@ai-ecoverse/slicc-kernel 1.152.2 → 1.154.0

package/dist/process-worker.js

@@ -2964,7 +2964,7 @@ var KERNEL_VERSION, OS_RELEASE;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
-    KERNEL_VERSION = true ? "1.152.2" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.154.0" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });
@@ -4172,7 +4172,7 @@ function sealedStat(minor = 250) {
   const now = /* @__PURE__ */ new Date();
   return {
     dev: 22,
-    ino: minor === 251 ? 2 : 1,
+    ino: DEVICE_INO[minor],
     mode: 8630,
     nlink: 1,
     uid: 0,
@@ -4196,7 +4196,7 @@ function datesOf(real) {
       dates[key] = new Date(value2);
   return dates;
 }
-var POLLIN, POLLOUT, POLLERR, POLLHUP, POLLRDNORM, POLLWRNORM, TCSETSF, O_NONBLOCK, SOCKET_MODE, PTY_PATH, TTY_PATH, PTS_MAJOR, TTY_NAME, SEALED_PATH, STRERROR, CLIPBOARD_PATH, O_CREAT2, O_EXCL2, O_NOCTTY, O_TRUNC3, O_DIRECTORY, KILLED_BY_SIGPIPE, ProcessExit, SyscallError, KernelStreams;
+var POLLIN, POLLOUT, POLLERR, POLLHUP, POLLRDNORM, POLLWRNORM, TCSETSF, O_NONBLOCK, SOCKET_MODE, PTY_PATH, TTY_PATH, PTS_MAJOR, TTY_NAME, SEALED_PATH, STRERROR, CLIPBOARD_PATH, EMBEDDER_PATH, DEVICE_INO, O_CREAT2, O_EXCL2, O_NOCTTY, O_TRUNC3, O_DIRECTORY, KILLED_BY_SIGPIPE, ProcessExit, SyscallError, KernelStreams;
 var init_kernel_streams = __esm({
   "src/process/kernel-streams.ts"() {
     "use strict";
@@ -4226,6 +4226,8 @@ var init_kernel_streams = __esm({
       EINTR: "Interrupted system call"
     };
     CLIPBOARD_PATH = "/dev/clipboard";
+    EMBEDDER_PATH = "/dev/embedder";
+    DEVICE_INO = { 250: 1, 251: 2, 252: 3 };
     O_CREAT2 = 64;
     O_EXCL2 = 128;
     O_NOCTTY = 256;
@@ -4308,7 +4310,7 @@ var init_kernel_streams = __esm({
         stream.stream_ops = { ...stream.stream_ops, getattr: () => this.Fs.stat?.(name2) ?? {} };
       }
       nameDevice(stream, kind) {
-        this.nameStream(stream, kind === "sealed" ? SEALED_PATH : CLIPBOARD_PATH);
+        this.nameStream(stream, `/dev/${kind}`);
       }
       listSealed() {
         const fs = this.Fs;
@@ -4316,7 +4318,8 @@ var init_kernel_streams = __esm({
         if (!analyzePath || !mkdev || !makedev) return;
         const nodes = [
           [SEALED_PATH, 250, this.sys.openSealed],
-          [CLIPBOARD_PATH, 251, this.sys.openClipboard]
+          [CLIPBOARD_PATH, 251, this.sys.openClipboard],
+          [EMBEDDER_PATH, 252, this.sys.openEmbedder]
         ];
         for (const [path, minor, opener] of nodes) {
           if (!opener) continue;
@@ -4346,6 +4349,7 @@ var init_kernel_streams = __esm({
         this.attach(stream, kfd, terminal);
         this.nameStream(stream, path);
         if (path === CLIPBOARD_PATH) this.reportClose(kfd);
+        if (path === EMBEDDER_PATH) this.reportClose(kfd);
       }
       reporting = /* @__PURE__ */ new Set();
       reportClose(kfd) {
@@ -4633,10 +4637,11 @@ var init_kernel_streams = __esm({
         return this.vessel(open, kfd, { path, flags, mode }, false);
       }
       openClipboard(open, path, flags, mode) {
