3b71243dea
feat(k-ui): motion: ring springs to focus, toggle knob slides, screens slide+fade in (theme motion tokens, 0 = off); 16ms frame timer only while moving; motion-only frames drawn+presented in part (whole elements, pixel-snapped rects, == full draw); virtio fb flushes only damage; TICKS_PER_MS in types
2026-10-28 13:58:38 +01:00
2b82f052ae
feat(theme): per-app accent: pm gives window manifest accent before app runs (display ACCENT, refused after BUFFER); theme::with_accent keeps hue, shifts lightness until contrast passes, else theme accent; tally pink
2026-10-28 13:40:38 +01:00
6827e1455d
feat(theme): themes as files (theme crate: toml subset + ints, contrast check, wire); whimsy dark + light; display reads themes/, serves THEME/THEME_NAME, init SET_THEME -> THEME_CHANGED to all windows, bar themed; k-ui follows; settings appearance; init keeps choice in sealed users/<id>/settings/, reapplies at sign-in + display restart
2026-10-28 13:36:57 +01:00
29becf297c
feat(settings): settings app: apps list + per-capability allow/revoke, about (who/role), sign out; system-only caps permissions/session (install refused); pm MANAGE_BADGE copy (list/apps/allow/revoke only), APPS op; init WHO + session pass-on; factory decisions seeded for new system apps; k-ui list_item/toggle, screens/back/scroll
2026-10-28 13:14:35 +01:00
fe73b89525
feat(k-ui): first slice: App trait + run loop, builders (column/row/text/button), flex layout, theme tokens (Whimsy Dark), tiny-skia + fontdue render (Noto Sans Latin subset), keyboard focus ring; tally demo; manifest memory key (pm spawns with it)
2026-10-28 03:20:41 +01:00
07a0575908
feat(init,display): loader streams ELF segments (any size, kills half-built proc); window pixels RGBA8 premul (tiny-skia native), canvas mapped plain memory + pixels_mut/touch
2026-10-28 02:57:05 +01:00
864f039bc7
feat(display): windows: full-screen, F1 cycles, OS bar (names, front, user); canvas-only (display-owned buffers, 4 max, reused); launchers OPEN (pm per app, terminal own), window caps minted by display; FORGET on launcher death via init courier; raster crate (font, chunked text); F-keys in input; terminal+snake on canvas; REDRAW gone
2026-10-28 02:48:39 +01:00
d04dcfffa1
feat(ipc): saved replies: SaveReply/ReplySaved (8 per thread, released on thread death, unforgeable); terminal READ saved until Enter (line.rs editor, reader queue), now pinged
2026-10-28 02:09:34 +01:00
28f1ace00a
feat(init): supervise servers+session progs: restart on death, same endpoint, backoff 0/1/5/30s then give up, restarts_clients cascade; release grants/spawn at stop (stale-slot safe); storage death fatal; init output via printer thread (never blocks on log); terminal Ctrl+C via CONTROL-badged copy, latest wins; flaky test server + spawntest restart/backoff check
2026-10-28 01:44:24 +01:00
c4871320a0
fix(clippy): make clippy = host libs + riscv programs (shared PROGRAMS); libkos alloc spinlock (was unlocked across threads); keystore Account; gpu Rect; factory Entry; Default impls, let-chains, div_ceil, iter loops
2026-10-28 01:17:21 +01:00
91f7d28834
feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch
2026-10-28 01:08:50 +01:00
29a25bd8c2
feat(users): keystore v2 (8 slots, per-user salt+name tag, owner admin key opens sealed user dir, per-user duress); gatekeeper login by name+passcode, owner menu (add/remove/guests), passcode change, guest sessions
2026-10-28 00:29:07 +01:00
9dc751c466
feat(storage): per-app/owner/system encryption live: gatekeeper hands seed + fresh flag, storage unlocks layer, init seeds areas from factory/ (empties on new key); rmdir op; test-qemu checks sealed home + reboot persistence
2026-10-28 00:07:41 +01:00
e8191be160
feat(storage): encrypted areas layer (home, system, data/<id>) over any FS; locked until key; plaintext refused; tamper/truncation detected; tests on memory + real ext4
