@ai-ecoverse/slicc-kernel 1.172.0 → 1.172.2

package/dist/kernel-worker.js

@@ -2033,11 +2033,11 @@ var OpfsFs = class {
     }
     const found = await this.locate(path, change.follow !== false);
     this.refuse(found.path);
-    const [stored] = found.link ? [found.link] : await this.meta.get([found.path]);
-    const current = await this.ownerAt(found.path, stored);
+    const [stored2] = found.link ? [found.link] : await this.meta.get([found.path]);
+    const current = await this.ownerAt(found.path, stored2);
     const next3 = { uid: change.uid ?? current.uid, gid: change.gid ?? current.gid };
     const handing = found.handle?.kind === "directory" && !sameOwner(next3, current);
-    const heir = change.kind === "adopt" ? void 0 : stored?.heir ?? (handing ? [current.uid, current.gid] : void 0);
+    const heir = change.kind === "adopt" ? void 0 : stored2?.heir ?? (handing ? [current.uid, current.gid] : void 0);
     const ctimeMs = Date.now();
     await this.meta.update(found.path, (entry) => {
       const { heir: _, ...rest2 } = entry ?? found.link ?? { path: found.path };
@@ -2053,8 +2053,8 @@ var OpfsFs = class {
   }
   async movedOwner(source) {
     if (!this.owners) return void 0;
-    const [stored] = source.link ? [source.link] : await this.meta.get([source.path]);
-    return ownOf(stored) ? void 0 : this.ownerAt(source.path, stored);
+    const [stored2] = source.link ? [source.link] : await this.meta.get([source.path]);
+    return ownOf(stored2) ? void 0 : this.ownerAt(source.path, stored2);
   }
   async walk(parts2, from, start2) {
     let dir = start2;
@@ -3905,6 +3905,38 @@ for (const [names2, op] of [
   }
 }
 
+// src/fs/portable.ts
+var privateTop = () => navigator.storage.getDirectory();
+function clonable(handle) {
+  const { port1, port2 } = new MessageChannel();
+  try {
+    port1.postMessage(handle);
+    return true;
+  } catch (err) {
+    if (err?.name === "DataCloneError") return false;
+    throw err;
+  } finally {
+    port1.close();
+    port2.close();
+  }
+}
+async function portable(handle, top = privateTop) {
+  if (clonable(handle)) return { handle };
+  const path = await (await top()).resolve(handle);
+  if (path === null) {
+    throw new Error(
+      "this browser cannot hand a folder to a worker unless it is in the origin private file system"
+    );
+  }
+  return { path };
+}
+async function directoryAt(top, path) {
+  let dir = top;
+  for (const name2 of path) dir = await dir.getDirectoryHandle(name2);
+  return dir;
+}
+var samePath = (a, b) => a.length === b.length && a.every((name2, at) => name2 === b[at]);
+
 // src/fs/roots.ts
 var ROOTS_DB = "slicc-kernel-roots";
 var ROOTS_STORE = "roots";
@@ -3926,6 +3958,10 @@ async function same(a, b) {
     return false;
   }
 }
+async function matches(record2, root, at) {
+  if (record2.handle) return same(record2.handle, root);
+  return "path" in at && record2.path !== void 0 && samePath(record2.path, at.path);
+}
 var nameOf = (id2) => `${META_DB}:${id2}`;
 function done(tx) {
   return new Promise((resolve2, reject) => {
@@ -3959,18 +3995,19 @@ async function seed(factory, name2) {
     to.close();
   }
 }
-async function rootId(factory, root, locks = globalThis.navigator?.locks) {
+async function rootId(factory, root, locks = globalThis.navigator?.locks, top) {
   const find = async () => {
+    const at = await portable(root, top);
     const db = await open(factory);
     try {
       const all = await request(
         db.transaction(ROOTS_STORE, "readonly").objectStore(ROOTS_STORE).getAll()
       );
-      for (const record2 of all) if (await same(record2.handle, root)) return record2.id;
+      for (const record2 of all) if (await matches(record2, root, at)) return record2.id;
       const id2 = crypto.randomUUID();
       if (await used(root)) await seed(factory, nameOf(id2));
       const tx = db.transaction(ROOTS_STORE, "readwrite");
-      tx.objectStore(ROOTS_STORE).put({ id: id2, handle: root });
+      tx.objectStore(ROOTS_STORE).put({ id: id2, ...at });
       await done(tx);
       return id2;
     } finally {
@@ -8522,7 +8559,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.172.0" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.172.2" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -9570,14 +9607,14 @@ var UnlinkedKeeper = class {
   linked = /* @__PURE__ */ new Map();
   dirOwner;
   peers;
-  constructor(fs, holders, rootOf, options = {}) {
