lastlight 0.6.2 → 0.7.0

package/dist/sandbox/docker-compose.test.js

@@ -1,128 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { readFileSync } from "fs";
-import { resolve } from "path";
-import { parse } from "yaml";
-import { COREDNS_OPEN_IP, COREDNS_STRICT_IP, NGINX_OPEN_IP, NGINX_STRICT_IP, OTEL_COLLECTOR_IP, OTEL_COLLECTOR_UID, SANDBOX_EGRESS_SUBNET, } from "./egress-firewall-config.js";
-const compose = parse(readFileSync(resolve(__dirname, "../../docker-compose.yml"), "utf-8"));
-const FIREWALL_SERVICES = [
-    "nginx-egress-strict",
-    "nginx-egress-open",
-    "coredns-strict",
-    "coredns-open",
-];
-const HARNESS_SERVICES = ["agent", "caddy"];
-function networkNamesOf(service) {
-    const nets = compose.services[service]?.networks;
-    if (!nets)
-        return [];
-    if (Array.isArray(nets))
-        return nets;
-    return Object.keys(nets);
-}
-function ipv4OnNetwork(service, net) {
-    const nets = compose.services[service]?.networks;
-    if (!nets || Array.isArray(nets))
-        return undefined;
-    const cfg = nets[net];
-    if (cfg && typeof cfg === "object" && "ipv4_address" in cfg) {
-        return String(cfg.ipv4_address);
-    }
-    return undefined;
-}
-describe("docker-compose egress topology", () => {
-    it("declares the three expected networks", () => {
-        expect(Object.keys(compose.networks).sort()).toEqual(["internal", "proxy-egress", "sandbox-egress"].sort());
-    });
-    it("marks sandbox-egress as internal: true with the expected static subnet", () => {
-        const net = compose.networks["sandbox-egress"];
-        expect(net?.internal).toBe(true);
-        // Subnet must match SANDBOX_EGRESS_SUBNET so the constants in
-        // egress-firewall-config.ts are valid IPs in that range.
-        const subnet = net?.ipam?.config?.[0]?.subnet;
-        expect(subnet).toBe(SANDBOX_EGRESS_SUBNET);
-    });
-    it("proxy-egress is a regular bridge (no internal: true) so firewalls can reach the internet", () => {
-        const net = compose.networks["proxy-egress"];
-        // YAML `proxy-egress:` parses to null when no fields are set.
-        expect(net == null || net.internal !== true).toBe(true);
-    });
-    for (const svc of FIREWALL_SERVICES) {
-        describe(svc, () => {
-            const nets = networkNamesOf(svc);
-            it("does NOT attach to the harness `internal` network", () => {
-                // Security-critical: if regressed, an unrestricted sandbox can
-                // bridge into compose-internal services via the firewall.
-                expect(nets).not.toContain("internal");
-            });
-            it("attaches to sandbox-egress (so sandboxes can reach it)", () => {
-                expect(nets).toContain("sandbox-egress");
-            });
-        });
-    }
-    it("nginx firewalls attach to proxy-egress (so they can reach the public internet)", () => {
-        for (const svc of ["nginx-egress-strict", "nginx-egress-open"]) {
-            expect(networkNamesOf(svc)).toContain("proxy-egress");
-        }
-    });
-    describe("otel-collector", () => {
-        const nets = networkNamesOf("otel-collector");
-        it("is dual-homed on sandbox-egress (ingress from sandboxes) + proxy-egress (outbound to backend)", () => {
-            expect(nets).toContain("sandbox-egress");
-            expect(nets).toContain("proxy-egress");
-        });
-        it("does NOT attach to the harness `internal` network (can't bridge a sandbox into harness services)", () => {
-            expect(nets).not.toContain("internal");
-        });
-        it("uses the static IP the harness bakes into the sandbox OTLP endpoint", () => {
-            expect(ipv4OnNetwork("otel-collector", "sandbox-egress")).toBe(OTEL_COLLECTOR_IP);
-        });
-        it("does NOT force root — runs as the image's non-root UID", () => {
-            // The harness writes the mode-0600 config as UID OTEL_COLLECTOR_UID (its
-            // `lastlight` user is pinned to it), so the collector reads it as owner
-            // without root. If this ever regresses to `user: "0:0"`, we'd be running
-            // a sandbox-facing service as root unnecessarily.
-            expect(compose.services["otel-collector"]?.user).toBeUndefined();
-        });
-    });
-    it("pins the harness `lastlight` UID to the collector image UID so it can read the 0600 config", () => {
-        // The collector reads the harness-written mode-0600 OTLP config as its
-        // owner. That only works if the harness writes it as the collector's UID,
-        // so the Dockerfile must `useradd -u <OTEL_COLLECTOR_UID> lastlight`. If
-        // the collector image's UID ever changes, this test fails loudly to force
-        // bumping both together.
