feat: build system transition to release fork + archive hardening

Release fork infrastructure: - REDBEAR_RELEASE=0.1.1 with offline enforcement (fetch/distclean/unfetch blocked) - 195 BLAKE3-verified source archives in standard format - Atomic provisioning via provision-release.sh (staging + .complete sentry) - 5-phase improvement plan: restore format auto-detection, source tree validation (validate-source-trees.py), archive-map.json, REPO_BINARY fallback Archive normalization: - Removed 87 duplicate/unversioned archives from shared pool - Regenerated all archives in consistent format with source/ + recipe.toml - BLAKE3SUMS and manifest.json generated from stable tarball set Patch management: - verify-patches.sh: pre-sync dry-run report (OK/REVERSED/CONFLICT) - 121 upstream-absorbed patches moved to absorbed/ directories - 43 active patches verified clean against rebased sources - Stress test: base updated to upstream HEAD, relibc reset and patched Compilation fixes: - relibc: Vec imports in redox-rt (proc.rs, lib.rs, sys.rs) - relibc: unsafe from_raw_parts in mod.rs (2024 edition) - fetch.rs: rev comparison handles short/full hash prefixes - kibi recipe: corrected rev mismatch New scripts: restore-sources.sh, provision-release.sh, verify-sources-archived.sh, check-upstream-releases.sh, validate-source-trees.py, verify-patches.sh, repair-archive-format.sh, generate-manifest.py Documentation: AGENTS.md, README.md, local/AGENTS.md updated for release fork model
2026-05-02 01:41:17 +01:00
parent f55acba68c
commit 5851974b20
242 changed files with 29015 additions and 1818 deletions
@@ -0,0 +1,53 @@
+diff --git a/src/header/sys_socket/constants.rs b/src/header/sys_socket/constants.rs
+index ec42889b..c91ffb1a 100644
+--- a/src/header/sys_socket/constants.rs
+++ b/src/header/sys_socket/constants.rs
+@@ -75,3 +75,6 @@ pub const SHUT_WR: c_int = 1;
+ 
+ pub const SCM_RIGHTS: c_int = 1;
+ pub const SCM_CREDENTIALS: c_int = 2;
+
+pub const IPPROTO_TCP: c_int = 6;
+pub const TCP_NODELAY: c_int = 1;
+diff --git a/src/platform/redox/socket.rs b/src/platform/redox/socket.rs
+index d223c36f..2faae4f5 100644
+--- a/src/platform/redox/socket.rs
+++ b/src/platform/redox/socket.rs
+@@ -1051,10 +1051,10 @@ impl PalSocket for Sys {
+                 _ => {
+                     let metadata = [SocketCall::SetSockOpt as u64, option_name as u64];
+                     let payload = unsafe {
+-                        slice::from_raw_parts_mut(option_value as *mut u8, option_len as usize)
+                        slice::from_raw_parts(option_value as *const u8, option_len as usize)
+                     };
+                     let call_flags = CallFlags::empty();
+-                    redox_rt::sys::sys_call_rw(
+                    redox_rt::sys::sys_call_wo(
+                         socket as usize,
+                         payload,
+                         CallFlags::empty(),
+@@ -1063,6 +1063,24 @@ impl PalSocket for Sys {
+                     return Ok(());
+                 }
+             },
+            crate::header::sys_socket::constants::IPPROTO_TCP => {
+                match option_name {
+                    crate::header::sys_socket::constants::TCP_NODELAY => {
+                        let metadata = [SocketCall::SetSockOpt as u64, option_name as u64];
+                        let payload = unsafe {
+                            slice::from_raw_parts(option_value as *const u8, option_len as usize)
+                        };
+                        redox_rt::sys::sys_call_wo(
+                            socket as usize,
+                            payload,
+                            CallFlags::empty(),
+                            &metadata,
+                        )?;
+                        return Ok(());
+                    }
+                    _ => (),
+                }
+            }
+             _ => (),
+         }
+