Gabriel Kaszewski 91f7d28834 feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

2026-10-28 01:08:50 +01:00

..

proofs

feat(storage): scoped grants (subtree, ro/rw), narrow-only, release revokes all holders; IPC KEEP_DELEGATE opt-in; shell cd/pwd, programs get ro cwd

2026-10-27 20:20:34 +01:00

address.rs

refactor: ByteOffset newtype for window/register/ring offsets; named virtio-gpu cmd fields

2026-10-27 21:52:33 +01:00

apps.rs

feat(apps): permission manager equips apps (manifest+consent+decisions in /system), launches via init w/ file grant; shell unprivileged (/home); install/apps/allow/revoke; revoke stops running app; app-image tool; counter app

2026-10-27 22:56:44 +01:00

badge.rs

refactor(kernel): split ipc/memory/lib/thread by concern; trim comments

2026-10-27 13:21:53 +01:00

bootinfo.rs

feat(kernel): console cap gates DebugPutchar, no uart fast path; spawn start arg in a0; delegate returns slot

2026-10-27 14:54:36 +01:00

bounded.rs

feat(boot): gatekeeper gates boot (init→UI→gatekeeper→data); keystore disk + virtio-rng discovery; terminal READ_SECRET; storage SET_KEY; PageCount ≤8192, alloc cap gone; device window 0x01D0_0000; test-qemu types passcode over 2 boots

2026-10-27 23:44:05 +01:00

budget.rs

feat(kernel): per-process budgets (pages, endpoints, notifs, regions) carved from creator, returned on death; init owns pool

2026-10-27 15:08:58 +01:00

display.rs

perf: fast display (row runs, bulk fills, pixel scroll), terminal draws changed cells only + scrolls pixels, print! batched (was IPC per fmt fragment), snake sleeps on timer

2026-10-27 22:09:33 +01:00

gatekeeper.rs

feat(users): keystore v2 (8 slots, per-user salt+name tag, owner admin key opens sealed user dir, per-user duress); gatekeeper login by name+passcode, owner menu (add/remove/guests), passcode change, guest sessions

2026-10-28 00:29:07 +01:00

generation.rs

refactor: unsafe only in adapter + libkos; forbid(unsafe_code) everywhere else; libkos Window (volatile, bounds-checked MMIO/DMA/shared mem), entry!, thread::spawn; MapRegion returns pages; kernel const-built (with_cores/install_platform); newtype addrs

2026-10-27 21:43:24 +01:00

id.rs

feat(kernel): seL4-style IPC, notifications, status ABI

2026-10-26 20:27:38 +01:00

input.rs

feat(display): input routed via display server to focused app; input Subscribe; uses caps badged + Delegate

2026-10-27 16:38:16 +01:00

lib.rs

feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

2026-10-28 01:08:50 +01:00

log.rs

feat(userspace): log server sole console holder; init boots from manifest; adapter loads only init+storage

2026-10-27 15:40:19 +01:00

macros.rs

fix: sched round-robin, cap slot OOB panic, clippy, make ci

2026-10-26 19:08:30 +01:00

mapping.rs

feat(kernel): kernel-owned memory model

2026-10-26 19:40:50 +01:00

permission.rs

feat(kernel): derivation-tree revocation, region caps

2026-10-26 20:41:03 +01:00

spawn.rs

feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

2026-10-28 01:08:50 +01:00

start_arg.rs

feat(apps): permission manager equips apps (manifest+consent+decisions in /system), launches via init w/ file grant; shell unprivileged (/home); install/apps/allow/revoke; revoke stops running app; app-image tool; counter app

2026-10-27 22:56:44 +01:00

storage.rs

feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

2026-10-28 01:08:50 +01:00

syscall_abi.rs

feat(storage): scoped grants (subtree, ro/rw), narrow-only, release revokes all holders; IPC KEEP_DELEGATE opt-in; shell cd/pwd, programs get ro cwd

2026-10-27 20:20:34 +01:00

terminal.rs

feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

2026-10-28 01:08:50 +01:00

time.rs

feat(kernel): WatchDeath + SetTimer events as notification signals; adapter wakes at earliest deadline

2026-10-27 16:06:04 +01:00

user.rs

feat(users): per-user sealed folders users/<id>/{home,apps,data,permissions}; storage SET_USER/LOCK/PURGE; init sign-in/sign-out loop (purge fresh/removed/guest, seed from factory, session start/stop); shell logout; pm user+system app shelves; terminal SIGNED_OUT; per-program stack (gatekeeper 12p); 128K load scratch

2026-10-28 01:08:50 +01:00