@ai-ecoverse/slicc-kernel 1.164.1 → 1.164.2

package/README.md

@@ -427,9 +427,9 @@ The module's default export (or its `main` export) is called with a context and
   - **What `fn` gets:** a fresh array of V8 CallSites holding only the program's own frames (its modules, `data:` imports, `sync.runScript` scripts and code they `eval`), `node:` frames and native frames. Kernel frames are dropped by script identity, so a script named like a kernel file doesn't let them through, and so are host files. A program's strict frames give `getFunction()` and `getThis()` as `undefined`.
   - **Fallback:** if `fn` throws or returns a non-string, or an error is formatted while `fn` runs, the default stack is used.
   - **How it works:** process workers start with `--expose-internals`, so the worker can install the formatter before the lockdown. Host flags a worker refuses are dropped. If the worker still can't start with the flag, the method is absent. Every `internal/*` and `node:internal/*` module stays refused to programs, as do `node:module` and `node:worker_threads`.
-- `sync.errorSource(error)` (#1610, slicc-jsh#1082) is Node only, so check it with `typeof ctx.sync.errorSource === 'function'`. It gives `{ sourceLine, lineNumber, startColumn }` (null-prototype and frozen), the source line Node prints over an uncaught error, for an error V8 raised in the program's own code. That includes a direct `eval` of a value that isn't a string literal (`const s = 'null.d'; eval(s)` gives `null.d` and line 1) and a `sync.runScript` script.
+- `sync.errorSource(error)` (#1610, slicc-jsh#1082) is Node only, so check it with `typeof ctx.sync.errorSource === 'function'`. It gives `{ sourceLine, lineNumber, startColumn }` (null-prototype and frozen), the source line Node prints over an uncaught error, for an error in the program's own code. The kernel takes V8's position while the stack is formatted (#1633), so this also works after `.stack` was read, and for a call of a non-function, a ReferenceError, a TDZ error or a thrown `Error`. That includes a direct `eval` of a value that isn't a string literal (`const s = 'null.d'; eval(s)` gives `null.d` and line 1) and a `sync.runScript` script.
   - **Only the program's own code:** it answers only when the error's top frame is a program frame and the position V8 kept is in that same script and line.
-  - **`undefined` cases:** kernel-made errors; values that aren't native errors; an error V8 kept no position for (a `new Error()` the program constructs); a script that borrows the kernel worker's name; and an error an own `Error.prepareStackTrace` formats.
+  - **`undefined` cases:** kernel-made errors; values that aren't native errors; a script that borrows the kernel worker's name; and an error an own `Error.prepareStackTrace` formats.
   - **How it works:** it reads V8's message through Node's internal errors binding, which the worker loads at start-up through the same `--expose-internals` as `setStackFormatter`. It prints no warning and needs no inspector.
 - **Kernel frames in a program's stacks** (#1583): on the Node entry, the process worker's bundle names itself `slicc-kernel:/node-process-worker.js` (a `sourceURL`), so the kernel's own frames in an error a program sees (its own errors, a failed `ctx` call, `runScript`) show that name and not the host directory the kernel is installed in. The same holds in `CallSite.toString()` and `getScriptNameOrSourceURL()`, which a program's own `Error.prepareStackTrace` gets; `getFileName()` still returns the bundle's file URL. Line and column numbers are unchanged, so they still point into `dist/node-process-worker.js`. Don't run an embedder with `--enable-source-maps` if program-visible paths matter: Node then maps the kernel's frames back to the absolute paths of its sources. In a browser the frames keep the bundle's URL, because Chrome ignores `sourceURL` in a module worker loaded by URL.
 - `module` (#1598, slicc-jsh#566) is a frozen `{ path }` with the command module's own path in the kernel's file system (e.g. `/usr/lib/node_modules/jsh/dist/jsh.mjs`), so a program can read its package's other files through `ctx.fs` on first use. It's the path the kernel found the package under, with symlinks left as they are (a pnpm-style `node_modules/<name>` link stays in it), and reads the same files through `ctx.fs`. It's a kernel path, never a host one, and a thread gets the same. It's absent for the kernel's built-in programs (`sudo`, `crontab`) and for a program run from inline source with no file.

package/dist/kernel-worker.js

@@ -8444,7 +8444,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.164.1" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.164.2" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC

package/dist/node-driver-worker.js

@@ -1456,6 +1456,8 @@ var setAdd = Set.prototype.add;
 var mapGet = WeakMap.prototype.get;
 var mapSet = WeakMap.prototype.set;
 var isNativeError = types.isNativeError;
+var freeze = Object.freeze;
+var blank = Object.create;
 function internals() {
   try {
     const load = createRequire(import.meta.url);
@@ -1551,11 +1553,20 @@ function keptFrames(trace) {
 }
 var formatter = null;
 var formatting = false;
-var tops = /* @__PURE__ */ new WeakMap();
-function stackDispatcher(fallback) {
+var seen = /* @__PURE__ */ new WeakMap();
+function positionsAt(positions, error, site) {
+  if (positions === void 0 || !keptFrame(site)) return void 0;
+  try {
+    return positions(error);
+  } catch {
+    return void 0;
+  }
+}
+function stackDispatcher(fallback, positions) {
   return (error, trace) => {
     if (typeof error === "object" && error !== null && trace.length > 0) {
-      apply(mapSet, tops, [error, trace[0]]);
+      const site = trace[0];
+      apply(mapSet, seen, [error, { site, at: positionsAt(positions, error, site) }]);
     }
     const fn = formatter;
     if (fn === null || formatting) return apply(fallback, void 0, [error, trace]);
@@ -1571,8 +1582,29 @@ function stackDispatcher(fallback) {
   };
 }
 var found = internals();
-if (found) found.setInternalPrepareStackTrace(stackDispatcher(found.fallback));
-var positions = found?.positions;
+if (found) found.setInternalPrepareStackTrace(stackDispatcher(found.fallback, found.positions));
+function errorSourceOf(error) {
+  if (typeof error !== "object" || error === null || !isNativeError(error)) return void 0;
+  try {
+    void error.stack;
+  } catch {
+    return void 0;
+  }
+  const got = apply(mapGet, seen, [error]);
+  if (got === void 0 || !keptFrame(got.site)) return void 0;
+  const { site, at } = got;
+  if (!at || typeof at.sourceLine !== "string" || typeof at.lineNumber !== "number")
+    return void 0;
+  if (apply(setHas, ownNames, [at.scriptResourceName]) === true) return void 0;
+  const file = apply(isEval, site, []) === true ? void 0 : apply(fileOf, site, []);
+  if (at.scriptResourceName !== file || apply(lineOf, site, []) !== at.lineNumber) return void 0;
+  const out = blank(null);
+  out.sourceLine = at.sourceLine;
+  out.lineNumber = at.lineNumber;
+  out.startColumn = typeof at.startColumn === "number" ? at.startColumn : 0;
+  return freeze(out);
+}
+var nodeErrorSource = found?.positions ? errorSourceOf : void 0;
 
 // src/process/js/lockdown.ts
 var BLOCKED_GLOBALS = [