Repository navigation
R1-02 / UL-007 / UP-02: useful shell and process runtime #8
Description
Migration and public-source publication are tracked in #1. Retain the qualified legacy IDs below; completed historical work is not reopened.
Outcome
Finish consumer-required C/musl/process semantics and qualify interactive Zsh using the completed dash/session foundations.
Scope and non-goals
No new authority, quotas, ABI, supported platform, release or native-run permission is implied by migration.
Responsibility: userland; kernel enforcement; sys-init process owner.
Acceptance
- Selected external commands, pipelines, substitution, redirection, fork/exec/wait, descriptor flags and required signal/job behavior have actual target evidence.
- Partial launch, failed exec, unknown replies and abnormal child exit preserve state or retire it without false success/replay.
- Exact Zsh source/configuration and runtime closure are qualified; bounded dash/ABI24/AF07/AF08 witnesses are retained as foundations.
Verification
- Affected native process/SESSION/musl suites, source-derived real-shell workloads, semantic negatives, cleanup and independent consumer acceptance.
Prerequisites
- Blocked by R1-01 / UL-008 / UP-07: serial TTY and session support #6.
- Source/configuration prerequisite UL-009: pin Zsh/ncurses and define the first native consumer closure #7 is merged.
- Offline native Zsh link/provider/fit child: Build and inspect the first Aether Zsh consumer closure #65. Static linkage succeeds but ordinary-process admission remains blocked; PR docs(userland): record Zsh target admission blocker #68 records the sanitized result. Define a bounded application profile for the required Zsh closure #67 owns the selected bounded application-layout/resource design. These do not close native interactive acceptance.
Contracts and legacy IDs
Legacy IDs: R1-02, UP-02, userland:UL-003, userland:UL-007, userland:UL-015.
- .planning/ROADMAP.md
- docs/SIGNALS.md
- userland/docs/NATIVE-DASH-GAPS.md
- userland/docs/SESSION-SDK-BOUNDARY.md
- userland/docs/NATIVE-C-HANDOFF.md
Start and completion rules
This is a coordination epic, not a blanket implementation assignment. Keep distant work coarse; select bounded child issues before implementation. Close only after its capability exits and required child evidence are met.
A hosted source check, host fixture or peer-agent review is not native OS, recovery or release acceptance.
Activity
gonz0w commentedon Oct 25, 2026
Read-only preparation for #65 identified two provider paths that must be audited before native Zsh claims: musl fopen/fdopen/stdio may use internal sys_open/fcntl/close or syscall paths rather than the strong external bindings, and Zsh exit/realexit reaches libc exit()->_Exit beyond the existing _exit wrapper. #65 will inventory the exact retained bundle/providers; successful linking cannot prove FILE routing or checked exit. Do not patch sealed inputs or add success stubs. Any required adaptations need bounded child work here after that evidence.
gonz0w commentedon Oct 25, 2026
Zsh capacity progress: the approved bounded profile is implemented and separately reviewed in draft PR #71 (#69/#70). The actual required Zsh target build passes its selected parser and image controls; focused ownership/copy/reclaim and current consumer checks pass, along with both required GitHub checks. The complete host gate remains failed/incomplete at its existing aggregate deadline, so integration is blocked pending a fresh host resource disposition. Native shell/TTY/libc/filesystem/ISO acceptance and #64's matched native prerequisite remain open.
gonz0w commentedon Oct 26, 2026
Host milestone accepted: PR #71 is merged and main CI passes; #65, #69 and #70 are complete in their finite offline/host scope. The required Zsh target now fits the explicitly approved application profile with meaningful provider/startup/image negatives, and the complete current-host gate passes. Existing ordinary limits and all native boundaries remain unchanged. Next selected capability path is the matched AF09 native admission/drain qualification in #64, with finite offline preparation before any concrete guest disposition. No native Zsh/TTY, persistent interactive prompt or ISO acceptance is claimed.
gonz0w commentedon Oct 26, 2026
Offline AF09 owner receipt prerequisite landed in protected PR #72 (main8902170f6e041c7df99a2ef94f7bba4a096cd1d0), after PR #71’s Zsh application profile and full host pass. Issue #64’s finite offline adapter acceptance is complete; its native admission/deadline acceptance remains open. Next is fresh producer/helper host qualification with strict current product-header and declared dependency routing, then matched artifact/workload qualification. This does not close interactive Zsh/TTY, persistent filesystem or ISO acceptance.
