@ai-ecoverse/slicc-kernel 1.172.2 → 1.173.1

package/dist/node.js

@@ -3702,7 +3702,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.172.2" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.173.1" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -7842,6 +7842,7 @@ var FsWatchers = class {
     const watcher = {
       paths: paths.map(normalizePath),
       recursive: options.recursive === true,
+      peers: options.peers === true,
       notify,
       pending: /* @__PURE__ */ new Set(),
       scheduled: false
@@ -7963,10 +7964,16 @@ var FsWatchers = class {
     this.report(paths);
     this.emit("change", paths);
   }
+  peerChanged(paths) {
+    if (paths.length > 0) this.notify(paths, true);
+  }
   report(paths, notify = true) {
     for (const tap of this.taps) tap(paths);
-    if (!notify) return;
+    if (notify) this.notify(paths);
+  }
+  notify(paths, peer = false) {
     for (const watcher of this.watchers) {
+      if (peer && !watcher.peers) continue;
       for (const path of paths) {
         const changed = normalizePath(path);
         if (touches(watcher, changed)) watcher.pending.add(changed);
@@ -12376,6 +12383,8 @@ var SYS_TREE = {
     slicc_opfs_calls: (listing) => `${listing.opfsCalls ?? 0}
 `,
     slicc_opfs_ops: (listing) => `${listing.opfsOps ?? 0}
+`,
+    slicc_meta_transactions: ({ meta }) => `${meta?.reads ?? 0} ${meta?.writes ?? 0}
 `,
     slicc_cwd_checks: (listing) => `${listing.cwdChecks ?? 0}
 `,
@@ -26355,6 +26364,7 @@ function sidecar(meta) {
   };
   if (meta.absent) ops.absent = meta.absent.bind(meta);
   if (meta.forgetTrees) ops.forgetTrees = meta.forgetTrees.bind(meta);
+  if (meta.transactions) ops.transactions = meta.transactions.bind(meta);
   const { removeFile } = meta;
   if (removeFile)
     ops.removeFile = (path) => removeFile.call(meta, path).catch((err) => {
@@ -26921,6 +26931,9 @@ var OpfsFs = class {
   opfsOps() {
     return this.calls + this.others;
   }
+  metaTransactions() {
+    return this.meta.transactions?.();
+  }
   io(request) {
     this.others++;
     return request;
@@ -30664,6 +30677,104 @@ function splitWords(text) {
 function quoteWord(word) {
   return PLAIN3.test(word) ? word : `'${word.replaceAll("'", `'\\''`)}'`;
 }
+function addPart(word, part) {
+  const last = word.length - 1;
+  if (part === null) {
+    if (word[last] !== null) word.push(null);
+  } else if (typeof word[last] === "string") word[last] += part;
+  else word.push(part);
+}
+function addPlain(word, plain3) {
+  for (const [i, part] of plain3.split("*").entries()) {
+    if (i > 0) addPart(word, null);
+    if (part !== "") addPart(word, part);
+  }
+}
+function splitPatterns(text) {
+  const piece = /'([^']*)'|"((?:[^"\\]|\\[\s\S])*)"|\\([\s\S])|([^\s'"\\]+)|(\s+)/y;
+  const words2 = [];
+  let word;
+  while (piece.lastIndex < text.length) {
+    const m = piece.exec(text);
+    if (!m) return void 0;
+    const [, single, double, escaped, plain3, space] = m;
+    if (space !== void 0) {
+      if (word !== void 0) words2.push(word);
+      word = void 0;
+      continue;
+    }
+    word ??= [];
+    if (plain3 !== void 0) addPlain(word, plain3);
+    else addPart(word, single ?? (double !== void 0 ? unescaped(double) : escaped));
+  }
+  if (word !== void 0) words2.push(word);
+  return words2;
+}
+var literal2 = (pattern) => pattern.map((p) => p ?? "*").join("");
