@microsandbox/control-client 0.7.0

package/dist/json-reply.js

@@ -0,0 +1,63 @@
+import { ClientError } from "@microsandbox/protocol-client";
+import { ControlClientError } from "./error.js";
+import { jsonObject, jsonUint, parseJson } from "./json-value.js";
+/** Actual legacy bytes and an inspectable lossless object; no fabricated frame. */
+export class JsonReply {
+    #raw;
+    #value;
+    constructor(raw) {
+        this.#raw = raw.slice();
+        this.#value = jsonObject(parseJson(this.#raw));
+    }
+    get raw() { return this.#raw; }
+    get value() { return this.#value; }
+    [Symbol.for("nodejs.util.inspect.custom")]() { return "JsonReply { bytes: " + this.#raw.length + " }"; }
+    /** Only a valid affirmative capabilities reply is evidence of a legacy peer. */
+    discoveryMode() {
+        if (this.value.get("ok") !== true || (this.value.has("error") && this.value.get("error") !== null))
+            throw new ClientError("invalid_data");
+        jsonCapabilities(this.value.get("capabilities"));
+        if (!this.value.has("control_protocols"))
+            return "json";
+        const protocols = this.value.get("control_protocols");
+        if (!Array.isArray(protocols) || protocols.some(name => typeof name !== "string"))
+            throw new ClientError("invalid_data");
+        if (protocols.includes("cbor"))
+            return "cbor";
+        if (protocols.includes("json"))
+            return "json";
+        throw new ClientError("unsupported_operation");
+    }
+    /** Only checked helpers turn ok:false into an error; progress stays unknown. */
+    checked(decode) {
+        if (this.value.get("ok") === false)
+            throw new ControlClientError("legacy_remote", this);
+        if (this.value.get("ok") !== true)
+            throw new ControlClientError("invalid_json_response", this);
+        try {
+            return decode(this.value);
+        }
+        catch {
+            throw new ControlClientError("invalid_json_response", this);
+        }
+    }
+}
+export function jsonCapabilities(value) {
+    const fields = jsonObject(value);
+    const boolean = (name) => {
+        const field = fields.get(name);
+        if (typeof field !== "boolean")
+            throw new ClientError("invalid_data");
+        return field;
+    };
+    return { ...(fields.has("root_disk_grow") ? { root_disk_grow: boolean("root_disk_grow") } : {}), cpu_resize: boolean("cpu_resize"), memory_resize: boolean("memory_resize"), secrets_update: boolean("secrets_update") };
+}
+export function jsonMemory(value) {
+    const fields = jsonObject(value), uint = (name) => jsonUint(fields.get(name), 64);
+    return { boot_mib: uint("boot_mib"), target_mib: uint("target_mib"), current_mib: uint("current_mib"), max_mib: uint("max_mib") };
+}
+export function jsonCpu(value) {
+    const fields = jsonObject(value), uint = (name) => Number(jsonUint(fields.get(name), 32));
+    return { possible: uint("possible"), requested_online: uint("requested_online"), actual_online: uint("actual_online"), enforced: uint("enforced") };
+}
+//# sourceMappingURL=json-reply.js.map

package/dist/json-reply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-reply.js","sourceRoot":"","sources":["../src/json-reply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAmC,MAAM,iBAAiB,CAAC;AAKnG,mFAAmF;AACnF,MAAM,OAAO,SAAS;IACX,IAAI,CAAa;IACjB,MAAM,CAAa;IAC5B,YAAY,GAAe;QACzB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,GAAG,KAAiB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAiB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,KAAa,OAAO,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAEhH,gFAAgF;IAChF,aAAa;QACX,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QAC1I,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAAE,OAAO,MAAM,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QACzH,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QAC9C,MAAM,IAAI,WAAW,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC;IAED,gFAAgF;IAChF,OAAO,CAAI,MAAgC;QACzC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC;YAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAClC,MAAM,CAAC;YAAC,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;IACxE,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAC3N,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAA4B;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AACpI,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,KAA4B;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAClG,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;AACtJ,CAAC"}

