feat(kernel): expand stock image, boot policy, and ecosystem integration

- Stock kernel: boot.policy v2 (maxExecLineDepth, denyEnvKeys, requireProcNodes);
  richer BARE_OS_KERNEL_SELFTEST; example policy and timer drop-in samples
- Protocol: feature bits 28–30, seed RPCs (manifest_hints, peer_health, staging_slot)
- Booter: /proc mirrors, provenance, metrics_live, pear IPC registry, initd DAG,
  suspend/resume wiring, exec budget, shell ${var} expansion, delegate limits,
  telemetry v3 / OTel JSONL, ctx API 1.11.0
- Coreutils: /bin/timeout; seeder Pear/Bare: avoid bare process.env (globalThis.process?.env)
- CI: verify-ctx-api-feature-bits; docs: handbook, developer-guide, kernel-extensions,
  capabilities index, environment appendix, READMEs

packages/bare-os-seeder/kernel/lib/bare/manifest.json

@@ -7,54 +7,54 @@
         "safetyCatch"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/b4a.js",
-      "keys": [
-        "b4a"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/hypercoreIdEncoding.js",
       "keys": [
         "hypercoreIdEncoding"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/b4a.js",
+      "keys": [
+        "b4a"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/compactEncoding.js",
       "keys": [
         "compactEncoding"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareUrl.js",
-      "keys": [
-        "bareUrl"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/protomux.js",
       "keys": [
         "protomux"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareUrl.js",
+      "keys": [
+        "bareUrl"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareEncoding.js",
       "keys": [
         "bareEncoding"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareEvents.js",
-      "keys": [
-        "bareEvents"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/barePath.js",
       "keys": [
         "barePath"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareEvents.js",
+      "keys": [
+        "bareEvents"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareAbort.js",
       "keys": [
@@ -67,12 +67,6 @@
         "bareAbortController"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareAnsiEscapes.js",
-      "keys": [
-        "bareAnsiEscapes"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareAddonResolve.js",
       "keys": [
@@ -92,9 +86,21 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareAsyncHooks.js",
+      "path": "/lib/bare/bundles/bareAnsiEscapes.js",
       "keys": [
-        "bareAsyncHooks"
+        "bareAnsiEscapes"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareAppKit.js",
+      "keys": [
+        "bareAppKit"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareApk.js",
+      "keys": [
+        "bareApk"
       ]
     },
     {
@@ -104,9 +110,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareAppKit.js",
+      "path": "/lib/bare/bundles/bareAsyncHooks.js",
       "keys": [
-        "bareAppKit"
+        "bareAsyncHooks"
       ]
     },
     {
@@ -127,12 +133,6 @@
         "bareBmp"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareApk.js",
-      "keys": [
-        "bareApk"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareBundleCompile.js",
       "keys": [
@@ -175,18 +175,6 @@
         "bareConsole"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareBundleId.js",
-      "keys": [
-        "bareBundleId"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareDebugLog.js",
-      "keys": [
-        "bareDebugLog"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareChannel.js",
       "keys": [
@@ -194,9 +182,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareDaemon.js",
+      "path": "/lib/bare/bundles/bareBundleId.js",
       "keys": [
-        "bareDaemon"
+        "bareBundleId"
       ]
     },
     {
@@ -206,15 +194,21 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareDns.js",
+      "path": "/lib/bare/bundles/bareDebugLog.js",
       "keys": [
-        "bareDns"
+        "bareDebugLog"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareDiagnosticsChannel.js",
+      "path": "/lib/bare/bundles/bareDaemon.js",
       "keys": [
-        "bareDiagnosticsChannel"
+        "bareDaemon"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareDns.js",
+      "keys": [
+        "bareDns"
       ]
     },
     {
@@ -223,12 +217,24 @@
         "bareEnv"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareDiagnosticsChannel.js",
+      "keys": [
+        "bareDiagnosticsChannel"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareExif.js",
       "keys": [
         "bareExif"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareCov.js",
+      "keys": [
+        "bareCov"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareDgram.js",
       "keys": [
@@ -241,24 +247,12 @@
         "bareFfmpeg"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareCov.js",
