Skip to content

spec: Windows native runtime#106

Open
passcod wants to merge 21 commits into
mainfrom
claude/pr-105-spec-tracey-config-70jsvh
Open

spec: Windows native runtime#106
passcod wants to merge 21 commits into
mainfrom
claude/pr-105-spec-tracey-config-70jsvh

Conversation

@passcod

@passcod passcod commented Jul 10, 2026

Copy link
Copy Markdown
Member

Supersedes #105, carrying its commits forward unchanged and hooking the new spec up to tracey.

  • docs/spec/runtime-windows.md: draft spec for a second Seedling runtime targeting Windows Server hosts with native-process primitives, using the w[...] rule namespace (from the 2026-07 design sessions).
  • docs/plans/windows-runtime.md: companion plan — workstreams, open questions, spikes, rollout.
  • docs/plans/windows-runtime-rationale.md: non-normative design rationale — rejected alternatives, fallback positions, governance ledger.
  • Registered the runtime-windows spec in .config/tracey/config.styx (same impl globs as the other runtime specs) and dropped the now-done "add a spec entry when this lands" notes from the docs.
  • Fixed both docs' references to the rationale document, which landed as windows-runtime-rationale.md rather than windows-design-rationale.md.

🤖 Generated with Claude Code

https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs

Generated by Claude Code

@passcod passcod mentioned this pull request Jul 10, 2026
Closed
@github-code-quality

github-code-quality Bot commented Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Code Coverage Overview

Languages: TypeScript, Rust

TypeScript / code-coverage/vitest

The overall coverage in the branch remains at 65%, unchanged from the branch.

Show a code coverage summary of the most impacted files.
File e14aa26 c2e39b2 +/-
src/routes/Apps.tsx 74% 78% +4%

Rust / code-coverage/rust

The overall coverage remains at 55%, unchanged from the branch.

Updated July 11, 2026 13:18 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.

claude added 16 commits July 10, 2026 12:53
@claude
spec(runtime-windows): rename rule prefix from w to win
7e40db1 
The web spec already owns the w prefix; win avoids future rule-name
collisions between the two specs.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
spec(runtime-windows): fix review findings
69e754d 
- cite l[job.type] instead of the nonexistent l[job]
- stop claiming Executed.exit_code() holds verbatim; note the pending
  l[rt.executed.exit-code] restatement instead
- rename runtime.capability() to rt.capability() to match BSL naming
- select artifacts by config media type alone, dropping the
  tamanu-namespaced annotation (only Windows on x64 is supported)
- point backup.v1's open question at plan Q3 instead of a nonexistent
  plan section
- drop implementation details (extended TCP table, CreateProcessAsUser)
  from rule text

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
docs(plans): fix review findings in the Windows runtime plans
74fff9c 
- renumber open questions to start at Q1 and update references
- schedule the l[rt.executed.exit-code] restatement alongside
  i[shell.exit], noting it is a semantic change on Linux
- rename runtime.capability() to rt.capability()
- clarify spec restructuring is a prerequisite for merging the
  implementation
- mark windows-backend-research.md as superseded by the new design docs
- fix list formatting in the plan and rationale

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
spec(runtime-windows): define the process profile concept
94c43da 
Profiles are properties of the software, not the deployment: declared
in the artifact config blob (following Docker's StopSignal precedent),
overridable per-deployment from BSL, with built-in profiles for adopted
native services that have no artifact. Link the three rules that used
the term undefined, and add the BSL override surface to the plan's
spec-restructuring workstream.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
spec(runtime-windows): special services, stop-then-start replacement,…
0f0b35c 
… profile-based reload

- ingress (Caddy) and the resolver (CoreDNS) become special services:
  runtime-installed native SCM services with built-in profiles, bound
  directly rather than through the workload relay model, exempt from
  the identity GC sweep, replacing the Linux proxy and resolver
  infrastructure container rules
- v1 drops blue/green: deploys and health-driven replacement are
  stop-then-start of the single instance, with the supervisor-held
  listener bounding disruption; recorded in non-goals and rationale
- reload is a process-profile property, not a node capability:
  SIGHUP maps to the profile's declared reload event, and
  signal:reload leaves the capability vocabulary
- enumerate WFP allows for ingress route targets and resolver access

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
spec(runtime-windows): special services, supervisor-mediated replacem…
ff755e5 
…ent, profile-based reload

