deltabox-lite 0.1.5 → 0.3.0

package/README.md

@@ -27,6 +27,12 @@ review calls return protocol-shaped typed objects. Every session record names
 its `isolation` profile and the resolved `isolation_provider` (`sandlock`,
 `seatbelt`, or Windows MXC).
 
+A command has no time limit: it runs until it exits or the host cancels it.
+Pass an `execId` as the last argument of `exec` and call `cancelExec(execId)` to
+end that command's whole process tree, for example on your own deadline or when
+the user aborts. Cancelling retires the warm sandbox runtime, so the next
+command starts it again.
+
 Linux CB-CoW modes require `/dev/fuse` and `fusermount3` or `fusermount` on the
 host. Deltabox otherwise reports the reason and falls back to `copy-private`
 unless the requested mode is required.

package/index.d.ts

@@ -122,6 +122,13 @@ export interface NativeDeltaboxInstance {
     requireFilesystemMode?: boolean,
   ): Promise<NativeSessionInfo>
   stopSession(sessionId: string): Promise<NativeSessionInfo>
+  /**
+   * Take ownership of a session whose owner process died (an orphan). Its
+   * pending changes are kept; commit or abort them, then stop the session.
+   */
+  adoptSession(sessionId: string): Promise<NativeSessionInfo>
+  /** Running sessions of this project whose owner process died. */
+  orphanedSessions(): Promise<string[]>
   sessionStatus(sessionId: string): Promise<NativeSessionInfo>
   exec(
     sessionId: string,
@@ -131,7 +138,24 @@ export interface NativeDeltaboxInstance {
     label?: string,
     executionProfile?: NativeExecutionProfile,
     networkAllow?: string[],
+    /**
+     * Lets the host end this command with {@link cancelExec}. Must be unique
+     * among executions that are still running.
+     */
+    execId?: string,
   ): Promise<NativeExecResult>
+  /**
+   * End the command started by `exec` with this `execId`: its whole process
+   * tree is killed. A sandboxed command's `exec` promise then rejects with
+   * "command cancelled"; an unsandboxed one resolves with a non-zero result.
+   * A cancel that arrives before the command has started is not lost.
+   * Returns false when no execution with that id is running.
+   *
+   * There is no time limit on a command, so hosts that want one should
+   * cancel on their own deadline or abort signal. Descendants that move
+   * themselves into a new session or process group are not reached.
+   */
+  cancelExec(execId: string): boolean
   readFile(sessionId: string, path: string): Promise<Buffer>
   writeFile(sessionId: string, path: string, content: Buffer): Promise<void>
   recordFileChanges(sessionId: string, paths: string[]): Promise<void>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deltabox-lite",
-  "version": "0.1.5",
+  "version": "0.3.0",
   "license": "Apache-2.0",
   "description": "Native sandbox runtime with diff, commit, and abort for AI coding agents",
   "repository": "https://github.com/delta-box/deltabox-lite",
@@ -24,10 +24,10 @@
     "README.md"
   ],
   "optionalDependencies": {
-    "deltabox-lite-darwin-arm64": "0.1.5",
-    "deltabox-lite-darwin-x64": "0.1.5",
-    "deltabox-lite-linux-arm64": "0.1.5",
-    "deltabox-lite-linux-x64": "0.1.5",
-    "deltabox-lite-windows-x64": "0.1.5"
+    "deltabox-lite-darwin-arm64": "0.3.0",
+    "deltabox-lite-darwin-x64": "0.3.0",
+    "deltabox-lite-linux-arm64": "0.3.0",
+    "deltabox-lite-linux-x64": "0.3.0",
+    "deltabox-lite-windows-x64": "0.3.0"
   }
 }