+  constructor(fs, holders, rootOf2, options = {}) {
     this.peers = options.peers;
     this.marks = options.marks ?? new PathMarks();
     const { locks, owner } = options;
     this.dirOwner = options.dirOwner;
     this.fs = fs;
     this.holders = holders;
-    this.rootOf = rootOf;
+    this.rootOf = rootOf2;
     this.locks = locks;
     this.busy = options.busy ?? (() => false);
     this.owner = owner;
@@ -15266,7 +15303,7 @@ async function timesOf(entry, path, req) {
   const st = await look.call(entry.fs, path).catch(() => void 0);
   if (!st || (st.uid ?? 0) === g.cred.euid) return given;
   const now = /* @__PURE__ */ new Date();
-  const kept = (ms, stored) => ms === stored.getTime() ? stored : now;
+  const kept = (ms, stored2) => ms === stored2.getTime() ? stored2 : now;
   return [kept(req.atimeMs, st.atime), kept(req.mtimeMs, st.mtime)];
 }
 function guardOf(entry) {
@@ -18286,19 +18323,19 @@ function indexedDbCaStore(dbName = "slicc-realm-ca") {
     async swap(owner, expected, record2) {
       const tx = (await open2()).transaction("ca", "readwrite");
       const store = tx.objectStore("ca");
-      let stored = record2;
+      let stored2 = record2;
       const read = store.get(owner);
       read.onsuccess = () => {
         const current = read.result;
         const kept = winner(current, expected, record2);
         if (kept === record2) store.put(record2, owner);
-        else stored = kept;
+        else stored2 = kept;
       };
       await new Promise((resolve2, reject) => {
         tx.oncomplete = () => resolve2();
         tx.onerror = () => reject(tx.error);
       });
-      return stored;
+      return stored2;
     }
   };
 }
@@ -18315,10 +18352,10 @@ var RealmCa = class _RealmCa {
     this.record = record2;
   }
   static async open(owner, store, now = Date.now()) {
-    const stored = await store.get(owner).catch(() => void 0);
-    if (stored && stored.notAfter - now > CA_RENEW_BEFORE) return new _RealmCa(stored);
+    const stored2 = await store.get(owner).catch(() => void 0);
+    if (stored2 && stored2.notAfter - now > CA_RENEW_BEFORE) return new _RealmCa(stored2);
     const record2 = await _RealmCa.create(owner, now);
-    return new _RealmCa(await store.swap(owner, stored, record2));
+    return new _RealmCa(await store.swap(owner, stored2, record2));
   }
   static async create(owner, now) {
     const pair = await crypto.subtle.generateKey(ECDSA, false, ["sign", "verify"]);
@@ -22763,15 +22800,15 @@ async function scramKeys(password, x) {
     )
   );
   const clientKey = await hmac(salted, encoder9.encode("Client Key"));
-  const stored = new Uint8Array(
+  const stored2 = new Uint8Array(
     await crypto.subtle.digest("SHA-256", clientKey)
   );
   const auth = encoder9.encode(`${x.clientFirstBare},${x.serverFirst},${x.clientFinalBare}`);
-  const signature = await hmac(stored, auth);
+  const signature = await hmac(stored2, auth);
   const proof = clientKey.map((b, i) => b ^ signature[i]);
   const serverKey = await hmac(salted, encoder9.encode("Server Key"));
   const serverSignature = await hmac(serverKey, auth);
-  for (const k of [salted, clientKey, stored, signature, serverKey]) k.fill(0);
+  for (const k of [salted, clientKey, stored2, signature, serverKey]) k.fill(0);
   return { proof, serverSignature };
 }
 var SPACES = /[\u00A0\u1680\u2000-\u200B\u202F\u205F\u3000]/g;
@@ -31028,18 +31065,28 @@ function settle2(request3, value2) {
     request3.onerror = () => reject(request3.error);
   });
 }
-function openMedia(name2, factory) {
+var privateTop2 = () => navigator.storage.getDirectory();
+async function stored(kept, top) {
+  const path = kept?.path;
+  if (!Array.isArray(path)) return kept;
+  return directoryAt(await top(), path).catch(() => void 0);
+}
+function openMedia(name2, factory, top = privateTop2) {
   const request3 = factory.open(name2, 1);
   request3.onupgradeneeded = () => request3.result.createObjectStore(MEDIA_STORE);
   return settle2(request3, () => {
     const db = request3.result;
     const store = (mode) => db.transaction(MEDIA_STORE, mode).objectStore(MEDIA_STORE);
     return {
-      get: (id2) => {
+      get: async (id2) => {
         const got = store("readonly").get(id2);
-        return settle2(got, () => got.result);
+        return stored(await settle2(got, () => got.result), top);
       },
-      put: (id2, handle) => settle2(store("readwrite").put(handle, id2), () => void 0)
