@ai-ecoverse/slicc-kernel 1.146.1 → 1.146.3

package/dist/node-process-worker.js

@@ -1957,6 +1957,317 @@ var init_signals = __esm({
   }
 });
 
+// src/realm/sync-sab-bridge.ts
+function exactBody(req, transfer = []) {
+  const body = req.body;
+  if (!ArrayBuffer.isView(body)) return { req, transfer };
+  if (Object.prototype.toString.call(body.buffer) === "[object SharedArrayBuffer]") {
+    return { req, transfer };
+  }
+  const whole = body.constructor === Uint8Array && body.byteOffset === 0 && body.byteLength === body.buffer.byteLength;
+  if (whole) return { req, transfer };
+  const copy2 = new Uint8Array(body.byteLength);
+  copy2.set(new Uint8Array(body.buffer, body.byteOffset, body.byteLength));
+  return { req: { ...req, body: copy2 }, transfer: [...transfer, copy2.buffer] };
+}
+function syncCallCount() {
+  return calls;
+}
+function lookedOutside() {
+  looks++;
+}
+function syncEpoch() {
+  return calls + looks;
+}
+function createSyncSabTransport(sab, port3, deps = {}) {
+  const views = sabViews(sab);
+  const { header, window } = views;
+  const wait2 = deps.wait ?? ((a, i, v, t) => rawWait(a, i, v, t));
+  const now = deps.now ?? (() => performance.now());
+  let seq = 0;
+  let typical = 0;
+  const ready = (id) => Atomics.load(header, SAB_I_STATE) === SAB_STATE_READY && Atomics.load(header, SAB_I_SEQ) === id;
+  function spinUntil(id, until) {
+    for (let stride = 0; stride < SPIN_STRIDES; stride++) {
+      for (let i = 0; i < SPIN_STRIDE; i++) if (ready(id)) return true;
+      if (now() >= until) return false;
+    }
+    return false;
+  }
+  function settled2(start2) {
+    typical += (Math.min(now() - start2, SPIN_CAP_MS) - typical) / 8;
+  }
+  function awaitReady(id, deadline, label) {
+    const start2 = now();
+    if (spinning && typical < SPIN_MS && spinUntil(id, start2 + SPIN_MS)) {
+      settled2(start2);
+      return;
+    }
+    for (; ; ) {
+      const published = Atomics.load(header, SAB_I_PUB);
+      if (ready(id)) {
+        settled2(start2);
+        return;
+      }
+      const remaining = deadline - now();
+      if (remaining <= 0) throw syncError("EIO", label);
+      wait2(header, SAB_I_PUB, published, remaining);
+    }
+  }
+  return {
+    call(asked, timeoutMs2, label, given = []) {
+      if (deps.memory) publishMemory(sab, deps.memory());
+      const { req, transfer } = exactBody(asked, given);
+      const id = ++seq;
+      calls += Number(!UNCOUNTED_OPS.has(req.op));
+      let out = null;
+      let status2 = 0;
+      let offset = 0;
+      Atomics.store(header, SAB_I_REQ, id);
+      try {
+        for (; ; ) {
+          Atomics.store(header, SAB_I_STATE, SAB_STATE_PENDING);
+          const msg = offset === 0 ? { type: SYNC_SAB_REQ_MSG, id, req } : { type: SYNC_SAB_NEXT_MSG, id, offset };
+          try {
+            if (offset === 0 && transfer.length > 0) port3.postMessage(msg, transfer);
+            else port3.postMessage(msg);
+          } catch {
+            throw syncError("EIO", label);
+          }
+          awaitReady(id, now() + timeoutMs2, label);
+          const total = loadU53(header, SAB_I_TOTAL, SAB_I_TOTAL_HI);
+          const chunk = Atomics.load(header, SAB_I_CHUNK);
+          const at = loadU53(header, SAB_I_OFFSET, SAB_I_OFFSET_HI);
+          if (at !== offset || chunk < 0 || total < 0 || offset + chunk > total) {
+            throw syncError("EIO", label);
+          }
+          if (out === null) {
+            status2 = Atomics.load(header, SAB_I_STATUS);
+            out = new Uint8Array(total);
+          }
+          out.set(window.subarray(0, chunk), offset);
+          offset += chunk;
+          if (offset >= total) break;
+          if (chunk === 0) throw syncError("EIO", label);
+        }
+      } finally {
+        Atomics.store(header, SAB_I_REQ, 0);
+        Atomics.store(header, SAB_I_STATE, SAB_STATE_IDLE);
+      }
+      return decodeSabResult(status2, out);
+    }
+  };
+}
+function errnoError(code2, path, direct) {
+  const err = syncError(code2, `sync-sab bridge, '${path}'`);
