@ai-ecoverse/slicc-kernel 1.64.0 → 1.64.2

package/dist/process-worker.js

@@ -13,6 +13,94 @@ var __export = (target, all) => {
     __defProp(target, name2, { get: all[name2], enumerable: true });
 };
 
+// src/process/js/lockdown.ts
+function chain(target) {
+  const out = [];
+  for (let at = target; at && at !== Object.prototype; ) {
+    out.push(at);
+    at = Object.getPrototypeOf(at);
+  }
+  return out;
+}
+function hide(target, names) {
+  for (const name2 of names) {
+    const holders = chain(target);
+    for (const holder of holders) {
+      if (Object.getOwnPropertyDescriptor(holder, name2)?.configurable) {
+        Reflect.deleteProperty(holder, name2);
+      }
+    }
+    const kept = holders.slice(1).some((holder) => Object.hasOwn(holder, name2));
+    const defined = Reflect.defineProperty(target, name2, {
+      value: void 0,
+      writable: false,
+      enumerable: false,
+      configurable: false
+    });
+    if (kept || !defined && Reflect.get(target, name2) !== void 0) {
+      throw new Error(`slicc-kernel: cannot withhold ${name2} from a JS program`);
+    }
+  }
+}
+function vacate(target, names) {
+  for (const name2 of names) {
+    for (let at = target; at && at !== Object.prototype; ) {
+      if (Object.getOwnPropertyDescriptor(at, name2)?.configurable) Reflect.deleteProperty(at, name2);
+      at = Object.getPrototypeOf(at);
+    }
+    Reflect.defineProperty(target, name2, {
+      value: void 0,
+      writable: true,
+      enumerable: false,
+      configurable: true
+    });
+    if (Reflect.get(target, name2) !== void 0) {
+      throw new Error(`slicc-kernel: cannot withhold ${name2} from a JS program`);
+    }
+  }
+}
+function lockdown(scope2 = globalThis) {
+  hide(scope2, BLOCKED_GLOBALS);
+  vacate(scope2, OPEN_SLOTS);
+  const navigator = scope2.navigator;
+  if (navigator && typeof navigator === "object") hide(navigator, BLOCKED_NAVIGATOR);
+}
+var BLOCKED_GLOBALS, BLOCKED_NAVIGATOR, OPEN_SLOTS;
+var init_lockdown = __esm({
+  "src/process/js/lockdown.ts"() {
+    "use strict";
+    BLOCKED_GLOBALS = [
+      "XMLHttpRequest",
+      "WebSocketStream",
+      "WebTransport",
+      "EventSource",
+      "importScripts",
+      "indexedDB",
+      "caches",
+      "cookieStore",
+      "Worker",
+      "SharedWorker",
+      "BroadcastChannel",
+      "postMessage",
+      "close",
+      "webkitRequestFileSystem",
+      "webkitRequestFileSystemSync",
+      "webkitResolveLocalFileSystemURL",
+      "webkitResolveLocalFileSystemSyncURL"
+    ];
+    BLOCKED_NAVIGATOR = [
+      "storage",
+      "storageBuckets",
+      "locks",
+      "serviceWorker",
+      "usb",
+      "hid",
+      "serial"
+    ];
+    OPEN_SLOTS = ["fetch", "WebSocket"];
+  }
+});
+
 // src/kernel/protocol.ts
 var WASM_PROCESS_INIT, WASM_PROCESS_EXIT, WASM_PROCESS_ERROR, WASM_THREAD_SPAWN, WASM_THREAD_INIT, WASM_THREAD_EXIT, WASM_MAX_THREADS, WASM_DEFAULT_THREADS;
 var init_protocol = __esm({
@@ -2126,12 +2214,27 @@ var init_kernel_streams = __esm({
           const original = fs[name2];
           if (typeof original !== "function") continue;
           fs[name2] = (path, ...rest2) => {
-            if (!isPtyPath(path)) return original.call(fs, path, ...rest2);
+            const owned = this.ownedTty(path);
+            if (owned && isPtyPath(path)) return this.owned(path, ptyStat(path));
+            if (!isPtyPath(path)) {
+              const st = original.call(fs, path, ...rest2);
+              return owned && TTY_PATH.test(path) ? this.owned(path, st) : st;
+            }
             this.existingPty(path);
             return ptyStat(path);
           };
         }
       }
+      ownedTty(path) {
+        return this.options.owners === true && this.sys.ttyOwner !== void 0 && path !== "/dev/ptmx";
+      }
+      owned(path, st) {
+        const ask = this.sys.ttyOwner;
+        const owner = this.call(() => ask.call(this.sys, path));
+        if (!owner) return st;
+        const mode = st.mode & ~4095 | (owner.mode ?? 400);
+        return { ...st, uid: owner.uid, gid: owner.gid, mode };
+      }
       existingPty(path) {
         const n = PTY_PATH.exec(path)?.[1];
         const exists = n === void 0 ? this.sys.openPty !== void 0 : this.sys.ptyNumbers?.().includes(Number(n)) ?? false;
@@ -2812,8 +2915,11 @@ function useDevFd(Fs) {
     return fstat.call(Fs, fd);
   };
 }
+function pinRootKind() {
+  pinnedRoot = rootKind();
+}
 function mountTable(mounts = []) {
-  const root = globalThis.navigator?.storage ? "opfs" : "memory";
+  const root = pinnedRoot ?? rootKind();
   const lines = [`${root} / ${root} rw 0 0`, "devfs /dev devfs rw 0 0", "proc /proc proc rw 0 0"];
   for (const m of mounts) {
     const options = Object.entries(m.options).map(([k, v]) => v === "" ? k : `${k}=${v}`);
@@ -2919,7 +3025,7 @@ function linuxDevices(Fs) {
     }
   }
 }
-var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW, EMSCRIPTEN_EPERM, O_PATH, UTIME_NOW, UTIME_OMIT, PROT_WRITE, MAP_PRIVATE, MAP_TYPE, O_WRONLY, MAP_ALIGN, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE2, O_CREAT2, field, NAME, AT_FDCWD, AT_EACCESS, DEVICE_MODES;
+var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW, EMSCRIPTEN_EPERM, O_PATH, UTIME_NOW, UTIME_OMIT, PROT_WRITE, MAP_PRIVATE, MAP_TYPE, O_WRONLY, MAP_ALIGN, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE2, O_CREAT2, field, pinnedRoot, rootKind, NAME, AT_FDCWD, AT_EACCESS, DEVICE_MODES;
 var init_process_fds = __esm({
   "src/process/process-fds.ts"() {
     "use strict";
@@ -2961,6 +3067,7 @@ var init_process_fds = __esm({
     O_ACCMODE2 = 3;
     O_CREAT2 = 64;
     field = (text) => (text || "none").replace(/[\s\\]/g, (c) => `\\${c.charCodeAt(0).toString(8).padStart(3, "0")}`);
+    rootKind = () => globalThis.navigator?.storage ? "opfs" : "memory";
     NAME = /^[a-z_][a-z0-9_-]*$/i;
     AT_FDCWD = -100;
     AT_EACCESS = 512;
@@ -4230,6 +4337,9 @@ function kernelSys(transport) {
     ttyNames() {
       return json(call2({ op: "fd-tty-names" }, "fd-tty-names"));
     },
+    ttyOwner(name2) {
+      return json(call2({ op: "fd-tty-owner", name: name2 }, `fd-tty-owner ${name2}`));
+    },
     openTty(name2) {
       const req = name2 === void 0 ? { op: "fd-open-tty" } : { op: "fd-open-tty", name: name2 };
       return json(call2(req, `fd-open-tty ${name2 ?? ""}`));
@@ -4474,7 +4584,8 @@ async function runWasmProcess(init, port2, deps = {}) {
   early = () => signals.quiet(() => vfs.flushDirty());
   const sigpipe = () => running.sliccSigpipe?.() === 1;
   const restartable = () => signals.restartable();
-  const streams = new KernelStreams(running.FS, sys, { sigpipe, restartable });
+  const owners = init.owners ? { owners: true } : {};
+  const streams = new KernelStreams(running.FS, sys, { sigpipe, restartable, ...owners });
   trackCloseOnExec(running.FS);
   quietQuit(running.FS);
   useMounts(running.FS, init.env, true);
@@ -12212,82 +12323,6 @@ var init_js_context = __esm({
   }
 });
 