-        const dockerfile = readFileSync(resolve(__dirname, "../../Dockerfile"), "utf-8");
-        expect(dockerfile).toMatch(new RegExp(`useradd[^\\n]*-u\\s+${OTEL_COLLECTOR_UID}\\s+lastlight`));
-    });
-    it("coredns containers do NOT attach to proxy-egress (no internet needed)", () => {
-        // CoreDNS only synthesises answers from its config; it never recurses.
-        // Keeping it off proxy-egress is defence in depth.
-        for (const svc of ["coredns-strict", "coredns-open"]) {
-            expect(networkNamesOf(svc)).not.toContain("proxy-egress");
-        }
-    });
-    it("static IPs match the constants the harness bakes into the generated configs", () => {
-        expect(ipv4OnNetwork("coredns-strict", "sandbox-egress")).toBe(COREDNS_STRICT_IP);
-        expect(ipv4OnNetwork("coredns-open", "sandbox-egress")).toBe(COREDNS_OPEN_IP);
-        expect(ipv4OnNetwork("nginx-egress-strict", "sandbox-egress")).toBe(NGINX_STRICT_IP);
-        expect(ipv4OnNetwork("nginx-egress-open", "sandbox-egress")).toBe(NGINX_OPEN_IP);
-    });
-    for (const svc of HARNESS_SERVICES) {
-        it(`harness service \`${svc}\` does NOT attach to proxy-egress or sandbox-egress`, () => {
-            // Keeps the egress fabric isolated from anything carrying secrets.
-            const nets = networkNamesOf(svc);
-            expect(nets).not.toContain("proxy-egress");
-            expect(nets).not.toContain("sandbox-egress");
-        });
-    }
-    it("proxy-egress contains exactly the two nginx firewalls and the otel-collector", () => {
-        // These are the only services allowed an outbound path: the firewalls
-        // tunnel sandbox HTTPS, and the collector re-exports sandbox telemetry.
-        // None touch `internal`, so none can bridge a sandbox into harness
-        // services. Any other service appearing here is a regression.
-        const onProxyEgress = Object.keys(compose.services)
-            .filter((name) => networkNamesOf(name).includes("proxy-egress"))
-            .sort();
-        expect(onProxyEgress).toEqual(["nginx-egress-open", "nginx-egress-strict", "otel-collector"]);
-    });
-});
-//# sourceMappingURL=docker-compose.test.js.map

package/dist/sandbox/docker-compose.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"docker-compose.test.js","sourceRoot":"","sources":["../../src/sandbox/docker-compose.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AA8BrC,MAAM,OAAO,GAAgB,KAAK,CAChC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,OAAO,CAAC,CACtE,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,cAAc;CACN,CAAC;AACX,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;AAErD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,GAAW;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;IACjD,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,cAAc,IAAI,GAAG,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAE,GAAiC,CAAC,YAAY,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAClD,CAAC,UAAU,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CACtD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAG5C,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,8DAA8D;QAC9D,yDAAyD;QACzD,MAAM,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;QAClG,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG9B,CAAC;QACd,8DAA8D;QAC9D,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YAEjC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;gBAC3D,+DAA+D;gBAC/D,0DAA0D;gBAC1D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;gBAChE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,KAAK,MAAM,GAAG,IAAI,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC/D,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAE9C,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;YACvG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kGAAkG,EAAE,GAAG,EAAE;YAC1G,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;YAC7E,MAAM,CAAC,aAAa,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,yEAAyE;YACzE,wEAAwE;YACxE,yEAAyE;YACzE,kDAAkD;YAClD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,GAAG,EAAE;QACpG,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,yBAAyB;QACzB,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,EAAE,OAAO,CAAC,CAAC;QACjF,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,uBAAuB,kBAAkB,eAAe,CAAC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,uEAAuE;QACvE,mDAAmD;QACnD,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,aAAa,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClF,MAAM,CAAC,aAAa,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9E,MAAM,CAAC,aAAa,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrF,MAAM,CAAC,aAAa,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,EAAE,CAAC,qBAAqB,GAAG,sDAAsD,EAAE,GAAG,EAAE;YACtF,mEAAmE;YACnE,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,sEAAsE;QACtE,wEAAwE;QACxE,mEAAmE;QACnE,8DAA8D;QAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;aAChD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;aAC/D,IAAI,EAAE,CAAC;QACV,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/docker.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/sandbox/docker.test.js

@@ -1,137 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from "vitest";
-import { EventEmitter } from "events";
-vi.mock("child_process", async (importOriginal) => {
-    const actual = await importOriginal();
-    return {
-        ...actual,
-        spawn: vi.fn(),
-        // create() runs `docker run` via execFileSync and polls readiness via
-        // execFile (promisified). Stub both so create() can be exercised without a
-        // real docker daemon.
