@ai-ecoverse/slicc-kernel 1.158.1 → 1.159.1

package/dist/types/kernel/fd-rights.d.ts

@@ -0,0 +1,32 @@
+import { type FdTable, type KernelErrno, type KernelFile, type OpenFile } from './fd-table.js';
+import type { PipeMark } from './pipe.js';
+export declare const RIGHTS_MAX = 253;
+export declare const RIGHTS_IN_FLIGHT = 1024;
+interface Passed {
+    file: OpenFile;
+    status: number | undefined;
+}
+export declare class RightsMark implements PipeMark {
+    readonly at: number;
+    readonly passed: Passed[];
+    constructor(at: number, passed: Passed[]);
+    get count(): number;
+    drop(): void;
+}
+export declare function refusal(file: KernelFile): KernelErrno | undefined;
+export interface SendRights {
+    fd: number;
+    body: Uint8Array;
+    fds: number[];
+    nonblock: boolean;
+}
+export declare function sendRights(fds: FdTable, req: SendRights, signal?: AbortSignal): Promise<number>;
+export interface ReceiveRights {
+    fd: number;
+    max: number;
+    cloexec: boolean;
+    nonblock: boolean;
+}
+export declare function encodeRights(bytes: Uint8Array, got: number[], truncated: boolean): Uint8Array;
+export declare function receiveRights(fds: FdTable, req: ReceiveRights, signal?: AbortSignal): Promise<Uint8Array>;
+export {};

package/dist/types/kernel/net/tls-server.d.ts

@@ -1,4 +1,4 @@
-import { type FdTable } from '../fd-table.js';
+import { type FdTable, type KernelFile } from '../fd-table.js';
 import type { KernelSocket } from '../socket.js';
 import type { TlsCipher } from './tls-ciphers.js';
 import { type ServerOffer } from './tls-client.js';
@@ -45,6 +45,11 @@ export declare function listenSecure(proc: SecureProcess, socket: KernelSocket,
 export declare function serveSecure(proc: SecureProcess, socket: KernelSocket, req: ServeRequest): Promise<ServedSession | {
     select: ServerOffer;
 }>;
+export declare class TlsContext implements KernelFile {
+    readonly leaf: TlsLeaf;
+    constructor(leaf: TlsLeaf);
+    close(): void;
+}
 export declare const TLS_CONTEXTS_MAX = 64;
 export declare function contextSecure(proc: SecureProcess & {
     fds: FdTable;

package/dist/types/kernel/pipe.d.ts

@@ -1,7 +1,12 @@
 export declare const PIPE_CAPACITY: number;
+export interface PipeMark {
+    readonly at: number;
+    readonly count: number;
+    drop(): void;
+}
 export declare class PipeError extends Error {
-    readonly code: 'EPIPE' | 'EINTR';
-    constructor(code: 'EPIPE' | 'EINTR');
+    readonly code: 'EPIPE' | 'EINTR' | 'EAGAIN';
+    constructor(code: 'EPIPE' | 'EINTR' | 'EAGAIN');
 }
 export declare class KernelPipe {
     private chunks;
@@ -9,6 +14,9 @@ export declare class KernelPipe {
     private readers;
     private writers;
     private waiters;
+    private pushed;
+    private taken;
+    private marks;
     readonly capacity: number;
     constructor(capacity?: number);
     get buffered(): number;
@@ -21,6 +29,15 @@ export declare class KernelPipe {
     closeRead(): void;
     closeWrite(): void;
     read(max: number, signal?: AbortSignal): Promise<Uint8Array>;
+    get inFlight(): number;
+    receive(max: number, nonblock: boolean, signal?: AbortSignal): Promise<{
+        bytes: Uint8Array;
+        marks: PipeMark[];
+    }>;
+    writeMarked(bytes: Uint8Array, mark: (at: number) => PipeMark, nonblock: boolean, signal?: AbortSignal): Promise<number>;
+    private orphan;
+    private bounded;
+    private dropMarks;
     peek(max: number, signal?: AbortSignal): Promise<Uint8Array>;
     write(bytes: Uint8Array, signal?: AbortSignal): Promise<number>;
     private take;

package/dist/types/kernel/socket-syscalls.d.ts

@@ -37,6 +37,18 @@ export type SocketSyscall = {
 } | {
     op: 'sock-reset';
     fd: number;
+} | {
+    op: 'sock-sendmsg';
+    fd: number;
+    body: Uint8Array;
+    fds: number[];
+    nonblock: boolean;
+} | {
+    op: 'sock-recvmsg';
+    fd: number;
+    max: number;
+    cloexec: boolean;
+    nonblock: boolean;
 } | {
     op: 'sock-name';
     fd: number;

