@namzu/sandbox 23.0.1 → 25.0.0

package/dist/local-virtual-computer/setup/readiness.js

@@ -0,0 +1,320 @@
+import { stat } from 'node:fs/promises';
+import { LocalCommandError, LocalComputerSetupError, } from '../engine.js';
+import { WSLC_MINIMUM_VERSION, mapWslcFailure, parseWslcVersion } from '../wslc-engine.js';
+import { createWslcSetupHost } from './host.js';
+import { PROBE_LIMIT_MS, ProbeTimeoutError, runLimited } from './limits.js';
+import { clearRestartMarker, markerPath, readRestartMarker } from './restart.js';
+import { archivePathOf, parseImageInspect, readImageRecord, readManifest, wslcBinaryOf, } from './wslc-shared.js';
+const POLICY_KEY = 'HKLM\\Software\\Policies\\WSL';
+/** Windows' own pending-restart markers; both can be read without administrator rights. */
+const PENDING_RESTART_KEYS = [
+    'HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Component Based Servicing\\RebootPending',
+    'HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\WindowsUpdate\\Auto Update\\RebootRequired',
+];
+const MINIMUM_BUILD = 19041;
+const WINDOWS_11_BUILD = 22000;
+/** `wsl.exe --version` is UTF-16LE and localised: strip NULs, never read a label. */
+export function parseWslVersion(output) {
+    const text = output.replace(/\0/g, '').replace(/^/, '');
+    const firstLine = text.split(/\r?\n/).find((line) => line.trim() !== '') ?? '';
+    return /\d+\.\d+\.\d+\.\d+/.exec(firstLine)?.[0];
+}
+export function wslcAtLeastMinimum(version) {
+    const parts = version.split('.').map(Number);
+    for (let i = 0; i < WSLC_MINIMUM_VERSION.length; i++) {
+        const found = parts[i] ?? 0;
+        const floor = WSLC_MINIMUM_VERSION[i] ?? 0;
+        if (found !== floor)
+            return found > floor;
+    }
+    return true;
+}
+/** 1060 is "service does not exist"; any other failure leaves it unknown. */
+async function serviceExists(runner, name, signal) {
+    try {
+        await runLimited(runner, 'sc.exe', ['query', name], PROBE_LIMIT_MS.command, { signal });
+        return true;
+    }
+    catch (error) {
+        signal?.throwIfAborted();
+        if (error instanceof LocalCommandError && /\(1060\)/.test(error.message))
+            return false;
+        return 'unknown';
+    }
+}
+async function hypervisorPresent(runner, signal) {
+    try {
+        const output = await runLimited(runner, 'powershell.exe', [
+            '-NoProfile',
+            '-NonInteractive',
+            '-Command',
+            '(Get-CimInstance Win32_ComputerSystem).HypervisorPresent',
+        ], PROBE_LIMIT_MS.powershell, { signal });
+        const answer = output.trim().toLowerCase();
+        if (answer === 'true')
+            return true;
+        if (answer === 'false')
+            return false;
+        return 'unknown';
+    }
+    catch {
+        signal?.throwIfAborted();
+        return 'unknown';
+    }
+}
+async function wslVersionOf(runner, signal) {
+    try {
+        return parseWslVersion(await runLimited(runner, 'wsl.exe', ['--version'], PROBE_LIMIT_MS.command, { signal }));
+    }
+    catch {
+        signal?.throwIfAborted();
+        return undefined;
+    }
+}
+async function wslcVersionOf(runner, binary, signal) {
+    try {
+        const parsed = parseWslcVersion(await runLimited(runner, binary, ['version'], PROBE_LIMIT_MS.command, { signal }));
+        return parsed?.join('.');
+    }
+    catch (error) {
+        signal?.throwIfAborted();
+        // Without an answer there is no telling "not installed" from "slow": the
+        // state cannot be decided, so say so rather than plan an install.
+        if (error instanceof ProbeTimeoutError)
+            throw couldNotCheck(error);
+        return undefined;
+    }
+}
+/** A policy value; a read that did not answer in time cannot be taken as "not set". */
+async function readPolicy(host, name) {
+    try {
+        return await host.readDword(POLICY_KEY, name);
+    }
+    catch (error) {
+        if (error instanceof ProbeTimeoutError)
+            throw couldNotCheck(error);
+        throw error;
+    }
+}
+/** The state cannot be decided: a plain message the CLI and Desktop show with Details. */
+function couldNotCheck(cause) {
+    return new LocalComputerSetupError('Linux container support did not answer, so Namzu could not check this PC. Try again in a moment.', undefined, { cause });
+}
+/**
+ * Windows' own markers that a restart is pending. A marker that cannot be
