@ai-ecoverse/slicc-bios 1.44.12 → 1.45.1

package/README.md

@@ -332,8 +332,10 @@ Programs ask seven's page for what only a page can do through the kernel's `/dev
 - **Who answers:** the tab whose session started the process. The owner's `createKernel({ requests })` answers the page's own processes. Each tab's terminals attach with `attachKernel(port, { requests })` on a port the owner made with `connect({ requests: 'attach' })`. The agent's ports carry the owner page's hook (`kernel.connect({ tag, user, requests })`). A remote follower's shell, served by the leader, carries none, so its requests are `ENOTSUP` (`no page answers requests for this session`); they never open in the leader's browser.
 - **Gestures:** a request from a terminal tag (`{ kind: 'user', where: 'terminal:…' }`) in a tab that has just had a keystroke or click (`navigator.userActivation.isActive`) goes ahead at once. Any other request, the agent's always, waits for seven's own prompt: Cancel, or 60 s without an answer, refuses it with `EACCES`, and a signal or closed request withdraws the prompt. A session (its uid and tags) has at most one prompt up: another request from it meanwhile is refused with `EACCES`, `another request is waiting for you`. After a Cancel or a timeout the session rests for 10 s: its requests are refused with the dismissed text and no prompt, unless they come typed in an active tab. Withdrawing or timing out the prompt gives focus back to what had it.
 - **`open.url`** (`{"kind":"open.url","url":"…"}`, an empty reply) opens the URL in a new tab with `noopener,noreferrer`; `background` is ignored. Refusals, all `EACCES`, with this first line: `that isn't a URL`; `seven opens only http and https URLs` (`javascript:`, `data:`, `blob:`, `file:` and the rest); `seven doesn't open its own pages or the vault for a program` (the guard's protected origins: seven's own origin, `*.sliccy.ai` and the vault); `the request to open the page was dismissed`; `nobody answered the request to open the page within 60 s`. For example: `printf '{"kind":"open.url","url":"%s"}\n' "$url" | cat > /dev/embedder`.
-- **Tool modules** (capture, audio) export the kernel's hook object `{ kinds, handle }`. `plugged(hook, prompts)` wraps one: only kinds seven lists and gives a prompt for reach it, and its `handle` runs only after seven's gesture check, with the request unchanged. A module is a pinned dependency, since it runs as seven.
-- Kinds seven doesn't list (`open.file`, `open.download`, `open.reveal`, `clipboard.*`, capture and audio for now) are `ENOTSUP` before the page sees them.
+- **Tool modules** (capture, audio) export the kernel's hook object `{ kinds, handle }`. `plugged(hook, prompts, extra)` wraps one: only kinds seven lists and gives a prompt for reach it, and its `handle` runs only after seven's gesture check, with the request plus seven's `extra`. A module is a pinned, gated dependency in the base set, since it runs as seven.
+- **`capture.screen`** (`screencapture`, `@ai-ecoverse/slicc-capture/page`): the same gesture check as `open.url`, with the prompt "Capture the screen?". The prompt's action is Choose, and Chrome's picker comes next. The module captures only through seven's `request.display(constraints)`, which calls `getDisplayMedia` with `audio: false`, `selfBrowserSurface: 'exclude'`, `surfaceSwitching: 'exclude'` and `preferCurrentTab: false`. When the picked surface's capture handle is seven's or the vault's (`slicc-vault`; every seven page sets `setCaptureHandleConfig({ handle: 'slicc-seven', exposeOrigin: true })` for its own origin, first thing at boot), or its origin is protected, seven stops every track and refuses with `EACCES`, `seven doesn't capture its own pages or the vault`. For a tab, seven waits up to 1 s for a handle that arrives after the capture starts. A tab whose handle is still missing, or any surface Chrome doesn't name as a window or a screen, is refused too (`seven can't tell this tab isn't its own or the vault's (it sets no capture handle), so it doesn't capture it; share a window or the screen`): Chrome hides handles in off-the-record profiles, and an older vault sets none, so a missing handle can't prove the tab is safe. That costs every ordinary tab that sets no capture handle, which is most of them; share a window or the screen to capture one. A captured tab that navigates to a page without a handle is stopped the same way. Seven watches for handle changes from the moment the capture starts, so a change during that wait isn't lost. The same holds while the capture is live: when the captured tab's handle changes to seven's, a protected one or none (`capturehandlechange`), seven stops every track, ends the module's capture and refuses, even if a frame was already taken. A cross-origin navigation clears the handle first, so a tab that navigates to seven is usually refused with the missing-handle text. A window or a whole screen that shows seven, and a protected page that sets no capture handle, are the user's choice in the picker. The vault's top-level pages set `slicc-vault` for seven's production origins (slicc-vault ≥ 1.17.0), so they're refused too. A local seven gets no handle from vault-preview. A page that paints before it sets its capture handle can land in a frame taken in that moment, before seven sees the handle. The dismissed texts are `the request to capture the screen was dismissed` and `nobody answered the request to capture the screen within 60 s`.
+- **`clipboard.write`** (`{"kind":"clipboard.write","type":"image/png"}`, the bytes as the body, an empty reply; `screencapture -c`): `src/seed/clipboard.js` writes one `ClipboardItem` of `image/png`, `text/plain` or `text/html`, with `/dev/clipboard`'s focus rule and refusal text. Other types are `ENOTSUP`. The body is read up to 16 MB; beyond that seven cancels the rest and fails with `EIO`, `seven copies at most 16 MB to the clipboard`.
+- Kinds seven doesn't list (`open.file`, `open.download`, `open.reveal`, `clipboard.read`, and audio for now) are `ENOTSUP` before the page sees them.
 
