@namzu/sandbox 24.0.0 → 26.0.0

package/dist/local-virtual-computer/setup/wslc-shared.js

@@ -0,0 +1,137 @@
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { dirname, join, win32 } from 'node:path';
+/** The label every Pal computer image carries; it names the guest protocol. */
+export const PROTOCOL_LABEL = 'org.namzu.local-computer.protocol';
+/** Where the WSL package puts wslc. */
+export function wslcBinaryOf(host) {
+    // A 32-bit process sees its own Program Files; WSL installs into the 64-bit one.
+    const programFiles = host.env.ProgramW6432 ?? host.env.ProgramFiles ?? 'C:\\Program Files';
+    return win32.join(programFiles, 'WSL', 'wslc.exe');
+}
+/** Why a manifest was refused, in words safe to show. */
+export class ManifestError extends Error {
+    name = 'ManifestError';
+}
+const FORMATS = ['zst', 'xz', 'gz', 'tar'];
+function fail(why) {
+    throw new ManifestError(`The Pal computer image manifest is not valid: ${why}.`);
+}
+/** Validate a parsed manifest. Throws {@link ManifestError}. */
+export function validateManifest(value) {
+    if (typeof value !== 'object' || value === null)
+        fail('it is not an object');
+    const m = value;
+    const text = (key) => {
+        const v = m[key];
+        if (typeof v !== 'string' || v === '')
+            fail(`${key} is missing`);
+        return v;
+    };
+    const whole = (key) => {
+        const v = m[key];
+        if (typeof v !== 'number' || !Number.isInteger(v) || v <= 0)
+            fail(`${key} is missing`);
+        return v;
+    };
+    const revision = whole('revision');
+    const imageRef = text('imageRef');
+    if (imageRef !== `namzu-local-computer:${revision}`)
+        fail('imageRef does not match the revision');
+    const imageId = text('imageId');
+    if (!/^sha256:[0-9a-f]{64}$/.test(imageId))
+        fail('imageId is not a digest');
+    const file = text('file');
+    if (/[\\/]/.test(file) || file === '.' || file === '..' || file.includes('\0'))
+        fail('file must be a plain file name');
+    const sha256 = text('sha256');
+    const tarSha256 = text('tarSha256');
+    for (const digest of [sha256, tarSha256])
+        if (!/^[0-9a-f]{64}$/.test(digest))
+            fail('a digest is not 64 hex characters');
+    const stage = m.stage;
+    if (stage !== 'base' && stage !== 'creative')
+        fail('stage is missing');
+    const format = m.format;
+    if (typeof format !== 'string' || !FORMATS.includes(format))
+        fail('format is missing');
+    return {
+        revision,
+        stage,
+        imageRef,
+        imageId,
+        protocol: text('protocol'),
+        file,
+        sha256,
+        tarSha256,
+        sizeBytes: whole('sizeBytes'),
+        compressedBytes: whole('compressedBytes'),
+        format: format,
+    };
+}
+export async function readManifest(manifestPath) {
+    let text;
+    try {
+        text = await readFile(manifestPath, 'utf8');
+    }
+    catch {
+        throw new ManifestError('The Pal computer image manifest could not be read.');
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new ManifestError('The Pal computer image manifest is not valid JSON.');
+    }
+    return validateManifest(parsed);
+}
+/** The archive lies beside its manifest. */
+export function archivePathOf(manifestPath, manifest) {
+    return join(dirname(manifestPath), manifest.file);
+}
+/** `[{ Id, Config: { Labels } }]` from `wslc image inspect -f json`. */
+export function parseImageInspect(output) {
+    let value;
+    try {
+        value = JSON.parse(output.replace(/^\uFEFF/, '').trim());
+    }
+    catch {
+        return undefined;
+    }
+    const first = Array.isArray(value) ? value[0] : value;
+    if (typeof first !== 'object' || first === null)
+        return undefined;
+    const { Id, Config } = first;
+    if (typeof Id !== 'string')
+        return undefined;
+    const label = Config?.Labels?.[PROTOCOL_LABEL];
+    return { id: Id, protocol: typeof label === 'string' ? label : undefined };
+}
+function recordPath(host) {
+    return join(host.stateDirectory, 'image.json');
+}
+export async function readImageRecord(host) {
+    try {
+        const value = JSON.parse(await readFile(recordPath(host), 'utf8'));
+        if (typeof value.imageRef === 'string' && typeof value.imageId === 'string')
+            return value;
+    }
+    catch {
+        // Absent or unreadable: nothing is recorded.
+    }
+    return undefined;
+}
+export async function writeImageRecord(host, record) {
+    await mkdir(host.stateDirectory, { recursive: true });
+    const target = recordPath(host);
+    const temp = `${target}.${process.pid}.tmp`;
+    await writeFile(temp, `${JSON.stringify(record)}\n`, 'utf8');
+    try {
+        await rename(temp, target);
+    }
+    catch (error) {
+        await rm(temp, { force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=wslc-shared.js.map

