scope.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export declare const guardedTransport: (environment: Readonly<Record<string, string | undefined>>) => Effect.Effect<{
+    readonly client: HttpClient;
+    readonly rebuild: Effect.Effect<HttpClient>;
+}, never, GrantStore | Scope.Scope>;
+export {};
+//# sourceMappingURL=EgressHttpClient.d.ts.map

package/dist/esm/EgressHttpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EgressHttpClient.d.ts","sourceRoot":"","sources":["../../src/EgressHttpClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,KAAK,MAAM,MAAM,8BAA8B,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAGtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;;;;;AAM5D;;;;;;;GAOG;AACH,qBAAa,kBAAmB,SAAQ,uBAGvC;IACC,SAAkB,IAAI,wBAAuB;CAC9C;AAoCD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,UAAU,GACrB,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KACxD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAsBlD,CAAA;AAEJ;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,KAAK,GAChB,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,KACxD,KAAK,CAAC,KAAK,CAAC,UAAU,CAqHtB,CAAA;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,GAC/B,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAC7D,WAAU,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,CAAkB,KAC3E,MAAM,CAAC,MAAM,CACd;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;CAC5C,EACD,KAAK,EACL,KAAK,CAAC,KAAK,CAqBT,CAAA;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,aAAa,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;qBAlCrE,UAAU;sBACT,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;mCAyC3C,CAAA"}

package/dist/esm/EgressHttpClient.js

@@ -0,0 +1,259 @@
+/**
+ * The outbound HTTP client a Node process should use, read off its environment.
+ *
+ * `@effect/platform-node` ships `NodeHttpClient.layerUndici`, and its
+ * dispatcher is a bare Undici `Agent`. A bare `Agent` dials every origin
+ * directly: it does not read `HTTP_PROXY`, `HTTPS_PROXY` or `NO_PROXY`, and
+ * nothing at the call site says so. That is invisible on a developer machine
+ * with open egress and fatal inside a sandbox whose egress is default-deny
+ * behind a named proxy — the request leaves for the origin, the firewall drops
+ * it, and the only symptom is a transport failure far from the composition
+ * that chose the client.
+ *
+ * This module is the one place that decision is made. {@link layer} is the
+ * client every Node host composition installs; it honours the proxy the
+ * environment names. Requests without a web destination use a shared pool;
+ * web requests receive a fresh pinned dispatcher.
+ *
+ * The rule for loopback is fixed here, not by the environment: `localhost`,
+ * `127.0.0.1` and `[::1]` are always reached directly, even when the
+ * environment names a proxy and no exclusion, and every other origin follows
+ * `NO_PROXY`. A proxy is how a process leaves its machine, and
+ * `--remote http://127.0.0.1:3000` is not leaving it. The exemption is those
+ * three names and nothing wider: Undici matches `NO_PROXY` entries by name,
+ * never by resolved address, so `127.0.0.2` or a hostname that resolves to
+ * loopback is an origin like any other and goes through the proxy.
+ *
+ * @since 1.0.0-rc.0
+ */
+import * as NodeHttpClient from "../vendor/node/NodeHttpClient.js";
+import { GrantStore } from "@smthrs/kernel/GrantStore";
+import * as KernelHttpClient from "@smthrs/kernel/HttpClient";
+import { Destination, withDestinationPinning } from "@smthrs/kernel/HttpClient";
+import * as Effect from "effect/Effect";
+import * as Exit from "effect/Exit";
+import * as Layer from "effect/Layer";
+import * as Schema from "effect/Schema";
+import * as Scope from "effect/Scope";
+import * as Semaphore from "effect/Semaphore";
+import { HttpClient } from "effect/unstable/http/HttpClient";
+import * as EffectHttpClient from "effect/unstable/http/HttpClient";
+import * as HttpClientError from "effect/unstable/http/HttpClientError";
+import * as HttpClientRequest from "effect/unstable/http/HttpClientRequest";
+import { isIP } from "node:net";
+/**
+ * A pinned connection asked for an address family none of the authorized
+ * addresses has. It is the `cause` of the `TransportError` the request fails
+ * with; `code` is always `no_approved_address`.
+ *
+ * @category errors
+ * @since 1.0.0
+ */
+export class EgressAddressError extends Schema.TaggedError()("@smthrs/platform-node/EgressAddressError", { code: Schema.Literal("no_approved_address"), message: Schema.String }) {
+    name = "EgressAddressError";
+}
+/**
+ * The hosts a proxy is never for. A proxy is how a process leaves its machine;
+ * these names are the machine itself. Matched by name, the way Undici matches
+ * every `NO_PROXY` entry, so the list is exactly these three and not
+ * `127.0.0.0/8`.
+ */
+const loopback = ["localhost", "127.0.0.1", "::1"];
+/**
+ * The exclusion list to hand Undici, given the one the environment names.
+ *
+ * Undici proxies *every* origin when `NO_PROXY` is empty — `#shouldProxy`
+ * returns early with "Always proxy if NO_PROXY is not set or empty" — so a host
+ * that names a proxy to reach the internet would also send `smthrs --remote
+ * http://127.0.0.1:3000` and a local Ollama at `http://localhost:11434` to it.
+ * Nothing in this repository has ever needed `NO_PROXY=127.0.0.1`, because the
+ * client these compositions used before ignored the proxy variables outright.
+ * So loopback is always excluded, the way Go's `net/http.ProxyFromEnvironment`
+ * excludes it, and the environment's own entries are kept beside it.
+ *
+ * `*` is returned untouched: Undici recognises the wildcard only as the entire
+ * value, and it already means every origin is direct.
+ */
+const exclusions = (declared) => declared === "*" ? declared : [declared, ...loopback].filter((entry) => entry !== "").join(",");
+// Split ESM bundles expose CommonJS Undici through default, without synthetic
+// named exports. Node and Bun also expose its constructors through default.
