gigadrive 2.10.0 → 2.11.0

package/dist/index.mjs

@@ -9,7 +9,7 @@ import { Effect as Effect29, Layer, LogLevel, Logger } from "effect";
 // package.json
 var package_default = {
   name: "gigadrive",
-  version: "2.10.0",
+  version: "2.11.0",
   repository: {
     type: "git",
     url: "https://github.com/Gigadrive/sdk.git",
@@ -3062,7 +3062,7 @@ var describeMicroVm = (vm, now = Date.now()) => {
     `Image:       ${vm.image.name}`,
     `Size:        ${vm.vcpus} vCPU, ${formatMemory(vm.memoryMb)} memory, ${formatMemory(vm.diskMb)} disk`,
     `Region:      ${vm.region}`,
-    `Network:     ${vm.network.egress === "deny" ? "outbound traffic blocked" : vm.network.allow && vm.network.allow.length > 0 ? `only ${vm.network.allow.join(", ")} (and DNS)` : "internet access"}`,
+    `Network:     ${vm.network.egress === "deny" ? "outbound traffic blocked" : vm.network.allow && vm.network.allow.length > 0 ? `only ${vm.network.allow.join(", ")}` : "internet access"}`,
     `Previews:    ${vm.network.previews === "private" ? "private (preview token required)" : "public"}`,
     `Application: ${vm.applicationId}`,
     `Created:     ${vm.createdAt}`
@@ -3336,12 +3336,14 @@ var createInput = (flags) => Effect22.gen(function* () {
     });
   }
   if (flags.allowEgress.length > 32) {
-    return yield* new InvalidMicroVmOptionsError({ message: "--allow-egress takes at most 32 networks." });
+    return yield* new InvalidMicroVmOptionsError({ message: "--allow-egress takes at most 32 entries." });
   }
-  const badNetwork = flags.allowEgress.find((network) => !/^\d{1,3}(\.\d{1,3}){3}\/\d{1,2}$/.test(network.trim()));
-  if (badNetwork !== void 0) {
+  const network = /^\d{1,3}(\.\d{1,3}){3}\/\d{1,2}$/;
+  const domain = /^(\*\.)?([a-z0-9-]+\.)+[a-z0-9-]*[a-z][a-z0-9-]*\.?$/i;
+  const badEntry = flags.allowEgress.find((entry) => !network.test(entry.trim()) && !domain.test(entry.trim()));
+  if (badEntry !== void 0) {
     return yield* new InvalidMicroVmOptionsError({
-      message: `--allow-egress must be an IPv4 network such as 140.82.112.0/20 (got ${badNetwork}).`
+      message: `--allow-egress must be a domain name such as api.openai.com or *.github.com, or an IPv4 network such as 140.82.112.0/20 (got ${badEntry}).`
     });
   }
   const badPort = flags.ports.find((port) => !Number.isInteger(port) || port < 1 || port > 65535);
@@ -3434,7 +3436,7 @@ var createCommand = Command12.make(
     ),
     allowEgress: Options7.text("allow-egress").pipe(
       Options7.withDescription(
-        "Only reach this public IPv4 network, such as 140.82.112.0/20, besides DNS (repeatable, up to 32)"
+        "Only reach this domain name (api.openai.com, *.github.com for every subdomain) or public IPv4 network (140.82.112.0/20) (repeatable, up to 32)"
       ),
       Options7.repeated
     ),