@ai-ecoverse/slicc-kernel 1.151.1 → 1.152.1

package/dist/types/fs/opfs.d.ts

@@ -1,6 +1,6 @@
 import { type MetaStore } from './meta.js';
 import { type LockManagerLike, type RemoteListener } from './remote.js';
-import { type CopyOptions, type FsStat, type KernelFs, type NewOwner, type OwnerChange, type Peers, type Perm } from './types.js';
+import { type CopyOptions, type FsStat, type KernelFs, type NewOwner, type OwnerChange, type Peers, type Perm, type PwriteOptions } from './types.js';
 export type OpfsOp = 'lookup' | 'read' | 'write' | 'commit' | 'sidecar';
 export declare function translate(err: unknown, path: string, op?: OpfsOp, mapped?: boolean): Error;
 export interface WriteSession {
@@ -84,6 +84,8 @@ export declare class OpfsFs implements KernelFs {
     private calls;
     private others;
     opfsCalls(): number;
+    private idWrites;
+    fileIdWrites(): number;
     opfsOps(): number;
     private io;
     private fresh;
@@ -141,7 +143,7 @@ export declare class OpfsFs implements KernelFs {
     }>;
     version(path: string, cached?: boolean): Promise<string>;
     pread(path: string, offset: number, length: number): Promise<Uint8Array>;
-    pwrite(path: string, offset: number, bytes: Uint8Array): Promise<void>;
+    pwrite(path: string, offset: number, bytes: Uint8Array, _transfer?: boolean, options?: PwriteOptions): Promise<void>;
     private keptFor;
     private writeAt;
     private readonly fileWrites;

package/dist/types/fs/types.d.ts

@@ -112,7 +112,7 @@ export interface KernelFs {
     utimes(path: string, atime: Date, mtime: Date): Promise<void>;
     lutimes?(path: string, atime: Date, mtime: Date): Promise<void>;
     pread?(path: string, offset: number, length: number, version?: string): Promise<Uint8Array>;
-    pwrite?(path: string, offset: number, bytes: Uint8Array, transfer?: boolean): Promise<void>;
+    pwrite?(path: string, offset: number, bytes: Uint8Array, transfer?: boolean, options?: PwriteOptions): Promise<void>;
     truncate?(path: string, size: number): Promise<void>;
     protect?(prefixes: readonly string[], versions?: boolean): void;
     unguarded?(): KernelFs;
@@ -133,6 +133,10 @@ export interface KernelFs {
         ackMs: readonly number[];
     };
     opfsOps?(): number;
+    fileIdWrites?(): number;
+}
+export interface PwriteOptions {
+    create?: false;
 }
 export type RangedOps = Required<Pick<KernelFs, 'pread' | 'pwrite' | 'truncate'>>;
 export declare function rangedOps(fs: Partial<RangedOps>): RangedOps | undefined;

package/dist/types/index.d.ts

@@ -36,7 +36,7 @@ export type { ProcessMountPolicy, ProcessMountRequest } from './mount/syscall.js
 export type { JsChild, JsExited, JsSpawnOptions, JsStdio } from './process/js/js-children.js';
 export type { JsCrontabAnswer, JsCrontabCall, JsFdStatus, JsFdType, JsFile, JsOpenOptions, JsProgramContext, JsSelected, JsSelectSets, JsSignal, JsSudoAnswer, JsWriteOptions, } from './process/js/js-context.js';
 export type { JsStatFs } from './process/js/js-io.js';
-export type { JsAddress, JsConnection, JsConnectOptions, JsListener, JsListenOptions, JsNet, JsResolveOptions, JsTlsCipher, JsTlsOptions, JsTlsSession, } from './process/js/js-net.js';
+export type { JsAddress, JsConnection, JsConnectOptions, JsListener, JsListenOptions, JsNet, JsResolveOptions, JsTlsChoice, JsTlsCipher, JsTlsContext, JsTlsContextOptions, JsTlsOffer, JsTlsOptions, JsTlsSelect, JsTlsServerSession, JsTlsSession, } from './process/js/js-net.js';
 export type { JsRunOptions, JsRunResult, JsRunStdio } from './process/js/js-run.js';
 export type { JsCred, JsSyncContext, JsSyncFile } from './process/js/js-sync.js';
 export type { JsThread, JsThreadContext, JsThreadSpawnOptions } from './process/js/js-thread.js';

package/dist/types/kernel/host.d.ts

@@ -93,6 +93,7 @@ export interface SpawnWasmOptions {
         now: number;
         renames: Array<[string, string]>;
     };
+    fileId?: (path: string) => Promise<string> | undefined;
     renameSeq?: (from: string, to: string) => number | undefined;
     mounts?: () => MountLine[];
     mount?: WasmProcessOptions['mount'];