-      "keys": [
-        "bareCov"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareFfmpegEncodings.js",
       "keys": [
         "bareFfmpegEncodings"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareFileLogger.js",
-      "keys": [
-        "bareFileLogger"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareFormat.js",
       "keys": [
@@ -277,6 +271,18 @@
         "bareGif"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareGtk.js",
+      "keys": [
+        "bareGtk"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareFileLogger.js",
+      "keys": [
+        "bareFileLogger"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareHeif.js",
       "keys": [
@@ -284,15 +290,15 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareHrtime.js",
+      "path": "/lib/bare/bundles/bareFs.js",
       "keys": [
-        "bareHrtime"
+        "bareFs"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareGtk.js",
+      "path": "/lib/bare/bundles/bareHrtime.js",
       "keys": [
-        "bareGtk"
+        "bareHrtime"
       ]
     },
     {
@@ -308,9 +314,15 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareFs.js",
+      "path": "/lib/bare/bundles/bareImageResample.js",
       "keys": [
-        "bareFs"
+        "bareImageResample"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareInspect.js",
+      "keys": [
+        "bareInspect"
       ]
     },
     {
@@ -319,24 +331,12 @@
         "bareHttp1"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareImageResample.js",
-      "keys": [
-        "bareImageResample"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareHttps.js",
       "keys": [
         "bareHttps"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareInspect.js",
-      "keys": [
-        "bareInspect"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareJpeg.js",
       "keys": [
@@ -355,12 +355,6 @@
         "bareIpc"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareLief.js",
-      "keys": [
-        "bareLief"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareLogger.js",
       "keys": [
@@ -368,9 +362,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareLink.js",
+      "path": "/lib/bare/bundles/bareLief.js",
       "keys": [
-        "bareLink"
+        "bareLief"
       ]
     },
     {
@@ -386,9 +380,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareModuleResolve.js",
+      "path": "/lib/bare/bundles/bareLink.js",
       "keys": [
-        "bareModuleResolve"
+        "bareLink"
       ]
     },
     {
@@ -403,6 +397,12 @@
         "bareModule"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareModuleResolve.js",
+      "keys": [
+        "bareModuleResolve"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareNdk.js",
       "keys": [
@@ -421,18 +421,6 @@
         "bareNative"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareNodeFetch.js",
-      "keys": [
-        "bareNodeFetch"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareOpen.js",
-      "keys": [
-        "bareOpen"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareNet.js",
       "keys": [
@@ -445,6 +433,18 @@
         "bareMedia"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareNodeFetch.js",
+      "keys": [
+        "bareNodeFetch"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareOpen.js",
+      "keys": [
+        "bareOpen"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareOs.js",
       "keys": [
@@ -464,9 +464,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/barePng.js",
+      "path": "/lib/bare/bundles/barePipe.js",
       "keys": [
-        "barePng"
+        "barePipe"
       ]
     },
     {
@@ -476,9 +476,21 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/barePipe.js",
+      "path": "/lib/bare/bundles/bareDev.js",
       "keys": [
-        "barePipe"
+        "bareDev"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/barePng.js",
+      "keys": [
+        "barePng"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareNodeRuntime.js",
+      "keys": [
+        "bareNodeRuntime"
       ]
     },
     {
@@ -494,15 +506,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareNodeRuntime.js",
+      "path": "/lib/bare/bundles/bareQueueMicrotask.js",
       "keys": [
-        "bareNodeRuntime"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareDev.js",
-      "keys": [
-        "bareDev"
+        "bareQueueMicrotask"
       ]
     },
     {
@@ -511,12 +517,6 @@
         "bareQuerystring"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareQueueMicrotask.js",
-      "keys": [
-        "bareQueueMicrotask"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareRealm.js",
       "keys": [
@@ -548,9 +548,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareRun.js",
+      "path": "/lib/bare/bundles/bareSemver.js",
       "keys": [
