@tlockney/cdp-kernel 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 Thomas Lockney
+Portions Copyright (c) 2018-2026 the Deno authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,177 @@
-# Temporary Holding Version
+# cdp-kernel
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+A Jupyter kernel extracted from Deno's (`deno jupyter`, v2.9.6) that drives
+any V8 runtime over the Chrome DevTools Protocol. The kernel host runs on
+Node or Deno; the code you type runs in a separate **target** runtime:
+Node or Deno today, and anything else whose inspector speaks CDP in
+principle.
+
+This is early software. It passes a conformance suite derived from Deno's
+own Jupyter integration tests on both targets, and it's packaged for npm and
+JSR as `@tlockney/cdp-kernel`, but it hasn't seen much real use yet. The
+feasibility study behind it covers the design,
+the other options considered (workerd, Bun, rusty_v8, FFI), and the
+evidence: [`docs/life-after-deno-jupyter.html`](docs/life-after-deno-jupyter.html).
+The scripts that produced its runtime findings are in [`probes/`](probes/).
+
+## Why this shape
+
+Deno 2.9's kernel is already two halves joined by thirteen ops
+(denoland/deno#34083 rewrote it in JS and dropped libzmq):
+
+- `cli/js/jupyter_kernel.js`: ZMTP and the Jupyter wire protocol in plain
+  JS over TCP.
+- A REPL isolate driven by CDP calls: `Runtime.evaluate` with
+  `replMode: true`, `callFunctionOn`, `getProperties`,
+  `globalLexicalScopeNames`.
+
+So the extraction is:
+
+- Port the protocol half to `node:net` and `node:crypto`: `src/zmtp.ts`,
+  `src/wire.ts`, `src/kernel.ts`.
+- Point the CDP half at another runtime's `--inspect` WebSocket:
+  `src/target.ts`, `src/cdp.ts`.
+- Replace what Deno's module loader did with esbuild + acorn
+  (`src/transform.ts`) and Node resolve hooks (`runtime/node-hooks.mjs`).
+- Port `Deno.jupyter` (`40_jupyter.js`) to `runtime/display.mjs`.
+
+## Install
+
+Each install writes a Jupyter kernelspec: `cdp-node`, `cdp-deno`, or
+`cdp-node-deno` (Node with the Deno compatibility namespace). Then pick the
+kernel in JupyterLab or VS Code.
+
+**From npm** (host runs on Node 24+; Node 26 is what's been tested):
+
+```sh
+npm install -g @tlockney/cdp-kernel
+cdp-kernel install --runtime node
+cdp-kernel install --runtime deno
+cdp-kernel install --runtime node --deno-compat
+```
+
+The kernelspec records the absolute paths of `node` and the installed
+package. Re-run `install` after upgrading either.
+
+**From JSR** (host runs on Deno):
+
+```sh
+deno run -A jsr:@tlockney/cdp-kernel/cli install --runtime deno
+```
+
+The kernelspec pins the release it was installed from
+(`jsr:@tlockney/cdp-kernel@<version>/cli`). On first launch the target's
+runtime modules are copied into `~/.cache/cdp-kernel/runtime/`. A Node
+target needs `node` on `PATH`.
+
+**From a checkout**, for working on the kernel itself:
+
+```sh
+npm ci
+npm run install:node        # kernelspec cdp-node
+npm run install:deno        # kernelspec cdp-deno
+npm run install:node-deno   # kernelspec cdp-node-deno
+```
+
+These kernelspecs point at the checkout, so don't move it after installing.
+
+In a cell:
+
+- `jupyter.display`, `jupyter.md`, `jupyter.html`, `jupyter.svg`,
+  `jupyter.image`, `jupyter.format`, `jupyter.broadcast`, and
+  `Symbol.for("Jupyter.display")`: the same API as `Deno.jupyter`.
+- `Deno.jupyter` also works:
+  - On a Deno target it is a proxy over the real namespace. Deno's own
+    getter throws outside `deno jupyter`.
+  - On Node it needs `--deno-compat`. That installs a `Deno` namespace for
+    file, env and process APIs (`runtime/deno-compat.mjs`).
+  - The shim is opt-in because libraries detect Deno with `typeof Deno`, and
+    would take Deno code paths that call APIs it doesn't cover.
+- Imports work: TypeScript, TSX, enums, top-level `await`, and `const`
+  redeclaration across cells. Specifiers can be `./local.ts`, bare packages
+  from the notebook's `node_modules`, `node:` builtins, and `npm:pkg@range`
+  or `jsr:@scope/pkg@range`.
+  - On Node, `npm:` and `jsr:` install on first use into
+    `~/.cache/cdp-kernel/npm`.
+  - On Deno they use Deno's global cache. The target runs with
