@ai-ecoverse/slicc-kernel 1.180.0 → 1.181.0

package/dist/process-worker.js

@@ -3180,7 +3180,7 @@ var init_version = __esm({
   "src/version.ts"() {
     "use strict";
     init_captured_globals();
-    KERNEL_VERSION = true ? "1.180.0" : "0.0.0-dev";
+    KERNEL_VERSION = true ? "1.181.0" : "0.0.0-dev";
     OS_RELEASE = "6.0.0-slicc";
   }
 });

package/dist/types/client/attach.d.ts

@@ -6,6 +6,7 @@ import { type EmbedderHook } from '../kernel/embedder.js';
 import type { RealmTransport, RealmTransportRequest, RealmTransportResponse, RealmTransportTraits } from '../kernel/net/transport.js';
 import type { TraceEvent } from '../kernel/trace.js';
 import type { MountEntry, MountSpec } from '../mount/mount-fs.js';
+import type { SudoReplay } from '../sudo.js';
 import { type DialledSocket, type DialOptions } from './dial-stream.js';
 import { type LoopbackFetchOptions } from './loopback-fetch.js';
 import { type LockManagerLike, type MessagePortLike, type ProcessEntry } from './protocol.js';
@@ -47,6 +48,16 @@ export interface SpawnedProcess {
     readonly ended: Promise<ClientEnded>;
     signal(name?: string): Promise<void>;
 }
+export interface SudoRunOptions {
+    stdout?: string;
+    stderr?: string;
+    tag?: string | readonly string[];
+}
+export interface SudoRun {
+    readonly pid: number;
+    readonly pgid: number;
+    readonly ended: Promise<ClientEnded>;
+}
 export interface ClientRunOptions {
     cwd?: string;
     cwdMissing?: 'create' | 'error';
@@ -145,6 +156,7 @@ export interface KernelClient {
     trace(tag: string, onEvents: (batch: TraceBatch) => void | Promise<unknown>, options?: TraceOptions): Promise<{
         close(): void;
     }>;
+    sudoRun(request: SudoReplay, options?: SudoRunOptions): Promise<SudoRun>;
     close(options?: {
         kill?: boolean;
     }): Promise<void>;

package/dist/types/client/protocol.d.ts

@@ -38,6 +38,11 @@ export interface TerminalRequestOptions {
     rows?: number;
     tag?: string | readonly string[];
 }
+export interface SudoRunRequestOptions {
+    stdout?: string;
+    stderr?: string;
+    tag?: string | readonly string[];
+}
 export type TerminalAction = {
     action: 'write';
     bytes: Uint8Array;
@@ -112,6 +117,10 @@ export type ClientCall = {
 } | {
     op: 'untrace';
     trace: number;
+} | {
+    op: 'sudo-run';
+    replay: unknown;
+    options: SudoRunRequestOptions;
 } | {
     op: 'detach';
     kill?: boolean;

package/dist/types/index.d.ts

@@ -1,4 +1,5 @@
 import type { CdpHook } from './cdp/types.js';
+import type { SudoRun, SudoRunOptions } from './client/attach.js';
 import { type DialledSocket, type DialOptions } from './client/dial-stream.js';
 import { type LoopbackFetchOptions } from './client/loopback-fetch.js';
 import type { FacadeSpecs } from './facade/types.js';
@@ -14,11 +15,11 @@ import { type NetworkUplink } from './kernel/net/uplink.js';
 import type { HostfsGrantHook } from './mount/hostfs.js';
 import type { MountEntry, MountSpec } from './mount/mount-fs.js';
 import type { ProcessMountPolicy } from './mount/syscall.js';
-import type { ApproveHook } from './sudo.js';
+import type { ApproveHook, SudoReplay } from './sudo.js';
 import { type NetworkTransport } from './transport.js';
 import type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export type { CdpConnection, CdpHook, CdpRequest } from './cdp/types.js';
-export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type TraceBatch, type TraceEvent, type TraceExec, type TraceExit, type TraceFork, type TraceOptions, type WatchChange, } from './client/attach.js';
+export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type SudoRun, type SudoRunOptions, type TraceBatch, type TraceEvent, type TraceExec, type TraceExit, type TraceFork, type TraceOptions, type WatchChange, } from './client/attach.js';
 export type { DialledSocket, DialOptions } from './client/dial-stream.js';
 export type { LoopbackFetchOptions } from './client/loopback-fetch.js';
 export type { FacadeConnection, FacadeHook, FacadeInfo, FacadeSpec, FacadeSpecs, } from './facade/types.js';
@@ -45,7 +46,7 @@ export type { JsCred, JsSyncContext, JsSyncFile } from './process/js/js-sync.js'
 export type { JsThread, JsThreadContext, JsThreadSpawnOptions } from './process/js/js-thread.js';
 export type { JsTermios, JsTty, JsTtySize } from './process/js/js-tty.js';
 export type { JsWebSocket, JsWebSocketClose, JsWebSocketMessage, JsWebSocketOptions, } from './process/js/js-websocket.js';
-export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
+export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReplay, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
 export { type FetchTransportOptions, fetchTransport, type HeaderList, type NetworkExit, type NetworkRedirectPolicy, type NetworkRequest, type NetworkResponse, type NetworkTraits, type NetworkTransport, type NetworkWebSocket, type NetworkWebSocketRequest, } from './transport.js';
 export type { Account, AddGroup, AddUser, Group, RemoveUser } from './users.js';
 export interface NetworkOptions {
@@ -130,6 +131,7 @@ export interface Kernel {
     run(argv: string[], options?: RunOptions): Promise<RunResult>;
     openTerminal(argv: string[], options?: TerminalOptions): Promise<Terminal>;
     connect(options?: ConnectOptions): Promise<MessagePort>;
+    sudoRun(request: SudoReplay, options?: SudoRunOptions): Promise<SudoRun>;
     readonly users: KernelUsers;
     readonly groups: KernelGroups;
     setRoutes(routes: RouteTable): Promise<void>;

