@ai-ecoverse/slicc-kernel 1.162.1 → 1.163.0

package/dist/node-process-worker.js

@@ -2453,8 +2453,8 @@ var init_async_sab = __esm({
 });
 
 // src/process/js/js-kernel.ts
-function devOf(found) {
-  const dev = found?.dev;
+function devOf(found2) {
+  const dev = found2?.dev;
   return typeof dev === "string" ? dev : void 0;
 }
 function umaskRequest(mask) {
@@ -3247,16 +3247,16 @@ function baseOf(file, whence) {
   if (whence === SEEK_END) return file.size();
   throw new WasiError("EINVAL");
 }
-function writeHolder(view, at, found) {
-  if (!found) {
+function writeHolder(view, at, found2) {
+  if (!found2) {
     view.setInt16(at, F_UNLCK, true);
     return;
   }
-  view.setInt16(at, found.kind === "read" ? F_RDLCK : F_WRLCK, true);
+  view.setInt16(at, found2.kind === "read" ? F_RDLCK : F_WRLCK, true);
   view.setInt16(at + 2, SEEK_SET, true);
-  view.setBigInt64(at + 8, capturedBigInt(found.start), true);
-  view.setBigInt64(at + 16, capturedBigInt(found.len), true);
-  view.setInt32(at + 24, found.pid, true);
+  view.setBigInt64(at + 8, capturedBigInt(found2.start), true);
+  view.setBigInt64(at + 16, capturedBigInt(found2.len), true);
+  view.setInt32(at + 24, found2.pid, true);
 }
 function lockImports(host) {
   return {
@@ -3389,9 +3389,9 @@ var init_wasi_cred = __esm({
         }
         return this.cred;
       }
-      change(apply3) {
+      change(apply4) {
         const seen = this.gen();
-        const cred = apply3();
+        const cred = apply4();
         if (!this.shared) {
           this.cred = cred;
           return cred;
@@ -4710,11 +4710,11 @@ function pollOneoff(deps, inPtr, outPtr, nsubs, neventsPtr) {
   if (nsubs === 0) return E.INVAL;
   const { mem } = deps;
   const subs = readSubscriptions(mem, inPtr, nsubs, deps.now);
-  const found = classify(deps.fds, subs);
-  const { events, read: read2, write: write2 } = found;
+  const found2 = classify(deps.fds, subs);
+  const { events, read: read2, write: write2 } = found2;
   const entered = deps.entered === true && deps.interruptWakes !== true;
   const waits = read2.length > 0 || write2.length > 0 || events.length === 0;
-  const interrupted = waits && waitEvents(deps, subs, found, entered);
+  const interrupted = waits && waitEvents(deps, subs, found2, entered);
   const after = capturedperformance.now();
   if (entered && events.length === 0 && !subs.some((s) => s.deadline <= after)) return E.INTR;
   for (const s of subs) {
@@ -4737,7 +4737,7 @@ var init_wasi_poll = __esm({
 });
 
 // src/process/wasi/wasi-sigmask.ts
-var UNBLOCKABLE, LIBC_UNBLOCKABLE, FOREVER, NS_PER_MS2, POLL_MS, SIG_BLOCK, SIG_UNBLOCK, SIG_SETMASK, kernelBits, libcBits, apply2, WasiSigmask;
+var UNBLOCKABLE, LIBC_UNBLOCKABLE, FOREVER, NS_PER_MS2, POLL_MS, SIG_BLOCK, SIG_UNBLOCK, SIG_SETMASK, kernelBits, libcBits, apply3, WasiSigmask;
 var init_wasi_sigmask = __esm({
   "src/process/wasi/wasi-sigmask.ts"() {
     "use strict";
@@ -4755,7 +4755,7 @@ var init_wasi_sigmask = __esm({
     SIG_SETMASK = 2;
     kernelBits = (lo) => lo << 1 & ~UNBLOCKABLE;
     libcBits = (bits) => bits >>> 1 & ~LIBC_UNBLOCKABLE;
-    apply2 = (how, mask, set) => {
+    apply3 = (how, mask, set) => {
       if (how === SIG_BLOCK) return mask | set;
       if (how === SIG_UNBLOCK) return mask & ~set;
       return set;
@@ -4781,8 +4781,8 @@ var init_wasi_sigmask = __esm({
       set(how, setLo, setHi, old) {
         if (how !== SIG_BLOCK && how !== SIG_UNBLOCK && how !== SIG_SETMASK) return E.INVAL;
