@microsandbox/control-client 0.7.0

package/dist/protocol.js

@@ -0,0 +1,65 @@
+import { CborEnvelopeCodec, ClientError, encodeEnvelope, encodeFrame, encodeRecord, readExactly, } from "@microsandbox/protocol-client";
+import { CONTROL_GENERATION, CONTROL_PROTOCOL, DEFAULT_MAX_IN_FLIGHT, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_SETUP_TIMEOUT_MS, MAX_HANDSHAKE_FRAME_SIZE, decodeControlError, decodeWelcome, validateHello, } from "./records.js";
+/** Explicit framed setup; discovery and JSON adaptation belong outside this engine. */
+export class ControlProtocol {
+    async establish(transport, context) {
+        const hello = {
+            protocol: CONTROL_PROTOCOL, min_generation: CONTROL_GENERATION, max_generation: CONTROL_GENERATION,
+            max_frame_size: context.limits.maxFrameSize,
+            max_in_flight: Math.min(context.limits.maxInFlight, DEFAULT_MAX_IN_FLIGHT),
+        };
+        try {
+            validateHello(hello);
+        }
+        catch {
+            throw new ClientError("invalid_options");
+        }
+        await transport.write(encodeFrame({ id: 0, flags: 0, body: encodeEnvelope({
+                v: CONTROL_GENERATION, t: "control.hello", p: encodeRecord(hello),
+            }) }));
+        const prefix = await readExactly(transport, 4, context.signal);
+        const length = new DataView(prefix.buffer, prefix.byteOffset, prefix.byteLength).getUint32(0);
+        // Reject hostile opening lengths before allocating or waiting for the body.
+        if (length < 5 || length > MAX_HANDSHAKE_FRAME_SIZE)
+            throw new ClientError("invalid_data");
+        const header = await readExactly(transport, 5, context.signal);
+        const body = await readExactly(transport, length - 5, context.signal);
+        const codec = new CborEnvelopeCodec();
+        const { frame, welcome } = decodeOpening(codec, { id: new DataView(header.buffer).getUint32(0), flags: header[4], body }, hello);
+        return {
+            transport, codec, ids: { start: 1, endExclusive: 0x100000000 }, ready: { welcome, frame },
+            limits: {
+                ...context.limits, maxFrameSize: welcome.max_frame_size, maxInFlight: welcome.max_in_flight,
+                incompleteFrameTimeoutMs: context.limits.incompleteFrameTimeoutMs ?? DEFAULT_SETUP_TIMEOUT_MS,
+                requestTimeoutMs: context.limits.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS,
+            },
+        };
+    }
+    prepare(ready, wireName) {
+        if (wireName === "control.hello" || wireName === "control.welcome")
+            throw new ClientError("unsupported_operation");
+        return { generation: ready.welcome.generation, flags: 0 };
+    }
+}
+function decodeOpening(codec, raw, hello) {
+    try {
+        const frame = codec.decode(raw);
+        if (frame.id !== 0 || frame.flags !== 1 || frame.protocolVersion !== CONTROL_GENERATION)
+            throw new ClientError("invalid_data");
+        if (frame.type === "control.error") {
+            const refusal = decodeControlError(frame.payload);
+            throw new ClientError(refusal.code === "unsupported_generation" ? "unsupported_operation" : "invalid_data");
+        }
+        if (frame.type !== "control.welcome")
+            throw new ClientError("invalid_data");
+        return { frame, welcome: decodeWelcome(frame.payload, hello) };
+    }
+    catch (error) {
+        // Decoder failures describe peer data, not socket I/O. Keep diagnostics
+        // sanitized and preserve an explicit unsupported-generation refusal.
+        if (error instanceof ClientError)
+            throw error;
+        throw new ClientError("invalid_data");
+    }
+}
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,GAGvF,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,kBAAkB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,0BAA0B,EACvF,wBAAwB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,aAAa,EACrF,aAAa,GACd,MAAM,cAAc,CAAC;AAKtB,uFAAuF;AACvF,MAAM,OAAO,eAAe;IAC1B,KAAK,CAAC,SAAS,CAAC,SAAwB,EAAE,OAAyB;QACjE,MAAM,KAAK,GAAiB;YAC1B,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB;YAClG,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY;YAC3C,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC;SAC3E,CAAC;QACF,IAAI,CAAC;YAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;QACjF,MAAM,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC;gBACxE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC;aAClE,CAAC,EAAE,CAAC,CAAC,CAAC;QACP,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9F,4EAA4E;QAC5E,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,wBAAwB;YAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAClI,OAAO;YACL,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACzF,MAAM,EAAE;gBACN,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,aAAa;gBAC3F,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,wBAAwB,IAAI,wBAAwB;gBAC7F,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,IAAI,0BAA0B;aAChF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,KAAmB,EAAE,QAAgB;QAC3C,IAAI,QAAQ,KAAK,eAAe,IAAI,QAAQ,KAAK,iBAAiB;YAAE,MAAM,IAAI,WAAW,CAAC,uBAAuB,CAAC,CAAC;QACnH,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC5D,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAwB,EAAE,GAAa,EAAE,KAAmB;IACjF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,kBAAkB;YAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QAC/H,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC9G,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAAE,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/records.d.ts

