@provos/ironcurtain 0.9.1 → 0.11.0

package/dist/utils/preflight-checks.js

@@ -0,0 +1,178 @@
+import { spawn } from 'node:child_process';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { getIronCurtainHome } from '../config/paths.js';
+/** Hard timeout for the child-process viability check. */
+const SANDBOX_CHECK_TIMEOUT_MS = 10_000;
+function getCacheMarkerPath() {
+    return resolve(getIronCurtainHome(), '.preflight-ok');
+}
+/**
+ * Resolves the installed `@utcp/code-mode` version by reading its
+ * `node_modules/@utcp/code-mode/package.json`. We pick the resolved version
+ * (not the semver range from the root package.json) because the cache is
+ * about ABI compatibility — the installed build is what actually runs.
+ * Returns null if the package can't be located (treated as a cache miss).
+ *
+ * Uses Node's module resolution (via createRequire) rather than cwd-based
+ * guessing so this works from any invocation directory, including global
+ * installs.
+ */
+function resolveUtcpVersion() {
+    try {
+        const pkgPath = createRequire(import.meta.url).resolve('@utcp/code-mode/package.json');
+        const pkg = JSON.parse(readFileSync(pkgPath, 'utf-8'));
+        if (typeof pkg.version === 'string')
+            return pkg.version;
+    }
+    catch {
+        // Fall through — caller treats null as "no cache, run real check".
+    }
+    return null;
+}
+function readCacheMarker() {
+    try {
+        const parsed = JSON.parse(readFileSync(getCacheMarkerPath(), 'utf-8'));
+        if (typeof parsed.nodeVersion !== 'string' || typeof parsed.utcpVersion !== 'string') {
+            return null;
+        }
+        return { nodeVersion: parsed.nodeVersion, utcpVersion: parsed.utcpVersion };
+    }
+    catch {
+        return null;
+    }
+}
+function writeCacheMarker(marker) {
+    try {
+        mkdirSync(getIronCurtainHome(), { recursive: true });
+        writeFileSync(getCacheMarkerPath(), JSON.stringify(marker), { mode: 0o600 });
+    }
+    catch {
+        // Cache writes are best-effort — failure just means we re-run next time.
+    }
+}
+/**
+ * Validates that the V8 sandbox (isolated-vm) can be initialized.
+ * We spawn a separate Node process to prevent native module crashes (like
+ * segfaults on Node 25 or ABI mismatches from stale builds) from killing
+ * the main CLI process.
+ *
+ * On success, writes a cache marker keyed on `{nodeVersion, utcpVersion}`
+ * so subsequent invocations skip the spawn (which otherwise costs hundreds
+ * of ms for the UTCP module load).
+ */
+export async function checkSandboxViability() {
+    const utcpVersion = resolveUtcpVersion();
+    if (utcpVersion) {
+        const cached = readCacheMarker();
+        if (cached && cached.nodeVersion === process.versions.node && cached.utcpVersion === utcpVersion) {
+            return { ok: true, message: 'cached' };
+        }
+    }
+    const result = await runSandboxViabilityCheck();
+    if (result.ok && utcpVersion) {
+        writeCacheMarker({ nodeVersion: process.versions.node, utcpVersion });
+    }
+    return result;
+}
+function runSandboxViabilityCheck() {
+    return new Promise((resolvePromise) => {
+        // Resolve the absolute path here so the child's cwd doesn't affect lookup —
+        // a bare `@utcp/code-mode` specifier in `node -e` is resolved against
+        // `<process.cwd()>/[eval]`, which breaks when the user invokes ironcurtain
+        // from outside the installed package tree (e.g. global installs). Convert
+        // to a file:// URL because ESM import() treats strings as URL-like, so a
+        // raw path containing `#` or `?` would be misparsed as fragment/query.
+        let utcpEntryUrl;
+        try {
+            const utcpEntry = createRequire(import.meta.url).resolve('@utcp/code-mode');
+            utcpEntryUrl = pathToFileURL(utcpEntry).href;
+        }
+        catch (err) {
+            resolvePromise({
+                ok: false,
+                message: 'Missing required dependency: @utcp/code-mode',
+                details: err instanceof Error ? err.message : String(err),
+            });
+            return;
+        }
+        const script = `
+      import(${JSON.stringify(utcpEntryUrl)})
+        .then((m) => m.CodeModeUtcpClient.create())
+        .then(() => process.exit(0))
+        .catch((e) => {
+          console.error(e.message || e);
+          process.exit(1);
+        });
+    `;
+        const child = spawn(process.execPath, ['--no-warnings', '-e', script], {
+            stdio: ['ignore', 'ignore', 'pipe'],
+            env: process.env,
+        });
+        let stderrOutput = '';
+        let settled = false;
+        const settle = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolvePromise(result);
+        };
+        const timer = setTimeout(() => {
+            // SIGKILL directly — the child is either hung in native init or stuck
+            // loading UTCP, neither of which respects SIGTERM cleanly.
+            child.kill('SIGKILL');
+            settle({
+                ok: false,
+                message: 'Sandbox viability check timed out.',
+                details: `The V8 sandbox (isolated-vm) did not initialize within ${SANDBOX_CHECK_TIMEOUT_MS}ms. ` +
+                    'This usually indicates a hung native module load. ' +
+                    'Try `npm rebuild` or `rm -rf node_modules && npm install` to rebuild dependencies.',
+            });
+        }, SANDBOX_CHECK_TIMEOUT_MS);
+        child.stderr.on('data', (chunk) => {
+            stderrOutput += typeof chunk === 'string' ? chunk : chunk.toString('utf-8');
+        });
+        child.on('close', (code, signal) => {
+            if (settled)
+                return;
+            if (code === 0 && !signal) {
+                settle({ ok: true, message: 'V8 sandbox loaded successfully.' });
+                return;
+            }
+            const stderr = stderrOutput.trim();
+            let message = 'Failed to initialize the V8 sandbox (isolated-vm).';
+            let hint;
+            if (signal) {
+                message = `V8 sandbox crashed with signal ${signal}.`;
+                if (signal === 'SIGSEGV' || signal === 'SIGILL') {
+                    hint =
+                        'This is often caused by an incompatible Node.js version (e.g., Node 25). ' +
+                            'Please use Node.js 22, 23, or 24.';
+                }
+            }
+            else if (stderr.includes('NODE_MODULE_VERSION')) {
+                message = 'Native module ABI mismatch detected.';
+                hint =
+                    'You likely changed Node.js versions without rebuilding dependencies. ' +
+                        'Run `npm rebuild` or `rm -rf node_modules && npm install` to fix this.';
+            }
+            else if (stderr.includes('Cannot find package')) {
+                message = 'Missing required dependency: @utcp/code-mode';
+                hint = 'Run `npm install` to ensure all dependencies are present.';
+            }
+            const details = [hint, stderr].filter(Boolean).join('\n') || `Process exited with code ${code}`;
+            settle({ ok: false, message, details });
+        });
+        child.on('error', (err) => {
+            settle({
+                ok: false,
+                message: 'Failed to spawn sandbox check process.',
+                details: err.message,
+            });
+        });
+    });
+}
+//# sourceMappingURL=preflight-checks.js.map

