@ai-ecoverse/slicc-bios 1.30.2 → 1.30.4

package/README.md

@@ -87,6 +87,7 @@ The kernel runs with users on (slicc-kernel ≥ 1.81.0): files have owners and m
 - **Protected code paths:** under `'enforce'`, the kernel gets `protect: { paths: ['/node_modules', '/opt/agent', '/opt/grammars', '/opt/tailscale', '/opt/slicc', '/os'], writers: ['bios-installer'] }` (slicc-kernel ≥ 1.81.0). No process changes them, root included (`EROFS`; a cone sees `EACCES` first), and nothing mounts at, under or above them.
   - **bios's installs** (pnpm into the base set, `/opt/*` and `/opt/slicc/<project>`, and the pass that makes them readable) run as `kernel.run(argv, { cwd, tag: 'bios-installer', env })`. The env is clean: `HOME=/opt/slicc/.installer`, its own config and cache, the system `PNPM_HOME` and `PATH`, and an empty `NODE_OPTIONS`.
   - **pnpm runs with** `--ignore-scripts --ignore-pnpmfile --config.userconfig=/dev/null --config.store-dir=/opt/slicc/.store --config.verify-store-integrity=true`. No locked package in the base set, `/opt/agent`, `/opt/grammars`, `/opt/tailscale` or the data tools has an install script.
+  - **pnpm's wasm trap is retried once** (homescoop#1127, slicc-kernel#1172; to be removed with #671): a pnpm run of any of bios's installs that exits 134 with `wasm trap in thread N: memory access out of bounds` (V8's stale per-thread memory length after another thread's `memory.grow`, which traps a bulk-memory copy or fill) runs once more, with the same argv, flags, integrity checks, cwd, env and locks. The trap comes while pnpm reads the store, before it writes anything. The retry is warned in the console, written into the install log, and appended with its outcome (`recovered`, `trapped again`, `failed otherwise`) to `/var/log/slicc/pnpm-traps.log`. A second trap fails the install loudly, naming the trap; any other failure is never retried. In CI, a test's trap warnings go to `artifacts/pnpm-traps/`, each shard prints how many it saw, and the run's summary files them as one flaky-test issue, so the rate stays measurable and a retried run isn't a clean pass.
   - **The base project** moves out of `/`: its `package.json`, `pnpm-lock.yaml` and `pnpm-workspace.yaml` are in `/opt/slicc/base`, written by the BIOS installer and the in-place update, and pnpm installs it with `--modules-dir=/node_modules` from there. So everything pnpm reads is inside a protected path, and a root process that writes `/package.json`, `/pnpm-lock.yaml`, `/.npmrc` or `/pnpm-workspace.yaml` changes nothing; bios removes those at every boot. A protected project without its own `pnpm-workspace.yaml` gets one, so pnpm's search for a workspace stops inside the tree. The service worker's resolver no longer reads a `package.json` at `/` for `browser` mappings.
   - **The user layers** for `/opt/agent` and `/opt/grammars` are off under `'enforce'`: users can't change those projects any more, and their state is in `/var/lib/slicc`, which the agent can write. They keep working under `'report'`. Your packages live in `/opt/user` instead, which isn't protected (see [Your packages](#your-packages)).
   - **Under `'report'`** nothing is protected, since protection has no report mode of its own. Installs already run as tagged writers from `/opt/slicc/base` with the clean config, and bios watches the six trees through the kernel (`fs.watch`, recursive). Each change made through the page's kernel outside bios's own installs goes to `denials.log` as `op: 'protect'`, `errno: 'EROFS'`: a write that `'enforce'` would refuse. The watch doesn't say which process wrote, so these lines have no user and no tag. Changes made outside the page's kernel (bios's install kernels, the page itself) aren't seen.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-bios",
-  "version": "1.30.2",
+  "version": "1.30.4",
   "description": "Slim loader that boots SLICC into OPFS and serves the UI from there",
   "type": "module",
   "license": "Apache-2.0",