@@ -0,0 +1,100 @@
+export declare const CONTROL_GENERATION = 1;
+export declare const CONTROL_PROTOCOL = "msb.control";
+export declare const MAX_HANDSHAKE_FRAME_SIZE = 4096;
+export declare const DEFAULT_MAX_IN_FLIGHT = 64;
+export declare const DEFAULT_SETUP_TIMEOUT_MS = 10000;
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 30000;
+export type ControlHello = {
+    protocol: string;
+    min_generation: number;
+    max_generation: number;
+    max_frame_size: number;
+    max_in_flight: number;
+};
+export type ControlWelcome = {
+    protocol: string;
+    generation: number;
+    max_frame_size: number;
+    max_in_flight: number;
+};
+export type Capabilities = {
+    root_disk_grow?: boolean;
+    cpu_resize: boolean;
+    memory_resize: boolean;
+    secrets_update: boolean;
+};
+/** Every memory observation is bigint, including zero and small values. */
+export type MemoryState = {
+    boot_mib: bigint;
+    target_mib: bigint;
+    current_mib: bigint;
+    max_mib: bigint;
+};
+export type MemoryTarget = {
+    total_mib: bigint;
+};
+export type CpuState = {
+    possible: number;
+    requested_online: number;
+    actual_online: number;
+    enforced: number;
+};
+export type CpuTarget = {
+    online: number;
+};
+export type SecretChange = {
+    change: "rotate";
+    name: string;
+    value: string;
+} | {
+    change: "remove";
+    name: string;
+} | {
+    change: "set_allowed_hosts";
+    name: string;
+    hosts: readonly string[];
+};
+export type SecretsUpdate = {
+    changes: readonly SecretChange[];
+};
+export type ErrorEffect = "none" | "unknown";
+export type ControlError = {
+    code: string;
+    message: string;
+    effect: ErrorEffect;
+};
+export type SecretsResult = {
+    outcome: "complete";
+    applied_count: number;
+} | {
+    outcome: "failed";
+    applied_count: number;
+    failed_index: number;
+    error: ControlError;
+};
+/** Names are a convenience; open native/encoded message names remain supported. */
+export declare const ControlMessageType: {
+    readonly Hello: "control.hello";
+    readonly Welcome: "control.welcome";
+    readonly Capabilities: "control.capabilities";
+    readonly CapabilitiesResult: "control.capabilities.result";
+    readonly MemoryState: "control.memory.state";
+    readonly MemoryTarget: "control.memory.target";
+    readonly CpuState: "control.cpu.state";
+    readonly CpuTarget: "control.cpu.target";
+    readonly SecretsUpdate: "control.secrets.update";
+    readonly SecretsResult: "control.secrets.result";
+    readonly Error: "control.error";
+};
+/** Validate native quantities before conversion or encoding; never silently round. */
+export declare function checkedUint(value: number | bigint, bits: 8 | 32 | 64): bigint;
+export declare function validateHello(hello: ControlHello): void;
+export declare function decodeHello(bytes: Uint8Array): ControlHello;
+export declare function decodeWelcome(bytes: Uint8Array, hello?: ControlHello): ControlWelcome;
+export declare function decodeCapabilities(bytes: Uint8Array): Capabilities;
+export declare function decodeMemoryState(bytes: Uint8Array): MemoryState;
+export declare function decodeCpuState(bytes: Uint8Array): CpuState;
+export declare function decodeControlError(bytes: Uint8Array): ControlError;
+export declare function decodeSecretsResult(bytes: Uint8Array): SecretsResult;
+export declare function decodeSecretsUpdate(bytes: Uint8Array): SecretsUpdate;
+//# sourceMappingURL=records.d.ts.map

