@ai-ecoverse/slicc-kernel 1.179.0 → 1.181.0

package/dist/process-worker.js

@@ -3180,7 +3180,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     init_captured_globals();
-    KERNEL_VERSION = true ? "1.179.0" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.181.0" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });

package/dist/types/client/attach.d.ts

@@ -4,11 +4,14 @@ import type { FsStat, UsersMode } from '../fs/types.js';
 import type { WatchChange } from '../fs/watch.js';
 import { type EmbedderHook } from '../kernel/embedder.js';
 import type { RealmTransport, RealmTransportRequest, RealmTransportResponse, RealmTransportTraits } from '../kernel/net/transport.js';
+import type { TraceEvent } from '../kernel/trace.js';
 import type { MountEntry, MountSpec } from '../mount/mount-fs.js';
+import type { SudoReplay } from '../sudo.js';
 import { type DialledSocket, type DialOptions } from './dial-stream.js';
 import { type LoopbackFetchOptions } from './loopback-fetch.js';
 import { type LockManagerLike, type MessagePortLike, type ProcessEntry } from './protocol.js';
 export type { WatchChange } from '../fs/watch.js';
+export type { TraceEvent, TraceExec, TraceExit, TraceFork } from '../kernel/trace.js';
 export type { ProcessEntry } from './protocol.js';
 export declare class KernelGoneError extends Error {
     constructor(message?: string);
@@ -30,7 +33,7 @@ export interface SpawnOptions {
     stdin?: string | Uint8Array;
     group?: 'new';
     pgid?: number;
-    tag?: string;
+    tag?: string | readonly string[];
     onStdout?: (bytes: Uint8Array) => void;
     onStderr?: (bytes: Uint8Array) => void;
 }
@@ -45,13 +48,23 @@ export interface SpawnedProcess {
     readonly ended: Promise<ClientEnded>;
     signal(name?: string): Promise<void>;
 }
+export interface SudoRunOptions {
+    stdout?: string;
+    stderr?: string;
+    tag?: string | readonly string[];
+}
+export interface SudoRun {
+    readonly pid: number;
+    readonly pgid: number;
+    readonly ended: Promise<ClientEnded>;
+}
 export interface ClientRunOptions {
     cwd?: string;
     cwdMissing?: 'create' | 'error';
     user?: string | number;
     env?: Record<string, string>;
     stdin?: string | Uint8Array;
-    tag?: string;
+    tag?: string | readonly string[];
     onStdout?: (text: string) => void;
     onStderr?: (text: string) => void;
 }
@@ -69,7 +82,7 @@ export interface ClientTerminalOptions {
     env?: Record<string, string>;
     cols?: number;
     rows?: number;
-    tag?: string;
+    tag?: string | readonly string[];
     onData?: (bytes: Uint8Array) => void;
 }
 export interface ClientTerminal {
@@ -104,6 +117,13 @@ export interface ClientFs {
         close(): void;
     }>;
 }
+export interface TraceBatch {
+    events: TraceEvent[];
+    dropped: number;
+}
+export interface TraceOptions {
+    limit?: number;
+}
 export type ClientFetchRequest = Omit<RealmTransportRequest, 'signal'> & {
     signal?: AbortSignal;
 };
@@ -133,6 +153,10 @@ export interface KernelClient {
         close(): void;
     }>;
     onTraits(listener: (traits: RealmTransportTraits) => void): () => void;
+    trace(tag: string, onEvents: (batch: TraceBatch) => void | Promise<unknown>, options?: TraceOptions): Promise<{
+        close(): void;
+    }>;
+    sudoRun(request: SudoReplay, options?: SudoRunOptions): Promise<SudoRun>;
     close(options?: {
         kill?: boolean;
     }): Promise<void>;

