@ai-ecoverse/slicc-kernel 1.172.1 → 1.173.0

package/dist/kernel-worker.js

@@ -1,5 +1,149 @@
+// src/fs/meta-reads.ts
+var parentOf = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
+var within = (path, root) => root === "/" || path === root || path.startsWith(`${root}/`);
+var Invalidations = class {
+  seq = 0;
+  log = [];
+  open = /* @__PURE__ */ new Map();
+  start() {
+    const at = this.seq;
+    this.open.set(at, (this.open.get(at) ?? 0) + 1);
+    return at;
+  }
+  end(at) {
+    const left = (this.open.get(at) ?? 1) - 1;
+    if (left > 0) this.open.set(at, left);
+    else this.open.delete(at);
+    const oldest = this.open.keys().next();
+    if (oldest.done) this.log.length = 0;
+    else while (this.log.length > 0 && this.log[0].at <= oldest.value) this.log.shift();
+  }
+  note({ paths = [], trees = [] }) {
+    this.seq++;
+    if (this.open.size > 0) this.log.push({ at: this.seq, paths, trees });
+  }
+  since(at, hit) {
+    for (let i = this.log.length - 1; i >= 0; i--) {
+      const noted2 = this.log[i];
+      if (noted2.at <= at) return false;
+      if (hit(noted2)) return true;
+    }
+    return false;
+  }
+  entryStale(at, path) {
+    return this.since(
+      at,
+      ({ paths, trees }) => paths.includes(path) || trees.some((tree2) => within(path, tree2))
+    );
+  }
+  listingStale(at, dir) {
+    return this.since(
+      at,
+      ({ paths, trees }) => paths.some((path) => path !== "/" && parentOf(path) === dir) || trees.some((tree2) => within(dir, tree2) || tree2 !== "/" && parentOf(tree2) === dir)
+    );
+  }
+};
+var META_READS_IN_FLIGHT = 4;
+var BatchedReads = class {
+  run;
+  invalidations;
+  keep;
+  queued = {
+    entry: /* @__PURE__ */ new Map(),
+    links: /* @__PURE__ */ new Map()
+  };
+  reading = {
+    entry: /* @__PURE__ */ new Map(),
+    links: /* @__PURE__ */ new Map()
+  };
+  inFlight = 0;
+  constructor(invalidations, run2, keep2) {
+    this.invalidations = invalidations;
+    this.run = run2;
+    this.keep = keep2;
+  }
+  entries(paths) {
+    const wanted = paths.map((path) => [path, this.want("entry", path)]);
+    this.pump();
+    return Promise.all(wanted.map(([, w]) => w.promise)).then(
+      (found) => new Map(wanted.map(([path], i) => [path, found[i]]))
+    );
+  }
+  links(dir) {
+    const wanted = this.want("links", dir);
+    this.pump();
+    return wanted.promise;
+  }
+  stale(kind, key, at) {
+    return kind === "entry" ? this.invalidations.entryStale(at, key) : this.invalidations.listingStale(at, key);
+  }
+  want(kind, key) {
+    const reading = this.reading[kind].get(key);
+    if (reading && !this.stale(kind, key, reading.at)) return reading;
+    const queued = this.queued[kind].get(key);
+    if (queued) return queued;
+    const made2 = Promise.withResolvers();
+    made2.promise.catch(() => void 0);
+    this.queued[kind].set(key, made2);
+    return made2;
+  }
+  pump() {
+    while (this.inFlight < META_READS_IN_FLIGHT && (this.queued.entry.size > 0 || this.queued.links.size > 0)) {
+      this.flush();
+    }
+  }
+  flush() {
+    const entries = this.queued.entry;
+    const links = this.queued.links;
+    this.queued.entry = /* @__PURE__ */ new Map();
+    this.queued.links = /* @__PURE__ */ new Map();
+    const at = this.invalidations.start();
+    for (const [kind, taken] of [
+      ["entry", entries],
+      ["links", links]
+    ]) {
+      for (const [key, wanted] of taken) {
+        wanted.at = at;
+        this.reading[kind].set(key, wanted);
+      }
+    }
+    this.inFlight++;
+    const settled = (result, error) => {
+      this.inFlight--;
+      for (const [kind, taken, found] of [
+        ["entry", entries, result?.entries],
+        ["links", links, result?.links]
+      ]) {
+        for (const [key, wanted] of taken) {
+          if (this.reading[kind].get(key) === wanted) this.reading[kind].delete(key);
+          if (!found) {
+            wanted.reject(error);
+            continue;
+          }
+          const value2 = found.get(key) ?? (kind === "entry" ? null : []);
+          if (!this.stale(kind, key, at)) this.keep(kind, key, value2);
+          wanted.resolve(value2);
+        }
+      }
+      this.invalidations.end(at);
+      this.pump();
+    };
+    let reading;
+    try {
+      reading = this.run({ entries: [...entries.keys()], links: [...links.keys()] });
+    } catch (error) {
+      settled(void 0, error);
+      return;
+    }
+    reading.then(
+      (result) => settled(result),
+      (error) => settled(void 0, error)
+    );
+  }
+};
+
 // src/fs/path-map.ts
-function parentOf(path) {
+function parentOf2(path) {
   if (path === "/" || path === "") return void 0;
   const at = path.lastIndexOf("/");
   return at <= 0 ? "/" : path.slice(0, at);
@@ -57,24 +201,24 @@ var PathMap = class {
     this.children.clear();
   }
   link(path) {
-    for (let child = path, parent = parentOf(path); parent !== void 0; ) {
+    for (let child = path, parent = parentOf2(path); parent !== void 0; ) {
       const set3 = this.children.get(parent);
       if (set3?.has(child)) return;
       if (set3) set3.add(child);
       else this.children.set(parent, /* @__PURE__ */ new Set([child]));
       child = parent;
-      parent = parentOf(parent);
+      parent = parentOf2(parent);
     }
   }
   prune(path) {
-    for (let child = path, parent = parentOf(path); parent !== void 0; ) {
+    for (let child = path, parent = parentOf2(path); parent !== void 0; ) {
       if (this.values.has(child) || this.children.has(child)) return;
       const set3 = this.children.get(parent);
       set3?.delete(child);
       if (set3 && set3.size > 0) return;
       this.children.delete(parent);
       child = parent;
-      parent = parentOf(parent);
+      parent = parentOf2(parent);
     }
   }
 };
@@ -83,11 +227,11 @@ var PathMap = class {
 var META_DB = "slicc-kernel";
 var META_VERSION = 1;
 var META_STORE = "entries";
-function parentOf2(path) {
+function parentOf3(path) {
   return path.slice(0, path.lastIndexOf("/")) || "/";
 }
 function moved(entry, path) {
-  return entry.link === void 0 ? { ...entry, path } : { ...entry, path, dir: parentOf2(path) };
+  return entry.link === void 0 ? { ...entry, path } : { ...entry, path, dir: parentOf3(path) };
 }
 function under(path, root) {
   return path === root || path.startsWith(`${root}/`);
@@ -146,11 +290,21 @@ function settle(transaction, value2) {
 }
 var REMOVE_BATCH = 256;
 var REMOVE_WAIT_MS = 5;
+var LISTINGS_KEPT = 4096;
 var IndexedDbMeta = class {
   db;
   cache = new PathMap();
+  listings = new PathMap();
   channel;
-  generation = 0;
+  invalidations = new Invalidations();
+  reads = new BatchedReads(
+    this.invalidations,
+    (batch) => this.read(batch),
+    (kind, key, value2) => {
+      if (kind === "entry") this.cache.set(key, value2);
+      else this.keepListing(key, value2);
+    }
+  );
   listeners = /* @__PURE__ */ new Set();
   listen(listener) {
     this.listeners.add(listener);
@@ -169,32 +323,56 @@ var IndexedDbMeta = class {
     this.drop({ trees: [...trees] });
   }
   drop({ paths = [], trees = [] }) {
-    this.generation++;
-    for (const path of paths) this.cache.delete(path);
-    for (const tree2 of trees) this.cache.deleteTree(tree2);
+    this.invalidations.note({ paths, trees });
+    for (const path of paths) {
+      this.cache.delete(path);
+      if (path !== "/") this.listings.delete(parentOf3(path));
+    }
+    for (const tree2 of trees) {
+      this.cache.deleteTree(tree2);
+      this.listings.deleteTree(tree2);
+      if (tree2 !== "/") this.listings.delete(parentOf3(tree2));
+    }
+  }
+  keepListing(dir, links) {
+    if (this.listings.size >= LISTINGS_KEPT) this.listings.clear();
+    this.listings.set(dir, links);
+  }
+  async read({ entries, links }) {
+    this.settleRemoves();
+    const [transaction, store] = this.transaction("readonly");
+    const result = { entries: /* @__PURE__ */ new Map(), links: /* @__PURE__ */ new Map() };
+    for (const path of entries) {
+      const request3 = store.get(path);
+      request3.onsuccess = () => void result.entries.set(path, request3.result ?? null);
+    }
+    if (links.length > 0) {
+      const index = store.index("dir");
+      for (const dir of links) {
+        const request3 = index.getAll(dir);
+        request3.onsuccess = () => void result.links.set(dir, request3.result);
+      }
+    }
+    return settle(transaction, () => result);
   }
   changed(invalidation2) {
     this.drop(invalidation2);
     this.channel.postMessage(invalidation2);
   }
+  counted = { reads: 0, writes: 0 };
+  transactions() {
+    return { ...this.counted };
+  }
   transaction(mode) {
+    if (mode === "readonly") this.counted.reads++;
+    else this.counted.writes++;
     const transaction = this.db.transaction(META_STORE, mode);
     return [transaction, transaction.objectStore(META_STORE)];
   }
