@yiaany/ghostapi 0.1.9 → 0.2.1

package/dist/egress/capabilities.js

@@ -1,21 +1,22 @@
 const PROXY_BYPASSES = [
     "A new HTTP client, direct IP address, custom DNS resolver, UDP, QUIC, local-network target, or subprocess can ignore proxy configuration.",
-    "A malicious process running as the same user can create its own network path."
+    "A malicious process running as the same user can create its own network path.",
 ];
 const HOSTILE_BYPASSES = [
     "An administrator/root-equivalent actor and a compromised host are outside this threat model.",
-    "A separate process running outside the launched containment boundary remains able to use the host network."
+    "A separate process running outside the launched containment boundary remains able to use the host network.",
 ];
 export function detectEgressCapabilities(input = {}) {
     const runtime = {
         platform: input.platform ?? process.platform,
         arch: input.arch ?? process.arch,
-        nodeVersion: input.nodeVersion ?? process.versions.node
+        nodeVersion: input.nodeVersion ?? process.versions.node,
     };
     const capabilities = [
         createProxyGuidanceCapability(),
-        createNodePermissionCapability(input.nodeNetworkPermission ?? process.allowedNodeEnvironmentFlags.has("--allow-net")),
-        ...createPlatformCapabilities(runtime.platform)
+        createNodePermissionCapability(input.nodeNetworkPermission ??
+            process.allowedNodeEnvironmentFlags.has("--allow-net")),
+        ...createPlatformCapabilities(runtime.platform),
     ];
     return {
         schemaVersion: 1,
@@ -26,7 +27,7 @@ export function detectEgressCapabilities(input = {}) {
         capabilities,
         globalStateChanged: false,
         remainingBypasses: [...PROXY_BYPASSES, ...HOSTILE_BYPASSES],
-        nextArchitecture: architectureFor(runtime.platform)
+        nextArchitecture: architectureFor(runtime.platform),
     };
 }
 export function formatEgressCapabilityReport(report) {
@@ -36,7 +37,7 @@ export function formatEgressCapabilityReport(report) {
         "Status: NO PROCESS LAUNCHED",
         "Current diagnostic guarantee: HTTP proxy guidance only",
         "",
-        "Capabilities:"
+        "Capabilities:",
     ];
     for (const capability of report.capabilities) {
         lines.push(`  ${capability.status.toUpperCase().padEnd(15)} ${capability.title}: ${capability.detail}`);
@@ -62,7 +63,7 @@ function createProxyGuidanceCapability() {
         guarantee: "http-proxy-guidance",
         detail: "GhostAPI can guide supported HTTP clients to a local endpoint, but does not intercept or block other traffic.",
         requiredPrivileges: [],
-        remainingBypasses: PROXY_BYPASSES
+        remainingBypasses: PROXY_BYPASSES,
     };
 }
 function createNodePermissionCapability(supportsNetworkPermission) {
@@ -74,10 +75,16 @@ function createNodePermissionCapability(supportsNetworkPermission) {
         detail: supportsNetworkPermission
             ? "A Node process started with --permission and without --allow-net can deny network access, but the model is a seat belt for trusted code, not hostile-code sandboxing."
             : "This Node.js version does not provide a supported network-deny control suitable for GhostAPI egress enforcement.",
-        requiredPrivileges: supportsNetworkPermission ? ["Launch the target with --permission and do not grant --allow-net."] : [],
+        requiredPrivileges: supportsNetworkPermission
+            ? ["Launch the target with --permission and do not grant --allow-net."]
+            : [],
         remainingBypasses: supportsNetworkPermission
-            ? ["It applies only to the launched Node process and does not provide security guarantees against malicious code or other processes."]
-            : ["Any Node program, child process, or native tool can still create network connections."]