package/dist/types/kernel/net/tls-client.d.ts

@@ -1,5 +1,5 @@
 import { type TlsCipher } from './tls-ciphers.js';
-import { type TlsEngine, type TlsSession, type TlsStore } from './tls-engine.js';
+import { type TlsEngine, type TlsLeaf, type TlsSession, type TlsStore } from './tls-engine.js';
 import type { UplinkConn } from './uplink.js';
 export declare function verifyCode(flags: number): string | undefined;
 export interface TlsClientInfo {
@@ -47,7 +47,18 @@ export interface TlsServerInfo {
     peerCertificates: Uint8Array[];
     cipher: TlsCipher;
 }
-export declare function tlsServer(conn: UplinkConn, session: TlsSession, clientCerts: boolean): Promise<{
+export interface ServerOffer {
+    servername: string;
+    protocols: string[];
+}
+export interface ServerChoice {
+    leaf?: TlsLeaf;
+    alpn?: string;
+    refuse?: number;
+    done?: () => void;
+}
+export type ServerSelect = (offer: ServerOffer) => Promise<ServerChoice>;
+export declare function tlsServer(conn: UplinkConn, session: TlsSession, clientCerts: boolean, select?: ServerSelect): Promise<{
     conn: UplinkConn;
     info: TlsServerInfo;
 }>;

package/dist/types/kernel/net/tls-engine.d.ts

@@ -1,6 +1,6 @@
 type TlsExport = 'malloc' | 'free' | 'tls_last_error' | 'tls_strerror' | 'tls_leaf_new' | 'tls_leaf_spki' | 'tls_leaf_add_cert' | 'tls_leaf_free' | 'tls_session_new' | 'tls_feed' | 'tls_feed_eof' | 'tls_in_room' | 'tls_read' | 'tls_write' | 'tls_out_size' | 'tls_out_take' | 'tls_close' | 'tls_alpn_http11' | 'tls_session_free';
 type TlsClientExport = 'tls_ca_new' | 'tls_ca_add_der' | 'tls_ca_add_bundle' | 'tls_ca_free' | 'tls_client_new' | 'tls_handshake' | 'tls_verify_result' | 'tls_verify_info' | 'tls_alpn' | 'tls_version' | 'tls_peer_count' | 'tls_peer_der';
-type TlsSessionExport = 'tls_leaf_import' | 'tls_server_new' | 'tls_sni' | 'tls_client_cert' | 'tls_ciphersuite' | 'tls_name_mismatch' | 'tls_last_alert' | 'tls_chain_verify';
+type TlsSessionExport = 'tls_leaf_import' | 'tls_server_new' | 'tls_sni' | 'tls_server_select' | 'tls_server_refuse' | 'tls_client_alpn' | 'tls_client_cert' | 'tls_ciphersuite' | 'tls_name_mismatch' | 'tls_last_alert' | 'tls_chain_verify';
 export type TlsEngineModule = {
     readonly HEAPU8: Uint8Array;
 } & {
@@ -18,6 +18,8 @@ export declare const TLS_CLIENT_NO_SNI = 2;
 export declare const TLS_CLIENT_VERIFY_CHAIN_ONLY = 4;
 export declare const TLS_SERVER_REQUEST_CERT = 1;
 export declare const TLS_SERVER_REQUIRE_CERT = 2;
+export declare const TLS_SERVER_SELECT = 4;
+export declare const TLS_HANDSHAKE_SELECT = 2;
 export declare class TlsError extends Error {
     readonly code: number;
     constructor(code: number, message: string);
@@ -33,7 +35,8 @@ export declare class TlsEngine {
     session(leaf: TlsLeaf, host: string): TlsSession;
     get serverSessions(): boolean;
     importLeaf(chain: Uint8Array, key: Uint8Array, pass: Uint8Array): TlsLeaf;
-    serverSession(leaf: TlsLeaf, alpn: readonly string[], clientCa: TlsStore | undefined, flags: number): TlsSession;
+    get serverSelect(): boolean;
+    serverSession(leaf: TlsLeaf | undefined, alpn: readonly string[], clientCa: TlsStore | undefined, flags: number): TlsSession;
     withBytes<T>(bytes: Uint8Array, fn: (ptr: number) => T): T;
     withSecret<T>(bytes: Uint8Array, fn: (ptr: number) => T): T;
     intoScratch(fn: (ptr: number, max: number) => number): number | Uint8Array;
@@ -78,6 +81,10 @@ export declare class TlsSession {
     free(): void;
     private get c();
     handshake(): boolean;
+    step(): number;
+    clientAlpn(): string[];
+    select(leaf: TlsLeaf | undefined, alpn: string | undefined): void;
+    refuse(alert: number): void;
     get verifyResult(): number;
     get version(): number;
     get sni(): string;