         old(this.lo >>> 0, this.hi >>> 0);
-        this.lo = apply2(how, this.lo, setLo | 0) & ~LIBC_UNBLOCKABLE;
-        this.hi = apply2(how, this.hi, setHi | 0);
+        this.lo = apply3(how, this.lo, setLo | 0) & ~LIBC_UNBLOCKABLE;
+        this.hi = apply3(how, this.hi, setHi | 0);
         const now = kernelBits(this.lo);
         storeBlocked(this.header, [now, this.hi]);
         if ((capturedAtomics.load(this.header, SAB_I_SIGNALS) & ~now) !== 0) this.deliver();
@@ -5400,8 +5400,8 @@ function wasixSocketImports(host, preview1) {
     sock_set_opt_time: (fd) => void socket(fd),
     sock_send_file: () => E.NOSYS,
     resolve: (name2, len, _port, addrs, naddrs, out) => {
-      const found = call3({ op: "sock-resolve", name: mem.string(name2, len), family: 0 });
-      const ips = found.map(ipBytes).filter((ip) => ip !== void 0);
+      const found2 = call3({ op: "sock-resolve", name: mem.string(name2, len), family: 0 });
+      const ips = found2.map(ipBytes).filter((ip) => ip !== void 0);
       if (ips.length === 0) throw new WasiError("ENOENT");
       if (naddrs < 1) throw new WasiError("EINVAL");
       const view = mem.view();
@@ -7365,7 +7365,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     init_captured_globals();
-    KERNEL_VERSION = true ? "1.162.1" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.163.0" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });
@@ -8305,8 +8305,8 @@ async function secureCall(call3, what = "connect") {
   }
 }
 function errnoName(errno2) {
-  const found = capturedObject.entries(E).find(([, n]) => n === errno2);
-  return found ? `E${found[0]}` : "EIO";
+  const found2 = capturedObject.entries(E).find(([, n]) => n === errno2);
+  return found2 ? `E${found2[0]}` : "EIO";
 }
 function addressOf(addr) {
   const inet = addr;
@@ -10148,16 +10148,16 @@ function readFlock(view, at, base) {
   const start2 = base(view.getInt16(at + 2, true)) + capturedNumber(view.getBigInt64(at + 8, true));
   return { kind, start: start2, len: capturedNumber(view.getBigInt64(at + 16, true)) };
 }
-function writeHolder2(view, at, found) {
-  if (!found) {
+function writeHolder2(view, at, found2) {
+  if (!found2) {
     view.setInt16(at, F_UNLCK2, true);
     return;
   }
-  view.setInt16(at, found.kind === "read" ? F_RDLCK2 : F_WRLCK2, true);
+  view.setInt16(at, found2.kind === "read" ? F_RDLCK2 : F_WRLCK2, true);
   view.setInt16(at + 2, 0, true);
-  view.setBigInt64(at + 8, capturedBigInt(found.start), true);
-  view.setBigInt64(at + 16, capturedBigInt(found.len), true);
-  view.setInt32(at + 24, found.pid, true);
+  view.setBigInt64(at + 8, capturedBigInt(found2.start), true);
+  view.setBigInt64(at + 16, capturedBigInt(found2.len), true);
+  view.setInt32(at + 24, found2.pid, true);
 }
 function refused2(kind, flags) {
   const access = flags & O_ACCMODE2;
@@ -10457,8 +10457,8 @@ function pathOpensLinks(Fs) {
 function importKey(namespace, name2, glue) {
   const own2 = glue?.[name2];
   if (typeof own2 === "function") {
-    const found = capturedObject.keys(namespace).find((k) => namespace[k] === own2);
-    if (found !== void 0) return found;
+    const found2 = capturedObject.keys(namespace).find((k) => namespace[k] === own2);
+    if (found2 !== void 0) return found2;
   }
   const literal = LITERALS[name2];
   return typeof namespace[literal] === "function" ? literal : void 0;
@@ -10566,8 +10566,8 @@ function namespaces(imports) {
 }
 function keyOf(namespace, name2, glue) {
