2 Commits

Include renames

Author	SHA1	Message	Date
glm-5.3-flash	3a447273a8	docs: resolve OQ-TN-14 — unix in via local, stdio out (alktty owns process stdio) ... Split the last open substrate-placement question: - Unix: ships with the local feature v1 (dial_unix — same halves shape as TCP; the wire enum already carried unix per ADR-001; the params task's schema list includes all three values) - Stdio: OUT of scope — a spawned process's stdin/stdout/stderr IS alktty's pipe mode (LocalTtyBackend + tokio::process + Stdio::piped, alktty tty-local.md): three multiplexed logical streams + the exit-code control chunk (alktty ADR-004) + signal forwarding (REQ-TTY-02). A stdio bridge here would be alktty's runner mode with the terminal stripped out — a strictly worse duplicate that also drops the semantics that matter (a byte tunnel has neither exit codes nor signals). Remote command execution composes via alktty on the same channels substrate. Updated: open-questions.md OQ-TN-14 (resolved), overview.md feature gate + deps + OQ summary, producer.md OQ ref, OQ-TN-10 promotion (#3 split), phase-0-findings + both POC summaries' resolution notes, params task (schema enum includes unix), local-socket-halves task (unix ships, stdio does NOT — with the composition rationale), oq-tn-14-tracker task repurposed (boundary-maintenance: re-opens only if a consumer needs stdio-without-process-semantics — which would need its own ADR, or if the alktty/alktunnels boundary needs sharpening). Verified: taskgraph valid (12 tasks, no cycles)	2026-09-07 19:44:03 +00:00
glm-5.3-flash	bd7d1ad8ec	docs: Phase 1 architecture spec — ADRs 001..006, spec docs, OQ promotion ... The Phase 0 OQ ledger (OQ-TN-01..10) promoted into docs/architecture/open-questions.md (now OQ-TN-01..14, with four new Phase 1 residues). Six ADRs and four spec docs, all Draft, all decision-shaped per the SDD process (ADRs carry the WHY; specs carry the WHAT and reference by number): ADRs: - 001 open-params-layout: params = {resource, substrate} — the producer's stable name, not an address; wire-stable from the first consumer; unknown substrates fail loudly at schema time - 002 alpn-strategy: single alk/tunnel ALPN (option A); substrate in params selects the framing; prior art (SSH/SOCKS5/udpgw) gives no reason for the split - 003 codec-and-udp-framing: raw pass-through (stream) / mandatory [len: u16 BE] (UDP) — F-2 mandate recorded (the codec is mandatory for correctness, not cosmetics); len=0 = legal empty datagram; OQ-TN-13 resolved fail-loud (truncation) - 004 no-backend-trait: halves functions at the assembly layer; listen is an establisher shape; hub re-produce deferred(OQ-TN-12); trait re-evaluated at the alknet ADR-078 convergence threshold - 005 consumer-session-owns-teardown: TunnelSession with open/adopt/stream_halves/take_halves/pump_against/close/join/Drop — the W3 adopter gap closes structurally; Drop is the best-effort fallback - 006 access-control-posture: the open gate is the boundary; TUNNEL_OPEN_SCOPE = tunnel:open (stable once published); op-level ACL; ownership seam; no allowlists in v1; identity = 0.7.0's precedence chain Spec docs: - overview.md: purpose, resource model, deps (alkcall 0.7.0, wasm-clean default, local feature), module map - wire.md: the open op (params/reply/typed errors), the data plane by substrate, sentinels + half-close, byte diagrams - producer.md: spec, establisher (dial + listen shapes), pump handler (pump_bidi inline, R-02), registration API, ACL posture - consumer.md: TunnelSession (forward open + reverse adopt construction), data plane, teardown API (close/join/Drop incl. pump-less join semantics) - bast.md: the BAST doc for the UDP codec (convention 12's trigger fired — the framing IS binary beyond pass-through) - open-questions.md: OQ-TN-01..14; 01..10 promoted (faithful to the phase-0 ledger's final states), 11 partially resolved (collision domain = per-producer registry per ADR-001; lifecycle open), 12 deferred(scope), 13 resolved fail-loud (ADR-003), 14 open Verified by an architecture-reviewer pass (2 criticals, 6 majors, 10 minors — all fixed: ADR-001/003-vs-OQ decision-state contradictions resolved; the Layer-2 mislabel corrected to the ADR-047 §4 per-session fork; alktty/alknet ADR misattributions fixed; codec placement pinned to the establisher (pump stays substrate-agnostic); reverse-path construction named (TunnelSession::adopt + pump_against); security posture promoted to ADR-006; BAST doc written; F-2 rationale deduped; README tables completed; channel_id > 0; MTU wording fixed; ADR-047 §5 attributions corrected; impacts lines added to unresolved OQs; review/ ledger pointer paths added to README references). Verification: doc set internal cross-refs all resolve; cargo test, fmt --check, doc --no-deps clean	2026-09-07 18:36:44 +00:00