 ## Network
 
@@ -584,9 +586,9 @@ Limits:
 
 ## Certified packages
 
-Seven certifies a gated package (slicc-kernel, slicc-cdp, slicc-clipboard, slicc-jsh, mcpcat, and the `wasi-*`, `wasix-*`, `wasm-*` and `py-*` packages) by its integrity: a version is certified when [`src/packages/certs.json`](src/packages/certs.json) (the historic list, with its recorded `exception`s) or one of the lockfiles seven ships (the base set, `/opt/agent`, Tailscale and the catalog's projects) carries it with that integrity. `src/seed/layer.js`'s `certifiedSet()` reads that union in the page, and a user's or a project's install that needs anything else is refused, except an optional catalog package that passes [the gate](#optional-packages), with the dependencies it pins exactly, so a user's own add of a catalog package passes or fails as the panel's Install does. homescoop's certification exceptions apply to every version there, a `certs.json` or lockfile match included, and when they can't be read the version is refused. A pin on main is certified because it reached main through the merge queue, where every integration test ran on it, and because `pins.test.mjs` checks every gated pin is its own repository's release from main. `test/integration/pins.test.mjs` checks the union covers every gated pin with its integrity (Tailscale's project included), and fails when a pinned package's `engines.slicc-kernel` or kernel peer range isn't met by the pinned kernel.
+Seven certifies a gated package (slicc-kernel, slicc-cdp, slicc-capture, slicc-clipboard, slicc-jsh, mcpcat, and the `wasi-*`, `wasix-*`, `wasm-*` and `py-*` packages) by its integrity: a version is certified when [`src/packages/certs.json`](src/packages/certs.json) (the historic list, with its recorded `exception`s) or one of the lockfiles seven ships (the base set, `/opt/agent`, Tailscale and the catalog's projects) carries it with that integrity. `src/seed/layer.js`'s `certifiedSet()` reads that union in the page, and a user's or a project's install that needs anything else is refused, except an optional catalog package that passes [the gate](#optional-packages), with the dependencies it pins exactly, so a user's own add of a catalog package passes or fails as the panel's Install does. homescoop's certification exceptions apply to every version there, a `certs.json` or lockfile match included, and when they can't be read the version is refused. A pin on main is certified because it reached main through the merge queue, where every integration test ran on it, and because `pins.test.mjs` checks every gated pin is its own repository's release from main. `test/integration/pins.test.mjs` checks the union covers every gated pin with its integrity (Tailscale's project included), and fails when a pinned package's `engines.slicc-kernel` or kernel peer range isn't met by the pinned kernel.
 
