devchain-cli 0.24.2 → 0.26.0

package/dist/server/app.module.js

@@ -53,6 +53,8 @@ const http_exception_filter_1 = require("./common/filters/http-exception.filter"
 const ws_exception_filter_1 = require("./common/filters/ws-exception.filter");
 const external_integrations_module_1 = require("./modules/external-integrations/external-integrations.module");
 const epic_time_module_1 = require("./modules/epic-time/epic-time.module");
+const worktrees_module_1 = require("./modules/worktrees/worktrees.module");
+const provider_usage_module_1 = require("./modules/provider-usage/provider-usage.module");
 let AppModule = class AppModule {
     configure(consumer) {
         consumer.apply(request_id_middleware_1.RequestIdMiddleware).forRoutes('*');
@@ -103,6 +105,8 @@ exports.AppModule = AppModule = __decorate([
             agent_message_delivery_module_1.AgentMessageDeliveryModule,
             external_integrations_module_1.ExternalIntegrationsModule,
             epic_time_module_1.EpicTimeModule,
+            worktrees_module_1.WorktreesModule,
+            provider_usage_module_1.ProviderUsageModule,
         ],
         controllers: [],
         providers: [

package/dist/server/app.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwE;AACxE,uCAA0C;AAC1C,0EAAqE;AACrE,wFAAkF;AAClF,0EAAqE;AACrE,qEAAiE;AACjE,wEAAoE;AACpE,wEAAoE;AACpE,kFAA6E;AAC7E,0FAAqF;AACrF,mEAA8D;AAC9D,sDAAkD;AAClD,wEAAoE;AACpE,kEAA8D;AAC9D,wEAAoE;AACpE,8EAA0E;AAC1E,qEAAiE;AACjE,uFAAkF;AAClF,qEAAiE;AACjE,wEAAoE;AACpE,2EAAuE;AACvE,kEAA8D;AAC9D,wEAAoE;AACpE,+DAA2D;AAC3D,6FAAwF;AACxF,qEAAiE;AACjE,sDAAkD;AAClD,wEAAoE;AACpE,iFAA6E;AAC7E,wEAAoE;AACpE,kEAA8D;AAC9D,+DAA2D;AAC3D,0FAAqF;AACrF,+DAA2D;AAC3D,qEAAoE;AACpE,+DAA2D;AAC3D,oFAA+E;AAC/E,4DAAwD;AACxD,kHAA4G;AAC5G,qEAAiE;AACjE,qFAAgF;AAChF,4EAAuE;AACvE,kFAA6E;AAC7E,8EAA6E;AAC7E,+GAA0G;AAC1G,2EAAsE;AAqD/D,IAAM,SAAS,GAAf,MAAM,SAAS;IACpB,SAAS,CAAC,QAA4B;QACpC,QAAQ,CAAC,KAAK,CAAC,2CAAmB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;CACF,CAAA;AAJY,8BAAS;oBAAT,SAAS;IAnDrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,qCAAgB;YAChB,kDAAsB;YACtB,qCAAgB;YAChB,qCAAgB;YAChB,8BAAa;YACb,8BAAa;YACb,gCAAc;YACd,gCAAc;YACd,yCAAkB;YAClB,iDAAsB;YACtB,+BAAa;YACb,oBAAQ;YACR,gCAAc;YACd,4BAAY;YACZ,gCAAc;YACd,oCAAgB;YAChB,8BAAa;YACb,yCAAkB;YAClB,8BAAa;YACb,gCAAc;YACd,kCAAe;YACf,4BAAY;YACZ,gCAAc;YACd,0BAAW;YACX,6CAAoB;YACpB,8BAAa;YACb,oBAAQ;YACR,gCAAc;YACd,iCAAgB;YAChB,sCAAiB;YACjB,gCAAc;YACd,4BAAY;YACZ,0BAAW;YACX,2CAAmB;YACnB,0BAAW;YACX,0BAAW;YACX,uCAAiB;YACjB,wBAAU;YACV,0DAA0B;YAC1B,yDAA0B;YAC1B,iCAAc;SACf;QACD,WAAW,EAAE,EAAE;QACf,SAAS,EAAE;YAET,EAAE,OAAO,EAAE,iBAAU,EAAE,QAAQ,EAAE,2CAAqB,EAAE;YACxD,EAAE,OAAO,EAAE,iBAAU,EAAE,QAAQ,EAAE,2CAAmB,EAAE;SACvD;KACF,CAAC;GACW,SAAS,CAIrB"}
+{"version":3,"file":"app.module.js","sourceRoot":"","sources":["../src/app.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwE;AACxE,uCAA0C;AAC1C,0EAAqE;AACrE,wFAAkF;AAClF,0EAAqE;AACrE,qEAAiE;AACjE,wEAAoE;AACpE,wEAAoE;AACpE,kFAA6E;AAC7E,0FAAqF;AACrF,mEAA8D;AAC9D,sDAAkD;AAClD,wEAAoE;AACpE,kEAA8D;AAC9D,wEAAoE;AACpE,8EAA0E;AAC1E,qEAAiE;AACjE,uFAAkF;AAClF,qEAAiE;AACjE,wEAAoE;AACpE,2EAAuE;AACvE,kEAA8D;AAC9D,wEAAoE;AACpE,+DAA2D;AAC3D,6FAAwF;AACxF,qEAAiE;AACjE,sDAAkD;AAClD,wEAAoE;AACpE,iFAA6E;AAC7E,wEAAoE;AACpE,kEAA8D;AAC9D,+DAA2D;AAC3D,0FAAqF;AACrF,+DAA2D;AAC3D,qEAAoE;AACpE,+DAA2D;AAC3D,oFAA+E;AAC/E,4DAAwD;AACxD,kHAA4G;AAC5G,qEAAiE;AACjE,qFAAgF;AAChF,4EAAuE;AACvE,kFAA6E;AAC7E,8EAA6E;AAC7E,+GAA0G;AAC1G,2EAAsE;AACtE,2EAAuE;AACvE,0FAAqF;AAuD9E,IAAM,SAAS,GAAf,MAAM,SAAS;IACpB,SAAS,CAAC,QAA4B;QACpC,QAAQ,CAAC,KAAK,CAAC,2CAAmB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;CACF,CAAA;AAJY,8BAAS;oBAAT,SAAS;IArDrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,qCAAgB;YAChB,kDAAsB;YACtB,qCAAgB;YAChB,qCAAgB;YAChB,8BAAa;YACb,8BAAa;YACb,gCAAc;YACd,gCAAc;YACd,yCAAkB;YAClB,iDAAsB;YACtB,+BAAa;YACb,oBAAQ;YACR,gCAAc;YACd,4BAAY;YACZ,gCAAc;YACd,oCAAgB;YAChB,8BAAa;YACb,yCAAkB;YAClB,8BAAa;YACb,gCAAc;YACd,kCAAe;YACf,4BAAY;YACZ,gCAAc;YACd,0BAAW;YACX,6CAAoB;YACpB,8BAAa;YACb,oBAAQ;YACR,gCAAc;YACd,iCAAgB;YAChB,sCAAiB;YACjB,gCAAc;YACd,4BAAY;YACZ,0BAAW;YACX,2CAAmB;YACnB,0BAAW;YACX,0BAAW;YACX,uCAAiB;YACjB,wBAAU;YACV,0DAA0B;YAC1B,yDAA0B;YAC1B,iCAAc;YACd,kCAAe;YACf,2CAAmB;SACpB;QACD,WAAW,EAAE,EAAE;QACf,SAAS,EAAE;YAET,EAAE,OAAO,EAAE,iBAAU,EAAE,QAAQ,EAAE,2CAAqB,EAAE;YACxD,EAAE,OAAO,EAAE,iBAAU,EAAE,QAAQ,EAAE,2CAAmB,EAAE;SACvD;KACF,CAAC;GACW,SAAS,CAIrB"}