+  return direct ? Object.assign(err, { direct }) : err;
+}
+function createSyncFsSabBridge(transport, opts = {}) {
+  const direct = opts.direct ? { direct: true } : {};
+  const timeoutMs2 = opts.timeoutMs ?? SYNC_FS_REQUEST_TIMEOUT_MS;
+  let identity = {};
+  let once = false;
+  let last = null;
+  function run(req, path, transfer) {
+    last = null;
+    const silence = SYNC_FS_READ_ONLY.has(req.op) ? timeoutMs2 : Number.POSITIVE_INFINITY;
+    const result = transport.call(req, silence, `sync-sab bridge, '${path}'`, transfer);
+    if (!result.ok) throw errnoError(result.errno, path, result.direct);
+    return result;
+  }
+  function bytes(req, path) {
+    const r = run(req, path);
+    if (r.ok && r.kind === "bytes") return r.bytes;
+    throw errnoError("EIO", path);
+  }
+  function json2(req, path) {
+    const r = run(req, path);
+    if (r.ok && r.kind === "json") return r.json;
+    throw errnoError("EIO", path);
+  }
+  const changing = (req, path, transfer) => {
+    const ask = once ? { identity: true } : identity;
+    once = false;
+    const r = run({ ...req, ...ask }, path, transfer);
+    if (r.ok && r.kind === "json") last = parseSyncFsStat(r.json);
+  };
+  const io = (id) => ({
+    readFile: (path) => bytes({ op: "read", path, ...id }, path),
+    writeFile: (path, data, open) => {
+      changing({ op: "write", path, body: data, ...open ? { mode: 1 } : {}, ...id }, path);
+    },
+    pread: (path, offset, length, version) => bytes({ op: "pread", path, offset, length, ...version ? { version } : {}, ...id }, path),
+    pwrite: (path, offset, body, transfer) => {
+      const whole = body.byteOffset === 0 && body.byteLength === body.buffer.byteLength;
+      const owned = transfer && whole && body.buffer instanceof ArrayBuffer;
+      const transferred = owned ? [body.buffer] : [];
+      changing({ op: "pwrite", path, offset, body, ...id }, path, transferred);
+    },
+    truncate: (path, length) => {
+      changing({ op: "truncate", path, length, ...id }, path);
+    },
+    append: (path, body) => json2({ op: "append", path, body, ...id }, path)
+  });
+  return {
+    ...io({}),
+    pinned: (handle) => io({ handle }),
+    kept: (handle) => json2({ op: "kept", path: "/", handle }, "/") === true,
+    keptStat: (handle) => {
+      const s = parseSyncFsStat(json2({ op: "stat", path: "/", handle }, "/"));
+      if (!s) throw errnoError("EIO", "/");
+      return s;
+    },
+    stat: (path) => {
+      const s = parseSyncFsStat(json2({ op: "stat", path, ...direct }, path));
+      if (!s) throw errnoError("EIO", path);
+      return s;
+    },
+    lstat: (path) => {
+      const s = parseSyncFsStat(json2({ op: "lstat", path, ...direct }, path));
+      if (!s) throw errnoError("EIO", path);
+      return s;
+    },
+    readdir: (path) => {
+      const list = json2({ op: "readdir", path }, path);
+      if (!Array.isArray(list) || !list.every((s) => typeof s === "string")) {
+        throw errnoError("EIO", path);
+      }
+      return list;
+    },
+    readdirStat: (path) => {
+      const list = json2({ op: "readdir-stat", path }, path);
+      if (!Array.isArray(list)) throw errnoError("EIO", path);
+      return list.map((entry) => {
+        if (!Array.isArray(entry) || typeof entry[0] !== "string") throw errnoError("EIO", path);
+        if (entry[1] === null) return [entry[0], null];
+        const stat = parseSyncFsStat(entry[1]);
+        if (!stat) throw errnoError("EIO", path);
+        return [entry[0], stat];
+      });
+    },
+    exists: (path) => {
+      const v = json2({ op: "exists", path }, path);
+      if (typeof v !== "boolean") throw errnoError("EIO", path);
+      return v;
+    },
+    mkdir: (path, mode) => {
+      run({ op: "mkdir", path, exclusive: true, ...mode !== void 0 ? { mode } : {} }, path);
+    },
+    rm: (path) => {
+      run({ op: "rm", path }, path);
+    },
+    rename: (from, to) => {
+      const r = run({ op: "rename", path: from, arg2: to }, from);