+var isAny = (pattern) => pattern?.length === 1 && pattern[0] === null;
+function literalWord(word) {
+  if (!word.includes("*")) return quoteWord(word);
+  const bare = word.replaceAll("*", "");
+  return bare === "" || PLAIN3.test(bare) ? word.replaceAll("*", "\\*") : quoteWord(word);
+}
+function patternWord(pattern) {
+  if (pattern.length === 1 && typeof pattern[0] === "string") return literalWord(pattern[0]);
+  return pattern.map((p) => p === null ? "*" : literalWord(p)).join("");
+}
+function globMatch(items, subjects, star, one) {
+  let i = 0;
+  let j = 0;
+  let back = -1;
+  let from = 0;
+  while (j < subjects) {
+    if (i < items && star(i)) {
+      back = i++;
+      from = j;
+    } else if (i < items && one(i, j)) {
+      i++;
+      j++;
+    } else if (back >= 0) {
+      i = back + 1;
+      j = ++from;
+    } else return false;
+  }
+  while (i < items && star(i)) i++;
+  return i === items;
+}
+function wordMatch(pattern, arg) {
+  if (pattern.every((p) => p !== null)) return literal2(pattern) === arg;
+  const chars = pattern.flatMap((p) => p === null ? [null] : [...p]);
+  const subject = [...arg];
+  return globMatch(
+    chars.length,
+    subject.length,
+    (i) => chars[i] === null,
+    (i, j) => chars[i] === subject[j]
+  );
+}
+function commandMatches(cmnd, argv) {
+  if (cmnd === "*") return true;
+  const [path, ...args] = argv;
+  if (path !== cmnd.path) return false;
+  const want = cmnd.args;
+  if (want === void 0) return true;
+  return globMatch(
+    want.length,
+    args.length,
+    (i) => isAny(want[i]),
+    (i, j) => wordMatch(want[i], args[j])
+  );
+}
+function commandText(cmnd) {
+  const path = quoteWord(cmnd.path);
+  if (cmnd.args === void 0) return path;
+  if (cmnd.args.length === 0) return `${path} ""`;
+  return [path, ...cmnd.args.map(patternWord)].join(" ");
+}
+function recordedCommand(argv) {
+  const [path = "", ...args] = argv;
+  return commandText({ path, args: args.map((a) => [a]) });
+}
 function validWho(who) {
   if (who === "ALL") return true;
   return NAME3.test(who.startsWith("%") ? who.slice(1) : who);
@@ -30684,9 +30795,23 @@ function parseRule(line) {
   if (cwd === "") return void 0;
   const rule = { nopasswd: !!nopasswd, who, target, ...cwd !== void 0 ? { cwd } : {} };
   if (rest2.trim() === "*") return { ...rule, cmnd: "*" };
-  const cmnd = splitWords(rest2);
-  if (!cmnd?.[0]?.startsWith("/")) return void 0;
-  return { ...rule, cmnd };
+  const words2 = splitPatterns(rest2);
+  const [first, ...args] = words2 ?? [];
+  const path = first ? literal2(first) : "";
+  if (!path.startsWith("/")) return void 0;
+  const only = args.length === 1 && args[0]?.length === 1 && args[0][0] === "";
+  if (only && /\s""$/.test(rest2.trim())) return { ...rule, cmnd: { path, args: [] } };
+  return { ...rule, cmnd: args.length === 0 ? { path } : { path, args } };
+}
+function recordedBare(line, file, rule) {
+  if (rule.cmnd === "*" || rule.cmnd.args !== void 0 || !rule.nopasswd) return false;
+  if (file !== `${SUDOERS_D}/${rule.who}` || !NAME3.test(rule.who) || !NAME3.test(rule.target)) {
+    return false;
+  }
+  const head = `NOPASSWD ${rule.who} (${rule.target}) `;
+  const cmnd = `Cmnd ${quoteWord(rule.cmnd.path)}`;
+  const cwd = rule.cwd === void 0 ? "" : `Cwd ${quoteWord(rule.cwd)} `;
+  return line === `${head}${cwd}${cmnd}`;
 }
 function flags(parsed2, arg, next3) {
   for (let j = 1; j < arg.length; j++) {