package/dist/server/common/config/env.config.d.ts

@@ -3,6 +3,7 @@ declare const envSchema: z.ZodObject<{
     NODE_ENV: z.ZodDefault<z.ZodEnum<["development", "production", "test"]>>;
     PORT: z.ZodDefault<z.ZodEffects<z.ZodString, number, string>>;
     HOST: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodDefault<z.ZodString>, string, string | undefined>, string, string | undefined>, string, string | undefined>, string, string | undefined>;
+    ALLOWED_HOSTS: z.ZodEffects<z.ZodDefault<z.ZodString>, string[], string | undefined>;
     LOG_LEVEL: z.ZodDefault<z.ZodEnum<["silent", "fatal", "error", "warn", "info", "debug", "trace"]>>;
     DATABASE_URL: z.ZodOptional<z.ZodString>;
     RUNTIME_TOKEN: z.ZodOptional<z.ZodString>;
@@ -21,12 +22,14 @@ declare const envSchema: z.ZodObject<{
     SKILLS_STARTUP_SYNC_ENABLED: z.ZodEffects<z.ZodBoolean, boolean, unknown>;
     DEVCHAIN_HOST_ETC_DIR: z.ZodDefault<z.ZodString>;
     DEVCHAIN_HOST_BIN_DIR: z.ZodDefault<z.ZodString>;
+    DEVCHAIN_HOST_SYNCTHING_BINARY: z.ZodDefault<z.ZodString>;
     DEVCHAIN_HOST_TLS_KEY_FILE: z.ZodEffects<z.ZodOptional<z.ZodString>, string | undefined, string | undefined>;
     DEVCHAIN_HOST_TLS_CERT_FILE: z.ZodEffects<z.ZodOptional<z.ZodString>, string | undefined, string | undefined>;
 }, "strip", z.ZodTypeAny, {
     NODE_ENV: "development" | "production" | "test";
     PORT: number;
     HOST: string;
+    ALLOWED_HOSTS: string[];
     LOG_LEVEL: "error" | "silent" | "fatal" | "warn" | "info" | "debug" | "trace";
     DEVCHAIN_CLOUD_UI_ENABLED: boolean;
     REMOTES_HEALTH_INTERVAL_MS: number;
@@ -37,6 +40,7 @@ declare const envSchema: z.ZodObject<{
     SKILLS_STARTUP_SYNC_ENABLED: boolean;
     DEVCHAIN_HOST_ETC_DIR: string;
     DEVCHAIN_HOST_BIN_DIR: string;
+    DEVCHAIN_HOST_SYNCTHING_BINARY: string;
     DATABASE_URL?: string | undefined;
     RUNTIME_TOKEN?: string | undefined;
     RUNTIME_PORT_FILE?: string | undefined;
@@ -51,6 +55,7 @@ declare const envSchema: z.ZodObject<{
     NODE_ENV?: "development" | "production" | "test" | undefined;
     PORT?: string | undefined;
     HOST?: string | undefined;
+    ALLOWED_HOSTS?: string | undefined;
     LOG_LEVEL?: "error" | "silent" | "fatal" | "warn" | "info" | "debug" | "trace" | undefined;
     DATABASE_URL?: string | undefined;
     RUNTIME_TOKEN?: string | undefined;
@@ -69,6 +74,7 @@ declare const envSchema: z.ZodObject<{
     SKILLS_STARTUP_SYNC_ENABLED?: unknown;
     DEVCHAIN_HOST_ETC_DIR?: string | undefined;
     DEVCHAIN_HOST_BIN_DIR?: string | undefined;
+    DEVCHAIN_HOST_SYNCTHING_BINARY?: string | undefined;
     DEVCHAIN_HOST_TLS_KEY_FILE?: string | undefined;
     DEVCHAIN_HOST_TLS_CERT_FILE?: string | undefined;
 }>;

package/dist/server/common/config/env.config.js

@@ -62,6 +62,13 @@ const envSchema = zod_1.z.object({
         .refine((v) => !/[\x00-\x1f\x7f]/.test(v), {
         message: 'HOST must not contain control characters',
     }),
+    ALLOWED_HOSTS: zod_1.z
+        .string()
+        .default('')
+        .transform((value) => value
+        .split(',')
+        .map((host) => host.trim())
+        .filter(Boolean)),
     LOG_LEVEL: zod_1.z.enum(['silent', 'fatal', 'error', 'warn', 'info', 'debug', 'trace']).default('info'),
     DATABASE_URL: zod_1.z.string().optional(),
     RUNTIME_TOKEN: zod_1.z.string().optional(),
@@ -83,6 +90,7 @@ const envSchema = zod_1.z.object({
     SKILLS_STARTUP_SYNC_ENABLED: onByDefaultFlagSchema,
     DEVCHAIN_HOST_ETC_DIR: zod_1.z.string().default('/etc/devchain-host'),
     DEVCHAIN_HOST_BIN_DIR: zod_1.z.string().default('/usr/local/bin'),
+    DEVCHAIN_HOST_SYNCTHING_BINARY: zod_1.z.string().default('/opt/devchain-host/bin/syncthing'),
     DEVCHAIN_HOST_TLS_KEY_FILE: optionalPathSchema,
     DEVCHAIN_HOST_TLS_CERT_FILE: optionalPathSchema,
 });

package/dist/server/common/config/env.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.config.js","sourceRoot":"","sources":["../../../src/common/config/env.config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgEA,oCAcC;AAED,wCAEC;AAlFD,6BAAwB;AACxB,+CAAiC;AAEjC,MAAM,CAAC,MAAM,EAAE,CAAC;AAEhB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAG5D,MAAM,qBAAqB,GAAG,OAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACnD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAGhB,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC;AAEpD,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,OAAO,CAAC,WAAW,CAAC;SACpB,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;SAClE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACzC,OAAO,EAAE,0CAA0C;KACpD,CAAC;IACJ,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjG,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,iBAAiB,EAAE,OAAC;SACjB,MAAM,EAAE;SACR,KAAK,CAAC,mBAAmB,CAAC;SAC1B,QAAQ,EAAE;IACb,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9C,yBAAyB,EAAE,qBAAqB;IAChD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,0BAA0B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxF,wBAAwB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACrF,6BAA6B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC5F,8BAA8B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5F,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEpC,2BAA2B,EAAE,qBAAqB;IAClD,2BAA2B,EAAE,qBAAqB;IAElD,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC/D,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAE3D,0BAA0B,EAAE,kBAAkB;IAC9C,2BAA2B,EAAE,kBAAkB;CAChD,CAAC,CAAC;AAIH,IAAI,YAAY,GAAqB,IAAI,CAAC;AAE1C,SAAgB,YAAY;IAC1B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,cAAc;IAC5B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC"}
+{"version":3,"file":"env.config.js","sourceRoot":"","sources":["../../../src/common/config/env.config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0EA,oCAcC;AAED,wCAEC;AA5FD,6BAAwB;AACxB,+CAAiC;AAEjC,MAAM,CAAC,MAAM,EAAE,CAAC;AAEhB,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAG5D,MAAM,qBAAqB,GAAG,OAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE;IACnD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAGhB,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,EAAE;KACR,QAAQ,EAAE;KACV,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC;AAEpD,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9E,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,IAAI,EAAE,OAAC;SACJ,MAAM,EAAE;SACR,OAAO,CAAC,WAAW,CAAC;SACpB,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;SAClE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACzC,OAAO,EAAE,0CAA0C;KACpD,CAAC;IACJ,aAAa,EAAE,OAAC;SACb,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;SACX,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK;SACF,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CACnB;IACH,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjG,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,iBAAiB,EAAE,OAAC;SACjB,MAAM,EAAE;SACR,KAAK,CAAC,mBAAmB,CAAC;SAC1B,QAAQ,EAAE;IACb,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC9C,yBAAyB,EAAE,qBAAqB;IAChD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,0BAA0B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxF,wBAAwB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACrF,6BAA6B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC5F,8BAA8B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC5F,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEpC,2BAA2B,EAAE,qBAAqB;IAClD,2BAA2B,EAAE,qBAAqB;IAElD,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC/D,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC3D,8BAA8B,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC;IAEtF,0BAA0B,EAAE,kBAAkB;IAC9C,2BAA2B,EAAE,kBAAkB;CAChD,CAAC,CAAC;AAIH,IAAI,YAAY,GAAqB,IAAI,CAAC;AAE1C,SAAgB,YAAY;IAC1B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,cAAc;IAC5B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC"}

