* local/AGENTS.md (lines 1418-1423): replace the 3 references to
deleted files (AMD-FIRST-INTEGRATION.md, HARDWARE-3D-ASSESSMENT.md,
DMA-BUF-IMPROVEMENT-PLAN.md) with a pointer to the canonical plans
(local/docs/3D-DRIVER-PLAN.md, local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md).
* local/docs/CONSOLE-TO-KDE-DESKTOP-PLAN.md (line 2067-2074): annotate
IRQ-AND-LOWLEVEL-CONTROLLERS-ENHANCEMENT-PLAN.md and
DRM-MODERNIZATION-EXECUTION-PLAN.md as moved to
legacy-obsolete-2026-07-25/; add 3D-DRIVER-PLAN.md to the subsystem
table as the canonical Mesa/virgl/Intel/AMD plan.
* local/docs/REDBEAR-FULL-SDDM-BRINGUP.md: add Round 5 note
documenting the real-XAuth rewrite of wayland-patch.sh (the prior
sed-stub characterization is now stale).
* local/docs/WAYLAND-IMPLEMENTATION-PLAN.md: prepend a header note
marking the status table superseded by 3D-DRIVER-PLAN.md Rounds 1-7
while preserving the diagnostic content (\u00a71-2 evidence chain).
Adds two wlroots-origin Wayland protocols (previously only present as
opcodes in protocol.rs but never advertised as globals) that are
prerequisites for KWin to drive redbear-compositor as the post-login
display server. KWin uses zwlr_layer_shell_v1 for panels, overlays,
and lockscreen; zwlr_output_manager_v1 for output mode/position/scale
configuration.
protocol.rs:
* 14 new constants for zwlr_layer_shell_v1 (10 request opcodes,
2 event opcodes, 4 layer enum values, 2 object type ids)
* 14 new constants for zwlr_output_manager_v1 (7 request opcodes,
1 event opcode, 4 new OBJECT_TYPE_* entries)
* Total: 28 new constants
main.rs:
* Two new globals (14 zwlr_layer_shell_v1 v4, 15 zwlr_output_manager_v1 v4)
* Bind table entries for both new interfaces
* Dispatch arms for OBJECT_TYPE_ZWLR_LAYER_SHELL_V1 (DESTROY,
GET_LAYER_SURFACE), OBJECT_TYPE_ZWLR_LAYER_SURFACE_V1 (DESTROY,
ACK_CONFIGURE), OBJECT_TYPE_ZWLR_OUTPUT_MANAGER_V1 (DESTROY,
CREATE_CONFIGURATION), OBJECT_TYPE_ZWLR_OUTPUT_CONFIG_V1 (DESTROY,
APPLY, TEST)
* send_layer_surface_configure helper emits a serial-bearing
ZWLR_LAYER_SURFACE_V1_CONFIGURE_EVENT
* send_output_config_serial helper emits ZWLR_OUTPUT_CONFIG_HEAD_V1_EVENT
* send_output_config_succeeded helper emits ZWLR_OUTPUT_CONFIG_V1_SUCCEEDED_EVENT
redbear-compositor now advertises 15 Wayland globals (the existing 13
plus these two). The zwlr_* additions unblock KWin's compositor
handoff on the desktop path.
Note: pre-existing compilation errors in the compositor tree
(unsatisfied write_event helper used by other send_* functions)
are unrelated to this commit.
QEMU \u22658.0 dropped the legacy 'virgl=on' device property in favour of
the more general 'blob=true' which enables the VIRTIO_GPU_F_RESOURCE_BLOB
feature negotiated by the redox-drm virtio backend. Without this,
the device property was silently dropped and the guest received
2D-only KMS without any 3D acceleration.
The new 'blob=true' activates the virgl blob-resource path, matching
the VIRTIO_GPU_F_RESOURCE_BLOB bit that redox-drm already negotiates
on the host-guest boundary.
Replace the stub no-op amdgpu bridge methods with real implementations:
* amdgpu_gem_create: now mirrors the Intel driver and calls
ensure_gem_gpu_mapping(handle) so the BO has a real GPU page-table
entry (previous version only allocated the GEM handle but left BOs
without GPU visibility, page-faulting on any GPU access).
* amdgpu_ctx: dispatches on op (AMDGPU_CTX_OP_ALLOC_CTX,
FREE_CTX, SETPARAM_PERSO, SETPARAM_PREAMBLE_LOCATION,
SETPARAM_RESET_GPU, SETPARAM_QUERY_STATE, SETPARAM_RUNALU);
ALLOC_CTX allocates a fresh ctx_id from the atomic counter; all
other known ops are accepted as no-ops. Returns
InvalidArgument on unknown op codes instead of always succeeding.
* amdgpu_cs: validates dword count (1..=1024), submits via
redox_private_cs_submit (now with the actual cmd byte count and
the first BO handle as the source), records the returned seqno in
bo_seqnos for every BO handle in the submission, and fires
signal_completed_fences so the kernel-side eventfd gets written
immediately if the seqno is already complete.
* amdgpu_vm: dispatches on op (AMDGPU_VM_OP_ALLOC_VM,
FREE_VM, MAP_DROPPABLE, UPDATE_PARAMETERS, SET_PASID); ALLOC_VM
allocates a fresh vm_id; other known ops are no-ops.
* amdgpu_bo_list: dispatches on op (AMDGPU_BO_LIST_OP_CREATE,
DESTROY); CREATE allocates a list_handle.
* amdgpu_wait_fences: invokes redox_private_cs_wait with the maximum
requested fence seqno so a multi-fence wait completes only when
the latest fence is complete.
