@secure-exec/core 0.1.1-rc.2 → 0.2.0-rc.1

package/dist/index.d.ts

@@ -1,4 +1,27 @@
-export type { ChildProcessAccessRequest, CommandExecutor, EnvAccessRequest, FsAccessRequest, NetworkAccessRequest, NetworkAdapter, NetworkServerAddress, NetworkServerListenOptions, NetworkServerRequest, NetworkServerResponse, PermissionCheck, PermissionDecision, Permissions, SpawnedProcess, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "./types.js";
+export { createKernel } from "./kernel/kernel.js";
+export type { Kernel, KernelOptions, KernelInterface, ExecOptions as KernelExecOptions, ExecResult as KernelExecResult, SpawnOptions as KernelSpawnOptions, ManagedProcess, RuntimeDriver as KernelRuntimeDriver, ProcessContext, DriverProcess, ProcessEntry, ProcessInfo, FDStat, FileDescription, FDEntry, Pipe, PermissionDecision, PermissionCheck, FsAccessRequest, NetworkAccessRequest, ChildProcessAccessRequest, EnvAccessRequest, KernelErrorCode, Termios, TermiosCC, OpenShellOptions, ShellHandle, ConnectTerminalOptions, Permissions, } from "./kernel/types.js";
+export { KernelError, defaultTermios } from "./kernel/types.js";
+export type { VirtualFileSystem, VirtualDirEntry, VirtualStat, } from "./kernel/vfs.js";
+export { FDTableManager, ProcessFDTable } from "./kernel/fd-table.js";
+export { ProcessTable } from "./kernel/process-table.js";
+export { TimerTable } from "./kernel/timer-table.js";
+export type { KernelTimer, TimerTableOptions } from "./kernel/timer-table.js";
+export { createDeviceLayer } from "./kernel/device-layer.js";
+export { createProcLayer, createProcessScopedFileSystem, resolveProcSelfPath, } from "./kernel/proc-layer.js";
+export { PipeManager } from "./kernel/pipe-manager.js";
+export { PtyManager } from "./kernel/pty.js";
+export type { LineDisciplineConfig } from "./kernel/pty.js";
+export { CommandRegistry } from "./kernel/command-registry.js";
+export { FileLockManager, LOCK_SH, LOCK_EX, LOCK_UN, LOCK_NB } from "./kernel/file-lock.js";
+export { UserManager } from "./kernel/user.js";
+export type { UserConfig } from "./kernel/user.js";
+export { SocketTable } from "./kernel/socket-table.js";
+export { AF_INET, AF_INET6, AF_UNIX, SOCK_STREAM, SOCK_DGRAM, } from "./kernel/socket-table.js";
+export type { HostNetworkAdapter, HostSocket, HostListener, HostUdpSocket, DnsResult, } from "./kernel/host-adapter.js";
+export { checkChildProcess } from "./kernel/permissions.js";
+export { O_RDONLY, O_WRONLY, O_RDWR, O_CREAT, O_EXCL, O_TRUNC, O_APPEND, O_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, FD_CLOEXEC, SEEK_SET, SEEK_CUR, SEEK_END, FILETYPE_UNKNOWN, FILETYPE_CHARACTER_DEVICE, FILETYPE_DIRECTORY, FILETYPE_REGULAR_FILE, FILETYPE_SYMBOLIC_LINK, FILETYPE_PIPE, SIGHUP, SIGINT, SIGQUIT, SIGKILL, SIGPIPE, SIGALRM, SIGTERM, SIGCHLD, SIGCONT, SIGSTOP, SIGTSTP, SIGWINCH, WNOHANG, } from "./kernel/types.js";
+export { encodeExitStatus, encodeSignalStatus, WIFEXITED, WEXITSTATUS, WIFSIGNALED, WTERMSIG, } from "./kernel/wstatus.js";
+export type { CommandExecutor, NetworkAdapter, NetworkServerAddress, NetworkServerListenOptions, NetworkServerRequest, NetworkServerResponse, SpawnedProcess, } from "./types.js";
 export type { DriverRuntimeConfig, NodeRuntimeDriver, NodeRuntimeDriverFactory, PythonRuntimeDriver, PythonRuntimeDriverFactory, ResourceBudgets, RuntimeDriver, RuntimeDriverFactory, RuntimeDriverOptions, SharedRuntimeDriver, SystemDriver, } from "./runtime-driver.js";
 export type { ExecOptions, ExecResult, ExecutionStatus, OSConfig, ProcessConfig, PythonRunOptions, PythonRunResult, RunResult, StdioChannel, StdioEvent, StdioHook, TimingMitigation, } from "./shared/api-types.js";
 export { TIMEOUT_EXIT_CODE, TIMEOUT_ERROR_MESSAGE, } from "./shared/constants.js";