package/dist/types/client/protocol.d.ts

@@ -2,6 +2,7 @@ import type { UsersMode } from '../fs/types.js';
 import type { WatchChange } from '../fs/watch.js';
 import type { TransportCall, TransportReply } from '../kernel/net/remote-transport.js';
 import type { RealmTransportTraits } from '../kernel/net/transport.js';
+import type { TraceEvent } from '../kernel/trace.js';
 import type { MountSpec } from '../mount/mount-fs.js';
 export declare const PROTOCOL: readonly [number, number];
 export interface ClientHello {
@@ -26,7 +27,7 @@ export interface SpawnRequestOptions {
     env?: Record<string, string>;
     stdin?: Uint8Array;
     pgid?: number;
-    tag?: string;
+    tag?: string | readonly string[];
 }
 export interface TerminalRequestOptions {
     cwd?: string;
@@ -35,7 +36,12 @@ export interface TerminalRequestOptions {
     env?: Record<string, string>;
     cols?: number;
     rows?: number;
-    tag?: string;
+    tag?: string | readonly string[];
+}
+export interface SudoRunRequestOptions {
+    stdout?: string;
+    stderr?: string;
+    tag?: string | readonly string[];
 }
 export type TerminalAction = {
     action: 'write';
@@ -104,6 +110,17 @@ export type ClientCall = {
 } | {
     op: 'unserve-facade';
     registration: number;
+} | {
+    op: 'trace';
+    tag: string;
+    limit?: number;
+} | {
+    op: 'untrace';
+    trace: number;
+} | {
+    op: 'sudo-run';
+    replay: unknown;
+    options: SudoRunRequestOptions;
 } | {
     op: 'detach';
     kill?: boolean;
@@ -121,16 +138,24 @@ export interface ClientReply {
     started?: number;
     signal?: string;
 }
+export interface TraceAck {
+    traceAck: number;
+}
 export type ClientMessage = {
     hello: ClientHello;
-} | ClientRequest | TransportCall;
+} | ClientRequest | TransportCall | TraceAck;
 export interface WatchEvent {
     watch: number;
     change: WatchChange;
 }
+export interface TraceMessage {
+    trace: number;
+    events: TraceEvent[];
+    dropped?: number;
+}
 export type KernelMessage = {
     hello: KernelHello;
-} | ClientReply | WatchEvent | TransportReply;
+} | ClientReply | WatchEvent | TraceMessage | TransportReply;
 export interface ProcessEntry {
     pid: number;
     ppid: number;

package/dist/types/index.d.ts

@@ -1,4 +1,5 @@
 import type { CdpHook } from './cdp/types.js';
+import type { SudoRun, SudoRunOptions } from './client/attach.js';
 import { type DialledSocket, type DialOptions } from './client/dial-stream.js';
 import { type LoopbackFetchOptions } from './client/loopback-fetch.js';
 import type { FacadeSpecs } from './facade/types.js';
@@ -14,11 +15,11 @@ import { type NetworkUplink } from './kernel/net/uplink.js';
 import type { HostfsGrantHook } from './mount/hostfs.js';
 import type { MountEntry, MountSpec } from './mount/mount-fs.js';
 import type { ProcessMountPolicy } from './mount/syscall.js';
-import type { ApproveHook } from './sudo.js';
+import type { ApproveHook, SudoReplay } from './sudo.js';
 import { type NetworkTransport } from './transport.js';
 import type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export type { CdpConnection, CdpHook, CdpRequest } from './cdp/types.js';
-export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type WatchChange, } from './client/attach.js';
+export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type SudoRun, type SudoRunOptions, type TraceBatch, type TraceEvent, type TraceExec, type TraceExit, type TraceFork, type TraceOptions, type WatchChange, } from './client/attach.js';
 export type { DialledSocket, DialOptions } from './client/dial-stream.js';
 export type { LoopbackFetchOptions } from './client/loopback-fetch.js';
 export type { FacadeConnection, FacadeHook, FacadeInfo, FacadeSpec, FacadeSpecs, } from './facade/types.js';
@@ -45,7 +46,7 @@ export type { JsCred, JsSyncContext, JsSyncFile } from './process/js/js-sync.js'
 export type { JsThread, JsThreadContext, JsThreadSpawnOptions } from './process/js/js-thread.js';
 export type { JsTermios, JsTty, JsTtySize } from './process/js/js-tty.js';
 export type { JsWebSocket, JsWebSocketClose, JsWebSocketMessage, JsWebSocketOptions, } from './process/js/js-websocket.js';
-export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
+export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReplay, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
 export { type FetchTransportOptions, fetchTransport, type HeaderList, type NetworkExit, type NetworkRedirectPolicy, type NetworkRequest, type NetworkResponse, type NetworkTraits, type NetworkTransport, type NetworkWebSocket, type NetworkWebSocketRequest, } from './transport.js';
 export type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export interface NetworkOptions {
@@ -130,6 +131,7 @@ export interface Kernel {
     run(argv: string[], options?: RunOptions): Promise<RunResult>;
     openTerminal(argv: string[], options?: TerminalOptions): Promise<Terminal>;
     connect(options?: ConnectOptions): Promise<MessagePort>;
+    sudoRun(request: SudoReplay, options?: SudoRunOptions): Promise<SudoRun>;
     readonly users: KernelUsers;
     readonly groups: KernelGroups;
     setRoutes(routes: RouteTable): Promise<void>;

