1401af3d82
feat(pointer): virtio tablet as 2nd input dev (driver per-instance VAs, abs/btn decode), input server serves 2 devices on one notif; display software cursor, bar click switches window, presses/releases to front window in its px; k-ui hit-tests (press focuses, release on same presses, field only focuses)
kernel-hardening
Gabriel Kaszewski2026-10-28 16:50:20 +01:00
0de13f124d
fix: pm running apps grow (death-bit bound 60); spawntest stress: 30 files open, apps until BUSY then room comes back; docs: limits and why
Gabriel Kaszewski2026-10-28 16:22:19 +01:00
1f2134fcec
fix: storage tables grow (handles, open files, encrypted opens, grants: Slots/Vec, no 8/16 caps; release follows all narrowed grants); storage says FULL, init spawn STORAGE_BUSY (was NOT_FOUND), pm BUSY; cap slots per process 64 -> 255
Gabriel Kaszewski2026-10-28 16:17:36 +01:00
3b71f29f4c
fix: capacities single-sourced in types (display MAX_WINDOWS/BUFFER_PAGES, storage MAX_CLIENTS), display + storage budgets derived from them, const asserts on VA layouts; kernel regions 64 -> 256
Gabriel Kaszewski2026-10-28 16:06:55 +01:00
495bf03484
fix: stacks at top of user VA in own 1 MiB band (guard, heap kept below), 8/16 pages default; kernel fault msg names pid, kind, flags stack overflow; flaky OVERFLOW + spawntest/test-qemu check it
Gabriel Kaszewski2026-10-28 16:03:06 +01:00
18e8b3ecb8
feat(desktop): home app (system-only launch cap, LAUNCH_BADGE: apps+launch only), pm starts it with session (relaunch <=5); display keys F1/Alt+Tab next, F2 home, F4 close app (ROLE from launcher, terminal exempt), close returns to previous window; closed window -> app exits; shell 'name &'; launch by id; pm stack 8, storage 16 clients
Gabriel Kaszewski2026-10-28 15:50:05 +01:00
c3eb70191b
feat: room for many apps: qemu 512M, pool sized from RAM (448M, 114688 frames), user VA 32M -> 1G, display 8 windows (buffers at 0x1000_0000, stack 14 pages), pm app budget 24 MiB, init 16 children (notif bits moved)
Gabriel Kaszewski2026-10-28 15:31:30 +01:00
7804934008
perf(k-ui): own pixel loops (pixels.rs): float only in corners, SWAR blends, banded shadow; screen fade only over content toward wallpaper (was full-window tiny-skia fill, ~600ms); blur at quarter res, row/column-sum passes, SWAR 2x upscale; ring frame ~75 -> ~20ms
Gabriel Kaszewski2026-10-28 15:03:19 +01:00
815a2f9fe2
perf(display): present copies window rows as-is (scanout R8G8B8X8 = window byte order, Host hands out row bytes, Framebuffer::write_rgba_row); Window copy_from/copy_to one fenced memcpy; full present ~65ms -> ~3ms
Gabriel Kaszewski2026-10-28 14:47:06 +01:00
d26b265d38
feat(k-ui): glass look: orb wallpaper + blurred, tinted glass panels (half-res backdrop per theme+size, integer code, frames only copy), soft analytic shadow, top gloss; contrast checked over wallpaper/glass per orb (light accent -> #0a5cb0); partial frames drawn in place; Rect geometry, tree lookups split out; settings/tally 6 MiB
Gabriel Kaszewski2026-10-28 14:19:54 +01:00
3b71243dea
feat(k-ui): motion: ring springs to focus, toggle knob slides, screens slide+fade in (theme motion tokens, 0 = off); 16ms frame timer only while moving; motion-only frames drawn+presented in part (whole elements, pixel-snapped rects, == full draw); virtio fb flushes only damage; TICKS_PER_MS in types
Gabriel Kaszewski2026-10-28 13:58:38 +01:00
2b82f052ae
feat(theme): per-app accent: pm gives window manifest accent before app runs (display ACCENT, refused after BUFFER); theme::with_accent keeps hue, shifts lightness until contrast passes, else theme accent; tally pink
Gabriel Kaszewski2026-10-28 13:40:38 +01:00
6827e1455d
feat(theme): themes as files (theme crate: toml subset + ints, contrast check, wire); whimsy dark + light; display reads themes/, serves THEME/THEME_NAME, init SET_THEME -> THEME_CHANGED to all windows, bar themed; k-ui follows; settings appearance; init keeps choice in sealed users/<id>/settings/, reapplies at sign-in + display restart
Gabriel Kaszewski2026-10-28 13:36:57 +01:00
29becf297c
feat(settings): settings app: apps list + per-capability allow/revoke, about (who/role), sign out; system-only caps permissions/session (install refused); pm MANAGE_BADGE copy (list/apps/allow/revoke only), APPS op; init WHO + session pass-on; factory decisions seeded for new system apps; k-ui list_item/toggle, screens/back/scroll