+            ? [
+                "It applies only to the launched Node process and does not provide security guarantees against malicious code or other processes.",
+            ]
+            : [
+                "Any Node program, child process, or native tool can still create network connections.",
+            ],
     };
 }
 function createPlatformCapabilities(platform) {
@@ -90,10 +97,17 @@ function createPlatformCapabilities(platform) {
                     status: "degraded",
                     guarantee: "process-level-enforcement",
                     detail: "ghostapi run uses a fresh user, mount, and network namespace with loopback-only GhostAPI. It fails closed unless local unshare and ip preflight succeeds.",
-                    requiredPrivileges: ["util-linux unshare, iproute2 ip, and host policy allowing the required unprivileged user, mount, and network namespaces."],
-                    remainingBypasses: ["Denied kernel socket attempts are enforced but not individually attributable by this backend.", "The target must use GhostAPI loopback configuration; TLS provider-host interception is not implemented.", "Filesystem UNIX sockets that the same user can access, such as a mounted container-control socket, are outside this network-namespace boundary.", ...HOSTILE_BYPASSES]
+                    requiredPrivileges: [
+                        "util-linux unshare, iproute2 ip, and host policy allowing the required unprivileged user, mount, and network namespaces.",
+                    ],
+                    remainingBypasses: [
+                        "Denied kernel socket attempts are enforced but not individually attributable by this backend.",
+                        "The target must use GhostAPI loopback configuration; TLS provider-host interception is not implemented.",
+                        "Filesystem UNIX sockets that the same user can access, such as a mounted container-control socket, are outside this network-namespace boundary.",
+                        ...HOSTILE_BYPASSES,
+                    ],
                 },
-                createContainerCapability("An OCI runtime configured with a no-network mode")
+                createContainerCapability("An OCI runtime configured with a no-network mode"),
             ];
         case "darwin":
             return [
@@ -103,10 +117,15 @@ function createPlatformCapabilities(platform) {
                     status: "degraded",
                     guarantee: "unsupported",
                     detail: "App Sandbox network access is entitlement-based for a signed app and is not a generic GhostAPI subprocess launcher.",
-                    requiredPrivileges: ["A signed sandboxed application and an entitlement configuration designed for the launched helper."],
-                    remainingBypasses: ["An arbitrary command launched outside that app sandbox is not constrained.", ...HOSTILE_BYPASSES]
+                    requiredPrivileges: [
+                        "A signed sandboxed application and an entitlement configuration designed for the launched helper.",
+                    ],
+                    remainingBypasses: [
+                        "An arbitrary command launched outside that app sandbox is not constrained.",
+                        ...HOSTILE_BYPASSES,
+                    ],
                 },
-                createContainerCapability("A separately configured Linux-container or VM runtime")
+                createContainerCapability("A separately configured Linux-container or VM runtime"),
             ];
         case "win32":
             return [
@@ -116,10 +135,15 @@ function createPlatformCapabilities(platform) {
                     status: "not-implemented",
                     guarantee: "process-level-enforcement",
                     detail: "AppContainer can deny network capability to a launched process, but GhostAPI does not create profiles or launch AppContainers yet.",
-                    requiredPrivileges: ["An AppContainer/LPAC launcher, a minimal capability profile, and a writable sandbox directory."],
-                    remainingBypasses: ["A normal Win32 child process is not in an AppContainer.", ...HOSTILE_BYPASSES]
+                    requiredPrivileges: [
+                        "An AppContainer/LPAC launcher, a minimal capability profile, and a writable sandbox directory.",
+                    ],
+                    remainingBypasses: [
+                        "A normal Win32 child process is not in an AppContainer.",
+                        ...HOSTILE_BYPASSES,
+                    ],
                 },
-                createContainerCapability("A separately configured Windows or Linux container/VM runtime")
+                createContainerCapability("A separately configured Windows or Linux container/VM runtime"),
             ];
         default:
             return [
@@ -130,9 +154,9 @@ function createPlatformCapabilities(platform) {
                     guarantee: "unsupported",
                     detail: `GhostAPI has no supported native egress-isolation backend for ${platform}.`,
                     requiredPrivileges: [],
-                    remainingBypasses: PROXY_BYPASSES
+                    remainingBypasses: PROXY_BYPASSES,
                 },
-                createContainerCapability("A separately configured OCI runtime")
+                createContainerCapability("A separately configured OCI runtime"),
             ];
     }
 }
@@ -143,8 +167,14 @@ function createContainerCapability(requirement) {
         status: "not-implemented",
         guarantee: "container-network-namespace-enforcement",
         detail: "A no-network container can provide the strongest planned local guarantee, but GhostAPI does not manage containers in this release.",
-        requiredPrivileges: [requirement, "An image and mount policy that excludes host network-control sockets and credentials."],
-        remainingBypasses: ["Mounted Docker/Podman sockets, host networking, privileged mode, or inherited credentials would break the boundary.", ...HOSTILE_BYPASSES]
+        requiredPrivileges: [
+            requirement,
+            "An image and mount policy that excludes host network-control sockets and credentials.",
+        ],
+        remainingBypasses: [
+            "Mounted Docker/Podman sockets, host networking, privileged mode, or inherited credentials would break the boundary.",
+            ...HOSTILE_BYPASSES,
+        ],
     };
 }
 function architectureFor(platform) {
@@ -159,7 +189,7 @@ function architectureFor(platform) {
         "Keep policy parsing and evidence collection in an unprivileged GhostAPI parent process.",
         nativeStep,
         "Add an OCI no-network backend that exposes GhostAPI only through a deliberate local transport, never host networking.",
-        "Use child-owned namespaces, profiles, and containers so crash cleanup is automatic; do not modify global proxy or firewall state."
