@ai-ecoverse/slicc-kernel 1.125.9 → 1.125.10

package/README.md

@@ -635,7 +635,7 @@ The proxy answers `200` with `Content-Type: application/vnd.slicc.raw-fetch`: a
 
 ## Filesystem
 
-`/` is the OPFS root. Each process mounts the top-level directories that exist when it starts (plus `/usr` and `/bin`), so files in them are shared by all processes and visible through the OPFS API as soon as the process that wrote them has closed them; `run` resolves only after that. `createKernel` creates `/tmp` and `/home` in OPFS, so they are shared too. Files directly in `/`, and directories created there after a process started, are OPFS as well, the same for Emscripten and WASI programs; only `/dev` and `/proc` live in each process's memory. A program's `mkdir` (WASI `path_create_directory`, Emscripten's `mkdir`) is exclusive, as on Linux: it fails with `EEXIST` when the name exists, and of several processes or threads making one name at once exactly one succeeds, so a directory works as a lock. Under a missing directory it fails with `ENOENT`, as on Linux (`mkdir -p` and `os.makedirs` make the parents in the program); a JS program's `ctx.fs.mkdir` makes parents itself. The kernel makes the system `PNPM_HOME` (`/usr/local/share/pnpm`, or the embedder's) when it starts, since pnpm makes only its `bin` directory there. A full origin storage (`QuotaExceededError`, which also comes early in a browser's private or off-the-record contexts, whatever `navigator.storage.estimate()` says) is `ENOSPC`, never retried. An OPFS or IndexedDB failure that has no POSIX counterpart is `EIO`; its message names the DOM error and the operation (`lookup`, `read`, `write`, `commit` or `sidecar`), and the kernel worker logs the first of each kind to its console. File contents are buffered per open file and written back on close, `fsync` and exit, so a refused write (`ENOSPC`, `EIO`) surfaces at that close or `fsync`, and a program that ignores close errors doesn't see it (`echo x > f` can exit 0 with `f` empty, as with any buffered write-back). A write-back error a close has already reported to a WASI program isn't raised again when it exits, so the program keeps its own exit status. Metadata operations (`mkdir`, `rename`, `rm`, …) go straight to OPFS. The kernel worker is the only writer.
+`/` is the OPFS root. Each process mounts the top-level directories that exist when it starts (plus `/usr` and `/bin`), so files in them are shared by all processes and visible through the OPFS API as soon as the process that wrote them has closed them; `run` resolves only after that. `createKernel` creates `/tmp` and `/home` in OPFS, so they are shared too. Files directly in `/`, and directories created there after a process started, are OPFS as well, the same for Emscripten and WASI programs; only `/dev` and `/proc` live in each process's memory. A program's `mkdir` (WASI `path_create_directory`, Emscripten's `mkdir`) is exclusive, as on Linux: it fails with `EEXIST` when the name exists, and of several processes or threads making one name at once exactly one succeeds, so a directory works as a lock. Under a missing directory it fails with `ENOENT`, as on Linux (`mkdir -p` and `os.makedirs` make the parents in the program); a JS program's `ctx.fs.mkdir` makes parents itself. The kernel makes the system `PNPM_HOME` (`/usr/local/share/pnpm`, or the embedder's) when it starts, since pnpm makes only its `bin` directory there. A full origin storage (`QuotaExceededError`, which also comes early in a browser's private or off-the-record contexts, whatever `navigator.storage.estimate()` says) is `ENOSPC`, never retried. A read that meets `NotFoundError` while a writer outside the kernel swaps the file in with `createWritable` (and a `stat`, `lstat` or `utimes` that meets it) looks the name up again, up to three times, before it fails ([#1075](https://github.com/ai-ecoverse/slicc-kernel/issues/1075)), so a program whose package is overwritten in place keeps starting. An OPFS or IndexedDB failure that has no POSIX counterpart is `EIO`; its message names the DOM error and the operation (`lookup`, `read`, `write`, `commit` or `sidecar`), and the kernel worker logs the first of each kind to its console. File contents are buffered per open file and written back on close, `fsync` and exit, so a refused write (`ENOSPC`, `EIO`) surfaces at that close or `fsync`, and a program that ignores close errors doesn't see it (`echo x > f` can exit 0 with `f` empty, as with any buffered write-back). A write-back error a close has already reported to a WASI program isn't raised again when it exits, so the program keeps its own exit status. Metadata operations (`mkdir`, `rename`, `rm`, …) go straight to OPFS. The kernel worker is the only writer.
 
 A lookup follows at most 40 symlinks, as Linux does: the 41st is `ELOOP`, for WASI programs, JS programs and the kernel API alike, with or without `..` in a link's target. Emscripten programs resolve paths in their glue, which stops one link earlier, at 40.
 

package/dist/kernel-worker.js

@@ -1077,6 +1077,17 @@ var S_IFIFO = 4096;
 var PERM_MASK = 4095;
 var S_ISGID2 = 1024;
 var READ_ATTEMPTS = 3;
+async function swapped(op) {
+  for (let attempt = 1; ; attempt++) {
+    try {
+      return await op();
+    } catch (err) {
+      if (err?.name !== "NotFoundError" || attempt >= READ_ATTEMPTS) {
+        throw err;
+      }
+    }
+  }
+}
 var MAX_LINKS2 = 40;
 var CHECK_MS = 1e3;
 var ABSENT_MS = 2;
@@ -1862,10 +1873,14 @@ var OpfsFs = class {
     return { ...stat, ...ownOf(meta) ?? inherit(entries) };
   }
   stat(path) {
-    return this.unreplaced(async () => this.describe(await this.located(path, true)));
+    return this.unreplaced(
+      () => swapped(async () => this.describe(await this.located(path, true)))
+    );
   }
   lstat(path) {
-    return this.unreplaced(async () => this.describe(await this.located(path, false)));
+    return this.unreplaced(
+      () => swapped(async () => this.describe(await this.located(path, false)))
+    );
   }
   async exists(path) {
     return this.locate(path, true).then(
@@ -1891,8 +1906,17 @@ var OpfsFs = class {
   }
   reading(path, op) {
     return this.unreplaced(async () => {
-      const handle = await this.existing(path);
-      return this.retrying(path, () => op(handle), false);
+      for (let attempt = 1; ; attempt++) {
+        const found = await this.locate(path, true);
+        const handle = found.handle;
+        if (handle.kind === "directory") throw fsError("EISDIR", path);
+        try {
+          return await this.retrying(path, () => op(handle), false);
+        } catch (err) {
+          if (err.code !== "ENOENT" || attempt >= READ_ATTEMPTS) throw err;
+          this.files.delete(found.path);
+        }
+      }
     });
   }
   async existing(path, writing = false) {
@@ -2396,10 +2420,10 @@ var OpfsFs = class {
     }));
   }
   async utimes(path, atime, mtime) {
-    await this.setTimes(await this.locate(path, true), atime, mtime);
+    await swapped(async () => this.setTimes(await this.locate(path, true), atime, mtime));
   }
   async lutimes(path, atime, mtime) {
-    await this.setTimes(await this.locate(path, false), atime, mtime);
+    await swapped(async () => this.setTimes(await this.locate(path, false), atime, mtime));
   }
   async setTimes(found, atime, mtime) {
     this.refuse(found.path);
@@ -6632,7 +6656,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.125.9" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.125.10" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC