openrod 0.0.0 → 0.1.0

package/node_modules/@nvidia/openshell-sdk/dist/ssh-validate.js

@@ -0,0 +1,58 @@
+// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+// Trust-boundary validation for CreateSshSession responses. The gateway's
+// values are interpolated into an OpenSSH `ProxyCommand` that OpenSSH runs
+// through `/bin/sh -c` on the caller's workstation, so proto/openshell.proto
+// (CreateSshSessionResponse) says clients MUST reject responses outside the
+// specified character sets and ranges. This enforces exactly that contract at
+// the SDK edge so no consumer has to rediscover the invariant.
+import { isIP } from 'node:net';
+import { SdkError } from './errors.js';
+// Charsets and bounds mirror the proto CreateSshSessionResponse field comments.
+const SANDBOX_ID = /^[A-Za-z0-9._-]{1,128}$/;
+const TOKEN = /^[A-Za-z0-9._~+/=-]+$/;
+const FINGERPRINT = /^[A-Za-z0-9:+/=-]+$/;
+function reject(field, detail) {
+    throw new SdkError('invalid_config', `CreateSshSession response ${field} ${detail}`);
+}
+function validGatewayHost(host) {
+    if (isIP(host) === 4)
+        return true;
+    if (host.startsWith('[') && host.endsWith(']')) {
+        return isIP(host.slice(1, -1)) === 6;
+    }
+    const dns = host.endsWith('.') ? host.slice(0, -1) : host;
+    if (dns.length === 0)
+        return false;
+    return dns.split('.').every((label) => {
+        return label.length >= 1 && label.length <= 63 && /^[A-Za-z0-9](?:[A-Za-z0-9-]*[A-Za-z0-9])?$/.test(label);
+    });
+}
+// Throw SdkError('invalid_config') if any field violates the proto contract.
+export function validateSshResponse(resp, expectedSandboxId) {
+    if (!SANDBOX_ID.test(resp.sandboxId)) {
+        reject('sandbox_id', 'must match [A-Za-z0-9._-]{1,128}');
+    }
+    if (expectedSandboxId !== undefined && resp.sandboxId !== expectedSandboxId) {
+        reject('sandbox_id', `must match requested sandbox '${expectedSandboxId}'`);
+    }
+    const tokenBytes = Buffer.byteLength(resp.token, 'utf8');
+    if (tokenBytes < 1 || tokenBytes > 4096 || !TOKEN.test(resp.token)) {
+        reject('token', 'must be 1..4096 bytes of [A-Za-z0-9._~+/=-]');
+    }
+    const hostBytes = Buffer.byteLength(resp.gatewayHost, 'utf8');
+    if (hostBytes < 1 || hostBytes > 253 || !validGatewayHost(resp.gatewayHost)) {
+        reject('gateway_host', 'must be a valid DNS name, IPv4 address, or bracketed IPv6 address');
+    }
+    if (!Number.isInteger(resp.gatewayPort) || resp.gatewayPort < 1 || resp.gatewayPort > 65535) {
+        reject('gateway_port', 'must be an integer in 1..65535');
+    }
+    if (resp.gatewayScheme !== 'http' && resp.gatewayScheme !== 'https') {
+        reject('gateway_scheme', "must be exactly 'http' or 'https'");
+    }
+    const fingerprintBytes = Buffer.byteLength(resp.hostKeyFingerprint, 'utf8');
+    if (resp.hostKeyFingerprint !== '' && (fingerprintBytes > 256 || !FINGERPRINT.test(resp.hostKeyFingerprint))) {
+        reject('host_key_fingerprint', 'must be at most 256 bytes of [A-Za-z0-9:+/=-] when non-empty');
+    }
+}
+//# sourceMappingURL=ssh-validate.js.map

