@ai-ecoverse/slicc-kernel 1.130.2 → 1.132.0

package/dist/kernel-worker.js

@@ -350,6 +350,17 @@ async function openMeta(name2, factory) {
   return new IndexedDbMeta(await openMetaDb(name2, factory));
 }
 
+// src/fs/notice.ts
+function dirsChannel(metadata) {
+  return `slicc-kernel-dirs:${metadata}`;
+}
+function noticeOf(data) {
+  if (Array.isArray(data)) return { paths: data.filter((p) => typeof p === "string"), trees: [] };
+  const notice = data ?? {};
+  const strings = (list) => Array.isArray(list) ? list.filter((p) => typeof p === "string") : [];
+  return { paths: strings(notice.paths), trees: strings(notice.trees) };
+}
+
 // src/fs/types.ts
 function rangedOps(fs) {
   const { pread, pwrite, truncate } = fs;
@@ -1288,8 +1299,9 @@ var OpfsFs = class {
         for (const path of [...c.paths, ...c.trees]) this.forget(path);
       });
       this.channel.onmessage = ({ data }) => {
-        for (const path of data) this.forget(path);
-        remote?.emit({ paths: data, trees: [] });
+        const { paths, trees } = noticeOf(data);
+        for (const path of [...paths, ...trees]) this.forget(normalizePath(path));
+        remote?.emit({ paths, trees });
       };
       this.channel.unref?.();
     }
@@ -7022,7 +7034,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.130.2" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.132.0" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -17746,7 +17758,7 @@ var TOKEN5 = "[!#$%&'*+.^_`|~0-9a-z-]+";
 var HEADER = new RegExp(`^header:${TOKEN5}$`);
 var METHOD = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
 var TARGET = /^[\x21-\x7e]+$/;
-var SESSION_EXIT = /^(tailscale|device:[A-Za-z0-9._-]+)$/;
+var SESSION_EXIT = /^(tailscale|device:[A-Za-z0-9._:-]+)$/;
 var HOST = /^[a-z0-9.:-]+$/;
 var UNSAFE = /[\r\n\0]/;
 var POSITIONS = {
@@ -18495,6 +18507,90 @@ async function substituteHead(head, ask) {
 `, values };
 }
 
+// src/kernel/net/sealed-pg.ts
+var PG_MESSAGE_MAX = 16 * 1024;
+var PROTOCOL_3 = 196608;
+var CLEARTEXT = 3;
+function int32(bytes, at) {
+  return bytes[at] << 24 | bytes[at + 1] << 16 | bytes[at + 2] << 8 | bytes[at + 3];
+}
+function sniffPg(start2) {
+  const bytes = Uint8Array.from(start2, (c) => c.charCodeAt(0));
+  if (bytes.length === 0 || bytes[0] !== 0) return bytes.length === 0 ? "more" : "no";
+  if (bytes.length < 8) return "more";
+  const length2 = int32(bytes, 0);
+  return length2 >= 8 && length2 <= PG_MESSAGE_MAX && int32(bytes, 4) === PROTOCOL_3 ? "yes" : "no";
+}
+var PgServer = class {
+  buffer = new Uint8Array(0);
+  skip = 0;
+  lost = false;
+  cleartext = false;
+  feed(bytes) {
+    if (this.lost) return;
+    const data = new Uint8Array(this.buffer.length + bytes.length);
+    data.set(this.buffer);
+    data.set(bytes, this.buffer.length);
+    let at = 0;
+    for (; ; ) {
+      const left = data.length - at;
+      if (this.skip > 0) {
+        const n = Math.min(this.skip, left);
+        this.skip -= n;
+        at += n;
+        if (this.skip > 0) break;
+        continue;
+      }
+      if (left < 5) break;
+      const type = data[at];
+      const whole = 1 + int32(data, at + 1);
+      if (whole < 5 || type === 82 && whole > PG_MESSAGE_MAX) {
+        this.lost = true;
+        this.cleartext = false;
+        this.buffer = new Uint8Array(0);
+        return;
+      }
+      if (type !== 82) {
+        this.skip = whole;
+        continue;
+      }
+      if (left < whole) break;
+      this.cleartext = whole === 9 && int32(data, at + 5) === CLEARTEXT;
