/**
 * Optional capability advertisement for Bare OS booter ↔ seeder alignment (documentation + introspection).
 * On the wire, masks are grouped under `kernelCapabilityWords` (see `kernel-capability-wire.js`).
 */

/** Protocol document version for this bitmask file (bump when bit semantics, wire shape, or governance changes). */
export const BARE_OS_KERNEL_FEATURE_BITS_DOC = 17

/**
 * Second capability word (bits 0–31, always use `>>> 0` when masking).
 * Avoids `1 << 31` on the primary stock mask; see ADR 001.
 */
/** Word2 bit 0: Seed RPC `bare_os.replication_queue` (queue / backpressure hints). */
export const BARE_OS_FEATURE2_SEED_REPLICATION_QUEUE_RPC = 1 << 0

/** Word2 bit 1: Seed RPC `bare_os.capability_attestation` (optional JSON payload from seeder). */
export const BARE_OS_FEATURE2_SEED_CAPABILITY_ATTESTATION_RPC = 1 << 1

/** Word2 bit 2: Seed RPC `bare_os.mbr_layout` (failover key layout hints). */
export const BARE_OS_FEATURE2_SEED_MBR_LAYOUT_RPC = 1 << 2

/** Word2 bit 3: `ctx.bareOsPearIpcRequest` (correlated Pear IPC round-trip). */
export const BARE_OS_FEATURE2_PEAR_IPC_REQUEST = 1 << 3

/** Word2 bit 4: `ctx.bareOsEmitMirrorDriveHint` structured mirror-drive style hints. */
export const BARE_OS_FEATURE2_MIRROR_DRIVE_CTX = 1 << 4

/** Word2 bit 5: `/proc` / env autopass–style HDMS pairing hints. */
export const BARE_OS_FEATURE2_AUTOPASS_HDMS_HINTS = 1 << 5

/** Word2 bit 6: Optional `BARE_OS_BIN_WORKER_OFFLOAD` for selected `/bin` (bare-thread path). */
export const BARE_OS_FEATURE2_BIN_WORKER_OFFLOAD = 1 << 6

/** Word2 bit 7: `BARE_OS_DIAGNOSTICS_SUBSCRIBE` dev event subscription. */
export const BARE_OS_FEATURE2_DIAGNOSTICS_CHANNEL = 1 << 7

/** Word2 bit 8: Initd `IdleSec=` for socket-activated units. */
export const BARE_OS_FEATURE2_INITD_IDLE_STOP = 1 << 8

/** Word2 bit 9: Initd `units.d/<name>/*.conf` drop-in fragments. */
export const BARE_OS_FEATURE2_INITD_UNITS_D = 1 << 9

/** Word2 bit 10: Cron `@reboot` + `JitterSec=` on timers/crontab. */
export const BARE_OS_FEATURE2_CRON_REBOOT_JITTER = 1 << 10

/** Word2 bit 11: Boot-ready `subsystems.initdActiveUnits` alignment. */
export const BARE_OS_FEATURE2_INITD_BOOT_READY_UNITS = 1 << 11

/** Word2 bit 12: `/proc/self/cgroups` and `/proc/net/tcp` synthetic Linux-compat procfs (session + swarm–backed rows). */
export const BARE_OS_FEATURE2_PROC_CGROUPS_TCP = 1 << 12

/** Word2 bit 13: Bounded `vfs.watch` on allowlisted pseudo paths. */
export const BARE_OS_FEATURE2_VFS_WATCH_PSEUDO = 1 << 13

/** Word2 bit 14: Shell `${…}` v2 (`##`, `%%`, `:=`) with `BARE_OS_SHELL_PARAM_EXPANSION_V2`. */
export const BARE_OS_FEATURE2_SHELL_PARAM_EXPAND_V2 = 1 << 14

/** Word2 bit 15: `/bin/env` `-S` and `--env-file` subset. */
export const BARE_OS_FEATURE2_ENV_DASH_S = 1 << 15

/** Word2 bit 16: Published JSON Schemas under `docs/schemas/` (repo artifact; introspection flag). */
export const BARE_OS_FEATURE2_JSON_SCHEMAS_REPO = 1 << 16

/** Word2 bit 17: Expanded contract tests (`verify-ctx`, tokenizer tests). */
export const BARE_OS_FEATURE2_CONTRACT_TESTS_PROTOCOL = 1 << 17

/** Word2 bit 18: `/proc/bare_os/extensions.json` kernel.ext.d registry. */
export const BARE_OS_FEATURE2_KERNEL_EXT_PROC = 1 << 18

/** Word2 bit 19: Seed RPC `bare_os.snapshot_hints`. */
export const BARE_OS_FEATURE2_SEED_SNAPSHOT_HINTS_RPC = 1 << 19

/** Word2 bit 20: Seed RPC `bare_os.peer_firewall_stats`. */
export const BARE_OS_FEATURE2_SEED_PEER_FIREWALL_STATS_RPC = 1 << 20

/** Word2 bit 21: Staging slot hints mirrored in replication JSON (with `staging_slot` RPC). */
export const BARE_OS_FEATURE2_SEED_STAGING_SLOT_SURFACE = 1 << 21

/** Word2 bit 22: `/proc/bare_os/pear_trust.json` host trust summary. */
export const BARE_OS_FEATURE2_PROC_PEAR_TRUST = 1 << 22

/** Word2 bit 23: `ctx.bareOsEmitBlindPeerHint` (Pear IPC). */
export const BARE_OS_FEATURE2_BLIND_PEER_HINT = 1 << 23

/** Word2 bit 24: Documented optional `BARE_OS_BARE_SUBPROCESS_*` host delegate bridge. */
export const BARE_OS_FEATURE2_BARE_SUBPROCESS_BRIDGE = 1 << 24

/** Word2 bit 25: Initd `ConditionPathExists=` / `AssertPathExists=`. */
export const BARE_OS_FEATURE2_INITD_CONDITION_PATH = 1 << 25

/** Word2 bit 26: `/proc/bare_os/initd_graph.json` (+ `dot` in DAG JSON). */
export const BARE_OS_FEATURE2_INITD_GRAPH_PROC = 1 << 26

/** Word2 bit 27: Initd suspend/resume ordered by boot DAG. */
export const BARE_OS_FEATURE2_INITD_SUSPEND_RESUME_ORDER = 1 << 27

/** Word2 bit 28: Timer `OnInactiveSec=` / `Persistent=` in `.timer` files. */
export const BARE_OS_FEATURE2_TIMER_ON_INACTIVE = 1 << 28

/** Word2 bit 29: `/proc/net/udp` synthetic Linux-compat view (logical discovery/datagram hints). */
export const BARE_OS_FEATURE2_PROC_NET_UDP = 1 << 29

/** Word2 bit 30: Bounded `vfs.watch` on `/proc/bare_os_swarm` when enabled. */
export const BARE_OS_FEATURE2_VFS_WATCH_SWARM = 1 << 30