package/dist/types/kernel/children.d.ts

@@ -67,7 +67,8 @@ export declare class SpawnError extends Error {
 }
 export declare class ChangedError extends SpawnError {
     readonly notice: string;
-    constructor(notice: string);
+    readonly file: string;
+    constructor(notice: string, file: string);
 }
 export interface SpawnGrant {
     cred: Cred;

package/dist/types/launcher.d.ts

@@ -164,6 +164,25 @@ interface Target {
     copy?: string;
     shim?: string;
 }
+export declare function sudoFailure(errno: string, message: string): Error & {
+    code: string;
+};
+export interface SudoRunRequest {
+    stdout?: unknown;
+    stderr?: unknown;
+    tag?: unknown;
+    base?: string | undefined;
+    session?: number | undefined;
+}
+export interface SudoRunning {
+    pid: number;
+    ended: Promise<{
+        status: number;
+        signal?: number;
+    }>;
+}
+export declare const MAX_SPAWN_TAGS = 8;
+export declare function tagList(value: unknown): readonly string[];
 export declare function tagOption(tag: unknown): void;
 export type CwdMissing = 'create' | 'error';
 export declare function cwdMissingOption(value: unknown): CwdMissing;
@@ -512,5 +531,8 @@ export declare class Launcher {
     private starting;
     openTerminal(argv: string[], options: TerminalOptions): Promise<TerminalSession>;
     run(argv: string[], options?: RunOptions): Promise<RunResult>;
+    sudoRun(replay: unknown, options?: SudoRunRequest): Promise<SudoRunning>;
+    private sudoOutputs;
+    private sudoOutput;
 }
 export type { ProcessInfo, ProcessListing } from './kernel/proc-info.js';

package/dist/types/node.d.ts

@@ -1,5 +1,6 @@
 import { type MessagePort, type Worker } from 'node:worker_threads';
 import type { CdpHook } from './cdp/types.js';
+import type { SudoRun, SudoRunOptions } from './client/attach.js';
 import { type CronClock } from './cron/clock.js';
 import type { FacadeSpecs } from './facade/types.js';
 import type { Attestation, AttestTombstone } from './fs/attest.js';
@@ -17,10 +18,10 @@ import type { MountEntry, MountSpec } from './mount/mount-fs.js';
 import type { ProcessMountPolicy } from './mount/syscall.js';
 import { type HostLoopback } from './node/loopback.js';
 import { memoryRoot } from './node/memory-root.js';
-import type { ApproveHook } from './sudo.js';
+import type { ApproveHook, SudoReplay } from './sudo.js';
 import { type NetworkTransport } from './transport.js';
 export type { CdpConnection, CdpHook, CdpRequest } from './cdp/types.js';
-export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type TraceBatch, type TraceEvent, type TraceExec, type TraceExit, type TraceFork, type TraceOptions, type WatchChange, } from './client/attach.js';
+export { type AttachOptions, attachKernel, type ClientEnded, type ClientFetchRequest, type ClientFs, type ClientRunOptions, type ClientRunResult, type ClientTerminal, type ClientTerminalOptions, KernelCallError, type KernelClient, KernelGoneError, type ProcessEntry, type SpawnedProcess, type SpawnOptions, type SudoRun, type SudoRunOptions, type TraceBatch, type TraceEvent, type TraceExec, type TraceExit, type TraceFork, type TraceOptions, type WatchChange, } from './client/attach.js';
 export type { FacadeConnection, FacadeHook, FacadeInfo, FacadeSpec, FacadeSpecs, } from './facade/types.js';
 export type { Attestation, AttestedDir, AttestOptions, AttestTombstone } from './fs/attest.js';
 export type { Denial, DenialHook } from './fs/dac.js';
@@ -34,7 +35,7 @@ export type { ConnectorStamp } from './kernel/socket.js';
 export type { HostfsEvent, HostfsGrant, HostfsGrantHook, HostfsPortGrant, HostfsTransport, } from './mount/hostfs.js';
 export { serveHostfsPort } from './mount/hostfs.js';
 export type { MountEntry, MountSpec } from './mount/mount-fs.js';
-export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
+export type { ApproveHook, SudoAnswer, SudoApproval, SudoDenial, SudoFile, SudoReplay, SudoReply, SudoRequest, SudoStdin, } from './sudo.js';
 export type { NetworkRedirectPolicy } from './transport.js';
 export { fetchTransport, type NetworkTransport } from './transport.js';
 export { memoryRoot };
@@ -100,6 +101,7 @@ export interface NodeKernel {
         absent: 'allow';
     }): Promise<Attestation | AttestTombstone>;
     connect(options?: ConnectOptions): Promise<MessagePort>;
+    sudoRun(request: SudoReplay, options?: SudoRunOptions): Promise<SudoRun>;
     readonly users: KernelUsers;
     readonly groups: KernelGroups;
     setRoutes(routes: RouteTable): Promise<void>;