+      put: async (id2, handle) => {
+        const at = await portable(handle, top);
+        const kept = "path" in at ? at : handle;
+        await settle2(store("readwrite").put(kept, id2), () => void 0);
+      }
     };
   });
 }
@@ -33791,7 +33838,7 @@ var Launcher = class {
   }
   list(viewer = ROOT) {
     const members = new Map(this.jobs.list().map((member) => [member.pid, member]));
-    const rootOf = (member) => {
+    const rootOf2 = (member) => {
       let root = member;
       for (let up = members.get(root.execParent ?? -1); up; up = members.get(up.execParent ?? -1)) {
         root = up;
@@ -33800,7 +33847,7 @@ var Launcher = class {
     };
     const shown = (pid) => {
       const member = pid === void 0 ? void 0 : members.get(pid);
-      const root = member && rootOf(member).pid;
+      const root = member && rootOf2(member).pid;
       return root !== void 0 && this.running(root) ? root : INIT_PID;
     };
     const superseded = new Set([...members.values()].map((m) => m.execParent));
@@ -33810,7 +33857,7 @@ var Launcher = class {
       if (member.execed && superseded.has(member.pid) || !described2) continue;
       const cred = this.credOf(member.pid);
       if (!maySee(viewer, cred)) continue;
-      const root = rootOf(member);
+      const root = rootOf2(member);
       const tags = this.tagsOf(member.pid) ?? this.tagsOf(root.pid);
       listed.push({
         pid: root.pid,
@@ -34209,9 +34256,9 @@ var Launcher = class {
     const served2 = serveFilesystem(port2, medium.handlers, FSA_CAPABILITIES);
     const id2 = source.slice("fsa:".length);
     this.removable.set(target, { id: id2, medium, served: served2 });
-    const stored = this.inserted.get(id2) ?? await this.media.get(id2);
-    if (stored && await granted(stored)) medium.insert(stored);
-    else ask(stored);
+    const stored2 = this.inserted.get(id2) ?? await this.media.get(id2);
+    if (stored2 && await granted(stored2)) medium.insert(stored2);
+    else ask(stored2);
     return {
       port: port1,
       present: () => medium.present(),
@@ -35124,11 +35171,24 @@ async function inOpfs(deps, root) {
   return await opfs?.resolve(root).catch(() => null) != null;
 }
 async function rootNamed(deps, req, root) {
-  if (req.metadata !== void 0 || !req.root || !deps.rootId) return req;
+  if (req.metadata !== void 0 || !req.root && !req.rootPath || !deps.rootId) return req;
   const top = await deps.storage().catch(() => void 0);
   const name2 = await metadataName(top, root, deps.rootId);
   return name2 === META_DB ? req : { ...req, metadata: name2 };
 }
+async function rootOf(deps, req) {
+  if (req.root) return req.root;
+  const top = await deps.storage();
+  return req.rootPath ? directoryAt(top, req.rootPath) : top;
+}
+async function insertedHandle(deps, req) {
+  return "path" in req ? directoryAt(await deps.storage(), req.path) : req.handle;
+}
+function crossable(medium) {
+  if (!medium.handle || clonable(medium.handle)) return medium;
+  const { handle: _, ...rest2 } = medium;
+  return rest2;
+}
 function workers(deps) {
   return {
     createWorker: deps.createWorker,
@@ -35411,7 +35471,7 @@ function serveKernel(port, deps) {
     }
   }
   async function init(req) {
-    launcher = (req.root ? Promise.resolve(req.root) : deps.storage()).then(async (root) => {
+    launcher = rootOf(deps, req).then(async (root) => {
       req = await rootNamed(deps, req, root);
       const name2 = req.metadata ?? META_DB;
       const { meta, media } = await stores(deps, name2, req.media);
@@ -35439,7 +35499,7 @@ function serveKernel(port, deps) {
         ...req.approve ? { approve: approvals.ask } : {},
         ...net,
         ...media ? { media } : {},
-        onMountPending: (medium) => port.postMessage({ medium }),
+        onMountPending: (medium) => port.postMessage({ medium: crossable(medium) }),
         ...req.hostfs ? { hostfs: askGrant } : {},
         ...pageHooks(req, port),
         ...mountPolicy(req.processMounts),
@@ -35455,7 +35515,8 @@ function serveKernel(port, deps) {
     const l = await ready2();
     if (req.op === "mount") return l.mount(req.spec);
     if (req.op === "umount") return l.umount(req.target);
-    if (req.op === "insert") return l.insert(req.target, req.handle, req.source);
+    if (req.op === "insert")
+      return l.insert(req.target, await insertedHandle(deps, req), req.source);
     return l.mounts.listed();
   }
   const attestOp = attestOps(port);