   async get(paths) {
     const missing6 = paths.filter((path) => !this.cache.has(path));
     if (missing6.length > 0) {
-      this.settleRemoves();
-      const generation = this.generation;
-      const [transaction, store] = this.transaction("readonly");
-      const found = /* @__PURE__ */ new Map();
-      for (const path of missing6) {
-        const request3 = store.get(path);
-        request3.onsuccess = () => void found.set(path, request3.result ?? null);
-      }
-      await settle(transaction, () => void 0);
-      if (generation === this.generation)
-        for (const [path, entry] of found) this.cache.set(path, entry);
+      const found = await this.reads.entries(missing6);
       return paths.map(
         (path) => (found.has(path) ? found.get(path) : this.cache.get(path)) ?? void 0
       );
@@ -276,7 +454,8 @@ var IndexedDbMeta = class {
   async removeFile(path) {
     const known = this.cache.get(path);
     if (!known) return this.remove([path]);
-    this.generation++;
+    this.invalidations.note({ paths: [path] });
+    if (path !== "/") this.listings.delete(parentOf3(path));
     this.cache.set(path, null);
     this.removing.set(path, JSON.stringify(known));
     if (this.removing.size >= REMOVE_BATCH) return this.flushRemoves();
@@ -316,10 +495,8 @@ var IndexedDbMeta = class {
     return settle(transaction, () => void this.channel.postMessage({ paths }));
   }
   async links(dir) {
-    this.settleRemoves();
-    const [transaction, store] = this.transaction("readonly");
-    const request3 = store.index("dir").getAll(dir);
-    return settle(transaction, () => request3.result);
+    const known = this.listings.get(dir);
+    return [...known ?? await this.reads.links(dir)];
   }
   async under(path) {
     this.settleRemoves();
@@ -803,14 +980,14 @@ function protectedPrefixes(paths) {
   }
   return [...new Set(paths.map((p) => normalizePath(p)))];
 }
-function within(path, prefix) {
+function within2(path, prefix) {
   return prefix === "/" || path === prefix || path.startsWith(`${prefix}/`);
 }
 function isProtected(prefixes2, path) {
-  return prefixes2.some((prefix) => within(path, prefix));
+  return prefixes2.some((prefix) => within2(path, prefix));
 }
 function holdsProtected(prefixes2, path) {
-  return prefixes2.some((prefix) => within(prefix, path));
+  return prefixes2.some((prefix) => within2(prefix, path));
 }
 var MAX_LINKS = 40;
 function partsOf(path) {
@@ -1537,6 +1714,7 @@ function sidecar(meta) {
   };
   if (meta.absent) ops.absent = meta.absent.bind(meta);
   if (meta.forgetTrees) ops.forgetTrees = meta.forgetTrees.bind(meta);
+  if (meta.transactions) ops.transactions = meta.transactions.bind(meta);
   const { removeFile } = meta;
   if (removeFile)
     ops.removeFile = (path) => removeFile.call(meta, path).catch((err) => {
@@ -1559,7 +1737,7 @@ function missing2(err) {
 function split(path) {
   return path.split("/").filter(Boolean);
 }
-function parentOf3(path) {
+function parentOf4(path) {
   return path.slice(0, path.lastIndexOf("/")) || "/";
 }
 function baseOf(path) {
@@ -1569,7 +1747,7 @@ function prefixes(path) {
   const parts2 = split(path);
   return parts2.map((_, i) => `/${parts2.slice(0, i + 1).join("/")}`);
 }
-function within2(path, root) {
+function within3(path, root) {
   return path === root || path.startsWith(`${root}/`);
 }
 var unstored = () => Object.assign(new Error("the file system kept fewer bytes than were written"), {
@@ -1931,7 +2109,7 @@ var OpfsFs = class {
   async ownerAt(path, entry) {
     const own = ownOf(entry);
     if (own) return own;
-    return path === "/" ? { ...ROOT_OWNER } : this.handedTo(parentOf3(path));
+    return path === "/" ? { ...ROOT_OWNER } : this.handedTo(parentOf4(path));
   }
   async owned(stat, path, entry) {
     return this.owners ? { ...stat, ...await this.ownerAt(path, entry) } : stat;
@@ -2026,18 +2204,18 @@ var OpfsFs = class {
   async chown(path, change) {
     if (!this.owners) return;
     if (change.kind === "new") {
-      const at = resolvePath((await this.locate(parentOf3(path), true)).path, baseOf(path));
+      const at = resolvePath((await this.locate(parentOf4(path), true)).path, baseOf(path));
       this.refuse(at);
       const { uid = 0, gid = 0, mode } = change;
       return this.stampNew(at, { uid, gid, ...mode !== void 0 ? { mode } : {} }, false);
     }
     const found = await this.locate(path, change.follow !== false);
     this.refuse(found.path);
-    const [stored] = found.link ? [found.link] : await this.meta.get([found.path]);
-    const current = await this.ownerAt(found.path, stored);
+    const [stored2] = found.link ? [found.link] : await this.meta.get([found.path]);
+    const current = await this.ownerAt(found.path, stored2);
     const next3 = { uid: change.uid ?? current.uid, gid: change.gid ?? current.gid };
     const handing = found.handle?.kind === "directory" && !sameOwner(next3, current);
-    const heir = change.kind === "adopt" ? void 0 : stored?.heir ?? (handing ? [current.uid, current.gid] : void 0);
+    const heir = change.kind === "adopt" ? void 0 : stored2?.heir ?? (handing ? [current.uid, current.gid] : void 0);
     const ctimeMs = Date.now();
     await this.meta.update(found.path, (entry) => {
       const { heir: _, ...rest2 } = entry ?? found.link ?? { path: found.path };
@@ -2053,8 +2231,8 @@ var OpfsFs = class {
   }
   async movedOwner(source) {
     if (!this.owners) return void 0;
-    const [stored] = source.link ? [source.link] : await this.meta.get([source.path]);
-    return ownOf(stored) ? void 0 : this.ownerAt(source.path, stored);
+    const [stored2] = source.link ? [source.link] : await this.meta.get([source.path]);
+    return ownOf(stored2) ? void 0 : this.ownerAt(source.path, stored2);
   }
   async walk(parts2, from, start2) {
     let dir = start2;
@@ -2107,6 +2285,9 @@ var OpfsFs = class {
   opfsOps() {
     return this.calls + this.others;
   }
+  metaTransactions() {
+    return this.meta.transactions?.();
+  }
   io(request3) {
     this.others++;
     return request3;
@@ -2229,7 +2410,7 @@ var OpfsFs = class {
     for (const entry of await this.meta.get(prefixes(path))) {
       if (entry?.link === void 0) continue;
       if (entry.path !== path && await this.real(entry.path)) continue;
-      if (await this.real(parentOf3(entry.path))) return entry;
+      if (await this.real(parentOf4(entry.path))) return entry;
     }
     return void 0;
   }
@@ -2261,11 +2442,11 @@ var OpfsFs = class {
         if (this.rejectLinks) throw fsError("ELOOP", path);
         const target = `${link2.link}${current.slice(link2.path.length)}`;
         if (target.split("/").includes("..")) {
-          const resolved2 = await this.physical(parentOf3(link2.path), target, hops + 1, path);
+          const resolved2 = await this.physical(parentOf4(link2.path), target, hops + 1, path);
           current = resolved2.path;
           hops = resolved2.hops - 1;
         } else {
-          current = resolvePath(parentOf3(link2.path), target);
+          current = resolvePath(parentOf4(link2.path), target);
         }
         this.crossing(path, current);
       }
@@ -2356,11 +2537,11 @@ var OpfsFs = class {
   movePending(from, to) {
     if (to !== void 0) {
       for (const path of [...this.fileTimes.keys()]) {
-        if (within2(path, to)) this.fileTimes.delete(path);
+        if (within3(path, to)) this.fileTimes.delete(path);
       }
     }
     for (const [path, ms] of [...this.fileTimes]) {
-      if (!within2(path, from)) continue;
+      if (!within3(path, from)) continue;
       this.fileTimes.delete(path);
       if (to !== void 0) this.fileTimes.set(to + path.slice(from.length), ms);
     }
@@ -2637,8 +2818,8 @@ var OpfsFs = class {
     const file = this.movingFiles.get(at);
     if (file !== void 0) return { done: file, away: true };
     for (const m of this.renamingDirs) {
-      if (within2(at, m.from)) return { done: m.done, away: true };
-      if (within2(at, m.to)) return { done: m.done, away: false };
+      if (within3(at, m.from)) return { done: m.done, away: true };
+      if (within3(at, m.to)) return { done: m.done, away: false };
     }
     return void 0;
   }
@@ -2674,7 +2855,7 @@ var OpfsFs = class {
     idle2.resolve();
   }
   async writesDrained(tree2) {
-    while ([...this.fileWrites.keys()].some((at) => within2(at, tree2))) {
+    while ([...this.fileWrites.keys()].some((at) => within3(at, tree2))) {
       this.writesIdle ??= Promise.withResolvers();
       await this.writesIdle.promise;
     }
@@ -2790,8 +2971,8 @@ var OpfsFs = class {
       if (!missing2(err)) throw err;
     }
     const [entry] = await this.meta.get([path]);
-    const wanted = entry?.link === void 0 ? path : resolvePath(parentOf3(path), entry.link);
-    return [resolvePath((await this.locate(parentOf3(wanted), true)).path, baseOf(wanted)), false];