   const own2 = glue?.[name2];
-  const found = typeof own2 === "function" ? capturedObject.keys(namespace).find((k) => namespace[k] === own2) : void 0;
-  return found ?? (typeof namespace[name2] === "function" ? name2 : void 0);
+  const found2 = typeof own2 === "function" ? capturedObject.keys(namespace).find((k) => namespace[k] === own2) : void 0;
+  return found2 ?? (typeof namespace[name2] === "function" ? name2 : void 0);
 }
 function syncFsync(imports, fs, glue) {
   for (const namespace of namespaces(imports)) {
@@ -10688,8 +10688,8 @@ function wasmMemory(instance, imports) {
   const exported = capturedObject.values(instance.exports).find(isMemory);
   if (exported) return exported;
   for (const namespace of capturedObject.values(imports)) {
-    const found = capturedObject.values(namespace ?? {}).find(isMemory);
-    if (found) return found;
+    const found2 = capturedObject.values(namespace ?? {}).find(isMemory);
+    if (found2) return found2;
   }
   return void 0;
 }
@@ -11426,7 +11426,7 @@ function attr(node) {
 function withPidFiles(names, extra) {
   return [...new capturedSet([...names, ...PID_FILES, ...extra])];
 }
-function exeNodes(fresh, info, error, self) {
+function exeNodes(fresh, info, error, self2) {
   return {
     exeLink: (parent, target, own2 = false) => {
       const of = info(target, own2);
@@ -11434,7 +11434,7 @@ function exeNodes(fresh, info, error, self) {
       if (!of || exe === void 0) throw error();
       const link = fresh(parent, "exe", LINK_MODE2);
       link.node_ops.readlink = () => {
-        if (!mayTrace(info(self, true), of)) throw error(EACCES);
+        if (!mayTrace(info(self2, true), of)) throw error(EACCES);
         return exe;
       };
       return link;
@@ -11447,10 +11447,10 @@ function useProcfs(Fs, sys, pid, memory = memorySource()) {
   const procList = sys.procList?.bind(sys);
   if (!lookupPath || !createNode || !hashRemoveNode || !procList) return;
   let proc;
-  let self;
+  let self2;
   try {
     proc = lookupPath.call(Fs, "/proc", { follow: true }).node;
-    self = lookupPath.call(Fs, "/proc/self", { follow: true }).node;
+    self2 = lookupPath.call(Fs, "/proc/self", { follow: true }).node;
   } catch {
     return;
   }
@@ -11522,12 +11522,12 @@ function useProcfs(Fs, sys, pid, memory = memorySource()) {
   };
   const scans = new capturedMap();
   const listed2 = (target) => {
-    let found = false;
+    let found2 = false;
     for (const [stream, pids] of scans) {
       if (Fs.streams && Fs.streams[stream.fd ?? -1] !== stream) scans.delete(stream);
-      else found ||= pids.has(target);
+      else found2 ||= pids.has(target);
     }
-    return found;
+    return found2;
   };
   const procOps2 = proc.node_ops;
   const lookup2 = procOps2.lookup?.bind(procOps2);
@@ -11589,16 +11589,16 @@ function useProcfs(Fs, sys, pid, memory = memorySource()) {
       dirOps.close?.(stream);
     }
   };
-  hashRemoveNode.call(Fs, self);
+  hashRemoveNode.call(Fs, self2);
   const link = fresh(proc, "self", LINK_MODE2);
   const shownPid = () => capturedString(find2(procList().processes, pid, true)?.pid ?? pid);
   link.node_ops.readlink = shownPid;
   const procLookup = proc.node_ops.lookup;
-  proc.node_ops.lookup = (parent, name2) => name2 === "self" ? link : name2 === shownPid() ? self : procLookup(parent, name2);
-  const selfOps = self.node_ops;
+  proc.node_ops.lookup = (parent, name2) => name2 === "self" ? link : name2 === shownPid() ? self2 : procLookup(parent, name2);
