docker2wslc 0.1.0__tar.gz → 0.2.0__tar.gz

{docker2wslc-0.1.0 → docker2wslc-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: docker2wslc
-Version: 0.1.0
+Version: 0.2.0
 Summary: Translate Docker commands and Compose files to wslc, the native WSL container runtime
 Project-URL: Homepage, https://wslcontainers.com
 Project-URL: Documentation, https://wslcontainers.com/reference/cheatsheet/
@@ -46,13 +46,13 @@ pip install 'docker2wslc[yaml]'  # + Compose analysis
 
 ```console
 $ docker2wslc convert docker run --gpus all --restart always -p 8080:80 nginx
-wslc run --device nvidia.com/gpu=all -p 8080:80 nginx
+wslc run --gpus all -p 8080:80 nginx
 
 Migration notes
   WARN  Restart policies are not implemented in the wslc preview. Flag dropped — use a
         Windows scheduled task or a wrapper script for auto-restart.
-  INFO  GPU access in wslc goes through the Container Device Interface. Use
-        `--device nvidia.com/gpu=all` instead of `--gpus`.
+  INFO  `--gpus` is native in wslc 2.9.4, but the host must actually have the GPU: on a
+        machine without one, `--gpus all` fails at container init with an ldconfig error.
 ```
 
 Commands come from arguments, a file, or stdin:
@@ -74,15 +74,18 @@ $ docker2wslc compose docker-compose.yml
 
 wslc volume create pgdata
 wslc network create backend
+# start order matters: web -> db
 
 # service: web
 wslc run -d --name web -e NGINX_HOST=localhost -p 8080:80 --network backend nginx:alpine
+  ! networks: Bridge-only. Create with wslc network create before running.
   x depends_on: No dependency ordering. Start services in order yourself and add readiness waits.
   x restart: No restart policies in the wslc preview.
 
 # service: db
-wslc run -d --name db -v pgdata:/var/lib/postgresql/data postgres:16-alpine
-  x healthcheck: wslc has no healthcheck support; depends_on conditions relying on it cannot work.
+wslc run -d --name db -v pgdata:/var/lib/postgresql/data --network backend --health-cmd 'pg_isready -U postgres' --health-interval 10s --health-retries 5 postgres:16-alpine
+  ! volumes: Named volumes must be created first with wslc volume create. Windows paths go over VirtioFS.
+  ! networks: Bridge-only. Create with wslc network create before running.
 ```
 
 ## Lint a repository
@@ -132,10 +135,10 @@ Worth knowing before you migrate. These are runtime limitations, not gaps in thi
 - **No Compose runtime** — translate services by hand, see the [migration guide](https://wslcontainers.com/guides/compose/)
 - **No restart policies** — use a scheduled task
 - **No `--platform`** — host architecture only
-- **No healthchecks** — so `depends_on` conditions cannot work
+- **No `depends_on` gating** — health flags work (`--health-cmd` et al), but nothing waits on health state for you
 - **No Docker socket or Engine API** — [Testcontainers, Portainer and act cannot attach](https://wslcontainers.com/guides/testcontainers/)
 - **No buildx / bake** — single-platform `wslc build` only
-- **GPU via CDI** — `--device nvidia.com/gpu=all`, not `--gpus all`
+- **GPU** — `--gpus all`, the same flag as Docker. It is `--device` that wslc lacks.
 
 CLI-driven tooling ports to wslc. API-driven tooling does not. That single distinction
 explains most migration surprises — including why

{docker2wslc-0.1.0 → docker2wslc-0.2.0}/README.md

@@ -15,13 +15,13 @@ pip install 'docker2wslc[yaml]'  # + Compose analysis
 
 ```console
 $ docker2wslc convert docker run --gpus all --restart always -p 8080:80 nginx
-wslc run --device nvidia.com/gpu=all -p 8080:80 nginx
+wslc run --gpus all -p 8080:80 nginx
 
