@threadedstack/wmd-web 0.0.0-stage → 0.1.13

package/RELEASE.json

@@ -0,0 +1,123 @@
+{
+  "name": "wmd-web",
+  "version": "0.3.1",
+  "commit": "23bf0595198cec6c2027017049b2caa39753efc2",
+  "previous": "wmd-web-v0.1.0",
+  "decisions": [
+    "D-486",
+    "D-488",
+    "D-494",
+    "D-498",
+    "D-505",
+    "D-506",
+    "D-507",
+    "D-509",
+    "D-511",
+    "D-516",
+    "D-518",
+    "D-531",
+    "D-533",
+    "D-539",
+    "D-542"
+  ],
+  "vmSources": "f638fbdada4ccae26c12334b851e12244c1985d8",
+  "guest": {
+    "arch": "arm64",
+    "files": {
+      "vm.wasm": {
+        "sha256": "f7affc474658fdfdc50e96c29a224eed1520ea69b426d6427fbc058eb141091a",
+        "bytes": 1548267
+      },
+      "Image": {
+        "sha256": "a6b3209cf69d5bc1dacf0f3ed67f92c535dbb4108d67b47091c2aef87c6d7b04",
+        "bytes": 39047176
+      },
+      "Image-4k": {
+        "sha256": "8ff6e338a0b42d9f774b35423e0e7f9d7f779c635446e8de2a3beb83d3518f8a",
+        "bytes": 38828040
+      },
+      "initramfs.cpio.gz": {
+        "sha256": "38101c6b9bd0f8ec8f1b0aea99046d80d36669052794fa8e0368b6a1743285c1",
+        "bytes": 4667433
+      }
+    }
+  },
+  "files": {
+    "README.md": "e26f6e48262e55f34f7bb2c3e5b4a91163aac356e3f07b5f82202b6ca16e10a3",
+    "export-page/coi-sw.js": "0300e670b413cb2e0aae35843fc583546bbf6687df971ab6df41cfa3b0d494d7",
+    "export-page/index.html": "f5450c89e63601bbbbffef421f03491b231d1f143070012c1c5315d4b0059f43",
+    "export-page/run.css": "b57adf1e76553549c1f89ff157b7973409dedc21889cd3932948cd05b51adc6f",
+    "export-page/run.js": "717636a632a40469106ddf1383e198eaac5d83651b5866d0699ec04b82462b7f",
+    "guest/arm64/Image": "a6b3209cf69d5bc1dacf0f3ed67f92c535dbb4108d67b47091c2aef87c6d7b04",
+    "guest/arm64/Image-4k": "8ff6e338a0b42d9f774b35423e0e7f9d7f779c635446e8de2a3beb83d3518f8a",
+    "guest/arm64/initramfs.cpio.gz": "38101c6b9bd0f8ec8f1b0aea99046d80d36669052794fa8e0368b6a1743285c1",
+    "guest/arm64/vm.wasm": "f7affc474658fdfdc50e96c29a224eed1520ea69b426d6427fbc058eb141091a",
+    "package.json": "5ec889bd829e3e0a021e042e59eaf4f832280ac2135ce8ef160582173aa9dce3",
+    "src/base.js": "982f8e46dbb727ec542a494ebdb884ccd19a31ff4e091425b2d1fc01b0d4754a",
+    "src/boot.js": "114f9cf0561bca17b042c8db2e72e6984f7a55fd8d19700730895935f226cc77",
+    "src/calib-worker.js": "3d610591a1b3b58f59c3a2ab457f43c90727d95973cd43055b3b73b76180611d",
+    "src/fs/9p/codec.js": "69711eb4ebc84eff39256138169fe18f5a5066d6cd9e4ff2daf61c65380d7ef7",
+    "src/fs/9p/server.js": "da0ba00ebb5522161bb0ef7cd94bfc9616e342bf865633dfef0ba5bc67627d7a",
+    "src/fs/errno.js": "b1f18bcd7b565be7c6c80084d87333e58fbaba2e71d81e1c8573ac62754b2530",
+    "src/fs/graph.js": "d24a247c7a39668078913e763e0a55520cf6fd74807bb5cd93e3f49f9b90b45b",