package/dist/local-virtual-computer/setup/wslc-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wslc-shared.js","sourceRoot":"","sources":["../../../src/local-virtual-computer/setup/wslc-shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAGhD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,mCAAmC,CAAA;AAEjE,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,IAAgC;IAC5D,iFAAiF;IACjF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,mBAAmB,CAAA;IAC1F,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;AACnD,CAAC;AAED,yDAAyD;AACzD,MAAM,OAAO,aAAc,SAAQ,KAAK;IACrB,IAAI,GAAG,eAAe,CAAA;CACxC;AAED,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AAE1C,SAAS,IAAI,CAAC,GAAW;IACxB,MAAM,IAAI,aAAa,CAAC,iDAAiD,GAAG,GAAG,CAAC,CAAA;AACjF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,IAAI,CAAC,qBAAqB,CAAC,CAAA;IAC5E,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE;QACpC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE;YAAE,IAAI,CAAC,GAAG,GAAG,aAAa,CAAC,CAAA;QAChE,OAAO,CAAC,CAAA;IACT,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAU,EAAE;QACrC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QAChB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,GAAG,aAAa,CAAC,CAAA;QACtF,OAAO,CAAC,CAAA;IACT,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAA;IACjC,IAAI,QAAQ,KAAK,wBAAwB,QAAQ,EAAE;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACjG,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAA;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IACzB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC7E,IAAI,CAAC,gCAAgC,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAA;IACnC,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,mCAAmC,CAAC,CAAA;IAC9E,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAA;IACrB,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU;QAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;IACvB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACtF,OAAO;QACN,QAAQ;QACR,KAAK;QACL,QAAQ;QACR,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;QAC1B,IAAI;QACJ,MAAM;QACN,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;QAC7B,eAAe,EAAE,KAAK,CAAC,iBAAiB,CAAC;QACzC,MAAM,EAAE,MAAqC;KAC7C,CAAA;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,YAAoB;IACtD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,aAAa,CAAC,oDAAoD,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,aAAa,CAAC,oDAAoD,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAA;AAChC,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,aAAa,CAAC,YAAoB,EAAE,QAA2B;IAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;AAClD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAChC,MAAc;IAEd,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAwE,CAAA;IAC/F,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC5C,MAAM,KAAK,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC,cAAc,CAAC,CAAA;IAC9C,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;AAC3E,CAAC;AAQD,SAAS,UAAU,CAAC,IAA2C;IAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,IAA2C;IAE3C,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAA6B,CAAA;QAC9F,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAC1E,OAAO,KAAwB,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,6CAA6C;IAC9C,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,IAA2C,EAC3C,MAAuB;IAEvB,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAA;IAC3C,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC5D,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/B,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC"}

package/dist/local-virtual-computer/ssh-forward.d.ts

@@ -0,0 +1,19 @@
+import type { LocalPortForward } from './engine.js';
+/** Internal retained authority for retrying an unconfirmed owned startup cleanup. */
+export declare class LocalForwardCleanupError extends Error {
+    readonly forward: LocalPortForward;
+    constructor(forward: LocalPortForward, cause: unknown);
+}
+interface LocalSshForwardOptions {
+    readonly identity: string;
+    readonly port: number;
+    readonly user: string;
+    readonly hostPublicKey: string;
+    readonly ports: readonly number[];
+    readonly signal?: AbortSignal;
+    readonly onLost: () => void;
+}
+/** An owned loopback tunnel to an already verified local WSL machine only. */
+export declare function startLocalSshForward(options: LocalSshForwardOptions): Promise<LocalPortForward>;
+export {};
+//# sourceMappingURL=ssh-forward.d.ts.map

package/dist/local-virtual-computer/ssh-forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-forward.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/ssh-forward.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,qFAAqF;AACrF,qBAAa,wBAAyB,SAAQ,KAAK;IAEjD,QAAQ,CAAC,OAAO,EAAE,gBAAgB;gBAAzB,OAAO,EAAE,gBAAgB,EAClC,KAAK,EAAE,OAAO;CAIf;AAaD,UAAU,sBAAsB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAA;CAC3B;AAkBD,8EAA8E;AAC9E,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,sBAAsB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAyI3B"}