package/dist/records.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.d.ts","sourceRoot":"","sources":["../src/records.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IACjE,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;CAC/C,CAAC;AACF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;CACrF,CAAC;AACF,MAAM,MAAM,YAAY,GAAG;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAAC;AAC9H,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACzG,MAAM,MAAM,YAAY,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AACjD,MAAM,MAAM,QAAQ,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAC/G,MAAM,MAAM,SAAS,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAC3C,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAC5E,MAAM,MAAM,aAAa,GAAG;IAAE,OAAO,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,CAAC;AACjE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;AAC7C,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAClF,MAAM,MAAM,aAAa,GACrB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAE5F,mFAAmF;AACnF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;CAKrB,CAAC;AAMX,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAK7E;AAOD,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAIvD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAS3D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,cAAc,CAWrF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAGlE;AACD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,CAMhE;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,CAG1D;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CAKlE;AACD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,aAAa,CAQpE;AACD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,aAAa,CAYpE"}

package/dist/records.js

@@ -0,0 +1,110 @@
+import { MAX_FRAME_SIZE, WireError, readArray, readBool, readRecord, readText, readUint, required, } from "@microsandbox/protocol-client";
+export const CONTROL_GENERATION = 1;
+export const CONTROL_PROTOCOL = "msb.control";
+export const MAX_HANDSHAKE_FRAME_SIZE = 4096;
+export const DEFAULT_MAX_IN_FLIGHT = 64;
+export const DEFAULT_SETUP_TIMEOUT_MS = 10_000;
+export const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
+/** Names are a convenience; open native/encoded message names remain supported. */
+export const ControlMessageType = {
+    Hello: "control.hello", Welcome: "control.welcome", Capabilities: "control.capabilities",
+    CapabilitiesResult: "control.capabilities.result", MemoryState: "control.memory.state",
+    MemoryTarget: "control.memory.target", CpuState: "control.cpu.state", CpuTarget: "control.cpu.target",
+    SecretsUpdate: "control.secrets.update", SecretsResult: "control.secrets.result", Error: "control.error",
+};
+const uint = (fields, name, bits = 32) => Number(readUint(required(fields, name), bits));
+const text = (fields, name) => readText(required(fields, name));
+/** Validate native quantities before conversion or encoding; never silently round. */
+export function checkedUint(value, bits) {
+    if (typeof value !== "bigint" && (typeof value !== "number" || !Number.isSafeInteger(value)))
+        throw new WireError("invalid_record");
+    const integer = BigInt(value);
+    if (integer < 0n || integer >= (1n << BigInt(bits)))
+        throw new WireError("invalid_record");
+    return integer;
+}
+function validateLimits(frame, inFlight) {
+    checkedUint(frame, 32);
+    checkedUint(inFlight, 32);
+    if (frame < MAX_HANDSHAKE_FRAME_SIZE || frame > MAX_FRAME_SIZE || inFlight < 1)
+        throw new WireError("invalid_record");
+}
+export function validateHello(hello) {
+    checkedUint(hello.min_generation, 8);
+    checkedUint(hello.max_generation, 8);
+    validateLimits(hello.max_frame_size, hello.max_in_flight);
+    if (hello.protocol !== CONTROL_PROTOCOL || hello.min_generation < 1 || hello.min_generation > hello.max_generation)
+        throw new WireError("invalid_record");
+}
+export function decodeHello(bytes) {
+    const fields = readRecord(bytes);
+    const hello = {
+        protocol: text(fields, "protocol"), min_generation: uint(fields, "min_generation", 8),
+        max_generation: uint(fields, "max_generation", 8), max_frame_size: uint(fields, "max_frame_size"),
+        max_in_flight: uint(fields, "max_in_flight"),
+    };
+    validateHello(hello);
+    return hello;
+}
+export function decodeWelcome(bytes, hello) {
+    const fields = readRecord(bytes);
+    const welcome = {
+        protocol: text(fields, "protocol"), generation: uint(fields, "generation", 8),
+        max_frame_size: uint(fields, "max_frame_size"), max_in_flight: uint(fields, "max_in_flight"),
+    };
+    validateLimits(welcome.max_frame_size, welcome.max_in_flight);
+    if (welcome.protocol !== CONTROL_PROTOCOL || welcome.generation < 1)
+        throw new WireError("invalid_record");
+    if (hello && (welcome.generation < hello.min_generation || welcome.generation > hello.max_generation
+        || welcome.max_frame_size > hello.max_frame_size || welcome.max_in_flight > hello.max_in_flight))
+        throw new WireError("invalid_record");
+    return welcome;
+}
+export function decodeCapabilities(bytes) {
+    const fields = readRecord(bytes);
+    return { ...(fields.has("root_disk_grow") ? { root_disk_grow: readBool(required(fields, "root_disk_grow")) } : {}), cpu_resize: readBool(required(fields, "cpu_resize")), memory_resize: readBool(required(fields, "memory_resize")), secrets_update: readBool(required(fields, "secrets_update")) };
+}
+export function decodeMemoryState(bytes) {
+    const fields = readRecord(bytes);
+    return {
+        boot_mib: readUint(required(fields, "boot_mib"), 64), target_mib: readUint(required(fields, "target_mib"), 64),
+        current_mib: readUint(required(fields, "current_mib"), 64), max_mib: readUint(required(fields, "max_mib"), 64),
+    };
+}
+export function decodeCpuState(bytes) {
+    const fields = readRecord(bytes);
+    return { possible: uint(fields, "possible"), requested_online: uint(fields, "requested_online"), actual_online: uint(fields, "actual_online"), enforced: uint(fields, "enforced") };
+}
+export function decodeControlError(bytes) {
+    const fields = readRecord(bytes);
+    const effect = text(fields, "effect");
+    if (effect !== "none" && effect !== "unknown")
+        throw new WireError("invalid_record");
+    return { code: text(fields, "code"), message: text(fields, "message"), effect };
+}
+export function decodeSecretsResult(bytes) {
+    const fields = readRecord(bytes), outcome = text(fields, "outcome"), applied_count = uint(fields, "applied_count");
+    if (outcome === "complete")
+        return { outcome, applied_count };
+    if (outcome !== "failed")
+        throw new WireError("invalid_record");
+    const failed_index = uint(fields, "failed_index");
+    if (failed_index !== applied_count)
+        throw new WireError("invalid_record");
+    // Check the actual nested record before a library decoder can collapse keys.
+    return { outcome, applied_count, failed_index, error: decodeControlError(required(fields, "error")) };
+}
+export function decodeSecretsUpdate(bytes) {
+    const fields = readRecord(bytes);
+    const changes = readArray(required(fields, "changes")).map(bytes => {
+        const entry = readRecord(bytes), change = text(entry, "change"), name = text(entry, "name");
+        switch (change) {
+            case "rotate": return { change, name, value: text(entry, "value") };
+            case "remove": return { change, name };
+            case "set_allowed_hosts": return { change, name, hosts: readArray(required(entry, "hosts")).map(readText) };
+            default: throw new WireError("invalid_record");
+        }
+    });
+    return { changes };
+}
+//# sourceMappingURL=records.js.map

