@ai-ecoverse/slicc-kernel 1.133.4 → 1.134.0

package/dist/types/kernel/held-cwd.d.ts

@@ -0,0 +1,65 @@
+import type { HeldCwdInit } from './protocol.js';
+export declare const CWD_SLOTS = 1024;
+export declare const UNTRACKED: number;
+export interface HeldCwdReply {
+    slot?: number;
+    seen?: number;
+    dead?: boolean;
+}
+export interface CwdAnswer {
+    gen: number;
+    alive: boolean;
+    slot?: number;
+}
+export type InodeOf = (path: string) => Promise<string | number | undefined>;
+export declare class CwdTable {
+    readonly sab: SharedArrayBuffer;
+    private readonly view;
+    private readonly held;
+    private readonly free;
+    private next;
+    checks: number;
+    private readonly inodeOf;
+    constructor(inodeOf: InodeOf);
+    hold(path: string, from?: number): Promise<number>;
+    share(slot: number | undefined): number;
+    release(slot: number | undefined): void;
+    stateOf(slot: number): {
+        seen: number;
+        dead: boolean;
+    };
+    touched(paths: readonly string[], trees?: readonly string[]): void;
+    check(slot: number): Promise<CwdAnswer>;
+}
+export declare class HeldCwd {
+    private readonly view;
+    private seen;
+    private dead;
+    private slot;
+    private at;
+    private readonly ask;
+    constructor(sab: SharedArrayBuffer, slot: number, ask: () => CwdAnswer, state: {
+        seen: number;
+        dead: boolean;
+        path?: string;
+    });
+    moved(reply: HeldCwdReply, path?: string): boolean;
+    private follow;
+    alive(path?: string): boolean;
+    get current(): number;
+}
+export interface HeldOptions {
+    cwds?: SharedArrayBuffer;
+    cwdSlot?: number;
+    cwdState?: {
+        seen: number;
+        dead: boolean;
+    };
+    cwdCheck?: () => Promise<CwdAnswer>;
+    cwdChdir?: (path: string) => Promise<HeldCwdReply>;
+}
+export declare function heldInit(o: HeldOptions): {
+    held?: HeldCwdInit;
+};
+export declare function heldHooks(o: HeldOptions): Pick<HeldOptions, 'cwdCheck' | 'cwdChdir'>;
+export declare function inheritedCwd(chdir: boolean | undefined, parent: number | undefined): number | undefined;

package/dist/types/kernel/host.d.ts

@@ -9,6 +9,7 @@ import { type CpuTimes } from './cpu-clock.js';
 import { type Cred } from './cred.js';
 import { type FdTable, type OpenFile } from './fd-table.js';
 import type { FifoTable } from './fifo.js';
+import { type CwdAnswer, type HeldCwdReply } from './held-cwd.js';
 import type { JobTable } from './jobs.js';
 import type { KernelLocks } from './lock-service.js';
 import type { HttpHandles } from './net/http-syscalls.js';
@@ -31,6 +32,14 @@ export interface WasmWorkerLike {
 export interface SpawnWasmOptions {
     pid: number;
     changes?: SharedArrayBuffer;
+    cwds?: SharedArrayBuffer;
+    cwdSlot?: number;
+    cwdState?: {
+        seen: number;
+        dead: boolean;
+    };
+    cwdCheck?: () => Promise<CwdAnswer>;
+    cwdChdir?: (path: string) => Promise<HeldCwdReply>;
     ignored?: number;
     blocked?: BlockedMask;
     umask?: number;

package/dist/types/kernel/net/sealed-pg.d.ts

@@ -1,12 +1,24 @@
+import type { SessionScram } from '../sealed-session.js';
 export declare const PG_MESSAGE_MAX: number;
-export type PgAsk = (placeholders: string[]) => Promise<Record<string, string> | undefined>;
 export declare function sniffPg(start: string): 'yes' | 'no' | 'more';
+export interface PgExpect {
+    real: string;
+    fake: string;
+}
 export declare class PgServer {
     private buffer;
     private skip;
-    private lost;
     cleartext: boolean;
-    feed(bytes: Uint8Array): void;
+    sasl: boolean;
+    serverFirst: string | undefined;
+    expect: PgExpect | undefined;
+    failed: boolean;
+    private lost;
+    private auth;
+    private mechanisms;
+    private final;
+    private lose;
+    filter(bytes: Uint8Array): Uint8Array;
 }
 export interface PgFrame {
     bytes: Uint8Array;
@@ -14,4 +26,15 @@ export interface PgFrame {
     done: boolean;
 }
 export declare function pgLength(bytes: Uint8Array, started: boolean): number | undefined;
-export declare function pgPassword(message: Uint8Array, server: PgServer, ask: PgAsk): Promise<PgFrame>;
+export interface PgAsks {
+    cleartext(placeholders: string[]): Promise<Record<string, string> | undefined>;
+    scram(scram: SessionScram): Promise<Record<string, string> | undefined>;
+}
+export declare class PgClient {
+    private clientFirst;
+    private readonly server;
+    private readonly asks;
+    constructor(server: PgServer, asks: PgAsks);
+    message(message: Uint8Array): Promise<PgFrame>;
+    private final;
+}