@@ -10,17 +33,13 @@ export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transfor
 export { getRequireSetupCode } from "./shared/require-setup.js";
 export type { ConsoleSerializationBudget } from "./shared/console-formatter.js";
 export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "./shared/console-formatter.js";
-export type { BridgeGlobalKey, ChildProcessKillBridgeRef, ChildProcessSpawnStartBridgeRef, ChildProcessSpawnSyncBridgeRef, ChildProcessStdinCloseBridgeRef, ChildProcessStdinWriteBridgeRef, CryptoRandomFillBridgeRef, CryptoRandomUuidBridgeRef, DynamicImportBridgeRef, FsChmodBridgeRef, FsChownBridgeRef, FsExistsBridgeRef, FsFacadeBridge, FsLinkBridgeRef, FsLstatBridgeRef, FsMkdirBridgeRef, FsReadDirBridgeRef, FsReadFileBinaryBridgeRef, FsReadFileBridgeRef, FsReadlinkBridgeRef, FsRenameBridgeRef, FsRmdirBridgeRef, FsStatBridgeRef, FsSymlinkBridgeRef, FsTruncateBridgeRef, FsUnlinkBridgeRef, FsUtimesBridgeRef, FsWriteFileBinaryBridgeRef, FsWriteFileBridgeRef, HostBridgeGlobalKey, LoadFileBridgeRef, LoadPolyfillBridgeRef, ModuleCacheBridgeRecord, NetworkDnsLookupRawBridgeRef, NetworkFetchRawBridgeRef, NetworkHttpRequestRawBridgeRef, NetworkHttpServerCloseRawBridgeRef, NetworkHttpServerListenRawBridgeRef, ProcessErrorBridgeRef, ProcessLogBridgeRef, RegisterHandleBridgeFn, RequireFromBridgeFn, ResolveModuleBridgeRef, RuntimeBridgeGlobalKey, ScheduleTimerBridgeRef, UnregisterHandleBridgeFn, ValueOf, } from "./shared/bridge-contract.js";
+export type { BridgeApplyRef, BridgeApplySyncPromiseRef, BridgeApplySyncRef, BridgeGlobalKey, ChildProcessKillBridgeRef, ChildProcessSpawnStartBridgeRef, ChildProcessSpawnSyncBridgeRef, ChildProcessStdinCloseBridgeRef, ChildProcessStdinWriteBridgeRef, CryptoRandomFillBridgeRef, CryptoRandomUuidBridgeRef, DynamicImportBridgeRef, FsChmodBridgeRef, FsChownBridgeRef, FsExistsBridgeRef, FsFacadeBridge, FsLinkBridgeRef, FsLstatBridgeRef, FsMkdirBridgeRef, FsReadDirBridgeRef, FsReadFileBinaryBridgeRef, FsReadFileBridgeRef, FsReadlinkBridgeRef, FsRenameBridgeRef, FsRmdirBridgeRef, FsStatBridgeRef, FsSymlinkBridgeRef, FsTruncateBridgeRef, FsUnlinkBridgeRef, FsUtimesBridgeRef, FsWriteFileBinaryBridgeRef, FsWriteFileBridgeRef, HostBridgeGlobalKey, LoadFileBridgeRef, LoadPolyfillBridgeRef, ModuleCacheBridgeRecord, NetworkDnsLookupRawBridgeRef, NetworkFetchRawBridgeRef, NetworkHttpRequestRawBridgeRef, NetworkHttpServerCloseRawBridgeRef, NetworkHttpServerListenRawBridgeRef, UpgradeSocketWriteRawBridgeRef, UpgradeSocketEndRawBridgeRef, UpgradeSocketDestroyRawBridgeRef, ProcessErrorBridgeRef, ProcessLogBridgeRef, RegisterHandleBridgeFn, RequireFromBridgeFn, ResolveModuleBridgeRef, RuntimeBridgeGlobalKey, ScheduleTimerBridgeRef, UnregisterHandleBridgeFn, ValueOf, } from "./shared/bridge-contract.js";
 export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "./shared/bridge-contract.js";
 export type { CustomGlobalClassification, CustomGlobalInventoryEntry, } from "./shared/global-exposure.js";
 export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "./shared/global-exposure.js";
 export type { IsolateRuntimeSourceId } from "./generated/isolate-runtime.js";
 export { getIsolateRuntimeSource, ISOLATE_RUNTIME_SOURCES, } from "./generated/isolate-runtime.js";
 export { POLYFILL_CODE_MAP } from "./generated/polyfills.js";
-export { NodeRuntime } from "./runtime.js";
-export type { NodeRuntimeOptions } from "./runtime.js";
-export { PythonRuntime } from "./python-runtime.js";
-export type { PythonRuntimeOptions } from "./python-runtime.js";
 export type { DirEntry, StatInfo } from "./fs-helpers.js";
 export { exists, stat, rename, readDirWithTypes, mkdir } from "./fs-helpers.js";
 export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "./module-resolver.js";

