@sysid/sandbox-runtime-improved 0.0.50-sysid.1 → 0.0.51-sysid.1

package/dist/sandbox/mitm-ca.js

@@ -1,38 +1,126 @@
 /**
- * MITM CA loader for the in-process TLS-terminating proxy.
+ * MITM CA loader/generator for the in-process TLS-terminating proxy.
  *
- * Loads a user-provided CA cert + key from disk. The CA is supplied via
- * `network.tlsTerminate.{caCertPath,caKeyPath}` (see sandbox-config.ts).
- * SRT does not generate the CA itself — TLS termination is opt-in and
- * requires the caller to provide both paths.
+ * The CA is supplied via `network.tlsTerminate.{caCertPath,caKeyPath}` (see
+ * sandbox-config.ts). If both paths are omitted, SRT generates an ephemeral
+ * RSA-2048 self-signed CA into a temp directory; the cert path is what the
+ * trust env vars point at. The caller is responsible for cleaning up via
+ * `disposeMitmCA()` (SandboxManager.reset() does this).
  */
-import { readFileSync } from 'node:fs';
+import forge from 'node-forge';
+import { mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
+import { rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join, dirname } from 'node:path';
 import { logForDebugging } from '../utils/debug.js';
-let ca;
+const { pki, md, random, util } = forge;
 /**
- * Load the MITM CA from the given paths. Throws if either file is missing,
- * unreadable, or not PEM — TLS termination is explicit opt-in, so a bad
- * config is a hard error (same posture as checkDependencies()).
+ * Create a MitmCA. If `caCertPath`/`caKeyPath` are provided, load from disk
+ * (throws if either file is missing, unreadable, not PEM, fails to parse, or
+ * the key is not RSA). If both are omitted, generate an ephemeral CA into a
+ * fresh temp directory.
  *
- * Idempotent: subsequent calls return the cached CA.
+ * Pure factory: no module-level state. The caller (SandboxManager) owns the
+ * returned object and its lifetime.
  */
-export function loadMitmCA(opts) {
-    if (ca)
-        return ca;
-    const { caCertPath: certPath, caKeyPath: keyPath } = opts;
+export function createMitmCA(opts) {
+    if (opts.caCertPath && opts.caKeyPath) {
+        return loadCA(opts.caCertPath, opts.caKeyPath);
+    }
+    if (opts.caCertPath || opts.caKeyPath) {
+        throw new Error('tlsTerminate: caCertPath and caKeyPath must be provided together');
+    }
+    return generateEphemeralCA();
+}
+/** Remove the temp directory for an SRT-generated CA. No-op for user CAs. */
+export async function disposeMitmCA(ca) {
+    if (!ca.ephemeral)
+        return;
+    try {
+        await rm(dirname(ca.certPath), { recursive: true, force: true });
+    }
+    catch (err) {
+        logForDebugging(`[mitm-ca] cleanup failed: ${err.message}`, {
+            level: 'warn',
+        });
+    }
+}
+function loadCA(certPath, keyPath) {
     const certPem = readPem(certPath, 'CERTIFICATE', 'tlsTerminate.caCertPath');
     const keyPem = readPem(keyPath, 'PRIVATE KEY', 'tlsTerminate.caKeyPath');
-    ca = { certPath, keyPath, certPem, keyPem };
+    let cert;
+    let key;
+    try {
+        cert = pki.certificateFromPem(certPem);
+        key = pki.privateKeyFromPem(keyPem);
+    }
+    catch (err) {
