ysk-server-core 1.0.0

package/dist/hosting/vnc/client-profiles.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Outbound VNC client profiles — both paths open in the browser via panel RFB proxy.
+ * - user_reachable: public / user-side targets
+ * - server_proxy: egress via control-plane network (LAN / server-reachable)
+ */
+import type { HostExecutor } from '../../host/executor.js';
+import type { VncClientProfile, VncConnectPath } from './types.js';
+export type VncClientRecord = {
+    id: string;
+    name: string;
+    host: string;
+    port: number;
+    path: VncConnectPath;
+    /** LAN / internal host for server_proxy TCP (optional). */
+    connectHost?: string;
+    /** Optional password stored only when user opted in; prefer empty */
+    password?: string;
+    autostart: boolean;
+    status: 'up' | 'down' | 'unknown' | 'error';
+    pid?: number;
+    localHttpPort?: number;
+    createdAt: string;
+    updatedAt: string;
+};
+export declare function loadClientProfiles(dataDir: string): VncClientRecord[];
+export declare function listClientProfilesPublic(dataDir: string): VncClientProfile[];
+export declare function getClientProfileRecord(dataDir: string, id: string): VncClientRecord | null;
+export declare function createClientProfile(dataDir: string, input: {
+    name: string;
+    host: string;
+    port: number;
+    path?: VncConnectPath;
+    /** server_proxy only: internal TCP host */
+    connectHost?: string;
+    password?: string;
+    autostart?: boolean;
+}): VncClientProfile;
+export declare function updateClientProfile(dataDir: string, id: string, patch: {
+    name?: string;
+    host?: string;
+    port?: number;
+    path?: VncConnectPath;
+    connectHost?: string | null;
+    autostart?: boolean;
+    password?: string | null;
+}): VncClientProfile;
+export declare function clientUp(input: {
+    host: HostExecutor;
+    dataDir: string;
+    id: string;
+    path?: VncConnectPath;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    profile?: VncClientProfile;
+}>;
+export declare function clientDown(input: {
+    host: HostExecutor;
+    dataDir: string;
+    id: string;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    profile?: VncClientProfile;
+}>;
+export declare function deleteClientProfile(input: {
+    host: HostExecutor;
+    dataDir: string;
+    id: string;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+}>;
+//# sourceMappingURL=client-profiles.d.ts.map

package/dist/hosting/vnc/client-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-profiles.d.ts","sourceRoot":"","sources":["../../../src/hosting/vnc/client-profiles.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGnE,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAUF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,CAarE;AA4BD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAE5E;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT,eAAe,GAAG,IAAI,CAExB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IACL,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACA,gBAAgB,CAmClB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;IACL,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GACA,gBAAgB,CAuClB;AAED,wBAAsB,QAAQ,CAAC,KAAK,EAAE;IACpC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B,CAAC,CA2DD;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B,CAAC,CA2CD;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAoB5C"}