package/node_modules/@nvidia/openshell-sdk/dist/ssh-validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-validate.js","sourceRoot":"","sources":["../src/ssh-validate.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sCAAsC;AAEtC,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,+DAA+D;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,gFAAgF;AAChF,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC;AACtC,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAY1C,SAAS,MAAM,CAAC,KAAa,EAAE,MAAc;IAC3C,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACpC,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,4CAA4C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,IAAuB,EAAE,iBAA0B;IACrF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,YAAY,EAAE,kCAAkC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,iBAAiB,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC5E,MAAM,CAAC,YAAY,EAAE,iCAAiC,iBAAiB,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,cAAc,EAAE,mEAAmE,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,KAAK,EAAE,CAAC;QAC5F,MAAM,CAAC,cAAc,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;QACpE,MAAM,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,kBAAkB,KAAK,EAAE,IAAI,CAAC,gBAAgB,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EAAE,CAAC;QAC7G,MAAM,CAAC,sBAAsB,EAAE,8DAA8D,CAAC,CAAC;IACjG,CAAC;AACH,CAAC"}

package/node_modules/@nvidia/openshell-sdk/dist/transport.d.ts

@@ -0,0 +1,35 @@
+import type { Interceptor, Transport } from '@connectrpc/connect';
+import type { OidcTokenProvider } from './oidc.js';
+export interface ConnectOptions {
+    /** Gateway URL (`http://...` or `https://...`). */
+    gateway: string;
+    /** CA certificate (PEM). Omit to use system roots. */
+    caCert?: Buffer;
+    /**
+     * Client certificate (PEM) for mTLS. Authenticates the CALLER, not just the
+     * server. The default local OpenShell gateway (Docker, VM, Homebrew, Linux
+     * package) requires this. Must be paired with clientKey.
+     */
+    clientCert?: Buffer;
+    /** Client private key (PEM) for mTLS. Must be paired with clientCert. */
+    clientKey?: Buffer;
+    /** Bearer token for direct OIDC auth. Mutually exclusive with edgeToken. */
+    oidcToken?: string;
+    /** Renewable OIDC bearer provider. Mutually exclusive with oidcToken and edgeToken. */
+    oidcTokenProvider?: OidcTokenProvider;
+    /** Cloudflare Access token. See the sidecar note above for CF-fronted gateways. */
+    edgeToken?: string;
+    /** Disable TLS verification (dev/debug only). */
+    insecureSkipVerify?: boolean;
+    /**
+     * Permit sending an auth token (oidcToken/oidcTokenProvider/edgeToken) over
+     * plaintext `http://` to a non-loopback host. Off by default: tokens over
+     * cleartext to a remote host leak credentials on the wire. Loopback hosts are
+     * always allowed.
+     */
+    allowInsecureAuth?: boolean;
+}
+/** @internal Exported for transport contract tests; not part of the package root API. */
+export declare function authInterceptor(opts: ConnectOptions): Interceptor;
+export declare function buildTransport(opts: ConnectOptions): Transport;
+//# sourceMappingURL=transport.d.ts.map

package/node_modules/@nvidia/openshell-sdk/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGlE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAID,yFAAyF;AACzF,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,WAAW,CAYjE;AA8DD,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,CAoB9D"}