package/dist/local-virtual-computer/ssh-forward.js

@@ -0,0 +1,179 @@
+import { spawn } from 'node:child_process';
+import { mkdtemp, rmdir, unlink, writeFile } from 'node:fs/promises';
+import { createServer } from 'node:net';
+import { tmpdir } from 'node:os';
+import { join, win32 } from 'node:path';
+/** Internal retained authority for retrying an unconfirmed owned startup cleanup. */
+export class LocalForwardCleanupError extends Error {
+    forward;
+    constructor(forward, cause) {
+        super('The owned local computer forward requires cleanup recovery', { cause });
+        this.forward = forward;
+    }
+}
+async function removeIfPresent(path, remove) {
+    try {
+        await remove(path);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+}
+async function reservePort() {
+    const server = createServer();
+    return await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            const address = server.address();
+            server.close((error) => {
+                if (error)
+                    reject(error);
+                else if (!address || typeof address === 'string')
+                    reject(new Error('No local forwarding port'));
+                else
+                    resolve(address.port);
+            });
+        });
+    });
+}
+/** An owned loopback tunnel to an already verified local WSL machine only. */
+export async function startLocalSshForward(options) {
+    options.signal?.throwIfAborted();
+    if (!/^ssh-ed25519 [A-Za-z0-9+/=]+$/.test(options.hostPublicKey))
+        throw new Error('The registered local machine did not provide its SSH host public key');
+    const ports = await Promise.all(options.ports.map(() => reservePort()));
+    const directory = await mkdtemp(join(tmpdir(), 'namzu-pal-forward-'));
+    const knownHosts = join(directory, 'known_hosts');
+    await writeFile(knownHosts, `[127.0.0.1]:${options.port} ${options.hostPublicKey}\n`, {
+        mode: 0o600,
+        flag: 'wx',
+    });
+    const child = spawn(win32.join(process.env.SystemRoot ?? 'C:\\Windows', 'System32', 'OpenSSH', 'ssh.exe'), [
+        '-N',
+        '-T',
+        '-v',
+        '-F',
+        'NUL',
+        '-o',
+        'BatchMode=yes',
+        '-o',
+        'ExitOnForwardFailure=yes',
+        '-o',
+        'StrictHostKeyChecking=yes',
+        '-o',
+        `UserKnownHostsFile=${knownHosts}`,
+        '-o',
+        'HostKeyAlgorithms=ssh-ed25519',
+        '-o',
+        'IdentitiesOnly=yes',
+        '-o',
+        'ProxyCommand=none',
+        '-o',
+        'ProxyJump=none',
+        '-i',
+        options.identity,
+        '-p',
+        String(options.port),
+        ...ports.flatMap((port, index) => [
+            '-L',
+            `127.0.0.1:${port}:127.0.0.1:${options.ports[index]}`,
+        ]),
+        `${options.user}@127.0.0.1`,
+    ], { windowsHide: true, stdio: ['ignore', 'ignore', 'pipe'] });
+    let ended = false;
+    let closing = false;
+    let ready = false;
+    let cleanup;
+    const closed = new Promise((resolve) => {
+        child.once('close', () => {
+            ended = true;
+            if (ready && !closing) {
+                try {
+                    options.onLost();
+                }
+                catch {
+                    // A host callback must not crash the process-close event dispatch.
+                    // The ended handle remains fenced and close() retains recovery.
+                }
+            }
+            resolve();
+        });
+    });
+    const close = () => {
+        if (cleanup)
+            return cleanup;
+        closing = true;
+        cleanup = (async () => {
+            if (!ended &&
+                child.pid !== undefined &&
+                child.exitCode === null &&
+                child.signalCode === null &&
+                !child.kill())
+                throw new Error('The owned local computer forwarding process could not be stopped');
+            await closed;
+            await removeIfPresent(knownHosts, unlink);
+            await removeIfPresent(directory, rmdir);
+        })().catch((error) => {
+            cleanup = undefined;
+            throw error;
+        });
+        return cleanup;
+    };
+    const forward = {
+        ports,
+        assertAlive() {
+            if (ended || closing)
+                throw new Error('The local computer forwarding process has ended');
+        },
+        close,
+    };
+    try {
+        await new Promise((resolve, reject) => {
+            let diagnostic = '';
+            const opened = new Set();
+            const detach = () => {
+                options.signal?.removeEventListener('abort', abort);
+                child.stderr.removeListener('data', data);
+                child.removeListener('close', fail);
+            };
+            const abort = () => {
+                detach();
+                reject(options.signal?.reason);
+            };
+            const fail = () => {
+                detach();
+                reject(new Error('The verified local machine SSH forwarding process failed'));
+            };
+            const data = (chunk) => {
+                diagnostic = (diagnostic + chunk.toString('utf8')).slice(-16_384);
+                for (const port of ports)
+                    if (diagnostic.includes(`Local forwarding listening on 127.0.0.1 port ${port}.`))
+                        opened.add(port);
+                if (opened.size === ports.length) {
+                    ready = true;
+                    detach();
+                    resolve();
+                }
+            };
+            child.stderr.on('data', data);
+            child.once('error', fail);
+            child.once('close', fail);
+            options.signal?.addEventListener('abort', abort, { once: true });
+            if (options.signal?.aborted)
+                abort();
+        }).finally(() => child.stderr.resume());
+        options.signal?.throwIfAborted();
+        return forward;
+    }
+    catch (error) {
+        try {
+            await close();
+        }
+        catch {
+            throw new LocalForwardCleanupError(forward, error);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=ssh-forward.js.map