+    "src/fs/overlay.js": "9f24336b8686c40fcab1c8e6bfa68776b9067fb1a816c051de484603ede9981e",
+    "src/fs/pack-write.js": "3f1bc479bcac980ab568b24825eb813881858b14b7bb80ded618f7bd560cde90",
+    "src/fs/pack.js": "680ca17a4228f0dfaf1607a1f821755e9a36bd72cb28824a6d21b0906b8e7300",
+    "src/fs/seed.js": "1cd2765e5d28e961bc4e81b41898f768a63e24feaf44e0aa42bd23e5cb910a74",
+    "src/fs/svc-snapshot.js": "eae82a6e136f9430680197c617601028da35cbe8786df39d6cab28280a2f9a7c",
+    "src/fs/upper-pack.js": "737a7e2bb5aac0ff774645db5789d699adfff263ca6f979e6687a9183a47f9dc",
+    "src/host/base-cache.js": "e0a9ea65e4eb9e30e7f78b28d9e5653b395f8eaa6c5e4c75b92f123c8d6a76a9",
+    "src/host/base-file.js": "edb47c1eeb6b1cec627fa5894512185336b15d3f5db96a7151a8a57b34b4a2e8",
+    "src/host/base-io.js": "cdd049875dce9f1417f28b27efa2c6f494cbe2a49851249150d0c1ec871a8b59",
+    "src/host/boot-events.js": "a6567c889fa1e95ad7e917107a2593f03d14cc921827616368b3417de96faad2",
+    "src/host/chan-service.js": "f131746c6c03167b5968dfd430d797c4717c7c332563de475e62c6ed84acecbe",
+    "src/host/chan-services.js": "64f5cb8d05379618011f5e840830f196013f3134ac0523fed1d7a6969b4d322e",
+    "src/host/chan.js": "43104dcdd4d17d13f55a71906b398bdb52d9e96c6fca239310f2ee1ccbb4d4ad",
+    "src/host/ckpt-file.js": "da7938fa640a062e77bdfb59caad5b3b1fcbf6150e3220de3be23f253f4c4497",
+    "src/host/ckpt-io.js": "3fbe74f0254c597f10d088c85e8ba72725502d86ae4dd8c6d2bf0821a93c873f",
+    "src/host/ckpt-point.js": "3cc9ec778f131fbfd17a788709f01f096719f3ef81490a7be36a7fc1a422aef4",
+    "src/host/ckpt-save.js": "e222571033ae74a4439596c5e90e03b2aa9a5516665dd290f8dd243712294523",
+    "src/host/ckpt.js": "17c3e3f39c7e4ab9b51a4d121d1017d943257f95357330d8f21140011562d0db",
+    "src/host/clock.js": "aba6af3a8b1a985ae340892222e4b482d33afe20f5c8b3a4c7403ce87d1e247c",
+    "src/host/ctl.js": "a2293b8cb53463323999e0d74277eeab6ebc580625db81b324ecbe2e07ddd98d",
+    "src/host/errno.js": "26021d85962084be2c43c98fb3accafc2a8f11fbf3c8a5b8d484bd6a088ae4db",
+    "src/host/fs.js": "d6753f74db35b7b01baa8709fc7fdcdfc8d638dfe42f454b0a833b22111e8f4a",
+    "src/host/gcnudge.js": "4a6569cb73ae24a11fc4ac8c467380bd9efba0bb5fa9867b797bc4f153ab15ab",
+    "src/host/i64shim.js": "6c7cbe226c1596acc2ef084b1c7f817b220d43a17fb927d288246257619d5301",
+    "src/host/jit-cache.js": "c31311029de8ee20c0ba6f6b09042f8b91ab08e07134e5a6b1a4de3a1d492c58",
+    "src/host/jit-hub-core.js": "f8d39dd0e4cbd42568bf56a8a7105f321d33bcf2d5faf8756d45a1ed692bd344",
+    "src/host/jit-hub.js": "cf3fc9f9d4e3fb50c41d6de5e2523f380d3c6c1feaf61c15d90cde89aec2f4c3",
+    "src/host/jit-snap.js": "3932f36047c9edeb7f59282d1c37fef19c8f5a9fe4bd0192fb93aa64030fe51d",
+    "src/host/jit.js": "cb39f90df63752a7d4077f6972731cf4b1d8026cb4ca594e32f9203be6fe1edb",
+    "src/host/layout.js": "d5bc5aa9292630b204438df5d6278fda6daa2a65acc061e1c57e0272b32fecc8",
