@ai-ecoverse/slicc-kernel 1.143.5 → 1.144.0

package/dist/types/client/attach.d.ts

@@ -27,6 +27,7 @@ export interface SpawnOptions {
     stdin?: string | Uint8Array;
     group?: 'new';
     pgid?: number;
+    tag?: string;
     onStdout?: (bytes: Uint8Array) => void;
     onStderr?: (bytes: Uint8Array) => void;
 }
@@ -46,6 +47,7 @@ export interface ClientRunOptions {
     user?: string | number;
     env?: Record<string, string>;
     stdin?: string | Uint8Array;
+    tag?: string;
     onStdout?: (text: string) => void;
     onStderr?: (text: string) => void;
 }
@@ -62,6 +64,7 @@ export interface ClientTerminalOptions {
     env?: Record<string, string>;
     cols?: number;
     rows?: number;
+    tag?: string;
     onData?: (bytes: Uint8Array) => void;
 }
 export interface ClientTerminal {

package/dist/types/client/protocol.d.ts

@@ -21,6 +21,7 @@ export interface SpawnRequestOptions {
     env?: Record<string, string>;
     stdin?: Uint8Array;
     pgid?: number;
+    tag?: string;
 }
 export interface TerminalRequestOptions {
     cwd?: string;
@@ -28,6 +29,7 @@ export interface TerminalRequestOptions {
     env?: Record<string, string>;
     cols?: number;
     rows?: number;
+    tag?: string;
 }
 export type TerminalAction = {
     action: 'write';
@@ -139,6 +141,7 @@ export interface ProcessEntry {
     uid?: number;
     gid?: number;
     tag?: string;
+    tags?: string[];
 }
 export interface MessagePortLike {
     postMessage(message: unknown, transfer?: Transferable[]): void;

package/dist/types/client/serve-client.d.ts

@@ -1,5 +1,5 @@
 import type { RealmTransport } from '../kernel/net/transport.js';
-import type { Launcher } from '../launcher.js';
+import { type Launcher } from '../launcher.js';
 import { type LockManagerLike, type MessagePortLike } from './protocol.js';
 export interface ClientHost {
     scope?: 'transport';

package/dist/types/cron/crontab.d.ts

@@ -2,6 +2,17 @@ import type { KernelFs } from '../fs/types.js';
 import type { Cred } from '../kernel/cred.js';
 import type { Account } from '../users.js';
 export declare const CRONTAB_MAX: number;
+export declare const TAGS_PATH = "/var/spool/cron/tags";
+export interface JobTags {
+    tags: string[];
+    base: number;
+}
+export interface CrontabCaller {
+    tags?: readonly string[] | undefined;
+    base?: number | undefined;
+}
+export type TableTags = Record<string, Record<string, JobTags>>;
+export declare function readTags(fs: KernelFs): Promise<TableTags>;
 export interface CrontabCall {
     op: 'proc-crontab';
     action: 'list' | 'remove' | 'install';
@@ -22,6 +33,7 @@ export declare function crontabCall(req: Partial<CrontabCall>): CrontabCall | un
 export declare class Crontabs {
     private readonly o;
     constructor(options: CrontabsOptions);
-    request(cred: Readonly<Cred>, call: CrontabCall): Promise<CrontabResult>;
+    request(cred: Readonly<Cred>, call: CrontabCall, caller?: CrontabCaller): Promise<CrontabResult>;
+    private retag;
     private install;
 }

package/dist/types/cron/service.d.ts

@@ -21,6 +21,8 @@ export interface CronRun {
     cwd: string;
     env: Record<string, string>;
     output: (bytes: Uint8Array) => void;
+    tags?: readonly string[];
+    tagBase?: number;
 }
 export interface CronHost {
     fs: KernelFs;

package/dist/types/fs/changes.d.ts

@@ -1,4 +1,5 @@
 export declare const SHARED_TTL_MS = 100;
+export declare const RENAME_WAIT_MS = 100;
 export declare const CHANGES_BYTES: number;
 export declare function changeHash(path: string): number;
 export declare class FileChanges {
@@ -8,6 +9,7 @@ export declare class FileChanges {
     dirtied(delta: number): void;
     foreign(on: boolean): void;
     flush(): void;
+    renamed(): number;
     publish(...paths: string[]): void;
 }
 export declare class ChangeView {
@@ -16,6 +18,8 @@ export declare class ChangeView {
     now(): number;
     clean(): boolean;
     foreign(): boolean;
+    renames(): number;
+    awaitRename(seen: number, ms: number): number;
     changedSince(seen: number, path: string): {
         now: number;
         changed: boolean;