package/dist/types/kernel/net/tls-server.d.ts

@@ -1,5 +1,7 @@
+import { type FdTable } from '../fd-table.js';
 import type { KernelSocket } from '../socket.js';
 import type { TlsCipher } from './tls-ciphers.js';
+import { type ServerOffer } from './tls-client.js';
 import { type TlsEngine, type TlsLeaf, type TlsStore } from './tls-engine.js';
 import { type ClientCertRequest, type SecureProcess } from './tls-uplink.js';
 export interface ServeRequest {
@@ -9,8 +11,14 @@ export interface ServeRequest {
     rejectUnauthorized?: boolean;
     alpn?: string[];
     handshakeTimeout?: number;
+    select?: boolean;
     listener?: KernelSocket;
 }
+export interface SelectRequest {
+    context?: number;
+    alpn?: string;
+    refuse?: number;
+}
 export interface ServedSession {
     path: 'kernel';
     protocol: 'TLSv1.2' | 'TLSv1.3';
@@ -23,7 +31,7 @@ export interface ServedSession {
 }
 interface Server {
     engine: TlsEngine;
-    leaf: TlsLeaf;
+    leaf: TlsLeaf | undefined;
     store: TlsStore | undefined;
     alpn: string[];
     flags: number;
@@ -32,5 +40,12 @@ interface Server {
 }
 export declare function serverOf(proc: SecureProcess, req: ServeRequest): Promise<Server>;
 export declare function listenSecure(proc: SecureProcess, socket: KernelSocket, req: ServeRequest): Promise<void>;
-export declare function serveSecure(proc: SecureProcess, socket: KernelSocket, req: ServeRequest): Promise<ServedSession>;
+export declare function serveSecure(proc: SecureProcess, socket: KernelSocket, req: ServeRequest): Promise<ServedSession | {
+    select: ServerOffer;
+}>;
+export declare const TLS_CONTEXTS_MAX = 64;
+export declare function contextSecure(proc: SecureProcess & {
+    fds: FdTable;
+}, cert: ClientCertRequest | undefined): Promise<number>;
+export declare function selectSecure(fds: FdTable, socket: KernelSocket, req: SelectRequest): Promise<ServedSession>;
 export {};

package/dist/types/kernel/proc-info.d.ts

@@ -55,6 +55,7 @@ export interface ProcessListing {
     opfsOps?: number;
     cwdChecks?: number;
     staleFds?: number;
+    fileIds?: number;
     renameAcks?: {
         acks: number;
         busy: number;

package/dist/types/kernel/socket-syscalls.d.ts

@@ -91,6 +91,16 @@ export type SocketSyscall = {
     rejectUnauthorized?: boolean;
     alpn?: string[];
     handshakeTimeout?: number;
+    select?: boolean;
+} | {
+    op: 'sock-tls-context';
+    cert?: ClientCertRequest;
+} | {
+    op: 'sock-tls-select';
+    fd: number;
+    context?: number;
+    alpn?: string;
+    refuse?: number;
 } | {
     op: 'sock-recvfrom';
     fd: number;

package/dist/types/kernel/socket.d.ts

@@ -94,6 +94,7 @@ export declare class KernelSocket implements KernelFile {
     serving: {
         release(): void;
     } | undefined;
+    pending: (() => void) | undefined;
     private served;
     get loopbackLinked(): boolean;
     secureLink<T>(make: (raw: UplinkConn) => Promise<{

package/dist/types/launcher.d.ts

@@ -422,6 +422,7 @@ export declare class Launcher {
     fsFor(tag: string | undefined): KernelFs;
     isWriter(tags: readonly string[] | undefined, base?: number): boolean;
     private stackFor;
+    private rootFileId;
     private flushingPeers;
     private rewritten;
     private flushOpen;

