ysk-server-core 1.0.0

package/dist/hosting/vnc/server-session.js

@@ -0,0 +1,390 @@
+/**
+ * Start / stop / probe TigerVNC sessions per Linux user + display.
+ */
+import { shellQuote } from '../project-user-run.js';
+import { tl } from 'ysk-server-shared';
+import { resolveBin } from '../software-probe/resolve-bin.js';
+import { buildXstartup } from './xstartup.js';
+import { rfbPortForDisplay } from './ports.js';
+/** Same bin names SoftwareVersionBar / catalog use for TigerVNC server. */
+export const VNCSERVER_BIN_CANDIDATES = [
+    'tigervncserver',
+    'vncserver',
+];
+/** Absolute paths shipped by Ubuntu/Debian tigervnc-standalone-server. */
+export const VNCSERVER_ABSOLUTE_PATHS = [
+    '/usr/bin/tigervncserver',
+    '/usr/bin/vncserver',
+    '/usr/local/bin/tigervncserver',
+    '/usr/local/bin/vncserver',
+    '/bin/tigervncserver',
+    '/bin/vncserver',
+];
+const XSERVER_BINS = ['Xtigervnc', 'Xvnc', 'x0vncserver'];
+const XSERVER_ABS = [
+    '/usr/bin/Xtigervnc',
+    '/usr/bin/Xvnc',
+    '/usr/bin/x0vncserver',
+];
+async function hostFileExecutable(host, path) {
+    try {
+        if (host.pathExists(path))
+            return true;
+    }
+    catch {
+        /* */
+    }
+    // `test` is always allowed without YSK_EXECUTE (read-only simple bin)
+    try {
+        const r = await host.runCommand(['test', '-x', path], { timeoutMs: 3_000 });
+        return r.exitCode === 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolve absolute path to TigerVNC *wrapper* (tigervncserver / vncserver).
+ * Prefer filesystem probes — do not depend on login-shell PATH.
+ */
+export async function resolveVncserverBin(host) {
+    // 1) Well-known absolute paths first (Ubuntu package layout)
+    for (const p of VNCSERVER_ABSOLUTE_PATHS) {
+        if (await hostFileExecutable(host, p))
+            return p;
+    }
+    // 2) Shared PATH probe (same as software catalog)
+    for (const name of VNCSERVER_BIN_CANDIDATES) {
+        const path = await resolveBin(host, name);
+        if (path && (await hostFileExecutable(host, path)))
+            return path;
+    }
+    // 3) dpkg file list when package is installed (dpkg-query is read-only allowlisted)
+    try {
+        const st = await host.runCommand([
+            'bash',
+            '-c',
+            "dpkg-query -W -f='${Status}' tigervnc-standalone-server 2>/dev/null || true",
+        ], { timeoutMs: 5_000 });
+        if (/install ok installed/i.test(st.stdout || '')) {
+            const list = await host.runCommand([
+                'bash',
+                '-c',
+                "dpkg-query -L tigervnc-standalone-server 2>/dev/null | grep -E '/(tigervncserver|vncserver)$' | head -1 || true",
+            ], { timeoutMs: 5_000 });
+            const p = (list.stdout || '').trim().split('\n').filter(Boolean).pop();
+            if (p && p.startsWith('/') && (await hostFileExecutable(host, p)))
+                return p;
+        }
+    }
+    catch {
+        /* */
+    }
+    return null;
+}
+/** True if TigerVNC server stack is present (wrapper or X server binary). */
+export async function isTigerVncInstalled(host) {
+    const found = [];
+    const serverBin = await resolveVncserverBin(host);
+    if (serverBin)
+        found.push(serverBin);
+    for (const p of XSERVER_ABS) {
+        if (await hostFileExecutable(host, p))
+            found.push(p);
+    }
+    for (const name of XSERVER_BINS) {
+        const p = await resolveBin(host, name);
+        if (p && !found.includes(p))
+            found.push(p);
+    }
+    let packageInstalled = false;
+    try {
+        const r = await host.runCommand([
+            'bash',
+            '-c',
+            "dpkg-query -W -f='${Status}' tigervnc-standalone-server 2>/dev/null || true",
+        ], { timeoutMs: 5_000 });
+        packageInstalled = /install ok installed/i.test(r.stdout || '');
+    }
+    catch {
+        /* */
+    }
+    return {