/** Word2 bit 31: `/proc/bare_os/hdms_health.json`. */
export const BARE_OS_FEATURE2_HDMS_HEALTH_PROC = 1 << 31

/**
 * Third capability word (bits 0–31, use `>>> 0`).
 * Capability word 3 — ADR 001.
 */
/** Word3 bit 0: `/proc/bare_os/rlimits.json` from runtime caps. */
export const BARE_OS_FEATURE3_PROC_RLIMITS_JSON = 1 << 0

/** Word3 bit 1: Boot policy v3 fields in `boot.policy.json`. */
export const BARE_OS_FEATURE3_BOOT_POLICY_V3 = 1 << 1

/** Word3 bit 2: Delegate concurrency caps (`BARE_OS_DELEGATE_*_MAX_CONCURRENT`). */
export const BARE_OS_FEATURE3_DELEGATE_CONCURRENCY = 1 << 2

/** Word3 bit 3: Shell `local` / `declare -r` line scope (`BARE_OS_SHELL_LOCAL_DECLARE`). */
export const BARE_OS_FEATURE3_SHELL_LOCAL_DECLARE = 1 << 3

/** Word3 bit 4: `ctx.bareOsHostCapability` host feature probe. */
export const BARE_OS_FEATURE3_HOST_CAPABILITY_PROBE = 1 << 4

/** Word3 bit 5: CI validates `kernel/etc/bare-os/*.example*` vs schemas. */
export const BARE_OS_FEATURE3_CI_SCHEMA_EXAMPLES = 1 << 5

/** Stock booter second word (words 2–3). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_EXTENDED_SEEDING_PLATFORM =
  BARE_OS_FEATURE2_SEED_REPLICATION_QUEUE_RPC |
  BARE_OS_FEATURE2_SEED_CAPABILITY_ATTESTATION_RPC |
  BARE_OS_FEATURE2_SEED_MBR_LAYOUT_RPC |
  BARE_OS_FEATURE2_PEAR_IPC_REQUEST |
  BARE_OS_FEATURE2_MIRROR_DRIVE_CTX |
  BARE_OS_FEATURE2_AUTOPASS_HDMS_HINTS |
  BARE_OS_FEATURE2_BIN_WORKER_OFFLOAD |
  BARE_OS_FEATURE2_DIAGNOSTICS_CHANNEL |
  BARE_OS_FEATURE2_INITD_IDLE_STOP |
  BARE_OS_FEATURE2_INITD_UNITS_D |
  BARE_OS_FEATURE2_CRON_REBOOT_JITTER |
  BARE_OS_FEATURE2_INITD_BOOT_READY_UNITS |
  BARE_OS_FEATURE2_PROC_CGROUPS_TCP |
  BARE_OS_FEATURE2_VFS_WATCH_PSEUDO |
  BARE_OS_FEATURE2_SHELL_PARAM_EXPAND_V2 |
  BARE_OS_FEATURE2_ENV_DASH_S |
  BARE_OS_FEATURE2_JSON_SCHEMAS_REPO |
  BARE_OS_FEATURE2_CONTRACT_TESTS_PROTOCOL |
  BARE_OS_FEATURE2_KERNEL_EXT_PROC |
  BARE_OS_FEATURE2_SEED_SNAPSHOT_HINTS_RPC |
  BARE_OS_FEATURE2_SEED_PEER_FIREWALL_STATS_RPC |
  BARE_OS_FEATURE2_SEED_STAGING_SLOT_SURFACE |
  BARE_OS_FEATURE2_PROC_PEAR_TRUST |
  BARE_OS_FEATURE2_BLIND_PEER_HINT |
  BARE_OS_FEATURE2_BARE_SUBPROCESS_BRIDGE |
  BARE_OS_FEATURE2_INITD_CONDITION_PATH |
  BARE_OS_FEATURE2_INITD_GRAPH_PROC |
  BARE_OS_FEATURE2_INITD_SUSPEND_RESUME_ORDER |
  BARE_OS_FEATURE2_TIMER_ON_INACTIVE |
  BARE_OS_FEATURE2_PROC_NET_UDP |
  BARE_OS_FEATURE2_VFS_WATCH_SWARM |
  BARE_OS_FEATURE2_HDMS_HEALTH_PROC

/** Stock booter third word (word 3). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_RLIMITS_DELEGATES_SHELL =
  BARE_OS_FEATURE3_PROC_RLIMITS_JSON |
  BARE_OS_FEATURE3_BOOT_POLICY_V3 |
  BARE_OS_FEATURE3_DELEGATE_CONCURRENCY |
  BARE_OS_FEATURE3_SHELL_LOCAL_DECLARE |
  BARE_OS_FEATURE3_HOST_CAPABILITY_PROBE |
  BARE_OS_FEATURE3_CI_SCHEMA_EXAMPLES

/**
 * Fourth capability word (bits 0–31, use `>>> 0`). Capability word 4 — ADR 001.
 */
/** Word4 bit 0: Offline last-known-good boot (`BARE_OS_OFFLINE_LKG_BOOT` + `BARE_OS_LKG_SYSTEM_KEY_HEX`). */
export const BARE_OS_FEATURE4_OFFLINE_LKG_BOOT = 1 << 0

/** Word4 bit 1: `/proc/bare_os/net_summary.json` rollup. */
export const BARE_OS_FEATURE4_NET_SUMMARY_PROC = 1 << 1

/** Word4 bit 2: Boot policy v4 (`requireKernelCapabilitiesOfflineNetExtensions`, `denyExecLineBuiltins`, `allowedCtxMethods`). */
export const BARE_OS_FEATURE4_BOOT_POLICY_SURFACE = 1 << 2

/** Word4 bit 3: Lifecycle / telemetry NDJSON schema v4. */
export const BARE_OS_FEATURE4_TELEMETRY_SCHEMA_V4 = 1 << 3

/** Word4 bit 4: Kernel extension registry schema v2 (`semver`, `capabilities` on records). */
export const BARE_OS_FEATURE4_KERNEL_EXT_REGISTRY_V2 = 1 << 4

/** Word4 bit 5: Roadmap contract tests (`verify-kernel-capabilities-contract.mjs`). */
export const BARE_OS_FEATURE4_CONTRACT_TESTS_ROADMAP = 1 << 5

/** Word4 bit 6: Host storage hints merged into `/proc/bare_os/bootstrap` (`BARE_OS_HOST_STORAGE_JSON`). */
export const BARE_OS_FEATURE4_HOST_STORAGE_PROC = 1 << 6

/** Word4 bit 7: IPC FIFO audit (`BARE_OS_IPC_AUDIT`). */
export const BARE_OS_FEATURE4_IPC_SESSION_AUDIT = 1 << 7

/** Word4 bit 8: Initd `ConditionPathIsDirectory=` / `AssertPathIsDirectory=`. */
export const BARE_OS_FEATURE4_INITD_CONDITION_DIRECTORY = 1 << 8

