No description
Find a file
Breadway 1e2817537b Add Workstream G: out-of-process, Landlock-sandboxed module runtime
Closes the gap Workstream D's in-process capability scoping left open:
build_scoped_env only gated presence of bread.* bindings, but os.execute/
io.open/debug.* remained fully reachable since a module's Lua still ran
inside breadd's own process. A module that declares [[permissions]] in
bread.module.toml (including an explicit empty list) is now spawned as a
separate bread-module-host process instead, restricted by a Landlock
ruleset breadd builds from that module's granted permissions and applies
via Command::pre_exec before the child executes any Lua at all. A module
with no manifest at all keeps today's in-process, ungated behavior for
backward compatibility.

- bread-module-host: new minimal binary (mlua + tokio + serde_json) that
  connects to breadd's existing IPC socket, presents a one-time spawn
  token, and proxies bread.* calls as RPC instead of direct bindings.
- breadd/src/module_host.rs: spawn + token registry + apply_sandbox
  (Landlock ruleset construction), with unit tests that spawn a real
  child and verify denial at the OS level, not a Lua-level check.
- breadd/src/ipc/module_host_bridge.rs: the module_host.* RPC bridge
  (on/once/off/emit/after/every/cancel, fs.read/write, exec/exec_capture,
  state.get, log/warn/error, status) plus the hello handshake. Bumped
  API_VERSION to 1.6.0.
- breadd/tests/module_host_sandbox.rs: end-to-end acceptance tests going
  through a real spawned breadd + bread-module-host + IPC handshake —
  os.execute/io.open denied outside a module's granted fs.read scope, and
  kill -9 on a module-host child leaving breadd and other modules intact
  while breadd reports bread.module.crashed.
- bread-shared/src/module_host_ipc.rs: shared wire types (hello result,
  tagged event/timer push envelope) so breadd and bread-module-host can't
  drift on the handshake/push shape.

Deferred (documented in Documentation.md's Workstream G section): the
trust="in-process" opt-out, remaining bread.* namespaces over RPC
(hyprland/widget/machine/bluetooth/notify/state.watch), network
sandboxing, and a fully static build that would remove the Execute grant
Landlock's dynamic-linker requirement forces on system library dirs.
2026-08-05 04:02:05 +08:00
.forgejo/workflows CI: single-trunk model — dev triggers on main, beta becomes RC-tag-triggered 2026-07-31 11:05:29 +08:00
bread-cli Merge feature/capability-manifest (Workstream D) 2026-08-04 22:40:49 +08:00
bread-emit Bump version to 0.7.0 2026-07-19 03:06:24 +08:00
bread-module-host Add Workstream G: out-of-process, Landlock-sandboxed module runtime 2026-08-05 04:02:05 +08:00
bread-shared Add Workstream G: out-of-process, Landlock-sandboxed module runtime 2026-08-05 04:02:05 +08:00
breadd Add Workstream G: out-of-process, Landlock-sandboxed module runtime 2026-08-05 04:02:05 +08:00
examples/modules Merge feature/capability-manifest (Workstream D) 2026-08-04 22:40:49 +08:00
graphify-out can't be bothered writing a commit message 2026-08-03 09:37:15 +08:00
packaging Drop pacman packaging, bakery-only distribution 2026-07-23 10:25:12 +08:00
scripts Final Release of Version 1.0 2026-05-13 22:01:42 +08:00
xtask Add schema-first API docs drift detector (xtask check-docs) 2026-08-04 18:21:05 +08:00
.gitignore Final Release of Version 1.0 2026-05-13 22:01:42 +08:00
api-schema.toml Add schema-first API docs drift detector (xtask check-docs) 2026-08-04 18:21:05 +08:00
bakery.toml Drop pacman packaging, bakery-only distribution 2026-07-23 10:25:12 +08:00
Cargo.lock Add Workstream G: out-of-process, Landlock-sandboxed module runtime 2026-08-05 04:02:05 +08:00
Cargo.toml Add Workstream G: out-of-process, Landlock-sandboxed module runtime 2026-08-05 04:02:05 +08:00
CONTRIBUTING.md Add schema-first API docs drift detector (xtask check-docs) 2026-08-04 18:21:05 +08:00
DEPRECATIONS.md Namespace Hyprland events under bread.hyprland.*, keep legacy names via [compat] 2026-08-04 22:08:44 +08:00
Documentation.md Add Workstream G: out-of-process, Landlock-sandboxed module runtime 2026-08-05 04:02:05 +08:00
Examples.md Will change this commit message to mean something later 2026-07-22 19:52:16 +08:00
LICENSE Daemon release-ready 2026-05-11 12:21:23 +08:00
README.md Merge feature/rules-toml (Workstream E) 2026-08-04 22:38:05 +08:00

Bread

A reactive automation fabric for Linux desktops.