package/node_modules/@nvidia/openshell-sdk/dist/transport.js

@@ -0,0 +1,97 @@
+// SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { createGrpcTransport } from '@connectrpc/connect-node';
+import { SdkError } from './errors.js';
+// OIDC bearer takes precedence; otherwise attach the Cloudflare Access header +
+// cookie. No-op when neither token is set.
+/** @internal Exported for transport contract tests; not part of the package root API. */
+export function authInterceptor(opts) {
+    return (next) => async (req) => {
+        if (opts.oidcTokenProvider) {
+            req.header.set('authorization', `Bearer ${await opts.oidcTokenProvider.getToken(req.signal)}`);
+        }
+        else if (opts.oidcToken) {
+            req.header.set('authorization', `Bearer ${opts.oidcToken}`);
+        }
+        else if (opts.edgeToken) {
+            req.header.set('cf-access-jwt-assertion', opts.edgeToken);
+            req.header.set('cookie', `CF_Authorization=${opts.edgeToken}`);
+        }
+        return next(req);
+    };
+}
+// The client certificate and key are an all-or-nothing pair: a cert without a
+// key (or a key without a cert) cannot complete an mTLS handshake, so reject it
+// up front rather than surfacing an opaque TLS failure at connect time.
+function assertMtlsPair(opts) {
+    const hasCert = opts.clientCert !== undefined;
+    const hasKey = opts.clientKey !== undefined;
+    if (hasCert !== hasKey) {
+        const missing = hasCert ? 'clientKey' : 'clientCert';
+        throw new SdkError('invalid_config', `mTLS requires both clientCert and clientKey; ${missing} is missing`);
+    }
+}
+// oidcToken and edgeToken are documented as mutually exclusive; the interceptor
+// silently prefers OIDC when both are set. Reject that ambiguity up front so a
+// caller does not think an edge token is in effect when it is being ignored.
+function assertTokenExclusivity(opts) {
+    const configured = [opts.oidcToken, opts.oidcTokenProvider, opts.edgeToken].filter((value) => value !== undefined).length;
+    if (configured > 1) {
+        throw new SdkError('invalid_config', 'oidcToken, oidcTokenProvider, and edgeToken are mutually exclusive');
+    }
+}
+// edgeToken is also interpolated into a Cookie header. Restrict it to the
+// cookie-safe base64url/JWT character set so a caller cannot inject a second
+// cookie or a new header through an untrusted token value.
+function assertEdgeToken(opts) {
+    if (opts.edgeToken !== undefined && !/^[A-Za-z0-9._~-]+$/.test(opts.edgeToken)) {
+        throw new SdkError('invalid_config', 'edgeToken must contain only cookie-safe JWT characters');
+    }
+}
+function isLoopbackHost(host) {
+    // URL.hostname keeps the brackets on IPv6 literals (e.g. `[::1]`); strip them.
+    const h = host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
+    if (h === 'localhost' || h === '::1')
+        return true;
+    return /^127(?:\.\d{1,3}){3}$/.test(h);
+}
+// Attaching a bearer/CF token to a plaintext `http://` request to a non-loopback
+// host puts the credential on the wire in the clear. Refuse it unless the caller
+// explicitly opts in. Loopback (local-dev / edge-sidecar) is always fine.
+function assertTokenTransportSecurity(opts) {
+    const hasToken = opts.oidcToken !== undefined || opts.oidcTokenProvider !== undefined || opts.edgeToken !== undefined;
+    if (!hasToken || opts.allowInsecureAuth || opts.gateway.startsWith('https://'))
+        return;
+    let host;
+    try {
+        host = new URL(opts.gateway).hostname;
+    }
+    catch {
+        return; // A malformed gateway URL surfaces from the transport itself.
+    }
+    if (!isLoopbackHost(host)) {
+        throw new SdkError('invalid_config', `refusing to send an auth token over plaintext http:// to non-loopback host '${host}'; use https:// or set allowInsecureAuth`);
+    }
+}
+export function buildTransport(opts) {
+    assertMtlsPair(opts);
+    assertTokenExclusivity(opts);
+    assertEdgeToken(opts);
+    assertTokenTransportSecurity(opts);
+    const isTls = opts.gateway.startsWith('https://');
+    return createGrpcTransport({
+        baseUrl: opts.gateway,
+        interceptors: [authInterceptor(opts)],
+        // For https:// gateways, pass Node TLS options straight through. For
+        // http:// (local dev) these are ignored and the client speaks h2c.
+        nodeOptions: isTls
+            ? {
+                ca: opts.caCert,
+                cert: opts.clientCert,
+                key: opts.clientKey,
+                rejectUnauthorized: opts.insecureSkipVerify ? false : undefined,
+            }
+            : undefined,
+    });
+}
+//# sourceMappingURL=transport.js.map