package/dist/index.js

@@ -1,3 +1,26 @@
+// Kernel — VFS, process table, FD table, device layer, pipes, PTY, command registry, permissions.
+export { createKernel } from "./kernel/kernel.js";
+export { KernelError, defaultTermios } from "./kernel/types.js";
+// Kernel components.
+export { FDTableManager, ProcessFDTable } from "./kernel/fd-table.js";
+export { ProcessTable } from "./kernel/process-table.js";
+export { TimerTable } from "./kernel/timer-table.js";
+export { createDeviceLayer } from "./kernel/device-layer.js";
+export { createProcLayer, createProcessScopedFileSystem, resolveProcSelfPath, } from "./kernel/proc-layer.js";
+export { PipeManager } from "./kernel/pipe-manager.js";
+export { PtyManager } from "./kernel/pty.js";
+export { CommandRegistry } from "./kernel/command-registry.js";
+export { FileLockManager, LOCK_SH, LOCK_EX, LOCK_UN, LOCK_NB } from "./kernel/file-lock.js";
+export { UserManager } from "./kernel/user.js";
+// Socket table (kernel TCP/UDP/Unix socket management).
+export { SocketTable } from "./kernel/socket-table.js";
+export { AF_INET, AF_INET6, AF_UNIX, SOCK_STREAM, SOCK_DGRAM, } from "./kernel/socket-table.js";
+// Kernel permission helpers (kernel-level, different from SDK-level shared/permissions).
+export { checkChildProcess } from "./kernel/permissions.js";
+// Kernel constants.
+export { O_RDONLY, O_WRONLY, O_RDWR, O_CREAT, O_EXCL, O_TRUNC, O_APPEND, O_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, FD_CLOEXEC, SEEK_SET, SEEK_CUR, SEEK_END, FILETYPE_UNKNOWN, FILETYPE_CHARACTER_DEVICE, FILETYPE_DIRECTORY, FILETYPE_REGULAR_FILE, FILETYPE_SYMBOLIC_LINK, FILETYPE_PIPE, SIGHUP, SIGINT, SIGQUIT, SIGKILL, SIGPIPE, SIGALRM, SIGTERM, SIGCHLD, SIGCONT, SIGSTOP, SIGTSTP, SIGWINCH, WNOHANG, } from "./kernel/types.js";
+// POSIX wstatus encoding/decoding.
+export { encodeExitStatus, encodeSignalStatus, WIFEXITED, WEXITSTATUS, WIFSIGNALED, WTERMSIG, } from "./kernel/wstatus.js";
 // Shared constants.
 export { TIMEOUT_EXIT_CODE, TIMEOUT_ERROR_MESSAGE, } from "./shared/constants.js";
 // Shared utilities.
@@ -12,9 +35,6 @@ export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGloba
 export { getIsolateRuntimeSource, ISOLATE_RUNTIME_SOURCES, } from "./generated/isolate-runtime.js";
 // Generated polyfills.
 export { POLYFILL_CODE_MAP } from "./generated/polyfills.js";
-// Runtime facades.
-export { NodeRuntime } from "./runtime.js";
-export { PythonRuntime } from "./python-runtime.js";
 export { exists, stat, rename, readDirWithTypes, mkdir } from "./fs-helpers.js";
 // Module resolution.
 export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "./module-resolver.js";