package/dist/records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"records.js","sourceRoot":"","sources":["../src/records.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GACzF,MAAM,+BAA+B,CAAC;AAEvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AA0BjD,mFAAmF;AACnF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,sBAAsB;IACxF,kBAAkB,EAAE,6BAA6B,EAAE,WAAW,EAAE,sBAAsB;IACtF,YAAY,EAAE,uBAAuB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,EAAE,oBAAoB;IACrG,aAAa,EAAE,wBAAwB,EAAE,aAAa,EAAE,wBAAwB,EAAE,KAAK,EAAE,eAAe;CAChG,CAAC;AAGX,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,EAAU,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACzH,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAY,EAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAExF,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,KAAsB,EAAE,IAAiB;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACpI,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,EAAE,IAAI,OAAO,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC3F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,QAAgB;IACrD,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,GAAG,wBAAwB,IAAI,KAAK,GAAG,cAAc,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;AACxH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAAC,WAAW,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAC3E,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAC5J,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACrF,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;QACjG,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;KAC7C,CAAC;IACF,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,KAAoB;IACnE,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7E,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;KAC7F,CAAC;IACF,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC3G,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,cAAc;WAC7F,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC5I,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;AACvS,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;QAC9G,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;KAC/G,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;AACtL,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACrF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;AAClF,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACnH,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAC9D,IAAI,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClD,IAAI,YAAY,KAAK,aAAa;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC1E,6EAA6E;IAC7E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;AACxG,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACjE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5F,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpE,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACvC,KAAK,mBAAmB,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5G,OAAO,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC"}