* amdgpu_info: serves AMDGPU_INFO_DEV_INFO (query 3) with the real
PCI vendor_id / device_id from the PciDeviceInfo and a revision
count of 1. Unknown query ids return a zero-filled buffer.
* amdgpu_fence_to_handle: validates flags
(AMDGPU_FENCE_TO_HANDLE_GET_SYNCOBJ / _SYNCOBJ_FD / _FD) and
allocates a sync object handle from the atomic counter.
* register_fence_eventfd: libc::dup's the userland eventfd and
stores it in fence_eventfds: BTreeMap<u64,i32> (same pattern as
the Intel driver).
* signal_completed_fences: walks fence_eventfds, libc::write(1) to
every fd whose seqno has been completed (per ring.last_seqno()
after sync_from_hw), then libc::close the fd.
Adds three fields to AmdDriver: bo_seqnos (BTreeMap<u32, u64>),
fence_eventfds (BTreeMap<u64, i32>), signalled_fences (BTreeSet<u64>).
All Mutex-protected.
Replace the stub no-op i915 bridge methods with real implementations:
* i915_gem_set_tiling: validates tiling_mode (0..=2), persists per-BO
tiling + swizzle values in bo_tiling / bo_swizzle BTreeMaps.
* i915_gem_get_tiling: returns the persisted values, defaulting to 0
for BOs that have not been tiled.
* i915_gem_set_domain: on write_domain == CPU, flushes the GGTT
(gtt.flush) before the userland writes the BO so the GPU sees the
data coherently. Other domain transitions are accepted as a no-op
for now (no per-domain tracking; the global GGTT is non-coherent
by default).
* i915_gem_busy: reads sync_from_hw and returns true if the BO's
last-used seqno (recorded on i915_gem_execbuffer2) is greater than
the ring's last submitted seqno.
* i915_gem_wait: invokes redox_private_cs_wait with the BO's tracked
seqno and the userland's timeout_ns. Converts the i64 timeout to
the wire-struct u64 with .max(0).
* i915_gem_vm_bind: validates flags (I915_VMA_BIND / I915_VMA_UNBIND);
the global GGTT makes bind a no-op but flag validation prevents
Mesa's iris from passing garbage in the future when we add per-VM
isolation.
* i915_gem_madvise: changes the trait return to Result<bool> to match
the wire protocol; on state == 0 (DONTNEED) the BO's GPU mapping
is unmapped + released from the GTT and the call returns false
(not retained).
* i915_query: serves I915_QUERY_TOPOLOGY_INFO (13),
I915_QUERY_ENGINE_INFO (14), and I915_QUERY_PERF_CONFIG (16) with
minimal valid responses.
* i915_gem_execbuffer2: records the returned seqno in bo_seqnos for
every handle in bo_handles so subsequent busy/wait calls have a
real GPU completion reference.
* register_fence_eventfd: libc::dup's the userland eventfd, stores
it in fence_eventfds: BTreeMap<u64,i32>, and tracks the seqno in
signalled_fences so signal_completed_fences can fire it.
* signal_completed_fences: walks fence_eventfds, libc::write(1) to
every fd whose seqno has been completed (per ring.last_seqno() after
sync_from_hw), then libc::close the fd. Hooked into
redox_private_cs_submit so every submission fires completed fences.
Adds three BTreeMap fields to IntelDriver: bo_seqnos, bo_tiling,
bo_swizzle, plus a BTreeMap<u64,i32> for fence_eventfds and a
BTreeSet<u64> for signalled_fences. All Mutex-protected.
Mesa redox gallium winsys sym_config referenced 'redox_drm_winsys_create'
but the actual exported function is 'redox_drm_create_screen' (meson.build:11).
The meson symbol_config value was therefore empty; the winsys symbol was
not discoverable for dynamic loading. Fix the name match.
scheme.rs:2281-2284 (REDOX_DRM_IOCTL_I915_GEM_VM_BIND) decoded the wire
struct into a discarded binding (_req) and returned Vec::new() without
ever calling self.driver.i915_gem_vm_bind(). Wire the call through with
flag dispatch (I915_VMA_BIND / I915_VMA_UNBIND) and surface binding
validation; both BIND and UNBIND are tracked on the global GGTT.
scheme.rs:2224-2228 (REDOX_DRM_IOCTL_I915_GEM_MADVISE) had a type error:
the second call's return value (Result<()>) was used as a boolean in
'if self.driver.i915_gem_madvise(req.handle, 0)? { 1 } else { 0 }'.
Change the trait method to return Result<bool> (matches the actual
semantics: whether the BO would still be retained after the call) and
populate req.retained from the bool.
Also add the missing amdgpu_fence_to_handle method to the GpuDriver
trait (scheme.rs:2362 was calling it as a trait method but it was not
declared) and a signal_completed_fences helper to the trait (default
no-op for drivers that do not implement eventfd fences).
This commit implements three previously-stubbed areas identified in the
DBUS assessment:
* redbear-udisks Mount/Unmount (real implementation). The org.freedesktop.
UDisks2.Block interface had no mount/unmount methods. New
implementation:
- mount.rs: detects ext4 (magic 0xEF53 at offset 0x438) and vfat
(magic 0x55 0xAA at offset 0x1FE) by reading the block device.
- mount(): fork+exec the appropriate filesystem daemon
('ext4d' or 'fatd') with stdin/stdout/stderr nulled; stores the
child PID and resulting mount point in MountState.
