sergio
550c98f275
Reorganización física de crates/: - core/ (mezclaba 6 propósitos) se divide en protocol/, init/, runtime/, compat/ - shared/ (3 crates) se redistribuye en protocol/ e init/ - lapaloma (sub-módulo de ui_engine) se promueve a modules/pineal/ Renames de proyectos: - shipote → shuma (runtime de sandboxes) - nouser → akasha (explorador de Mónadas) - yahweh → nahual (motor GPUI, antes ui_engine/) - lapaloma → pineal (data-viz agnóstica) Fraccionamiento UI → core agnóstico: - vista-core (DeckState + snap, 175 LOC, 5 tests verdes) - barra-core (Task + render_html + sanitize, 90 LOC, 5 tests verdes) - vista-web y barra-web ahora son thin DOM bindings Documentación nueva: - 16 SDDs por subdirectorio (≤80 LOC c/u): protocol/init/runtime/compat + 10 módulos + apps/ - docs/STATUS.md con cifras reales por proyecto - docs/ROADMAP.md con plan a finalización (6 hitos, ~6-8 semanas) - CHANGELOG.md particionado en docs/changelog/<proyecto>.md (7 buckets) Automatización: - scripts/reorg.py — script idempotente que: git mv directorios, renombra package names, recomputa path = refs, reescribe imports rust, actualiza workspace Cargo.toml. Soporta --dry-run. - scripts/split-changelog.py — particiona CHANGELOG por componente. Validación: - cargo check --workspace pasa (124 crates + 2 nuevos cores). - 10 tests adicionales (5 en vista-core + 5 en barra-core) verdes. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
45 lines
1.4 KiB
Rust
45 lines
1.4 KiB
Rust
use std::path::PathBuf;
|
|
|
|
#[derive(Debug, thiserror::Error)]
|
|
pub enum IncarnateError {
|
|
#[error("namespace `{ns}` requires CAP_SYS_ADMIN or CLONE_NEWUSER (neither available)")]
|
|
NamespaceCapMissing { ns: &'static str },
|
|
|
|
#[error("user namespaces blocked by sysctl kernel.unprivileged_userns_clone=0")]
|
|
UserNsDisabledBySysctl,
|
|
|
|
#[error("user namespaces restricted by LSM (apparmor/selinux)")]
|
|
UserNsRestrictedByLsm,
|
|
|
|
#[error("cgroup path `{path}` is not writable (delegation missing?)")]
|
|
CgroupNotWritable { path: PathBuf },
|
|
|
|
#[error("payload is not executable in this incarnation path (Wasm/Virtual not supported here)")]
|
|
NonExecutablePayload,
|
|
|
|
#[error("clone(2) failed: {0}")]
|
|
Clone(#[source] nix::errno::Errno),
|
|
|
|
#[error("pipe2(2) failed: {0}")]
|
|
Pipe(#[source] nix::errno::Errno),
|
|
|
|
#[error("post-clone setup: {0}")]
|
|
PostClone(#[source] anyhow::Error),
|
|
|
|
#[error(transparent)]
|
|
Io(#[from] std::io::Error),
|
|
|
|
#[error("invalid argv: contains NUL byte")]
|
|
InvalidArgv,
|
|
}
|
|
|
|
/// Cuando `strict_caps = false`, errores no-fatales se reportan como
|
|
/// `Degradation` y la encarnación continúa con menos aislamiento del pedido.
|
|
#[derive(Debug, Clone)]
|
|
pub enum Degradation {
|
|
NamespaceSkipped { ns: &'static str },
|
|
CgroupSkipped { path: PathBuf, reason: String },
|
|
CpuAffinitySkipped { reason: String },
|
|
UidMapFailed { reason: String },
|
|
}
|