package/dist/hosting/vnc/client-profiles.js

@@ -0,0 +1,251 @@
+/**
+ * Outbound VNC client profiles — both paths open in the browser via panel RFB proxy.
+ * - user_reachable: public / user-side targets
+ * - server_proxy: egress via control-plane network (LAN / server-reachable)
+ */
+import { randomUUID } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync, } from 'node:fs';
+import { join } from 'node:path';
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+import { normalizeVncConnectPath } from './types.js';
+function clientDir(dataDir) {
+    return join(dataDir, 'vnc', 'client', 'profiles');
+}
+function indexPath(dataDir) {
+    return join(clientDir(dataDir), 'index.json');
+}
+export function loadClientProfiles(dataDir) {
+    const p = indexPath(dataDir);
+    if (!existsSync(p))
+        return [];
+    try {
+        const raw = JSON.parse(readFileSync(p, 'utf8'));
+        const items = Array.isArray(raw.items) ? raw.items : [];
+        return items.map((r) => ({
+            ...r,
+            path: normalizeVncConnectPath(r.path),
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+function saveClientProfiles(dataDir, items) {
+    mkdirSync(clientDir(dataDir), { recursive: true });
+    writeFileSync(indexPath(dataDir), JSON.stringify({ items, updatedAt: new Date().toISOString() }, null, 2) + '\n', 'utf8');
+}
+function toPublic(r) {
+    const path = normalizeVncConnectPath(r.path);
+    const connectHost = String(r.connectHost ?? '').trim();
+    return {
+        id: r.id,
+        name: r.name,
+        host: r.host,
+        port: r.port,
+        path,
+        connectHost: path === 'server_proxy' && connectHost ? connectHost : null,
+        status: r.status,
+        autostart: r.autostart,
+        createdAt: r.createdAt,
+    };
+}
+export function listClientProfilesPublic(dataDir) {
+    return loadClientProfiles(dataDir).map(toPublic);
+}
+export function getClientProfileRecord(dataDir, id) {
+    return loadClientProfiles(dataDir).find((x) => x.id === id) ?? null;
+}
+export function createClientProfile(dataDir, input) {
+    const name = String(input.name ?? '').trim();
+    const host = String(input.host ?? '').trim();
+    const port = Number(input.port);
+    if (!name || !host) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.vnc.clientInvalid'), {
+            httpStatus: 400,
+        });
+    }
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new YskError(ErrorCodes.VALIDATION, tl('notes.vnc.invalidPort'), {
+            httpStatus: 400,
+        });
+    }
+    const path = normalizeVncConnectPath(input.path ?? 'user_reachable');
+    const connectHost = String(input.connectHost ?? '').trim();
+    const items = loadClientProfiles(dataDir);
+    const now = new Date().toISOString();
+    const rec = {
+        id: randomUUID(),
+        name,
+        host,
+        port,
+        path,
+        connectHost: path === 'server_proxy' && connectHost ? connectHost : undefined,
+        password: input.password || undefined,
+        autostart: Boolean(input.autostart),
+        status: 'down',
+        createdAt: now,
+        updatedAt: now,
+    };
+    items.unshift(rec);
+    saveClientProfiles(dataDir, items);
+    return toPublic(rec);
+}
+export function updateClientProfile(dataDir, id, patch) {
+    const items = loadClientProfiles(dataDir);
+    const idx = items.findIndex((x) => x.id === id);
+    if (idx < 0) {
+        throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.vnc.clientNotFound'), {
+            httpStatus: 404,
+        });
+    }
+    const rec = { ...items[idx] };
+    if (patch.name != null)
+        rec.name = String(patch.name).trim() || rec.name;
+    if (patch.host != null)
+        rec.host = String(patch.host).trim() || rec.host;
+    if (patch.port != null) {
+        const port = Number(patch.port);
+        if (!Number.isInteger(port) || port < 1 || port > 65535) {
+            throw new YskError(ErrorCodes.VALIDATION, tl('notes.vnc.invalidPort'), {
+                httpStatus: 400,
+            });
+        }
+        rec.port = port;
+    }
+    if (patch.path != null)
+        rec.path = normalizeVncConnectPath(patch.path);
+    if (patch.connectHost !== undefined) {
+        const ch = String(patch.connectHost ?? '').trim();
+        if (ch)
+            rec.connectHost = ch;
+        else
+            delete rec.connectHost;
+    }
+    // user_reachable ignores internal override
+    if (normalizeVncConnectPath(rec.path) !== 'server_proxy') {
+        delete rec.connectHost;
+    }
+    if (typeof patch.autostart === 'boolean')
+        rec.autostart = patch.autostart;
+    if (patch.password === null)
+        delete rec.password;
+    else if (typeof patch.password === 'string' && patch.password) {
+        rec.password = patch.password;
+    }
+    rec.updatedAt = new Date().toISOString();
+    items[idx] = rec;
+    saveClientProfiles(dataDir, items);
+    return toPublic(rec);
+}
+export async function clientUp(input) {
+    const notes = [];
+    const items = loadClientProfiles(input.dataDir);
+    const idx = items.findIndex((x) => x.id === input.id);
+    if (idx < 0) {
+        throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.vnc.clientNotFound'), {
+            httpStatus: 404,
+        });
+    }
+    const rec = { ...items[idx] };
+    const pathMode = normalizeVncConnectPath(input.path ?? rec.path);
+    // Both paths use the in-browser VNC client (panel RFB proxy). Persist path intent only.
+    rec.path = pathMode;
+    rec.status = 'up';
+    rec.updatedAt = new Date().toISOString();
+    // Stop any legacy websockify/vncviewer leftover from older builds
+    if ((rec.pid || rec.localHttpPort) &&
+        input.host.executeEnabled() &&
+        input.host.isRoot()) {
+        try {
+            if (rec.pid) {
+                await input.host.runCommand(['bash', '-c', `kill ${rec.pid} 2>/dev/null || true`], { timeoutMs: 5_000 });
+            }
+            if (rec.localHttpPort) {
+                await input.host.runCommand([
+                    'bash',
+                    '-c',
+                    `pkill -f 'websockify.*${rec.localHttpPort}' 2>/dev/null || true`,
+                ], { timeoutMs: 5_000 });
+            }
+        }
+        catch {
+            /* */
+        }
+    }
+    rec.pid = undefined;
+    items[idx] = rec;
+    saveClientProfiles(input.dataDir, items);
+    notes.push(pathMode === 'server_proxy'
+        ? tl('notes.vnc.clientPathServerProxy', {
+            name: rec.name,
+            target: `${rec.host}:${rec.port}`,
+        })
+        : tl('notes.vnc.clientPathUserReachable', {
+            name: rec.name,
+            target: `${rec.host}:${rec.port}`,
+        }));
+    notes.push(tl('notes.vnc.clientOpenInBrowserHint'));
+    return { ok: true, notes, profile: toPublic(rec) };
+}
+export async function clientDown(input) {
+    const notes = [];
+    const items = loadClientProfiles(input.dataDir);
+    const idx = items.findIndex((x) => x.id === input.id);
+    if (idx < 0) {
+        throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.vnc.clientNotFound'), {
+            httpStatus: 404,
+        });
+    }
+    const rec = { ...items[idx] };
+    if (!input.host.executeEnabled() || !input.host.isRoot()) {
+        notes.push(tl('notes.vnc.clientDownBlocked'));
+        return {
+            ok: false,
+            notes,
+            blocked: true,
+            requiresExecute: !input.host.executeEnabled(),
+            profile: toPublic(rec),
+        };
+    }
+    if (rec.pid) {
+        await input.host.runCommand(['bash', '-c', `kill ${rec.pid} 2>/dev/null || true`], { timeoutMs: 5_000 });
+    }
+    if (rec.localHttpPort) {
+        await input.host.runCommand([
+            'bash',
+            '-c',
+            `pkill -f 'websockify.*${rec.localHttpPort}' 2>/dev/null || true`,
+        ], { timeoutMs: 5_000 });
+    }
+    rec.pid = undefined;
+    rec.status = 'down';
+    rec.updatedAt = new Date().toISOString();
+    items[idx] = rec;
+    saveClientProfiles(input.dataDir, items);
+    notes.push(tl('notes.vnc.clientDown', { name: rec.name }));
+    return { ok: true, notes, profile: toPublic(rec) };
+}
+export async function deleteClientProfile(input) {
+    const notes = [];
+    // best-effort down
+    try {
+        await clientDown(input);
+    }
+    catch {
+        /* ignore */
+    }
+    const items = loadClientProfiles(input.dataDir).filter((x) => x.id !== input.id);
+    saveClientProfiles(input.dataDir, items);
+    const conf = join(clientDir(input.dataDir), `${input.id}.json`);
+    if (existsSync(conf)) {
+        try {
+            unlinkSync(conf);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    notes.push(tl('notes.vnc.clientDeleted'));
+    return { ok: true, notes };
+}
+//# sourceMappingURL=client-profiles.js.map