Bread is a modular desktop automation runtime built around a single idea: your desktop should behave like a programmable system, not a collection of disconnected config files.

Instead of scattering behavior across shell scripts, compositor configs, udev rules, and ad-hoc daemons, Bread centralizes runtime awareness into a coherent layer that can observe, interpret, and react to system state dynamically.

Status: Early development. The daemon (breadd) is stable. The Lua automation API is active and feature-complete for daily use.


How it works

Bread runs a long-lived daemon (breadd) that:

  1. Ingests raw signals from your compositor, hardware, and OS
  2. Normalizes them into stable, semantic events (bread.device.dock.connected, bread.hyprland.monitor.connected, etc.)
  3. Maintains a live model of your desktop state
  4. Delivers those events to Lua modules that implement your automation

Your automation lives in Lua. You subscribe to events, read state, and call APIs:

local M = bread.module({ name = "dock", version = "1.0.0" })

bread.on("bread.device.dock.connected", function(event)
    bread.profile.activate("desk")
    bread.exec("waybar --config ~/.config/waybar/desk.jsonc")
    bread.notify("Dock connected", { urgency = "low" })
end)

bread.on("bread.device.dock.disconnected", function(event)
    bread.profile.activate("default")
end)

return M

Architecture

breadd/          Rust daemon — event pipeline, state engine, IPC, adapter supervision
bread-cli/       CLI frontend — talks to breadd over a Unix socket
bread-shared/    Shared types — RawEvent, BreadEvent, AdapterSource
packaging/       Arch PKGBUILD and systemd user service

The daemon is structured in four layers:

  • Adapters — interface with Hyprland IPC, udev, power state, network interfaces, and Bluetooth (BlueZ)
  • Normalizer — transforms raw adapter signals into semantic Bread events
  • State engine — maintains runtime state and dispatches events to subscribers
  • Lua runtime — loads your modules, registers handlers, executes automation

Requirements

  • Linux (Arch recommended)
  • Wayland compositor (Hyprland for full functionality)
  • Rust toolchain (stable, 2021 edition)
  • udev (standard on systemd systems)

Optional but preferred:

  • UPower (for battery events via D-Bus rather than sysfs polling)
  • rtnetlink (for network events; falls back to sysfs polling without it)
  • BlueZ (for Bluetooth device events and control)

Installation

From source

git clone https://git.breadway.dev/Breadway/bread.git
cd bread

Run the install script — it builds, symlinks breadd and bread into ~/.local/bin (override with BIN_DIR=…), installs the systemd user service, and starts the daemon:

bash scripts/install.sh

Or step by step (system-wide install):

cargo build --release
sudo install -Dm755 target/release/breadd /usr/bin/breadd
sudo install -Dm755 target/release/bread /usr/bin/bread

Arch Linux (PKGBUILD)

cd packaging/arch
makepkg -si

systemd user service

mkdir -p ~/.config/systemd/user
cp packaging/systemd/breadd.service ~/.config/systemd/user/
systemctl --user daemon-reload
systemctl --user enable --now breadd

Configuration

Bread reads from ~/.config/bread/breadd.toml. All values are optional — the daemon runs with defaults if the file doesn't exist.

