kingwl
0a486f09c9
Bring the node-addon-landlock-run tree (tag v0.0.1, commit 614f7fd) into native/landlock-run as its source of record: launcher development happens here, next to the harness consumers, and the standalone repository becomes the release mirror the tree is exported to for packing and publishing (procedure in native/README.md). The subtree keeps its own pnpm workspace and lockfile and is NOT added to the harness workspace: harness installs, gates, and CI never touch it. The mirror's .github/ stays out of the subtree; a separate manually-dispatched workflow (.github/workflows/landlock-run.yml) runs the subtree's CI legs — the per-architecture native builds, real-kernel launcher proofs, and pack rehearsal — adapted with working-directory/cache paths. eslint ignores the subtree like vendor/; AGENTS.md gains the native/ layout line (+5 words on its budget ceiling).
37 lines
947 B
JSON
37 lines
947 B
JSON
{
|
|
"name": "node-addon-landlock-run",
|
|
"version": "0.0.1",
|
|
"type": "module",
|
|
"description": "Landlock self-restrict-then-exec launcher for sandboxing subprocesses on Linux: per-platform prebuilt static binaries plus the JS seam that resolves, probes, and speaks their CLI contract",
|
|
"main": "lib/index.js",
|
|
"types": "lib/index.d.ts",
|
|
"exports": {
|
|
".": {
|
|
"types": "./lib/index.d.ts",
|
|
"default": "./lib/index.js"
|
|
},
|
|
"./package.json": "./package.json"
|
|
},
|
|
"files": [
|
|
"README.md",
|
|
"lib/",
|
|
"!lib/*.tsbuildinfo",
|
|
"src/main.c"
|
|
],
|
|
"scripts": {
|
|
"build:js": "tsc -b",
|
|
"prepack": "node ../../scripts/verify-entry-lib.mjs"
|
|
},
|
|
"engines": {
|
|
"node": ">=20"
|
|
},
|
|
"license": "BSD-3-Clause",
|
|
"publishConfig": {
|
|
"access": "public"
|
|
},
|
|
"optionalDependencies": {
|
|
"node-addon-landlock-run-linux-arm64": "workspace:*",
|
|
"node-addon-landlock-run-linux-x64": "workspace:*"
|
|
}
|
|
}
|