package/src/packages/agent/package.json

@@ -3,7 +3,7 @@
   "private": true,
   "description": "SLICC's agent, which the UI installs with pnpm in the background into /opt/agent in OPFS",
   "dependencies": {
-    "@ai-ecoverse/slicc-agent": "6.6.0",
+    "@ai-ecoverse/slicc-agent": "6.11.3",
     "@ai-ecoverse/slicc-kernel": "1.129.0"
   }
 }

package/src/packages/agent/pnpm-lock.yaml

@@ -5,23 +5,25 @@ settings:
   excludeLinksFromLockfile: false
 
 overrides:
-  '@google/genai': '-'
+  '@google/genai>google-auth-library': '-'
+  '@google/genai>protobufjs': '-'
+  '@google/genai>ws': '-'
 
 importers:
 
   .:
     dependencies:
       '@ai-ecoverse/slicc-agent':
-        specifier: 6.6.0
-        version: 6.6.0(@ai-ecoverse/slicc-kernel@1.129.0)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)
+        specifier: 6.11.3
+        version: 6.11.3(@ai-ecoverse/slicc-kernel@1.129.0)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)
       '@ai-ecoverse/slicc-kernel':
         specifier: 1.129.0
         version: 1.129.0
 
 packages:
 
-  '@ai-ecoverse/slicc-agent@6.6.0':
-    resolution: {integrity: sha512-cluLkBcWUIvqCdiZdmSGRvC7AH45lc7CFWnyOwXa/BEOoibbEMNqyUmIdI1lxICsJu54rcJD1KgCD8MQ5SqR5Q==}
+  '@ai-ecoverse/slicc-agent@6.11.3':
+    resolution: {integrity: sha512-10gn38tlOlvMnAq/s+YIx0k3RAg3dhH5BSVnH9PE8LZ4euOTYP8aD7ldowGkuTrultHZa/kSAFS592Nkz7+1/Q==}
     engines: {node: '>=24'}
     peerDependencies:
       '@ai-ecoverse/slicc-kernel': '>=1.110.0 <2'
@@ -38,8 +40,8 @@ packages:
     resolution: {integrity: sha512-/R8aDxfhTQNsloF9Z/zVS+4nhykFF8lhu6rJ3nPTPjHs+wi3hnaRQE/Rj9ceZuLf4J/bDdoyxzYIAZsBdzHe8g==}
     engines: {node: '>=24'}
 
-  '@ai-ecoverse/slicc-vault@1.12.1':
-    resolution: {integrity: sha512-pcePFdV0F1Do2oj5lXrQHV627IWT9mWpSgTEnQzZ5mzKX3y6Tt5cAFu67wZ+m0Ww3Ay4THzbXk4plxbuQojKPQ==}
+  '@ai-ecoverse/slicc-vault@1.12.2':
+    resolution: {integrity: sha512-PeY1aMdV9LHZkUBZaHHN3snXxq+0mDnmbyUFt7tq1cCRW9ECQfHjy132KWeDX8vVwS+c6JAK5dInNN/NvGvBRA==}
     engines: {node: '>=24'}
 
   '@anthropic-ai/sdk@0.129.0':
@@ -160,6 +162,15 @@ packages:
     resolution: {integrity: sha512-ERGZr+aXjNJzoUbB7ZzHVH3g5otzMHjHLs2Fyizm12By5X+gBEhod9cJXFOk13S7M8a29Am+Mq21zm73mRJFLg==}
     engines: {node: '>=22.19.0'}
 
+  '@google/genai@2.21.0':
+    resolution: {integrity: sha512-+PDtco2/Z0ONdzCGekCoCT+O1VJS9xJQNN4XzQpXG/t3El/SWWMkCWlFRO1KmivOHPa4Q0VjUYu1HBKCZ/v33Q==}
+    engines: {node: '>=20.0.0'}
+    peerDependencies:
+      '@modelcontextprotocol/sdk': ^1.25.2
+    peerDependenciesMeta:
+      '@modelcontextprotocol/sdk':
+        optional: true
+
   '@silvia-odwyer/photon@0.3.3':
     resolution: {integrity: sha512-8BhUjEch4slwRe8uXnaA4vcA5uiiOTT90UMsxulOj2gN98X1p0q9Z4Ysk4DkD05uNgbR9XoSqtZ37w+33w4QKQ==}
 