Gabriel Kaszewski2026-10-28 13:14:35 +01:00
a2d4a7d085
perf(kernel): kernel static all-zero -> .bss (image 812K -> 173K): domain::Slot (repr(u8) Empty=0) for tables, zero generation counters, core ids by position, pool/platform installed at boot; Option-backed Slot under kani (cbmc speed); build fails if .data > 16K
Gabriel Kaszewski2026-10-28 13:01:52 +01:00
419b715a1f
fix(libkos): heap leaked padding/remainders + never coalesced (UI churn OOM'd tally); address-ordered free list, merge on free, split align padding; Heap<Pages> host-tested
Gabriel Kaszewski2026-10-28 13:01:52 +01:00
fe73b89525
feat(k-ui): first slice: App trait + run loop, builders (column/row/text/button), flex layout, theme tokens (Whimsy Dark), tiny-skia + fontdue render (Noto Sans Latin subset), keyboard focus ring; tally demo; manifest memory key (pm spawns with it)
Gabriel Kaszewski2026-10-28 03:20:41 +01:00
c256f4ecf3
feat(kernel): lazy user FPU: off until first FP insn (illegal-insn trap -> zeroed regs, retry), save on dirty trap, restore on switch, off for threads without + kernel; spawntest per-thread FP check
Gabriel Kaszewski2026-10-28 03:20:41 +01:00
864f039bc7
feat(display): windows: full-screen, F1 cycles, OS bar (names, front, user); canvas-only (display-owned buffers, 4 max, reused); launchers OPEN (pm per app, terminal own), window caps minted by display; FORGET on launcher death via init courier; raster crate (font, chunked text); F-keys in input; terminal+snake on canvas; REDRAW gone
Gabriel Kaszewski2026-10-28 02:48:39 +01:00
d04dcfffa1
feat(ipc): saved replies: SaveReply/ReplySaved (8 per thread, released on thread death, unforgeable); terminal READ saved until Enter (line.rs editor, reader queue), now pinged
Gabriel Kaszewski2026-10-28 02:09:34 +01:00
3d69c10079
feat(init): watchdog: pinger thread PINGs servers (framework answers, no server code), main kills after 5s unanswered -> crash path; not pinged: terminal, pm (handlers wait for user); give-up drains queued ping; spawntest hang check
Gabriel Kaszewski2026-10-28 01:51:39 +01:00
28f1ace00a
feat(init): supervise servers+session progs: restart on death, same endpoint, backoff 0/1/5/30s then give up, restarts_clients cascade; release grants/spawn at stop (stale-slot safe); storage death fatal; init output via printer thread (never blocks on log); terminal Ctrl+C via CONTROL-badged copy, latest wins; flaky test server + spawntest restart/backoff check
Gabriel Kaszewski2026-10-28 01:44:24 +01:00
c4871320a0
fix(clippy): make clippy = host libs + riscv programs (shared PROGRAMS); libkos alloc spinlock (was unlocked across threads); keystore Account; gpu Rect; factory Entry; Default impls, let-chains, div_ceil, iter loops
Gabriel Kaszewski2026-10-28 01:17:21 +01:00
29a25bd8c2
feat(users): keystore v2 (8 slots, per-user salt+name tag, owner admin key opens sealed user dir, per-user duress); gatekeeper login by name+passcode, owner menu (add/remove/guests), passcode change, guest sessions
Gabriel Kaszewski2026-10-28 00:29:07 +01:00
9dc751c466
feat(storage): per-app/owner/system encryption live: gatekeeper hands seed + fresh flag, storage unlocks layer, init seeds areas from factory/ (empties on new key); rmdir op; test-qemu checks sealed home + reboot persistence
Gabriel Kaszewski2026-10-28 00:07:41 +01:00
e8191be160
feat(storage): encrypted areas layer (home, system, data/<id>) over any FS; locked until key; plaintext refused; tamper/truncation detected; tests on memory + real ext4
Gabriel Kaszewski2026-10-27 23:55:35 +01:00
83809bbe94
feat(userspace): programs in /bin w/o .elf; bin manifests (needs = display) so shell runs snake; Ctrl+C kills foreground via terminal interrupt notification; ctrl keys; sleep
Gabriel Kaszewski2026-10-27 21:16:00 +01:00
1fc5a54f06
feat(storage): scoped grants (subtree, ro/rw), narrow-only, release revokes all holders; IPC KEEP_DELEGATE opt-in; shell cd/pwd, programs get ro cwd
Gabriel Kaszewski2026-10-27 20:20:34 +01:00
c603a578c0
feat(userspace): shell runs programs (ls, cat) via spawn w/ terminal+storage+args page; ext4 holes read as zeros; storage re-attach same buffer
Gabriel Kaszewski2026-10-27 17:22:08 +01:00
0fd568cdad
feat(storage): ext4-only disk via mkfs.ext4 -d; drop FAT16; feature-gated mount (ro on unknown ro_compat); ext4 read spans blocks, delete clears inode, mkdir counts dir; virtio-blk writes; test-qemu e2fsck gate