-        execFileSync: vi.fn().mockReturnValue("container-xyz\n"),
-        execFile: vi.fn((_cmd, _args, opts, cb) => {
-            const done = (typeof opts === "function" ? opts : cb);
-            done(null, { stdout: "", stderr: "" });
-        }),
-    };
-});
-vi.mock("fs", async (importOriginal) => {
-    const actual = await importOriginal();
-    return { ...actual, existsSync: vi.fn().mockReturnValue(true), readFileSync: vi.fn().mockReturnValue("{}") };
-});
-import { spawn, execFileSync } from "child_process";
-import { DockerSandbox } from "./docker.js";
-const mockSpawn = vi.mocked(spawn);
-const mockExecFileSync = vi.mocked(execFileSync);
-function makeFakeChild() {
-    const stdin = { write: vi.fn(), end: vi.fn() };
-    const stdout = Object.assign(new EventEmitter(), { setEncoding: vi.fn() });
-    const stderr = Object.assign(new EventEmitter(), { setEncoding: vi.fn() });
-    const child = Object.assign(new EventEmitter(), { stdin, stdout, stderr, kill: vi.fn() });
-    return child;
-}
-describe("DockerSandbox.runAgent — prompt via stdin, not shell arg", () => {
-    let manager;
-    let fakeChild;
-    beforeEach(() => {
-        vi.clearAllMocks();
-        fakeChild = makeFakeChild();
-        mockSpawn.mockReturnValue(fakeChild);
-        manager = new DockerSandbox({
-            imageName: "test-image",
-            env: {},
-            timeoutSeconds: 5,
-        });
-        manager
-            .activeContainers.set("task-001", {
-            containerId: "abc123",
-            containerName: "test-container",
-            worktreePath: "/tmp/work",
-        });
-    });
-    it("spawn is called with stdin: 'pipe'", async () => {
-        const runPromise = manager.runAgent("task-001", "hello world");
-        process.nextTick(() => fakeChild.emit("close", 0));
-        await runPromise;
-        const spawnOpts = mockSpawn.mock.calls[0][2];
-        expect(spawnOpts.stdio[0]).toBe("pipe");
-    });
-    it("prompt is written to child.stdin", async () => {
-        const prompt = "Do something dangerous'; rm -rf /; echo '";
-        const runPromise = manager.runAgent("task-001", prompt);
-        process.nextTick(() => fakeChild.emit("close", 0));
-        await runPromise;
-        expect(fakeChild.stdin.write).toHaveBeenCalledWith(prompt);
-        expect(fakeChild.stdin.end).toHaveBeenCalled();
-    });
-    it("prompt is not embedded in the docker exec args", async () => {
-        const prompt = "secret'; rm -rf /;'";
-        const runPromise = manager.runAgent("task-001", prompt);
-        process.nextTick(() => fakeChild.emit("close", 0));
-        await runPromise;
-        const dockerArgs = mockSpawn.mock.calls[0][1].join(" ");
-        expect(dockerArgs).not.toContain(prompt);
-        expect(dockerArgs).not.toContain("rm -rf");
-    });
-    it("docker exec args contain -i flag for stdin", async () => {
-        const runPromise = manager.runAgent("task-001", "test prompt");
-        process.nextTick(() => fakeChild.emit("close", 0));
-        await runPromise;
-        const dockerArgs = mockSpawn.mock.calls[0][1];
-        expect(dockerArgs).toContain("-i");
-    });
-    it("agentic-pi command runs in --sandbox none mode and does not embed the prompt", async () => {
-        const runPromise = manager.runAgent("task-001", "test prompt");
-        process.nextTick(() => fakeChild.emit("close", 0));
-        await runPromise;
-        const dockerArgs = mockSpawn.mock.calls[0][1];
-        const shCmd = dockerArgs[dockerArgs.length - 1];
-        expect(shCmd).toContain("agentic-pi run");
-        expect(shCmd).toContain("--sandbox none");
-        expect(shCmd).not.toContain("--no-file-search");
-        expect(shCmd).not.toContain("test prompt");
-    });
-});
-describe("DockerSandbox.create — shared package cache (issue #107)", () => {
-    beforeEach(() => {
-        vi.clearAllMocks();
-        mockExecFileSync.mockReturnValue("container-xyz\n");
-    });
-    function dockerRunArgv() {
-        const call = mockExecFileSync.mock.calls.find((c) => Array.isArray(c[1]) && c[1][0] === "run");
-        return call?.[1] ?? [];
-    }
-    it("mounts the shared cache volume and wires npm/pnpm/yarn env", async () => {
-        const manager = new DockerSandbox({ imageName: "img", env: {} });
-        await manager.create({
-            taskId: "repo-1-pr-review",
-            worktreePath: "/tmp/work",
-            workspaceMount: { type: "bind", hostPath: "/tmp/work" },
-        });
-        const argv = dockerRunArgv();
-        expect(argv).toContain("lastlight_pkg-cache:/cache");
-        expect(argv).toContain("npm_config_cache=/cache/npm");
-        expect(argv).toContain("npm_config_store_dir=/cache/pnpm");