+// Its typings declare `default` as a namespace without them, and `bundler`
+// resolution reads that, so the value is typed as the module it carries.
+const loadUndici = Effect.promise(async () => (await import("undici/index.js")).default);
+/**
+ * An Undici dispatcher that routes through the egress proxy the supplied
+ * environment names, or a direct one when it names none.
+ *
+ * The proxy variables are read in the order Undici itself reads them,
+ * lowercase first, and passed explicitly rather than left to
+ * `EnvHttpProxyAgent`'s own ambient lookup: a host serving a guest's
+ * environment is not the guest, and the pool has to follow the record it was
+ * handed. Loopback is always direct; see {@link exclusions}. Each dispatcher is
+ * acquired in the caller's scope and destroyed with it, so a composition that
+ * builds several still owns every pool it opened.
+ *
+ * @param environment the environment record whose proxy variables decide the route
+ * @category constructors
+ * @since 1.0.0-rc.0
+ */
+export const dispatcher = (environment) => Effect.suspend(() => {
+    const httpProxy = environment.http_proxy ?? environment.HTTP_PROXY ?? "";
+    const httpsProxy = environment.https_proxy ?? environment.HTTPS_PROXY ?? "";
+    const noProxy = exclusions(environment.no_proxy ?? environment.NO_PROXY ?? "");
+    // Explicit empty values prevent Undici from falling back to a different
+    // ambient environment. Each replacement pool uses the same proxy policy.
+    //
+    // Undici is loaded here rather than imported at the top, the way
+    // `NodeHttpClient.makeDispatcher` loads it, because this module is imported
+    // by `NodeHost` and every bundle built on it. A static import pulls the
+    // whole of Undici into any process that merely composes a host, whose
+    // side effects a host bundle must not carry: it reddened the Node host's
+    // own `FileSystem` contract case, which never makes a request. The explicit
+    // package entry also avoids Bun's incomplete built-in "undici" substitute.
+    return Effect.acquireRelease(Effect.map(loadUndici, (undici) => new undici.EnvHttpProxyAgent({ httpProxy, httpsProxy, noProxy })), (dispatcher) => Effect.promise(() => dispatcher.destroy()));
+});
+/**
+ * The Undici `HttpClient` to install, given the environment the process runs in.
+ *
+ * Use this wherever `NodeHttpClient.layerUndici` would otherwise be provided
+ * under a layer that takes `HttpClient` from context — a model transport, a
+ * judge, a fetch rule, a host bundle. The two differ only in whether the pool
+ * honours `HTTP_PROXY`/`HTTPS_PROXY`/`NO_PROXY`, which is the difference
+ * between a request that reaches the gateway from inside a default-deny
+ * sandbox and one the firewall drops.
+ *
+ * @param environment the environment record whose proxy variables decide the route
+ * @category layers
+ * @since 1.0.0-rc.0
+ */
+export const layer = (environment) => Layer.effect(HttpClient, Effect.gen(function* () {
+    const shared = yield* dispatcher(environment);
+    const ordinary = yield* NodeHttpClient.makeUndici.pipe(Effect.provideService(NodeHttpClient.Dispatcher, shared));
+    return withDestinationPinning(EffectHttpClient.transform(ordinary, (execute, request) => Effect.gen(function* () {
+        const destination = yield* Destination;
+        if (destination === undefined)
+            return yield* execute;
+        const url = new URL(request.url);
+        if (url.origin !== destination.origin || destination.addresses.length === 0 ||
+            destination.addresses.some((address) => isIP(address) === 0)) {
+            return yield* Effect.fail(new HttpClientError.HttpClientError({
+                reason: new HttpClientError.TransportError({
+                    request,
+                    description: "Invalid pinned HTTP destination"
+                })
+            }));
+        }
+        const proxies = [
+            environment.http_proxy ?? environment.HTTP_PROXY,
+            environment.https_proxy ?? environment.HTTPS_PROXY
+        ];
+        // The record is read per request, and a live one such as NodeHost's
+        // `process.env` can name an unparsable proxy after the shared pool
+        // was built from it; that is a refusal here, never a thrown URL error.
+        const validProxies = proxies.every((proxy) => {
+            if (!proxy)
+                return true;
+            try {
+                return ["http:", "https:"].includes(new URL(proxy).protocol);
+            }
+            catch {
+                return false;
+            }
+        });
+        if (!validProxies) {
+            return yield* Effect.fail(new HttpClientError.HttpClientError({
+                reason: new HttpClientError.TransportError({
+                    request,
+                    description: "Pinned HTTP requests require HTTP or HTTPS proxies"
+                })
+            }));
+        }
+        const undici = yield* loadUndici;
+        const addresses = destination.addresses.map((address) => ({ address, family: isIP(address) }));
+        // Construction and its disposal are one uninterruptible step: an
+        // interruption that lands after the agent exists but before the request
+        // owns it would otherwise leave the agent neither destroyed nor closed.
+        return yield* Effect.uninterruptibleMask((restore) => {
+            const pinned = new undici.EnvHttpProxyAgent({
+                httpProxy: environment.http_proxy ?? environment.HTTP_PROXY ?? "",
+                httpsProxy: environment.https_proxy ?? environment.HTTPS_PROXY ?? "",
+                noProxy: exclusions(environment.no_proxy ?? environment.NO_PROXY ?? ""),
+                // Tunnelling HTTP too prevents the proxy resolving the target hostname.
+                proxyTunnel: true,
+                connect: {
+                    lookup: (_hostname, options, callback) => {
+                        const candidates = options.family
+                            ? addresses.filter((item) => item.family === options.family)
+                            : addresses;
+                        const first = candidates[0];
+                        if (first === undefined) {
+                            return callback(new EgressAddressError({
+                                code: "no_approved_address",
+                                message: "No approved address for family"
+                            }), "", 4);
+                        }
+                        if (options.all)
+                            callback(null, candidates);
+                        else
+                            callback(null, first.address, first.family);
+                    }
+                },
+                clientFactory: (origin, options) => {
+                    const proxy = new undici.Pool(origin, options);
+                    const connect = proxy.connect.bind(proxy);
+                    // EnvHttpProxyAgent selects the route using the ORIGINAL hostname.
