@ai-ecoverse/slicc-kernel 1.162.0 → 1.163.0

package/dist/node.js

@@ -1,6 +1,6 @@
 // src/node.ts
 import { createHash } from "node:crypto";
-import { lstatSync, mkdtempSync, readdirSync, rmSync } from "node:fs";
+import { lstatSync, mkdirSync, mkdtempSync, readdirSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { isAbsolute, join } from "node:path";
 import { MessageChannel as MessageChannel2, Worker } from "node:worker_threads";
@@ -2212,7 +2212,9 @@ var KernelSocket = class _KernelSocket {
           throw new KernelError("ECONNRESET", "read ECONNRESET");
         return bytes.length > 0 ? bytes : null;
       },
-      write: (bytes) => raw2.tx.write(bytes),
+      write: (bytes) => raw2.tx.write(bytes).catch((err) => {
+        throw this.refused ? new KernelError("ECONNRESET", "read ECONNRESET") : err;
+      }),
       closeWrite: () => raw2.tx.closeWrite(),
       close: () => {
         raw2.rx.closeRead();
@@ -3675,7 +3677,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.162.0" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.163.0" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -35247,8 +35249,35 @@ function sparesOf(options) {
   }
   return n;
 }
-function processWorker(file, workerData) {
-  return new Worker(file, { env: workerEnv(), ...workerData ? { workerData } : {} });
+var INTERNALS = "--expose-internals";
+var internalArgv;
+function narrowArgv(argv, message3) {
+  const at = message3.indexOf(": ");
+  if (at < 0) return null;
+  const bad = new Set(message3.slice(at + 2).split(", "));
+  const kept = argv.filter((arg) => !bad.has(arg));
+  return kept.length < argv.length ? kept : null;
+}
+function internalsWorker(make, argv = process.execArgv) {
+  internalArgv ??= [...argv, INTERNALS];
+  for (let tries = 0; internalArgv !== null && tries < 2; tries++) {
+    try {
+      return make(internalArgv);
+    } catch (err) {
+      const { code, message: message3 } = err;
+      if (code !== "ERR_WORKER_INVALID_EXEC_ARGV" || typeof message3 !== "string") throw err;
+      internalArgv = narrowArgv(internalArgv, message3);
+    }
+  }
+  internalArgv = null;
+  return make();
+}
+function resetInternalArgv() {
+  internalArgv = void 0;
+}
+function processWorker(file, workerData, internals = false) {
+  const make = (execArgv) => new Worker(file, { env: workerEnv(), ...workerData ? { workerData } : {}, execArgv });
+  return internals ? internalsWorker(make) : make();
 }
 function sourceModule(source) {
   const url = `slicc-module:${createHash("sha256").update(source).digest("hex")}`;
@@ -35258,9 +35287,9 @@ function sourceModule(source) {
 function warmPoolOf(options, file, workerData, live) {
   const size = sparesOf(options);
   if (size === 0) return void 0;
-  return warmPool(() => processWorker(file, workerData), live, WARM_IDLE_MS, size);
+  return warmPool(() => processWorker(file, workerData, true), live, WARM_IDLE_MS, size);
 }
-function nodeWorker(file, live, closed, workerData, take) {
+function nodeWorker(file, live, closed, workerData, take, internals = false) {
   const errors = /* @__PURE__ */ new Set();
   const messages = /* @__PURE__ */ new Map();
   const fail3 = (message3) => {
@@ -35269,7 +35298,7 @@ function nodeWorker(file, live, closed, workerData, take) {
       } });
     }
   };
-  const worker = closed ? void 0 : take?.() ?? processWorker(file, workerData);
+  const worker = closed ? void 0 : take?.() ?? processWorker(file, workerData, internals);
   let ending = false;
   if (worker) {
     const kill = () => {
@@ -35355,25 +35384,38 @@ function ownCacheDir(make = privateCacheDir) {
   }
 }
 var swept = false;
-function privateCacheDir(base = tmpdir(), alive = pidAlive) {
+function privateCacheDir(base = tmpdir(), alive = pidAlive, uid = process.getuid?.()) {
+  const parent = cacheParent(base, uid);
   if (!swept) {
     swept = true;
-    sweepCacheDirs(base, alive);
+    sweepCacheDirs(parent, alive, uid);
+  }
+  return mkdtempSync(join(parent, `${process.pid}-`));
+}
+function cacheParent(base, uid) {
+  const parent = join(base, uid === void 0 ? "slicc-kernel-cc" : `${CACHE_PREFIX}u${uid}`);
+  try {
+    mkdirSync(parent, { mode: 448 });
+  } catch (err) {
+    if (err.code !== "EEXIST") throw err;
+  }
+  const st = lstatSync(parent);
+  if (!st.isDirectory() || uid !== void 0 && (st.uid !== uid || (st.mode & 63) !== 0)) {
+    throw new Error(`slicc-kernel: ${parent} is not a private directory of this user`);
   }
-  return mkdtempSync(join(base, `${CACHE_PREFIX}${process.pid}-`));
+  return parent;
 }
-function sweepCacheDirs(base, alive = pidAlive, uid = process.getuid?.()) {
+function sweepCacheDirs(parent, alive = pidAlive, uid = process.getuid?.()) {
   let names2;
   try {
-    names2 = readdirSync(base);
+    names2 = readdirSync(parent);
   } catch {
     return;
   }
   for (const name2 of names2) {
-    if (!name2.startsWith(CACHE_PREFIX)) continue;
-    const pid = Number(name2.slice(CACHE_PREFIX.length).split("-")[0]);
+    const pid = Number(name2.split("-")[0]);
     if (!Number.isInteger(pid) || pid <= 0 || alive(pid)) continue;
-    removeOurs(join(base, name2), uid);
+    removeOurs(join(parent, name2), uid);
   }
 }
 function removeOurs(path, uid) {
@@ -35434,7 +35476,7 @@ async function createNodeKernel(options = {}) {
     fs,
     moduleUrl: sourceModule,
     unlinkOwner: pidOwner(process),
-    createWorker: () => nodeWorker(file, live, terminated, workerData, warm ? () => warm.take() : void 0),
+    createWorker: () => nodeWorker(file, live, terminated, workerData, warm ? () => warm.take() : void 0, true),
     createDriverWorker: () => nodeWorker(
       options.driverWorker ?? new URL("./node-driver-worker.js", import.meta.url),
       live,
@@ -35577,10 +35619,13 @@ export {
   attachKernel,
   createNodeKernel,
   fetchTransport,
+  internalsWorker,
   memoryRoot,
+  narrowArgv,
   nodeTransport,
   ownCacheDir,
   privateCacheDir,
+  resetInternalArgv,
   serveHostfsPort,
   sourceModule,
   sparesOf,