2026-10-27 23:55:35 +01:00
eb9e3efaac
feat(ext4): seek, rmdir (e2fsck-clean)
2026-10-27 23:53:13 +01:00
3b7d004285
feat(boot): gatekeeper gates boot (init→UI→gatekeeper→data); keystore disk + virtio-rng discovery; terminal READ_SECRET; storage SET_KEY; PageCount ≤8192, alloc cap gone; device window 0x01D0_0000; test-qemu types passcode over 2 boots
2026-10-27 23:44:05 +01:00
b7ef67ffd8
feat(gatekeeper): auth flow (setup, count-before-check, threshold/duress wipe, torn-write-safe resume) over Keystore/Random/Prompt ports; host tests
2026-10-27 23:17:18 +01:00
90e11eb2e8
feat(apps): permission manager equips apps (manifest+consent+decisions in /system), launches via init w/ file grant; shell unprivileged (/home); install/apps/allow/revoke; revoke stops running app; app-image tool; counter app
2026-10-27 22:56:44 +01:00
c8056ddac6
perf: fast display (row runs, bulk fills, pixel scroll), terminal draws changed cells only + scrolls pixels, print! batched (was IPC per fmt fragment), snake sleeps on timer
2026-10-27 22:09:33 +01:00
842d14987c
refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs
2026-10-27 21:43:24 +01:00
83809bbe94
feat(userspace): programs in /bin w/o .elf; bin manifests (needs = display) so shell runs snake; Ctrl+C kills foreground via terminal interrupt notification; ctrl keys; sleep
2026-10-27 21:16:00 +01:00
1fc5a54f06
feat(storage): scoped grants (subtree, ro/rw), narrow-only, release revokes all holders; IPC KEEP_DELEGATE opt-in; shell cd/pwd, programs get ro cwd
2026-10-27 20:20:34 +01:00
c603a578c0
feat(userspace): shell runs programs (ls, cat) via spawn w/ terminal+storage+args page; ext4 holes read as zeros; storage re-attach same buffer
2026-10-27 17:22:08 +01:00
0fd568cdad
feat(storage): ext4-only disk via mkfs.ext4 -d; drop FAT16; feature-gated mount (ro on unknown ro_compat); ext4 read spans blocks, delete clears inode, mkdir counts dir; virtio-blk writes; test-qemu e2fsck gate
2026-10-27 17:09:35 +01:00
b80303f553
feat(userspace): terminal server + shell desktop; US keymap w/ shift; libkos allocator multi-page fix; panics print
2026-10-27 16:50:35 +01:00
2845d190f0
feat(display): input routed via display server to focused app; input Subscribe; uses caps badged + Delegate
2026-10-27 16:38:16 +01:00
64ec5df379
feat(display): DrawText with built-in Spleen 8x16 font (BSD-2)
2026-10-27 16:33:26 +01:00
a4f467f45d
feat(userspace): log server sole console holder; init boots from manifest; adapter loads only init+storage
2026-10-27 15:40:19 +01:00
4049ba5007
feat(kernel): per-process budgets (pages, endpoints, notifs, regions) carved from creator, returned on death; init owns pool
2026-10-27 15:08:58 +01:00
37c482c36c
chore: fix build warnings (unused vars/imports, dead ext4 param/field/fn)
2026-10-27 14:12:50 +01:00
b4390b7b6d
refactor(userspace): split syscall/fat16/ext4 by concern; trim comments
2026-10-27 13:21:53 +01:00
909b3f0503
feat(storage): full file protocol over per-client shared region (badged clients, owned handles, clamped lengths, ReadOnly on unwritable disk); init loads via libkos::fs; drop boot shared buffer
2026-10-27 12:42:37 +01:00
694c675a40
feat: devices via caps (BootInfo, init assigns devices, drivers map MMIO/DMA themselves, IRQ-driven input); drop boot device wiring and info pages; headless display fallback
2026-10-27 12:28:39 +01:00
8bc5402a29
fix(userspace): clip display rects, bounds-check session app ids and fat16 handles, reject bad fat16 geometry, session kills via process cap
2026-10-27 12:11:13 +01:00
e8a2963b24
feat(userspace): Call/ReplyRecv IPC, malformed-request replies, servers exit on dead endpoint; drop send/receive compat, select!, async_syscall
2026-10-27 12:06:10 +01:00
818eaecadd
refactor: replace manual debug_putchar with libkos::println!
...
Init, storage server, and hello app now use println!/print! macros
instead of manual byte-by-byte UART output.
