feat(pncc): add resident persona repository runtime

product-source/hololake-platform/guanghu-os/scripts/guanghu-master-init.sh

@@ -8,12 +8,15 @@ readonly NODE_ID=JD-FD-PRIMARY
 readonly INSTANCE_ID=f3d4b730-7f02-452f-975b-7091a4800431
 readonly ROOT_UUID=9e4550a0-452b-4f28-b5a5-d5364aa450f6
 readonly LINUX_RESCUE_ENTRY=gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6
-readonly RELEASE_ID=guanghu-master-20260816.1
+readonly RELEASE_ID=guanghu-master-20260816.2
 readonly STATE_ROOT=/run/guanghu/master
 readonly RECEIPT_ROOT=/guanghu/recovery/JD-FD-PRIMARY-master-20260816
 readonly HLCC=/opt/guanghu/architecture-releases/3d11ac75bea8cf08b5f223fed86ab3cd999ad2fd/server-tools/hololake-code-channel/jd-candidate/hlcc-bootstrap.py
 readonly APP_HUB=/opt/guanghu/architecture-releases/333cd222c53d7d162218543cd167bdda4f8efb22/server-tools/jd-app-hub/server.js
 readonly AI_DISCOVERY=/opt/guanghu/ai-discovery/server.js
+readonly PNCC_RUNTIME=/usr/local/libexec/guanghu/pncc-runtime.mjs
+readonly PNCC_REPOSITORY=/var/lib/guanghu/personas/ICE-P-ZY001/pncc/repository
+readonly PNCC_STATE_ROOT=/run/guanghu/pncc
 
 declare -a CHILDREN=()
 RECOVERY_ARMED=0
@@ -25,7 +28,7 @@ log() {
 json_state() {
   local stage=$1 result=$2
   local tmp=${STATE_ROOT}/state.json.tmp.$$
-  printf '%s\n' "{\"schema\":\"guanghu.master-runtime/v1\",\"node_id\":\"${NODE_ID}\",\"instance_id\":\"${INSTANCE_ID}\",\"release_id\":\"${RELEASE_ID}\",\"boot_id\":\"$(cat /proc/sys/kernel/random/boot_id)\",\"control\":\"GUANGHU_OS_MASTER\",\"pid1\":\"GUANGHU_SUPERVISOR\",\"linux_kernel_role\":\"HARDWARE_COMPATIBILITY_SUBSTRATE\",\"full_linux_userspace\":\"DORMANT\",\"linux_repository_bridge\":\"BOUNDED_SUBCONTROL\",\"linux_rescue\":\"${LINUX_RESCUE_ENTRY}\",\"stage\":\"${stage}\",\"result\":\"${result}\"}" >"${tmp}"
+  printf '%s\n' "{\"schema\":\"guanghu.master-runtime/v1\",\"node_id\":\"${NODE_ID}\",\"instance_id\":\"${INSTANCE_ID}\",\"release_id\":\"${RELEASE_ID}\",\"boot_id\":\"$(cat /proc/sys/kernel/random/boot_id)\",\"control\":\"GUANGHU_OS_MASTER\",\"pid1\":\"GUANGHU_SUPERVISOR\",\"linux_kernel_role\":\"HARDWARE_COMPATIBILITY_SUBSTRATE\",\"full_linux_userspace\":\"DORMANT\",\"linux_repository_bridge\":\"BOUNDED_SUBCONTROL\",\"pncc\":\"RESIDENT_BOUND_CARRIER_SEPARATE\",\"persona_carrier_binding\":\"UNBOUND_EVIDENCE_REQUIRED\",\"linux_rescue\":\"${LINUX_RESCUE_ENTRY}\",\"stage\":\"${stage}\",\"result\":\"${result}\"}" >"${tmp}"
   chmod 0600 "${tmp}"
   mv "${tmp}" "${STATE_ROOT}/state.json"
 }
@@ -119,6 +122,8 @@ start_bridge() {
   require_file "$HLCC"
   require_file "$APP_HUB"
   require_file "$AI_DISCOVERY"
+  require_file "$PNCC_RUNTIME"
+  require_file "$PNCC_REPOSITORY/.hololake/persona/manifest.json"
 
   start_root sshd /usr/sbin/sshd -D -e \
     -o UsePAM=no -o PasswordAuthentication=no -o KbdInteractiveAuthentication=no \
@@ -152,6 +157,11 @@ start_bridge() {
     GUANGHU_REPOSITORY_GIT_DIR=/var/lib/guanghu/personas/guanghu/hlcc-v16.0.1/data/repositories/bingshuo/guanghu-ice-heart.git \
     /usr/bin/node "$AI_DISCOVERY"
   wait_http navigation-bridge http://127.0.0.1:3922/v1/anchor 200 30
+
+  start_guanghu pncc-runtime /usr/bin/node "$PNCC_RUNTIME" serve \
+    --repository "$PNCC_REPOSITORY" --state-root "$PNCC_STATE_ROOT" \
+    --node-id "$NODE_ID" --host 127.0.0.1 --port 3923
+  wait_http pncc-runtime http://127.0.0.1:3923/health 200 30
 }
 
 runtime_watch() {
@@ -159,7 +169,7 @@ runtime_watch() {
   json_state READY PASS_100
   cp "$STATE_ROOT/state.json" "$RECEIPT_ROOT/CURRENT-PHYSICAL-STATE.json"
   sha256sum "$RECEIPT_ROOT/CURRENT-PHYSICAL-STATE.json" >"$RECEIPT_ROOT/CURRENT-PHYSICAL-STATE.json.sha256"
-  log 'GUANGHU_OS_MASTER_READY linux_userspace=DORMANT repository_bridge=READY linux_rescue=PRESERVED'
+  log 'GUANGHU_OS_MASTER_READY linux_userspace=DORMANT repository_bridge=READY pncc=RESIDENT_BOUND_CARRIER_SEPARATE linux_rescue=PRESERVED'
   sync
   while :; do
     sleep 10
@@ -171,6 +181,7 @@ runtime_watch() {
     listen_ready 3340 || fatal "runtime_repository_lost"
     listen_ready 8088 || fatal "runtime_projection_lost"
     listen_ready 3922 || fatal "runtime_navigation_lost"
+    listen_ready 3923 || fatal "runtime_pncc_lost"
   done
 }
 
@@ -189,7 +200,8 @@ preflight() {
   [[ $(findmnt -n -o SOURCE /) == /dev/vda1 ]]
   grep -Fq "$LINUX_RESCUE_ENTRY" /boot/grub/grub.cfg
   getent passwd guanghu | grep -q '^guanghu:x:998:998:'
-  for path in "$HLCC" "$APP_HUB" "$AI_DISCOVERY" /usr/sbin/sshd \
+  for path in "$HLCC" "$APP_HUB" "$AI_DISCOVERY" "$PNCC_RUNTIME" \
+    "$PNCC_REPOSITORY/.hololake/persona/manifest.json" /usr/sbin/sshd \
     /usr/bin/node /usr/bin/python3 /usr/bin/setpriv /usr/bin/grub-editenv; do
     [[ -e $path && ! -L $path || $path == /usr/bin/python3 ]]
   done