@secure-exec/core 0.2.1 → 0.3.0-rc.1

package/dist/index.d.ts

@@ -1,62 +1,24 @@
-export { createKernel } from "./kernel/kernel.js";
-export type { FsMount, Kernel, KernelOptions, KernelInterface, KernelLogger, ExecOptions as KernelExecOptions, ExecResult as KernelExecResult, SpawnOptions as KernelSpawnOptions, ManagedProcess, RuntimeDriver as KernelRuntimeDriver, ProcessContext, DriverProcess, ProcessEntry, ProcessInfo, FDStat, FileDescription, FDEntry, Pipe, PermissionDecision, PermissionCheck, FsAccessRequest, NetworkAccessRequest, ChildProcessAccessRequest, EnvAccessRequest, KernelErrorCode, Termios, TermiosCC, OpenShellOptions, ShellHandle, ConnectTerminalOptions, Permissions, } from "./kernel/types.js";
-export { KernelError, defaultTermios, noopKernelLogger } from "./kernel/types.js";
-export type { VirtualFileSystem, VirtualDirEntry, VirtualDirStatEntry, VirtualStat, } from "./kernel/vfs.js";
-export { FDTableManager, ProcessFDTable } from "./kernel/fd-table.js";
-export { ProcessTable } from "./kernel/process-table.js";
-export { TimerTable } from "./kernel/timer-table.js";
-export type { KernelTimer, TimerTableOptions } from "./kernel/timer-table.js";
-export { createDeviceBackend } from "./kernel/device-backend.js";
-export { createDeviceLayer } from "./kernel/device-layer.js";
-export { MountTable } from "./kernel/mount-table.js";
-export type { MountEntry, MountOptions } from "./kernel/mount-table.js";
-export { createProcLayer, createProcessScopedFileSystem, resolveProcSelfPath, } from "./kernel/proc-layer.js";
-export { createProcBackend } from "./kernel/proc-backend.js";
-export type { ProcBackendOptions } from "./kernel/proc-backend.js";
-export { PipeManager } from "./kernel/pipe-manager.js";
-export { PtyManager } from "./kernel/pty.js";
-export type { LineDisciplineConfig } from "./kernel/pty.js";
-export { CommandRegistry } from "./kernel/command-registry.js";
-export { FileLockManager, LOCK_SH, LOCK_EX, LOCK_UN, LOCK_NB } from "./kernel/file-lock.js";
-export { UserManager } from "./kernel/user.js";
-export type { UserConfig } from "./kernel/user.js";
-export { SocketTable } from "./kernel/socket-table.js";
-export { AF_INET, AF_INET6, AF_UNIX, SOCK_STREAM, SOCK_DGRAM, } from "./kernel/socket-table.js";
-export type { HostNetworkAdapter, HostSocket, HostListener, HostUdpSocket, DnsResult, } from "./kernel/host-adapter.js";
-export { checkChildProcess } from "./kernel/permissions.js";
-export { O_RDONLY, O_WRONLY, O_RDWR, O_CREAT, O_EXCL, O_TRUNC, O_APPEND, O_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, FD_CLOEXEC, SEEK_SET, SEEK_CUR, SEEK_END, FILETYPE_UNKNOWN, FILETYPE_CHARACTER_DEVICE, FILETYPE_DIRECTORY, FILETYPE_REGULAR_FILE, FILETYPE_SYMBOLIC_LINK, FILETYPE_PIPE, SIGHUP, SIGINT, SIGQUIT, SIGKILL, SIGPIPE, SIGALRM, SIGTERM, SIGCHLD, SIGCONT, SIGSTOP, SIGTSTP, SIGWINCH, WNOHANG, } from "./kernel/types.js";
-export { encodeExitStatus, encodeSignalStatus, WIFEXITED, WEXITSTATUS, WIFSIGNALED, WTERMSIG, } from "./kernel/wstatus.js";
-export type { CommandExecutor, NetworkAdapter, NetworkServerAddress, NetworkServerListenOptions, NetworkServerRequest, NetworkServerResponse, SpawnedProcess, } from "./types.js";
-export type { DriverRuntimeConfig, NodeRuntimeDriver, NodeRuntimeDriverFactory, PythonRuntimeDriver, PythonRuntimeDriverFactory, ResourceBudgets, RuntimeDriver, RuntimeDriverFactory, RuntimeDriverOptions, SharedRuntimeDriver, SystemDriver, } from "./runtime-driver.js";
-export type { ExecOptions, ExecResult, ExecutionStatus, OSConfig, ProcessConfig, PythonRunOptions, PythonRunResult, RunResult, StdioChannel, StdioEvent, StdioHook, TimingMitigation, } from "./shared/api-types.js";
-export { TIMEOUT_EXIT_CODE, TIMEOUT_ERROR_MESSAGE, } from "./shared/constants.js";
-export { createInMemoryFileSystem } from "./shared/in-memory-fs.js";
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "./shared/permissions.js";
-export type { SystemError } from "./shared/errors.js";
-export { createEaccesError, createEnosysError, createSystemError, } from "./shared/errors.js";
-export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "./shared/esm-utils.js";