-        expect(argv).toContain("YARN_CACHE_FOLDER=/cache/yarn");
-    });
-    it("honours LASTLIGHT_PKG_CACHE_VOLUME override", async () => {
-        const prev = process.env.LASTLIGHT_PKG_CACHE_VOLUME;
-        process.env.LASTLIGHT_PKG_CACHE_VOLUME = "my-cache";
-        try {
-            const manager = new DockerSandbox({ imageName: "img", env: {} });
-            await manager.create({
-                taskId: "t",
-                worktreePath: "/tmp/work",
-                workspaceMount: { type: "bind", hostPath: "/tmp/work" },
-            });
-            expect(dockerRunArgv()).toContain("my-cache:/cache");
-        }
-        finally {
-            if (prev === undefined)
-                delete process.env.LASTLIGHT_PKG_CACHE_VOLUME;
-            else
-                process.env.LASTLIGHT_PKG_CACHE_VOLUME = prev;
-        }
-    });
-});
-//# sourceMappingURL=docker.test.js.map

package/dist/sandbox/docker.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"docker.test.js","sourceRoot":"","sources":["../../src/sandbox/docker.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAkC,CAAC;IACtE,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,sEAAsE;QACtE,2EAA2E;QAC3E,sBAAsB;QACtB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC;QACxD,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,KAAe,EAAE,IAAa,EAAE,EAAY,EAAE,EAAE;YAC7E,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAqC,CAAC;YAC1F,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC3D,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,SAAS,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnC,MAAM,gBAAgB,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAEjD,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,KAIN,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,IAAI,OAAsB,CAAC;IAC3B,IAAI,SAA2C,CAAC;IAEhD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,SAAS,GAAG,aAAa,EAAE,CAAC;QAC5B,SAAS,CAAC,eAAe,CAAC,SAAgD,CAAC,CAAC;QAE5E,OAAO,GAAG,IAAI,aAAa,CAAC;YAC1B,SAAS,EAAE,YAAY;YACvB,GAAG,EAAE,EAAE;YACP,cAAc,EAAE,CAAC;SAClB,CAAC,CAAC;QACF,OAAiE;aAC/D,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE;YAChC,WAAW,EAAE,QAAQ;YACrB,aAAa,EAAE,gBAAgB;YAC/B,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAyB,CAAC;QACrE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,2CAA2C,CAAC;QAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,UAAU,GAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAa,CAAC;QAC1D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAa,CAAC;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gBAAgB,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,aAAa;QACpB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,CAAC,CAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CAC9D,CAAC;QACF,OAAQ,IAAI,EAAE,CAAC,CAAC,CAAc,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE;SACxD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,UAAU,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,GAAG;gBACX,YAAY,EAAE,WAAW;gBACzB,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE;aACxD,CAAC,CAAC;YACH,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACvD,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;;gBACjE,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/egress-allowlist.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/sandbox/egress-allowlist.test.js

@@ -1,65 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { ALLOW_ALL_SENTINEL, DEFAULT_ALLOWLIST, GITHUB_HOSTS, PACKAGE_REGISTRY_HOSTS, PROVIDER_HOSTS, mergeAllowlist, normalizeAllowlistHost, } from "./egress-allowlist.js";
-describe("egress-allowlist source of truth", () => {
-    it("groups are non-empty and disjoint", () => {
-        for (const group of [GITHUB_HOSTS, PROVIDER_HOSTS, PACKAGE_REGISTRY_HOSTS]) {
-            expect(group.length).toBeGreaterThan(0);
-        }
-        const all = [...GITHUB_HOSTS, ...PROVIDER_HOSTS, ...PACKAGE_REGISTRY_HOSTS];
-        expect(new Set(all).size).toBe(all.length);
-    });
-    it("DEFAULT_ALLOWLIST is the union of the three groups in declaration order", () => {
-        const expected = [...GITHUB_HOSTS, ...PROVIDER_HOSTS, ...PACKAGE_REGISTRY_HOSTS];
-        expect([...DEFAULT_ALLOWLIST]).toEqual(expected);
-    });
-    it("covers the critical host categories the runtime depends on", () => {
-        // GitHub apex covers api.github.com, codeload.github.com, raw.…
-        expect(GITHUB_HOSTS).toContain("github.com");
-        // Provider hosts — the docker backend dials these from inside the
-        // sandbox container.
-        expect(PROVIDER_HOSTS).toContain("openai.com");
-        expect(PROVIDER_HOSTS).toContain("anthropic.com");
-        // npm — covers registry.npmjs.org, auth.npmjs.org, www.npmjs.org.