package/dist/local-virtual-computer/ssh-forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh-forward.js","sourceRoot":"","sources":["../../src/local-virtual-computer/ssh-forward.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAGvC,qFAAqF;AACrF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAExC;IADV,YACU,OAAyB,EAClC,KAAc;QAEd,KAAK,CAAC,4DAA4D,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QAHrE,YAAO,GAAP,OAAO,CAAkB;IAInC,CAAC;CACD;AAED,KAAK,UAAU,eAAe,CAC7B,IAAY,EACZ,MAAuC;IAEvC,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IACpE,CAAC;AACF,CAAC;AAYD,KAAK,UAAU,WAAW;IACzB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAA;IAC7B,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;YAChC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtB,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAA;qBACnB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAC/C,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAA;;oBACzC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YAC3B,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAA+B;IAE/B,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAChC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAA;IACxF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IACvE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAA;IACrE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;IACjD,MAAM,SAAS,CAAC,UAAU,EAAE,eAAe,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,aAAa,IAAI,EAAE;QACrF,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI;KACV,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,KAAK,CAClB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,EACrF;QACC,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,KAAK;QACL,IAAI;QACJ,eAAe;QACf,IAAI;QACJ,0BAA0B;QAC1B,IAAI;QACJ,2BAA2B;QAC3B,IAAI;QACJ,sBAAsB,UAAU,EAAE;QAClC,IAAI;QACJ,+BAA+B;QAC/B,IAAI;QACJ,oBAAoB;QACpB,IAAI;QACJ,mBAAmB;QACnB,IAAI;QACJ,gBAAgB;QAChB,IAAI;QACJ,OAAO,CAAC,QAAQ;QAChB,IAAI;QACJ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QACpB,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACjC,IAAI;YACJ,aAAa,IAAI,cAAc,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;SACrD,CAAC;QACF,GAAG,OAAO,CAAC,IAAI,YAAY;KAC3B,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAC1D,CAAA;IACD,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,IAAI,OAAkC,CAAA;IACtC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,KAAK,GAAG,IAAI,CAAA;YACZ,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACJ,OAAO,CAAC,MAAM,EAAE,CAAA;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACR,mEAAmE;oBACnE,gEAAgE;gBACjE,CAAC;YACF,CAAC;YACD,OAAO,EAAE,CAAA;QACV,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,GAAkB,EAAE;QACjC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,OAAO,GAAG,IAAI,CAAA;QACd,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACrB,IACC,CAAC,KAAK;gBACN,KAAK,CAAC,GAAG,KAAK,SAAS;gBACvB,KAAK,CAAC,QAAQ,KAAK,IAAI;gBACvB,KAAK,CAAC,UAAU,KAAK,IAAI;gBACzB,CAAC,KAAK,CAAC,IAAI,EAAE;gBAEb,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACpF,MAAM,MAAM,CAAA;YACZ,MAAM,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzC,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;QACxC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7B,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,KAAK,CAAA;QACZ,CAAC,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IACf,CAAC,CAAA;IACD,MAAM,OAAO,GAAqB;QACjC,KAAK;QACL,WAAW;YACV,IAAI,KAAK,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACzF,CAAC;QACD,KAAK;KACL,CAAA;IACD,IAAI,CAAC;QACJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,UAAU,GAAG,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;YAChC,MAAM,MAAM,GAAG,GAAG,EAAE;gBACnB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;gBACnD,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;gBACzC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACpC,CAAC,CAAA;YACD,MAAM,KAAK,GAAG,GAAG,EAAE;gBAClB,MAAM,EAAE,CAAA;gBACR,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC/B,CAAC,CAAA;YACD,MAAM,IAAI,GAAG,GAAG,EAAE;gBACjB,MAAM,EAAE,CAAA;gBACR,MAAM,CAAC,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC,CAAA;YAC9E,CAAC,CAAA;YACD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC9B,UAAU,GAAG,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAA;gBACjE,KAAK,MAAM,IAAI,IAAI,KAAK;oBACvB,IAAI,UAAU,CAAC,QAAQ,CAAC,gDAAgD,IAAI,GAAG,CAAC;wBAC/E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAClB,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;oBAClC,KAAK,GAAG,IAAI,CAAA;oBACZ,MAAM,EAAE,CAAA;oBACR,OAAO,EAAE,CAAA;gBACV,CAAC;YACF,CAAC,CAAA;YACD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACzB,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAChE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,KAAK,EAAE,CAAA;QACrC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QACvC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAChC,OAAO,OAAO,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,KAAK,EAAE,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACnD,CAAC;QACD,MAAM,KAAK,CAAA;IACZ,CAAC;AACF,CAAC"}

