snxraven/bare-operating-system
1
1
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Align Bare OS with Holepunch stack across runtime, P2P, storage, trust, and ops surfaces

Browse Source 
Implement the 50-point Holepunch alignment roadmap with a first-pass delivery across coreutils commands, policy examples, audit tooling, and docs. This adds new operator CLIs (appctl/corestorectl/ctxbaredoctor/dhtctl/trustctl), tiered catalog and runtime-compat reports, release-checklist integration, contributor guidance, and kernel/seeder mirrored artifacts for app registry, trust, network services, corestore namespaces, and update manifest workflows.
This commit is contained in:
Raven Scott
2026-04-26 08:57:34 -04:00
parent 6f90952611
commit e59c57e538
51 changed files with 4014 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kernel/bin/appctl
+233
View File
@@ -0,0 +1,233 @@
/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}
/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
const perm = mode & 0o777
const r = (bit) => (perm & bit ? 'r' : '-')
const w = (bit) => (perm & bit ? 'w' : '-')
const x = (bit) => (perm & bit ? 'x' : '-')
return (
typeChar +
r(0o400) +
w(0o200) +
x(0o100) +
r(0o040) +
w(0o020) +
x(0o010) +
r(0o004) +
w(0o002) +
x(0o001)
)
}
/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
const now = nowMs != null ? nowMs : Date.now()
const d = new Date(mtimeMs)
const months = [
'Jan',
'Feb',
'Mar',
'Apr',
'May',
'Jun',
'Jul',
'Aug',
'Sep',
'Oct',
'Nov',
'Dec'
]
const mon = months[d.getMonth()]
const day = String(d.getDate()).padStart(2, ' ')
const sixMo = 180 * 24 * 3600 * 1000
if (Math.abs(now - mtimeMs) > sixMo) {
const yr = String(d.getFullYear()).padStart(4, ' ')
return mon + ' ' + day + ' ' + yr
}
const hh = String(d.getHours()).padStart(2, '0')
const mm = String(d.getMinutes()).padStart(2, '0')
return mon + ' ' + day + ' ' + hh + ':' + mm
}
/** @param {number} size */
function barePosixBlocks(size) {
return Math.ceil(Number(size) / 512) || 0
}
/**
* Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
* If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
* @param {Record<string, unknown>} ctx
* @param {string | Uint8Array} chunk
* @returns {boolean}
*/
function bareOsEmitRaw(ctx, chunk) {
if (typeof ctx.bareOsBinWrite === 'function') {
const b4 = ctx.b4a
const u8 =
typeof chunk === 'string'
? b4 && typeof b4.from === 'function'
? b4.from(chunk)
: new TextEncoder().encode(chunk)
: chunk
ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
return true
}
const w = globalThis.process?.stdout?.write
if (typeof w === 'function') {
w.call(globalThis.process.stdout, chunk)
return true
}
return false
}
function bareOsAppctlConfigPath() {
return '/etc/bare-os/apps.registry.json'
}
async function bareOsAppctlReadRegistry(ctx) {
const doc = await bareP2pReadJson(ctx, bareOsAppctlConfigPath())
if (!doc || typeof doc !== 'object') {
return { schema: 1, apps: [] }
}
if (!Array.isArray(doc.apps)) doc.apps = []
if (!doc.schema) doc.schema = 1
return doc
}
async function run(ctx, argv) {
const argv0 = argv[0] || 'appctl'
const parsed = bareP2pParseCommonFlags(argv.slice(1))
const args = parsed.rest
const opt = parsed.opt
if (opt.help || args.length === 0) {
ctx.console.log(
bareP2pHelpText(
argv0,
'Pear app registry and launch policy helper.',
argv0 +
' list | show NAME | install NAME PEAR_LINK [CHANNEL] | launch NAME [--checkout MODE] | channels',
[
'list',
'install keet pear://<key>/ stable --yes',
'launch keet --checkout released'
],
['peerctl', 'trustctl']
)
)
if (args.length === 0) ctx.exitCode = 1
return
}
const sub = String(args[0] || '').trim()
const reg = await bareOsAppctlReadRegistry(ctx)
if (sub === 'list') {
bareP2pPrint(ctx, reg, opt)
return
}
if (sub === 'channels') {
const channels = ['staged', 'released', 'pinned-length']