package/dist/isolate-runtime/apply-custom-global-policy.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/common/global-access.ts
+  // ../core/isolate-runtime/src/common/global-access.ts
   function hasOwnGlobal(name) {
     return Object.prototype.hasOwnProperty.call(globalThis, name);
   }
@@ -8,7 +8,7 @@
     return Reflect.get(globalThis, name);
   }
 
-  // isolate-runtime/src/common/global-exposure.ts
+  // ../core/isolate-runtime/src/common/global-exposure.ts
   function defineRuntimeGlobalBinding(name, value, mutable) {
     Object.defineProperty(globalThis, name, {
       value,
@@ -35,7 +35,7 @@
     return createRuntimeGlobalExposer(true);
   }
 
-  // isolate-runtime/src/inject/apply-custom-global-policy.ts
+  // ../core/isolate-runtime/src/inject/apply-custom-global-policy.ts
   var __runtimeExposeCustomGlobal = getRuntimeExposeCustomGlobal();
   var __runtimeExposeMutableGlobal = getRuntimeExposeMutableGlobal();
   var __globalPolicy = globalThis.__runtimeCustomGlobalPolicy ?? {};

package/dist/isolate-runtime/apply-timing-mitigation-freeze.js

@@ -1,19 +1,20 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/common/global-access.ts
+  // ../core/isolate-runtime/src/common/global-access.ts
   function setGlobalValue(name, value) {
     Reflect.set(globalThis, name, value);
   }
 
-  // isolate-runtime/src/inject/apply-timing-mitigation-freeze.ts
+  // ../core/isolate-runtime/src/inject/apply-timing-mitigation-freeze.ts
   var __timingConfig = globalThis.__runtimeTimingMitigationConfig ?? {};
   var __frozenTimeMs = typeof __timingConfig.frozenTimeMs === "number" && Number.isFinite(__timingConfig.frozenTimeMs) ? __timingConfig.frozenTimeMs : Date.now();
   var __frozenDateNow = () => __frozenTimeMs;
   try {
     Object.defineProperty(Date, "now", {
-      value: __frozenDateNow,
-      configurable: false,
-      writable: false
+      get: () => __frozenDateNow,
+      set: () => {
+      },
+      configurable: false
     });
   } catch {
     Date.now = __frozenDateNow;
@@ -37,9 +38,10 @@
   __FrozenDate.parse = __OrigDate.parse;
   __FrozenDate.UTC = __OrigDate.UTC;
   Object.defineProperty(__FrozenDate, "now", {
-    value: __frozenDateNow,
-    configurable: false,
-    writable: false
+    get: () => __frozenDateNow,
+    set: () => {
+    },
+    configurable: false
   });
   try {
     Object.defineProperty(globalThis, "Date", {

package/dist/isolate-runtime/apply-timing-mitigation-off.js

@@ -1,11 +1,11 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/common/global-access.ts
+  // ../core/isolate-runtime/src/common/global-access.ts
   function setGlobalValue(name, value) {
     Reflect.set(globalThis, name, value);
   }
 
-  // isolate-runtime/src/inject/apply-timing-mitigation-off.ts
+  // ../core/isolate-runtime/src/inject/apply-timing-mitigation-off.ts
   if (typeof globalThis.performance === "undefined" || globalThis.performance === null) {
     setGlobalValue("performance", {
       now: () => Date.now()

package/dist/isolate-runtime/bridge-attach.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/common/global-exposure.ts
+  // ../core/isolate-runtime/src/common/global-exposure.ts
   function defineRuntimeGlobalBinding(name, value, mutable) {
     Object.defineProperty(globalThis, name, {
       value,
@@ -21,7 +21,7 @@
     return createRuntimeGlobalExposer(false);
   }
 