+    const wanted = entry?.link === void 0 ? path : resolvePath(parentOf4(path), entry.link);
+    return [resolvePath((await this.locate(parentOf4(wanted), true)).path, baseOf(wanted)), false];
   }
   async fileFor(path, create = true) {
     const [target, existed] = await this.writeTarget(path);
@@ -2806,7 +2987,7 @@ var OpfsFs = class {
         dir,
         (parent) => this.io(parent.getFileHandle(name2, { create }))
       );
-      if (!existed) this.touch(Date.now(), parentOf3(target));
+      if (!existed) this.touch(Date.now(), parentOf4(target));
       return [handle, existed, target];
     } catch (err) {
       const code = err?.name === "TypeMismatchError" ? "EISDIR" : null;
@@ -2895,8 +3076,8 @@ var OpfsFs = class {
       gid: owner.gid,
       ...mode !== void 0 ? { mode, parents: mode } : {}
     };
-    await this.mkdir(parentOf3(path), { recursive: true, ...above ? { owner: above } : {} });
-    const parent = await this.locate(parentOf3(path), true);
+    await this.mkdir(parentOf4(path), { recursive: true, ...above ? { owner: above } : {} });
+    const parent = await this.locate(parentOf4(path), true);
     if (parent.handle?.kind !== "directory") throw fsError("ENOTDIR", path);
     this.refuse(resolvePath(parent.path, baseOf(path)));
     await this.io(parent.handle.getDirectoryHandle(baseOf(path), { create: true }));
@@ -2907,7 +3088,7 @@ var OpfsFs = class {
   }
   async mkdirExcl(path, owner) {
     if (normalizePath(path) === "/") throw fsError("EEXIST", path);
-    const parent = await this.locate(parentOf3(path), true);
+    const parent = await this.locate(parentOf4(path), true);
     if (parent.handle?.kind !== "directory") throw fsError("ENOTDIR", path);
     const dir = parent.handle;
     const name2 = baseOf(path);
@@ -2929,7 +3110,7 @@ var OpfsFs = class {
   }
   async createExclusive(path, owner) {
     if (normalizePath(path) === "/") throw fsError("EEXIST", path);
-    const parent = await this.locate(parentOf3(path), true);
+    const parent = await this.locate(parentOf4(path), true);
     if (parent.handle?.kind !== "directory") throw fsError("ENOTDIR", path);
     const dir = parent.handle;
     const name2 = baseOf(path);
@@ -2991,12 +3172,12 @@ var OpfsFs = class {
       else this.forget(found.path);
       this.movePending(found.path);
       if (file && this.meta.absent?.(found.path)) {
-        this.touch(now, parentOf3(found.path));
+        this.touch(now, parentOf4(found.path));
         return;
       }
       if (file && this.meta.removeFile) {
         await this.meta.removeFile(found.path);
-        this.touch(now, parentOf3(found.path));
+        this.touch(now, parentOf4(found.path));
         return;
       }
     }
@@ -3004,14 +3185,14 @@ var OpfsFs = class {
       [found.path],
       found.handle?.kind === "directory" ? vacatedAt(found.path) : void 0
     );
-    this.touch(Date.now(), parentOf3(found.path));
+    this.touch(Date.now(), parentOf4(found.path));
   }
   links() {
     return false;
   }
   async link(from, to, follow2) {
     await (follow2 ? this.stat(from) : this.lstat(from));
-    if (!(await this.stat(parentOf3(to))).isDirectory) throw fsError("ENOTDIR", to);
+    if (!(await this.stat(parentOf4(to))).isDirectory) throw fsError("ENOTDIR", to);
     const taken = await this.exactly(() => this.lstat(to)).then(
       () => true,
       (err) => {
@@ -3038,14 +3219,14 @@ var OpfsFs = class {
     const source = await this.locate(from, false);
     this.refuse(source.path, true);
     this.forget(source.path);
-    const parent = await this.locate(parentOf3(to), true);
+    const parent = await this.locate(parentOf4(to), true);
     const destination = resolvePath(parent.path, baseOf(to));
     this.refuse(destination, true);
     await this.entering(destination, () => this.moveTo(source, parent, destination, to, call));
   }
   async moveTo(source, parent, destination, to, call) {
     const sourceStat = await this.describe(source);
-    if (sourceStat.isDirectory && within2(destination, source.path)) throw fsError("EINVAL", to);
+    if (sourceStat.isDirectory && within3(destination, source.path)) throw fsError("EINVAL", to);
     const target = await this.exactly(() => this.locate(destination, false)).catch((err) => {
       if (missing2(err)) return null;
       throw err;
@@ -3072,7 +3253,7 @@ var OpfsFs = class {
     if (source.link) {
       if (target?.handle) await this.rm(destination);
       await this.meta.move(source.path, destination, carry, left);
-      this.touch(Date.now(), parentOf3(source.path), parent.path);
+      this.touch(Date.now(), parentOf4(source.path), parent.path);
       return;
     }
     const dir = parent.handle;
@@ -3121,7 +3302,7 @@ var OpfsFs = class {
       if (second) await this.meta.update(second, () => void 0);
       await this.restamp(destination, copies);
       this.changed(source.path, destination);
-      this.touch(Date.now(), parentOf3(source.path), parent.path);
+      this.touch(Date.now(), parentOf4(source.path), parent.path);
     };
     if (!copying) return sourceStat.isDirectory ? place() : this.movingFile(source.path, place);
     const { promise, resolve: resolve2 } = Promise.withResolvers();
@@ -3318,7 +3499,7 @@ var OpfsFs = class {
     for (const move of this.peerMoves.values()) {
       for (const tree2 of move.trees) {
         for (const mine of [from, to]) {
-          if (tree2.some((theirs) => within2(mine, theirs) || within2(theirs, mine))) return move;
+          if (tree2.some((theirs) => within3(mine, theirs) || within3(theirs, mine))) return move;
         }
       }
     }
@@ -3376,7 +3557,7 @@ var OpfsFs = class {
   }
   async resolvedForms(at) {
     if (at === "/") return [];
-    const parent = await PLAIN.realpath.call(this, parentOf3(at), true).catch(() => parentOf3(at));
+    const parent = await PLAIN.realpath.call(this, parentOf4(at), true).catch(() => parentOf4(at));
     const named = resolvePath(parent, baseOf(at));
     const target = await PLAIN.realpath.call(this, at, true).catch(() => named);
     return [.../* @__PURE__ */ new Set([named, target])].filter((form) => form !== at);
@@ -3420,7 +3601,7 @@ var OpfsFs = class {
     try {
       if (await this.real(from)) {
         const moved2 = await this.locate(from, false);
-        const back = await this.locate(parentOf3(to), true);
+        const back = await this.locate(parentOf4(to), true);
         await this.copy(
           moved2.handle,
           back.handle,
@@ -3474,7 +3655,7 @@ var OpfsFs = class {
         await PLAIN.rm.call(this, to, { recursive: true });
       if (left) {
         const source = await this.locate(from, false);
-        const target = await this.locate(parentOf3(to), true);
+        const target = await this.locate(parentOf4(to), true);
         await this.copy(
           source.handle,
           target.handle,
@@ -3516,7 +3697,7 @@ var OpfsFs = class {
         continue;
       }
       if (real !== void 0 || at === "/") return;
-      const parent = await this.realpath(parentOf3(at), true).catch(() => parentOf3(at));
+      const parent = await this.realpath(parentOf4(at), true).catch(() => parentOf4(at));
       real = resolvePath(parent, baseOf(at));
       if (real === at) return;
     }
@@ -3530,7 +3711,7 @@ var OpfsFs = class {
     if (source.handle?.kind !== "file") throw fsError("EINVAL", `${from}: not a regular file`);
     const [entry] = await this.meta.get([source.path]);
     if (entry?.fifo || entry?.socket) throw fsError("EINVAL", `${from}: not a regular file`);
-    const parent = await this.locate(parentOf3(to), true);
+    const parent = await this.locate(parentOf4(to), true);
     if (parent.handle?.kind !== "directory") throw fsError("ENOTDIR", to);
     const destination = resolvePath(parent.path, baseOf(to));
     if (destination === source.path) throw fsError("EINVAL", `${from}: copied onto itself`);
@@ -3585,7 +3766,7 @@ var OpfsFs = class {
   }
   renameAt(at) {
     for (const m of this.renamingDirs) {
-      if (within2(at, m.from) || within2(at, m.to) || at === parentOf3(m.from) || at === parentOf3(m.to))
+      if (within3(at, m.from) || within3(at, m.to) || at === parentOf4(m.from) || at === parentOf4(m.to))
         return m;
     }
     return void 0;
@@ -3678,7 +3859,7 @@ var OpfsFs = class {
     }
   }
   async symlink(target, path, owner) {
-    const parent = await this.locate(parentOf3(path), true);
+    const parent = await this.locate(parentOf4(path), true);
     if (parent.handle?.kind !== "directory") throw fsError("ENOTDIR", path);
     const at = resolvePath(parent.path, baseOf(path));
     this.refuse(at);
@@ -3769,7 +3950,7 @@ var OpfsFs = class {
       const known = listed.get(dir);
       if (known !== void 0) return known;
       const listing = (async () => {
-        const above = dir === "/" ? void 0 : await list(parentOf3(dir));
+        const above = dir === "/" ? void 0 : await list(parentOf4(dir));