+        installed: Boolean(serverBin) || found.length > 0 || packageInstalled,
+        serverBin,
+        found,
+        packageInstalled,
+    };
+}
+export async function writeXstartupFile(input) {
+    const notes = [];
+    const { host, linuxUser, home, desktop } = input;
+    if (!host.executeEnabled() || !host.isRoot()) {
+        notes.push(tl('notes.vnc.xstartupWrittenOnly'));
+        return { ok: false, notes };
+    }
+    const body = buildXstartup(desktop);
+    const path = `${home.replace(/\/$/, '')}/.vnc/xstartup`;
+    // Write via base64 to avoid shell quoting hell
+    const b64 = Buffer.from(body, 'utf8').toString('base64');
+    const script = [
+        `mkdir -p ${shellQuote(home + '/.vnc')}`,
+        `echo ${shellQuote(b64)} | base64 -d > ${shellQuote(path)}`,
+        `chmod 755 ${shellQuote(path)}`,
+        `chown -R ${shellQuote(linuxUser)}:${shellQuote(linuxUser)} ${shellQuote(home + '/.vnc')}`,
+        // Verify script is executable and non-empty (every host)
+        `test -s ${shellQuote(path)} && test -x ${shellQuote(path)}`,
+    ].join(' && ');
+    const r = await host.runCommand(['bash', '-c', script], { timeoutMs: 10_000 });
+    if (r.exitCode !== 0) {
+        notes.push(tl('notes.vnc.xstartupWriteFailed', {
+            detail: (r.stderr || r.stdout || 'write failed').slice(0, 160),
+        }));
+        return { ok: false, notes };
+    }
+    notes.push(tl('notes.vnc.xstartupWritten', { path }));
+    return { ok: true, notes, path };
+}
+export async function probeSessionRunning(host, display) {
+    const port = rfbPortForDisplay(display);
+    try {
+        const r = await host.runCommand([
+            'bash',
+            '-c',
+            `ss -lnt 2>/dev/null | grep -E ':${port}\\s' >/dev/null && echo up || true`,
+        ], { timeoutMs: 8_000 });
+        return r.stdout.includes('up');
+    }
+    catch {
+        return false;
+    }
+}
+async function passwdFileExists(host, home) {
+    const path = `${home.replace(/\/$/, '')}/.vnc/passwd`;
+    try {
+        const r = await host.runCommand(['bash', '-c', `test -s ${shellQuote(path)} && echo yes || echo no`], { timeoutMs: 5_000 });
+        return r.stdout.includes('yes');
+    }
+    catch {
+        return false;
+    }
+}
+/** Map raw vncserver stderr to a short operator-facing note (primary, no path dump). */
+export function classifyVncStartFailure(input) {
+    const d = input.detail.toLowerCase();
+    // Session script / desktop failures first (do NOT claim TigerVNC is missing)
+    if (/xstartup|session startup via|x session exited|status 126|status 127/i.test(d) ||
+        /exec:\s*\S+:\s*permission denied/i.test(d) ||
+        /exec:\s*xterm/i.test(d)) {
+        return tl('notes.vnc.xstartupFailed', {
+            display: String(input.display),
+            detail: input.detail
+                .split('\n')
+                .map((l) => l.trim())
+                .filter(Boolean)
+                .find((l) => /xstartup|xterm|startxfce|permission|status/i.test(l))
+                ?.slice(0, 140) || 'xstartup',
+        });
+    }
+    if (/cannot stat initial working directory|initial working directory/i.test(d)) {
+        return tl('notes.vnc.sessionStartCwd', { display: String(input.display) });
+    }
+    // Only when the wrapper binary itself is missing
+    if (/vncserver missing/i.test(input.detail) ||
+        (/\b(tigervncserver|vncserver)\b.*\b(not found|no such file)\b/i.test(input.detail) ||
+            /\bcommand not found\b.*\b(tigervncserver|vncserver)\b/i.test(d))) {
+        return tl('notes.vnc.vncserverMissing');
+    }
+    if (/password|passwd|authentication|no password configured|you will require a password/i.test(d)) {
+        return tl('notes.vnc.needPasswordBeforeStart');
+    }
+    if (/already running|in use|address already in use|bind: address|port.*busy|A VNC server is already running/i.test(d)) {
+        return tl('notes.vnc.displayPortBusy', {
+            display: String(input.display),
+            port: String(input.port),
+        });
+    }
+    if (/permission denied|cannot open|not permitted/i.test(d)) {
+        return tl('notes.vnc.sessionStartPermission', {
+            display: String(input.display),
+        });
+    }
+    const short = input.detail
+        .split('\n')
+        .map((l) => l.trim())
+        .filter(Boolean)[0]
+        ?.slice(0, 160);
+    return tl('notes.vnc.sessionStartFailed', {
+        display: String(input.display),
+        detail: short || 'unknown error',
+    });
+}
+/**
+ * Clear stale X/VNC locks for display when port is not listening (same user).
+ * Best-effort; does not kill foreign processes on a live port.
+ */
+async function clearStaleDisplayLocks(input) {
+    const { host, linuxUser, home, display } = input;
+    const vncDir = `${home.replace(/\/$/, '')}/.vnc`;
+    const script = [
+        `rm -f ${shellQuote(`/tmp/.X${display}-lock`)} 2>/dev/null || true`,
+        `rm -f ${shellQuote(`/tmp/.X11-unix/X${display}`)} 2>/dev/null || true`,
+        `rm -f ${shellQuote(`${vncDir}/*:${display}.pid`)} 2>/dev/null || true`,
+        `rm -f ${shellQuote(`${vncDir}/*:${display}.log`)} 2>/dev/null || true`,
+        // Best-effort kill only if owned by target user and display matches
+        `pkill -u ${shellQuote(linuxUser)} -f ${shellQuote(`[X]vnc :${display}`)} 2>/dev/null || true`,
+    ].join('; ');
+    await host.runCommand(['bash', '-c', script], { timeoutMs: 10_000 });
+}
+export async function startVncSession(input) {
+    const notes = [];
+    const { host, linuxUser, display, geometry, depth, rfbBind } = input;
+    const home = input.home ?? `/home/${linuxUser}`;
+    const port = rfbPortForDisplay(display);
+    if (!host.executeEnabled() || !host.isRoot()) {
+        notes.push(tl('notes.vnc.sessionStartBlocked'));
+        return {
+            ok: false,
+            notes,
+            blocked: true,
+            requiresExecute: !host.executeEnabled(),
+            requiresRoot: !host.isRoot(),
+        };
+    }
+    const probe = await isTigerVncInstalled(host);
+    let bin = probe.serverBin;
+    // Last resort: package reports installed → use Debian/Ubuntu default path
+    if (!bin && probe.packageInstalled) {
+        for (const p of VNCSERVER_ABSOLUTE_PATHS) {
+            if (await hostFileExecutable(host, p)) {
+                bin = p;
+                break;
+            }
+        }
+        if (!bin)
+            bin = '/usr/bin/tigervncserver';
+    }
+    if (!bin) {
+        notes.push(tl('notes.vnc.vncserverMissing'));
+        if (probe.found.length) {
+            notes.push(tl('notes.vnc.vncserverWrapperMissing', {
+                found: probe.found.map((p) => p.split('/').pop() || p).join(', '),
+            }));
+        }
+        if (probe.packageInstalled) {
+            notes.push(tl('notes.vnc.vncPackageWithoutBin'));
+        }
+        return { ok: false, notes, running: false };
+    }
+    const hasPasswd = await passwdFileExists(host, home);
+    if (!hasPasswd) {
+        notes.push(tl('notes.vnc.needPasswordBeforeStart'));
+        return { ok: false, notes, running: false };
+    }
+    // Already listening → treat as success (idempotent start)
+    if (await probeSessionRunning(host, display)) {
+        notes.push(tl('notes.vnc.sessionAlreadyRunning', {
+            user: linuxUser,
+            display: String(display),
+            port: String(port),
+        }));
+        return { ok: true, notes, running: true };
+    }
+    const localhostFlag = rfbBind === 'localhost' ? 'yes' : 'no';
+    // Absolute path + force HOME from passwd (never inherit control-plane cwd under /root)
+    const inner = [
+        `HOME=$(getent passwd ${shellQuote(linuxUser)} | cut -d: -f6)`,
+        'HOME="${HOME:-/tmp}"',
+        'export HOME',
+        'cd "$HOME" || cd /tmp || true',
+        'export USER=' + shellQuote(linuxUser),
