@unicity-astrid/sdk 0.1.0

package/dist/net.js

@@ -0,0 +1,421 @@
+/**
+ * Networking — Unix domain sockets, outbound TCP, inbound TCP listeners,
+ * UDP, and DNS. Mirrors `astrid_sdk::net`. The kernel pre-binds a single
+ * Unix-domain listener per capsule; outbound TCP and UDP are gated by
+ * `net_connect` / `net_udp` allowlists and run through the SSRF airlock.
+ *
+ * Resource handles ({@link UnixListener}, {@link TcpListener}, {@link TcpStream},
+ * {@link UdpSocket}) are Component Model resources with automatic Drop. Use
+ * `using` for scope-bound cleanup or call `.close()` explicitly.
+ *
+ * Per-capsule caps: 8 concurrent TCP streams, 4 UDP sockets, 4 TCP listeners.
+ */
+import { bindUnix as hostBindUnix, bindTcp as hostBindTcp, connectTcp as hostConnectTcp, udpBind as hostUdpBind, lookupHost as hostLookupHost, } from "astrid:net/host@1.0.0";
+import { SysError, callHost } from "./errors.js";
+import { sleepMs as hostSleepMs } from "./time.js";
+// ---------------------------------------------------------------------------
+// mpsc-shaped errors (preserved from pre-migration API)
+// ---------------------------------------------------------------------------
+export class RecvError extends Error {
+    name = "RecvError";
+    code = "EPIPE";
+    constructor() {
+        super("stream closed");
+    }
+}
+export class SendError extends Error {
+    name = "SendError";
+    code = "EPIPE";
+    constructor() {
+        super("stream closed");
+    }
+}
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+function toHostTimeout(timeoutMs) {
+    if (timeoutMs === undefined)
+        return undefined;
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+        throw SysError.api(`timeout must be a positive integer (got ${timeoutMs}); use undefined to clear`);
+    }
+    return BigInt(Math.floor(timeoutMs));
+}
+// ---------------------------------------------------------------------------
+// Listener handles
+// ---------------------------------------------------------------------------
+/** The capsule's pre-bound Unix domain listener. Activated by {@link bindUnix}. */
+export class UnixListener {
+    #inner;
+    constructor(inner) {
+        this.#inner = inner;
+    }
+    /** Blocking accept. Performs peer-credential verification + session token handshake. */
+    accept() {
+        const inner = callHost("net.UnixListener.accept", () => this.#requireInner().accept());
+        return new TcpStream(inner);
+    }
+    /** Polling accept with caller-controlled timeout. Returns `undefined` if none arrived. */
+    pollAccept(timeoutMs) {
+        const ms = toHostTimeout(timeoutMs) ?? 0n;
+        const inner = callHost(`net.UnixListener.pollAccept(${timeoutMs}ms)`, () => this.#requireInner().pollAccept(ms));
+        return inner === undefined ? undefined : new TcpStream(inner);
+    }
+    close() {
+        if (this.#inner === undefined)
+            return;
+        const inner = this.#inner;
+        this.#inner = undefined;
+        try {
+            inner[Symbol.dispose]();
+        }
+        catch {
+            // already released
+        }
+    }
+    [Symbol.dispose]() {
+        this.close();
+    }
+    #requireInner() {
+        if (this.#inner === undefined)
+            throw SysError.api("UnixListener is closed");
+        return this.#inner;
+    }
+}
+/** A bound TCP listener accepting inbound network connections. Per-capsule cap: 4. */
+export class TcpListener {
+    #inner;
+    constructor(inner) {
+        this.#inner = inner;
+    }
+    /** Blocking accept. */
+    accept() {
+        const inner = callHost("net.TcpListener.accept", () => this.#requireInner().accept());
+        return new TcpStream(inner);
+    }
+    /** Polling accept with caller-controlled timeout. */
+    pollAccept(timeoutMs) {
+        const ms = toHostTimeout(timeoutMs) ?? 0n;
+        const inner = callHost(`net.TcpListener.pollAccept(${timeoutMs}ms)`, () => this.#requireInner().pollAccept(ms));
+        return inner === undefined ? undefined : new TcpStream(inner);
+    }
+    localAddr() {
+        return callHost("net.TcpListener.localAddr", () => this.#requireInner().localAddr());
+    }
+    close() {
+        if (this.#inner === undefined)
+            return;
+        const inner = this.#inner;
+        this.#inner = undefined;
+        try {
+            inner[Symbol.dispose]();
+        }
+        catch {
+            // already released
+        }
+    }
+    [Symbol.dispose]() {
+        this.close();
+    }
+    #requireInner() {
+        if (this.#inner === undefined)
+            throw SysError.api("TcpListener is closed");
+        return this.#inner;
+    }
+}
+// ---------------------------------------------------------------------------
+// TCP stream — bidirectional resource used for both Unix-domain and TCP
+// ---------------------------------------------------------------------------
+export class TcpStream {
+    #inner;
+    constructor(inner) {
+        this.#inner = inner;
+    }
+    // ---- Length-prefixed framed I/O (uplink-proxy use case) -----------------
+    /** Non-blocking framed read. Returns Data/Closed/Pending. Max frame: 10 MB. */
+    tryRecv() {
+        const status = callHost("net.TcpStream.tryRecv", () => this.#requireInner().read());
+        switch (status.tag) {
+            case "data":
+                return status.val;
+            case "pending":
+                return { kind: "empty" };
+            case "closed":
+                this.close();
+                throw new RecvError();
+        }
+    }
+    /**
+     * Blocking framed receive. Spins on `tryRecv` with a 50 ms sleep between
+     * polls; StarlingMonkey's syncify makes this a real blocking call from the
+     * host's POV. Mirrors the Rust SDK polling-loop shape.