Gabriel Kaszewski2026-10-27 17:09:35 +01:00
4030dd4315
feat(adapter): init+storage packed into kernel image; drop adapter FAT16 reader + virtio-blk
Gabriel Kaszewski2026-10-27 16:58:11 +01:00
b80303f553
feat(userspace): terminal server + shell desktop; US keymap w/ shift; libkos allocator multi-page fix; panics print
Gabriel Kaszewski2026-10-27 16:50:35 +01:00
2845d190f0
feat(display): input routed via display server to focused app; input Subscribe; uses caps badged + Delegate
Gabriel Kaszewski2026-10-27 16:38:16 +01:00
64ec5df379
feat(display): DrawText with built-in Spleen 8x16 font (BSD-2)
Gabriel Kaszewski2026-10-27 16:33:26 +01:00
8587661684
feat(init): spawn service over IPC with per-client allowance refunded on child death; up to 4 death watchers; spawntest on test image
Gabriel Kaszewski2026-10-27 16:21:08 +01:00
817a38993b
feat(kernel): WatchDeath + SetTimer events as notification signals; adapter wakes at earliest deadline
Gabriel Kaszewski2026-10-27 16:06:04 +01:00
a4f467f45d
feat(userspace): log server sole console holder; init boots from manifest; adapter loads only init+storage
Gabriel Kaszewski2026-10-27 15:40:19 +01:00
4049ba5007
feat(kernel): per-process budgets (pages, endpoints, notifs, regions) carved from creator, returned on death; init owns pool
Gabriel Kaszewski2026-10-27 15:08:58 +01:00
7415bab7f5
feat(kernel): console cap gates DebugPutchar, no uart fast path; spawn start arg in a0; delegate returns slot
Gabriel Kaszewski2026-10-27 14:54:36 +01:00
33e1c849d1
feat(kernel): ipc cap transfer drops Delegate; one owner per irq line, freed when owner dies
Gabriel Kaszewski2026-10-27 14:42:28 +01:00
37c482c36c
chore: fix build warnings (unused vars/imports, dead ext4 param/field/fn)
Gabriel Kaszewski2026-10-27 14:12:50 +01:00
b4390b7b6d
refactor(userspace): split syscall/fat16/ext4 by concern; trim comments
Gabriel Kaszewski2026-10-27 13:21:53 +01:00
99273db6d3
refactor(adapter): split trap/page_table/smp/entry by concern; trim comments
Gabriel Kaszewski2026-10-27 13:21:53 +01:00
95dbe7b9d5
refactor(kernel): split ipc/memory/lib/thread by concern; trim comments
Gabriel Kaszewski2026-10-27 13:21:53 +01:00
b814bd9570
test: on-hardware SMP self-test (revoke/kill must stop every hart) + make test-qemu
Gabriel Kaszewski2026-10-27 12:54:42 +01:00
909b3f0503
feat(storage): full file protocol over per-client shared region (badged clients, owned handles, clamped lengths, ReadOnly on unwritable disk); init loads via libkos::fs; drop boot shared buffer
Gabriel Kaszewski2026-10-27 12:42:37 +01:00
694c675a40
feat: devices via caps (BootInfo, init assigns devices, drivers map MMIO/DMA themselves, IRQ-driven input); drop boot device wiring and info pages; headless display fallback
Gabriel Kaszewski2026-10-27 12:28:39 +01:00
8bc5402a29
fix(userspace): clip display rects, bounds-check session app ids and fat16 handles, reject bad fat16 geometry, session kills via process cap
Gabriel Kaszewski2026-10-27 12:11:13 +01:00
e8a2963b24
feat(userspace): Call/ReplyRecv IPC, malformed-request replies, servers exit on dead endpoint; drop send/receive compat, select!, async_syscall
Gabriel Kaszewski2026-10-27 12:06:10 +01:00
2a8a5b0c27
perf(kernel): linked cap tree, translate-based page lookup, next-fit frames/heap, targeted dequeue; host benches
Gabriel Kaszewski2026-10-27 01:33:26 +01:00
b87a62475f
feat(adapter): higher-half kernel (linked at PHYS_OFFSET, boot trampoline, no low mappings), fix SBI ecall clobbers
Gabriel Kaszewski2026-10-27 00:25:20 +01:00
55758ae5b2
feat: kernel W^X (per-section perms, firmware unmapped, stack guard, boot check), halt on kernel faults, region W^X across processes
Gabriel Kaszewski2026-10-27 00:13:00 +01:00
bafc18a5f8
feat(kernel): SystemControl cap for halt, board device table + boot caps to init, RegionAddress syscall, idle loop services irqs
Gabriel Kaszewski2026-10-26 23:59:57 +01:00
130a82f50d
feat(kernel): shared ABI decoder+proofs, no-panic gate, syscall storm, kani on shrunk kernel
Gabriel Kaszewski2026-10-26 23:44:09 +01:00
154599e3af
feat(kernel): derivation-tree revocation, region caps
Gabriel Kaszewski2026-10-26 20:41:03 +01:00
76f10ff1f1
feat(kernel): seL4-style IPC, notifications, status ABI
Gabriel Kaszewski2026-10-26 20:27:38 +01:00