+  const selfOps = self2.node_ops;
   const selfLookup = selfOps.lookup?.bind(selfOps);
   const selfReaddir = selfOps.readdir?.bind(selfOps);
-  self.node_ops = {
+  self2.node_ops = {
     ...selfOps,
     lookup: (parent, name2) => {
       if (name2 === "exe") return exe.exeLink(parent, pid, true);
@@ -11715,9 +11715,9 @@ function failed3(err) {
   const code2 = err?.code;
   return { refused: typeof code2 === "string" ? code2 : "ENOENT" };
 }
-function refusalOf(found) {
-  if (found === true) return void 0;
-  return found === false ? { refused: "ENOTDIR" } : found;
+function refusalOf(found2) {
+  if (found2 === true) return void 0;
+  return found2 === false ? { refused: "ENOTDIR" } : found2;
 }
 function throughLink(target, done, todo) {
   const parts = target.split("/").filter((part) => part !== "");
@@ -12695,9 +12695,9 @@ function syncPathOps(kernel, resolve2, statOf, open, clean) {
     exists(path) {
       const abs = resolve2(path);
       if (inDev(abs)) return devSync(kernel, devExists(abs));
-      const found = kernel.json({ op: "exists", path: abs, devs: true });
-      if (found === true) return true;
-      const devPath = devOf(found);
+      const found2 = kernel.json({ op: "exists", path: abs, devs: true });
+      if (found2 === true) return true;
+      const devPath = devOf(found2);
       return devPath ? devSync(kernel, devExists(devPath)) : false;
     },
     readdir(path) {
@@ -14111,8 +14111,8 @@ function anySelect(Fs, transport, read2, write2, timeoutMs2) {
   for (; ; ) {
     const local3 = ownReady(Fs, read2.filter(own2), write2.filter(own2));
     const pending = local3.read.length > 0 || local3.write.length > 0;
-    const slice = pending ? 0 : capturedMath.min(SELECT_SLICE_MS, capturedMath.max(0, deadline - capturedDate.now()));
-    const got = kernelSelect(Fs, transport, kernelRead, kernelWrite, slice);
+    const slice2 = pending ? 0 : capturedMath.min(SELECT_SLICE_MS, capturedMath.max(0, deadline - capturedDate.now()));
+    const got = kernelSelect(Fs, transport, kernelRead, kernelWrite, slice2);
     if (typeof got === "number") return got;
     const ready = { read: [...local3.read, ...got.read], write: [...local3.write, ...got.write] };
     if (ready.read.length > 0 || ready.write.length > 0 || capturedDate.now() >= deadline) {
@@ -15914,8 +15914,8 @@ function resolvePath(cwd, path) {
 function killer(d) {
   return (pid, signal = "SIGTERM") => {
     const sig = signal === 0 ? 0 : signalNumber(signal);
-    const self = sig !== 0 && includesSelf(d.syncKernel, d.self, pid);
-    if (!self || d.kernel.disposition(sig) !== "terminate") {
+    const self2 = sig !== 0 && includesSelf(d.syncKernel, d.self, pid);
+    if (!self2 || d.kernel.disposition(sig) !== "terminate") {
       d.syncKernel.call({ op: "proc-kill", pid, sig });
       return;
     }
@@ -15930,8 +15930,8 @@ function killer(d) {
     });
   };
 }
-function includesSelf(kernel, self, pid) {
-  if (pid === self || pid === 0) return true;
+function includesSelf(kernel, self2, pid) {
+  if (pid === self2 || pid === 0) return true;
   if (pid > 0 || pid === -1) return false;
   return kernel.json({ op: "proc-getpgid", pid: 0 }) === -pid;
 }
@@ -16183,9 +16183,11 @@ function measured(measure) {
   return out;
 }
 function realmOps(o) {
+  const hook = o.stackFormatter;
   return {
     runScript: scriptRunner(o.runScript),
-    promiseState: (promise) => o.promiseState?.(promise)
+    promiseState: (promise) => o.promiseState?.(promise),