/** Word4 bit 9: Delegate inflight + rate-bucket snapshot in `metrics_live` / `bareOsReadDelegateFairnessSnapshot`. */
export const BARE_OS_FEATURE4_DELEGATE_FAIRNESS_METRICS = 1 << 9

/** Word4 bit 10: Heavy `/bin` commands may use bare-worker when `BARE_OS_BIN_WORKER_OFFLOAD`. */
export const BARE_OS_FEATURE4_BIN_WORKER_ACTIVE = 1 << 10

/** Word4 bit 11: Subprocess bridge job list (`BARE_OS_SUBPROCESS_BRIDGE_JOBS_JSON`, `ctx.bareOsReadSubprocessBridgeJobs`). */
export const BARE_OS_FEATURE4_SUBPROCESS_JOB_SURFACE = 1 << 11

/** Stock booter fourth word (word 4 program backlog). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_OFFLINE_NET_EXTENSIONS =
  BARE_OS_FEATURE4_OFFLINE_LKG_BOOT |
  BARE_OS_FEATURE4_NET_SUMMARY_PROC |
  BARE_OS_FEATURE4_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE4_TELEMETRY_SCHEMA_V4 |
  BARE_OS_FEATURE4_KERNEL_EXT_REGISTRY_V2 |
  BARE_OS_FEATURE4_CONTRACT_TESTS_ROADMAP |
  BARE_OS_FEATURE4_HOST_STORAGE_PROC |
  BARE_OS_FEATURE4_IPC_SESSION_AUDIT |
  BARE_OS_FEATURE4_INITD_CONDITION_DIRECTORY |
  BARE_OS_FEATURE4_DELEGATE_FAIRNESS_METRICS |
  BARE_OS_FEATURE4_BIN_WORKER_ACTIVE |
  BARE_OS_FEATURE4_SUBPROCESS_JOB_SURFACE

/**
 * Fifth capability word (bits 0–31, use `>>> 0`). Capability word 5 — ADR 001 §8.
 */
/** Word5 bit 0: `/proc/bare_os/host_os.json` (`BARE_OS_HOST_BARE_OS_PROC` / `BARE_OS_HOST_OS_JSON`). */
export const BARE_OS_FEATURE5_HOST_BARE_OS_PROC = 1 << 0
/** Word5 bit 1: `bareOsReadSubprocessBridgeSnapshot` + `BARE_OS_SUBPROCESS_BRIDGE_META_JSON`. */
export const BARE_OS_FEATURE5_SUBPROCESS_BRIDGE_SNAPSHOT_V2 = 1 << 1
/** Word5 bit 2: Transport counters in net summary (`BARE_OS_NET_TRANSPORT_STATS_JSON`). */
export const BARE_OS_FEATURE5_NET_SUMMARY_TRANSPORT = 1 << 2
/** Word5 bit 3: Boot policy v5 (`requireKernelCapabilitiesHostTransportDelegates`, `requireInitJsSha256`). */
export const BARE_OS_FEATURE5_BOOT_POLICY_SURFACE = 1 << 3
/** Word5 bit 4: Replication sync windows + `/proc/bare_os/sync_window.json`. */
export const BARE_OS_FEATURE5_REPLICATION_SYNC_WINDOWS = 1 << 4
/** Word5 bit 5: Union readlink shadow lookup on personal drive. */
export const BARE_OS_FEATURE5_VFS_UNION_READLINK = 1 << 5
/** Word5 bit 6: Warm profile reload (`BARE_OS_KERNEL_PROFILE_WARM`, `bareOsRequestKernelProfileReload`). */
export const BARE_OS_FEATURE5_KERNEL_PROFILE_WARM = 1 << 6
/** Word5 bit 7: HDMS hints v2 (`BARE_OS_HDMS_SUPPORT_CORRELATION_ID`). */
export const BARE_OS_FEATURE5_HDMS_OPS_HINTS_V2 = 1 << 7
/** Word5 bit 8: OTel JSONL schema v2 lines. */
export const BARE_OS_FEATURE5_TELEMETRY_OTEL_V2 = 1 << 8
/** Word5 bit 9: `BARE_OS_BIN_WORKER_ALLOW` pattern groups (`textproc:*`, …). */
export const BARE_OS_FEATURE5_BIN_WORKER_PATTERN_ALLOW = 1 << 9
/** Word5 bit 10: Staging rollback hints (`BARE_OS_SEED_STAGING_PREVIOUS_SLOT`). */
export const BARE_OS_FEATURE5_STAGING_ROLLBACK_HINTS = 1 << 10
/** Word5 bit 11: `/proc/bare_os/debug.json` when `BARE_OS_KERNEL_DEBUG=1`. */
export const BARE_OS_FEATURE5_KERNEL_DEBUG_PROC = 1 << 11
/** Word5 bit 12: Manifest / catalog `risk` metadata for `ctx.bare`. */
export const BARE_OS_FEATURE5_BARE_MANIFEST_RISK = 1 << 12
/** Word5 bit 13: Replication queue metrics v2 on seeder RPC. */
export const BARE_OS_FEATURE5_REPLICATION_QUEUE_METRICS_V2 = 1 << 13
/** Word5 bit 14: Typed seed RPC errors (`bare_os.rpc_unknown_method`). */
export const BARE_OS_FEATURE5_SEED_RPC_TYPED_ERRORS = 1 << 14
/** Word5 bit 15: Repo doc CI scripts (man coverage, compat matrix, doc links). */
export const BARE_OS_FEATURE5_REPO_DOC_CI = 1 << 15

/** Stock booter fifth word (word 5). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_HOST_TRANSPORT_DELEGATES =
  BARE_OS_FEATURE5_HOST_BARE_OS_PROC |
  BARE_OS_FEATURE5_SUBPROCESS_BRIDGE_SNAPSHOT_V2 |
  BARE_OS_FEATURE5_NET_SUMMARY_TRANSPORT |
  BARE_OS_FEATURE5_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE5_REPLICATION_SYNC_WINDOWS |
  BARE_OS_FEATURE5_VFS_UNION_READLINK |
  BARE_OS_FEATURE5_KERNEL_PROFILE_WARM |
  BARE_OS_FEATURE5_HDMS_OPS_HINTS_V2 |
  BARE_OS_FEATURE5_TELEMETRY_OTEL_V2 |
  BARE_OS_FEATURE5_BIN_WORKER_PATTERN_ALLOW |
  BARE_OS_FEATURE5_STAGING_ROLLBACK_HINTS |
  BARE_OS_FEATURE5_KERNEL_DEBUG_PROC |
  BARE_OS_FEATURE5_BARE_MANIFEST_RISK |
  BARE_OS_FEATURE5_REPLICATION_QUEUE_METRICS_V2 |
  BARE_OS_FEATURE5_SEED_RPC_TYPED_ERRORS |
  BARE_OS_FEATURE5_REPO_DOC_CI

