@ai-ecoverse/slicc-kernel 1.64.1 → 1.64.2

package/dist/node-process-worker.js

@@ -82,9 +82,21 @@ var init_lockdown = __esm({
       "SharedWorker",
       "BroadcastChannel",
       "postMessage",
-      "close"
+      "close",
+      "webkitRequestFileSystem",
+      "webkitRequestFileSystemSync",
+      "webkitResolveLocalFileSystemURL",
+      "webkitResolveLocalFileSystemSyncURL"
+    ];
+    BLOCKED_NAVIGATOR = [
+      "storage",
+      "storageBuckets",
+      "locks",
+      "serviceWorker",
+      "usb",
+      "hid",
+      "serial"
     ];
-    BLOCKED_NAVIGATOR = ["storage", "locks", "serviceWorker"];
     OPEN_SLOTS = ["fetch", "WebSocket"];
   }
 });
@@ -7597,7 +7609,7 @@ function useDevFd(Fs) {
   };
 }
 function mountTable(mounts = []) {
-  const root = globalThis.navigator?.storage ? "opfs" : "memory";
+  const root = pinnedRoot ?? rootKind();
   const lines = [`${root} / ${root} rw 0 0`, "devfs /dev devfs rw 0 0", "proc /proc proc rw 0 0"];
   for (const m of mounts) {
     const options = Object.entries(m.options).map(([k, v]) => v === "" ? k : `${k}=${v}`);
@@ -7703,7 +7715,7 @@ function linuxDevices(Fs) {
     }
   }
 }
-var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW2, EMSCRIPTEN_EPERM, O_PATH, UTIME_NOW, UTIME_OMIT, PROT_WRITE, MAP_PRIVATE, MAP_TYPE, O_WRONLY4, MAP_ALIGN, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE2, O_CREAT2, field, NAME, AT_FDCWD, AT_EACCESS2, DEVICE_MODES;
+var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW2, EMSCRIPTEN_EPERM, O_PATH, UTIME_NOW, UTIME_OMIT, PROT_WRITE, MAP_PRIVATE, MAP_TYPE, O_WRONLY4, MAP_ALIGN, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE2, O_CREAT2, field, pinnedRoot, rootKind, NAME, AT_FDCWD, AT_EACCESS2, DEVICE_MODES;
 var init_process_fds = __esm({
   "src/process/process-fds.ts"() {
     "use strict";
@@ -7745,6 +7757,7 @@ var init_process_fds = __esm({
     O_ACCMODE2 = 3;
     O_CREAT2 = 64;
     field = (text) => (text || "none").replace(/[\s\\]/g, (c) => `\\${c.charCodeAt(0).toString(8).padStart(3, "0")}`);
+    rootKind = () => globalThis.navigator?.storage ? "opfs" : "memory";
     NAME = /^[a-z_][a-z0-9_-]*$/i;
     AT_FDCWD = -100;
     AT_EACCESS2 = 512;
@@ -12491,6 +12504,7 @@ init_protocol();
 init_process_runtime();
 var loadWasi = () => Promise.resolve().then(() => (init_wasi_runtime(), wasi_runtime_exports));
 var loadJs = () => Promise.resolve().then(() => (init_js_runtime(), js_runtime_exports));
+var NOT_RUNNABLE2 = 126;
 function started(init, port3, run, wasi, js) {
   if (init.program?.abi === "js") {
     const jsInit = init;
@@ -12500,18 +12514,35 @@ function started(init, port3, run, wasi, js) {
   if (wasmInit.program?.abi === "wasi") return wasi().then((m) => m.runWasiProcess(wasmInit, port3));
   return run(wasmInit, port3);
 }
-function processEntry(port3, run = runWasmProcess, wasi = loadWasi, js = loadJs) {
-  const failed5 = (err) => port3.postMessage({
+function processEntry(port3, run = runWasmProcess, wasi = loadWasi, js = loadJs, seal = () => {
+}) {
+  const failed5 = (err, code2) => port3.postMessage({
     type: WASM_PROCESS_ERROR,
-    message: err instanceof Error ? err.stack ?? err.message : String(err)
+    message: err instanceof Error ? err.stack ?? err.message : String(err),
+    ...code2 === void 0 ? {} : { code: code2 }
   });
+  let refused2;
+  const sealOnce = () => {
+    if (refused2 === void 0) {
+      try {
+        seal();
+        refused2 = null;
+      } catch (error) {
+        refused2 = { error };
+      }
+    }
+    return refused2;
+  };
   return (data) => {
     const type = data?.type;
+    if (type !== WASM_THREAD_INIT && type !== WASM_PROCESS_INIT) return;
+    const refusal2 = sealOnce();
     if (type === WASM_THREAD_INIT) {
+      if (refusal2) return failed5(refusal2.error);
       wasi().then((m) => m.runWasiThread(data, port3)).catch(failed5);
       return;
     }
-    if (type !== WASM_PROCESS_INIT) return;
+    if (refusal2) return failed5(refusal2.error, NOT_RUNNABLE2);
     started(data, port3, run, wasi, js).then(
       (code2) => port3.postMessage({ type: WASM_PROCESS_EXIT, code: code2 }),
       failed5