-        const { openClipboard } = this.sys;
-        if (path !== CLIPBOARD_PATH || !openClipboard) return void 0;
+        const clipboard = path === CLIPBOARD_PATH;
+        const opener = clipboard ? this.sys.openClipboard : this.sys.openEmbedder;
+        if (!clipboard && path !== EMBEDDER_PATH || !opener) return void 0;
         if (flags & O_DIRECTORY) throw new this.Fs.ErrnoError(wasiErrno("ENOTDIR"));
-        const kfd = this.call(() => openClipboard.call(this.sys, flags & 3));
+        const kfd = this.call(() => opener.call(this.sys, flags & 3));
         try {
           const stream = this.vessel(open, kfd, { path, flags, mode }, false);
           this.reportClose(kfd);
@@ -4672,6 +4677,7 @@ var init_kernel_streams = __esm({
           fs[name2] = (path, ...rest2) => {
             if (path === SEALED_PATH && this.sys.openSealed) return sealedStat();
             if (path === CLIPBOARD_PATH && this.sys.openClipboard) return sealedStat(251);
+            if (path === EMBEDDER_PATH && this.sys.openEmbedder) return sealedStat(252);
             const owned = this.ownedTty(path);
             if (owned && isPtyPath(path)) return this.owned(path, ptyStat(path));
             if (!isPtyPath(path))
@@ -4965,8 +4971,7 @@ function placeholder(Fs, streams2, entry) {
   const access = entry.flags ?? O_RDWR;
   if (entry.kind === "socket") return streams2.socketStream(access);
   if (entry.kind === "tty") return Fs.open("/dev/tty", O_RDWR);
-  if (entry.kind === "stream" || entry.kind === "clipboard" || entry.kind === "sealed")
-    return Fs.open("/dev/null", access);
+  if (entry.kind === "stream" || DEVICE_KINDS.has(entry.kind)) return Fs.open("/dev/null", access);
   Fs.mkdirTree(PLACEHOLDER_DIR);
   return Fs.open(`${PLACEHOLDER_DIR}/${entry.fd}`, access | O_CREAT3);
 }
@@ -4990,8 +4995,9 @@ function placeKernelStream(Fs, streams2, entry) {
     streams2.sizeFromKernel(stream, entry.kernel);
   } else if (entry.kind === "socket") streams2.attachSocket(stream, entry.kernel);
   else streams2.attach(stream, entry.kernel, entry.kind === "tty");
-  if (entry.kind === "clipboard") streams2.reportClose(entry.kernel);
-  if (entry.kind === "sealed" || entry.kind === "clipboard") streams2.nameDevice(stream, entry.kind);
+  if (entry.kind === "clipboard" || entry.kind === "embedder") streams2.reportClose(entry.kernel);
+  if (DEVICE_KINDS.has(entry.kind))
+    streams2.nameDevice(stream, entry.kind);
   if (entry.kind === "tty") streams2.nameTerminal(stream);
   if (entry.kind === "stream") {
     asFifo(stream, streams2, entry.desc !== void 0 ? `d${entry.desc}` : `k${entry.kernel}`);
@@ -5018,7 +5024,7 @@ function restoreForkedStreams(Fs, streams2, table) {
     }
   }
 }
-var O_RDWR, O_ACCMODE4, O_CREAT3, O_EXCL3, O_TRUNC4, PLACEHOLDER_DIR, NAMED_DEVICES, ACCESS, DEVICES, FIFO_MODE, nextStreamIno, streamInos;
+var O_RDWR, O_ACCMODE4, O_CREAT3, O_EXCL3, O_TRUNC4, PLACEHOLDER_DIR, NAMED_DEVICES, DEVICE_KINDS, ACCESS, DEVICES, FIFO_MODE, nextStreamIno, streamInos;
 var init_process_fork = __esm({