-        expect(PACKAGE_REGISTRY_HOSTS).toContain("npmjs.org");
-    });
-    it("entries are bare hostnames (no leading dot, no wildcard prefix)", () => {
-        // Convention is "every entry matches apex+subdomains" — see file
-        // docstring. The config generator emits the right syntax for each
-        // backend. If someone tries to write `.github.com` or `*.github.com`
-        // here, fail fast.
-        for (const host of DEFAULT_ALLOWLIST) {
-            expect(host).toMatch(/^[A-Za-z0-9][A-Za-z0-9.-]*[A-Za-z0-9]$/);
-            expect(host.startsWith(".")).toBe(false);
-            expect(host.includes("*")).toBe(false);
-        }
-    });
-    it("ALLOW_ALL_SENTINEL is the wildcard string the gondolin matcher honours", () => {
-        expect(ALLOW_ALL_SENTINEL).toBe("*");
-    });
-    it("normalizes and merges extra allowlist hosts", () => {
-        expect(normalizeAllowlistHost("https://Collector.Example.com:4318/v1/traces")).toBe("collector.example.com");
-        expect(normalizeAllowlistHost("169.254.169.254")).toBeNull();
-        expect(mergeAllowlist(["github.com"], ["GitHub.com", "otel.example.com"])).toEqual([
-            "github.com",
-            "otel.example.com",
-        ]);
-    });
-    it("rejects private and internal collector endpoints", () => {
-        for (const host of [
-            "0.0.0.0",
-            "127.0.0.1",
-            "10.0.0.4",
-            "172.16.0.1",
-            "192.168.1.10",
-            "http://[::1]:4318",
-            "http://[fe80::1]:4318",
-            "http://[fd00::1]:4318",
-            "http://[::ffff:127.0.0.1]:4318",
-            "metadata.google.internal",
-            "localhost",
-        ]) {
-            expect(normalizeAllowlistHost(host), host).toBeNull();
-        }
-    });
-});
-//# sourceMappingURL=egress-allowlist.test.js.map

package/dist/sandbox/egress-allowlist.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"egress-allowlist.test.js","sourceRoot":"","sources":["../../src/sandbox/egress-allowlist.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACd,cAAc,EACd,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC3E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,cAAc,EAAE,GAAG,sBAAsB,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,cAAc,EAAE,GAAG,sBAAsB,CAAC,CAAC;QACjF,MAAM,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,gEAAgE;QAChE,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7C,kEAAkE;QAClE,qBAAqB;QACrB,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,kEAAkE;QAClE,MAAM,CAAC,sBAAsB,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,iEAAiE;QACjE,kEAAkE;QAClE,qEAAqE;QACrE,mBAAmB;QACnB,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,sBAAsB,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC7G,MAAM,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACjF,YAAY;YACZ,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,KAAK,MAAM,IAAI,IAAI;YACjB,SAAS;YACT,WAAW;YACX,UAAU;YACV,YAAY;YACZ,cAAc;YACd,mBAAmB;YACnB,uBAAuB;YACvB,uBAAuB;YACvB,gCAAgC;YAChC,0BAA0B;YAC1B,WAAW;SACZ,EAAE,CAAC;YACF,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/egress-firewall-config.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/sandbox/egress-firewall-config.test.js

@@ -1,244 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { COREDNS_OPEN_IP, COREDNS_STRICT_IP, NGINX_OPEN_IP, NGINX_STRICT_IP, OTEL_COLLECTOR_IP, OTEL_COLLECTOR_OTLP_GRPC_PORT, OTEL_COLLECTOR_OTLP_HTTP_PORT, OTEL_COLLECTOR_SANDBOX_ENDPOINT, renderCorefileOpen, renderCorefileStrict, renderNginxOpenConf, renderNginxStrictConf, renderOtelCollectorConfig, SANDBOX_EGRESS_SUBNET, } from "./egress-firewall-config.js";
-import { DEFAULT_ALLOWLIST } from "./egress-allowlist.js";
-import { parse as parseYaml } from "yaml";
-describe("static IP constants", () => {
-    it("all four service IPs sit inside the sandbox-egress subnet", () => {
-        const prefix = SANDBOX_EGRESS_SUBNET.split("/")[0].split(".").slice(0, 3).join(".");
-        for (const ip of [COREDNS_STRICT_IP, COREDNS_OPEN_IP, NGINX_STRICT_IP, NGINX_OPEN_IP]) {
-            expect(ip.startsWith(prefix + ".")).toBe(true);
-        }
-    });
-    it("strict and open IPs are distinct in both pairs", () => {
-        expect(COREDNS_STRICT_IP).not.toBe(COREDNS_OPEN_IP);
-        expect(NGINX_STRICT_IP).not.toBe(NGINX_OPEN_IP);
-    });
-});
-describe("nginx strict config", () => {
-    const conf = renderNginxStrictConf();
-    it("listens on 443 with ssl_preread enabled", () => {
-        expect(conf).toMatch(/listen\s+443;/);
-        expect(conf).toMatch(/ssl_preread\s+on;/);
-    });
-    it("defaults unknown SNIs to a black-hole upstream (instant reset)", () => {
-        expect(conf).toMatch(/default\s+127\.0\.0\.1:1;/);
-    });
-    it("emits a leading-dot map entry per allowlist host (apex+subdomain match)", () => {
-        for (const host of DEFAULT_ALLOWLIST) {
-            // nginx's `.foo.com` syntax matches `foo.com` and any subdomain.
