feat(kernel): per-process budgets (pages, endpoints, notifs, regions) carved from creator, returned on death; init owns pool

crates/adapter-riscv/src/devices/mod.rs

@@ -1,4 +1,4 @@
-// Boot-time userspace setup: the display's page quota and init's BootInfo page.
+// Boot-time userspace setup: init's BootInfo page.
 
 use crate::hw::uart::Uart;
 use types::address::VirtualAddress;
@@ -6,20 +6,10 @@ use types::bootinfo::{BOOT_INFO_VA, BootDevice, BootInfo, MAGIC, MAX_BOOT_DEVICE
 use types::id::ProcessId;
 use types::mapping::PagePerms;
 
-/// The framebuffer alone is ~1000 pages at 1280x800.
-const DISPLAY_PAGE_LIMIT: usize = 2048;
-
 fn kern() -> &'static mut kernel::Kernel<crate::platform::RiscVPlatform> {
     unsafe { &mut *crate::kernel_ptr() }
 }
 
-/// Lets the display server hold a framebuffer.
-pub(crate) fn display_quota(uart: &Uart, display: ProcessId) {
-    kern()
-        .set_page_limit(display, DISPLAY_PAGE_LIMIT)
-        .unwrap_or_else(|_| crate::halt(uart, "display quota"));
-}
-
 /// Tells init, in a read-only page at BOOT_INFO_VA, which of its slots hold
 /// each board device's capabilities.
 pub(crate) fn boot_info(