shoney.arickathil
cc1c82b2ef
- jarvis (00-story): 6th track, 2nd software built with writeonce — an AI assistant; direct-HTTPS design; blockers named (net.connect + TLS) - runtime-v2 7 observability + 8 symmetric cipher: moved from the language track (were 30/43); 9 in-process TLS: created from the gap jarvis surfaces, RETIRES the "TLS is the proxy's job" doctrine (both directions) - language 41 (arena hang): fix design to ready — marshal cross-shard messages (root), align the shard_id % nshards route/compare + assert bound; poison-on-free + minimal fixture as follow-ups - fiber scope-gap analysis (plan/exploration/fiber/01): porch vs fiber, what porch lacks, would developers prefer porch - board + dependency-graph synced (porch 2-8 ready; rv2 table; §5/§5a graphs) (cherry picked from commit 203470ceb2a151fe3584931cd4237af3f96a9f29)
4.4 KiB
Story — runtime-v2: the runtime beyond sockets
The fifth track. Where databasev2/ takes
the database beyond RAM, this track takes the I/O plane beyond sockets:
processes, terminals and signals — the third of the native surface
the runtime never learned. Iterations 8/11/35 taught it sockets, the
program-mode stdlib taught it files, and iteration
42 (bounded
subprocess, ✅ on master 2026-09-01) opened this arc from inside the
language track before the arc had a name.
Numbering restarts at 1 and is local to this track; frontmatter carries
track: runtime-v2. Status rules are the repo's, unchanged.
The problem, stated once
A shard's plane multiplexes fds it created itself — listeners, accepted
sockets, and (since 42) the pipe/pidfd bundle of a one-shot child. That
is not enough for any program whose job is other programs: a long-lived
child's output has no path into an actor, a pseudo-terminal cannot be
allocated or resized, a signal cannot become a message, a tty the
process was GIVEN cannot be adopted into raw mode, and an fd cannot
cross a unix socket. Five seams, each builtin-sized, each in
runtime/src/ with a types.ml table row as its entire compiler cost
(the 42 precedent — no emit.ml change).
The iterations
| # | Iteration | What it adds |
|---|---|---|
| 1 | streaming subprocess | a long-lived child as a first-class peer: output in, stdin out, exit as a notice |
| 2 | PTY | openpty, controlling terminal, resize ioctls — a child that believes it owns a terminal |
| 3 | signals as events | SIGWINCH/SIGCHLD/… as mailbox messages — the seam 42 deferred to its real consumer |
| 4 | termios adoption | the process's OWN tty into raw mode and back — adopting a terminal it was given |
| 5 | fd passing | SCM_RIGHTS over unix sockets — detach/attach's foundation, and the Wayland stage's later |
The track then grew past its original five seams — same shape (a builtin in
runtime/src/ with a types.ml row), broader than processes/terminals/signals:
| # | Iteration | What it adds |
|---|---|---|
| 6 | term.size + term.width | the two terminal-measurement verbs the wmux ladder asked for |
| 7 | observability | metrics/gauges, a pprof-equivalent profile, stack-trace-on-trap (moved from language iteration 30, 2026-09-06) — refine |
| 8 | symmetric cipher | AEAD (encrypt/decrypt) for encrypted cookies and data at rest, extending iteration 34's digests (moved from language iteration 43, 2026-09-06) — refine |
| 9 | in-process TLS | TLS both directions — an outbound client (dial HTTPS) and inbound termination — retiring the "TLS is the proxy's job" doctrine; created 2026-09-07 from the gap jarvis surfaces. The track's heaviest seam (not builtin-sized; likely a vendored-lib exception) — refine |
ALL FIVE [1–5] LANDED 2026-09-02, one execution run (plan:
2026-09-01-runtime-v2.md;
three implementation amendments in the spec's History). Gates:
test_proc 193/0 + test_term 60/0 inside a fully green ASan suite on
both dispatch flavors, woc-test 557/0, subprocess-accept 12/0,
site-accept 23/0. The board's NEXT PLAN entry carries the findings.
All five were readiness: ready since the track-wide brainstorm
(spec,
2026-09-01), which also settled the build order: only 1 → 2 is chained
(spawn_pty extends spawn's plumbing); 3, 4 and 5 are startable alone,
today — the pull-transport decision (a child is fds; the net verbs
drive them) broke the old 1→2→3 chain. Edges live in
dependency graph section 6; each
iteration writes its own implementation plan when it starts.
The driving workload
wmux/ — the terminal multiplexer — consumes all
five; that track owns the product, this one owns the seams. Sibling
consumers per iteration are named in each story (skillhost 28, the zen
CDP driver, the alacritty Wayland stage). The doctrine carried over from
42: every resource a ceiling, every violation a refusal by name, no
zombie and no orphan ever, .dev/reference/tmux as the measured
reference.