package/dist/hosting/vnc/client-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-profiles.js","sourceRoot":"","sources":["../../../src/hosting/vnc/client-profiles.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAE7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAoBrD,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAkC,CAAC;QACjF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,GAAG,CAAC;YACJ,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,KAAwB;IACnE,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,aAAa,CACX,SAAS,CAAC,OAAO,CAAC,EAClB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAC9E,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAkB;IAClC,MAAM,IAAI,GAAG,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI;QACJ,WAAW,EACT,IAAI,KAAK,cAAc,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QAC7D,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,EAAU;IAEV,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,KASC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,yBAAyB,CAAC,EAAE;YACvE,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE;YACrE,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAoB;QAC3B,EAAE,EAAE,UAAU,EAAE;QAChB,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,WAAW,EACT,IAAI,KAAK,cAAc,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAClE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,SAAS;QACrC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACnC,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnB,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAe,EACf,EAAU,EACV,KAQC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE;YACvE,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC;IACzE,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC;IACzE,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;YACxD,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,uBAAuB,CAAC,EAAE;gBACrE,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,EAAE;YAAE,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC;;YACxB,OAAO,GAAG,CAAC,WAAW,CAAC;IAC9B,CAAC;IACD,2CAA2C;IAC3C,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;QACzD,OAAO,GAAG,CAAC,WAAW,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAC1E,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC;SAC5C,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9D,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,CAAC;IACD,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACjB,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAK9B;IAOC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE;YACvE,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAEjE,wFAAwF;IACxF,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IACpB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;IAClB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,kEAAkE;IAClE,IACE,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE;QAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EACnB,CAAC;QACD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,CAAC,GAAG,sBAAsB,CAAC,EACrD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;oBACE,MAAM;oBACN,IAAI;oBACJ,yBAAyB,GAAG,CAAC,aAAa,uBAAuB;iBAClE,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IACD,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC;IACpB,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACjB,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CACR,QAAQ,KAAK,cAAc;QACzB,CAAC,CAAC,EAAE,CAAC,iCAAiC,EAAE;YACpC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE;SAClC,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC,mCAAmC,EAAE;YACtC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE;SAClC,CAAC,CACP,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAIhC;IAOC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IACtD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE;YACvE,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE;YAC7C,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC;SACvB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,CAAC,GAAG,sBAAsB,CAAC,EACrD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtB,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACzB;YACE,MAAM;YACN,IAAI;YACJ,yBAAyB,GAAG,CAAC,aAAa,uBAAuB;SAClE,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC;IACpB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACpB,GAAG,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACjB,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAIzC;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,mBAAmB;IACnB,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IACjF,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/hosting/vnc/index.d.ts