package/dist/types/fs/dac.d.ts

@@ -20,8 +20,10 @@ export declare class Dac {
     private readonly seen;
     private suppressed;
     tagOf: (pid: number) => string | undefined;
+    fenced: (pid: number, path: string) => boolean;
     constructor(mode: 'report' | 'enforce', hook?: DenialHook, log?: (line: string) => void);
     get enforcing(): boolean;
+    fence(denial: Denial): never;
     denied(given: Denial): void;
     private note;
 }

package/dist/types/fs/meta.d.ts

@@ -70,6 +70,10 @@ export declare class MemoryMeta implements MetaStore {
 interface Invalidation {
     paths?: readonly string[];
     trees?: readonly string[];
+    moved?: {
+        from: string;
+        to: string;
+    };
 }
 export declare class IndexedDbMeta implements MetaStore {
     private readonly db;

package/dist/types/fs/opfs.d.ts

@@ -138,7 +138,17 @@ export declare class OpfsFs implements KernelFs {
     pwrite(path: string, offset: number, bytes: Uint8Array): Promise<void>;
     private keptFor;
     private writeAt;
+    private readonly fileWrites;
+    private readonly movingFiles;
+    private writesIdle;
+    private writeBlocked;
+    private renamesInFlight;
+    private writeWaits;
+    private writeEnded;
+    private writesDrained;
+    private movingFile;
     truncate(path: string, size: number): Promise<void>;
+    private truncated;
     writeSession(path: string, truncate: boolean): Promise<WriteSession>;
     readFile(path: string): Promise<string>;
     private writeTarget;

package/dist/types/fs/remote.d.ts

@@ -1,6 +1,10 @@
 export interface RemoteChange {
     paths: readonly string[];
     trees: readonly string[];
+    moved?: {
+        from: string;
+        to: string;
+    };
 }
 export interface PeerRename {
     from: string;

package/dist/types/fs/types.d.ts

@@ -94,6 +94,10 @@ export interface KernelFs {
     remoteChanges?(listener: (change: {
         paths: readonly string[];
         trees?: readonly string[];
+        moved?: {
+            from: string;
+            to: string;
+        };
     }) => void): () => void;
     peers?(): Peers | undefined;
     crossings?(mounted: (path: string) => boolean): void;

package/dist/types/kernel/clipboard.d.ts

@@ -10,6 +10,7 @@ export interface ClipboardStamp {
     gid: number;
     users: UsersMode;
     tag?: string;
+    tags?: string[];
 }
 export interface ClipboardHook {
     read(stamp: ClipboardStamp): Promise<string>;
@@ -41,8 +42,8 @@ export declare class ClipboardBroker {
     readonly hook: ClipboardHook | undefined;
     readonly users: UsersMode;
     readonly timeoutMs: number;
-    readonly tagOf: (pid: number) => string | undefined;
-    constructor(hook: ClipboardHook | undefined, users: UsersMode, timeoutMs?: number, tagOf?: (pid: number) => string | undefined);
+    readonly tagOf: (pid: number) => readonly string[] | undefined;
+    constructor(hook: ClipboardHook | undefined, users: UsersMode, timeoutMs?: number, tagOf?: (pid: number) => readonly string[] | undefined);
     ask<T>(work: (hook: ClipboardHook) => Promise<T>): Promise<T>;
     open(access: OpenAccess, stamp: ClipboardStamp): OpenFile;
 }

package/dist/types/kernel/host.d.ts

@@ -89,6 +89,11 @@ export interface SpawnWasmOptions {
         quota: number;
         usage: number;
     } | undefined>;
+    renames?: (since: number, held: readonly string[]) => {
+        now: number;
+        renames: Array<[string, string]>;
+    };
+    renameSeq?: (from: string, to: string) => number | undefined;
     mounts?: () => MountLine[];
     mount?: WasmProcessOptions['mount'];
     umount?: WasmProcessOptions['umount'];

package/dist/types/kernel/proc-info.d.ts

@@ -26,6 +26,7 @@ export interface ProcessInfo {
     sigCgt?: number;
     sigBlk?: number;
     tag?: string;
+    tags?: string[];
 }
 export interface MountLine {
     type: string;