+        throw new Error(`tlsTerminate: failed to parse CA from ${certPath}: ` +
+            err.message);
+    }
+    if (!('n' in key) || !('d' in key)) {
+        // node-forge can only sign with RSA private keys.
+        throw new Error(`tlsTerminate.caKeyPath: CA key at ${keyPath} must be RSA`);
+    }
     logForDebugging(`[mitm-ca] loaded CA from ${certPath}`);
-    return ca;
-}
-/** Return the cached CA, or undefined if tlsTerminate was not configured. */
-export function getMitmCA() {
-    return ca;
+    return {
+        certPath,
+        keyPath,
+        certPem,
+        keyPem,
+        cert,
+        key: key,
+        leafCerts: new Map(),
+        secureContexts: new Map(),
+        ephemeral: false,
+    };
 }
-/** Clear the cached CA — for tests / config reload. */
-export function resetMitmCA() {
-    ca = undefined;
+function generateEphemeralCA() {
+    const keys = pki.rsa.generateKeyPair(2048);
+    const cert = pki.createCertificate();
+    cert.publicKey = keys.publicKey;
+    cert.serialNumber = randomSerial();
+    cert.validity.notBefore = daysFromNow(-1);
+    cert.validity.notAfter = daysFromNow(825);
+    const subject = [
+        { name: 'commonName', value: 'sandbox-runtime ephemeral CA' },
+        { name: 'organizationName', value: 'sandbox-runtime' },
+    ];
+    cert.setSubject(subject);
+    cert.setIssuer(subject);
+    cert.setExtensions([
+        { name: 'basicConstraints', cA: true, critical: true },
+        {
+            name: 'keyUsage',
+            critical: true,
+            keyCertSign: true,
+            cRLSign: true,
+            digitalSignature: true,
+        },
+        { name: 'subjectKeyIdentifier' },
+    ]);
+    cert.sign(keys.privateKey, md.sha256.create());
+    const certPem = pki.certificateToPem(cert);
+    const keyPem = pki.privateKeyToPem(keys.privateKey);
+    // Write to disk so trust env vars (NODE_EXTRA_CA_CERTS etc.) can point at
+    // a real path. mkdtemp gives us an unguessable per-process directory.
+    const dir = mkdtempSync(join(tmpdir(), 'srt-ca-'));
+    const certPath = join(dir, 'ca.crt');
+    const keyPath = join(dir, 'ca.key');
+    writeFileSync(certPath, certPem, { mode: 0o644 });
+    writeFileSync(keyPath, keyPem, { mode: 0o600 });
+    logForDebugging(`[mitm-ca] generated ephemeral CA at ${certPath}`);
+    return {
+        certPath,
+        keyPath,
+        certPem,
+        keyPem,
+        cert,
+        key: keys.privateKey,
+        leafCerts: new Map(),
+        secureContexts: new Map(),
+        ephemeral: true,
+    };
 }
 function readPem(path, label, field) {
     let pem;
@@ -50,4 +138,16 @@ function readPem(path, label, field) {
     }
     return pem;
 }
+function randomSerial() {
+    // 16 random bytes, high bit cleared so the DER INTEGER stays positive.
+    const bytes = random.getBytesSync(16);
+    const hex = util.bytesToHex(bytes);
+    const firstNibble = parseInt(hex[0], 16) & 0x7;
+    return firstNibble.toString(16) + hex.slice(1);
+}
+function daysFromNow(days) {
+    const d = new Date();
+    d.setDate(d.getDate() + days);
+    return d;
+}
 //# sourceMappingURL=mitm-ca.js.map