package/dist/request.d.ts

@@ -0,0 +1,50 @@
+import { type EncodedMessage, type InboundFrame } from "@microsandbox/protocol-client";
+import type { Mebibytes } from "@microsandbox/types/size";
+import { type JsonReply } from "./json-reply.js";
+import { type CheckedControlRequest, type LegacyControlRequest } from "./legacy-request.js";
+import { type Capabilities, type CpuState, type MemoryState, type SecretChange, type SecretsResult } from "./records.js";
+/** Optional checked helpers only prepare records and decode replies; no SDK policy. */
+export declare class GetCapabilities implements CheckedControlRequest<Capabilities> {
+    message(): EncodedMessage;
+    decode(frame: InboundFrame): Capabilities;
+    jsonRequest(): LegacyControlRequest;
+    decodeJson(reply: JsonReply): Capabilities;
+}
+export declare class GetMemoryState implements CheckedControlRequest<MemoryState> {
+    message(): EncodedMessage;
+    decode(frame: InboundFrame): MemoryState;
+    jsonRequest(): LegacyControlRequest;
+    decodeJson(reply: JsonReply): MemoryState;
+}
+export declare class SetMemoryTarget implements CheckedControlRequest<MemoryState> {
+    readonly total_mib: bigint;
+    /** Reuse SDK units; bigint also accepts a full-width wire quantity directly. */
+    constructor(size: Mebibytes | bigint);
+    message(): EncodedMessage;
+    decode(frame: InboundFrame): MemoryState;
+    jsonRequest(): LegacyControlRequest;
+    decodeJson(reply: JsonReply): MemoryState;
+}
+export declare class GetCpuState implements CheckedControlRequest<CpuState> {
+    message(): EncodedMessage;
+    decode(frame: InboundFrame): CpuState;
+    jsonRequest(): LegacyControlRequest;
+    decodeJson(reply: JsonReply): CpuState;
+}
+export declare class SetCpuTarget implements CheckedControlRequest<CpuState> {
+    readonly online: number;
+    constructor(online: number);
+    message(): EncodedMessage;
+    decode(frame: InboundFrame): CpuState;
+    jsonRequest(): LegacyControlRequest;
+    decodeJson(reply: JsonReply): CpuState;
+}
+export declare class UpdateSecrets implements CheckedControlRequest<SecretsResult> {
+    #private;
+    constructor(changes: readonly SecretChange[]);
+    message(): EncodedMessage;
+    jsonRequest(): LegacyControlRequest;
+    decodeJson(reply: JsonReply): SecretsResult;
+    decode(frame: InboundFrame): SecretsResult;
+}
+//# sourceMappingURL=request.d.ts.map

package/dist/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAChI,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAyC,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAmB,KAAK,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC7G,OAAO,EAGL,KAAK,YAAY,EAAE,KAAK,QAAQ,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAC1F,MAAM,cAAc,CAAC;AActB,uFAAuF;AACvF,qBAAa,eAAgB,YAAW,qBAAqB,CAAC,YAAY,CAAC;IACzE,OAAO,IAAI,cAAc;IACzB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY;IACzC,WAAW,IAAI,oBAAoB;IACnC,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY;CAC3C;AACD,qBAAa,cAAe,YAAW,qBAAqB,CAAC,WAAW,CAAC;IACvE,OAAO,IAAI,cAAc;IACzB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW;IACxC,WAAW,IAAI,oBAAoB;IACnC,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW;CAC1C;AACD,qBAAa,eAAgB,YAAW,qBAAqB,CAAC,WAAW,CAAC;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gFAAgF;gBACpE,IAAI,EAAE,SAAS,GAAG,MAAM;IACpC,OAAO,IAAI,cAAc;IACzB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW;IACxC,WAAW,IAAI,oBAAoB;IACnC,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW;CAC1C;AACD,qBAAa,WAAY,YAAW,qBAAqB,CAAC,QAAQ,CAAC;IACjE,OAAO,IAAI,cAAc;IACzB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,QAAQ;IACrC,WAAW,IAAI,oBAAoB;IACnC,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ;CACvC;AACD,qBAAa,YAAa,YAAW,qBAAqB,CAAC,QAAQ,CAAC;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,MAAM,EAAE,MAAM;IAC1B,OAAO,IAAI,cAAc;IACzB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,QAAQ;IACrC,WAAW,IAAI,oBAAoB;IACnC,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ;CACvC;AACD,qBAAa,aAAc,YAAW,qBAAqB,CAAC,aAAa,CAAC;;gBAE5D,OAAO,EAAE,SAAS,YAAY,EAAE;IAK5C,OAAO,IAAI,cAAc;IACzB,WAAW,IAAI,oBAAoB;IACnC,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,aAAa;IAG3C,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa;CAO3C"}

