@ai-ecoverse/slicc-kernel 1.63.0 → 1.64.0

package/dist/node.js

@@ -3030,6 +3030,9 @@ var OpfsFs = class {
   trackOwners() {
     this.owners = true;
   }
+  async hasOwner(path) {
+    return ownOf((await this.meta.get([path]))[0]) !== void 0;
+  }
   async ancestry(path) {
     const entries = await this.meta.get(chain(path));
     const out = [];
@@ -3801,8 +3804,10 @@ var UnlinkedKeeper = class {
   count = 0;
   links = /* @__PURE__ */ new Map();
   linked = /* @__PURE__ */ new Map();
+  dirOwner;
   constructor(fs, holders, rootOf, options = {}) {
     const { locks, owner } = options;
+    this.dirOwner = options.dirOwner;
     this.fs = fs;
     this.holders = holders;
     this.rootOf = rootOf;
@@ -3913,7 +3918,8 @@ var UnlinkedKeeper = class {
       const dir = dirOf(this.rootOf(path));
       const hidden = `${dir}/${this.instance}.${++this.count}`;
       try {
-        await this.fs.mkdir(dir, { recursive: true });
+        const owner = this.dirOwner;
+        await this.fs.mkdir(dir, { recursive: true, ...owner ? { owner } : {} });
         await this.fs.rename(path, hidden);
         await this.linkedName(hidden);
         return hidden;
@@ -5071,6 +5077,7 @@ function withCommandDirs(fs, names, userDir = async () => void 0, owners = false
     ...fs.realpath ? { realpath: fs.realpath.bind(fs) } : {},
     ...fs.chown ? { chown: fs.chown.bind(fs) } : {},
     ...fs.ancestry ? { ancestry: fs.ancestry.bind(fs) } : {},
+    ...fs.hasOwner ? { hasOwner: fs.hasOwner.bind(fs) } : {},
     chmod: (path, mode) => fs.chmod(path, mode),
     utimes: (path, atime, mtime) => fs.utimes(path, atime, mtime),
     lutimes: (path, atime, mtime) => lutimesOf(fs, path, atime, mtime),
@@ -6442,6 +6449,10 @@ var MountFs = class {
     if (this.at(real)) throw errnoError("ENOSYS", path);
     return real;
   }
+  async hasOwner(path) {
+    if (this.at(path)) return true;
+    return await this.base.hasOwner?.(path) ?? true;
+  }
   async ancestry(path) {
     const names = chain(normalizePath(path));
     const first = names.findIndex((name2) => this.at(name2));
@@ -14002,6 +14013,16 @@ var NOT_FOUND = 127;
 var DECIDE_MS = 100;
 var INIT_PID = 1;
 var SHARED_DIRS = ["/tmp", "/home"];
+var LAYOUT = [
+  ["/", 493],
+  ["/root", 448],
+  ["/home", 493],
+  ["/etc", 493],
+  [PASSWD, 420],
+  [GROUP, 420],
+  ["/usr", 493],
+  ["/usr/local", 493]
+];
 var encoder3 = new TextEncoder();
 var USERS_MODES = ["off", "report", "enforce"];
 function usersMode(mode = "off") {
@@ -14195,7 +14216,8 @@ var Launcher = class {
       {
         locks: webLocks(),
         busy: (path) => [...this.openFiles].some((nodes) => nodes.holds(path)),
-        owner: options.unlinkOwner
+        owner: options.unlinkOwner,
+        ...this.owners ? { dirOwner: { uid: 0, gid: 0, mode: 448 } } : {}
       }
     );
     this.fs = this.unlinked.wrap(keepingOpen(fs, this.nodes));
@@ -14820,6 +14842,24 @@ var Launcher = class {
       await this.provisionPnpmHome();
     return entry;
   }
+  async stampLayout() {
+    const layout = [
+      ...LAYOUT,
+      [this.modulesDir, 493],
+      [this.pnpmHome, 493],
+      [`/${UNLINKED_DIR}`, 448]
+    ];
+    for (const [path, mode] of layout) {
+      const real = await this.realLayoutPath(path);
+      const fresh = real !== void 0 && !await this.base.hasOwner?.(real);
+      if (fresh) await this.base.chown?.(real, { uid: 0, gid: 0, mode, follow: false });
+    }
+  }
+  async realLayoutPath(path) {
+    if (!await this.base.exists(path)) return void 0;
+    if (path === "/") return path;
+    return joinName(await realDir(this.base, parentOf(path)), baseName(path));
+  }
   async provisionPnpmHome() {
     await this.base.mkdir(this.pnpmHome, { recursive: true }).catch(() => void 0);
   }
@@ -14893,6 +14933,7 @@ var Launcher = class {
     if (this.owners) await this.base.chmod("/tmp", 1023);
     await this.provisionPnpmHome();
     await this.users.ensure();
+    if (this.owners) await this.stampLayout();
     await writeCaFile(this.base, this.ca).catch(() => void 0);
     this.fstab = this.mountFstab();
   }