package/dist/types/kernel/process.d.ts

@@ -23,7 +23,7 @@ import type { MountLine, ProcessListing } from './proc-info.js';
 import type { DlState, ForkState } from './protocol.js';
 import { type PtySyscall, type PtyTable } from './pty.js';
 import { type RunRequest } from './run-child.js';
-import type { SealedBroker, SealedCaller } from './sealed.js';
+import { type SealedBroker, type SealedCaller } from './sealed.js';
 import { type SemSyscall, type SemTable } from './sem.js';
 import { type DefaultAction, type SigInfo } from './signals.js';
 import { LoopbackNet } from './socket.js';

package/dist/types/kernel/rename-log.d.ts

@@ -0,0 +1,14 @@
+import type { FileChanges } from '../fs/changes.js';
+export declare const RENAME_LOG_SIZE = 4096;
+export interface RenamesSince {
+    now: number;
+    renames: Array<[string, string]>;
+}
+export declare class RenameLog {
+    private readonly changes;
+    private readonly entries;
+    constructor(changes: FileChanges);
+    add(from: string, to: string): number;
+    seqOf(from: string, to: string): number | undefined;
+    since(seen: number, held: readonly string[]): RenamesSince;
+}

package/dist/types/kernel/sealed.d.ts

@@ -18,7 +18,12 @@ export interface SealedCaller {
     groups: number[];
     users: UsersMode;
     tag?: string;
+    tags?: string[];
 }
+export declare function tagFields(tags: readonly string[] | undefined): {
+    tag?: string;
+    tags?: string[];
+};
 export type SealedRequest = {
     v: 1;
     op: string;
@@ -63,15 +68,15 @@ export declare class SealedBroker {
     readonly hook: SealedHook | undefined;
     readonly users: UsersMode;
     readonly timeoutMs: number;
-    readonly tagOf: (pid: number) => string | undefined;
+    readonly tagOf: (pid: number) => readonly string[] | undefined;
     readonly tickets: TicketBook;
     readonly sessions: SessionScrubs;
     userOf: (uid: number) => Promise<string | undefined>;
-    constructor(hook: SealedHook | undefined, users: UsersMode, timeoutMs?: number, tagOf?: (pid: number) => string | undefined);
+    constructor(hook: SealedHook | undefined, users: UsersMode, timeoutMs?: number, tagOf?: (pid: number) => readonly string[] | undefined);
     stamp(ids: {
         pid: number;
         ppid: number;
-    }, cred: Readonly<Cred>, tag: string | undefined): Promise<SealedCaller>;
+    }, cred: Readonly<Cred>, tags: readonly string[] | undefined): Promise<SealedCaller>;
     consume(fields: ConsumeFields): Promise<Swap | undefined>;
     sessionMaterialize(fields: SessionFields, now?: number): Promise<Record<string, string> | undefined>;
     sessionAnchors(fields: SessionAnchorFields): Promise<Anchors | undefined>;

package/dist/types/kernel/vfs-file.d.ts

@@ -101,6 +101,7 @@ export declare class VfsNodes implements UnlinkHolder {
     private readonly byId;
     keepsOnDisk: boolean;
     changed: ((path: string) => void) | undefined;
+    movedAway: ((from: string, to: string) => void) | undefined;
     dirtied: ((delta: number) => void) | undefined;
     private readonly fs;
     readonly entries: Map<string, Promise<unknown>>;