@@ -194,6 +205,9 @@ packages:
   '@stablelib/base64@1.0.1':
     resolution: {integrity: sha512-1bnPQqSxSuc3Ii6MhBysoWCg58j97aUjuCSZrGSmDxNqtytIi0k8utUenAwTZN4V5mXXYGsVUI9zeBqy+jBOSQ==}
 
+  '@types/retry@0.12.0':
+    resolution: {integrity: sha512-wWKOClTTiizcZhXnPY4wikVAwmdYHp8q6DmC+EJUzAMsycb7HB32Kh9RN4+0gExjmPmZSAQjgURXIGATPegAvA==}
+
   agent-base@9.0.0:
     resolution: {integrity: sha512-TQf59BsZnytt8GdJKLPfUZ54g/iaUL2OWDSFCCvMOhsHduDQxO8xC4PNeyIkVcA5KwL2phPSv0douC0fgWzmnA==}
     engines: {node: '>= 20'}
@@ -263,6 +277,10 @@ packages:
       zod:
         optional: true
 
+  p-retry@4.6.2:
+    resolution: {integrity: sha512-312Id396EbJdvRONlngUx0NydfrIQ5lsYu0znKVUzVvArzEIt08V1qhtyESbGVd1FGX7UKtiFp5uwKZdM8wIuQ==}
+    engines: {node: '>=8'}
+
   partial-json@0.1.7:
     resolution: {integrity: sha512-Njv/59hHaokb/hRUjce3Hdv12wd60MtM9Z5Olmn+nehe0QDAsRtRbJPvJ0Z91TusF0SuZRIvnM+S4l6EIP8leA==}
 
@@ -282,6 +300,10 @@ packages:
   quickjs-wasi@3.6.2:
     resolution: {integrity: sha512-FCqGtGOrMgzUiIrMNMA2YnsOxCNwo31dzqXvclXUC6xeT35NJLKXQJsvbeCTjvoFAwZgEAPg8U6+KAPDGXn8Mg==}
 
+  retry@0.13.1:
+    resolution: {integrity: sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==}
+    engines: {node: '>= 4'}
+
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -324,11 +346,11 @@ packages:
 
 snapshots:
 
-  '@ai-ecoverse/slicc-agent@6.6.0(@ai-ecoverse/slicc-kernel@1.129.0)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)':
+  '@ai-ecoverse/slicc-agent@6.11.3(@ai-ecoverse/slicc-kernel@1.129.0)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)':
     dependencies:
       '@ai-ecoverse/slicc-browsers': 1.8.5
       '@ai-ecoverse/slicc-kernel': 1.129.0
-      '@ai-ecoverse/slicc-vault': 1.12.1
+      '@ai-ecoverse/slicc-vault': 1.12.2
       '@aws-sdk/middleware-websocket': 3.972.54
       '@earendil-works/chord': 1.3.0
       '@earendil-works/pi-ai': 1.3.0(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)
@@ -339,6 +361,7 @@ snapshots:
       typebox: 1.3.36
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
+      - '@modelcontextprotocol/sdk'
       - '@smithy/hash-node'
       - '@smithy/signature-v4'
       - kerberos
@@ -351,7 +374,7 @@ snapshots:
 
   '@ai-ecoverse/slicc-kernel@1.129.0': {}
 
-  '@ai-ecoverse/slicc-vault@1.12.1': {}
+  '@ai-ecoverse/slicc-vault@1.12.2': {}
 