package/dist/json-session.d.ts

@@ -0,0 +1,23 @@
+import { type ConnectOptions, type RequestOptions } from "@microsandbox/protocol-client";
+import { ControlAttempt } from "./attempt.js";
+import type { ControlDialer } from "./dialer.js";
+import { JsonReply, type ControlMode } from "./json-reply.js";
+import { type LegacyControlRequest } from "./legacy-request.js";
+import { type Capabilities } from "./records.js";
+/** Shared internal owner used by the explicit adapter and automatic connection. */
+export declare class JsonSession {
+    #private;
+    readonly dialer: ControlDialer;
+    readonly rediscover: boolean;
+    readonly options: ConnectOptions;
+    constructor(dialer: ControlDialer, options: ConnectOptions, rediscover: boolean);
+    isClosed(): boolean;
+    close(): Promise<void>;
+    discover(attempt: ControlAttempt): Promise<{
+        mode: ControlMode;
+        capabilities: Capabilities;
+    }>;
+    operation(request: LegacyControlRequest, options?: RequestOptions): Promise<JsonReply>;
+    private exchange;
+}
+//# sourceMappingURL=json-session.d.ts.map

package/dist/json-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-session.d.ts","sourceRoot":"","sources":["../src/json-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkD,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACzI,OAAO,EAAkB,cAAc,EAAiC,MAAM,cAAc,CAAC;AAC7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,SAAS,EAAoB,KAAK,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAqB,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAwD,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEvG,mFAAmF;AACnF,qBAAa,WAAW;;IAIV,QAAQ,CAAC,MAAM,EAAE,aAAa;IAA2B,QAAQ,CAAC,UAAU,EAAE,OAAO;IADjG,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;gBACZ,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAW,UAAU,EAAE,OAAO;IAIjG,QAAQ,IAAI,OAAO;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,YAAY,EAAE,YAAY,CAAA;KAAE,CAAC;IAK7F,SAAS,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,SAAS,CAAC;YAyBlF,QAAQ;CAyCvB"}