package/node_modules/@nvidia/openshell-sdk/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,sCAAsC;AAYtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAiCvC,gFAAgF;AAChF,2CAA2C;AAC3C,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC;aAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,oBAAoB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,wEAAwE;AACxE,SAAS,cAAc,CAAC,IAAoB;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IAC5C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,gDAAgD,OAAO,aAAa,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,SAAS,sBAAsB,CAAC,IAAoB;IAClD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAChF,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAC/B,CAAC,MAAM,CAAC;IACT,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,oEAAoE,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,6EAA6E;AAC7E,2DAA2D;AAC3D,SAAS,eAAe,CAAC,IAAoB;IAC3C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,+EAA+E;IAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,iFAAiF;AACjF,iFAAiF;AACjF,0EAA0E;AAC1E,SAAS,4BAA4B,CAAC,IAAoB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;IACtH,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IACvF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,8DAA8D;IACxE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,+EAA+E,IAAI,0CAA0C,CAC9H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,cAAc,CAAC,IAAI,CAAC,CAAC;IACrB,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,eAAe,CAAC,IAAI,CAAC,CAAC;IACtB,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAClD,OAAO,mBAAmB,CAAC;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,qEAAqE;QACrE,mEAAmE;QACnE,WAAW,EAAE,KAAK;YAChB,CAAC,CAAC;gBACE,EAAE,EAAE,IAAI,CAAC,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,UAAU;gBACrB,GAAG,EAAE,IAAI,CAAC,SAAS;gBACnB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aAChE;YACH,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nvidia/openshell-sdk/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@nvidia/openshell-sdk",
+  "version": "0.0.0",
+  "description": "Official TypeScript SDK for the OpenShell gateway.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "homepage": "https://github.com/NVIDIA/OpenShell",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/NVIDIA/OpenShell.git",
+    "directory": "sdk/typescript"
+  },
+  "publishConfig": {
+    "registry": "https://npm.pkg.github.com"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./raw": {
+      "types": "./dist/raw.d.ts",
+      "import": "./dist/raw.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20.3"
+  },
+  "scripts": {
+    "gen": "buf generate",
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "format": "biome check --write .",
+    "lint": "biome ci .",
+    "test": "vitest run --coverage",
+    "prepublishOnly": "npm run gen && npm run build"
+  },
+  "dependencies": {
+    "@bufbuild/protobuf": "^2.2.3",
+    "@connectrpc/connect": "^2.0.0",
+    "@connectrpc/connect-node": "^2.0.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.5.4",
+    "@bufbuild/buf": "^1.71.0",
+    "@bufbuild/protoc-gen-es": "^2.2.3",
+    "@types/node": "^24",
+    "@vitest/coverage-v8": "^4.1.10",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.10"
+  }
+}

package/package.json

@@ -1,9 +1,98 @@
 {
   "name": "openrod",
-  "version": "0.0.0",
-  "description": "Placeholder for OpenRod, a web console for NVIDIA OpenShell sandboxes. The first release is coming soon.",
+  "version": "0.1.0",
+  "description": "A local console for OpenShell gateways, sandboxes, and activity.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/OpenRod/OpenRod#readme",
-  "repository": { "type": "git", "url": "git+https://github.com/OpenRod/OpenRod.git" },
-  "files": ["README.md"]
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/OpenRod/OpenRod.git",
+    "directory": "ui"
+  },
+  "bugs": {
+    "url": "https://github.com/OpenRod/OpenRod/issues"
+  },
+  "keywords": [
+    "openshell",
+    "sandbox",
+    "ai-agents",
+    "mcp",
+    "console"
+  ],
+  "type": "module",
+  "bin": {
+    "openrod": "./server/cli.js"
+  },
+  "files": [
+    "dist/",
+    "server/*.js",
+    "server/*.cjs",
+    "server/*.py",
+    "shared/*.js",
+    "shared/*.json",
+    "src/lib/*.js",
+    "vendor/",
+    "LICENSE",
+    "NOTICE",
+    "THIRD_PARTY_NOTICES.md",
+    "SETUPS.md",
+    "!**/*.test.js"
+  ],
+  "scripts": {
+    "dev": "vite",
+    "build": "OPENROD_BUILD=1 vite build",
+    "start": "node --env-file-if-exists=.env server/start.js",
+    "start:local": "node ./server/cli.js",
+    "preview": "node ./server/cli.js",
+    "test": "node --test server/*.test.js src/lib/*.test.js",
+    "notices": "node scripts/third-party-notices.js",
+    "prepack": "npm run build"
+  },
+  "dependencies": {
+    "@fontsource-variable/pixelify-sans": "^5.3.0",
+    "@modelcontextprotocol/sdk": "1.30.1",
+    "@nvidia/openshell-sdk": "file:vendor/nvidia-openshell-sdk-0.0.0.tgz",
+    "connect": "^3.7.0",
+    "fflate": "^0.8.3",
+    "firebase-admin": "^14.5.0",
+    "serve-static": "^2.2.1",
+    "smol-toml": "^1.9.0",
+    "ws": "^8.22.0"
+  },
+  "bundleDependencies": [
+    "@nvidia/openshell-sdk"
+  ],
+  "devDependencies": {
+    "@base-ui/react": "^1.8.0",
+    "@bufbuild/protobuf": "2.15.0",
+    "@fontsource-variable/geist": "^5.3.0",
+    "@fontsource-variable/geist-mono": "^5.3.0",
+    "@fontsource/instrument-serif": "^5.3.0",
+    "@tailwindcss/vite": "^4.3.3",
+    "@vitejs/plugin-react": "^4.3.4",
+    "@xterm/addon-fit": "^0.11.0",
+    "@xterm/xterm": "^6.0.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "cn": "^0.2.5",
+    "firebase": "^12.19.0",
+    "lucide-react": "^0.577.0",
+    "motion": "^13.2.0",
+    "next-themes": "^0.4.6",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "shadcn": "^4.19.0",
+    "sonner": "^2.0.8",
+    "tailwind-merge": "^3.6.0",
+    "tailwindcss": "^4.3.3",
+    "tw-animate-css": "^1.4.0",
+    "vite": "^6.0.5"
+  },
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "overrides": {
+    "@grpc/grpc-js": "^1.14.5",
+    "uuid": "^11.1.1"
+  }
 }