+    ...hook ? { setStackFormatter: (fn) => hook(fn) } : {}
   };
 }
 function scriptRunner(run) {
@@ -16485,9 +16487,9 @@ function pathOps(kernel, resolve2, statOf, open, clean) {
     async exists(path) {
       const abs = resolve2(path);
       if (inDev(abs)) return devAsync(kernel, devExists(abs));
-      const found = await kernel.json({ op: "exists", path: abs, devs: true });
-      if (found === true) return true;
-      const devPath = devOf(found);
+      const found2 = await kernel.json({ op: "exists", path: abs, devs: true });
+      if (found2 === true) return true;
+      const devPath = devOf(found2);
       return devPath ? devAsync(kernel, devExists(devPath)) : false;
     },
     async readdir(path) {
@@ -16780,6 +16782,7 @@ async function runJs(init, port3, deps, thread) {
     runScript: deps.runScript,
     modulePath: modulePathOf(init.program),
     promiseState: deps.promiseState,
+    stackFormatter: deps.stackFormatter,
     ...thread?.owned ? { owned: thread.owned } : {},
     held: init.held,
     failed: () => failedWith
@@ -16908,8 +16911,8 @@ var init_dylink = __esm({
 // src/process/wasi/wasi-module.ts
 function libcVersion(module) {
   for (const section2 of capturedWebAssembly.Module.customSections(module, "slicc.libc")) {
-    const found = LIBC_MARK.exec(new capturedTextDecoder().decode(section2));
-    if (found) return capturedNumber(found[1]);
+    const found2 = LIBC_MARK.exec(new capturedTextDecoder().decode(section2));
+    if (found2) return capturedNumber(found2[1]);
   }
   return void 0;
 }
@@ -17979,9 +17982,9 @@ var init_wasix_linker = __esm({
         }
       }
       symbol(handle, name2) {
-        const found = handle === 0 ? this.find(name2) : this.findIn(this.module(handle), name2, new capturedSet());
-        if (!found) throw new DlError(`undefined symbol: ${name2}`);
-        const [owner, value2] = found;
+        const found2 = handle === 0 ? this.find(name2) : this.findIn(this.module(handle), name2, new capturedSet());
+        if (!found2) throw new DlError(`undefined symbol: ${name2}`);
+        const [owner, value2] = found2;
         if (typeof value2 === "function") return this.slot(value2, owner, name2);
         if (value2 instanceof capturedWebAssembly.Global) return this.baseOf(owner) + value2.value;
         throw new DlError(`${name2} is neither a function nor data`);
@@ -18212,14 +18215,14 @@ var init_wasix_linker = __esm({
         };
       }
       addressOrNull(name2) {
-        const found = this.find(name2);
-        if (!found || !(found[1] instanceof capturedWebAssembly.Global)) return 0;
-        return this.baseOf(found[0]) + found[1].value;
+        const found2 = this.find(name2);
+        if (!found2 || !(found2[1] instanceof capturedWebAssembly.Global)) return 0;
+        return this.baseOf(found2[0]) + found2[1].value;
       }
       slotOrNull(name2) {
-        const found = this.find(name2);
-        if (!found || typeof found[1] !== "function") return 0;
-        return this.slot(found[1], found[0], name2);
+        const found2 = this.find(name2);
+        if (!found2 || typeof found2[1] !== "function") return 0;
+        return this.slot(found2[1], found2[0], name2);
       }
       find(name2) {
         const inMain = this.main?.exports[name2];
@@ -18236,8 +18239,8 @@ var init_wasix_linker = __esm({
         const v = m.instance.exports[name2];
         if (v !== void 0) return [m.handle, v];
         for (const h of m.needed) {