package/dist/types/kernel/children.d.ts

@@ -67,7 +67,8 @@ export declare class SpawnError extends Error {
 }
 export declare class ChangedError extends SpawnError {
     readonly notice: string;
-    constructor(notice: string);
+    readonly file: string;
+    constructor(notice: string, file: string);
 }
 export interface SpawnGrant {
     cred: Cred;

package/dist/types/kernel/jobs.d.ts

@@ -29,7 +29,8 @@ export declare class JobTable {
     pgidOf(pid: number): number | undefined;
     sidOf(pid: number): number | undefined;
     private member;
-    private idOf;
+    idOf(pid: number): number;
+    execParentOf(pid: number): number | undefined;
     private byId;
     setpgid(caller: number, pid: number, pgid: number): void;
     get handoffCount(): number;

package/dist/types/kernel/trace.d.ts

@@ -0,0 +1,59 @@
+import { type Cred } from './cred.js';
+export interface TraceExec {
+    type: 'exec';
+    seq: number;
+    pid: number;
+    ppid: number;
+    pgid: number;
+    argv: string[];
+    exe?: string;
+    uid: number;
+    at: number;
+    replaced?: true;
+}
+export interface TraceFork {
+    type: 'fork';
+    seq: number;
+    pid: number;
+    ppid: number;
+    pgid: number;
+    argv: string[];
+    exe?: string;
+    uid: number;
+    at: number;
+}
+export interface TraceExit {
+    type: 'exit';
+    seq: number;
+    pid: number;
+    status: number;
+    signal?: string;
+    utime?: number;
+    stime?: number;
+    at: number;
+}
+export type TraceEvent = TraceExec | TraceFork | TraceExit;
+type Unsequenced<T> = T extends unknown ? Omit<T, 'seq'> : never;
+export type TraceDraft = Unsequenced<TraceEvent>;
+export interface TraceBatch {
+    events: TraceEvent[];
+    dropped: number;
+}
+export declare const TRACE_LIMIT = 4096;
+export declare const TRACE_LIMIT_MAX = 65536;
+export declare function traceLimit(value: unknown): number;
+export interface TraceSubscription {
+    ack(): void;
+    close(): void;
+}
+export declare class TraceHub {
+    private readonly subs;
+    private seq;
+    get idle(): boolean;
+    subscribe(tag: string, viewer: Readonly<Cred>, deliver: (batch: TraceBatch) => void, limit?: number): TraceSubscription;
+    wants(tags: readonly string[] | undefined, cred: Readonly<Cred>): boolean;
+    publish(tags: readonly string[] | undefined, cred: Readonly<Cred>, draft: TraceDraft): void;
+    private matches;
+    private schedule;
+}
+export {};