package/dist/sandbox/mitm-ca.js.map

@@ -1 +1 @@
-{"version":3,"file":"mitm-ca.js","sourceRoot":"","sources":["../../src/sandbox/mitm-ca.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AASnD,IAAI,EAAsB,CAAA;AAE1B;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAG1B;IACC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAA;IAEjB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAEzD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAA;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,wBAAwB,CAAC,CAAA;IAExE,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IAC3C,eAAe,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAA;IACvD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS;IACvB,OAAO,EAAE,CAAA;AACX,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,WAAW;IACzB,EAAE,GAAG,SAAS,CAAA;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;IACzD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,IAAI,KAAK,IAAI,GAAG,CAAC,CAAA;IAC5D,CAAC;IACD,+EAA+E;IAC/E,sCAAsC;IACtC,IAAI,CAAC,IAAI,MAAM,CAAC,qBAAqB,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,iBAAiB,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"mitm-ca.js","sourceRoot":"","sources":["../../src/sandbox/mitm-ca.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAA;AAC9B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAClE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnD,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;AAsBvC;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAG5B;IACC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAA;IACH,CAAC;IACD,OAAO,mBAAmB,EAAE,CAAA;AAC9B,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAU;IAC5C,IAAI,CAAC,EAAE,CAAC,SAAS;QAAE,OAAM;IACzB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,eAAe,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,EAAE;YACrE,KAAK,EAAE,MAAM;SACd,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB,EAAE,OAAe;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,yBAAyB,CAAC,CAAA;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,EAAE,wBAAwB,CAAC,CAAA;IAExE,IAAI,IAA2B,CAAA;IAC/B,IAAI,GAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAA;QACtC,GAAG,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yCAAyC,QAAQ,IAAI;YAClD,GAAa,CAAC,OAAO,CACzB,CAAA;IACH,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QACnC,kDAAkD;QAClD,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,cAAc,CAAC,CAAA;IAC7E,CAAC;IAED,eAAe,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAA;IACvD,OAAO;QACL,QAAQ;QACR,OAAO;QACP,OAAO;QACP,MAAM;QACN,IAAI;QACJ,GAAG,EAAE,GAA+B;QACpC,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,SAAS,EAAE,KAAK;KACjB,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAA;IACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAC/B,IAAI,CAAC,YAAY,GAAG,YAAY,EAAE,CAAA;IAClC,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG;QACd,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,8BAA8B,EAAE;QAC7D,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,iBAAiB,EAAE;KACvD,CAAA;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;IACxB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACvB,IAAI,CAAC,aAAa,CAAC;QACjB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;QACtD;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,IAAI;YACjB,OAAO,EAAE,IAAI;YACb,gBAAgB,EAAE,IAAI;SACvB;QACD,EAAE,IAAI,EAAE,sBAAsB,EAAE;KACjC,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAE9C,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAEnD,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAA;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAE/C,eAAe,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAA;IAClE,OAAO;QACL,QAAQ;QACR,OAAO;QACP,OAAO;QACP,MAAM;QACN,IAAI;QACJ,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,SAAS,EAAE,IAAI,GAAG,EAAE;QACpB,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,SAAS,EAAE,IAAI;KAChB,CAAA;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;IACzD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,IAAI,KAAK,IAAI,GAAG,CAAC,CAAA;IAC5D,CAAC;IACD,+EAA+E;IAC/E,sCAAsC;IACtC,IAAI,CAAC,IAAI,MAAM,CAAC,qBAAqB,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,iBAAiB,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,YAAY;IACnB,uEAAuE;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,GAAG,CAAA;IAC/C,OAAO,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAA;IACpB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAC7B,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/sandbox/mitm-leaf.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Per-host leaf certificate minter for the in-process TLS-terminating proxy.
+ *
+ * Given a MitmCA (see mitm-ca.ts), mints a leaf certificate for a specific
+ * hostname on first use and caches it for the lifetime of that CA instance.
+ * The leaf is signed by the CA and carries SAN=DNS:<host> (or IP:<addr>),
+ * so a client that trusts the CA will accept it for that host.
+ */
+import { type SecureContext } from 'node:tls';
+import type { MitmCA } from './mitm-ca.js';
+export type LeafCert = {
+    /** Leaf cert PEM followed by the CA cert PEM (full chain). */
+    certPem: string;
+    /** Leaf private key PEM. */
+    keyPem: string;
+};
+/**
+ * Mint (or return cached) an RSA-2048 leaf cert for `hostname`, signed by `ca`.
+ * The cache lives on `ca.leafCerts`.
+ */
+export declare function mintLeafCert(ca: MitmCA, hostname: string): LeafCert;
+/**
+ * Mint-or-cache a Node TLS SecureContext for `hostname`. Intended as the
+ * SNICallback target in the terminating proxy. The cache lives on
+ * `ca.secureContexts`.
+ */
+export declare function secureContextFor(ca: MitmCA, hostname: string): SecureContext;
+//# sourceMappingURL=mitm-leaf.d.ts.map