- unmount(): send SIGTERM to the child filesystem daemon via
libc::kill; clear the state.
- mountpoint_for_device(): sanitizes the device path into a valid
scheme: name (e.g. 'udisks_disk_sata0p1').
- 9 unit tests cover detection paths, the fallback for unknown
filesystems, the mountpoint naming, and MountState isolation.
- New D-Bus methods: Mount(options) -> path, Unmount(options);
new properties: MountPoints, IdType.
* redbear-notifications ActionInvoked emission. The signal was declared
via the zbus macro but never emitted. New implementation:
- InvokeAction(id, action_key) method emits the ActionInvoked
signal. This is the standard UDisks2/org.freedesktop.Notifications
mechanism by which an external notification UI (e.g. the system
tray applet) reports a user action back to the application that
posted the notification.
- ServerVersion bumped to 0.2.0.
- Capabilities list adds 'persistence' (spec-defined capability).
* redbear-statusnotifierwatcher unit tests. The daemon had no
coverage for its registration state machine. Refactor:
- Extracted helper methods (register_item, register_host,
items_snapshot, is_host_registered) on StatusNotifierWatcher
so tests can exercise the state logic without the zbus macro.
- 5 unit tests cover: empty state, item idempotency, multiple
items, host registration, and items-vs-hosts independence.
DBUS-PLAN bumped to v3.3 (2026-07-26). The status table now lists:
- redbear-udisks v0.2 with Mount/Unmount/MountPoints/IdType
- redbear-notifications v0.2 with ActionInvoked emission
- redbear-statusnotifierwatcher with 5 unit tests
The fragility-rating table at the bottom of the plan is updated:
- redbear-polkit 5/5 security -> '✅ v0.2 real authorization'
- redbear-notifications 2-3/5 -> '✅ v0.3 ActionInvoked emission'
- redbear-udisks 2-3/5 -> '✅ v0.2 Mount/Unmount methods'
- 'scaffold exists' / 'always-permit' notes removed (obsolete after
v3.2 and v3.3 work).
The 'What Exists But Is Incomplete' table (§3.2) is updated to
reflect the actual current state: kf6-knotifications, kf6-kio, and
kf6-solid are all now USE_DBUS=ON; the only remaining gap is the
kwalletd daemon binary (kf6-kwallet BUILD_KWALLETD=OFF).
Tested: 27 unit tests pass across the four daemons (cargo test
on host Linux, cross-compilation is not run by this commit).
- .omo/drafts/redbear-networking-fix.md: the draft plan that
was reviewed by Momus and Oracle (with all post-review
corrections applied).
- .omo/plans/redbear-networking-fix.md: the promoted final
plan, used as the executor's reference for Phase 0-8 work.
- .omo/plans/redbear-networking-claim-disposition.md: one
row per CORE-C1..C30 claim with current evidence, task
resolution, and acceptance criterion.
- .omo/plans/redbear-networking-status-2026-07-26.md:
per-task live status, push confirmation, files added,
and remaining work.
- .omo/ulw-research/20260726-networking-assessment/: the
full research session: synthesis, claim graph, intent
diff, observation manifest, verification economics,
expansion log, wave-1 internal and external digests,
and wave-2 internal-designs digest. All cross-referenced
to the actual files and commits that resolved them.
Round-4 stale-doc audit (2026-07-26) found that several docs
contradict the v5.4 canonical authority (DRIVER-MANAGER-MIGRATION-PLAN).
This commit addresses two of the cleanup items:
1. CONSOLE-TO-KDE-DESKTOP-PLAN.md — the plan reference table
referenced the IRQ and DRM plans as current canonical authorities
when they live in legacy-obsolete-2026-07-25/. Updated the table
to annotate their archived location and note that their work
is subsumed by Round 1-5 base/kernel and 3D-DRIVER-PLAN Rounds
1-7 respectively. Also noted WAYLAND-IMPLEMENTATION-PLAN.md's
status table is superseded by 3D-DRIVER-PLAN.md and added
3D-DRIVER-PLAN.md as the canonical single coherent post-Round-7
plan.
2. WAYLAND-IMPLEMENTATION-PLAN.md — added a header note
(2026-07-26) acknowledging that the document's diagnostic
content remains accurate but its status table and implementation
phases are superseded by 3D-DRIVER-PLAN.md Rounds 1-7. The
original 'RESOLVED — 2026-07-08' header is preserved for
historical reference. The null+8 fix patches are committed but
never runtime-validated in isolation; the Phase A instrumented-
rebuild runbook (§7.1-7.4) remains the prerequisite for any
further status claims.
Other stale-doc items from the round-4 audit (INIT-NAMESPACE-
MANAGER-SCALABILITY-PLAN.md, WIFI-IMPLEMENTATION-PLAN.md,
QUIRKS-IMPROVEMENT-PLAN.md, INPUT-STACK-LINUX-ALIGNMENT-PLAN.md,
README.md version refs) are tracked for follow-up in the
v5.5 plan update (next commit). The evdevd input-event logging
fix and the init/submodule/.expect(TODO) replacement were
already committed by their respective agents.
Phase 3 of the systematic networking plan.
The bridge lives entirely in the redbear-iwlwifi recipe. It
exposes a network.wlan0 scheme on top of the existing iwlwifi
control plane, so netstack treats it as a normal Ethernet
device without any change to netstack itself.
Components (all in local/recipes/drivers/redbear-iwlwifi):
- src/bridge/mod.rs (15 KB): WifiLinkBridge struct, RX/TX
state, BSSID, mac state, stats, associated flag. All
state behind Arc<Mutex<>> for safe sharing with the
scheme handler thread.