+      at += whole;
+    }
+    this.buffer = data.slice(at);
+  }
+};
+function frame3(type, body) {
+  const out = new Uint8Array(5 + body.length);
+  out[0] = type;
+  const length2 = 4 + body.length;
+  out.set([length2 >>> 24 & 255, length2 >>> 16 & 255, length2 >>> 8 & 255, length2 & 255], 1);
+  for (let i = 0; i < body.length; i++) out[5 + i] = body.charCodeAt(i);
+  return out;
+}
+function pgLength(bytes, started) {
+  const header3 = started ? 5 : 4;
+  if (bytes.length < header3) return void 0;
+  const length2 = int32(bytes, started ? 1 : 0);
+  return started ? 1 + length2 : length2;
+}
+async function pgPassword(message3, server, ask) {
+  if (message3[0] !== 112 || !server.cleartext) return { bytes: message3, done: true };
+  server.cleartext = false;
+  let body = "";
+  for (const b of message3.subarray(5)) body += String.fromCharCode(b);
+  if (!body.endsWith("\0") || body.indexOf("\0") !== body.length - 1)
+    return { bytes: message3, done: true };
+  const password = body.slice(0, -1);
+  const placeholders = placeholdersIn(password);
+  if (placeholders.length === 0 || placeholders.length > SESSION_PLACEHOLDERS)
+    return { bytes: message3, done: true };
+  const values = usable(await ask(placeholders));
+  if (Object.keys(values).length === 0) return { bytes: message3, done: true };
+  return { bytes: frame3(112, `${replaced(password, values)}\0`), values, done: true };
+}
+
 // src/kernel/net/sealed-smtp.ts
 var SMTP_LINE_MAX = 4096;
 var GREETING = ["EHLO ", "HELO "];
@@ -18616,11 +18712,14 @@ function headEnd2(bytes) {
   return -1;
 }
 function modeOf(start2) {
-  const http = sniffHttp1(start2);
-  const smtp = sniffSmtp(start2);
-  if (http === "yes") return "http1";
-  if (smtp === "yes") return "smtp";
-  return http === "no" && smtp === "no" ? "pass" : void 0;
+  const sniffs = [
+    ["http1", sniffHttp1(start2)],
+    ["smtp", sniffSmtp(start2)],
+    ["pg", sniffPg(start2)]
+  ];
+  const hit = sniffs.find(([, v]) => v === "yes");
+  if (hit) return hit[0];
+  return sniffs.every(([, v]) => v === "no") ? "pass" : void 0;
 }
 function crlf(bytes) {
   for (let i = 0; i + 1 < bytes.length; i++) if (bytes[i] === 13 && bytes[i + 1] === 10) return i;
@@ -18634,12 +18733,15 @@ var SessionWriter = class {
   failed;
   session = sessionId();
   smtp;
+  pgStarted = false;
   conn;
   s;
+  pg;
   scope;
-  constructor(conn, s, scope) {
+  constructor(conn, s, pg, scope) {
     this.conn = conn;
     this.s = s;
+    this.pg = pg;
     this.scope = scope;
     this.smtp = new SmtpClient(
       (position, placeholders) => this.ask("smtp", position, placeholders)
@@ -18688,6 +18790,7 @@ var SessionWriter = class {
     if (this.mode === "pass") await this.release();
     else if (this.mode === "http1") await this.http1();
     else if (this.mode === "smtp") await this.lines();
+    else if (this.mode === "pg") await this.messages();
     if (this.mode !== "pass" && this.buffer.length > 0)
       this.timer = setTimeout(() => this.idle(), HEAD_IDLE_MS);
     return bytes.length;
@@ -18718,6 +18821,33 @@ var SessionWriter = class {
     }
     if (this.buffer.length > SMTP_LINE_MAX) await this.release();
   }
+  async messages() {
+    for (; ; ) {
+      const whole = pgLength(this.buffer, this.pgStarted);
+      if (whole === void 0 || whole < 4 || whole > PG_MESSAGE_MAX) {
+        if (whole !== void 0) await this.release();
+        return;
+      }
+      if (this.buffer.length < whole) return;
+      const message3 = this.buffer.slice(0, whole);
