@ai-ecoverse/slicc-kernel 1.103.4 → 1.106.3

package/dist/types/commands.d.ts

@@ -15,9 +15,13 @@ export interface Command {
     script?: string;
     bin?: true;
     imports?: string;
+    refused?: string;
+    shows?: string;
 }
 interface Manifest {
     name?: unknown;
+    version?: unknown;
+    engines?: unknown;
     bin?: unknown;
     slicc?: {
         abi?: unknown;
@@ -30,7 +34,8 @@ interface Manifest {
 }
 export declare function commandsOf(pkg: string, manifest: Manifest): Command[];
 export declare function pnpmGlobalRoots(fs: KernelFs, home: string): Promise<string[]>;
-export declare function scanCommands(fs: KernelFs, modules: string | (string | string[])[], binsFrom?: number): Promise<Map<string, Command>>;
+export declare function engineRefusal(manifest: Manifest, kernel: string): string | undefined;
+export declare function scanCommands(fs: KernelFs, modules: string | (string | string[])[], binsFrom?: number, kernel?: string): Promise<Map<string, Command>>;
 export declare function scanFilesystems(fs: KernelFs, modules: string | string[]): Promise<Map<string, string>>;
 export declare function scanBinfmts(fs: KernelFs, modules: string | string[], warn?: (message: string) => void, owners?: Map<string, string>): Promise<Map<string, string>>;
 export declare function binfmtSuffix(binfmts: ReadonlyMap<string, string>, path: string): string | undefined;

package/dist/types/fs/command-stat.d.ts

@@ -0,0 +1,3 @@
+import type { Guard } from './dac.js';
+import type { FsStat } from './types.js';
+export declare function callerStat(g: Guard | undefined, path: string, st: FsStat): Promise<FsStat>;

package/dist/types/fs/commands.d.ts

@@ -1,4 +1,10 @@
+import type { Cred } from '../kernel/cred.js';
 import { type KernelFs } from './types.js';
 export declare function followLinks(fs: KernelFs, path: string): Promise<string>;
 export type UserCommandDir = (dir: string) => Promise<ReadonlySet<string> | undefined>;
-export declare function withCommandDirs(fs: KernelFs, names: () => Promise<ReadonlySet<string>>, userDir?: UserCommandDir, owners?: boolean): KernelFs;
+export interface EntryTarget {
+    path: string;
+    owner?: Cred;
+}
+export type CommandTarget = (path: string) => Promise<EntryTarget | undefined>;
+export declare function withCommandDirs(fs: KernelFs, names: () => Promise<ReadonlySet<string>>, userDir?: UserCommandDir, owners?: boolean, targetOf?: CommandTarget): KernelFs;

package/dist/types/fs/engines.d.ts

@@ -0,0 +1,5 @@
+type Version = [number, number, number, string[]];
+export declare function parseVersion(text: string): Version | undefined;
+export declare function compare(a: Version, b: Version): number;
+export declare function satisfies(version: string, range: string): boolean | undefined;
+export {};

package/dist/types/fs/types.d.ts

@@ -90,6 +90,7 @@ export interface KernelFs {
     unguarded?(): KernelFs;
     noLinks?(): KernelFs;
     mayChange?(path: string, follow: boolean, whole?: boolean): Promise<void>;
+    commandTarget?(path: string): Promise<string | undefined>;
     readVersioned?(path: string, cached?: boolean): Promise<{
         bytes: Uint8Array;
         version: string;

package/dist/types/kernel/host.d.ts

@@ -112,5 +112,6 @@ export interface WasmProcessHandle {
     }>;
 }
 export declare const KILL_GRACE_MS = 2000;
+export declare const KILL_HARD_MS = 5000;
 export declare function inheritedFds(fds: FdTable): InheritedFd[];
 export declare function spawnWasmProcess(opts: SpawnWasmOptions): WasmProcessHandle;

package/dist/types/kernel/net/http-syscalls.d.ts

@@ -7,6 +7,7 @@ export interface HttpRequestBody {
     method: string;
     headers: HeaderList;
     body?: Uint8Array;
+    stream?: boolean;
 }
 export type HttpSyscall = ({
     op: 'net-request';
@@ -19,6 +20,13 @@ export type HttpSyscall = ({
     op: 'net-read';
     handle: number;
     max: number;
+} | {
+    op: 'net-write';
+    handle: number;
+    bytes: Uint8Array;
+} | {
+    op: 'net-end';
+    handle: number;
 } | {
     op: 'net-close';
     handle: number;
@@ -47,6 +55,8 @@ export declare class HttpHandles {
     private traits;
     private request;
     private opened;
+    private write;
+    private end;
     private start;
     private respond;
     private headOf;

