@sysid/sandbox-runtime-improved 0.0.56-sysid.1 → 0.0.64-sysid.1

package/dist/sandbox/mux-proxy.d.ts

@@ -0,0 +1,59 @@
+import { type Server, type Socket } from 'node:net';
+import type { Server as HttpServer } from 'node:http';
+export interface MuxProxyOptions {
+    /**
+     * The HTTP CONNECT/absolute-URI proxy. Must NOT already be listening;
+     * the mux owns its listen lifecycle (on a private unix socket on
+     * macOS/Linux, or a localhost TCP port on Windows).
+     */
+    httpServer: HttpServer;
+    /**
+     * Per-connection SOCKS entry point. The mux calls this with a socket
+     * whose peeked first byte has been `unshift()`ed back, so the handler
+     * sees the full SOCKS greeting starting at byte 0.
+     */
+    handleSocksConnection: (socket: Socket) => void;
+    /**
+     * How long to wait for the client's first byte before destroying the
+     * connection. Guards against connect-then-stall clients holding a slot.
+     */
+    firstByteTimeoutMs?: number;
+    /**
+     * Windows only: range the HTTP backend's TCP port must fall inside, so
+     * the WFP loopback permit covers the mux→backend hop. Ignored on other
+     * platforms (unix socket needs no port).
+     */
+    httpBackendPortRange?: readonly [number, number];
+}
+export interface MuxProxyServer {
+    /** The front-end TCP listener. Call `.listen()` on this. */
+    server: Server;
+    /** Bound front-end port, once listening. */
+    getPort(): number | undefined;
+    /**
+     * Start the HTTP backend listener (unix socket on macOS/Linux, localhost
+     * TCP on Windows). Must be awaited before the front-end `.listen()`s so
+     * an early HTTP connection never dispatches to an unbound backend.
+     * Returns the backend's TCP port on Windows (so the caller can exclude
+     * it when binding the front-end in the same range), or undefined on
+     * unix-socket platforms.
+     */
+    listenHttpBackend(): Promise<number | undefined>;
+    /** Tear down front-end, backend, and all open client sockets. */
+    close(): Promise<void>;
+    /** unref() both listeners so they don't keep the event loop alive. */
+    unref(): void;
+}
+/**
+ * Single-port proxy front-end that dispatches each connection to either the
+ * SOCKS handler or the HTTP proxy based on the first byte the client sends.
+ *
+ * The HTTP leg cannot use `httpServer.emit('connection', socket)` because
+ * Bun's `http.Server` does not implement that injection path (Node does).
+ * Instead the HTTP backend listens on a private endpoint — a unix socket on
+ * macOS/Linux, a localhost TCP port on Windows — and the mux pipes the
+ * client socket to it. SOCKS connections are handed directly to the
+ * library's per-connection entry, no extra hop.
+ */
+export declare function createMuxProxyServer(opts: MuxProxyOptions): MuxProxyServer;
+//# sourceMappingURL=mux-proxy.d.ts.map

package/dist/sandbox/mux-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mux-proxy.d.ts","sourceRoot":"","sources":["../../src/sandbox/mux-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,UAAU,CAAA;AAC1E,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAA;AAmBrD,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,UAAU,EAAE,UAAU,CAAA;IACtB;;;;OAIG;IACH,qBAAqB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAA;IAC/C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAA;IACd,4CAA4C;IAC5C,OAAO,IAAI,MAAM,GAAG,SAAS,CAAA;IAC7B;;;;;;;OAOG;IACH,iBAAiB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IAChD,iEAAiE;IACjE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,sEAAsE;IACtE,KAAK,IAAI,IAAI,CAAA;CACd;AAaD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,eAAe,GAAG,cAAc,CA8I1E"}

package/dist/sandbox/mux-proxy.js

@@ -0,0 +1,159 @@
+import { createServer, connect } from 'node:net';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { unlink } from 'node:fs/promises';
+import { logForDebugging } from '../utils/debug.js';
+import { getPlatform } from '../utils/platform.js';
+import { listenInRange } from './listen-in-range.js';
+/**
+ * First-byte values that select the SOCKS handler. SOCKS5's greeting is
+ * `VER NMETHODS METHODS...` with VER=0x05; SOCKS4's CONNECT is
+ * `VN CD DSTPORT...` with VN=0x04. Everything else on this port is HTTP:
+ * request methods start with an ASCII uppercase letter (>= 0x41 'A'),
+ * h2-prior-knowledge starts `PRI ` (0x50), and a stray TLS ClientHello
+ * starts 0x16 — none of which collide with 0x04/0x05. A one-byte peek is
+ * therefore an unambiguous discriminator.
+ */
+const SOCKS_FIRST_BYTES = new Set([0x04, 0x05]);
+const DEFAULT_FIRST_BYTE_TIMEOUT_MS = 10000;
+let backendSeq = 0;
+function unixSocketPath() {
+    // Keep it short — macOS sun_path is 104 bytes.
+    return join(tmpdir(), `srt-mux-${process.pid}-${(backendSeq++).toString(36)}.sock`);
+}
+/**
+ * Single-port proxy front-end that dispatches each connection to either the
+ * SOCKS handler or the HTTP proxy based on the first byte the client sends.
+ *
+ * The HTTP leg cannot use `httpServer.emit('connection', socket)` because
+ * Bun's `http.Server` does not implement that injection path (Node does).
+ * Instead the HTTP backend listens on a private endpoint — a unix socket on
+ * macOS/Linux, a localhost TCP port on Windows — and the mux pipes the
+ * client socket to it. SOCKS connections are handed directly to the
+ * library's per-connection entry, no extra hop.
+ */
+export function createMuxProxyServer(opts) {
+    const firstByteTimeoutMs = opts.firstByteTimeoutMs ?? DEFAULT_FIRST_BYTE_TIMEOUT_MS;
+    const isWindows = getPlatform() === 'windows';
+    // Where the HTTP backend listens. Exactly one of these is set after
+    // listenHttpBackend() resolves.
+    let backendSocketPath;
+    let backendTcpPort;
+    // Track every accepted client socket so close() can tear them down
+    // immediately rather than waiting for in-flight tunnels to drain.
+    const openSockets = new Set();
+    function dispatchHttp(client) {
+        if (backendSocketPath === undefined && backendTcpPort === undefined) {
+            // listenHttpBackend() must resolve before the front-end listens; this
+            // guard is defense-in-depth in case a future caller reorders them.
+            logForDebugging('mux: HTTP dispatch before backend bound; dropping', {
+                level: 'error',
+            });
+            client.destroy();
+            return;
+        }
+        const upstream = backendSocketPath
+            ? connect(backendSocketPath)
+            : connect(backendTcpPort, '127.0.0.1');
+        upstream.on('error', err => {
+            // Surface a 502 with the errno code so callers (and CI logs) can tell
+            // *why* the backend was unreachable instead of an opaque empty-reply.
+            // Full error (including path) goes to debug logging only — the client
+            // is our own sandboxed child, but there's no need to echo host paths.
+            const code = err.code ?? 'ERR';
+            logForDebugging(`mux: HTTP backend dial failed: ${err.message}`, { level: 'error' });
+            if (!client.destroyed) {
+                client.end(`HTTP/1.1 502 Bad Gateway\r\nConnection: close\r\n\r\n` +
+                    `mux backend dial failed (${code})\n`);
+            }
+        });
+        client.on('error', () => upstream.destroy());
+        client.once('close', () => upstream.destroy());
+        upstream.once('close', () => client.destroy());
+        client.pipe(upstream);
+        upstream.pipe(client);
+    }
+    const server = createServer(client => {
+        openSockets.add(client);
+        client.once('close', () => openSockets.delete(client));
+        client.on('error', err => logForDebugging(`mux: client socket error: ${err.message}`));
+        const timer = setTimeout(() => {
+            logForDebugging('mux: first-byte timeout; destroying connection');
+            client.destroy();
+        }, firstByteTimeoutMs);
+        // Don't let a pending sniff keep the process alive.
+        if (typeof timer.unref === 'function')
+            timer.unref();
+        client.once('readable', () => {
+            clearTimeout(timer);
+            const peek = client.read(1);
+            if (!peek || peek.length === 0) {
+                // EOF before any byte — client connected and closed.
+                client.destroy();
+                return;
+            }
+            client.unshift(peek);
+            if (SOCKS_FIRST_BYTES.has(peek[0])) {
+                opts.handleSocksConnection(client);
+            }
+            else {
+                dispatchHttp(client);
+            }
+        });
+    });
+    return {
+        server,
+        getPort() {
+            const addr = server.address();
+            return addr && typeof addr === 'object' ? addr.port : undefined;
+        },
+        async listenHttpBackend() {
+            if (!isWindows) {
+                const path = unixSocketPath();
+                // A prior process with the same PID may have crashed without
+                // unlinking; clear any stale file so listen() doesn't EADDRINUSE.
+                await unlink(path).catch(() => { });
+                await new Promise((resolve, reject) => {
+                    opts.httpServer.once('error', reject);
+                    opts.httpServer.listen(path, () => {
+                        opts.httpServer.removeListener('error', reject);
+                        resolve();
+                    });
+                });
+                backendSocketPath = path;
+                logForDebugging(`mux: HTTP backend listening on ${path}`);
+                return undefined;
+            }
+            // Windows: AF_UNIX support under Bun is unverified, so the backend
+            // listens on a localhost TCP port inside the WFP-permitted range.
+            // The mux→backend hop originates from the parent process (not the
+            // sandboxed child), so WFP doesn't strictly require it; staying in
+            // range just keeps the port surface predictable.
+            await listenInRange(opts.httpServer, p => opts.httpServer.listen(p, '127.0.0.1'), opts.httpBackendPortRange, new Set());
+            const addr = opts.httpServer.address();
+            backendTcpPort = addr && typeof addr === 'object' ? addr.port : undefined;
+            logForDebugging(`mux: HTTP backend listening on 127.0.0.1:${backendTcpPort}`);
+            return backendTcpPort;
+        },
+        async close() {
+            for (const s of openSockets)
+                s.destroy();
+            openSockets.clear();
+            await new Promise(resolve => server.close(() => resolve()));
+            // The mux owns httpServer's listen lifecycle, so it owns close too.
+            // sandbox-manager.reset() additionally calls forceCloseHttpServer()
+            // for closeAllConnections() semantics; double-close is a no-op.
+            await new Promise(resolve => opts.httpServer.close(() => resolve()));
+            if (backendSocketPath) {
+                await unlink(backendSocketPath).catch(() => { });
+                backendSocketPath = undefined;
+            }
+            backendTcpPort = undefined;
+        },
+        unref() {
+            server.unref();
+            opts.httpServer.unref();
+        },
+    };
+}
+//# sourceMappingURL=mux-proxy.js.map