package/dist/utils/preflight-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight-checks.js","sourceRoot":"","sources":["../../src/utils/preflight-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAQxD,0DAA0D;AAC1D,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAQxC,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,kBAAkB,EAAE,EAAE,eAAe,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAyB,CAAC;QAC/E,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAyB,CAAC;QAC/F,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAmB;IAC3C,IAAI,CAAC;QACH,SAAS,CAAC,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,aAAa,CAAC,kBAAkB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,WAAW,GAAG,kBAAkB,EAAE,CAAC;IACzC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACjG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAChD,IAAI,MAAM,CAAC,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACpC,4EAA4E;QAC5E,sEAAsE;QACtE,2EAA2E;QAC3E,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC5E,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC;gBACb,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG;eACJ,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;;;;;;KAOtC,CAAC;QAEF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;YACrE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QAEH,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,MAA4B,EAAQ,EAAE;YACpD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,sEAAsE;YACtE,2DAA2D;YAC3D,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,oCAAoC;gBAC7C,OAAO,EACL,0DAA0D,wBAAwB,MAAM;oBACxF,oDAAoD;oBACpD,oFAAoF;aACvF,CAAC,CAAC;QACL,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAE7B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACjD,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,IAAI,OAAO;gBAAE,OAAO;YAEpB,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,OAAO,GAAG,oDAAoD,CAAC;YACnE,IAAI,IAAwB,CAAC;YAE7B,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,GAAG,kCAAkC,MAAM,GAAG,CAAC;gBACtD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChD,IAAI;wBACF,2EAA2E;4BAC3E,mCAAmC,CAAC;gBACxC,CAAC;YACH,CAAC;iBAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAClD,OAAO,GAAG,sCAAsC,CAAC;gBACjD,IAAI;oBACF,uEAAuE;wBACvE,wEAAwE,CAAC;YAC7E,CAAC;iBAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBAClD,OAAO,GAAG,8CAA8C,CAAC;gBACzD,IAAI,GAAG,2DAA2D,CAAC;YACrE,CAAC;YAED,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,IAAI,EAAE,CAAC;YAChG,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,wCAAwC;gBACjD,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/web-ui/__tests__/json-rpc-dispatch.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Unit tests for the dispatch() function in json-rpc-dispatch.ts.
+ *
+ * Validates Zod param parsing, DTO builders, method routing,
+ * and error code mapping without needing a running daemon.
+ */
+export {};