package/dist/types/kernel/net/http1.d.ts

@@ -42,6 +42,7 @@ export type BodyFraming = {
 };
 export declare function requestFraming(headers: HeaderList): BodyFraming;
 export declare function readBody(incoming: Incoming, framing: BodyFraming, cap: number, signal?: AbortSignal): Promise<Uint8Array | undefined>;
+export declare function streamBody(incoming: Incoming, framing: BodyFraming, signal?: AbortSignal): AsyncGenerator<Uint8Array>;
 export declare function concat(chunks: Uint8Array[], total?: number): Uint8Array<ArrayBuffer>;
 export declare function responseHead(status: number, reason: string, headers: HeaderList): Uint8Array;
 export declare function chunk(bytes: Uint8Array): Uint8Array;

package/dist/types/kernel/net/remote-transport.d.ts

@@ -6,6 +6,18 @@ export type TransportCall = {
     method: string;
     headers: HeaderList;
     body?: Uint8Array;
+    streamed?: true;
+} | {
+    net: 'body-chunk';
+    nid: number;
+    bytes: Uint8Array;
+} | {
+    net: 'body-end';
+    nid: number;
+} | {
+    net: 'body-error';
+    nid: number;
+    message: string;
 } | {
     net: 'read';
     nid: number;
@@ -45,6 +57,9 @@ export type TransportReply = {
     net: 'chunk';
     nid: number;
     bytes: Uint8Array;
+} | {
+    net: 'body-pull';
+    nid: number;
 } | {
     net: 'end';
     nid: number;
@@ -86,10 +101,13 @@ export declare class RemoteTransport implements RealmTransport {
     private readonly waiting;
     private nextId;
     private readonly sockets;
+    private readonly uploads;
     private failure;
     constructor(port: TransportPort, traits: RealmTransportTraits);
     receive(reply: TransportReply): void;
     private toSocket;
+    private pull;
+    private dropUpload;
     fail(error: Error): void;
     private ask;
     private cancel;

package/dist/types/kernel/net/transport.d.ts

@@ -4,6 +4,7 @@ export interface RealmTransportRequest {
     method: string;
     headers: HeaderList;
     body?: Uint8Array;
+    bodyStream?: AsyncIterable<Uint8Array>;
     signal: AbortSignal;
 }
 export interface RealmRedirectHop {
@@ -33,6 +34,7 @@ export interface RealmTransportTraits {
     crossOrigin?: 'cors' | 'any';
     unavailable?: true;
     websocket?: true;
+    streamingBodies?: true;
     redirectHops?: true;
     exit?: RealmTransportExit;
     [trait: string]: unknown;

package/dist/types/kernel/process.d.ts

@@ -314,6 +314,10 @@ export type WasmSyscall = {
     caught: number;
     ignored: number;
     defaults?: number;
+} | {
+    op: 'sig-waiting';
+    tid: number;
+    set: number;
 } | {
     op: 'sig-pause';
 } | SocketSyscall | EpollSyscall | SemSyscall | HttpSyscall | PtySyscall | HostSyscall;
@@ -424,6 +428,7 @@ export declare class WasmProcess {
     };
     inheritable(fork?: boolean): number;
     signal(sig: number): SignalOutcome;
+    private routeBlocked;
     private spawn;
     private onDeath;
     private sendDeath;
@@ -435,6 +440,9 @@ export declare class WasmProcess {
     private cont;
     private readonly blocks;
     private readonly sizesRead;
+    private readonly sigwaiters;
+    private setSigwaiter;
+    private waiterFor;
     syscall(req: WasmSyscall, cancelled?: AbortSignal, block?: () => void): Promise<SyncFsResult>;
     setUmask(mask?: number): number;
     die(): void;

