veryfront 0.1.1239 → 0.1.1241

package/esm/src/schemas/json-value.js

@@ -12,6 +12,22 @@ const JSON_VALUE_MAX_SERIALIZED_BYTES = 4 * 1024 * 1024;
 const JSON_VALUE_MAX_STRING_BYTES = 1024 * 1024;
 const JSON_VALUE_MAX_KEY_BYTES = 16 * 1024;
 const JSON_UTF8_ENCODER = new TextEncoder();
+const NativeSet = Set;
+const OBJECT_PROTOTYPE = Object.prototype;
+const arrayIsArray = Array.isArray;
+const jsonStringify = JSON.stringify;
+const numberIsFinite = Number.isFinite;
+const numberIsSafeInteger = Number.isSafeInteger;
+const objectDefineProperty = Object.defineProperty;
+const reflectApply = Reflect.apply;
+const reflectGetOwnPropertyDescriptor = Reflect.getOwnPropertyDescriptor;
+const reflectGetPrototypeOf = Reflect.getPrototypeOf;
+const reflectOwnKeys = Reflect.ownKeys;
+const setAdd = Set.prototype.add;
+const setDelete = Set.prototype.delete;
+const setHas = Set.prototype.has;
+const textEncoderEncode = TextEncoder.prototype.encode;
+const typedArrayByteLengthGetter = reflectGetOwnPropertyDescriptor(reflectGetPrototypeOf(Uint8Array.prototype), "byteLength").get;
 function appendSnapshotPath(parent, segment) {
     return { parent, segment };
 }
@@ -19,22 +35,32 @@ function invalidSnapshotPath(path) {
     return { path };
 }
 function invalidJsonSnapshot(path) {
+    let segmentCount = 0;
+    for (let current = path; current !== undefined; current = current.parent) {
+        segmentCount += 1;
+    }
     const segments = [];
+    segments.length = segmentCount;
+    let index = segmentCount - 1;
     for (let current = path; current !== undefined; current = current.parent) {
-        segments.push(current.segment);
+        defineOwnDataProperty(segments, index, current.segment);
+        index -= 1;
     }
-    segments.reverse();
     return { success: false, path: segments };
 }
 function utf8LengthWithin(value, limit) {
     if (value.length > limit)
         return undefined;
-    const byteLength = JSON_UTF8_ENCODER.encode(value).byteLength;
+    const byteLength = encodedByteLength(value);
     return byteLength <= limit ? byteLength : undefined;
 }
 function serializedByteLength(value) {
-    const serialized = JSON.stringify(value);
-    return serialized === undefined ? undefined : JSON_UTF8_ENCODER.encode(serialized).byteLength;
+    const serialized = jsonStringify(value);
+    return serialized === undefined ? undefined : encodedByteLength(serialized);
+}
+function encodedByteLength(value) {
+    const encoded = reflectApply(textEncoderEncode, JSON_UTF8_ENCODER, [value]);
+    return reflectApply(typedArrayByteLengthGetter, encoded, []);
 }
 /**
  * Creates a bounded, data-only snapshot of an unknown JSON value.
@@ -51,7 +77,7 @@ function serializedByteLength(value) {
 export function snapshotBoundedJsonValue(value) {
     let activePath;
     try {
-        const activeAncestors = new Set();
+        const activeAncestors = new NativeSet();
         const stack = [{
                 kind: "visit",
                 value,
@@ -72,18 +98,19 @@ export function snapshotBoundedJsonValue(value) {
                 rootAssigned = true;
                 return;
             }
-            if (Array.isArray(frame.parent)) {
-                frame.parent[frame.key] = canonical;
+            if (arrayIsArray(frame.parent)) {
+                defineOwnDataProperty(frame.parent, frame.key, canonical);
                 return;
             }
             defineOwnDataProperty(frame.parent, frame.key, canonical);
         };
         while (stack.length > 0) {
-            const frame = stack.pop();
+            const frame = stack.length === 0 ? undefined : stack[stack.length - 1];
             if (!frame)
                 break;
+            stack.length -= 1;
             if (frame.kind === "exit") {
-                activeAncestors.delete(frame.value);
+                reflectApply(setDelete, activeAncestors, [frame.value]);
                 continue;
             }
             activePath = frame.path;
@@ -111,7 +138,7 @@ export function snapshotBoundedJsonValue(value) {
                 continue;
             }
             if (typeof current === "number") {
-                if (!Number.isFinite(current))
+                if (!numberIsFinite(current))
                     return invalidJsonSnapshot(frame.path);
                 const bytes = serializedByteLength(current);
                 if (bytes === undefined || !addSerializedBytes(bytes)) {
@@ -120,10 +147,11 @@ export function snapshotBoundedJsonValue(value) {
                 assign(frame, current);
                 continue;
             }
-            if (typeof current !== "object" || activeAncestors.has(current)) {
+            if (typeof current !== "object" ||
+                reflectApply(setHas, activeAncestors, [current])) {
                 return invalidJsonSnapshot(frame.path);
             }
-            if (Array.isArray(current)) {
+            if (arrayIsArray(current)) {
                 const invalidPath = snapshotArray(current, frame, stack, activeAncestors, addSerializedBytes, assign);
                 if (invalidPath !== null)
                     return invalidJsonSnapshot(invalidPath.path);
@@ -144,35 +172,36 @@ export function snapshotBoundedJsonValue(value) {
     }
 }
 function snapshotArray(value, frame, stack, activeAncestors, addSerializedBytes, assign) {