+    "src/host/monitor.js": "ae1741ba35668bcc6192642246494433b175668933921634c699af5a0a69acc0",
+    "src/host/p9mount.js": "43246601fc1e27d5294742e4482ed166a50c665cb5f526c3646a47dd27e06150",
+    "src/host/ram-mem.js": "bf4036d5d12be1d5d2f5223e526b0b8e225bc702ae7e60a2a59fdfe9fbbb49e3",
+    "src/host/stdio.js": "43973675578eb1d324c2c6d7078e51a6a1f121190ada5ef14a5551364b8c7f5e",
+    "src/host/threads.js": "952381940e7f43114867e9a9714528f2f20c8064b6b0f2018ab075128dc601be",
+    "src/host/wasi.js": "fbafa239b8fb4083f7e8c910b1adab38901e8e7cffd247284a9abb2847eaf4bd",
+    "src/host/wmd-imports.js": "094f994758c239b75177781c0613decbbd926090b0e8974163ce7caf8a99234d",
+    "src/host/yamux.js": "f4044f14f7e836224bdb4b1e53e59c565ee478b83b2e428fffb9f7a048768f79",
+    "src/image-files.js": "539856f3991b9f89202dd04ec3816ba8bce7787034ab810534c5170a205ffde7",
+    "src/net/dhcp-dns.js": "fdfa7c7d5cbbb4a8774b7dee195bf2df22a0c3fe8f20ac9694b24485fa8f25d5",
+    "src/net/net-worker.js": "0a2ce998f69807e386ded7ff1bee53687a1d59ed76d7ef46e2eb6f958b14ad38",
+    "src/net/packet.js": "d658f26fa84324a88d7dbc26af9c4a9c10e977c3060f16f7db431496eacd1127",
+    "src/net/peer.js": "d83cf85639f6197fe26c877eb79f8c9afc017bf2362dc2b22a8b6bd0f45f3f19",
+    "src/net/proto.js": "abfc8cd6f4331cbc98fcb1b0bba0795ff3042cc7db10476673ead1723249eee0",
+    "src/net/relay-client.js": "4101de76dc0251db46839dc786cce677e4020795adf022bdce14bcf7edf8f864",
+    "src/net/stack.js": "cd451cce7130f08e59cc19c961d2a5fca8416e577a40df1419ab6d5046018891",
+    "src/net/switch.js": "bb047fb1ceeb10a84b5475916ead916362accf0e6f42a86561653dfad0c6c50d",
+    "src/net/wisp-client.js": "51207a1fab6f0d2dc4cada17ecdc202db2ffa95f16c318459be79c0abb919faf",
+    "src/net/wisp-transport.js": "2b71201f3c686078c867e8995bf5c1cd6d47a0d415f476f3a33fbd5729a55f74",
+    "src/net/wisp.js": "f5740bd349cca6ca5bbb03ef392a0b2ce9f23c0ec8e07abe3286329fa209118d",
+    "src/registry/client.js": "fd38550e9afd82c5cb498513d245c33357a71697b3b2e6dd78538934bcc9d879",
+    "src/registry/converter.js": "1fb8294fd5275f6772c27130cc9ba70bd46fafaf440884d42448036618229f37",
+    "src/registry/hub.js": "22323e0f799a7078843514c9f87bbcdaa4173fd991ad4e059377befa773762d4",
+    "src/registry/oci.js": "6a51ea16b34a65c0e732730f3e07d7ad16c50f6943a486ec05ca6aa3e98676a1",
+    "src/registry/pack-worker.js": "fd6798851cb7815dacfcb67fc78c41654209c5504d8fd343aae524e99de1c741",
+    "src/registry/pull.js": "66edf4602aca8d41cc68393d01a2da01c4667de7c493af5ae400e8f249d4e3ae",
+    "src/registry/ref.js": "24038e0fbcb6ac143cb8e8f7b9fac4dd0803d0891961786dc88dba01a4402e7b",
+    "src/registry/wasi-mem.js": "a7f684343010892460db27ee8c1e38e47e797c93dc4ebe4c30185dca6ca56ee2",
+    "src/worker.js": "dda8e216ff774fc6d31ccb55c265f1c560243f872b57bc0affe3075b94bd5b4f"
+  }
+}