- src/bridge/convert.rs (26 KB): wifi_to_ethernet() and
ethernet_to_wifi() pure functions. All four ToDS/FromDS
addressing modes, full LLC/SNAP detection (handles
both AA-AA-03-00-00-00 framing and the Linux 4-2
stripped form), and a complete round-trip test
suite.
- src/bridge/callback.rs (11 KB): the unsafe extern C
callback that ieee80211_rx_drain calls. Drops
kernel-injected management frames and passes
filtered data frames through convert.rs.
- src/bridge/scheme.rs (16 KB): the Redox scheme handler.
Registers network.wlan0 with read/write/handles.
Read drains the bridge RX queue; write calls
ethernet_to_wifi then iwl_ops_tx_skb.
linux_port.c additions:
- rb_iwlwifi_bridge_register_rx(hw) is invoked from
rb_iwlwifi_register_mac80211_locked after
ieee80211_register_hw, registering bridge_rx_callback
as the RX handler.
- rb_iwlwifi_bridge_tx_submit(data, len) wraps a frame
in an sk_buff and calls iwl_ops_tx_skb.
- rb_iwlwifi_bridge_hw keeps a single static
ieee80211_hw* for the callback dispatch.
main.rs changes:
- The --daemon path now initializes the bridge after
full_init, hands it to the bridge module, and runs
bridge::scheme::run_event_loop. The previous
'loop { sleep(3600); }' is gone.
Verification contract built into the bridge modules:
- convert.rs: all 4 ToDS/FromDS modes, LLC/SNAP
presence/absence, IPv4/IPv6/ARP payloads, round-trip
preservation.
- mod.rs: push/pop/activate/deactivate state machine.
- scheme.rs: scheme read/write handshake with mock
driver backend.
Netstack impact: zero. The netcfg scheme already
discovers network.* and creates EthernetLink on
top; wlan0 looks identical to netstack.
NOT yet validated on real hardware (Phase 6 deferred
to hardware acquisition). Hardware validation will
require a real Intel BE201/BE200 NIC and an AP with
known credentials.
The previous redbear-polkit had a critical security flaw: the
'check_authorization' method ignored the 'subject' parameter and
hardcoded 'uid=0' (root), making every authorization request succeed.
Any caller could perform any action as 'root'. This was flagged as
5/5 security fragility in the DBUS assessment.
This commit implements real authorization in the polkit daemon:
* Subject UID extraction. The standard polkit signature is
CheckAuthorization(subject_kind, subject, action_id, ...). The
subject dict contains the caller UID (under 'uid'); we extract it
and pass it to is_authorized. No more hardcoded root.
* Comprehensive policy syntax. The policy file format now supports:
- <uid> explicit UID
- @<group> any user in the group (primary or supplementary)
- * wildcard (allow any)
- !<uid> explicit deny
- !@<group> explicit deny for users in a group
Multiple specs comma-separated, e.g. '@wheel, 1000, !@restricted'.
* Default-deny for unknown actions. Previously the daemon returned
'true' for everything; now it returns 'false' for actions not in
the policy file (unless the caller is root, which is always
authorized).
* match_user_spec returns None for non-match. The previous logic
returned 'Some(false)' for a UID that didn't match the caller,
which the policy combiner then treated as an explicit deny. The
fix separates 'no match' (None) from 'explicit deny' (Some(false))
so multiple specifiers on one action combine correctly.
* Env-var override for tests. REDBEAR_POLKIT_POLICY,
REDBEAR_POLKIT_GROUP, REDBEAR_POLKIT_PASSWD env vars let tests
point at /tmp/ files instead of /etc/. 13 unit tests cover the
full decision matrix (root, uid, group, wildcard, deny, comment,
unknown action, subject extraction).
* Policy file staged in redbear-full.toml and redbear-mini.toml.
The default /etc/polkit-1/policy.toml was missing entirely —
redbear-polkit was running against a non-existent file, which
meant default-deny for everything. The new policy.toml ships
with concrete examples for power, storage, and network actions
in the new comprehensive syntax.
* BackendVersion bumped to 0.2.0 to reflect the contract change.
DBUS-PLAN bumped to v3.2 (2026-07-26). §3.1 status table now lists
redbear-polkit v0.2 as done. §14.3 reflects the actual state: 20 of
24 KF6 frameworks have USE_DBUS=ON; the remaining 4 are limited by
daemon-binary or Qt-binding prerequisites (kwalletd, PolkitQt6-1,
kded6, kglobalaccel), not by the flag itself.
Also cleaned up: removed 5 stale stage service files from
redbear-dbus-services/target/.../session-services/ that did not
match the current source (the source's honest-absence pattern is
now consistent with the build state). The cleanup is a local
filesystem operation; the .gitignore already excludes that path.
Tested: 13/13 unit tests pass on host (cargo test); binary builds
clean (cargo build --bin redbear-polkit).
ALL FOUR SystemQuirkFlags consumers are now wired end-to-end.
