Skip to content

kernel daemon, ok, sys console#842

Draft
grypez wants to merge 5 commits intomainfrom
grypez/kernel-cli-command
Draft

kernel daemon, ok, sys console#842
grypez wants to merge 5 commits intomainfrom
grypez/kernel-cli-command

Conversation

@grypez
Copy link
Contributor

@grypez grypez commented Feb 18, 2026

demo

grypez and others added 5 commits February 17, 2026 18:29
…tils

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…patch

The system console vat manages a REPL loop over an IO channel,
dispatching CLI commands (help, status, launch, terminate, subclusters,
listRefs, revoke) and managing refs in persistent baggage. Refs use
a monotonic counter (d-1, d-2, ...) since crypto.randomUUID() is
unavailable under SES lockdown. Cross-vat errors are serialized via
JSON.stringify fallback for reliable error reporting.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add startDaemon() which boots a kernel with a system console vat
listening on a UNIX domain socket IO channel. The kernel process IS
the daemon — no separate HTTP server. Includes socket channel fix to
block reads when no client is connected, flush-daemon utility, and
e2e tests for the full daemon stack protocol.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add the 'ok' CLI that communicates with the kernel daemon over a UNIX
domain socket using newline-delimited JSON. Uses yargs for command
definitions with --help support on all commands. Supports three input
modes: file arg (ok file.ocap method), stdin redirect (ok launch <
config.json), and pipe (cat config.json | ok launch). Relative
bundleSpec paths in launch configs are resolved to file:// URLs
against CWD. Ref results are output as .ocap files when stdout is
not a TTY.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Implement a two-tier access model: unauthenticated daemon-tier commands
(help, status) and privileged ref-based dispatch via .ocap capability
files. Self-ref dispatch bypasses kernel round-trip for the console
root object. Fix kref leaks, improve socket channel reliability with
stale connection detection and client-side retry.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant