SexOS · Ecosystem

Applications & Ecosystem

The SexOS application ecosystem — from the native Kaleidoscope browser to the Qupid media engine, COSMIC ports, and font strategy.

Kaleidoscope — Native Browser

Architectural Manifesto v0.3

Target: SexOS microkernel (x86_64 SASOS, Intel PKU, 100% Zero-Copy PDX fabric)

Core Directives: Pure Rust · Servo-based · PKU-Sandboxed · No Electron · No Glutin/Winit · Direct sexdisplay/tranny/sexnet/sexaudio/sexinput integration

Phase 1: The Servo Substrate & Bare-Metal Grafting

Compile Servo core against x86_64-sex.json using the in-tree relibc fork.
Map all Servo threading/memory requests to sex_rt::LockedHeap and local pthread shims.
Completely excise Winit/Glutin. Replace with a pure PDX client talking directly to sexdisplay.

Phase 2: Hardware-Enforced Tab Sandboxing (Intel PKU)

Each logical origin (tab/iframe) = dedicated Protection Key (PKEY).
Context switch = single wrpkru instruction in user space (zero TLB flush, zero kernel transition).
16-key hardware limit → Origin-Based PKEY Pool.

Phase 3: Zero-Copy WebRender + Input Routing

WebRender builds display list directly into GPU DMA buffers acquired via tranny.
Finalized frame pointer passed via PDX atomic ring to sexdisplay (SexCompositor) for immediate scanout.
Zero compositing tax: GPU pixels = screen pixels.
Input routing: Keystrokes + mouse events from sexinput bypass compositor entirely.

Phase 4: Media & Audio Pipeline (4K/60 HDR)

Custom Servo <video> backend → tranny VA-API/VDPAU hardware decode.
Audio: sexaudio PDX rings for PCM frames, hardware-mixed per PKEY domain.

Qupid — SASOS Native Media Engine (VLC Clone)

Architectural Manifesto v1.4

Core Directives: FFmpeg primary (relibc graft) + symphonia optional fallback · PKU sandboxed decode · tranny hardware accel · sexdisplay/sexaudio/sexfiles direct · Pure Rust surface · 100% VLC codec parity

Hybrid Codec Engine

Primary: FFmpeg (libavcodec/libavformat) grafted via relibc for 100% VLC codec coverage + tranny hardware decode (VAAPI/VDPAU/NVDEC).
Fallback: symphonia + av1-rs for pure-Rust paths on simple containers.

PKU-Enforced Decoder Sandbox

Every decode thread spins inside its own Intel PKEY domain.
Media file mapped read-only from sexfiles. Out-of-bounds = immediate #PF.
sexgemini restarts only the isolated domain.

Zero-Copy Video Pipeline

Decoded frames (or dmabuf refs) handed via PDX atomic ring to sexdisplay.
Silk Shell / compositor takes PFN and scans out directly. Zero copies, zero CPU overhead on 4K/60/HDR.

Foundations (ranked for SexOS)

rust-media (pcwalton/rust-media) — Closest to "libvlc for Rust". Designed for Servo embedding.
rust-av + oxideav — Pure-Rust multimedia toolkit (demuxers, muxers, primitives). Active 2026 crates.
Symphonia — Pure-Rust audio decoders + container support.

COSMIC Ports

Status: 100% Complete ✅

Full COSMIC application suite implemented for SexOS Silk DE with zero-copy PDX performance and Catppuccin Mocha aesthetic.

linen file manager completion
sexsh v2 completion
silkbar / tatami completion
sex-files + sex-edit + sex-calc live in Silk
sex-hub first wave packaging (via sex-repo/)
kaleidoscope web browser (servo) — planned
qupid (media player) — planned
cosmic DE libraries ported to SILK DE

Font Strategy

Stage 1: PSF (PC Screen Font)

Minimal PSF2 parser in the kernel for basic terminal output. Functional for boot logging.

Stage 2: srv_font (User-Space Font Server)

Isolated PD embedding a TrueType rendering engine (fontdue/rusttype). Apps request glyph bitmaps via PDX. SAS zero-copy: font server renders to shared SHM region.

Stage 3: Hardware Acceleration

GPU-accelerated font rendering via Mesa/Gallium for high-DPI displays.

Font Assets

Fixed-width: Terminus, JetBrains Mono (developer shell)
Proportional: Inter (GUI elements)

CrewCast — AI Engineering Team Playbook

Agent	Role	Strengths
ChatGPT	Chief Architect / Program Director	Systems architecture, roadmaps, debug triage, multi-agent orchestration
Gemini CLI	High-Speed Repo Worker	Fast terminal workflow, large repo scanning, broad implementation passes
Claude	Precision Engineer	Deep code analysis, no_std Rust expertise, PKU/MPK implementation
Grok	Systems Validator	Hardware compliance checks, correctness verification

Future Apps

App	Purpose	Status
rasta	Photoshop/GIMP pure-Rust clone	Stub
celluloid	Kdenlive pure-Rust clone	Stub
rosebud	Auto translation / i18n pipeline	Planned
snowseed	Proton-style Linux ELF / Steam compatibility layer	Planned
sex-hub	GUI app store front-end (native Silk app)	Done
sexshop	Backend package service (PDX-based)	Done