+        'export LOGNAME=' + shellQuote(linuxUser),
+        [
+            shellQuote(bin),
+            `:${display}`,
+            `-geometry ${geometry}`,
+            `-depth ${depth}`,
+            `-localhost ${localhostFlag}`,
+        ].join(' '),
+    ].join('; ');
+    const runStart = async () => {
+        // bash -c (not -lc): avoid profile; set HOME explicitly above
+        const script = `if command -v runuser >/dev/null 2>&1; then runuser -u ${shellQuote(linuxUser)} -- bash -c ${shellQuote(inner)}; else su -s /bin/bash ${shellQuote(linuxUser)} -c ${shellQuote(inner)}; fi`;
+        const r = await host.runCommand(['bash', '-c', script], { timeoutMs: 45_000 });
+        return {
+            exitCode: r.exitCode,
+            detail: (r.stderr || r.stdout || '').trim(),
+        };
+    };
+    let result = await runStart();
+    // Stale lock / "already running" but port down → clear locks and retry once
+    if (result.exitCode !== 0 &&
+        /already running|in use|A VNC server is already running/i.test(result.detail) &&
+        !(await probeSessionRunning(host, display))) {
+        await clearStaleDisplayLocks({ host, linuxUser, home, display });
+        notes.push(tl('notes.vnc.staleLockCleared', { display: String(display) }));
+        result = await runStart();
+    }
+    if (result.exitCode !== 0) {
+        // Port became busy after failed start → clear conflict message
+        if (await probeSessionRunning(host, display)) {
+            notes.push(tl('notes.vnc.sessionAlreadyRunning', {
+                user: linuxUser,
+                display: String(display),
+                port: String(port),
+            }));
+            return { ok: true, notes, running: true };
+        }
+        notes.push(classifyVncStartFailure({
+            display,
+            port,
+            detail: result.detail || 'vncserver exited non-zero',
+        }));
+        return { ok: false, notes, running: false };
+    }
+    // Settle: X may bind RFB a moment after process fork (every host)
+    let running = await probeSessionRunning(host, display);
+    if (!running) {
+        for (let i = 0; i < 8 && !running; i++) {
+            await host.runCommand(['bash', '-c', 'sleep 0.35'], { timeoutMs: 2_000 });
+            running = await probeSessionRunning(host, display);
+        }
+    }
+    notes.push(tl('notes.vnc.sessionStarted', {
+        user: linuxUser,
+        display: String(display),
+        port: String(port),
+    }));
+    if (!running) {
+        notes.push(tl('notes.vnc.sessionStartUnverified'));
+    }
+    return { ok: true, notes, running };
+}
+export async function stopVncSession(input) {
+    const notes = [];
+    const { host, linuxUser, display } = input;
+    if (!host.executeEnabled() || !host.isRoot()) {
+        notes.push(tl('notes.vnc.sessionStopBlocked'));
+        return {
+            ok: false,
+            notes,
+            blocked: true,
+            requiresExecute: !host.executeEnabled(),
+        };
+    }
+    const inner = `vncserver -kill :${display} 2>/dev/null || tigervncserver -kill :${display} 2>/dev/null || true`;
+    const script = `if command -v runuser >/dev/null 2>&1; then runuser -u ${shellQuote(linuxUser)} -- bash -lc ${shellQuote(inner)}; else su - ${shellQuote(linuxUser)} -c ${shellQuote(inner)}; fi`;
+    await host.runCommand(['bash', '-c', script], { timeoutMs: 20_000 });
+    // Also pkill leftover Xvnc for this display best-effort
+    await host.runCommand([
+        'bash',
+        '-c',
+        `pkill -f '[X]vnc :${display}' 2>/dev/null || pkill -f 'Xvnc.*:${display}' 2>/dev/null || true`,
+    ], { timeoutMs: 8_000 });
+    notes.push(tl('notes.vnc.sessionStopped', {
+        user: linuxUser,
+        display: String(display),
+    }));
+    return { ok: true, notes };
+}
+//# sourceMappingURL=server-session.js.map