+      this.buffer = this.buffer.slice(whole);
+      const started = this.pgStarted;
+      this.pgStarted = true;
+      const out = started ? await pgPassword(
+        message3,
+        this.pg,
+        (placeholders) => this.ask("pg", "password-cleartext", placeholders)
+      ).catch(() => ({ bytes: message3, done: true })) : { bytes: message3, done: false };
+      if ("values" in out && out.values) this.remember(out.values);
+      try {
+        await writeAll4(this.conn, out.bytes);
+      } finally {
+        out.bytes.fill(0);
+        message3.fill(0);
+      }
+      if (out.done) return this.release();
+    }
+  }
   idle() {
     this.chain = this.chain.then(() => this.release()).catch((err) => {
       this.failed ??= err;
@@ -18831,9 +18961,18 @@ function idle() {
   return new Promise((resolve2) => setTimeout(() => resolve2(IDLE2), SCRUB_IDLE_MS));
 }
 function sealedConn(conn, s) {
+  const pg = new PgServer();
   const scope = s.broker.sessions.scope(s.pid, s.host);
-  const writer = substitutes(s) ? new SessionWriter(conn, s, scope) : void 0;
-  const reader = new ScrubReader(conn, scope);
+  const writer = substitutes(s) ? new SessionWriter(conn, s, pg, scope) : void 0;
+  const observed = {
+    ...conn,
+    read: async () => {
+      const bytes = await conn.read();
+      if (bytes) pg.feed(bytes);
+      return bytes;
+    }
+  };
+  const reader = new ScrubReader(writer ? observed : conn, scope);
   return {
     localAddr: conn.localAddr,
     remoteAddr: conn.remoteAddr,
@@ -20477,6 +20616,9 @@ var VfsNodes = class {
   rewritten(path) {
     this.byPath.get(path)?.reread();
   }
+  rewrittenUnder(tree2) {
+    for (const [p, node] of this.byPath) if (within7(p, tree2)) node.reread();
+  }
   doubted(path) {
     for (const [p, node] of this.byPath) if (within7(p, path)) node.doubted();
   }
@@ -26663,7 +26805,7 @@ var Launcher = class {
     options.fs.onPeer?.(() => this.flushOpen());
     options.fs.remoteChanges?.((change) => {
       this.changes.flush();
-      this.rewritten(change.paths);
+      this.rewritten(change.paths, change.trees);
     });
     const holders = [this.held, this.openFiles];
     this.unlinked = new UnlinkedKeeper(
@@ -28449,8 +28591,11 @@ var Launcher = class {
       }
     };
   }
-  rewritten(paths) {
-    for (const nodes of this.openFiles) for (const path of paths) nodes.rewritten(path);
+  rewritten(paths, trees = []) {
+    for (const nodes of this.openFiles) {
+      for (const path of paths) nodes.rewritten(path);
+      for (const tree2 of trees) nodes.rewrittenUnder(tree2);
+    }
     this.changes.publish(...paths);
   }
   async flushOpen() {
@@ -28972,8 +29117,8 @@ function act2(session, req) {
   else if (req.action === "signal") session.signal(signalNumber(req.signal));
   else session.close();
 }
-function dirsChannel(name2) {
-  return name2 === false ? void 0 : `slicc-kernel-dirs:${name2}`;
+function dirsChannelOf(name2) {
+  return name2 === false ? void 0 : dirsChannel(name2);
 }
 function caDb(req) {
   const name2 = req.ca ?? (req.metadata ? `${req.metadata}-ca` : CA_DB);
@@ -29215,7 +29360,7 @@ function serveKernel(port, deps) {
       const net = remotes(port, req);
       ({ transport: remote, uplink } = net);
       const ranged2 = await inOpfs(deps, root);
-      const fs = new OpfsFs(root, meta, dirsChannel(name2), { ranged: ranged2 });
+      const fs = new OpfsFs(root, meta, dirsChannelOf(name2), { ranged: ranged2 });
       await fs.reconcile();
       const started = new Launcher({
         fs,