@ai-ecoverse/slicc-kernel 1.65.2 → 1.66.1

package/dist/index.js

@@ -43,6 +43,11 @@ function serveCdpPort(port, hook, request, onDone) {
   };
 }
 
+// src/bytes.ts
+function fresh(bytes, start = 0, end = bytes.length) {
+  return new Uint8Array(bytes.subarray(start, end));
+}
+
 // src/client/dial-stream.ts
 function errorWithCode(message) {
   const code = /^E[A-Z]+/.exec(message)?.[0];
@@ -96,7 +101,7 @@ function dialStream(port, onClose) {
   const writable = new WritableStream({
     write(chunk) {
       if (closed) throw errorWithCode("EPIPE: the connection is closed");
-      const copy = chunk.slice();
+      const copy = fresh(chunk);
       const acked = new Promise((resolve, reject) => acks.push({ resolve, reject }));
       port.postMessage(copy, [copy.buffer]);
       return acked;
@@ -854,7 +859,7 @@ function serveTransport(peer, transport, { closeWaitMs = CLOSE_WAIT_MS } = {}) {
         }
         if (typeof data === "string") peer.postMessage({ net: "ws-message", nid, data });
         else {
-          const bytes = data.slice();
+          const bytes = fresh(data);
           peer.postMessage({ net: "ws-message", nid, data: bytes }, [bytes.buffer]);
         }
         flow.inflight += payloadSize(data);
@@ -892,7 +897,7 @@ function serveTransport(peer, transport, { closeWaitMs = CLOSE_WAIT_MS } = {}) {
         open.delete(nid);
         peer.postMessage({ net: "end", nid });
       } else {
-        const bytes = next.value.slice();
+        const bytes = fresh(next.value);
         peer.postMessage({ net: "chunk", nid, bytes }, [bytes.buffer]);
       }
     } catch (e) {
@@ -1095,7 +1100,7 @@ var RemoteTransport = class {
 };
 
 // src/client/protocol.ts
-var PROTOCOL = [1, 8];
+var PROTOCOL = [1, 9];
 function locksOf(scope = globalThis) {
   const locks = scope.navigator?.locks;
   return typeof locks?.request === "function" ? locks : void 0;
@@ -1799,6 +1804,7 @@ function initCall(options, transport) {
     ...options.hostname !== void 0 ? { hostname: options.hostname } : {},
     ...options.users !== void 0 ? { users: options.users } : {},
     ...options.onDenial ? { denials: true } : {},
+    ...options.approve ? { approve: true } : {},
     ...options.processMounts !== void 0 ? {
       processMounts: typeof options.processMounts === "function" ? "ask" : options.processMounts
     } : {}
@@ -1853,6 +1859,38 @@ async function mountPolicy(options, worker, { id, req }) {
   }
   worker.postMessage({ mountAllowed: { id, allowed } });
 }
+function approver(approve, worker) {
+  const asked = /* @__PURE__ */ new Map();
+  const handlers = {
+    handle(data) {
+      if ("sudoAsk" in data) void handlers.ask(data.sudoAsk);
+      else if ("sudoAbort" in data) handlers.abort(data.sudoAbort);
+      else return false;
+      return true;
+    },
+    async ask(req) {
+      const control = new AbortController();
+      asked.set(req.id, control);
+      let answer = "deny";
+      try {
+        answer = await approve?.(req, { signal: control.signal });
+      } catch {
+      }
+      asked.delete(req.id);
+      if (control.signal.aborted) return;
+      worker.postMessage({ sudoAnswer: { id: req.id, answer } });
+    },
+    abort({ id, reason }) {
+      asked.get(id)?.abort(reason);
+      asked.delete(id);
+    },
+    close() {
+      for (const control of asked.values()) control.abort("withdrawn");
+      asked.clear();
+    }
+  };
+  return handlers;
+}
 async function createKernel(options = {}) {
   if (!globalThis.crossOriginIsolated) throw new Error(ISOLATION);
   if (options.hostname !== void 0 && !isHostname(options.hostname)) {
@@ -1865,9 +1903,11 @@ async function createKernel(options = {}) {
   let failure3;
   const dials = dialer((req) => call(req));
   const cdp = cdpBridge(options.cdp);
+  const approvals = approver(options.approve, worker);
   const fail = (error) => {
     dials.reset();
     cdp.close();
+    approvals.close();
     failure3 = error;
     bridge?.close();
     uplinks?.close();
@@ -1902,27 +1942,23 @@ async function createKernel(options = {}) {
     source,
     insert: async () => void await call({ op: "insert", target, source, handle: await chosen(handle) })
   });
-  worker.addEventListener(
-    "message",
-    ({
-      data
-    }) => {
-      if ("denial" in data) return void options.onDenial?.(data.denial);
-      if ("net" in data) return bridge?.answer(data);
-      if ("uplink" in data) return uplinks?.answer(data);
-      if ("cdpOpen" in data) return cdp.open(data);
-      if ("mountPolicy" in data) return void policy(data.mountPolicy);
-      if ("medium" in data) return pendingMedium(data.medium);
-      if ("hostfs" in data) return void grantHostfs(data.hostfs);
-      const call2 = pending.get(data.id);
-      if (!call2) return;
-      if (data.fd !== void 0) return call2.output?.(data.fd, data.bytes);
-      if (data.started !== void 0) return call2.started?.(data.started);
-      pending.delete(data.id);
-      if (data.error !== void 0) call2.reject(failed(data.error, data.code));
-      else call2.resolve(data.result);
-    }
-  );
+  worker.addEventListener("message", ({ data }) => {
+    if ("denial" in data) return void options.onDenial?.(data.denial);
+    if (approvals.handle(data)) return;
+    if ("net" in data) return bridge?.answer(data);
+    if ("uplink" in data) return uplinks?.answer(data);
+    if ("cdpOpen" in data) return cdp.open(data);
+    if ("mountPolicy" in data) return void policy(data.mountPolicy);
+    if ("medium" in data) return pendingMedium(data.medium);
+    if ("hostfs" in data) return void grantHostfs(data.hostfs);
+    const call2 = pending.get(data.id);
+    if (!call2) return;
+    if (data.fd !== void 0) return call2.output?.(data.fd, data.bytes);
+    if (data.started !== void 0) return call2.started?.(data.started);
+    pending.delete(data.id);
+    if (data.error !== void 0) call2.reject(failed(data.error, data.code));
+    else call2.resolve(data.result);
+  });
   worker.addEventListener("error", (event) => {
     event.preventDefault();
     fail(new Error(`slicc-kernel worker failed: ${event.message}`));