         if (above === null) return null;
         const handle = dir === "/" ? this.root : above?.get(baseOf(dir));
         if (handle?.kind !== "directory") return void 0;
@@ -3789,7 +3970,7 @@ var OpfsFs = class {
       listed.set(dir, listing);
       return listing;
     };
-    const dirs = [...new Set(paths.filter((p) => split(p).length > 0).map(parentOf3))];
+    const dirs = [...new Set(paths.filter((p) => split(p).length > 0).map(parentOf4))];
     let next3 = 0;
     const lister = async () => {
       while (next3 < dirs.length) await list(dirs[next3++]);
@@ -3797,7 +3978,7 @@ var OpfsFs = class {
     await Promise.all(Array.from({ length: Math.min(RECONCILE_LISTINGS, dirs.length) }, lister));
     return async (path) => {
       if (split(path).length === 0) return true;
-      const listing = done5.get(parentOf3(path));
+      const listing = done5.get(parentOf4(path));
       if (listing === null) return this.real(path);
       return listing?.has(baseOf(path)) === true;
     };
@@ -3813,10 +3994,10 @@ var OpfsFs = class {
     const carried = new Set(entries.filter((e) => !e.vacated).map((e) => e.ino));
     const checked = entries.filter((e) => !(e.vacated && carried.has(inodeOf(e.path))));
     const real = await this.present(
-      checked.flatMap((e) => e.link === void 0 ? [e.path] : [e.path, parentOf3(e.path)])
+      checked.flatMap((e) => e.link === void 0 ? [e.path] : [e.path, parentOf4(e.path)])
     );
     for (const entry of checked) {
-      const stale = entry.link === void 0 ? !await real(entry.path) : await real(entry.path) || !await real(parentOf3(entry.path));
+      const stale = entry.link === void 0 ? !await real(entry.path) : await real(entry.path) || !await real(parentOf4(entry.path));
       if (!stale) continue;
       const seen = JSON.stringify(entry);
       await this.meta.update(
@@ -3837,7 +4018,7 @@ function nothing() {
 }
 function touches(at, trees, listing = true, removing = false) {
   return trees.some(
-    ([from, to]) => within2(at, from) || within2(at, to) || listing && (at === parentOf3(from) || at === parentOf3(to)) || removing && (at === "/" || within2(from, at) || within2(to, at))
+    ([from, to]) => within3(at, from) || within3(at, to) || listing && (at === parentOf4(from) || at === parentOf4(to)) || removing && (at === "/" || within3(from, at) || within3(to, at))
   );
 }
 function byIntent(a, b) {
@@ -3905,6 +4086,38 @@ for (const [names2, op] of [
   }
 }
 
+// src/fs/portable.ts
+var privateTop = () => navigator.storage.getDirectory();
+function clonable(handle) {
+  const { port1, port2 } = new MessageChannel();
+  try {
+    port1.postMessage(handle);
+    return true;
+  } catch (err) {
+    if (err?.name === "DataCloneError") return false;
+    throw err;
+  } finally {
+    port1.close();
+    port2.close();
+  }
+}
+async function portable(handle, top = privateTop) {
+  if (clonable(handle)) return { handle };
+  const path = await (await top()).resolve(handle);
+  if (path === null) {
+    throw new Error(
+      "this browser cannot hand a folder to a worker unless it is in the origin private file system"
+    );
+  }
+  return { path };
+}
+async function directoryAt(top, path) {
+  let dir = top;
+  for (const name2 of path) dir = await dir.getDirectoryHandle(name2);
+  return dir;
+}
+var samePath = (a, b) => a.length === b.length && a.every((name2, at) => name2 === b[at]);
+
 // src/fs/roots.ts
 var ROOTS_DB = "slicc-kernel-roots";
 var ROOTS_STORE = "roots";
@@ -3926,6 +4139,10 @@ async function same(a, b) {
     return false;
   }
 }
+async function matches(record2, root, at) {
+  if (record2.handle) return same(record2.handle, root);
+  return "path" in at && record2.path !== void 0 && samePath(record2.path, at.path);
+}
 var nameOf = (id2) => `${META_DB}:${id2}`;
 function done(tx) {
   return new Promise((resolve2, reject) => {
@@ -3959,18 +4176,19 @@ async function seed(factory, name2) {
     to.close();
   }
 }
-async function rootId(factory, root, locks = globalThis.navigator?.locks) {
+async function rootId(factory, root, locks = globalThis.navigator?.locks, top) {
   const find = async () => {
+    const at = await portable(root, top);
     const db = await open(factory);
     try {
       const all = await request(
         db.transaction(ROOTS_STORE, "readonly").objectStore(ROOTS_STORE).getAll()
       );
-      for (const record2 of all) if (await same(record2.handle, root)) return record2.id;
+      for (const record2 of all) if (await matches(record2, root, at)) return record2.id;
       const id2 = crypto.randomUUID();
       if (await used(root)) await seed(factory, nameOf(id2));
       const tx = db.transaction(ROOTS_STORE, "readwrite");
-      tx.objectStore(ROOTS_STORE).put({ id: id2, handle: root });
+      tx.objectStore(ROOTS_STORE).put({ id: id2, ...at });
       await done(tx);
       return id2;
     } finally {
@@ -4986,7 +5204,7 @@ function portFacadeHook(ask, gone) {
 
 // src/fs/walk.ts
 var MAX_LINKS3 = 40;
-function parentOf4(path) {
+function parentOf5(path) {
   return path.slice(0, path.lastIndexOf("/")) || "/";
 }
 async function mustBeDir(fs, path) {
@@ -5004,7 +5222,7 @@ async function realDir(fs, dir, budget = { hops: 0 }) {
     const part = queue.shift();
     if (part === ".") continue;
     if (part === "..") {
-      at = parentOf4(at);
+      at = parentOf5(at);
       continue;
     }
     const next3 = at === "/" ? `/${part}` : `${at}/${part}`;
@@ -5026,7 +5244,7 @@ function joinName(dir, name2) {
 }
 async function realTarget(fs, path) {
   const budget = { hops: 0 };
-  let dir = await realDir(fs, parentOf4(path), budget);
+  let dir = await realDir(fs, parentOf5(path), budget);
   let name2 = path.slice(path.lastIndexOf("/") + 1);
   for (; ; ) {
     const link2 = await linkOf(fs, joinName(dir, name2));
@@ -5034,7 +5252,7 @@ async function realTarget(fs, path) {
     if (budget.hops >= MAX_LINKS3) throw fsError("ELOOP", path);
     budget.hops++;
     const target = link2.startsWith("/") ? link2 : joinName(dir, link2);
-    dir = await realDir(fs, parentOf4(target), budget);
+    dir = await realDir(fs, parentOf5(target), budget);
     name2 = target.slice(target.lastIndexOf("/") + 1);
   }
   return joinName(dir, name2);
@@ -5111,7 +5329,7 @@ async function walk(fs, cred, path, follow2, links) {
     if (!dir) return { path: joinName(at, [part, ...queue].join("/")), perm: void 0 };
     if (!permits(cred, dir, X_OK)) return { path, perm: void 0, denied: at };
     if (part === "..") {
-      at = parentOf4(at);
+      at = parentOf5(at);
       continue;
     }
     const next3 = joinName(at, part);
@@ -5232,7 +5450,7 @@ function deny(g, op, path, errno3 = "EACCES") {
 }
 var FENCE_HOPS = 40;
 async function entryAt(g, path) {
-  const parent = parentOf4(path);
+  const parent = parentOf5(path);
   const real = await g.fs.realpath?.(parent, true).catch(() => void 0);
   return real ? joinName(real, path.slice(path.lastIndexOf("/") + 1)) : path;
 }
@@ -5243,7 +5461,7 @@ async function fencedNames(g, path) {
     names2.push(at);
     const link2 = await g.fs.readlink(at).catch(() => void 0);
     if (link2 === void 0) break;
-    at = await entryAt(g, normalizePath(g.fs.resolvePath(parentOf4(at), link2)));
+    at = await entryAt(g, normalizePath(g.fs.resolvePath(parentOf5(at), link2)));
   }
   return names2;
 }
@@ -5294,7 +5512,7 @@ async function unwritable(g, op, path, dir) {
 }
 async function inParent(g, op, path, old = false) {
   await fence(g, op, path);
-  const dir = await access(g.fs, g.cred, parentOf4(path), W_OK | X_OK, linked(g, DIR));
+  const dir = await access(g.fs, g.cred, parentOf5(path), W_OK | X_OK, linked(g, DIR));
   if (old !== true) {
     if (await unwritable(g, op, path, dir)) deny(g, op, path);
     else if (old === "replaced" && dir.denied === void 0) await stickyEntry(g, op, path, dir);
@@ -5306,7 +5524,7 @@ async function inParent(g, op, path, old = false) {
   if (!lookup2 || await present(g.fs, entryIn(dir, path), false)) deny(g, op, path);
 }
 async function makeIn(g, op, path, parents = true) {
-  for (let dir = parentOf4(path); ; dir = parentOf4(dir)) {
+  for (let dir = parentOf5(path); ; dir = parentOf5(dir)) {
     const walked = await access(g.fs, g.cred, dir, W_OK | X_OK, linked(g, DIR));
     if (await unwritable(g, op, path, walked)) {
       if (!await present(g.fs, path, true)) deny(g, op, path);
@@ -5334,7 +5552,7 @@ async function renamable(g, from, to) {
   if (from === to) return void await need(g, "rename", from, 0, { follow: false });
   await inParent(g, "rename", from, true);
   await inParent(g, "rename", to, "replaced");
-  if (g.cred.euid === 0 || parentOf4(from) === parentOf4(to)) return;
+  if (g.cred.euid === 0 || parentOf5(from) === parentOf5(to)) return;
   const st = await g.fs.lstat(from).catch(() => void 0);
   if (st?.isDirectory && !permits(g.cred, permOf(st), W_OK)) deny(g, "rename", from);