-            // Upstream is the live SNI value, not pinned at config time.
-            expect(conf).toContain(`.${host} $ssl_preread_server_name:443;`);
-        }
-    });
-    it("uses docker's embedded DNS as the upstream resolver", () => {
-        expect(conf).toMatch(/resolver\s+127\.0\.0\.11/);
-    });
-    it("declares `hostnames` in the map block so leading-dot wildcards work", () => {
-        // Without `hostnames;`, nginx's `map` does exact string match only —
-        // `.github.com` becomes a literal key that never matches anything.
-        // We hit this in prod: every allowlisted host fell through to the
-        // black-hole default. Pin the contract so it can't regress.
-        expect(conf).toMatch(/map\s+\$ssl_preread_server_name\s+\$upstream_target\s*\{\s*\n\s*hostnames;/);
-    });
-});
-describe("nginx open config", () => {
-    const conf = renderNginxOpenConf();
-    it("tunnels whatever SNI was sent — no allowlist map", () => {
-        expect(conf).toMatch(/proxy_pass\s+\$ssl_preread_server_name:443;/);
-        expect(conf).not.toMatch(/map\s+\$ssl_preread_server_name/);
-    });
-    it("still listens on 443 with ssl_preread enabled", () => {
-        expect(conf).toMatch(/listen\s+443;/);
-        expect(conf).toMatch(/ssl_preread\s+on;/);
-    });
-});
-describe("coredns strict Corefile", () => {
-    const conf = renderCorefileStrict();
-    it("uses a SINGLE template block with one match line per allowlist host", () => {
-        // CoreDNS only honours one `template` block per (class, type, zone) —
-        // multiple blocks silently shadow each other. Catching a regression
-        // matters because we hit this exact bug in prod.
-        const templateBlocks = conf.match(/template\s+IN\s+A\s*\{/g) || [];
-        expect(templateBlocks.length).toBe(1);
-        for (const host of DEFAULT_ALLOWLIST) {
-            const escaped = host.replaceAll(".", "\\.");
-            expect(conf).toContain(`(^|\\.)${escaped}\\.$`);
-        }
-    });
-    it("answers with the nginx-strict IP", () => {
-        expect(conf).toContain(`IN A ${NGINX_STRICT_IP}`);
-    });
-    it("catches every unmatched query with an NXDOMAIN template", () => {
-        expect(conf).toMatch(/template\s+IN\s+ANY\s*\{[\s\S]*rcode\s+NXDOMAIN[\s\S]*\}/);
-    });
-});
-describe("coredns open Corefile", () => {
-    const conf = renderCorefileOpen();
-    it("returns the nginx-open IP for arbitrary A queries", () => {
-        expect(conf).toContain(`IN A ${NGINX_OPEN_IP}`);
-    });
-    it("hard-denies cloud metadata literals even in unrestricted mode", () => {
-        // Each hard-deny host gets its own zone block so CoreDNS's
-        // longest-suffix routing intercepts the apex + subdomains before
-        // the catch-all `.` zone sees them.
-        expect(conf).toMatch(/metadata\.google\.internal:53\s*\{[\s\S]*?rcode\s+NXDOMAIN/);
-        expect(conf).toMatch(/169\.254\.169\.254:53\s*\{[\s\S]*?rcode\s+NXDOMAIN/);
-    });
-    it("returns NOERROR / empty for AAAA so IPv6 doesn't accidentally bypass us", () => {
-        expect(conf).toMatch(/template\s+IN\s+AAAA\s*\{[\s\S]*rcode\s+NOERROR[\s\S]*\}/);
-    });
-});
-describe("otel collector config", () => {
-    // Most tests run with forwarding active; the gating tests below cover inactive.