+        "Use child-owned namespaces, profiles, and containers so crash cleanup is automatic; do not modify global proxy or firewall state.",
     ];
 }
 //# sourceMappingURL=capabilities.js.map

package/dist/egress/capabilities.js.map

@@ -1 +1 @@
-{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/egress/capabilities.ts"],"names":[],"mappings":"AAwCA,MAAM,cAAc,GAAG;IACrB,2IAA2I;IAC3I,+EAA+E;CAChF,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,8FAA8F;IAC9F,4GAA4G;CAC7G,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,QAA4B,EAAE;IACrE,MAAM,OAAO,GAAsB;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC5C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI;KACxD,CAAC;IACF,MAAM,YAAY,GAAG;QACnB,6BAA6B,EAAE;QAC/B,8BAA8B,CAAC,KAAK,CAAC,qBAAqB,IAAI,OAAO,CAAC,2BAA2B,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACrH,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC;KAChD,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO;QACP,QAAQ,EAAE,KAAK;QACf,gBAAgB,EAAE,qBAAqB;QACvC,OAAO,EAAE,4JAA4J;QACrK,YAAY;QACZ,kBAAkB,EAAE,KAAK;QACzB,iBAAiB,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,gBAAgB,CAAC;QAC3D,gBAAgB,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAA8B;IACzE,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;QACnG,6BAA6B;QAC7B,wDAAwD;QACxD,EAAE;QACF,eAAe;KAChB,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACxG,IAAI,UAAU,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,uCAAuC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5I,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnI,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,iBAAiB;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAC;IAEpF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,6BAA6B;IACpC,OAAO;QACL,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,+GAA+G;QACvH,kBAAkB,EAAE,EAAE;QACtB,iBAAiB,EAAE,cAAc;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,yBAAkC;IACxE,OAAO;QACL,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QAC9D,SAAS,EAAE,2BAA2B;QACtC,MAAM,EAAE,yBAAyB;YAC/B,CAAC,CAAC,uKAAuK;YACzK,CAAC,CAAC,kHAAkH;QACtH,kBAAkB,EAAE,yBAAyB,CAAC,CAAC,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,CAAC,EAAE;QAC1H,iBAAiB,EAAE,yBAAyB;YAC1C,CAAC,CAAC,CAAC,kIAAkI,CAAC;YACtI,CAAC,CAAC,CAAC,uFAAuF,CAAC;KAC9F,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAyB;IAC3D,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO;gBACL;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,2BAA2B;oBACtC,MAAM,EAAE,2JAA2J;oBACnK,kBAAkB,EAAE,CAAC,0HAA0H,CAAC;oBAChJ,iBAAiB,EAAE,CAAC,+FAA+F,EAAE,yGAAyG,EAAE,iJAAiJ,EAAE,GAAG,gBAAgB,CAAC;iBACxY;gBACD,yBAAyB,CAAC,kDAAkD,CAAC;aAC9E,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL;oBACE,EAAE,EAAE,mBAAmB;oBACvB,KAAK,EAAE,mBAAmB;oBAC1B,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,aAAa;oBACxB,MAAM,EAAE,qHAAqH;oBAC7H,kBAAkB,EAAE,CAAC,mGAAmG,CAAC;oBACzH,iBAAiB,EAAE,CAAC,4EAA4E,EAAE,GAAG,gBAAgB,CAAC;iBACvH;gBACD,yBAAyB,CAAC,uDAAuD,CAAC;aACnF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,sBAAsB;oBAC7B,MAAM,EAAE,iBAAiB;oBACzB,SAAS,EAAE,2BAA2B;oBACtC,MAAM,EAAE,oIAAoI;oBAC5I,kBAAkB,EAAE,CAAC,gGAAgG,CAAC;oBACtH,iBAAiB,EAAE,CAAC,yDAAyD,EAAE,GAAG,gBAAgB,CAAC;iBACpG;gBACD,yBAAyB,CAAC,+DAA+D,CAAC;aAC3F,CAAC;QACJ;YACE,OAAO;gBACL;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,aAAa;oBACxB,MAAM,EAAE,iEAAiE,QAAQ,GAAG;oBACpF,kBAAkB,EAAE,EAAE;oBACtB,iBAAiB,EAAE,cAAc;iBAClC;gBACD,yBAAyB,CAAC,qCAAqC,CAAC;aACjE,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAmB;IACpD,OAAO;QACL,EAAE,EAAE,6BAA6B;QACjC,KAAK,EAAE,4CAA4C;QACnD,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,yCAAyC;QACpD,MAAM,EAAE,oIAAoI;QAC5I,kBAAkB,EAAE,CAAC,WAAW,EAAE,uFAAuF,CAAC;QAC1H,iBAAiB,EAAE,CAAC,qHAAqH,EAAE,GAAG,gBAAgB,CAAC;KAChK,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,MAAM,UAAU,GAAG,QAAQ,KAAK,OAAO;QACrC,CAAC,CAAC,4NAA4N;QAC9N,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,oIAAoI;YACtI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBACrB,CAAC,CAAC,sGAAsG;gBACxG,CAAC,CAAC,0GAA0G,CAAC;IAEnH,OAAO;QACL,yFAAyF;QACzF,UAAU;QACV,uHAAuH;QACvH,mIAAmI;KACpI,CAAC;AACJ,CAAC"}
