@ai-ecoverse/slicc-kernel 1.77.0 → 1.77.2

package/dist/node-process-worker.js

@@ -1497,6 +1497,7 @@ var init_wasi_fds = __esm({
     WasiFds = class {
       table = /* @__PURE__ */ new Map();
       buffers = /* @__PURE__ */ new Map();
+      reported = /* @__PURE__ */ new WeakSet();
       byId = /* @__PURE__ */ new Map();
       ids = /* @__PURE__ */ new Map();
       kernel;
@@ -1821,7 +1822,16 @@ var init_wasi_fds = __esm({
       release(e) {
         if (e.type !== "file" || --e.file.refs > 0) return;
         const { buffer } = e.file;
-        buffer.flush();
+        try {
+          buffer.flush();
+        } catch (err) {
+          this.reported.add(buffer);
+          this.drop(buffer);
+          throw err;
+        }
+        this.drop(buffer);
+      }
+      drop(buffer) {
         if (--buffer.opens > 0) return;
         this.forget(buffer);
         this.letGo(buffer);
@@ -1876,7 +1886,13 @@ var init_wasi_fds = __esm({
         return e.kind;
       }
       flushAll() {
-        for (const buffer of this.buffers.values()) buffer.flush();
+        for (const buffer of this.buffers.values()) {
+          try {
+            buffer.flush();
+          } catch (err) {
+            if (!this.reported.has(buffer)) throw err;
+          }
+        }
       }
       flushEarly() {
         for (const buffer of this.buffers.values()) {
@@ -2639,7 +2655,8 @@ var init_wasi_host = __esm({
               if (this.o.fs.owners && amode & 1) throw new WasiError("EACCES");
               return;
             }
-            pathOwned(path, !nofollow);
+            const st = pathOwned(path, !nofollow);
+            if (amode & 2 && st.readonly) throw new WasiError("EROFS");
             if (!this.o.fs.owners) return;
             const kind = flags & AT_EACCESS ? "eaccess" : "access";
             this.o.fs.access?.(path, amode & 7, kind, nofollow);
@@ -8646,6 +8663,22 @@ function cString(memory, at) {
 function baseOf(Fs, dirfd) {
   return dirfd === AT_FDCWD ? Fs.cwd?.() ?? "/" : Fs.getStream?.(dirfd)?.path ?? "/";
 }
+function readonlyRefusal(Fs, memory, call2) {
+  if (!(call2.amode & W_ACCESS)) return 0;
+  try {
+    const name2 = cString(memory, call2.path);
+    const abs = name2.startsWith("/") ? name2 : `${baseOf(Fs, call2.dirfd)}/${name2}`;
+    const follow2 = (call2.flags & AT_SYMLINK_NOFOLLOW2) === 0;
+    const { node } = Fs.lookupPath.call(Fs, abs, {
+      follow: follow2
+    });
+    const bridge = node.live ? node.mount.opts.bridge : void 0;
+    const stat = bridge?.stat;
+    return stat?.(liveNodePath(node)).readonly ? -wasiErrno("EROFS") : 0;
+  } catch {
+    return 0;
+  }
+}
 function kernelChecks(Fs, memory, call2) {
   const name2 = cString(memory, call2.path);
   const abs = name2.startsWith("/") ? name2 : `${baseOf(Fs, call2.dirfd)}/${name2}`;
@@ -8659,9 +8692,12 @@ function kernelChecks(Fs, memory, call2) {
 }
 function kernelAccess(imports, fs, memory, glue) {
   wrapImport(imports, "faccessat", glue, (own) => (dirfd, path, amode, flags) => {
-    const rc = own(dirfd, path, amode, flags);
     const Fs = fs();
     const heap = memory();
+    const call2 = { dirfd, path, amode: amode & 7, flags };
+    const refused2 = Fs?.lookupPath && heap ? readonlyRefusal(Fs, heap, call2) : 0;
+    if (refused2 !== 0) return refused2;
+    const rc = own(dirfd, path, amode, flags);
     if (rc !== 0 || !Fs?.lookupPath || !heap) return rc;
     try {
       return kernelChecks(Fs, heap, { dirfd, path, amode: amode & 7, flags });
@@ -8680,7 +8716,7 @@ function linuxDevices(Fs) {
     }
   }
 }
-var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW2, EMSCRIPTEN_EPERM, O_PATH, LITERALS, UTIME_NOW, UTIME_OMIT, PROT_WRITE, MAP_PRIVATE, MAP_TYPE, O_WRONLY4, MAP_ALIGN, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE2, O_CREAT2, field, pinnedRoot, rootKind, NAME, AT_FDCWD, AT_EACCESS2, DEVICE_MODES;
+var O_CLOEXEC, FD_CLOEXEC, F_DUPFD, F_GETFD, F_SETFD, F_GETFL, F_DUPFD_CLOEXEC, tracked, IMPORT_NAMES, EBADF, AT_SYMLINK_NOFOLLOW2, EMSCRIPTEN_EPERM, O_PATH, LITERALS, UTIME_NOW, UTIME_OMIT, PROT_WRITE, MAP_PRIVATE, MAP_TYPE, O_WRONLY4, MAP_ALIGN, DIR_MODE, LINK_MODE, CHAR_DEVICE, O_ACCMODE2, O_CREAT2, field, pinnedRoot, rootKind, NAME, AT_FDCWD, AT_EACCESS2, W_ACCESS, DEVICE_MODES;
 var init_process_fds = __esm({
   "src/process/process-fds.ts"() {
     "use strict";
@@ -8739,6 +8775,7 @@ var init_process_fds = __esm({
     NAME = /^[a-z_][a-z0-9_-]*$/i;
     AT_FDCWD = -100;
     AT_EACCESS2 = 512;
+    W_ACCESS = 2;
     DEVICE_MODES = [
       ["/", 493],
       ["/dev", 493],