@dsh-enhanced/assistant-isolation 0.1.65 → 0.1.67

package/lib/linux-repository-runner.d.ts

@@ -0,0 +1,54 @@
+import type { LinuxCgroupRoots } from './linux-cgroups.js';
+import { type LinuxReceiptBinding, type LinuxRepositoryExecutionContract } from './linux-execution-contract.js';
+import { type LinuxRepositoryArtifact } from './linux-execution.js';
+import { type LinuxRuntime } from './linux-runtime.js';
+import { type LinuxRunnerStateSeal } from './linux-runner-state.js';
+import type { IsolationResult } from './types.js';
+import { type LinuxSystemSnapshot } from './linux-system-snapshot.js';
+import { type LinuxUserNamespaceMapping } from './linux-user-namespace.js';
+export interface LinuxRepositoryRunnerConfig {
+    readonly backend: 'linux-native';
+    readonly stateRoot: string;
+    readonly stateSeal?: LinuxRunnerStateSeal;
+    readonly authorityDigest: string;
+    readonly expiresAt: number;
+    readonly maxRuns: number;
+    readonly maxTotalDurationMs: number;
+    readonly runtime: LinuxRuntime;
+    readonly cgroupRoots: LinuxCgroupRoots;
+    readonly limits: Readonly<LinuxRepositoryExecutionContract['limits']>;
+    readonly userNamespace?: LinuxUserNamespaceMapping;
+    readonly systemSnapshot?: LinuxSystemSnapshot;
+}
+export interface LinuxRepositoryRunnerRequest {
+    argv: readonly string[];
+    archive: {
+        bytes: number;
+        sha256: string;
+    };
+    artifacts: readonly string[];
+}
+export interface LinuxRepositoryRunnerResult {
+    result: IsolationResult;
+    artifacts: LinuxRepositoryArtifact[];
+    receiptBinding?: LinuxReceiptBinding;
+    contractDigest: string;
+    runtimeDigest: string;
+}
+/** Private finite repository authority. No archive factory or command is replayed
+ * for an existing key, including an interrupted or failed preparation. */
+export declare class LinuxRepositoryRunner {
+    #private;
+    constructor(input: LinuxRepositoryRunnerConfig);
+    get contractDigest(): string;
+    get runtimeDigest(): string;
+    /** Factories own their Host subprocess cleanup through the combined signal;
+     * late completion can never open native execution admission. */
+    run: (key: string, request: LinuxRepositoryRunnerRequest, loadArchive: (signal: AbortSignal) => Promise<Uint8Array>, signal: AbortSignal) => Promise<LinuxRepositoryRunnerResult>;
+    /** Read the original successful execution only. This cannot admit, recover or
+     * replay a job, and close() drains every outstanding receipt read. */
+    inspectSuccessfulExecution: (key: string, signal?: AbortSignal) => Promise<LinuxRepositoryRunnerResult | undefined>;
+    inspectQuiescence(key: string): Promise<'quiescent' | 'unknown'>;
+    close: () => Promise<void>;
+}
+//# sourceMappingURL=linux-repository-runner.d.ts.map

package/lib/linux-repository-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-repository-runner.d.ts","sourceRoot":"","sources":["../src/linux-repository-runner.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EACL,KAAK,mBAAmB,EAAE,KAAK,gCAAgC,EAAE,MAAM,+BAA+B,CAAA;AACxG,OAAO,EACoD,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AAGrH,OAAO,EAAgE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEpH,OAAO,EAAyD,KAAK,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC1H,OAAO,KAAK,EAAmC,eAAe,EAAE,MAAM,YAAY,CAAA;AAClF,OAAO,EAAgD,KAAK,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AACnH,OAAO,EAAwE,KAAK,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAEhJ,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,gCAAgC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACrE,QAAQ,CAAC,aAAa,CAAC,EAAE,yBAAyB,CAAA;IAClD,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAA;CAC9C;AACD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IACvB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1C,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CAC7B;AACD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,eAAe,CAAA;IACvB,SAAS,EAAE,uBAAuB,EAAE,CAAA;IACpC,cAAc,CAAC,EAAE,mBAAmB,CAAA;IACpC,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;CACtB;AA8DD;0EAC0E;AAC1E,qBAAa,qBAAqB;;gBAsBpB,KAAK,EAAE,2BAA2B;IAgD9C,IAAI,cAAc,IAAI,MAAM,CAAwD;IACpF,IAAI,aAAa,IAAI,MAAM,CAAwC;IAgHnE;oEACgE;IAChE,GAAG,GAAI,KAAK,MAAM,EAAE,SAAS,4BAA4B,EAAE,aAAa,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,WAAW,KAAG,OAAO,CAAC,2BAA2B,CAAC,CAY/K;IA0HD;0EACsE;IACtE,0BAA0B,GAAI,KAAK,MAAM,EAAE,SAAS,WAAW,KAAG,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAOjH;IA4BK,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAmBtE,KAAK,QAAa,OAAO,CAAC,IAAI,CAAC,CAQ9B;CACF"}