package/dist/local-virtual-computer/wslc-engine.d.ts

@@ -0,0 +1,27 @@
+import { type LocalComputerCommandRunner, type LocalComputerSetupCode, LocalComputerSetupError, type LocalEngine } from './engine.js';
+/** The oldest wslc runtime the provider is verified against. */
+export declare const WSLC_MINIMUM_VERSION: readonly [2, 9, 3];
+export interface LocalWslcEngineOptions {
+    /** Path to wslc.exe. Defaults to the WSL install directory, then PATH. */
+    readonly wslcBinary?: string;
+    readonly runner?: LocalComputerCommandRunner;
+}
+export declare function wslcSetupError(code: LocalComputerSetupCode, cause?: unknown): LocalComputerSetupError;
+/**
+ * Turn the machine-readable codes of a failed wslc command into a typed
+ * setup error. Anything unrecognised stays an ordinary failure.
+ */
+export declare function mapWslcFailure(error: unknown): LocalComputerSetupError | undefined;
+/** Parse the first line of `wslc version`, for example `wslc 3.0.1.0`. */
+export declare function parseWslcVersion(output: string): [number, number, number] | undefined;
+export interface WslcHost {
+    readonly platform?: NodeJS.Platform;
+    readonly env?: NodeJS.ProcessEnv;
+    readonly exists?: (path: string) => Promise<boolean>;
+}
+/**
+ * Find a working wslc and prove its session starts. Never installs or updates
+ * anything: setup is a separate, consented operation.
+ */
+export declare function resolveLocalWslcEngine(options: LocalWslcEngineOptions, signal?: AbortSignal, host?: WslcHost): Promise<LocalEngine>;
+//# sourceMappingURL=wslc-engine.d.ts.map

package/dist/local-virtual-computer/wslc-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wslc-engine.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/wslc-engine.ts"],"names":[],"mappings":"AAEA,OAAO,EAEN,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC3B,uBAAuB,EACvB,KAAK,WAAW,EAEhB,MAAM,aAAa,CAAA;AAEpB,gEAAgE;AAChE,eAAO,MAAM,oBAAoB,oBAAqB,CAAA;AAEtD,MAAM,WAAW,sBAAsB;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAA;CAC5C;AAaD,wBAAgB,cAAc,CAAC,IAAI,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,OAAO,2BAE3E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,GAAG,SAAS,CAYlF;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAIrF;AAkBD,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAA;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACpD;AAcD;;;GAGG;AACH,wBAAsB,sBAAsB,CAC3C,OAAO,EAAE,sBAAsB,EAC/B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,QAAa,GACjB,OAAO,CAAC,WAAW,CAAC,CAqBtB"}