-    const ownKeys = Reflect.ownKeys(value);
-    const lengthDescriptor = Reflect.getOwnPropertyDescriptor(value, "length");
+    const ownKeys = reflectOwnKeys(value);
+    const lengthDescriptor = reflectGetOwnPropertyDescriptor(value, "length");
     const length = lengthDescriptor && "value" in lengthDescriptor
         ? lengthDescriptor.value
         : undefined;
     if (typeof length !== "number" ||
-        !Number.isSafeInteger(length) ||
+        !numberIsSafeInteger(length) ||
         length < 0 ||
         length > JSON_VALUE_MAX_NODES ||
-        ownKeys.some((key) => typeof key === "symbol") ||
+        hasSymbolKey(ownKeys) ||
         ownKeys.length !== length + 1 ||
-        !ownKeys.includes("length") ||
-        !addSerializedBytes(2 + Math.max(0, length - 1))) {
+        !hasStringKey(ownKeys, "length") ||
+        !addSerializedBytes(2 + (length > 0 ? length - 1 : 0))) {
         return invalidSnapshotPath(frame.path);
     }
     const values = [];
     for (let index = 0; index < length; index++) {
-        const descriptor = Reflect.getOwnPropertyDescriptor(value, String(index));
+        const descriptor = reflectGetOwnPropertyDescriptor(value, `${index}`);
         if (!descriptor || !("value" in descriptor) || descriptor.enumerable !== true) {
             return invalidSnapshotPath(appendSnapshotPath(frame.path, index));
         }
-        values.push(descriptor.value);
+        defineOwnDataProperty(values, values.length, descriptor.value);
     }
-    const canonical = new Array(length);
+    const canonical = [];
+    canonical.length = length;
     assign(frame, canonical);
-    activeAncestors.add(value);
-    stack.push({ kind: "exit", value });
+    reflectApply(setAdd, activeAncestors, [value]);
+    defineOwnDataProperty(stack, stack.length, { kind: "exit", value });
     for (let index = values.length - 1; index >= 0; index--) {
-        stack.push({
+        defineOwnDataProperty(stack, stack.length, {
             kind: "visit",
             value: values[index],
             depth: frame.depth + 1,
@@ -184,18 +213,19 @@ function snapshotArray(value, frame, stack, activeAncestors, addSerializedBytes,
     return null;
 }
 function snapshotObject(value, frame, stack, activeAncestors, addSerializedBytes, assign) {
-    const prototype = Reflect.getPrototypeOf(value);
-    if (prototype !== Object.prototype && prototype !== null) {
+    const prototype = reflectGetPrototypeOf(value);
+    if (prototype !== OBJECT_PROTOTYPE && prototype !== null) {
         return invalidSnapshotPath(frame.path);
     }
-    const ownKeys = Reflect.ownKeys(value);
+    const ownKeys = reflectOwnKeys(value);
     if (ownKeys.length > JSON_VALUE_MAX_NODES ||
-        ownKeys.some((key) => typeof key === "symbol") ||
-        !addSerializedBytes(2 + Math.max(0, ownKeys.length - 1))) {
+        hasSymbolKey(ownKeys) ||
+        !addSerializedBytes(2 + (ownKeys.length > 0 ? ownKeys.length - 1 : 0))) {
         return invalidSnapshotPath(frame.path);
     }
     const values = [];
-    for (const key of ownKeys) {
+    for (let index = 0; index < ownKeys.length; index++) {
+        const key = ownKeys[index];
         const childPath = appendSnapshotPath(frame.path, key);
         if (utf8LengthWithin(key, JSON_VALUE_MAX_KEY_BYTES) === undefined) {
             return invalidSnapshotPath(childPath);
@@ -204,18 +234,18 @@ function snapshotObject(value, frame, stack, activeAncestors, addSerializedBytes
         if (keyBytes === undefined || !addSerializedBytes(keyBytes + 1)) {
             return invalidSnapshotPath(childPath);
         }
-        const descriptor = Reflect.getOwnPropertyDescriptor(value, key);
+        const descriptor = reflectGetOwnPropertyDescriptor(value, key);
         if (!descriptor || !("value" in descriptor) || descriptor.enumerable !== true) {
             return invalidSnapshotPath(childPath);
         }
-        values.push(descriptor.value);
+        defineOwnDataProperty(values, values.length, descriptor.value);
     }
     const canonical = {};
     assign(frame, canonical);
-    activeAncestors.add(value);
-    stack.push({ kind: "exit", value });
+    reflectApply(setAdd, activeAncestors, [value]);
+    defineOwnDataProperty(stack, stack.length, { kind: "exit", value });
     for (let index = values.length - 1; index >= 0; index--) {
-        stack.push({
+        defineOwnDataProperty(stack, stack.length, {
             kind: "visit",
             value: values[index],
             depth: frame.depth + 1,
@@ -226,8 +256,22 @@ function snapshotObject(value, frame, stack, activeAncestors, addSerializedBytes
     }
     return null;
 }
+function hasSymbolKey(keys) {
+    for (let index = 0; index < keys.length; index++) {
+        if (typeof keys[index] === "symbol")
+            return true;
+    }
+    return false;
+}
+function hasStringKey(keys, expected) {
+    for (let index = 0; index < keys.length; index++) {
+        if (keys[index] === expected)
+            return true;
+    }
+    return false;
+}
 function defineOwnDataProperty(target, key, value) {
-    Object.defineProperty(target, key, {
+    objectDefineProperty(target, key, {
         value,
         enumerable: true,
         configurable: true,

package/esm/src/security/http/base-handler.js

@@ -1,6 +1,6 @@
 import { runWithCacheBatching } from "../../cache/request-cache-batcher.js";
 import { runWithVerifiedCacheApiCredential } from "../../cache/verified-api-credential-context.js";
-import { getHostEnv } from "../../platform/compat/process.js";
+import { getHostEnv } from "../../platform/compat/process/env.js";
 import { getErrorMessage as formatErrorMessage } from "../../errors/veryfront-error.js";
 import { AUTHENTICATION_REQUIRED } from "../../errors/index.js";
 import { serverLogger } from "../../utils/index.js";

package/esm/src/security/sandbox/project-worker.d.ts

@@ -28,6 +28,7 @@ export declare class ProjectWorker {
     private suppressIdleNotifications;
     private requestTimeoutMs;
     private readonly permissions;
+    private readonly assertReadScopeGenerationConfined;
     private workerScriptUrl?;
     private readonly isolatedSsrRendererModuleUrl?;
     private egressResolveHost?;

package/esm/src/security/sandbox/project-worker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-worker.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/project-worker.ts"],"names":[],"mappings":"AAsBA,OAAO,EACL,KAAK,iBAAiB,EAGvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAEV,aAAa,EACb,cAAc,EAQf,MAAM,mBAAmB,CAAC;AAmP3B,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAuJD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAoBtE,qBAAa,aAAa;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,yBAAyB,CAAS;IAC1C,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAS;IACvD,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,YAAY,CAAmC;IACvD,OAAO,CAAC,eAAe,CAA8B;IACrD,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,OAAO,CAAwB;gBAE3B,OAAO,EAAE,oBAAoB;IAezC,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAED,8EAA8E;IAC9E,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAUxC;;OAEG;IACH,KAAK,IAAI,IAAI;IAuGb;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAoExD;;;;;;OAMG;IACH,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAAC,UAAU,CAAC;IAuMjE;;OAEG;IACG,SAAS,CAAC,SAAS,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAuCpD;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAQxB;;OAEG;IACH,SAAS,IAAI,IAAI;IAKjB;;;;;;OAMG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAQzB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IA2DrB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,aAAa;IAoErB,OAAO,CAAC,oBAAoB;IA8I5B,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,gBAAgB;CAazB"}
+{"version":3,"file":"project-worker.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/project-worker.ts"],"names":[],"mappings":"AAsBA,OAAO,EACL,KAAK,iBAAiB,EAGvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGjE,OAAO,KAAK,EAEV,aAAa,EACb,cAAc,EAQf,MAAM,mBAAmB,CAAC;AAmP3B,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,gFAAgF;IAChF,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAuJD;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,CAAC;AAoBtE,qBAAa,aAAa;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,aAAa,CAAyB;IAC9C,OAAO,CAAC,yBAAyB,CAAS;IAC1C,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8B;IAC1D,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAa;IAC/D,OAAO,CAAC,eAAe,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAS;IACvD,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,YAAY,CAAmC;IACvD,OAAO,CAAC,eAAe,CAA8B;IACrD,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,OAAO,CAAwB;gBAE3B,OAAO,EAAE,oBAAoB;IAkBzC,IAAI,MAAM,IAAI,YAAY,CAEzB;IAED,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAED,8EAA8E;IAC9E,