package/dist/types/launcher.d.ts

@@ -98,6 +98,8 @@ export interface RunOptions {
     pgid?: number;
     user?: string | number | Account;
     tag?: string;
+    tags?: readonly string[];
+    tagBase?: number;
     login?: boolean;
 }
 export interface TerminalOptions {
@@ -107,6 +109,8 @@ export interface TerminalOptions {
     rows?: number;
     user?: string | number | Account;
     tag?: string;
+    tags?: readonly string[];
+    tagBase?: number;
     onData: (bytes: Uint8Array) => void;
 }
 export interface TerminalSession {
@@ -140,6 +144,8 @@ interface Target {
     copy?: string;
 }
 export declare function tagOption(tag: unknown): void;
+export declare function withTag(tags: readonly string[] | undefined, tag: string | undefined): readonly string[] | undefined;
+export declare function cronPath(path: string): boolean;
 export declare function expandDefaults(defaults: Readonly<Record<string, string>> | undefined, env: Readonly<Record<string, string>>): Record<string, string>;
 export declare class Launcher {
     readonly fs: KernelFs;
@@ -179,6 +185,7 @@ export declare class Launcher {
     private readonly described;
     private readonly creds;
     private readonly tags;
+    private readonly tagBases;
     private readonly links;
     private readonly freshModules;
     private readonly granted;
@@ -202,6 +209,7 @@ export declare class Launcher {
     readonly hostname: string;
     readonly watchers: FsWatchers;
     private readonly changes;
+    private readonly renameLog;
     readonly cwds: CwdTable;
     private readonly cwdSlots;
     private readonly pnpmHome;
@@ -362,6 +370,8 @@ export declare class Launcher {
     private imageOf;
     credOf(pid: number): Cred;
     tagOf(pid: number): string | undefined;
+    tagsOf(pid: number): readonly string[] | undefined;
+    private wireDac;
     private released;
     private signalMasksOf;
     private controlsJobs;
@@ -403,7 +413,7 @@ export declare class Launcher {
     private terminalAccount;
     private identity;
     fsFor(tag: string | undefined): KernelFs;
-    isWriter(tag: string | undefined): boolean;
+    isWriter(tags: readonly string[] | undefined, base?: number): boolean;
     private stackFor;
     private flushingPeers;
     private rewritten;
@@ -415,6 +425,7 @@ export declare class Launcher {
     private readonly named;
     private commandNames;
     private entryTarget;
+    private moved;
     private processChain;
     private starting;
     openTerminal(argv: string[], options: TerminalOptions): Promise<TerminalSession>;

package/dist/types/process/wasi/wasi-fds.d.ts

@@ -37,7 +37,10 @@ export declare class WasiFds {
     private readonly ids;
     private readonly kernel;
     private readonly fs;
+    private renamesSeen;
     constructor(kernel: WasiKernel, fs: SyncFsPosixBridge);
+    ownRename(seq: number | undefined): void;
+    followRenames(missing?: boolean): boolean;
     setup(cwd: string, inherited: ReadonlyArray<{
         fd: number;
         kind?: KernelFdKind;
@@ -117,7 +120,7 @@ export declare class WasiFds {
     private inoOf;
     private survives;
     private detach;
-    renamed(from: string, to: string, replacedLinked?: SyncFsBridgeStat): void;
+    renamed(from: string, to: string, replacedLinked?: SyncFsBridgeStat, foreign?: boolean): void;
     held: HeldCwd | undefined;
     private cwdEntry;
     goneCwd(dir: Extract<WasiEntry, {

package/dist/types/process/wasi/wasi-files.d.ts

@@ -23,8 +23,10 @@ export declare class FileBuffer {
     private seen;
     maxFile: number | undefined;
     handle: number | undefined;
+    moved: ((missing: boolean) => boolean) | undefined;
     constructor(fs: SyncFsFileIo, path: string, empty: boolean, maxFile?: number, size?: number, version?: string, watch?: RangedWatch);
     get path(): string;
+    private retried;
     set path(path: string);
     get isRanged(): boolean;
     get pin(): string | undefined;

package/dist/types/realm/live-vfs-fs.d.ts

@@ -113,7 +113,15 @@ export interface LiveFsApi {
     sliccOpenFifo?(stream: LiveFsStream, path: string): void;
     nameTable?: (LiveFsNode | null)[] | null;
     hashRemoveNode?(node: LiveFsNode): void;
+    hashAddNode?(node: LiveFsNode): void;
+    hashName?(parentId: number, name: string): number;
     lookupNode?(parent: LiveFsNode, name: string): LiveFsNode;
+    lookupPath?(path: string, opts?: {
+        follow?: boolean;
+        parent?: boolean;
+    }): {
+        node: object;
+    };
     open?(...args: unknown[]): unknown;
 }
 export interface LiveVfsPlugin {

package/dist/types/realm/sync-fs-token-registry.d.ts

@@ -17,6 +17,11 @@ export interface SyncFsTokenEntry {
     own?: <T>(path: string, op: () => Promise<T>) => Promise<T>;
     revoked?: (path: string) => boolean;
     renamed?: (from: string, to: string) => void;
+    renames?: (since: number, held: readonly string[]) => {
+        now: number;
+        renames: Array<[string, string]>;
+    };
+    renameSeq?: (from: string, to: string) => number | undefined;
     cred?: () => Readonly<Cred>;
     umask?: () => number;
     dac?: Dac;