package/export-page/coi-sw.js

@@ -0,0 +1,20 @@
+// wmd image export: adds the cross-origin isolation headers (COOP, COEP, CORP) to this folder's
+// own responses, for static hosts that cannot send headers (GitHub Pages). index.html registers
+// it only when the page is not already cross-origin isolated. Other origins are not touched.
+self.addEventListener('install', () => self.skipWaiting())
+self.addEventListener('activate', e => e.waitUntil(self.clients.claim()))
+self.addEventListener('fetch', e => {
+  const r = e.request
+  if (r.cache === 'only-if-cached' && r.mode !== 'same-origin') return
+  if (new URL(r.url).origin !== self.location.origin) return
+  e.respondWith(
+    fetch(r).then(res => {
+      if (res.status === 0) return res
+      const h = new Headers(res.headers)
+      h.set('Cross-Origin-Opener-Policy', 'same-origin')
+      h.set('Cross-Origin-Embedder-Policy', 'require-corp')
+      h.set('Cross-Origin-Resource-Policy', 'same-origin')
+      return new Response(res.body, { status: res.status, statusText: res.statusText, headers: h })
+    }),
+  )
+})

package/export-page/index.html

@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>wmd image</title>
+<link rel="stylesheet" href="./run.css">
+</head>
+<body>
+<header><h1 id="title">wmd image</h1><span id="status">loading</span></header>
+<main>
+  <section><h2>Output</h2><pre id="main"></pre></section>
+  <details><summary>Boot log</summary><pre id="log"></pre><pre id="out"></pre><pre id="err"></pre></details>
+</main>
+<script type="module" src="./run.js"></script>
+</body>
+</html>

package/export-page/run.css

@@ -0,0 +1,10 @@
+:root { color-scheme: light dark; --bg: #fff; --fg: #111; --pane: #f4f4f4; --bad: #b00020; }
+@media (prefers-color-scheme: dark) { :root { --bg: #111; --fg: #ddd; --pane: #1c1c1c; --bad: #ff6b6b; } }
+body { margin: 0; background: var(--bg); color: var(--fg); font: 14px system-ui, sans-serif; }
+header { padding: 8px 16px; display: flex; gap: 16px; align-items: baseline; flex-wrap: wrap; }
+h1 { font-size: 18px; margin: 0; overflow-wrap: anywhere; }
+h2 { font-size: 13px; margin: 8px 0 4px; }
+main { padding: 0 16px 16px; }
+pre { background: var(--pane); padding: 8px; margin: 0 0 8px; max-height: 60vh; overflow: auto; white-space: pre-wrap; word-break: break-all; font: 12px ui-monospace, monospace; }
+summary { cursor: pointer; margin: 8px 0; }
+.error { color: var(--bad); }