 }
@@ -5401,7 +5619,7 @@ async function writable(g, op, path) {
 }
 async function creatable(g, op, path) {
   const target = await need(g, op, path, 0);
-  if (target.denied === void 0) await need(g, op, parentOf4(target.path), W_OK | X_OK, DIR, path);
+  if (target.denied === void 0) await need(g, op, parentOf5(target.path), W_OK | X_OK, DIR, path);
 }
 async function openable(g, op, path, want, create) {
   const st = create ? await g.fs.stat(path).catch(() => void 0) : void 0;
@@ -6157,7 +6375,7 @@ function parsePrefix(text) {
   if (length2 < 0 || length2 > max) return void 0;
   return { ...parsed2, length: length2 };
 }
-function within3(prefix, addr) {
+function within4(prefix, addr) {
   if (prefix.v6 !== addr.v6) return false;
   const shift = BigInt((prefix.v6 ? 128 : 32) - prefix.length);
   return addr.bits >> shift === prefix.bits >> shift;
@@ -6197,9 +6415,9 @@ var Routes = class {
     if (!addr) return "unreachable";
     if (addr.v6 && addr.bits === 1n) return "loopback";
     if (!addr.v6 && addr.bits >> 24n === 127n) return "loopback";
-    if (RESERVED.some((p) => within3(p, addr))) return "reserved";
+    if (RESERVED.some((p) => within4(p, addr))) return "reserved";
     if (addr.v6 && !this.ipv6) return "unreachable";
-    if (this.exit || this.table.some((p) => within3(p, addr))) return "uplink";
+    if (this.exit || this.table.some((p) => within4(p, addr))) return "uplink";
     return "unreachable";
   }
 };
@@ -8151,7 +8369,7 @@ function hostRegistries(send2, gone, port) {
 function visibleTo(g, notify) {
   if (!g?.dac.enforcing) return notify;
   let queue = Promise.resolve();
-  const seen = async (path) => (await access(g.fs, g.cred, parentOf4(path), R_OK | X_OK, { directory: true })).denied === void 0;
+  const seen = async (path) => (await access(g.fs, g.cred, parentOf5(path), R_OK | X_OK, { directory: true })).denied === void 0;
   return (change) => {
     queue = queue.then(async () => {
       if (!("paths" in change)) return notify(change);
@@ -8169,7 +8387,7 @@ async function watchOp(l, req, watches, send2, g) {
   }
   if (g) for (const path of req.paths) await readable(g, "watch", l.fs.resolvePath("/", path));
   const notify = visibleTo(g, (change) => send2({ watch: req.id, change }));
-  const unwatch = l.watchers.watch(req.paths, { recursive: req.recursive }, notify);
+  const unwatch = l.watchers.watch(req.paths, { recursive: req.recursive, peers: true }, notify);
   watches.set(req.id, unwatch);
   return { result: req.id };
 }
@@ -8522,7 +8740,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.172.1" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.173.0" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -9433,7 +9651,7 @@ var PathMarks = class {
   }
   changedSince(path, gen) {
     if (gen < this.floor) return true;
-    for (let p = path; this.touched.size > 0; p = parentOf5(p)) {
+    for (let p = path; this.touched.size > 0; p = parentOf6(p)) {
       if ((this.touched.get(p) ?? 0) > gen) return true;
       if (p === "/") return false;
     }
@@ -9468,7 +9686,7 @@ var PathMarks = class {
     });
   }
   inFlight(path) {
-    for (let p = path; this.flying.size > 0; p = parentOf5(p)) {
+    for (let p = path; this.flying.size > 0; p = parentOf6(p)) {
       if (this.flying.has(p)) return true;
       if (p === "/") return false;
     }
@@ -9488,9 +9706,9 @@ var LOOKUP_OPS = [
   "readlink",
   "realpath"
 ];
-var within4 = (path, target) => path === target || target === "/" || path.startsWith(`${target}/`);
+var within5 = (path, target) => path === target || target === "/" || path.startsWith(`${target}/`);
 var TOUCHED_MAX = 4096;
-var parentOf5 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
+var parentOf6 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
 var PEER_RM_MS = 1e3;
 var SHARED_ACK_MS = 24 * 60 * 60 * 1e3;
 var delay = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
@@ -9570,14 +9788,14 @@ var UnlinkedKeeper = class {
   linked = /* @__PURE__ */ new Map();
   dirOwner;
   peers;
-  constructor(fs, holders, rootOf, options = {}) {
+  constructor(fs, holders, rootOf2, options = {}) {
     this.peers = options.peers;
     this.marks = options.marks ?? new PathMarks();
     const { locks, owner } = options;
     this.dirOwner = options.dirOwner;
     this.fs = fs;
     this.holders = holders;
-    this.rootOf = rootOf;
+    this.rootOf = rootOf2;
     this.locks = locks;
     this.busy = options.busy ?? (() => false);
     this.owner = owner;
@@ -9678,7 +9896,7 @@ var UnlinkedKeeper = class {
     };
   }
   async settled(path) {
-    for (let p = path; this.replacing.size > 0; p = parentOf5(p)) {
+    for (let p = path; this.replacing.size > 0; p = parentOf6(p)) {
       await this.replacing.get(p)?.done;
       if (p === "/") return;
     }
@@ -9696,7 +9914,7 @@ var UnlinkedKeeper = class {
     return this.marks.inFlight(path);
   }
   missed(path) {
-    for (let p = path; this.replacing.size > 0; p = parentOf5(p)) {
+    for (let p = path; this.replacing.size > 0; p = parentOf6(p)) {
       if (this.replacing.get(p)?.sealed) return true;
       if (p === "/") return false;
     }
@@ -9716,7 +9934,7 @@ var UnlinkedKeeper = class {
     for (const holder of this.holders) {
       if (holder.owns(target)) continue;
       for (const path of holder.held()) {
-        if (!within4(path, target) || holder.isKept(path)) continue;
+        if (!within5(path, target) || holder.isKept(path)) continue;
         held.set(path, [...held.get(path) ?? [], holder]);
       }
     }
@@ -9796,7 +10014,7 @@ var UnlinkedKeeper = class {
           await this.serial(async () => {
             await Promise.allSettled([this.fs.rename(file.hidden, path)]);
             this.unlinkedName(file.hidden);
-            await this.tidy(parentOf5(file.hidden));
+            await this.tidy(parentOf6(file.hidden));
           });
         }
         done5();
@@ -10035,7 +10253,7 @@ var UnlinkedKeeper = class {
     }
     await this.fs.rm(hidden).catch(() => void 0);
     this.unlinkedName(hidden);
-    await this.tidy(parentOf5(hidden));
+    await this.tidy(parentOf6(hidden));
   }
   async linkedName(hidden) {
     if (!mayLink(this.fs, hidden)) return;
@@ -11584,7 +11802,7 @@ function devCreation(path, cred) {
 var HOSTNAME_PATH = "/etc/hostname";
 var S_IFREG3 = 32768;
 var MAX_HOPS2 = 40;
-var parentOf6 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
+var parentOf7 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
 var baseOf2 = (path) => path.slice(path.lastIndexOf("/") + 1);
 function missing5(err) {
   return err?.code === "ENOENT";
@@ -11614,7 +11832,7 @@ function linkFollower(fs, files) {
   );
   const viaParent = async (path) => {
     if (!bases.has(baseOf2(path)) || !fs.realpath) return path;
-    const parent = parentOf6(path);
+    const parent = parentOf7(path);
     const dir = await fs.realpath(parent, true).catch(() => parent);
     return fs.resolvePath(dir, baseOf2(path));
   };
@@ -11623,7 +11841,7 @@ function linkFollower(fs, files) {
     for (let hop = 0; hop < MAX_HOPS2 && !files.has(current); hop++) {
       const link2 = await linkOf2(current);
       if (link2 === void 0) return viaParent(current);
-      current = fs.resolvePath(parentOf6(current), link2);
+      current = fs.resolvePath(parentOf7(current), link2);
     }
     return current;
   };
@@ -11704,7 +11922,7 @@ var DEFAULT_UMASK = 18;
 function isModule(bytes) {
   return MAGIC.every((b, i) => bytes[i] === b);
 }
-function within5(path, dir) {
+function within6(path, dir) {
   return path.startsWith(dir === "/" ? "/" : `${dir}/`);
 }
 var FreshModules = class {
@@ -11728,10 +11946,10 @@ var FreshModules = class {
     const target = normalizePath(to);
     if (source === target) return;
     for (const key of [...this.fresh.keys()]) {
-      if (key === target || within5(key, target)) this.fresh.delete(key);
+      if (key === target || within6(key, target)) this.fresh.delete(key);
     }
     for (const [key, fresh3] of [...this.fresh]) {
-      if (key !== source && !within5(key, source)) continue;
+      if (key !== source && !within6(key, source)) continue;
       this.fresh.delete(key);
       this.fresh.set(target + key.slice(source.length), fresh3);
     }
@@ -11773,7 +11991,7 @@ var FreshModules = class {
         await fs.rm(path, options);
         const at = normalizePath(path);
         for (const key of [...this.fresh.keys()]) {
-          if (key === at || within5(key, at)) this.fresh.delete(key);
+          if (key === at || within6(key, at)) this.fresh.delete(key);
         }
       },
       rename: async (from, to) => {
@@ -11878,10 +12096,10 @@ var WATCH_NOTES_LIMIT = 1e3;
 var baseOf3 = (path) => path.slice(path.lastIndexOf("/") + 1);
 var WATCH_BATCH_LIMIT = 1e3;
 var under3 = (path, dir) => dir === "/" || path.startsWith(`${dir}/`);
-var parentOf7 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