+                    // Only the proxy tunnel destination changes; endpoint TLS still uses
+                    // the original hostname for SNI and certificate verification.
+                    proxy.connect = (options) => {
+                        const address = addresses[0].address;
+                        const host = isIP(address) === 6 ? `[${address}]` : address;
+                        const authority = `${host}:${url.port || (url.protocol === "https:" ? "443" : "80")}`;
+                        return connect({ ...options, path: authority, headers: { ...options.headers, host: authority } });
+                    };
+                    return proxy;
+                }
+            });
+            const pinnedRequest = request.pipe(HttpClientRequest.setHeader("host", url.host), HttpClientRequest.removeHeader("proxy-authorization"), HttpClientRequest.removeHeader("connection"), HttpClientRequest.removeHeader("transfer-encoding"), HttpClientRequest.removeHeader("content-length"));
+            return restore(NodeHttpClient.makeUndici.pipe(Effect.provideService(NodeHttpClient.Dispatcher, pinned), Effect.flatMap((client) => client.execute(pinnedRequest)))).pipe(Effect.onExit((exit) => Exit.isFailure(exit)
+                ? Effect.promise(() => pinned.destroy())
+                // close prevents reuse immediately, but lets the active body drain.
+                : Effect.sync(() => {
+                    void pinned.close().catch(() => pinned.destroy());
+                })));
+        });
+    })));
+}));
+/**
+ * Owns one replaceable Undici pool in the caller's scope. Each replacement
+ * receives the same middleware and closes the previous pool.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export const rebuildableTransport = (acquire, decorate = Effect.succeed) => Effect.gen(function* () {
+    const scope = yield* Scope.Scope;
+    const gate = yield* Semaphore.make(1);
+    let held = undefined;
+    const rebuild = gate.withPermit(Effect.uninterruptibleMask((restore) => Effect.gen(function* () {
+        const owned = yield* Scope.fork(scope);
+        const client = yield* restore(NodeHttpClient.makeUndici.pipe(Effect.provideServiceEffect(NodeHttpClient.Dispatcher, acquire), Effect.flatMap(decorate), Effect.provideService(Scope.Scope, owned))).pipe(Effect.onExit((exit) => Exit.isSuccess(exit) ? Effect.void : Scope.close(owned, exit)));
+        const previous = held;
+        held = owned;
+        if (previous !== undefined)
+            yield* Scope.close(previous, Exit.void);
+        return client;
+    })));
+    return { client: yield* rebuild, rebuild };
+});
+/**
+ * A model transport whose replacements retain the caller's grant store and
+ * environment proxy policy. Pass it to RequestExecutor.makeWith in the host scope.
+ *
+ * @category constructors
+ * @since 1.0.0
+ */
+export const guardedTransport = (environment) => Effect.gen(function* () {
+    const grants = yield* GrantStore;
+    return yield* rebuildableTransport(dispatcher(environment), (client) => HttpClient.pipe(Effect.provide(KernelHttpClient.layer.pipe(Layer.provide(Layer.succeed(HttpClient)(client)), Layer.provide(Layer.succeed(GrantStore)(grants))))));
+});
+//# sourceMappingURL=EgressHttpClient.js.map

package/dist/esm/EgressHttpClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EgressHttpClient.js","sourceRoot":"","sources":["../../src/EgressHttpClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,cAAc,MAAM,sCAAsC,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,gBAAgB,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAA;AAC/E,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAC5D,OAAO,KAAK,gBAAgB,MAAM,iCAAiC,CAAA;AACnE,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAA;AACvE,OAAO,KAAK,iBAAiB,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B;;;;;;;GAOG;AACH,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAC9E,0CAA0C,EAC1C,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CACxE;IACmB,IAAI,GAAG,oBAAoB,CAAA;CAC9C;AAED;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAU,CAAA;AAE3D;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAU,EAAE,CAC9C,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAEjG,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAC/B,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAmC,CAClF,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,WAAyD,EACH,EAAE,CACxD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU,IAAI,EAAE,CAAA;IACxE,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,IAAI,EAAE,CAAA;IAC3E,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;IAC9E,wEAAwE;IACxE,yEAAyE;IACzE,EAAE;IACF,iEAAiE;IACjE,4EAA4E;IAC5E,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,OAAO,MAAM,CAAC,cAAc,CAC1B,MAAM,CAAC,GAAG,CACR,UAAU,EACV,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAC7E,EACD,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAC3D,CAAA;AACH,CAAC,CAAC,CAAA;AAEJ;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,WAAyD,EAChC,EAAE,CAC3B,KAAK,CAAC,MAAM,CACV,UAAU,EACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;IAChH,OAAO,sBAAsB,CAAC,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACtF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAA;QACtC,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,OAAO,CAAA;QACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,IACE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YACvE,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAC5D,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,eAAe,CAAC,eAAe,CAAC;gBAClC,MAAM,EAAE,IAAI,eAAe,CAAC,cAAc,CAAC;oBACzC,OAAO;oBACP,WAAW,EAAE,iCAAiC;iBAC/C,CAAC;aACH,CAAC,CACH,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG;YACd,WAAW,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU;YAChD,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW;SACnD,CAAA;QACD,oEAAoE;QACpE,mEAAmE;QACnE,uEAAuE;QACvE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YAC3C,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAA;YACvB,IAAI,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAA;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,eAAe,CAAC,eAAe,CAAC;gBAClC,MAAM,EAAE,IAAI,eAAe,CAAC,cAAc,CAAC;oBACzC,OAAO;oBACP,WAAW,EAAE,oDAAoD;iBAClE,CAAC;aACH,CAAC,CACH,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;QAChC,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9F,iEAAiE;QACjE,wEAAwE;QACxE,wEAAwE;QACxE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE;YACnD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,iBAAiB,CAAC;gBAC1C,SAAS,EAAE,WAAW,CAAC,UAAU,IAAI,WAAW,CAAC,UAAU,IAAI,EAAE;gBACjE,UAAU,EAAE,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,WAAW,IAAI,EAAE;gBACpE,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACvE,wEAAwE;gBACxE,WAAW,EAAE,IAAI;gBACjB,OAAO,EAAE;oBACP,MAAM,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;wBACvC,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM;4BAC/B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;4BAC5D,CAAC,CAAC,SAAS,CAAA;wBACb,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;wBAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;4BACxB,OAAO,QAAQ,CACb,IAAI,kBAAkB,CAAC;gCACrB,IAAI,EAAE,qBAAqB;gCAC3B,OAAO,EAAE,gCAAgC;6BAC1C,CAAC,EACF,EAAE,EACF,CAAC,CACF,CAAA;wBACH,CAAC;wBACD,IAAI,OAAO,CAAC,GAAG;4BAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;;4BACtC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;oBAClD,CAAC;iBACF;gBACD,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;oBACjC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;oBAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBACzC,mEAAmE;oBACnE,qEAAqE;oBACrE,8DAA8D;oBAC9D,KAAK,CAAC,OAAO,GAAG,CAAC,OAAyC,EAAE,EAAE;wBAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,OAAO,CAAA;wBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;wBAC3D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAA;wBACrF,OAAO,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;oBACnG,CAAC,CAAA;oBACD,OAAO,KAAK,CAAA;gBACd,CAAC;aACF,CAAC,CAAA;YACF,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAChC,iBAAiB,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAC7C,iBAAiB,CAAC,YAAY,CAAC,qBAAqB,CAAC,EACrD,iBAAiB,CAAC,YAAY,CAAC,YAAY,CAAC,EAC5C,iBAAiB,CAAC,YAAY,CAAC,mBAAmB,CAAC,EACnD,iBAAiB,CAAC,YAAY,CAAC,gBAAgB,CAAC,CACjD,CAAA;YACD,OAAO,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAC3C,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,EACxD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAC1D,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAClB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACxC,oEAAoE;gBACpE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;gBACnD,CAAC,CAAC,CACL,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAC,CAAC,CAAA;AACR,CAAC,CAAC,CACH,CAAA;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAA6D,EAC7D,WAA8D,MAAM,CAAC,OAAO,EAQ5E,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAA;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACrC,IAAI,IAAI,GAAgC,SAAS,CAAA;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,CACrE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAC1D,MAAM,CAAC,oBAAoB,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,EAC/D,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EACxB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAC1C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QAC/F,MAAM,QAAQ,GAAG,IAAI,CAAA;QACrB,IAAI,GAAG,KAAK,CAAA;QACZ,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QACnE,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CACH,CAAC,CAAA;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAA;AAC5C,CAAC,CAAC,CAAA;AAEJ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,WAAyD,EAAE,EAAE,CAC5F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IAChC,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CACrE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CACxD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,EAChD,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CACjD,CAAC,CAAC,CAAC,CAAA;AACR,CAAC,CAAC,CAAA","sourcesContent":["/**\n * The outbound HTTP client a Node process should use, read off its environment.\n *\n * `@effect/platform-node` ships `NodeHttpClient.layerUndici`, and its\n * dispatcher is a bare Undici `Agent`. A bare `Agent` dials every origin\n * directly: it does not read `HTTP_PROXY`, `HTTPS_PROXY` or `NO_PROXY`, and\n * nothing at the call site says so. That is invisible on a developer machine\n * with open egress and fatal inside a sandbox whose egress is default-deny\n * behind a named proxy — the request leaves for the origin, the firewall drops\n * it, and the only symptom is a transport failure far from the composition\n * that chose the client.\n *\n * This module is the one place that decision is made. {@link layer} is the\n * client every Node host composition installs; it honours the proxy the\n * environment names. Requests without a web destination use a shared pool;\n * web requests receive a fresh pinned dispatcher.\n *\n * The rule for loopback is fixed here, not by the environment: `localhost`,\n * `127.0.0.1` and `[::1]` are always reached directly, even when the\n * environment names a proxy and no exclusion, and every other origin follows\n * `NO_PROXY`. A proxy is how a process leaves its machine, and\n * `--remote http://127.0.0.1:3000` is not leaving it. The exemption is those\n * three names and nothing wider: Undici matches `NO_PROXY` entries by name,\n * never by resolved address, so `127.0.0.2` or a hostname that resolves to\n * loopback is an origin like any other and goes through the proxy.\n *\n * @since 1.0.0-rc.0\n */\n\nimport * as NodeHttpClient from \"@effect/platform-node/NodeHttpClient\"\nimport type * as Undici from \"@effect/platform-node/Undici\"\nimport { GrantStore } from \"@smthrs/kernel/GrantStore\"\nimport * as KernelHttpClient from \"@smthrs/kernel/HttpClient\"\nimport { Destination, withDestinationPinning } from \"@smthrs/kernel/HttpClient\"\nimport * as Effect from \"effect/Effect\"\nimport * as Exit from \"effect/Exit\"\nimport * as Layer from \"effect/Layer\"\nimport * as Schema from \"effect/Schema\"\nimport * as Scope from \"effect/Scope\"\nimport * as Semaphore from \"effect/Semaphore\"\nimport { HttpClient } from \"effect/unstable/http/HttpClient\"\nimport * as EffectHttpClient from \"effect/unstable/http/HttpClient\"\nimport * as HttpClientError from \"effect/unstable/http/HttpClientError\"\nimport * as HttpClientRequest from \"effect/unstable/http/HttpClientRequest\"\nimport { isIP } from \"node:net\"\n\n/**\n * A pinned connection asked for an address family none of the authorized\n * addresses has. It is the `cause` of the `TransportError` the request fails\n * with; `code` is always `no_approved_address`.