package/dist/json-session.js

@@ -0,0 +1,128 @@
+import { ClientError, defaultLimits } from "@microsandbox/protocol-client";
+import { closeTransport, ControlAttempt, controlError, validateTimeout } from "./attempt.js";
+import { ControlClientError } from "./error.js";
+import { JsonReply, jsonCapabilities } from "./json-reply.js";
+import { encodeJsonRequest } from "./legacy-request.js";
+import { DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_SETUP_TIMEOUT_MS } from "./records.js";
+/** Shared internal owner used by the explicit adapter and automatic connection. */
+export class JsonSession {
+    dialer;
+    rediscover;
+    #closed = new AbortController();
+    #transports = new Set();
+    options;
+    constructor(dialer, options, rediscover) {
+        this.dialer = dialer;
+        this.rediscover = rediscover;
+        this.options = { ...options, limits: defaultLimits(options.limits) };
+        validateTimeout(options.setupTimeoutMs ?? DEFAULT_SETUP_TIMEOUT_MS);
+    }
+    isClosed() { return this.#closed.signal.aborted; }
+    async close() {
+        this.#closed.abort(new ClientError("closed"));
+        await Promise.all([...this.#transports].map(closeTransport));
+    }
+    async discover(attempt) {
+        const reply = await this.exchange(encodeJsonRequest({ op: "capabilities" }), attempt, attempt, 64 * 1024);
+        const mode = reply.discoveryMode();
+        return { mode, capabilities: jsonCapabilities(reply.value.get("capabilities")) };
+    }
+    async operation(request, options = {}) {
+        // Validate and serialize before discovery so unsupported/invalid native
+        // requests cannot cause network I/O. Legacy batches have no framed-size cap.
+        const line = encodeJsonRequest(request);
+        const attempt = new ControlAttempt(options.requestTimeoutMs ?? this.options.limits?.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS, [options.signal, this.#closed.signal]);
+        let setup;
+        try {
+            setup = new ControlAttempt(Math.min(attempt.remaining(), this.options.setupTimeoutMs ?? DEFAULT_SETUP_TIMEOUT_MS), [attempt.signal]);
+            if (this.rediscover && !this.dialer.verifier) {
+                let mode;
+                try {
+                    mode = (await this.discover(setup)).mode;
+                }
+                catch (error) {
+                    // Discovery is read-only. Its lost reply says nothing about admission
+                    // of the prepared mutation, which has not been written.
+                    const failure = controlError(error);
+                    throw failure instanceof ClientError ? failure.withDelivery("not_sent") : failure;
+                }
+                if (mode !== "json")
+                    throw new ControlClientError("runtime_changed");
+            }
+            return await this.exchange(line, attempt, setup);
+        }
+        catch (error) {
+            await this.close();
+            throw controlError(error);
+        }
+        finally {
+            line.fill(0);
+            setup?.dispose();
+            attempt.dispose();
+        }
+    }
+    async exchange(line, attempt, setup, maxReply) {
+        let transport, admitted = false;
+        const chunks = [];
+        try {
+            if (this.isClosed())
+                throw new ClientError("closed");
+            transport = await setup.connect(this.dialer.connector);
+            this.#transports.add(transport);
+            if (this.dialer.verifier)
+                await setup.run(() => this.dialer.verifier.verifySession(setup.context));
+            attempt.check();
+            setup.check();
+            if (this.isClosed())
+                throw new ClientError("closed");
+            const owned = transport;
+            await attempt.run(() => {
+                admitted = true; // A rejected/partial write may already have reached the peer.
+                return owned.write(line);
+            });
+            let total = 0;
+            for (;;) {
+                const chunk = await attempt.run(() => owned.read(8192));
+                if (chunk === null) {
+                    if (total === 0)
+                        throw new ClientError("peer_closed");
+                    break; // The historical protocol also permits a nonempty EOF delimiter.
+                }
+                if (chunk.length === 0 || chunk.length > 8192)
+                    throw new ClientError("invalid_data");
+                const newline = chunk.indexOf(10), count = newline < 0 ? chunk.length : newline + 1;
+                total += count;
+                if (maxReply !== undefined && total > maxReply)
+                    throw new ClientError("invalid_data");
+                chunks.push(chunk.slice(0, count));
+                if (newline >= 0)
+                    break;
+            }
+            const raw = new Uint8Array(total);
+            let offset = 0;
+            for (const chunk of chunks) {
+                raw.set(chunk, offset);
+                offset += chunk.length;
+            }
+            try {
+                return new JsonReply(raw);
+            }
+            finally {
+                raw.fill(0);
+            }
+        }
+        catch (error) {
+            const failure = controlError(error);
+            throw failure instanceof ClientError ? failure.withDelivery(admitted ? "unknown" : "not_sent") : failure;
+        }
+        finally {
+            for (const chunk of chunks)
+                chunk.fill(0);
+            if (transport) {
+                this.#transports.delete(transport);
+                await closeTransport(transport);
+            }
+        }
+    }
+}
+//# sourceMappingURL=json-session.js.map

