feat(kernel): wave 2 guest OS surface and operator parity

- Extend capability model (featureBits2) and align ADR, protocol, /proc, verify scripts
- Add seed RPC + /proc mirrors for replication queue, MBR failover hints, optional attestation
- Pear bridge: IPC request/response, mirror-drive / HDMS pairing hints, dev diagnostics
- Initd: IdleSec for socket units, units.d drop-ins, richer readiness (e.g. exec:)
- Cron: @reboot and JitterSec-style scheduling
- VFS: Linux-shaped /proc stubs (cgroups, tcp), bounded vfs.watch on safe pseudo paths
- Shell: gated parameter expansion v2; /bin/env -S and --env-file (staged script without ESM export)
- Schemas under docs/schemas; expand contract tests; kernel.ext.d → /proc extensions registry
- Refresh handbook, developer-guide, reference index, package READMEs; keep seeder kernel tree in sync

packages/bare-os-seeder/kernel/lib/bare/manifest.json

@@ -1,18 +1,18 @@
 {
   "version": 1,
   "bundles": [
-    {
-      "path": "/lib/bare/bundles/safetyCatch.js",
-      "keys": [
-        "safetyCatch"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/hypercoreIdEncoding.js",
       "keys": [
         "hypercoreIdEncoding"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/safetyCatch.js",
+      "keys": [
+        "safetyCatch"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/b4a.js",
       "keys": [
@@ -25,6 +25,12 @@
         "compactEncoding"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareUrl.js",
+      "keys": [
+        "bareUrl"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/protomux.js",
       "keys": [
@@ -32,9 +38,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareUrl.js",
+      "path": "/lib/bare/bundles/bareEvents.js",
       "keys": [
-        "bareUrl"
+        "bareEvents"
       ]
     },
     {
@@ -49,42 +55,12 @@
         "barePath"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareEvents.js",
-      "keys": [
-        "bareEvents"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareAbort.js",
       "keys": [
         "bareAbort"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareAbortController.js",
-      "keys": [
-        "bareAbortController"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareAddonResolve.js",
-      "keys": [
-        "bareAddonResolve"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareReadline.js",
-      "keys": [
-        "bareReadline"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareCrypto.js",
-      "keys": [
-        "bareCrypto"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareAnsiEscapes.js",
       "keys": [
@@ -92,21 +68,27 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareAppKit.js",
+      "path": "/lib/bare/bundles/bareAbortController.js",
       "keys": [
-        "bareAppKit"
+        "bareAbortController"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareApk.js",
+      "path": "/lib/bare/bundles/bareReadline.js",
       "keys": [
-        "bareApk"
+        "bareReadline"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareAtomics.js",
+      "path": "/lib/bare/bundles/bareAddonResolve.js",
       "keys": [
-        "bareAtomics"
+        "bareAddonResolve"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareCrypto.js",
+      "keys": [
+        "bareCrypto"
       ]
     },
     {
@@ -116,9 +98,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareAssert.js",
+      "path": "/lib/bare/bundles/bareAppKit.js",
       "keys": [
-        "bareAssert"
+        "bareAppKit"
       ]
     },
     {
@@ -127,6 +109,24 @@
         "fetch"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareAtomics.js",
+      "keys": [
+        "bareAtomics"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareApk.js",
+      "keys": [
+        "bareApk"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareAssert.js",
+      "keys": [
+        "bareAssert"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareBmp.js",
       "keys": [
@@ -176,9 +176,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareChannel.js",
+      "path": "/lib/bare/bundles/bareDebugLog.js",
       "keys": [
-        "bareChannel"
+        "bareDebugLog"
       ]
     },
     {
@@ -187,42 +187,42 @@
         "bareBundleId"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareDelta.js",
-      "keys": [
-        "bareDelta"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareDebugLog.js",
-      "keys": [
-        "bareDebugLog"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareDaemon.js",
       "keys": [
         "bareDaemon"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareChannel.js",
+      "keys": [
+        "bareChannel"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareDelta.js",
+      "keys": [
+        "bareDelta"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareDns.js",
       "keys": [
         "bareDns"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareEnv.js",
-      "keys": [
-        "bareEnv"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareDiagnosticsChannel.js",
       "keys": [
         "bareDiagnosticsChannel"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareEnv.js",
+      "keys": [
+        "bareEnv"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareExif.js",
       "keys": [
@@ -253,12 +253,6 @@
         "bareFfmpegEncodings"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareFormat.js",
-      "keys": [
-        "bareFormat"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareFormData.js",
       "keys": [
@@ -272,9 +266,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareGtk.js",
+      "path": "/lib/bare/bundles/bareFormat.js",
       "keys": [
-        "bareGtk"
+        "bareFormat"
       ]
     },
     {
@@ -283,24 +277,24 @@
         "bareFileLogger"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareHeif.js",
-      "keys": [
-        "bareHeif"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareFs.js",
-      "keys": [
-        "bareFs"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareHrtime.js",
       "keys": [
         "bareHrtime"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareGtk.js",
+      "keys": [
+        "bareGtk"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareHeif.js",
+      "keys": [
+        "bareHeif"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareHttpParser.js",
       "keys": [
@@ -308,9 +302,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareIco.js",
+      "path": "/lib/bare/bundles/bareFs.js",
       "keys": [
-        "bareIco"
+        "bareFs"
       ]
     },
     {
@@ -319,6 +313,12 @@
         "bareImageResample"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareIco.js",
+      "keys": [
+        "bareIco"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareInspect.js",
       "keys": [
@@ -337,12 +337,6 @@
         "bareHttps"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareJpeg.js",
-      "keys": [
-        "bareJpeg"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareIntl.js",
       "keys": [
@@ -350,21 +344,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareIpc.js",
+      "path": "/lib/bare/bundles/bareJpeg.js",
       "keys": [
-        "bareIpc"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareLogger.js",
-      "keys": [
-        "bareLogger"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareLief.js",
-      "keys": [
-        "bareLief"
+        "bareJpeg"
       ]
     },
     {
@@ -374,9 +356,15 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareMake.js",
+      "path": "/lib/bare/bundles/bareLogger.js",
       "keys": [
-        "bareMake"
+        "bareLogger"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareIpc.js",
+      "keys": [
+        "bareIpc"
       ]
     },
     {
@@ -385,6 +373,24 @@
         "bareLink"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareLief.js",
+      "keys": [
+        "bareLief"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareModuleResolve.js",
+      "keys": [
+        "bareModuleResolve"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareMake.js",
+      "keys": [
+        "bareMake"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareModuleLexer.js",
       "keys": [
@@ -397,24 +403,12 @@
         "bareModule"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareModuleResolve.js",
-      "keys": [
-        "bareModuleResolve"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareNdk.js",
       "keys": [
         "bareNdk"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareModuleTraverse.js",
-      "keys": [
-        "bareModuleTraverse"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareNative.js",
       "keys": [
@@ -422,15 +416,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareNet.js",
+      "path": "/lib/bare/bundles/bareModuleTraverse.js",
       "keys": [
-        "bareNet"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareMedia.js",
-      "keys": [
-        "bareMedia"
+        "bareModuleTraverse"
       ]
     },
     {
@@ -445,12 +433,24 @@
         "bareOpen"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareNet.js",
+      "keys": [
+        "bareNet"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareOs.js",
       "keys": [
         "bareOs"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareMedia.js",
+      "keys": [
+        "bareMedia"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/barePerformance.js",
       "keys": [
@@ -458,15 +458,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/barePack.js",
+      "path": "/lib/bare/bundles/barePng.js",
       "keys": [
-        "barePack"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/barePipe.js",
-      "keys": [
-        "barePipe"
+        "barePng"
       ]
     },
     {
@@ -482,9 +476,15 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/barePng.js",
+      "path": "/lib/bare/bundles/barePack.js",
       "keys": [
-        "barePng"
+        "barePack"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/barePipe.js",
+      "keys": [
+        "barePipe"
       ]
     },
     {
@@ -499,6 +499,12 @@
         "barePunycode"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareQuerystring.js",
+      "keys": [
+        "bareQuerystring"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/barePrebuild.js",
       "keys": [
@@ -512,9 +518,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareQuerystring.js",
+      "path": "/lib/bare/bundles/bareProcess.js",
       "keys": [
-        "bareQuerystring"
+        "bareProcess"
       ]
     },
     {
@@ -523,36 +529,12 @@
         "bareRealm"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareProcess.js",
-      "keys": [
-        "bareProcess"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/barePromClient.js",
       "keys": [
         "barePromClient"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareRpc.js",
-      "keys": [
-        "bareRpc"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareRepl.js",
-      "keys": [