gonz0w commentedon Oct 26, 2026
Current AF09 host-input prerequisite is accepted through protected PR #73 (maine76b02e1b033fc58ae0beddbfbc69596e89d1d2b). Fresh complete producer156/helper41/owner911 command records, strict consumers and focused tests pass with frozen inputs and confirmed cleanup. Issue #64 owns the next engine-input routing and matched artifact/workload preparation. This is host/target-object evidence; interactive Zsh/TTY, native admission/drain enforcement, persistent filesystem and ISO gates remain open.
gonz0w commentedon Oct 26, 2026
Engine-input repair is accepted in protected PR #74 (main33ace875cbd9dafc94aebd93f20c29dbd6546698), after #72/#73. Current next work is #75’s deterministic admission/drain fixture and observation family, feeding native gate #64. Implementing that workload before target construction avoids building candidates that cannot exercise the required cutpoint. Existing R1/persistence/Zsh/TTY/ISO acceptance remains open; no guest has run.
gonz0w commentedon Oct 26, 2026
AF09 host prerequisites are prepared and separately reviewed in draft PR #76; both exact-head GitHub checks pass, including the new free Python decoder/controller regressions. Issue #75 now records the concrete default-off diagnostic-control proposal and is blocked on its required explicit human review; native gate #64 depends on it. C/Rust host coverage is complete for this slice, while kernel checkpoints, current whole qualifications/fit, target/native artifacts, persistent interactive Zsh and ISO acceptance remain open. The standing900-second host default is unchanged; no guest ran.
gonz0w commentedon Oct 27, 2026
AF09 prerequisite progress: owner adopted the scoped5400-second complete offline-family default, sourceec54ba9 is CI-green, and the fresh campaign is running under #75. The first file_prefix case now has3diagnostic ISO/kernel pairs prepared and independently checked against all14,852 retained inputs and measured bounds. Remaining cases/finaloverall review/native gate #64 stay open. This is artifact preparation, not interactive Zsh/TTY, persistence acceptance or an assembled release ISO.
gonz0w commentedon Oct 27, 2026
AF09 prerequisite #75 is complete via protected PR #76 (e7dff1d). The complete host gate and all eight offline diagnostic cases pass, with 20 roles/40 artifacts independently checked and cleanup verified. Parent #64 now awaits its concrete reviewed native execution disposition; no guest has run. This removes a filesystem service/client diagnostic-preparation blocker. It does not yet establish the native drain contract, Zsh/TTY runtime, filesystem operations or the assembled persistent Zsh ISO required by R1.
gonz0w commentedon Nov 2, 2026
TTY foundations through handled SIGINT and fixed canonical/ZLE mode restoration are now merged/native-qualified in #125/#128 (PR126/129), within their bounded consumers. #6 remains open for actual Zsh/group/readiness integration. Selected shared child #130 now chooses the smallest actual pinned Zsh build/provider/target trial from the current accepted inputs and prior65/69/83 analysis. It will identify precise current runtime/namespace/profile-combination blockers and authorized useful preparation before proposing any new consequential decision. A clearly labelled development trial is distinct from full interactive/job-control/external-command/persistence/R1 acceptance; existing target is unchanged.
gonz0w commentedon Nov 2, 2026
#131 is complete through protected PR132/merge73a77bf4b6f72f4ca03754d9aeb57bf588b55422. Actual current-provider Zsh+tinfo now links and passes current application parser/layout/backing/TLS checks; normal exit reaches checked FD cleanup without recursion. Five reviewed files, required CI and generated-output disposal are complete. The results are #131 (comment).
This is executable preparation, not native interactive acceptance. The next finite delivery must resolve real terminfo file Sources/current libc internal file+buffered-read routes and matching startup/namespace admission, then the explicit large-app+MODE composition decision. Runtime heap/stack/signals, foreground/groups, external commands, persistence/packages and R1 remain open. No other-OS runtime or general host-testing campaign is selected.
gonz0w commentedon Nov 2, 2026
Completed #134/#135 through PR #136: fresh actual Zsh1,270,160 bytes/313 pages with same-context pinned fopen/read/seek and existing initializedTLS/nonrecursive exit; one real1268-byte VT100 asset; new expected-six engine5,214,152 bytes/1332 pages. Focused checks, separate final review, both required CI checks, exact merge tree and owned-output disposal pass. These are offline inputs/fits, not interactive acceptance.