-          const found = this.findIn(this.module(h), name2, seen);
-          if (found) return found;
+          const found2 = this.findIn(this.module(h), name2, seen);
+          if (found2) return found2;
         }
         return void 0;
       }
@@ -18288,8 +18291,8 @@ var init_wasix_linker = __esm({
 function futexWait(view, index3, expected, ms, interrupted) {
   const deadline = capturedperformance.now() + ms;
   for (; ; ) {
-    const slice = interrupted ? capturedMath.min(FUTEX_SLICE_MS, ms) : ms;
-    if (capturedAtomics.wait(view, index3, expected, slice) !== "timed-out") return true;
+    const slice2 = interrupted ? capturedMath.min(FUTEX_SLICE_MS, ms) : ms;
+    if (capturedAtomics.wait(view, index3, expected, slice2) !== "timed-out") return true;
     if (interrupted?.()) return true;
     ms = deadline - capturedperformance.now();
     if (ms <= 0) return false;
@@ -18766,8 +18769,8 @@ function mainModule(lines) {
 function nameFrame(line, module, name2) {
   const m = UNNAMED_FRAME.exec(line);
   if (!m || m[3] !== module) return line;
-  const found = name2(capturedNumber(m[4]));
-  return found === void 0 ? line : `${m[1]}${found} (${m[2]})`;
+  const found2 = name2(capturedNumber(m[4]));
+  return found2 === void 0 ? line : `${m[1]}${found2} (${m[2]})`;
 }
 function definedFunctions(bytes) {
   let at = 8;
@@ -19326,11 +19329,11 @@ ${frames.join("\n")}` : head;
 }
 function trapReport(e, init, host, where) {
   const warned = [];
-  const message2 = trapMessage(e, init.env, where, programNames(host, init.program, warned));
+  const message2 = trapMessage(e, init.env, where, programNames2(host, init.program, warned));
   return [...warned, message2].join(`
 ${init.argv0}: `);
 }
-function programNames(host, program, warned) {
+function programNames2(host, program, warned) {
   const path = program.names;
   if (path === void 0) return void 0;
   const read2 = (p) => host.o.fs.readFile(p);
@@ -19582,18 +19585,151 @@ var init_wasi_runtime = __esm({
 
 // src/node-process-worker.ts
 init_captured_globals();
-import { createRequire, enableCompileCache, flushCompileCache } from "node:module";
+import { createRequire as createRequire2, enableCompileCache, flushCompileCache } from "node:module";
 import { parentPort, workerData } from "node:worker_threads";
 
 // src/node-lockdown.ts
 init_captured_globals();
-init_lockdown();
 import { AsyncLocalStorage } from "node:async_hooks";
+import { createHash } from "node:crypto";
 import { isBuiltin, registerHooks } from "node:module";
 import { resolve, sep } from "node:path";
 import { types } from "node:util";
 import { getHeapStatistics } from "node:v8";
 import { runInThisContext } from "node:vm";
+
+// src/node-stack.ts
+init_captured_globals();
+import { createRequire } from "node:module";
+var apply = capturedReflect.apply;
+var push = capturedArray.prototype.push;
+var startsWith = capturedString.prototype.startsWith;
+var slice = capturedString.prototype.slice;
+var lastIndexOf = capturedString.prototype.lastIndexOf;
+var indexOf = capturedString.prototype.indexOf;
+var setHas = capturedSet.prototype.has;
+var setAdd = capturedSet.prototype.add;
+function internals() {
+  try {
+    const load = createRequire(import.meta.url);
+    const errors = load("internal/errors");
+    const set = errors.setInternalPrepareStackTrace;
+    let fallback = errors.defaultPrepareStackTrace;
+    if (capturedprocess.sourceMapsEnabled) {
+      fallback = load("internal/source_map/prepare_stack_trace").prepareStackTraceWithSourceMaps;