-export { getRequireSetupCode } from "./shared/require-setup.js";
-export type { ConsoleSerializationBudget } from "./shared/console-formatter.js";
-export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "./shared/console-formatter.js";
-export type { BridgeApplyRef, BridgeApplySyncPromiseRef, BridgeApplySyncRef, BridgeGlobalKey, ChildProcessKillBridgeRef, ChildProcessSpawnStartBridgeRef, ChildProcessSpawnSyncBridgeRef, ChildProcessStdinCloseBridgeRef, ChildProcessStdinWriteBridgeRef, CryptoRandomFillBridgeRef, CryptoRandomUuidBridgeRef, DynamicImportBridgeRef, FsChmodBridgeRef, FsChownBridgeRef, FsExistsBridgeRef, FsFacadeBridge, FsLinkBridgeRef, FsLstatBridgeRef, FsMkdirBridgeRef, FsReadDirBridgeRef, FsReadFileBinaryBridgeRef, FsReadFileBridgeRef, FsReadlinkBridgeRef, FsRenameBridgeRef, FsRmdirBridgeRef, FsStatBridgeRef, FsSymlinkBridgeRef, FsTruncateBridgeRef, FsUnlinkBridgeRef, FsUtimesBridgeRef, FsWriteFileBinaryBridgeRef, FsWriteFileBridgeRef, HostBridgeGlobalKey, LoadFileBridgeRef, LoadPolyfillBridgeRef, ModuleCacheBridgeRecord, NetworkDnsLookupRawBridgeRef, NetworkFetchRawBridgeRef, NetworkHttpRequestRawBridgeRef, NetworkHttpServerCloseRawBridgeRef, NetworkHttpServerListenRawBridgeRef, UpgradeSocketWriteRawBridgeRef, UpgradeSocketEndRawBridgeRef, UpgradeSocketDestroyRawBridgeRef, ProcessErrorBridgeRef, ProcessLogBridgeRef, RegisterHandleBridgeFn, RequireFromBridgeFn, ResolveModuleBridgeRef, RuntimeBridgeGlobalKey, ScheduleTimerBridgeRef, UnregisterHandleBridgeFn, ValueOf, } from "./shared/bridge-contract.js";
-export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "./shared/bridge-contract.js";
-export type { CustomGlobalClassification, CustomGlobalInventoryEntry, } from "./shared/global-exposure.js";
-export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "./shared/global-exposure.js";
-export type { IsolateRuntimeSourceId } from "./generated/isolate-runtime.js";
-export { getIsolateRuntimeSource, ISOLATE_RUNTIME_SOURCES, } from "./generated/isolate-runtime.js";
-export { POLYFILL_CODE_MAP } from "./generated/polyfills.js";
-export type { InodeType, CreateInodeAttrs, InodeMeta, DentryInfo, DentryStatInfo, FsMetadataStore, FsBlockStore, FsMetadataStoreVersioning, VersionMeta, VersionInfo, RetentionPolicy, } from "./vfs/types.js";
-export { InMemoryMetadataStore } from "./vfs/memory-metadata.js";
-export { InMemoryBlockStore } from "./vfs/memory-block-store.js";
-export { SqliteMetadataStore } from "./vfs/sqlite-metadata.js";
-export type { SqliteMetadataStoreOptions } from "./vfs/sqlite-metadata.js";
-export { createChunkedVfs } from "./vfs/chunked-vfs.js";
-export type { ChunkedVfsOptions, ChunkedVfsVersioning } from "./vfs/chunked-vfs.js";
-export { HostBlockStore } from "./vfs/host-block-store.js";
-export type { DirEntry, StatInfo } from "./fs-helpers.js";
-export { exists, stat, rename, readDirWithTypes, mkdir } from "./fs-helpers.js";
-export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "./module-resolver.js";
-export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "./esm-compiler.js";
-export type { ResolutionCache } from "./package-bundler.js";
-export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "./package-bundler.js";
-export { getInitialBridgeGlobalsSetupCode } from "./bridge-setup.js";
+export * from "./binary.js";
+export * from "./bytes.js";
+export * from "./callbacks.js";
+export * from "./correlation.js";
+export * from "./descriptors.js";
+export * from "./ext.js";
+export * from "./frame-payload-codec.js";
+export * from "./frame-rpc.js";
+export * from "./frame-stream.js";
+export * from "./filesystem.js";
+export * from "./framing.js";
+export * from "./json.js";
+export * from "./native-client.js";
+export * from "./node-runtime.js";
+export * from "./numbers.js";
+export * from "./permissions.js";
+export * from "./process.js";
+export * from "./protocol-client.js";
+export * from "./protocol-frames.js";
+export * from "./request-payloads.js";
+export * from "./response-payloads.js";
+export * from "./state.js";
+export * as protocol from "./generated-protocol.js";
+export * from "./generated-protocol.js";

