@ai-ecoverse/slicc-kernel 1.153.0 → 1.154.0

package/dist/types/kernel/net/tls-client.d.ts

@@ -18,6 +18,7 @@ export interface TlsClientInfo {
     verified: boolean;
     handshakeAt: number;
     substitutes?: boolean;
+    keylog?: string[];
 }
 export interface TlsClientOptions {
     engine: TlsEngine;
@@ -30,6 +31,7 @@ export interface TlsClientOptions {
     session?: TlsSession;
     clientCertificate?: boolean;
     bundled?: boolean;
+    keylog?: boolean;
 }
 export declare function clientFlags(o: TlsClientOptions): number;
 export declare function openSession(o: TlsClientOptions): TlsSession;
@@ -46,6 +48,7 @@ export interface TlsServerInfo {
     authorizationError?: string;
     peerCertificates: Uint8Array[];
     cipher: TlsCipher;
+    keylog?: string[];
 }
 export interface ServerOffer {
     servername: string;
@@ -58,7 +61,7 @@ export interface ServerChoice {
     done?: () => void;
 }
 export type ServerSelect = (offer: ServerOffer) => Promise<ServerChoice>;
-export declare function tlsServer(conn: UplinkConn, session: TlsSession, clientCerts: boolean, select?: ServerSelect): Promise<{
+export declare function tlsServer(conn: UplinkConn, session: TlsSession, clientCerts: boolean, select?: ServerSelect, keylog?: boolean): Promise<{
     conn: UplinkConn;
     info: TlsServerInfo;
 }>;

package/dist/types/kernel/net/tls-engine.d.ts

@@ -1,6 +1,6 @@
 type TlsExport = 'malloc' | 'free' | 'tls_last_error' | 'tls_strerror' | 'tls_leaf_new' | 'tls_leaf_spki' | 'tls_leaf_add_cert' | 'tls_leaf_free' | 'tls_session_new' | 'tls_feed' | 'tls_feed_eof' | 'tls_in_room' | 'tls_read' | 'tls_write' | 'tls_out_size' | 'tls_out_take' | 'tls_close' | 'tls_alpn_http11' | 'tls_session_free';
 type TlsClientExport = 'tls_ca_new' | 'tls_ca_add_der' | 'tls_ca_add_bundle' | 'tls_ca_free' | 'tls_client_new' | 'tls_handshake' | 'tls_verify_result' | 'tls_verify_info' | 'tls_alpn' | 'tls_version' | 'tls_peer_count' | 'tls_peer_der';
-type TlsSessionExport = 'tls_leaf_import' | 'tls_server_new' | 'tls_sni' | 'tls_server_select' | 'tls_server_refuse' | 'tls_client_alpn' | 'tls_client_cert' | 'tls_ciphersuite' | 'tls_name_mismatch' | 'tls_last_alert' | 'tls_chain_verify';
+type TlsSessionExport = 'tls_leaf_import' | 'tls_server_new' | 'tls_sni' | 'tls_server_select' | 'tls_server_refuse' | 'tls_client_alpn' | 'tls_keylog' | 'tls_client_cert' | 'tls_ciphersuite' | 'tls_name_mismatch' | 'tls_last_alert' | 'tls_chain_verify';
 export type TlsEngineModule = {
     readonly HEAPU8: Uint8Array;
 } & {
@@ -20,6 +20,7 @@ export declare const TLS_SERVER_REQUEST_CERT = 1;
 export declare const TLS_SERVER_REQUIRE_CERT = 2;
 export declare const TLS_SERVER_SELECT = 4;
 export declare const TLS_HANDSHAKE_SELECT = 2;
+export declare const TLS_KEYLOG = 8;
 export declare class TlsError extends Error {
     readonly code: number;
     constructor(code: number, message: string);
@@ -35,11 +36,12 @@ export declare class TlsEngine {
     session(leaf: TlsLeaf, host: string): TlsSession;
     get serverSessions(): boolean;
     importLeaf(chain: Uint8Array, key: Uint8Array, pass: Uint8Array): TlsLeaf;
+    get keylogs(): boolean;
     get serverSelect(): boolean;
     serverSession(leaf: TlsLeaf | undefined, alpn: readonly string[], clientCa: TlsStore | undefined, flags: number): TlsSession;
     withBytes<T>(bytes: Uint8Array, fn: (ptr: number) => T): T;
     withSecret<T>(bytes: Uint8Array, fn: (ptr: number) => T): T;
-    intoScratch(fn: (ptr: number, max: number) => number): number | Uint8Array;
+    intoScratch(fn: (ptr: number, max: number) => number, secret?: boolean): number | Uint8Array;
     get sessionControls(): boolean;
     get client(): TlsClientModule | undefined;
     private clientModule;
@@ -87,6 +89,7 @@ export declare class TlsSession {
     refuse(alert: number): void;
     get verifyResult(): number;
     get version(): number;
+    keylog(): string[];
     get sni(): string;
     get alpn(): string | undefined;
     ownCert(chain: Uint8Array, key: Uint8Array, pass: Uint8Array): void;

package/dist/types/kernel/net/tls-server.d.ts

@@ -12,6 +12,7 @@ export interface ServeRequest {
     alpn?: string[];
     handshakeTimeout?: number;
     select?: boolean;
+    keylog?: boolean;
     listener?: KernelSocket;
 }
 export interface SelectRequest {
@@ -28,6 +29,7 @@ export interface ServedSession {
     authorizationError?: string;
     peerCertificates: string[];
     cipher: TlsCipher;
+    keylog?: string[];
 }
 interface Server {
     engine: TlsEngine;

package/dist/types/kernel/net/tls-uplink.d.ts

@@ -17,6 +17,7 @@ export interface SecureRequest {
     sni?: false;
     checkHostname?: false;
     clientCert?: ClientCertRequest;
+    keylog?: boolean;
 }
 export interface ClientCertRequest {
     chain: string[];
@@ -57,6 +58,7 @@ export interface SecureSession {
     hostnameChecked?: boolean;
     hostnameMatches?: boolean;
     chainError?: string;
+    keylog?: string[];
 }
 export declare function encryptedKey(key: Uint8Array): boolean;
 export declare function keyRefused(err: unknown, locked: boolean): KernelError;

package/dist/types/kernel/socket-syscalls.d.ts

@@ -70,6 +70,7 @@ export type SocketSyscall = {
     sni?: false;
     checkHostname?: false;
     clientCert?: ClientCertRequest;
+    keylog?: boolean;
     path?: 'kernel' | 'transport';
 } | {
     op: 'sock-tls-upgrade';
@@ -81,6 +82,7 @@ export type SocketSyscall = {
     sni?: false;
     checkHostname?: false;
     clientCert?: ClientCertRequest;
+    keylog?: boolean;
 } | {
     op: 'sock-tls-serve' | 'sock-tls-listen';
     fd: number;
@@ -92,6 +94,7 @@ export type SocketSyscall = {
     alpn?: string[];
     handshakeTimeout?: number;
     select?: boolean;
+    keylog?: boolean;
 } | {
     op: 'sock-tls-context';
     cert?: ClientCertRequest;

package/dist/types/process/js/js-net.d.ts

@@ -21,6 +21,7 @@ export interface JsTlsSession {
     readonly hostnameChecked?: boolean;
     readonly hostnameMatches?: boolean;
     readonly chainError?: string;
+    readonly keylog?: readonly string[];
 }
 export interface JsTlsCipher {
     readonly name: string;
@@ -42,6 +43,7 @@ export interface JsTlsOptions {
     server?: boolean;
     requestCert?: boolean;
     handshakeTimeout?: number;
+    keylog?: boolean;
     select?: JsTlsSelect;
 }
 export interface JsTlsOffer {
@@ -72,6 +74,7 @@ export interface JsTlsServerSession {
     readonly authorizationError?: string;
     readonly peerCertificates: readonly Uint8Array[];
     readonly cipher: JsTlsCipher;
+    readonly keylog?: readonly string[];
 }
 export interface JsConnection {
     readonly fd: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.153.0",
+  "version": "1.154.0",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -64,7 +64,7 @@
   },
   "devDependencies": {
     "@ai-ecoverse/py-numpy": "2.5.4-4",
-    "@ai-ecoverse/slicc-cdp": "1.39.2",
+    "@ai-ecoverse/slicc-cdp": "1.40.0",
     "@ai-ecoverse/slicc-node": "2.5.2",
     "@ai-ecoverse/slicc-scrub": "1.1.0",
     "@ai-ecoverse/slicc-shared-web": "2.11.3",
@@ -80,9 +80,9 @@
     "@ai-ecoverse/wasm-git": "2.55.0-22",
     "@ai-ecoverse/wasm-gmake": "4.4.1-9",
     "@ai-ecoverse/wasm-procps": "4.0.7-5",
-    "@ai-ecoverse/wasm-sqlite3": "3.54.0-8",
+    "@ai-ecoverse/wasm-sqlite3": "3.54.1-1",
     "@ai-ecoverse/wasm-tar": "1.35.0-9",
-    "@ai-ecoverse/wasm-tls-engine": "4.2.0-9",
+    "@ai-ecoverse/wasm-tls-engine": "4.2.0-10",
     "@ai-ecoverse/wasm-util-linux": "2.42.4-7",
     "@biomejs/biome": "2.5.15",
     "@types/node": "24.19.2",