@ai-ecoverse/slicc-kernel 1.175.1 → 1.176.0

package/dist/process-worker.js

@@ -3118,7 +3118,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     init_captured_globals();
-    KERNEL_VERSION = true ? "1.175.1" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.176.0" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });

package/dist/types/fs/dac.d.ts

@@ -8,6 +8,7 @@ export interface Denial {
     path: string;
     errno: string;
     tag?: string;
+    kind?: string;
     expected?: string;
     actual?: string;
 }

package/dist/types/index.d.ts

@@ -16,7 +16,7 @@ import type { MountEntry, MountSpec } from './mount/mount-fs.js';
 import type { ProcessMountPolicy } from './mount/syscall.js';
 import type { ApproveHook } from './sudo.js';
 import { type NetworkTransport } from './transport.js';
-import type { Account, AddUser, Group, RemoveUser } from './users.js';
+import type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export type { CdpConnection, CdpHook, CdpRequest } from './cdp/types.js';
 export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type WatchChange, } from './client/attach.js';
 export type { DialledSocket, DialOptions } from './client/dial-stream.js';
@@ -46,7 +46,7 @@ export type { JsTermios, JsTty, JsTtySize } from './process/js/js-tty.js';
 export type { JsWebSocket, JsWebSocketClose, JsWebSocketMessage, JsWebSocketOptions, } from './process/js/js-websocket.js';
 export type { ApproveHook, SudoAnswer, SudoDenial, SudoRequest, SudoStdin } from './sudo.js';
 export { type FetchTransportOptions, fetchTransport, type HeaderList, type NetworkExit, type NetworkRedirectPolicy, type NetworkRequest, type NetworkResponse, type NetworkTraits, type NetworkTransport, type NetworkWebSocket, type NetworkWebSocketRequest, } from './transport.js';
-export type { Account, AddUser, Group, RemoveUser } from './users.js';
+export type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export interface NetworkOptions {
     transport?: NetworkTransport;
     uplink?: NetworkUplink;
@@ -107,6 +107,7 @@ export interface ConnectOptions {
 }
 export interface KernelGroups {
     list(): Promise<Group[]>;
+    add(name: string, options: AddGroup): Promise<Group>;
     addMember(group: string, user: string): Promise<Group>;
     removeMember(group: string, user: string): Promise<Group>;
 }

package/dist/types/kernel/embedder.d.ts

@@ -1,3 +1,4 @@
+import type { DenialHook } from '../fs/dac.js';
 import type { UsersMode } from '../fs/types.js';
 import { KernelError, type OpenAccess, OpenFile, type PollState } from './fd-table.js';
 export declare const EMBEDDER_PATH = "/dev/embedder";
@@ -20,6 +21,7 @@ export interface EmbedderStamp {
 export interface EmbedderKindPolicy {
     group?: string;
     users?: Array<string | number>;
+    session?: boolean;
 }
 export type EmbedderReply = ReadableStream<Uint8Array> | Uint8Array | string | undefined | void;
 export interface EmbedderRequest {
@@ -94,6 +96,7 @@ export declare class EmbedderBroker {
     private readonly budget;
     private readonly open;
     readonly tagsOf: (pid: number) => readonly string[] | undefined;
+    denied: DenialHook | undefined;
     constructor(users: UsersMode, lookup: EmbedderLookup, tagsOf?: (pid: number) => readonly string[] | undefined, budget?: number);
     register(client: number, hook: EmbedderHook | undefined): () => void;
     hookFor(client: number): EmbedderHook | undefined;

package/dist/types/serve.d.ts

@@ -109,6 +109,11 @@ export type UsersRequest = {
 } | {
     id: number;
     op: 'groups-list';
+} | {
+    id: number;
+    op: 'groups-add';
+    name: string;
+    gid: number;
 } | {
     id: number;
     op: 'groups-add-member' | 'groups-remove-member';

package/dist/types/users.d.ts

@@ -3,7 +3,7 @@ import { type Cred } from './kernel/cred.js';
 export declare const PASSWD = "/etc/passwd";
 export declare const GROUP = "/etc/group";
 export declare const DEFAULT_PASSWD = "root:x:0:0:root:/root:/bin/bash\nnobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin\n";
-export declare const DEFAULT_GROUP = "root:x:0:\nsudo:x:27:\nusers:x:100:\nnogroup:x:65534:\n";
+export declare const DEFAULT_GROUP = "root:x:0:\ndialout:x:20:\nsudo:x:27:\nusers:x:100:\nnogroup:x:65534:\n";
 export declare const SYSTEM_PNPM_HOME = "/usr/local/share/pnpm";
 export declare const PNPM_CONFIG = "minimumReleaseAge: 1440\n";
 export interface Account {
@@ -23,6 +23,9 @@ export interface AddUser {
     homeGroup?: string;
     homeMode?: number;
 }
+export interface AddGroup {
+    gid: number;
+}
 export interface Group {
     name: string;
     gid: number;
@@ -78,6 +81,7 @@ export declare class UserDb {
     list(): Promise<Account[]>;
     add(options: AddUser): Promise<Account>;
     groups(): Promise<Group[]>;
+    addGroup(name: string, gid: number): Promise<Group>;
     addMember(group: string, user: string): Promise<Group>;
     removeMember(group: string, user: string): Promise<Group>;
     private member;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.175.1",
+  "version": "1.176.0",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",