package/dist/types/launcher.d.ts

@@ -214,6 +214,7 @@ export declare class Launcher {
     onTraits(listener: () => void): () => void;
     updateTransportTraits(): boolean;
     commands(scope?: string): Promise<Map<string, Command>>;
+    private refusals;
     private ownCommands;
     private interpreters;
     private tiers;
@@ -352,6 +353,9 @@ export declare class Launcher {
     private noLinksOf;
     private rooted;
     private commandFs;
+    private readonly named;
+    private commandNames;
+    private entryTarget;
     private processChain;
     private starting;
     openTerminal(argv: string[], options: TerminalOptions): Promise<TerminalSession>;

package/dist/types/process/js/js-kernel.d.ts

@@ -5,7 +5,8 @@ import { type SyncSabRequestBody } from '../../realm/sync-sab-wire.js';
 import { type AsyncSabTransport, type WaitAsyncLike } from './async-sab.js';
 export declare class JsCallError extends Error {
     readonly code: string;
-    constructor(code: string, what: string);
+    readonly detail: string | undefined;
+    constructor(code: string, what: string, detail?: string);
 }
 export declare function umaskRequest(mask: unknown): {
     op: 'proc-umask';

package/dist/types/process/process-signals.d.ts

@@ -19,6 +19,8 @@ export declare class SignalGate {
     private unwinding;
     private quieted;
     private delivered;
+    private raised;
+    private entering;
     private readonly raw;
     private readonly header;
     private readonly hooks;
@@ -29,5 +31,6 @@ export declare class SignalGate {
     private report;
     quiet<T>(fn: () => T): T;
     interrupt(): boolean;
+    raisedOnEntry(): number;
     deliver(): void;
 }

package/dist/types/process/wasi/wasi-cred.d.ts

@@ -0,0 +1,11 @@
+import type { Cred } from '../../kernel/cred.js';
+export declare class CredCache {
+    private cred;
+    private stamp;
+    private readonly fetch;
+    private readonly shared;
+    constructor(fetch: () => Cred, shared?: Int32Array);
+    private gen;
+    get(): Cred;
+    change(apply: () => Cred): Cred;
+}

package/dist/types/process/wasi/wasi-files.d.ts

@@ -91,6 +91,7 @@ export declare function resolveUnder(dir: string, path: string): string;
 export declare function pathInode(path: string): bigint;
 export declare const MISS_TTL_MS = 20;
 export declare const FS_GEN = 4;
+export declare const CRED_GEN = 5;
 export declare const SHARED_IDS_BYTES: number;
 export declare function cachingBridge(bridge: SyncFsPosixBridge, now?: () => number, shared?: Int32Array): SyncFsPosixBridge & {
     invalidate(): void;

package/dist/types/process/wasi/wasi-host.d.ts

@@ -28,6 +28,7 @@ export interface WasiHostOptions {
         device?: DeviceMeta;
     }>;
     shared?: Int32Array;
+    credGen?: Int32Array;
     forked?: {
         fds: readonly WasiForkFd[];
         cloexec: readonly number[];
@@ -38,11 +39,15 @@ export type WasiFunction = (...args: never[]) => number | undefined;
 export declare class WasiHost {
     readonly mem: WasiMemory;
     readonly fds: WasiFds;
+    private readonly creds;
     private readonly started;
     private cache;
     private readonly startCwd;
     interruptWakes: boolean;
+    strictEpoll: boolean;
     entered: boolean;
+    enteredSignals: number;
+    raisedOnEntry: (() => number) | undefined;
     onRaise: ((sig: number) => boolean) | undefined;
     muted: ((fd: number, data: Uint8Array) => boolean) | undefined;
     signals: WasiSignals | undefined;
@@ -62,6 +67,9 @@ export declare class WasiHost {
     sliccImports(): Record<string, WasiFunction>;
     private poll;
     private maskedPoll;
+    private epollWait;
+    private settleEntry;
+    private maskedEpoll;
     private suspend;
     imports(): Record<string, WasiFunction>;
     now(id: number): bigint;
@@ -81,6 +89,7 @@ export declare class WasiHost {
     private lockedFile;
     private kernelStat;
     private write;
+    private brokenPipe;
     private read;
     private local;
     private seek;