\n *\n * @category errors\n * @since 1.0.0\n */\nexport class EgressAddressError extends Schema.TaggedError<EgressAddressError>()(\n  \"@smthrs/platform-node/EgressAddressError\",\n  { code: Schema.Literal(\"no_approved_address\"), message: Schema.String }\n) {\n  override readonly name = \"EgressAddressError\"\n}\n\n/**\n * The hosts a proxy is never for. A proxy is how a process leaves its machine;\n * these names are the machine itself. Matched by name, the way Undici matches\n * every `NO_PROXY` entry, so the list is exactly these three and not\n * `127.0.0.0/8`.\n */\nconst loopback = [\"localhost\", \"127.0.0.1\", \"::1\"] as const\n\n/**\n * The exclusion list to hand Undici, given the one the environment names.\n *\n * Undici proxies *every* origin when `NO_PROXY` is empty — `#shouldProxy`\n * returns early with \"Always proxy if NO_PROXY is not set or empty\" — so a host\n * that names a proxy to reach the internet would also send `smthrs --remote\n * http://127.0.0.1:3000` and a local Ollama at `http://localhost:11434` to it.\n * Nothing in this repository has ever needed `NO_PROXY=127.0.0.1`, because the\n * client these compositions used before ignored the proxy variables outright.\n * So loopback is always excluded, the way Go's `net/http.ProxyFromEnvironment`\n * excludes it, and the environment's own entries are kept beside it.\n *\n * `*` is returned untouched: Undici recognises the wildcard only as the entire\n * value, and it already means every origin is direct.\n */\nconst exclusions = (declared: string): string =>\n  declared === \"*\" ? declared : [declared, ...loopback].filter((entry) => entry !== \"\").join(\",\")\n\n// Split ESM bundles expose CommonJS Undici through default, without synthetic\n// named exports. Node and Bun also expose its constructors through default.\n// Its typings declare `default` as a namespace without them, and `bundler`\n// resolution reads that, so the value is typed as the module it carries.\nconst loadUndici = Effect.promise(\n  async () => (await import(\"undici/index.js\")).default as unknown as typeof Undici\n)\n\n/**\n * An Undici dispatcher that routes through the egress proxy the supplied\n * environment names, or a direct one when it names none.\n *\n * The proxy variables are read in the order Undici itself reads them,\n * lowercase first, and passed explicitly rather than left to\n * `EnvHttpProxyAgent`'s own ambient lookup: a host serving a guest's\n * environment is not the guest, and the pool has to follow the record it was\n * handed. Loopback is always direct; see {@link exclusions}. Each dispatcher is\n * acquired in the caller's scope and destroyed with it, so a composition that\n * builds several still owns every pool it opened.\n *\n * @param environment the environment record whose proxy variables decide the route\n * @category constructors\n * @since 1.0.0-rc.0\n */\nexport const dispatcher = (\n  environment: Readonly<Record<string, string | undefined>>\n): Effect.Effect<Undici.Dispatcher, never, Scope.Scope> =>\n  Effect.suspend(() => {\n    const httpProxy = environment.http_proxy ?? environment.HTTP_PROXY ?? \"\"\n    const httpsProxy = environment.https_proxy ?? environment.HTTPS_PROXY ?? \"\"\n    const noProxy = exclusions(environment.no_proxy ?? environment.NO_PROXY ?? \"\")\n    // Explicit empty values prevent Undici from falling back to a different\n    // ambient environment. Each replacement pool uses the same proxy policy.\n    //\n    // Undici is loaded here rather than imported at the top, the way\n    // `NodeHttpClient.makeDispatcher` loads it, because this module is imported\n    // by `NodeHost` and every bundle built on it. A static import pulls the\n    // whole of Undici into any process that merely composes a host, whose\n    // side effects a host bundle must not carry: it reddened the Node host's\n    // own `FileSystem` contract case, which never makes a request. The explicit\n    // package entry also avoids Bun's incomplete built-in \"undici\" substitute.\n    return Effect.acquireRelease(\n      Effect.map(\n        loadUndici,\n        (undici) => new undici.EnvHttpProxyAgent({ httpProxy, httpsProxy, noProxy })\n      ),\n      (dispatcher) => Effect.promise(() => dispatcher.destroy())\n    )\n  })\n\n/**\n * The Undici `HttpClient` to install, given the environment the process runs in.\n *\n * Use this wherever `NodeHttpClient.layerUndici` would otherwise be provided\n * under a layer that takes `HttpClient` from context — a model transport, a\n * judge, a fetch rule, a host bundle. The two differ only in whether the pool\n * honours `HTTP_PROXY`/`HTTPS_PROXY`/`NO_PROXY`, which is the difference\n * between a request that reaches the gateway from inside a default-deny\n * sandbox and one the firewall drops.\n *\n * @param environment the environment record whose proxy variables decide the route\n * @category layers\n * @since 1.0.0-rc.0\n */\nexport const layer = (\n  environment: Readonly<Record<string, string | undefined>>\n): Layer.Layer<HttpClient> =>\n  Layer.effect(\n    HttpClient,\n    Effect.gen(function*() {\n      const shared = yield* dispatcher(environment)\n      const ordinary = yield* NodeHttpClient.makeUndici.pipe(Effect.provideService(NodeHttpClient.Dispatcher, shared))\n      return withDestinationPinning(EffectHttpClient.transform(ordinary, (execute, request) =>\n        Effect.gen(function*() {\n          const destination = yield* Destination\n          if (destination === undefined) return yield* execute\n          const url = new URL(request.url)\n          if (\n            url.origin !== destination.origin || destination.addresses.length === 0 ||\n            destination.addresses.some((address) => isIP(address) === 0)\n          ) {\n            return yield* Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.TransportError({\n                  request,\n                  description: \"Invalid pinned HTTP destination\"\n                })\n              })\n            )\n          }\n          const proxies = [\n            environment.http_proxy ?? environment.HTTP_PROXY,\n            environment.https_proxy ?? environment.HTTPS_PROXY\n          ]\n          // The record is read per request, and a live one such as NodeHost's\n          // `process.env` can name an unparsable proxy after the shared pool\n          // was built from it; that is a refusal here, never a thrown URL error.