package/export-page/run.js

@@ -0,0 +1,236 @@
+// wmd image export --format web (2.7): the runner page. It boots one exported image from this
+// folder alone, with no service of wmd's: page/b7.js's boot path without the registry proxy.
+//
+//   wmd-web.json          what was exported; the guest files' sha256 (checked here before boot)
+//   idx/..., blobs/...    the image indexes and packs (getImage with pull: 'never', fetchPacks)
+//   guest/arm64/...       vm.wasm, the kernel and the init, handed to bootWmd as checked bytes
+//
+//   ?ref=REF     the exported image to run (default: the first in wmd-web.json)
+//   ?cmd=STRING  run `/bin/sh -c STRING` instead of the image's entrypoint + cmd
+//   ?argv=JSON   run this argv instead
+//   ?auto=0      do not start
+//   cpus=N (1-8) ram=MiB (128-1536, boot.js's MAX_BROWSER_RAM_MIB)
+//
+// Every URL resolves against the page, so the folder works at a site root or under a sub-path.
+// A host without the cross-origin isolation headers gets them from coi-sw.js (one reload).
+// State for tests: window.wmdExport {status, crossOriginIsolated, ref, index, guest, argv, user,
+// mainOut, mainExit, code, reason, error}.
+
+import { MAX_BROWSER_RAM_MIB, bootWmd, memoryMaxPages, p9MountOptions } from './wmd-web/boot.js'
+import { MAIN_PROC_ID, containerBundle, fillRunRequest } from './wmd-web/host/ctl.js'
+import { openImage, resolveUser } from './wmd-web/image-files.js'
+import { fetchPacks, getImage } from './wmd-web/registry/client.js'
+import { parseRef } from './wmd-web/registry/ref.js'
+
+const ENGINE_APPEND = [
+  'console=ttyAMA0', 'earlycon=pl011,0x9000000', 'rdinit=/sbin/init', 'loglevel=8',
+  'norandmaps', 'print-fatal-signals=1', 'debug.exception-trace=1',
+  'wmd.init', 'wmd.p9tag=wmdroot', 'wmd.control=vport', 'wmd.exit',
+  'initcall_blacklist=virtio_net_driver_init', // no eth0: no network in the browser here
+].join(' ')
+const P9_PORT = 564
+const CONTROL_PORT = 8
+const KEEP = 4 << 20
+const COI_RELOAD = 'wmd-export-coi-reload'
+
+const q = new URLSearchParams(location.search)
+const state = (window.wmdExport = {
+  status: 'idle', crossOriginIsolated: globalThis.crossOriginIsolated === true, ref: null, index: null, guest: null,
+  argv: null, user: null, mainOut: '', mainExit: null, stdout: '', stderr: '', code: null, reason: null, error: null,
+})
+const $ = id => document.getElementById(id)
+const clip = (s, n) => (s.length > n ? s.slice(-n) : s)
+const log = s => ($('log').textContent += `${s}\n`)
+const status = s => ($('status').textContent = s)
+const here = p => new URL(p, document.baseURI)
+const hex = buf => [...new Uint8Array(buf)].map(b => b.toString(16).padStart(2, '0')).join('')
+
+/** Cross-origin isolation, through coi-sw.js when the host does not send the headers. false: the page reloads. */
+async function isolate() {
+  if (globalThis.crossOriginIsolated) {
+    try {
+      sessionStorage.removeItem(COI_RELOAD)
+    } catch {}
+    return true
+  }
+  let reloaded = false
+  try {
+    reloaded = sessionStorage.getItem(COI_RELOAD) === '1'
+  } catch {}
+  if (!('serviceWorker' in navigator)) throw new Error('this page needs cross-origin isolation: the host must send COOP/COEP headers (see README.txt), and this browser has no service workers to add them')
+  if (reloaded) throw new Error('this page is not cross-origin isolated even through coi-sw.js; send the COOP/COEP/CORP headers from the host (see README.txt)')
+  status('adding cross-origin isolation headers (coi-sw.js)...')
+  const reg = await navigator.serviceWorker.register(here('coi-sw.js'), { scope: here('./').pathname })
+  if (!navigator.serviceWorker.controller && !reg.active) {
+    await new Promise((res, rej) => {
+      const t = setTimeout(() => rej(new Error('coi-sw.js did not start within 30 s; send the COOP/COEP/CORP headers from the host (see README.txt)')), 30_000)
+      const w = reg.installing || reg.waiting
+      if (!w) return clearTimeout(t), rej(new Error('coi-sw.js registered but has no worker; send the headers from the host (see README.txt)'))
+      w.addEventListener('statechange', () => {
+        if (w.state === 'activated') clearTimeout(t), res()
+        else if (w.state === 'redundant') clearTimeout(t), rej(new Error('coi-sw.js failed to install; send the COOP/COEP/CORP headers from the host (see README.txt)'))
+      })
+    })
+  }
+  try {
+    sessionStorage.setItem(COI_RELOAD, '1')
+  } catch {}
+  location.reload()
+  return false
+}
+
+/** A whole-number query parameter in [min, max], or def when absent. */
+function int(name, def, min, max) {
+  const v = q.get(name)
+  if (v === null || v === '') return def
+  const n = Number(v)
+  if (!Number.isInteger(n) || n < min || n > max) throw new Error(`?${name}= must be a whole number from ${min} to ${max}`)
+  return n
+}
+
+async function fetchBytes(url) {
+  let res
+  try {
+    res = await fetch(url, { cache: 'no-store' })
+  } catch (e) {
+    throw new Error(`${url.pathname}: unreachable (${e.message})`)
+  }
+  if (!res.ok) throw new Error(`${url.pathname}: HTTP ${res.status}`)
+  return new Uint8Array(await res.arrayBuffer())
+}
+
+/** A guest file, checked against wmd-web.json's size and sha256. */
+async function guestFile(guest, name) {
+  const f = guest.files?.[name]
+  if (!f) throw new Error(`wmd-web.json lists no guest file ${name}`)
+  const b = await fetchBytes(here(f.path))
+  if (b.length !== f.size) throw new Error(`${f.path}: ${b.length} bytes, wmd-web.json says ${f.size}; this folder is incomplete or mixed from two exports`)