/**
 * Sixth capability word (bits 0–31, use `>>> 0`). Capability word 6 capability-word program — ADR 001 §9.
 */
/** Word6 bit 0: `kernelCapabilityWords.replicationOperatorSurface` on seed `capabilities` + `/proc/bare_os_features`. */
export const BARE_OS_FEATURE6_CAP_WORD = 1 << 0
/** Word6 bit 1: Extended seed RPCs (replication_plan, dht_bootstrap_hint, …). */
export const BARE_OS_FEATURE6_SEED_RPC_EXTENDED = 1 << 1
/** Word6 bit 2: Advisory replication JSON v2 fields (priorityClass, ipv6ScopeCounts, …). */
export const BARE_OS_FEATURE6_REPLICATION_JSON_ADVISORY = 1 << 2
/** Word6 bit 3: Capability word 6 `/proc/bare_os/*.json` operator metrics (udx, dht, backpressure, …). */
export const BARE_OS_FEATURE6_PROC_OPERATOR_METRICS = 1 << 3
/** Word6 bit 4: Boot policy v6 (`requireBooterSemver`, `kernelExtensionHashPins`, …). */
export const BARE_OS_FEATURE6_BOOT_POLICY_SURFACE = 1 << 4
/** Word6 bit 5: Kernel extension registry v3 + dependency edges in `/proc` JSON. */
export const BARE_OS_FEATURE6_KERNEL_EXT_REGISTRY_V3 = 1 << 5
/** Word6 bit 6: Pear/Bare bridge ctx hooks (updater delegate, hyperdht bootstrap refresh, blind-peer v2). */
export const BARE_OS_FEATURE6_PEAR_BARE_BRIDGE = 1 << 6
/** Word6 bit 7: `BARE_OS_PROC_ALIAS_STRICT=1` fails boot if `/proc/bare_os` alias index incomplete. */
export const BARE_OS_FEATURE6_STRICT_PROC_ALIAS = 1 << 7
/** Word6 bit 8: VFS/POSIX word 6 (advisory locks doc, union whiteout, `/dev/shm` cap, find -inum). */
export const BARE_OS_FEATURE6_VFS_POSIX_EXTENSIONS = 1 << 8
/** Word6 bit 9: Initd/timer word 6 (`PartOf=`, `RestartMode=direct`, `OnCalendar=` subset). */
export const BARE_OS_FEATURE6_INITD_LIFECYCLE_EXTENSIONS = 1 << 9
/** Word6 bit 10: Workers/sandbox/delegates word 6 (`mathproc:*`, wall budget, hrpc stub). */
export const BARE_OS_FEATURE6_WORKER_SANDBOX_DELEGATES = 1 << 10
/** Word6 bit 11: Net policy word 6 (`BARE_OS_DNS_MAP_JSON`, HSTS/TLS multi-pin docs). */
export const BARE_OS_FEATURE6_NET_POLICY_EXTENDED = 1 << 11
/** Word6 bit 12: Telemetry/audit v5/v3 (NDJSON lifecycle v5, OTel schema v3, audit v3). */
export const BARE_OS_FEATURE6_TELEMETRY_AUDIT = 1 << 12
/** Word6 bit 13: Repo CI feature-roadmap table word 6 (`verify-kernel-capabilities-word-6.mjs`, Pear static `node:` import scan). */
export const BARE_OS_FEATURE6_DOC_CI_CONTRACTS = 1 << 13
/** Word6 bit 14: Seeder handshake token-bucket metadata JSON. */
export const BARE_OS_FEATURE6_HANDSHAKE_TOKEN_BUCKET = 1 << 14
/** Word6 bit 15: Optional compact seed `compact_ping` / `compact_pong` RPC (bandwidth probe). */
export const BARE_OS_FEATURE6_COMPACT_SEED_PING = 1 << 15

/** Stock booter sixth word (word 6). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_REPLICATION_OPERATOR_SURFACE =
  BARE_OS_FEATURE6_CAP_WORD |
  BARE_OS_FEATURE6_SEED_RPC_EXTENDED |
  BARE_OS_FEATURE6_REPLICATION_JSON_ADVISORY |
  BARE_OS_FEATURE6_PROC_OPERATOR_METRICS |
  BARE_OS_FEATURE6_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE6_KERNEL_EXT_REGISTRY_V3 |
  BARE_OS_FEATURE6_PEAR_BARE_BRIDGE |
  BARE_OS_FEATURE6_STRICT_PROC_ALIAS |
  BARE_OS_FEATURE6_VFS_POSIX_EXTENSIONS |
  BARE_OS_FEATURE6_INITD_LIFECYCLE_EXTENSIONS |
  BARE_OS_FEATURE6_WORKER_SANDBOX_DELEGATES |
  BARE_OS_FEATURE6_NET_POLICY_EXTENDED |
  BARE_OS_FEATURE6_TELEMETRY_AUDIT |
  BARE_OS_FEATURE6_DOC_CI_CONTRACTS |
  BARE_OS_FEATURE6_HANDSHAKE_TOKEN_BUCKET |
  BARE_OS_FEATURE6_COMPACT_SEED_PING

/**
 * Seventh capability word (bits 0–31, use `>>> 0`). Capability word 7 capability-word program — ADR 001 §10.
 */
/** Word7 bit 0: `bits7` on seed `capabilities` + `/proc/bare_os_features`. */
export const BARE_OS_FEATURE7_CAP_WORD = 1 << 0
/** Word7 bit 1: Extended seed RPCs (corestore_stats, dht_address_book, …). */
export const BARE_OS_FEATURE7_SEED_RPC_EXTENDED = 1 << 1
/** Word7 bit 2: Replication JSON / handshake word 7 adjuncts. */
export const BARE_OS_FEATURE7_REPLICATION_JSON_ADJUNCT = 1 << 2
/** Word7 bit 3: Capability word 7 `/proc/bare_os/*.json` (diagnostics, hrpc, bare-net, …). */
export const BARE_OS_FEATURE7_PROC_OPERATOR_METRICS = 1 << 3
/** Word7 bit 4: Boot policy v7 (`requireKernelCapabilitiesPearCorestoreHrpc`, `requirePearRuntimeMin`, …). */
export const BARE_OS_FEATURE7_BOOT_POLICY_SURFACE = 1 << 4
/** Word7 bit 5: Kernel extension registry v4 + topological load order. */
export const BARE_OS_FEATURE7_KERNEL_EXT_REGISTRY_V4 = 1 << 5
/** Word7 bit 6: Pear/Bare bridge word 7 (`bareOsEmitBundlebeeHint`, diagnostics tap, …). */
export const BARE_OS_FEATURE7_PEAR_BARE_BRIDGE_EXTENDED = 1 << 6
/** Word7 bit 7: VFS/POSIX word 7 (resolve map, env `-C`, …). */
export const BARE_OS_FEATURE7_VFS_POSIX_EXTENSIONS = 1 << 7
/** Word7 bit 8: Initd / subprocess / limits mirror word 7. */
export const BARE_OS_FEATURE7_INITD_SUBPROCESS = 1 << 8
/** Word7 bit 9: Workers / delegates / netproc group word 7. */
export const BARE_OS_FEATURE7_WORKER_NET = 1 << 9
/** Word7 bit 10: Telemetry NDJSON v6 / OTel v4 / audit v4. */
export const BARE_OS_FEATURE7_TELEMETRY_AUDIT = 1 << 10
/** Word7 bit 11: CI (`verify-kernel-capabilities-word-7.mjs`). */
export const BARE_OS_FEATURE7_DOC_CI_CONTRACTS = 1 << 11
/** Word7 bit 12: Compact-encoding / protomux capability ad on seed wire (doc opt-in). */
export const BARE_OS_FEATURE7_COMPACT_MUX_ADVERT = 1 << 12