package/dist/sandbox/mux-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mux-proxy.js","sourceRoot":"","sources":["../../src/sandbox/mux-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,OAAO,EAA4B,MAAM,UAAU,CAAA;AAE1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEpD;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAgD/C,MAAM,6BAA6B,GAAG,KAAM,CAAA;AAE5C,IAAI,UAAU,GAAG,CAAC,CAAA;AAClB,SAAS,cAAc;IACrB,+CAA+C;IAC/C,OAAO,IAAI,CACT,MAAM,EAAE,EACR,WAAW,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAC7D,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAqB;IACxD,MAAM,kBAAkB,GACtB,IAAI,CAAC,kBAAkB,IAAI,6BAA6B,CAAA;IAC1D,MAAM,SAAS,GAAG,WAAW,EAAE,KAAK,SAAS,CAAA;IAE7C,oEAAoE;IACpE,gCAAgC;IAChC,IAAI,iBAAqC,CAAA;IACzC,IAAI,cAAkC,CAAA;IAEtC,mEAAmE;IACnE,kEAAkE;IAClE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IAErC,SAAS,YAAY,CAAC,MAAc;QAClC,IAAI,iBAAiB,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACpE,sEAAsE;YACtE,mEAAmE;YACnE,eAAe,CAAC,mDAAmD,EAAE;gBACnE,KAAK,EAAE,OAAO;aACf,CAAC,CAAA;YACF,MAAM,CAAC,OAAO,EAAE,CAAA;YAChB,OAAM;QACR,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB;YAChC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAC5B,CAAC,CAAC,OAAO,CAAC,cAAe,EAAE,WAAW,CAAC,CAAA;QACzC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YACzB,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,IAAI,KAAK,CAAA;YACzD,eAAe,CACb,kCAAmC,GAAa,CAAC,OAAO,EAAE,EAC1D,EAAE,KAAK,EAAE,OAAO,EAAE,CACnB,CAAA;YACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,CACR,uDAAuD;oBACrD,4BAA4B,IAAI,KAAK,CACxC,CAAA;YACH,CAAC;QACH,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACrB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE;QACnC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACvB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACtD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CACvB,eAAe,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAC5D,CAAA;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,eAAe,CAAC,gDAAgD,CAAC,CAAA;YACjE,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC,EAAE,kBAAkB,CAAC,CAAA;QACtB,oDAAoD;QACpD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QAEpD,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE;YAC3B,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAkB,CAAA;YAC5C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,qDAAqD;gBACrD,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACpB,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;YACpC,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,MAAM,CAAC,CAAA;YACtB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM;QACN,OAAO;YACL,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;YAC7B,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;QACjE,CAAC;QACD,KAAK,CAAC,iBAAiB;YACrB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,cAAc,EAAE,CAAA;gBAC7B,6DAA6D;gBAC7D,kEAAkE;gBAClE,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAClC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;oBACrC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;wBAChC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;wBAC/C,OAAO,EAAE,CAAA;oBACX,CAAC,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;gBACF,iBAAiB,GAAG,IAAI,CAAA;gBACxB,eAAe,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAA;gBACzD,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,kEAAkE;YAClE,mEAAmE;YACnE,iDAAiD;YACjD,MAAM,aAAa,CACjB,IAAI,CAAC,UAAU,EACf,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,CAAC,EAC3C,IAAI,CAAC,oBAAoB,EACzB,IAAI,GAAG,EAAE,CACV,CAAA;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAA;YACtC,cAAc,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;YACzE,eAAe,CACb,4CAA4C,cAAc,EAAE,CAC7D,CAAA;YACD,OAAO,cAAc,CAAA;QACvB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,KAAK,MAAM,CAAC,IAAI,WAAW;gBAAE,CAAC,CAAC,OAAO,EAAE,CAAA;YACxC,WAAW,CAAC,KAAK,EAAE,CAAA;YACnB,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACjE,oEAAoE;YACpE,oEAAoE;YACpE,gEAAgE;YAChE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YAC1E,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAC/C,iBAAiB,GAAG,SAAS,CAAA;YAC/B,CAAC;YACD,cAAc,GAAG,SAAS,CAAA;QAC5B,CAAC;QACD,KAAK;YACH,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/sandbox/request-filter.d.ts

