@yiaany/ghostapi 0.1.7 → 0.1.8

package/dist/egress/capabilities.d.ts

@@ -0,0 +1,32 @@
+export type EgressGuaranteeLevel = "unsupported" | "http-proxy-guidance" | "process-level-enforcement" | "container-network-namespace-enforcement";
+export type EgressCapabilityStatus = "available" | "degraded" | "not-implemented" | "unsupported";
+export type EgressCapability = {
+    id: string;
+    title: string;
+    status: EgressCapabilityStatus;
+    guarantee: EgressGuaranteeLevel;
+    detail: string;
+    requiredPrivileges: string[];
+    remainingBypasses: string[];
+};
+export type EgressRuntimeInfo = {
+    platform: NodeJS.Platform;
+    arch: string;
+    nodeVersion: string;
+};
+export type EgressCapabilityReport = {
+    schemaVersion: 1;
+    runtime: EgressRuntimeInfo;
+    isolated: false;
+    currentGuarantee: "http-proxy-guidance";
+    summary: string;
+    capabilities: EgressCapability[];
+    globalStateChanged: false;
+    remainingBypasses: string[];
+    nextArchitecture: string[];
+};
+export type EgressRuntimeInput = Partial<EgressRuntimeInfo> & {
+    nodeNetworkPermission?: boolean;
+};
+export declare function detectEgressCapabilities(input?: EgressRuntimeInput): EgressCapabilityReport;
+export declare function formatEgressCapabilityReport(report: EgressCapabilityReport): string;

package/dist/egress/capabilities.js

@@ -0,0 +1,165 @@
+const PROXY_BYPASSES = [
+    "A new HTTP client, direct IP address, custom DNS resolver, UDP, QUIC, local-network target, or subprocess can ignore proxy configuration.",
+    "A malicious process running as the same user can create its own network path."
+];
+const HOSTILE_BYPASSES = [
+    "An administrator/root-equivalent actor and a compromised host are outside this threat model.",
+    "A separate process running outside the launched containment boundary remains able to use the host network."
+];
+export function detectEgressCapabilities(input = {}) {
+    const runtime = {
+        platform: input.platform ?? process.platform,
+        arch: input.arch ?? process.arch,
+        nodeVersion: input.nodeVersion ?? process.versions.node
+    };
+    const capabilities = [
+        createProxyGuidanceCapability(),
+        createNodePermissionCapability(input.nodeNetworkPermission ?? process.allowedNodeEnvironmentFlags.has("--allow-net")),
+        ...createPlatformCapabilities(runtime.platform)
+    ];
+    return {
+        schemaVersion: 1,
+        runtime,
+        isolated: false,
+        currentGuarantee: "http-proxy-guidance",
+        summary: "This diagnostic has not launched an isolated process. Linux ghostapi run can provide loopback-only namespace enforcement after successful local preflight.",
+        capabilities,
+        globalStateChanged: false,
+        remainingBypasses: [...PROXY_BYPASSES, ...HOSTILE_BYPASSES],
+        nextArchitecture: architectureFor(runtime.platform)
+    };
+}
+export function formatEgressCapabilityReport(report) {
+    const lines = [
+        "GhostAPI egress diagnosis",
+        `Runtime: ${report.runtime.platform}/${report.runtime.arch}, Node.js ${report.runtime.nodeVersion}`,
+        "Status: NO PROCESS LAUNCHED",
+        "Current diagnostic guarantee: HTTP proxy guidance only",
+        "",
+        "Capabilities:"
+    ];
+    for (const capability of report.capabilities) {
+        lines.push(`  ${capability.status.toUpperCase().padEnd(15)} ${capability.title}: ${capability.detail}`);
+        if (capability.requiredPrivileges.length > 0)
+            lines.push(`                  Privileges/setup: ${capability.requiredPrivileges.join("; ")}`);
+        if (capability.remainingBypasses.length > 0)
+            lines.push(`                  Bypasses: ${capability.remainingBypasses.join(" ")}`);
+    }
+    lines.push("", "Remaining bypasses:");
+    for (const bypass of report.remainingBypasses)
+        lines.push(`  - ${bypass}`);
+    lines.push("", "Next architecture:");