+var parentOf8 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
 function touches2(watcher, changed) {
   return watcher.paths.some(
-    (watched) => changed === watched || under3(watched, changed) || (watcher.recursive ? under3(changed, watched) : parentOf7(changed) === watched)
+    (watched) => changed === watched || under3(watched, changed) || (watcher.recursive ? under3(changed, watched) : parentOf8(changed) === watched)
   );
 }
 var REALS_KEPT = 4096;
@@ -11909,7 +12127,7 @@ function routed(watch, root, type, path, seq2) {
     if (type === "rename") noted(watch, { ended: true, seq: seq2 });
     return true;
   }
-  if (parentOf7(path) === root) noted(watch, { type, filename: baseOf3(path), seq: seq2 });
+  if (parentOf8(path) === root) noted(watch, { type, filename: baseOf3(path), seq: seq2 });
   else if (watch.recursive && under3(path, root)) {
     noted(watch, { type, filename: path.slice(root === "/" ? 1 : root.length + 1), seq: seq2 });
   } else return false;
@@ -11941,6 +12159,7 @@ var FsWatchers = class {
     const watcher = {
       paths: paths.map(normalizePath),
       recursive: options.recursive === true,
+      peers: options.peers === true,
       notify,
       pending: /* @__PURE__ */ new Set(),
       scheduled: false
@@ -11994,7 +12213,7 @@ var FsWatchers = class {
   covers(path) {
     for (const watch of this.typed) {
       for (const root of watch.roots) {
-        if (path === root || parentOf7(path) === root || watch.recursive && under3(path, root))
+        if (path === root || parentOf8(path) === root || watch.recursive && under3(path, root))
           return true;
       }
     }
@@ -12062,10 +12281,16 @@ var FsWatchers = class {
     this.report(paths);
     this.emit("change", paths);
   }
+  peerChanged(paths) {
+    if (paths.length > 0) this.notify(paths, true);
+  }
   report(paths, notify = true) {
     for (const tap of this.taps) tap(paths);
-    if (!notify) return;
+    if (notify) this.notify(paths);
+  }
+  notify(paths, peer = false) {
     for (const watcher of this.watchers) {
+      if (peer && !watcher.peers) continue;
       for (const path of paths) {
         const changed = normalizePath(path);
         if (touches2(watcher, changed)) watcher.pending.add(changed);
@@ -13534,7 +13759,7 @@ function linkedTo(mount, path) {
     return own?.kind !== "directory" && (attr2.nlink ?? 1) > 1;
   };
 }
-var within6 = (path, target) => path === target || target === "/" || path.startsWith(`${target}/`);
+var within7 = (path, target) => path === target || target === "/" || path.startsWith(`${target}/`);
 var HeldSet = class extends Set {
   idle;
   moved;
@@ -13570,7 +13795,7 @@ var HeldSet = class extends Set {
   }
 };
 function heldUnder(held, target) {
-  for (const paths of held) for (const path of paths.keys()) if (within6(path, target)) return true;
+  for (const paths of held) for (const path of paths.keys()) if (within7(path, target)) return true;
   return false;
 }
 var HeldPaths = class extends Map {
@@ -13611,7 +13836,7 @@ var HeldPaths = class extends Map {
     if (this.bound.size === 0) return;
     for (const [handle, key] of this.handles) {
       if (!this.bound.has(handle) || this.keptHandles.has(handle)) continue;
-      if (exact ? key === over : within6(key, over)) this.doubted.set(handle, ++this.doubts);
+      if (exact ? key === over : within7(key, over)) this.doubted.set(handle, ++this.doubts);
     }
   }
   boundIno(handle) {
@@ -13747,24 +13972,24 @@ var HeldPaths = class extends Map {
     return this.owning === path;
   }
   revoke(prefix) {
-    for (const path of this.keys()) if (within6(path, prefix)) this.revoked.add(path);
+    for (const path of this.keys()) if (within7(path, prefix)) this.revoked.add(path);
   }
   renamed(from, to) {
     for (const [path, count2] of [...this]) {
-      if (!within6(path, from)) continue;
+      if (!within7(path, from)) continue;
       const moved2 = to + path.slice(from.length);
       this.delete(path);
       this.set(moved2, (this.get(moved2) ?? 0) + count2);
       if (this.revoked.delete(path)) this.revoked.add(moved2);
     }
     for (const [path, count2] of [...this.opens]) {
-      if (!within6(path, from)) continue;
+      if (!within7(path, from)) continue;
       const moved2 = to + path.slice(from.length);
       this.opens.delete(path);
       this.opens.set(moved2, (this.opens.get(moved2) ?? 0) + count2);
     }
     for (const [id2, key] of this.handles) {
-      if (within6(key, from)) this.handles.set(id2, to + key.slice(from.length));
+      if (within7(key, from)) this.handles.set(id2, to + key.slice(from.length));
     }
     this.onMoved?.(from, to);
   }
@@ -13772,7 +13997,7 @@ var HeldPaths = class extends Map {
     return this.revoked.has(path);
   }
 };
-var parentOf8 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
+var parentOf9 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
 var readonly = (mount) => mount.caps.readonly === true || mount.options.ro !== void 0;
 function inodeless(mount, attr2) {
   if (attr2.ino !== void 0) return false;
@@ -13879,13 +14104,13 @@ var MountTable = class {
     });
   }
   under(path) {
-    for (const mount of this.mounts.values()) if (within6(mount.target, path)) return true;
+    for (const mount of this.mounts.values()) if (within7(mount.target, path)) return true;
     return false;
   }
   locate(path) {
     let best;
     for (const mount of this.mounts.values()) {
-      if (within6(path, mount.target) && (!best || mount.target.length > best.target.length))
+      if (within7(path, mount.target) && (!best || mount.target.length > best.target.length))
         best = mount;
     }
     if (!best) return void 0;
@@ -14032,7 +14257,7 @@ var MountTable = class {
   async commitUnder(prefix) {
     const at = normalizePath(prefix);
     await Promise.all(
-      [...this.sessions.keys()].filter((p) => within6(p, at)).map((p) => this.commit(p))
+      [...this.sessions.keys()].filter((p) => within7(p, at)).map((p) => this.commit(p))
     );
   }
   async commitOverlapping(real, offset, length2) {
@@ -14070,11 +14295,11 @@ var MountTable = class {
     mount.epoch++;
     const linked2 = mount.caps.links ? linkedTo(mount, path) : () => false;
     for (const [key, cached] of [...mount.attrs])
-      if (within6(key, path) || linked2(cached.value)) mount.attrs.delete(key);
+      if (within7(key, path) || linked2(cached.value)) mount.attrs.delete(key);
     mount.lists.delete(path);
-    mount.lists.delete(parentOf8(path));
+    mount.lists.delete(parentOf9(path));
     for (const [key, cached] of [...mount.lists])
-      if (within6(key, path) || cached.value.some((e) => linked2(e.attr))) mount.lists.delete(key);
+      if (within7(key, path) || cached.value.some((e) => linked2(e.attr))) mount.lists.delete(key);
   }
   async getattr(mount, path, rel2, settled = false) {
     for (let round = 1; ; round++) {
@@ -14193,7 +14418,7 @@ var MountFs = class _MountFs {
     const real = normalizePath(path);
     if (this.at(real)) return real;
     try {
-      await this.base.stat(parentOf8(real));
+      await this.base.stat(parentOf9(real));
       return real;
     } catch (err) {
       const moved2 = redirectOf(err);
@@ -14215,7 +14440,7 @@ var MountFs = class _MountFs {
       if (redirects >= MAX_LINKS7) throw errnoError("ELOOP", paths[0]);
       const at = paths.map((path) => {
         const real = normalizePath(path);
-        return within6(real, moved2.of) ? normalizePath(moved2.to + real.slice(moved2.of.length)) : real;
+        return within7(real, moved2.of) ? normalizePath(moved2.to + real.slice(moved2.of.length)) : real;
       });
       return again(at, redirects + 1);
     }
@@ -14235,7 +14460,7 @@ var MountFs = class _MountFs {
     if (this.rejectLinks) throw errnoError("ELOOP", path);
     if (hops >= MAX_LINKS7) throw errnoError("ELOOP", path);
     const target = await found.mount.conn.call({ op: "readlink", path: found.rel });
-    return this.follow(this.base.resolvePath(parentOf8(real), target), hops + 1, create);
+    return this.follow(this.base.resolvePath(parentOf9(real), target), hops + 1, create);
   }
   async open(mount, rel2, write, owner, create = write) {
     return await mount.conn.call({
@@ -14251,8 +14476,8 @@ var MountFs = class _MountFs {
   async driverOwner(found, real, owner, directory) {
     const { mount, rel: rel2 } = found;
     if (!owner || !mount.owners || !mount.caps.owners) return void 0;
-    const dir = parentOf8(real);
-    const above = statOf2(await this.table.getattr(mount, dir, parentOf8(rel2)), dir, mount);
+    const dir = parentOf9(real);
+    const above = statOf2(await this.table.getattr(mount, dir, parentOf9(rel2)), dir, mount);
     const setgid = (above.mode & S_ISGID4) !== 0;
     let mode = owner.mode;
     if (directory && setgid) mode = (mode ?? 493) | S_ISGID4;
@@ -14771,7 +14996,7 @@ var MountFs = class _MountFs {