package/dist/index.js

@@ -1,53 +1,24 @@
-// Kernel — VFS, process table, FD table, device layer, pipes, PTY, command registry, permissions.
-export { createKernel } from "./kernel/kernel.js";
-export { KernelError, defaultTermios, noopKernelLogger } from "./kernel/types.js";
-// Kernel components.
-export { FDTableManager, ProcessFDTable } from "./kernel/fd-table.js";
-export { ProcessTable } from "./kernel/process-table.js";
-export { TimerTable } from "./kernel/timer-table.js";
-export { createDeviceBackend } from "./kernel/device-backend.js";
-export { createDeviceLayer } from "./kernel/device-layer.js";
-export { MountTable } from "./kernel/mount-table.js";
-export { createProcLayer, createProcessScopedFileSystem, resolveProcSelfPath, } from "./kernel/proc-layer.js";
-export { createProcBackend } from "./kernel/proc-backend.js";
-export { PipeManager } from "./kernel/pipe-manager.js";
-export { PtyManager } from "./kernel/pty.js";
-export { CommandRegistry } from "./kernel/command-registry.js";
-export { FileLockManager, LOCK_SH, LOCK_EX, LOCK_UN, LOCK_NB } from "./kernel/file-lock.js";
-export { UserManager } from "./kernel/user.js";
-// Socket table (kernel TCP/UDP/Unix socket management).
-export { SocketTable } from "./kernel/socket-table.js";
-export { AF_INET, AF_INET6, AF_UNIX, SOCK_STREAM, SOCK_DGRAM, } from "./kernel/socket-table.js";
-// Kernel permission helpers (kernel-level, different from SDK-level shared/permissions).
-export { checkChildProcess } from "./kernel/permissions.js";
-// Kernel constants.
-export { O_RDONLY, O_WRONLY, O_RDWR, O_CREAT, O_EXCL, O_TRUNC, O_APPEND, O_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, FD_CLOEXEC, SEEK_SET, SEEK_CUR, SEEK_END, FILETYPE_UNKNOWN, FILETYPE_CHARACTER_DEVICE, FILETYPE_DIRECTORY, FILETYPE_REGULAR_FILE, FILETYPE_SYMBOLIC_LINK, FILETYPE_PIPE, SIGHUP, SIGINT, SIGQUIT, SIGKILL, SIGPIPE, SIGALRM, SIGTERM, SIGCHLD, SIGCONT, SIGSTOP, SIGTSTP, SIGWINCH, WNOHANG, } from "./kernel/types.js";
-// POSIX wstatus encoding/decoding.
-export { encodeExitStatus, encodeSignalStatus, WIFEXITED, WEXITSTATUS, WIFSIGNALED, WTERMSIG, } from "./kernel/wstatus.js";
-// Shared constants.
-export { TIMEOUT_EXIT_CODE, TIMEOUT_ERROR_MESSAGE, } from "./shared/constants.js";
-// Shared utilities.
-export { createInMemoryFileSystem } from "./shared/in-memory-fs.js";
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "./shared/permissions.js";
-export { createEaccesError, createEnosysError, createSystemError, } from "./shared/errors.js";
-export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "./shared/esm-utils.js";
-export { getRequireSetupCode } from "./shared/require-setup.js";
-export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "./shared/console-formatter.js";
-export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "./shared/bridge-contract.js";
-export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "./shared/global-exposure.js";
-export { getIsolateRuntimeSource, ISOLATE_RUNTIME_SOURCES, } from "./generated/isolate-runtime.js";
-// Generated polyfills.
-export { POLYFILL_CODE_MAP } from "./generated/polyfills.js";
-export { InMemoryMetadataStore } from "./vfs/memory-metadata.js";
-export { InMemoryBlockStore } from "./vfs/memory-block-store.js";
-export { SqliteMetadataStore } from "./vfs/sqlite-metadata.js";
-export { createChunkedVfs } from "./vfs/chunked-vfs.js";
-export { HostBlockStore } from "./vfs/host-block-store.js";
-export { exists, stat, rename, readDirWithTypes, mkdir } from "./fs-helpers.js";
-// Module resolution.
-export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "./module-resolver.js";
-// ESM compiler.
-export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "./esm-compiler.js";
-export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "./package-bundler.js";
-// Bridge setup.
-export { getInitialBridgeGlobalsSetupCode } from "./bridge-setup.js";
+export * from "./binary.js";
+export * from "./bytes.js";
+export * from "./callbacks.js";
+export * from "./correlation.js";
+export * from "./descriptors.js";
+export * from "./ext.js";
+export * from "./frame-payload-codec.js";
+export * from "./frame-rpc.js";
+export * from "./frame-stream.js";
+export * from "./filesystem.js";
+export * from "./framing.js";
+export * from "./json.js";
+export * from "./native-client.js";
+export * from "./node-runtime.js";
+export * from "./numbers.js";
+export * from "./permissions.js";
+export * from "./process.js";
+export * from "./protocol-client.js";
+export * from "./protocol-frames.js";
+export * from "./request-payloads.js";
+export * from "./response-payloads.js";
+export * from "./state.js";
+export * as protocol from "./generated-protocol.js";
+export * from "./generated-protocol.js";