package/dist/server/common/config/host-image.json

@@ -1,5 +1,5 @@
 {
-    "version": "1.4.0",
-    "url": "https://github.com/TwiTech-LAB/devchain/releases/download/host-image-v1.4.0/devchain-host-1.4.0.qcow2",
-    "sha256": "9066eb27f9aaadee1db8227441b74a460e9b9dff7dc0a0848ef56b57e7b7fe55"
+    "version": "1.5.0",
+    "url": "https://github.com/TwiTech-LAB/devchain/releases/download/host-image-v1.5.0/devchain-host-1.5.0.qcow2",
+    "sha256": "2ded804ab2d74641e8dbefc19ba3ed50c6abb186b5ac6ec162c0df973da46c6b"
 }

package/dist/server/common/config/integration-admission.d.ts

@@ -8,6 +8,7 @@ export type IntegrationAdmission = {
     allowed: false;
     reason: IntegrationAdmissionReason;
 };
+export declare function normalizeHost(host: string): string;
 export declare function isLoopbackHost(host: string): boolean;
 export declare function getIntegrationAdmission(env?: IntegrationAdmissionConfig): IntegrationAdmission;
 export declare function assertIntegrationAdmission(env?: IntegrationAdmissionConfig): void;

package/dist/server/common/config/integration-admission.js

@@ -1,17 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeHost = normalizeHost;
 exports.isLoopbackHost = isLoopbackHost;
 exports.getIntegrationAdmission = getIntegrationAdmission;
 exports.assertIntegrationAdmission = assertIntegrationAdmission;
 const net_1 = require("net");
 const error_types_1 = require("../errors/error-types");
 const env_config_1 = require("./env.config");
-function isLoopbackHost(host) {
-    const normalized = host
+function normalizeHost(host) {
+    return host
         .trim()
         .toLowerCase()
         .replace(/^\[|\]$/g, '')
         .replace(/\.$/, '');
+}
+function isLoopbackHost(host) {
+    const normalized = normalizeHost(host);
     if (normalized === 'localhost' || normalized === '::1') {
         return true;
     }

package/dist/server/common/config/integration-admission.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration-admission.js","sourceRoot":"","sources":["../../../src/common/config/integration-admission.ts"],"names":[],"mappings":";;AAYA,wCAgBC;AAKD,0DAQC;AAED,gEAUC;AArDD,6BAA6B;AAC7B,uDAAuD;AACvD,6CAA4D;AAU5D,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,IAAI;SACpB,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEtB,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAA,YAAM,EAAC,UAAU,CAAC,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,uCAAuC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAClE,CAAC;AAKD,SAAgB,uBAAuB,CACrC,MAAkC,IAAA,yBAAY,GAAE;IAEhD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,SAAgB,0BAA0B,CAAC,MAAkC,IAAA,yBAAY,GAAE;IACzF,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,4BAAc,CAAC,wDAAwD,EAAE;QACjF,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"integration-admission.js","sourceRoot":"","sources":["../../../src/common/config/integration-admission.ts"],"names":[],"mappings":";;AAaA,sCAMC;AAED,wCAYC;AAKD,0DAQC;AAED,gEAUC;AA1DD,6BAA6B;AAC7B,uDAAuD;AACvD,6CAA4D;AAW5D,SAAgB,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI;SACR,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEvC,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAA,YAAM,EAAC,UAAU,CAAC,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,uCAAuC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAClE,CAAC;AAKD,SAAgB,uBAAuB,CACrC,MAAkC,IAAA,yBAAY,GAAE;IAEhD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,SAAgB,0BAA0B,CAAC,MAAkC,IAAA,yBAAY,GAAE;IACzF,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,MAAM,IAAI,4BAAc,CAAC,wDAAwD,EAAE;QACjF,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,SAAS,CAAC,MAAM;KACzB,CAAC,CAAC;AACL,CAAC"}

package/dist/server/common/config/vm-destroy-fence.d.ts

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+export declare const VM_DESTROY_FENCE_PATH = "/etc/devchain-host/fence.json";
+export declare const InstanceUserNameSchema: z.ZodString;
+export declare const VmDestroyFenceSchema: z.ZodObject<{
+    ownerUser: z.ZodString;
+    operationId: z.ZodString;
+    expiresAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    operationId: string;
+    expiresAt: string;
+    ownerUser: string;
+}, {
+    operationId: string;
+    expiresAt: string;
+    ownerUser: string;
+}>;
+export type VmDestroyFence = z.infer<typeof VmDestroyFenceSchema>;
+export declare function assertVmImportAllowed(): void;

package/dist/server/common/config/vm-destroy-fence.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VmDestroyFenceSchema = exports.InstanceUserNameSchema = exports.VM_DESTROY_FENCE_PATH = void 0;
+exports.assertVmImportAllowed = assertVmImportAllowed;
+const node_fs_1 = require("node:fs");
+const zod_1 = require("zod");
+const error_types_1 = require("../errors/error-types");
+exports.VM_DESTROY_FENCE_PATH = '/etc/devchain-host/fence.json';
+exports.InstanceUserNameSchema = zod_1.z.string().regex(/^[a-z_][a-z0-9_-]{0,31}$/);
+exports.VmDestroyFenceSchema = zod_1.z
+    .object({
+    ownerUser: exports.InstanceUserNameSchema,
+    operationId: zod_1.z.string().min(1).max(128),
+    expiresAt: zod_1.z.string().datetime({ offset: true }),
+})
+    .strict();
+function assertVmImportAllowed() {
+    let raw;
+    try {
+        raw = (0, node_fs_1.readFileSync)(exports.VM_DESTROY_FENCE_PATH, 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw new error_types_1.AppError('Cannot read the VM destroy fence.', 'VM_FENCE_UNREADABLE', 503);
+    }
+    let fence;
+    try {
+        fence = exports.VmDestroyFenceSchema.parse(JSON.parse(raw));
+    }
+    catch {
+        throw new error_types_1.AppError('The VM destroy fence is invalid.', 'VM_FENCE_INVALID', 503);
+    }
+    if (Date.parse(fence.expiresAt) <= Date.now())
+        return;
+    throw new error_types_1.AppError(`This VM is being reset or destroyed by ${fence.ownerUser}. Try again after they finish.`, 'VM_DESTROY_PENDING', 409, { ownerUser: fence.ownerUser, operationId: fence.operationId });
+}
+//# sourceMappingURL=vm-destroy-fence.js.map

package/dist/server/common/config/vm-destroy-fence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-destroy-fence.js","sourceRoot":"","sources":["../../../src/common/config/vm-destroy-fence.ts"],"names":[],"mappings":";;;AAiBA,sDAqBC;AAtCD,qCAAuC;AACvC,6BAAwB;AACxB,uDAAiD;AAEpC,QAAA,qBAAqB,GAAG,+BAA+B,CAAC;AAExD,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACtE,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,8BAAsB;IACjC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,SAAgB,qBAAqB;IACnC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAY,EAAC,6BAAqB,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,IAAI,sBAAQ,CAAC,mCAAmC,EAAE,qBAAqB,EAAE,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,GAAG,4BAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAQ,CAAC,kCAAkC,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO;IACtD,MAAM,IAAI,sBAAQ,CAChB,0CAA0C,KAAK,CAAC,SAAS,gCAAgC,EACzF,oBAAoB,EACpB,GAAG,EACH,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAC/D,CAAC;AACJ,CAAC"}