package/dist/types/kernel/net/sealed-scram.d.ts

@@ -0,0 +1,20 @@
+export interface ScramExchange {
+    clientFirstBare: string;
+    serverFirst: string;
+    clientFinalBare: string;
+    salt: Uint8Array;
+    iterations: number;
+}
+export interface ScramKeys {
+    proof: Uint8Array;
+    serverSignature: Uint8Array;
+}
+export declare function base64Of(bytes: Uint8Array): string;
+export declare function clientFirstBare(message: string): string | undefined;
+export declare function exchangeOf(clientFirst: string, serverFirst: string, clientFinal: string): {
+    exchange: ScramExchange;
+    proof: Uint8Array;
+} | undefined;
+export declare function scramKeys(password: string, x: ScramExchange): Promise<ScramKeys>;
+export declare function saslprep(password: string): string;
+export declare function sameBytes(a: Uint8Array, b: Uint8Array): boolean;

package/dist/types/kernel/process.d.ts

@@ -13,6 +13,7 @@ import { type Cred, type CredChange } from './cred.js';
 import { type EpollSyscall } from './epoll.js';
 import { type DeviceAccess, type FdTable, type HeldMeta, type KernelFdKind, type OpenFile } from './fd-table.js';
 import type { FifoTable } from './fifo.js';
+import type { CwdAnswer, HeldCwdReply } from './held-cwd.js';
 import { type HostSyscall } from './host-ops.js';
 import type { JobTable } from './jobs.js';
 import type { KernelLocks } from './lock-service.js';
@@ -188,6 +189,11 @@ export type WasmSyscall = {
 } | {
     op: 'proc-umask';
     mask?: number;
+} | {
+    op: 'cwd-check';
+} | {
+    op: 'cwd-chdir';
+    path: string;
 } | {
     op: 'proc-cred';
 } | {
@@ -353,6 +359,8 @@ export declare function isWasmSyscall(req: object): req is WasmSyscall;
 export declare const DEFAULT_UMASK = 18;
 export interface WasmProcessOptions {
     ignored?: number;
+    cwdCheck?: () => Promise<CwdAnswer>;
+    cwdChdir?: (path: string) => Promise<HeldCwdReply>;
     source?: SourceCheck;
     umask?: number;
     cred?: Cred;

package/dist/types/kernel/protocol.d.ts

@@ -80,6 +80,12 @@ export interface InheritedFd {
     desc?: number;
     fifo?: string;
 }
+export interface HeldCwdInit {
+    sab: SharedArrayBuffer;
+    slot: number;
+    seen: number;
+    dead: boolean;
+}
 export interface WasmProcessInitMsg {
     type: typeof WASM_PROCESS_INIT;
     pid: number;
@@ -90,6 +96,7 @@ export interface WasmProcessInitMsg {
     cwd: string;
     sab: SharedArrayBuffer;
     changes?: SharedArrayBuffer;
+    held?: HeldCwdInit;
     ppid?: number;
     umask?: number;
     cred?: Cred;

package/dist/types/kernel/sealed-session.d.ts

@@ -8,6 +8,12 @@ export interface SessionHead {
     method: string;
     path: string;
 }
+export interface SessionScram {
+    clientFirstBare: string;
+    serverFirst: string;
+    clientFinalBare: string;
+    proof: string;
+}
 export interface SessionFields {
     stamp: SealedCaller;
     session: string;
@@ -18,8 +24,9 @@ export interface SessionFields {
     verified: boolean;
     handshakeAt: number;
     exit: string;
-    placeholders: string[];
+    placeholders?: string[];
     head?: SessionHead;
+    scram?: SessionScram;
 }
 export declare function boundHost(servername: string): string;
 export declare function sessionAskable(f: SessionFields, now: number): boolean;
@@ -36,10 +43,16 @@ export declare function sessionRequest(f: SessionFields): {
     verified: boolean;
     handshakeAt: number;
     exit: string;
-    placeholders: string[];
+    placeholders?: string[] | undefined;
     head?: {
         method: string;
         path: string;
     } | undefined;
+    scram?: {
+        clientFirstBare: string;
+        serverFirst: string;
+        clientFinalBare: string;
+        proof: string;
+    } | undefined;
 };
-export declare function sessionValues(reply: unknown, asked: readonly string[]): Record<string, string> | undefined;
+export declare function sessionValues(reply: unknown, asked: readonly string[] | undefined): Record<string, string> | undefined;