package/dist/local-virtual-computer/wslc-engine.js

@@ -0,0 +1,98 @@
+import { access } from 'node:fs/promises';
+import { win32 } from 'node:path';
+import { LocalCommandError, LocalComputerSetupError, nodeCommandRunner, } from './engine.js';
+/** The oldest wslc runtime the provider is verified against. */
+export const WSLC_MINIMUM_VERSION = [2, 9, 3];
+const MESSAGES = {
+    'engine-missing': 'Linux container support is not installed on this PC.',
+    'engine-too-old': 'Linux container support on this PC is too old for Namzu.',
+    'virtualization-off': 'This PC has virtualization switched off. Turn it on in the PC startup settings, then try again.',
+    'blocked-by-policy': 'Your organisation does not allow Linux containers on this PC.',
+    'image-missing': 'The Pal computer is not set up on this PC yet. Namzu sets it up; finish the setup from the Pal computer and try again.',
+    'sdk-mismatch': "Namzu needs an update to work with this version of Windows' Linux support.",
+};
+export function wslcSetupError(code, cause) {
+    return new LocalComputerSetupError(MESSAGES[code], code, cause ? { cause } : undefined);
+}
+/**
+ * Turn the machine-readable codes of a failed wslc command into a typed
+ * setup error. Anything unrecognised stays an ordinary failure.
+ */
+export function mapWslcFailure(error) {
+    if (error instanceof LocalComputerSetupError)
+        return undefined;
+    const codes = new Set(error instanceof LocalCommandError ? error.errorCodes : []);
+    if (codes.has('0x80370102') || codes.has('HCS_E_HYPERV_NOT_INSTALLED'))
+        return wslcSetupError('virtualization-off', error);
+    if (codes.has('0x8004060C') || codes.has('WSLC_E_CONTAINER_DISABLED'))
+        return wslcSetupError('blocked-by-policy', error);
+    if (codes.has('0x8004060B') || codes.has('WSLC_E_SDK_UPDATE_NEEDED'))
+        return wslcSetupError('sdk-mismatch', error);
+    if (codes.has('WSLC_E_IMAGE_NOT_FOUND'))
+        return wslcSetupError('image-missing', error);
+    if (codes.has('ENOENT'))
+        return wslcSetupError('engine-missing', error);
+    return undefined;
+}
+/** Parse the first line of `wslc version`, for example `wslc 3.0.1.0`. */
+export function parseWslcVersion(output) {
+    const match = /^\s*wslc\s+(\d+)\.(\d+)\.(\d+)/im.exec(output);
+    if (!match)
+        return undefined;
+    return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+function atLeast(found, floor) {
+    for (let i = 0; i < floor.length; i++) {
+        if ((found[i] ?? 0) !== floor[i])
+            return (found[i] ?? 0) > (floor[i] ?? 0);
+    }
+    return true;
+}
+async function exists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function resolveBinary(options, host) {
+    if (options.wslcBinary)
+        return options.wslcBinary;
+    const platform = host.platform ?? process.platform;
+    const env = host.env ?? process.env;
+    const programFiles = env.ProgramW6432 ?? env.ProgramFiles;
+    if (platform === 'win32' && programFiles) {
+        const installed = win32.join(programFiles, 'WSL', 'wslc.exe');
+        if (await (host.exists ?? exists)(installed))
+            return installed;
+    }
+    return 'wslc';
+}
+/**
+ * Find a working wslc and prove its session starts. Never installs or updates
+ * anything: setup is a separate, consented operation.
+ */
+export async function resolveLocalWslcEngine(options, signal, host = {}) {
+    const binary = await resolveBinary(options, host);
+    const runner = options.runner ?? nodeCommandRunner;
+    const run = async (args, call) => {
+        try {
+            return await runner.run(binary, args, { ...call, env: { ...process.env, ...call?.env } });
+        }
+        catch (error) {
+            throw mapWslcFailure(error) ?? error;
+        }
+    };
+    const version = parseWslcVersion(await run(['version'], { signal }));
+    if (!version)
+        throw wslcSetupError('engine-missing');
+    if (!atLeast(version, WSLC_MINIMUM_VERSION))
+        throw new LocalComputerSetupError(`Linux container support on this PC (${version.join('.')}) is too old; ${WSLC_MINIMUM_VERSION.join('.')} or newer is required.`, 'engine-too-old');
+    // The first command that needs the session starts its virtual machine, so
+    // this is where "virtualization is off" and "blocked by policy" surface.
+    await run(['ps', '-a', '-q'], { signal });
+    return { endpoint: 'wslc://local', dialect: 'wslc', run };
+}
+//# sourceMappingURL=wslc-engine.js.map