bareP2pPrint(ctx, { schema: 1, channels }, opt)
return
}
if (sub === 'show') {
const name = String(args[1] || '').trim()
const app = reg.apps.find((a) => a && a.name === name) || null
if (!app) {
bareP2pError(ctx, argv0, 'app not found in registry', argv0 + ' list', opt)
return
}
bareP2pPrint(ctx, app, opt)
return
}
if (sub === 'install') {
const name = String(args[1] || '').trim()
const link = String(args[2] || '').trim()
const channel = String(args[3] || 'stable').trim()
if (!name || !link.startsWith('pear://')) {
bareP2pError(
ctx,
argv0,
'install requires NAME and pear:// link',
argv0 + ' install NAME pear://<key> [CHANNEL]',
opt
)
return
}
if (!opt.yes) {
bareP2pError(ctx, argv0, 'confirmation required (pass --yes)', argv0 + ' install ... --yes', opt)
return
}
const app = {
name,
pearLink: link,
channel,
checkout: 'released',
trustPins: [],
launchPolicy: 'default',
updatedAtMs: Date.now()
}
reg.apps = reg.apps.filter((a) => !a || a.name !== name)
reg.apps.push(app)
if (opt.dryRun) {
bareP2pPrint(ctx, { ok: true, dryRun: true, app }, opt)
return
}
const ok = await bareP2pWriteJson(ctx, bareOsAppctlConfigPath(), reg)
if (!ok) {
bareP2pError(ctx, argv0, 'failed writing apps registry', 'check VFS write access', opt)
return
}
bareP2pPrint(ctx, { ok: true, installed: app }, opt)
return
}
if (sub === 'launch') {
const name = String(args[1] || '').trim()
const app = reg.apps.find((a) => a && a.name === name) || null
if (!app) {
bareP2pError(ctx, argv0, 'app not found in registry', argv0 + ' list', opt)
return
}
const req = {
requestId: bareP2pId('app'),
action: 'launch',
name,
pearLink: app.pearLink,
checkout: app.checkout || 'released'
}
if (opt.dryRun) {
bareP2pPrint(ctx, { ok: true, dryRun: true, request: req }, opt)
return
}
const r = bareP2pSend(ctx, 'peerctl', 'appctl.launch', req)
if (r && r.ok === false) {
bareP2pError(ctx, argv0, String(r.reason || 'send failed'), 'peerctl health', opt)
return
}
bareP2pPrint(
ctx,
{ ok: true, launchRequested: true, registryPath: bareOsAppctlConfigPath(), request: req },
opt
)
return
}
const sug = bareP2pSuggestSubcommand(sub, [
'list',
'show',
'install',
'launch',
'channels'
])
bareP2pError(
ctx,
argv0,
'unsupported subcommand' + (sug ? ' (did you mean ' + sug + '?)' : ''),
argv0 + ' --help',
opt
)
}
kernel/bin/corestorectl
+172
View File
@@ -0,0 +1,172 @@
/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}
/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
const perm = mode & 0o777
const r = (bit) => (perm & bit ? 'r' : '-')
const w = (bit) => (perm & bit ? 'w' : '-')
const x = (bit) => (perm & bit ? 'x' : '-')
return (
typeChar +
r(0o400) +
w(0o200) +
x(0o100) +
r(0o040) +
w(0o020) +
x(0o010) +
r(0o004) +
w(0o002) +
x(0o001)
)
}
/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
const now = nowMs != null ? nowMs : Date.now()
const d = new Date(mtimeMs)
const months = [
'Jan',
'Feb',
'Mar',
'Apr',
'May',
'Jun',
'Jul',
'Aug',
'Sep',
'Oct',
'Nov',
'Dec'
]
const mon = months[d.getMonth()]
const day = String(d.getDate()).padStart(2, ' ')
const sixMo = 180 * 24 * 3600 * 1000
if (Math.abs(now - mtimeMs) > sixMo) {
const yr = String(d.getFullYear()).padStart(4, ' ')
return mon + ' ' + day + ' ' + yr
}
const hh = String(d.getHours()).padStart(2, '0')
const mm = String(d.getMinutes()).padStart(2, '0')
return mon + ' ' + day + ' ' + hh + ':' + mm
}
/** @param {number} size */
function barePosixBlocks(size) {
return Math.ceil(Number(size) / 512) || 0
}
/**
* Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
* If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
* @param {Record<string, unknown>} ctx
* @param {string | Uint8Array} chunk
* @returns {boolean}
*/
function bareOsEmitRaw(ctx, chunk) {
if (typeof ctx.bareOsBinWrite === 'function') {
const b4 = ctx.b4a
const u8 =
typeof chunk === 'string'