package/server/activity-delivery.js

@@ -0,0 +1,143 @@
+import fs from 'node:fs'
+import path from 'node:path'
+import https from 'node:https'
+import { lookup } from 'node:dns/promises'
+import { BlockList, isIP } from 'node:net'
+import { randomUUID } from 'node:crypto'
+import { DatabaseSync } from 'node:sqlite'
+import { toOCSF } from '../src/lib/activity-export.js'
+
+const fail = (message, status = 400) => Object.assign(new Error(message), { status })
+const excluded = new BlockList()
+for (const [address, prefix] of [['0.0.0.0', 8], ['10.0.0.0', 8], ['100.64.0.0', 10], ['127.0.0.0', 8], ['169.254.0.0', 16], ['172.16.0.0', 12], ['192.0.0.0', 24], ['192.0.2.0', 24], ['192.168.0.0', 16], ['198.18.0.0', 15], ['198.51.100.0', 24], ['203.0.113.0', 24], ['224.0.0.0', 3]]) excluded.addSubnet(address, prefix, 'ipv4')
+const globalV6 = new BlockList(); globalV6.addSubnet('2000::', 3, 'ipv6')
+for (const [address, prefix] of [['2001::', 23], ['2001:db8::', 32], ['2002::', 16]]) excluded.addSubnet(address, prefix, 'ipv6')
+export function publicAddress(address) {
+  const family = isIP(address)
+  return family === 4 ? !excluded.check(address, 'ipv4') : family === 6 && globalV6.check(address, 'ipv6') && !excluded.check(address, 'ipv6')
+}
+export function destinationURL(value) {
+  let url
+  try { url = new URL(value) } catch { throw fail('Enter a valid HTTPS endpoint') }
+  if (url.protocol !== 'https:' || url.username || url.password || url.hash || url.search || value.length > 2048) throw fail('Use HTTPS without embedded credentials, query parameters, or fragments')
+  const host = url.hostname.replace(/^\[|\]$/g, '')
+  if (host === 'localhost' || host.endsWith('.localhost') || host.endsWith('.local') || (isIP(host) && !publicAddress(host))) throw fail('Use a public HTTPS endpoint; private and local destinations are not supported')
+  return url
+}
+// Resolve and pin the checked address for each attempt. No redirects, no proxy,
+// default TLS certificate verification, and no remote response bodies in errors.
+export async function postEvent(destination, event, signal) {
+  const url = destinationURL(destination.url)
+  const host = url.hostname.replace(/^\[|\]$/g, '')
+  let addresses
+  try { addresses = isIP(host) ? [{ address: host, family: isIP(host) }] : await lookup(host, { all: true }) } catch { throw fail('Endpoint DNS lookup failed', 502) }
+  if (signal?.aborted) throw fail('Delivery stopped', 503)
+  if (!addresses.length || addresses.some((entry) => !publicAddress(entry.address))) throw fail('Endpoint must resolve only to public addresses', 400)
+  const payload = JSON.stringify(destination.format === 'ocsf' ? toOCSF(event) : event)
+  if (Buffer.byteLength(payload) > 1024 * 1024) throw fail('Event exceeds the 1 MB delivery limit', 413)
+  const headers = { 'content-type': 'application/json', 'content-length': Buffer.byteLength(payload), 'idempotency-key': event.id, 'user-agent': 'OpenShell-Activity/1.0' }
+  if (destination.auth === 'bearer') headers.authorization = `Bearer ${destination.token}`
+  if (destination.auth === 'api-key') headers['x-api-key'] = destination.token
+  return new Promise((resolve, reject) => {
+    const chosen = addresses[0]
+    const req = https.request(url, { method: 'POST', headers, signal, agent: false,