@@ -0,0 +1,13 @@
+export * from './types.js';
+export * from './ports.js';
+export * from './xstartup.js';
+export * from './linux-user.js';
+export * from './passwd.js';
+export * from './server-session.js';
+export * from './novnc.js';
+export * from './client-profiles.js';
+export * from './session-ticket.js';
+export * from './share-links.js';
+export * from './rfb-probe.js';
+export * from './service.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/hosting/vnc/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/hosting/vnc/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/hosting/vnc/index.js

@@ -0,0 +1,13 @@
+export * from './types.js';
+export * from './ports.js';
+export * from './xstartup.js';
+export * from './linux-user.js';
+export * from './passwd.js';
+export * from './server-session.js';
+export * from './novnc.js';
+export * from './client-profiles.js';
+export * from './session-ticket.js';
+export * from './share-links.js';
+export * from './rfb-probe.js';
+export * from './service.js';
+//# sourceMappingURL=index.js.map

package/dist/hosting/vnc/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/hosting/vnc/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/hosting/vnc/linux-user.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Provision / probe / remove Linux users for VNC accounts.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+export type LinuxUserProbe = {
+    exists: boolean;
+    uid?: number;
+    home?: string;
+    shell?: string;
+    notes: string[];
+};
+export declare function probeLinuxUser(host: HostExecutor, linuxUser: string): Promise<LinuxUserProbe>;
+export declare function ensureLinuxUser(host: HostExecutor, linuxUser: string): Promise<{
+    ok: boolean;
+    provisioned: boolean;
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    requiresRoot?: boolean;
+    home?: string;
+    notes: string[];
+    commandResults: Array<{
+        argv: string[];
+        exitCode: number;
+        stderr: string;
+    }>;
+}>;
+export declare function removeLinuxUser(host: HostExecutor, linuxUser: string, removeHome: boolean): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+}>;
+//# sourceMappingURL=linux-user.d.ts.map

package/dist/hosting/vnc/linux-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-user.d.ts","sourceRoot":"","sources":["../../../src/hosting/vnc/linux-user.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAI3D,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,wBAAsB,cAAc,CAClC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CAsBzB;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7E,CAAC,CAiED;AAED,wBAAsB,eAAe,CACnC,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,OAAO,GAClB,OAAO,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC,CA+BD"}