+  const got = hex(await crypto.subtle.digest('SHA-256', b))
+  if (got !== f.sha256) throw new Error(`${f.path}: sha256 ${got.slice(0, 12)}, wmd-web.json says ${f.sha256.slice(0, 12)}; refused (a file from another export?)`)
+  return b
+}
+
+async function main() {
+  if (!(await isolate())) return
+  state.crossOriginIsolated = true
+  const base = here('.').pathname.replace(/\/$/, '')
+
+  state.status = 'manifest'
+  const mres = await fetch(here('wmd-web.json'), { cache: 'no-store' })
+  if (!mres.ok) throw new Error(`wmd-web.json: HTTP ${mres.status}; is this an exported folder?`)
+  const man = await mres.json()
+  if (man.schema !== 'wmd-web-export/1') throw new Error(`wmd-web.json: schema ${JSON.stringify(man.schema)}, this page reads wmd-web-export/1`)
+  if (!man.images?.length) throw new Error('wmd-web.json lists no images')
+  let img = man.images[0]
+  if (q.get('ref')) {
+    const want = parseRef(q.get('ref')).ref
+    img = man.images.find(i => i.ref === want)
+    if (!img) throw new Error(`${want} is not in this folder; it has: ${man.images.map(i => i.ref).join(', ')}`)
+  }
+  state.ref = img.ref
+  $('title').textContent = img.ref
+  log(`wmd ${man.wmd?.version || '?'} (${(man.wmd?.commit || 'unknown commit').slice(0, 12)}): ${img.ref} ${img.platform}`)
+
+  state.status = 'files'
+  status(`getting ${img.ref}...`)
+  const kernelName = img.kernel || 'Image'
+  const [index, vmBytes, kernel, initrd] = await Promise.all([
+    getImage(img.ref, { platform: img.platform, pull: 'never', base }),
+    guestFile(man.guest, 'vm.wasm'),
+    guestFile(man.guest, kernelName),
+    guestFile(man.guest, 'initramfs.cpio.gz'),
+  ])
+  state.index = index
+  state.guest = { verified: true, kernel: kernelName }
+  const got = await fetchPacks(index, { base })
+  log(`packs: ${got.packs.length}, ${(got.bytes / 1e6).toFixed(1)} MB, checked`)
+
+  const cfg = index.config || {}
+  const env = cfg.Env || ['PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin']
+  const cwd = cfg.WorkingDir || '/'
+  let argv
+  if (q.get('argv')) {
+    try {
+      argv = JSON.parse(q.get('argv'))
+    } catch {
+      argv = null
+    }
+    if (!Array.isArray(argv) || !argv.every(a => typeof a === 'string')) throw new Error('?argv= must be a JSON array of strings, e.g. ["python3","-c","print(1)"]')
+  }
+  else if (q.get('cmd')) argv = ['/bin/sh', '-c', q.get('cmd')]
+  else argv = [...(cfg.Entrypoint || []), ...(cfg.Cmd || [])]
+  if (!argv.length) throw new Error('the image has no entrypoint or cmd; pass ?cmd=')
+  let user
+  if (cfg.User) {
+    const files = await openImage(got.packs)
+    const u = resolveUser(cfg.User, files.accounts())
+    user = { uid: u.uid, gid: u.gid }
+  }
+  state.argv = argv
+  state.user = user || null
+  const { files } = containerBundle({ args: argv, env, cwd, user })
+  const cpus = int('cpus', 2, 1, 8)
+  const ram = int('ram', 512, 128, MAX_BROWSER_RAM_MIB)
+  const args = [
+    '--machine', '--arch', 'a64', '--board', 'arm64', '--mode', 'jit',
+    '--cpus', String(cpus), '--ram', String(ram),
+    '--kernel', '/g/guest/Image', '--initrd', '/g/guest/initramfs.cpio.gz', '--append', ENGINE_APPEND,
+    '--p9', String(P9_PORT), '--p9-tag', 'wmdroot', '--control', String(CONTROL_PORT),
+  ]
+  state.status = 'booting'
+  status(`booting ${img.ref}...`)
+  const vm = await bootWmd({
+    vmUrl: vmBytes,
+    maxPages: memoryMaxPages(args, 512),
+    files: { 'guest/Image': kernel, 'guest/initramfs.cpio.gz': initrd },
+    args,
+    onStdout: s => {
+      state.stdout = clip(state.stdout + s, KEEP)
+      $('out').textContent = clip($('out').textContent + s, 32 << 10)
+    },
+    onStderr: s => {
+      state.stderr = clip(state.stderr + s, KEEP)
+      $('err').textContent = clip($('err').textContent + s, 32 << 10)
+    },
+    channels: {
+      services: [
+        { port: P9_PORT, kind: '9p', layers: got.packs, at: 'rootfs', files },
+        { port: CONTROL_PORT, kind: 'control', yamux: true },
+      ],
+      collect: [{ port: P9_PORT, path: 'bundle/exitcode' }],
+    },
+  })
+  state.status = 'running'
+  status(`running ${img.ref}`)
+  const ended = vm.exited.then(r => {
+    state.code = r.code
+    state.reason = r.reason
+    return r
+  })
+  const ctl = vm.control
+  await Promise.race([ctl.waitSession(300_000), ended.then(r => Promise.reject(new Error(`the machine ended before the container started: ${r.code} ${r.reason}`)))])
+  const dec = new TextDecoder()
+  const show = b => {
+    state.mainOut += dec.decode(b, { stream: true })
+    $('main').textContent = clip(state.mainOut, 256 << 10)
+  }
+  const proc = ctl.run(fillRunRequest({ id: MAIN_PROC_ID, args: argv, env, cwd }, { p9opts: p9MountOptions() }), { onStdout: show, onStderr: show })
+  state.mainExit = await Promise.race([proc.exited, ended.then(r => ({ code: null, error: `the machine ended first: ${r.code} ${r.reason}` }))])
+  const r = await Promise.race([ended, new Promise(res => setTimeout(() => res(null), 60_000))])
+  if (!r) {
+    vm.stop()
+    await ended
+  }
+  state.status = 'exited'
+  status(`exited ${state.mainExit?.code ?? state.mainExit?.error}`)
+}
+
+if (q.get('auto') !== '0') {
+  main().catch(err => {
+    state.error = `${err.name || 'Error'}: ${err.message}`
+    state.status = 'error'
+    status(`error: ${err.message}`)
+    $('status').className = 'error'
+    state.stderr += `\n[page] ${state.error}\n${err.stack || ''}`
+  })
+}