2026-10-19 01:00:33 +02:00
9dd400656c
refactor: migrate all servers, apps, binaries to libkos
2026-10-19 00:57:27 +02:00
194024bc08
fix(ext4): remove old monolithic ext4.rs superseded by ext4/ directory
2026-10-18 23:30:56 +02:00
9be67e403b
fix(ext4): review fixes — bounds checks, delete safety, blocks_count, multi-extent dirs
2026-10-18 23:28:34 +02:00
73661e925d
test(ext4): comprehensive edge case and integration tests
2026-10-18 23:17:15 +02:00
bc4659eabd
feat(ext4): mkdir and nested directory support
2026-10-18 23:16:35 +02:00
2ede01bdd2
feat(ext4): file create, write, and delete with extent management
2026-10-18 23:15:38 +02:00
bff18df349
feat(ext4): directory entry find/add/remove operations
2026-10-18 23:14:02 +02:00
fe0693b969
feat(ext4): block and inode bitmap allocation/deallocation
2026-10-18 23:12:33 +02:00
381669d9dd
feat(ext4): inode read/write, init_empty_inode, multi-extent read
2026-10-18 23:09:57 +02:00
5d5714914f
refactor(ext4): split into submodules, add io/superblock/bgd with write-back
2026-10-18 23:08:07 +02:00
d85cb5b55d
feat(storage): add mkdir to FileSystem trait with stubs
2026-10-18 23:06:26 +02:00
7c7e3b8748
refactor: apply newtypes throughout userspace API and display types
...
Every syscall stub now uses proper types from types/ — CapSlot,
EntryPoint, StackPointer, VirtualAddress, PageCount, ProcessId,
PermissionSet, Ticks. The compiler prevents swapping entry/stack,
passing a ProcessId where a CapSlot is expected, or using an
address as a page count.
New display types in types/display.rs:
- Color(u32) with rgb() constructor
- ScreenCoord(u16) for x/y positions
- Dimension(u16) for width/height
Updated throughout:
- userspace/syscall.rs: all params typed, returns Option instead
of sentinel usize::MAX
- server-framework: endpoint param is CapSlot
- port-framebuffer: trait uses Color, ScreenCoord, Dimension
- hw-virtio: DmaAddrs uses PhysicalAddress/VirtualAddress,
GPU commands use Dimension
- All servers, drivers, bins, apps updated for new signatures
- permission-manager: process field uses ProcessId
- PermissionSet: added bits() accessor
89 tests pass, full QEMU boot verified.
2026-10-18 13:45:40 +02:00
3a0395453b
refactor: extract shared hw-virtio crate, eliminate VirtIO protocol duplication
...
Two VirtIO block and two VirtIO GPU implementations (adapter + driver)
shared 90% of their protocol logic. Extracted the common code into
hw-virtio, parameterized by MmioAccess trait.
New crate: hw-virtio (no_std, zero deps)
- mmio.rs: MmioAccess trait, DirectMmio, init_legacy_device(), scan
- queue.rs: VirtioQueue with descriptor chain submit + poll
- block.rs: block read protocol (3-descriptor chain)
- gpu.rs: GPU commands (create_2d, attach_backing, set_scanout,
transfer_to_host, resource_flush)
Adapter thin wrappers (identity-mapped, statics for DMA):
- virtio_blk.rs: 220 → 53 lines
- virtio_gpu.rs: 165 → 37 lines
Driver thin wrappers (mapped VAs, phys-info for DMA):
- drivers/block/virtio: 139 → 70 lines
- drivers/framebuffer/virtio: 146 → 95 lines
Also deleted input-server/input_device.rs (1-line re-export,
superseded by port-input-device).
2026-10-18 13:29:28 +02:00
5766c6f7f7
refactor: extract ports/drivers/bins layers — clean dependency inversion
...
Separate abstractions from implementations following DIP:
servers/ drivers/
│ │
▼ ▼
ports/ (trait-only crates, zero deps)
New crates:
ports/ (abstractions):
- port-framebuffer: Framebuffer trait
- port-block-device: BlockDevice trait + SectorId
- port-input-device: InputDevice trait + InputEvent types
drivers/ (implementations depend on ports/):
- driver-framebuffer-virtio: VirtIO GPU framebuffer
- driver-framebuffer-mock: test double
- driver-block-virtio: VirtIO block device
bins/ (composition roots wire server + driver):
- display-qemu: DisplayServer<VirtioFramebuffer>
- storage-qemu: storage server with VirtIO block
Servers no longer own their hardware traits or driver code.
Neither server nor driver depends on the other — both point
inward to the port abstraction.
2026-10-18 13:13:53 +02:00