package/dist/json.d.ts

@@ -0,0 +1,2 @@
+export declare function stringifyJsonUtf8(value: unknown, context: string): string;
+export declare function parseJsonUtf8(value: string, context: string): unknown;

package/dist/json.js

@@ -0,0 +1,20 @@
+export function stringifyJsonUtf8(value, context) {
+    try {
+        const encoded = JSON.stringify(value);
+        if (encoded === undefined) {
+            throw new Error(`${context} must be JSON-serializable`);
+        }
+        return encoded;
+    }
+    catch (error) {
+        throw new Error(`${context} must be JSON-serializable: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+export function parseJsonUtf8(value, context) {
+    try {
+        return JSON.parse(value);
+    }
+    catch (error) {
+        throw new Error(`invalid ${context} JSON payload: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}

package/dist/kernel-proxy.d.ts

@@ -0,0 +1,149 @@
+import type { NativeMountPluginDescriptor } from "./descriptors.js";
+import type { ConnectTerminalOptions, KernelExecOptions, KernelExecResult, KernelSpawnOptions, ManagedProcess, OpenShellOptions, ProcessInfo, ShellHandle, VirtualFileSystem, VirtualStat } from "./test-runtime.js";
+import type { AuthenticatedSession, CreatedVm, NativeSidecarProcessClient, SidecarMountDescriptor, SidecarSignalHandlerRegistration } from "./sidecar-client.js";
+export interface PlainMountConfig {
+    path: string;
+    driver: VirtualFileSystem;
+    readOnly?: boolean;
+}
+export interface NativeMountConfig {
+    path: string;
+    plugin: NativeMountPluginDescriptor;
+    readOnly?: boolean;
+}
+export declare function serializeMountConfigForSidecar(mount: PlainMountConfig | NativeMountConfig): SidecarMountDescriptor;
+export declare function toSidecarSignalName(signal: number): string;
+export interface LocalCompatMount {
+    path: string;
+    fs: VirtualFileSystem;
+    readOnly: boolean;
+}
+interface KernelSocketSnapshot {
+    processId: string;
+    host?: string;
+    port?: number;
+    path?: string;
+}
+interface KernelSignalState {
+    handlers: Map<number, {
+        action: SidecarSignalHandlerRegistration["action"];
+        mask: Set<number>;
+        flags: number;
+    }>;
+}
+interface NativeSidecarKernelProxyOptions {
+    client: NativeSidecarProcessClient;
+    session: AuthenticatedSession;
+    vm: CreatedVm;
+    env: Record<string, string>;
+    cwd: string;
+    defaultExecCwd?: string;
+    localMounts: LocalCompatMount[];
+    commandGuestPaths: ReadonlyMap<string, string>;
+    onWasmCommandResolved?: (command: string) => void;
+    onDispose?: () => Promise<void>;
+}
+export declare class NativeSidecarKernelProxy {
+    readonly env: Record<string, string>;
+    readonly cwd: string;
+    readonly commands: ReadonlyMap<string, string>;
+    readonly vfs: VirtualFileSystem;
+    readonly processes: Map<number, ProcessInfo>;
+    private readonly defaultExecCwd;
+    private readonly client;
+    private readonly session;
+    private readonly vm;
+    private readonly localMounts;
+    private readonly commandDrivers;
+    private readonly onWasmCommandResolved;
+    private readonly onDispose;
+    private readonly trackedProcesses;
+    private readonly trackedProcessesById;
+    private readonly listenerLookups;
+    private readonly boundUdpLookups;
+    private readonly signalStates;
+    private readonly signalRefreshes;
+    private sidecarProcessSnapshot;
+    private processSnapshotRefresh;
+    private readonly observedProcessStartTimes;
