Function scanWithSidecar

browse/src/security-sidecar-client.ts:183–225

(text: string, opts?: { timeoutMs?: number })

}

export async function scanWithSidecar(text: string, opts?: { timeoutMs?: number }): Promise<{ verdict: unknown }> {
  const s = getState();
  if (s.brokenCircuit) {
    throw new Error("sidecar-circuit-broken");
  }
  if (Buffer.byteLength(text, "utf-8") > REQUEST_CAP_BYTES) {
    throw new Error("payload-too-large");
  }
  if (!s.child) {
    if (!spawnSidecar()) {
      throw new Error("sidecar-spawn-failed");
    }
  }
  const id = String(s.nextId++);
  const timeoutMs = opts?.timeoutMs ?? DEFAULT_TIMEOUT_MS;

  return new Promise((resolve, reject) => {
    const timer = setTimeout(() => {
      s.pending.delete(id);
      recordFailure();
      reject(new Error("sidecar-timeout"));
    }, timeoutMs);

    s.pending.set(id, {
      resolve: (response: unknown) => {
        const r = response as { verdict?: unknown };
        resolve({ verdict: r.verdict });
      },
      reject,
      timer,
    });

    const payload = JSON.stringify({ id, op: "scan-page-content", text }) + "\n";
    try {
      s.child!.stdin.write(payload);
    } catch (err) {
      clearTimeout(timer);
      s.pending.delete(id);
      recordFailure();
      reject(err instanceof Error ? err : new Error(String(err)));
    }
  });
}

/** Reset the circuit breaker. Test-only escape hatch. */
export function resetSidecarForTests(): void {