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAUxC;;OAEG;IACH,KAAK,IAAI,IAAI;IAyGb;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;IAqExD;;;;;;OAMG;IACH,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAAC,UAAU,CAAC;IAwMjE;;OAEG;IACG,SAAS,CAAC,SAAS,SAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAuCpD;;OAEG;IACH,gBAAgB,IAAI,IAAI;IAQxB;;OAEG;IACH,SAAS,IAAI,IAAI;IAKjB;;;;;;OAMG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAQzB,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IA2DrB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,kBAAkB;IAM1B,OAAO,CAAC,aAAa;IAoErB,OAAO,CAAC,oBAAoB;IA8I5B,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,gBAAgB;CAazB"}

package/esm/src/security/sandbox/project-worker.js

@@ -14,6 +14,7 @@ import { validateIsolatedSsrRendererModuleUrl } from "../../extensions/rendering
 import { INVALID_ARGUMENT, SSR_OUTPUT_LIMIT_EXCEEDED, TIMEOUT_ERROR, UNKNOWN_ERROR, } from "../../errors/index.js";
 import { MAX_TIMER_DELAY_MS } from "../../utils/timer.js";
 import { startWorkerEgressBroker, } from "./worker-egress-guard.js";
+import { createWorkerReadScopeGenerationAudit } from "./worker-read-scope.js";
 import { deserializeWorkerError } from "./worker-error-boundary.js";
 import { MAX_WORKER_REQUEST_ID_CHARS, MAX_WORKER_SSR_CHUNK_BYTES, MAX_WORKER_SSR_OUTPUT_BYTES, MAX_WORKER_SSR_OUTPUT_CHUNKS, } from "./worker-types.js";
 const logger = serverLogger.component("project-worker");
@@ -319,6 +320,7 @@ export class ProjectWorker {
     suppressIdleNotifications = false;
     requestTimeoutMs;
     permissions;
+    assertReadScopeGenerationConfined;
     workerScriptUrl;
     isolatedSsrRendererModuleUrl;
     egressResolveHost;
@@ -331,6 +333,7 @@ export class ProjectWorker {
     constructor(options) {
         this.projectId = options.projectId;
         this.permissions = snapshotWorkerPermissions(options.permissions);
+        this.assertReadScopeGenerationConfined = createWorkerReadScopeGenerationAudit(this.permissions.read);
         this.requestTimeoutMs = requireRequestTimeoutMs(options.requestTimeoutMs);
         this.workerScriptUrl = options.workerScriptUrl;
         this.isolatedSsrRendererModuleUrl = options.isolatedSsrRendererModuleUrl === undefined
@@ -381,6 +384,7 @@ export class ProjectWorker {
                 message: "Custom project worker scripts cannot use unrestricted network permissions",
             });
         }
+        this.assertReadScopeGenerationConfined();
         const allowInternalEgress = this.allowInternalEgress;
         let workerPermissions = this.permissions;
         if (this.permissions.net === true) {
@@ -482,6 +486,7 @@ export class ProjectWorker {
             if (!this.worker || this._status === "crashed" || this._status === "terminated") {
                 return Promise.reject(UNKNOWN_ERROR.create({ detail: `Worker not available (status: ${this._status})` }));
             }
+            this.assertReadScopeGenerationConfined();
             if (this.pending.has(requestId)) {
                 return Promise.reject(UNKNOWN_ERROR.create({ detail: "Duplicate worker request id" }));
             }
@@ -546,6 +551,7 @@ export class ProjectWorker {
         if (!this.worker || this._status === "crashed" || this._status === "terminated") {
             throw UNKNOWN_ERROR.create({ detail: `Worker not available (status: ${this._status})` });
         }
+        this.assertReadScopeGenerationConfined();
         if (this.pending.has(requestId) || this.streamHandlers.has(requestId)) {
             throw UNKNOWN_ERROR.create({ detail: "Duplicate worker request id" });
         }

