feat(fs5.5): add app suite release channel proofs

Author: adybag14-cyber

README.md

@@ -99,10 +99,10 @@ ZAR-Zig-Agent-Runtime is the Zig runtime port of OpenClaw, with parity-first del
 - hosted and host validation now prove persistence over both RAM-disk and ATA PIO backends, including the partition-mounted ATA view
   - the filesystem entry budget is now `80`, which is the current bounded baseline that keeps the deeper FS5.5 package/trust/app/autorun/workspace runtime state fitting on the persisted filesystem surface without live-service `NoSpace` failures
   - bare-metal tool execution is now also on a real freestanding path:
-    - `src/baremetal/tool_exec.zig` provides the builtin command substrate instead of falling back to hosted process execution, including canonical `run-package` support plus `package-verify`, `package-release-list`, `package-release-info`, `package-release-save`, `package-release-activate`, `package-release-delete`, `package-release-prune`, `package-release-channel-list`, `package-release-channel-info`, `package-release-channel-set`, `package-release-channel-activate`, `package-app`, `package-display`, `package-ls`, `package-cat`, `package-delete`, `app-delete`, `app-autorun-list`, `app-autorun-add`, `app-autorun-remove`, `app-autorun-run`, `app-suite-list`, `app-suite-info`, `app-suite-save`, `app-suite-apply`, `app-suite-run`, `app-suite-delete`, `app-suite-release-list`, `app-suite-release-info`, `app-suite-release-save`, `app-suite-release-activate`, `app-suite-release-delete`, `app-suite-release-prune`, `display-info`, `display-modes`, and `display-set`
+    - `src/baremetal/tool_exec.zig` provides the builtin command substrate instead of falling back to hosted process execution, including canonical `run-package` support plus `package-verify`, `package-release-list`, `package-release-info`, `package-release-save`, `package-release-activate`, `package-release-delete`, `package-release-prune`, `package-release-channel-list`, `package-release-channel-info`, `package-release-channel-set`, `package-release-channel-activate`, `package-app`, `package-display`, `package-ls`, `package-cat`, `package-delete`, `app-delete`, `app-autorun-list`, `app-autorun-add`, `app-autorun-remove`, `app-autorun-run`, `app-suite-list`, `app-suite-info`, `app-suite-save`, `app-suite-apply`, `app-suite-run`, `app-suite-delete`, `app-suite-release-list`, `app-suite-release-info`, `app-suite-release-save`, `app-suite-release-activate`, `app-suite-release-delete`, `app-suite-release-prune`, `app-suite-release-channel-list`, `app-suite-release-channel-info`, `app-suite-release-channel-set`, `app-suite-release-channel-activate`, `display-info`, `display-modes`, and `display-set`
     - `src/pal/proc.zig` exposes the explicit freestanding capture path used by the bare-metal PAL
     - `src/baremetal/package_store.zig` provides the canonical persisted package layout under `/packages/<name>/...`, including `/packages/<name>/assets/...`, persisted release snapshots under `/packages/<name>/releases/<release>/...`, manifest `script_checksum`, `app_manifest_checksum`, and `asset_tree_checksum` fields, `/packages/<name>/meta/app.txt` launch/display metadata, and recursive package-tree deletion for uninstall
-    - `src/baremetal/tool_service.zig` provides the bounded typed request/response shim used by the bare-metal TCP proof, including structured `EXEC` responses, typed `PKGVERIFY`, typed `PKGRELEASELIST` / `PKGRELEASEINFO` / `PKGRELEASESAVE` / `PKGRELEASEACTIVATE` / `PKGRELEASEDELETE` / `PKGRELEASEPRUNE`, typed `PKGCHANNELLIST` / `PKGCHANNELINFO` / `PKGCHANNELSET` / `PKGCHANNELACTIVATE`, typed `APPAUTORUNLIST` / `APPAUTORUNADD` / `APPAUTORUNREMOVE` / `APPAUTORUNRUN`, and typed app lifecycle and uninstall verbs on top of the freestanding tool-exec substrate