? b4 && typeof b4.from === 'function'
? b4.from(chunk)
: new TextEncoder().encode(chunk)
: chunk
ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
return true
}
const w = globalThis.process?.stdout?.write
if (typeof w === 'function') {
w.call(globalThis.process.stdout, chunk)
return true
}
return false
}
async function run(ctx, argv) {
const argv0 = argv[0] || 'corestorectl'
const parsed = bareP2pParseCommonFlags(argv.slice(1))
const args = parsed.rest
const opt = parsed.opt
if (opt.help || args.length === 0) {
ctx.console.log(
bareP2pHelpText(
argv0,
'Inspect Corestore and Hyperdrive storage plane views from /proc.',
argv0 + ' status | namespaces | mounts | replication',
['status --summary', 'namespaces', 'mounts --json'],
['routeview', 'swarmtop']
)
)
if (args.length === 0) ctx.exitCode = 1
return
}
const sub = String(args[0] || '').trim()
if (sub === 'status') {
const replication = await bareP2pReadProcJson(ctx, '/proc/bare_os/replication')
const sparseIndex = await bareP2pReadProcJson(
ctx,
'/proc/bare_os/hyperdrive_sparse_index.json'
)
const out = {
schema: 1,
replicationHealth: replication.health || 'unknown',
replicatedKeys: Array.isArray(replication.keys)
? replication.keys.length
: null,
sparseBlocks:
typeof sparseIndex.blockCount === 'number' ? sparseIndex.blockCount : null
}
bareP2pPrint(
ctx,
opt.summary ? { health: out.replicationHealth, keys: out.replicatedKeys } : out,
opt
)
return
}
if (sub === 'namespaces') {
const hints = await bareP2pReadProcJson(ctx, '/proc/bare_os/snapshot_hints.json')
const namespaces = hints.corestoreNamespaces || [
'system',
'user',
'app',
'service',
'temporary',
'test'
]
bareP2pPrint(ctx, { schema: 1, namespaces }, opt)
return
}
if (sub === 'mounts') {
const union = await bareP2pReadProcJson(ctx, '/proc/bare_os/union.json')
const out = {
schema: 1,
hyperdriveMounts: union.mounts || [],
note: 'Use /proc/bare_os/union.json and /proc/bare_os/replication for full detail.'
}
bareP2pPrint(ctx, out, opt)
return
}
if (sub === 'replication') {
const replication = await bareP2pReadProcJson(ctx, '/proc/bare_os/replication')
bareP2pPrint(ctx, replication, opt)
return
}
const sug = bareP2pSuggestSubcommand(sub, [
'status',
'namespaces',
'mounts',
'replication'
])
bareP2pError(
ctx,
argv0,
'unsupported subcommand' + (sug ? ' (did you mean ' + sug + '?)' : ''),
argv0 + ' --help',
opt
)
}
kernel/bin/ctxbaredoctor
+156
View File
@@ -0,0 +1,156 @@
/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}
/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
const perm = mode & 0o777
const r = (bit) => (perm & bit ? 'r' : '-')
const w = (bit) => (perm & bit ? 'w' : '-')
const x = (bit) => (perm & bit ? 'x' : '-')
return (
typeChar +
r(0o400) +
w(0o200) +
x(0o100) +
r(0o040) +
w(0o020) +
x(0o010) +
r(0o004) +
w(0o002) +
x(0o001)
)
}
/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
const now = nowMs != null ? nowMs : Date.now()
const d = new Date(mtimeMs)
const months = [
'Jan',
'Feb',
'Mar',
'Apr',
'May',
'Jun',
'Jul',
'Aug',
'Sep',
'Oct',
'Nov',
'Dec'
]
const mon = months[d.getMonth()]
const day = String(d.getDate()).padStart(2, ' ')
const sixMo = 180 * 24 * 3600 * 1000
if (Math.abs(now - mtimeMs) > sixMo) {
const yr = String(d.getFullYear()).padStart(4, ' ')
return mon + ' ' + day + ' ' + yr
}
const hh = String(d.getHours()).padStart(2, '0')
const mm = String(d.getMinutes()).padStart(2, '0')
return mon + ' ' + day + ' ' + hh + ':' + mm
}
/** @param {number} size */
function barePosixBlocks(size) {
return Math.ceil(Number(size) / 512) || 0
}
/**
* Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
* If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
* @param {Record<string, unknown>} ctx
* @param {string | Uint8Array} chunk
* @returns {boolean}
*/
function bareOsEmitRaw(ctx, chunk) {
if (typeof ctx.bareOsBinWrite === 'function') {