   "src/process/process-fork.ts"() {
     "use strict";
@@ -5031,8 +5037,10 @@ var init_process_fork = __esm({
     PLACEHOLDER_DIR = "/dev/slicc-fd";
     NAMED_DEVICES = {
       "/dev/sealed": "sealed",
-      "/dev/clipboard": "clipboard"
+      "/dev/clipboard": "clipboard",
+      "/dev/embedder": "embedder"
     };
+    DEVICE_KINDS = /* @__PURE__ */ new Set(["sealed", "clipboard", "embedder"]);
     ACCESS = { 0: "read", 1: "write" };
     DEVICES = {
       "/dev/null": "null",
@@ -6310,6 +6318,9 @@ function kernelSys(transport) {
     clipboardAbort(fd) {
       call2({ op: "fd-clipboard-abort", fd }, "fd-clipboard-abort");
     },
+    openEmbedder(flags) {
+      return json2(call2({ op: "fd-open-embedder", flags }, "fd-open-embedder"));
+    },
     ptyNumbers() {
       return json2(call2({ op: "pty-list" }, "pty-list"));
     },
@@ -6805,7 +6816,14 @@ var init_process_runtime = __esm({
     O_ACCMODE5 = 3;
     O_DIRECTORY2 = 65536;
     accessMode = (access) => access === "read" ? O_RDONLY2 : access === "write" ? O_WRONLY3 : O_RDWR3;
-    PLACED = /* @__PURE__ */ new Set(["stream", "file", "socket", "clipboard", "sealed"]);
+    PLACED = /* @__PURE__ */ new Set([
+      "stream",
+      "file",
+      "socket",
+      "clipboard",
+      "embedder",
+      "sealed"
+    ]);
     GLUE_TRAILER = [
       "if (typeof ENV !== 'undefined') Object.assign(ENV, Module.sliccEnv);",
       "if (typeof thisProgram !== 'undefined' && Module.thisProgram === '') thisProgram = '';",
@@ -7926,6 +7944,7 @@ var init_js_kernel = __esm({
       "fd-write",
       "fd-close",
       "fd-open-clipboard",
+      "fd-open-embedder",
       "net-ws-ready",
       "sock-tls",
       "sock-tls-upgrade",
@@ -8261,6 +8280,7 @@ function* lookup(abs) {
   if (DEVICES2.includes(name2)) return { kind: "device" };
   if (name2 === "tty") return { kind: "tty" };
   if (name2 === "clipboard") return { kind: "clipboard" };
+  if (name2 === "embedder") return { kind: "embedder" };
   if (name2 === "sealed") return { kind: "sealed" };
   const std = STDIO.indexOf(name2);
   if (std >= 0) return { kind: "link", target: `${SELF_FD}/${std}`, fd: std };
@@ -8317,7 +8337,8 @@ function* fdTarget(fd, path) {
   if (info.kind === "file") return (yield { op: "fd-vfs-stat", fd }).path;
   if (info.terminal) return info.terminal;
   if (info.meta && "device" in info.meta) return `/dev/${info.meta.device}`;
-  if (info.kind === "clipboard" || info.kind === "sealed") return `/dev/${info.kind}`;
+  if (info.kind === "clipboard" || info.kind === "sealed" || info.kind === "embedder")
+    return `/dev/${info.kind}`;
   return `${info.kind === "socket" ? "socket" : "pipe"}:[${fd}]`;
 }
 function devFdStat(fd) {
@@ -8334,6 +8355,7 @@ function* devStat(abs, follow3) {
     case "device":
     case "tty":
     case "clipboard":
+    case "embedder":
     case "sealed":
       return nodeStat(CHAR | 438);
     case "terminal":
@@ -8379,7 +8401,18 @@ function* devReaddir(abs) {
   if (node.kind !== "dir") throw new JsCallError("ENOTDIR", abs);