package/dist/sandbox/mitm-leaf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mitm-leaf.d.ts","sourceRoot":"","sources":["../../src/sandbox/mitm-leaf.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,UAAU,CAAA;AAElE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAI1C,MAAM,MAAM,QAAQ,GAAG;IACrB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAA;IACf,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,CAsCnE;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CAO5E"}

package/dist/sandbox/mitm-leaf.js

@@ -0,0 +1,94 @@
+/**
+ * Per-host leaf certificate minter for the in-process TLS-terminating proxy.
+ *
+ * Given a MitmCA (see mitm-ca.ts), mints a leaf certificate for a specific
+ * hostname on first use and caches it for the lifetime of that CA instance.
+ * The leaf is signed by the CA and carries SAN=DNS:<host> (or IP:<addr>),
+ * so a client that trusts the CA will accept it for that host.
+ */
+import forge from 'node-forge';
+import { isIP } from 'node:net';
+import { createSecureContext } from 'node:tls';
+import { logForDebugging } from '../utils/debug.js';
+const { pki, md, random, util } = forge;
+/**
+ * Mint (or return cached) an RSA-2048 leaf cert for `hostname`, signed by `ca`.
+ * The cache lives on `ca.leafCerts`.
+ */
+export function mintLeafCert(ca, hostname) {
+    const cached = ca.leafCerts.get(hostname);
+    if (cached)
+        return cached;
+    const keys = pki.rsa.generateKeyPair(2048);
+    const cert = pki.createCertificate();
+    cert.publicKey = keys.publicKey;
+    cert.serialNumber = randomSerial();
+    cert.validity.notBefore = daysFromNow(-1);
+    cert.validity.notAfter = clampValidity(ca.cert);
+    cert.setSubject([{ name: 'commonName', value: hostname }]);
+    cert.setIssuer(ca.cert.subject.attributes);
+    cert.setExtensions([
+        { name: 'basicConstraints', cA: false, critical: true },
+        {
+            name: 'keyUsage',
+            critical: true,
+            digitalSignature: true,
+            keyEncipherment: true,
+        },
+        { name: 'extKeyUsage', serverAuth: true },
+        { name: 'subjectAltName', altNames: [sanFor(hostname)] },
+        // No authorityKeyIdentifier: node-forge stores SKI as a hex string for
+        // in-memory certs (e.g. the ephemeral CA) but as raw bytes for certs
+        // parsed from PEM (e.g. a user-supplied CA). Passing the hex string as
+        // keyIdentifier produces an AKI that doesn't match the CA's SKI and
+        // chain verification fails. AKI is optional — issuer/subject DN match
+        // is sufficient — so omit it.
+    ]);
+    cert.sign(ca.key, md.sha256.create());
+    const leaf = {
+        certPem: pki.certificateToPem(cert) + ca.certPem,
+        keyPem: pki.privateKeyToPem(keys.privateKey),
+    };
+    ca.leafCerts.set(hostname, leaf);
+    logForDebugging(`[mitm-leaf] minted RSA leaf for ${hostname}`);
+    return leaf;
+}
+/**
+ * Mint-or-cache a Node TLS SecureContext for `hostname`. Intended as the
+ * SNICallback target in the terminating proxy. The cache lives on
+ * `ca.secureContexts`.
+ */
+export function secureContextFor(ca, hostname) {
+    const cached = ca.secureContexts.get(hostname);
+    if (cached)
+        return cached;
+    const { certPem, keyPem } = mintLeafCert(ca, hostname);
+    const ctx = createSecureContext({ cert: certPem, key: keyPem });
+    ca.secureContexts.set(hostname, ctx);
+    return ctx;
+}
+function sanFor(hostname) {
+    // RFC 5280 GeneralName tags: 2 = dNSName, 7 = iPAddress.
+    return isIP(hostname) !== 0
+        ? { type: 7, ip: hostname }
+        : { type: 2, value: hostname };
+}
+/** Leaf validity capped at min(CA notAfter, now+825d) per CA/B baseline. */
+function clampValidity(caCert) {
+    const caEnd = caCert.validity.notAfter;
+    const max = daysFromNow(825);
+    return caEnd < max ? new Date(caEnd) : max;
+}
+function randomSerial() {
+    // 16 random bytes, high bit cleared so the DER INTEGER stays positive.
+    const bytes = random.getBytesSync(16);
+    const hex = util.bytesToHex(bytes);
+    const firstNibble = parseInt(hex[0], 16) & 0x7;
+    return firstNibble.toString(16) + hex.slice(1);
+}
+function daysFromNow(days) {
+    const d = new Date();
+    d.setDate(d.getDate() + days);
+    return d;
+}
+//# sourceMappingURL=mitm-leaf.js.map

package/dist/sandbox/mitm-leaf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mitm-leaf.js","sourceRoot":"","sources":["../../src/sandbox/mitm-leaf.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAA;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAC/B,OAAO,EAAE,mBAAmB,EAAsB,MAAM,UAAU,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnD,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAA;AASvC;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,QAAgB;IACvD,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACzC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IAEzB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAA;IACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;IAC/B,IAAI,CAAC,YAAY,GAAG,YAAY,EAAE,CAAA;IAClC,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;IACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;IAC/C,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC1D,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,CAAC,aAAa,CAAC;QACjB,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvD;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,IAAI;SACtB;QACD,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE;QACzC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE;QACxD,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,oEAAoE;QACpE,sEAAsE;QACtE,8BAA8B;KAC/B,CAAC,CAAA;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAErC,MAAM,IAAI,GAAa;QACrB,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO;QAChD,MAAM,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;KAC7C,CAAA;IACD,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAChC,eAAe,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAA;IAC9D,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAU,EAAE,QAAgB;IAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC9C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAA;IACzB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;IACtD,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;IAC/D,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACpC,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;IAK9B,yDAAyD;IACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE;QAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;AAClC,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,MAA6B;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAA;IACtC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC5B,OAAO,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;AAC5C,CAAC;AAED,SAAS,YAAY;IACnB,uEAAuE;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,GAAG,CAAA;IAC/C,OAAO,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAA;IACpB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAC7B,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/sandbox/request-filter.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Request-level filter hook for the forward proxy.
+ *
+ * Library consumers supply a `filterRequest` callback via
+ * `network.filterRequest`. It receives the parsed HTTP request (web-standard
+ * `Request`) and returns a decision. Applies to plain HTTP through the proxy
+ * and, when `tlsTerminate` is configured, to terminated HTTPS. The proxy
+ * enforces the decision; the library does not bless any matching DSL.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { Readable } from 'node:stream';
+export type RequestDecision = {
+    action: 'allow' | 'deny';
+    /**
+     * Human-readable reason. For denials this is surfaced to the sandboxed
+     * client in the response body so the agent can tell a policy block from a
+     * network failure.
+     */
+    reason?: string;
+};
+/**
+ * Called once per HTTP request that the proxy parses.
+ *
+ * - `request` is a web-standard `Request`: method, URL, headers, and a lazy
+ *   `request.body` stream (one branch of a tee — reading it does not consume
+ *   the bytes that get forwarded upstream). `request.signal` aborts when the
+ *   client disconnects.
+ * - **Throwing or rejecting denies the request.** This is the failure
+ *   contract for a security boundary: a buggy policy fails closed.
+ */
+export type FilterRequestCallback = (request: Request) => Promise<RequestDecision>;
+/**
+ * Build a `Request`, run the callback, and if denied write the 403 response
+ * and return `null`. On allow, returns the body stream the caller must pipe
+ * upstream — this is the original `IncomingMessage` when no tee was needed
+ * (GET/HEAD/OPTIONS), or the upstream-side branch of the tee otherwise.
+ * Callers must pipe the returned stream (not `req`) to the outbound request.
+ *
+ * For methods that carry a body, `req` is converted to a web stream and
+ * `tee()`'d: one branch goes to the callback's `Request.body`, the other is
+ * returned for the caller to forward. If the callback never reads its
+ * branch, we cancel it after the decision so the tee does not buffer the
+ * entire upload.
+ */
+export declare function decideAndRespond(filterRequest: FilterRequestCallback, req: IncomingMessage, res: ServerResponse, url: string, signal: AbortSignal): Promise<Readable | null>;
+//# sourceMappingURL=request-filter.d.ts.map