package/dist/server/common/errors/error-types.d.ts

@@ -38,6 +38,9 @@ export declare class PasteNotConfirmedError extends AppError {
 export declare class TeamMemberCapReachedError extends AppError {
     constructor(maxMembers: number, currentNonLeadCount: number);
 }
+export declare class WorktreeCapReachedError extends AppError {
+    constructor(maxWorktrees: number, currentCount: number);
+}
 export declare class UnsupportedProviderError extends AppError {
     readonly providerName: string;
     constructor(providerName: string, supportedProviders: string[]);

package/dist/server/common/errors/error-types.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RelationRouteConflictError = exports.IndexedRelationError = exports.ReplicaPreflightError = exports.ProjectRemoteError = exports.ProjectFrozenError = exports.SkillSourceAlwaysEnabledError = exports.ReplicaApplyError = exports.RelationConfirmationRequiredError = exports.DescriptionEditAmbiguousError = exports.DescriptionEditNotFoundError = exports.UnsupportedProviderError = exports.TeamMemberCapReachedError = exports.PasteNotConfirmedError = exports.TimeoutError = exports.BusyError = exports.IOError = exports.StorageError = exports.OptimisticLockError = exports.ForbiddenError = exports.ConflictError = exports.ValidationError = exports.NotFoundError = exports.AppError = void 0;
+exports.RelationRouteConflictError = exports.IndexedRelationError = exports.ReplicaPreflightError = exports.ProjectRemoteError = exports.ProjectFrozenError = exports.SkillSourceAlwaysEnabledError = exports.ReplicaApplyError = exports.RelationConfirmationRequiredError = exports.DescriptionEditAmbiguousError = exports.DescriptionEditNotFoundError = exports.UnsupportedProviderError = exports.WorktreeCapReachedError = exports.TeamMemberCapReachedError = exports.PasteNotConfirmedError = exports.TimeoutError = exports.BusyError = exports.IOError = exports.StorageError = exports.OptimisticLockError = exports.ForbiddenError = exports.ConflictError = exports.ValidationError = exports.NotFoundError = exports.AppError = void 0;
 class AppError extends Error {
     code;
     statusCode;
@@ -89,6 +89,15 @@ class TeamMemberCapReachedError extends AppError {
     }
 }
 exports.TeamMemberCapReachedError = TeamMemberCapReachedError;
+class WorktreeCapReachedError extends AppError {
+    constructor(maxWorktrees, currentCount) {
+        super('Project is at worktree cap', 'worktree_cap_reached', 409, {
+            maxWorktrees,
+            currentCount,
+        });
+    }
+}
+exports.WorktreeCapReachedError = WorktreeCapReachedError;
 class UnsupportedProviderError extends AppError {
     providerName;
     constructor(providerName, supportedProviders) {