package/dist/types/kernel/socket.d.ts

@@ -4,7 +4,7 @@ import { type Destination, Routes } from './net/routes.js';
 import { SwitchConn } from './net/switch-conn.js';
 import type { TlsClientSupport } from './net/tls-uplink.js';
 import type { NetworkUplink, UplinkConn } from './net/uplink.js';
-import { KernelPipe } from './pipe.js';
+import { KernelPipe, type PipeMark } from './pipe.js';
 import type { SealedCaller } from './sealed.js';
 import type { UnixDgram } from './unix-dgram.js';
 export type SockAddr = {
@@ -77,6 +77,13 @@ export declare class KernelSocket implements KernelFile {
     private connection;
     read(max: number, signal?: AbortSignal): Promise<Uint8Array>;
     peek(max: number, signal?: AbortSignal): Promise<Uint8Array>;
+    private rightsLink;
+    sendRights(bytes: Uint8Array, mark: (at: number, inFlight: number) => PipeMark, nonblock: boolean, signal?: AbortSignal): Promise<number>;
+    receiveRights(max: number, nonblock: boolean, signal?: AbortSignal): Promise<{
+        bytes: Uint8Array;
+        marks: PipeMark[];
+    }>;
+    get secured(): boolean;
     write(bytes: Uint8Array, signal?: AbortSignal): Promise<number>;
     poll(): PollState;
     changed(signal?: AbortSignal): Promise<void>;
@@ -99,6 +106,7 @@ export declare class KernelSocket implements KernelFile {
     } | undefined;
     pending: (() => void) | undefined;
     private served;
+    private tlsDial;
     get loopbackLinked(): boolean;
     secureLink<T>(make: (raw: UplinkConn) => Promise<{
         conn: UplinkConn;

package/dist/types/process/js/js-context.d.ts

@@ -4,6 +4,7 @@ import { type JsChild, type JsExited, type JsSpawnOptions, type JsWaitOptions }
 import { type JsFdType, type JsOpenOptions, type JsStatFs, type JsWriteOptions } from './js-io.js';
 import { type JsKernel } from './js-kernel.js';
 import { type JsNet } from './js-net.js';
+import { type JsReceived, type JsRecvmsgOptions, type JsSendmsgOptions } from './js-rights.js';
 import { type JsSyncContext, type SyncCall } from './js-sync.js';
 import type { JsThreadContext } from './js-thread.js';
 import { type JsTty } from './js-tty.js';
@@ -49,6 +50,11 @@ export interface JsScriptResult {
     completion: boolean;
 }
 export type JsRunScript = (source: string, filename: string) => JsScriptResult;
+export interface JsPromiseState {
+    state: 'pending' | 'fulfilled' | 'rejected';
+    value: unknown;
+}
+export type JsPromiseProbe = (promise: unknown) => JsPromiseState | undefined;
 export interface JsProgramContext {
     readonly kernel: JsKernelInfo;
     memory(): JsMemory;
@@ -65,6 +71,8 @@ export interface JsProgramContext {
     write(fd: number, data: Uint8Array | string, options?: JsWriteOptions): Promise<number>;
     close(fd: number): Promise<void>;
     socketpair(): Promise<[number, number]>;
+    sendmsg(fd: number, data: Uint8Array | string, options?: JsSendmsgOptions): Promise<number>;
+    recvmsg(fd: number, max?: number, options?: JsRecvmsgOptions): Promise<JsReceived>;
     pipe(): Promise<[number, number]>;
     select(sets: JsSelectSets, options?: {
         signal?: AbortSignal;
@@ -172,6 +180,7 @@ export interface ContextOptions {
     memory?: (() => JsMemory) | undefined;
     asyncContext?: (() => JsAsyncContext) | undefined;
     runScript?: JsRunScript | undefined;
+    promiseState?: JsPromiseProbe | undefined;
     fs?: {
         owners: boolean;
         links: boolean;

package/dist/types/process/js/js-net.d.ts

@@ -118,6 +118,7 @@ export interface JsNet {
     secure(conn: JsConnection, tls: JsTlsOptions): Promise<JsConnection>;
     tlsContext(options: JsTlsContextOptions): Promise<JsTlsContext>;
     resolve(name: string, options?: JsResolveOptions): Promise<string[]>;
+    adopt(fd: number): Promise<JsConnection | JsListener>;
 }
 export interface NetIo {
     read(fd: number, max: number | undefined, signal: AbortSignal): Promise<Uint8Array>;