   '@anthropic-ai/sdk@0.129.0':
     dependencies:
@@ -551,6 +574,7 @@ snapshots:
       '@anthropic-ai/sdk': 0.129.0
       '@aws-sdk/client-bedrock-runtime': 3.1127.0
       '@earendil-works/pi-telemetry': 1.3.0
+      '@google/genai': 2.21.0
       '@smithy/node-http-handler': 4.12.1
       http-proxy-agent: 9.1.0
       https-proxy-agent: 9.1.0
@@ -559,6 +583,7 @@ snapshots:
       typebox: 1.3.27
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
+      - '@modelcontextprotocol/sdk'
       - '@smithy/hash-node'
       - '@smithy/signature-v4'
       - kerberos
@@ -581,6 +606,7 @@ snapshots:
       typebox: 1.3.27
     transitivePeerDependencies:
       - '@aws-sdk/credential-provider-node'
+      - '@modelcontextprotocol/sdk'
       - '@smithy/hash-node'
       - '@smithy/signature-v4'
       - kerberos
@@ -595,6 +621,10 @@ snapshots:
 
   '@earendil-works/pi-telemetry@1.3.0': {}
 
+  '@google/genai@2.21.0':
+    dependencies:
+      p-retry: 4.6.2
+
   '@silvia-odwyer/photon@0.3.3': {}
 
   '@smithy/core@3.35.1':
@@ -634,6 +664,8 @@ snapshots:
 
   '@stablelib/base64@1.0.1': {}
 
+  '@types/retry@0.12.0': {}
+
   agent-base@9.0.0: {}
 
   bowser@2.14.1: {}
@@ -685,6 +717,11 @@ snapshots:
       '@smithy/signature-v4': 5.7.4
       ws: 8.22.0
 
+  p-retry@4.6.2:
+    dependencies:
+      '@types/retry': 0.12.0
+      retry: 0.13.1
+
   partial-json@0.1.7: {}
 
   path-key@3.1.1: {}
@@ -693,6 +730,8 @@ snapshots:
 
   quickjs-wasi@3.6.2: {}
 
+  retry@0.13.1: {}
+
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0

package/src/packages/optional/catalog.json

@@ -142,13 +142,6 @@
     "commands": ["ntfy"],
     "size": 4751117
   },
-  "@ai-ecoverse/wasi-fnox": {
-    "id": "fnox",
-    "label": "fnox",
-    "description": "Secrets by name: fnox keeps placeholders and seven's vault keeps the values. Pipe a value into fnox set NAME to add or change one; fnox exec hands a program the values the secret rules allow.",
-    "commands": ["fnox"],
-    "size": 2156061
-  },
   "@ai-ecoverse/wasix-gnupg": {
     "id": "gpg",
     "label": "GnuPG",

package/src/packages/optional/package-lock.json

@@ -11,7 +11,6 @@
         "@ai-ecoverse/sliccy-browser": "0.1.22",
         "@ai-ecoverse/wasi-biome": "2.5.15-4",
         "@ai-ecoverse/wasi-dig": "0.1.0-4",
-        "@ai-ecoverse/wasi-fnox": "1.39.0-5",
         "@ai-ecoverse/wasi-gh": "2.102.0-2",
         "@ai-ecoverse/wasi-ntfy": "2.32.0-2",
         "@ai-ecoverse/wasi-slicc": "1.44.7",
@@ -98,15 +97,6 @@
       "integrity": "sha512-zWKTPKPoJ27Jndc1gpHSGmGovisg8mXD6hkPYm14ccVlqtVpNTDdGgdY+5QAqzqYdTzyiVAbkhqFMDo75vxVOg==",
       "license": "Apache-2.0"
     },
-    "node_modules/@ai-ecoverse/wasi-fnox": {
-      "version": "1.39.0-5",
-      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-fnox/-/wasi-fnox-1.39.0-5.tgz",
-      "integrity": "sha512-i5EjOav/o7l1oexodKLLr33ZohDD9bjtNzj7tmJIctREUy/7jcn6IMp8hvBv/H+pxeNs+bZ82gZ6kSRSOxwKXw==",
-      "license": "MIT",
-      "engines": {
-        "slicc-kernel": ">=1.83.0"
-      }
-    },
     "node_modules/@ai-ecoverse/wasi-gh": {
       "version": "2.102.0-2",
       "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-gh/-/wasi-gh-2.102.0-2.tgz",