+    }
+    if (typeof set !== "function" || typeof fallback !== "function") return void 0;
+    return {
+      setInternalPrepareStackTrace: set,
+      fallback
+    };
+  } catch {
+    return void 0;
+  }
+}
+function ownSite() {
+  const saved = capturedObject.getOwnPropertyDescriptor(capturedError, "prepareStackTrace");
+  try {
+    capturedObject.defineProperty(capturedError, "prepareStackTrace", {
+      value: (_, sites) => sites[0],
+      configurable: true,
+      writable: true
+    });
+    return new capturedError().stack;
+  } finally {
+    delete capturedError.prepareStackTrace;
+    capturedObject.defineProperties(capturedError, saved ? { prepareStackTrace: saved } : {});
+  }
+}
+var self = ownSite();
+var proto = capturedObject.getPrototypeOf(self);
+var fileOf = proto.getFileName;
+var hashOf = proto.getScriptHash;
+var isEval = proto.isEval;
+var originOf = proto.getEvalOrigin;
+var ownHash = apply(hashOf, self, []);
+var programHashes = new capturedSet();
+var programNames = new capturedSet();
+function programScript(name2, hash) {
+  apply(setAdd, programNames, [name2]);
+  apply(setAdd, programHashes, [hash]);
+}
+function programName(name2) {
+  return apply(startsWith, name2, ["data:"]) === true || apply(setHas, programNames, [name2]) === true;
+}
+function rootOrigin(origin) {
+  let at = origin;
+  while (apply(startsWith, at, ["eval at "]) === true) {
+    const open = apply(indexOf, at, [" ("]);
+    if (open < 0) return "";
+    let depth = 1;
+    let i = open + 2;
+    for (; i < at.length && depth > 0; i++) {
+      const c = at[i];
+      if (c === "(") depth++;
+      else if (c === ")") depth--;
+    }
+    if (depth !== 0) return "";
+    at = apply(slice, at, [open + 2, i - 1]);
+  }
+  let end = at.length;
+  for (let n = 0; n < 2; n++) {
+    const colon = apply(lastIndexOf, at, [":", end - 1]);
+    if (colon <= 0) break;
+    end = colon;
+  }
+  return apply(slice, at, [0, end]);
+}
+function keptFrame(site) {
+  const hash = apply(hashOf, site, []);
+  if (hash === ownHash) return false;
+  if (apply(isEval, site, []) === true) {
+    const origin = apply(originOf, site, []);
+    return typeof origin === "string" && programName(rootOrigin(origin));
+  }
+  const file = apply(fileOf, site, []);
+  if (typeof file !== "string") return true;
+  if (apply(setHas, programHashes, [hash]) === true) return true;
+  return apply(startsWith, file, ["node:"]) === true || programName(file);
+}
+function keptFrames(trace) {
+  const out = [];
+  for (let i = 0; i < trace.length; i++) {
+    const site = trace[i];
+    if (keptFrame(site)) apply(push, out, [site]);
+  }
+  return out;
+}
+var formatter = null;
+var formatting = false;
+function stackDispatcher(fallback) {
+  return (error, trace) => {
+    const fn = formatter;
+    if (fn === null || formatting) return apply(fallback, void 0, [error, trace]);
+    formatting = true;
+    try {
+      const out = apply(fn, void 0, [error, keptFrames(trace)]);
+      if (typeof out === "string") return out;
+    } catch {
+    } finally {
+      formatting = false;
+    }
+    return apply(fallback, void 0, [error, trace]);
+  };
+}
+var found = internals();
+if (found) found.setInternalPrepareStackTrace(stackDispatcher(found.fallback));
+var nodeStackFormatter = found ? (fn) => {
+  if (fn !== null && typeof fn !== "function") {
+    throw new capturedTypeError("setStackFormatter needs a function or null");
+  }
+  const previous = formatter;
+  formatter = fn;
+  return previous;
+} : void 0;
+
+// src/node-lockdown.ts
+init_lockdown();
 var NODE_GLOBALS = ["localStorage", "sessionStorage"];
 var NODE_SLOTS = [
   "require",
@@ -19628,6 +19764,11 @@ var SOURCE_MODULE = "slicc-module:";
 var sources = new capturedMap();
 function moduleSource(url, source) {
   sources.set(url, source);
+  programScript(url, url.slice(SOURCE_MODULE.length));
+}
+var sha256 = createHash;
+function sourceHash(source) {
+  return sha256("sha256").update(source).digest("hex");
 }
 function refuseModules() {
   registerHooks({
@@ -19713,6 +19854,7 @@ function nodeRunScript(source, filename) {
   const options = blank(null);
   options.filename = filename;
   options.displayErrors = false;
+  programScript(filename, sourceHash(source));
   return freeze({ value: runHere(source, options), completion: true });
 }
 var isPromise = types.isPromise;
@@ -19852,7 +19994,7 @@ function internal(list, name2) {
 function probe(promise, group, key) {
   const promiseId = idOf(key, promise, group);
   if (promiseId === void 0) return void 0;
-  const found = own(
+  const found2 = own(
     post("Runtime.getProperties", {
       objectId: promiseId,
       ownProperties: true,
@@ -19860,9 +20002,9 @@ function probe(promise, group, key) {
     }),
     "internalProperties"
   );
-  const state = own(internal(found, "[[PromiseState]]"), "value");
+  const state = own(internal(found2, "[[PromiseState]]"), "value");
   if (state === "pending") return seal({ state, value: void 0 });
-  const result = internal(found, "[[PromiseResult]]");
+  const result = internal(found2, "[[PromiseResult]]");
   const resultId = own(result, "objectId");
   if (typeof resultId !== "string") return seal({ state, value: primitive(result) });
   const holder = nothing(null);
@@ -19899,7 +20041,7 @@ function nodePromiseState(promise) {
   }
 }
 var Storage = AsyncLocalStorage;
-var apply = capturedReflect.apply;
+var apply2 = capturedReflect.apply;
 var freeze = capturedObject.freeze;
 var blank = capturedObject.create;
 function nodeAsyncContext() {
@@ -19910,7 +20052,7 @@ function nodeAsyncContext() {
   const api = blank(null);
   api.run = freeze((store, fn, ...args) => {
     if (typeof fn !== "function") throw new capturedTypeError("asyncContext.run needs a function");
-    return run(store, () => apply(fn, void 0, args));
+    return run(store, () => apply2(fn, void 0, args));
   });
   api.getStore = freeze(() => getStore());
   api.enterWith = freeze((store) => enterWith(store));
@@ -19990,7 +20132,7 @@ function processEntry(port3, run = runWasmProcess, wasi = loadWasi, js = loadJs,
 init_process_runtime();
 init_wasi_runtime();
 var scope = capturedGlobalThis;
-scope.require ??= createRequire(import.meta.url);
+scope.require ??= createRequire2(import.meta.url);
 scope.__filename ??= new capturedURL(import.meta.url).pathname;
 scope.__dirname ??= new capturedURL(".", import.meta.url).pathname;
 var data = workerData;
@@ -20018,6 +20160,7 @@ var onMessage = processEntry(
       runScript: nodeRunScript,
       moduleSource,
       promiseState: nodePromiseState,
+      stackFormatter: nodeStackFormatter,
       imported
     }),
     runJsThread: (init, at) => runJsThread(init, at, {
@@ -20028,6 +20171,7 @@ var onMessage = processEntry(
       runScript: nodeRunScript,
       moduleSource,
       promiseState: nodePromiseState,
+      stackFormatter: nodeStackFormatter,
       imported
     })
   }),