-// src/process/js/lockdown.ts
-function chain(target) {
-  const out = [];
-  for (let at = target; at && at !== Object.prototype; ) {
-    out.push(at);
-    at = Object.getPrototypeOf(at);
-  }
-  return out;
-}
-function hide(target, names) {
-  for (const name2 of names) {
-    const holders = chain(target);
-    for (const holder of holders) {
-      if (Object.getOwnPropertyDescriptor(holder, name2)?.configurable) {
-        Reflect.deleteProperty(holder, name2);
-      }
-    }
-    const kept = holders.slice(1).some((holder) => Object.hasOwn(holder, name2));
-    const defined = Reflect.defineProperty(target, name2, {
-      value: void 0,
-      writable: false,
-      enumerable: false,
-      configurable: false
-    });
-    if (kept || !defined && Reflect.get(target, name2) !== void 0) {
-      throw new Error(`slicc-kernel: cannot withhold ${name2} from a JS program`);
-    }
-  }
-}
-function vacate(target, names) {
-  for (const name2 of names) {
-    for (let at = target; at && at !== Object.prototype; ) {
-      if (Object.getOwnPropertyDescriptor(at, name2)?.configurable) Reflect.deleteProperty(at, name2);
-      at = Object.getPrototypeOf(at);
-    }
-    Reflect.defineProperty(target, name2, {
-      value: void 0,
-      writable: true,
-      enumerable: false,
-      configurable: true
-    });
-    if (Reflect.get(target, name2) !== void 0) {
-      throw new Error(`slicc-kernel: cannot withhold ${name2} from a JS program`);
-    }
-  }
-}
-function lockdown(scope2 = globalThis) {
-  hide(scope2, BLOCKED_GLOBALS);
-  vacate(scope2, OPEN_SLOTS);
-  const navigator = scope2.navigator;
-  if (navigator && typeof navigator === "object") hide(navigator, BLOCKED_NAVIGATOR);
-}
-var BLOCKED_GLOBALS, BLOCKED_NAVIGATOR, OPEN_SLOTS;
-var init_lockdown = __esm({
-  "src/process/js/lockdown.ts"() {
-    "use strict";
-    BLOCKED_GLOBALS = [
-      "XMLHttpRequest",
-      "WebSocketStream",
-      "WebTransport",
-      "EventSource",
-      "importScripts",
-      "indexedDB",
-      "caches",
-      "cookieStore",
-      "Worker",
-      "SharedWorker",
-      "BroadcastChannel",
-      "postMessage",
-      "close"
-    ];
-    BLOCKED_NAVIGATOR = ["storage", "locks", "serviceWorker"];
-    OPEN_SLOTS = ["fetch", "WebSocket"];
-  }
-});
-
 // src/process/js/js-runtime.ts
 var js_runtime_exports = {};
 __export(js_runtime_exports, {
@@ -12410,11 +12445,15 @@ var init_js_runtime = __esm({
   }
 });
 