\n          const validProxies = proxies.every((proxy) => {\n            if (!proxy) return true\n            try {\n              return [\"http:\", \"https:\"].includes(new URL(proxy).protocol)\n            } catch {\n              return false\n            }\n          })\n          if (!validProxies) {\n            return yield* Effect.fail(\n              new HttpClientError.HttpClientError({\n                reason: new HttpClientError.TransportError({\n                  request,\n                  description: \"Pinned HTTP requests require HTTP or HTTPS proxies\"\n                })\n              })\n            )\n          }\n          const undici = yield* loadUndici\n          const addresses = destination.addresses.map((address) => ({ address, family: isIP(address) }))\n          // Construction and its disposal are one uninterruptible step: an\n          // interruption that lands after the agent exists but before the request\n          // owns it would otherwise leave the agent neither destroyed nor closed.\n          return yield* Effect.uninterruptibleMask((restore) => {\n            const pinned = new undici.EnvHttpProxyAgent({\n              httpProxy: environment.http_proxy ?? environment.HTTP_PROXY ?? \"\",\n              httpsProxy: environment.https_proxy ?? environment.HTTPS_PROXY ?? \"\",\n              noProxy: exclusions(environment.no_proxy ?? environment.NO_PROXY ?? \"\"),\n              // Tunnelling HTTP too prevents the proxy resolving the target hostname.\n              proxyTunnel: true,\n              connect: {\n                lookup: (_hostname, options, callback) => {\n                  const candidates = options.family\n                    ? addresses.filter((item) => item.family === options.family)\n                    : addresses\n                  const first = candidates[0]\n                  if (first === undefined) {\n                    return callback(\n                      new EgressAddressError({\n                        code: \"no_approved_address\",\n                        message: \"No approved address for family\"\n                      }),\n                      \"\",\n                      4\n                    )\n                  }\n                  if (options.all) callback(null, candidates)\n                  else callback(null, first.address, first.family)\n                }\n              },\n              clientFactory: (origin, options) => {\n                const proxy = new undici.Pool(origin, options)\n                const connect = proxy.connect.bind(proxy)\n                // EnvHttpProxyAgent selects the route using the ORIGINAL hostname.\n                // Only the proxy tunnel destination changes; endpoint TLS still uses\n                // the original hostname for SNI and certificate verification.\n                proxy.connect = (options: Undici.Dispatcher.ConnectOptions) => {\n                  const address = addresses[0]!.address\n                  const host = isIP(address) === 6 ? `[${address}]` : address\n                  const authority = `${host}:${url.port || (url.protocol === \"https:\" ? \"443\" : \"80\")}`\n                  return connect({ ...options, path: authority, headers: { ...options.headers, host: authority } })\n                }\n                return proxy\n              }\n            })\n            const pinnedRequest = request.pipe(\n              HttpClientRequest.setHeader(\"host\", url.host),\n              HttpClientRequest.removeHeader(\"proxy-authorization\"),\n              HttpClientRequest.removeHeader(\"connection\"),\n              HttpClientRequest.removeHeader(\"transfer-encoding\"),\n              HttpClientRequest.removeHeader(\"content-length\")\n            )\n            return restore(NodeHttpClient.makeUndici.pipe(\n              Effect.provideService(NodeHttpClient.Dispatcher, pinned),\n              Effect.flatMap((client) => client.execute(pinnedRequest))\n            )).pipe(Effect.onExit((exit) =>\n              Exit.isFailure(exit)\n                ? Effect.promise(() => pinned.destroy())\n                // close prevents reuse immediately, but lets the active body drain.\n                : Effect.sync(() => {\n                  void pinned.close().catch(() => pinned.destroy())\n                })\n            ))\n          })\n        })))\n    })\n  )\n\n/**\n * Owns one replaceable Undici pool in the caller's scope. Each replacement\n * receives the same middleware and closes the previous pool.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const rebuildableTransport = (\n  acquire: Effect.Effect<Undici.Dispatcher, never, Scope.Scope>,\n  decorate: (client: HttpClient) => Effect.Effect<HttpClient> = Effect.succeed\n): Effect.Effect<\n  {\n    readonly client: HttpClient\n    readonly rebuild: Effect.Effect<HttpClient>\n  },\n  never,\n  Scope.Scope\n> =>\n  Effect.gen(function*() {\n    const scope = yield* Scope.Scope\n    const gate = yield* Semaphore.make(1)\n    let held: Scope.Closeable | undefined = undefined\n    const rebuild = gate.withPermit(Effect.uninterruptibleMask((restore) =>\n      Effect.gen(function*() {\n        const owned = yield* Scope.fork(scope)\n        const client = yield* restore(NodeHttpClient.makeUndici.pipe(\n          Effect.provideServiceEffect(NodeHttpClient.Dispatcher, acquire),\n          Effect.flatMap(decorate),\n          Effect.provideService(Scope.Scope, owned)\n        )).pipe(Effect.onExit((exit) => Exit.isSuccess(exit) ? Effect.void : Scope.close(owned, exit)))\n        const previous = held\n        held = owned\n        if (previous !== undefined) yield* Scope.close(previous, Exit.void)\n        return client\n      })\n    ))\n    return { client: yield* rebuild, rebuild }\n  })\n\n/**\n * A model transport whose replacements retain the caller's grant store and\n * environment proxy policy. Pass it to RequestExecutor.makeWith in the host scope.\n *\n * @category constructors\n * @since 1.0.0\n */\nexport const guardedTransport = (environment: Readonly<Record<string, string | undefined>>) =>\n  Effect.gen(function*() {\n    const grants = yield* GrantStore\n    return yield* rebuildableTransport(dispatcher(environment), (client) =>\n      HttpClient.pipe(Effect.provide(KernelHttpClient.layer.pipe(\n        Layer.provide(Layer.succeed(HttpClient)(client)),\n        Layer.provide(Layer.succeed(GrantStore)(grants))\n      ))))\n  })\n"]}

package/dist/esm/HostLiveness.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Answers whether a recorded run owner is still alive on this host.