const b4 = ctx.b4a
const u8 =
typeof chunk === 'string'
? b4 && typeof b4.from === 'function'
? b4.from(chunk)
: new TextEncoder().encode(chunk)
: chunk
ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
return true
}
const w = globalThis.process?.stdout?.write
if (typeof w === 'function') {
w.call(globalThis.process.stdout, chunk)
return true
}
return false
}
async function run(ctx, argv) {
const argv0 = argv[0] || 'ctxbaredoctor'
const parsed = bareP2pParseCommonFlags(argv.slice(1))
const args = parsed.rest
const opt = parsed.opt
if (opt.help) {
ctx.console.log(
bareP2pHelpText(
argv0,
'Report ctx.bare module resolution posture (drive bundles vs host imports).',
argv0 + ' [status|modules]',
['status --summary', 'modules --json'],
['kernel-doctor', 'kernel-preflight']
)
)
return
}
const sub = String(args[0] || 'status').trim()
const runtimeCaps = await bareP2pReadProcJson(ctx, '/proc/bare_os/capabilities.json')
const posture = await bareP2pReadProcJson(ctx, '/proc/bare_os/security_posture.json')
const out = {
schema: 1,
bareCtxModules: runtimeCaps?.features?.bareCtxModules ?? null,
bareDriveBundles: runtimeCaps?.features?.bareDriveBundles ?? null,
bareHostImportsForCtx: runtimeCaps?.features?.bareHostImportsForCtx ?? null,
hostImportsEnabled: posture?.ctxBare?.hostImportsEnabled ?? null,
driveBundlesEnabled: posture?.ctxBare?.driveBundlesEnabled ?? null,
notes: [
'Drive bundles are seeded /lib/bare IIFEs.',
'Host imports are fallback import() for missing ctx keys.'
]
}
if (sub === 'status') {
bareP2pPrint(
ctx,
opt.summary
? {
bareCtxModules: out.bareCtxModules,
driveBundles: out.bareDriveBundles,
hostImports: out.bareHostImportsForCtx
}
: out,
opt
)
return
}
if (sub === 'modules') {
const manifest = await bareP2pReadProcJson(ctx, '/proc/bare_os/manifest_hints.json')
const modules = Array.isArray(manifest?.bareModuleKeys)
? manifest.bareModuleKeys
: []
bareP2pPrint(
ctx,
{ schema: 1, modules, moduleCount: modules.length, source: '/proc/bare_os/manifest_hints.json' },
opt
)
return
}
const sug = bareP2pSuggestSubcommand(sub, ['status', 'modules'])
bareP2pError(
ctx,
argv0,
'unsupported subcommand' + (sug ? ' (did you mean ' + sug + '?)' : ''),
argv0 + ' --help',
opt
)
}
kernel/bin/dhtctl
+198
View File
@@ -0,0 +1,198 @@
/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}
/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
const perm = mode & 0o777
const r = (bit) => (perm & bit ? 'r' : '-')
const w = (bit) => (perm & bit ? 'w' : '-')
const x = (bit) => (perm & bit ? 'x' : '-')
return (
typeChar +
r(0o400) +
w(0o200) +
x(0o100) +
r(0o040) +
w(0o020) +
x(0o010) +
r(0o004) +
w(0o002) +
x(0o001)
)
}
/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
const now = nowMs != null ? nowMs : Date.now()
const d = new Date(mtimeMs)
const months = [
'Jan',
'Feb',
'Mar',
'Apr',
'May',
'Jun',
'Jul',
'Aug',
'Sep',
'Oct',
'Nov',
'Dec'
]
const mon = months[d.getMonth()]
const day = String(d.getDate()).padStart(2, ' ')
const sixMo = 180 * 24 * 3600 * 1000
if (Math.abs(now - mtimeMs) > sixMo) {
const yr = String(d.getFullYear()).padStart(4, ' ')
return mon + ' ' + day + ' ' + yr
}
const hh = String(d.getHours()).padStart(2, '0')
const mm = String(d.getMinutes()).padStart(2, '0')
return mon + ' ' + day + ' ' + hh + ':' + mm
}
/** @param {number} size */
function barePosixBlocks(size) {
return Math.ceil(Number(size) / 512) || 0
}
/**
* Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
* If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
* @param {Record<string, unknown>} ctx
* @param {string | Uint8Array} chunk
* @returns {boolean}
*/
function bareOsEmitRaw(ctx, chunk) {
if (typeof ctx.bareOsBinWrite === 'function') {
const b4 = ctx.b4a
const u8 =
typeof chunk === 'string'
? b4 && typeof b4.from === 'function'
? b4.from(chunk)
: new TextEncoder().encode(chunk)