+    - `src/baremetal/tool_service.zig` provides the bounded typed request/response shim used by the bare-metal TCP proof, including structured `EXEC` responses, typed `PKGVERIFY`, typed `PKGRELEASELIST` / `PKGRELEASEINFO` / `PKGRELEASESAVE` / `PKGRELEASEACTIVATE` / `PKGRELEASEDELETE` / `PKGRELEASEPRUNE`, typed `PKGCHANNELLIST` / `PKGCHANNELINFO` / `PKGCHANNELSET` / `PKGCHANNELACTIVATE`, typed `APPAUTORUNLIST` / `APPAUTORUNADD` / `APPAUTORUNREMOVE` / `APPAUTORUNRUN`, typed `APPSUITERELEASELIST` / `APPSUITERELEASEINFO` / `APPSUITERELEASESAVE` / `APPSUITERELEASEACTIVATE` / `APPSUITERELEASEDELETE` / `APPSUITERELEASEPRUNE`, typed `APPSUITECHANNELLIST` / `APPSUITECHANNELINFO` / `APPSUITECHANNELSET` / `APPSUITECHANNELACTIVATE`, and typed app lifecycle and uninstall verbs on top of the freestanding tool-exec substrate
     - `src/baremetal/runtime_bridge.zig` now provides the shared bare-metal runtime seam, `src/baremetal/tool_exec.zig` now exposes `runtime-snapshot`, `runtime-sessions`, and `runtime-session`, `src/baremetal/tool_service.zig` now exposes `RUNTIMECALL`, `RUNTIMESNAPSHOT`, `RUNTIMESESSIONS`, and `RUNTIMESESSION`, `src/runtime/tool_runtime.zig` now keeps `runtime.session.get` lifetime-safe, and `src/pal/fs.zig` now routes logical `/runtime/...` paths through the bare-metal filesystem during hosted FS5.5 validation so runtime state lands on the same persisted RAM-disk/ATA-backed surface
     - `scripts/baremetal-qemu-tool-exec-probe-check.ps1` proves `help`, `mkdir`, `write-file`, `cat`, `stat`, `run-script`, direct readback, persisted script readback after filesystem reset/re-init, and `echo` over the freestanding PVH artifact with attached disk media, while the live RTL8139 TCP proof now covers persisted `app-run` state receipts, persisted app-history receipts, and persisted app stdout/stderr receipts
     - hosted/module validation also proves ATA-backed package persistence plus `run-package`, `package-verify`, `package-release-list`, `package-release-info`, `package-release-save`, `package-release-activate`, `package-release-delete`, `package-release-prune`, `package-release-channel-list`, `package-release-channel-info`, `package-release-channel-set`, `package-release-channel-activate`, `PKG`, `PKGLIST`, `PKGINFO`, `PKGRUN`, `PKGAPP`, `PKGDISPLAY`, `PKGPUT`, `PKGLS`, `PKGGET`, `PKGVERIFY`, `PKGRELEASELIST`, `PKGRELEASEINFO`, `PKGRELEASESAVE`, `PKGRELEASEACTIVATE`, `PKGRELEASEDELETE`, `PKGRELEASEPRUNE`, `PKGCHANNELLIST`, `PKGCHANNELINFO`, `PKGCHANNELSET`, `PKGCHANNELACTIVATE`, `PKGDELETE`, `APPLIST`, `APPINFO`, `APPSTATE`, `APPHISTORY`, `APPSTDOUT`, `APPSTDERR`, `APPTRUST`, `APPCONNECTOR`, `APPRUN`, `APPDELETE`, `APPAUTORUNLIST`, `APPAUTORUNADD`, `APPAUTORUNREMOVE`, `APPAUTORUNRUN`, `RUNTIMECALL`, `RUNTIMESNAPSHOT`, `RUNTIMESESSIONS`, `RUNTIMESESSION`, `DISPLAYINFO`, `DISPLAYMODES`, `DISPLAYSET`, package manifests, app manifests, manifest checksum fields, persisted package display profiles, package assets, direct-child directory listing, deterministic tamper detection on package script checksum mismatch, recursive uninstall cleanup, persisted app runtime-state receipts, persisted app stdout/stderr receipts, persisted runtime snapshot/session receipts, package release info/delete/prune with deterministic sequence metadata and retained newest-release activation, persisted release-channel mapping through `/packages/<name>/channels/<channel>.txt`, and live display-mode application during `run-package`
@@ -111,6 +111,7 @@ ZAR-Zig-Agent-Runtime is the Zig runtime port of OpenClaw, with parity-first del
     - the current FS5.5 app-plan slice now adds persisted `/runtime/apps/<name>/plans/<plan>.txt` plus `/runtime/apps/<name>/active_plan.txt` through `src/baremetal/app_runtime.zig`, new `tool_exec` builtins (`app-plan-list`, `app-plan-info`, `app-plan-active`, `app-plan-save`, `app-plan-apply`, `app-plan-delete`), new typed TCP verbs (`APPPLANLIST`, `APPPLANINFO`, `APPPLANACTIVE`, `APPPLANSAVE`, `APPPLANAPPLY`, `APPPLANDELETE`), ATA/RAM-backed app-plan tests, and live RTL8139 TCP proof for save/list/info/apply/delete plus restored release/trust/display/autorun state readback
     - the current FS5.5 app-suite slice now adds persisted `/runtime/app-suites/<suite>.txt` through `src/baremetal/app_runtime.zig`, new `tool_exec` builtins (`app-suite-list`, `app-suite-info`, `app-suite-save`, `app-suite-apply`, `app-suite-run`, `app-suite-delete`), new typed TCP verbs (`APPSUITELIST`, `APPSUITEINFO`, `APPSUITESAVE`, `APPSUITEAPPLY`, `APPSUITERUN`, `APPSUITEDELETE`), ATA/RAM-backed app-suite tests, and live RTL8139 TCP proof for save/list/info/apply/run/delete plus restored active-plan, autorun, and stdout readback across multiple apps
     - the current FS5.5 app-suite-release slice now adds persisted `/runtime/app-suite-releases/<suite>/<release>/suite.txt` plus `release.txt` through `src/baremetal/app_runtime.zig`, new `tool_exec` builtins (`app-suite-release-list`, `app-suite-release-info`, `app-suite-release-save`, `app-suite-release-activate`, `app-suite-release-delete`, `app-suite-release-prune`), new typed TCP verbs (`APPSUITERELEASELIST`, `APPSUITERELEASEINFO`, `APPSUITERELEASESAVE`, `APPSUITERELEASEACTIVATE`, `APPSUITERELEASEDELETE`, `APPSUITERELEASEPRUNE`), ATA/RAM-backed app-suite-release tests with deterministic `saved_seq` / `saved_tick` metadata, and live RTL8139 TCP proof for save -> mutate -> list -> info -> activate -> delete -> prune plus restored suite readback
+    - the current FS5.5 app-suite-release-channel slice now adds persisted `/runtime/app-suite-release-channels/<suite>/<channel>.txt` mappings through `src/baremetal/app_runtime.zig`, new `tool_exec` builtins (`app-suite-release-channel-list`, `app-suite-release-channel-info`, `app-suite-release-channel-set`, `app-suite-release-channel-activate`), new typed TCP verbs (`APPSUITECHANNELLIST`, `APPSUITECHANNELINFO`, `APPSUITECHANNELSET`, `APPSUITECHANNELACTIVATE`), ATA/RAM-backed app-suite-release-channel persistence tests, and live RTL8139 TCP proof for set -> persisted channel-target readback -> list -> info -> activate plus restored suite readback through the selected suite release channel
     - the current FS5.5 workspace slice now adds persisted `/runtime/workspaces/<name>.txt` orchestration state plus `/runtime/workspace-runs/<name>/last_run.txt`, `history.log`, `stdout.log`, `stderr.log`, `/runtime/workspace-runs/autorun.txt`, and versioned release snapshots under `/runtime/workspace-releases/<name>/<release>/workspace.txt` plus `release.txt` through `src/baremetal/workspace_runtime.zig`, new `tool_exec` builtins (`workspace-list`, `workspace-info`, `workspace-save`, `workspace-apply`, `workspace-run`, `workspace-state`, `workspace-history`, `workspace-stdout`, `workspace-stderr`, `workspace-delete`, `workspace-release-list`, `workspace-release-info`, `workspace-release-save`, `workspace-release-activate`, `workspace-release-delete`, `workspace-release-prune`, `workspace-autorun-list`, `workspace-autorun-add`, `workspace-autorun-remove`, `workspace-autorun-run`), new