package/dist/types/process/wasi/wasi-sigmask.d.ts

@@ -7,13 +7,19 @@ export declare class WasiSigmask {
     private readonly header;
     private readonly deliver;
     private readonly process;
-    constructor(header: Int32Array, deliver: () => void, process?: Int32Array);
+    readonly tid: number;
+    constructor(header: Int32Array, deliver: () => void, process?: Int32Array, tid?: number);
     static unsupported(header: Int32Array): void;
     set(how: number, setLo: number, setHi: number, old: (lo: number, hi: number) => void): number;
     swap(setLo: number, setHi: number): [number, number];
     deliverUnblocked(): boolean;
     restore([lo, hi]: [number, number]): void;
+    blockedBits(): number;
+    blocks(sig: number): boolean;
     inherited(): BlockedMask;
     discard(sig: number): void;
+    sigwait(setLo: number, timeoutNs: bigint, publish: (set: number) => void, took: (sig: number) => void, entered?: boolean): number;
+    private take;
+    private interrupted;
     pending(): number;
 }

package/dist/types/process/wasi/wasix-epoll.d.ts

@@ -0,0 +1,3 @@
+import type { WasiFunction, WasiHost } from './wasi-host.js';
+export declare function timeoutMs(ns: bigint): number;
+export declare function wasixEpollImports(host: WasiHost): Record<string, WasiFunction>;

package/dist/types/refused-command.d.ts

@@ -0,0 +1,4 @@
+import type { Command } from './commands.js';
+export declare const REFUSED_PATH = "/usr/lib/slicc/refused";
+export declare const REFUSED_SOURCE: string;
+export declare function refusing(command: Command): Command;

package/dist/types/transport.d.ts

@@ -10,6 +10,7 @@ export interface FetchTransportOptions {
     webSocket?: boolean | WebSocketConstructor;
     webSocketHeaders?: boolean;
     redirect?: 'follow' | 'manual';
+    streamingBodies?: boolean;
 }
 export declare const SEND_BUFFER: number;
 export declare function fetchTransport(options?: FetchTransportOptions): RealmTransport;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.103.4",
+  "version": "1.106.3",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -63,26 +63,26 @@
     "format": "biome check --write ."
   },
   "devDependencies": {
-    "@ai-ecoverse/py-numpy": "2.3.2-9",
+    "@ai-ecoverse/py-numpy": "2.3.2-10",
     "@ai-ecoverse/slicc-node": "2.5.1",
     "@ai-ecoverse/slicc-scrub": "1.0.0",
-    "@ai-ecoverse/slicc-shared-web": "1.21.0",
+    "@ai-ecoverse/slicc-shared-web": "1.21.1",
     "@ai-ecoverse/wasi-cargo": "0.99.0-2",
-    "@ai-ecoverse/wasi-pnpm": "12.9.1-8",
+    "@ai-ecoverse/wasi-pnpm": "12.9.1-9",
     "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
     "@ai-ecoverse/wasi-rustc": "1.98.1-4",
     "@ai-ecoverse/wasi-zig": "0.16.0-15",
-    "@ai-ecoverse/wasix-python": "3.14.2-21",
-    "@ai-ecoverse/wasm-bash": "5.3.0-18",
-    "@ai-ecoverse/wasm-coreutils": "9.12.0-7",
-    "@ai-ecoverse/wasm-curl": "8.22.0-4",
+    "@ai-ecoverse/wasix-python": "3.14.2-24",
+    "@ai-ecoverse/wasm-bash": "5.3.0-19",
+    "@ai-ecoverse/wasm-coreutils": "9.12.0-8",
+    "@ai-ecoverse/wasm-curl": "8.22.0-5",
     "@ai-ecoverse/wasm-git": "2.55.0-15",
-    "@ai-ecoverse/wasm-procps": "4.0.7-1",
+    "@ai-ecoverse/wasm-procps": "4.0.7-2",
     "@ai-ecoverse/wasm-sqlite3": "3.54.0-3",
-    "@ai-ecoverse/wasm-tar": "1.35.0-6",
+    "@ai-ecoverse/wasm-tar": "1.35.0-7",
     "@ai-ecoverse/wasm-tls-engine": "4.2.0-1",
-    "@ai-ecoverse/wasm-tree": "2.3.2-1",
-    "@ai-ecoverse/wasm-util-linux": "2.42.4-1",
+    "@ai-ecoverse/wasm-tree": "2.3.2-2",
+    "@ai-ecoverse/wasm-util-linux": "2.42.4-2",
     "@biomejs/biome": "2.5.15",
     "@types/node": "24.19.1",
     "esbuild": "0.28.2",