package/dist/types/mount/mount-fs.d.ts

@@ -54,6 +54,7 @@ export declare class HeldSet extends Set<HeldPaths> {
     constructor(idle: (path: string) => void);
     add(holds: HeldPaths): this;
     doubt(paths: readonly string[], over?: string): void;
+    bindIds(id: (path: string) => Promise<string> | undefined): Promise<void>;
     delete(holds: HeldPaths): boolean;
 }
 export declare function heldUnder(held: Iterable<Map<string, number>>, target: string): boolean;
@@ -80,8 +81,10 @@ export declare class HeldPaths extends Map<string, number> implements UnlinkHold
     doubt(over: string, exact?: boolean): void;
     boundIno(handle: number): {
         ino: number;
+        fid?: string;
         doubt: number;
     } | undefined;
+    bindIds(id: (path: string) => Promise<string> | undefined): Promise<void>;
     trust(handle: number, doubt: number): void;
     keptFor(handle: number): KeptFile | undefined;
     holdsHandle(handle: number): boolean;
@@ -90,7 +93,7 @@ export declare class HeldPaths extends Map<string, number> implements UnlinkHold
     unkeep(path: string, file: KeptFile): void;
     private letGo;
     releaseAll(): void;
-    hold(path: string, on: boolean, open?: boolean, real?: string, handle?: number, ino?: number): number | undefined;
+    hold(path: string, on: boolean, open?: boolean, real?: string, handle?: number, ino?: number, fid?: string): number | undefined;
     private holdOpen;
     private holdWrite;
     own<T>(path: string, op: () => Promise<T>): Promise<T>;

package/dist/types/process/js/js-net.d.ts

@@ -42,6 +42,26 @@ export interface JsTlsOptions {
     server?: boolean;
     requestCert?: boolean;
     handshakeTimeout?: number;
+    select?: JsTlsSelect;
+}
+export interface JsTlsOffer {
+    servername: string;
+    protocols: string[];
+}
+export interface JsTlsChoice {
+    context?: JsTlsContext | number;
+    alpn?: string;
+    refuse?: string | number;
+}
+export type JsTlsSelect = (offer: JsTlsOffer) => JsTlsChoice | undefined | Promise<JsTlsChoice | undefined>;
+export interface JsTlsContext {
+    readonly fd: number;
+    close(): Promise<void>;
+}
+export interface JsTlsContextOptions {
+    cert: unknown;
+    key: unknown;
+    passphrase?: string;
 }
 export interface JsTlsServerSession {
     readonly path: 'kernel';
@@ -92,6 +112,7 @@ export interface JsNet {
     listen(options?: JsListenOptions): Promise<JsListener>;
     connect(options: JsConnectOptions): Promise<JsConnection>;
     secure(conn: JsConnection, tls: JsTlsOptions): Promise<JsConnection>;
+    tlsContext(options: JsTlsContextOptions): Promise<JsTlsContext>;
     resolve(name: string, options?: JsResolveOptions): Promise<string[]>;
 }
 export interface NetIo {

package/dist/types/process/wasi/wasi-fds.d.ts

@@ -3,7 +3,7 @@ import type { HeldCwd } from '../../kernel/held-cwd.js';
 import type { WasmSyscall } from '../../kernel/process.js';
 import { type SyncFsBridgeStat, type SyncFsPosixBridge } from '../../realm/sync-fs-wire.js';
 import type { ProcessSys } from '../kernel-streams.js';
-import { FileBuffer, type WasiEntry } from './wasi-files.js';
+import { FileBuffer, LocalFile, type WasiEntry } from './wasi-files.js';
 export interface WasiKernel {
     sys: ProcessSys;
     call(req: WasmSyscall): unknown;
@@ -109,6 +109,7 @@ export declare class WasiFds {
         type: 'kernel';
     }>): boolean;
     flushAll(): void;
+    synced(file: LocalFile): void;
     flushEarly(): void;
     reread(fd: number): void;
     flushPath(path: string): void;

package/dist/types/process/wasi/wasi-files.d.ts

@@ -34,6 +34,9 @@ export declare class FileBuffer {
     keep(): void;
     prefetch(): void;
     load(): Uint8Array;
+    private spoiled;
+    spoil(): void;
+    private live;
     size(): number;
     pread(max: number, at: number): Uint8Array;
     fits(end: number): void;

package/dist/types/realm/sync-fs-token-registry.d.ts

@@ -10,12 +10,14 @@ export interface SyncFsTokenEntry {
         quota: number;
         usage: number;
     } | undefined>;
-    hold?: (path: string, held: boolean, open: boolean, real?: string, handle?: number, ino?: number) => number | undefined;
+    hold?: (path: string, held: boolean, open: boolean, real?: string, handle?: number, ino?: number, fid?: string) => number | undefined;
     keptFor?: (handle: number) => KeptFile | undefined;
     boundIno?: (handle: number) => {
         ino: number;
+        fid?: string;
         doubt: number;
     } | undefined;
+    fileId?: (path: string) => Promise<string> | undefined;
     trust?: (handle: number, doubt: number) => void;
     gate?: <T>(path: string, op: () => Promise<T>) => Promise<T>;
     unlinked?: (path: string) => KeptFile | undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.151.1",
+  "version": "1.152.1",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",