package/dist/server/common/errors/error-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-types.js","sourceRoot":"","sources":["../../../src/common/errors/error-types.ts"],"names":[],"mappings":";;;AAAA,MAAa,QAAS,SAAQ,KAAK;IAGf;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAY,EACZ,aAAqB,GAAG,EACxB,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAc;QACxB,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAClC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;CACF;AAXD,4BAWC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,QAAgB,EAAE,UAAmB;QAC/C,KAAK,CACH,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAC5E,WAAW,EACX,GAAG,CACJ,CAAC;IACJ,CAAC;CACF;AARD,sCAQC;AAED,MAAa,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;CACF;AAJD,0CAIC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAJD,sCAIC;AAED,MAAa,cAAe,SAAQ,QAAQ;IAC1C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF;AAJD,wCAIC;AAED,MAAa,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,QAAgB,EAAE,UAAkB,EAAE,OAAiC;QACjF,KAAK,CACH,GAAG,QAAQ,oBAAoB,UAAU,mEAAmE,EAC5G,uBAAuB,EACvB,GAAG,EACH,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AATD,kDASC;AAED,MAAa,YAAa,SAAQ,QAAQ;IACxC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;CACF;AAJD,oCAIC;AAED,MAAa,OAAQ,SAAQ,QAAQ;IACnC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAJD,0BAIC;AAED,MAAa,SAAU,SAAQ,QAAQ;IACrC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;CACF;AAJD,8BAIC;AAED,MAAa,YAAa,SAAQ,QAAQ;IACxC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,oCAIC;AAED,MAAa,sBAAuB,SAAQ,QAAQ;IAEhC;IADlB,YACkB,WAAmB,EACnC,OAAiC;QAEjC,KAAK,CAAC,4CAA4C,WAAW,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE;YAC3F,WAAW;YACX,GAAG,OAAO;SACX,CAAC,CAAC;QANa,gBAAW,GAAX,WAAW,CAAQ;IAOrC,CAAC;CACF;AAVD,wDAUC;AAED,MAAa,yBAA0B,SAAQ,QAAQ;IACrD,YAAY,UAAkB,EAAE,mBAA2B;QACzD,KAAK,CAAC,uBAAuB,EAAE,yBAAyB,EAAE,GAAG,EAAE;YAC7D,UAAU;YACV,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;CACF;AAPD,8DAOC;AAED,MAAa,wBAAyB,SAAQ,QAAQ;IAElC;IADlB,YACkB,YAAoB,EACpC,kBAA4B;QAE5B,KAAK,CACH,yBAAyB,YAAY,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9F,sBAAsB,EACtB,GAAG,EACH,EAAE,YAAY,EAAE,kBAAkB,EAAE,CACrC,CAAC;QARc,iBAAY,GAAZ,YAAY,CAAQ;IAStC,CAAC;CACF;AAZD,4DAYC;AAED,MAAa,4BAA6B,SAAQ,QAAQ;IACxD,YAAY,KAAa,EAAE,IAAY,EAAE,UAAkB;QACzD,KAAK,CACH,oBAAoB,KAAK,4EAA4E,EACrG,4BAA4B,EAC5B,GAAG,EACH,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAC5B,CAAC;IACJ,CAAC;CACF;AATD,oEASC;AAED,MAAa,6BAA8B,SAAQ,QAAQ;IACzD,YAAY,KAAa,EAAE,IAAY,EAAE,UAAkB;QACzD,KAAK,CACH,oBAAoB,KAAK,yCAAyC,UAAU,oDAAoD,EAChI,4BAA4B,EAC5B,GAAG,EACH,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAC5B,CAAC;IACJ,CAAC;CACF;AATD,sEASC;AAOD,MAAa,iCAAkC,SAAQ,QAAQ;IAC7D,YAAY,aAAuC;QACjD,KAAK,CACH,qLAAqL,EACrL,gCAAgC,EAChC,GAAG,EACH,EAAE,aAAa,EAAE,CAClB,CAAC;IACJ,CAAC;CACF;AATD,8EASC;AAMD,MAAa,iBAAkB,SAAQ,QAAQ;IAE3B;IACA;IAFlB,YACkB,KAAa,EACb,KAAa,EAC7B,MAAc;QAEd,KAAK,CAAC,2BAA2B,KAAK,QAAQ,KAAK,KAAK,MAAM,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE;YAC5F,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QAPa,UAAK,GAAL,KAAK,CAAQ;QACb,UAAK,GAAL,KAAK,CAAQ;IAO/B,CAAC;CACF;AAXD,8CAWC;AAGD,MAAa,6BAA8B,SAAQ,QAAQ;IACzD,YAAY,UAAkB,EAAE,OAAiC;QAC/D,KAAK,CACH,gBAAgB,UAAU,4CAA4C,EACtE,6BAA6B,EAC7B,GAAG,EACH,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAC3B,CAAC;IACJ,CAAC;CACF;AATD,sEASC;AAGD,MAAa,kBAAmB,SAAQ,QAAQ;IAClB;IAA5B,YAA4B,SAAiB;QAC3C,KAAK,CAAC,yCAAyC,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAD7D,cAAS,GAAT,SAAS,CAAQ;IAE7C,CAAC;CACF;AAJD,gDAIC;AAGD,MAAa,kBAAmB,SAAQ,QAAQ;IAE5B;IACA;IACA;IAHlB,YACkB,SAAiB,EACjB,QAAgB,EAChB,UAAyB;QAEzC,KAAK,CACH,UAAU;YACR,CAAC,CAAC,mCAAmC,UAAU,qBAAqB;YACpE,CAAC,CAAC,oDAAoD,EACxD,gBAAgB,EAChB,GAAG,EACH,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CACpC,CAAC;QAXc,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,eAAU,GAAV,UAAU,CAAe;IAU3C,CAAC;CACF;AAfD,gDAeC;AAGD,MAAa,qBAAsB,SAAQ,QAAQ;IACjD,YAAY,MAA0C;QACpD,KAAK,CAAC,mCAAmC,EAAE,0BAA0B,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;CACF;AAJD,sDAIC;AAOD,MAAa,oBAAqB,SAAQ,QAAQ;IAE9B;IACA;IAFlB,YACkB,aAAqB,EACrB,KAAe;QAE/B,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAHlD,kBAAa,GAAb,aAAa,CAAQ;QACrB,UAAK,GAAL,KAAK,CAAU;IAGjC,CAAC;CACF;AAPD,oDAOC;AAQD,MAAa,0BAA2B,SAAQ,QAAQ;IACtD,YACE,aAAqB,EACrB,wBAAuC,EACvC,aAAuC;QAEvC,KAAK,CACH,wBAAwB,KAAK,IAAI;YAC/B,CAAC,CAAC,aAAa,wBAAwB,QAAQ,aAAa,wGAAwG;YACpK,CAAC,CAAC,YAAY,aAAa,2GAA2G,EACxI,yBAAyB,EACzB,GAAG,EACH,EAAE,aAAa,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAC3D,CAAC;IACJ,CAAC;CACF;AAfD,gEAeC"}
+{"version":3,"file":"error-types.js","sourceRoot":"","sources":["../../../src/common/errors/error-types.ts"],"names":[],"mappings":";;;AAAA,MAAa,QAAS,SAAQ,KAAK;IAGf;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAY,EACZ,aAAqB,GAAG,EACxB,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,eAAU,GAAV,UAAU,CAAc;QACxB,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAClC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;CACF;AAXD,4BAWC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,QAAgB,EAAE,UAAmB;QAC/C,KAAK,CACH,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAC5E,WAAW,EACX,GAAG,CACJ,CAAC;IACJ,CAAC;CACF;AARD,sCAQC;AAED,MAAa,eAAgB,SAAQ,QAAQ;IAC3C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;CACF;AAJD,0CAIC;AAED,MAAa,aAAc,SAAQ,QAAQ;IACzC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAJD,sCAIC;AAED,MAAa,cAAe,SAAQ,QAAQ;IAC1C,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC;CACF;AAJD,wCAIC;AAED,MAAa,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,QAAgB,EAAE,UAAkB,EAAE,OAAiC;QACjF,KAAK,CACH,GAAG,QAAQ,oBAAoB,UAAU,mEAAmE,EAC5G,uBAAuB,EACvB,GAAG,EACH,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AATD,kDASC;AAED,MAAa,YAAa,SAAQ,QAAQ;IACxC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;CACF;AAJD,oCAIC;AAED,MAAa,OAAQ,SAAQ,QAAQ;IACnC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAJD,0BAIC;AAED,MAAa,SAAU,SAAQ,QAAQ;IACrC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;CACF;AAJD,8BAIC;AAED,MAAa,YAAa,SAAQ,QAAQ;IACxC,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,oCAIC;AAED,MAAa,sBAAuB,SAAQ,QAAQ;IAEhC;IADlB,YACkB,WAAmB,EACnC,OAAiC;QAEjC,KAAK,CAAC,4CAA4C,WAAW,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE;YAC3F,WAAW;YACX,GAAG,OAAO;SACX,CAAC,CAAC;QANa,gBAAW,GAAX,WAAW,CAAQ;IAOrC,CAAC;CACF;AAVD,wDAUC;AAED,MAAa,yBAA0B,SAAQ,QAAQ;IACrD,YAAY,UAAkB,EAAE,mBAA2B;QACzD,KAAK,CAAC,uBAAuB,EAAE,yBAAyB,EAAE,GAAG,EAAE;YAC7D,UAAU;YACV,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC;CACF;AAPD,8DAOC;AAED,MAAa,uBAAwB,SAAQ,QAAQ;IACnD,YAAY,YAAoB,EAAE,YAAoB;QACpD,KAAK,CAAC,4BAA4B,EAAE,sBAAsB,EAAE,GAAG,EAAE;YAC/D,YAAY;YACZ,YAAY;SACb,CAAC,CAAC;IACL,CAAC;CACF;AAPD,0DAOC;AAED,MAAa,wBAAyB,SAAQ,QAAQ;IAElC;IADlB,YACkB,YAAoB,EACpC,kBAA4B;QAE5B,KAAK,CACH,yBAAyB,YAAY,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9F,sBAAsB,EACtB,GAAG,EACH,EAAE,YAAY,EAAE,kBAAkB,EAAE,CACrC,CAAC;QARc,iBAAY,GAAZ,YAAY,CAAQ;IAStC,CAAC;CACF;AAZD,4DAYC;AAED,MAAa,4BAA6B,SAAQ,QAAQ;IACxD,YAAY,KAAa,EAAE,IAAY,EAAE,UAAkB;QACzD,KAAK,CACH,oBAAoB,KAAK,4EAA4E,EACrG,4BAA4B,EAC5B,GAAG,EACH,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAC5B,CAAC;IACJ,CAAC;CACF;AATD,oEASC;AAED,MAAa,6BAA8B,SAAQ,QAAQ;IACzD,YAAY,KAAa,EAAE,IAAY,EAAE,UAAkB;QACzD,KAAK,CACH,oBAAoB,KAAK,yCAAyC,UAAU,oDAAoD,EAChI,4BAA4B,EAC5B,GAAG,EACH,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAC5B,CAAC;IACJ,CAAC;CACF;AATD,sEASC;AAOD,MAAa,iCAAkC,SAAQ,QAAQ;IAC7D,YAAY,aAAuC;QACjD,KAAK,CACH,qLAAqL,EACrL,gCAAgC,EAChC,GAAG,EACH,EAAE,aAAa,EAAE,CAClB,CAAC;IACJ,CAAC;CACF;AATD,8EASC;AAMD,MAAa,iBAAkB,SAAQ,QAAQ;IAE3B;IACA;IAFlB,YACkB,KAAa,EACb,KAAa,EAC7B,MAAc;QAEd,KAAK,CAAC,2BAA2B,KAAK,QAAQ,KAAK,KAAK,MAAM,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE;YAC5F,KAAK;YACL,KAAK;SACN,CAAC,CAAC;QAPa,UAAK,GAAL,KAAK,CAAQ;QACb,UAAK,GAAL,KAAK,CAAQ;IAO/B,CAAC;CACF;AAXD,8CAWC;AAGD,MAAa,6BAA8B,SAAQ,QAAQ;IACzD,YAAY,UAAkB,EAAE,OAAiC;QAC/D,KAAK,CACH,gBAAgB,UAAU,4CAA4C,EACtE,6BAA6B,EAC7B,GAAG,EACH,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAC3B,CAAC;IACJ,CAAC;CACF;AATD,sEASC;AAGD,MAAa,kBAAmB,SAAQ,QAAQ;IAClB;IAA5B,YAA4B,SAAiB;QAC3C,KAAK,CAAC,yCAAyC,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAD7D,cAAS,GAAT,SAAS,CAAQ;IAE7C,CAAC;CACF;AAJD,gDAIC;AAGD,MAAa,kBAAmB,SAAQ,QAAQ;IAE5B;IACA;IACA;IAHlB,YACkB,SAAiB,EACjB,QAAgB,EAChB,UAAyB;QAEzC,KAAK,CACH,UAAU;YACR,CAAC,CAAC,mCAAmC,UAAU,qBAAqB;YACpE,CAAC,CAAC,oDAAoD,EACxD,gBAAgB,EAChB,GAAG,EACH,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CACpC,CAAC;QAXc,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,eAAU,GAAV,UAAU,CAAe;IAU3C,CAAC;CACF;AAfD,gDAeC;AAGD,MAAa,qBAAsB,SAAQ,QAAQ;IACjD,YAAY,MAA0C;QACpD,KAAK,CAAC,mCAAmC,EAAE,0BAA0B,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;CACF;AAJD,sDAIC;AAOD,MAAa,oBAAqB,SAAQ,QAAQ;IAE9B;IACA;IAFlB,YACkB,aAAqB,EACrB,KAAe;QAE/B,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAHlD,kBAAa,GAAb,aAAa,CAAQ;QACrB,UAAK,GAAL,KAAK,CAAU;IAGjC,CAAC;CACF;AAPD,oDAOC;AAQD,MAAa,0BAA2B,SAAQ,QAAQ;IACtD,YACE,aAAqB,EACrB,wBAAuC,EACvC,aAAuC;QAEvC,KAAK,CACH,wBAAwB,KAAK,IAAI;YAC/B,CAAC,CAAC,aAAa,wBAAwB,QAAQ,aAAa,wGAAwG;YACpK,CAAC,CAAC,YAAY,aAAa,2GAA2G,EACxI,yBAAyB,EACzB,GAAG,EACH,EAAE,aAAa,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAC3D,CAAC;IACJ,CAAC;CACF;AAfD,gEAeC"}