package/guest/arm64/Image

@@ -0,0 +1,4 @@
+[diffend] Oversized file quarantined before diffing.
+name: package/guest/arm64/Image
+size: 39047176 bytes
+sha256: a6b3209cf69d5bc1dacf0f3ed67f92c535dbb4108d67b47091c2aef87c6d7b04

package/guest/arm64/Image-4k

@@ -0,0 +1,4 @@
+[diffend] Oversized file quarantined before diffing.
+name: package/guest/arm64/Image-4k
+size: 38828040 bytes
+sha256: 8ff6e338a0b42d9f774b35423e0e7f9d7f779c635446e8de2a3beb83d3518f8a

package/package.json

@@ -1,6 +1,38 @@
 {
   "name": "@threadedstack/wmd-web",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.13",
+  "license": "MIT",
+  "homepage": "https://github.com/threadedstack/wmd-releases",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/threadedstack/wmd-releases.git"
+  },
+  "description": "Browser host for wmd's guest vm.wasm (Web Workers + shared memory + WASI preview1)",
+  "wmd": {
+    "tag": "v0.1.13",
+    "commit": "23bf0595198cec6c2027017049b2caa39753efc2",
+    "web": "0.3.1"
+  },
+  "type": "module",
+  "main": "./src/boot.js",
+  "exports": {
+    ".": "./src/boot.js",
+    "./src/*": "./src/*",
+    "./relay/*": "./relay/*",
+    "./page/sw.js": "./page/sw.js",
+    "./export-page/*": "./export-page/*",
+    "./guest/*": "./guest/*",
+    "./wmdpack.wasm": "./wmdpack.wasm",
+    "./RELEASE.json": "./RELEASE.json",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "relay",
+    "page",
+    "export-page",
+    "guest",
+    "wmdpack.wasm",
+    "RELEASE.json"
+  ]
+}