@ai-ecoverse/slicc-kernel 1.16.0 → 1.16.1

package/dist/kernel-worker.js

@@ -3529,7 +3529,8 @@ function statJson(s) {
     atimeMs: s.atime.getTime(),
     ctimeMs: s.ctime.getTime(),
     ino: s.ino,
-    ...s.dev !== void 0 ? { dev: s.dev } : {}
+    ...s.dev !== void 0 ? { dev: s.dev } : {},
+    ...s.readonly ? { readonly: true } : {}
   };
 }
 async function readdirStat(fs, dir) {
@@ -5091,6 +5092,20 @@ var VfsNodes = class {
     }
   }
 };
+async function refuseReadonly(fs, path, flags, opts = {}) {
+  const writes = (flags & O_ACCMODE) !== 0 || opts.truncate === true;
+  if (!writes && !opts.create || !fs.stat) return;
+  const stat = (p) => fs.stat?.(p).catch((err) => {
+    const code = err?.code;
+    if (isMissing(err) || typeof code !== "string") return void 0;
+    throw err;
+  });
+  const parent = path.slice(0, path.lastIndexOf("/")) || "/";
+  const own = await stat(path);
+  if (own && !writes) return;
+  const st = own ?? await stat(parent);
+  if (st?.readonly) throw new KernelError("EROFS");
+}
 function vfsFile(fs, opts, nodes) {
   const access = opts.flags & O_ACCMODE;
   const readable = access !== O_WRONLY;
@@ -5361,6 +5376,10 @@ var WasmProcess = class {
       if (e instanceof KernelError || e instanceof SpawnError) {
         return { ok: false, errno: e.code, message: e.code };
       }
+      const code = e?.code;
+      if (typeof code === "string" && /^E[A-Z]+$/.test(code)) {
+        return { ok: false, errno: code, message: code };
+      }
       throw e;
     }
   }
@@ -5433,6 +5452,7 @@ var WasmProcess = class {
       case "fd-poll":
         return { ok: true, kind: "json", json: pollFile(this.fds.get(req.fd).file) };
       case "fd-open-vfs":
+        await refuseReadonly(this.options.fs, req.path, req.flags, req);
         return { ok: true, kind: "json", json: this.fds.install(this.openVfsFile(req), 3) };
       case "fd-info":
         return { ok: true, kind: "json", json: this.fdInfo(req.fd) };
@@ -6602,14 +6622,14 @@ function invalidation(event) {
   return event.paths ?? true;
 }
 async function openHostfs(spec, hook, fetch2, timing = {}) {
-  const readonly = spec.options?.ro !== void 0;
+  const readonly2 = spec.options?.ro !== void 0;
   const { port1, port2 } = new MessageChannel();
   const slot = mediumSlot(
     async (err) => unreachable(err),
     () => watching.kick()
   );
   const stop = new AbortController();
-  const grant = () => hook(spec.source, { readonly });
+  const grant = () => hook(spec.source, { readonly: readonly2 });
   let active;
   const handlers = hostfsHandlers(() => active);
   const served = serveFilesystem(port2, slot.handlers, {
@@ -6617,7 +6637,7 @@ async function openHostfs(spec, hook, fetch2, timing = {}) {
     chmod: true,
     listingStats: true,
     maxIo: HOSTFS_IO,
-    ...readonly ? { readonly: true } : {}
+    ...readonly2 ? { readonly: true } : {}
   });
   const watching = keepWatching(
     {
@@ -6757,7 +6777,8 @@ function heldUnder(held, target) {
   return false;
 }
 var parentOf4 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
-function statOf(attr, path, dev) {
+var readonly = (mount) => mount.caps.readonly === true;
+function statOf(attr, path, mount) {
   const mtime = new Date(attr.mtime);
   const fallback = attr.kind === "directory" ? 16877 : attr.kind === "symlink" ? 41471 : 33188;
   return {
@@ -6770,7 +6791,8 @@ function statOf(attr, path, dev) {
     atime: mtime,
     ctime: mtime,
     ino: attr.ino ?? inodeOf(path),
-    dev
+    dev: mount.dev,
+    ...readonly(mount) ? { readonly: true } : {}
   };
 }
 function concat4(chunks, total) {
@@ -6956,7 +6978,7 @@ var MountFs = class {
     return this.table.locate(normalizePath(path));
   }
   writable(mount, path) {
-    if (mount.caps.readonly) throw errnoError("EROFS", path);
+    if (readonly(mount)) throw errnoError("EROFS", path);
   }
   async follow(path, hops = 0, create = false) {
     const found = this.at(path);
@@ -7085,7 +7107,7 @@ var MountFs = class {
     const found = this.at(path);
     if (!found) return this.base.lstat(path);
     const real = normalizePath(path);
-    return statOf(await this.table.getattr(found.mount, real, found.rel), real, found.mount.dev);
+    return statOf(await this.table.getattr(found.mount, real, found.rel), real, found.mount);
   }
   async stat(path) {
     const real = await this.follow(path);
@@ -7112,7 +7134,7 @@ var MountFs = class {
       list.map(async (entry) => {
         const child = normalizePath(`${real}/${entry.name}`);
         if (entry.attr && mount.caps.listingStats) {
-          return [entry.name, statOf(entry.attr, child, mount.dev)];
+          return [entry.name, statOf(entry.attr, child, mount)];
         }
         return [entry.name, await this.lstat(child).catch(() => null)];
       })