package/dist/local-virtual-computer/wslc-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wslc-engine.js","sourceRoot":"","sources":["../../src/local-virtual-computer/wslc-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACjC,OAAO,EACN,iBAAiB,EAGjB,uBAAuB,EAEvB,iBAAiB,GACjB,MAAM,aAAa,CAAA;AAEpB,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAU,CAAA;AAQtD,MAAM,QAAQ,GAA2C;IACxD,gBAAgB,EAAE,sDAAsD;IACxE,gBAAgB,EAAE,0DAA0D;IAC5E,oBAAoB,EACnB,iGAAiG;IAClG,mBAAmB,EAAE,+DAA+D;IACpF,eAAe,EACd,wHAAwH;IACzH,cAAc,EAAE,4EAA4E;CAC5F,CAAA;AAED,MAAM,UAAU,cAAc,CAAC,IAA4B,EAAE,KAAe;IAC3E,OAAO,IAAI,uBAAuB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC5C,IAAI,KAAK,YAAY,uBAAuB;QAAE,OAAO,SAAS,CAAA;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,YAAY,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACjF,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACrE,OAAO,cAAc,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;IACnD,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC;QACpE,OAAO,cAAc,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAA;IAClD,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACnE,OAAO,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IAC7C,IAAI,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC;QAAE,OAAO,cAAc,CAAC,eAAe,EAAE,KAAK,CAAC,CAAA;IACtF,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,cAAc,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACvE,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC9C,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,OAAO,CAAC,KAAwB,EAAE,KAAwB;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IACjC,IAAI,CAAC;QACJ,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,IAAI,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC;AAQD,KAAK,UAAU,aAAa,CAAC,OAA+B,EAAE,IAAc;IAC3E,IAAI,OAAO,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,UAAU,CAAA;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACnC,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAA;IACzD,IAAI,QAAQ,KAAK,OAAO,IAAI,YAAY,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,CAAA;QAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAC/D,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,OAA+B,EAC/B,MAAoB,EACpB,OAAiB,EAAE;IAEnB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAA;IAClD,MAAM,GAAG,GAAuB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,CAAC;YACJ,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAA;QACrC,CAAC;IACF,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IACpE,IAAI,CAAC,OAAO;QAAE,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAAA;IACpD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,CAAC;QAC1C,MAAM,IAAI,uBAAuB,CAChC,uCAAuC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAC/H,gBAAgB,CAChB,CAAA;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACzC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;AAC1D,CAAC"}

