@ai-ecoverse/slicc-kernel 1.174.0 → 1.174.2

package/dist/types/sudo.d.ts

@@ -1,8 +1,7 @@
 import type { KernelFs, UsersMode } from './fs/types.js';
 import type { Cred } from './kernel/cred.js';
 import { type UserDb } from './users.js';
-export declare const SUDOERS = "/etc/sudoers";
-export declare const SUDOERS_D = "/etc/sudoers.d";
+export { SUDOERS, SUDOERS_D } from './sudoers.js';
 export declare const SECURE_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 export declare const DEFAULT_SUDOERS = "%sudo Cmnd *\n";
 export declare const SUDO_TIMEOUT_MS = 300000;
@@ -65,20 +64,20 @@ export interface SudoCaller {
     tags?: readonly string[] | undefined;
     tty?: string | null | undefined;
     stdin: SudoStdin;
+    report?: ((line: string) => Promise<void>) | undefined;
 }
-type Pattern = (string | null)[];
-interface Command {
-    path: string;
-    args?: Pattern[];
+export interface VisudoCall {
+    op: 'proc-visudo';
+    files?: {
+        name: string;
+        text: string;
+    }[];
 }
-interface Rule {
-    nopasswd: boolean;
-    who: string;
-    target: string;
-    cwd?: string;
-    stdin?: 'none';
-    cmnd: Command | '*';
+export interface VisudoResult {
+    lines: [1 | 2, string][];
+    ok: boolean;
 }
+export declare function visudoCall(req: Partial<VisudoCall>): VisudoCall | undefined;
 export interface SudoOptions {
     fs: KernelFs;
     users: UserDb;
@@ -91,9 +90,6 @@ export interface SudoOptions {
     timeoutMs?: number | undefined;
     warn?: (message: string) => void;
 }
-export declare function splitWords(text: string): string[] | undefined;
-export declare function quoteWord(word: string): string;
-export declare function parseRule(line: string): Rule | null | undefined;
 export declare class Sudo {
     private readonly o;
     private readonly warned;
@@ -108,6 +104,8 @@ export declare class Sudo {
     private existing;
     private policyFile;
     private policy;
+    private policyRules;
+    check(cred: Cred, call: VisudoCall): Promise<VisudoResult>;
     private groupIds;
     private applies;
     private lookup;
@@ -122,4 +120,3 @@ export declare class Sudo {
     private remember;
     private grant;
 }
-export {};

package/dist/types/sudoers.d.ts

@@ -0,0 +1,37 @@
+export declare const SUDOERS = "/etc/sudoers";
+export declare const SUDOERS_D = "/etc/sudoers.d";
+export declare const NAME: RegExp;
+export declare const KERNEL_SYNTAX = "[NOPASSWD] <user|%group|ALL> [(<target>)] [Cwd <dir>] [Stdin none] Cmnd <command\u2026|*>";
+export declare const SUDOERS_SYNTAX = "<user|%group|ALL> ALL=[(<target>[,<target>\u2026])] [NOPASSWD:] <command\u2026|ALL>";
+export type Pattern = (string | null)[];
+export interface Command {
+    path: string;
+    args?: Pattern[];
+}
+export interface Rule {
+    nopasswd: boolean;
+    who: string;
+    target: string;
+    cwd?: string;
+    stdin?: 'none';
+    cmnd: Command | '*';
+}
+export type PolicyLine = {
+    rules: Rule[];
+} | {
+    error: string;
+} | null;
+export declare function hasControl(text: string): boolean;
+export declare function splitWords(text: string): string[] | undefined;
+export declare function quoteWord(word: string): string;
+export declare function commandMatches(cmnd: Command | '*', argv: readonly string[]): boolean;
+export declare function commandText(cmnd: Command): string;
+export declare function parseLine(line: string, file?: string): PolicyLine;
+export interface PolicyError {
+    line: number;
+    message: string;
+}
+export declare function parsePolicy(text: string, file?: string): {
+    rules: Rule[];
+    errors: PolicyError[];
+};

package/dist/types/time-zone.d.ts

@@ -0,0 +1,11 @@
+export declare const MINUTE_MS = 60000;
+export interface Zone {
+    readonly name: string;
+    offset(at: number): number;
+}
+export declare function canonicalZone(name: unknown): string | undefined;
+export declare function hostTimeZone(): string;
+export declare function systemTimeZone(given: string | undefined, fallback?: string): string;
+export declare const utcZone: Zone;
+export declare function zoneOf(name: string): Zone;
+export declare const MAX_SHIFT_MS: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.174.0",
+  "version": "1.174.2",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -70,7 +70,7 @@
   },
   "devDependencies": {
     "@ai-ecoverse/py-numpy": "2.5.4-4",
-    "@ai-ecoverse/slicc-cdp": "1.45.0",
+    "@ai-ecoverse/slicc-cdp": "1.46.2",
     "@ai-ecoverse/slicc-scrub": "1.1.0",
     "@ai-ecoverse/slicc-shared-web": "2.13.10",
     "@ai-ecoverse/wasi-cargo": "0.99.0-6",
@@ -89,11 +89,11 @@
     "@ai-ecoverse/wasm-tar": "1.35.0-9",
     "@ai-ecoverse/wasm-tls-engine": "4.2.0-12",
     "@ai-ecoverse/wasm-util-linux": "2.42.4-7",
-    "@biomejs/biome": "2.6.3",
-    "@types/node": "26.6.5",
+    "@biomejs/biome": "2.6.4",
+    "@types/node": "26.6.6",
     "acorn": "8.19.0",
     "esbuild": "0.28.2",
-    "fake-indexeddb": "6.2.6",
+    "fake-indexeddb": "6.2.7",
     "lefthook": "2.2.2",
     "monocart-coverage-reports": "3.2.0",
     "pg-gateway": "0.3.0-beta.4",