package/dist/server/common/git-shim-paths.d.ts

@@ -0,0 +1,4 @@
+export declare const GIT_SHIM_BIN: unique symbol;
+export declare function gitShimHome(home?: string): string;
+export declare function gitShimBin(home?: string): string;
+export declare function removeGitShimFromPath(env?: NodeJS.ProcessEnv, shimBin?: string): void;

package/dist/server/common/git-shim-paths.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GIT_SHIM_BIN = void 0;
+exports.gitShimHome = gitShimHome;
+exports.gitShimBin = gitShimBin;
+exports.removeGitShimFromPath = removeGitShimFromPath;
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+exports.GIT_SHIM_BIN = Symbol('GIT_SHIM_BIN');
+function gitShimHome(home = (0, node_os_1.homedir)()) {
+    return (0, node_path_1.join)(home, '.devchain', 'git-shim');
+}
+function gitShimBin(home) {
+    return (0, node_path_1.join)(gitShimHome(home), 'bin');
+}
+function removeGitShimFromPath(env = process.env, shimBin = gitShimBin()) {
+    if (!env.PATH)
+        return;
+    const shim = (0, node_path_1.resolve)(shimBin);
+    env.PATH = env.PATH.split(node_path_1.delimiter)
+        .filter((entry) => entry === '' || (0, node_path_1.resolve)(entry) !== shim)
+        .join(node_path_1.delimiter);
+}
+//# sourceMappingURL=git-shim-paths.js.map

package/dist/server/common/git-shim-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-shim-paths.js","sourceRoot":"","sources":["../../src/common/git-shim-paths.ts"],"names":[],"mappings":";;;AAOA,kCAEC;AAED,gCAEC;AAOD,sDASC;AA7BD,qCAAkC;AAClC,yCAAqD;AAGxC,QAAA,YAAY,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;AAGnD,SAAgB,WAAW,CAAC,OAAe,IAAA,iBAAO,GAAE;IAClD,OAAO,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAC7C,CAAC;AAED,SAAgB,UAAU,CAAC,IAAa;IACtC,OAAO,IAAA,gBAAI,EAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAOD,SAAgB,qBAAqB,CACnC,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAkB,UAAU,EAAE;IAE9B,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO;IACtB,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAS,CAAC;SACjC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,IAAI,IAAA,mBAAO,EAAC,KAAK,CAAC,KAAK,IAAI,CAAC;SAC1D,IAAI,CAAC,qBAAS,CAAC,CAAC;AACrB,CAAC"}

package/dist/server/common/http/browser-request-guard.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingHttpHeaders } from 'node:http';
+export declare const BROWSER_ORIGIN_REJECTION: {
+    readonly statusCode: 403;
+    readonly code: "BROWSER_ORIGIN_REJECTED";
+    readonly message: "Browser origin rejected";
+};
+export type BrowserRequestRefusal = typeof BROWSER_ORIGIN_REJECTION;
+export declare function guardBrowserRequest(headers: IncomingHttpHeaders, path: string, method: string | undefined, allowedHostnames: readonly string[]): BrowserRequestRefusal | null;

package/dist/server/common/http/browser-request-guard.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BROWSER_ORIGIN_REJECTION = void 0;
+exports.guardBrowserRequest = guardBrowserRequest;
+const node_net_1 = require("node:net");
+const integration_admission_1 = require("../config/integration-admission");
+exports.BROWSER_ORIGIN_REJECTION = {
+    statusCode: 403,
+    code: 'BROWSER_ORIGIN_REJECTED',
+    message: 'Browser origin rejected',
+};
+function guardBrowserRequest(headers, path, method, allowedHostnames) {
+    if (headers['sec-fetch-site'] === 'cross-site' &&
+        !isCloudCallbackNavigation(headers, path, method)) {
+        return exports.BROWSER_ORIGIN_REJECTION;
+    }
+    const host = headers.host;
+    if (!host || !isHostAdmitted(host, allowedHostnames))
+        return exports.BROWSER_ORIGIN_REJECTION;
+    if (headers.origin !== undefined && !isOriginAdmitted(headers.origin, host)) {
+        return exports.BROWSER_ORIGIN_REJECTION;
+    }
+    return null;
+}
+function isCloudCallbackNavigation(headers, path, method) {
+    return ((method === 'GET' || method === 'HEAD') &&
+        path.split('?', 1)[0] === '/auth/cloud/callback' &&
+        headers['sec-fetch-mode'] === 'navigate' &&
+        headers['sec-fetch-dest'] === 'document');
+}
+function isHostAdmitted(host, allowedHostnames) {
+    if (/[\s/\\@?#]/.test(host))
+        return false;
+    try {
+        const hostname = (0, integration_admission_1.normalizeHost)(new URL(`http://${host}`).hostname);
+        return ((0, integration_admission_1.isLoopbackHost)(hostname) ||
+            (0, node_net_1.isIP)(hostname) !== 0 ||
+            allowedHostnames.some((allowed) => (0, integration_admission_1.normalizeHost)(allowed) === hostname));
+    }
+    catch {
+        return false;
+    }
+}
+function isOriginAdmitted(value, host) {
+    try {
+        const origin = new URL(value);
+        if (!['http:', 'https:'].includes(origin.protocol) ||
+            origin.username ||
+            origin.password ||
+            origin.pathname !== '/' ||
+            origin.search ||
+            origin.hash) {
+            return false;
+        }
+        return ((0, integration_admission_1.isLoopbackHost)(origin.hostname) || origin.host === new URL(`${origin.protocol}//${host}`).host);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=browser-request-guard.js.map