-  // isolate-runtime/src/inject/bridge-attach.ts
+  // ../core/isolate-runtime/src/inject/bridge-attach.ts
   var __runtimeExposeCustomGlobal = getRuntimeExposeCustomGlobal();
   if (typeof globalThis.bridge !== "undefined") {
     __runtimeExposeCustomGlobal("bridge", globalThis.bridge);

package/dist/isolate-runtime/bridge-initial-globals.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/common/global-exposure.ts
+  // ../core/isolate-runtime/src/common/global-exposure.ts
   function defineRuntimeGlobalBinding(name, value, mutable) {
     Object.defineProperty(globalThis, name, {
       value,
@@ -21,12 +21,12 @@
     return createRuntimeGlobalExposer(true);
   }
 
-  // isolate-runtime/src/common/global-access.ts
+  // ../core/isolate-runtime/src/common/global-access.ts
   function setGlobalValue(name, value) {
     Reflect.set(globalThis, name, value);
   }
 
-  // isolate-runtime/src/inject/bridge-initial-globals.ts
+  // ../core/isolate-runtime/src/inject/bridge-initial-globals.ts
   var __runtimeExposeMutableGlobal = getRuntimeExposeMutableGlobal();
   var __bridgeSetupConfig = globalThis.__runtimeBridgeSetupConfig ?? {};
   var __initialCwd = typeof __bridgeSetupConfig.initialCwd === "string" ? __bridgeSetupConfig.initialCwd : "/";

package/dist/isolate-runtime/eval-script-result.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/inject/eval-script-result.ts
+  // ../core/isolate-runtime/src/inject/eval-script-result.ts
   var __runtimeIndirectEval = globalThis.eval;
   globalThis.__scriptResult__ = __runtimeIndirectEval(
     String(globalThis.__runtimeExecCode)

package/dist/isolate-runtime/global-exposure-helpers.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/common/global-exposure.ts
+  // ../core/isolate-runtime/src/common/global-exposure.ts
   function defineRuntimeGlobalBinding(name, value, mutable) {
     Object.defineProperty(globalThis, name, {
       value,
@@ -31,6 +31,6 @@
     }
   }
 
-  // isolate-runtime/src/inject/global-exposure-helpers.ts
+  // ../core/isolate-runtime/src/inject/global-exposure-helpers.ts
   ensureRuntimeExposureHelpers();
 })();

package/dist/isolate-runtime/init-commonjs-module-globals.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/common/global-exposure.ts
+  // ../core/isolate-runtime/src/common/global-exposure.ts
   function defineRuntimeGlobalBinding(name, value, mutable) {
     Object.defineProperty(globalThis, name, {
       value,
@@ -21,7 +21,7 @@
     return createRuntimeGlobalExposer(true);
   }
 
-  // isolate-runtime/src/inject/init-commonjs-module-globals.ts
+  // ../core/isolate-runtime/src/inject/init-commonjs-module-globals.ts
   var __runtimeExposeMutableGlobal = getRuntimeExposeMutableGlobal();
   __runtimeExposeMutableGlobal("module", { exports: {} });
   __runtimeExposeMutableGlobal("exports", globalThis.module.exports);

package/dist/isolate-runtime/override-process-cwd.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/inject/override-process-cwd.ts
+  // ../core/isolate-runtime/src/inject/override-process-cwd.ts
   var __cwd = globalThis.__runtimeProcessCwdOverride;
   if (typeof __cwd === "string") {
     process.cwd = () => __cwd;

package/dist/isolate-runtime/override-process-env.js

@@ -1,6 +1,6 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/inject/override-process-env.ts
+  // ../core/isolate-runtime/src/inject/override-process-env.ts
   var __envPatch = globalThis.__runtimeProcessEnvOverride;
   if (__envPatch && typeof __envPatch === "object") {
     Object.assign(process.env, __envPatch);