: chunk
ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
return true
}
const w = globalThis.process?.stdout?.write
if (typeof w === 'function') {
w.call(globalThis.process.stdout, chunk)
return true
}
return false
}
async function run(ctx, argv) {
const argv0 = argv[0] || 'dhtctl'
const parsed = bareP2pParseCommonFlags(argv.slice(1))
const args = parsed.rest
const opt = parsed.opt
if (opt.help || args.length === 0) {
ctx.console.log(
bareP2pHelpText(
argv0,
'HyperDHT operator utility over /proc and P2P envelopes.',
argv0 +
' status | lookup TOPIC | announce TOPIC | connect PEER_KEY | firewall allow|deny [PEER_KEY] | export-key',
[
'status --summary',
'lookup deadbeef',
'firewall deny 0123abcd',
'announce bare-os.swarm.control --yes'
],
['dhtscan', 'swarmdoctor', 'peerctl']
)
)
if (args.length === 0) ctx.exitCode = 1
return
}
const sub = String(args[0] || '').trim()
if (sub === 'status') {
const dht = await bareP2pReadProcJson(ctx, '/proc/bare_os/dht_status.json')
const scan = await bareP2pReadProcJson(ctx, '/proc/bare_os/dht_scan.json')
const out = {
schema: 1,
health: dht.health || 'unknown',
firewalled: dht.firewalled ?? null,
peers: scan.peers ?? null,
bootstrap: dht.bootstrap || []
}
bareP2pPrint(ctx, opt.summary ? { health: out.health, peers: out.peers } : out, opt)
return
}
if (sub === 'export-key') {
const ident = await bareP2pReadProcJson(ctx, '/proc/bare_os/identity.json')
const key = ident.dhtPublicKey || ident.devicePublicKey || ''
if (!key) {
bareP2pError(
ctx,
argv0,
'no DHT public key found in /proc/bare_os/identity.json',
argv0 + ' status',
opt
)
return
}
bareP2pPrint(ctx, { schema: 1, dhtPublicKey: key }, opt)
return
}
if (
sub === 'lookup' ||
sub === 'announce' ||
sub === 'connect' ||
sub === 'firewall'
) {
let action = sub
let payload = {}
if (sub === 'firewall') {
const mode = String(args[1] || '').trim().toLowerCase()
if (mode !== 'allow' && mode !== 'deny') {
bareP2pError(ctx, argv0, 'firewall requires allow|deny', argv0 + ' firewall allow [PEER_KEY]', opt)
return
}
action = 'firewall.' + mode
payload = { peerKey: String(args[2] || '').trim() }
} else {
payload = { value: String(args[1] || '').trim() }
}
if (!opt.yes && (sub === 'announce' || sub === 'connect' || sub === 'firewall')) {
bareP2pError(ctx, argv0, 'confirmation required (pass --yes)', argv0 + ' ' + sub + ' ... --yes', opt)
return
}
if (opt.dryRun) {
bareP2pPrint(ctx, { ok: true, dryRun: true, action, payload }, opt)
return
}
const r = bareP2pSend(ctx, 'peerctl', 'dhtctl', {
requestId: bareP2pId('dht'),
action,
payload
})
if (r && r.ok === false) {
bareP2pError(ctx, argv0, String(r.reason || 'send failed'), 'swarmdoctor', opt)
return
}
bareP2pPrint(ctx, { ok: true, action, payload }, opt)
return
}
const sug = bareP2pSuggestSubcommand(sub, [
'status',
'lookup',
'announce',
'connect',
'firewall',
'export-key'
])
bareP2pError(
ctx,
argv0,
'unsupported subcommand' + (sug ? ' (did you mean ' + sug + '?)' : ''),
argv0 + ' --help',
opt
)
}
kernel/bin/help
+1 -1
View File
@@ -87,7 +87,7 @@ function bareOsEmitRaw(ctx, chunk) {
return false
}
var BARE_OS_HELP_BIN_SPACED = "agent arch awk baresay baretop base32 base64 basename basenc btop bundlebee cat chat chgrp chmod chown cksum clear cmp comm cp crontab curl cut date dd df dhtscan dhttop diff dir dircolors dirname du echo edit env exit expand expr factor false find fmt fold getconf getfacl git git-pear grep groups hdms head help holepunch-view holesail hostid hostname hrpc hypershell-board iconv id install join journalctl jq kernel-boot-diff kernel-doctor kernel-explain kernel-fsck kernel-home-snapshot kernel-manifest-validate kernel-preflight kernel-triage kill link ln logger login logname logout ls man md5sum meshdrop mkdir mkfifo mktemp mount mv nano nice nl nohup nproc numfmt od oidc-publish openssl openssl p2ping