+      lookup: (_hostname, options, callback) => options.all ? callback(null, [chosen]) : callback(null, chosen.address, chosen.family),
+    }, (res) => {
+      const status = res.statusCode
+      res.destroy()
+      if (status >= 200 && status < 300) resolve({ status })
+      else reject(fail(`Endpoint returned HTTP ${status}`, 502))
+    })
+    const timer = setTimeout(() => req.destroy(new Error('timeout')), 10000)
+    req.on('close', () => clearTimeout(timer))
+    req.on('error', () => reject(fail('HTTPS delivery failed or timed out', 502)))
+    req.end(payload)
+  })
+}
+
+export function createActivityDelivery(filename, store, { send = postEvent, now = Date.now } = {}) {
+  if (filename !== ':memory:') fs.mkdirSync(path.dirname(filename), { recursive: true, mode: 0o700 })
+  const db = new DatabaseSync(filename)
+  if (filename !== ':memory:') fs.chmodSync(filename, 0o600)
+  db.exec('PRAGMA busy_timeout=3000; CREATE TABLE IF NOT EXISTS destinations (id TEXT PRIMARY KEY, data TEXT NOT NULL)')
+  const active = new Map()
+  let timer, stopped = false
+  const all = () => db.prepare('SELECT data FROM destinations').all().map((r) => JSON.parse(r.data))
+  const get = (id) => { const row = db.prepare('SELECT data FROM destinations WHERE id=?').get(id); if (!row) throw fail('Destination not found', 404); return JSON.parse(row.data) }
+  const save = (d) => db.prepare('INSERT INTO destinations VALUES (?, ?) ON CONFLICT(id) DO UPDATE SET data=excluded.data').run(d.id, JSON.stringify(d))
+  const publicView = ({ token, ...d }) => ({ ...d, hasToken: Boolean(token), backlog: store.countAfter(d.cursor) })
+  function create(input) {
+    if (!input || typeof input !== 'object') throw fail('Invalid destination')
+    if (all().length >= 20) throw fail('Maximum 20 destinations')
+    if (typeof input.name !== 'string' || !input.name.trim() || input.name.length > 80) throw fail('Enter a destination name (up to 80 characters)')
+    if (typeof input.url !== 'string') throw fail('Enter an HTTPS endpoint')
+    const url = destinationURL(input.url).toString()
+    if (!['json', 'ocsf'].includes(input.format) || !['none', 'bearer', 'api-key'].includes(input.auth)) throw fail('Invalid format or authentication')
+    if (input.auth !== 'none' && (typeof input.token !== 'string' || !input.token || input.token.length > 4096 || /[^\x20-\x7e]/.test(input.token))) throw fail('Enter a valid authentication token')
+    const filters = input.filters || {}
+    for (const key of ['sandboxes', 'categories', 'verdicts']) if (filters[key] !== undefined && (!Array.isArray(filters[key]) || filters[key].length > 100 || filters[key].some((v) => typeof v !== 'string' || !v || v.length > 128))) throw fail('Invalid event filters')
+    const d = { id: randomUUID(), name: input.name.trim(), url, format: input.format, auth: input.auth, token: input.auth === 'none' ? '' : input.token,
+      filters: { sandboxes: filters.sandboxes || [], categories: filters.categories || [], verdicts: filters.verdicts || [] },
+      enabled: false, cursor: store.head(), createdAt: new Date(now()).toISOString(), attempts: 0, delivered: 0, skipped: 0, nextAttempt: 0, error: null, lastDeliveredAt: null, lastTest: null }
+    save(d); return publicView(d)
+  }
+  async function run(d, test = false) {
+    if (active.has(d.id)) throw fail('A delivery is already in progress', 409)