package/esm/src/security/sandbox/worker-read-scope.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Reject scoped worker roots that contain a symlink escape.
+ *
+ * Deno authorizes reads using the symlink location rather than its resolved
+ * target. Project workers cannot create new symlinks because write access is
+ * denied. Use {@link createWorkerReadScopeGenerationAudit} for pooled workers
+ * so this full-tree scan runs once per immutable source generation.
+ */
+export declare function assertWorkerReadScopeConfined(readScope: readonly string[] | boolean): void;
+/**
+ * Create a successful-once read-scope audit for one immutable worker source
+ * generation.
+ *
+ * Host source changes must rotate the worker generation identity or evict its
+ * pool scope. The replacement worker receives a new audit and scans the new
+ * tree before startup. Reusing this closure across mutable source generations
+ * would violate that host-owned lifecycle contract.
+ */
+export declare function createWorkerReadScopeGenerationAudit(readScope: readonly string[] | boolean): () => void;
+//# sourceMappingURL=worker-read-scope.d.ts.map

package/esm/src/security/sandbox/worker-read-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-read-scope.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/worker-read-scope.ts"],"names":[],"mappings":"AAsDA;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,GACrC,IAAI,CAoDN;AAED;;;;;;;;GAQG;AACH,wBAAgB,oCAAoC,CAClD,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,GACrC,MAAM,IAAI,CAQZ"}