+ * read is neither set nor clear: say so, because guessing "clear" would send a
+ * PC that only needs a restart to the firmware settings.
+ */
+async function windowsWantsRestart(host) {
+    let unknown = false;
+    for (const key of PENDING_RESTART_KEYS) {
+        const set = await host.keyExists(key);
+        if (set === true)
+            return true;
+        if (set === 'unknown')
+            unknown = true;
+    }
+    return unknown ? 'unknown' : false;
+}
+async function bundledOf(manifestPath) {
+    if (manifestPath === undefined)
+        return undefined;
+    try {
+        const manifest = await readManifest(manifestPath);
+        const archivePath = archivePathOf(manifestPath, manifest);
+        await stat(archivePath);
+        return { manifestPath, archivePath, imageId: manifest.imageId };
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Start the session (wslc image inspect does) and see what answers. */
+async function probeImage(host, binary, ref, expectedId, signal) {
+    try {
+        const output = await runLimited(host.runner, binary, ['image', 'inspect', '-f', 'json', ref], PROBE_LIMIT_MS.session, { signal });
+        const found = parseImageInspect(output);
+        if (found === undefined)
+            return { kind: 'absent' };
+        return expectedId === undefined || found.id === expectedId
+            ? { kind: 'loaded' }
+            : { kind: 'absent' };
+    }
+    catch (error) {
+        signal?.throwIfAborted();
+        const mapped = mapWslcFailure(error);
+        if (mapped?.code === 'virtualization-off')
+            return { kind: 'state', state: 'virtualization-off' };
+        if (mapped?.code === 'blocked-by-policy')
+            return { kind: 'state', state: 'blocked-by-policy' };
+        if (mapped?.code === 'sdk-mismatch')
+            return { kind: 'state', state: 'sdk-mismatch' };
+        if (mapped?.code === 'image-missing')
+            return { kind: 'absent' };
+        // A missing image makes the command exit non-zero with the not-found code
+        // or with a bare exit status 1 and no code (observed on wslc 3.0.1, where the PC answers
+        // "not found" and nothing else). A command that ran and failed with any
+        // other code, or did not start, is the engine failing.
+        if (error instanceof LocalCommandError &&
+            (error.errorCodes.includes('WSLC_E_IMAGE_NOT_FOUND') ||
+                (error.errorCodes.length === 0 && error.exitCode === 1)))
+            return { kind: 'absent' };
+        throw couldNotCheck(error);
+    }
+}
+/**
+ * Inspect the PC without changing anything. Without `probeSession` no command
+ * runs that starts the wslc session (`wslc version` does not; `ps` and `image`
+ * do), so opening a panel never starts a virtual machine.
+ */
+export const inspectWslcReadiness = async (options) => {
+    const host = createWslcSetupHost(options.host);
+    const { signal } = options;
+    const checkedAt = host.now().toISOString();
+    const bundled = await bundledOf(options.bundledManifestPath);
+    const bundledPaths = bundled
+        ? { manifestPath: bundled.manifestPath, archivePath: bundled.archivePath }
+        : undefined;
+    const base = {
+        policy: { allowWsl: true, allowWslContainer: true },
+        components: {
+            virtualMachinePlatform: 'unknown',
+            wslOptionalComponent: 'unknown',
+            hypervisorPresent: 'unknown',
+        },
+        wsl: {},
+        image: {
+            ref: options.imageRef,
+            loaded: false,
+            ...(bundledPaths ? { bundled: bundledPaths } : {}),
+        },
+        checkedAt,
+    };
+    let unsupported;
+    if (host.platform !== 'win32')
+        unsupported = 'platform';
+    else if (host.arch !== 'x64')
+        unsupported = 'architecture';
+    else if (host.windowsBuild === undefined || host.windowsBuild < MINIMUM_BUILD)
+        unsupported = 'windows-build';
+    if (unsupported !== undefined || host.windowsBuild === undefined) {
+        return {
+            state: 'unsupported',
+            unsupportedReason: unsupported ?? 'windows-build',
+            ...base,
+        };
+    }
+    const build = host.windowsBuild;
+    const isWindows11 = build >= WINDOWS_11_BUILD;
+    const binary = wslcBinaryOf(host);
+    const { runner } = host;
+    const [allowWsl, allowContainer, markerRead, hns, vmcompute, lxss, hypervisor, wslVersion, wslcVersion,] = await Promise.all([