+    for (const step of report.nextArchitecture)
+        lines.push(`  - ${step}`);
+    lines.push("", "No system-wide proxy or firewall rules were inspected or changed.");
+    return lines.join("\n");
+}
+function createProxyGuidanceCapability() {
+    return {
+        id: "http-proxy-guidance",
+        title: "HTTP proxy guidance",
+        status: "available",
+        guarantee: "http-proxy-guidance",
+        detail: "GhostAPI can guide supported HTTP clients to a local endpoint, but does not intercept or block other traffic.",
+        requiredPrivileges: [],
+        remainingBypasses: PROXY_BYPASSES
+    };
+}
+function createNodePermissionCapability(supportsNetworkPermission) {
+    return {
+        id: "node-permission-model",
+        title: "Node.js Permission Model",
+        status: supportsNetworkPermission ? "degraded" : "unsupported",
+        guarantee: "process-level-enforcement",
+        detail: supportsNetworkPermission
+            ? "A Node process started with --permission and without --allow-net can deny network access, but the model is a seat belt for trusted code, not hostile-code sandboxing."
+            : "This Node.js version does not provide a supported network-deny control suitable for GhostAPI egress enforcement.",
+        requiredPrivileges: supportsNetworkPermission ? ["Launch the target with --permission and do not grant --allow-net."] : [],
+        remainingBypasses: supportsNetworkPermission
+            ? ["It applies only to the launched Node process and does not provide security guarantees against malicious code or other processes."]
+            : ["Any Node program, child process, or native tool can still create network connections."]
+    };
+}
+function createPlatformCapabilities(platform) {
+    switch (platform) {
+        case "linux":
+            return [
+                {
+                    id: "linux-network-namespace",
+                    title: "Linux network namespace",
+                    status: "degraded",
+                    guarantee: "process-level-enforcement",
+                    detail: "ghostapi run uses a fresh user, mount, and network namespace with loopback-only GhostAPI. It fails closed unless local unshare and ip preflight succeeds.",
+                    requiredPrivileges: ["util-linux unshare, iproute2 ip, and host policy allowing the required unprivileged user, mount, and network namespaces."],
+                    remainingBypasses: ["Denied kernel socket attempts are enforced but not individually attributable by this backend.", "The target must use GhostAPI loopback configuration; TLS provider-host interception is not implemented.", "Filesystem UNIX sockets that the same user can access, such as a mounted container-control socket, are outside this network-namespace boundary.", ...HOSTILE_BYPASSES]
+                },
+                createContainerCapability("An OCI runtime configured with a no-network mode")
+            ];
+        case "darwin":
+            return [
+                {
+                    id: "macos-app-sandbox",
+                    title: "macOS App Sandbox",
+                    status: "degraded",
+                    guarantee: "unsupported",
+                    detail: "App Sandbox network access is entitlement-based for a signed app and is not a generic GhostAPI subprocess launcher.",
+                    requiredPrivileges: ["A signed sandboxed application and an entitlement configuration designed for the launched helper."],
+                    remainingBypasses: ["An arbitrary command launched outside that app sandbox is not constrained.", ...HOSTILE_BYPASSES]
+                },
+                createContainerCapability("A separately configured Linux-container or VM runtime")
+            ];
+        case "win32":
+            return [
+                {
+                    id: "windows-appcontainer",
+                    title: "Windows AppContainer",
+                    status: "not-implemented",
+                    guarantee: "process-level-enforcement",
+                    detail: "AppContainer can deny network capability to a launched process, but GhostAPI does not create profiles or launch AppContainers yet.",
+                    requiredPrivileges: ["An AppContainer/LPAC launcher, a minimal capability profile, and a writable sandbox directory."],
+                    remainingBypasses: ["A normal Win32 child process is not in an AppContainer.", ...HOSTILE_BYPASSES]
+                },
+                createContainerCapability("A separately configured Windows or Linux container/VM runtime")
+            ];
+        default:
+            return [
+                {
+                    id: "native-egress-isolation",
+                    title: "Native egress isolation",
+                    status: "unsupported",
+                    guarantee: "unsupported",
+                    detail: `GhostAPI has no supported native egress-isolation backend for ${platform}.`,
+                    requiredPrivileges: [],
+                    remainingBypasses: PROXY_BYPASSES
+                },
+                createContainerCapability("A separately configured OCI runtime")
+            ];
+    }
+}
+function createContainerCapability(requirement) {
+    return {
+        id: "container-network-namespace",
+        title: "Container or network-namespace enforcement",
+        status: "not-implemented",
+        guarantee: "container-network-namespace-enforcement",
+        detail: "A no-network container can provide the strongest planned local guarantee, but GhostAPI does not manage containers in this release.",
+        requiredPrivileges: [requirement, "An image and mount policy that excludes host network-control sockets and credentials."],
+        remainingBypasses: ["Mounted Docker/Podman sockets, host networking, privileged mode, or inherited credentials would break the boundary.", ...HOSTILE_BYPASSES]
+    };
+}
+function architectureFor(platform) {
+    const nativeStep = platform === "linux"
+        ? "Linux launcher is available with user, mount, and network namespaces plus loopback-only GhostAPI; add a reviewed policy gateway before supporting external allowlist routes or transparent provider-host TLS interception."
+        : platform === "win32"
+            ? "Implement a Windows AppContainer/LPAC launcher with no network capabilities, a per-run profile, and deterministic profile cleanup."
+            : platform === "darwin"
+                ? "Use an explicit container or VM backend first; do not claim arbitrary-child App Sandbox enforcement."
+                : "Use an explicit container or VM backend; keep this platform unsupported until a reviewed backend exists.";
+    return [
+        "Keep policy parsing and evidence collection in an unprivileged GhostAPI parent process.",
+        nativeStep,
+        "Add an OCI no-network backend that exposes GhostAPI only through a deliberate local transport, never host networking.",
+        "Use child-owned namespaces, profiles, and containers so crash cleanup is automatic; do not modify global proxy or firewall state."
+    ];
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/egress/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/egress/capabilities.ts"],"names":[],"mappings":"AAwCA,MAAM,cAAc,GAAG;IACrB,2IAA2I;IAC3I,+EAA+E;CAChF,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,8FAA8F;IAC9F,4GAA4G;CAC7G,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,QAA4B,EAAE;IACrE,MAAM,OAAO,GAAsB;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC5C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI;KACxD,CAAC;IACF,MAAM,YAAY,GAAG;QACnB,6BAA6B,EAAE;QAC/B,8BAA8B,CAAC,KAAK,CAAC,qBAAqB,IAAI,OAAO,CAAC,2BAA2B,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACrH,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC;KAChD,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO;QACP,QAAQ,EAAE,KAAK;QACf,gBAAgB,EAAE,qBAAqB;QACvC,OAAO,EAAE,4JAA4J;QACrK,YAAY;QACZ,kBAAkB,EAAE,KAAK;QACzB,iBAAiB,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,gBAAgB,CAAC;QAC3D,gBAAgB,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAA8B;IACzE,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;QACnG,6BAA6B;QAC7B,wDAAwD;QACxD,EAAE;QACF,eAAe;KAChB,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACxG,IAAI,UAAU,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,uCAAuC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5I,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnI,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,iBAAiB;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAC;IAEpF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,6BAA6B;IACpC,OAAO;QACL,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,+GAA+G;QACvH,kBAAkB,EAAE,EAAE;QACtB,iBAAiB,EAAE,cAAc;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,yBAAkC;IACxE,OAAO;QACL,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QAC9D,SAAS,EAAE,2BAA2B;QACtC,MAAM,EAAE,yBAAyB;YAC/B,CAAC,CAAC,uKAAuK;YACzK,CAAC,CAAC,kHAAkH;QACtH,kBAAkB,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,CAAC,EAAE;QAC1H,iBAAiB,EAAE,yBAAyB;YAC1C,CAAC,CAAC,CAAC,kIAAkI,CAAC;YACtI,CAAC,CAAC,CAAC,uFAAuF,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAyB;IAC3D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO;gBACL;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,2BAA2B;oBACtC,MAAM,EAAE,2JAA2J;oBACnK,kBAAkB,EAAE,CAAC,0HAA0H,CAAC;oBAChJ,iBAAiB,EAAE,CAAC,+FAA+F,EAAE,yGAAyG,EAAE,iJAAiJ,EAAE,GAAG,gBAAgB,CAAC;iBACxY;gBACD,yBAAyB,CAAC,kDAAkD,CAAC;aAC9E,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL;oBACE,EAAE,EAAE,mBAAmB;oBACvB,KAAK,EAAE,mBAAmB;oBAC1B,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,aAAa;oBACxB,MAAM,EAAE,qHAAqH;oBAC7H,kBAAkB,EAAE,CAAC,mGAAmG,CAAC;oBACzH,iBAAiB,EAAE,CAAC,4EAA4E,EAAE,GAAG,gBAAgB,CAAC;iBACvH;gBACD,yBAAyB,CAAC,uDAAuD,CAAC;aACnF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,sBAAsB;oBAC7B,MAAM,EAAE,iBAAiB;oBACzB,SAAS,EAAE,2BAA2B;oBACtC,MAAM,EAAE,oIAAoI;oBAC5I,kBAAkB,EAAE,CAAC,gGAAgG,CAAC;oBACtH,iBAAiB,EAAE,CAAC,yDAAyD,EAAE,GAAG,gBAAgB,CAAC;iBACpG;gBACD,yBAAyB,CAAC,+DAA+D,CAAC;aAC3F,CAAC;QACJ;YACE,OAAO;gBACL;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,aAAa;oBACxB,MAAM,EAAE,iEAAiE,QAAQ,GAAG;oBACpF,kBAAkB,EAAE,EAAE;oBACtB,iBAAiB,EAAE,cAAc;iBAClC;gBACD,yBAAyB,CAAC,qCAAqC,CAAC;aACjE,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAmB;IACpD,OAAO;QACL,EAAE,EAAE,6BAA6B;QACjC,KAAK,EAAE,4CAA4C;QACnD,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,yCAAyC;QACpD,MAAM,EAAE,oIAAoI;QAC5I,kBAAkB,EAAE,CAAC,WAAW,EAAE,uFAAuF,CAAC;QAC1H,iBAAiB,EAAE,CAAC,qHAAqH,EAAE,GAAG,gBAAgB,CAAC;KAChK,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO;QACrC,CAAC,CAAC,4NAA4N;QAC9N,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,oIAAoI;YACtI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBACrB,CAAC,CAAC,sGAAsG;gBACxG,CAAC,CAAC,0GAA0G,CAAC;IAEnH,OAAO;QACL,yFAAyF;QACzF,UAAU;QACV,uHAAuH;QACvH,mIAAmI;KACpI,CAAC;AACJ,CAAC"}

package/dist/egress/linuxBootstrap.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/egress/linuxBootstrap.js

@@ -0,0 +1,121 @@
+import http from "node:http";
+import { spawn } from "node:child_process";
+import { createServer } from "../server/createServer.js";
+import { sanitizeSecretString } from "../security/secrets.js";
+import { atomicWriteJson } from "../storage/fileStore.js";
+async function main() {
+    const config = parseConfig();
+    await runIp(["link", "set", "lo", "up"]);
+    process.env.GHOSTAPI_DATA_DIR = config.runtimeDataDir;
+    process.env.GHOSTAPI_OFFLINE = "true";
+    delete process.env.GHOSTAPI_ALLOW_EXTERNAL_LLM;
+    delete process.env.GHOSTAPI_LLM_API_KEY;
+    const evidence = await readEvidence(config.evidencePath);
+    evidence.status = "running";
+    evidence.events.push({ type: "loopback-enabled", timestamp: new Date().toISOString() });