package/esm/src/security/sandbox/worker-read-scope.js

@@ -0,0 +1,127 @@
+import * as dntShim from "../../../_dnt.shims.js";
+import { dirname, join, relative } from "../../platform/compat/path/index.js";
+import { SECURITY_VIOLATION } from "../../errors/index.js";
+import { isNotFoundError } from "../../platform/compat/fs.js";
+import { isWithinDirectory } from "../path-validation.js";
+function rejectUnconfinedReadScope() {
+    throw SECURITY_VIOLATION.create({
+        detail: "Worker read scope contains a symlink outside its allowed roots",
+    });
+}
+function directorySymlinkCanEscape(linkPath, targetPath, physicalRoots) {
+    for (const sourceRoot of physicalRoots) {
+        if (!isWithinDirectory(sourceRoot, linkPath))
+            continue;
+        const sourceRelativePath = relative(sourceRoot, linkPath);
+        const parentSteps = sourceRelativePath === "."
+            ? 0
+            : sourceRelativePath.split("/").filter(Boolean).length;
+        let targetAncestor = targetPath;
+        for (let index = 0; index < parentSteps; index += 1) {
+            targetAncestor = dirname(targetAncestor);
+        }
+        if (!physicalRoots.some((root) => isWithinDirectory(root, targetAncestor))) {
+            return true;
+        }
+    }
+    return false;
+}
+function assertSymlinkConfined(linkPath, physicalRoots) {
+    let target;
+    let targetMetadata;
+    try {
+        target = dntShim.Deno.realPathSync(linkPath);
+        targetMetadata = dntShim.Deno.statSync(target);
+    }
+    catch {
+        rejectUnconfinedReadScope();
+    }
+    if (!physicalRoots.some((root) => isWithinDirectory(root, target)) ||
+        (targetMetadata.isDirectory && directorySymlinkCanEscape(linkPath, target, physicalRoots))) {
+        rejectUnconfinedReadScope();
+    }
+}
+/**
+ * Reject scoped worker roots that contain a symlink escape.
+ *
+ * Deno authorizes reads using the symlink location rather than its resolved
+ * target. Project workers cannot create new symlinks because write access is
+ * denied. Use {@link createWorkerReadScopeGenerationAudit} for pooled workers
+ * so this full-tree scan runs once per immutable source generation.
+ */
+export function assertWorkerReadScopeConfined(readScope) {
+    if (!Array.isArray(readScope) || readScope.length === 0)
+        return;
+    const physicalRoots = [];
+    for (const root of readScope) {
+        try {
+            if (dntShim.Deno.lstatSync(root).isSymlink) {
+                rejectUnconfinedReadScope();
+            }
+            physicalRoots.push(dntShim.Deno.realPathSync(root));
+        }
+        catch (error) {
+            // A missing optional support path grants nothing at startup. Project
+            // workers cannot create it because their write permission is denied.
+            if (isNotFoundError(error))
+                continue;
+            rejectUnconfinedReadScope();
+        }
+    }
+    const pending = [...new Set(physicalRoots)];
+    const visitedDirectories = new Set();
+    while (pending.length > 0) {
+        const current = pending.pop();
+        if (!current)
+            continue;
+        let metadata;
+        try {
+            metadata = dntShim.Deno.lstatSync(current);
+        }
+        catch {
+            rejectUnconfinedReadScope();
+        }
+        if (metadata.isSymlink) {
+            assertSymlinkConfined(current, physicalRoots);
+            continue;
+        }
+        if (!metadata.isDirectory)
+            continue;
+        if (visitedDirectories.has(current))
+            continue;
+        visitedDirectories.add(current);
+        try {
+            for (const entry of dntShim.Deno.readDirSync(current)) {
+                const entryPath = join(current, entry.name);
+                if (entry.isSymlink) {
+                    assertSymlinkConfined(entryPath, physicalRoots);
+                }
+                else if (entry.isDirectory) {
+                    pending.push(entryPath);
+                }
+            }
+        }
+        catch {
+            rejectUnconfinedReadScope();
+        }
+    }
+}
+/**
+ * Create a successful-once read-scope audit for one immutable worker source
+ * generation.
+ *
+ * Host source changes must rotate the worker generation identity or evict its
+ * pool scope. The replacement worker receives a new audit and scans the new
+ * tree before startup. Reusing this closure across mutable source generations
+ * would violate that host-owned lifecycle contract.
+ */
+export function createWorkerReadScopeGenerationAudit(readScope) {
+    const generationReadScope = Array.isArray(readScope) ? [...readScope] : readScope;
+    let complete = false;
+    return () => {
+        if (complete)
+            return;
+        assertWorkerReadScopeConfined(generationReadScope);
+        complete = true;
+    };
+}

package/esm/src/security/sandbox/worker-types.d.ts

@@ -81,6 +81,18 @@ export interface SerializedDataResult {
     };
     notFound?: boolean;
     revalidate?: number | false;
+    headers?: Record<string, string>;
+    cookies?: Array<{
+        name: string;
+        value: string;
+        domain?: string;
+        path?: string;
+        expires?: string;
+        maxAge?: number;
+        httpOnly?: boolean;
+        secure?: boolean;
+        sameSite?: "lax" | "strict" | "none";
+    }>;
 }
 /**
  * Immutable, host-prepared JavaScript sent across the worker boundary.