+        readPolicy(host, 'AllowWSL'),
+        readPolicy(host, 'AllowWSLContainer'),
+        readRestartMarker(host).then((marker) => ({ marker }), () => ({ marker: undefined, unreadable: true })),
+        serviceExists(runner, 'HNS', signal),
+        serviceExists(runner, 'vmcompute', signal),
+        isWindows11
+            ? Promise.resolve('not-needed')
+            : serviceExists(runner, 'LxssManager', signal),
+        hypervisorPresent(runner, signal),
+        wslVersionOf(runner, signal),
+        wslcVersionOf(runner, binary, signal),
+    ]);
+    const policy = { allowWsl: allowWsl !== 0, allowWslContainer: allowContainer !== 0 };
+    const vmp = hns === false || vmcompute === false
+        ? false
+        : hns === true && vmcompute === true
+            ? true
+            : 'unknown';
+    const components = {
+        virtualMachinePlatform: vmp,
+        wslOptionalComponent: lxss,
+        hypervisorPresent: hypervisor,
+    };
+    let restart;
+    let restartUnrecorded = false;
+    const { marker } = markerRead;
+    let recordedAt = marker?.recordedAt;
+    if ('unreadable' in markerRead) {
+        // A marker that cannot be read still has a file date, and a restart since
+        // then ends it like any other. With no date either, the state cannot be
+        // decided: it reads as restart-pending with no record to compare against
+        // and no remaining steps, rather than failing the inspection.
+        try {
+            recordedAt = (await stat(markerPath(host.stateDirectory))).mtime.toISOString();
+        }
+        catch {
+            restartUnrecorded = true;
+        }
+    }
+    if (recordedAt !== undefined) {
+        let boot;
+        try {
+            boot = await host.bootTime();
+        }
+        catch {
+            signal?.throwIfAborted();
+        }
+        if (boot === undefined)
+            restart = { recordedAt };
+        else if (boot.getTime() > Date.parse(recordedAt)) {
+            try {
+                await clearRestartMarker(host);
+            }
+            catch {
+                // A marker that stays is checked again next time; the PC has restarted.
+            }
+        }
+        else
+            restart = { recordedAt, bootTime: boot.toISOString() };
+    }
+    const wsl = {
+        ...(wslVersion ? { version: wslVersion } : {}),
+        ...(wslcVersion ? { wslcBinary: binary, wslcVersion } : {}),
+    };
+    const wslcUsable = wslcVersion !== undefined && wslcAtLeastMinimum(wslcVersion);
+    let loaded = false;
+    if (options.probeSession !== true) {
+        const record = await readImageRecord(host);
+        loaded =
+            record !== undefined &&
+                record.imageRef === options.imageRef &&
+                (bundled === undefined || record.imageId === bundled.imageId);
+    }
+    const result = (state, imageLoaded = loaded) => ({
+        state,
+        windows: { build, architecture: 'x64', isWindows11 },
+        policy,
+        components,
+        wsl,
+        image: { ...base.image, loaded: imageLoaded },
+        ...(restart ? { restart } : {}),
+        checkedAt,
+    });
+    if (!policy.allowWsl || !policy.allowWslContainer)
+        return result('blocked-by-policy');
+    if (restart || restartUnrecorded)
+        return result('restart-pending');
+    if (vmp === false || lxss === false)
+        return result('platform-off');
+    if (!wslcUsable)
+        return result(wslVersion ? 'wsl-outdated' : 'wsl-missing');
+    if (vmp === true && hypervisor === false && options.probeSession !== true) {
+        // Turning the platform on outside Namzu leaves no hypervisor until the PC
+        // restarts; Windows says so in its own markers. Only without one is it the
+        // firmware setting. With a probe the session's own failure decides.
+        const pending = await windowsWantsRestart(host);
+        if (pending === 'unknown')
+            throw couldNotCheck(undefined);
+        return result(pending ? 'restart-pending' : 'virtualization-off');
+    }
+    if (options.probeSession === true) {
+        const probe = await probeImage(host, binary, options.imageRef, bundled?.imageId, signal);
+        if (probe.kind === 'state')
+            return result(probe.state);
+        loaded = probe.kind === 'loaded';
+    }
+    return result(loaded ? 'ready' : 'image-missing', loaded);
+};
+//# sourceMappingURL=readiness.js.map