package/dist/sandbox/request-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-filter.d.ts","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGtC,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,eAAe,CAAC,CAAA;AAI7B;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,qBAAqB,EACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAsD1B"}

package/dist/sandbox/request-filter.js

@@ -0,0 +1,106 @@
+/**
+ * Request-level filter hook for the forward proxy.
+ *
+ * Library consumers supply a `filterRequest` callback via
+ * `network.filterRequest`. It receives the parsed HTTP request (web-standard
+ * `Request`) and returns a decision. Applies to plain HTTP through the proxy
+ * and, when `tlsTerminate` is configured, to terminated HTTPS. The proxy
+ * enforces the decision; the library does not bless any matching DSL.
+ */
+import { Readable } from 'node:stream';
+import { logForDebugging } from '../utils/debug.js';
+const BODYLESS_METHODS = new Set(['GET', 'HEAD', 'OPTIONS']);
+/**
+ * Build a `Request`, run the callback, and if denied write the 403 response
+ * and return `null`. On allow, returns the body stream the caller must pipe
+ * upstream — this is the original `IncomingMessage` when no tee was needed
+ * (GET/HEAD/OPTIONS), or the upstream-side branch of the tee otherwise.
+ * Callers must pipe the returned stream (not `req`) to the outbound request.
+ *
+ * For methods that carry a body, `req` is converted to a web stream and
+ * `tee()`'d: one branch goes to the callback's `Request.body`, the other is
+ * returned for the caller to forward. If the callback never reads its
+ * branch, we cancel it after the decision so the tee does not buffer the
+ * entire upload.
+ */
+export async function decideAndRespond(filterRequest, req, res, url, signal) {
+    let forCallback;
+    let forUpstream = req;
+    if (!BODYLESS_METHODS.has(req.method ?? 'GET')) {
+        const web = Readable.toWeb(req);
+        const [a, b] = web.tee();
+        forCallback = a;
+        forUpstream = Readable.fromWeb(b);
+    }
+    let webReq;
+    try {
+        webReq = new Request(url, {
+            method: req.method,
+            headers: incomingHeaders(req),
+            signal,
+            ...(forCallback ? { body: forCallback, duplex: 'half' } : {}),
+        });
+    }
+    catch (err) {
+        // Malformed URL/headers from the client — deny rather than crash.
+        deny(res, {
+            action: 'deny',
+            reason: `malformed request: ${err.message}`,
+        });
+        void forCallback?.cancel();
+        forUpstream.destroy();
+        return null;
+    }
+    let decision;
+    try {
+        decision = await filterRequest(webReq);
+    }
+    catch (err) {
+        decision = {
+            action: 'deny',
+            reason: `filterRequest threw: ${err.message}`,
+        };
+    }
+    // If the callback didn't read its branch, cancel it so tee() stops
+    // buffering bytes nobody will consume. If it did, the tee already buffered
+    // whatever was read; the upstream branch sees the same bytes.
+    if (forCallback && !webReq.bodyUsed) {
+        void forCallback.cancel();
+    }
+    if (decision.action === 'allow') {
+        logForDebugging(`[request-filter] allow ${req.method} ${url}`);
+        return forUpstream;
+    }
+    deny(res, decision);
+    forUpstream.destroy();
+    return null;
+}
+function deny(res, decision) {
+    const reason = decision.reason ?? 'denied by filterRequest';
+    logForDebugging(`[request-filter] deny: ${reason}`);
+    if (res.headersSent) {
+        res.destroy();
+        return;
+    }
+    res.writeHead(403, {
+        'Content-Type': 'text/plain',
+        'X-Proxy-Error': 'blocked-by-sandbox-runtime',
+    });
+    res.end(reason + '\n');
+}
+function incomingHeaders(req) {
+    const h = new Headers();
+    for (const [k, v] of Object.entries(req.headers)) {
+        if (v === undefined)
+            continue;
+        if (Array.isArray(v)) {
+            for (const vv of v)
+                h.append(k, vv);
+        }
+        else {
+            h.append(k, v);
+        }
+    }
+    return h;
+}
+//# sourceMappingURL=request-filter.js.map