package/dist/request.js

@@ -0,0 +1,86 @@
+import { encodedMessage, encodeRecord, WireError } from "@microsandbox/protocol-client";
+import { ControlClientError } from "./error.js";
+import { jsonCapabilities, jsonCpu, jsonMemory } from "./json-reply.js";
+import { snapshotChanges } from "./legacy-request.js";
+import { CONTROL_GENERATION, checkedUint, decodeCapabilities, decodeControlError, decodeCpuState, decodeMemoryState, decodeSecretsResult, } from "./records.js";
+function checked(frame, name, decode) {
+    const invalid = () => new ControlClientError("invalid_response", frame);
+    if (frame.protocolVersion !== CONTROL_GENERATION || frame.id === 0 || frame.flags !== 1)
+        throw invalid();
+    if (frame.type === "control.error") {
+        let error;
+        try {
+            error = decodeControlError(frame.payload);
+        }
+        catch {
+            throw invalid();
+        }
+        throw new ControlClientError("peer", frame, error);
+    }
+    if (frame.type !== name)
+        throw invalid();
+    try {
+        return decode(frame.payload);
+    }
+    catch {
+        throw invalid();
+    }
+}
+/** Optional checked helpers only prepare records and decode replies; no SDK policy. */
+export class GetCapabilities {
+    message() { return encodedMessage("control.capabilities", encodeRecord({})); }
+    decode(frame) { return checked(frame, "control.capabilities.result", decodeCapabilities); }
+    jsonRequest() { return { op: "capabilities" }; }
+    decodeJson(reply) { return reply.checked(value => jsonCapabilities(value.get("capabilities"))); }
+}
+export class GetMemoryState {
+    message() { return encodedMessage("control.memory.state", encodeRecord({})); }
+    decode(frame) { return checked(frame, "control.memory.state", decodeMemoryState); }
+    jsonRequest() { return { op: "memory_state" }; }
+    decodeJson(reply) { return reply.checked(value => jsonMemory(value.get("memory"))); }
+}
+export class SetMemoryTarget {
+    total_mib;
+    /** Reuse SDK units; bigint also accepts a full-width wire quantity directly. */
+    constructor(size) { this.total_mib = checkedUint(size, 64); }
+    message() { return encodedMessage("control.memory.target", encodeRecord({ total_mib: this.total_mib })); }
+    decode(frame) { return checked(frame, "control.memory.state", decodeMemoryState); }
+    jsonRequest() { return { op: "memory_target", total_mib: this.total_mib }; }
+    decodeJson(reply) { return new GetMemoryState().decodeJson(reply); }
+}
+export class GetCpuState {
+    message() { return encodedMessage("control.cpu.state", encodeRecord({})); }
+    decode(frame) { return checked(frame, "control.cpu.state", decodeCpuState); }
+    jsonRequest() { return { op: "cpu_state" }; }
+    decodeJson(reply) { return reply.checked(value => jsonCpu(value.get("cpu"))); }
+}
+export class SetCpuTarget {
+    online;
+    constructor(online) { this.online = Number(checkedUint(online, 32)); }
+    message() { return encodedMessage("control.cpu.target", encodeRecord({ online: this.online })); }
+    decode(frame) { return checked(frame, "control.cpu.state", decodeCpuState); }
+    jsonRequest() { return { op: "cpu_target", online: this.online }; }
+    decodeJson(reply) { return new GetCpuState().decodeJson(reply); }
+}
+export class UpdateSecrets {
+    #changes;
+    constructor(changes) {
+        // Snapshot the prepared batch so caller mutation cannot change the sent
+        // entries or invalidate interpretation of partial progress after admission.
+        this.#changes = snapshotChanges(changes);
+    }
+    message() { return encodedMessage("control.secrets.update", encodeRecord({ changes: this.#changes })); }
+    jsonRequest() { return { op: "secrets_update", changes: snapshotChanges(this.#changes) }; }
+    decodeJson(reply) {
+        return reply.checked(() => ({ outcome: "complete", applied_count: this.#changes.length }));
+    }
+    decode(frame) {
+        return checked(frame, "control.secrets.result", bytes => {
+            const result = decodeSecretsResult(bytes);
+            if (result.outcome === "complete" ? result.applied_count !== this.#changes.length : result.failed_index >= this.#changes.length)
+                throw new WireError("invalid_record");
+            return result;
+        });
+    }
+}
+//# sourceMappingURL=request.js.map

package/dist/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sourceRoot":"","sources":["../src/request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAA0C,MAAM,+BAA+B,CAAC;AAEhI,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAkB,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,eAAe,EAAyD,MAAM,qBAAqB,CAAC;AAC7G,OAAO,EACL,kBAAkB,EAAE,WAAW,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,cAAc,EACvF,iBAAiB,EAAE,mBAAmB,GAEvC,MAAM,cAAc,CAAC;AAEtB,SAAS,OAAO,CAAI,KAAmB,EAAE,IAAY,EAAE,MAAgC;IACrF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,eAAe,KAAK,kBAAkB,IAAI,KAAK,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACzG,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;QAAC,CAAC;QAC7E,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,OAAO,EAAE,CAAC;IACzC,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;AAClE,CAAC;AAED,uFAAuF;AACvF,MAAM,OAAO,eAAe;IAC1B,OAAO,KAAqB,OAAO,cAAc,CAAC,sBAAsB,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,KAAmB,IAAkB,OAAO,OAAO,CAAC,KAAK,EAAE,6BAA6B,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IACvH,WAAW,KAA2B,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACtE,UAAU,CAAC,KAAgB,IAAkB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3H;AACD,MAAM,OAAO,cAAc;IACzB,OAAO,KAAqB,OAAO,cAAc,CAAC,sBAAsB,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,KAAmB,IAAiB,OAAO,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC9G,WAAW,KAA2B,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IACtE,UAAU,CAAC,KAAgB,IAAiB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAC9G;AACD,MAAM,OAAO,eAAe;IACjB,SAAS,CAAS;IAC3B,gFAAgF;IAChF,YAAY,IAAwB,IAAI,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,KAAqB,OAAO,cAAc,CAAC,uBAAuB,EAAE,YAAY,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,CAAC,KAAmB,IAAiB,OAAO,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAC9G,WAAW,KAA2B,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAClG,UAAU,CAAC,KAAgB,IAAiB,OAAO,IAAI,cAAc,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CAC7F;AACD,MAAM,OAAO,WAAW;IACtB,OAAO,KAAqB,OAAO,cAAc,CAAC,mBAAmB,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,CAAC,KAAmB,IAAc,OAAO,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACrG,WAAW,KAA2B,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACnE,UAAU,CAAC,KAAgB,IAAc,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CACrG;AACD,MAAM,OAAO,YAAY;IACd,MAAM,CAAS;IACxB,YAAY,MAAc,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,KAAqB,OAAO,cAAc,CAAC,oBAAoB,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM,CAAC,KAAmB,IAAc,OAAO,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACrG,WAAW,KAA2B,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzF,UAAU,CAAC,KAAgB,IAAc,OAAO,IAAI,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CACvF;AACD,MAAM,OAAO,aAAa;IACf,QAAQ,CAA0B;IAC3C,YAAY,OAAgC;QAC1C,wEAAwE;QACxE,4EAA4E;QAC5E,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAqB,OAAO,cAAc,CAAC,wBAAwB,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,WAAW,KAA2B,OAAO,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,UAAU,CAAC,KAAgB;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,CAAC,KAAmB;QACxB,OAAO,OAAO,CAAC,KAAK,EAAE,wBAAwB,EAAE,KAAK,CAAC,EAAE;YACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACvK,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "@microsandbox/control-client",
+  "version": "0.7.0",
+  "type": "module",
+  "license": "Apache-2.0",
+  "engines": { "node": ">=22" },
+  "exports": {
+    ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
+    "./node": { "types": "./dist/node.d.ts", "import": "./dist/node.js" }
+  },
+  "files": ["dist", "README.md"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.test.json",
+    "test": "vitest run tests --no-file-parallelism"
+  },
+  "dependencies": {
+    "@microsandbox/protocol-client": "0.7.0",
+    "@microsandbox/types": "0.7.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.5.2",
+    "typescript": "^5.6",
+    "vitest": "^4.1"
+  }
+}