p2ptrace paste patch pathcap-verify pathchk pear-runtime-matrix peerctl peerdiscover peernote pkg-swarm-index pr printenv printf procstat ps pwd readlink realpath rev rm rmdir routeview savevault say sed seq setfacl sh sha1sum sha224sum sha256sum sha384sum sha512sum shuf sidecar sleep sort split ssh-keygen ssh-keygen sshd sshd stat sum swarmdoctor swarmmap swarmtop sync systemctl tac tail tar tar taskmesh tee telnet test theme time timeout touch tr true truncate tsort tty ulimit umount uname unexpand uniq unlink uptime users vdir wc wget which who whoami whois xargs xattr yes"
var BARE_OS_HELP_BIN_SPACED = "agent appctl arch awk baresay baretop base32 base64 basename basenc btop bundlebee cat chat chgrp chmod chown cksum clear cmp comm corestorectl cp crontab ctxbaredoctor curl cut date dd df dhtctl dhtscan dhttop diff dir dircolors dirname du echo edit env exit expand expr factor false find fmt fold getconf getfacl git git-pear grep groups hdms head help holepunch-view holesail hostid hostname hrpc hypershell-board iconv id install join journalctl jq kernel-boot-diff kernel-doctor kernel-explain kernel-fsck kernel-home-snapshot kernel-manifest-validate kernel-preflight kernel-triage kill link ln logger login logname logout ls man md5sum meshdrop mkdir mkfifo mktemp mount mv nano nice nl nohup nproc numfmt od oidc-publish openssl openssl p2ping p2ptrace paste patch pathcap-verify pathchk pear-runtime-matrix peerctl peerdiscover peernote pkg-swarm-index pr printenv printf procstat ps pwd readlink realpath rev rm rmdir routeview savevault say sed seq setfacl sh sha1sum sha224sum sha256sum sha384sum sha512sum shuf sidecar sleep sort split ssh-keygen ssh-keygen sshd sshd stat sum swarmdoctor swarmmap swarmtop sync systemctl tac tail tar tar taskmesh tee telnet test theme time timeout touch tr true truncate trustctl tsort tty ulimit umount uname unexpand uniq unlink uptime users vdir wc wget which who whoami whois xargs xattr yes"
async function run(ctx, argv) {
ctx.console.log(
'Bare OS — default user: guest | shell builtins: alias, barerc, cd, command, export, exit, login, logout, readonly, type, umask, unalias, unset, : | /bin: ' +
kernel/bin/trustctl
+185
View File
@@ -0,0 +1,185 @@
/* BARE_OS_BIN_API 1.0.0 — bump when staged /bin script semantics change (see developer guide). */
/** Shared helpers for drive-resident /bin scripts (prepended before each command). */
function bareStdin(ctx) {
return typeof ctx.shellStdin === 'string' ? ctx.shellStdin : ''
}
/** @param {number} mode @param {'file' | 'directory' | 'symlink'} type */
function bareFormatModeString(mode, type) {
const typeChar = type === 'directory' ? 'd' : type === 'symlink' ? 'l' : '-'
const perm = mode & 0o777
const r = (bit) => (perm & bit ? 'r' : '-')
const w = (bit) => (perm & bit ? 'w' : '-')
const x = (bit) => (perm & bit ? 'x' : '-')
return (
typeChar +
r(0o400) +
w(0o200) +
x(0o100) +
r(0o040) +
w(0o020) +
x(0o010) +
r(0o004) +
w(0o002) +
x(0o001)
)
}
/** @param {number} mtimeMs @param {number} [nowMs] */
function bareFormatLsMtime(mtimeMs, nowMs) {
const now = nowMs != null ? nowMs : Date.now()
const d = new Date(mtimeMs)
const months = [
'Jan',
'Feb',
'Mar',
'Apr',
'May',
'Jun',
'Jul',
'Aug',
'Sep',
'Oct',
'Nov',
'Dec'
]
const mon = months[d.getMonth()]
const day = String(d.getDate()).padStart(2, ' ')
const sixMo = 180 * 24 * 3600 * 1000
if (Math.abs(now - mtimeMs) > sixMo) {
const yr = String(d.getFullYear()).padStart(4, ' ')
return mon + ' ' + day + ' ' + yr
}
const hh = String(d.getHours()).padStart(2, '0')
const mm = String(d.getMinutes()).padStart(2, '0')
return mon + ' ' + day + ' ' + hh + ':' + mm
}
/** @param {number} size */
function barePosixBlocks(size) {
return Math.ceil(Number(size) / 512) || 0
}
/**
* Raw stdout for NUL/binary when **`process.stdout.write`** is missing.