+    const controller = new AbortController(); active.set(d.id, controller)
+    try {
+      if (test) {
+        const at = new Date(now()).toISOString()
+        const event = { id: randomUUID(), at, receivedAt: at, sandbox: 'synthetic-test', category: 'EVENT', action: 'DESTINATION_TEST', severity: 'INFO', message: 'Synthetic OpenShell destination test. No sandbox activity included.' }
+        try {
+          const result = await send(d, event, controller.signal)
+          if (!stopped && !controller.signal.aborted) { const latest = get(d.id); latest.lastTest = { at, ok: true, status: result.status }; save(latest) }
+          return { ok: true, status: result.status }
+        } catch (error) {
+          if (!stopped && !controller.signal.aborted) { const latest = get(d.id); latest.lastTest = { at, ok: false, error: error.message }; save(latest) }
+          throw error
+        }
+      }
+      for (const { seq, event } of store.after(d.cursor, 50)) {
+        if (stopped || controller.signal.aborted) break
+        if (!store.has(event.id)) continue
+        const matches = [['sandboxes', event.sandbox], ['categories', event.category], ['verdicts', event.verdict]].every(([key, value]) => !d.filters[key].length || d.filters[key].includes(value))
+        if (!matches) { d.cursor = seq; d.skipped++; save(d); continue }
+        try {
+          const result = await send(d, event, controller.signal)
+          if (stopped || controller.signal.aborted) break
+          d.cursor = seq; d.delivered++; d.attempts = 0; d.error = null; d.failedEventId = null; d.nextAttempt = 0; d.lastStatus = result.status; d.lastDeliveredAt = new Date(now()).toISOString(); save(d)
+        } catch (error) {
+          if (stopped || controller.signal.aborted) break
+          d.attempts++; d.failedEventId = event.id; d.error = error.message; d.nextAttempt = now() + Math.min(300000, 1000 * 2 ** d.attempts)
+          if (d.attempts >= 8) d.enabled = false
+          save(d); break
+        }
+      }
+    } finally { active.delete(d.id) }
+  }
+  async function tick() {
+    if (stopped) return
+    await Promise.all(all().filter((d) => d.enabled && d.nextAttempt <= now() && !active.has(d.id)).map((d) => run(d).catch(() => {})))
+  }
+  function change(id, action) {
+    const d = get(id)
+    active.get(id)?.abort()
+    if (action === 'remove') { db.prepare('DELETE FROM destinations WHERE id=?').run(id); return { ok: true } }
+    if (!['pause', 'resume', 'retry'].includes(action)) throw fail('Unknown destination action')
+    d.enabled = action !== 'pause'
+    if (d.enabled) { d.attempts = 0; d.nextAttempt = 0 }
+    save(d); return publicView(d)
+  }
+  return {
+    list: () => all().map(publicView), create, change, tick,
+    logsDeleted() {
+      for (const controller of active.values()) controller.abort()
+      for (const d of all()) if (d.failedEventId && !store.has(d.failedEventId)) {
+        d.failedEventId = null; d.error = null; d.attempts = 0; d.nextAttempt = 0; save(d)
+      }
+    },
+    test: (id) => run(get(id), true),
+    start() { timer = setInterval(() => { void tick() }, 2000); timer.unref(); void tick() },
+    stop() { stopped = true; clearInterval(timer); for (const controller of active.values()) controller.abort(); db.close() },
+  }
+}