feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

scripts/make-disk-image.sh

@@ -37,9 +37,9 @@ staged() {
     fi
 }
 
-# home/, system/ and data/ are encrypted, so not made here: init seeds them
-# from factory/ (plaintext) once the gatekeeper has the key.
-mkdir -p "${ROOT}/bin" "${ROOT}/apps" "${ROOT}/factory/home" "${ROOT}/factory/system/permissions" "${ROOT}/factory/data"
+# Each user's folder in users/ is encrypted, so not filled here: init seeds
+# a new user's areas from factory/ (plaintext) once they are signed in.
+mkdir -p "${ROOT}/bin" "${ROOT}/apps" "${ROOT}/users" "${ROOT}/factory/home" "${ROOT}/factory/permissions" "${ROOT}/factory/data" "${ROOT}/factory/apps"
 # System servers and the shell: init starts these.
 copy display-qemu       display
 copy input-qemu         input
@@ -55,7 +55,7 @@ app ls
 app sleep
 app snake
 staged counter inbox/counter
-# The owner's first files.
+# A user's first files.
 cp -r disk/home/. "${ROOT}/factory/home/"
 # Only the test image: its presence makes init run the self-test.
 if [ -n "${SMPTEST:-}" ]; then