@bun-native/runtime 0.33.0 → 0.33.1

package/README.md

@@ -2,4 +2,4 @@
 
 Bun Native host process lifecycle and bridge runtime.
 
-Part of [Bun Native](https://github.com/0xPlayerOne/bun-native), an experimental developer preview. Version 0.33.0 was built from [fa8bef754122](https://github.com/0xPlayerOne/bun-native/tree/fa8bef754122621d4235eb06e30bb1085b4f7b1e) and published from GitHub Actions with npm provenance. Use the Bun revision pinned in that commit's toolchain.json. Start with the [getting-started guide](https://github.com/0xPlayerOne/bun-native/blob/fa8bef754122621d4235eb06e30bb1085b4f7b1e/docs/getting-started.md); `bun-native host install` fetches the matching release host. The license notice is in LICENSE.
+Part of [Bun Native](https://github.com/0xPlayerOne/bun-native), an experimental developer preview. Version 0.33.1 was built from [c56fdd675365](https://github.com/0xPlayerOne/bun-native/tree/c56fdd6753653a10144a4167c1d3dfb3c38a0647) and published from GitHub Actions with npm provenance. Use the Bun revision pinned in that commit's toolchain.json. Start with the [getting-started guide](https://github.com/0xPlayerOne/bun-native/blob/c56fdd6753653a10144a4167c1d3dfb3c38a0647/docs/getting-started.md); `bun-native host install` fetches the matching release host. The license notice is in LICENSE.

package/bun-native-source.json

@@ -1,31 +1,31 @@
 {
   "schemaVersion": 1,
-  "commit": "fa8bef754122621d4235eb06e30bb1085b4f7b1e",
-  "tree": "f805e2eb19a4e10fc29d1dc827cf5bc617b5773b",
+  "commit": "c56fdd6753653a10144a4167c1d3dfb3c38a0647",
+  "tree": "c6e81b3f9d041e11dd0413b5fdd7a50910383854",
   "files": {
     "package.json": {
-      "bytes": 2164,
-      "sha256": "db50b6f81f25c113a46f8c9b038bc548a92effaeb4ad9562e5e95044baa7b66f"
+      "bytes": 2115,
+      "sha256": "caf866d56f3cd7530d5735ecbf62512e9e22526bc44c75a4b48a18c26352c0b8"
     },
     "packages/runtime/package.json": {
       "bytes": 195,
       "sha256": "30d8e6684ee94e266b3bc63d151f718a5d0a8804b2155c11f74de3e7189af63a"
     },
     "packages/runtime/src/exit-diagnostic.ts": {
-      "bytes": 4876,
-      "sha256": "f73b2259d80a6584427ad3b27ad239b5950b816468cca8d64bdfc35a5f3cfce8"
+      "bytes": 5059,
+      "sha256": "0c93ad077ad4cfcdf32a8092da1aff6cdc0f65322feadf538768439d67b11e06"
     },
     "packages/runtime/src/index.ts": {
-      "bytes": 38743,
-      "sha256": "aba3c6c58e2b9089b4faaf32e512736e660314bc2c0f74f62fe6dba45df5b053"
+      "bytes": 39579,
+      "sha256": "a5f20057a2baa2117176a59c29e65438904f3758bfed3e29e981b55758e93adb"
     },
     "packages/runtime/src/installation.ts": {
       "bytes": 1871,
       "sha256": "a89c677fad56ace6839bda86891fafa088f3a37e0248c313a72d7918a0538a10"
     },
     "packages/runtime/src/startup-trace.ts": {
-      "bytes": 3021,
-      "sha256": "b34971a20cb541fa8cd97eb611d59923297844186b6653ecb607b4b29bf80b2d"
+      "bytes": 3345,
+      "sha256": "19efe954374e1cd486277bc8df144d8dd711cffd12e2888d14021c871de840d6"
     },
     "LICENSE": {
       "bytes": 1075,
@@ -33,8 +33,8 @@
     }
   },
   "toolchain": {
-    "bytes": 3012,
-    "sha256": "00c3f707aae8abe9ca75cd2e162f5e1c7c34362a03675da39afead60d856066a"
+    "bytes": 3234,
+    "sha256": "9f4d9362cb4cc38c0f4e705295789a0cbfec46ffdd007e0541b9441a7c3003a7"
   },
   "dependencyLock": {
     "bytes": 28357,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bun-native/runtime",
-  "version": "0.33.0",
+  "version": "0.33.1",
   "type": "module",
   "license": "MIT",
   "files": [
@@ -15,7 +15,7 @@
   "exports": "./src/index.ts",
   "description": "Bun Native host process lifecycle and bridge runtime.",
   "dependencies": {
-    "@bun-native/protocol": "0.33.0"
+    "@bun-native/protocol": "0.33.1"
   },
   "repository": {
     "type": "git",

package/src/exit-diagnostic.ts

@@ -46,10 +46,7 @@ function escapeRegExp(text: string): string {
  * Removes inherited environment values, assignments and credential-shaped
  * tokens from native output. Over-redaction is acceptable; leaks are not.
  */
-function redactDiagnostic(
-  text: string,
-  environment: Readonly<Record<string, string | undefined>>
-): string {
+function redact(text: string, environment: Readonly<Record<string, string | undefined>>): string {
   let redacted = text.replace(/\p{Cc}/gu, (control) =>
     control === '\n' || control === '\t' ? control : ''
   )
@@ -72,6 +69,22 @@ function redactDiagnostic(
     .replace(/\b[A-Za-z0-9+_-]{32,}={0,2}/g, REDACTED)
 }
 
+/**
+ * Captured native stderr, safe to log or record. A clipped first line can hold
+ * the end of a secret that no longer matches its full environment value, so it
+ * is dropped before redaction.
+ */
+export function redactDiagnostic(
+  stderr: string,
+  clipped: boolean,
+  environment: Readonly<Record<string, string | undefined>>
+): string {
+  return redact(
+    clipped ? stderr.slice(stderr.indexOf('\n') + 1 || stderr.length) : stderr,
+    environment
+  )
+}
+
 export function exitDiagnostic(input: {
   exitCode: number | null
   signal: string | null
@@ -88,17 +101,12 @@ export function exitDiagnostic(input: {
   panicReport?: string | null
   environment: Readonly<Record<string, string | undefined>>
 }): Readonly<NativeHostExitDiagnostic> {
-  // A clipped first line can hold the end of a secret that no longer matches
-  // its full environment value, so it is dropped before redaction.
-  const stderr = input.stderrClipped
-    ? input.stderr.slice(input.stderr.indexOf('\n') + 1 || input.stderr.length)
-    : input.stderr
-  const redacted = redactDiagnostic(stderr, input.environment)
+  const redacted = redactDiagnostic(input.stderr, input.stderrClipped, input.environment)
   let panic = PANIC_LOCATION.exec(redacted)
   // The kept report leads the tail only when the captured stderr lost it.
   const report =
     !panic && input.panicReport
-      ? redactDiagnostic(input.panicReport, input.environment)
+      ? redact(input.panicReport, input.environment)
           .trimEnd()
           .slice(0, MAX_DIAGNOSTIC_TAIL / 2)
       : null

package/src/index.ts

@@ -6,6 +6,7 @@ import {
   processArguments,
   encodeFrame,
   FrameDecoder,
+  MAX_EVENT_FRAME_BYTES,
   parseCommand,
   parseEvent,
   PROTOCOL_VERSION,
@@ -18,6 +19,7 @@ import {
   type ServicePolicy,
   type Capability,
   type FileAccess,
+  type HostEvent,
 } from '@bun-native/protocol'
 import { isAbsolute } from 'node:path'
 import type { ReadableStreamDefaultReader } from 'node:stream/web'
@@ -31,6 +33,7 @@ export {
   type NativeHostExitReason,
 } from './exit-diagnostic.ts'
 export { installedRelease, reportHealthy, type InstalledRelease } from './installation.ts'
+export type { ApplicationEvent, HostEvent, WindowEvent } from '@bun-native/protocol'
 
 type WithoutId<T> = T extends { id: number } ? Omit<T, 'id'> : never
 export type WindowCommand = WithoutId<
@@ -71,10 +74,6 @@ export type WindowCommand = WithoutId<
     }
   >
 >
-export type WindowEvent = Extract<NativeEvent, { sequence: number; window_id: number }>
-/** Sequenced events owned by the application rather than one window. */
-export type ApplicationEvent = Extract<NativeEvent, { type: 'app_menu_item' }>
-export type HostEvent = WindowEvent | ApplicationEvent
 export type HostResponse = Extract<
   NativeEvent,
   {
@@ -351,6 +350,8 @@ export class NativeHost implements AsyncIterable<HostEvent> {
   private readonly events: HostEvent[] = []
   private readonly finished: Promise<void>
   private waiting: WaitingReader | undefined
+  /** Queued events the consumer has taken; progress while reading is paused. */
+  private taken = 0
   private failure: Error | undefined
   private phase: 'starting' | 'running' | 'stopping' | 'closed' = 'starting'
   private ready = false
@@ -428,6 +429,11 @@ export class NativeHost implements AsyncIterable<HostEvent> {
     }
   }
 