package/dist/types/launcher.d.ts

@@ -14,6 +14,7 @@ import { FsWatchers } from './fs/watch.js';
 import { type ClipboardHook } from './kernel/clipboard.js';
 import type { CpuTimes } from './kernel/cpu-clock.js';
 import { type Cred } from './kernel/cred.js';
+import { CwdTable } from './kernel/held-cwd.js';
 import { type WasmWorkerLike } from './kernel/host.js';
 import type { CaStore } from './kernel/net/realm-ca.js';
 import { Resolver } from './kernel/net/resolver.js';
@@ -200,6 +201,8 @@ export declare class Launcher {
     readonly hostname: string;
     readonly watchers: FsWatchers;
     private readonly changes;
+    readonly cwds: CwdTable;
+    private readonly cwdSlots;
     private readonly pnpmHome;
     private readonly pnpmChain;
     private pnpmMade;
@@ -343,6 +346,8 @@ export declare class Launcher {
     private identityOf;
     private running;
     private decide;
+    private heldFor;
+    private chdirHeld;
     private forker;
     private keySignal;
     private resolvePrefixes;

package/dist/types/process/wasi/wasi-fds.d.ts

@@ -1,4 +1,5 @@
 import { type DeviceAccess, type DeviceMeta, type KernelFdKind } from '../../kernel/fd-table.js';
+import type { HeldCwd } from '../../kernel/held-cwd.js';
 import type { WasmSyscall } from '../../kernel/process.js';
 import { type SyncFsBridgeStat, type SyncFsPosixBridge } from '../../realm/sync-fs-wire.js';
 import type { ProcessSys } from '../kernel-streams.js';
@@ -117,7 +118,13 @@ export declare class WasiFds {
     private survives;
     private detach;
     renamed(from: string, to: string, replacedLinked?: SyncFsBridgeStat): void;
+    held: HeldCwd | undefined;
+    private cwdEntry;
+    goneCwd(dir: Extract<WasiEntry, {
+        type: 'dir';
+    }>): boolean;
     resolve(dirfd: number, path: string): string;
+    private joined;
     private openKernelDevice;
     private openCharDevice;
     open(path: string, oflags: number, rights: bigint, fdflags: number, mode?: number): number;

package/dist/types/process/wasi/wasi-host.d.ts

@@ -1,4 +1,5 @@
 import type { DeviceMeta, KernelFdKind } from '../../kernel/fd-table.js';
+import type { HeldCwd } from '../../kernel/held-cwd.js';
 import type { SyncFsPosixBridge } from '../../realm/sync-fs-wire.js';
 import { WasiFds, type WasiForkFd, type WasiKernel } from './wasi-fds.js';
 import { WasiMemory } from './wasi-memory.js';
@@ -35,6 +36,7 @@ export interface WasiHostOptions {
     };
     preopenRoot?: boolean;
     bare?: boolean;
+    held?: HeldCwd;
 }
 export type WasiFunction = (...args: never[]) => number | undefined;
 export declare class WasiHost {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.133.4",
+  "version": "1.134.0",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -66,14 +66,14 @@
     "@ai-ecoverse/py-numpy": "2.5.4-1",
     "@ai-ecoverse/slicc-node": "2.5.1",
     "@ai-ecoverse/slicc-scrub": "1.0.0",
-    "@ai-ecoverse/slicc-shared-web": "1.25.1",
+    "@ai-ecoverse/slicc-shared-web": "1.25.2",
     "@ai-ecoverse/wasi-cargo": "0.99.0-3",
-    "@ai-ecoverse/wasi-pnpm": "12.9.1-15",
+    "@ai-ecoverse/wasi-pnpm": "12.9.1-16",
     "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
     "@ai-ecoverse/wasi-rustc": "1.98.1-6",
     "@ai-ecoverse/wasi-zig": "0.16.0-17",
     "@ai-ecoverse/wasix-python": "3.15.0-2",
-    "@ai-ecoverse/wasm-bash": "5.3.0-20",
+    "@ai-ecoverse/wasm-bash": "5.3.0-21",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-10",
     "@ai-ecoverse/wasm-curl": "8.22.0-7",
     "@ai-ecoverse/wasm-git": "2.55.0-17",