package/dist/types/serve.d.ts

@@ -69,6 +69,16 @@ export interface OpenTerminalRequest {
     argv: string[];
     options: Omit<TerminalOptions, 'onData'>;
 }
+export interface SudoRunKernelRequest {
+    id: number;
+    op: 'sudo-run';
+    replay: unknown;
+    options: {
+        stdout?: string;
+        stderr?: string;
+        tag?: string | readonly string[];
+    };
+}
 export type TerminalAction = {
     action: 'write';
     bytes: Uint8Array;
@@ -186,7 +196,7 @@ export type KernelRequest = {
     id: number;
     op: 'sealed-placeholders';
     list: readonly string[];
-} | AttestRequest | InitRequest | RunRequest | OpenTerminalRequest | TerminalRequest | ConnectRequest | UsersRequest | MountRequest | DialRequest | RoutesRequest | TraitsRequest;
+} | AttestRequest | InitRequest | RunRequest | OpenTerminalRequest | SudoRunKernelRequest | TerminalRequest | ConnectRequest | UsersRequest | MountRequest | DialRequest | RoutesRequest | TraitsRequest;
 type WithoutId<T> = T extends unknown ? Omit<T, 'id'> : never;
 export type KernelCall = WithoutId<KernelRequest>;
 export declare function inOpfs(deps: ServeDeps, root: FileSystemDirectoryHandle): Promise<boolean>;

package/dist/types/sudo.d.ts

@@ -1,12 +1,13 @@
 import type { KernelFs, UsersMode } from './fs/types.js';
 import type { Cred } from './kernel/cred.js';
 import { type TimestampOwner } from './sudo-timestamp.js';
-import { type UserDb } from './users.js';
+import { type Account, type UserDb } from './users.js';
 export { SUDOERS, SUDOERS_D } from './sudoers.js';
 export declare const SECURE_PATH = "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
 export declare const DEFAULT_SUDOERS = "%sudo Cmnd *\n";
 export declare const SUDO_TIMEOUT_MS = 300000;
 export declare function changedText(file: string): string;
+export declare function requestedText(file: string): string;
 export declare function changedFile(approved: Readonly<Record<string, string>>, now: Readonly<Record<string, string>>): string | undefined;
 export interface SudoRequest {
     id: string;
@@ -34,6 +35,13 @@ export interface SudoFile {
     path: string;
     sha256: string;
 }
+export type SudoReplay = Pick<SudoRequest, 'id' | 'user' | 'uid' | 'target' | 'argv' | 'path' | 'cwd' | 'stdin' | 'rootOnly' | 'userWritable' | 'tag' | 'tags' | 'validate'>;
+export interface SudoReplayed {
+    grant: SudoGrant;
+    caller: Account;
+    target: Account;
+    tags: readonly string[];
+}
 export type SudoStdin = 'tty' | 'none' | 'pipe' | 'file';
 export type SudoAnswer = 'once' | 'always' | 'deny';
 export interface SudoDenial {
@@ -98,6 +106,10 @@ export interface VisudoResult {
     ok: boolean;
 }
 export declare function visudoCall(req: Partial<VisudoCall>): VisudoCall | undefined;
+type Failure = {
+    error: string;
+    errno: string;
+};
 export interface SudoOptions {
     fs: KernelFs;
     users: UserDb;
@@ -139,6 +151,8 @@ export declare class Sudo {
     private writable;
     private locate;
     request(caller: SudoCaller, call: SudoCall, signal: AbortSignal): Promise<SudoResult>;
+    replay(value: unknown): Promise<SudoReplayed | Failure>;
+    private mayAsk;
     private command;
     private validate;
     private pendingFor;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-kernel",
-  "version": "1.180.0",
+  "version": "1.181.0",
   "description": "SLICC's wasm-realm kernel: run Emscripten programs in the browser against OPFS, with fork, spawn, pipes and waitpid",
   "type": "module",
   "license": "Apache-2.0",