+     */
+    recv() {
+        while (true) {
+            const result = this.tryRecv();
+            if (result instanceof Uint8Array)
+                return result;
+            sleepMs(50);
+        }
+    }
+    /** Write a length-prefixed frame. */
+    send(data) {
+        try {
+            callHost("net.TcpStream.send", () => this.#requireInner().write(data));
+        }
+        catch (err) {
+            // Map host errors on send to SendError to mirror Rust SDK.
+            if (err instanceof SysError)
+                throw new SendError();
+            throw err;
+        }
+    }
+    // ---- Byte-stream I/O ----------------------------------------------------
+    /**
+     * Read up to `maxBytes` without length-prefix framing. Empty array = EOF.
+     * Honours any timeout set via {@link setReadTimeout}.
+     */
+    readBytes(maxBytes) {
+        return callHost(`net.TcpStream.readBytes(${maxBytes})`, () => this.#requireInner().readBytes(maxBytes));
+    }
+    /** Write `data` without framing. Returns bytes written (may be less than `data.length`). */
+    writeBytes(data) {
+        return callHost("net.TcpStream.writeBytes", () => this.#requireInner().writeBytes(data));
+    }
+    /** Peek up to `maxBytes` without consuming them. */
+    peek(maxBytes) {
+        return callHost(`net.TcpStream.peek(${maxBytes})`, () => this.#requireInner().peek(maxBytes));
+    }
+    /** Half-close the read side, write side, or both. */
+    shutdown(how) {
+        callHost(`net.TcpStream.shutdown(${how})`, () => this.#requireInner().shutdown(how));
+    }
+    // ---- Address accessors --------------------------------------------------
+    /** Remote peer address as `"ip:port"`. Returns `not-tcp` for Unix-domain streams. */
+    peerAddr() {
+        return callHost("net.TcpStream.peerAddr", () => this.#requireInner().peerAddr());
+    }
+    /** Local socket address as `"ip:port"`. */
+    localAddr() {
+        return callHost("net.TcpStream.localAddr", () => this.#requireInner().localAddr());
+    }
+    // ---- TCP socket options -------------------------------------------------
+    setNodelay(nodelay) {
+        callHost(`net.TcpStream.setNodelay(${nodelay})`, () => this.#requireInner().setNodelay(nodelay));
+    }
+    nodelay() {
+        return callHost("net.TcpStream.nodelay", () => this.#requireInner().nodelay());
+    }
+    setReadTimeout(timeoutMs) {
+        const ms = toHostTimeout(timeoutMs);
+        callHost(`net.TcpStream.setReadTimeout(${timeoutMs})`, () => this.#requireInner().setReadTimeout(ms));
+    }
+    readTimeout() {
+        const v = callHost("net.TcpStream.readTimeout", () => this.#requireInner().readTimeout());
+        return v === undefined ? undefined : Number(v);
+    }
+    setWriteTimeout(timeoutMs) {
+        const ms = toHostTimeout(timeoutMs);
+        callHost(`net.TcpStream.setWriteTimeout(${timeoutMs})`, () => this.#requireInner().setWriteTimeout(ms));
+    }
+    writeTimeout() {
+        const v = callHost("net.TcpStream.writeTimeout", () => this.#requireInner().writeTimeout());
+        return v === undefined ? undefined : Number(v);
+    }
+    /** IPv6 hop limit / IPv4 TTL. */
+    setHopLimit(hops) {
+        callHost(`net.TcpStream.setHopLimit(${hops})`, () => this.#requireInner().setHopLimit(hops));
+    }
+    hopLimit() {
+        return callHost("net.TcpStream.hopLimit", () => this.#requireInner().hopLimit());
+    }
+    /** TCP keepalive probe interval in seconds (`undefined` disables). */
+    setKeepalive(keepaliveSecs) {
+        const v = keepaliveSecs === undefined ? undefined : BigInt(Math.max(0, Math.floor(keepaliveSecs)));
+        callHost(`net.TcpStream.setKeepalive(${keepaliveSecs})`, () => this.#requireInner().setKeepalive(v));
+    }
+    keepalive() {
+        const v = callHost("net.TcpStream.keepalive", () => this.#requireInner().keepalive());
+        return v === undefined ? undefined : Number(v);
+    }
+    /** SO_LINGER. `undefined` = default; `0` = immediate RST; otherwise drain time in ms. */
+    setLinger(lingerMs) {
+        const v = lingerMs === undefined ? undefined : BigInt(Math.max(0, Math.floor(lingerMs)));
