@ai-ecoverse/slicc-kernel 1.140.5 → 1.141.0

package/dist/kernel-worker.js

@@ -7128,7 +7128,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.140.5" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.141.0" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -20103,8 +20103,9 @@ var SessionWriter = class {
     return this.proven;
   }
   async mayTouch() {
-    if (this.s.verified) return true;
-    return (await this.proof("pg"))?.anchor !== void 0;
+    if (this.s.verified) return { touch: true };
+    const proof = await this.proof("pg");
+    return { touch: proof?.anchor !== void 0, binding: proof?.binding };
   }
   async prove(protocol) {
     const s = this.s;
@@ -20118,10 +20119,13 @@ var SessionWriter = class {
         exit: s.exit
       });
       const anchor = found ? await s.anchoring(found) : void 0;
-      if (anchor) return { anchor };
+      if (anchor) return this.anchored(anchor);
     }
     return s.verified ? {} : void 0;
   }
+  async anchored(anchor) {
+    return { anchor, binding: await this.s.anchoredBinding?.() };
+  }
   async ask(protocol, position, extra) {
     const s = this.s;
     const proof = await this.proof(protocol);
@@ -20338,7 +20342,11 @@ function sealedConn(conn, s) {
       for (; ; ) {
         const bytes = await conn.read();
         if (!bytes) return bytes;
-        if (writer?.sawPg && pg.touch === void 0) pg.touch = await writer.mayTouch();
+        if (writer?.sawPg && pg.touch === void 0) {
+          const may = await writer.mayTouch();
+          pg.touch = may.touch;
+          pg.binding ??= may.binding;
+        }
         const out = writer?.sawPg ? pg.filter(bytes) : bytes;
         if (pg.failed) {
           conn.close();
@@ -20589,7 +20597,8 @@ function anchoringOf(seal, info, servername) {
   const engine = seal.engine;
   if (!engine?.chainVerify || isIP2(servername) || info.peerCertificates.length === 0) return {};
   return {
-    anchoring: (found) => anchorFor(engine, info.peerCertificates, servername, found)
+    anchoring: (found) => anchorFor(engine, info.peerCertificates, servername, found),
+    anchoredBinding: () => endPointBinding(info.peerCertificates[0])
   };
 }
 function sealing(seal, raw2, info, servername) {