   const names = yield { op: "fd-tty-names" };
   const ttys = names.filter((n) => /^\/dev\/tty\d+$/.test(n)).map((n) => n.slice(5));
-  return [...DEVICES2, "clipboard", "sealed", "tty", "fd", "pts", "shm", ...STDIO, ...ttys].sort();
+  return [
+    ...DEVICES2,
+    "clipboard",
+    "embedder",
+    "sealed",
+    "tty",
+    "fd",
+    "pts",
+    "shm",
+    ...STDIO,
+    ...ttys
+  ].sort();
 }
 function* aliasOf(fd, abs, o) {
   const info = yield* fdInfo(fd, abs);
@@ -8420,6 +8453,11 @@ function* opened(abs, o) {
         fd: yield { op: "fd-open-clipboard", flags: accessFlags(o) },
         file: false
       };
+    case "embedder":
+      return {
+        fd: yield { op: "fd-open-embedder", flags: accessFlags(o) },
+        file: false
+      };
     case "sealed":
       return { fd: yield { op: "fd-open-sealed", flags: accessFlags(o) }, file: false };
     case "terminal": {
@@ -8611,6 +8649,7 @@ var init_js_dev = __esm({
       "device",
       "tty",
       "clipboard",
+      "embedder",
       "sealed"
     ]);
   }
@@ -8886,7 +8925,7 @@ function deviceOf(path) {
 }
 function namedDevice(path) {
   if (deviceOf(path) || stdioAlias(path) !== void 0) return true;
-  return path === SEALED_PATH2 || path === CLIPBOARD_PATH2 || path === "/dev/tty";
+  return NAMED_PATHS.has(path);
 }
 function within(path, root) {
   return path === root || path.startsWith(root === "/" ? "/" : `${root}/`);
@@ -8959,7 +8998,7 @@ function promoteRequest(fd, f, handed) {
     ...f.buffer.handle !== void 0 && f.ino !== void 0 ? { ino: f.ino } : {}
   };
 }
-var SYNTHETIC_DIRS2, O_NONBLOCK2, O_WRONLY5, O_RDWR5, O_APPEND3, SEALED_PATH2, CLIPBOARD_PATH2, WasiFds, GEN2;
+var SYNTHETIC_DIRS2, O_NONBLOCK2, O_WRONLY5, O_RDWR5, O_APPEND3, SEALED_PATH2, CLIPBOARD_PATH2, EMBEDDER_PATH2, NAMED_PATHS, WasiFds, GEN2;
 var init_wasi_fds = __esm({
   "src/process/wasi/wasi-fds.ts"() {
     "use strict";
@@ -8976,6 +9015,13 @@ var init_wasi_fds = __esm({
     O_APPEND3 = 1024;
     SEALED_PATH2 = "/dev/sealed";
     CLIPBOARD_PATH2 = "/dev/clipboard";
+    EMBEDDER_PATH2 = "/dev/embedder";
+    NAMED_PATHS = /* @__PURE__ */ new Set([
+      SEALED_PATH2,
+      CLIPBOARD_PATH2,
+      EMBEDDER_PATH2,
+      "/dev/tty"
+    ]);
     WasiFds = class {
       table = /* @__PURE__ */ new Map();
       buffers = /* @__PURE__ */ new Map();
@@ -9588,7 +9634,7 @@ var init_wasi_fds = __esm({
         return joined2.split("/").includes("..") ? physical(this.fs, joined2) : normalize(joined2);
       }
       openKernelDevice(path, oflags, fdflags, rights) {
-        const { openSealed, openClipboard, openTty } = this.kernel.sys;
+        const { openSealed, openClipboard, openEmbedder, openTty } = this.kernel.sys;
         const nonblock = (fdflags & FDFLAGS.NONBLOCK) !== 0;
         let fd;
         let kind;
@@ -9598,6 +9644,9 @@ var init_wasi_fds = __esm({
         } else if (path === CLIPBOARD_PATH2 && openClipboard) {
           fd = this.openCharDevice(openClipboard, oflags, rights);