package/dist/json-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-session.js","sourceRoot":"","sources":["../src/json-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAgE,MAAM,+BAA+B,CAAC;AACzI,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAoB,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAA6B,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAqB,MAAM,cAAc,CAAC;AAEvG,mFAAmF;AACnF,MAAM,OAAO,WAAW;IAID;IAAyD;IAHrE,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAChC,WAAW,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,OAAO,CAAiB;IACjC,YAAqB,MAAqB,EAAE,OAAuB,EAAW,UAAmB;QAA5E,WAAM,GAAN,MAAM,CAAe;QAAoC,eAAU,GAAV,UAAU,CAAS;QAC/F,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,eAAe,CAAC,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC,CAAC;IACtE,CAAC;IACD,QAAQ,KAAc,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAuB;QACpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,OAA6B,EAAE,UAA0B,EAAE;QACzE,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,IAAI,0BAA0B,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3K,IAAI,KAAiC,CAAC;QACtC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACrI,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC7C,IAAI,IAAiB,CAAC;gBACtB,IAAI,CAAC;oBAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAC,CAAC;gBACjD,OAAO,KAAK,EAAE,CAAC;oBACb,sEAAsE;oBACtE,wDAAwD;oBACxD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpC,MAAM,OAAO,YAAY,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBACpF,CAAC;gBACD,IAAI,IAAI,KAAK,MAAM;oBAAE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,KAAK,EAAE,OAAO,EAAE,CAAC;YAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAClE,CAAC;IACO,KAAK,CAAC,QAAQ,CAAC,IAAgB,EAAE,OAAuB,EAAE,KAAqB,EAAE,QAAiB;QACxG,IAAI,SAAoC,EAAE,QAAQ,GAAG,KAAK,CAAC;QAC3D,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YACrD,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAS,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACpG,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,QAAQ,EAAE;gBAAE,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,SAAS,CAAC;YACxB,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;gBACrB,QAAQ,GAAG,IAAI,CAAC,CAAC,8DAA8D;gBAC/E,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBACnB,IAAI,KAAK,KAAK,CAAC;wBAAE,MAAM,IAAI,WAAW,CAAC,aAAa,CAAC,CAAC;oBACtD,MAAM,CAAC,iEAAiE;gBAC1E,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;oBAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;gBACrF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;gBACpF,KAAK,IAAI,KAAK,CAAC;gBACf,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,GAAG,QAAQ;oBAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;gBACtF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACnC,IAAI,OAAO,IAAI,CAAC;oBAAE,MAAM;YAC1B,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;YAAC,CAAC;YAC/E,IAAI,CAAC;gBAAC,OAAO,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,OAAO,YAAY,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3G,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAAC,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QACzF,CAAC;IACH,CAAC;CACF"}

package/dist/json-value.d.ts

@@ -0,0 +1,18 @@
+/** Original JSON number token. Unknown fields need not fit any JavaScript number. */
+export declare class JsonNumber {
+    #private;
+    constructor(token: string);
+    get token(): string;
+    /** Integer wire fields reject negative zero, fractions, exponents, and overflow. */
+    asUint(bits: 32 | 64): bigint;
+}
+export type JsonObject = ReadonlyMap<string, JsonValue>;
+export type JsonValue = null | boolean | string | JsonNumber | readonly JsonValue[] | JsonObject;
+/**
+ * Parse number tokens before any Number conversion. Objects are maps so unknown
+ * keys, including "__proto__", cannot alter prototypes or erase duplicates.
+ */
+export declare function parseJson(bytes: Uint8Array): JsonValue;
+export declare function jsonObject(value: JsonValue | undefined): JsonObject;
+export declare function jsonUint(value: JsonValue | undefined, bits: 32 | 64): bigint;
+//# sourceMappingURL=json-value.d.ts.map

package/dist/json-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-value.d.ts","sourceRoot":"","sources":["../src/json-value.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,qBAAa,UAAU;;gBAET,KAAK,EAAE,MAAM;IAIzB,IAAI,KAAK,IAAI,MAAM,CAAwB;IAC3C,oFAAoF;IACpF,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM;CAO9B;AAED,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACxD,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,SAAS,EAAE,GAAG,UAAU,CAAC;AAEjG;;;GAGG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,CAgEtD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,CAGnE;AACD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,CAG5E"}