   }
   async named(path) {
     const at = normalizePath(path);
-    return joinName(await realDir(this, parentOf8(at)), at.slice(at.lastIndexOf("/") + 1));
+    return joinName(await realDir(this, parentOf9(at)), at.slice(at.lastIndexOf("/") + 1));
   }
   async link(source, target, follow2 = false) {
     const from = follow2 ? await realTarget(this, normalizePath(source)) : await this.named(source);
@@ -15266,7 +15491,7 @@ async function timesOf(entry, path, req) {
   const st = await look.call(entry.fs, path).catch(() => void 0);
   if (!st || (st.uid ?? 0) === g.cred.euid) return given;
   const now = /* @__PURE__ */ new Date();
-  const kept = (ms, stored) => ms === stored.getTime() ? stored : now;
+  const kept = (ms, stored2) => ms === stored2.getTime() ? stored2 : now;
   return [kept(req.atimeMs, st.atime), kept(req.mtimeMs, st.mtime)];
 }
 function guardOf(entry) {
@@ -16445,6 +16670,8 @@ var SYS_TREE = {
     slicc_opfs_calls: (listing) => `${listing.opfsCalls ?? 0}
 `,
     slicc_opfs_ops: (listing) => `${listing.opfsOps ?? 0}
+`,
+    slicc_meta_transactions: ({ meta }) => `${meta?.reads ?? 0} ${meta?.writes ?? 0}
 `,
     slicc_cwd_checks: (listing) => `${listing.cwdChecks ?? 0}
 `,
@@ -18286,19 +18513,19 @@ function indexedDbCaStore(dbName = "slicc-realm-ca") {
     async swap(owner, expected, record2) {
       const tx = (await open2()).transaction("ca", "readwrite");
       const store = tx.objectStore("ca");
-      let stored = record2;
+      let stored2 = record2;
       const read = store.get(owner);
       read.onsuccess = () => {
         const current = read.result;
         const kept = winner(current, expected, record2);
         if (kept === record2) store.put(record2, owner);
-        else stored = kept;
+        else stored2 = kept;
       };
       await new Promise((resolve2, reject) => {
         tx.oncomplete = () => resolve2();
         tx.onerror = () => reject(tx.error);
       });
-      return stored;
+      return stored2;
     }
   };
 }
@@ -18315,10 +18542,10 @@ var RealmCa = class _RealmCa {
     this.record = record2;
   }
   static async open(owner, store, now = Date.now()) {
-    const stored = await store.get(owner).catch(() => void 0);
-    if (stored && stored.notAfter - now > CA_RENEW_BEFORE) return new _RealmCa(stored);
+    const stored2 = await store.get(owner).catch(() => void 0);
+    if (stored2 && stored2.notAfter - now > CA_RENEW_BEFORE) return new _RealmCa(stored2);
     const record2 = await _RealmCa.create(owner, now);
-    return new _RealmCa(await store.swap(owner, stored, record2));
+    return new _RealmCa(await store.swap(owner, stored2, record2));
   }
   static async create(owner, now) {
     const pair = await crypto.subtle.generateKey(ECDSA, false, ["sign", "verify"]);
@@ -22645,7 +22872,7 @@ function ranges(text) {
     return [Number.parseInt(lo, 16), Number.parseInt(hi, 16)];
   });
 }
-function within7(table, code) {
+function within8(table, code) {
   let lo = 0;
   let hi = table.length - 1;
   while (lo <= hi) {
@@ -22668,10 +22895,10 @@ var LCAT = ranges(LCAT_TEXT);
 function prepFails(prepared) {
   const codes = Array.from(prepared, (ch) => ch.codePointAt(0) ?? 0);
   if (codes.length === 0) return true;
-  if (codes.some((c) => within7(PROHIBITED, c) || within7(UNASSIGNED, c))) return true;
-  if (!codes.some((c) => within7(RANDAL, c))) return false;
-  if (codes.some((c) => within7(LCAT, c))) return true;
-  return !within7(RANDAL, codes[0] ?? 0) || !within7(RANDAL, codes.at(-1) ?? 0);
+  if (codes.some((c) => within8(PROHIBITED, c) || within8(UNASSIGNED, c))) return true;
+  if (!codes.some((c) => within8(RANDAL, c))) return false;
+  if (codes.some((c) => within8(LCAT, c))) return true;
+  return !within8(RANDAL, codes[0] ?? 0) || !within8(RANDAL, codes.at(-1) ?? 0);
 }
 
 // src/kernel/net/sealed-scram.ts
@@ -22763,15 +22990,15 @@ async function scramKeys(password, x) {
     )
   );
   const clientKey = await hmac(salted, encoder9.encode("Client Key"));
-  const stored = new Uint8Array(
+  const stored2 = new Uint8Array(
     await crypto.subtle.digest("SHA-256", clientKey)
   );
   const auth = encoder9.encode(`${x.clientFirstBare},${x.serverFirst},${x.clientFinalBare}`);
-  const signature = await hmac(stored, auth);
+  const signature = await hmac(stored2, auth);
   const proof = clientKey.map((b, i) => b ^ signature[i]);
   const serverKey = await hmac(salted, encoder9.encode("Server Key"));
   const serverSignature = await hmac(serverKey, auth);
-  for (const k of [salted, clientKey, stored, signature, serverKey]) k.fill(0);
+  for (const k of [salted, clientKey, stored2, signature, serverKey]) k.fill(0);
   return { proof, serverSignature };
 }
 var SPACES = /[\u00A0\u1680\u2000-\u200B\u202F\u205F\u3000]/g;
@@ -24646,7 +24873,7 @@ function isMissing(err) {
   if (err?.code === "ENOENT") return true;
   return err instanceof Error && err.message.startsWith("ENOENT");
 }
-function within8(path, root) {
+function within9(path, root) {
   return path === root || path.startsWith(root.endsWith("/") ? root : `${root}/`);
 }
 var VfsNode = class {
@@ -25027,7 +25254,7 @@ var VfsNodes = class {
     return run2;
   }
   async entryKey(path) {
-    const parent = parentOf4(path);
+    const parent = parentOf5(path);
     const dir = await this.real(parent, true, () => realDir(this.fs, parent));
     return joinName(dir, path.slice(path.lastIndexOf("/") + 1));
   }
@@ -25183,12 +25410,12 @@ var VfsNodes = class {
     return node;
   }
   holds(prefix) {
-    for (const path of this.byPath.keys()) if (within8(path, prefix)) return true;
+    for (const path of this.byPath.keys()) if (within9(path, prefix)) return true;
     return false;
   }
   writes(prefix) {
     for (const [path, node] of this.byPath)
-      if (node.writers > 0 && within8(path, prefix)) return true;
+      if (node.writers > 0 && within9(path, prefix)) return true;
     return false;
   }
   closed(node, writable2 = false) {
@@ -25271,17 +25498,17 @@ var VfsNodes = class {
     this.byPath.get(path)?.reread();
   }
   rewrittenUnder(tree2) {
-    for (const [p, node] of this.byPath) if (within8(p, tree2)) node.reread();
+    for (const [p, node] of this.byPath) if (within9(p, tree2)) node.reread();
   }
   doubted(path) {
-    for (const [p, node] of this.byPath) if (within8(p, path)) node.doubted();
+    for (const [p, node] of this.byPath) if (within9(p, path)) node.doubted();
   }
   async flush(path) {
-    for (const [p, node] of this.byPath) if (within8(p, path)) await node.serial(() => node.flush());
+    for (const [p, node] of this.byPath) if (within9(p, path)) await node.serial(() => node.flush());
   }
   async unlinking(path) {
     for (const [held, node] of [...this.byPath]) {
-      if (!within8(held, path)) continue;
+      if (!within9(held, path)) continue;
       await node.serial(async () => {
         await Promise.all([this.keepsOnDisk || node.keep(), node.limit()]);
       });
@@ -25289,14 +25516,14 @@ var VfsNodes = class {
   }
   revoke(prefix) {
     for (const [path, node] of [...this.byPath]) {
-      if (!within8(path, prefix)) continue;
+      if (!within9(path, prefix)) continue;
       node.revoke();
       this.forget(node);
     }
   }
   unlinked(path) {
     for (const [held, node] of [...this.byPath]) {
-      if (!within8(held, path) || this.byPath.get(held) !== node) continue;
+      if (!within9(held, path) || this.byPath.get(held) !== node) continue;
       if (!this.dropName(held, node)) this.orphan(node);
     }
   }
@@ -25304,8 +25531,8 @@ var VfsNodes = class {
     if (from === to) return;
     const moved2 = [];
     for (const [p, node] of [...this.byPath]) {
-      if (within8(p, from)) moved2.push([p, node]);
-      else if (within8(p, to) && this.byPath.get(p) === node && !this.dropName(p, node)) {
+      if (within9(p, from)) moved2.push([p, node]);
+      else if (within9(p, to) && this.byPath.get(p) === node && !this.dropName(p, node)) {
         this.orphan(node);
       }
     }
@@ -25331,7 +25558,7 @@ function errCode(err) {
   return err?.code;
 }
 async function targetDir(fs, path) {
-  return parentOf4(await realTarget(fs, path).catch(() => path));
+  return parentOf5(await realTarget(fs, path).catch(() => path));
 }
 async function refuseReadonly(fs, path, flags2, opts = {}) {
   const writes = (flags2 & O_ACCMODE) !== 0 || opts.truncate === true;
@@ -25594,7 +25821,7 @@ function isWatchSyscall(req) {
   return WATCHING.has(req.op);
 }
 var WATCHES_MAX = 8192;
-var parentOf9 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
+var parentOf10 = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
 function visibleTo2(watch, root, visible) {
   return {
     close: () => watch.close(),
@@ -25605,7 +25832,7 @@ function visibleTo2(watch, root, visible) {
         notes.map(async (note) => {
           if (!("filename" in note) || !note.filename.includes("/")) return true;
