refactor(sandbox): defer native protocol exports (round 3)

This commit is contained in:
Hypatia May
2026-08-04 13:37:33 +08:00
parent 319376ef1c
commit f91aedd074
14 changed files with 44 additions and 69 deletions

View File

@@ -21,18 +21,12 @@ import { fileURLToPath } from 'node:url'
/** The launcher binary's file name inside each platform package's `bin/`. */
export const LAUNCHER_BIN = 'landlock-run'
/** Prefix on every launcher-owned fatal stderr line. */
export const LAUNCHER_FATAL_PREFIX = 'landlock-run: '
/** Informational stderr line emitted before child execution under partial enforcement. */
export const PARTIAL_ENFORCEMENT_NOTICE = 'landlock-run: partial enforcement (older Landlock ABI)'
/**
* The exit code for every launcher-level failure (usage error, unenforcing
* kernel, unopenable grant root, failed exec). After a successful `exec`, the
* wrapped command may also return 125, so consumers require a matching
* {@link LAUNCHER_FATAL_PREFIX} diagnostic to attribute launcher failure.
* Part of the CLI contract.
* wrapped command may also return 125, so consumers also require a matching
* launcher-owned fatal diagnostic to attribute launcher failure. Part of the
* CLI contract.
*/
export const LAUNCHER_FAILURE_EXIT = 125