+        callHost(`net.TcpStream.setLinger(${lingerMs})`, () => this.#requireInner().setLinger(v));
+    }
+    linger() {
+        const v = callHost("net.TcpStream.linger", () => this.#requireInner().linger());
+        return v === undefined ? undefined : Number(v);
+    }
+    setReuseaddr(reuse) {
+        callHost(`net.TcpStream.setReuseaddr(${reuse})`, () => this.#requireInner().setReuseaddr(reuse));
+    }
+    reuseaddr() {
+        return callHost("net.TcpStream.reuseaddr", () => this.#requireInner().reuseaddr());
+    }
+    // ---- Lifecycle ----------------------------------------------------------
+    close() {
+        if (this.#inner === undefined)
+            return;
+        const inner = this.#inner;
+        this.#inner = undefined;
+        try {
+            inner[Symbol.dispose]();
+        }
+        catch {
+            // already released
+        }
+    }
+    [Symbol.dispose]() {
+        this.close();
+    }
+    /** Async iterator yielding each frame until the peer closes. */
+    async *[Symbol.asyncIterator]() {
+        try {
+            while (this.#inner !== undefined) {
+                try {
+                    yield this.recv();
+                }
+                catch (err) {
+                    if (err instanceof RecvError)
+                        return;
+                    throw err;
+                }
+            }
+        }
+        finally {
+            this.close();
+        }
+    }
+    #requireInner() {
+        if (this.#inner === undefined)
+            throw SysError.api("TcpStream is closed");
+        return this.#inner;
+    }
+}
+// ---------------------------------------------------------------------------
+// UDP socket
+// ---------------------------------------------------------------------------
+/**
+ * UDP datagram socket. Two modes: unconnected (`sendTo`/`recvFrom`) and
+ * connected (`connect` + `send`/`recv`). Per-capsule cap: 4.
+ */
+export class UdpSocket {
+    #inner;
+    constructor(inner) {
+        this.#inner = inner;
+    }
+    sendTo(data, peerHost, peerPort) {
+        return callHost(`net.UdpSocket.sendTo(${peerHost}:${peerPort})`, () => this.#requireInner().sendTo(data, peerHost, peerPort));
+    }
+    recvFrom(maxBytes) {
+        return callHost(`net.UdpSocket.recvFrom(${maxBytes})`, () => this.#requireInner().recvFrom(maxBytes));
+    }
+    connect(peerHost, peerPort) {
+        callHost(`net.UdpSocket.connect(${peerHost}:${peerPort})`, () => this.#requireInner().connect(peerHost, peerPort));
+    }
+    disconnect() {
+        callHost("net.UdpSocket.disconnect", () => this.#requireInner().disconnect());
+    }
+    send(data) {
+        return callHost("net.UdpSocket.send", () => this.#requireInner().send(data));
+    }
+    recv(maxBytes) {
+        return callHost(`net.UdpSocket.recv(${maxBytes})`, () => this.#requireInner().recv(maxBytes));
+    }
+    peerAddr() {
+        return callHost("net.UdpSocket.peerAddr", () => this.#requireInner().peerAddr());
+    }
+    setReadTimeout(timeoutMs) {
+        const ms = toHostTimeout(timeoutMs);
+        callHost(`net.UdpSocket.setReadTimeout(${timeoutMs})`, () => this.#requireInner().setReadTimeout(ms));
+    }
+    localAddr() {
+        return callHost("net.UdpSocket.localAddr", () => this.#requireInner().localAddr());
+    }
+    close() {
+        if (this.#inner === undefined)
+            return;
+        const inner = this.#inner;
+        this.#inner = undefined;
+        try {
+            inner[Symbol.dispose]();
+        }
+        catch {
+            // already released
+        }
+    }
+    [Symbol.dispose]() {
+        this.close();
+    }
+    #requireInner() {
+        if (this.#inner === undefined)
+            throw SysError.api("UdpSocket is closed");
+        return this.#inner;
+    }
+}
+// ---------------------------------------------------------------------------
+// Pre-migration handle types preserved for source-compatibility — these are
+// now just type aliases over the resource-backed classes above. Callers using
+// the legacy names (`StreamHandle`, `ListenerHandle`) continue to compile.