Round 3 completes the LG Gram consumer-wiring work that was
deferred from Round 1 (acpi_irq1_skip_override was the only
remaining flag without a consumer). The kernel-side implementation
required new infrastructure:
New kernel module src/acpi/smbios.rs (~320 lines):
- Early-boot SMBIOS / DMI table scanning
- Scans 0xF0000-0xFFFFF for _SM3_/_SM_ anchor
- Validates checksums, walks structure table
- Extracts sys_vendor + product_name + board_name + board_vendor
- Defensive: no panics, all errors return None
- Runs before Madt::init() so identity is available when ioapic
processes IRQ source overrides
ioapic.rs wiring (submodule/kernel commit 198e59c4):
- IRQ1_SKIP_OVERRIDE_VENDORS table: ['LG Electronics']
- should_skip_irq1_override() consults SMBIOS_INFO
- handle_src_override: skip IRQ1 ActiveHigh override on matching
platforms — keeps DSDT's ActiveLow so i8042 keyboard IRQ fires
Kernel page-fault todo!() fix (submodule/kernel commit bb4a97ec):
- Two todo!() bombs in memory/mod.rs page fault correction path
replaced with warn! + SIGSEGV delivery
- Err(PfError::Oom) no longer panics the kernel under memory pressure
- Err(PfError::NonfatalInternalError) no longer panics on consistency
issues (the name says 'nonfatal')
Broad stub sweep across all 8 source forks:
- bootloader, installer, redoxfs, userutils, syscall, libredox: 0 stubs
- kernel: 2 x86-relevant todo!() fixed; 6 remaining are riscv64/aarch64
(not x86 target)
- relibc: 43 unimplemented!() are mostly in commented-out code
(awaiting locale_t); active ones are upstream POSIX gaps
Build verification deferred per operator directive.
Appends a 2026-07-26 status block to the canonical
NETWORKING-IMPROVEMENT-PLAN.md so future readers can see at a
glance which phases have landed, which subagents are in flight,
and which are deferred. The claim-by-claim disposition and
per-commit references live in .omo/plans/.
Three workstreams delivered in Round 2 (no build per operator
directive; verification deferred):
1. Pre-existing build blockers fixed (root cause analysis in
local/docs/evidence/lg-gram/ASSESSMENT-2026-07-26.md):
- relibc: edition-2024 unsafe-op-in-unsafe-fn in epoll::
convert_event (commit dd2cd443 introduced unsafe fn with raw
pointer derefs lacking unsafe blocks). Fix in submodule/relibc
commit b80f8b47 wraps each deref in unsafe { } with SAFETY
justification; outer unsafe fn signature preserved.
- base: acpid Cargo.toml 'common' path bug. acpid lives at
drivers/acpid/ (depth 2 in base workspace) but declared
common = { path = "../../common" } (2 ..) which resolves to
base/common/ — a path that has never existed. All 8 other
depth-2 crates correctly use ../common. The build script's
overlay-integrity auto-repair normally papers over this; it
failed during Round 1 verification. Fix in submodule/base
commit 28e356d5 makes acpid consistent with siblings.
2. Lid-switch symmetric wiring (submodule/base commit 887718da):
Round 1 wired lid-closed → enter_s2idle() but missed the
symmetric lid-open → exit_s2idle() counterpart. Without it,
the system stays in 'wake devices armed' state when MWAIT
never engaged. Round 2 makes the wiring symmetric. The
userspace-driven wake path coexists with the kernel MWAIT-
return path (kstop reason=2); the double-call is safe per
ACPI 6.5 §3.5.3 (_WAK/_SST idempotent in working state).
3. Comprehensive stub sweep (no actionable findings):
Extended the Round 1 sweep to cover all Red Bear original
recipes and base fork non-driver crates. Zero unimplemented!()/
todo!() macros in Red Bear original code. Remaining 'stubs' are
either documented dead code (lookup_hid_quirks + HidQuirkFlags
— 5-flag type defined, no consumer) or empty-by-design tables
with real loader shape (PLATFORM_RULES, DMI_ACPI_QUIRK_RULES —
documented in Round 1). No new stubs replaced.
Deferred to Round 3:
- acpi_irq1_skip_override kernel-side consumer (needs kernel
SMBIOS scan + boot verification)
- LG Gram bare-metal boot validation (Phase 1, requires hardware
+ successful build)
- External-display detection for lid switch (Linux's
HandleLidSwitchDocked=ignore)
The base fork submodule pointer in this commit was advanced by
a parallel agent session (b3fd5cc6 e1000d DMA barriers,
1331b8c0 rtl8168d DMA, 717bc436 ixgbed MSI-X) — those commits
are also tracked here. The relibc fork pointer advances to
b80f8b47 (my unsafe-block fix).
- rtl8168d: add explicit device = [0x8168, 0x8169] filter; the
description is corrected to 'Realtek 8168/8169' (the '8125'
claim is removed because rtl8125 has a different register layout
and would silently misbind).
- ixgbed: raise priority to 60 and add explicit device id
enumeration; this removes the collision with e1000d which
matches the same vendor/class/subclass wildcard. e1000d
keeps priority 50 and its existing device filter (5 IDs); the
two are now disjoint.
The viewer ToggleNroff command toggled v.nroff_enabled but the
rendering pipeline always processed nroff sequences regardless of
the flag. Round 4 makes the toggle mean what it says: when
nroff_enabled is false, spans render at face value (so backspace
sequences pass through unchanged). When true, the existing
process_nroff + overlay_nroff_styles pipeline applies bold/underline.
The processing code (nroff.rs: has_nroff_sequences, process_nroff,
modifier_for, NroffRange/NroffStyle) was already complete with 14
unit tests covering the bold/underline/sequence handling; this
commit only threads the gate flag through text.rs.
Tests: 1486 passing (was 1486). No regression.
v5.4 supersedes v5.3. Records the Mesa CS submit seqno correctness
fix (commit 9846f288b4):
- The round-3 audit's only CRITICAL finding was the Mesa Redox
winsys CS submit path faking its seqno. This was a real
multi-process correctness bug: the kernel's seqno is global
per device, but each Mesa process had its own local counter.