package/dist/types/realm/sync-fs-wire.d.ts

@@ -1,5 +1,5 @@
 import type { ChangeView } from '../fs/changes.js';
-export declare const SYNC_FS_OPS: readonly ['read', 'write', 'exists', 'stat', 'lstat', 'readdir', 'readdir-stat', 'mkdir', 'rm', 'rename', 'link', 'copy', 'unlink', 'rmdir', 'symlink', 'readlink', 'chmod', 'utimes', 'lutimes', 'statfs', 'hold', 'create', 'mkfifo', 'kept', 'pread', 'pwrite', 'append', 'truncate', 'chown', 'lchown', 'access'];
+export declare const SYNC_FS_OPS: readonly ['read', 'write', 'exists', 'stat', 'lstat', 'readdir', 'readdir-stat', 'mkdir', 'rm', 'rename', 'link', 'copy', 'unlink', 'rmdir', 'symlink', 'readlink', 'chmod', 'utimes', 'lutimes', 'statfs', 'hold', 'create', 'mkfifo', 'kept', 'pread', 'pwrite', 'append', 'truncate', 'chown', 'lchown', 'access', 'renames'];
 export type AccessKind = 'open' | 'access' | 'eaccess' | 'follow';
 export declare const HOLD_READ = 4;
 export declare const HOLD_WRITE = 8;
@@ -99,7 +99,7 @@ export interface SyncFsPosixBridge {
     exists(path: string): boolean;
     mkdir(path: string, mode?: number): void;
     rm(path: string): void;
-    rename(from: string, to: string): void;
+    rename(from: string, to: string): number | undefined | void;
     link(from: string, to: string, follow?: boolean): void;
     unlink(path: string): void;
     rmdir(path: string): void;
@@ -128,6 +128,11 @@ export interface SyncFsPosixBridge {
     identify?(): void;
     identifyNext?(): void;
     identified?(): SyncFsBridgeStat | null;
+    renames?(since: number, held: readonly string[]): SyncFsRenames;
+}
+export interface SyncFsRenames {
+    now: number;
+    renames: Array<[string, string]>;
 }
 export declare function syncError(code: string, label: string): Error & {
     code: string;

package/dist/types/sudo.d.ts

@@ -17,6 +17,7 @@ export interface SudoRequest {
     cwd: string;
     pid: number;
     tag?: string;
+    tags?: string[];
     tty?: string;
     createdAt: number;
     expiresAt: number;
@@ -53,7 +54,7 @@ export type SudoResult = {
 export interface SudoCaller {
     cred: Cred;
     pid: number;
-    tag?: string | undefined;
+    tags?: readonly string[] | undefined;
     tty?: string | null | undefined;
 }
 interface Rule {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.143.5",
+  "version": "1.144.0",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -66,23 +66,23 @@
     "@ai-ecoverse/py-numpy": "2.5.4-4",
     "@ai-ecoverse/slicc-node": "2.5.2",
     "@ai-ecoverse/slicc-scrub": "1.0.0",
-    "@ai-ecoverse/slicc-shared-web": "1.29.16",
+    "@ai-ecoverse/slicc-shared-web": "1.30.2",
     "@ai-ecoverse/wasi-cargo": "0.99.0-6",
     "@ai-ecoverse/wasi-pnpm": "12.9.1-20",
     "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
     "@ai-ecoverse/wasi-rustc": "1.98.1-10",
     "@ai-ecoverse/wasi-zig": "0.16.0-20",
     "@ai-ecoverse/wasix-python": "3.15.0-5",
-    "@ai-ecoverse/wasm-bash": "5.3.0-22",
+    "@ai-ecoverse/wasm-bash": "5.3.0-23",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-12",
-    "@ai-ecoverse/wasm-curl": "8.22.0-8",
+    "@ai-ecoverse/wasm-curl": "8.22.0-9",
     "@ai-ecoverse/wasm-git": "2.55.0-18",
-    "@ai-ecoverse/wasm-gmake": "4.4.1-8",
+    "@ai-ecoverse/wasm-gmake": "4.4.1-9",
     "@ai-ecoverse/wasm-procps": "4.0.7-4",
-    "@ai-ecoverse/wasm-sqlite3": "3.54.0-6",
+    "@ai-ecoverse/wasm-sqlite3": "3.54.0-7",
     "@ai-ecoverse/wasm-tar": "1.35.0-8",
     "@ai-ecoverse/wasm-tls-engine": "4.2.0-7",
-    "@ai-ecoverse/wasm-tree": "2.3.2-6",
+    "@ai-ecoverse/wasm-tree": "2.3.2-7",
     "@ai-ecoverse/wasm-util-linux": "2.42.4-5",
     "@biomejs/biome": "2.5.15",
     "@types/node": "24.19.2",