@ai-ecoverse/slicc-kernel 1.175.1 → 1.176.1

package/dist/types/fs/dac.d.ts

@@ -8,6 +8,7 @@ export interface Denial {
     path: string;
     errno: string;
     tag?: string;
+    kind?: string;
     expected?: string;
     actual?: string;
 }

package/dist/types/index.d.ts

@@ -16,7 +16,7 @@ import type { MountEntry, MountSpec } from './mount/mount-fs.js';
 import type { ProcessMountPolicy } from './mount/syscall.js';
 import type { ApproveHook } from './sudo.js';
 import { type NetworkTransport } from './transport.js';
-import type { Account, AddUser, Group, RemoveUser } from './users.js';
+import type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export type { CdpConnection, CdpHook, CdpRequest } from './cdp/types.js';
 export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type WatchChange, } from './client/attach.js';
 export type { DialledSocket, DialOptions } from './client/dial-stream.js';
@@ -46,7 +46,7 @@ export type { JsTermios, JsTty, JsTtySize } from './process/js/js-tty.js';
 export type { JsWebSocket, JsWebSocketClose, JsWebSocketMessage, JsWebSocketOptions, } from './process/js/js-websocket.js';
 export type { ApproveHook, SudoAnswer, SudoDenial, SudoRequest, SudoStdin } from './sudo.js';
 export { type FetchTransportOptions, fetchTransport, type HeaderList, type NetworkExit, type NetworkRedirectPolicy, type NetworkRequest, type NetworkResponse, type NetworkTraits, type NetworkTransport, type NetworkWebSocket, type NetworkWebSocketRequest, } from './transport.js';
-export type { Account, AddUser, Group, RemoveUser } from './users.js';
+export type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export interface NetworkOptions {
     transport?: NetworkTransport;
     uplink?: NetworkUplink;
@@ -107,6 +107,7 @@ export interface ConnectOptions {
 }
 export interface KernelGroups {
     list(): Promise<Group[]>;
+    add(name: string, options: AddGroup): Promise<Group>;
     addMember(group: string, user: string): Promise<Group>;
     removeMember(group: string, user: string): Promise<Group>;
 }

package/dist/types/kernel/embedder.d.ts

@@ -1,3 +1,4 @@
+import type { DenialHook } from '../fs/dac.js';
 import type { UsersMode } from '../fs/types.js';
 import { KernelError, type OpenAccess, OpenFile, type PollState } from './fd-table.js';
 export declare const EMBEDDER_PATH = "/dev/embedder";
@@ -20,6 +21,7 @@ export interface EmbedderStamp {
 export interface EmbedderKindPolicy {
     group?: string;
     users?: Array<string | number>;
+    session?: boolean;
 }
 export type EmbedderReply = ReadableStream<Uint8Array> | Uint8Array | string | undefined | void;
 export interface EmbedderRequest {
@@ -94,6 +96,7 @@ export declare class EmbedderBroker {
     private readonly budget;
     private readonly open;
     readonly tagsOf: (pid: number) => readonly string[] | undefined;
+    denied: DenialHook | undefined;
     constructor(users: UsersMode, lookup: EmbedderLookup, tagsOf?: (pid: number) => readonly string[] | undefined, budget?: number);
     register(client: number, hook: EmbedderHook | undefined): () => void;
     hookFor(client: number): EmbedderHook | undefined;

package/dist/types/realm/live-vfs-fs.d.ts

@@ -146,11 +146,15 @@ export interface LiveMountFsApi extends LiveFsApi {
     }): {
         node: object;
     };
+    cwd?(): string;
     sliccRename?: true;
+    sliccCreateParent?: true;
     sliccKept?: true;
     sliccStale?: true;
     sliccVanished?: true;
     open?(path: string, flags: number, mode?: number): unknown;
+    mkdir?(path: string, mode?: number): unknown;
+    symlink?(target: string, path: string): unknown;
     statfsNode?(node: LiveFsNode): Record<string, number>;
     sliccStatfs?: true;
     filesystems: {
@@ -168,6 +172,7 @@ type MemfsRoot = LiveFsNode & {
     memfs?: LiveNodeOps;
 };
 export declare function liveRoot(Fs: LiveMountFsApi, bridge: SyncFsPosixBridge): void;
+export declare function createParentRefreshCount(): number;
 export interface LiveChownFs extends LiveFsApi {
     lookupPath(path: string, opts?: {
         follow?: boolean;

package/dist/types/serve.d.ts

@@ -109,6 +109,11 @@ export type UsersRequest = {
 } | {
     id: number;
     op: 'groups-list';
+} | {
+    id: number;
+    op: 'groups-add';
+    name: string;
+    gid: number;
 } | {
     id: number;
     op: 'groups-add-member' | 'groups-remove-member';

package/dist/types/users.d.ts

@@ -3,7 +3,7 @@ import { type Cred } from './kernel/cred.js';
 export declare const PASSWD = "/etc/passwd";
 export declare const GROUP = "/etc/group";
 export declare const DEFAULT_PASSWD = "root:x:0:0:root:/root:/bin/bash\nnobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin\n";
-export declare const DEFAULT_GROUP = "root:x:0:\nsudo:x:27:\nusers:x:100:\nnogroup:x:65534:\n";
+export declare const DEFAULT_GROUP = "root:x:0:\ndialout:x:20:\nsudo:x:27:\nusers:x:100:\nnogroup:x:65534:\n";
 export declare const SYSTEM_PNPM_HOME = "/usr/local/share/pnpm";
 export declare const PNPM_CONFIG = "minimumReleaseAge: 1440\n";
 export interface Account {
@@ -23,6 +23,9 @@ export interface AddUser {
     homeGroup?: string;
     homeMode?: number;
 }
+export interface AddGroup {
+    gid: number;
+}
 export interface Group {
     name: string;
     gid: number;
@@ -78,6 +81,7 @@ export declare class UserDb {
     list(): Promise<Account[]>;
     add(options: AddUser): Promise<Account>;
     groups(): Promise<Group[]>;
+    addGroup(name: string, gid: number): Promise<Group>;
     addMember(group: string, user: string): Promise<Group>;
     removeMember(group: string, user: string): Promise<Group>;
     private member;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.175.1",
+  "version": "1.176.1",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -70,7 +70,7 @@
   },
   "devDependencies": {
     "@ai-ecoverse/py-numpy": "2.5.4-4",
-    "@ai-ecoverse/slicc-cdp": "1.46.5",
+    "@ai-ecoverse/slicc-cdp": "1.46.7",
     "@ai-ecoverse/slicc-scrub": "1.1.0",
     "@ai-ecoverse/slicc-shared-web": "2.13.10",
     "@ai-ecoverse/wasi-cargo": "0.99.0-6",
@@ -78,7 +78,7 @@
     "@ai-ecoverse/wasi-ripgrep": "15.2.0-5",
     "@ai-ecoverse/wasi-rustc": "1.98.1-10",
     "@ai-ecoverse/wasi-zig": "0.16.0-20",
-    "@ai-ecoverse/wasix-python": "3.15.0-6",
+    "@ai-ecoverse/wasix-python": "3.15.0-7",
     "@ai-ecoverse/wasm-bash": "5.3.0-23",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-15",
     "@ai-ecoverse/wasm-curl": "8.22.0-10",