package/dist/hosting/vnc/server-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-session.js","sourceRoot":"","sources":["../../../src/hosting/vnc/server-session.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,gBAAgB;IAChB,WAAW;CACH,CAAC;AAEX,0EAA0E;AAC1E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,yBAAyB;IACzB,oBAAoB;IACpB,+BAA+B;IAC/B,0BAA0B;IAC1B,qBAAqB;IACrB,gBAAgB;CACR,CAAC;AAEX,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,CAAU,CAAC;AACnE,MAAM,WAAW,GAAG;IAClB,oBAAoB;IACpB,eAAe;IACf,sBAAsB;CACd,CAAC;AAEX,KAAK,UAAU,kBAAkB,CAC/B,IAAkB,EAClB,IAAY;IAEZ,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IACD,sEAAsE;IACtE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAkB;IAElB,6DAA6D;IAC7D,KAAK,MAAM,CAAC,IAAI,wBAAwB,EAAE,CAAC;QACzC,IAAI,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,kDAAkD;IAClD,KAAK,MAAM,IAAI,IAAI,wBAAwB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAClE,CAAC;IACD,oFAAoF;IACpF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAC9B;YACE,MAAM;YACN,IAAI;YACJ,6EAA6E;SAC9E,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAChC;gBACE,MAAM;gBACN,IAAI;gBACJ,iHAAiH;aAClH,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;YACvE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAkB;IAM1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAErC,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;YACE,MAAM;YACN,IAAI;YACJ,6EAA6E;SAC9E,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,gBAAgB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,KAAK;IACP,CAAC;IAED,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB;QACrE,SAAS;QACT,KAAK;QACL,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAKvC;IACC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC;IACxD,+CAA+C;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG;QACb,YAAY,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,EAAE;QACxC,QAAQ,UAAU,CAAC,GAAG,CAAC,kBAAkB,UAAU,CAAC,IAAI,CAAC,EAAE;QAC3D,aAAa,UAAU,CAAC,IAAI,CAAC,EAAE;QAC/B,YAAY,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,EAAE;QAC1F,yDAAyD;QACzD,WAAW,UAAU,CAAC,IAAI,CAAC,eAAe,UAAU,CAAC,IAAI,CAAC,EAAE;KAC7D,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,+BAA+B,EAAE;YAClC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC/D,CAAC,CACH,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,2BAA2B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAkB,EAClB,OAAe;IAEf,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;YACE,MAAM;YACN,IAAI;YACJ,mCAAmC,IAAI,oCAAoC;SAC5E,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAkB,EAClB,IAAY;IAEZ,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,EACpE,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACrC,6EAA6E;IAC7E,IACE,sEAAsE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EACxB,CAAC;QACD,OAAO,EAAE,CAAC,0BAA0B,EAAE;YACpC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;iBACjB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6CAA6C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnE,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,UAAU;SAChC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,kEAAkE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,CAAC,2BAA2B,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,iDAAiD;IACjD,IACE,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACvC,CAAC,+DAA+D,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACjF,wDAAwD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACnE,CAAC;QACD,OAAO,EAAE,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IACD,IACE,oFAAoF,CAAC,IAAI,CACvF,CAAC,CACF,EACD,CAAC;QACD,OAAO,EAAE,CAAC,mCAAmC,CAAC,CAAC;IACjD,CAAC;IACD,IACE,yGAAyG,CAAC,IAAI,CAC5G,CAAC,CACF,EACD,CAAC;QACD,OAAO,EAAE,CAAC,2BAA2B,EAAE;YACrC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC,kCAAkC,EAAE;YAC5C,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM;SACvB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACnB,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO,EAAE,CAAC,8BAA8B,EAAE;QACxC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,MAAM,EAAE,KAAK,IAAI,eAAe