@@ -30724,7 +30849,7 @@ function parseArgs(args) {
   return parsed2;
 }
 function described(rule) {
-  const cmnd = rule.cmnd === "*" ? "ALL" : rule.cmnd.map(quoteWord).join(" ");
+  const cmnd = rule.cmnd === "*" ? "ALL" : commandText(rule.cmnd);
   const cwd = rule.cwd === void 0 ? "" : `CWD=${quoteWord(rule.cwd)} `;
   return `    (${rule.target}) ${cwd}${rule.nopasswd ? "NOPASSWD: " : ""}${cmnd}`;
 }
@@ -30770,7 +30895,9 @@ var Sudo = class {
     const rules = [];
     for (const [n, line] of text.split("\n").entries()) {
       const rule = parseRule(line);
-      if (rule) rules.push(rule);
+      if (rule && recordedBare(line, path, rule) && rule.cmnd !== "*") {
+        rules.push({ ...rule, cmnd: { path: rule.cmnd.path, args: [] } });
+      } else if (rule) rules.push(rule);
       else if (rule === void 0) this.warn(`sudo: ${path}:${n + 1}: bad line skipped: ${line}`);
     }
     return rules;
@@ -30866,7 +30993,7 @@ var Sudo = class {
     if (untrusted2) return untrusted2;
     const argv = [path, ...args];
     const matching = rules.filter(
-      (rule) => applies(rule) && (rule.target === "ALL" || rule.target === target.name) && (rule.cwd === void 0 || rule.cwd === cwd) && (rule.cmnd === "*" || rule.cmnd.length === argv.length && rule.cmnd.every((w, i) => w === argv[i]))
+      (rule) => applies(rule) && (rule.target === "ALL" || rule.target === target.name) && (rule.cwd === void 0 || rule.cwd === cwd) && commandMatches(rule.cmnd, argv)
     );
     const grant = () => this.grant(self, target, cred, parsed2.command, path, cwd, call.term);
     if (root || matching.some((rule) => rule.nopasswd)) return grant();
@@ -30963,7 +31090,7 @@ ${lines2}
       const st = await fs.lstat(path).catch(() => void 0);
       if (st && !await this.trusted(path)) return false;
       const old = st ? await fs.readFile(path) : "";
-      const words2 = argv.map(quoteWord).join(" ");
+      const words2 = recordedCommand(argv);
       const line = `NOPASSWD ${self.name} (${target.name}) Cwd ${quoteWord(cwd)} Cmnd ${words2}
 `;
       const text = old === "" || old.endsWith("\n") ? `${old}${line}` : `${old}
@@ -31767,6 +31894,7 @@ var Launcher = class {
     this.rewritten(change.paths, change.trees);
     this.watchers.heard(change.content ? "change" : "rename", change.paths);
     this.watchers.heard("rename", change.trees ?? []);
+    this.watchers.peerChanged([...change.paths, ...change.trees ?? []]);
     if (change.outside && this.catalogChanged([...change.paths, ...change.trees ?? []])) {
       this.resetCatalogs();
     }
@@ -32721,6 +32849,7 @@ var Launcher = class {
         fsCalls: servedFsCalls(),
         opfsCalls: this.rootFs.opfsCalls?.() ?? 0,
         opfsOps: this.rootFs.opfsOps?.() ?? 0,
+        meta: this.rootFs.metaTransactions?.(),
         cwdChecks: this.cwds.checks,
         renameAcks: this.rootFs.renameWaits?.(),
         swaps: this.swaps.counts(),
@@ -34774,7 +34903,7 @@ async function watchOp(l, req, watches, send2, g) {
   }
   if (g) for (const path of req.paths) await readable(g, "watch", l.fs.resolvePath("/", path));
   const notify = visibleTo2(g, (change) => send2({ watch: req.id, change }));
-  const unwatch = l.watchers.watch(req.paths, { recursive: req.recursive }, notify);
+  const unwatch = l.watchers.watch(req.paths, { recursive: req.recursive, peers: true }, notify);
   watches.set(req.id, unwatch);
   return { result: req.id };
 }