* If **`ctx.bareOsBinWrite(Uint8Array|string)`** is set (tests / host), use it.
* @param {Record<string, unknown>} ctx
* @param {string | Uint8Array} chunk
* @returns {boolean}
*/
function bareOsEmitRaw(ctx, chunk) {
if (typeof ctx.bareOsBinWrite === 'function') {
const b4 = ctx.b4a
const u8 =
typeof chunk === 'string'
? b4 && typeof b4.from === 'function'
? b4.from(chunk)
: new TextEncoder().encode(chunk)
: chunk
ctx.bareOsBinWrite(u8 instanceof Uint8Array ? u8 : new Uint8Array(u8))
return true
}
const w = globalThis.process?.stdout?.write
if (typeof w === 'function') {
w.call(globalThis.process.stdout, chunk)
return true
}
return false
}
function bareOsTrustPolicyPath() {
return '/etc/bare-os/trust.policy.json'
}
async function bareOsTrustReadPolicy(ctx) {
const doc = await bareP2pReadJson(ctx, bareOsTrustPolicyPath())
if (!doc || typeof doc !== 'object') {
return {
schema: 1,
signerPins: [],
relayPolicy: { mode: 'consent-required' },
encryptionPolicy: { mode: 'per-space-keys', rotationDays: 30 }
}
}
if (!Array.isArray(doc.signerPins)) doc.signerPins = []
return doc
}
async function run(ctx, argv) {
const argv0 = argv[0] || 'trustctl'
const parsed = bareP2pParseCommonFlags(argv.slice(1))
const args = parsed.rest
const opt = parsed.opt
if (opt.help || args.length === 0) {
ctx.console.log(
bareP2pHelpText(
argv0,
'Inspect and edit trust roots, signer pins, and encryption policy.',
argv0 + ' status | inspect TARGET | pin add KEY | pin rm KEY | policy show',
['status', 'pin add <signerKey> --yes', 'inspect pear://<key>'],
['appctl', 'peerctl']
)
)
if (args.length === 0) ctx.exitCode = 1
return
}
const sub = String(args[0] || '').trim()
const policy = await bareOsTrustReadPolicy(ctx)
if (sub === 'status' || (sub === 'policy' && String(args[1] || '') === 'show')) {
bareP2pPrint(ctx, policy, opt)
return
}
if (sub === 'inspect') {
const target = String(args[1] || '').trim()
if (!target) {
bareP2pError(ctx, argv0, 'inspect requires TARGET', argv0 + ' inspect pear://<key>', opt)
return
}
const out = {
schema: 1,
target,
accepted: true,
reasons: ['no deny rule matched', 'signer pin enforcement delegated to boot policy when enabled'],
crossRefs: ['/proc/bare_os/pear_trust.json', '/proc/bare_os/security_posture.json']
}
bareP2pPrint(ctx, out, opt)
return
}
if (sub === 'pin') {
const action = String(args[1] || '').trim()
const key = String(args[2] || '').trim()
if ((action !== 'add' && action !== 'rm') || !key) {
bareP2pError(ctx, argv0, 'pin requires add|rm KEY', argv0 + ' pin add <KEY>', opt)
return
}
if (!opt.yes) {
bareP2pError(ctx, argv0, 'confirmation required (pass --yes)', argv0 + ' pin ' + action + ' ' + key + ' --yes', opt)
return
}
if (action === 'add' && !policy.signerPins.includes(key)) {
policy.signerPins.push(key)
}
if (action === 'rm') {
policy.signerPins = policy.signerPins.filter((x) => x !== key)
}
if (opt.dryRun) {
bareP2pPrint(ctx, { ok: true, dryRun: true, signerPins: policy.signerPins }, opt)
return
}
const ok = await bareP2pWriteJson(ctx, bareOsTrustPolicyPath(), policy)
if (!ok) {
bareP2pError(ctx, argv0, 'failed writing trust policy', 'check VFS write access', opt)
return
}
bareP2pPrint(ctx, { ok: true, signerPins: policy.signerPins }, opt)
return
}
const sug = bareP2pSuggestSubcommand(sub, ['status', 'inspect', 'pin', 'policy'])
bareP2pError(
ctx,
argv0,
