@ai-ecoverse/slicc-kernel 1.173.4 → 1.174.0

package/dist/process-worker.js

@@ -3118,7 +3118,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     init_captured_globals();
-    KERNEL_VERSION = true ? "1.173.4" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.174.0" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });

package/dist/types/index.d.ts

@@ -44,7 +44,7 @@ export type { JsCred, JsSyncContext, JsSyncFile } from './process/js/js-sync.js'
 export type { JsThread, JsThreadContext, JsThreadSpawnOptions } from './process/js/js-thread.js';
 export type { JsTermios, JsTty, JsTtySize } from './process/js/js-tty.js';
 export type { JsWebSocket, JsWebSocketClose, JsWebSocketMessage, JsWebSocketOptions, } from './process/js/js-websocket.js';
-export type { ApproveHook, SudoAnswer, SudoDenial, SudoRequest } from './sudo.js';
+export type { ApproveHook, SudoAnswer, SudoDenial, SudoRequest, SudoStdin } from './sudo.js';
 export { type FetchTransportOptions, fetchTransport, type HeaderList, type NetworkExit, type NetworkRedirectPolicy, type NetworkRequest, type NetworkResponse, type NetworkTraits, type NetworkTransport, type NetworkWebSocket, type NetworkWebSocketRequest, } from './transport.js';
 export type { Account, AddUser, Group, RemoveUser } from './users.js';
 export interface NetworkOptions {

package/dist/types/kernel/process.d.ts

@@ -6,7 +6,7 @@ import type { MountCall } from '../mount/syscall.js';
 import type { LinkRecord } from '../process/wasi/wasix-linker.js';
 import type { SourceCheck } from '../realm/sync-fs-token-registry.js';
 import type { SyncFsResult } from '../realm/sync-fs-wire.js';
-import type { SudoCall, SudoResult } from '../sudo.js';
+import type { SudoCall, SudoResult, SudoStdin } from '../sudo.js';
 import { type ChildForker, type ChildSpawner, type ChildStdio, type InheritedSlot } from './children.js';
 import type { ClipboardBroker } from './clipboard.js';
 import { type Cred, type CredChange } from './cred.js';
@@ -399,7 +399,7 @@ export interface WasmProcessOptions {
     kill?: (pid: number, sig: number, info?: SigInfo) => boolean | Promise<boolean>;
     writesBack?: (pid: number) => boolean;
     processes?: () => ProcessListing;
-    sudo?: (call: SudoCall, signal: AbortSignal) => Promise<SudoResult>;
+    sudo?: (call: SudoCall, signal: AbortSignal, stdin: SudoStdin) => Promise<SudoResult>;
     crontab?: (call: CrontabCall) => Promise<CrontabResult>;
     openFiles?: Set<VfsNodes>;
     nodes?: VfsNodes;
@@ -582,6 +582,7 @@ export declare class WasmProcess {
     private signalSyscall;
     private reapsChildren;
     private sudo;
+    private stdinKind;
     private mountSyscall;
     private pause;
     private alarm;

package/dist/types/node.d.ts

@@ -33,7 +33,7 @@ export type { ConnectorStamp } from './kernel/socket.js';
 export type { HostfsEvent, HostfsGrant, HostfsGrantHook, HostfsPortGrant, HostfsTransport, } from './mount/hostfs.js';
 export { serveHostfsPort } from './mount/hostfs.js';
 export type { MountEntry, MountSpec } from './mount/mount-fs.js';
-export type { ApproveHook, SudoAnswer, SudoDenial, SudoRequest } from './sudo.js';
+export type { ApproveHook, SudoAnswer, SudoDenial, SudoRequest, SudoStdin } from './sudo.js';
 export type { NetworkRedirectPolicy } from './transport.js';
 export { fetchTransport, type NetworkTransport } from './transport.js';
 export { memoryRoot };

package/dist/types/sudo.d.ts

@@ -22,7 +22,10 @@ export interface SudoRequest {
     createdAt: number;
     expiresAt: number;
     always: boolean;
+    stdin?: SudoStdin;
+    rootOnly?: Record<string, boolean>;
 }
+export type SudoStdin = 'tty' | 'none' | 'pipe' | 'file';
 export type SudoAnswer = 'once' | 'always' | 'deny';
 export interface SudoDenial {
     answer: 'deny';
@@ -54,12 +57,14 @@ export type SudoResult = {
     run: string[];
 } | {
     grant: SudoGrant;
+    notice?: string;
 };
 export interface SudoCaller {
     cred: Cred;
     pid: number;
     tags?: readonly string[] | undefined;
     tty?: string | null | undefined;
+    stdin: SudoStdin;
 }
 type Pattern = (string | null)[];
 interface Command {
@@ -71,6 +76,7 @@ interface Rule {
     who: string;
     target: string;
     cwd?: string;
+    stdin?: 'none';
     cmnd: Command | '*';
 }
 export interface SudoOptions {
@@ -97,6 +103,9 @@ export declare class Sudo {
     private warn;
     provision(): Promise<void>;
     trusted(path: string): Promise<boolean>;
+    private rootOnly;
+    private crossesLink;
+    private existing;
     private policyFile;
     private policy;
     private groupIds;
@@ -107,6 +116,7 @@ export declare class Sudo {
     private untrusted;
     private locate;
     request(caller: SudoCaller, call: SudoCall, signal: AbortSignal): Promise<SudoResult>;
+    private always;
     private listed;
     private ask;
     private remember;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.173.4",
+  "version": "1.174.0",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -95,7 +95,7 @@
     "esbuild": "0.28.2",
     "fake-indexeddb": "6.2.6",
     "lefthook": "2.2.2",
-    "monocart-coverage-reports": "3.1.0",
+    "monocart-coverage-reports": "3.2.0",
     "pg-gateway": "0.3.0-beta.4",
     "semantic-release": "25.0.9",
     "typescript": "7.0.2",