package/dist/local-virtual-computer/setup/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/readiness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACvC,OAAO,EACN,iBAAiB,EAEjB,uBAAuB,GACvB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAQ1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC3E,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChF,OAAO,EACN,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,YAAY,GACZ,MAAM,kBAAkB,CAAA;AAEzB,MAAM,UAAU,GAAG,+BAA+B,CAAA;AAClD,2FAA2F;AAC3F,MAAM,oBAAoB,GAAG;IAC5B,8FAA8F;IAC9F,gGAAgG;CACvF,CAAA;AACV,MAAM,aAAa,GAAG,KAAK,CAAA;AAC3B,MAAM,gBAAgB,GAAG,KAAK,CAAA;AAE9B,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,MAAc;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,CAAA;IAC9E,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,oBAAoB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC1C,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,KAAK,GAAG,KAAK,CAAA;IAC1C,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,aAAa,CAC3B,MAAkC,EAClC,IAAY,EACZ,MAA+B;IAE/B,IAAI,CAAC;QACJ,MAAM,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QACvF,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,KAAK,YAAY,iBAAiB,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAA;QACtF,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC/B,MAAkC,EAClC,MAA+B;IAE/B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAC9B,MAAM,EACN,gBAAgB,EAChB;YACC,YAAY;YACZ,iBAAiB;YACjB,UAAU;YACV,0DAA0D;SAC1D,EACD,cAAc,CAAC,UAAU,EACzB,EAAE,MAAM,EAAE,CACV,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC1C,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAA;QAClC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QACpC,OAAO,SAAS,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,MAAkC,EAClC,MAA+B;IAE/B,IAAI,CAAC;QACJ,OAAO,eAAe,CACrB,MAAM,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CACtF,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED,KAAK,UAAU,aAAa,CAC3B,MAAkC,EAClC,MAAc,EACd,MAA+B;IAE/B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,gBAAgB,CAC9B,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CACjF,CAAA;QACD,OAAO,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;QAClE,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,UAAU,CAAC,IAAmB,EAAE,IAAY;IAC1D,IAAI,CAAC;QACJ,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;QAClE,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CAAC,KAAc;IACpC,OAAO,IAAI,uBAAuB,CACjC,kGAAkG,EAClG,SAAS,EACT,EAAE,KAAK,EAAE,CACT,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,IAAmB;IACrD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC7B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAA;IACtC,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;AACnC,CAAC;AAED,KAAK,UAAU,SAAS,CACvB,YAAgC;IAEhC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAChD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAA;QACjD,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;QACzD,MAAM,IAAI,CAAC,WAAW,CAAC,CAAA;QACvB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAMD,wEAAwE;AACxE,KAAK,UAAU,UAAU,CACxB,IAAmB,EACnB,MAAc,EACd,GAAW,EACX,UAA8B,EAC9B,MAA+B;IAE/B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAC9B,IAAI,CAAC,MAAM,EACX,MAAM,EACN,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EACvC,cAAc,CAAC,OAAO,EACtB,EAAE,MAAM,EAAE,CACV,CAAA;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;QACvC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;QAClD,OAAO,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU;YACzD,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,MAAM,EAAE,IAAI,KAAK,oBAAoB;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAA;QAChG,IAAI,MAAM,EAAE,IAAI,KAAK,mBAAmB;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAA;QAC9F,IAAI,MAAM,EAAE,IAAI,KAAK,cAAc;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAA;QACpF,IAAI,MAAM,EAAE,IAAI,KAAK,eAAe;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;QAC/D,0EAA0E;QAC1E,yFAAyF;QACzF,wEAAwE;QACxE,uDAAuD;QACvD,IACC,KAAK,YAAY,iBAAiB;YAClC,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBACnD,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;YAEzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;QAC1B,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAyB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3E,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;IAC1C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC5D,MAAM,YAAY,GAAG,OAAO;QAC3B,