-        "bareRun"
+        "bareSemver"
       ]
     },
     {
@@ -559,30 +559,30 @@
         "bareRuntime"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareSemver.js",
-      "keys": [
-        "bareSemver"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareSdl.js",
       "keys": [
         "bareSdl"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareSignals.js",
-      "keys": [
-        "bareSignals"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareSidecar.js",
       "keys": [
         "bareSidecar"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareRun.js",
+      "keys": [
+        "bareRun"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareSignals.js",
+      "keys": [
+        "bareSignals"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareStringDecoder.js",
       "keys": [
@@ -595,6 +595,12 @@
         "bareStorage"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareSvg.js",
+      "keys": [
+        "bareSvg"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareStream.js",
       "keys": [
@@ -607,24 +613,12 @@
         "bareStdio"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareSvg.js",
-      "keys": [
-        "bareSvg"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareStructuredClone.js",
       "keys": [
         "bareStructuredClone"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareTiff.js",
-      "keys": [
-        "bareTiff"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareSubprocess.js",
       "keys": [
@@ -632,9 +626,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareSystemLogger.js",
+      "path": "/lib/bare/bundles/bareTiff.js",
       "keys": [
-        "bareSystemLogger"
+        "bareTiff"
       ]
     },
     {
@@ -644,9 +638,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareTcp.js",
+      "path": "/lib/bare/bundles/bareSystemLogger.js",
       "keys": [
-        "bareTcp"
+        "bareSystemLogger"
       ]
     },
     {
@@ -655,18 +649,18 @@
         "bareTimers"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareTpl.js",
-      "keys": [
-        "bareTpl"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareThread.js",
       "keys": [
         "bareThread"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareTpl.js",
+      "keys": [
+        "bareTpl"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareType.js",
       "keys": [
@@ -674,15 +668,21 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareTls.js",
+      "path": "/lib/bare/bundles/bareUiKit.js",
       "keys": [
-        "bareTls"
+        "bareUiKit"
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareTty.js",
+      "path": "/lib/bare/bundles/bareTcp.js",
       "keys": [
-        "bareTty"
+        "bareTcp"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareTls.js",
+      "keys": [
+        "bareTls"
       ]
     },
     {
@@ -692,9 +692,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareUiKit.js",
+      "path": "/lib/bare/bundles/bareTty.js",
       "keys": [
-        "bareUiKit"
+        "bareTty"
       ]
     },
     {
@@ -703,36 +703,30 @@
         "bareV8"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareVm.js",
-      "keys": [
-        "bareVm"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareWalkHandles.js",
       "keys": [
         "bareWalkHandles"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareWebKit.js",
-      "keys": [
-        "bareWebKit"
-      ]
-    },
-    {
-      "path": "/lib/bare/bundles/bareWebKitGtk.js",
-      "keys": [
-        "bareWebKitGtk"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareUnionBundle.js",
       "keys": [
         "bareUnionBundle"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareVm.js",
+      "keys": [
+        "bareVm"
+      ]
+    },
+    {
+      "path": "/lib/bare/bundles/bareWebKit.js",
+      "keys": [
+        "bareWebKit"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareWebp.js",
       "keys": [
@@ -740,9 +734,9 @@
       ]
     },
     {
-      "path": "/lib/bare/bundles/bareUtils.js",
+      "path": "/lib/bare/bundles/bareWebKitGtk.js",
       "keys": [
-        "bareUtils"
+        "bareWebKitGtk"
       ]
     },
     {
@@ -769,24 +763,30 @@
         "bareXdiff"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareUtils.js",
+      "keys": [
+        "bareUtils"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareZlib.js",
       "keys": [
         "bareZlib"
       ]
     },
-    {
-      "path": "/lib/bare/bundles/bareZmq.js",
-      "keys": [
-        "bareZmq"
-      ]
-    },
     {
       "path": "/lib/bare/bundles/bareWs.js",
       "keys": [
         "bareWs"
       ]
     },
+    {
+      "path": "/lib/bare/bundles/bareZmq.js",
+      "keys": [
+        "bareZmq"
+      ]
+    },
     {
       "path": "/lib/bare/bundles/bareWorker.js",
       "keys": [