+// src/process-worker.ts
+init_lockdown();
+
 // src/process/process-entry.ts
 init_protocol();
 init_process_runtime();
 var loadWasi = () => Promise.resolve().then(() => (init_wasi_runtime(), wasi_runtime_exports));
 var loadJs = () => Promise.resolve().then(() => (init_js_runtime(), js_runtime_exports));
+var NOT_RUNNABLE2 = 126;
 function started(init, port2, run, wasi, js) {
   if (init.program?.abi === "js") {
     const jsInit = init;
@@ -12424,18 +12463,35 @@ function started(init, port2, run, wasi, js) {
   if (wasmInit.program?.abi === "wasi") return wasi().then((m) => m.runWasiProcess(wasmInit, port2));
   return run(wasmInit, port2);
 }
-function processEntry(port2, run = runWasmProcess, wasi = loadWasi, js = loadJs) {
-  const failed5 = (err) => port2.postMessage({
+function processEntry(port2, run = runWasmProcess, wasi = loadWasi, js = loadJs, seal = () => {
+}) {
+  const failed5 = (err, code2) => port2.postMessage({
     type: WASM_PROCESS_ERROR,
-    message: err instanceof Error ? err.stack ?? err.message : String(err)
+    message: err instanceof Error ? err.stack ?? err.message : String(err),
+    ...code2 === void 0 ? {} : { code: code2 }
   });
+  let refused;
+  const sealOnce = () => {
+    if (refused === void 0) {
+      try {
+        seal();
+        refused = null;
+      } catch (error) {
+        refused = { error };
+      }
+    }
+    return refused;
+  };
   return (data) => {
     const type = data?.type;
+    if (type !== WASM_THREAD_INIT && type !== WASM_PROCESS_INIT) return;
+    const refusal2 = sealOnce();
     if (type === WASM_THREAD_INIT) {
+      if (refusal2) return failed5(refusal2.error);
       wasi().then((m) => m.runWasiThread(data, port2)).catch(failed5);
       return;
     }
-    if (type !== WASM_PROCESS_INIT) return;
+    if (refusal2) return failed5(refusal2.error, NOT_RUNNABLE2);
     started(data, port2, run, wasi, js).then(
       (code2) => port2.postMessage({ type: WASM_PROCESS_EXIT, code: code2 }),
       failed5
@@ -12444,8 +12500,18 @@ function processEntry(port2, run = runWasmProcess, wasi = loadWasi, js = loadJs)
 }
 
 // src/process-worker.ts
+init_process_fds();
 var scope = globalThis;
 var post = scope.postMessage.bind(scope);
-var onMessage = processEntry({ postMessage: (message2) => post(message2) });
+var onMessage = processEntry(
+  { postMessage: (message2) => post(message2) },
+  void 0,
+  void 0,
+  void 0,
+  () => {
+    pinRootKind();
+    lockdown();
+  }
+);
 scope.addEventListener("message", (event) => onMessage(event.data));
 //# sourceMappingURL=process-worker.js.map