+// ---------------------------------------------------------------------------
+export { TcpStream as StreamHandle, UnixListener as ListenerHandle };
+// ---------------------------------------------------------------------------
+// Factory functions
+// ---------------------------------------------------------------------------
+/** Bind the kernel-pre-provisioned Unix socket and return a listener. */
+export function bindUnix() {
+    const inner = callHost("net.bindUnix", () => hostBindUnix());
+    return new UnixListener(inner);
+}
+/**
+ * Bind a TCP listener for inbound connections. Gated by `net_tcp_bind`. Port
+ * 0 selects an ephemeral port.
+ */
+export function bindTcp(host, port) {
+    const inner = callHost(`net.bindTcp(${host}:${port})`, () => hostBindTcp(host, port));
+    return new TcpListener(inner);
+}
+/** Block until the next incoming connection on the Unix listener. */
+export function accept(listener) {
+    return listener.accept();
+}
+/** Non-blocking accept. Returns `undefined` if none ready. */
+export function tryAccept(listener) {
+    return listener.pollAccept(0);
+}
+/**
+ * Open an outbound TCP connection to `host:port`. Goes through the SSRF
+ * airlock (rejects private/loopback/etc.) and the `net_connect` allowlist.
+ */
+export function connect(host, port) {
+    const inner = callHost(`net.connect(${host}:${port})`, () => hostConnectTcp(host, port));
+    return new TcpStream(inner);
+}
+/** Alias for {@link connect} matching the WIT name. */
+export const connectTcp = connect;
+/** Bind a UDP socket. */
+export function udpBind(host, port) {
+    const inner = callHost(`net.udpBind(${host}:${port})`, () => hostUdpBind(host, port));
+    return new UdpSocket(inner);
+}
+/**
+ * Resolve a hostname to a list of `"ip:port"` (or `"ip"` if no port in input)
+ * strings. SSRF airlock applies — private/loopback/etc. ranges stripped.
+ */
+export function lookupHost(host) {
+    return callHost(`net.lookupHost(${host})`, () => hostLookupHost(host));
+}
+// ---------------------------------------------------------------------------
+// Sleep shim — used by the polling recv loop
+// ---------------------------------------------------------------------------
+/**
+ * 50 ms host-mediated sleep. Routes through `astrid:sys/host.sleep-ns`
+ * so the kernel can cancel the wait when the capsule unloads and
+ * account for the wait in audit. Mirrors the Rust SDK switch from
+ * `std::thread::sleep` to `crate::time::sleep`.
+ */
+function sleepMs(ms) {
+    hostSleepMs(ms);
+}
+//# sourceMappingURL=net.js.map

package/dist/net.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"net.js","sourceRoot":"","sources":["../src/net.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,QAAQ,IAAI,YAAY,EACxB,OAAO,IAAI,WAAW,EACtB,UAAU,IAAI,cAAc,EAC5B,OAAO,IAAI,WAAW,EACtB,UAAU,IAAI,cAAc,GAQ7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAInD,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,OAAO,SAAU,SAAQ,KAAK;IAChB,IAAI,GAAG,WAAW,CAAC;IAC5B,IAAI,GAAG,OAAgB,CAAC;IACjC;QACE,KAAK,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;CACF;AAMD,MAAM,OAAO,SAAU,SAAQ,KAAK;IAChB,IAAI,GAAG,WAAW,CAAC;IAC5B,IAAI,GAAG,OAAgB,CAAC;IACjC;QACE,KAAK,CAAC,eAAe,CAAC,CAAC;IACzB,CAAC;CACF;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,aAAa,CAAC,SAA6B;IAClD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,CAAC,GAAG,CAChB,2CAA2C,SAAS,2BAA2B,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,mFAAmF;AACnF,MAAM,OAAO,YAAY;IACvB,MAAM,CAA8B;IAEpC,YAAY,KAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,wFAAwF;IACxF,MAAM;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CACrD,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAC9B,CAAC;QACF,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,0FAA0F;IAC1F,UAAU,CAAC,SAAiB;QAC1B,MAAM,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,+BAA+B,SAAS,KAAK,EAAE,GAAG,EAAE,CACzE,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CACpC,CAAC;QACF,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,OAAO,CAAC;QACd,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,aAAa;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,OAAO,WAAW;IACtB,MAAM,CAA6B;IAEnC,YAAY,KAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,uBAAuB;IACvB,MAAM;QACJ,MAAM,KAAK,GAAG,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,qDAAqD;IACrD,UAAU,CAAC,SAAiB;QAC1B,MAAM,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,8BAA8B,SAAS,KAAK,EAAE,GAAG,EAAE,CACxE,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CACpC,CAAC;QACF,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,SAAS;QACP,OAAO,