+    const app = await createServer({ host: "127.0.0.1", port: config.port, model: process.env.GHOSTAPI_MODEL ?? "gpt-4o-mini", offline: true });
+    const server = http.createServer(app);
+    await listen(server, config.port);
+    evidence.events.push({ type: "ghostapi-ready", timestamp: new Date().toISOString(), detail: `http://127.0.0.1:${config.port}` });
+    await atomicWriteJson(config.evidencePath, evidence);
+    const targetEnvironment = createTargetEnvironment(process.env);
+    delete targetEnvironment.GHOSTAPI_RUN_BOOTSTRAP_CONFIG;
+    delete targetEnvironment.GHOSTAPI_LLM_API_KEY;
+    delete targetEnvironment.GHOSTAPI_AUTH_TOKEN;
+    targetEnvironment.GHOSTAPI_RUN_ID = config.runId;
+    targetEnvironment.GHOSTAPI_BASE_URL = `http://127.0.0.1:${config.port}`;
+    targetEnvironment.GHOSTAPI_HOST = "127.0.0.1";
+    targetEnvironment.GHOSTAPI_PORT = String(config.port);
+    targetEnvironment.GHOSTAPI_PROTOCOL = "http";
+    targetEnvironment.GHOSTAPI_OPENAI_BASE_URL = `http://127.0.0.1:${config.port}/v1`;
+    let result;
+    let interruptedBy;
+    try {
+        const target = spawn(config.command[0], config.command.slice(1), { env: targetEnvironment, stdio: "inherit", detached: true });
+        const forward = (signal) => {
+            interruptedBy = signal;
+            if (target.pid !== undefined)
+                process.kill(-target.pid, signal);
+        };
+        process.once("SIGINT", () => forward("SIGINT"));
+        process.once("SIGTERM", () => forward("SIGTERM"));
+        process.once("SIGHUP", () => forward("SIGHUP"));
+        result = await waitForTarget(target);
+        process.exitCode = result.exitCode;
+    }
+    catch (error) {
+        evidence.status = "failed-to-start";
+        evidence.events.push({ type: "target-failed-to-start", timestamp: new Date().toISOString(), detail: safeErrorMessage(error) });
+        process.exitCode = 1;
+    }
+    finally {
+        if (result !== undefined) {
+            evidence.status = "finished";
+            evidence.events.push({ type: "target-exited", timestamp: new Date().toISOString(), exitCode: result.exitCode, detail: interruptedBy ?? result.signal ?? undefined });
+        }
+        await atomicWriteJson(config.evidencePath, evidence);
+        await close(server);
+    }
+}
+function createTargetEnvironment(environment) {
+    const targetEnvironment = { ...environment };
+    for (const [key, value] of Object.entries(targetEnvironment)) {
+        if (isSensitiveEnvironmentKey(key) || (value !== undefined && sanitizeSecretString(value) !== value))
+            delete targetEnvironment[key];
+    }
+    return targetEnvironment;
+}
+function isSensitiveEnvironmentKey(key) {
+    return /(?:api[_-]?key|token|secret|password|credential|authorization|cookie)/i.test(key);
+}
+function safeErrorMessage(error) {
+    const message = error instanceof Error ? error.message : "Unknown target error";
+    return sanitizeSecretString(message).replace(/(?:Bearer\s+)?\S*(?:token|secret|key)\S*/gi, "***");
+}
+function parseConfig() {
+    const raw = process.env.GHOSTAPI_RUN_BOOTSTRAP_CONFIG;
+    if (!raw)
+        throw new Error("Missing GhostAPI run bootstrap configuration.");
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed.command) || parsed.command.length === 0 || typeof parsed.port !== "number" || typeof parsed.evidencePath !== "string" || typeof parsed.runtimeDataDir !== "string" || typeof parsed.runId !== "string" || !Array.isArray(parsed.allowedHosts)) {
+        throw new Error("Invalid GhostAPI run bootstrap configuration.");
+    }
+    return parsed;
+}
+async function readEvidence(path) {
+    const { readFile } = await import("node:fs/promises");
+    return JSON.parse(await readFile(path, "utf8"));
+}
+function runIp(args) {
+    return new Promise((resolve, reject) => {
+        const child = spawn("ip", args, { stdio: ["ignore", "ignore", "pipe"] });