package/esm/src/security/sandbox/worker-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"worker-types.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/worker-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,aAAa,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,iBAAiB,CAAC;IAC3B,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC7B;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,wBAAwB,GACxB,6BAA6B,GAC7B,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,iBAAiB,CAAC;IAC3B,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,sBAAsB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,2BAA2B,CAAC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACvC,8BAA8B;IAC9B,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;CAC1D;AAMD,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC/B;AAED,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC3B;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,0BAA0B,GAC1B,wBAAwB,GACxB,uBAAuB,GACvB,oCAAoC,GACpC,mBAAmB,CAAC;AAExB,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,0BAA0B,CAAC;IACjC,EAAE,EAAE,MAAM,CAAC;CACZ;AAMD,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qFAAqF;IACrF,cAAc,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAEtD,sEAAsE;AACtE,eAAO,MAAM,2BAA2B,QAAmB,CAAC;AAE5D,kEAAkE;AAClE,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B,QAAc,CAAC;AAEtD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,mEAAmE;AACnE,eAAO,MAAM,8BAA8B,QAAkB,CAAC;AAE9D,mFAAmF;AACnF,eAAO,MAAM,uCAAuC,QAAmB,CAAC;AAExE,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAQ1E,CAAC"}
+{"version":3,"file":"worker-types.d.ts","sourceRoot":"","sources":["../../../../src/src/security/sandbox/worker-types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,aAAa,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,iBAAiB,CAAC;IAC3B,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACxD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACtC,CAAC,CAAC;CACJ;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,wBAAwB,GACxB,6BAA6B,GAC7B,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,iBAAiB,CAAC;IAC3B,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,sBAAsB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,2BAA2B,CAAC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;IAC7B,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;IACzD,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,4EAA4E;IAC5E,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACvC,8BAA8B;IAC9B,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC9B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,wEAAwE;IACxE,uBAAuB,EAAE,+BAA+B,CAAC;CAC1D;AAMD,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC/B;AAED,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wDAAwD;AACxD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC3B;AAED,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,gBAAgB,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,0BAA0B,GAC1B,wBAAwB,GACxB,uBAAuB,GACvB,oCAAoC,GACpC,mBAAmB,CAAC;AAExB,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,aAAa,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,oBAAoB,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,0BAA0B,CAAC;IACjC,EAAE,EAAE,MAAM,CAAC;CACZ;AAMD,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iEAAiE;IACjE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qFAAqF;IACrF,cAAc,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAEtD,sEAAsE;AACtE,eAAO,MAAM,2BAA2B,QAAmB,CAAC;AAE5D,kEAAkE;AAClE,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD,0EAA0E;AAC1E,eAAO,MAAM,0BAA0B,QAAc,CAAC;AAEtD,6EAA6E;AAC7E,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,mEAAmE;AACnE,eAAO,MAAM,8BAA8B,QAAkB,CAAC;AAE9D,mFAAmF;AACnF,eAAO,MAAM,uCAAuC,QAAmB,CAAC;AAExE,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAQ1E,CAAC"}

package/esm/src/server/handlers/dev/dashboard/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/dashboard/api.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAiDrD,KAAK,kBAAkB,GAAG,KAAK,GAAG,MAAM,CAAC;AA2CzC,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAG9E;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAQ5C"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/dev/dashboard/api.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AA4GrD,KAAK,kBAAkB,GAAG,KAAK,GAAG,MAAM,CAAC;AA2CzC,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAG9E;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAQ5C"}