;KACjC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,sBAAsB,CAAC,KAKrC;IACC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC;IACjD,MAAM,MAAM,GAAG;QACb,SAAS,UAAU,CAAC,UAAU,OAAO,OAAO,CAAC,sBAAsB;QACnE,SAAS,UAAU,CAAC,mBAAmB,OAAO,EAAE,CAAC,sBAAsB;QACvE,SAAS,UAAU,CAAC,GAAG,MAAM,MAAM,OAAO,MAAM,CAAC,sBAAsB;QACvE,SAAS,UAAU,CAAC,GAAG,MAAM,MAAM,OAAO,MAAM,CAAC,sBAAsB;QACvE,oEAAoE;QACpE,YAAY,UAAU,CAAC,SAAS,CAAC,OAAO,UAAU,CAAC,WAAW,OAAO,EAAE,CAAC,sBAAsB;KAC/F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAWrC;IAQC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACrE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,SAAS,SAAS,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAExC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE;YACvC,YAAY,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;IAC1B,0EAA0E;IAC1E,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,wBAAwB,EAAE,CAAC;YACzC,IAAI,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtC,GAAG,GAAG,CAAC,CAAC;gBACR,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,yBAAyB,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,mCAAmC,EAAE;gBACtC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;aAClE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,0DAA0D;IAC1D,IAAI,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,iCAAiC,EAAE;YACpC,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;YACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;SACnB,CAAC,CACH,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,uFAAuF;IACvF,MAAM,KAAK,GAAG;QACZ,wBAAwB,UAAU,CAAC,SAAS,CAAC,iBAAiB;QAC9D,sBAAsB;QACtB,aAAa;QACb,+BAA+B;QAC/B,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,iBAAiB,GAAG,UAAU,CAAC,SAAS,CAAC;QACzC;YACE,UAAU,CAAC,GAAG,CAAC;YACf,IAAI,OAAO,EAAE;YACb,aAAa,QAAQ,EAAE;YACvB,UAAU,KAAK,EAAE;YACjB,cAAc,aAAa,EAAE;SAC9B,CAAC,IAAI,CAAC,GAAG,CAAC;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,KAAK,IAAmD,EAAE;QACzE,8DAA8D;QAC9D,MAAM,MAAM,GAAG,0DAA0D,UAAU,CAAC,SAAS,CAAC,eAAe,UAAU,CAAC,KAAK,CAAC,0BAA0B,UAAU,CAAC,SAAS,CAAC,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5M,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/E,OAAO;YACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;SAC5C,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;IAE9B,4EAA4E;IAC5E,IACE,MAAM,CAAC,QAAQ,KAAK,CAAC;QACrB,yDAAyD,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7E,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAC3C,CAAC;QACD,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,+DAA+D;QAC/D,IAAI,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,iCAAiC,EAAE;gBACpC,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;gBACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;aACnB,CAAC,CACH,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,IAAI,CACR,uBAAuB,CAAC;YACtB,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,2BAA2B;SACrD,CAAC,CACH,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,kEAAkE;IAClE,IAAI,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,0BAA0B,EAAE;QAC7B,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;KACnB,CAAC,CACH,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAIpC;IAMC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC/C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,OAAO,yCAAyC,OAAO,sBAAsB,CAAC;IAChH,MAAM,MAAM,GAAG,0DAA0D,UAAU,CAAC,SAAS,CAAC,gBAAgB,UAAU,CAAC,KAAK,CAAC,eAAe,UAAU,CAAC,SAAS,CAAC,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;IAClM,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,wDAAwD;IACxD,MAAM,IAAI,CAAC,UAAU,CACnB;QACE,MAAM;QACN,IAAI;QACJ,qBAAqB,OAAO,qCAAqC,OAAO,uBAAuB;KAChG,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACF,KAAK,CAAC,IAAI,CACR,EAAE,CAAC,0BAA0B,EAAE;QAC7B,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;KACzB,CAAC,CACH,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/hosting/vnc/service.d.ts

@@ -0,0 +1,135 @@
+/**
+ * VNC service — multi-account server (PR-B) + settings/status.