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/egress/capabilities.ts"],"names":[],"mappings":"AAyCA,MAAM,cAAc,GAAG;IACrB,2IAA2I;IAC3I,+EAA+E;CAChF,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,8FAA8F;IAC9F,4GAA4G;CAC7G,CAAC;AAEF,MAAM,UAAU,wBAAwB,CACtC,QAA4B,EAAE;IAE9B,MAAM,OAAO,GAAsB;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAC5C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI;QAChC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI;KACxD,CAAC;IACF,MAAM,YAAY,GAAG;QACnB,6BAA6B,EAAE;QAC/B,8BAA8B,CAC5B,KAAK,CAAC,qBAAqB;YACzB,OAAO,CAAC,2BAA2B,CAAC,GAAG,CAAC,aAAa,CAAC,CACzD;QACD,GAAG,0BAA0B,CAAC,OAAO,CAAC,QAAQ,CAAC;KAChD,CAAC;IAEF,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO;QACP,QAAQ,EAAE,KAAK;QACf,gBAAgB,EAAE,qBAAqB;QACvC,OAAO,EACL,4JAA4J;QAC9J,YAAY;QACZ,kBAAkB,EAAE,KAAK;QACzB,iBAAiB,EAAE,CAAC,GAAG,cAAc,EAAE,GAAG,gBAAgB,CAAC;QAC3D,gBAAgB,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,MAA8B;IAE9B,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,aAAa,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE;QACnG,6BAA6B;QAC7B,wDAAwD;QACxD,EAAE;QACF,eAAe;KAChB,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,KAAK,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC,MAAM,EAAE,CAC5F,CAAC;QACF,IAAI,UAAU,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAC1C,KAAK,CAAC,IAAI,CACR,uCAAuC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClF,CAAC;QACJ,IAAI,UAAU,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC;YACzC,KAAK,CAAC,IAAI,CACR,+BAA+B,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CACxE,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,iBAAiB;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,gBAAgB;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CACR,EAAE,EACF,mEAAmE,CACpE,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,6BAA6B;IACpC,OAAO;QACL,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,qBAAqB;QAChC,MAAM,EACJ,+GAA+G;QACjH,kBAAkB,EAAE,EAAE;QACtB,iBAAiB,EAAE,cAAc;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,yBAAkC;IAElC,OAAO;QACL,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,0BAA0B;QACjC,MAAM,EAAE,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QAC9D,SAAS,EAAE,2BAA2B;QACtC,MAAM,EAAE,yBAAyB;YAC/B,CAAC,CAAC,uKAAuK;YACzK,CAAC,CAAC,kHAAkH;QACtH,kBAAkB,EAAE,yBAAyB;YAC3C,CAAC,CAAC,CAAC,mEAAmE,CAAC;YACvE,CAAC,CAAC,EAAE;QACN,iBAAiB,EAAE,yBAAyB;YAC1C,CAAC,CAAC;gBACE,kIAAkI;aACnI;YACH,CAAC,CAAC;gBACE,uFAAuF;aACxF;KACN,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,QAAyB;IAEzB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO;gBACL;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,2BAA2B;oBACtC,MAAM,EACJ,2JAA2J;oBAC7J,kBAAkB,EAAE;wBAClB,0HAA0H;qBAC3H;oBACD,iBAAiB,EAAE;wBACjB,+FAA+F;wBAC/F,yGAAyG;wBACzG,iJAAiJ;wBACjJ,GAAG,gBAAgB;qBACpB;iBACF;gBACD,yBAAyB,CACvB,kDAAkD,CACnD;aACF,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL;oBACE,EAAE,EAAE,mBAAmB;oBACvB,KAAK,EAAE,mBAAmB;oBAC1B,MAAM,EAAE,UAAU;oBAClB,SAAS,EAAE,aAAa;oBACxB,MAAM,EACJ,qHAAqH;oBACvH,kBAAkB,EAAE;wBAClB,mGAAmG;qBACpG;oBACD,iBAAiB,EAAE;wBACjB,4EAA4E;wBAC5E,GAAG,gBAAgB;qBACpB;iBACF;gBACD,yBAAyB,CACvB,uDAAuD,CACxD;aACF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL;oBACE,EAAE,EAAE,sBAAsB;oBAC1B,KAAK,EAAE,sBAAsB;oBAC7B,MAAM,EAAE,iBAAiB;oBACzB,SAAS,EAAE,2BAA2B;oBACtC,MAAM,EACJ,oIAAoI;oBACtI,kBAAkB,EAAE;wBAClB,gGAAgG;qBACjG;oBACD,iBAAiB,EAAE;wBACjB,yDAAyD;wBACzD,GAAG,gBAAgB;qBACpB;iBACF;gBACD,yBAAyB,CACvB,+DAA+D,CAChE;aACF,CAAC;QACJ;YACE,OAAO;gBACL;oBACE,EAAE,EAAE,yBAAyB;oBAC7B,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,aAAa;oBACxB,MAAM,EAAE,iEAAiE,QAAQ,GAAG;oBACpF,kBAAkB,EAAE