package/dist/types/launcher.d.ts

@@ -31,6 +31,7 @@ import { type ProcessInfo } from './kernel/proc-info.js';
 import { type SealedCaller, type SealedHook } from './kernel/sealed.js';
 import { type SigInfo } from './kernel/signals.js';
 import { LoopbackNet } from './kernel/socket.js';
+import { TraceHub } from './kernel/trace.js';
 import { type MediumHandle } from './mount/fsa.js';
 import { type FstabResult } from './mount/fstab.js';
 import { type FetchLike, type HostfsGrantHook, type HostfsTiming } from './mount/hostfs.js';
@@ -163,6 +164,25 @@ interface Target {
     copy?: string;
     shim?: string;
 }
+export declare function sudoFailure(errno: string, message: string): Error & {
+    code: string;
+};
+export interface SudoRunRequest {
+    stdout?: unknown;
+    stderr?: unknown;
+    tag?: unknown;
+    base?: string | undefined;
+    session?: number | undefined;
+}
+export interface SudoRunning {
+    pid: number;
+    ended: Promise<{
+        status: number;
+        signal?: number;
+    }>;
+}
+export declare const MAX_SPAWN_TAGS = 8;
+export declare function tagList(value: unknown): readonly string[];
 export declare function tagOption(tag: unknown): void;
 export type CwdMissing = 'create' | 'error';
 export declare function cwdMissingOption(value: unknown): CwdMissing;
@@ -397,6 +417,14 @@ export declare class Launcher {
     private readonly imageTimes;
     private readonly childTimes;
     private readonly stopped;
+    readonly traces: TraceHub;
+    private readonly traceHeld;
+    private readonly replacedImages;
+    private traceStarted;
+    private traceEnded;
+    private traceEmit;
+    private traceAdmitted;
+    private chainTimes;
     private stateOf;
     private childrenOf;
     private timesAt;
@@ -503,5 +531,8 @@ export declare class Launcher {
     private starting;
     openTerminal(argv: string[], options: TerminalOptions): Promise<TerminalSession>;
     run(argv: string[], options?: RunOptions): Promise<RunResult>;
+    sudoRun(replay: unknown, options?: SudoRunRequest): Promise<SudoRunning>;
+    private sudoOutputs;
+    private sudoOutput;
 }
 export type { ProcessInfo, ProcessListing } from './kernel/proc-info.js';

package/dist/types/node.d.ts

@@ -1,5 +1,6 @@
 import { type MessagePort, type Worker } from 'node:worker_threads';
 import type { CdpHook } from './cdp/types.js';
+import type { SudoRun, SudoRunOptions } from './client/attach.js';
 import { type CronClock } from './cron/clock.js';
 import type { FacadeSpecs } from './facade/types.js';
 import type { Attestation, AttestTombstone } from './fs/attest.js';
@@ -17,10 +18,10 @@ import type { MountEntry, MountSpec } from './mount/mount-fs.js';
 import type { ProcessMountPolicy } from './mount/syscall.js';
 import { type HostLoopback } from './node/loopback.js';
 import { memoryRoot } from './node/memory-root.js';
-import type { ApproveHook } from './sudo.js';
+import type { ApproveHook, SudoReplay } from './sudo.js';
 import { type NetworkTransport } from './transport.js';
 export type { CdpConnection, CdpHook, CdpRequest } from './cdp/types.js';
-export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type WatchChange, } from './client/attach.js';
+export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type SudoRun, type SudoRunOptions, type TraceBatch, type TraceEvent, type TraceExec, type TraceExit, type TraceFork, type TraceOptions, type WatchChange, } from './client/attach.js';
 export type { FacadeConnection, FacadeHook, FacadeInfo, FacadeSpec, FacadeSpecs, } from './facade/types.js';
 export type { Attestation, AttestedDir, AttestOptions, AttestTombstone } from './fs/attest.js';
 export type { Denial, DenialHook } from './fs/dac.js';
@@ -34,7 +35,7 @@ export type { ConnectorStamp } from './kernel/socket.js';
 export type { HostfsEvent, HostfsGrant, HostfsGrantHook, HostfsPortGrant, HostfsTransport, } from './mount/hostfs.js';
 export { serveHostfsPort } from './mount/hostfs.js';
 export type { MountEntry, MountSpec } from './mount/mount-fs.js';
-export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
+export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReplay, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
 export type { NetworkRedirectPolicy } from './transport.js';
 export { fetchTransport, type NetworkTransport } from './transport.js';
 export { memoryRoot };
@@ -100,6 +101,7 @@ export interface NodeKernel {
         absent: 'allow';
     }): Promise<Attestation | AttestTombstone>;
     connect(options?: ConnectOptions): Promise<MessagePort>;
+    sudoRun(request: SudoReplay, options?: SudoRunOptions): Promise<SudoRun>;
     readonly users: KernelUsers;
     readonly groups: KernelGroups;
     setRoutes(routes: RouteTable): Promise<void>;