+ *
+ * @since 0.1.0
+ */
+import * as Effect from "effect/Effect";
+/**
+ * The owner identity fields liveness is decided from.
+ *
+ * Structural on purpose: `@smthrs/journal`'s `OwnerId` is exactly this shape
+ * plus a nonce, so an `OwnerId` is accepted here without this package taking a
+ * dependency on the journal to name a type.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface Owner {
+    /** The host the owner ran on. */
+    readonly hostId: string;
+    /** The operating-system process id that held the run. */
+    readonly pid: number;
+}
+/**
+ * Liveness configuration.
+ *
+ * @category models
+ * @since 0.1.0
+ */
+export interface Options {
+    /** The host id this process answers for. */
+    readonly hostId: string;
+    /**
+     * How the probe asks the operating system. Default `process.kill`, which
+     * delivers nothing for signal 0 and only reports whether the pid is
+     * signalable.
+     */
+    readonly signal?: ((pid: number, signal: 0) => void) | undefined;
+}
+/**
+ * Builds the liveness probe `EngineStore` consults before it steals a run.
+ *
+ * The engine asks this before taking a run whose recorded owner it is not, so
+ * a wrong `true` strands a run and a wrong `false` runs it twice. The rule is
+ * therefore asymmetric on purpose:
+ *
+ * - An owner from a **different host** is alive. A pid means nothing across
+ *   machines, and the process table this probe reads is only this machine's.
+ * - An owner from **this host** is dead only when the signal-0 probe reports
+ *   `ESRCH`. Every other result preserves liveness.
+ *
+ * The residual risk is pid reuse. An owner whose pid was recycled by an
+ * unrelated program reads as alive and its run waits for an operator, which is
+ * the safe direction: nothing about a recycled pid can tell this process
+ * whether the run is still being driven, and the cost of guessing wrong the
+ * other way is two hosts executing one run.
+ *
+ * A multi-process deployment with a supervisor or a lease system knows better
+ * than any pid probe and should answer from that instead.
+ *
+ * `@smthrs/run-store`'s `Ownership.sameHostPidProbe` fills the same
+ * `LivenessCheck`. Both probes use the same `ESRCH`-only death rule.
+ * `EPERM`, `EINVAL`, and unknown signal errors preserve liveness.
+ *
+ * The cross-host policy differs. `sameHostPidProbe` compares the owner's
+ * `hostId` with `context.claimant.hostId` and returns `false` for a foreign
+ * host, leaving the expired lease to govern reclaiming the run. This probe
+ * compares with the configured `hostId` and returns `true` for a foreign
+ * host, so a permanently dead foreign host's runs wait for an operator.
+ *
+ * Which answer a deployment gets depends on the entry point it used:
+ * `@smthrs/flows`' `NodeRuntime` defaults to this function, while
+ * `@smthrs/cli`'s `NodeControl` passes `sameHostPidProbe`. This function
+ * returns a one-argument function, which is structurally accepted as an
+ * `Ownership.LivenessCheck` and ignores its `context` argument. Pick the
+ * probe for its cross-host policy and source of host identity.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export declare const isAlive: (options: Options) => (owner: Owner) => Effect.Effect<boolean>;
+//# sourceMappingURL=HostLiveness.d.ts.map

package/dist/esm/HostLiveness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostLiveness.d.ts","sourceRoot":"","sources":["../../src/HostLiveness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC;;;;;;;;;GASG;AACH,MAAM,WAAW,KAAK;IACpB,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,yDAAyD;IACzD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,SAAS,CAAA;CACjE;AAgBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,eAAO,MAAM,OAAO,GAAI,SAAS,OAAO,KAAG,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,CAKjF,CAAA"}

package/dist/esm/HostLiveness.js

@@ -0,0 +1,68 @@
+/**
+ * Answers whether a recorded run owner is still alive on this host.
+ *
+ * @since 0.1.0
+ */
+import * as Effect from "effect/Effect";
+const signalable = (send, pid) => {
+    try {
+        send(pid, 0);
+        return true;
+    }
+    catch (cause) {
+        // ESRCH means the process is gone. EPERM means it exists and belongs to
+        // another user, which is still a live owner this host must not rob. A throw
+        // that is not an object at all carries no code, and reading through it
+        // rather than off it is what stops that crashing the probe: a thrown string
+        // or `null` is an answer nobody gave, which is a live owner.
+        return cause?.code !== "ESRCH";
+    }
+};
+/**
+ * Builds the liveness probe `EngineStore` consults before it steals a run.
+ *
+ * The engine asks this before taking a run whose recorded owner it is not, so
+ * a wrong `true` strands a run and a wrong `false` runs it twice. The rule is
+ * therefore asymmetric on purpose:
+ *
+ * - An owner from a **different host** is alive. A pid means nothing across
+ *   machines, and the process table this probe reads is only this machine's.
+ * - An owner from **this host** is dead only when the signal-0 probe reports
+ *   `ESRCH`. Every other result preserves liveness.
+ *
+ * The residual risk is pid reuse. An owner whose pid was recycled by an
+ * unrelated program reads as alive and its run waits for an operator, which is
+ * the safe direction: nothing about a recycled pid can tell this process
+ * whether the run is still being driven, and the cost of guessing wrong the
+ * other way is two hosts executing one run.
+ *
+ * A multi-process deployment with a supervisor or a lease system knows better
+ * than any pid probe and should answer from that instead.