package/dist/sandbox/request-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-filter.js","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AA0BnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAoC,EACpC,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,MAAmB;IAEnB,IAAI,WAAmD,CAAA;IACvD,IAAI,WAAW,GAAa,GAAG,CAAA;IAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAA;QAC7D,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAA;QACxB,WAAW,GAAG,CAAC,CAAA;QACf,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;YAC7B,MAAM;YACN,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE;SACvD,CAAC,CAAA;QACF,KAAK,WAAW,EAAE,MAAM,EAAE,CAAA;QAC1B,WAAW,CAAC,OAAO,EAAE,CAAA;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,QAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,GAAG;YACT,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE;SACzD,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAA;IAC3B,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,eAAe,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;QAC9D,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnB,WAAW,CAAC,OAAO,EAAE,CAAA;IACrB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,QAAyB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,yBAAyB,CAAA;IAC3D,eAAe,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAA;IACnD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,EAAE,CAAA;QACb,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,YAAY;QAC5B,eAAe,EAAE,4BAA4B;KAC9C,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,CAAC,GAAG,IAAI,OAAO,EAAE,CAAA;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,EAAE,IAAI,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC"}

package/dist/sandbox/sandbox-config.d.ts

@@ -2,6 +2,7 @@
  * Configuration for Sandbox Runtime
  * This is the main configuration interface that consumers pass to SandboxManager.initialize()
  */
+import type { FilterRequestCallback } from './request-filter.js';
 import { z } from 'zod';
 /**
  * Schema for MITM proxy configuration
@@ -57,15 +58,22 @@ export declare const NetworkConfigSchema: z.ZodObject<{
         socketPath: string;
         domains: string[];
     }>>;
-    tlsTerminate: z.ZodOptional<z.ZodObject<{
-        caCertPath: z.ZodString;
-        caKeyPath: z.ZodString;
+    filterRequest: z.ZodOptional<z.ZodType<FilterRequestCallback, z.ZodTypeDef, FilterRequestCallback>>;
+    tlsTerminate: z.ZodOptional<z.ZodEffects<z.ZodObject<{
+        caCertPath: z.ZodOptional<z.ZodString>;
+        caKeyPath: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        caCertPath: string;
-        caKeyPath: string;
+        caCertPath?: string | undefined;
+        caKeyPath?: string | undefined;
     }, {
-        caCertPath: string;
-        caKeyPath: string;
+        caCertPath?: string | undefined;
+        caKeyPath?: string | undefined;
+    }>, {
+        caCertPath?: string | undefined;
+        caKeyPath?: string | undefined;
+    }, {
+        caCertPath?: string | undefined;
+        caKeyPath?: string | undefined;
     }>>;
     parentProxy: z.ZodOptional<z.ZodObject<{
         http: z.ZodOptional<z.ZodString>;
@@ -93,9 +101,10 @@ export declare const NetworkConfigSchema: z.ZodObject<{
         socketPath: string;
         domains: string[];
     } | undefined;
+    filterRequest?: FilterRequestCallback | undefined;
     tlsTerminate?: {
-        caCertPath: string;
-        caKeyPath: string;
+        caCertPath?: string | undefined;
+        caKeyPath?: string | undefined;
     } | undefined;
     parentProxy?: {
         http?: string | undefined;
@@ -115,9 +124,10 @@ export declare const NetworkConfigSchema: z.ZodObject<{
         socketPath: string;
         domains: string[];
     } | undefined;
+    filterRequest?: FilterRequestCallback | undefined;
     tlsTerminate?: {
-        caCertPath: string;
-        caKeyPath: string;
+        caCertPath?: string | undefined;
+        caKeyPath?: string | undefined;
     } | undefined;
     parentProxy?: {
         http?: string | undefined;
@@ -204,15 +214,22 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
             socketPath: string;
             domains: string[];
         }>>;
-        tlsTerminate: z.ZodOptional<z.ZodObject<{
-            caCertPath: z.ZodString;
-            caKeyPath: z.ZodString;
+        filterRequest: z.ZodOptional<z.ZodType<FilterRequestCallback, z.ZodTypeDef, FilterRequestCallback>>;