typed TCP verbs (`WORKSPACELIST`, `WORKSPACEINFO`, `WORKSPACESAVE`, `WORKSPACEAPPLY`, `WORKSPACERUN`, `WORKSPACESTATE`, `WORKSPACEHISTORY`, `WORKSPACESTDOUT`, `WORKSPACESTDERR`, `WORKSPACEDELETE`, `WORKSPACERELEASELIST`, `WORKSPACERELEASEINFO`, `WORKSPACERELEASESAVE`, `WORKSPACERELEASEACTIVATE`, `WORKSPACERELEASEDELETE`, `WORKSPACERELEASEPRUNE`, `WORKSPACEAUTORUNLIST`, `WORKSPACEAUTORUNADD`, `WORKSPACEAUTORUNREMOVE`, `WORKSPACEAUTORUNRUN`), RAM-disk and ATA-backed workspace/release/autorun tests, and live RTL8139 TCP proof for save/list/info/apply/run/state/history/stdout/stderr/delete, workspace release save/mutate/list/info/activate/delete/prune with persisted release readback and restored workspace info, workspace autorun add/list/run/remove, persisted `/runtime/workspace-runs/autorun.txt` readback, persisted workspace-run receipt readback, restored canonical package script content, trust-bundle selection, display mode, app-suite active-plan markers, and delete cleanup on the workspace surface
     - the current FS5.5 workspace-release-channel slice now adds persisted `/runtime/workspace-release-channels/<name>/<channel>.txt` mappings through `src/baremetal/workspace_runtime.zig`, new `tool_exec` builtins (`workspace-release-channel-list`, `workspace-release-channel-info`, `workspace-release-channel-set`, `workspace-release-channel-activate`), new typed TCP verbs (`WORKSPACECHANNELLIST`, `WORKSPACECHANNELINFO`, `WORKSPACECHANNELSET`, `WORKSPACECHANNELACTIVATE`), RAM-disk and ATA-backed workspace-channel persistence tests, and live RTL8139 TCP proof for set -> info -> list -> activate plus persisted channel-target readback and restored workspace info through the selected workspace release channel
     - `src/baremetal/filesystem.zig` now carries a `96`-entry filesystem budget so the deeper FS5.5 package/trust/app/workspace release surface fits on the persisted path without live-service `NoSpace` failures

docs/zig-port/FS5_5_HARDWARE_DRIVERS_SYSTEMS.md

@@ -463,6 +463,7 @@ Current local source-of-truth evidence:
   - the current FS5.5 app-plan slice now adds persisted `/runtime/apps/<name>/plans/<plan>.txt` plus `/runtime/apps/<name>/active_plan.txt`, new `tool_exec` builtins (`app-plan-list`, `app-plan-info`, `app-plan-active`, `app-plan-save`, `app-plan-apply`, `app-plan-delete`), new typed TCP verbs (`APPPLANLIST`, `APPPLANINFO`, `APPPLANACTIVE`, `APPPLANSAVE`, `APPPLANAPPLY`, `APPPLANDELETE`), ATA/RAM-backed app-plan tests, and a live RTL8139 TCP proof for save/list/info/apply/delete plus restored release/trust/display/autorun state readback
   - the current FS5.5 app-suite slice now adds persisted `/runtime/app-suites/<suite>.txt`, new `tool_exec` builtins (`app-suite-list`, `app-suite-info`, `app-suite-save`, `app-suite-apply`, `app-suite-run`, `app-suite-delete`), new typed TCP verbs (`APPSUITELIST`, `APPSUITEINFO`, `APPSUITESAVE`, `APPSUITEAPPLY`, `APPSUITERUN`, `APPSUITEDELETE`), ATA/RAM-backed app-suite tests, and a live RTL8139 TCP proof for save/list/info/apply/run/delete plus restored active-plan, autorun, and stdout readback across multiple apps
   - the current FS5.5 app-suite-release slice now adds persisted `/runtime/app-suite-releases/<suite>/<release>/suite.txt` plus `release.txt`, new `tool_exec` builtins (`app-suite-release-list`, `app-suite-release-info`, `app-suite-release-save`, `app-suite-release-activate`, `app-suite-release-delete`, `app-suite-release-prune`), new typed TCP verbs (`APPSUITERELEASELIST`, `APPSUITERELEASEINFO`, `APPSUITERELEASESAVE`, `APPSUITERELEASEACTIVATE`, `APPSUITERELEASEDELETE`, `APPSUITERELEASEPRUNE`), ATA/RAM-backed app-suite-release tests with deterministic `saved_seq` / `saved_tick` metadata, and a live RTL8139 TCP proof for save -> mutate -> list -> info -> activate -> delete -> prune plus restored suite readback