+    private readonly rootView;
+    private zombieTimerCountValue;
+    private zombieTimerCountRefresh;
+    private disposed;
+    private pumpError;
+    private nextSyntheticPid;
+    private readonly eventPumpAbortController;
+    private readonly eventPump;
+    constructor(options: NativeSidecarKernelProxyOptions);
+    createRootView(): VirtualFileSystem;
+    get zombieTimerCount(): number;
+    registerCommandGuestPaths(commandGuestPaths: ReadonlyMap<string, string>): void;
+    dispose(): Promise<void>;
+    exec(command: string, options?: KernelExecOptions): Promise<KernelExecResult>;
+    spawn(command: string, args: string[], options?: KernelSpawnOptions): ManagedProcess;
+    openShell(options?: OpenShellOptions): ShellHandle;
+    connectTerminal(options?: ConnectTerminalOptions): Promise<number>;
+    readFile(path: string): Promise<Uint8Array>;
+    writeFile(path: string, content: string | Uint8Array): Promise<void>;
+    mkdir(path: string, recursive?: boolean): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<VirtualStat>;
+    readdir(path: string): Promise<string[]>;
+    removeFile(path: string): Promise<void>;
+    removeDir(path: string): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+    mountFs(path: string, driver: VirtualFileSystem, options?: {
+        readOnly?: boolean;
+    }): void;
+    unmountFs(path: string): void;
+    snapshotProcesses(): ProcessInfo[];
+    findListener(request: {
+        host?: string;
+        port?: number;
+        path?: string;
+    }): KernelSocketSnapshot | null;
+    findBoundUdp(request: {
+        host?: string;
+        port?: number;
+    }): KernelSocketSnapshot | null;
+    /**
+     * Drive an HTTP request to a guest-bound TCP port inside the VM and return
+     * the raw JSON response payload from the sidecar. The caller decodes the
+     * JSON into a structured response.
+     */
+    vmFetch(request: {
+        port: number;
+        method: string;
+        path: string;
+        headersJson: string;
+        body?: string;
+    }): Promise<string>;
+    getSignalState(pid: number): KernelSignalState;
+    private refreshSocketLookup;
+    private refreshSignalState;
+    private refreshProcessSnapshot;
+    private refreshZombieTimerCount;
+    private drainTrailingProcessOutput;
+    private startTrackedProcess;
+    private runEventPump;
+    private finishProcess;
+    private waitForTrackedProcess;
+    private signalProcess;
+    private flushPendingStdin;
+    private closeTrackedStdin;
+    private handleBackgroundProcessError;
+    private recordCompletedProcessError;
+    private emitBackgroundProcessError;
+    private createFilesystemView;
+    private buildProcessSnapshot;
+    private dispatchRead;
+    private dispatchNativeRead;
+    private dispatchWrite;
+    private resolveLocalMount;
+    private assertGuestPathWritable;
+    private mountedChildNames;
+    private assertLocalWritable;
+    private updateTrackedProcessSnapshot;
+}
+export type { AuthenticatedSession, CreatedVm, GuestFilesystemStat, NativeSidecarSpawnOptions, RootFilesystemEntry, SidecarEventSelector, SidecarPermissionsPolicy, SidecarRegisteredHostCallbackDefinition, SidecarRequestFrame, SidecarRequestHandler, SidecarResponsePayload, SidecarSessionState, SidecarSignalHandlerRegistration, SidecarSocketStateEntry, } from "./sidecar-client.js";
+export { NATIVE_SIDECAR_FRAME_TIMEOUT_MS, NativeSidecarProcessClient, SidecarEventBufferOverflow, SidecarProcessError, SidecarProcessExited, } from "./sidecar-client.js";