+ */
+import type { HostExecutor } from '../../host/executor.js';
+import { buildConnectionPayload } from './novnc.js';
+import type { VncSessionKind } from './session-ticket.js';
+import { type VncAccountSummary, type VncClientProfile, type VncConnectPath, type VncDesktopProfile, type VncOverviewStatus, type VncRfbBind, type VncSettings } from './types.js';
+export type VncAccountRecord = {
+    id: string;
+    name: string;
+    linuxUser: string;
+    display: number;
+    rfbPort: number;
+    desktop: VncDesktopProfile;
+    rfbBind: VncRfbBind;
+    geometry: string;
+    depth: number;
+    autostart: boolean;
+    hasPassword: boolean;
+    osProvisioned: boolean;
+    createdAt: string;
+    updatedAt: string;
+};
+export type VncOpsResult = {
+    ok: boolean;
+    notes: string[];
+    blocked?: boolean;
+    requiresExecute?: boolean;
+    requiresRoot?: boolean;
+    account?: VncAccountSummary;
+    written?: string[];
+};
+export declare class VncService {
+    private readonly dataDir;
+    private readonly host;
+    constructor(dataDir: string, host: HostExecutor);
+    private root;
+    private ensureDir;
+    private settingsPath;
+    private accountsPath;
+    loadSettings(): VncSettings;
+    saveSettings(patch: Partial<VncSettings>): VncSettings;
+    private loadAccountsRaw;
+    private saveAccounts;
+    private getAccountOrThrow;
+    private nextDisplay;
+    private resolveStatus;
+    listAccounts(): Promise<VncAccountSummary[]>;
+    getConnection(id: string): Promise<{
+        ok: boolean;
+        account: VncAccountSummary;
+        connection: ReturnType<typeof buildConnectionPayload>;
+        notes: string[];
+    }>;
+    startNovncForAccount(id: string): Promise<VncOpsResult>;
+    stopNovncForAccount(id: string): Promise<VncOpsResult>;
+    openFirewallForAccount(id: string): Promise<VncOpsResult>;
+    createAccount(input: {
+        name: string;
+        password?: string;
+        desktop?: VncDesktopProfile;
+        geometry?: string;
+        depth?: number;
+        rfbBind?: VncRfbBind;
+        autostart?: boolean;
+        display?: number;
+        start?: boolean;
+    }): Promise<VncOpsResult>;
+    updateAccount(id: string, patch: {
+        name?: string;
+        desktop?: VncDesktopProfile;
+        geometry?: string;
+        depth?: number;
+        rfbBind?: VncRfbBind;
+        autostart?: boolean;
+    }): Promise<VncOpsResult>;
+    setPassword(id: string, password: string): Promise<VncOpsResult>;
+    startAccount(id: string): Promise<VncOpsResult>;
+    stopAccount(id: string): Promise<VncOpsResult>;
+    deleteAccount(id: string, opts?: {
+        removeLinuxUser?: boolean;
+    }): Promise<VncOpsResult>;
+    private probeStacks;
+    listClientProfiles(): VncClientProfile[];
+    /**
+     * Resolve RFB target for an in-browser VNC session (panel WS will TCP-proxy).