+    `--node-modules-dir=none --no-lock`, so a project-local `node_modules`
+    isn't used.
+- `prompt()` and `confirm()` work over the stdin channel. Interrupt keeps
+  state.
+
+## How the tricky parts work
+
+| Problem | Approach |
+|---|---|
+| Inspector-evaluated code has no module referrer, so Node rejects `import()` | Static imports are rewritten to `var x = (await __cdpk.import("m")).x` (Deno's `var_decl_imports`), and `import()` and `import.meta` go through the bootstrap module. A resolve hook re-parents those imports to the notebook directory. |
+| A busy loop inside `Runtime.evaluate` blocks every inspector message, so interrupt is never seen | Each cell starts with `await __cdpk.tick()` (one macrotask), so user code runs as an ordinary task. `Runtime.terminateExecution` then arrives on a second CDP session. The host abandons the evaluate, whose promise never settles. |
+| stdout/stderr arrive over pipes and display messages over the WebSocket, so they race | Every display message is preceded by a numbered marker on both pipes. The host releases the message only after both pipes reach the marker, and holds later pipe output until the message is out. |
+| `prompt()` must be synchronous | The target sends an `input_request` through a CDP binding, then blocks on a `readSync` of stdin. The host writes the reply as one JSON line. |
+| Uncaught errors from timers would kill the target | `uncaughtException` and `unhandledrejection` handlers report them to stderr. |
+
+## Tests
+
+```sh
+npm run check  # tsc --strict over src/ and test/
+npm test       # unit tests (node:test)
+npm run e2e    # conformance suite via jupyter_client/libzmq, on node, deno, node-deno
+uv run --with nbclient --with nbformat python examples/run_notebook.py   # Deno-style notebook on deno + node-deno
+```
+
+The e2e suite follows Deno's `tests/integration/jupyter_tests.rs` and adds
+the gaps those tests leave: display ordering, TS, imports, `npm:`/`jsr:`,
+completion, and `update_display_data`. Set `CDPK_E2E_OFFLINE=1` to skip the
+registry-dependent checks. Set `CDPK_E2E_CLI` to run it through a different
+CLI: an installed npm bin, or `deno run -A src/main.ts` to test a Deno host.
+
+## Releasing
+
+One version number lives in three places: `package.json`, `deno.jsonc` and
+`src/package.ts`. `test/package.test.ts` fails if they disagree. To release:
+
+1. Bump all three, commit, and merge to `main`.
+2. Tag and push: `git tag v0.1.1 && git push origin v0.1.1`.
+
+The `publish` workflow then:
+
+1. Checks that the tag matches the version.
+2. Runs the type check, the unit tests, and the e2e suite against the packed
+   npm tarball and against a Deno host.
+3. Publishes to JSR (`deno publish`).
+4. Publishes to npm (`npm publish`).
+
+Both registries authenticate the workflow through GitHub OIDC, so no tokens
+are stored:
+- **npm:** a trusted publisher for `tlockney/cdp-kernel` + `publish.yml`.
+- **JSR:** the package is linked to this repo in its JSR settings.
+
+Neither registry lets a version be republished. Each job skips a version
+its registry already has, so re-running a release only fills in the half
+that failed.
+
+## Known gaps
+
+- No comms, so no ipywidgets. Deno has none either.
+- No `inspect_request` content and no history. Deno has neither.
+- No debugger.
+- `npm:` on Node:
+  - one npm alias per `name@range`;
+  - no lockfile;
+  - peer dependencies resolve by real name from the shared cache.
+- No type checking. Deno doesn't type-check REPL cells either.
+- Results are formatted with `util.inspect` on Node, so they look slightly
+  different from Deno's `Deno.inspect`.
+- WebGPU texture and buffer display is dropped.
+- Targets:
+  - **Bun** speaks the WebKit inspector protocol: no `replMode`, bindings,
+    `terminateExecution`, or top-level await in `Runtime.evaluate`.
+  - **workerd** forbids timers and I/O outside a request.
+
+  Both need a different backend; see the writeup.
+
+## Provenance
+
+`src/zmtp.ts`, `src/wire.ts`, `src/kernel.ts`, `src/text.ts` and
+`runtime/display.mjs` are ports of Deno's `cli/js/jupyter_kernel.js` and
+`cli/js/40_jupyter.js` at v2.9.6 (commit `e518fbd`), Copyright 2018-2026 the
+Deno authors, MIT license. Each file header says which parts.

package/dist/cdp.d.ts

@@ -0,0 +1,41 @@
+export type CdpParams = {
+    [key: string]: unknown;
+};
+export interface RemoteObject {
+    type: string;
+    subtype?: string;
+    className?: string;
+    value?: unknown;
+    unserializableValue?: string;
+    description?: string;
+    objectId?: string;
+}
+export interface ExceptionDetails {
+    text: string;
+    lineNumber: number;
+    columnNumber: number;
+    exception?: RemoteObject;
+}
+export interface EvaluateResult {
+    result: RemoteObject;
+    exceptionDetails?: ExceptionDetails;
+}
+export declare class CdpError extends Error {
+    readonly code: number;
+    constructor(method: string, code: number, message: string);
+}
+/** Thrown into a pending call when the caller abandons it (interrupt). */
+export declare class CdpAbandoned extends Error {
+}
+export declare class CdpSession {
+    #private;
+    readonly closed: Promise<void>;
+    private constructor();
+    static connect(url: string): Promise<CdpSession>;
+    on(method: string, listener: (params: CdpParams) => void): void;
+    send(method: string, params?: CdpParams): Promise<CdpParams>;
+    /** Reject every in-flight call; their late responses are then ignored. */
+    abandonPending(): void;
+    close(): void;
+}
+export declare function asEvaluateResult(raw: CdpParams): EvaluateResult;

package/dist/cdp.js

@@ -0,0 +1,89 @@
+// A small Chrome DevTools Protocol client over the runtime's --inspect
+// WebSocket. Uses the global WebSocket (Node 22+, Deno, Bun).
+export class CdpError extends Error {
+    code;
+    constructor(method, code, message) {
+        super(`${method}: ${message} (${code})`);
+        this.code = code;
+    }
+}
+/** Thrown into a pending call when the caller abandons it (interrupt). */
+export class CdpAbandoned extends Error {
+}
+function isResponse(msg) {
+    return typeof msg === "object" && msg !== null && typeof msg.id === "number";
+}
+function isEvent(msg) {
+    return typeof msg === "object" && msg !== null && typeof msg.method === "string";
+}
+export class CdpSession {
+    #ws;
+    #nextId = 0;
+    #pending = new Map();
+    #listeners = new Map();
+    closed;
+    constructor(ws) {
+        this.#ws = ws;
+        ws.addEventListener("message", (event) => {
+            const msg = JSON.parse(String(event.data));
+            if (isResponse(msg)) {
+                const pending = this.#pending.get(msg.id);
+                if (!pending)
+                    return;
+                this.#pending.delete(msg.id);
+                if (msg.error) {
+                    pending.reject(new CdpError(pending.method, msg.error.code, msg.error.message));
+                }
+                else {
+                    pending.resolve(msg.result ?? {});
+                }
+            }
+            else if (isEvent(msg)) {
+                for (const listener of this.#listeners.get(msg.method) ?? [])
+                    listener(msg.params);
+            }
+        });
+        this.closed = new Promise((resolve) => {
+            ws.addEventListener("close", () => {
+                for (const pending of this.#pending.values()) {
+                    pending.reject(new Error("CDP connection closed"));
+                }
+                this.#pending.clear();
+                resolve();
+            });
+        });
+    }
+    static async connect(url) {
+        const ws = new WebSocket(url);
+        await new Promise((resolve, reject) => {
+            ws.addEventListener("open", () => resolve(), { once: true });
+            ws.addEventListener("error", () => reject(new Error(`cannot connect to ${url}`)), { once: true });
+        });
+        return new CdpSession(ws);
+    }
+    on(method, listener) {
+        const list = this.#listeners.get(method) ?? [];
+        list.push(listener);
+        this.#listeners.set(method, list);
+    }
+    send(method, params = {}) {
+        const id = ++this.#nextId;
+        return new Promise((resolve, reject) => {
+            this.#pending.set(id, { method, resolve, reject });
+            this.#ws.send(JSON.stringify({ id, method, params }));
+        });
+    }
+    /** Reject every in-flight call; their late responses are then ignored. */
+    abandonPending() {
+        for (const pending of this.#pending.values()) {
+            pending.reject(new CdpAbandoned(`${pending.method} abandoned`));
+        }
+        this.#pending.clear();
+    }
+    close() {
+        this.#ws.close();
+    }
+}
+export function asEvaluateResult(raw) {
+    return raw;
+}

package/dist/kernel.d.ts

@@ -0,0 +1,20 @@
+import { type RuntimeName } from "./target.ts";
+export interface ConnectionInfo {
+    ip: string;
+    key: string;
+    transport: string;
+    signature_scheme: string;
+    shell_port: number;
+    control_port: number;
+    stdin_port: number;
+    iopub_port: number;
+    hb_port: number;
+}
+export declare function parseConnectionInfo(json: string): ConnectionInfo;
+export declare class Kernel {
+    #private;
+    constructor(conn: ConnectionInfo, runtime: RuntimeName, options?: {
+        denoCompat?: boolean;
+    });
+    run(): Promise<void>;
+}