package/dist/json-value.js

@@ -0,0 +1,138 @@
+import { ClientError } from "@microsandbox/protocol-client";
+/** Original JSON number token. Unknown fields need not fit any JavaScript number. */
+export class JsonNumber {
+    #token;
+    constructor(token) {
+        if (!/^-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?$/.test(token))
+            throw invalid();
+        this.#token = token;
+    }
+    get token() { return this.#token; }
+    /** Integer wire fields reject negative zero, fractions, exponents, and overflow. */
+    asUint(bits) {
+        if (!/^(?:0|[1-9]\d*)$/.test(this.#token) || this.#token.length > 20)
+            throw invalid();
+        const value = BigInt(this.#token);
+        if (value >= (1n << BigInt(bits)))
+            throw invalid();
+        return value;
+    }
+    [Symbol.for("nodejs.util.inspect.custom")]() { return "JsonNumber { … }"; }
+}
+/**
+ * Parse number tokens before any Number conversion. Objects are maps so unknown
+ * keys, including "__proto__", cannot alter prototypes or erase duplicates.
+ */
+export function parseJson(bytes) {
+    let source;
+    try {
+        source = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes)
+            .replace(/^\p{White_Space}+|\p{White_Space}+$/gu, "");
+    }
+    catch {
+        throw invalid();
+    }
+    let offset = 0;
+    const space = () => { while (offset < source.length && /[ \t\r\n]/.test(source[offset]))
+        offset++; };
+    const string = () => {
+        if (source[offset] !== '"')
+            throw invalid();
+        const start = offset++;
+        for (;;) {
+            if (offset >= source.length)
+                throw invalid();
+            const char = source[offset++];
+            if (char === "\\") {
+                offset++;
+                continue;
+            }
+            if (char !== '"')
+                continue;
+            let value;
+            // JSON.parse is used only for a string token, never for numeric data or
+            // objects. Its escape validation cannot collapse duplicate object keys.
+            try {
+                value = JSON.parse(source.slice(start, offset));
+            }
+            catch {
+                throw invalid();
+            }
+            for (let index = 0; index < value.length; index++) {
+                const unit = value.charCodeAt(index);
+                if (unit >= 0xd800 && unit <= 0xdbff) {
+                    const low = value.charCodeAt(++index);
+                    if (!(low >= 0xdc00 && low <= 0xdfff))
+                        throw invalid();
+                }
+                else if (unit >= 0xdc00 && unit <= 0xdfff)
+                    throw invalid();
+            }
+            return value;
+        }
+    };
+    const value = (depth) => {
+        if (depth > 128)
+            throw invalid();
+        space();
+        const char = source[offset];
+        if (char === '"')
+            return string();
+        if (char === "{" || char === "[") {
+            offset++;
+            space();
+            const object = char === "{", end = object ? "}" : "]";
+            const fields = new Map(), values = [];
+            if (source[offset] === end) {
+                offset++;
+                return object ? fields : values;
+            }
+            for (;;) {
+                if (object) {
+                    space();
+                    const key = string();
+                    space();
+                    if (source[offset++] !== ":" || fields.has(key))
+                        throw invalid();
+                    fields.set(key, value(depth + 1));
+                }
+                else
+                    values.push(value(depth + 1));
+                space();
+                const next = source[offset++];
+                if (next === end)
+                    return object ? fields : values;
+                if (next !== ",")
+                    throw invalid();
+            }
+        }
+        for (const [token, result] of [["true", true], ["false", false], ["null", null]]) {
+            if (source.startsWith(token, offset)) {
+                offset += token.length;
+                return result;
+            }
+        }
+        const number = /^-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?/.exec(source.slice(offset))?.[0];
+        if (!number)
+            throw invalid();
+        offset += number.length;
+        return new JsonNumber(number);
+    };
+    const parsed = value(0);
+    space();
+    if (offset !== source.length)
+        throw invalid();
+    return parsed;
+}
+export function jsonObject(value) {
+    if (!(value instanceof Map))
+        throw invalid();
+    return value;
+}
+export function jsonUint(value, bits) {
+    if (!(value instanceof JsonNumber))
+        throw invalid();
+    return value.asUint(bits);
+}
+function invalid() { return new ClientError("invalid_data"); }
+//# sourceMappingURL=json-value.js.map