package/esm/src/server/handlers/dev/dashboard/api.js

@@ -55,6 +55,63 @@ const TEXT_EXTENSIONS = new Set([
     "gitignore",
     "dockerignore",
 ]);
+const SENSITIVE_DASHBOARD_FILE_NAMES = new Set([
+    ".envrc",
+    ".netrc",
+    ".npmrc",
+    ".pypirc",
+    "application_default_credentials.json",
+    "credentials.json",
+    "env",
+    "id_ed25519",
+    "id_rsa",
+    "secrets.json",
+    "service-account.json",
+]);
+const SENSITIVE_DASHBOARD_FILE_EXTENSIONS = new Set([
+    "env",
+    "key",
+    "p12",
+    "pem",
+    "pfx",
+]);
+const SENSITIVE_DASHBOARD_DIRECTORY_NAMES = new Set([
+    ".aws",
+    ".docker",
+    ".git",
+    ".gnupg",
+    ".kube",
+    ".ssh",
+]);
+const SAFE_ENV_TEMPLATE_NAMES = new Set([
+    ".env.example",
+    ".env.sample",
+    ".env.template",
+]);
+const UNAVAILABLE_FILE_MESSAGE = "File content is not available";
+function isSensitiveDashboardPath(path, kind) {
+    const segments = path.replaceAll("\\", "/").split("/").filter(Boolean).map((segment) => segment.toLowerCase().replace(/[ .]+$/g, ""));
+    // A colon addresses an alternate data stream on NTFS. Treat stream paths as
+    // unavailable so a sensitive file cannot be reached through an alias such as
+    // `.env::$DATA`.
+    if (segments.some((segment) => segment.includes(":")))
+        return true;
+    if (segments.some((segment) => SENSITIVE_DASHBOARD_DIRECTORY_NAMES.has(segment)))
+        return true;
+    if (kind === "directory")
+        return false;
+    const fileName = segments.at(-1);
+    if (!fileName)
+        return false;
+    if (SAFE_ENV_TEMPLATE_NAMES.has(fileName))
+        return false;
+    if (fileName === ".env" || fileName.startsWith(".env."))
+        return true;
+    if (SENSITIVE_DASHBOARD_FILE_NAMES.has(fileName))
+        return true;
+    const extension = fileName.includes(".") ? fileName.slice(fileName.lastIndexOf(".") + 1) : "";
+    return SENSITIVE_DASHBOARD_FILE_EXTENSIONS.has(extension);
+}
 const GET_DASHBOARD_API_ROUTES = {
     "/_dev/api/stats": () => handleStats(),
     "/_dev/api/tools": () => handleListTools(),
@@ -348,15 +405,21 @@ async function handleListFiles(req, ctx) {
         const canonical = await validateRelativePath(relativePath, projectDir, adapter);
         if (canonical === null)
             return errorResponse("Invalid path", 400);
+        if (isSensitiveDashboardPath(relativePath, "directory")) {
+            return errorResponse(UNAVAILABLE_FILE_MESSAGE, 403);
+        }
         fullPath = canonical;
     }
     try {
         const files = [];
         for await (const entry of adapter.fs.readDir(fullPath)) {
+            const entryPath = relativePath ? `${relativePath}/${entry.name}` : entry.name;
+            if (isSensitiveDashboardPath(entryPath, entry.isDirectory ? "directory" : "file"))
+                continue;
             files.push({
                 name: entry.name,
                 type: entry.isDirectory ? "directory" : "file",
-                path: relativePath ? `${relativePath}/${entry.name}` : entry.name,
+                path: entryPath,
             });
         }
         files.sort((a, b) => a.type !== b.type ? (a.type === "directory" ? -1 : 1) : a.name.localeCompare(b.name));
@@ -383,10 +446,14 @@ async function handleReadFileContent(req, ctx) {
     const canonical = await validateRelativePath(relativePath, projectDir, adapter);
     if (canonical === null)
         return errorResponse("Invalid path", 400);
+    if (isSensitiveDashboardPath(relativePath, "file")) {
+        return errorResponse(UNAVAILABLE_FILE_MESSAGE, 403);
+    }
     try {
         const content = await adapter.fs.readFile(canonical);
-        const extension = relativePath.split(".").pop() ?? "";
-        if (!TEXT_EXTENSIONS.has(extension.toLowerCase())) {
+        const fileName = relativePath.replaceAll("\\", "/").split("/").at(-1)?.toLowerCase() ?? "";
+        const extension = fileName.split(".").pop() ?? "";
+        if (!TEXT_EXTENSIONS.has(extension) && !SAFE_ENV_TEMPLATE_NAMES.has(fileName)) {
             return jsonResponse({
                 path: relativePath,
                 extension,

package/esm/src/server/handlers/dev/files/esbuild-plugins.d.ts

@@ -4,6 +4,7 @@ import { type LockfileManager } from "../../../../utils/import-lockfile.js";
 import { type DependencyPinningSourceInput } from "../../../../transforms/esm/package-registry.js";
 export interface RelativeFsPluginOptions {
     enforceBrowserBoundaries?: boolean;
+    serverExternalPackages?: readonly string[];
     /**
      * Root-bound, symlink-safe, bounded read authority for browser builds. When
      * supplied, the read itself replaces mutable directory-walk admission.
@@ -24,12 +25,16 @@ interface BareExternalPluginOptions {
     dependencyPinningSource?: DependencyPinningSourceInput;
     strict?: boolean;
     importMapImports?: Record<string, string>;
+    /** Bare npm package roots explicitly declared as server-only by the project. */
+    serverExternalPackages?: readonly string[];
 }
 /** Create bare module external plugin that rewrites npm imports to esm.sh URLs */
 export declare function createBareExternalPlugin(options?: BareExternalPluginOptions | boolean): Plugin;
 interface HttpExternalPluginOptions {
     moduleServerOrigin?: string;
     dependencyPinningCacheKey?: string;
+    projectDir?: string;
+    serverExternalPackages?: readonly string[];
 }
 export declare function createHttpExternalPlugin(options?: HttpExternalPluginOptions): Plugin;
 export {};