+ *
+ * `@smthrs/run-store`'s `Ownership.sameHostPidProbe` fills the same
+ * `LivenessCheck`. Both probes use the same `ESRCH`-only death rule.
+ * `EPERM`, `EINVAL`, and unknown signal errors preserve liveness.
+ *
+ * The cross-host policy differs. `sameHostPidProbe` compares the owner's
+ * `hostId` with `context.claimant.hostId` and returns `false` for a foreign
+ * host, leaving the expired lease to govern reclaiming the run. This probe
+ * compares with the configured `hostId` and returns `true` for a foreign
+ * host, so a permanently dead foreign host's runs wait for an operator.
+ *
+ * Which answer a deployment gets depends on the entry point it used:
+ * `@smthrs/flows`' `NodeRuntime` defaults to this function, while
+ * `@smthrs/cli`'s `NodeControl` passes `sameHostPidProbe`. This function
+ * returns a one-argument function, which is structurally accepted as an
+ * `Ownership.LivenessCheck` and ignores its `context` argument. Pick the
+ * probe for its cross-host policy and source of host identity.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export const isAlive = (options) => {
+    const send = options.signal ?? ((pid, signal) => {
+        process.kill(pid, signal);
+    });
+    return (owner) => Effect.sync(() => owner.hostId !== options.hostId || signalable(send, owner.pid));
+};
+//# sourceMappingURL=HostLiveness.js.map

package/dist/esm/HostLiveness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HostLiveness.js","sourceRoot":"","sources":["../../src/HostLiveness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAoCvC,MAAM,UAAU,GAAG,CAAC,IAAsC,EAAE,GAAW,EAAW,EAAE;IAClF,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACZ,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,6DAA6D;QAC7D,OAAQ,KAAuD,EAAE,IAAI,KAAK,OAAO,CAAA;IACnF,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAgB,EAA4C,EAAE;IACpF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;QAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;AACrG,CAAC,CAAA","sourcesContent":["/**\n * Answers whether a recorded run owner is still alive on this host.\n *\n * @since 0.1.0\n */\n\nimport * as Effect from \"effect/Effect\"\n\n/**\n * The owner identity fields liveness is decided from.\n *\n * Structural on purpose: `@smthrs/journal`'s `OwnerId` is exactly this shape\n * plus a nonce, so an `OwnerId` is accepted here without this package taking a\n * dependency on the journal to name a type.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface Owner {\n  /** The host the owner ran on. */\n  readonly hostId: string\n  /** The operating-system process id that held the run. */\n  readonly pid: number\n}\n\n/**\n * Liveness configuration.\n *\n * @category models\n * @since 0.1.0\n */\nexport interface Options {\n  /** The host id this process answers for. */\n  readonly hostId: string\n  /**\n   * How the probe asks the operating system. Default `process.kill`, which\n   * delivers nothing for signal 0 and only reports whether the pid is\n   * signalable.\n   */\n  readonly signal?: ((pid: number, signal: 0) => void) | undefined\n}\n\nconst signalable = (send: (pid: number, signal: 0) => void, pid: number): boolean => {\n  try {\n    send(pid, 0)\n    return true\n  } catch (cause) {\n    // ESRCH means the process is gone. EPERM means it exists and belongs to\n    // another user, which is still a live owner this host must not rob. A throw\n    // that is not an object at all carries no code, and reading through it\n    // rather than off it is what stops that crashing the probe: a thrown string\n    // or `null` is an answer nobody gave, which is a live owner.\n    return (cause as { readonly code?: string } | null | undefined)?.code !== \"ESRCH\"\n  }\n}\n\n/**\n * Builds the liveness probe `EngineStore` consults before it steals a run.\n *\n * The engine asks this before taking a run whose recorded owner it is not, so\n * a wrong `true` strands a run and a wrong `false` runs it twice. The rule is\n * therefore asymmetric on purpose:\n *\n * - An owner from a **different host** is alive. A pid means nothing across\n *   machines, and the process table this probe reads is only this machine's.\n * - An owner from **this host** is dead only when the signal-0 probe reports\n *   `ESRCH`. Every other result preserves liveness.\n *\n * The residual risk is pid reuse. An owner whose pid was recycled by an\n * unrelated program reads as alive and its run waits for an operator, which is\n * the safe direction: nothing about a recycled pid can tell this process\n * whether the run is still being driven, and the cost of guessing wrong the\n * other way is two hosts executing one run.\n *\n * A multi-process deployment with a supervisor or a lease system knows better\n * than any pid probe and should answer from that instead.\n *\n * `@smthrs/run-store`'s `Ownership.sameHostPidProbe` fills the same\n * `LivenessCheck`. Both probes use the same `ESRCH`-only death rule.\n * `EPERM`, `EINVAL`, and unknown signal errors preserve liveness.\n *\n * The cross-host policy differs. `sameHostPidProbe` compares the owner's\n * `hostId` with `context.claimant.hostId` and returns `false` for a foreign\n * host, leaving the expired lease to govern reclaiming the run. This probe\n * compares with the configured `hostId` and returns `true` for a foreign\n * host, so a permanently dead foreign host's runs wait for an operator.\n *\n * Which answer a deployment gets depends on the entry point it used:\n * `@smthrs/flows`' `NodeRuntime` defaults to this function, while\n * `@smthrs/cli`'s `NodeControl` passes `sameHostPidProbe`. This function\n * returns a one-argument function, which is structurally accepted as an\n * `Ownership.LivenessCheck` and ignores its `context` argument. Pick the\n * probe for its cross-host policy and source of host identity.\n *\n * @category constructors\n * @since 0.1.0\n */\nexport const isAlive = (options: Options): (owner: Owner) => Effect.Effect<boolean> => {\n  const send = options.signal ?? ((pid, signal) => {\n    process.kill(pid, signal)\n  })\n  return (owner) => Effect.sync(() => owner.hostId !== options.hostId || signalable(send, owner.pid))\n}\n"]}