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,OAAO,CAAC;QACd,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,aAAa;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAE9E,MAAM,OAAO,SAAS;IACpB,MAAM,CAA2B;IAEjC,YAAY,KAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,4EAA4E;IAE5E,+EAA+E;IAC/E,OAAO;QACL,MAAM,MAAM,GAAkB,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CACnE,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,CAC5B,CAAC;QACF,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC;YACnB,KAAK,MAAM;gBACT,OAAO,MAAM,CAAC,GAAG,CAAC;YACpB,KAAK,SAAS;gBACZ,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,KAAK,QAAQ;gBACX,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,MAAM,IAAI,SAAS,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,MAAM,YAAY,UAAU;gBAAE,OAAO,MAAM,CAAC;YAChD,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,IAAgB;QACnB,IAAI,CAAC;YACH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2DAA2D;YAC3D,IAAI,GAAG,YAAY,QAAQ;gBAAE,MAAM,IAAI,SAAS,EAAE,CAAC;YACnD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E;;;OAGG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,QAAQ,CAAC,2BAA2B,QAAQ,GAAG,EAAE,GAAG,EAAE,CAC3D,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CACzC,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,UAAU,CAAC,IAAgB;QACzB,OAAO,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC/C,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CACtC,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC,QAAgB;QACnB,OAAO,QAAQ,CAAC,sBAAsB,QAAQ,GAAG,EAAE,GAAG,EAAE,CACtD,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CACpC,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,QAAQ,CAAC,GAAgB;QACvB,QAAQ,CAAC,0BAA0B,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,4EAA4E;IAE5E,qFAAqF;IACrF,QAAQ;QACN,OAAO,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,2CAA2C;IAC3C,SAAS;QACP,OAAO,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,4EAA4E;IAE5E,UAAU,CAAC,OAAgB;QACzB,QAAQ,CAAC,4BAA4B,OAAO,GAAG,EAAE,GAAG,EAAE,CACpD,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CACzC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,cAAc,CAAC,SAA6B;QAC1C,MAAM,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACpC,QAAQ,CAAC,gCAAgC,SAAS,GAAG,EAAE,GAAG,EAAE,CAC1D,IAAI,CAAC,aAAa,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CACxC,CAAC;IACJ,CAAC;IAED,WAAW;QACT,MAAM,CAAC,GAAG,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1F,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,eAAe,CAAC,SAA6B;QAC3C,MAAM,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACpC,QAAQ,CAAC,iCAAiC,SAAS,GAAG,EAAE,GAAG,EAAE,CAC3D,IAAI,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CACzC,CAAC;IACJ,CAAC;IAED,YAAY;QACV,MAAM,CAAC,GAAG,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,iCAAiC;IACjC,WAAW,CAAC,IAAY;QACtB,QAAQ,CAAC,6BAA6B,IAAI,GAAG,EAAE,GAAG,EAAE,CAClD,IAAI,CAAC,aAAa,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CACvC,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,sEAAsE;IACtE,YAAY,CAAC,aAAiC;QAC5C,MAAM,CAAC,GAAG,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACnG,QAAQ,CAAC,8BAA8B,aAAa,GAAG,EAAE,GAAG,EAAE,CAC5D,IAAI,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CACrC,CAAC;IACJ,CAAC;IAED,SAAS;QACP,MAAM,CAAC,GAAG,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,yFAAyF;IACzF,SAAS,CAAC,QAA4B;QACpC,MAAM,CAAC,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzF,QAAQ,CAAC,2BAA2B,QAAQ,GAAG,EAAE,GAAG,EAAE,CACpD,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAClC,CAAC;IACJ,CAAC;IAED,MAAM;QACJ,MAAM,CAAC,GAAG,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,YAAY,CAAC,KAAc;QACzB,QAAQ,CAAC,8BAA8B,KAAK,GAAG,EAAE,GAAG,EAAE,CACpD,IAAI,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CACzC,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,4EAA4E;IAE5E,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,OAAO,CAAC;QACd,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACpB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,GAAG,YAAY,SAAS;wBAAE,OAAO;oBACrC,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IAED,aAAa;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,OAAO,SAAS;IACpB,MAAM,CAA2B;IAEjC,YAAY,KAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,IAAgB,EAAE,QAAgB,EAAE,QAAgB;QACzD,OAAO,QAAQ,CAAC,wBAAwB,QAAQ,IAAI,QAAQ,GAAG,EAAE,GAAG,EAAE,CACpE,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,QAAgB;QACvB,OAAO,QAAQ,CAAC,0BAA0B,QAAQ,GAAG,EAAE,GAAG,EAAE,CAC1D,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CACxC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,QAAgB,EAAE,QAAgB;QACxC,QAAQ,CAAC,yBAAyB,QAAQ,IAAI,QAAQ,GAAG,EAAE,GAAG,EAAE,CAC9D,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACjD,CAAC;IACJ,CAAC;IAED,UAAU;QACR,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,CAAC,IAAgB;QACnB,OAAO,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,QAAgB;QACnB,OAAO,QAAQ,CAAC,sBAAsB,QAAQ,GAAG,EAAE,GAAG,EAAE,CACtD,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CACpC,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,OAAO,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,cAAc,CAAC,SAA6B;QAC1C,MAAM,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACpC,QAAQ,CAAC,gCAAgC,SAAS,GAAG,EAAE,GAAG,EAAE,CAC1D,IAAI,CAAC,aAAa,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CACxC,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,OAAO,CAAC;QACd,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,aAAa;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E,OAAO,EAAE,SAAS,IAAI,YAAY,EAAE,YAAY,IAAI,cAAc,EAAE,CAAC;AAErE,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,UAAU,QAAQ;IACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7D,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,IAAI,IAAI,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,MAAM,CAAC,QAAsB;IAC3C,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,SAAS,CAAC,QAAsB;IAC9C,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,IAAI,IAAI,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzF,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC;AAElC,yBAAyB;AACzB,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,IAAI,IAAI,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,QAAQ,CAAC,kBAAkB,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,8EAA8E;AAC9E,6CAA6C;AAC7C,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,OAAO,CAAC,EAAU;IACzB,WAAW,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC"}

package/dist/process.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Host process spawning. Mirrors `astrid_sdk::process`. Capsules need the
+ * `host_process` capability for the specific command being invoked; the
+ * kernel runs the process under platform sandboxing (sandbox-exec on macOS,
+ * bwrap on Linux).
+ *
+ * Per-capsule cap: 8 concurrent background processes. `ProcessHandle` is a
+ * Component Model resource — drop releases the slot and reaps the child.
+ *
+ * **Desktop-kernel only.** Unikernel targets (hermit-rs, etc.) do not implement
+ * this package; capsules importing `astrid:process` will fail to load there.
+ */
+import { type ProcessHandle as WitProcessHandle, type ProcessSignal } from "astrid:process/host@1.0.0";
+export type { ProcessSignal, EnvVar } from "astrid:process/host@1.0.0";
+export interface ProcessResult {
+    stdout: string;
+    stderr: string;
+    /** Exit code if exited normally; `undefined` if killed by signal. */
+    exitCode: number | undefined;
+    /** Unix signal number if killed by signal; `undefined` otherwise. */
+    signal: number | undefined;
+}
+export interface ProcessLogs {
+    stdout: string;
+    stderr: string;
+    running: boolean;
+    exitCode: number | undefined;
+    signal: number | undefined;
+}
+export interface KillResult {
+    killed: boolean;
+    exitCode: number | undefined;
+    signal: number | undefined;
+    stdout: string;
+    stderr: string;
+}
+export interface SpawnOptions {
+    /** Working directory relative to the workspace. */
+    cwd?: string;
+    /** Environment variables to pass to the child. */
+    env?: Record<string, string>;
+    /** Stdin bytes piped to the child on spawn. */
+    stdin?: Uint8Array;
+}
+/** Spawn a process and block until it exits. */
+export declare function spawn(cmd: string, args?: string[], options?: SpawnOptions): ProcessResult;
+/** Spawn a background process. Returns a resource handle. */
+export declare function spawnBackground(cmd: string, args?: string[], options?: SpawnOptions): BackgroundProcessHandle;
+export declare class BackgroundProcessHandle {
+    #private;
+    constructor(inner: WitProcessHandle);
+    /** Drain buffered stdout/stderr since the last read. */
+    readLogs(): ProcessLogs;
+    /** Write to stdin. Returns bytes actually written. */
+    writeStdin(data: Uint8Array): number;
+    /** Close the stdin pipe (child observes EOF). */
+    closeStdin(): void;
+    /** Send a signal (fire-and-forget). Use {@link kill} for SIGKILL + log drainage. */
+    signal(sig: ProcessSignal): void;
+    /** Send SIGKILL and drain remaining output. */
+    kill(): KillResult;
+    /**
+     * Wait for the process to exit. `timeoutMs = undefined` waits indefinitely;
+     * a bounded value throws `wait-timeout` if the timeout elapses first.