/** Stock booter seventh word (word 7). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_PEAR_CORESTORE_HRPC =
  BARE_OS_FEATURE7_CAP_WORD |
  BARE_OS_FEATURE7_SEED_RPC_EXTENDED |
  BARE_OS_FEATURE7_REPLICATION_JSON_ADJUNCT |
  BARE_OS_FEATURE7_PROC_OPERATOR_METRICS |
  BARE_OS_FEATURE7_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE7_KERNEL_EXT_REGISTRY_V4 |
  BARE_OS_FEATURE7_PEAR_BARE_BRIDGE_EXTENDED |
  BARE_OS_FEATURE7_VFS_POSIX_EXTENSIONS |
  BARE_OS_FEATURE7_INITD_SUBPROCESS |
  BARE_OS_FEATURE7_WORKER_NET |
  BARE_OS_FEATURE7_TELEMETRY_AUDIT |
  BARE_OS_FEATURE7_DOC_CI_CONTRACTS |
  BARE_OS_FEATURE7_COMPACT_MUX_ADVERT

/**
 * Eighth capability word (bits 0–31, use `>>> 0`). Capability word 8 capability-word program — ADR 001 §11.
 */
/** Word8 bit 0: `bits8` on seed `capabilities` + `/proc/bare_os_features`. */
export const BARE_OS_FEATURE8_CAP_WORD = 1 << 0
/** Word8 bit 1: Extended seed RPCs (protomux_rpc_pool_hint, hyperblob_store_hint, …). */
export const BARE_OS_FEATURE8_SEED_RPC_EXTENDED = 1 << 1
/** Word8 bit 2: Replication JSON / staging / firewall word 8 adjuncts. */
export const BARE_OS_FEATURE8_REPLICATION_JSON_ADJUNCT = 1 << 2
/** Word8 bit 3: Capability word 8 `/proc/bare_os/*.json` (structured-clone, bare-kit, …). */
export const BARE_OS_FEATURE8_PROC_OPERATOR_METRICS = 1 << 3
/** Word8 bit 4: Boot policy v8 (`requireKernelCapabilitiesBareRuntimeProtoMux`, `requireBareRuntimeMin`, …). */
export const BARE_OS_FEATURE8_BOOT_POLICY_SURFACE = 1 << 4
/** Word8 bit 5: Kernel extension registry v5 + compatPearBundleId. */
export const BARE_OS_FEATURE8_KERNEL_EXT_REGISTRY_V5 = 1 << 5
/** Word8 bit 6: Pear/Bare bridge word 8 (structured clone cap, protomux alias, …). */
export const BARE_OS_FEATURE8_PEAR_BARE_BRIDGE_EXTENDED = 1 << 6
/** Word8 bit 7: VFS/POSIX/shell word 8 (FIFO metrics v2, resolve map, …). */
export const BARE_OS_FEATURE8_VFS_POSIX_EXTENSIONS = 1 << 7
/** Word8 bit 8: Initd / subprocess / limits word 8. */
export const BARE_OS_FEATURE8_INITD_SUBPROCESS = 1 << 8
/** Word8 bit 9: Workers / sandbox / delegates word 8 (`ioproc:*`, …). */
export const BARE_OS_FEATURE8_WORKER_NET = 1 << 9
/** Word8 bit 10: Telemetry NDJSON v7 / OTel v5 / audit v5. */
export const BARE_OS_FEATURE8_TELEMETRY_AUDIT = 1 << 10
/** Word8 bit 11: CI (`verify-kernel-capabilities-word-8.mjs`). */
export const BARE_OS_FEATURE8_DOC_CI_CONTRACTS = 1 << 11
/** Word8 bit 12: Seed RPC `http_dht_proxy_routes` revision surface. */
export const BARE_OS_FEATURE8_HTTP_DHT_PROXY_ROUTES = 1 << 12
/** Word8 bit 13: Protomux `bare-os-cap-v1` side channel (`BARE_OS_PROTOMUX_CAP_CHANNEL`). */
export const BARE_OS_FEATURE8_PROTOMUX_CAP_CHANNEL = 1 << 13

/** Stock booter eighth word (word 8). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_BARE_RUNTIME_PROTO_MUX =
  BARE_OS_FEATURE8_CAP_WORD |
  BARE_OS_FEATURE8_SEED_RPC_EXTENDED |
  BARE_OS_FEATURE8_REPLICATION_JSON_ADJUNCT |
  BARE_OS_FEATURE8_PROC_OPERATOR_METRICS |
  BARE_OS_FEATURE8_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE8_KERNEL_EXT_REGISTRY_V5 |
  BARE_OS_FEATURE8_PEAR_BARE_BRIDGE_EXTENDED |
  BARE_OS_FEATURE8_VFS_POSIX_EXTENSIONS |
  BARE_OS_FEATURE8_INITD_SUBPROCESS |
  BARE_OS_FEATURE8_WORKER_NET |
  BARE_OS_FEATURE8_TELEMETRY_AUDIT |
  BARE_OS_FEATURE8_DOC_CI_CONTRACTS |
  BARE_OS_FEATURE8_HTTP_DHT_PROXY_ROUTES |
  BARE_OS_FEATURE8_PROTOMUX_CAP_CHANNEL