+      const seq = r.ok && r.kind === "json" ? r.json.seq : void 0;
+      return typeof seq === "number" ? seq : void 0;
+    },
+    link: (from, to, follow3) => {
+      run({ op: "link", path: from, arg2: to, ...follow3 ? { mode: 1 } : {} }, from);
+    },
+    unlink: (path) => {
+      run({ op: "unlink", path }, path);
+    },
+    rmdir: (path) => {
+      run({ op: "rmdir", path }, path);
+    },
+    symlink: (target, linkPath) => {
+      run({ op: "symlink", path: linkPath, arg2: target }, linkPath);
+    },
+    readlink: (path) => {
+      const target = json2({ op: "readlink", path }, path);
+      if (typeof target !== "string") throw errnoError("EIO", path);
+      return target;
+    },
+    chmod: (path, mode) => {
+      changing({ op: "chmod", path, mode }, path);
+    },
+    utimes: (path, atimeMs, mtimeMs, now) => {
+      changing({ op: "utimes", path, atimeMs, mtimeMs, ...now ? { now } : {} }, path);
+    },
+    identify: () => {
+      identity = { identity: true };
+    },
+    identifyNext: () => {
+      once = true;
+      last = null;
+    },
+    identified: () => {
+      once = false;
+      return last;
+    },
+    lutimes: (path, atimeMs, mtimeMs, now) => {
+      run({ op: "lutimes", path, atimeMs, mtimeMs, ...now ? { now } : {} }, path);
+    },
+    mkfifo: (path, mode) => {
+      run({ op: "mkfifo", path, mode }, path);
+    },
+    copy: (from, to, mode, exclusive) => {
+      run({ op: "copy", path: from, arg2: to, mode, ...exclusive ? { exclusive } : {} }, to);
+    },
+    create: (path, mode, opening2) => {
+      const flags = { ...mode !== void 0 ? { mode } : {}, ...opening2 ? { opening: opening2 } : {} };
+      const r = run({ op: "create", path, ...flags, identity: true }, path);
+      if (!r.ok || r.kind !== "json") return void 0;
+      const st = parseSyncFsStat(r.json);
+      if (!st) return void 0;
+      const { seen } = r.json;
+      return typeof seen === "number" ? { ...st, seen } : st;
+    },
+    chown: (path, uid, gid, follow3, handle) => {
+      const ids = { ...uid !== void 0 ? { uid } : {}, ...gid !== void 0 ? { gid } : {} };
+      changing(
+        {
+          op: follow3 ? "chown" : "lchown",
+          path,
+          ...ids,
+          ...handle !== void 0 ? { handle } : {}
+        },
+        path
+      );
+    },
+    ...opts.owners ? { owners: true } : {},
+    ...opts.links ? { links: true } : {},
+    ...opts.changes ? { changes: new ChangeView(opts.changes) } : {},
+    access: (path, mode, kind = "access", nofollow) => {
+      run({ op: "access", path, mode, arg2: kind, ...nofollow ? { nofollow } : {} }, path);
+    },
+    hold: (path, held2, open, handle, want = 0, seen = {}) => {
+      const mode = (held2 ? 1 : 0) | (open ? 2 : 0);
+      if (mode === 3) {
+        const at = seen.gen !== void 0 ? { gen: seen.gen } : {};
+        const link = seen.nofollow ? { nofollow: true } : {};
+        return json2({ op: "hold", path, mode: mode | want, ...at, ...link }, path);
+      }
+      run({ op: "hold", path, mode, ...handle !== void 0 ? { handle } : {} }, path);
+      return void 0;
+    },
+    statfs: (path = "/") => parseSyncFsUsage(json2({ op: "statfs", path }, path)),
+    renames: (since, held2) => json2(
+      { op: "renames", path: "/", offset: since, arg2: JSON.stringify(held2) },
+      "/"
+    )
+  };
+}
+var UNCOUNTED_OPS, calls, looks, SPIN_MS, SPIN_STRIDE, SPIN_STRIDES, SPIN_CORES, spinning, SPIN_CAP_MS;
+var init_sync_sab_bridge = __esm({
+  "src/realm/sync-sab-bridge.ts"() {
+    "use strict";
+    init_changes();
+    init_cpu_clock();
+    init_sync_fs_wire();
+    init_sync_sab_wire();
+    UNCOUNTED_OPS = /* @__PURE__ */ new Set([...SYNC_FS_OPS, "cwd-check", "cwd-chdir"]);
+    calls = 0;
+    looks = 0;
+    SPIN_MS = 0.06;
+    SPIN_STRIDE = 128;
+    SPIN_STRIDES = 256;
+    SPIN_CORES = 4;
+    spinning = (globalThis.navigator?.hardwareConcurrency ?? 0) >= SPIN_CORES;
+    SPIN_CAP_MS = 1;
+  }
+});
+
 // src/process/js/async-sab.ts
 async function changed(header, index3, seen, waitAsync = defaultWaitAsync) {
   const waited = waitAsync(header, index3, seen);
@@ -1975,7 +2286,8 @@ function createAsyncSabTransport(sab, port3, waitAsync = defaultWaitAsync) {
       await changed(header, SAB_I_PUB, published, waitAsync);
     }
   }
-  async function once(req) {
+  async function once(asked) {
+    const { req, transfer } = exactBody(asked);
     const id = ++seq;
     let out = null;
     let status2 = 0;
@@ -1984,9 +2296,8 @@ function createAsyncSabTransport(sab, port3, waitAsync = defaultWaitAsync) {
     try {
       for (; ; ) {
         Atomics.store(header, SAB_I_STATE, SAB_STATE_PENDING);
-        port3.postMessage(
-          offset === 0 ? { type: SYNC_SAB_REQ_MSG, id, req } : { type: SYNC_SAB_NEXT_MSG, id, offset }
-        );
+        if (offset === 0) port3.postMessage({ type: SYNC_SAB_REQ_MSG, id, req }, transfer);
+        else port3.postMessage({ type: SYNC_SAB_NEXT_MSG, id, offset });
         await ready(id);
         const total = loadU53(header, SAB_I_TOTAL, SAB_I_TOTAL_HI);
         const chunk = Atomics.load(header, SAB_I_CHUNK);
@@ -2021,6 +2332,7 @@ var defaultWaitAsync;
 var init_async_sab = __esm({
   "src/process/js/async-sab.ts"() {
     "use strict";
+    init_sync_sab_bridge();
     init_sync_sab_wire();
     defaultWaitAsync = (a, i, v) => Atomics.waitAsync(a, i, v);
   }
@@ -3747,10 +4059,9 @@ var init_wasi_fds = __esm({
         if (exclusive && !(oflags & OFLAGS.DIRECTORY) && this.madeAtOnce(path, mode)) {
           return this.regular(path, void 0, oflags, rights, fdflags, mode, true);
         }
-        if ((exclusive || nofollow) && this.isLink(path)) {
-          throw new WasiError(exclusive ? "EEXIST" : "ELOOP");
-        }
-        const s = this.statOrMissing(path);
+        if (exclusive && !nofollow && this.isLink(path)) throw new WasiError("EEXIST");
+        const s = nofollow ? this.lstatOrMissing(path) : this.statOrMissing(path);
+        if (s?.isSymbolicLink) throw new WasiError(exclusive ? "EEXIST" : "ELOOP");
         if (exclusive && s) throw new WasiError("EEXIST");
         if (s?.escape !== void 0) {
           refuseWrite({ readonly: true }, oflags, rights);
@@ -3769,6 +4080,11 @@ var init_wasi_fds = __esm({
         return this.regular(path, s, oflags, rights, fdflags, mode);
       }
       nofollow = false;
+      inos = /* @__PURE__ */ new WeakMap();
+      otherFile(buffer, st) {
+        const ino = this.inos.get(buffer);
+        return ino !== void 0 && st?.ino !== void 0 && ino !== st.ino;
+      }
       openSpecial(path, oflags, rights, fdflags, exclusive) {
         if (exclusive && namedDevice(path)) throw new WasiError("EEXIST");
         const device2 = deviceOf(path);
@@ -3826,6 +4142,7 @@ var init_wasi_fds = __esm({
           buffer = void 0;
         }
         buffer ??= this.sharing(path, existing);
+        if (buffer && this.nofollow && this.otherFile(buffer, existing)) buffer = void 0;
         const want = wantOf(oflags, rights);
         if (buffer) {
           if (this.fs.owners) this.fs.access?.(path, want, "open");
@@ -3870,6 +4187,7 @@ var init_wasi_fds = __esm({
         const buffer = new FileBuffer(io, path, empty, st.maxFile, ranged, st.version, watch);
         buffer.moved = (missing2) => this.followRenames(missing2);
         buffer.handle = handle;
+        if (st.ino !== void 0) this.inos.set(buffer, st.ino);
         this.buffers.set(path, buffer);
         const id = this.identity(st);
         if (id !== void 0) this.know(buffer, id);
@@ -3952,6 +4270,14 @@ var init_wasi_fds = __esm({
           return false;
         }
       }
+      lstatOrMissing(path) {
+        try {
+          return this.fs.lstat(path);
+        } catch (e) {
+          if (e.code === "ENOENT") return void 0;
+          throw e;
+        }
+      }
       statOrMissing(path) {
         try {
           return this.fs.stat(path);
@@ -6800,7 +7126,7 @@ var KERNEL_VERSION, OS_RELEASE;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    KERNEL_VERSION = true ? "1.146.1" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.146.3" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });
@@ -7912,367 +8238,69 @@ function mayTrace(viewer, target) {
 }
 function fileIdentity(ino, mtimeMs) {
   if (ino === void 0 || mtimeMs === void 0 || !Number.isFinite(mtimeMs)) return void 0;
-  return `${ino}:${Math.trunc(mtimeMs)}`;
-}
-var init_proc_info = __esm({
-  "src/kernel/proc-info.ts"() {
-    "use strict";
-  }
-});
-
-// src/fs/owners.ts
-function inGroup(cred, gid) {
-  return cred.egid === gid || cred.groups.includes(gid);
-}
-var ROOT_OWNER;
-var init_owners = __esm({
-  "src/fs/owners.ts"() {
-    "use strict";
-    init_types();
-    ROOT_OWNER = Object.freeze({ uid: 0, gid: 0 });
-  }
-});
-
-// src/fs/walk.ts
-var init_walk = __esm({
-  "src/fs/walk.ts"() {
-    "use strict";
-    init_types();
-  }
-});
-
-// src/fs/access.ts
-function permits(cred, perm, want, directory = true) {
-  const mode = perm.mode ?? (directory ? 493 : 420);
-  if (cred.euid === 0) return (want & X_OK) === 0 || directory || (mode & 73) !== 0;
-  const shift = cred.euid === perm.uid ? 6 : inGroup(cred, perm.gid) ? 3 : 0;
-  return (mode >> shift & want) === want;
-}
-var X_OK;
-var init_access = __esm({
-  "src/fs/access.ts"() {
-    "use strict";
-    init_owners();
-    init_types();
-    init_walk();
-    X_OK = 1;
-  }
-});
-
-// src/process/wasi-errno.ts
-function wasiErrno(code2) {
-  return WASI_ERRNO[code2] ?? E.IO;
-}
-var WASI_ERRNO;
-var init_wasi_errno = __esm({
-  "src/process/wasi-errno.ts"() {
-    "use strict";
-    init_wasi_abi();
-    WASI_ERRNO = {
-      ...Object.fromEntries(Object.entries(E).map(([name2, errno2]) => [`E${name2}`, errno2])),
-      EWOULDBLOCK: E.AGAIN,
-      ENOTSUP: 138,
-      EOPNOTSUPP: 138,
-      ENOMEDIUM: 148
-    };
-  }
-});
-
-// src/realm/sync-sab-bridge.ts
-function syncCallCount() {
-  return calls;
-}
-function lookedOutside() {
-  looks++;
-}
-function syncEpoch() {
-  return calls + looks;
-}
-function createSyncSabTransport(sab, port3, deps = {}) {
-  const views = sabViews(sab);
-  const { header, window } = views;
-  const wait2 = deps.wait ?? ((a, i, v, t) => rawWait(a, i, v, t));
-  const now = deps.now ?? (() => performance.now());
-  let seq = 0;
-  let typical = 0;
-  const ready = (id) => Atomics.load(header, SAB_I_STATE) === SAB_STATE_READY && Atomics.load(header, SAB_I_SEQ) === id;
-  function spinUntil(id, until) {
-    for (let stride = 0; stride < SPIN_STRIDES; stride++) {
-      for (let i = 0; i < SPIN_STRIDE; i++) if (ready(id)) return true;
-      if (now() >= until) return false;
-    }
-    return false;
-  }
-  function settled2(start2) {
-    typical += (Math.min(now() - start2, SPIN_CAP_MS) - typical) / 8;
-  }
-  function awaitReady(id, deadline, label) {
-    const start2 = now();
-    if (spinning && typical < SPIN_MS && spinUntil(id, start2 + SPIN_MS)) {
-      settled2(start2);
-      return;
-    }
-    for (; ; ) {
-      const published = Atomics.load(header, SAB_I_PUB);
-      if (ready(id)) {
-        settled2(start2);
-        return;
-      }
-      const remaining = deadline - now();
-      if (remaining <= 0) throw syncError("EIO", label);
-      wait2(header, SAB_I_PUB, published, remaining);
-    }
-  }
-  return {
-    call(req, timeoutMs2, label, transfer = []) {
-      if (deps.memory) publishMemory(sab, deps.memory());
-      const id = ++seq;
-      calls += Number(!UNCOUNTED_OPS.has(req.op));
-      let out = null;
-      let status2 = 0;
-      let offset = 0;
-      Atomics.store(header, SAB_I_REQ, id);
-      try {
-        for (; ; ) {
-          Atomics.store(header, SAB_I_STATE, SAB_STATE_PENDING);
-          const msg = offset === 0 ? { type: SYNC_SAB_REQ_MSG, id, req } : { type: SYNC_SAB_NEXT_MSG, id, offset };
-          try {
-            if (offset === 0 && transfer.length > 0) port3.postMessage(msg, transfer);
-            else port3.postMessage(msg);
-          } catch {
-            throw syncError("EIO", label);
-          }