-    const renderActive = (env) => parseYaml(renderOtelCollectorConfig({ active: true, env }));
-    it("sandbox endpoint points at the collector's static IP + OTLP/HTTP port", () => {
-        expect(OTEL_COLLECTOR_SANDBOX_ENDPOINT).toBe(`http://${OTEL_COLLECTOR_IP}:${OTEL_COLLECTOR_OTLP_HTTP_PORT}`);
-    });
-    it("receives OTLP on both http and grpc, on all interfaces", () => {
-        const cfg = renderActive({});
-        expect(cfg.receivers.otlp.protocols.http.endpoint).toBe(`0.0.0.0:${OTEL_COLLECTOR_OTLP_HTTP_PORT}`);
-        expect(cfg.receivers.otlp.protocols.grpc.endpoint).toBe(`0.0.0.0:${OTEL_COLLECTOR_OTLP_GRPC_PORT}`);
-    });
-    it("re-exports to the generic endpoint (as a base URL) with parsed auth headers on every signal", () => {
-        const cfg = renderActive({
-            OTEL_EXPORTER_OTLP_ENDPOINT: "https://collector.example.com:4318",
-            OTEL_EXPORTER_OTLP_HEADERS: "api-key=secret-123,x-tenant=acme",
-        });
-        for (const signal of ["traces", "metrics", "logs"]) {
-            const exp = cfg.exporters[`otlphttp/${signal}`];
-            // Generic endpoint → `endpoint` field (collector appends /v1/<signal>).
-            expect(exp.endpoint).toBe("https://collector.example.com:4318");
-            expect(exp[`${signal}_endpoint`]).toBeUndefined();
-            expect(exp.headers).toEqual({ "api-key": "secret-123", "x-tenant": "acme" });
-            expect(cfg.service.pipelines[signal].exporters).toEqual([`otlphttp/${signal}`]);
-        }
-    });
-    it("routes per-signal endpoints to their own pipeline (no fallback-chain misrouting)", () => {
-        // The bug the reviewer flagged: separate traces/metrics endpoints must not
-        // both export to whichever one won a `||` chain.
-        const cfg = renderActive({
-            OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: "https://traces.example.com/v1/traces",
-            OTEL_EXPORTER_OTLP_METRICS_ENDPOINT: "https://metrics.example.com/v1/metrics",
-        });
-        // Signal-specific endpoints are used verbatim via `<signal>_endpoint`.
-        expect(cfg.exporters["otlphttp/traces"].traces_endpoint).toBe("https://traces.example.com/v1/traces");
-        expect(cfg.exporters["otlphttp/metrics"].metrics_endpoint).toBe("https://metrics.example.com/v1/metrics");
-        expect(cfg.service.pipelines.traces.exporters).toEqual(["otlphttp/traces"]);
-        expect(cfg.service.pipelines.metrics.exporters).toEqual(["otlphttp/metrics"]);
-        // logs had no endpoint configured → debug, not silently misrouted.
-        expect(cfg.service.pipelines.logs.exporters).toEqual(["debug"]);
-        expect(cfg.exporters.debug).toBeDefined();
-    });
-    it("honours a logs-only endpoint instead of dropping it (the silent-drop case)", () => {
-        const cfg = renderActive({
-            OTEL_EXPORTER_OTLP_LOGS_ENDPOINT: "https://logs.example.com/v1/logs",
-        });
-        expect(cfg.exporters["otlphttp/logs"].logs_endpoint).toBe("https://logs.example.com/v1/logs");
-        expect(cfg.service.pipelines.logs.exporters).toEqual(["otlphttp/logs"]);
-        expect(cfg.service.pipelines.traces.exporters).toEqual(["debug"]);
-        expect(cfg.service.pipelines.metrics.exporters).toEqual(["debug"]);
-    });
-    it("lets a signal-specific endpoint override the generic one for just that signal", () => {
-        const cfg = renderActive({
-            OTEL_EXPORTER_OTLP_ENDPOINT: "https://generic.example.com",
-            OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: "https://traces.example.com/v1/traces",
-        });
-        // traces → verbatim specific URL; metrics/logs → generic base.
-        expect(cfg.exporters["otlphttp/traces"].traces_endpoint).toBe("https://traces.example.com/v1/traces");
-        expect(cfg.exporters["otlphttp/metrics"].endpoint).toBe("https://generic.example.com");
-        expect(cfg.exporters["otlphttp/logs"].endpoint).toBe("https://generic.example.com");
-    });
-    it("applies per-signal header overrides, falling back to generic headers", () => {
-        const cfg = renderActive({
-            OTEL_EXPORTER_OTLP_ENDPOINT: "https://generic.example.com",
-            OTEL_EXPORTER_OTLP_HEADERS: "authorization=generic",
-            OTEL_EXPORTER_OTLP_TRACES_HEADERS: "authorization=traces-only",
-        });
-        expect(cfg.exporters["otlphttp/traces"].headers.authorization).toBe("traces-only");
-        expect(cfg.exporters["otlphttp/metrics"].headers.authorization).toBe("generic");
-    });
-    it("supports a non-443 / custom-port HTTPS backend the strict SNI firewall could not reach", () => {
-        // This is the case the reviewer flagged for the old direct-forward path.
-        // It now works because the collector dials the backend on its trusted
-        // outbound leg, not through ssl_preread.
-        const cfg = renderActive({ OTEL_EXPORTER_OTLP_ENDPOINT: "https://otel.internal:4318" });
-        expect(cfg.exporters["otlphttp/traces"].endpoint).toBe("https://otel.internal:4318");
-    });
-    it("preserves '=' inside header values (bearer tokens survive intact)", () => {
-        const cfg = renderActive({
-            OTEL_EXPORTER_OTLP_ENDPOINT: "https://b.example.com",
-            OTEL_EXPORTER_OTLP_HEADERS: "authorization=Bearer abc=def==",
-        });
-        expect(cfg.exporters["otlphttp/traces"].headers.authorization).toBe("Bearer abc=def==");
-    });
-    it("falls back to a debug exporter (no data leaves) when active but no backend is configured", () => {
-        const cfg = renderActive({});
-        expect(cfg.exporters.debug).toBeDefined();
-        expect(cfg.exporters["otlphttp/traces"]).toBeUndefined();
-        for (const signal of ["traces", "metrics", "logs"]) {
-            expect(cfg.service.pipelines[signal].exporters).toEqual(["debug"]);
-        }
-    });
-    it("produces valid YAML even with quote/backslash-bearing header values", () => {
-        // Crucially, a single quote in a header value no longer fails anything:
-        // it lives in the host-side collector config, never a sandbox shell wrap.
-        const cfg = renderActive({
-            OTEL_EXPORTER_OTLP_ENDPOINT: "https://b.example.com",
-            OTEL_EXPORTER_OTLP_HEADERS: `x-quote=it's "quoted" \\ backslash`,
-        });
-        expect(cfg.exporters["otlphttp/traces"].headers["x-quote"]).toBe(`it's "quoted" \\ backslash`);
-    });
-    it("drops CR/LF-bearing header pairs (no header injection, no broken YAML) but keeps the rest", () => {
-        // A newline in a header value would be header injection on the
-        // collector→backend leg and would also break the YAML scalar.
-        const raw = renderOtelCollectorConfig({
-            active: true,
-            env: {
-                OTEL_EXPORTER_OTLP_ENDPOINT: "https://b.example.com",
-                OTEL_EXPORTER_OTLP_HEADERS: "x-good=ok,x-bad=line1\nline2",
-            },
-        });
-        expect(() => parseYaml(raw)).not.toThrow();
-        const cfg = parseYaml(raw);
-        expect(cfg.exporters["otlphttp/traces"].headers).toEqual({ "x-good": "ok" });
-    });
-    describe("forwarding gate (security floor)", () => {
-        it("when inactive, drops every signal to debug and emits no backend endpoint or credential", () => {
-            const raw = renderOtelCollectorConfig({
-                active: false,
-                env: {
-                    OTEL_EXPORTER_OTLP_ENDPOINT: "https://real-backend.example.com",
-                    OTEL_EXPORTER_OTLP_HEADERS: "authorization=super-secret-token",
-                    OTEL_EXPORTER_OTLP_TRACES_ENDPOINT: "https://traces.example.com",
-                },
-            });
-            // No backend URL or secret leaks into the generated file at all.
-            expect(raw).not.toContain("real-backend.example.com");
-            expect(raw).not.toContain("super-secret-token");
-            expect(raw).not.toContain("traces.example.com");
-            expect(raw).not.toContain("otlphttp");
-            const cfg = parseYaml(raw);
-            expect(cfg.exporters.debug).toBeDefined();
-            for (const signal of ["traces", "metrics", "logs"]) {
-                expect(cfg.service.pipelines[signal].exporters).toEqual(["debug"]);
-            }
-            // Receiver still listens so sandboxes don't get connection errors.
-            expect(cfg.receivers.otlp.protocols.http.endpoint).toBe(`0.0.0.0:${OTEL_COLLECTOR_OTLP_HTTP_PORT}`);
-        });
-    });
-});
-describe("apex + subdomain match sanity", () => {
-    // Pin behaviour: a bare entry like "github.com" must match both
-    // the apex and any subdomain in both backends.
-    it("'github.com' generates an nginx leading-dot map entry", () => {
-        const conf = renderNginxStrictConf();
-        expect(conf).toMatch(/\s\.github\.com\s+\$ssl_preread_server_name:443;/);
-    });
-    it("'github.com' generates a CoreDNS pattern matching apex + subdomains", () => {
-        const conf = renderCorefileStrict();
-        // (^|\.)github\.com\.$ matches both "github.com." and "api.github.com."
-        // in FQDN-with-trailing-dot form.
-        expect(conf).toContain("(^|\\.)github\\.com\\.$");
-    });
-});
-//# sourceMappingURL=egress-firewall-config.test.js.map