           kind = "clipboard";
+        } else if (path === EMBEDDER_PATH2 && openEmbedder) {
+          fd = this.openCharDevice(openEmbedder, oflags, rights);
+          kind = "embedder";
         } else if (path === "/dev/tty" || /^\/dev\/tty\d+$/.test(path)) {
           const exclusive = (oflags & OFLAGS.CREAT) !== 0 && (oflags & OFLAGS.EXCL) !== 0;
           try {
@@ -10799,6 +10848,7 @@ function kernelFiletype(kind) {
     case "tty":
     case "sealed":
     case "clipboard":
+    case "embedder":
       return { filetype: FILETYPE.CHARACTER_DEVICE, seeks: false };
     case "device":
       return { filetype: FILETYPE.CHARACTER_DEVICE, seeks: true };
@@ -11876,7 +11926,7 @@ var init_wasi_host = __esm({
         return gone2 ? { ...out, nlink: 0n } : out;
       }
       synthetic(path) {
-        return deviceOf(path) !== void 0 || path === SEALED_PATH2 && !!this.o.kernel.sys.openSealed || path === CLIPBOARD_PATH2 && !!this.o.kernel.sys.openClipboard;
+        return deviceOf(path) !== void 0 || path === SEALED_PATH2 && !!this.o.kernel.sys.openSealed || path === CLIPBOARD_PATH2 && !!this.o.kernel.sys.openClipboard || path === EMBEDDER_PATH2 && !!this.o.kernel.sys.openEmbedder;
       }
       linkedDev(path, follow3) {
         if (!follow3) return void 0;
@@ -16646,7 +16696,8 @@ function serveRequest(tls) {
     ...tls.requestCert ? { requestCert: true } : {},
     ...tls.rejectUnauthorized === false ? { rejectUnauthorized: false } : {},
     ...tls.alpn ? { alpn: [...tls.alpn] } : {},
-    ...tls.handshakeTimeout !== void 0 ? { handshakeTimeout: tls.handshakeTimeout } : {}
+    ...tls.handshakeTimeout !== void 0 ? { handshakeTimeout: tls.handshakeTimeout } : {},
+    ...tls.keylog === true ? { keylog: true } : {}
   };
 }
 function servedOf(r) {
@@ -16656,9 +16707,13 @@ function servedOf(r) {
     path: "kernel",
     ...authorizationError ? { authorizationError } : {},
     peerCertificates: Object.freeze(r.peerCertificates.map(fromBase64)),
-    cipher: Object.freeze({ ...r.cipher })
+    cipher: Object.freeze({ ...r.cipher }),
+    ...keylogOf(r.keylog)
   });
 }
+function keylogOf(lines) {
+  return lines ? { keylog: Object.freeze([...lines]) } : {};
+}
 function clientCert(tls, what = "connect") {
   if (tls.pfx !== void 0) {
     throw new JsCallError("ENOTSUP", what, "pfx is not supported: pass cert and key");
@@ -16679,6 +16734,7 @@ function tlsRequest(tls) {
     ...tls.rejectUnauthorized === false ? { insecure: true } : {},
     ...tls.sni === false ? { sni: false } : {},
     ...tls.checkHostname === false ? { checkHostname: false } : {},
+    ...tls.keylog === true ? { keylog: true } : {},
     ...clientCert(tls)
   };
 }
@@ -16715,7 +16771,8 @@ function sessionOf(r) {
     ...r.authorizationError ? { authorizationError: r.authorizationError } : {},
     servername: r.servername,
     peerCertificates: Object.freeze((r.peerCertificates ?? []).map(fromBase64)),
-    ...controlsOf(r)
+    ...controlsOf(r),
+    ...keylogOf(r.keylog)
   });
 }
 function withAlert(err) {