package/dist/hosting/vnc/linux-user.js

@@ -0,0 +1,114 @@
+/**
+ * Provision / probe / remove Linux users for VNC accounts.
+ */
+import { shellQuote } from '../project-user-run.js';
+import { tl } from 'ysk-server-shared';
+export async function probeLinuxUser(host, linuxUser) {
+    const notes = [];
+    const r = await host.runCommand([
+        'bash',
+        '-c',
+        `getent passwd ${shellQuote(linuxUser)} 2>/dev/null || true`,
+    ], { timeoutMs: 8_000 });
+    const line = r.stdout.trim().split('\n').find(Boolean);
+    if (!line || !line.includes(':')) {
+        return { exists: false, notes };
+    }
+    const parts = line.split(':');
+    return {
+        exists: true,
+        uid: Number(parts[2]) || undefined,
+        home: parts[5] || undefined,
+        shell: parts[6] || undefined,
+        notes,
+    };
+}
+export async function ensureLinuxUser(host, linuxUser) {
+    const notes = [];
+    const commandResults = [];
+    const can = host.executeEnabled() && host.isRoot();
+    if (!can) {
+        notes.push(tl('notes.vnc.userWrittenOnly', { user: linuxUser }));
+        return {
+            ok: true,
+            provisioned: false,
+            blocked: true,
+            requiresExecute: !host.executeEnabled(),
+            requiresRoot: !host.isRoot(),
+            notes,
+            commandResults,
+        };
+    }
+    const existing = await probeLinuxUser(host, linuxUser);
+    if (existing.exists) {
+        notes.push(tl('notes.vnc.userExists', { user: linuxUser }));
+        return {
+            ok: true,
+            provisioned: true,
+            home: existing.home,
+            notes,
+            commandResults,
+        };
+    }
+    const ua = await host.runCommand([
+        'useradd',
+        '-m',
+        '-s',
+        '/bin/bash',
+        '-c',
+        'YSK VNC',
+        linuxUser,
+    ], { timeoutMs: 30_000 });
+    commandResults.push({
+        argv: ['useradd', linuxUser],
+        exitCode: ua.exitCode,
+        stderr: ua.stderr,
+    });
+    if (ua.exitCode !== 0) {
+        notes.push(tl('notes.vnc.useraddFailed', {
+            user: linuxUser,
+            detail: (ua.stderr || ua.stdout || '').slice(0, 200),
+        }));
+        return { ok: false, provisioned: false, notes, commandResults };
+    }
+    notes.push(tl('notes.vnc.userCreated', { user: linuxUser }));
+    const again = await probeLinuxUser(host, linuxUser);
+    return {
+        ok: true,
+        provisioned: true,
+        home: again.home,
+        notes,
+        commandResults,
+    };
+}
+export async function removeLinuxUser(host, linuxUser, removeHome) {
+    const notes = [];
+    if (!host.executeEnabled() || !host.isRoot()) {
+        notes.push(tl('notes.vnc.userdelBlocked', { user: linuxUser }));
+        return {
+            ok: false,
+            notes,
+            blocked: true,
+            requiresExecute: !host.executeEnabled(),
+        };
+    }
+    const existing = await probeLinuxUser(host, linuxUser);
+    if (!existing.exists) {
+        notes.push(tl('notes.vnc.userAlreadyGone', { user: linuxUser }));
+        return { ok: true, notes };
+    }
+    const args = removeHome
+        ? ['userdel', '-r', linuxUser]
+        : ['userdel', linuxUser];
+    const r = await host.runCommand(args, { timeoutMs: 30_000 });
+    if (r.exitCode !== 0) {
+        notes.push(tl('notes.vnc.userdelFailed', {
+            user: linuxUser,
+            detail: (r.stderr || r.stdout || '').slice(0, 200),
+        }));
+        return { ok: false, notes };
+    }
+    notes.push(tl('notes.vnc.userDeleted', { user: linuxUser }));
+    return { ok: true, notes };
+}
+//# sourceMappingURL=linux-user.js.map