/**
 * Ninth capability word (bits 0–31, use `>>> 0`). Capability word 9 capability-word program — ADR 001 §12.
 */
/** Word9 bit 0: `bits9` on seed `capabilities` + `/proc/bare_os_features`. */
export const BARE_OS_FEATURE9_CAP_WORD = 1 << 0
/** Word9 bit 1: Extended seed RPCs (pear_stage_hint, drive_resolve_policy, …). */
export const BARE_OS_FEATURE9_SEED_RPC_EXTENDED = 1 << 1
/** Word9 bit 2: Replication JSON / staging schema 6 / kernel_info word 9 adjuncts. */
export const BARE_OS_FEATURE9_REPLICATION_JSON_ADJUNCT = 1 << 2
/** Word9 bit 3: Capability word 9 `/proc/bare_os/*.json` (bare-module, bare-crypto, pear-stage, …). */
export const BARE_OS_FEATURE9_PROC_OPERATOR_METRICS = 1 << 3
/** Word9 bit 4: Boot policy v9 (`requireKernelCapabilitiesBareModuleCryptoStaging`, `requireBareCryptoMin`, …). */
export const BARE_OS_FEATURE9_BOOT_POLICY_SURFACE = 1 << 4
/** Word9 bit 5: Kernel extension registry v6 + extensionSignerPins v2 hints. */
export const BARE_OS_FEATURE9_KERNEL_EXT_REGISTRY_V6 = 1 << 5
/** Word9 bit 6: Pear/Bare bridge word 9 (stage hint, bare module probe, …). */
export const BARE_OS_FEATURE9_PEAR_BARE_BRIDGE_EXTENDED = 1 << 6
/** Word9 bit 7: VFS/POSIX/shell word 9 (Hyperdrive-backed statvfs in resources, tar hardlink, crypto staging proc). */
export const BARE_OS_FEATURE9_VFS_POSIX_EXTENSIONS = 1 << 7
/** Word9 bit 8: Initd / subprocess / limits word 9. */
export const BARE_OS_FEATURE9_INITD_SUBPROCESS = 1 << 8
/** Word9 bit 9: Workers / sandbox / net word 9 (`mediaproc:*`, SOCKS map, …). */
export const BARE_OS_FEATURE9_WORKER_NET = 1 << 9
/** Word9 bit 10: Telemetry NDJSON v8 / OTel v6 / audit v6. */
export const BARE_OS_FEATURE9_TELEMETRY_AUDIT = 1 << 10
/** Word9 bit 11: CI (`verify-kernel-capabilities-word-9.mjs`). */
export const BARE_OS_FEATURE9_DOC_CI_CONTRACTS = 1 << 11
/** Word9 bit 12: Seed RPC `http_dht_proxy_routes` v2 revision surface. */
export const BARE_OS_FEATURE9_HTTP_DHT_PROXY_ROUTES_V2 = 1 << 12

/** Stock booter ninth word (word 9). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_BARE_MODULE_CRYPTO_STAGING =
  BARE_OS_FEATURE9_CAP_WORD |
  BARE_OS_FEATURE9_SEED_RPC_EXTENDED |
  BARE_OS_FEATURE9_REPLICATION_JSON_ADJUNCT |
  BARE_OS_FEATURE9_PROC_OPERATOR_METRICS |
  BARE_OS_FEATURE9_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE9_KERNEL_EXT_REGISTRY_V6 |
  BARE_OS_FEATURE9_PEAR_BARE_BRIDGE_EXTENDED |
  BARE_OS_FEATURE9_VFS_POSIX_EXTENSIONS |
  BARE_OS_FEATURE9_INITD_SUBPROCESS |
  BARE_OS_FEATURE9_WORKER_NET |
  BARE_OS_FEATURE9_TELEMETRY_AUDIT |
  BARE_OS_FEATURE9_DOC_CI_CONTRACTS |
  BARE_OS_FEATURE9_HTTP_DHT_PROXY_ROUTES_V2

/**
 * Tenth capability word (bits 0–31, use `>>> 0`). Capability word 10 capability-word program — ADR 001 §13.
 */
/** Word10 bit 0: `bits10` on seed `capabilities` + `/proc/bare_os_features`. */
export const BARE_OS_FEATURE10_CAP_WORD = 1 << 0
/** Word10 bit 1: Extended seed RPCs (pear_doctor_hint, pear_inspect_caps, …). */
export const BARE_OS_FEATURE10_SEED_RPC_EXTENDED = 1 << 1
/** Word10 bit 2: Replication JSON / staging schema 7 / kernel_info word 10 adjuncts. */
export const BARE_OS_FEATURE10_REPLICATION_JSON_ADJUNCT = 1 << 2
/** Word10 bit 3: Capability word 10 `/proc/bare_os/*.json` (bare-boot, bare-rpc, pear-doctor, …). */
export const BARE_OS_FEATURE10_PROC_OPERATOR_METRICS = 1 << 3
/** Word10 bit 4: Boot policy v10 (`requireKernelCapabilitiesPearInspectLoggerTls`, `requireBareBootMin`, …). */
export const BARE_OS_FEATURE10_BOOT_POLICY_SURFACE = 1 << 4
/** Word10 bit 5: Kernel extension registry schema 7 + extensionSignerPins v3 hints. */
export const BARE_OS_FEATURE10_KERNEL_EXT_REGISTRY_V7 = 1 << 5
/** Word10 bit 6: Pear/Bare bridge word 10 (doctor hint, bare logger tap, …). */
export const BARE_OS_FEATURE10_PEAR_BARE_BRIDGE_EXTENDED = 1 << 6
/** Word10 bit 7: VFS/POSIX/shell word 10 (ssh-keygen delegate, xargs -P, tar xattr). */
export const BARE_OS_FEATURE10_VFS_POSIX_EXTENSIONS = 1 << 7
/** Word10 bit 8: Initd / subprocess / git worktree policy word 10. */
export const BARE_OS_FEATURE10_INITD_SUBPROCESS = 1 << 8
/** Word10 bit 9: Workers / sandbox / net word 10 (`sysproc:*`, mTLS map, happy eyeballs v4). */
export const BARE_OS_FEATURE10_WORKER_NET = 1 << 9
/** Word10 bit 10: Telemetry NDJSON v9 / OTel v7 / audit v7. */
export const BARE_OS_FEATURE10_TELEMETRY_AUDIT = 1 << 10
/** Word10 bit 11: CI (`verify-kernel-capabilities-word-10.mjs`). */
export const BARE_OS_FEATURE10_DOC_CI_CONTRACTS = 1 << 11
/** Word10 bit 12: Seed RPC `compact_ping_v4` + `ready_guard_v4` surface. */
export const BARE_OS_FEATURE10_COMPACT_READY_RPC_V4 = 1 << 12

/** Stock booter tenth word (word 10). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_PEAR_INSPECT_LOGGER_TLS =
  BARE_OS_FEATURE10_CAP_WORD |
  BARE_OS_FEATURE10_SEED_RPC_EXTENDED |
  BARE_OS_FEATURE10_REPLICATION_JSON_ADJUNCT |
  BARE_OS_FEATURE10_PROC_OPERATOR_METRICS |
  BARE_OS_FEATURE10_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE10_KERNEL_EXT_REGISTRY_V7 |
  BARE_OS_FEATURE10_PEAR_BARE_BRIDGE_EXTENDED |
  BARE_OS_FEATURE10_VFS_POSIX_EXTENSIONS |
  BARE_OS_FEATURE10_INITD_SUBPROCESS |
  BARE_OS_FEATURE10_WORKER_NET |
  BARE_OS_FEATURE10_TELEMETRY_AUDIT |
  BARE_OS_FEATURE10_DOC_CI_CONTRACTS |
  BARE_OS_FEATURE10_COMPACT_READY_RPC_V4