package/dist/types/serve.d.ts

@@ -69,6 +69,16 @@ export interface OpenTerminalRequest {
     argv: string[];
     options: Omit<TerminalOptions, 'onData'>;
 }
+export interface SudoRunKernelRequest {
+    id: number;
+    op: 'sudo-run';
+    replay: unknown;
+    options: {
+        stdout?: string;
+        stderr?: string;
+        tag?: string | readonly string[];
+    };
+}
 export type TerminalAction = {
     action: 'write';
     bytes: Uint8Array;
@@ -186,7 +196,7 @@ export type KernelRequest = {
     id: number;
     op: 'sealed-placeholders';
     list: readonly string[];
-} | AttestRequest | InitRequest | RunRequest | OpenTerminalRequest | TerminalRequest | ConnectRequest | UsersRequest | MountRequest | DialRequest | RoutesRequest | TraitsRequest;
+} | AttestRequest | InitRequest | RunRequest | OpenTerminalRequest | SudoRunKernelRequest | TerminalRequest | ConnectRequest | UsersRequest | MountRequest | DialRequest | RoutesRequest | TraitsRequest;
 type WithoutId<T> = T extends unknown ? Omit<T, 'id'> : never;
 export type KernelCall = WithoutId<KernelRequest>;
 export declare function inOpfs(deps: ServeDeps, root: FileSystemDirectoryHandle): Promise<boolean>;

package/dist/types/sudo.d.ts

@@ -1,12 +1,13 @@
 import type { KernelFs, UsersMode } from './fs/types.js';
 import type { Cred } from './kernel/cred.js';
 import { type TimestampOwner } from './sudo-timestamp.js';
-import { type UserDb } from './users.js';
+import { type Account, type UserDb } from './users.js';
 export { SUDOERS, SUDOERS_D } from './sudoers.js';
 export declare const SECURE_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 export declare const DEFAULT_SUDOERS = "%sudo Cmnd *\n";
 export declare const SUDO_TIMEOUT_MS = 300000;
 export declare function changedText(file: string): string;
+export declare function requestedText(file: string): string;
 export declare function changedFile(approved: Readonly<Record<string, string>>, now: Readonly<Record<string, string>>): string | undefined;
 export interface SudoRequest {
     id: string;
@@ -34,6 +35,13 @@ export interface SudoFile {
     path: string;
     sha256: string;
 }
+export type SudoReplay = Pick<SudoRequest, 'id' | 'user' | 'uid' | 'target' | 'argv' | 'path' | 'cwd' | 'stdin' | 'rootOnly' | 'userWritable' | 'tag' | 'tags' | 'validate'>;
+export interface SudoReplayed {
+    grant: SudoGrant;
+    caller: Account;
+    target: Account;
+    tags: readonly string[];
+}
 export type SudoStdin = 'tty' | 'none' | 'pipe' | 'file';
 export type SudoAnswer = 'once' | 'always' | 'deny';
 export interface SudoDenial {
@@ -98,6 +106,10 @@ export interface VisudoResult {
     ok: boolean;
 }
 export declare function visudoCall(req: Partial<VisudoCall>): VisudoCall | undefined;
+type Failure = {
+    error: string;
+    errno: string;
+};
 export interface SudoOptions {
     fs: KernelFs;
     users: UserDb;
@@ -139,6 +151,8 @@ export declare class Sudo {
     private writable;
     private locate;
     request(caller: SudoCaller, call: SudoCall, signal: AbortSignal): Promise<SudoResult>;
+    replay(value: unknown): Promise<SudoReplayed | Failure>;
+    private mayAsk;
     private command;
     private validate;
     private pendingFor;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.179.0",
+  "version": "1.181.0",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",
@@ -70,7 +70,7 @@
   },
   "devDependencies": {
     "@ai-ecoverse/py-numpy": "2.5.4-4",
-    "@ai-ecoverse/slicc-cdp": "1.48.2",
+    "@ai-ecoverse/slicc-cdp": "1.48.10",
     "@ai-ecoverse/slicc-scrub": "1.1.0",
     "@ai-ecoverse/slicc-shared-web": "2.14.2",
     "@ai-ecoverse/wasi-cargo": "0.99.0-6",