package/local-computer/Dockerfile

@@ -0,0 +1,99 @@
+# Build explicitly, one stage at a time (the build context is packages/sandbox):
+#   base      docker build -f packages/sandbox/local-computer/Dockerfile --target base -t namzu-local-computer:2 packages/sandbox
+#   creative  docker build -f packages/sandbox/local-computer/Dockerfile --target creative -t namzu-local-computer:2-creative packages/sandbox
+# `node packages/sandbox/local-computer/build-image.mjs` builds, saves and compresses a stage.
+# A Linux guest desktop inside a container; it shares the engine's kernel.
+#
+# base      the light Pal computer: desktop, browser, Terminal, Files, Text Editor, guest worker.
+# creative  FROM base, adds the heavy creative and engineering applications and their launchers.
+
+FROM docker.io/library/node:22-bookworm-slim AS base
+
+LABEL org.namzu.local-computer.protocol="1"
+ENV DEBIAN_FRONTEND=noninteractive LANG=C.UTF-8 LC_ALL=C.UTF-8
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    xvfb openbox chromium xdotool maim xterm dbus-x11 x11vnc \
+    tint2 pcmanfm hsetroot adwaita-icon-theme \
+    mousepad libgl1-mesa-dri \
+    fonts-dejavu fonts-noto-color-emoji ca-certificates \
+    bash curl git ripgrep python3 dumb-init file \
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd --gid 1001 namzu \
+    && useradd --uid 1001 --gid 1001 --create-home --shell /bin/bash namzu \
+    && mkdir -p /home/namzu/workspace /home/namzu/.config/chromium \
+    && chown -R 1001:1001 /home/namzu
+
+# Authenticated binary WebSocket transport only; VNC input remains disabled.
+RUN npm install --prefix /opt/namzu-computer --omit=dev --ignore-scripts \
+    --no-audit --no-fund ws@8.21.3
+
+COPY worker/server.js /opt/namzu-computer/execution-worker.cjs
+COPY local-computer/desktop-worker.cjs /opt/namzu-computer/desktop-worker.cjs
+COPY local-computer/entrypoint.sh /opt/namzu-computer/entrypoint.sh
+COPY local-computer/home.html /opt/namzu-computer/new-tab/home.html
+COPY local-computer/new-tab /opt/namzu-computer/new-tab
+COPY local-computer/app-catalog.cjs local-computer/app-native-host.cjs local-computer/prepare-home.cjs local-computer/browser-home.cjs /opt/namzu-computer/
+COPY local-computer/tint2rc /opt/namzu-computer/tint2rc
+COPY local-computer/openbox-rc.xml /opt/namzu-computer/openbox-rc.xml
+
+# Catalogue/icon assets come only from installed Debian desktop entries, for the
+# applications this stage installs. The native bridge is accepted solely from the
+# bundled, fixed-id New Tab extension. Setuid and setgid bits are removed: nothing
+# in the guest needs them, the worker runs as an unprivileged user, and wslc does not
+# offer no-new-privileges.
+RUN chmod 0755 /opt/namzu-computer/app-native-host.cjs \
+    && node /opt/namzu-computer/prepare-home.cjs --stage base \
+    && find / -xdev -type f -perm /6000 -exec chmod a-s {} +
+
+ENV HOME=/home/namzu DISPLAY=:99 GTK_THEME=Adwaita:dark \
+    NAMZU_SANDBOX_WORKSPACE=/home/namzu/workspace \
+    NAMZU_SANDBOX_READ_ROOTS=/home/namzu \
+    NAMZU_SANDBOX_WRITE_ROOTS=/home/namzu \
+    NAMZU_SANDBOX_IDLE_TIMEOUT_MS=0 \
+    NAMZU_SANDBOX_NORMAL_EXIT_POLICY=computer-lifetime \
+    NAMZU_SANDBOX_MAX_TIMEOUT_MS=2147000000 \
+    NAMZU_SANDBOX_PORT=2024
+
+WORKDIR /home/namzu/workspace
+USER 1001:1001
+EXPOSE 2024 2025
+ENTRYPOINT ["/usr/bin/dumb-init", "--single-child", "--", "/bin/sh", "/opt/namzu-computer/entrypoint.sh"]
+
+FROM base AS creative
+USER root
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    blender freecad gimp inkscape libreoffice-draw \
+    openscad kdenlive frei0r-plugins godot3 aisleriot qgis kicad paraview \
+    && rm -rf /var/lib/apt/lists/*
+
+# Use checksum-pinned supported application releases rather than Bookworm's
+# Godot 3 and Blender 3 launchers. Retain the distribution tools for explicit
+# legacy-project use; normal launches and the home catalogue use these binaries.
+RUN mkdir -p /opt/namzu-apps \
+    && curl --fail --location --retry 3 --output /tmp/godot.zip \
+       https://github.com/godotengine/godot-builds/releases/download/4.7.2-stable/Godot_v4.7.2-stable_linux.x86_64.zip \
+    && printf '%s  %s\n' cadd3204e728a35d3f13adb7fd0d7902636b79f6b95c40c265eb73b6c35329e4 /tmp/godot.zip | sha256sum --check --strict \
+    && python3 -c "import zipfile; zipfile.ZipFile('/tmp/godot.zip').extractall('/opt/namzu-apps/godot-4.7.2')" \
+    && chmod 0755 /opt/namzu-apps/godot-4.7.2/Godot_v4.7.2-stable_linux.x86_64 \
+    && ln -s /opt/namzu-apps/godot-4.7.2/Godot_v4.7.2-stable_linux.x86_64 /usr/local/bin/godot \
+    && ln -s /opt/namzu-apps/godot-4.7.2/Godot_v4.7.2-stable_linux.x86_64 /usr/local/bin/godot4 \
+    && curl --fail --location --retry 3 --output /tmp/blender.tar.xz \
+       https://download.blender.org/release/Blender5.2/blender-5.2.2-linux-x64.tar.xz \
+    && printf '%s  %s\n' 84098912789dc450e95697c4184fb8a90acbe5111c2ba4aede3fecb57806a168 /tmp/blender.tar.xz | sha256sum --check --strict \
+    && python3 -c "import tarfile; tarfile.open('/tmp/blender.tar.xz').extractall('/opt/namzu-apps')" \
+    && ln -s /opt/namzu-apps/blender-5.2.2-linux-x64/blender /usr/local/bin/blender \
+    && /usr/local/bin/godot4 --version \
+    && /usr/local/bin/blender --version \
+    && rm /tmp/godot.zip /tmp/blender.tar.xz
+
+# Blender MCP automatic addon update checks and telemetry stay off in the guest.
+ENV BLENDERMCP_NO_UPDATE_CHECK=1 BLENDER_MCP_DISABLE_TELEMETRY=1
+
+# The catalogue now lists the creative applications too; setuid bits come off again
+# because the packages above installed new ones.
+RUN node /opt/namzu-computer/prepare-home.cjs --stage creative \
+    && find / -xdev -type f -perm /6000 -exec chmod a-s {} +
+
+USER 1001:1001