-          awaitReady(id, now() + timeoutMs2, label);
-          const total = loadU53(header, SAB_I_TOTAL, SAB_I_TOTAL_HI);
-          const chunk = Atomics.load(header, SAB_I_CHUNK);
-          const at = loadU53(header, SAB_I_OFFSET, SAB_I_OFFSET_HI);
-          if (at !== offset || chunk < 0 || total < 0 || offset + chunk > total) {
-            throw syncError("EIO", label);
-          }
-          if (out === null) {
-            status2 = Atomics.load(header, SAB_I_STATUS);
-            out = new Uint8Array(total);
-          }
-          out.set(window.subarray(0, chunk), offset);
-          offset += chunk;
-          if (offset >= total) break;
-          if (chunk === 0) throw syncError("EIO", label);
-        }
-      } finally {
-        Atomics.store(header, SAB_I_REQ, 0);
-        Atomics.store(header, SAB_I_STATE, SAB_STATE_IDLE);
-      }
-      return decodeSabResult(status2, out);
-    }
-  };
-}
-function errnoError(code2, path, direct) {
-  const err = syncError(code2, `sync-sab bridge, '${path}'`);
-  return direct ? Object.assign(err, { direct }) : err;
+  return `${ino}:${Math.trunc(mtimeMs)}`;
 }
-function createSyncFsSabBridge(transport, opts = {}) {
-  const direct = opts.direct ? { direct: true } : {};
-  const timeoutMs2 = opts.timeoutMs ?? SYNC_FS_REQUEST_TIMEOUT_MS;
-  let identity = {};
-  let once = false;
-  let last = null;
-  function run(req, path, transfer) {
-    last = null;
-    const silence = SYNC_FS_READ_ONLY.has(req.op) ? timeoutMs2 : Number.POSITIVE_INFINITY;
-    const result = transport.call(req, silence, `sync-sab bridge, '${path}'`, transfer);
-    if (!result.ok) throw errnoError(result.errno, path, result.direct);
-    return result;
+var init_proc_info = __esm({
+  "src/kernel/proc-info.ts"() {
+    "use strict";
   }
-  function bytes(req, path) {
-    const r = run(req, path);
-    if (r.ok && r.kind === "bytes") return r.bytes;
-    throw errnoError("EIO", path);
+});
+
+// src/fs/owners.ts
+function inGroup(cred, gid) {
+  return cred.egid === gid || cred.groups.includes(gid);
+}
+var ROOT_OWNER;
+var init_owners = __esm({
+  "src/fs/owners.ts"() {
+    "use strict";
+    init_types();
+    ROOT_OWNER = Object.freeze({ uid: 0, gid: 0 });
   }
-  function json2(req, path) {
-    const r = run(req, path);
-    if (r.ok && r.kind === "json") return r.json;
-    throw errnoError("EIO", path);
+});
+
+// src/fs/walk.ts
+var init_walk = __esm({
+  "src/fs/walk.ts"() {
+    "use strict";
+    init_types();
   }
-  const changing = (req, path, transfer) => {
-    const ask = once ? { identity: true } : identity;
-    once = false;
-    const r = run({ ...req, ...ask }, path, transfer);
-    if (r.ok && r.kind === "json") last = parseSyncFsStat(r.json);
-  };
-  const io = (id) => ({
-    readFile: (path) => bytes({ op: "read", path, ...id }, path),
-    writeFile: (path, data, open) => {
-      changing({ op: "write", path, body: data, ...open ? { mode: 1 } : {}, ...id }, path);
-    },
-    pread: (path, offset, length, version) => bytes({ op: "pread", path, offset, length, ...version ? { version } : {}, ...id }, path),
-    pwrite: (path, offset, body, transfer) => {
-      const whole = body.byteOffset === 0 && body.byteLength === body.buffer.byteLength;
-      const owned = transfer && whole && body.buffer instanceof ArrayBuffer;
-      const transferred = owned ? [body.buffer] : [];
-      changing({ op: "pwrite", path, offset, body, ...id }, path, transferred);
-    },
-    truncate: (path, length) => {
-      changing({ op: "truncate", path, length, ...id }, path);
-    },
-    append: (path, body) => json2({ op: "append", path, body, ...id }, path)
-  });
-  return {
-    ...io({}),
-    pinned: (handle) => io({ handle }),
-    kept: (handle) => json2({ op: "kept", path: "/", handle }, "/") === true,
-    keptStat: (handle) => {
-      const s = parseSyncFsStat(json2({ op: "stat", path: "/", handle }, "/"));
-      if (!s) throw errnoError("EIO", "/");
-      return s;
-    },
-    stat: (path) => {