+     * Account: ensure desktop is running on localhost RFB.
+     * Client: connect outbound from this host to profile host:port.
+     */
+    prepareBrowserSession(input: {
+        kind: VncSessionKind;
+        id: string;
+    }): Promise<{
+        ok: boolean;
+        notes: string[];
+        blocked?: boolean;
+        requiresExecute?: boolean;
+        label?: string;
+        rfbHost?: string;
+        rfbPort?: number;
+        /** Optional stored RFB password (client profiles only; never for accounts) */
+        passwordHint?: string;
+    }>;
+    createClientProfile(input: {
+        name: string;
+        host: string;
+        port: number;
+        path?: VncConnectPath;
+        connectHost?: string;
+        password?: string;
+        autostart?: boolean;
+    }): VncClientProfile;
+    updateClientProfile(id: string, patch: {
+        name?: string;
+        host?: string;
+        port?: number;
+        path?: VncConnectPath;
+        connectHost?: string | null;
+        autostart?: boolean;
+        password?: string | null;
+    }): VncClientProfile;
+    clientUp(id: string, path?: VncConnectPath): Promise<VncOpsResult & {
+        profile?: VncClientProfile;
+    }>;
+    clientDown(id: string): Promise<VncOpsResult & {
+        profile?: VncClientProfile;
+    }>;
+    deleteClientProfile(id: string): Promise<VncOpsResult>;
+    status(): Promise<VncOverviewStatus & {
+        accounts: VncAccountSummary[];
+        clientProfiles: VncClientProfile[];
+    }>;
+}
+export declare function createVncService(dataDir: string, host: HostExecutor): VncService;
+//# sourceMappingURL=service.d.ts.map

package/dist/hosting/vnc/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/hosting/vnc/service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAe3D,OAAO,EACL,sBAAsB,EAMvB,MAAM,YAAY,CAAC;AAUpB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAG1D,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,WAAW,EAEjB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AA8CF,qBAAa,UAAU;IAEnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY;IAGrC,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,YAAY;IAIpB,YAAY,IAAI,WAAW;IAc3B,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW;IAQtD,OAAO,CAAC,eAAe;IAkBvB,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,WAAW;YASL,aAAa;IAcrB,YAAY,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAe5C,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QACvC,EAAE,EAAE,OAAO,CAAC;QACZ,OAAO,EAAE,iBAAiB,CAAC;QAC3B,UAAU,EAAE,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;QACtD,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IAwDI,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAqBvD,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAoBtD,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAoBzD,aAAa,CAAC,KAAK,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,iBAAiB,CAAC;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GAAG,OAAO,CAAC,YAAY,CAAC;IAsJnB,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,iBAAiB,CAAC;QAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GACA,OAAO,CAAC,YAAY,CAAC;IAiFlB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA0BhE,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAmG/C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IA4B9C,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GACnC,OAAO,CAAC,YAAY,CAAC;YA8BV,WAAW;IAsEzB,kBAAkB,IAAI,gBAAgB,EAAE;IAIxC;;;;OAIG;IACG,qBAAqB,CAAC,KAAK,EAAE;QACjC,IAAI,EAAE,cAAc,CAAC;QACrB,EAAE,EAAE,MAAM,CAAC;KACZ,GAAG,OAAO,CAAC;QACV,EAAE,EAAE,OAAO,CAAC;QACZ,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,8EAA8E;QAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IA2GF,mBAAmB,CAAC,KAAK,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,cAAc,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,gBAAgB;IAIpB,mBAAmB,CACjB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE;QACL,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,cAAc,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GACA,gBAAgB;IAIb,QAAQ,CACZ,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,YAAY,GAAG;QAAE,OAAO,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAgBnD,UAAU,CACd,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG;QAAE,OAAO,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAenD,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAStD,MAAM,IAAI,OAAO,CACrB,iBAAiB,GAAG;QAClB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QAC9B,cAAc,EAAE,gBAAgB,EAAE,CAAC;KACpC,CACF;CA0CF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,UAAU,CAEhF"}