Next #137 records the concrete retained-Owner/readonly-file/startup/typed-directory and matching kernel composition design; Cam’s consequential choice is pending. Actual tgetent/ZLE/prompt, complete runtime resources, external commands/process semantics, login, persistence/packages and R1 remain open. Existing backing headroom is not heap/stack sufficiency.
gonz0w commentedon Nov 2, 2026
#137’s draft PR #138 now contains the reviewed readonly FILE/startup/identity/cwd/typed-terminfo integration. Both required CI checks pass. Fresh app fit remains313 pages; actual Owner code/Runtime/conservative stack fit unchanged limits. Two concrete stack-fit failures and the actual namespace greeting-epoch mismatch were corrected and reviewed. The outlined external helper still exceeds the trial stack and is outside this fixed builtin workload.
No guest/image/prompt is claimed. Complete workload peak-demand proof is still a pre-image gate; Cam is selecting whether one guarded diagnostic workload can supply fit evidence instead, with all current limits unchanged. External commands/process semantics, login, persistence/packages and R1 remain open.
gonz0w commentedon Nov 2, 2026
Real Zsh has now passed the fixed serial builtin checkpoint in #137 (results #137 (comment)): actual VT100/terminfo/ZLE prompt, one command through the real terminal, standalone builtin output, normal app/engine exit, checked mode cleanup, complete reclamation and known host stop within unchanged bounds. The Owner used33/96 filesystem requests.
PR #138 remains draft while the required full-host integration gate is reconciled: its timed run was incomplete and exposed old/synthetic fixture failures requiring bounded triage. The accepted native result does not establish external commands, process groups/job control, login, arbitrary workloads, cold reboot persistence or R1. This epic remains open.
gonz0w commentedon Nov 2, 2026
#137 is completed through merged PR #138 (49dece8; reviewed tree607be9fa2fb1fe767e0797d6b84d038908b6deb0 and both required checks). Real Zsh prompt/builtin/normal-exit/export/cleanup is accepted within its fixed scope; this epic remains open.
Cam’s approved issue-only delivery exception preserves failed/incomplete full-host coverage and unverified descendant/pipe cleanup in deferred #141. The selected next bounded batch is source analysis/design in #142 for the first real external command from Zsh. It selects no implementation, quota/authority change, guest, login, cold persistence or R1 acceptance.
gonz0w commentedon Nov 3, 2026
Child #143 completed through merged PR #144. The actual fixed Zsh workload ran its helper, collected status7, printed7 and returned to its prompt, then exited/exported/reclaimed cleanly in34.169s. Main mergef90f43e exactly matches the reviewed tree; final required CI passes. Arbitrary filesystem execution, pipelines/redirection/substitution, broader job behavior, login and R1 remain open. Next development scope is the source-derived shell write → export → cold readback step under the existing proportionate-development direction.
gonz0w commentedon Nov 3, 2026
Issue145 / PR147 completes the fixed real-Zsh helper write: normal0/status0, prompt return, checked write/close, normal export/cleanup and independent original-provider cold readback. The source and native results are recorded in #145.
This epic remains open: the held helper is a bounded executable, while broader filesystem execution, pipelines/redirection and required process-group/signal behavior still need their selected gates.
gonz0w commentedon Nov 4, 2026
Delivered #148 through PR149, protected merge8e944fdf61fff31f48fd5de686e67958f030e592. Real Zsh executed the sealed3548-byte ELF acquired from OpenZFS, collected/printed23 and returned to its prompt; normal parent/engine export, mode restoration,21 cleanup phases and three reclaims passed in38.678s using42/96 requests. Both host holders and five clients have known cleanup; existing limits are unchanged. Required Source integrity/Kernel models and separate source/artifact/native-result reviews pass. This closes the first sealed filesystem executable witness. General commands, pipelines/redirection/job behavior and the assembled shell/session gates remain open.
gonz0w commentedon Nov 5, 2026
#150 is delivered through PR151. Real Zsh on a fresh cold VM executes the persisted3548-byte filesystem helper, collects/prints23 and returns to prompt, then exits with normal export/MODE restore/three reclaims/known cleanup. Corrected trial25.628s/38requests, unchanged limits; focused checks, separate reviews and required CI pass. Sustained interactive use, broader commands/pipelines/redirection/foreground job behavior and this shell/runtime epic remain open; #141 stays open.