package/src/packages/optional/package.json

@@ -8,7 +8,6 @@
     "@ai-ecoverse/sliccy-browser": "0.1.22",
     "@ai-ecoverse/wasi-biome": "2.5.15-4",
     "@ai-ecoverse/wasi-dig": "0.1.0-4",
-    "@ai-ecoverse/wasi-fnox": "1.39.0-5",
     "@ai-ecoverse/wasi-gh": "2.102.0-2",
     "@ai-ecoverse/wasi-ntfy": "2.32.0-2",
     "@ai-ecoverse/wasi-slicc": "1.44.7",

package/src/packages/package-lock.json

@@ -11,6 +11,7 @@
         "@ai-ecoverse/slicc-clipboard": "1.0.2",
         "@ai-ecoverse/slicc-kernel": "1.129.0",
         "@ai-ecoverse/slicc-spectrum": "1.96.1",
+        "@ai-ecoverse/wasi-fnox": "1.39.0-5",
         "@ai-ecoverse/wasi-pnpm": "12.9.1-13",
         "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
         "@ai-ecoverse/wasm-bash": "5.3.0-19",
@@ -100,6 +101,15 @@
         }
       }
     },
+    "node_modules/@ai-ecoverse/wasi-fnox": {
+      "version": "1.39.0-5",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-fnox/-/wasi-fnox-1.39.0-5.tgz",
+      "integrity": "sha512-i5EjOav/o7l1oexodKLLr33ZohDD9bjtNzj7tmJIctREUy/7jcn6IMp8hvBv/H+pxeNs+bZ82gZ6kSRSOxwKXw==",
+      "license": "MIT",
+      "engines": {
+        "slicc-kernel": ">=1.83.0"
+      }
+    },
     "node_modules/@ai-ecoverse/wasi-pnpm": {
       "version": "12.9.1-13",
       "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasi-pnpm/-/wasi-pnpm-12.9.1-13.tgz",

package/src/packages/package.json

@@ -8,6 +8,7 @@
     "@ai-ecoverse/slicc-clipboard": "1.0.2",
     "@ai-ecoverse/slicc-kernel": "1.129.0",
     "@ai-ecoverse/slicc-spectrum": "1.96.1",
+    "@ai-ecoverse/wasi-fnox": "1.39.0-5",
     "@ai-ecoverse/wasi-pnpm": "12.9.1-13",
     "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
     "@ai-ecoverse/wasm-bash": "5.3.0-19",

package/src/packages/pnpm-lock.yaml

@@ -23,6 +23,9 @@ importers:
       '@ai-ecoverse/slicc-spectrum':
         specifier: 1.96.1
         version: 1.96.1
+      '@ai-ecoverse/wasi-fnox':
+        specifier: 1.39.0-5
+        version: 1.39.0-5
       '@ai-ecoverse/wasi-pnpm':
         specifier: 12.9.1-13
         version: 12.9.1-13
@@ -124,6 +127,10 @@ packages:
       '@shikijs/themes':
         optional: true
 
+  '@ai-ecoverse/wasi-fnox@1.39.0-5':
+    resolution: {integrity: sha512-i5EjOav/o7l1oexodKLLr33ZohDD9bjtNzj7tmJIctREUy/7jcn6IMp8hvBv/H+pxeNs+bZ82gZ6kSRSOxwKXw==}
+    engines: {slicc-kernel: '>=1.83.0'}
+
   '@ai-ecoverse/wasi-pnpm@12.9.1-13':
     resolution: {integrity: sha512-i7LkdU+BMahJHdgI+BK6WlWDL0t8ZB66HuMFP17zV5uNs+glZAd0vGuV4ZZubRuPwCBMXm4LklwmZm7qd3kV7A==}
     engines: {slicc-kernel: '>=1.7.2'}
@@ -210,6 +217,8 @@ snapshots:
 
   '@ai-ecoverse/slicc-spectrum@1.96.1': {}
 
+  '@ai-ecoverse/wasi-fnox@1.39.0-5': {}
+
   '@ai-ecoverse/wasi-pnpm@12.9.1-13': {}
 
   '@ai-ecoverse/wasi-ripgrep@15.2.0-5': {}