@ai-ecoverse/slicc-kernel 1.65.1 → 1.66.0

package/dist/index.js

@@ -1095,7 +1095,7 @@ var RemoteTransport = class {
 };
 
 // src/client/protocol.ts
-var PROTOCOL = [1, 8];
+var PROTOCOL = [1, 9];
 function locksOf(scope = globalThis) {
   const locks = scope.navigator?.locks;
   return typeof locks?.request === "function" ? locks : void 0;
@@ -1799,6 +1799,7 @@ function initCall(options, transport) {
     ...options.hostname !== void 0 ? { hostname: options.hostname } : {},
     ...options.users !== void 0 ? { users: options.users } : {},
     ...options.onDenial ? { denials: true } : {},
+    ...options.approve ? { approve: true } : {},
     ...options.processMounts !== void 0 ? {
       processMounts: typeof options.processMounts === "function" ? "ask" : options.processMounts
     } : {}
@@ -1853,6 +1854,38 @@ async function mountPolicy(options, worker, { id, req }) {
   }
   worker.postMessage({ mountAllowed: { id, allowed } });
 }
+function approver(approve, worker) {
+  const asked = /* @__PURE__ */ new Map();
+  const handlers = {
+    handle(data) {
+      if ("sudoAsk" in data) void handlers.ask(data.sudoAsk);
+      else if ("sudoAbort" in data) handlers.abort(data.sudoAbort);
+      else return false;
+      return true;
+    },
+    async ask(req) {
+      const control = new AbortController();
+      asked.set(req.id, control);
+      let answer = "deny";
+      try {
+        answer = await approve?.(req, { signal: control.signal });
+      } catch {
+      }
+      asked.delete(req.id);
+      if (control.signal.aborted) return;
+      worker.postMessage({ sudoAnswer: { id: req.id, answer } });
+    },
+    abort({ id, reason }) {
+      asked.get(id)?.abort(reason);
+      asked.delete(id);
+    },
+    close() {
+      for (const control of asked.values()) control.abort("withdrawn");
+      asked.clear();
+    }
+  };
+  return handlers;
+}
 async function createKernel(options = {}) {
   if (!globalThis.crossOriginIsolated) throw new Error(ISOLATION);
   if (options.hostname !== void 0 && !isHostname(options.hostname)) {
@@ -1865,9 +1898,11 @@ async function createKernel(options = {}) {
   let failure3;
   const dials = dialer((req) => call(req));
   const cdp = cdpBridge(options.cdp);
+  const approvals = approver(options.approve, worker);
   const fail = (error) => {
     dials.reset();
     cdp.close();
+    approvals.close();
     failure3 = error;
     bridge?.close();
     uplinks?.close();
@@ -1902,27 +1937,23 @@ async function createKernel(options = {}) {
     source,
     insert: async () => void await call({ op: "insert", target, source, handle: await chosen(handle) })
   });
-  worker.addEventListener(
-    "message",
-    ({
-      data
-    }) => {
-      if ("denial" in data) return void options.onDenial?.(data.denial);
-      if ("net" in data) return bridge?.answer(data);
-      if ("uplink" in data) return uplinks?.answer(data);
-      if ("cdpOpen" in data) return cdp.open(data);
-      if ("mountPolicy" in data) return void policy(data.mountPolicy);
-      if ("medium" in data) return pendingMedium(data.medium);
-      if ("hostfs" in data) return void grantHostfs(data.hostfs);
-      const call2 = pending.get(data.id);
-      if (!call2) return;
-      if (data.fd !== void 0) return call2.output?.(data.fd, data.bytes);
-      if (data.started !== void 0) return call2.started?.(data.started);
-      pending.delete(data.id);
-      if (data.error !== void 0) call2.reject(failed(data.error, data.code));
-      else call2.resolve(data.result);
-    }
-  );
+  worker.addEventListener("message", ({ data }) => {
+    if ("denial" in data) return void options.onDenial?.(data.denial);
+    if (approvals.handle(data)) return;
+    if ("net" in data) return bridge?.answer(data);
+    if ("uplink" in data) return uplinks?.answer(data);
+    if ("cdpOpen" in data) return cdp.open(data);
+    if ("mountPolicy" in data) return void policy(data.mountPolicy);
+    if ("medium" in data) return pendingMedium(data.medium);
+    if ("hostfs" in data) return void grantHostfs(data.hostfs);
+    const call2 = pending.get(data.id);
+    if (!call2) return;
+    if (data.fd !== void 0) return call2.output?.(data.fd, data.bytes);
+    if (data.started !== void 0) return call2.started?.(data.started);
+    pending.delete(data.id);
+    if (data.error !== void 0) call2.reject(failed(data.error, data.code));
+    else call2.resolve(data.result);
+  });
   worker.addEventListener("error", (event) => {
     event.preventDefault();
     fail(new Error(`slicc-kernel worker failed: ${event.message}`));