package/dist/types/process/js/js-rights.d.ts

@@ -0,0 +1,46 @@
+import type { WasmSyscall } from '../../kernel/process.js';
+import type { SyncFsResult } from '../../realm/sync-fs-wire.js';
+import type { SyncSabRequestBody } from '../../realm/sync-sab-wire.js';
+export interface JsSendmsgOptions {
+    fds?: number[];
+    nonblock?: boolean;
+}
+export interface JsRecvmsgOptions {
+    cloexec?: boolean;
+    nonblock?: boolean;
+}
+export interface JsReceived {
+    bytes: Uint8Array;
+    fds: number[];
+    ctrunc: boolean;
+}
+export declare function sendmsgRequest(fd: number, data: Uint8Array | string, options?: JsSendmsgOptions): {
+    op: 'sock-sendmsg';
+    fd: number;
+    body: Uint8Array<ArrayBufferLike>;
+    fds: number[];
+    nonblock: boolean;
+};
+export declare function recvmsgRequest(fd: number, max?: number, options?: JsRecvmsgOptions): {
+    op: 'sock-recvmsg';
+    fd: number;
+    max: number;
+    cloexec: boolean;
+    nonblock: boolean;
+};
+export declare function decodeReceived(frame: Uint8Array): JsReceived;
+interface AsyncKernel {
+    json(req: SyncSabRequestBody): Promise<unknown>;
+    blocking(req: WasmSyscall, signal?: AbortSignal): Promise<SyncFsResult>;
+    call(req: SyncSabRequestBody): Promise<SyncFsResult>;
+}
+type Watch = (fd: number) => {
+    signal: AbortSignal;
+    done(): void;
+};
+export declare function rightsAsync(kernel: AsyncKernel, forget: (fd: number) => void, watch: Watch): {
+    socketpair: () => Promise<[number, number]>;
+    sendmsg: (fd: number, data: Uint8Array | string, options?: JsSendmsgOptions) => Promise<number>;
+    recvmsg(fd: number, max?: number, options?: JsRecvmsgOptions): Promise<JsReceived>;
+};
+export {};

package/dist/types/process/js/js-sync.d.ts

@@ -6,6 +6,7 @@ import type { JsChild, JsSpawnOptions } from './js-children.js';
 import { type FdInfo, type JsOpenOptions, type JsStatFs, type JsWriteOptions } from './js-io.js';
 import { type JsKernel } from './js-kernel.js';
 import type { JsSyncNet } from './js-net.js';
+import { type JsReceived, type JsRecvmsgOptions, type JsSendmsgOptions } from './js-rights.js';
 import type { JsRunOptions, JsRunResult } from './js-run.js';
 import type { JsSyncTty } from './js-tty.js';
 import type { JsWasi, JsWasiOptions } from './js-wasi.js';
@@ -49,10 +50,16 @@ export interface JsSyncContext {
         value: unknown;
         completion: boolean;
     } | undefined;
+    promiseState(promise: unknown): {
+        state: 'pending' | 'fulfilled' | 'rejected';
+        value: unknown;
+    } | undefined;
     read(fd: number, max?: number): Uint8Array;
     write(fd: number, data: Uint8Array | string, options?: JsWriteOptions): number;
     close(fd: number): void;
     socketpair(): [number, number];
+    sendmsg(fd: number, data: Uint8Array | string, options?: JsSendmsgOptions): number;
+    recvmsg(fd: number, max?: number, options?: JsRecvmsgOptions): JsReceived;
     pipe(): [number, number];
     open(path: string, options?: JsOpenOptions): JsSyncFile;
     wasi: {
@@ -104,6 +111,6 @@ export declare class JsSyncKernel {
     bytes(req: SyncSabRequestBody): Uint8Array;
     blocking(req: SyncSabRequestBody): SyncFsResult;
 }
-export declare function syncOps(kernel: JsSyncKernel, shared: SyncShared): Omit<JsSyncContext, 'run' | 'spawn' | 'exit' | 'kill' | 'cred' | 'setcred' | 'kernel' | 'umask' | 'fs' | 'tty' | 'wasi' | 'net' | 'runScript'> & {
+export declare function syncOps(kernel: JsSyncKernel, shared: SyncShared): Omit<JsSyncContext, 'run' | 'spawn' | 'exit' | 'kill' | 'cred' | 'setcred' | 'kernel' | 'umask' | 'fs' | 'tty' | 'wasi' | 'net' | 'runScript' | 'promiseState'> & {
     fs: Omit<JsSyncContext['fs'], 'watch'>;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.158.1",
+  "version": "1.159.1",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -64,7 +64,7 @@
   },
   "devDependencies": {
     "@ai-ecoverse/py-numpy": "2.5.4-4",
-    "@ai-ecoverse/slicc-cdp": "1.41.1",
+    "@ai-ecoverse/slicc-cdp": "1.41.3",
     "@ai-ecoverse/slicc-node": "2.5.2",
     "@ai-ecoverse/slicc-scrub": "1.1.0",
     "@ai-ecoverse/slicc-shared-web": "2.12.0",
@@ -82,7 +82,7 @@
     "@ai-ecoverse/wasm-procps": "4.0.7-5",
     "@ai-ecoverse/wasm-sqlite3": "3.54.1-1",
     "@ai-ecoverse/wasm-tar": "1.35.0-9",
-    "@ai-ecoverse/wasm-tls-engine": "4.2.0-11",
+    "@ai-ecoverse/wasm-tls-engine": "4.2.0-12",
     "@ai-ecoverse/wasm-util-linux": "2.42.4-7",
     "@biomejs/biome": "2.5.15",
     "@types/node": "24.19.2",