package/dist/json-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-value.js","sourceRoot":"","sources":["../src/json-value.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,qFAAqF;AACrF,MAAM,OAAO,UAAU;IACZ,MAAM,CAAS;IACxB,YAAY,KAAa;QACvB,IAAI,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QAClF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,oFAAoF;IACpF,MAAM,CAAC,IAAa;QAClB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,OAAO,EAAE,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,KAAa,OAAO,kBAAkB,CAAC,CAAC,CAAC;CACpF;AAKD;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9E,OAAO,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;IAC5B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAE,CAAC;QAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,GAAW,EAAE;QAC1B,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG;YAAE,MAAM,OAAO,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC;QACvB,SAAS,CAAC;YACR,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM;gBAAE,MAAM,OAAO,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAAC,MAAM,EAAE,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC1C,IAAI,IAAI,KAAK,GAAG;gBAAE,SAAS;YAC3B,IAAI,KAAa,CAAC;YAClB,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAW,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,OAAO,EAAE,CAAC;YAAC,CAAC;YAC7F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;oBACtC,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC;wBAAE,MAAM,OAAO,EAAE,CAAC;gBACzD,CAAC;qBAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;oBAAE,MAAM,OAAO,EAAE,CAAC;YAC/D,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAa,EAAE;QACzC,IAAI,KAAK,GAAG,GAAG;YAAE,MAAM,OAAO,EAAE,CAAC;QACjC,KAAK,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,MAAM,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,MAAM,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,EAAE,MAAM,GAAgB,EAAE,CAAC;YACtE,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,MAAM,EAAE,CAAC;gBAAC,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAAC,CAAC;YAC1E,SAAS,CAAC;gBACR,IAAI,MAAM,EAAE,CAAC;oBACX,KAAK,EAAE,CAAC;oBAAC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBACvC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,MAAM,OAAO,EAAE,CAAC;oBACjE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACpC,CAAC;;oBAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACrC,KAAK,EAAE,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9B,IAAI,IAAI,KAAK,GAAG;oBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,IAAI,IAAI,KAAK,GAAG;oBAAE,MAAM,OAAO,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAU,EAAE,CAAC;YAC1F,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,GAAG,8CAA8C,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM;YAAE,MAAM,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QACxB,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC;IACR,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,MAAM,OAAO,EAAE,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA4B;IACrD,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,KAA4B,EAAE,IAAa;IAClE,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AACD,SAAS,OAAO,KAAkB,OAAO,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC"}

package/dist/legacy-request.d.ts

@@ -0,0 +1,26 @@
+import { type OutboundMessage, type Request } from "@microsandbox/protocol-client";
+import type { JsonReply } from "./json-reply.js";
+import { type SecretChange } from "./records.js";
+/** Existing JSON operation spellings, independent of the CBOR envelope. */
+export type LegacyControlRequest = {
+    op: "capabilities" | "memory_state" | "cpu_state";
+} | {
+    op: "memory_target";
+    total_mib: bigint;
+} | {
+    op: "cpu_target";
+    online: number;
+} | {
+    op: "secrets_update";
+    changes: readonly SecretChange[];
+};
+/** Prepared operations can decode either actual response representation. */
+export interface CheckedControlRequest<T> extends Request<T> {
+    jsonRequest(): LegacyControlRequest;
+    decodeJson(reply: JsonReply): T;
+}
+export declare function nativeJsonRequest(message: OutboundMessage): LegacyControlRequest;
+/** Validate and snapshot without passing a large legacy batch through CBOR. */
+export declare function snapshotChanges(value: unknown): readonly SecretChange[];
+export declare function encodeJsonRequest(request: LegacyControlRequest): Uint8Array;
+//# sourceMappingURL=legacy-request.d.ts.map

package/dist/legacy-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-request.d.ts","sourceRoot":"","sources":["../src/legacy-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,KAAK,eAAe,EAAE,KAAK,OAAO,EAAE,MAAM,+BAA+B,CAAC;AAEhG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAE9D,2EAA2E;AAC3E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,EAAE,EAAE,cAAc,GAAG,cAAc,GAAG,WAAW,CAAA;CAAE,GACrD;IAAE,EAAE,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,CAAC;AAE/D,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB,CAAC,CAAC,CAAE,SAAQ,OAAO,CAAC,CAAC,CAAC;IAC1D,WAAW,IAAI,oBAAoB,CAAC;IACpC,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,CAAC;CACjC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,oBAAoB,CAYhF;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,YAAY,EAAE,CAcvE;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,GAAG,UAAU,CAY3E"}