           const at = watch.root?.() ?? root;
-          const dir = parentOf9(`${at === "/" ? "" : at}/${note.filename}`);
+          const dir = parentOf10(`${at === "/" ? "" : at}/${note.filename}`);
           if (!seen.has(dir)) seen.set(dir, visible(dir));
           return seen.get(dir);
         })
@@ -29550,7 +29777,7 @@ function sealedFetcher(hook, stop, idleMs = BODY_IDLE_MS) {
 var SWAP_GAP_MS = 2e3;
 var STAGES = ["_tmp_", "_pacquet-stage_"];
 function staged(source, target) {
-  if (parentOf4(source) !== parentOf4(target)) return false;
+  if (parentOf5(source) !== parentOf5(target)) return false;
   const name2 = target.slice(target.lastIndexOf("/") + 1);
   const from = source.slice(source.lastIndexOf("/") + 1);
   return from.startsWith(`.${name2}-`) || STAGES.some((stage) => from.startsWith(`${name2}${stage}`));
@@ -29647,7 +29874,7 @@ var PackageSwaps = class {
 
 // src/kernel/rename-log.ts
 var RENAME_LOG_SIZE = 4096;
-function within9(path, root) {
+function within10(path, root) {
   return path === root || path.startsWith(root === "/" ? "/" : `${root}/`);
 }
 var RenameLog = class {
@@ -29674,9 +29901,9 @@ var RenameLog = class {
     const renames = [];
     let paths = [...held];
     for (const { seq: seq2, from, to } of this.entries) {
-      if (seq2 <= seen || !paths.some((path) => within9(path, from))) continue;
+      if (seq2 <= seen || !paths.some((path) => within10(path, from))) continue;
       renames.push([from, to]);
-      paths = paths.map((path) => within9(path, from) ? to + path.slice(from.length) : path);
+      paths = paths.map((path) => within10(path, from) ? to + path.slice(from.length) : path);
     }
     return { now, renames };
   }
@@ -31028,18 +31255,28 @@ function settle2(request3, value2) {
     request3.onerror = () => reject(request3.error);
   });
 }
-function openMedia(name2, factory) {
+var privateTop2 = () => navigator.storage.getDirectory();
+async function stored(kept, top) {
+  const path = kept?.path;
+  if (!Array.isArray(path)) return kept;
+  return directoryAt(await top(), path).catch(() => void 0);
+}
+function openMedia(name2, factory, top = privateTop2) {
   const request3 = factory.open(name2, 1);
   request3.onupgradeneeded = () => request3.result.createObjectStore(MEDIA_STORE);
   return settle2(request3, () => {
     const db = request3.result;
     const store = (mode) => db.transaction(MEDIA_STORE, mode).objectStore(MEDIA_STORE);
     return {
-      get: (id2) => {
+      get: async (id2) => {
         const got = store("readonly").get(id2);
-        return settle2(got, () => got.result);
+        return stored(await settle2(got, () => got.result), top);
       },
-      put: (id2, handle) => settle2(store("readwrite").put(handle, id2), () => void 0)
+      put: async (id2, handle) => {
+        const at = await portable(handle, top);
+        const kept = "path" in at ? at : handle;
+        await settle2(store("readwrite").put(kept, id2), () => void 0);
+      }
     };
   });
 }
@@ -32647,6 +32884,7 @@ var Launcher = class {
     this.rewritten(change.paths, change.trees);
     this.watchers.heard(change.content ? "change" : "rename", change.paths);
     this.watchers.heard("rename", change.trees ?? []);
+    this.watchers.peerChanged([...change.paths, ...change.trees ?? []]);
     if (change.outside && this.catalogChanged([...change.paths, ...change.trees ?? []])) {
       this.resetCatalogs();
     }
@@ -33400,9 +33638,9 @@ var Launcher = class {
   }
   packageRootIs(path) {
     const at = normalizePath(path);
-    const within10 = `${at}/`;
+    const within11 = `${at}/`;
     const roots = [this.modulesDir, ...this.appended];
-    const root = PACKAGE_ROOT.exec(within10)?.[1] ?? packageRootOf(within10, roots);
+    const root = PACKAGE_ROOT.exec(within11)?.[1] ?? packageRootOf(within11, roots);
     return root === at;
   }
   packageRoots(planned) {
@@ -33601,6 +33839,7 @@ var Launcher = class {
         fsCalls: servedFsCalls(),
         opfsCalls: this.rootFs.opfsCalls?.() ?? 0,
         opfsOps: this.rootFs.opfsOps?.() ?? 0,
+        meta: this.rootFs.metaTransactions?.(),
         cwdChecks: this.cwds.checks,
         renameAcks: this.rootFs.renameWaits?.(),
         swaps: this.swaps.counts(),
@@ -33791,7 +34030,7 @@ var Launcher = class {
   }
   list(viewer = ROOT) {
     const members = new Map(this.jobs.list().map((member) => [member.pid, member]));
-    const rootOf = (member) => {
+    const rootOf2 = (member) => {
       let root = member;
       for (let up = members.get(root.execParent ?? -1); up; up = members.get(up.execParent ?? -1)) {
         root = up;
@@ -33800,7 +34039,7 @@ var Launcher = class {
     };
     const shown = (pid) => {
       const member = pid === void 0 ? void 0 : members.get(pid);
-      const root = member && rootOf(member).pid;
+      const root = member && rootOf2(member).pid;
       return root !== void 0 && this.running(root) ? root : INIT_PID;
     };
     const superseded = new Set([...members.values()].map((m) => m.execParent));
@@ -33810,7 +34049,7 @@ var Launcher = class {
       if (member.execed && superseded.has(member.pid) || !described2) continue;
       const cred = this.credOf(member.pid);
       if (!maySee(viewer, cred)) continue;
-      const root = rootOf(member);
+      const root = rootOf2(member);
       const tags = this.tagsOf(member.pid) ?? this.tagsOf(root.pid);
       listed.push({
         pid: root.pid,
@@ -34209,9 +34448,9 @@ var Launcher = class {
     const served2 = serveFilesystem(port2, medium.handlers, FSA_CAPABILITIES);
     const id2 = source.slice("fsa:".length);
     this.removable.set(target, { id: id2, medium, served: served2 });
-    const stored = this.inserted.get(id2) ?? await this.media.get(id2);
-    if (stored && await granted(stored)) medium.insert(stored);
-    else ask(stored);
+    const stored2 = this.inserted.get(id2) ?? await this.media.get(id2);
+    if (stored2 && await granted(stored2)) medium.insert(stored2);
+    else ask(stored2);
     return {
       port: port1,
       present: () => medium.present(),
@@ -34344,7 +34583,7 @@ var Launcher = class {
     const path = normalizePath(given);
     if (!await this.base.exists(path)) return void 0;
     if (path === "/") return path;
-    return joinName(await realDir(this.base, parentOf4(path)), baseName2(path));
+    return joinName(await realDir(this.base, parentOf5(path)), baseName2(path));
   }
   pnpmReady() {
     if (this.pnpmMade !== void 0) return this.pnpmMade;
@@ -35124,11 +35363,24 @@ async function inOpfs(deps, root) {
   return await opfs?.resolve(root).catch(() => null) != null;
 }
 async function rootNamed(deps, req, root) {
-  if (req.metadata !== void 0 || !req.root || !deps.rootId) return req;
+  if (req.metadata !== void 0 || !req.root && !req.rootPath || !deps.rootId) return req;
   const top = await deps.storage().catch(() => void 0);
   const name2 = await metadataName(top, root, deps.rootId);
   return name2 === META_DB ? req : { ...req, metadata: name2 };
 }
+async function rootOf(deps, req) {
+  if (req.root) return req.root;
+  const top = await deps.storage();
+  return req.rootPath ? directoryAt(top, req.rootPath) : top;
+}
+async function insertedHandle(deps, req) {
+  return "path" in req ? directoryAt(await deps.storage(), req.path) : req.handle;
+}
+function crossable(medium) {
+  if (!medium.handle || clonable(medium.handle)) return medium;
+  const { handle: _, ...rest2 } = medium;
+  return rest2;
+}
 function workers(deps) {
   return {
     createWorker: deps.createWorker,
@@ -35411,7 +35663,7 @@ function serveKernel(port, deps) {
     }
   }
   async function init(req) {
-    launcher = (req.root ? Promise.resolve(req.root) : deps.storage()).then(async (root) => {
+    launcher = rootOf(deps, req).then(async (root) => {
       req = await rootNamed(deps, req, root);
       const name2 = req.metadata ?? META_DB;
       const { meta, media } = await stores(deps, name2, req.media);
@@ -35439,7 +35691,7 @@ function serveKernel(port, deps) {
         ...req.approve ? { approve: approvals.ask } : {},
         ...net,
         ...media ? { media } : {},
-        onMountPending: (medium) => port.postMessage({ medium }),
+        onMountPending: (medium) => port.postMessage({ medium: crossable(medium) }),
         ...req.hostfs ? { hostfs: askGrant } : {},
         ...pageHooks(req, port),
         ...mountPolicy(req.processMounts),
@@ -35455,7 +35707,8 @@ function serveKernel(port, deps) {
     const l = await ready2();
     if (req.op === "mount") return l.mount(req.spec);
     if (req.op === "umount") return l.umount(req.target);
-    if (req.op === "insert") return l.insert(req.target, req.handle, req.source);
+    if (req.op === "insert")
+      return l.insert(req.target, await insertedHandle(deps, req), req.source);
     return l.mounts.listed();
   }
   const attestOp = attestOps(port);