shoney.arickathil
cc1c82b2ef
- jarvis (00-story): 6th track, 2nd software built with writeonce — an AI assistant; direct-HTTPS design; blockers named (net.connect + TLS) - runtime-v2 7 observability + 8 symmetric cipher: moved from the language track (were 30/43); 9 in-process TLS: created from the gap jarvis surfaces, RETIRES the "TLS is the proxy's job" doctrine (both directions) - language 41 (arena hang): fix design to ready — marshal cross-shard messages (root), align the shard_id % nshards route/compare + assert bound; poison-on-free + minimal fixture as follow-ups - fiber scope-gap analysis (plan/exploration/fiber/01): porch vs fiber, what porch lacks, would developers prefer porch - board + dependency-graph synced (porch 2-8 ready; rv2 table; §5/§5a graphs) (cherry picked from commit 203470ceb2a151fe3584931cd4237af3f96a9f29)
71 lines
4.4 KiB
Markdown
71 lines
4.4 KiB
Markdown
# Story — runtime-v2: the runtime beyond sockets
|
||
|
||
The fifth track. Where [`databasev2/`](../databasev2/00-story.md) takes
|
||
the database beyond RAM, this track takes the I/O plane beyond sockets:
|
||
**processes, terminals and signals** — the third of the native surface
|
||
the runtime never learned. Iterations 8/11/35 taught it sockets, the
|
||
program-mode stdlib taught it files, and iteration
|
||
[42](../language-runtime-database/42-bounded-subprocess.md) (bounded
|
||
subprocess, ✅ on `master` 2026-09-01) opened this arc from inside the
|
||
language track before the arc had a name.
|
||
|
||
Numbering restarts at 1 and is local to this track; frontmatter carries
|
||
`track: runtime-v2`. Status rules are the repo's, unchanged.
|
||
|
||
## The problem, stated once
|
||
|
||
A shard's plane multiplexes fds it created itself — listeners, accepted
|
||
sockets, and (since 42) the pipe/pidfd bundle of a one-shot child. That
|
||
is not enough for any program whose job is other programs: a long-lived
|
||
child's output has no path into an actor, a pseudo-terminal cannot be
|
||
allocated or resized, a signal cannot become a message, a tty the
|
||
process was GIVEN cannot be adopted into raw mode, and an fd cannot
|
||
cross a unix socket. Five seams, each builtin-sized, each in
|
||
`runtime/src/` with a `types.ml` table row as its entire compiler cost
|
||
(the 42 precedent — no `emit.ml` change).
|
||
|
||
## The iterations
|
||
|
||
| # | Iteration | What it adds |
|
||
| --- | --- | --- |
|
||
| 1 | [streaming subprocess](01-streaming-subprocess.md) | a long-lived child as a first-class peer: output in, stdin out, exit as a notice |
|
||
| 2 | [PTY](02-pty.md) | openpty, controlling terminal, resize ioctls — a child that believes it owns a terminal |
|
||
| 3 | [signals as events](03-signals-as-events.md) | SIGWINCH/SIGCHLD/… as mailbox messages — the seam 42 deferred to its real consumer |
|
||
| 4 | [termios adoption](04-termios.md) | the process's OWN tty into raw mode and back — adopting a terminal it was given |
|
||
| 5 | [fd passing](05-fd-passing.md) | SCM_RIGHTS over unix sockets — detach/attach's foundation, and the Wayland stage's later |
|
||
|
||
The track then grew past its original five seams — same shape (a builtin in
|
||
`runtime/src/` with a `types.ml` row), broader than processes/terminals/signals:
|
||
|
||
| # | Iteration | What it adds |
|
||
| --- | --- | --- |
|
||
| 6 | [term.size + term.width](06-term-size-width.md) | the two terminal-measurement verbs the wmux ladder asked for |
|
||
| 7 | [observability](07-observability.md) | metrics/gauges, a `pprof`-equivalent profile, stack-trace-on-trap (moved from language iteration 30, 2026-09-06) — `refine` |
|
||
| 8 | [symmetric cipher](08-symmetric-cipher.md) | AEAD (encrypt/decrypt) for encrypted cookies and data at rest, extending iteration 34's digests (moved from language iteration 43, 2026-09-06) — `refine` |
|
||
| 9 | [in-process TLS](09-in-process-tls.md) | TLS **both directions** — an outbound client (dial HTTPS) and inbound termination — **retiring the "TLS is the proxy's job" doctrine**; created 2026-09-07 from the gap [jarvis](../jarvis/00-story.md) surfaces. The track's heaviest seam (not builtin-sized; likely a vendored-lib exception) — `refine` |
|
||
|
||
**ALL FIVE [1–5] LANDED 2026-09-02, one execution run** (plan:
|
||
[`2026-09-01-runtime-v2.md`](../../superpowers/plans/2026-09-01-runtime-v2.md);
|
||
three implementation amendments in the spec's History). Gates:
|
||
`test_proc` 193/0 + `test_term` 60/0 inside a fully green ASan suite on
|
||
both dispatch flavors, woc-test 557/0, subprocess-accept 12/0,
|
||
site-accept 23/0. The board's NEXT PLAN entry carries the findings.
|
||
|
||
All five were `readiness: ready` since the track-wide brainstorm
|
||
([spec](../../superpowers/specs/2026-09-01-runtime-v2-design.md),
|
||
2026-09-01), which also settled the build order: only 1 → 2 is chained
|
||
(spawn_pty extends spawn's plumbing); **3, 4 and 5 are startable alone,
|
||
today** — the pull-transport decision (a child is fds; the net verbs
|
||
drive them) broke the old 1→2→3 chain. Edges live in
|
||
[dependency graph section 6](../../00-dependency-graph.md); each
|
||
iteration writes its own implementation plan when it starts.
|
||
|
||
## The driving workload
|
||
|
||
[`wmux/`](../wmux/00-story.md) — the terminal multiplexer — consumes all
|
||
five; that track owns the product, this one owns the seams. Sibling
|
||
consumers per iteration are named in each story (skillhost 28, the zen
|
||
CDP driver, the alacritty Wayland stage). The doctrine carried over from
|
||
42: every resource a ceiling, every violation a refusal by name, no
|
||
zombie and no orphan ever, `.dev/reference/tmux` as the measured
|
||
reference.
|