+  /** Whether the transport is still open (false once it failed or shut down). */
+  get running(): boolean {
+    return this.phase === 'running'
+  }
+
   get limits(): Readonly<Limits> {
     if (!this.negotiatedLimits) throw new ProtocolError('Native limits are not negotiated')
     return this.negotiatedLimits
@@ -574,7 +580,10 @@ export class NativeHost implements AsyncIterable<HostEvent> {
       next: () => {
         if (this.failure) return Promise.reject(this.failure)
         const event = this.events.shift()
-        if (event) return Promise.resolve({ done: false, value: event })
+        if (event) {
+          this.taken += 1
+          return Promise.resolve({ done: false, value: event })
+        }
         if (this.phase === 'closed') return Promise.resolve({ done: true, value: undefined })
         if (this.waiting)
           return Promise.reject(new Error('Concurrent event reads are not supported'))
@@ -660,12 +669,13 @@ export class NativeHost implements AsyncIterable<HostEvent> {
   }
 
   private async readStdout(): Promise<void> {
-    const decoder = new FrameDecoder()
+    const decoder = new FrameDecoder(MAX_EVENT_FRAME_BYTES)
     try {
       for (;;) {
         const { done, value } = await this.stdout.read()
         if (done) break
         for (const raw of decoder.push(value)) this.receive(parseEvent(raw))
+        if (this.events.length >= MAX_QUEUED_EVENTS) await this.drainEvents()
       }
       decoder.finish()
       if (
@@ -679,6 +689,21 @@ export class NativeHost implements AsyncIterable<HostEvent> {
     }
   }
 
+  /**
+   * One pipe read can coalesce more frames than the cap while the consumer is
+   * keeping up. Over the cap, reading pauses for macrotask turns while the
+   * consumer takes events, and fails only a turn in which it took none, so
+   * queued events stay bounded by the cap plus one read.
+   */
+  private async drainEvents(): Promise<void> {
+    while (this.events.length >= MAX_QUEUED_EVENTS) {
+      const taken = this.taken
+      await new Promise<void>((resolve) => setImmediate(resolve))
+      if (this.phase === 'closed') return
+      if (this.taken === taken) throw new ProtocolError('Native event limit exceeded')
+    }
+  }
+
   private async readStderr(): Promise<void> {
     const decoder = new TextDecoder()
     try {
@@ -771,7 +796,12 @@ export class NativeHost implements AsyncIterable<HostEvent> {
       clearTimeout(drainDeadline)
       this.cancelOutput()
       await Promise.allSettled(streams)
-      this.startupTrace?.finished(this.process.exitCode, this.stderrTail, this.process.pid)
+      this.startupTrace?.finished(
+        this.process.exitCode,
+        this.stderrTail,
+        this.stderrClipped,
+        this.process.pid
+      )
     }
   }
 
@@ -864,8 +894,6 @@ export class NativeHost implements AsyncIterable<HostEvent> {
       this.waiting.resolve({ done: false, value: event })
       this.waiting = undefined
     } else {
-      if (this.events.length >= MAX_QUEUED_EVENTS)
-        throw new ProtocolError('Native event limit exceeded')
       this.events.push(event)
     }
   }
@@ -1016,7 +1044,7 @@ export class NativeHost implements AsyncIterable<HostEvent> {
   private fail(cause: unknown): void {
     if (this.failure) return
     this.failure = cause instanceof Error ? cause : new Error(String(cause))
-    this.startupTrace?.failure(this.failure, this.stderrTail, this.process.pid)
+    this.startupTrace?.failure(this.failure, this.stderrTail, this.stderrClipped, this.process.pid)
     this.phase = 'closed'
     for (const request of this.pending.values()) {
       clearTimeout(request.timer)

package/src/startup-trace.ts

@@ -1,6 +1,7 @@
 import type { Command, NativeEvent } from '@bun-native/protocol'
 import { appendFileSync } from 'node:fs'
 import { isAbsolute } from 'node:path'
+import { redactDiagnostic } from './exit-diagnostic.ts'
 
 const MAX_RECORDS = 256
 
@@ -51,18 +52,27 @@ export class StartupTrace {
     })
   }
 
-  failure(error: Error, stderr: string, hostPid: number): void {
+  /** `stderr` is the bounded capture; it is recorded redacted, like exit diagnostics. */
+  failure(error: Error, stderr: string, clipped: boolean, hostPid: number): void {
     this.write(
       'transport_failed',
-      { host_pid: hostPid, error: error.message.slice(-1_024), stderr_tail: stderr },
+      {
+        host_pid: hostPid,
+        error: error.message.slice(-1_024),
+        stderr_tail: redactDiagnostic(stderr, clipped, process.env),
+      },
       true
     )
   }
 
-  finished(exitCode: number | null, stderr: string, hostPid: number): void {
+  finished(exitCode: number | null, stderr: string, clipped: boolean, hostPid: number): void {
     this.write(
       'transport_finished',
-      { host_pid: hostPid, exit_code: exitCode, stderr_tail: stderr },
+      {
+        host_pid: hostPid,
+        exit_code: exitCode,
+        stderr_tail: redactDiagnostic(stderr, clipped, process.env),
+      },
       true
     )
   }