@secure-exec/core 0.0.0-main.bccb3a2

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+export * from "./binary.js";
+export * from "./bytes.js";
+export * from "./callbacks.js";
+export * from "./correlation.js";
+export * from "./descriptors.js";
+export * from "./ext.js";
+export * from "./frame-payload-codec.js";
+export * from "./frame-rpc.js";
+export * from "./frame-stream.js";
+export * from "./filesystem.js";
+export * from "./framing.js";
+export * from "./json.js";
+export * from "./native-client.js";
+export * from "./node-runtime.js";
+export * from "./numbers.js";
+export * from "./permissions.js";
+export * from "./process.js";
+export * from "./protocol-client.js";
+export * from "./protocol-frames.js";
+export * from "./request-payloads.js";
+export * from "./response-payloads.js";
+export { Sidecar } from "./sidecar-client.js";
+export type { SidecarSpawnOptions } from "./sidecar-client.js";
+export * from "./state.js";
+export * as protocol from "./generated-protocol.js";
+export * from "./generated-protocol.js";

package/dist/index.js

@@ -0,0 +1,25 @@
+export * from "./binary.js";
+export * from "./bytes.js";
+export * from "./callbacks.js";
+export * from "./correlation.js";
+export * from "./descriptors.js";
+export * from "./ext.js";
+export * from "./frame-payload-codec.js";
+export * from "./frame-rpc.js";
+export * from "./frame-stream.js";
+export * from "./filesystem.js";
+export * from "./framing.js";
+export * from "./json.js";
+export * from "./native-client.js";
+export * from "./node-runtime.js";
+export * from "./numbers.js";
+export * from "./permissions.js";
+export * from "./process.js";
+export * from "./protocol-client.js";
+export * from "./protocol-frames.js";
+export * from "./request-payloads.js";
+export * from "./response-payloads.js";
+export { Sidecar } from "./sidecar-client.js";
+export * from "./state.js";
+export * as protocol from "./generated-protocol.js";
+export * from "./generated-protocol.js";

package/dist/json.d.ts

@@ -0,0 +1,2 @@
+export declare function stringifyJsonUtf8(value: unknown, context: string): string;
+export declare function parseJsonUtf8(value: string, context: string): unknown;

package/dist/json.js

@@ -0,0 +1,20 @@
+export function stringifyJsonUtf8(value, context) {
+    try {
+        const encoded = JSON.stringify(value);
+        if (encoded === undefined) {
+            throw new Error(`${context} must be JSON-serializable`);
+        }
+        return encoded;
+    }
+    catch (error) {
+        throw new Error(`${context} must be JSON-serializable: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+export function parseJsonUtf8(value, context) {
+    try {
+        return JSON.parse(value);
+    }
+    catch (error) {
+        throw new Error(`invalid ${context} JSON payload: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}