'unsupported subcommand' + (sug ? ' (did you mean ' + sug + '?)' : ''),
argv0 + ' --help',
opt
)
}
kernel/etc/bare-os/apps.registry.example.json
+15
View File
@@ -0,0 +1,15 @@
{
"schema": 1,
"generatedBy": "appctl",
"apps": [
{
"name": "keet",
"pearLink": "pear://examplekey",
"channel": "stable",
"checkout": "released",
"trustPins": [],
"launchPolicy": "default",
"updatedAtMs": 0
}
]
}
kernel/etc/bare-os/corestore.namespaces.example.json
+11
View File
@@ -0,0 +1,11 @@
{
"schema": 1,
"namespaces": [
{ "name": "system", "replicated": true, "retentionDays": 3650 },
{ "name": "user", "replicated": true, "retentionDays": 3650 },
{ "name": "app", "replicated": true, "retentionDays": 3650 },
{ "name": "service", "replicated": true, "retentionDays": 3650 },
{ "name": "temporary", "replicated": false, "retentionDays": 7 },
{ "name": "test", "replicated": false, "retentionDays": 30 }
]
}
kernel/etc/bare-os/network.services.example.json
+14
View File
@@ -0,0 +1,14 @@
{
"schema": 1,
"services": [
{
"name": "replication-operator",
"dhtPublicKey": "",
"firewallPolicy": "allowlisted"
}
],
"relayPolicy": {
"enabled": true,
"requiresConsent": true
}
}
kernel/etc/bare-os/posix_utilities.json
+21 -1
View File
@@ -1,13 +1,17 @@
{
"schema": 2,
"profileId": "bare-os-posix-like",
"generatedAt": "2026-04-26T12:40:06.854Z",
"generatedAt": "2026-04-26T12:56:08.959Z",
"note": "Sparse POSIX Issue 7 coverage hints for /bin utilities. Omitted command names are not yet profiled here.",
"commandIndex": [
{
"name": "agent",
"tier": "tier1_bin"
},
{
"name": "appctl",
"tier": "tier1_bin"
},
{
"name": "arch",
"tier": "tier1_bin"
@@ -80,6 +84,10 @@
"name": "comm",
"tier": "tier1_bin"
},
{
"name": "corestorectl",
"tier": "tier1_bin"
},
{
"name": "cp",
"tier": "tier1_bin"
@@ -88,6 +96,10 @@
"name": "crontab",
"tier": "tier1_bin"
},
{
"name": "ctxbaredoctor",
"tier": "tier1_bin"
},
{
"name": "curl",
"tier": "tier1_bin"
@@ -108,6 +120,10 @@
"name": "df",
"tier": "tier1_bin"
},
{
"name": "dhtctl",
"tier": "tier1_bin"
},
{
"name": "dhtscan",
"tier": "tier1_bin"
@@ -620,6 +636,10 @@
"name": "truncate",
"tier": "tier1_bin"
},
{
"name": "trustctl",
"tier": "tier1_bin"
},
{
"name": "tsort",
"tier": "tier1_bin"
kernel/etc/bare-os/system-update.manifest.example.json
+17
View File
@@ -0,0 +1,17 @@
{
"schema": 1,
"systemDrive": {
"key": "",
"fork": 0,
"length": 0
},
"signers": [],
"bootPolicyMinimums": {
"requirePearRuntimeRange": ">=1.0.0",
"requireBareCryptoMin": "1.13.4"
},
"rollback": {
"lastKnownGoodLength": 0,
"requireBootReadySignal": true
}
}
kernel/etc/bare-os/trust.policy.example.json
+16
View File
@@ -0,0 +1,16 @@
{
"schema": 1,
"signerPins": [],
"relayPolicy": {
"mode": "consent-required",
"allowlist": []
},
"encryptionPolicy": {
"mode": "per-space-keys",
"rotationDays": 30
},
"denyRules": {
"pearLinks": [],
"peerKeys": []
}
}
kernel/lib/bare/shell-completion.json
+6 -1
View File
@@ -1,8 +1,9 @@
{
"schema": 1,
"atMs": 1777207206853,
"atMs": 1777208168958,
"commands": [
"agent",
"appctl",
"arch",
"awk",
"baresay",
@@ -21,13 +22,16 @@
"clear",
"cmp",
"comm",
"corestorectl",
"cp",
"crontab",
"ctxbaredoctor",
"curl",
"cut",
"date",
"dd",
"df",
"dhtctl",
"dhtscan",
"dhttop",
"diff",
@@ -156,6 +160,7 @@
"tr",
"true",
"truncate",
"trustctl",
"tsort",
"tty",
"ulimit",
kernel/share/man/man.json
+1 -1
View File
File diff suppressed because one or more lines are too long