feat(kernel): per-process budgets (pages, endpoints, notifs, regions) carved from creator, returned on death; init owns pool

crates/adapter-riscv/src/boot/loader.rs

@@ -2,6 +2,7 @@ use crate::hw::uart::Uart;
 use crate::hw::virtio_blk::VirtioBlk;
 use crate::{boot_fs, mmu};
 use types::address::VirtualAddress;
+use types::budget::Limits;
 use types::id::{ProcessId, ThreadId};
 use types::mapping::PagePerms;
 
@@ -52,14 +53,38 @@ pub fn load_init(uart: &Uart, blk: &mut VirtioBlk) -> LoadedProcess {
     LoadedProcess { pid, tid }
 }
 
+/// The servers boot loads, their budgets carved from init's.
+pub const STORAGE: Limits = Limits {
+    pages: 256,
+    endpoints: 2,
+    notifications: 2,
+    // A buffer per client (8) and the disk's DMA.
+    regions: 12,
+};
+/// The framebuffer alone is ~1000 pages at 1280x800.
+pub const DISPLAY: Limits = Limits {
+    pages: 1280,
+    endpoints: 2,
+    notifications: 2,
+    regions: 4,
+};
+pub const INPUT: Limits = Limits {
+    pages: 64,
+    endpoints: 2,
+    notifications: 2,
+    regions: 4,
+};
+
 pub fn load_server(
     uart: &Uart,
     blk: &mut VirtioBlk,
+    init: ProcessId,
     filename: &[u8],
     label: &str,
+    limits: Limits,
 ) -> LoadedProcess {
     let pid = kern()
-        .create_process_internal()
+        .create_process_internal(init, limits)
         .unwrap_or_else(|| crate::halt(uart, "process create failed"));
     let entry = load_elf(uart, blk, pid, filename);
     let tid = kern()