package/dist/server/common/http/browser-request-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-request-guard.js","sourceRoot":"","sources":["../../../src/common/http/browser-request-guard.ts"],"names":[],"mappings":";;;AAYA,kDAmBC;AA9BD,uCAAgC;AAChC,2EAAgF;AAEnE,QAAA,wBAAwB,GAAG;IACtC,UAAU,EAAE,GAAG;IACf,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,yBAAyB;CAC1B,CAAC;AAIX,SAAgB,mBAAmB,CACjC,OAA4B,EAC5B,IAAY,EACZ,MAA0B,EAC1B,gBAAmC;IAEnC,IACE,OAAO,CAAC,gBAAgB,CAAC,KAAK,YAAY;QAC1C,CAAC,yBAAyB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EACjD,CAAC;QACD,OAAO,gCAAwB,CAAC;IAClC,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAAE,OAAO,gCAAwB,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAC5E,OAAO,gCAAwB,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,SAAS,yBAAyB,CAChC,OAA4B,EAC5B,IAAY,EACZ,MAA0B;IAE1B,OAAO,CACL,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,sBAAsB;QAChD,OAAO,CAAC,gBAAgB,CAAC,KAAK,UAAU;QACxC,OAAO,CAAC,gBAAgB,CAAC,KAAK,UAAU,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,gBAAmC;IACvE,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,qCAAa,EAAC,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnE,OAAO,CACL,IAAA,sCAAc,EAAC,QAAQ,CAAC;YACxB,IAAA,eAAI,EAAC,QAAQ,CAAC,KAAK,CAAC;YACpB,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAA,qCAAa,EAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CACxE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IACE,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9C,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,QAAQ,KAAK,GAAG;YACvB,MAAM,CAAC,MAAM;YACb,MAAM,CAAC,IAAI,EACX,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CACL,IAAA,sCAAc,EAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAC/F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/server/common/test/fake-bootstrap.server.d.ts

@@ -1,5 +1,10 @@
 import type { Server } from 'node:http';
 export declare class FakeBootstrapServer {
+    private readonly effects;
+    constructor(effects?: {
+        claim?: (body: Record<string, unknown>) => Promise<void>;
+        update?: (version: string) => Promise<void>;
+    });
     readonly certificate: string;
     version: string | null;
     imageVersion: string;

package/dist/server/common/test/fake-bootstrap.server.js

@@ -15,6 +15,10 @@ function pinnedCliVersions() {
     return versions;
 }
 class FakeBootstrapServer {
+    effects;
+    constructor(effects = {}) {
+        this.effects = effects;
+    }
     certificate = tls_fixture_1.fixtureTls.cert;
     version = null;
     imageVersion = '1.4.0';
@@ -103,6 +107,7 @@ class FakeBootstrapServer {
             this.claims.push(body);
             this.claimHeaders.push(req.headers.authorization);
             await this.claimGate;
+            await this.effects.claim?.(body);
             this.version = String(body.version);
             this.cliVersions = pinnedCliVersions();
             this.uid = this.legacyAllocatedIds?.uid ?? (typeof body.uid === 'number' ? body.uid : null);
@@ -158,10 +163,14 @@ class FakeBootstrapServer {
             const previous = this.version;
             this.version = null;
             setTimeout(() => {
-                this.version = version;
-                this.update = { state: 'done', version };
+                void Promise.resolve(this.effects.update?.(version)).then(() => {
+                    this.version = version;
+                    this.update = { state: 'done', version };
+                }, () => {
+                    this.version = previous;
+                    this.update = { state: 'failed', version };
+                });
             }, 150);
-            void previous;
             return { status: 202, body: { version, state: 'pending' } };
         }
         if (route === 'GET /api/host/update')

package/dist/server/common/test/fake-bootstrap.server.js.map

@@ -1 +1 @@
-{"version":3,"file":"fake-bootstrap.server.js","sourceRoot":"","sources":["../../../src/common/test/fake-bootstrap.server.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AAEvC,2CAA0C;AAE1C,yCAAoC;AACpC,+CAA2C;AAG3C,SAAS,iBAAiB;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,2CAA2C,CAAC,EAAE,MAAM,CAAC,CAC9C,CAAC;IAC1C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,QAAQ,CAAC,GAAG,GAAG,WAAW,CAAC;IAC3B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,MAAa,mBAAmB;IAErB,WAAW,GAAG,wBAAU,CAAC,IAAI,CAAC;IACvC,OAAO,GAAkB,IAAI,CAAC;IAC9B,YAAY,GAAG,OAAO,CAAC;IACvB,MAAM,GAAG,GAAG,CAAC;IACb,cAAc,GAAG,CAAC,CAAC;IACnB,MAAM,GAAG;QACP,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,IAAqB;QACpC,cAAc,EAAE,IAAqB;QACrC,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAqB;KACzC,CAAC;IACF,YAAY,GAAwD,IAAI,CAAC;IACzE,MAAM,GAAmC,EAAE,CAAC;IAC5C,YAAY,GAA8B,EAAE,CAAC;IAC7C,OAAO,GAAmC,EAAE,CAAC;IAC7C,QAAQ,GAAa,EAAE,CAAC;IACxB,aAAa,GAA0E,EAAE,CAAC;IAC1F,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,SAAS,GAAa,EAAE,CAAC;IACzB,MAAM,GAA8C,IAAI,CAAC;IAEzD,SAAS,GAAyB,IAAI,CAAC;IAEvC,QAAQ,GAAG,KAAK,CAAC;IAEjB,WAAW,GAAkC,IAAI,CAAC;IAClD,GAAG,GAAkB,IAAI,CAAC;IAC1B,GAAG,GAAkB,IAAI,CAAC;IAE1B,kBAAkB,GAAwC,IAAI,CAAC;IAC/D,MAAM,CAAU;IAChB,GAAG,GAAG,EAAE,CAAC;IAET,KAAK,CAAC,MAAM,CAAC,UAA4C,EAAE;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAA,yBAAY,EAAC,EAAE,GAAG,EAAE,wBAAU,CAAC,GAAG,EAAE,IAAI,EAAE,wBAAU,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtF,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CACxB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;gBACnB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,CAAC,EACD,GAAG,EAAE;gBACH,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,GAAG,WAAW,IAAI,IAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,GAAoB;QACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9C,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO;gBACjB,CAAC,CAAC;oBACE,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,GAAG,EAAE,IAAI,CAAC,GAAG;qBACd;iBACF;gBACH,CAAC,CAAC;oBACE,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;wBAC/C,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,IAAI,CAAC,YAAY;qBAChC;iBACF,CAAC;QACR,CAAC;QACD,IAAI,KAAK,KAAK,qBAAqB;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtE,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,SAAS,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,iBAAiB,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5F,IAAI,CAAC,GAAG;gBACN,IAAI,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,KAAK,qCAAqC,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;aAC9E,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,8BAA8B,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;YACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,0BAA0B,EAAE,EAAE,CAAC;YACpF,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACtC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACjF,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;gBACzB,IAAI,CAAC,MAAM,GAAG;oBACZ,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,IAAI;oBACnB,cAAc,EAAE,GAAG;oBACnB,WAAW,EAAE,IAAI;oBACjB,iBAAiB,EAAE,IAAI;iBACxB,CAAC;gBACF,IAAI,CAAC,YAAY,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7E,CAAC,EAAE,EAAE,CAAC,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,KAAK,sBAAsB;YAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QAC9D,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;YAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;gBACvB,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC3C,CAAC,EAAE,GAAG,CAAC,CAAC;YACR,KAAK,QAAQ,CAAC;YACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,KAAK,sBAAsB;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACtD,CAAC;CACF;AArKD,kDAqKC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC"}
+{"version":3,"file":"fake-bootstrap.server.js","sourceRoot":"","sources":["../../../src/common/test/fake-bootstrap.server.ts"],"names":[],"mappings":";;;AAAA,qCAAuC;AAEvC,2CAA0C;AAE1C,yCAAoC;AACpC,+CAA2C;AAG3C,SAAS,iBAAiB;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CACrB,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,EAAE,2CAA2C,CAAC,EAAE,MAAM,CAAC,CAC9C,CAAC;IAC1C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,QAAQ,CAAC,GAAG,GAAG,WAAW,CAAC;IAC3B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,MAAa,mBAAmB;IAEX;IADnB,YACmB,UAGb,EAAE;QAHW,YAAO,GAAP,OAAO,CAGlB;IACL,CAAC;IAEK,WAAW,GAAG,wBAAU,CAAC,IAAI,CAAC;IACvC,OAAO,GAAkB,IAAI,CAAC;IAC9B,YAAY,GAAG,OAAO,CAAC;IACvB,MAAM,GAAG,GAAG,CAAC;IACb,cAAc,GAAG,CAAC,CAAC;IACnB,MAAM,GAAG;QACP,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,IAAqB;QACpC,cAAc,EAAE,IAAqB;QACrC,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAqB;KACzC,CAAC;IACF,YAAY,GAAwD,IAAI,CAAC;IACzE,MAAM,GAAmC,EAAE,CAAC;IAC5C,YAAY,GAA8B,EAAE,CAAC;IAC7C,OAAO,GAAmC,EAAE,CAAC;IAC7C,QAAQ,GAAa,EAAE,CAAC;IACxB,aAAa,GAA0E,EAAE,CAAC;IAC1F,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,SAAS,GAAa,EAAE,CAAC;IACzB,MAAM,GAA8C,IAAI,CAAC;IAEzD,SAAS,GAAyB,IAAI,CAAC;IAEvC,QAAQ,GAAG,KAAK,CAAC;IAEjB,WAAW,GAAkC,IAAI,CAAC;IAClD,GAAG,GAAkB,IAAI,CAAC;IAC1B,GAAG,GAAkB,IAAI,CAAC;IAE1B,kBAAkB,GAAwC,IAAI,CAAC;IAC/D,MAAM,CAAU;IAChB,GAAG,GAAG,EAAE,CAAC;IAET,KAAK,CAAC,MAAM,CAAC,UAA4C,EAAE;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAA,yBAAY,EAAC,EAAE,GAAG,EAAE,wBAAU,CAAC,GAAG,EAAE,IAAI,EAAE,wBAAU,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtF,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CACxB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;gBACnB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D,CAAC,EACD,GAAG,EAAE;gBACH,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;gBAC/C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,GAAG,WAAW,IAAI,IAAK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAClC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,GAAoB;QACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9C,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO;gBACjB,CAAC,CAAC;oBACE,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,GAAG,EAAE,IAAI,CAAC,GAAG;qBACd;iBACF;gBACH,CAAC,CAAC;oBACE,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE;wBACJ,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW;wBAC/C,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,IAAI,CAAC,YAAY;qBAChC;iBACF,CAAC;QACR,CAAC;QACD,IAAI,KAAK,KAAK,qBAAqB;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtE,IAAI,KAAK,KAAK,sBAAsB,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,IAAI,CAAC,SAAS,CAAC;YACrB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,iBAAiB,EAAE,CAAC;YACvC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5F,IAAI,CAAC,GAAG;gBACN,IAAI,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,KAAK,qCAAqC,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;aAC9E,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,8BAA8B,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnF,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;YACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC3B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,0BAA0B,EAAE,EAAE,CAAC;YACpF,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACtC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,YAAY,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACjF,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;gBACzB,IAAI,CAAC,MAAM,GAAG;oBACZ,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,IAAI;oBACnB,cAAc,EAAE,GAAG;oBACnB,WAAW,EAAE,IAAI;oBACjB,iBAAiB,EAAE,IAAI;iBACxB,CAAC;gBACF,IAAI,CAAC,YAAY,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7E,CAAC,EAAE,EAAE,CAAC,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,KAAK,sBAAsB;YAClC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QAC9D,IAAI,KAAK,KAAK,uBAAuB,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;YAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;YAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CACvD,GAAG,EAAE;oBACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;oBACvB,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC3C,CAAC,EACD,GAAG,EAAE;oBACH,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;oBACxB,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBAC7C,CAAC,CACF,CAAC;YACJ,CAAC,EAAE,GAAG,CAAC,CAAC;YACR,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,KAAK,sBAAsB;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5F,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACtD,CAAC;CACF;AAnLD,kDAmLC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC"}