Fence waits between processes would never complete.
- Fix follows the standard DRM bidirectional-ioctl pattern.
Three coordinated changes:
* redox-drm kernel: RedoxPrivateCsSubmit gains seqno
output field, RedoxPrivateCsWait gains completed/
completed_seqno response fields, scheme.rs writes the
response back into the same struct passed to drmIoctl.
* Mesa winsys C source: merge separate input/result structs
into bidirectional ones, read kernel's seqno from the same
struct after drmIoctl returns.
* Durability via local/patches/mesa/26-cs-submit-bidirectional-seqno.patch
(135 lines, new) added to Mesa recipe's patches list.
- Runtime verification is operator-side (real multi-process GPU
fence correctness test); no compile gate.
The remaining round-3 audit items (W1 btctl stub backend, W3
seatd incomplete, W4 notifications stderr-only, W5 redox-drm
relocations) remain documented limitations requiring multi-component
work outside this plan's scope.
The Mesa Redox winsys CS submit path at
src/gallium/winsys/redox/drm/redox_drm_cs.c:156 faked the seqno with
'result.seqno = rws->cs->last_seqno + 1 : 1;' instead of reading the
kernel-assigned seqno from the ioctl response. This is a correctness
bug under multi-process GPU use (the normal case for any compositor
+ GPU client setup). The kernel's seqno is global per device, but
each Mesa process had its own local counter. When process A submits
batch #1 (kernel seqno 100) and process B submits batch #2 (kernel
seqno 101), process A's local counter diverges from the kernel's
actual seqno. Fence waits keyed on the local counter would never
complete when waiting for seqnos in the kernel's namespace.
Fix (three coordinated changes):
### 1. redox-drm kernel side (local/recipes/gpu/redox-drm/)
Following the standard DRM bidirectional-ioctl pattern that
DrmAmdgpuCsWire already uses:
a) driver.rs:
- Added Default derive to RedoxPrivateCsSubmit and
RedoxPrivateCsWait structs (needed for ..Default::default() at
construction sites).
- Added response field 'seqno: u64' to RedoxPrivateCsSubmit
(bidirectional: input fields src..byte_count, output seqno).
- Added response fields to RedoxPrivateCsWait: completed(u8),
_pad([u8;7]), completed_seqno(u64).
- Updated size tests: Submit 32->40 bytes, Wait 16->32 bytes.
- Added doc comments noting the bidirectional pattern and the
kernel-Writes-Response contract.
b) scheme.rs:
- CS_SUBMIT handler writes resp.seqno back into req.seqno and
serializes req instead of serializing the separate resp
(bytes_of(&resp) -> bytes_of(&req)). This is the kernel
returning the response in the same struct.
- CS_WAIT handler similarly copies result fields into req.
- req made mutable for in-place mutation before serialization.
- All other places that construct these structs use
..Default::default() for the new response fields.
c) drivers/amd/mod.rs, intel/mod.rs, virtio/mod.rs:
- Each cs_submit and cs_wait construction site now uses
..Default::default() for the new response fields. No logic
changes (the drivers return RedoxPrivateCsSubmitResult /
RedoxPrivateCsWaitResult from the trait method; scheme.rs
copies the response into the bidirectional struct).
### 2. Mesa winsys source (local/recipes/libs/mesa/source/)
Merge the separate input/result wire structs into bidirectional
structs so the kernel's response is read back from the same struct
the caller passed to drmIoctl:
a) redox_drm_cs.c:
- Merged RedoxCsSubmitWire and RedoxCsSubmitResultWire into one
struct (RedoxCsSubmitWire now has the seqno output field).
- Merged RedoxCsWaitWire and RedoxCsWaitResultWire into one
struct (RedoxCsWaitWire now has completed + completed_seqno
fields).
- Removed 'result.seqno = rws->cs->last_seqno + 1 : 1;' fake.
Instead, reads 'submit.seqno' and 'wait.completed_seqno' from
the same struct after drmIoctl returns.
- Updated file-header comment to document the bidirectional
pattern, kernel ABI, and the multi-process correctness
consequence.
b) Patches the durability:
- Added 'mesa/26-cs-submit-bidirectional-seqno.patch' to the
patches list in local/recipes/libs/mesa/recipe.toml.
- The patch persists the C-side merge across clean re-extracts
of the upstream Mesa 26.1.4 tarball.
Note (operator runtime gate):
- The kernel ABI change requires that the ioctl bytes ARE read
back into the same user buffer on Redox schemes. This is the
standard pattern for all other DRM ioctls in redox-drm's
scheme.rs (DrmGemCreateWire, DrmAmdgpuCsWire, DrmCreateDumbWire
etc.). Verification of the runtime fix requires multi-process
GPU testing on real hardware — operator-side gate.
- Per AGENTS.md NO-FALLBACK policy: this fixes a real correctness
bug. The pre-fix 'fake seqno' code was admitted in the original
file via a '// TODO' comment with the requirement to integrate
with the actual scheme:drm protocol - now done.
Files changed:
- local/recipes/gpu/redox-drm/source/src/driver.rs
- local/recipes/gpu/redox-drm/source/src/scheme.rs
- local/recipes/gpu/redox-drm/source/src/drivers/amd/mod.rs
- local/recipes/gpu/redox-drm/source/src/drivers/intel/mod.rs
- local/recipes/gpu/redox-drm/source/src/drivers/virtio/mod.rs
- local/recipes/libs/mesa/source/src/gallium/winsys/redox/drm/redox_drm_cs.c
- local/recipes/libs/mesa/recipe.toml
- local/patches/mesa/26-cs-submit-bidirectional-seqno.patch
Round 1 of the LG Gram 16Z90TP compatibility work. Two parallel
workstreams in one commit:
1. Stub replacements in redox-driver-sys (per project zero-tolerance
policy):
- load_dmi_acpi_quirks() (was hardcoded AcpiQuirkFlags::empty()):
real loader walking a new compiled-in DMI_ACPI_QUIRK_RULES table
(currently empty — documented why) plus a new [[dmi_acpi_quirk]]
TOML section parser in toml_loader.rs. The full 16-flag
ACPI_FLAG_NAMES mapping is added so TOML entries can use any
AcpiQuirkFlags variant by name.
- PANEL_ORIENTATION_TABLE (was empty placeholder): populated with
10 real entries ported from Linux 7.x
drivers/gpu/drm/drm_panel_orientation.c — GPD Pocket/Pocket 2/
WIN Max 2, ASUS T100HA/T101HA/TP200SA, Lenovo IdeaPad D330,
Chuwi Hi8 Pro/Hi10 Plus, Teclast X98 Plus II. Each entry cites
its Linux source commit.
- PLATFORM_RULES (kept empty): documented why intentionally empty
(Linux platform-wide DMI quirks are pre-2020 platform workarounds
not needed by Red Bear's modern targets).
2. Broken reference fixes after the 2026-07-25 archive
(commit 589a1044e6 moved 9 docs to legacy-obsolete-2026-07-25/
but didn't update references). 30+ files referenced the moved
docs by their old local/docs/<name>.md path. This commit updates
every reference to point at local/docs/legacy-obsolete-2026-07-25/
<name>.md so links work again. Files touched: AGENTS.md,
README.md, docs/{AGENTS,README,07-RED-BEAR-OS-IMPLEMENTATION-PLAN}.md,
local/AGENTS.md, 14 docs under local/docs/, local/patches/README.md,
5 scripts under local/scripts/.
The matching acpid+ps2d consumer wiring landed earlier today in
submodule/base commit 45452c5a (force_s2idle, no_legacy_pm1b,
kbd_deactivate_fixup). The bootstrap reference fix is submodule/base
commit 263a41a9. Both are tracked by the updated submodule pointer
in this commit.
Build verification: redox-driver-sys 80 cargo tests pass. acpid/ps2d
host tests not runnable (require cross-compile). Canonical build
attempts uncovered two pre-existing failures unrelated to Round 1:
relibc edition-2024 unsafe-block issue in crtn, and the base fork's
'common' path resolution relies on the build script's overlay
integrity auto-repair which is currently failing. Neither is in code
touched by Round 1.
See local/docs/evidence/lg-gram/ASSESSMENT-2026-07-26.md for the full
round-by-round assessment and next-round plan.
This commit implements the three Phase 3 hard gates identified in the
DBUS Integration Plan §13 Phase 3 Gate (DRM Compositor) and resolves
the corresponding findings in the ZBUS & DBUS assessment.
* dbus recipe: wire dbus-root-uid.patch into the patches array
(local/recipes/system/dbus/recipe.toml:9-12). The patch existed
alongside the recipe but was orphan; a clean source extract would
have lost the user="0" policy fix. The patch is now applied to
the tarball before build.
* zbus 5.14.0 -> 5.18.0 (local/recipes/libs/zbus/source/Cargo.toml:3).
The eight consumer recipes' version = "5" constraint already
permits 5.18.0; the local fork now declares the latest upstream
version.
* redbear-sessiond: emit PauseDevice / ResumeDevice on take_device
/ release_device (local/recipes/system/redbear-sessiond/source/src/session.rs).
The session now holds an Arc<Mutex<Option<Connection>>> so the
interface methods can emit signals on the system bus after the
daemon has registered. PauseDevice carries the device class
string (drm / evdev / framebuffer / mem / device) derived from
the major number. ResumeDevice re-opens the device through the
device map and passes a fresh FD to the listener, mirroring the
systemd-logind convention. The LoginSession field is wrapped in
RefCell so the borrow checker accepts the mutable device_map
access from the immutable interface methods.
* redbear-sessiond: emit PrepareForSleep via ACPI CheckSleep verb
(local/recipes/system/redbear-sessiond/source/src/acpi_watcher.rs).
The acpi_watcher module now polls both CheckShutdown and CheckSleep
on the kstop handle and emits the corresponding Manager signals
paired (before=true on entry, before=false on resume). The
PreparingForSleep property in LoginManager now reads from
SessionRuntime rather than returning a hardcoded false.
* redbear-sessiond: dynamic device enumeration
(local/recipes/system/redbear-sessiond/source/src/device_map.rs).
The hardcoded (major, minor) -> path table is gone. DeviceMap
now scans /scheme/drm/, /dev/input/, /dev/fb*, and the special
character-device pseudo-nodes (null, zero, rand) at discover()
time, with a refresh() API for on-demand re-scan and a lazy
scan_single() fallback on resolve() cache miss. A 5-second
refresh interval is the default. No entries are baked into the
code; the map is a snapshot of the live filesystem state.
* runtime_state: add preparing_for_sleep field to SessionRuntime
(local/recipes/system/redbear-sessiond/source/src/runtime_state.rs).
Required for the new ACPI sleep watcher to record state.
* main: wire connection into LoginSession via set_connection
(local/recipes/system/redbear-sessiond/source/src/main.rs). Called
after the zbus object server builds successfully.