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;QAC1E,CAAC,CAAC,SAAS,CAAA;IACZ,MAAM,IAAI,GAAG;QACZ,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE;QACnD,UAAU,EAAE;YACX,sBAAsB,EAAE,SAAkB;YAC1C,oBAAoB,EAAE,SAAkB;YACxC,iBAAiB,EAAE,SAAkB;SACrC;QACD,GAAG,EAAE,EAAE;QACP,KAAK,EAAE;YACN,GAAG,EAAE,OAAO,CAAC,QAAQ;YACrB,MAAM,EAAE,KAAK;YACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD;QACD,SAAS;KACT,CAAA;IAED,IAAI,WAA8C,CAAA;IAClD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;QAAE,WAAW,GAAG,UAAU,CAAA;SAClD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,WAAW,GAAG,cAAc,CAAA;SACrD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,GAAG,aAAa;QAC5E,WAAW,GAAG,eAAe,CAAA;IAC9B,IAAI,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO;YACN,KAAK,EAAE,aAAa;YACpB,iBAAiB,EAAE,WAAW,IAAI,eAAe;YACjD,GAAG,IAAI;SACP,CAAA;IACF,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAA;IAC/B,MAAM,WAAW,GAAG,KAAK,IAAI,gBAAgB,CAAA;IAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAEvB,MAAM,CACL,QAAQ,EACR,cAAc,EACd,UAAU,EACV,GAAG,EACH,SAAS,EACT,IAAI,EACJ,UAAU,EACV,UAAU,EACV,WAAW,EACX,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrB,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC;QAC5B,UAAU,CAAC,IAAI,EAAE,mBAAmB,CAAC;QACrC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,CAC3B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EACxB,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,IAAa,EAAE,CAAC,CACxD;QACD,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;QACpC,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC;QAC1C,WAAW;YACV,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAqB,CAAC;YACxC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC;QAC/C,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC;QACjC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5B,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KACrC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,KAAK,CAAC,EAAE,iBAAiB,EAAE,cAAc,KAAK,CAAC,EAAE,CAAA;IACpF,MAAM,GAAG,GACR,GAAG,KAAK,KAAK,IAAI,SAAS,KAAK,KAAK;QACnC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;YACnC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAA;IACd,MAAM,UAAU,GAAG;QAClB,sBAAsB,EAAE,GAAG;QAC3B,oBAAoB,EAAE,IAAI;QAC1B,iBAAiB,EAAE,UAAU;KAC7B,CAAA;IAED,IAAI,OAAiC,CAAA;IACrC,IAAI,iBAAiB,GAAG,KAAK,CAAA;IAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAA;IAC7B,IAAI,UAAU,GAAuB,MAAM,EAAE,UAAU,CAAA;IACvD,IAAI,YAAY,IAAI,UAAU,EAAE,CAAC;QAChC,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,CAAC;YACJ,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAA;QAC/E,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB,GAAG,IAAI,CAAA;QACzB,CAAC;IACF,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,IAAsB,CAAA;QAC1B,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC7B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,EAAE,cAAc,EAAE,CAAA;QACzB,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,GAAG,EAAE,UAAU,EAAE,CAAA;aAC3C,IAAI,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC;gBACJ,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACR,wEAAwE;YACzE,CAAC;QACF,CAAC;;YAAM,OAAO,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAA;IAC9D,CAAC;IAED,MAAM,GAAG,GAAG;QACX,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAA;IACD,MAAM,UAAU,GAAG,WAAW,KAAK,SAAS,IAAI,kBAAkB,CAAC,WAAW,CAAC,CAAA;IAE/E,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM;YACL,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;gBACpC,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAE,WAAW,GAAG,MAAM,EAAiB,EAAE,CAAC,CAAC;QACnF,KAAK;QACL,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE;QACpD,MAAM;QACN,UAAU;QACV,GAAG;QACH,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;QAC7C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,SAAS;KACT,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAA;IACrF,IAAI,OAAO,IAAI,iBAAiB;QAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAClE,IAAI,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,cAAc,CAAC,CAAA;IAClE,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;IAC3E,IAAI,GAAG,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,aAAa,CAAC,SAAS,CAAC,CAAA;QACzD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;IAClE,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QACxF,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACtD,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAA;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;AAC1D,CAAC,CAAA"}