+     */
+    wait(timeoutMs?: number): {
+        exitCode: number | undefined;
+        signal: number | undefined;
+    };
+    /** Wait for the process AND drain remaining stdout/stderr atomically. */
+    waitWithOutput(timeoutMs?: number): ProcessResult;
+    /** OS-level PID. Throws if the process has already been reaped. */
+    osPid(): number;
+    close(): void;
+    [Symbol.dispose](): void;
+}
+//# sourceMappingURL=process.d.ts.map

package/dist/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../src/process.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAGL,KAAK,aAAa,IAAI,gBAAgB,EACtC,KAAK,aAAa,EAGnB,MAAM,2BAA2B,CAAC;AAGnC,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAEvE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,qEAAqE;IACrE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,mDAAmD;IACnD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,+CAA+C;IAC/C,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAsBD,gDAAgD;AAChD,wBAAgB,KAAK,CACnB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,CAAC,EAAE,YAAY,GACrB,aAAa,CAUf;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,MAAM,EAAO,EACnB,OAAO,CAAC,EAAE,YAAY,GACrB,uBAAuB,CAMzB;AAED,qBAAa,uBAAuB;;gBAGtB,KAAK,EAAE,gBAAgB;IAInC,wDAAwD;IACxD,QAAQ,IAAI,WAAW;IAWvB,sDAAsD;IACtD,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM;IAIpC,iDAAiD;IACjD,UAAU,IAAI,IAAI;IAIlB,oFAAoF;IACpF,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAIhC,+CAA+C;IAC/C,IAAI,IAAI,UAAU;IAWlB;;;OAGG;IACH,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE;IAQtF,yEAAyE;IACzE,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,aAAa;IAYjD,mEAAmE;IACnE,KAAK,IAAI,MAAM;IAIf,KAAK,IAAI,IAAI;IAWb,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI;CAQzB"}

package/dist/process.js

@@ -0,0 +1,128 @@
+/**
+ * Host process spawning. Mirrors `astrid_sdk::process`. Capsules need the
+ * `host_process` capability for the specific command being invoked; the
+ * kernel runs the process under platform sandboxing (sandbox-exec on macOS,
+ * bwrap on Linux).
+ *
+ * Per-capsule cap: 8 concurrent background processes. `ProcessHandle` is a
+ * Component Model resource — drop releases the slot and reaps the child.
+ *
+ * **Desktop-kernel only.** Unikernel targets (hermit-rs, etc.) do not implement
+ * this package; capsules importing `astrid:process` will fail to load there.
+ */
+import { spawn as hostSpawn, spawnBackground as hostSpawnBackground, } from "astrid:process/host@1.0.0";
+import { SysError, callHost } from "./errors.js";
+function buildSpawnRequest(cmd, args, options) {
+    return {
+        cmd,
+        args,
+        stdin: options?.stdin,
+        env: options?.env
+            ? Object.entries(options.env).map(([key, value]) => ({ key, value }))
+            : [],
+        cwd: options?.cwd,
+    };
+}
+function unpackExit(exit) {
+    return { exitCode: exit.exitCode, signal: exit.signal };
+}
+/** Spawn a process and block until it exits. */
+export function spawn(cmd, args = [], options) {
+    const request = buildSpawnRequest(cmd, args, options);
+    const result = callHost(`process.spawn(${JSON.stringify(cmd)})`, () => hostSpawn(request));
+    return {
+        stdout: result.stdout,
+        stderr: result.stderr,
+        ...unpackExit(result.exit),
+    };
+}
+/** Spawn a background process. Returns a resource handle. */
+export function spawnBackground(cmd, args = [], options) {
+    const request = buildSpawnRequest(cmd, args, options);
+    const inner = callHost(`process.spawnBackground(${JSON.stringify(cmd)})`, () => hostSpawnBackground(request));
+    return new BackgroundProcessHandle(inner);
+}
+export class BackgroundProcessHandle {
+    #inner;
+    constructor(inner) {
+        this.#inner = inner;
+    }
+    /** Drain buffered stdout/stderr since the last read. */
+    readLogs() {
+        const result = callHost("process.readLogs", () => this.#requireInner().readLogs());
+        return {
+            stdout: result.stdout,
+            stderr: result.stderr,
+            running: result.running,
+            exitCode: result.exit?.exitCode,
+            signal: result.exit?.signal,
+        };
+    }
+    /** Write to stdin. Returns bytes actually written. */
+    writeStdin(data) {
+        return callHost("process.writeStdin", () => this.#requireInner().writeStdin(data));
+    }
+    /** Close the stdin pipe (child observes EOF). */
+    closeStdin() {
+        callHost("process.closeStdin", () => this.#requireInner().closeStdin());
+    }
+    /** Send a signal (fire-and-forget). Use {@link kill} for SIGKILL + log drainage. */
+    signal(sig) {
+        callHost(`process.signal(${sig})`, () => this.#requireInner().signal(sig));
+    }
+    /** Send SIGKILL and drain remaining output. */
+    kill() {
+        const result = callHost("process.kill", () => this.#requireInner().kill());
+        return {
+            killed: result.killed,
+            stdout: result.stdout,
+            stderr: result.stderr,
+            exitCode: result.exit?.exitCode,
+            signal: result.exit?.signal,
+        };
+    }
+    /**
+     * Wait for the process to exit. `timeoutMs = undefined` waits indefinitely;
+     * a bounded value throws `wait-timeout` if the timeout elapses first.