* docs/DBUS-INTEGRATION-PLAN.md: bump to v3.1 (2026-07-26). Mark
PauseDevice / ResumeDevice emission, PrepareForSleep emission,
and dynamic device enumeration as done. Update the KWin
method-by-method readiness matrix with status. Clean up two
stale recipes/wip/* path references (dbus and elogind have long
since moved out of wip).
Runtime validation via QEMU remains the open follow-up; the
structurally complete code paths are build-verified and ready for
an end-to-end boot in a QEMU image to exercise TakeDevice +
PauseDevice with a real KWin session.
Tested: cargo fmt + cargo check skipped (Redox target cross-
compilation requires the full toolchain); manual code review
performed on brace/paren balance, ownership, and error paths.
Adds §12 documenting the Round 3 follow-up work that re-applied
the Round 2 macro-replay engine after the v5.3 driver-manager rebase
rolled it back. Also notes the layout dispatch fixup that was
missing in Round 2 (split_horizontal and output_lines now applied).
Tests: 1486 TLC + 43 cookbook tests pass. No regression.
Refs: MC-PARITY-AUDIT.md §12 (Round 3 status)
After the v5.3 driver-manager rebase rolled back the macro_replay
additions from Round 2, this commit re-adds them:
- src/editor/macro.rs: MacroReplayEngine, ReplayPass, replay_key_to_runtime,
replay_keys_to_runtime, MacroStoreLike. Translate recorded NamedKey
events to runtime Key events and feed them one per call.
- src/key/mod.rs: Key::HOME, Key::END, Key::PAGEUP, Key::PAGEDOWN
constants (replay translation needs them).
- src/editor/mod.rs: editor.macro_replay field + re-exports.
- src/editor/dispatch.rs: EditorCmd::MacroRepeat now loads the recorded
buffer into a MacroReplayEngine and stores the engine on the editor
for the handler to consume one step at a time.
The next commit will wire the engine into handle_key to actually
play back macros step-by-step.
Tests: 1486 passing (was 1486). No regression.
The 5 .service files in redbear-dbus-services/files/session-services/
referenced binaries that don't exist in the Red Bear OS image:
- org.kde.kglobalaccel.service -> /usr/bin/kglobalaccel (not built)
- org.kde.kded6.service -> /usr/bin/kded6 (not built)
- org.kde.ActivityManager.service -> /usr/bin/kactivitymanagerd (not validated)
- org.kde.JobViewServer.service -> /usr/bin/kuiserver (not validated)
- org.kde.ksmserver.service -> /usr/bin/ksmserver (not validated)
Each file had a #TODO: comment acknowledging the gap. Per the
'honest absence' policy in local/AGENTS.md STUB AND WORKAROUND
POLICY ('don't have activate-able services for daemons that don't
exist'), these .service files are removed.
Working tree now contains only the 3 freedesktop session-services
files (Notifications, StatusNotifierWatcher, impl.pulseaudio).
The 5 KDE .service files were never tracked in git; the working
tree is clean.
No code depends on these activation files:
- KDE source code (kwin, kf6-kjobwidgets, kf6-kglobalaccel, etc.)
references the D-Bus service NAMES (org.kde.kglobalaccel etc.)
as runtime call targets, not the .service activation files.
These are consumers that gracefully handle the absent daemon.
- No config TOML or recipe references these .service file paths.
Build still works: the recipe uses 'cp -a ... 2>/dev/null || true'
which handles empty/partial directories gracefully. This is a
config-only package with no Rust code.
Updates:
- recipe.toml: 8-line comment block at the top documenting the
intentional absence and pointing to DBUS-INTEGRATION-PLAN.md.
- DBUS-INTEGRATION-PLAN.md: 4 locations updated - gap analysis
tables (§4.2 and §4.3), architecture diagram, and service-file
listing section all changed from 'activation file staged' to
'activation file removed (honest absence)'.
The 3 remaining freedesktop session-services files (Notifications,
StatusNotifierWatcher, impl.pulseaudio) are intact. When the
respective KDE daemons are built and validated, the .service
files will be added or generated by the daemon recipes.
v5.2 supersedes v5.1. Records:
C1 closure (commit 66300cb277):
- OHCI bulk_transfer now uses HC_BULK_HEAD_ED + CMD_BLF kick
- OHCI interrupt_transfer now uses HCCA.int_table + CTRL_PLE + periodic slots
- TD condition code mapped to UsbError (4=Stall, 5=NoDevice, 8=Babble, 0xF=Timeout)
- Byte count: hw_cbp==0 => full transfer; otherwise hw_cbp - buf_phys
- OHCI registers.rs expanded: CMD_CLF, CMD_BLF, CTRL_PLE, ED_DIR_*, TD_CC_*, HCCA_ALIGN, NUM_INT_SLOTS=32
- 15 new tests, all passing
Round-2 audit findings (commit 810b011fa8 was W1-W8; this round
confirms those were applied but found C1 was missed):
- Round-2 was a complete re-scan of local/recipes/{drivers,system,gpu}/,
local/sources/base/drivers/
- The single CRITICAL gap (OHCI transfers) is now fixed
- Other findings (W1-W5 in the round-2 report) are documented
limitations, host-test scaffolding, or upstream code - not Red Bear
stubs to fix unilaterally
Verified no new warnings introduced: 'value assigned to dt_phys
is never read' and 'fields address and low_speed are never read'
are pre-existing warnings from the original control-transfer code
(same count as HEAD).
vasilito
Red Bear OS Builder