@@ -7,7 +7,7 @@
  * and, when `tlsTerminate` is configured, to terminated HTTPS. The proxy
  * enforces the decision; the library does not bless any matching DSL.
  */
-import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { IncomingHttpHeaders, IncomingMessage, ServerResponse } from 'node:http';
 import { Readable } from 'node:stream';
 export type RequestDecision = {
     action: 'allow' | 'deny';
@@ -29,6 +29,16 @@ export type RequestDecision = {
  *   contract for a security boundary: a buggy policy fails closed.
  */
 export type FilterRequestCallback = (request: Request) => Promise<RequestDecision>;
+/**
+ * Mutate the headers that will be sent upstream, in place.
+ *
+ * Runs after the allow/deny decision and hop-by-hop stripping, immediately
+ * before the upstream request is built. `destHost` is the canonical
+ * destination host (the CONNECT target on the TLS-terminated path, or the
+ * absolute-URI host on the plain-HTTP path) — never the client-supplied
+ * Host header, which is spoofable.
+ */
+export type MutateForwardedHeaders = (headers: IncomingHttpHeaders, destHost: string) => void;
 /**
  * Build a `Request`, run the callback, and if denied write the 403 response
  * and return `null`. On allow, returns the body stream the caller must pipe

package/dist/sandbox/request-filter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-filter.d.ts","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGtC,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,eAAe,CAAC,CAAA;AAI7B;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,qBAAqB,EACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAsD1B"}
+{"version":3,"file":"request-filter.d.ts","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,eAAe,EACf,cAAc,EACf,MAAM,WAAW,CAAA;AAClB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAGtC,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAClC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,eAAe,CAAC,CAAA;AAE7B;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACnC,OAAO,EAAE,mBAAmB,EAC5B,QAAQ,EAAE,MAAM,KACb,IAAI,CAAA;AAIT;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,qBAAqB,EACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAsD1B"}

package/dist/sandbox/request-filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-filter.js","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AA0BnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAoC,EACpC,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,MAAmB;IAEnB,IAAI,WAAmD,CAAA;IACvD,IAAI,WAAW,GAAa,GAAG,CAAA;IAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAA;QAC7D,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAA;QACxB,WAAW,GAAG,CAAC,CAAA;QACf,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;YAC7B,MAAM;YACN,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE;SACvD,CAAC,CAAA;QACF,KAAK,WAAW,EAAE,MAAM,EAAE,CAAA;QAC1B,WAAW,CAAC,OAAO,EAAE,CAAA;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,QAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,GAAG;YACT,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE;SACzD,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAA;IAC3B,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,eAAe,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;QAC9D,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnB,WAAW,CAAC,OAAO,EAAE,CAAA;IACrB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,QAAyB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,yBAAyB,CAAA;IAC3D,eAAe,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAA;IACnD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,EAAE,CAAA;QACb,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,YAAY;QAC5B,eAAe,EAAE,4BAA4B;KAC9C,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,CAAC,GAAG,IAAI,OAAO,EAAE,CAAA;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,EAAE,IAAI,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC"}
+{"version":3,"file":"request-filter.js","sourceRoot":"","sources":["../../src/sandbox/request-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAwCnD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAE5D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAoC,EACpC,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,MAAmB;IAEnB,IAAI,WAAmD,CAAA;IACvD,IAAI,WAAW,GAAa,GAAG,CAAA;IAC/B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAA;QAC7D,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAA;QACxB,WAAW,GAAG,CAAC,CAAA;QACf,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,CAAC;IAED,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC;YAC7B,MAAM;YACN,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE;SACvD,CAAC,CAAA;QACF,KAAK,WAAW,EAAE,MAAM,EAAE,CAAA;QAC1B,WAAW,CAAC,OAAO,EAAE,CAAA;QACrB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,QAAyB,CAAA;IAC7B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,GAAG;YACT,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,wBAAyB,GAAa,CAAC,OAAO,EAAE;SACzD,CAAA;IACH,CAAC;IAED,mEAAmE;IACnE,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpC,KAAK,WAAW,CAAC,MAAM,EAAE,CAAA;IAC3B,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,eAAe,CAAC,0BAA0B,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAA;QAC9D,OAAO,WAAW,CAAA;IACpB,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACnB,WAAW,CAAC,OAAO,EAAE,CAAA;IACrB,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,IAAI,CAAC,GAAmB,EAAE,QAAyB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,yBAAyB,CAAA;IAC3D,eAAe,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAA;IACnD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,GAAG,CAAC,OAAO,EAAE,CAAA;QACb,OAAM;IACR,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,YAAY;QAC5B,eAAe,EAAE,4BAA4B;KAC9C,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,GAAoB;IAC3C,MAAM,CAAC,GAAG,IAAI,OAAO,EAAE,CAAA;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,MAAM,EAAE,IAAI,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC"}