package/dist/legacy-request.js

@@ -0,0 +1,77 @@
+import { ClientError } from "@microsandbox/protocol-client";
+import { ControlClientError } from "./error.js";
+import { checkedUint } from "./records.js";
+export function nativeJsonRequest(message) {
+    if (message.kind !== "typed")
+        throw new ControlClientError("unsupported_mode");
+    const fields = record(message.payload);
+    switch (message.type) {
+        case "control.capabilities": return { op: "capabilities" };
+        case "control.memory.state": return { op: "memory_state" };
+        case "control.cpu.state": return { op: "cpu_state" };
+        case "control.memory.target": return { op: "memory_target", total_mib: uint(fields.total_mib, 64) };
+        case "control.cpu.target": return { op: "cpu_target", online: Number(uint(fields.online, 32)) };
+        case "control.secrets.update": return { op: "secrets_update", changes: snapshotChanges(fields.changes) };
+        default: throw new ControlClientError("unsupported_mode");
+    }
+}
+/** Validate and snapshot without passing a large legacy batch through CBOR. */
+export function snapshotChanges(value) {
+    if (!Array.isArray(value))
+        throw new ClientError("invalid_data");
+    checkedUint(value.length, 32);
+    return value.map(value => {
+        const fields = record(value), name = text(fields.name);
+        switch (fields.change) {
+            case "rotate": return { change: "rotate", name, value: text(fields.value) };
+            case "remove": return { change: "remove", name };
+            case "set_allowed_hosts":
+                if (!Array.isArray(fields.hosts))
+                    throw new ClientError("invalid_data");
+                return { change: "set_allowed_hosts", name, hosts: fields.hosts.map(text) };
+            default: throw new ClientError("invalid_data");
+        }
+    });
+}
+export function encodeJsonRequest(request) {
+    let line;
+    // Bigint memory targets are decimal JSON integer tokens, never quoted strings
+    // or rounded Numbers. Other fields are validated before JSON serialization.
+    switch (request.op) {
+        case "capabilities":
+        case "memory_state":
+        case "cpu_state":
+            line = JSON.stringify({ op: request.op });
+            break;
+        case "memory_target":
+            line = '{"op":"memory_target","total_mib":' + uint(request.total_mib, 64).toString() + "}";
+            break;
+        case "cpu_target":
+            line = JSON.stringify({ op: request.op, online: Number(uint(request.online, 32)) });
+            break;
+        case "secrets_update":
+            line = JSON.stringify({ op: request.op, changes: snapshotChanges(request.changes) });
+            break;
+        default: throw new ClientError("invalid_data");
+    }
+    return new TextEncoder().encode(line + "\n");
+}
+function record(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        throw new ClientError("invalid_data");
+    return value;
+}
+function text(value) {
+    if (typeof value !== "string")
+        throw new ClientError("invalid_data");
+    // Reject isolated surrogates instead of sending strings Rust cannot decode.
+    if (/[\uD800-\uDFFF]/u.test(value))
+        throw new ClientError("invalid_data");
+    return value;
+}
+function uint(value, bits) {
+    if (typeof value !== "number" && typeof value !== "bigint")
+        throw new ClientError("invalid_data");
+    return checkedUint(value, bits);
+}
+//# sourceMappingURL=legacy-request.js.map