+  - the current FS5.5 app-suite-release-channel slice now adds persisted `/runtime/app-suite-release-channels/<suite>/<channel>.txt` mappings, `app-suite-release-channel-list` / `app-suite-release-channel-info` / `app-suite-release-channel-set` / `app-suite-release-channel-activate`, typed `APPSUITECHANNELLIST` / `APPSUITECHANNELINFO` / `APPSUITECHANNELSET` / `APPSUITECHANNELACTIVATE`, ATA/RAM-backed app-suite-release-channel persistence tests, and live RTL8139 TCP proof for set -> persisted channel-target readback -> list -> info -> activate plus restored suite readback through the selected suite release channel
   - the current FS5.5 workspace slice now adds persisted `/runtime/workspaces/<name>.txt` plus `/runtime/workspace-runs/<name>/last_run.txt`, `history.log`, `stdout.log`, `stderr.log`, `/runtime/workspace-runs/autorun.txt`, and versioned release snapshots under `/runtime/workspace-releases/<name>/<release>/workspace.txt` plus `release.txt`, new `tool_exec` builtins (`workspace-list`, `workspace-info`, `workspace-save`, `workspace-apply`, `workspace-run`, `workspace-state`, `workspace-history`, `workspace-stdout`, `workspace-stderr`, `workspace-delete`, `workspace-release-list`, `workspace-release-info`, `workspace-release-save`, `workspace-release-activate`, `workspace-release-delete`, `workspace-release-prune`, `workspace-autorun-list`, `workspace-autorun-add`, `workspace-autorun-remove`, `workspace-autorun-run`), new typed TCP verbs (`WORKSPACELIST`, `WORKSPACEINFO`, `WORKSPACESAVE`, `WORKSPACEAPPLY`, `WORKSPACERUN`, `WORKSPACESTATE`, `WORKSPACEHISTORY`, `WORKSPACESTDOUT`, `WORKSPACESTDERR`, `WORKSPACEDELETE`, `WORKSPACERELEASELIST`, `WORKSPACERELEASEINFO`, `WORKSPACERELEASESAVE`, `WORKSPACERELEASEACTIVATE`, `WORKSPACERELEASEDELETE`, `WORKSPACERELEASEPRUNE`, `WORKSPACEAUTORUNLIST`, `WORKSPACEAUTORUNADD`, `WORKSPACEAUTORUNREMOVE`, `WORKSPACEAUTORUNRUN`), RAM-disk and ATA-backed workspace/release/autorun tests, and a live RTL8139 TCP proof for save/list/info/apply/run/state/history/stdout/stderr/delete, workspace release save/mutate/list/info/activate/delete/prune with persisted release readback and restored workspace info, workspace autorun add/list/run/remove, persisted `/runtime/workspace-runs/autorun.txt` readback, persisted workspace-run receipt readback, restored canonical package script content, trust-bundle selection, display mode, app-suite active-plan markers, and delete cleanup
   - the current FS5.5 workspace-release-channel slice now adds persisted `/runtime/workspace-release-channels/<name>/<channel>.txt` mappings, `workspace-release-channel-list` / `workspace-release-channel-info` / `workspace-release-channel-set` / `workspace-release-channel-activate`, typed `WORKSPACECHANNELLIST` / `WORKSPACECHANNELINFO` / `WORKSPACECHANNELSET` / `WORKSPACECHANNELACTIVATE`, RAM-disk and ATA-backed workspace-channel persistence tests, and live RTL8139 TCP proof for set -> info -> list -> activate plus persisted channel-target readback and restored workspace info through the selected workspace release channel
   - `src/baremetal/filesystem.zig` now carries a `96`-entry filesystem budget so the deeper FS5.5 package/trust/app/workspace release surface fits on the persisted path without live-service `NoSpace` failures