package/dist/server/common/test/fake-docker-engine.server.d.ts

@@ -61,6 +61,14 @@ export declare class FakeDockerEngine {
     readonly images: Map<string, FakeImage>;
     readonly data: Map<string, Buffer<ArrayBufferLike>>;
     readonly calls: string[];
+    readonly directoryOwners: Map<string, {
+        uid: number;
+        gid: number;
+    }>;
+    readonly fileOwners: Map<string, {
+        uid: number;
+        gid: number;
+    }>;
     intercept?: (method: string, path: string, res: ServerResponse) => boolean;
     clearExitCode: number;
     loseResponse?: (method: string, path: string, search: URLSearchParams) => boolean;

package/dist/server/common/test/fake-docker-engine.server.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FakeDockerEngine = exports.FILE_ENTRY = void 0;
+const tar_1 = require("tar");
 const node_http_1 = require("node:http");
 const node_crypto_1 = require("node:crypto");
 const node_events_1 = require("node:events");
@@ -15,6 +16,8 @@ class FakeDockerEngine {
     images = new Map();
     data = new Map();
     calls = [];
+    directoryOwners = new Map();
+    fileOwners = new Map();
     intercept;
     clearExitCode = 0;
     loseResponse;
@@ -268,6 +271,7 @@ class FakeDockerEngine {
             return json(list.map((c) => ({
                 Id: c.Id,
                 ImageID: c.Image,
+                Image: typeof c.Config.Image === 'string' ? c.Config.Image : c.Image,
                 Names: [c.Name],
                 Labels: c.Config.Labels ?? {},
                 State: c.State.Running ? 'running' : 'created',
@@ -313,7 +317,14 @@ class FakeDockerEngine {
                 Id: id,
                 Name: `/${name}`,
                 Image: String(input.Image),
-                Config: { Labels: input.Labels ?? {} },
+                Config: {
+                    Labels: input.Labels ?? {},
+                    User: input.User ??
+                        this.findImage(requestedImage)?.[1].metadata?.Config
+                            ?.User ??
+                        '',
+                    ...(input.Env ? { Env: input.Env } : {}),
+                },
                 HostConfig: host,
                 Mounts: mounts,
                 State: { Running: false },
@@ -381,6 +392,28 @@ class FakeDockerEngine {
                     return void res.end(Buffer.concat([Buffer.from(`${exports.FILE_ENTRY}${name}\n`), file]));
                 }
                 const archive = await body();
+                if (at === '/data' && archive.length >= 1536 && [48, 53, 120].includes(archive[156])) {
+                    let entry = new tar_1.Header(archive);
+                    if (entry.type === 'ExtendedHeader' && entry.size != null) {
+                        const pax = tar_1.Pax.parse(archive.subarray(512, 512 + entry.size).toString('utf8'));
+                        entry = new tar_1.Header(archive, 512 + Math.ceil(entry.size / 512) * 512, pax);
+                    }
+                    if (entry.cksumValid &&
+                        (entry.type === 'Directory' || (entry.type === 'File' && entry.size === 0)) &&
+                        entry.path &&
+                        entry.uid != null &&
+                        entry.gid != null) {
+                        const target = (0, node_path_1.join)(mount.Source, entry.path);
+                        const owners = entry.type === 'File' ? this.fileOwners : this.directoryOwners;
+                        owners.set(target, {
+                            uid: entry.uid,
+                            gid: entry.gid,
+                        });
+                        if (entry.type === 'File')
+                            this.data.set(target, Buffer.alloc(0));
+                        return empty(200);
+                    }
+                }
                 const header = archive.subarray(0, Math.max(archive.indexOf('\n'), 0)).toString();
                 const name = header.startsWith(exports.FILE_ENTRY) ? header.slice(exports.FILE_ENTRY.length) : null;
                 if (at === '/' && name === null) {