+        let stderr = "";
+        child.stderr.on("data", (chunk) => { stderr += String(chunk); });
+        child.once("error", reject);
+        child.once("exit", (code) => code === 0 ? resolve() : reject(new Error(`Unable to configure loopback: ${stderr || `ip exited ${code}`}`)));
+    });
+}
+function listen(server, port) {
+    return new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(port, "127.0.0.1", () => {
+            server.off("error", reject);
+            resolve();
+        });
+    });
+}
+function close(server) {
+    return new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+}
+function waitForTarget(target) {
+    return new Promise((resolve, reject) => {
+        target.once("error", reject);
+        target.once("exit", (code, signal) => resolve({ exitCode: code ?? 128 + 1, signal }));
+    });
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : "Unknown bootstrap error";
+    console.error(`GhostAPI run setup failed: ${message}`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=linuxBootstrap.js.map

package/dist/egress/linuxBootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linuxBootstrap.js","sourceRoot":"","sources":["../../src/egress/linuxBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAuB1D,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAExF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5I,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjI,MAAM,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAErD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,iBAAiB,CAAC,6BAA6B,CAAC;IACvD,OAAO,iBAAiB,CAAC,oBAAoB,CAAC;IAC9C,OAAO,iBAAiB,CAAC,mBAAmB,CAAC;IAC7C,iBAAiB,CAAC,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC;IACjD,iBAAiB,CAAC,iBAAiB,GAAG,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC;IACxE,iBAAiB,CAAC,aAAa,GAAG,WAAW,CAAC;IAC9C,iBAAiB,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,iBAAiB,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAC7C,iBAAiB,CAAC,wBAAwB,GAAG,oBAAoB,MAAM,CAAC,IAAI,KAAK,CAAC;IAElF,IAAI,MAA+D,CAAC;IACpE,IAAI,aAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChI,MAAM,OAAO,GAAG,CAAC,MAAsB,EAAE,EAAE;YACzC,aAAa,GAAG,MAAM,CAAC;YACvB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClE,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC;QACpC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/H,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YAC7B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACvK,CAAC;QACD,MAAM,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,WAA8B;IAC7D,MAAM,iBAAiB,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtI,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,OAAO,wEAAwE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAChF,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACxQ,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAyB,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,CAAC;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,IAAc;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,MAAM,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7I,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB,EAAE,IAAY;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,MAAmB;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,aAAa,CAAC,MAAgC;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACnF,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/egress/run.d.ts

@@ -0,0 +1,18 @@
+export type EgressRunOptions = {
+    port?: number;
+    allowHosts: string[];
+    policyPath?: string;
+    timeoutMs?: number;
+    maxOutputBytes?: number;
+    command: string[];
+};
+export type EgressRunResult = {
+    exitCode: number;
+    runId: string;
+    evidencePath: string;
+};
+export declare class EgressRunError extends Error {
+    readonly hint: string;
+    constructor(message: string, hint: string);
+}
+export declare function runEgressCommand(options: EgressRunOptions): Promise<EgressRunResult>;