/**
 * Eleventh capability word (bits 0–31, use `>>> 0`). Capability word 11 capability-word program — ADR 001 §14.
 */
/** Word11 bit 0: `kernelCapabilityWords.hypercorePackHrpcLifecycle` on seed `capabilities` + `/proc/bare_os_features`. */
export const BARE_OS_FEATURE11_CAP_WORD = 1 << 0
/** Word11 bit 1: Extended seed RPCs (hypercore_replicate_budget_v2, drive_version_graph, …). */
export const BARE_OS_FEATURE11_SEED_RPC_EXTENDED = 1 << 1
/** Word11 bit 2: Replication JSON / staging_slot_v8 / peer_firewall_stats_v6 adjuncts. */
export const BARE_OS_FEATURE11_REPLICATION_JSON_ADJUNCT = 1 << 2
/** Word11 bit 3: Capability word 11 `/proc/bare_os/*.json` (hypercore budget, pear matrix, bare-pack, …). */
export const BARE_OS_FEATURE11_PROC_OPERATOR_METRICS = 1 << 3
/** Word11 bit 4: Boot policy v11 (`requireKernelCapabilitiesHypercorePackHrpcLifecycle`, `requireBarePackMin`, …). */
export const BARE_OS_FEATURE11_BOOT_POLICY_SURFACE = 1 << 4
/** Word11 bit 5: Kernel extension registry schema 8 + extensionSignerPins v4 hints. */
export const BARE_OS_FEATURE11_KERNEL_EXT_REGISTRY_V8 = 1 << 5
/** Word11 bit 6: Pear/Bare bridge word 11 (runtime matrix, bundle preload, …). */
export const BARE_OS_FEATURE11_PEAR_BARE_BRIDGE_EXTENDED = 1 << 6
/** Word11 bit 7: VFS/POSIX/shell word 11. */
export const BARE_OS_FEATURE11_VFS_POSIX_EXTENSIONS = 1 << 7
/** Word11 bit 8: Initd / subprocess / limits word 11. */
export const BARE_OS_FEATURE11_INITD_SUBPROCESS = 1 << 8
/** Word11 bit 9: Workers / sandbox / net word 11 (`cryptoproc:*`, proxy map v2, …). */
export const BARE_OS_FEATURE11_WORKER_NET = 1 << 9
/** Word11 bit 10: Telemetry NDJSON v10 / OTel v8 / audit v8. */
export const BARE_OS_FEATURE11_TELEMETRY_AUDIT = 1 << 10
/** Word11 bit 11: CI (`verify-kernel-capabilities-word-11.mjs`). */
export const BARE_OS_FEATURE11_DOC_CI_CONTRACTS = 1 << 11
/** Word11 bit 12: Seed RPC `http_dht_proxy_routes_v3` revision surface. */
export const BARE_OS_FEATURE11_HTTP_DHT_PROXY_ROUTES_V3 = 1 << 12
/** Word11 bit 13: Seed RPC `compact_ping_v5` + `ready_guard_v5` surface. */
export const BARE_OS_FEATURE11_COMPACT_READY_RPC_V5 = 1 << 13

/** Word11 bit 14: Protomux `bare-os-chat-v1` swarm chat channel (stock on; opt out via `BARE_OS_PROTOMUX_CHAT_CHANNEL`). */
export const BARE_OS_FEATURE11_SWARM_CHAT = 1 << 14

/** Stock booter eleventh word (word 11). */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_HYPERCORE_PACK_HRPC_LIFECYCLE =
  BARE_OS_FEATURE11_CAP_WORD |
  BARE_OS_FEATURE11_SEED_RPC_EXTENDED |
  BARE_OS_FEATURE11_REPLICATION_JSON_ADJUNCT |
  BARE_OS_FEATURE11_PROC_OPERATOR_METRICS |
  BARE_OS_FEATURE11_BOOT_POLICY_SURFACE |
  BARE_OS_FEATURE11_KERNEL_EXT_REGISTRY_V8 |
  BARE_OS_FEATURE11_PEAR_BARE_BRIDGE_EXTENDED |
  BARE_OS_FEATURE11_VFS_POSIX_EXTENSIONS |
  BARE_OS_FEATURE11_INITD_SUBPROCESS |
  BARE_OS_FEATURE11_WORKER_NET |
  BARE_OS_FEATURE11_TELEMETRY_AUDIT |
  BARE_OS_FEATURE11_DOC_CI_CONTRACTS |
  BARE_OS_FEATURE11_HTTP_DHT_PROXY_ROUTES_V3 |
  BARE_OS_FEATURE11_COMPACT_READY_RPC_V5 |
  BARE_OS_FEATURE11_SWARM_CHAT

/** Bit 0: IPC fan-out / pub-sub style channels (booter `bareOsIpc`). */
export const BARE_OS_FEATURE_IPC_FANOUT = 1 << 0

/** Bit 1: AbortSignal / timeout on execLine, readLine, VFS. */
export const BARE_OS_FEATURE_ABORT_TIMEOUT = 1 << 1

/** Bit 2: HTTP allow/deny policy wrapper for delegated fetch. */
export const BARE_OS_FEATURE_HTTP_POLICY = 1 << 2

/** Bit 3: Virtual files under `/run/bare-os/virtual/<name>`. */
export const BARE_OS_FEATURE_VIRTUAL_FILES = 1 << 3

/** Bit 4: Host introspection bridge (`ctx.bareOsHostStats`) when available. */
export const BARE_OS_FEATURE_HOST_STATS = 1 << 4

/** Bit 5: `/dev/urandom` backed by `bare-crypto` (disable with `BARE_OS_URANDOM_CRYPTO=0`). */
export const BARE_OS_FEATURE_CRYPTO_URANDOM = 1 << 5

/** Bit 6: `ctx.bareOsSandboxRunScript` (restricted `ctx`). */
export const BARE_OS_FEATURE_SANDBOX_SCRIPT = 1 << 6

/** Bit 7: Boot step hooks (`ctx.bareOsRegisterBootStepHook`; legacy `bareOsRegisterBootPhaseHook`). */
export const BARE_OS_FEATURE_BOOT_STEP_HOOKS = 1 << 7
/** @deprecated Use {@link BARE_OS_FEATURE_BOOT_STEP_HOOKS} (same numeric bit). */
export const BARE_OS_FEATURE_BOOT_PHASE_HOOKS = BARE_OS_FEATURE_BOOT_STEP_HOOKS

/** Bit 8: Duplex IPC bridge (`bareOsIpc.createDuplexBridge`). */
export const BARE_OS_FEATURE_IPC_DUPLEX = 1 << 8

/** Bit 9: VFS union read overlay (`BARE_OS_VFS_UNION_PREFIXES`). */
export const BARE_OS_FEATURE_VFS_UNION = 1 << 9