-**Provenance** (`pins.test.mjs`, an ordinary integration test): every gated pin in a lockfile seven ships has npm's SLSA provenance for that exact tarball (its subject's sha512 is the lockfile's integrity), built on `refs/heads/main` of its own repository: slicc-kernel, slicc-jsh, slicc-cdp, slicc-clipboard, mcpcat, wasm-tailscale, slicc-cli for wasi-slicc, and homescoop for the other `wasm-*`, `wasi-*`, `wasix-*` and `py-*`. A homescoop pin that the bundled `certification-exceptions.json` withdraws, or whose `requires` the pins don't meet, fails it too. The test names each pin that fails and why.
+**Provenance** (`pins.test.mjs`, an ordinary integration test): every gated pin in a lockfile seven ships has npm's SLSA provenance for that exact tarball (its subject's sha512 is the lockfile's integrity), built on `refs/heads/main` of its own repository: slicc-kernel, slicc-jsh, slicc-cdp, slicc-capture, slicc-clipboard, mcpcat, wasm-tailscale, slicc-cli for wasi-slicc, and homescoop for the other `wasm-*`, `wasi-*`, `wasix-*` and `py-*`. A homescoop pin that the bundled `certification-exceptions.json` withdraws, or whose `requires` the pins don't meet, fails it too. The test names each pin that fails and why.
 
 ### Renovate keeps the pins current
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-bios",
-  "version": "1.44.12",
+  "version": "1.45.1",
   "description": "Slim loader that boots SLICC into OPFS and serves the UI from there",
   "type": "module",
   "license": "Apache-2.0",

package/src/packages/agent/package.json

@@ -4,6 +4,6 @@
   "description": "SLICC's agent, which the UI installs with pnpm in the background into /opt/agent in OPFS",
   "dependencies": {
     "@ai-ecoverse/slicc-agent": "7.8.7",
-    "@ai-ecoverse/slicc-kernel": "1.165.1"
+    "@ai-ecoverse/slicc-kernel": "1.167.2"
   }
 }

package/src/packages/agent/pnpm-lock.yaml

@@ -15,10 +15,10 @@ importers:
     dependencies:
       '@ai-ecoverse/slicc-agent':
         specifier: 7.8.7
-        version: 7.8.7(@ai-ecoverse/slicc-kernel@1.165.1)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)
+        version: 7.8.7(@ai-ecoverse/slicc-kernel@1.167.2)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)
       '@ai-ecoverse/slicc-kernel':
-        specifier: 1.165.1
-        version: 1.165.1
+        specifier: 1.167.2
+        version: 1.167.2
 
 packages:
 
@@ -39,8 +39,8 @@ packages:
     resolution: {integrity: sha512-BJAYu1tPJETsQFJEWdCyxWYU5oYaRwMdH1u4sJMvtBLVegkoRrEo5ruEAbIfzx63OJryzTylVYQ8FPVSVomxNA==}
     engines: {node: '>=24'}
 
-  '@ai-ecoverse/slicc-kernel@1.165.1':
-    resolution: {integrity: sha512-jGjTHXKedYjrfpjPzMrKIyg2aitfKL8upcQpVGtB2tConqVhf1rHKDAfYkUsZ3CN1Gj2jAxdbBpXYFP76Fv79g==}
+  '@ai-ecoverse/slicc-kernel@1.167.2':
+    resolution: {integrity: sha512-itfb5UIak/bW0XDiiI+qaiUXi5A6y2Z51qoLQttON7/mnbc3CreI+AbmuI3CrDHXSqWxwPdezcHs9ABLbi/HUA==}
     engines: {node: '>=26'}
 
   '@ai-ecoverse/slicc-scrub@1.1.0':
@@ -355,10 +355,10 @@ snapshots:
 
