- Add first-party vs vendored rules to verify-banned-terminology; naming docs,

alias matrix, verify-naming-alias-matrix in pretest
- Canonical bareOsRegisterBootStepHook / Invoke / EmitBareBootStepHint with
  legacy *Phase* wrappers; typings, runtime caps, docs, CHANGELOG
- VFS: evaluateBareOsVfsPathPolicy; rename hypercore-pack proc locals; add
  /proc/bare_os/security_posture.json
- Stock kernel: invokeCtxBootHooks, boot txn journal transactionState, extension
  cycle extId diagnostics, boot snapshot schema 2 + provenance
- Offline LKG: BARE_OS_OFFLINE_LKG_ACTIVE / REASON env hints
- Protocol: BARE_OS_PROTOMUX_CHANNEL_SCHEMA_VERSION re-exported from channel.js
- Stubs: corestore suspend/resume register, swarm snapshot, extension resolver,
  initd state enum; shell split note; benchmark/SDK script placeholders
- Docs: ota-channels, conformance-dashboard, kernel-extensions specs index,
  data README; handbook/developer-guide/users-manual cross-links
- Sync packages/bare-os-seeder/kernel with kernel/init.js and STRUCTURE.md
This commit is contained in:
Raven Scott
2026-04-04 17:06:35 -04:00
parent 45ee73756c
commit 9dcfaa8b1d
47 changed files with 1049 additions and 472 deletions
+1 -1
View File
@@ -77,7 +77,7 @@ The following are set on `ctx` before the kernel starts (unless noted as overwri
- **`bareOsRegisterVirtualFile(name, reader, opts?)`** — Registers **`/run/bare-os/virtual/<name>`** content; **`reader`** may be a function or **`{ read }`**; may return string or **`Uint8Array`** (sync or async). Optional **`opts`**: **`etag`**, **`mime`** (default **`text/plain`**), **`ttlMs`** (optional cache hint). Gated by runtime cap **`virtualRegisterFiles`**.
- **`bareOsSandboxRunScript(source, argv?, opts?)`** — Runs script source with a **restricted `ctx`** (personal-drive writes only; identity/virtual registration disabled). Respects **`raceWithAbortAndTimeout`** opts. Disable with **`BARE_OS_SANDBOX_SCRIPT=0`**. See [Chapter 9](09-security-and-trust.md).
- **`bareOsBootFileSha256Hex(buf)`** — **`sha256` hex for boot manifest checks** (`BARE_OS_BOOT_MANIFEST` + `/etc/bare-os/boot.manifest.json` on the stock kernel).
- **`bareOsRegisterBootPhaseHook(phase, fn)`** / **`bareOsInvokeBootPhaseHooks(ev)`** — Hooks around stock **`kernel/init.js`** phases; **`ev`** includes **`phase`**, **`when`** (`before` / `after`), **`label`**. **`phase`** may be `*` or `before:rc` style.
- **`bareOsRegisterBootStepHook(step, fn)`** / **`bareOsInvokeBootStepHooks(ev)`** — Canonical boot hooks around stock **`kernel/init.js`** stages; **`ev`** includes **`step`** / legacy **`phase`**, **`when`** (`before` / `after`), **`label`**. The step key may be `*` or `before:rc` style. Legacy **`bareOsRegisterBootPhaseHook`** / **`bareOsInvokeBootPhaseHooks`** remain aliases.
- **`bareOsInvalidateVirtualFile(name)`** / **`bareOsUpdateVirtualFileMeta(name, patch)`** — Virtual files under **`/run/bare-os/virtual/`**; **`patch`** may update **`etag`** / **`version`**.
- **`bareOsRequestPearReload(opts?)`** — **`async`** — returns **`{ requested, hint, env }`**; with **`{ persistRequest: true }`** writes **`~/.bare-os/pear-reload.request`** and may **`process.emit('bare-os:pear-reload', …)`** on Node.
- **`bareOsVerifyBootManifestSignature(manifestBytes, signatureBytes, publicKeyHex?)`** — Ed25519 verify helper used when **`BARE_OS_BOOT_MANIFEST_SIGN=1`**; public key from arg or **`BARE_OS_BOOT_MANIFEST_PUBKEY_HEX`**.