package/dist/hosting/vnc/linux-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"linux-user.js","sourceRoot":"","sources":["../../../src/hosting/vnc/linux-user.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAUvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAkB,EAClB,SAAiB;IAEjB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;QACE,MAAM;QACN,IAAI;QACJ,iBAAiB,UAAU,CAAC,SAAS,CAAC,sBAAsB;KAC7D,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;QAClC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS;QAC3B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS;QAC5B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAkB,EAClB,SAAiB;IAWjB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,cAAc,GAClB,EAAE,CAAC;IACL,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,KAAK;YAClB,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE;YACvC,YAAY,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;YAC5B,KAAK;YACL,cAAc;SACf,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAC5D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,IAAI;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK;YACL,cAAc;SACf,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAC9B;QACE,SAAS;QACT,IAAI;QACJ,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,SAAS;QACT,SAAS;KACV,EACD,EAAE,SAAS,EAAE,MAAM,EAAE,CACtB,CAAC;IACF,cAAc,CAAC,IAAI,CAAC;QAClB,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;QAC5B,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,MAAM,EAAE,EAAE,CAAC,MAAM;KAClB,CAAC,CAAC;IACH,IAAI,EAAE,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,yBAAyB,EAAE;YAC5B,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACrD,CAAC,CACH,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACpD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,WAAW,EAAE,IAAI;QACjB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK;QACL,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAkB,EAClB,SAAiB,EACjB,UAAmB;IAOnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,GAAG,UAAU;QACrB,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC;QAC9B,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,yBAAyB,EAAE;YAC5B,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACnD,CAAC,CACH,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/hosting/vnc/novnc.d.ts

@@ -0,0 +1,89 @@
+/**
+ * noVNC / websockify helpers — bind localhost RFB to a local HTTP port.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+export type NovncRuntime = {
+    accountId: string;
+    display: number;
+    rfbPort: number;
+    httpPort: number;
+    pid?: number;
+    startedAt: string;
+};
+export type ViewTicket = {
+    token: string;
+    accountId: string;
+    expiresAt: number;
+    httpPort: number;
+};
+export declare function loadNovncRuntimes(dataDir: string): NovncRuntime[];
+export declare function isNovncRunning(dataDir: string, accountId: string): boolean;
+export declare function startNovnc(input: {
+    host: HostExecutor;
+    dataDir: string;
+    accountId: string;
+    display: number;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    runtime?: NovncRuntime;
+}>;
+export declare function stopNovnc(input: {
+    host: HostExecutor;
+    dataDir: string;
+    accountId: string;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+}>;
+export declare function createViewTicket(input: {
+    dataDir: string;
+    accountId: string;
+    httpPort: number;
+    ttlMs?: number;
+}): ViewTicket;
+export declare function consumeViewTicket(dataDir: string, token: string): ViewTicket | null;
+export declare function buildConnectionPayload(input: {
+    accountId: string;
+    name: string;
+    linuxUser: string;
+    display: number;
+    rfbPort: number;
+    rfbBind: 'localhost' | 'all';
+    endpointHint: string | null;
+    novncHttpPort?: number | null;
+    viewTicketToken?: string | null;
+}): {
+    direct: {
+        host: string;
+        port: number;
+        display: number;
+        address: string;
+        bind: string;
+        recommended: boolean;
+        notes: string[];
+    };
+    viaServer: {
+        available: boolean;
+        httpPort: number | null;
+        localUrl: string | null;
+        ticketPath: string | null;
+        recommended: boolean;
+        notes: string[];
+    };
+};
+export declare function openUfwTcpPort(input: {
+    host: HostExecutor;
+    port: number;
+    comment?: string;
+}): Promise<{
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+}>;
+//# sourceMappingURL=novnc.d.ts.map

package/dist/hosting/vnc/novnc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"novnc.d.ts","sourceRoot":"","sources":["../../../src/hosting/vnc/novnc.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAK3D,MAAM,MAAM,YAAY,GAAG;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAUF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CASjE;AAgCD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE1E;AAED,wBAAsB,UAAU,CAAC,KAAK,EAAE;IACtC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB,CAAC,CAgED;AAED,wBAAsB,SAAS,CAAC,KAAK,EAAE;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC,CAqCD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,UAAU,CAYb;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,UAAU,GAAG,IAAI,CAKnB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,WAAW,GAAG,KAAK,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG;IACF,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,OAAO,CAAC;QACrB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,SAAS,EAAE;QACT,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,OAAO,CAAC;QACrB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH,CAwCA;AAED,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC;IACV,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC,CAiCD"}