[daemon]
log_level = "info"   # trace | debug | info | warn | error

[lua]
entry_point = "~/.config/bread/init.lua"
module_path = "~/.config/bread/modules"

[adapters.hyprland]
enabled = true

[adapters.udev]
enabled = true
subsystems = ["usb", "input", "drm", "power_supply"]

[adapters.power]
enabled = true
poll_interval_secs = 30

[adapters.network]
enabled = true

[adapters.bluetooth]
enabled = true

[events]
dedup_window_ms = 100

[compat]
legacy_hyprland_event_names = true   # dual-emits bread.hyprland.* alongside legacy flat names; see Documentation.md

[notifications]
default_timeout_ms = 5000
default_urgency = "normal"
notify_send_path = "notify-send"

[modules]
builtin = true    # load built-in modules (monitors, devices, workspaces, binds, rules)
disable = []      # list of built-in module names to disable

For the common "when event X happens, do Y" case, you don't need Lua at all — drop rules straight into ~/.config/bread/rules.toml and skip init.lua entirely:

# ~/.config/bread/rules.toml
[[rule]]
on = "device.dock.connected"
run = "~/.config/bread/scripts/dock-connected.sh"

[[rule]]
on = "power.ac.disconnected"
notify = "Unplugged"

It's optional and purely additive alongside init.lua — see Getting started in Documentation.md for the full schema (run vs exec vs notify, wildcard on patterns, and how a malformed rule surfaces via bread doctor).

For anything beyond a single action per event, your automation lives in ~/.config/bread/init.lua. Modules placed in ~/.config/bread/modules/ are auto-loaded after init.lua:

-- ~/.config/bread/init.lua

bread.on("bread.system.startup", function(event)
    bread.profile.activate("default")
end)

CLI reference

All commands communicate with the running daemon over a Unix socket at $XDG_RUNTIME_DIR/bread/breadd.sock.

# Daemon
bread ping                            # Check daemon connectivity
bread health                          # Daemon version, uptime, PID
bread doctor                          # Diagnose daemon and module health
bread doctor --json                   # Output raw JSON

# Lua runtime
bread reload                          # Hot-reload all Lua modules
bread reload --watch                  # Watch config dir and reload on changes

# State and events
bread state                           # Dump full runtime state as JSON
bread state network                   # Read a single path from state
bread state --json                    # Output raw JSON
bread events                          # Stream live normalized events
bread events bread.device.*           # Stream filtered events
bread events --since 60               # Replay events from the last 60 seconds
bread events --fields event,data      # Limit output to specific fields
bread events --json                   # Output raw JSON
bread emit <event>                    # Manually fire an event (for testing)

# Profiles
bread profile-list                    # List defined profiles
bread profile-activate <name>         # Activate a named profile

# Modules
bread modules list                    # List installed modules and daemon status
bread modules install /local/path     # Install from a local module directory
bread modules remove <name>           # Remove an installed module (--yes skips confirmation)
bread modules info <name>             # Show full manifest and daemon status

Module system

Modules are Lua files (or directories) installed to ~/.config/bread/modules/. Each module must declare itself with bread.module() and have a bread.module.toml manifest.

Installing modules

Modules install from a local directory only. Modules run with full bread.exec() privileges and are not sandboxed, so to use a module published on a git host, clone it yourself and review the Lua before installing from the local checkout:

git clone https://github.com/someuser/bread-wifi ~/src/bread-wifi
# review ~/src/bread-wifi, then:
bread modules install ~/src/bread-wifi

Writing a module

A module directory looks like:

~/.config/bread/modules/
└── wifi/
    ├── bread.module.toml    ← required manifest
    └── init.lua             ← entry point

bread.module.toml:

name = "wifi"
version = "1.0.0"
description = "WiFi management for Bread"
author = "someuser"
source = "/home/you/src/bread-wifi"
installed_at = "2026-01-01T00:00:00Z"

init.lua:

local M = bread.module({ name = "wifi", version = "1.0.0" })

bread.on("bread.network.connected", function(event)
    bread.log("Network up: " .. (event.data.interface or "unknown"))
end)

return M

Event reference, Lua API, and IPC protocol

These are fully documented in Documentation.md — the single canonical reference (event catalogue, per-function Lua API, runtime-state schema, and IPC protocol), versioned as Bread Automation API v1. This README no longer keeps a parallel copy, to avoid the two drifting apart.


Contributing

Bread is early-stage software. Contributions, issues, and feedback are welcome.

The daemon (breadd) is the most stable part of the codebase. Active development is happening across the Lua API and module system.


License

MIT — see LICENSE.