-      const s = parseSyncFsStat(json2({ op: "stat", path, ...direct }, path));
-      if (!s) throw errnoError("EIO", path);
-      return s;
-    },
-    lstat: (path) => {
-      const s = parseSyncFsStat(json2({ op: "lstat", path, ...direct }, path));
-      if (!s) throw errnoError("EIO", path);
-      return s;
-    },
-    readdir: (path) => {
-      const list = json2({ op: "readdir", path }, path);
-      if (!Array.isArray(list) || !list.every((s) => typeof s === "string")) {
-        throw errnoError("EIO", path);
-      }
-      return list;
-    },
-    readdirStat: (path) => {
-      const list = json2({ op: "readdir-stat", path }, path);
-      if (!Array.isArray(list)) throw errnoError("EIO", path);
-      return list.map((entry) => {
-        if (!Array.isArray(entry) || typeof entry[0] !== "string") throw errnoError("EIO", path);
-        if (entry[1] === null) return [entry[0], null];
-        const stat = parseSyncFsStat(entry[1]);
-        if (!stat) throw errnoError("EIO", path);
-        return [entry[0], stat];
-      });
-    },
-    exists: (path) => {
-      const v = json2({ op: "exists", path }, path);
-      if (typeof v !== "boolean") throw errnoError("EIO", path);
-      return v;
-    },
-    mkdir: (path, mode) => {
-      run({ op: "mkdir", path, exclusive: true, ...mode !== void 0 ? { mode } : {} }, path);
-    },
-    rm: (path) => {
-      run({ op: "rm", path }, path);
-    },
-    rename: (from, to) => {
-      const r = run({ op: "rename", path: from, arg2: to }, from);
-      const seq = r.ok && r.kind === "json" ? r.json.seq : void 0;
-      return typeof seq === "number" ? seq : void 0;
-    },
-    link: (from, to, follow3) => {
-      run({ op: "link", path: from, arg2: to, ...follow3 ? { mode: 1 } : {} }, from);
-    },
-    unlink: (path) => {
-      run({ op: "unlink", path }, path);
-    },
-    rmdir: (path) => {
-      run({ op: "rmdir", path }, path);
-    },
-    symlink: (target, linkPath) => {
-      run({ op: "symlink", path: linkPath, arg2: target }, linkPath);
-    },
-    readlink: (path) => {
-      const target = json2({ op: "readlink", path }, path);
-      if (typeof target !== "string") throw errnoError("EIO", path);
-      return target;
-    },
-    chmod: (path, mode) => {
-      changing({ op: "chmod", path, mode }, path);
-    },
-    utimes: (path, atimeMs, mtimeMs, now) => {
-      changing({ op: "utimes", path, atimeMs, mtimeMs, ...now ? { now } : {} }, path);
-    },
-    identify: () => {
-      identity = { identity: true };
-    },
-    identifyNext: () => {
-      once = true;
-      last = null;
-    },
-    identified: () => {
-      once = false;
-      return last;
-    },
-    lutimes: (path, atimeMs, mtimeMs, now) => {
-      run({ op: "lutimes", path, atimeMs, mtimeMs, ...now ? { now } : {} }, path);
-    },
-    mkfifo: (path, mode) => {
-      run({ op: "mkfifo", path, mode }, path);
-    },
-    copy: (from, to, mode, exclusive) => {
-      run({ op: "copy", path: from, arg2: to, mode, ...exclusive ? { exclusive } : {} }, to);
-    },
-    create: (path, mode, opening2) => {
-      const flags = { ...mode !== void 0 ? { mode } : {}, ...opening2 ? { opening: opening2 } : {} };
-      const r = run({ op: "create", path, ...flags, identity: true }, path);
-      if (!r.ok || r.kind !== "json") return void 0;
-      const st = parseSyncFsStat(r.json);
-      if (!st) return void 0;
-      const { seen } = r.json;
-      return typeof seen === "number" ? { ...st, seen } : st;
-    },
-    chown: (path, uid, gid, follow3, handle) => {
-      const ids = { ...uid !== void 0 ? { uid } : {}, ...gid !== void 0 ? { gid } : {} };
-      changing(
-        {
-          op: follow3 ? "chown" : "lchown",
-          path,
-          ...ids,
-          ...handle !== void 0 ? { handle } : {}
-        },
-        path
-      );
-    },
-    ...opts.owners ? { owners: true } : {},
-    ...opts.links ? { links: true } : {},
-    ...opts.changes ? { changes: new ChangeView(opts.changes) } : {},
-    access: (path, mode, kind = "access", nofollow) => {
-      run({ op: "access", path, mode, arg2: kind, ...nofollow ? { nofollow } : {} }, path);
-    },
-    hold: (path, held2, open, handle, want = 0, seen = {}) => {
-      const mode = (held2 ? 1 : 0) | (open ? 2 : 0);
-      if (mode === 3) {
-        const at = seen.gen !== void 0 ? { gen: seen.gen } : {};
-        const link = seen.nofollow ? { nofollow: true } : {};
-        return json2({ op: "hold", path, mode: mode | want, ...at, ...link }, path);
-      }
-      run({ op: "hold", path, mode, ...handle !== void 0 ? { handle } : {} }, path);
-      return void 0;
-    },
-    statfs: (path = "/") => parseSyncFsUsage(json2({ op: "statfs", path }, path)),
-    renames: (since, held2) => json2(
-      { op: "renames", path: "/", offset: since, arg2: JSON.stringify(held2) },
-      "/"
-    )
-  };
+});
+
+// src/fs/access.ts
+function permits(cred, perm, want, directory = true) {
+  const mode = perm.mode ?? (directory ? 493 : 420);
+  if (cred.euid === 0) return (want & X_OK) === 0 || directory || (mode & 73) !== 0;
+  const shift = cred.euid === perm.uid ? 6 : inGroup(cred, perm.gid) ? 3 : 0;
+  return (mode >> shift & want) === want;
 }
-var UNCOUNTED_OPS, calls, looks, SPIN_MS, SPIN_STRIDE, SPIN_STRIDES, SPIN_CORES, spinning, SPIN_CAP_MS;
-var init_sync_sab_bridge = __esm({
-  "src/realm/sync-sab-bridge.ts"() {
+var X_OK;
+var init_access = __esm({
+  "src/fs/access.ts"() {
     "use strict";
-    init_changes();
-    init_cpu_clock();
-    init_sync_fs_wire();
-    init_sync_sab_wire();
-    UNCOUNTED_OPS = /* @__PURE__ */ new Set([...SYNC_FS_OPS, "cwd-check", "cwd-chdir"]);
-    calls = 0;
-    looks = 0;
-    SPIN_MS = 0.06;
-    SPIN_STRIDE = 128;
-    SPIN_STRIDES = 256;
-    SPIN_CORES = 4;
-    spinning = (globalThis.navigator?.hardwareConcurrency ?? 0) >= SPIN_CORES;
-    SPIN_CAP_MS = 1;
+    init_owners();
+    init_types();
+    init_walk();
+    X_OK = 1;
+  }
+});
+
+// src/process/wasi-errno.ts
+function wasiErrno(code2) {
+  return WASI_ERRNO[code2] ?? E.IO;
+}
+var WASI_ERRNO;
+var init_wasi_errno = __esm({
+  "src/process/wasi-errno.ts"() {
+    "use strict";
+    init_wasi_abi();
+    WASI_ERRNO = {
+      ...Object.fromEntries(Object.entries(E).map(([name2, errno2]) => [`E${name2}`, errno2])),
+      EWOULDBLOCK: E.AGAIN,
+      ENOTSUP: 138,
+      EOPNOTSUPP: 138,
+      ENOMEDIUM: 148
+    };
   }
 });
 
@@ -13969,9 +13997,12 @@ function ownBytes(bytes) {
   if (bytes.constructor === Uint8Array) return bytes;
   return new Uint8Array(bytes.buffer, bytes.byteOffset, bytes.byteLength).slice();
 }
+function ownedBuffer(body, given) {
+  return body === given ? void 0 : [body.buffer];
+}
 function kernelSys(transport) {
-  const call2 = (req, label) => {
-    const r = transport.call(req, Number.POSITIVE_INFINITY, label);
+  const call2 = (req, label, transfer) => {
+    const r = transport.call(req, Number.POSITIVE_INFINITY, label, transfer);
     if (!r.ok) throw new SyscallError(r.errno);
     return r;
   };
@@ -13986,13 +14017,14 @@ function kernelSys(transport) {
       return r.ok && r.kind === "bytes" ? r.bytes : new Uint8Array(0);
     },
     write(fd, bytes, opts) {
+      const body = ownBytes(bytes);
       const req = {
         op: "fd-write",
         fd,
-        body: ownBytes(bytes),
+        body,
         ...opts?.nonblock ? { nonblock: true } : {}
       };
-      const n = json2(call2(req, `fd-write ${fd}`));
+      const n = json2(call2(req, `fd-write ${fd}`, ownedBuffer(body, bytes)));
       return typeof n === "number" ? n : bytes.length;
     },
     close(fd) {
@@ -14037,8 +14069,9 @@ function kernelSys(transport) {
       return r.ok && r.kind === "bytes" ? r.bytes : new Uint8Array(0);
     },
     pwrite(fd, bytes, at) {
+      const body = ownBytes(bytes);
       return json2(
-        call2({ op: "fd-pwrite", fd, offset: at, body: ownBytes(bytes) }, `fd-pwrite ${fd}`)
+        call2({ op: "fd-pwrite", fd, offset: at, body }, `fd-pwrite ${fd}`, ownedBuffer(body, bytes))
       );
     },
     isatty(fd) {