package/dist/local-virtual-computer/setup/registry.d.ts

@@ -0,0 +1,18 @@
+/** Run `reg.exe` with these arguments and return what it printed. */
+export type RegistryRun = (args: readonly string[]) => Promise<string>;
+/**
+ * `reg query` exits 1 both for a key that is not there and for one the caller
+ * may not read, and its words are localised, so the exit status alone cannot
+ * tell them apart. Ask the parent instead: its listing of subkeys names the
+ * key in every language. When the parent is absent too, the same test climbs
+ * to the grandparent, and so on. A key an ancestor lists but the query cannot
+ * read is not absent, and neither is an ancestor that cannot be read or a
+ * climb that reaches a hive root without an answer.
+ *
+ * Returns the key's listing, or undefined when the key is provably absent.
+ * Anything else rethrows the failure.
+ */
+export declare function queryRegistryKey(run: RegistryRun, key: string): Promise<string | undefined>;
+/** True when a `reg query <key>` listing carries a value of this name. */
+export declare function listingHasValue(listing: string, name: string): boolean;
+//# sourceMappingURL=registry.d.ts.map

package/dist/local-virtual-computer/setup/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/registry.ts"],"names":[],"mappings":"AAEA,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AAOtE;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAkBjG;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAMtE"}

package/dist/local-virtual-computer/setup/registry.js

@@ -0,0 +1,50 @@
+import { LocalCommandError } from '../engine.js';
+function parentOf(key) {
+    const cut = key.lastIndexOf('\\');
+    return cut > 0 ? key.slice(0, cut) : undefined;
+}
+/**
+ * `reg query` exits 1 both for a key that is not there and for one the caller
+ * may not read, and its words are localised, so the exit status alone cannot
+ * tell them apart. Ask the parent instead: its listing of subkeys names the
+ * key in every language. When the parent is absent too, the same test climbs
+ * to the grandparent, and so on. A key an ancestor lists but the query cannot
+ * read is not absent, and neither is an ancestor that cannot be read or a
+ * climb that reaches a hive root without an answer.
+ *
+ * Returns the key's listing, or undefined when the key is provably absent.
+ * Anything else rethrows the failure.
+ */
+export async function queryRegistryKey(run, key) {
+    try {
+        return await run(['query', key]);
+    }
+    catch (error) {
+        if (!(error instanceof LocalCommandError) || error.exitCode !== 1)
+            throw error;
+        const parent = parentOf(key);
+        if (parent === undefined)
+            throw error;
+        // The parent may itself be absent (no Windows Update key on an offline or
+        // managed image): walk up until an ancestor answers.
+        const listing = await queryRegistryKey(run, parent);
+        if (listing === undefined)
+            return undefined;
+        const leaf = key.slice(parent.length + 1).toLowerCase();
+        const listed = listing
+            .split(/\r?\n/)
+            .some((line) => line.trim().toLowerCase().endsWith(`\\${leaf}`));
+        if (listed)
+            throw error;
+        return undefined;
+    }
+}
+/** True when a `reg query <key>` listing carries a value of this name. */
+export function listingHasValue(listing, name) {
+    const wanted = name.toLowerCase();
+    return listing.split(/\r?\n/).some((line) => {
+        const match = /^\s+(.+?)\s+REG_[A-Z_]+(?:\s|$)/.exec(line);
+        return match?.[1]?.toLowerCase() === wanted;
+    });
+}
+//# sourceMappingURL=registry.js.map

package/dist/local-virtual-computer/setup/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAKhD,SAAS,QAAQ,CAAC,GAAW;IAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IACjC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAgB,EAAE,GAAW;IACnE,IAAI,CAAC;QACJ,OAAO,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,KAAK,YAAY,iBAAiB,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,KAAK,CAAA;QAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,KAAK,CAAA;QACrC,0EAA0E;QAC1E,qDAAqD;QACrD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QACnD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QACvD,MAAM,MAAM,GAAG,OAAO;aACpB,KAAK,CAAC,OAAO,CAAC;aACd,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAA;QACjE,IAAI,MAAM;YAAE,MAAM,KAAK,CAAA;QACvB,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,IAAY;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACjC,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM,CAAA;IAC5C,CAAC,CAAC,CAAA;AACH,CAAC"}

package/dist/local-virtual-computer/setup/restart.d.ts

@@ -0,0 +1,8 @@
+import type { ClearRestartMarker, ReadRestartMarker, WriteRestartMarker } from './contract.js';
+export declare function markerPath(directory: string): string;
+/** The recorded restart, or undefined when absent or not one this code wrote. */
+export declare const readRestartMarker: ReadRestartMarker;
+/** Temp file plus rename, so a reader never sees half a marker. */
+export declare const writeRestartMarker: WriteRestartMarker;
+export declare const clearRestartMarker: ClearRestartMarker;
+//# sourceMappingURL=restart.d.ts.map