+        tlsTerminate: z.ZodOptional<z.ZodEffects<z.ZodObject<{
+            caCertPath: z.ZodOptional<z.ZodString>;
+            caKeyPath: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
-            caCertPath: string;
-            caKeyPath: string;
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
+        }, {
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
+        }>, {
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
         }, {
-            caCertPath: string;
-            caKeyPath: string;
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
         }>>;
         parentProxy: z.ZodOptional<z.ZodObject<{
             http: z.ZodOptional<z.ZodString>;
@@ -240,9 +257,10 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
             socketPath: string;
             domains: string[];
         } | undefined;
+        filterRequest?: FilterRequestCallback | undefined;
         tlsTerminate?: {
-            caCertPath: string;
-            caKeyPath: string;
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;
@@ -262,9 +280,10 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
             socketPath: string;
             domains: string[];
         } | undefined;
+        filterRequest?: FilterRequestCallback | undefined;
         tlsTerminate?: {
-            caCertPath: string;
-            caKeyPath: string;
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;
@@ -336,9 +355,10 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
             socketPath: string;
             domains: string[];
         } | undefined;
+        filterRequest?: FilterRequestCallback | undefined;
         tlsTerminate?: {
-            caCertPath: string;
-            caKeyPath: string;
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;
@@ -384,9 +404,10 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
             socketPath: string;
             domains: string[];
         } | undefined;
+        filterRequest?: FilterRequestCallback | undefined;
         tlsTerminate?: {
-            caCertPath: string;
-            caKeyPath: string;
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;

package/dist/sandbox/sandbox-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-config.d.ts","sourceRoot":"","sources":["../../src/sandbox/sandbox-config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAgEvB;;;GAGG;AACH,QAAA,MAAM,qBAAqB;;;;;;;;;EAQzB,CAAA;AAEF;;;;GAIG;AACH,QAAA,MAAM,uBAAuB;;;;;;;;;;;;EAoB3B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwF9B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;EAqBjC,CAAA;AAEF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,2DAItC,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAY9B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;EAa9B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+DrC,CAAA;AAGF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AACnE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AACvE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAC/D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AACrE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAA;AACD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAC/D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAC/D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA"}
+{"version":3,"file":"sandbox-config.d.ts","sourceRoot":"","sources":["../../src/sandbox/sandbox-config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAGhE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAgEvB;;;GAGG;AACH,QAAA,MAAM,qBAAqB;;;;;;;;;EAQzB,CAAA;AAEF;;;;GAIG;AACH,QAAA,MAAM,uBAAuB;;;;;;;;;;;;EAoB3B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4G9B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;EAqBjC,CAAA;AAEF;;;GAGG;AACH,eAAO,MAAM,4BAA4B,2DAItC,CAAA;AAEH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAY9B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;EAa9B,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+DrC,CAAA;AAGF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AACnE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AACvE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAC/D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AACrE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAA;AACD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAC/D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAC/D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAA"}