- ingress (Caddy) and the resolver (CoreDNS) become special services:
  runtime-installed native SCM services with built-in profiles, holding
  their own binds, exempt from the identity GC sweep, replacing the
  Linux proxy and resolver infrastructure container rules
- special services hold their own binds so no Seedling process sits in
  their data path; the recorded trade is stop-then-start binary
  upgrades, with config changes applying via graceful reload
- workload deploys keep zero-downtime replacement, mediated by the
  supervisor relay: new generation alongside old, relay target switch,
  service-address bind never dropped
- reload is a process-profile property, not a node capability: SIGHUP
  maps to the profile's declared reload event, and signal:reload
  leaves the capability vocabulary
- enumerate WFP allows for ingress route targets and resolver access

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
spec(runtime-windows): bind-layer deny, pipe authentication, exec con…
df6769c 
…text parity

- extend the WFP default-deny to the bind/listen layers so Seedling
  prefix addresses cannot be squatted, and enumerate the bind allows
  per principal (supervisor, workload, special service)
- authenticate the daemon-supervisor pipe: creation ACL on the
  supervisor's SID, and the daemon verifies the pipe server against
  the supervisor record's PID and start time before trusting it
- rt.exec commands run under the workload's stripped token with the
  full rendered instance environment, matching Linux exec-inherits-
  container semantics

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
spec(runtime-windows): settle seedlingd principal, packaging, and sig…
d03b122 
…nal-ladder questions

seedlingd runs under its own virtual service account with its SID on
the standard volume ACLs, which also resolves the backup engine's
volume access; it ships as a single self-contained binary with no
installer or package-manager distribution; and the ladder-only
rt.signal mapping moves from open question to settled.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
docs: write the Windows runtime threat model
e250076 
Companion to threat-model.md covering what changes when workloads are
native processes: the discretionary identity-based containment model,
the defended boundaries (mount-graph WFP, address squatting, file
ACLs, privilege creep, pipe impersonation, attach verification,
identity residue), the accepted exposures (administrators, ambient
read surface, Defender exclusions, shared workload/supervisor SID),
and the governance ledger for deployment security reviews.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
docs(plans): expand each Windows spike into its own plan file
d4c9a37 
One file per spike (A-E) with the spec rules and open questions at
stake, concrete experiments, exit criteria, and retreat positions; the
main plan's spike section now links them instead of duplicating.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
docs(plans): drop time estimates from the spike plans
5cc7a00 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
feat(spikes): draft Windows spike harnesses + Windows CI job
3b7a810 
One binary per spike (A-E) in a new Windows-only crate:
- spike-a-stop: Job Object + CTRL_BREAK delivery, exit-code synthesis,
  sc.exe dispatch-latency loop
- spike-b-conpty: pseudoconsole spawn, output pump, resize; QUIC bridge
  and empty-stderr contract stubbed as the follow-up
- spike-c-net: loopback aliases/skipassource, NRPT, extended-TCP-table
  bind probe; WFP install left as a named FWPM follow-up
- spike-d-vhdx: read-only attach with before/after digest to prove the
  image is untouched
- spike-e-identity: restricted-token spawn with privilege-count check,
  sc.exe virtual-account and ghost checks, icacls inheritance break

Each binary is cfg-gated to a stub main off Windows so the workspace
stays green on Linux; heavy control-plane steps shell out to
sc.exe/netsh/PowerShell/icacls, and sequences too large to draft
without a Windows target are marked as explicit follow-ups. Added a
Windows CI job scoped to the crate (fmt/clippy/test) since the
daemon crates are Linux-only.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
fix(spikes): windows 0.62 API signatures
f4c2d84 
Fixes surfaced by the Windows CI job: BOOL lives in windows::core, not
Foundation; SetConsoleCtrlHandler/GetExtendedTcpTable take plain bool;
CreateProcessW/CreateProcessAsUserW lpcommandline is Option<PWSTR>;
GetVirtualDiskPhysicalPath takes PWSTR.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
fix(spikes): more windows 0.62 signature fixes
2aa5d88 
- InitializeProcThreadAttributeList takes Option-wrapped list and flags
- CreateProcessW/CreateProcessAsUserW binherithandles is plain bool
- pass the ConPTY output handle across the pump thread as isize (HANDLE
  is not Send)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
fix(spikes): drop unnecessary mut and release spike-b process handles
ad5eb41 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
@claude
fix(spikes): drop unnecessary mut on const-pointer args
c2e39b2 
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017nJ3scWucs71FH2T7y5oBs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@passcod @claude