+     */
+    wait(timeoutMs) {
+        const ms = timeoutMs === undefined ? undefined : BigInt(Math.max(0, Math.floor(timeoutMs)));
+        const exit = callHost(`process.wait(${timeoutMs ?? "∞"})`, () => this.#requireInner().wait(ms));
+        return unpackExit(exit);
+    }
+    /** Wait for the process AND drain remaining stdout/stderr atomically. */
+    waitWithOutput(timeoutMs) {
+        const ms = timeoutMs === undefined ? undefined : BigInt(Math.max(0, Math.floor(timeoutMs)));
+        const result = callHost(`process.waitWithOutput(${timeoutMs ?? "∞"})`, () => this.#requireInner().waitWithOutput(ms));
+        return {
+            stdout: result.stdout,
+            stderr: result.stderr,
+            ...unpackExit(result.exit),
+        };
+    }
+    /** OS-level PID. Throws if the process has already been reaped. */
+    osPid() {
+        return callHost("process.osPid", () => this.#requireInner().osPid());
+    }
+    close() {
+        if (this.#inner === undefined)
+            return;
+        const inner = this.#inner;
+        this.#inner = undefined;
+        try {
+            inner[Symbol.dispose]();
+        }
+        catch {
+            // already released
+        }
+    }
+    [Symbol.dispose]() {
+        this.close();
+    }
+    #requireInner() {
+        if (this.#inner === undefined)
+            throw SysError.api("ProcessHandle is closed");
+        return this.#inner;
+    }
+}
+//# sourceMappingURL=process.js.map

package/dist/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../src/process.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,IAAI,SAAS,EAClB,eAAe,IAAI,mBAAmB,GAKvC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAsCjD,SAAS,iBAAiB,CACxB,GAAW,EACX,IAAc,EACd,OAAiC;IAEjC,OAAO;QACL,GAAG;QACH,IAAI;QACJ,KAAK,EAAE,OAAO,EAAE,KAAK;QACrB,GAAG,EAAE,OAAO,EAAE,GAAG;YACf,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,CAAC,CAAC,EAAE;QACN,GAAG,EAAE,OAAO,EAAE,GAAG;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,KAAK,CACnB,GAAW,EACX,OAAiB,EAAE,EACnB,OAAsB;IAEtB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CACpE,SAAS,CAAC,OAAO,CAAC,CACnB,CAAC;IACF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,OAAiB,EAAE,EACnB,OAAsB;IAEtB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAC7E,mBAAmB,CAAC,OAAO,CAAC,CAC7B,CAAC;IACF,OAAO,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,OAAO,uBAAuB;IAClC,MAAM,CAA+B;IAErC,YAAY,KAAuB;QACjC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,wDAAwD;IACxD,QAAQ;QACN,MAAM,MAAM,GAAG,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ;YAC/B,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM;SAC5B,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,UAAU,CAAC,IAAgB;QACzB,OAAO,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,iDAAiD;IACjD,UAAU;QACR,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,oFAAoF;IACpF,MAAM,CAAC,GAAkB;QACvB,QAAQ,CAAC,kBAAkB,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,+CAA+C;IAC/C,IAAI;QACF,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3E,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ;YAC/B,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM;SAC5B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,SAAkB;QACrB,MAAM,EAAE,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,QAAQ,CAAC,gBAAgB,SAAS,IAAI,GAAG,GAAG,EAAE,GAAG,EAAE,CAC9D,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAC9B,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,yEAAyE;IACzE,cAAc,CAAC,SAAkB;QAC/B,MAAM,EAAE,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,QAAQ,CAAC,0BAA0B,SAAS,IAAI,GAAG,GAAG,EAAE,GAAG,EAAE,CAC1E,IAAI,CAAC,aAAa,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CACxC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC;SAC3B,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,KAAK;QACH,OAAO,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IAED,CAAC,MAAM,CAAC,OAAO,CAAC;QACd,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,aAAa;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}