gigadrive 2.16.0 → 2.17.1

package/dist/index.mjs

@@ -9,7 +9,7 @@ import { Effect as Effect29, Layer, LogLevel, Logger } from "effect";
 // package.json
 var package_default = {
   name: "gigadrive",
-  version: "2.16.0",
+  version: "2.17.1",
   repository: {
     type: "git",
     url: "https://github.com/Gigadrive/sdk.git",
@@ -3384,7 +3384,7 @@ var parseInjectFlags = (values) => Effect22.gen(function* () {
     if (domain === "" || name === "" || equals === value.length - 1) {
       return yield* new InvalidMicroVmOptionsError({
         // The entry is not echoed: it may hold the credential.
-        message: '--inject must be DOMAIN:HEADER=VALUE, such as "api.openai.com:Authorization=Bearer $OPENAI_API_KEY".'
+        message: '--inject and --inject-file take DOMAIN:HEADER=VALUE, such as "api.openai.com:Authorization=Bearer $OPENAI_API_KEY".'
       });
     }
     rules.set(domain, { ...rules.get(domain), [name]: value.slice(equals + 1) });
@@ -3394,6 +3394,17 @@ var parseInjectFlags = (values) => Effect22.gen(function* () {
   }
   return [...rules].map(([domain, headers]) => ({ domain, headers }));
 });
+var readInjectRules = (inject, injectFile) => Effect22.gen(function* () {
+  if (Option14.isNone(injectFile)) return yield* parseInjectFlags(inject);
+  const fs = yield* FileSystem8.FileSystem;
+  const content = yield* fs.readFileString(injectFile.value).pipe(
+    Effect22.mapError(
+      () => new InvalidMicroVmOptionsError({ message: `Could not read --inject-file ${injectFile.value}.` })
+    )
+  );
+  const lines = content.split(/\r?\n/).map((line) => line.trim()).filter((line) => line !== "" && !line.startsWith("#"));
+  return yield* parseInjectFlags([...inject, ...lines]);
+});
 var checkEgressFlags = (denyEgress, allowEgress) => Effect22.gen(function* () {
   if (denyEgress && allowEgress.length > 0) {
     return yield* new InvalidMicroVmOptionsError({
@@ -3424,7 +3435,7 @@ var createInput = (flags) => Effect22.gen(function* () {
   if (badPort !== void 0) {
     return yield* new InvalidMicroVmOptionsError({ message: `--port must be between 1 and 65535 (got ${badPort}).` });
   }
-  const inject = yield* parseInjectFlags(flags.inject);
+  const inject = yield* readInjectRules(flags.inject, flags.injectFile);
   if (inject.length > 0 && flags.denyEgress) {
     return yield* new InvalidMicroVmOptionsError({ message: "--inject cannot be combined with --deny-egress." });
   }
@@ -3551,6 +3562,12 @@ var createCommand = Command12.make(
       ),
       Options7.repeated
     ),
+    injectFile: Options7.text("inject-file").pipe(
+      Options7.withDescription(
+        "Read --inject rules from a file, one DOMAIN:HEADER=VALUE per line (/dev/stdin for a pipe), so the values stay out of the command line"
+      ),
+      Options7.optional
+    ),
     pauseOnTimeout: Options7.boolean("pause-on-timeout").pipe(
       Options7.withDescription("Pause the microVM when its timeout ends instead of stopping it")
     ),
@@ -3920,7 +3937,7 @@ var updateMicroVmNetwork = (microvmId, flags) => Effect22.gen(function* () {
     });
   }
   yield* checkEgressFlags(flags.denyEgress, flags.allowEgress);
-  const inject = yield* parseInjectFlags(flags.inject);
+  const inject = yield* readInjectRules(flags.inject, flags.injectFile);
   if (inject.length > 0 && flags.denyEgress) {
     return yield* new InvalidMicroVmOptionsError({ message: "--inject cannot be combined with --deny-egress." });
   }
@@ -3967,6 +3984,12 @@ var networkCommand = Command12.make(
       ),
       Options7.repeated
     ),
+    injectFile: Options7.text("inject-file").pipe(
+      Options7.withDescription(
+        "Read --inject rules from a file, one DOMAIN:HEADER=VALUE per line (/dev/stdin for a pipe), so the values stay out of the command line"
+      ),
+      Options7.optional
+    ),
     clearInject: Options7.boolean("clear-inject").pipe(
       Options7.withDescription("Remove every header rule added with --inject")
     )