,EAAE;oBACtB,iBAAiB,EAAE,cAAc;iBAClC;gBACD,yBAAyB,CAAC,qCAAqC,CAAC;aACjE,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAmB;IACpD,OAAO;QACL,EAAE,EAAE,6BAA6B;QACjC,KAAK,EAAE,4CAA4C;QACnD,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,yCAAyC;QACpD,MAAM,EACJ,oIAAoI;QACtI,kBAAkB,EAAE;YAClB,WAAW;YACX,uFAAuF;SACxF;QACD,iBAAiB,EAAE;YACjB,qHAAqH;YACrH,GAAG,gBAAgB;SACpB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAyB;IAChD,MAAM,UAAU,GACd,QAAQ,KAAK,OAAO;QAClB,CAAC,CAAC,4NAA4N;QAC9N,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,oIAAoI;YACtI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBACrB,CAAC,CAAC,sGAAsG;gBACxG,CAAC,CAAC,0GAA0G,CAAC;IAErH,OAAO;QACL,yFAAyF;QACzF,UAAU;QACV,uHAAuH;QACvH,mIAAmI;KACpI,CAAC;AACJ,CAAC"}

package/dist/egress/linuxBootstrap.js

@@ -12,11 +12,23 @@ async function main() {
     delete process.env.GHOSTAPI_LLM_API_KEY;
     const evidence = await readEvidence(config.evidencePath);
     evidence.status = "running";
-    evidence.events.push({ type: "loopback-enabled", timestamp: new Date().toISOString() });
-    const app = await createServer({ host: "127.0.0.1", port: config.port, model: process.env.GHOSTAPI_MODEL ?? "gpt-4o-mini", offline: true });
+    evidence.events.push({
+        type: "loopback-enabled",
+        timestamp: new Date().toISOString(),
+    });
+    const app = await createServer({
+        host: "127.0.0.1",
+        port: config.port,
+        model: process.env.GHOSTAPI_MODEL ?? "gpt-4o-mini",
+        offline: true,
+    });
     const server = http.createServer(app);
     await listen(server, config.port);
-    evidence.events.push({ type: "ghostapi-ready", timestamp: new Date().toISOString(), detail: `http://127.0.0.1:${config.port}` });
+    evidence.events.push({
+        type: "ghostapi-ready",
+        timestamp: new Date().toISOString(),
+        detail: `http://127.0.0.1:${config.port}`,
+    });
     await atomicWriteJson(config.evidencePath, evidence);
     const targetEnvironment = createTargetEnvironment(process.env);
     delete targetEnvironment.GHOSTAPI_RUN_BOOTSTRAP_CONFIG;
@@ -31,7 +43,11 @@ async function main() {
     let result;
     let interruptedBy;
     try {
-        const target = spawn(config.command[0], config.command.slice(1), { env: targetEnvironment, stdio: "inherit", detached: true });
+        const target = spawn(config.command[0], config.command.slice(1), {
+            env: targetEnvironment,
+            stdio: "inherit",
+            detached: true,
+        });
         const forward = (signal) => {
             interruptedBy = signal;
             if (target.pid !== undefined)
@@ -45,13 +61,22 @@ async function main() {
     }
     catch (error) {
         evidence.status = "failed-to-start";
-        evidence.events.push({ type: "target-failed-to-start", timestamp: new Date().toISOString(), detail: safeErrorMessage(error) });
+        evidence.events.push({
+            type: "target-failed-to-start",
+            timestamp: new Date().toISOString(),
+            detail: safeErrorMessage(error),
+        });
         process.exitCode = 1;
     }
     finally {
         if (result !== undefined) {
             evidence.status = "finished";
-            evidence.events.push({ type: "target-exited", timestamp: new Date().toISOString(), exitCode: result.exitCode, detail: interruptedBy ?? result.signal ?? undefined });
+            evidence.events.push({
+                type: "target-exited",
+                timestamp: new Date().toISOString(),
+                exitCode: result.exitCode,
+                detail: interruptedBy ?? result.signal ?? undefined,
+            });
         }
         await atomicWriteJson(config.evidencePath, evidence);
         await close(server);
@@ -60,7 +85,8 @@ async function main() {
 function createTargetEnvironment(environment) {
     const targetEnvironment = { ...environment };
