feat(booter): cache syscalls proc JSON, net tuning hints, /dev/shm unlink, POSIX/docs sync
- Cache /proc/bare_os/syscalls.json until warm read cache clear; invalidate with vfs.bareOsClearWarmReadCaches - net_summary: optional udxTuning / hyperswarmTuning from BARE_OS_UDX_* / BARE_OS_HYPERSWARM_* JSON - Metric: operator.corestore_snapshot_hint on bareOsCorestoreSnapshotHint - pathconf: _PC_NAME_MAX 128 under /dev/shm - vfs: fix unlink for /dev/shm segments; add roundtrip test - protocol: bareOsIsAllowedSeedRpcMethodShort + tests - getconf: _POSIX_SHARED_MEMORY_OBJECTS, _POSIX_MESSAGE_PASSING, _POSIX_ASYNCHRONOUS_IO + test - microbench: syscall suite (syscalls proc JSON stringify) - JSON Schema bare-os-syscalls.schema.json schemaVersion 5; posix-conformance-matrix ops = getconf - Docs: blind-relay security note, compat matrix (1.38.0 / 1.0.4), handbook 04/09, appendix, OTA note - Pear: document host coupling in compatibility-matrix (no pear-runtime manifest entry)
This commit is contained in:
+10
-4
@@ -211,15 +211,21 @@ Scans vendored **`kernel/lib/bare/bundles/*.js`** for **`TODO` / `FIXME` / `XXX`
|
||||
|
||||
## `sync-holepunch-clones.mjs`
|
||||
|
||||
**Usage:** `node scripts/sync-holepunch-clones.mjs`
|
||||
**Usage:** `node scripts/sync-holepunch-clones.mjs` (also **`npm run audit:holepunch-clones`** from the repo root)
|
||||
|
||||
Writes **[`docs/audit/holepunch-clone-sync-report.json`](../docs/audit/holepunch-clone-sync-report.json)** comparing **`packages/bare-os-booter/lib/bare-module-manifest.json`** entry names to optional local clones under **`BARE_OS_HOLEPUNCH_CLONES_ROOT`** (default **`$HOME/dev/pearcli/holepunch-repos/holepunchto_repos`**). Operator-maintained; not in CI.
|
||||
Writes **[`docs/audit/holepunch-clone-sync-report.json`](../docs/audit/holepunch-clone-sync-report.json)** for every distinct **`package`** name in **`packages/bare-os-booter/lib/bare-module-manifest.json`** (also honors legacy **`name`** / **`packageName`** if present). Scoped npm names (**`@scope/pkg`**) are mapped to the **`pkg`** directory expected under **`holepunchto_repos`**. Each row records **`cloneExists`**, **`gitHead`**, **`originMainHead`** (run **`git fetch origin main`** in clones so **`origin/main`** is meaningful), and **`packageJsonVersion`**. Set **`BARE_OS_HOLEPUNCH_CLONES_ROOT`** when your checkout is not **`$HOME/dev/pearcli/holepunch-repos/holepunchto_repos`**. Operator-maintained; not in default CI.
|
||||
|
||||
## `verify-holepunch-clone-drift.mjs`
|
||||
|
||||
**Usage:** `BARE_OS_HOLEPUNCH_DRIFT_CHECK=1 node scripts/verify-holepunch-clone-drift.mjs`
|
||||
|
||||
No-op unless **`BARE_OS_HOLEPUNCH_DRIFT_CHECK=1`**. For each repo basename listed in **[`docs/audit/holepunch-drift-repos.json`](../docs/audit/holepunch-drift-repos.json)**, checks that **`origin/main`** is an ancestor of **`HEAD`** (clone not behind remote). Use **`sync-holepunch-clones.mjs`** first to see which manifest packages map to existing clones; copy critical names into **`holepunch-drift-repos.json`** for release gates. Root **`pretest`** invokes this script (it skips when the env var is unset).
|
||||
|
||||
## `verify-bundle-throws.mjs`
|
||||
|
||||
**Usage:** `node scripts/verify-bundle-throws.mjs`
|
||||
|
||||
Scans vendored **`kernel/lib/bare/bundles/*.js`** for **`new Error("…")`** string arguments whose message matches incomplete-implementation phrases (**`not implemented`**, **`not yet implemented`**, **`abstract method … not implemented`**), regardless of whether the call is **`throw`**, **`cb(…)`**, or **`emit("error", …)`**. Bundles listed in **[`docs/audit/bundle-throw-allowlist.json`](../docs/audit/bundle-throw-allowlist.json)** ( **`schemaVersion` 2** — per-file **`bundleFile`**, **`rationale`**, **`triggerCondition`**) are skipped. Rebuild bundles with **`npm run build -w bare-os-bare-libs`** before tightening the allowlist. Root **`pretest`**.
|
||||
Scans vendored **`kernel/lib/bare/bundles/*.js`** for **`new Error("…")`** string arguments whose message matches incomplete-implementation phrases (**`not implemented`**, **`not yet implemented`**, **`abstract method … not implemented`**), regardless of whether the call is **`throw`**, **`cb(…)`**, or **`emit("error", …)`**. Known-upstream stream and ICO messages are rewritten in **`scripts/sanitize-bare-bundles.mjs`** during **`bare-os-bare-libs`** build; **[`docs/audit/bundle-throw-allowlist.json`](../docs/audit/bundle-throw-allowlist.json)** is **empty** by policy. Root **`pretest`**.
|
||||
|
||||
## `verify-kernel-program-doc.mjs`
|
||||
|
||||
@@ -253,7 +259,7 @@ Compares **`bootMs`** fields from two benchmark JSON files; exits **1** when reg
|
||||
|
||||
## `kernel-microbench.mjs`
|
||||
|
||||
**Usage:** `node scripts/kernel-microbench.mjs [--list] [--suite boot|vfs|crypto] [--all]`
|
||||
**Usage:** `node scripts/kernel-microbench.mjs [--list] [--suite boot|vfs|crypto|syscall] [--all]`
|
||||
|
||||
Host-side microbench driver used as a **regression-shaped** workload (not a literal cold-boot timer). The **`boot`** suite prints JSON with **`bootMs`** suitable for **`kernel-program-release-gate.mjs`**. Example baseline fixture: [`fixtures/kernel-microbench-release-gate-baseline.example.json`](fixtures/kernel-microbench-release-gate-baseline.example.json).
|
||||
|
||||
|
||||
Reference in New Issue
Block a user