package/dist/local-virtual-computer/setup/restart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restart.d.ts","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/restart.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACX,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAGlB,MAAM,eAAe,CAAA;AAUtB,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAiBD,iFAAiF;AACjF,eAAO,MAAM,iBAAiB,EAAE,iBAO/B,CAAA;AAED,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,EAAE,kBAWhC,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,kBAEhC,CAAA"}

package/dist/local-virtual-computer/setup/restart.js

@@ -0,0 +1,60 @@
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+const STEP_KINDS = [
+    'download-wsl',
+    'enable-windows-features',
+    'install-wsl',
+    'restart',
+    'load-image',
+];
+export function markerPath(directory) {
+    return join(directory, 'restart.json');
+}
+function parseMarker(text) {
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+    if (typeof value !== 'object' || value === null)
+        return undefined;
+    const { recordedAt, planId, remaining } = value;
+    if (typeof recordedAt !== 'string' || Number.isNaN(Date.parse(recordedAt)))
+        return undefined;
+    if (typeof planId !== 'string' || !Array.isArray(remaining))
+        return undefined;
+    if (!remaining.every((step) => STEP_KINDS.includes(step)))
+        return undefined;
+    return { recordedAt, planId, remaining: remaining };
+}
+/** The recorded restart, or undefined when absent or not one this code wrote. */
+export const readRestartMarker = async (host) => {
+    try {
+        return parseMarker(await readFile(markerPath(host.stateDirectory), 'utf8'));
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw error;
+    }
+};
+/** Temp file plus rename, so a reader never sees half a marker. */
+export const writeRestartMarker = async (host, marker) => {
+    await mkdir(host.stateDirectory, { recursive: true });
+    const target = markerPath(host.stateDirectory);
+    const temp = `${target}.${process.pid}.tmp`;
+    await writeFile(temp, `${JSON.stringify(marker)}\n`, 'utf8');
+    try {
+        await rename(temp, target);
+    }
+    catch (error) {
+        await rm(temp, { force: true });
+        throw error;
+    }
+};
+export const clearRestartMarker = async (host) => {
+    await rm(markerPath(host.stateDirectory), { force: true });
+};
+//# sourceMappingURL=restart.js.map

package/dist/local-virtual-computer/setup/restart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restart.js","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/restart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAShC,MAAM,UAAU,GAAiC;IAChD,cAAc;IACd,yBAAyB;IACzB,aAAa;IACb,SAAS;IACT,YAAY;CACZ,CAAA;AAED,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC3C,OAAO,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAChC,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAgC,CAAA;IAC1E,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5F,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAC7E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAyB,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAChG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,SAAgC,EAAE,CAAA;AAC3E,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAsB,KAAK,EAAE,IAAI,EAAE,EAAE;IAClE,IAAI,CAAC;QACJ,OAAO,WAAW,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QACxE,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAuB,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;IAC5E,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAA;IAC3C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5D,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/B,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAuB,KAAK,EAAE,IAAI,EAAE,EAAE;IACpE,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAC3D,CAAC,CAAA"}

package/dist/local-virtual-computer/setup/resume.d.ts

@@ -0,0 +1,14 @@
+import type { ClearResumeAtSignIn, RegisterResumeAtSignIn } from './contract.js';
+/**
+ * Ask Windows to run `command` once at the next sign-in by writing the
+ * `NamzuPalComputerSetup` value (REG_SZ) under `host.resumeRegistryKey`. No
+ * administrator is needed for the default per-user key. Windows deletes a
+ * RunOnce value just before it runs it; writing the value again replaces it.
+ */
+export declare const registerResumeAtSignIn: RegisterResumeAtSignIn;
+/**
+ * Take the command back. A value that is not there is not an error; a key
+ * that cannot be read is, because the command might still be registered.
+ */
+export declare const clearResumeAtSignIn: ClearResumeAtSignIn;
+//# sourceMappingURL=resume.d.ts.map

package/dist/local-virtual-computer/setup/resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/resume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAiB,MAAM,eAAe,CAAA;AA6B/F;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,sBAcpC,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,mBASjC,CAAA"}

