Bubble

---

Object Hierarchy:

Description:

Content:

Properties:

• public bool allow_network { get; set; }
  When false, bwrap uses --unshare-net and seccomp can monitor socket syscalls.
• public string bwrap_exe { get; }
  Absolute path to the bubblewrap binary, or empty if not found.
• public string command { get; set; }
  Shell string for a deferred run, when the owner leases this object and starts it later. Not read by exec.
• public int exit_status { get; }
  Process exit code, kept after the pid leaves jobs.
• public string fail_str { get; }
  Accumulator for stderr output (for failure case).
• public bool keep_stdin { get; set; }
  When true exec holds a stdin pipe open for send; when false the command reads /dev/null .
• public int output_lines { get; }
  Combined stdout+stderr lines read during exec.
• public Overlay overlay { get; }
  Overlay for this run; created in ctor, profile synced before exec and build_bubble_args.
• public int pid { get; }
  Bwrap child pid, or 0 before exec spawns it. Also the process group id, so it is the kill target too.
• public string project_path { get; set; }
  Project root path; empty means no-project mode (overlay create/cleanup no-op).
• public string ret_str { get; }
  Accumulator for stdout output (for success case).
• public int64 session_id { get; set; }
  Chat session that started this job. Later verbs must pass the same id.
• public bool stopped { get; }
• public string[] tail { get; }
  Last 50 output lines. The tail verb reads this.
• public FileVerification verification { get; construct; }
• public string working_dir { get; set; }
  Working directory for a deferred run. Same contract as command.
• public HashMap<string,string> write_roots { get; set; }
  Writable project root paths for overlay subdirectories.
• public string[] write_tokens { get; set; }
  Parsed allow_write tokens: no, project, or absolute paths.

Static methods:

• public static bool can_wrap ()
  Check if bubblewrap can be used for sandboxing.

Creation methods:

• public Bubble (FileVerification verification)

Methods:

• public string[] build_bubble_args (string command, string working_dir = "") throws Error
  Build complete bubblewrap command line arguments.
• public bool can_write (string path)
  Whether writes to @path are permitted for this sandbox profile. Must match build_bubble_args (bind / overlay / tmpfs / dev-bind).
• public async string exec (string command, string working_dir = "") throws Error
  Execute command string in bubblewrap sandbox and return output as string.
• public void send (string text) throws Error
  Write to the running command's stdin. Needs keep_stdin set before exec; otherwise the command is reading /dev/null and there is no pipe.
• public void stop ()
• public bool waiting_stdin ()
  Whether the job is blocked reading the stdin we gave it.

Signals:

• public signal void finished (string output)
  Emitted once the command has ended, for owners that never see the exec return value.
• public signal void output (string line)

Fields:

• public static HashMap<int,Bubble> ended
  Jobs that have left jobs, keyed by pid, so a follow-up wait can still read the exit code. That wait consumes the row.
• public static HashMap<int,Bubble> jobs
  Every live job in this process, keyed by pid, added on spawn and dropped when the command ends. Keeps a detached job alive, and answers whether a pid is one of ours at all. session_id is the chat that started it.

Inherited Members: