@ai-ecoverse/slicc-kernel 1.174.2 → 1.175.0

package/dist/kernel-worker.js

@@ -8740,7 +8740,7 @@ function satisfies(version, range2) {
 }
 
 // src/version.ts
-var KERNEL_VERSION = true ? "1.174.2" : "0.0.0-dev";
+var KERNEL_VERSION = true ? "1.175.0" : "0.0.0-dev";
 var OS_RELEASE = "6.0.0-slicc";
 function procVersion() {
   return `Linux version ${OS_RELEASE} (slicc-kernel ${KERNEL_VERSION}) #1 SMP PREEMPT_DYNAMIC
@@ -19063,7 +19063,12 @@ function sessionValues(reply, asked) {
 // src/kernel/sealed.ts
 var SEALED_MAX_BYTES = 64 * 1024;
 var SEALED_TIMEOUT_MS = 1e4;
+var SEALED_ASK_TIMEOUT_MS = 305e3;
+var SEALED_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+var SEALED_NAME_MAX = 128;
+var SEALED_PROMPT_MAX = 200;
 var SEALED_OPS = /* @__PURE__ */ new Set([
+  "ask",
   "seal",
   "placeholder",
   "list",
@@ -19078,6 +19083,16 @@ function tagFields(tags) {
   if (tag === void 0) return {};
   return tags.length > 1 ? { tag, tags: [...tags] } : { tag };
 }
+var ASK_FIELDS = /* @__PURE__ */ new Set([
+  "v",
+  "op",
+  "name",
+  "prompt",
+  "reveal",
+  "replace",
+  "caller",
+  "requester"
+]);
 var encoder6 = new TextEncoder();
 var decoder3 = new TextDecoder("utf-8", { fatal: true });
 function parseSealed(bytes) {
@@ -19095,6 +19110,7 @@ function parseSealed(bytes) {
     if (req.v !== 1 || typeof req.op !== "string" || !SEALED_OPS.has(req.op))
       throw new KernelError("EINVAL");
     if (req.op === "materialize" && !materializable(req)) throw new KernelError("EINVAL");
+    if (req.op === "ask" && !askable(req)) throw new KernelError("EINVAL");
     return req;
   } finally {
     bytes.fill(0);
@@ -19104,6 +19120,27 @@ function materializable(req) {
   if (req.shellGrants !== true && !isStrings(req.names)) return false;
   return isStrings(req.argv) && typeof req.path === "string" && typeof req.cwd === "string";
 }
+function askable(req) {
+  if (Object.keys(req).some((key) => !ASK_FIELDS.has(key))) return false;
+  const { name: name2, prompt, reveal, replace } = req;
+  if (typeof name2 !== "string" || name2.length > SEALED_NAME_MAX || !SEALED_NAME.test(name2))
+    return false;
+  if (prompt !== void 0 && (typeof prompt !== "string" || [...prompt].length > SEALED_PROMPT_MAX))
+    return false;
+  return [reveal, replace].every((flag) => flag === void 0 || typeof flag === "boolean");
+}
+function askRequest(fields, caller, requester) {
+  return {
+    v: 1,
+    op: "ask",
+    name: fields.name,
+    ...fields.prompt !== void 0 ? { prompt: fields.prompt } : {},
+    reveal: fields.reveal === true,
+    replace: fields.replace === true,
+    caller,
+    requester
+  };
+}
 function errorReply(code, message3) {
   return { v: 1, error: { code, message: message3 } };
 }
@@ -19136,7 +19173,7 @@ var SealedChannel = class {
     this.broker = broker;
     this.access = access2;
   }
-  send(bytes, caller, gone) {
+  send(bytes, caller, gone, requester = async () => void 0) {
     if (this.access === "read") {
       bytes.fill(0);
       throw new KernelError("EBADF");
@@ -19149,10 +19186,15 @@ var SealedChannel = class {
     const withdraw = () => control.abort("withdrawn");
     if (gone.aborted) withdraw();
     else gone.addEventListener("abort", withdraw, { once: true });
-    const timer = setTimeout(() => control.abort("timeout"), this.broker.timeoutMs);
+    const ask = fields.op === "ask";
+    const timer = setTimeout(
+      () => control.abort(ask ? "expired" : "timeout"),
+      ask ? this.broker.askTimeoutMs : this.broker.timeoutMs
+    );
     const req = { ...fields, v: 1, op: fields.op, caller };
+    const asked = ask ? this.asking(fields, caller, requester, control.signal) : void 0;
     const flight = { control, done: Promise.resolve() };
-    flight.done = this.answer(req, control.signal).then(async (reply) => {
+    flight.done = (asked ?? this.answer(req, control.signal)).then(async (reply) => {
       clearTimeout(timer);
       gone.removeEventListener("abort", withdraw);
       if (reply && req.op === "materialize")
@@ -19164,6 +19206,17 @@ var SealedChannel = class {
     this.inflight = flight;
     return length2;
   }
+  async asking(fields, caller, requester, signal) {
+    const facts = await requester().catch(() => void 0);
+    if (signal.aborted) return this.stopped(signal);
+    if (!facts) return errorReply("EIO", "the kernel has no record of this process");
+    return this.answer(askRequest(fields, caller, facts), signal);
+  }
+  stopped(signal) {
+    if (signal.reason === "timeout")
+      return errorReply("ETIMEDOUT", "the vault did not answer within 10 s");
+    return signal.reason === "expired" ? { v: 1, state: "expired" } : void 0;
+  }
   async answer(req, signal) {
     const hook = this.broker.hook;
     if (!hook) return errorReply("ENOTCONN", "no vault is connected");
@@ -19176,8 +19229,7 @@ var SealedChannel = class {
       (err) => errorReply("EIO", lineOf3(err))
     );
     const reply = await Promise.race([asked, stopped]);
-    if (!signal.aborted) return reply;
-    return signal.reason === "timeout" ? errorReply("ETIMEDOUT", "the vault did not answer within 10 s") : void 0;
+    return signal.aborted ? this.stopped(signal) : reply;
   }
   drop() {
     this.reply?.fill(0);
@@ -19239,7 +19291,9 @@ var SealedBroker = class {
   tagOf;
   tickets = new TicketBook();
   sessions = new SessionScrubs();
+  askTimeoutMs = SEALED_ASK_TIMEOUT_MS;
   userOf = async () => void 0;
+  factsOf = async () => void 0;
   constructor(hook, users, timeoutMs = SEALED_TIMEOUT_MS, tagOf = () => void 0) {
     this.hook = hook;
     this.users = users;
@@ -27626,7 +27680,10 @@ var WasmProcess = class {
   }
   async write(fd, body, nonblock = false, cancelled) {
     const file = this.fds.get(fd).file;
-    if (file.sealed) return file.sealed.send(body, await this.sealedCaller(), this.gone.signal);
+    if (file.sealed) {
+      const caller = await this.sealedCaller();
+      return file.sealed.send(body, caller, this.gone.signal, () => this.sealedRequester());
+    }
     if (!file.write) throw new KernelError("EBADF");
     if (file.embedder) return this.writeEmbedder(file, body, nonblock, cancelled);
     if (!pollFile(file).writable) {
@@ -27831,6 +27888,10 @@ var WasmProcess = class {
     const ids = { pid: shown2?.pid ?? this.pid, ppid: shown2?.ppid ?? 0 };
     return broker.stamp(ids, this.cred, broker.tagOf(this.pid));
   }
+  async sealedRequester() {
+    const facts = await this.options.sealed.factsOf(this.pid);
+    return facts && { ...facts, stdin: this.stdinKind() };
+  }
   guarded() {
     const { guard: guard2 } = this.options;
     return guard2 && { fs: guard2.fs, dac: guard2.dac, cred: this.cred, pid: this.pid, links: guard2.links };
@@ -32738,6 +32799,122 @@ function refusing(command) {
   };
 }
 
+// src/sealed-command.ts
+var SEALED_BIN = "/usr/bin/sealed";
+var SEALED_COMMAND = {
+  name: "sealed",
+  abi: "js",
+  glue: SEALED_BIN,
+  wasm: SEALED_BIN,
+  argv0: "sealed"
+};
+var SEALED_SOURCE = `export default async function sealed(ctx) {
+  const USAGE = "usage: sealed ask NAME [--prompt TEXT] [--reveal] [--replace]\\n       sealed placeholder NAME\\n       sealed list [--json]\\n";
+  const NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+  const EXIT = { EINVAL: 2, EACCES: 3, EAGAIN: 4, ETIMEDOUT: 124 };
+  const say = (fd, text) => ctx.write(fd, text).catch(() => undefined);
+  const fail = async (status, text) => {
+    await say(2, "sealed: " + text + "\\n");
+    return status;
+  };
+  const usage = async (text) => {
+    if (text !== undefined) await say(2, "sealed: " + text + "\\n");
+    await say(2, USAGE);
+    return 2;
+  };
+  const [action, ...args] = ctx.argv.slice(1);
+  if (action === undefined || action === "-h" || action === "--help") return usage();
+  let name;
+  let prompt;
+  let reveal = false;
+  let replace = false;
+  let asJson = false;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (action === "ask" && arg === "--prompt") {
+      prompt = args[++i];
+      if (prompt === undefined) return usage("--prompt needs a text");
+    } else if (action === "ask" && arg.startsWith("--prompt=")) prompt = arg.slice(9);
+    else if (action === "ask" && arg === "--reveal") reveal = true;
+    else if (action === "ask" && arg === "--replace") replace = true;
+    else if (action === "list" && arg === "--json") asJson = true;
+    else if (action !== "list" && name === undefined && !arg.startsWith("-")) name = arg;
+    else return usage("unexpected argument " + JSON.stringify(arg));
+  }
+  let request;
+  if (action === "ask" || action === "placeholder") {
+    if (name === undefined) return usage("a NAME is needed");
+    if (name.length > 128 || !NAME.test(name)) return fail(2, JSON.stringify(name) + " is not a valid name");
+    if (prompt !== undefined && [...prompt].length > 200) return fail(2, "the prompt is longer than 200 characters");
+    request = action === "ask"
+      ? { v: 1, op: "ask", name, ...(prompt !== undefined ? { prompt } : {}), reveal, replace }
+      : { v: 1, op: "placeholder", name };
+  } else if (action === "list") request = { v: 1, op: "list" };
+  else return usage("unknown command " + JSON.stringify(action));
+  let reply;
+  try {
+    reply = await exchange(request);
+  } catch (err) {
+    const code = err && err.code ? err.code : String(err);
+    return fail(EXIT[code] ?? 1, "/dev/sealed: " + code);
+  }
+  if (reply.error !== undefined) {
+    const code = String(reply.error && reply.error.code);
+    const message = reply.error && reply.error.message ? reply.error.message : code;
+    return fail(EXIT[code] ?? 1, (name !== undefined ? name + ": " : "") + message);
+  }
+  const newline = (await ctx.isatty(1).catch(() => false)) ? "\\n" : "";
+  if (action === "list") {
+    const secrets = Array.isArray(reply.secrets) ? reply.secrets : [];
+    if (asJson) {
+      await say(1, JSON.stringify(secrets) + "\\n");
+      return 0;
+    }
+    await say(1, secrets.map((s) => s.name + "\\t" + s.placeholder + "\\t" + s.state + "\\n").join(""));
+    return 0;
+  }
+  if (action === "placeholder") {
+    if (typeof reply.placeholder !== "string") return fail(1, name + ": the vault gave no placeholder");
+    await say(1, reply.placeholder + newline);
+    return 0;
+  }
+  if (reply.state === "cancelled") return fail(1, name + ": cancelled");
+  if (reply.state === "expired") return fail(124, name + ": the request expired");
+  if (reply.state !== "done") return fail(1, name + ": the vault gave no answer");
+  const out = reveal ? reply.value : reply.placeholder;
+  if (typeof out !== "string") return fail(1, name + ": the vault gave no " + (reveal ? "value" : "placeholder"));
+  await say(1, out + newline);
+  return 0;
+
+  async function exchange(req) {
+    const file = await ctx.open("/dev/sealed", { read: true, write: true });
+    try {
+      await ctx.write(file.fd, JSON.stringify(req));
+      const parts = [];
+      for (;;) {
+        const chunk = await ctx.read(file.fd, 65536);
+        if (chunk.length === 0) break;
+        parts.push(chunk);
+      }
+      const bytes = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+      let at = 0;
+      for (const part of parts) {
+        bytes.set(part, at);
+        at += part.length;
+        part.fill(0);
+      }
+      const text = new TextDecoder().decode(bytes);
+      bytes.fill(0);
+      const parsed = JSON.parse(text);
+      if (typeof parsed !== "object" || parsed === null) throw Object.assign(new Error("EIO"), { code: "EIO" });
+      return parsed;
+    } finally {
+      await file.close().catch(() => undefined);
+    }
+  }
+}
+`;
+
 // src/sudo-command.ts
 var SUDO_PATH = "/usr/bin/sudo";
 var SUDO_COMMAND = {
@@ -32951,7 +33128,7 @@ var LAYOUT = [
   ["/usr", 493],
   ["/usr/local", 493]
 ];
-var IN_TREE = /* @__PURE__ */ new Set([SUDO_PATH, VISUDO_PATH, CRONTAB_PATH]);
+var IN_TREE = /* @__PURE__ */ new Set([SUDO_PATH, VISUDO_PATH, CRONTAB_PATH, SEALED_BIN]);
 var LOAD_SAMPLE_MS = 5e3;
 var LOAD_WINDOWS_MS = [6e4, 3e5, 9e5];
 var encoder10 = new TextEncoder();
@@ -33080,6 +33257,7 @@ function expandDefaults(defaults2, env) {
 function targetOf(command) {
   return {
     abi: command.abi,
+    command: command.name,
     glue: command.glue,
     wasm: command.wasm,
     argv0: command.argv0,
@@ -33176,6 +33354,8 @@ var Launcher = class {
   orphans = /* @__PURE__ */ new Set();
   described = /* @__PURE__ */ new Map();
   creds = /* @__PURE__ */ new Map();
+  programs = /* @__PURE__ */ new Map();
+  cwdPaths = /* @__PURE__ */ new Map();
   tags = /* @__PURE__ */ new Map();
   sessions = /* @__PURE__ */ new Map();
   tagBases = /* @__PURE__ */ new Map();
@@ -33503,7 +33683,7 @@ var Launcher = class {
         this.refusedOf.set(commands, refused4.map(refusing));
         return commands;
       }).then(
-        (commands) => this.refusals(commands).set(SUDO_COMMAND.name, SUDO_COMMAND).set(VISUDO_COMMAND.name, VISUDO_COMMAND).set(CRONTAB_COMMAND.name, CRONTAB_COMMAND)
+        (commands) => this.refusals(commands).set(SUDO_COMMAND.name, SUDO_COMMAND).set(VISUDO_COMMAND.name, VISUDO_COMMAND).set(CRONTAB_COMMAND.name, CRONTAB_COMMAND).set(SEALED_COMMAND.name, SEALED_COMMAND)
       );
       this.catalogs.set(scope, found);
     }
@@ -34276,6 +34456,9 @@ var Launcher = class {
     if (target.abi === "js" && target.wasm === CRONTAB_PATH) {
       return { abi: "js", glue: CRONTAB_SOURCE, path: CRONTAB_PATH };
     }
+    if (target.abi === "js" && target.wasm === SEALED_BIN) {
+      return { abi: "js", glue: SEALED_SOURCE, path: SEALED_BIN };
+    }
     if (target.abi === "js" && target.wasm === REFUSED_PATH) {
       return { abi: "js", glue: REFUSED_SOURCE, path: REFUSED_PATH };
     }
@@ -34334,6 +34517,7 @@ var Launcher = class {
           argv0: target.argv0,
           exe: target.copy ?? target.glue,
           ...exeId,
+          ...target.command !== void 0 && target.copy === void 0 ? { command: target.command } : {},
           args,
           env,
           cwdSlot
@@ -34450,6 +34634,8 @@ var Launcher = class {
     if (session) this.sessions.set(pid, session);
     if (req.tags?.length) this.tagBases.set(pid, req.tagBase ?? req.tags.length);
     if (req.links !== void 0) this.links.set(pid, req.links);
+    if (req.command !== void 0) this.programs.set(pid, req.command);
+    this.cwdPaths.set(pid, req.cwd);
   }
   async admitted(wasm, fds, start2) {
     for (; ; ) {
@@ -34618,6 +34804,7 @@ var Launcher = class {
     void handle.exited.then(() => {
       this.cwds.release(this.cwdSlots.get(pid));
       this.cwdSlots.delete(pid);
+      this.cwdPaths.delete(pid);
       this.freshModules.forget(pid);
       const spent = handle.times?.();
       if (spent) this.spent.set(pid, spent);
@@ -34651,6 +34838,7 @@ var Launcher = class {
     }
     this.jobs.remove(pid);
     this.described.delete(pid);
+    this.programs.delete(pid);
     const spent = this.spent.get(pid);
     if (spent) {
       this.reapedTimes.utime += spent.utime;
@@ -34950,7 +35138,21 @@ var Launcher = class {
       cwdChdir: (path) => this.chdirHeld(pid, path)
     };
   }
+  async processFacts(pid) {
+    const described2 = this.described.get(pid);
+    const cwd = this.cwdPaths.get(pid);
+    if (!described2 || described2.exe === void 0 || cwd === void 0) return void 0;
+    const real = (path) => physicalPathAsync(this.base, path).catch(() => path);
+    const command = this.programs.get(pid);
+    return {
+      exe: command !== void 0 ? `/usr/bin/${command}` : await real(described2.exe),
+      argv: [...described2.argv],
+      cwd: await real(cwd),
+      tty: described2.tty
+    };
+  }
   async chdirHeld(pid, path) {
+    this.cwdPaths.set(pid, path);
     this.cwds.release(this.cwdSlots.get(pid));
     const slot2 = await this.cwds.hold(path);
     this.cwdSlots.set(pid, slot2);
@@ -35014,6 +35216,7 @@ var Launcher = class {
   wireSealed() {
     this.sealed.tickets.normalise = (path) => physicalPathAsync(this.base, path);
     this.sealed.userOf = async (uid) => (await this.users.lookup(uid))?.name;
+    this.sealed.factsOf = (pid) => this.processFacts(pid);
   }
   embedderBroker(hook) {
     const broker = new EmbedderBroker(