package/dist/local-virtual-computer/setup/resume.js

@@ -0,0 +1,58 @@
+import { listingHasValue, queryRegistryKey } from './registry.js';
+import { trustedWindowsDirectory } from './windows-folder.js';
+/** The registry value the resume command is stored under. */
+const RESUME_VALUE_NAME = 'NamzuPalComputerSetup';
+/** Windows runs a RunOnce command line of at most this many characters. */
+const MAX_COMMAND_LENGTH = 2048;
+function regBinary(host) {
+    return `${trustedWindowsDirectory(host.env)}\\System32\\reg.exe`;
+}
+function checkKey(key) {
+    if (!/^HK(CU|LM|CR|U|CC)\\[^\r\n\0"]+$/.test(key)) {
+        throw new Error('The sign-in registry key is not a valid registry path.');
+    }
+}
+function checkCommand(command) {
+    if (command.trim().length === 0)
+        throw new Error('The sign-in command is empty.');
+    if (command.length > MAX_COMMAND_LENGTH) {
+        throw new Error(`The sign-in command is longer than ${MAX_COMMAND_LENGTH} characters.`);
+    }
+    if (/[\r\n\0]/.test(command)) {
+        throw new Error('The sign-in command must be a single line.');
+    }
+}
+/**
+ * Ask Windows to run `command` once at the next sign-in by writing the
+ * `NamzuPalComputerSetup` value (REG_SZ) under `host.resumeRegistryKey`. No
+ * administrator is needed for the default per-user key. Windows deletes a
+ * RunOnce value just before it runs it; writing the value again replaces it.
+ */
+export const registerResumeAtSignIn = async (host, command) => {
+    checkKey(host.resumeRegistryKey);
+    checkCommand(command);
+    await host.runner.run(regBinary(host), [
+        'add',
+        host.resumeRegistryKey,
+        '/v',
+        RESUME_VALUE_NAME,
+        '/t',
+        'REG_SZ',
+        '/d',
+        command,
+        '/f',
+    ]);
+};
+/**
+ * Take the command back. A value that is not there is not an error; a key
+ * that cannot be read is, because the command might still be registered.
+ */
+export const clearResumeAtSignIn = async (host) => {
+    checkKey(host.resumeRegistryKey);
+    const reg = regBinary(host);
+    const listing = await queryRegistryKey((args) => host.runner.run(reg, [...args]), host.resumeRegistryKey);
+    if (listing === undefined || !listingHasValue(listing, RESUME_VALUE_NAME))
+        return;
+    await host.runner.run(reg, ['delete', host.resumeRegistryKey, '/v', RESUME_VALUE_NAME, '/f']);
+};
+//# sourceMappingURL=resume.js.map

package/dist/local-virtual-computer/setup/resume.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.js","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/resume.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAE7D,6DAA6D;AAC7D,MAAM,iBAAiB,GAAG,uBAAuB,CAAA;AACjD,2EAA2E;AAC3E,MAAM,kBAAkB,GAAG,IAAI,CAAA;AAE/B,SAAS,SAAS,CAAC,IAAmB;IACrC,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAA;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC5B,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC1E,CAAC;AACF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACpC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACjF,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,sCAAsC,kBAAkB,cAAc,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;IAC9D,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAA2B,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;IACrF,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAChC,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACtC,KAAK;QACL,IAAI,CAAC,iBAAiB;QACtB,IAAI;QACJ,iBAAiB;QACjB,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,OAAO;QACP,IAAI;KACJ,CAAC,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,KAAK,EAAE,IAAI,EAAE,EAAE;IACtE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACrC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EACzC,IAAI,CAAC,iBAAiB,CACtB,CAAA;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,iBAAiB,CAAC;QAAE,OAAM;IACjF,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAA;AAC9F,CAAC,CAAA"}

package/dist/local-virtual-computer/setup/run.d.ts

@@ -0,0 +1,8 @@
+import type { RunWslcSetup } from './contract.js';
+/**
+ * Run the plan the person agreed to. Inspects again first, with the session
+ * probe, and refuses with `plan-changed` when the plan it would run is not the
+ * one named by the consent.
+ */
+export declare const runWslcSetup: RunWslcSetup;
+//# sourceMappingURL=run.d.ts.map

package/dist/local-virtual-computer/setup/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,YAAY,EAMZ,MAAM,eAAe,CAAA;AA4BtB;;;;GAIG;AACH,eAAO,MAAM,YAAY,EAAE,YAwL1B,CAAA"}