@ai-ecoverse/slicc-kernel 1.84.1 → 1.85.0

package/README.md

@@ -628,7 +628,7 @@ With `users: 'enforce'` the kernel checks every file call that reaches it agains
 
 ### `/dev/sealed`
 
-A character device (`0666`, major 10, minor 250) through which a program talks to the embedder's `sealed` hook (`createKernel({ sealed })`), the secrets vault on the page. Emscripten and WASI programs can open it (Emscripten programs see it in `/dev`); JS programs can't yet.
+A character device (`0666`, major 10, minor 250) through which a program talks to the embedder's `sealed` hook (`createKernel({ sealed })`), the secrets vault on the page. Emscripten programs, WASI programs (`std::fs`) and JS programs (`ctx.open`, `ctx.sync.open`, listed by `ctx.fs.readdir('/dev')`) all open it, through the same kernel device, with the same framing, errnos and stamp: a JS program's stamp is built in the kernel from its own process, as for any other. A JS descriptor opened read-only refuses writes with `EBADF`. Emscripten programs see it in `/dev`. JS `stat` has no device numbers, and WASI's has none either.
 - **State per open:** each `open()` is independent; `dup` and fork share one, as on Linux.
 - **One write is one request:** a single UTF-8 JSON object of at most 64 KiB with `v` 1 and a known `op` (`seal`, `placeholder`, `list`, `test`, `request`, `status`, `cancel`, `materialize`). The write takes all the bytes or fails: `EMSGSIZE` over 64 KiB, `EINVAL` for anything else that isn't such an object. These are the only errnos; every other outcome is a JSON reply. The kernel zeroes the bytes it was given once it has parsed them.
 - **The stamp:** the hook gets the request with `caller: { pid, ppid, uid, gid, user?, groups, users, tag? }`, from the process that writes (at the write; not the one that opened it): `uid` and `gid` the effective ids, `user` the `/etc/passwd` name of `uid` read at that moment (left out when there is none), `groups` the process's supplementary groups (only root can change them), `users` the kernel's `users` mode, since a uid means more under `'enforce'`, and `tag` the process's tag (see `kernel.run`) when it has one. A `caller` in the request is replaced.

package/dist/node-process-worker.js

@@ -4303,6 +4303,7 @@ function* lookup(abs) {
   if (DEVICES.includes(name2)) return { kind: "device" };
   if (name2 === "tty") return { kind: "tty" };
   if (name2 === "clipboard") return { kind: "clipboard" };
+  if (name2 === "sealed") return { kind: "sealed" };
   const std = STDIO3.indexOf(name2);
   if (std >= 0) return { kind: "link", target: `${SELF_FD}/${std}`, fd: std };
   if (name2 === "fd") return { kind: "link", target: SELF_FD };
@@ -4346,8 +4347,7 @@ function* fdStat(fd, path) {
     return yield* pathStat(file.path);
   }
   if (info.terminal) return yield* terminalStat(info.terminal);
-  if (info.kind === "device" || info.kind === "tty" || info.kind === "clipboard")
-    return nodeStat(CHAR | 438);
+  if (CHAR_KINDS.has(info.kind)) return nodeStat(CHAR | 438);
   if (info.kind === "socket") return nodeStat(49663);
   return nodeStat(4480);
 }
@@ -4357,7 +4357,7 @@ function* fdTarget(fd, path) {
   if (info.kind === "file") return (yield { op: "fd-vfs-stat", fd }).path;
   if (info.terminal) return info.terminal;
   if (info.meta && "device" in info.meta) return `/dev/${info.meta.device}`;
-  if (info.kind === "clipboard") return "/dev/clipboard";
+  if (info.kind === "clipboard" || info.kind === "sealed") return `/dev/${info.kind}`;
   return `${info.kind === "socket" ? "socket" : "pipe"}:[${fd}]`;
 }
 function linkStat(target) {
@@ -4371,6 +4371,7 @@ function* devStat(abs, follow2) {
     case "device":
     case "tty":
     case "clipboard":
+    case "sealed":
       return nodeStat(CHAR | 438);
     case "terminal":
       return yield* terminalStat(node.name);
@@ -4405,7 +4406,7 @@ function* devReaddir(abs) {
   if (node.kind !== "dir") throw new JsCallError("ENOTDIR", abs);
   const names = yield { op: "fd-tty-names" };
   const ttys = names.filter((n) => /^\/dev\/tty\d+$/.test(n)).map((n) => n.slice(5));
-  return [...DEVICES, "clipboard", "tty", "fd", ...STDIO3, ...ttys].sort();
+  return [...DEVICES, "clipboard", "sealed", "tty", "fd", ...STDIO3, ...ttys].sort();
 }
 function* aliasOf(fd, abs, o) {
   const info = yield* fdInfo(fd, abs);
@@ -4439,6 +4440,8 @@ function* opened(abs, o) {
       const flags = write2 ? o.read === true ? 2 : 1 : 0;
       return { fd: yield { op: "fd-open-clipboard", flags }, file: false };
     }
+    case "sealed":
+      return { fd: yield { op: "fd-open-sealed" }, file: false };
     case "terminal": {
       const req = node.pts === void 0 ? { op: "fd-open-tty", name: node.name } : { op: "pty-slave-open", n: node.pts, noctty: true };
       return { fd: yield req, file: false };
@@ -4603,7 +4606,7 @@ function readWholeSync(file) {
     file.close();
   }
 }
-var DEV_READ_MAX, DEVICES, STDIO3, SELF_FD, S_IFMT, DIR, LINK, CHAR, BORN;
+var DEV_READ_MAX, DEVICES, STDIO3, SELF_FD, S_IFMT, DIR, LINK, CHAR, BORN, CHAR_KINDS;
 var init_js_dev = __esm({
   "src/process/js/js-dev.ts"() {
     "use strict";
@@ -4619,6 +4622,12 @@ var init_js_dev = __esm({
     LINK = 40960;
     CHAR = 8192;
     BORN = Date.now();
+    CHAR_KINDS = /* @__PURE__ */ new Set([
+      "device",
+      "tty",
+      "clipboard",
+      "sealed"
+    ]);
   }
 });