-        "bareRepl"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareSemver.js",
-      "keys": [
-        "bareSemver"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareRuntime.js",
       "keys": [
@@ -566,15 +548,21 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareSidecar.js",
+      "path": "/lib/bare/bundles/bareSemver.js",
       "keys": [
-        "bareSidecar"
+        "bareSemver"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareRun.js",
+      "path": "/lib/bare/bundles/bareRpc.js",
       "keys": [
-        "bareRun"
+        "bareRpc"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareSidecar.js",
+      "keys": [
+        "bareSidecar"
       ]
     },
     {
@@ -583,24 +571,24 @@
         "bareSignals"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareRun.js",
+      "keys": [
+        "bareRun"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareRepl.js",
+      "keys": [
+        "bareRepl"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareStringDecoder.js",
       "keys": [
         "bareStringDecoder"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareStorage.js",
-      "keys": [
-        "bareStorage"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareSvg.js",
-      "keys": [
-        "bareSvg"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareStream.js",
       "keys": [
@@ -608,9 +596,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareStdio.js",
+      "path": "/lib/bare/bundles/bareStorage.js",
       "keys": [
-        "bareStdio"
+        "bareStorage"
       ]
     },
     {
@@ -619,12 +607,24 @@
         "bareStructuredClone"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareStdio.js",
+      "keys": [
+        "bareStdio"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareSubprocess.js",
       "keys": [
         "bareSubprocess"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareSvg.js",
+      "keys": [
+        "bareSvg"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareTiff.js",
       "keys": [
@@ -632,9 +632,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareTap.js",
+      "path": "/lib/bare/bundles/bareTimers.js",
       "keys": [
-        "bareTap"
+        "bareTimers"
       ]
     },
     {
@@ -644,9 +644,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareTimers.js",
+      "path": "/lib/bare/bundles/bareTap.js",
       "keys": [
-        "bareTimers"
+        "bareTap"
       ]
     },
     {
@@ -656,9 +656,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareTpl.js",
+      "path": "/lib/bare/bundles/bareTcp.js",
       "keys": [
-        "bareTpl"
+        "bareTcp"
       ]
     },
     {
@@ -668,15 +668,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareUiKit.js",
+      "path": "/lib/bare/bundles/bareTpl.js",
       "keys": [
-        "bareUiKit"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareTcp.js",
-      "keys": [
-        "bareTcp"
+        "bareTpl"
       ]
     },
     {
@@ -685,48 +679,54 @@
         "bareTls"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareUnpack.js",
-      "keys": [
-        "bareUnpack"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareTty.js",
       "keys": [
         "bareTty"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareUiKit.js",
+      "keys": [
+        "bareUiKit"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareUnpack.js",
+      "keys": [
+        "bareUnpack"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareV8.js",
       "keys": [
         "bareV8"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareWalkHandles.js",
-      "keys": [
-        "bareWalkHandles"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareUnionBundle.js",
-      "keys": [
-        "bareUnionBundle"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareVm.js",
       "keys": [
         "bareVm"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareWalkHandles.js",
+      "keys": [
+        "bareWalkHandles"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareWebKit.js",
       "keys": [
         "bareWebKit"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareUnionBundle.js",
+      "keys": [
+        "bareUnionBundle"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareWebp.js",
       "keys": [
@@ -740,15 +740,15 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareWhich.js",
+      "path": "/lib/bare/bundles/bareUtils.js",
       "keys": [
-        "bareWhich"
+        "bareUtils"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareV8ToIstanbul.js",
+      "path": "/lib/bare/bundles/bareWhich.js",
       "keys": [
-        "bareV8ToIstanbul"
+        "bareWhich"
       ]
     },
     {
@@ -758,15 +758,15 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareXdiff.js",
+      "path": "/lib/bare/bundles/bareV8ToIstanbul.js",
       "keys": [
-        "bareXdiff"
+        "bareV8ToIstanbul"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareUtils.js",
+      "path": "/lib/bare/bundles/bareXdiff.js",
       "keys": [
-        "bareUtils"
+        "bareXdiff"
       ]
     },
     {
@@ -775,18 +775,18 @@
         "bareZlib"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareWs.js",
-      "keys": [
-        "bareWs"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareZmq.js",
       "keys": [
         "bareZmq"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareWs.js",
+      "keys": [
+        "bareWs"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareWorker.js",
       "keys": [