   '@ai-ecoverse/jerk-oauth@1.3.0': {}
 
-  '@ai-ecoverse/slicc-agent@7.8.7(@ai-ecoverse/slicc-kernel@1.165.1)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)':
+  '@ai-ecoverse/slicc-agent@7.8.7(@ai-ecoverse/slicc-kernel@1.167.2)(@aws-sdk/credential-provider-node@3.972.84)(@smithy/signature-v4@5.7.4)(ws@8.22.0)':
     dependencies:
       '@ai-ecoverse/slicc-browsers': 1.18.14
-      '@ai-ecoverse/slicc-kernel': 1.165.1
+      '@ai-ecoverse/slicc-kernel': 1.167.2
       '@ai-ecoverse/slicc-vault': 1.17.0
       '@aws-sdk/middleware-websocket': 3.972.54
       '@earendil-works/chord': 1.4.0
@@ -382,7 +382,7 @@ snapshots:
 
   '@ai-ecoverse/slicc-browsers@1.18.14': {}
 
-  '@ai-ecoverse/slicc-kernel@1.165.1': {}
+  '@ai-ecoverse/slicc-kernel@1.167.2': {}
 
   '@ai-ecoverse/slicc-scrub@1.1.0': {}
 

package/src/packages/package-lock.json

@@ -7,9 +7,10 @@
       "name": "slicc-bios-packages",
       "dependencies": {
         "@ai-ecoverse/slicc-browsers": "1.18.14",
+        "@ai-ecoverse/slicc-capture": "1.3.4",
         "@ai-ecoverse/slicc-cdp": "1.41.20",
         "@ai-ecoverse/slicc-clipboard": "1.1.1",
-        "@ai-ecoverse/slicc-kernel": "1.165.1",
+        "@ai-ecoverse/slicc-kernel": "1.167.2",
         "@ai-ecoverse/slicc-spectrum": "1.104.1",
         "@ai-ecoverse/wasi-fnox": "1.40.0-1",
         "@ai-ecoverse/wasi-pnpm": "12.9.1-21",
@@ -46,6 +47,19 @@
         "node": ">=24"
       }
     },
+    "node_modules/@ai-ecoverse/slicc-capture": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/slicc-capture/-/slicc-capture-1.3.4.tgz",
+      "integrity": "sha512-CQFMLG2XcoR01oYBjiQrd4JsAmS+entMcamit7/a+Lg2MnnQBZMlfc31Wvjc20RsvtcVtakZIVt1UVBFtovfDQ==",
+      "license": "Apache-2.0",
+      "bin": {
+        "sccapture": "host/sccapture.mjs"
+      },
+      "engines": {
+        "node": ">=24",
+        "slicc-kernel": ">=1.153.0"
+      }
+    },
     "node_modules/@ai-ecoverse/slicc-cdp": {
       "version": "1.41.20",
       "resolved": "https://registry.npmjs.org/@ai-ecoverse/slicc-cdp/-/slicc-cdp-1.41.20.tgz",
@@ -76,9 +90,9 @@
       }
     },
     "node_modules/@ai-ecoverse/slicc-kernel": {
-      "version": "1.165.1",
-      "resolved": "https://registry.npmjs.org/@ai-ecoverse/slicc-kernel/-/slicc-kernel-1.165.1.tgz",
-      "integrity": "sha512-jGjTHXKedYjrfpjPzMrKIyg2aitfKL8upcQpVGtB2tConqVhf1rHKDAfYkUsZ3CN1Gj2jAxdbBpXYFP76Fv79g==",
+      "version": "1.167.2",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/slicc-kernel/-/slicc-kernel-1.167.2.tgz",
+      "integrity": "sha512-itfb5UIak/bW0XDiiI+qaiUXi5A6y2Z51qoLQttON7/mnbc3CreI+AbmuI3CrDHXSqWxwPdezcHs9ABLbi/HUA==",
       "license": "Apache-2.0",
       "engines": {
         "node": ">=26"