package/dist/kernel-proxy.d.ts

@@ -0,0 +1,151 @@
+import type { NativeMountPluginDescriptor } from "./descriptors.js";
+import type { ConnectTerminalOptions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "./test-runtime.js";
+import type { AuthenticatedSession, CreatedVm, Sidecar, SidecarMountDescriptor, SidecarSignalHandlerRegistration } from "./sidecar-client.js";
+export interface PlainMountConfig {
+    path: string;
+    driver: VirtualFileSystem;
+    readOnly?: boolean;
+}
+export interface NativeMountConfig {
+    path: string;
+    plugin: NativeMountPluginDescriptor;
+    readOnly?: boolean;
+}
+export declare function serializeMountConfigForSidecar(mount: PlainMountConfig | NativeMountConfig): SidecarMountDescriptor;
+export declare function toSidecarSignalName(signal: number): string;
+export interface LocalCompatMount {
+    path: string;
+    fs: VirtualFileSystem;
+    readOnly: boolean;
+}
+interface KernelSocketSnapshot {
+    processId: string;
+    host?: string;
+    port?: number;
+    path?: string;
+}
+interface KernelSignalState {
+    handlers: Map<number, {
+        action: SidecarSignalHandlerRegistration["action"];
+        mask: Set<number>;
+        flags: number;
+    }>;
+}
+interface NativeSidecarKernelProxyOptions {
+    client: Sidecar;
+    session: AuthenticatedSession;
+    vm: CreatedVm;
+    disposeClient?: boolean;
+    env: Record<string, string>;
+    cwd: string;
+    defaultExecCwd?: string;
+    localMounts: LocalCompatMount[];
+    commandGuestPaths: ReadonlyMap<string, string>;
+    onWasmCommandResolved?: (command: string) => void;
+    onDispose?: () => Promise<void>;
+}
+export declare class NativeSidecarKernelProxy {
+    readonly env: Record<string, string>;
+    readonly cwd: string;
+    readonly commands: ReadonlyMap<string, string>;
+    readonly vfs: VirtualFileSystem;
+    readonly processes: Map<number, ProcessInfo>;
+    private readonly defaultExecCwd;
+    private readonly client;
+    private readonly disposeClient;
+    private readonly session;
+    private readonly vm;
+    private readonly localMounts;
+    private readonly commandDrivers;
+    private readonly onWasmCommandResolved;
+    private readonly onDispose;
+    private readonly trackedProcesses;
+    private readonly trackedProcessesById;
+    private readonly listenerLookups;
+    private readonly boundUdpLookups;
+    private readonly signalStates;
+    private readonly signalRefreshes;
+    private sidecarProcessSnapshot;
+    private processSnapshotRefresh;
+    private readonly observedProcessStartTimes;
+    private readonly rootView;
+    private zombieTimerCountValue;
+    private zombieTimerCountRefresh;
+    private disposed;
+    private pumpError;
+    private nextSyntheticPid;
+    private readonly eventPumpAbortController;
+    private readonly eventPump;
+    constructor(options: NativeSidecarKernelProxyOptions);
+    createRootView(): VirtualFileSystem;
+    get zombieTimerCount(): number;
+    registerCommandGuestPaths(commandGuestPaths: ReadonlyMap<string, string>): void;
+    dispose(): Promise<void>;
+    exec(command: string, options?: KernelExecOptions): Promise<KernelExecResult>;
+    spawn(command: string, args: string[], options?: KernelSpawnOptions): ManagedProcess;
+    openShell(options?: OpenShellOptions): ShellHandle;
+    connectTerminal(options?: ConnectTerminalOptions): Promise<number>;
+    readFile(path: string): Promise<Uint8Array>;
+    writeFile(path: string, content: string | Uint8Array): Promise<void>;
+    mkdir(path: string, recursive?: boolean): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<VirtualStat>;
+    readdir(path: string): Promise<string[]>;
+    removeFile(path: string): Promise<void>;
+    removeDir(path: string): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+    mountFs(path: string, driver: VirtualFileSystem, options?: {
+        readOnly?: boolean;
+    }): void;
+    unmountFs(path: string): void;
+    snapshotProcesses(): ProcessInfo[];
+    findListener(request: {
+        host?: string;
+        port?: number;
+        path?: string;
+    }): KernelSocketSnapshot | null;
+    findBoundUdp(request: {
+        host?: string;
+        port?: number;
+    }): KernelSocketSnapshot | null;
+    /**
+     * Drive an HTTP request to a guest-bound TCP port inside the VM and return
+     * the raw JSON response payload from the sidecar. The caller decodes the
+     * JSON into a structured response.
+     */
+    vmFetch(request: {
+        port: number;
+        method: string;
+        path: string;
+        headersJson: string;
+        body?: string;
+    }): Promise<string>;
+    getSignalState(pid: number): KernelSignalState;
+    private refreshSocketLookup;
+    private refreshSignalState;
+    private refreshProcessSnapshot;
+    private refreshZombieTimerCount;
+    private drainTrailingProcessOutput;
+    private startTrackedProcess;
+    private runEventPump;
+    private finishProcess;
+    private waitForTrackedProcess;
+    private signalProcess;
+    private flushPendingStdin;
+    private closeTrackedStdin;
+    private handleBackgroundProcessError;
+    private recordCompletedProcessError;
+    private emitBackgroundProcessError;
+    private createFilesystemView;
+    private buildProcessSnapshot;
+    private dispatchRead;
+    private dispatchNativeRead;
+    private dispatchWrite;
+    private resolveLocalMount;
+    private assertGuestPathWritable;
+    private mountedChildNames;
+    private assertLocalWritable;
+    private updateTrackedProcessSnapshot;
+}
+export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, SidecarSpawnOptions, RootFilesystemEntry, SidecarEventSelector, SidecarPermissionsPolicy, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarRequestHandler, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, } from "./sidecar-client.js";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, Sidecar, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "./sidecar-client.js";