/** Bit 10: Swarm snapshot proc (`/proc/bare_os_swarm`). */
export const BARE_OS_FEATURE_PROC_SWARM = 1 << 10

/** Bit 11: Relaxed / multiplied pipeline capture limits (`BARE_OS_SHELL_STREAMING=1`). */
export const BARE_OS_FEATURE_SHELL_STREAMING_PIPES = 1 << 11

/** Bit 12: Bounded command substitution `$(…)` (`BARE_OS_SHELL_CMDSUBST=1`). */
export const BARE_OS_FEATURE_SHELL_CMDSUBST = 1 << 12

/** Bit 13: Seed-channel RPC capability query (`bare_os.capabilities` / handshake). */
export const BARE_OS_FEATURE_SEED_CAP_RPC = 1 << 13

/** Bit 14: Extended synthetic `/proc` / `/sys` nodes (e.g. `/proc/self/fd`, `/sys/devices`). */
export const BARE_OS_FEATURE_EXTENDED_PROC = 1 << 14

/** Bit 15: Virtual file registration metadata (`mime`, `ttlMs` on `bareOsRegisterVirtualFile`). */
export const BARE_OS_FEATURE_VIRTUAL_FILE_META = 1 << 15

/** Bit 16: Union overlay write deny list (`BARE_OS_VFS_UNION_WRITE_DENY`). */
export const BARE_OS_FEATURE_VFS_UNION_WRITE_POLICY = 1 << 16

/** Bit 17: IPC per-channel byte caps / optional JSON shape hints (`BARE_OS_IPC_CHANNEL_MAX_BYTES`). */
export const BARE_OS_FEATURE_IPC_PER_CHANNEL = 1 << 17

/** Bit 18: Sandbox worker-thread path (`BARE_OS_SANDBOX_WORKER=1` + optional `bare-worker`). */
export const BARE_OS_FEATURE_SANDBOX_WORKER = 1 << 18

/** Bit 19: Unified telemetry sink (`BARE_OS_TELEMETRY_NDJSON`). */
export const BARE_OS_FEATURE_TELEMETRY_EXPORT = 1 << 19

/** Bit 20: Declarative boot policy file (`/etc/bare-os/boot.policy.json`). */
export const BARE_OS_FEATURE_BOOT_POLICY = 1 << 20

/** Bit 21: Seed RPC `bare_os.replication_status` (seeder-side replication hints). */
export const BARE_OS_FEATURE_SEED_REPLICATION_STATUS_RPC = 1 << 21

/** Bit 22: Deferred personal Hyperdrive mount (`BARE_OS_LAZY_PERSONAL_DRIVE`) until session setup. */
export const BARE_OS_FEATURE_LAZY_PERSONAL_DRIVE = 1 << 22

/** Bit 23: `ctx.bareOsSystemRevision` + env hooks for A/B style system revision hints. */
export const BARE_OS_FEATURE_SYSTEM_REVISION_HOOKS = 1 << 23

/** Bit 24: Optional `tier` field on `ctx.bare` manifest entries (`core` vs `extended`) for image builds. */
export const BARE_OS_FEATURE_BARE_MANIFEST_TIERS = 1 << 24

/** Bit 25: Centralized host delegate registry + `BARE_OS_DELEGATE_ALLOW` policy for git/curl/wget/systemctl. */
export const BARE_OS_FEATURE_HOST_DELEGATE_REGISTRY = 1 << 25

/** Bit 26: IPC path namespace (`BARE_OS_IPC_NAMESPACE`) for FIFO isolation. */
export const BARE_OS_FEATURE_IPC_SESSION_NAMESPACE = 1 << 26

/** Bit 27: Unified `/proc/bare_os/*` discovery tree (index + stable aliases). */
export const BARE_OS_FEATURE_PROC_BARE_OS_DIR = 1 << 27

/** Bit 28: Seed RPC `bare_os.manifest_hints` (sample manifest paths for operators). */
export const BARE_OS_FEATURE_SEED_MANIFEST_HINTS_RPC = 1 << 28

/** Bit 29: Lifecycle / telemetry NDJSON schema v3 (`BARE_OS_LIFECYCLE_SCHEMA_VERSION`). */
export const BARE_OS_FEATURE_LIFECYCLE_TELEMETRY_V3 = 1 << 29

/** Bit 30: Boot policy v2 (`maxExecLineDepth`, `denyEnvKeys`, `requireProcNodes`, `allowedUnionPrefixes`). */
export const BARE_OS_FEATURE_BOOT_POLICY_V2 = 1 << 30

/** Default bitmask implied by current stock booter. */
export const BARE_OS_KERNEL_FEATURES_STOCK_WORD_PRIMARY =
  BARE_OS_FEATURE_IPC_FANOUT |
  BARE_OS_FEATURE_ABORT_TIMEOUT |
  BARE_OS_FEATURE_HTTP_POLICY |
  BARE_OS_FEATURE_VIRTUAL_FILES |
  BARE_OS_FEATURE_HOST_STATS |
  BARE_OS_FEATURE_CRYPTO_URANDOM |
  BARE_OS_FEATURE_SANDBOX_SCRIPT |
  BARE_OS_FEATURE_BOOT_STEP_HOOKS |
  BARE_OS_FEATURE_IPC_DUPLEX |
  BARE_OS_FEATURE_VFS_UNION |
  BARE_OS_FEATURE_PROC_SWARM |
  BARE_OS_FEATURE_SHELL_STREAMING_PIPES |
  BARE_OS_FEATURE_SHELL_CMDSUBST |
  BARE_OS_FEATURE_SEED_CAP_RPC |
  BARE_OS_FEATURE_EXTENDED_PROC |
  BARE_OS_FEATURE_VIRTUAL_FILE_META |
  BARE_OS_FEATURE_VFS_UNION_WRITE_POLICY |
  BARE_OS_FEATURE_IPC_PER_CHANNEL |
  BARE_OS_FEATURE_SANDBOX_WORKER |
  BARE_OS_FEATURE_TELEMETRY_EXPORT |
  BARE_OS_FEATURE_BOOT_POLICY |
  BARE_OS_FEATURE_SEED_REPLICATION_STATUS_RPC |
  BARE_OS_FEATURE_LAZY_PERSONAL_DRIVE |
  BARE_OS_FEATURE_SYSTEM_REVISION_HOOKS |
  BARE_OS_FEATURE_BARE_MANIFEST_TIERS |
  BARE_OS_FEATURE_HOST_DELEGATE_REGISTRY |
  BARE_OS_FEATURE_IPC_SESSION_NAMESPACE |
  BARE_OS_FEATURE_PROC_BARE_OS_DIR |
  BARE_OS_FEATURE_SEED_MANIFEST_HINTS_RPC |
  BARE_OS_FEATURE_LIFECYCLE_TELEMETRY_V3 |
  BARE_OS_FEATURE_BOOT_POLICY_V2