package/src/packages/package.json

@@ -4,9 +4,10 @@
   "description": "Packages the BIOS installs from npm into OPFS, pinned by package-lock.json and pnpm-lock.yaml",
   "dependencies": {
     "@ai-ecoverse/slicc-browsers": "1.18.14",
+    "@ai-ecoverse/slicc-capture": "1.3.4",
     "@ai-ecoverse/slicc-cdp": "1.41.20",
     "@ai-ecoverse/slicc-clipboard": "1.1.1",
-    "@ai-ecoverse/slicc-kernel": "1.165.1",
+    "@ai-ecoverse/slicc-kernel": "1.167.2",
     "@ai-ecoverse/slicc-spectrum": "1.104.1",
     "@ai-ecoverse/wasi-fnox": "1.40.0-1",
     "@ai-ecoverse/wasi-pnpm": "12.9.1-21",

package/src/packages/pnpm-lock.yaml

@@ -11,6 +11,9 @@ importers:
       '@ai-ecoverse/slicc-browsers':
         specifier: 1.18.14
         version: 1.18.14
+      '@ai-ecoverse/slicc-capture':
+        specifier: 1.3.4
+        version: 1.3.4
       '@ai-ecoverse/slicc-cdp':
         specifier: 1.41.20
         version: 1.41.20
@@ -18,8 +21,8 @@ importers:
         specifier: 1.1.1
         version: 1.1.1
       '@ai-ecoverse/slicc-kernel':
-        specifier: 1.165.1
-        version: 1.165.1
+        specifier: 1.167.2
+        version: 1.167.2
       '@ai-ecoverse/slicc-spectrum':
         specifier: 1.104.1
         version: 1.104.1
@@ -102,6 +105,11 @@ packages:
     resolution: {integrity: sha512-BJAYu1tPJETsQFJEWdCyxWYU5oYaRwMdH1u4sJMvtBLVegkoRrEo5ruEAbIfzx63OJryzTylVYQ8FPVSVomxNA==}
     engines: {node: '>=24'}
 
+  '@ai-ecoverse/slicc-capture@1.3.4':
+    resolution: {integrity: sha512-CQFMLG2XcoR01oYBjiQrd4JsAmS+entMcamit7/a+Lg2MnnQBZMlfc31Wvjc20RsvtcVtakZIVt1UVBFtovfDQ==}
+    engines: {node: '>=24', slicc-kernel: '>=1.153.0'}
+    hasBin: true
+
   '@ai-ecoverse/slicc-cdp@1.41.20':
     resolution: {integrity: sha512-gStUfQJD/p9nXDbPWV75hCHqz1AbCGAvESIzAswVB2N/HH3IOHSaXJoN0/0YSSbxcfd4wlCuiOaE61N5Q3aeeQ==}
     engines: {node: '>=24'}
@@ -112,8 +120,8 @@ packages:
     engines: {node: '>=24', slicc-kernel: '>=1.75.0'}
     hasBin: true
 
-  '@ai-ecoverse/slicc-kernel@1.165.1':
-    resolution: {integrity: sha512-jGjTHXKedYjrfpjPzMrKIyg2aitfKL8upcQpVGtB2tConqVhf1rHKDAfYkUsZ3CN1Gj2jAxdbBpXYFP76Fv79g==}
+  '@ai-ecoverse/slicc-kernel@1.167.2':
+    resolution: {integrity: sha512-itfb5UIak/bW0XDiiI+qaiUXi5A6y2Z51qoLQttON7/mnbc3CreI+AbmuI3CrDHXSqWxwPdezcHs9ABLbi/HUA==}
     engines: {node: '>=26'}
 
   '@ai-ecoverse/slicc-spectrum@1.104.1':
@@ -217,11 +225,13 @@ snapshots:
 
   '@ai-ecoverse/slicc-browsers@1.18.14': {}
 
+  '@ai-ecoverse/slicc-capture@1.3.4': {}
+
   '@ai-ecoverse/slicc-cdp@1.41.20': {}
 
   '@ai-ecoverse/slicc-clipboard@1.1.1': {}
 
-  '@ai-ecoverse/slicc-kernel@1.165.1': {}
+  '@ai-ecoverse/slicc-kernel@1.167.2': {}
 
   '@ai-ecoverse/slicc-spectrum@1.104.1': {}