     for (const [key, value] of Object.entries(targetEnvironment)) {
-        if (isSensitiveEnvironmentKey(key) || (value !== undefined && sanitizeSecretString(value) !== value))
+        if (isSensitiveEnvironmentKey(key) ||
+            (value !== undefined && sanitizeSecretString(value) !== value))
             delete targetEnvironment[key];
     }
     return targetEnvironment;
@@ -77,7 +103,13 @@ function parseConfig() {
     if (!raw)
         throw new Error("Missing GhostAPI run bootstrap configuration.");
     const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed.command) || parsed.command.length === 0 || typeof parsed.port !== "number" || typeof parsed.evidencePath !== "string" || typeof parsed.runtimeDataDir !== "string" || typeof parsed.runId !== "string" || !Array.isArray(parsed.allowedHosts)) {
+    if (!Array.isArray(parsed.command) ||
+        parsed.command.length === 0 ||
+        typeof parsed.port !== "number" ||
+        typeof parsed.evidencePath !== "string" ||
+        typeof parsed.runtimeDataDir !== "string" ||
+        typeof parsed.runId !== "string" ||
+        !Array.isArray(parsed.allowedHosts)) {
         throw new Error("Invalid GhostAPI run bootstrap configuration.");
     }
     return parsed;
@@ -90,9 +122,13 @@ function runIp(args) {
     return new Promise((resolve, reject) => {
         const child = spawn("ip", args, { stdio: ["ignore", "ignore", "pipe"] });
         let stderr = "";
-        child.stderr.on("data", (chunk) => { stderr += String(chunk); });
+        child.stderr.on("data", (chunk) => {
+            stderr += String(chunk);
+        });
         child.once("error", reject);
-        child.once("exit", (code) => code === 0 ? resolve() : reject(new Error(`Unable to configure loopback: ${stderr || `ip exited ${code}`}`)));
+        child.once("exit", (code) => code === 0
+            ? resolve()
+            : reject(new Error(`Unable to configure loopback: ${stderr || `ip exited ${code}`}`)));
     });
 }
 function listen(server, port) {
@@ -105,7 +141,7 @@ function listen(server, port) {
     });
 }
 function close(server) {
-    return new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+    return new Promise((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));
 }
 function waitForTarget(target) {
     return new Promise((resolve, reject) => {

package/dist/egress/linuxBootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"linuxBootstrap.js","sourceRoot":"","sources":["../../src/egress/linuxBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAuB1D,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAExF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5I,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjI,MAAM,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAErD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,iBAAiB,CAAC,6BAA6B,CAAC;IACvD,OAAO,iBAAiB,CAAC,oBAAoB,CAAC;IAC9C,OAAO,iBAAiB,CAAC,mBAAmB,CAAC;IAC7C,iBAAiB,CAAC,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC;IACjD,iBAAiB,CAAC,iBAAiB,GAAG,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC;IACxE,iBAAiB,CAAC,aAAa,GAAG,WAAW,CAAC;IAC9C,iBAAiB,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,iBAAiB,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAC7C,iBAAiB,CAAC,wBAAwB,GAAG,oBAAoB,MAAM,CAAC,IAAI,KAAK,CAAC;IAElF,IAAI,MAA+D,CAAC;IACpE,IAAI,aAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChI,MAAM,OAAO,GAAG,CAAC,MAAsB,EAAE,EAAE;YACzC,aAAa,GAAG,MAAM,CAAC;YACvB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClE,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC;QACpC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/H,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YAC7B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QACvK,CAAC;QACD,MAAM,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,WAA8B;IAC7D,MAAM,iBAAiB,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtI,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,OAAO,wEAAwE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAChF,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACxQ,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAyB,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,CAAC;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,IAAc;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,MAAM,IAAI,aAAa,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7I,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB,EAAE,IAAY;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,MAAmB;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,aAAa,CAAC,MAAgC;IACrD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACnF,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"linuxBootstrap.js","sourceRoot":"","sources":["../../src/egress/linuxBootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAkC1D,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAEzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,MAAM,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,kBAAkB;QACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC;QAC7B,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,aAAa;QAClD,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,oBAAoB,MAAM,CAAC,IAAI,EAAE;KAC1C,CAAC,CAAC;IACH,MAAM,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAErD,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,iBAAiB,CAAC,6BAA6B,CAAC;IACvD,OAAO,iBAAiB,CAAC,oBAAoB,CAAC;IAC9C,OAAO,iBAAiB,CAAC,mBAAmB,CAAC;IAC7C,iBAAiB,CAAC,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC;IACjD,iBAAiB,CAAC,iBAAiB,GAAG,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC;IACxE,iBAAiB,CAAC,aAAa,GAAG,WAAW,CAAC;IAC9C,iBAAiB,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtD,iBAAiB,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAC7C,iBAAiB,CAAC,wBAAwB,GAAG,oBAAoB,MAAM,CAAC,IAAI,KAAK,CAAC;IAElF,IAAI,MAA+D,CAAC;IACpE,IAAI,aAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAChE,GAAG,EAAE,iBAAiB;YACtB,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAsB,EAAE,EAAE;YACzC,aAAa,GAAG,MAAM,CAAC;YACvB,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClE,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,MAAM,GAAG,iBAAiB,CAAC;QACpC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;YAC7B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,eAAe;gBACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,aAAa,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;aACpD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,WAA8B;IAE9B,MAAM,iBAAiB,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,IACE,yBAAyB,CAAC,GAAG,CAAC;YAC9B,CAAC,KAAK,KAAK,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;YAE9D,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,OAAO,wEAAwE,CAAC,IAAI,CAClF,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAClE,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,OAAO,CAC1C,4CAA4C,EAC5C,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;IAC3D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;QACvC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACzC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAyB,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,CAAC;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,IAAc;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAC1B,IAAI,KAAK,CAAC;YACR,CAAC,CAAC,OAAO,EAAE;YACX,CAAC,CAAC,MAAM,CACJ,IAAI,KAAK,CACP,iCAAiC,MAAM,IAAI,aAAa,IAAI,EAAE,EAAE,CACjE,CACF,CACN,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB,EAAE,IAAY;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,MAAmB;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,MAAgC;IAEhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CACnC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}