package/dist/legacy-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-request.js","sourceRoot":"","sources":["../src/legacy-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAsC,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAC;AAe9D,MAAM,UAAU,iBAAiB,CAAC,OAAwB;IACxD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;QAC3D,KAAK,sBAAsB,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC;QAC3D,KAAK,mBAAmB,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACrD,KAAK,uBAAuB,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;QACpG,KAAK,oBAAoB,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QAChG,KAAK,wBAAwB,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzG,OAAO,CAAC,CAAC,MAAM,IAAI,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IACjE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5E,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACjD,KAAK,mBAAmB;gBACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;gBACxE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9E,OAAO,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA6B;IAC7D,IAAI,IAAY,CAAC;IACjB,8EAA8E;IAC9E,4EAA4E;IAC5E,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC;QACnB,KAAK,cAAc,CAAC;QAAC,KAAK,cAAc,CAAC;QAAC,KAAK,WAAW;YAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAAC,MAAM;QAC7G,KAAK,eAAe;YAAE,IAAI,GAAG,oCAAoC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC;YAAC,MAAM;QACxH,KAAK,YAAY;YAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM;QAC9G,KAAK,gBAAgB;YAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAAC,MAAM;QACnH,OAAO,CAAC,CAAC,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IAC/G,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IACrE,4EAA4E;IAC5E,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,IAAa;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IAClG,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC"}

package/dist/node.d.ts

@@ -0,0 +1,13 @@
+import type { ConnectOptions } from "@microsandbox/protocol-client";
+import { ControlClient } from "./client.js";
+import { ControlConnection } from "./connection.js";
+import { JsonControlClient } from "./json-client.js";
+export * from "./index.js";
+export { LocalConnector } from "@microsandbox/protocol-client/node";
+/** Explicit framed hello on an existing Unix socket or Windows pipe path. */
+export declare function connectFramedControl(path: string, options?: ConnectOptions): Promise<ControlClient>;
+/** Discover on the existing Unix socket or Windows pipe, then reuse that session. */
+export declare function connectControl(path: string, options?: ConnectOptions): Promise<ControlConnection>;
+/** Explicit legacy adapter; no connection is opened until an operation runs. */
+export declare function jsonControl(path: string, options?: ConnectOptions): JsonControlClient;
+//# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEpE,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAEnG;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAEjG;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,iBAAiB,CAErF"}

package/dist/node.js

@@ -0,0 +1,19 @@
+import { LocalConnector } from "@microsandbox/protocol-client/node";
+import { ControlClient } from "./client.js";
+import { ControlConnection } from "./connection.js";
+import { JsonControlClient } from "./json-client.js";
+export * from "./index.js";
+export { LocalConnector } from "@microsandbox/protocol-client/node";
+/** Explicit framed hello on an existing Unix socket or Windows pipe path. */
+export function connectFramedControl(path, options) {
+    return ControlClient.connectConnector(new LocalConnector(path), options);
+}
+/** Discover on the existing Unix socket or Windows pipe, then reuse that session. */
+export function connectControl(path, options) {
+    return ControlConnection.connectConnector(new LocalConnector(path), options);
+}
+/** Explicit legacy adapter; no connection is opened until an operation runs. */
+export function jsonControl(path, options) {
+    return JsonControlClient.fromConnector(new LocalConnector(path), options);
+}
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEpE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEpE,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAwB;IACzE,OAAO,aAAa,CAAC,gBAAgB,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAwB;IACnE,OAAO,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAwB;IAChE,OAAO,iBAAiB,CAAC,aAAa,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAC5E,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,13 @@
+import { type ByteTransport, type EstablishContext, type Established, type InboundFrame, type Protocol, type SendMetadata } from "@microsandbox/protocol-client";
+import { type ControlWelcome } from "./records.js";
+/** Setup metadata retains the original welcome envelope and all unknown fields. */
+export type ControlReady = {
+    welcome: ControlWelcome;
+    frame: InboundFrame;
+};
+/** Explicit framed setup; discovery and JSON adaptation belong outside this engine. */
+export declare class ControlProtocol implements Protocol<ControlReady> {
+    establish(transport: ByteTransport, context: EstablishContext): Promise<Established<ControlReady>>;
+    prepare(ready: ControlReady, wireName: string): SendMetadata;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAAE,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,QAAQ,EAC7F,KAAK,YAAY,EAClB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAG6B,KAAK,cAAc,EACtD,MAAM,cAAc,CAAC;AAEtB,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG;IAAE,OAAO,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAE5E,uFAAuF;AACvF,qBAAa,eAAgB,YAAW,QAAQ,CAAC,YAAY,CAAC;IACtD,SAAS,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IA2BxG,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY;CAI7D"}