 Migration notes
   WARN  Restart policies are not implemented in the wslc preview. Flag dropped — use a
         Windows scheduled task or a wrapper script for auto-restart.
-  INFO  GPU access in wslc goes through the Container Device Interface. Use
-        `--device nvidia.com/gpu=all` instead of `--gpus`.
+  INFO  `--gpus` is native in wslc 2.9.4, but the host must actually have the GPU: on a
+        machine without one, `--gpus all` fails at container init with an ldconfig error.
 ```
 
 Commands come from arguments, a file, or stdin:
@@ -43,15 +43,18 @@ $ docker2wslc compose docker-compose.yml
 
 wslc volume create pgdata
 wslc network create backend
+# start order matters: web -> db
 
 # service: web
 wslc run -d --name web -e NGINX_HOST=localhost -p 8080:80 --network backend nginx:alpine
+  ! networks: Bridge-only. Create with wslc network create before running.
   x depends_on: No dependency ordering. Start services in order yourself and add readiness waits.
   x restart: No restart policies in the wslc preview.
 
 # service: db
-wslc run -d --name db -v pgdata:/var/lib/postgresql/data postgres:16-alpine
-  x healthcheck: wslc has no healthcheck support; depends_on conditions relying on it cannot work.
+wslc run -d --name db -v pgdata:/var/lib/postgresql/data --network backend --health-cmd 'pg_isready -U postgres' --health-interval 10s --health-retries 5 postgres:16-alpine
+  ! volumes: Named volumes must be created first with wslc volume create. Windows paths go over VirtioFS.
+  ! networks: Bridge-only. Create with wslc network create before running.
 ```
 
 ## Lint a repository
@@ -101,10 +104,10 @@ Worth knowing before you migrate. These are runtime limitations, not gaps in thi
 - **No Compose runtime** — translate services by hand, see the [migration guide](https://wslcontainers.com/guides/compose/)
 - **No restart policies** — use a scheduled task
 - **No `--platform`** — host architecture only
-- **No healthchecks** — so `depends_on` conditions cannot work
+- **No `depends_on` gating** — health flags work (`--health-cmd` et al), but nothing waits on health state for you
 - **No Docker socket or Engine API** — [Testcontainers, Portainer and act cannot attach](https://wslcontainers.com/guides/testcontainers/)
 - **No buildx / bake** — single-platform `wslc build` only
-- **GPU via CDI** — `--device nvidia.com/gpu=all`, not `--gpus all`
+- **GPU** — `--gpus all`, the same flag as Docker. It is `--device` that wslc lacks.
 
 CLI-driven tooling ports to wslc. API-driven tooling does not. That single distinction
 explains most migration surprises — including why

{docker2wslc-0.1.0 → docker2wslc-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "docker2wslc"
-version = "0.1.0"
+version = "0.2.0"
 description = "Translate Docker commands and Compose files to wslc, the native WSL container runtime"
 readme = "README.md"
 requires-python = ">=3.9"

{docker2wslc-0.1.0 → docker2wslc-0.2.0}/src/docker2wslc/__init__.py

@@ -4,7 +4,7 @@ wslc is the native Linux container runtime in the Windows Subsystem for Linux.
 Docs and an interactive converter: https://wslcontainers.com
 """
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"
 
 from .compose import ComposeReport, analyse
 from .translate import Note, Result, load_rules, translate, translate_line

{docker2wslc-0.1.0 → docker2wslc-0.2.0}/src/docker2wslc/compose.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import re
 from dataclasses import dataclass, field
 from typing import Any
 
@@ -65,11 +66,62 @@ def _as_list(value: Any) -> list[str]:
     return [str(value)]
 
 
+def _upper_size(value: Any) -> str:
+    """wslc rejects lowercase size units: 512m -> Invalid memory argument value."""
+    return re.sub(
+        r"^(\d+(?:\.\d+)?)\s*([kmgtKMGT])(b?|B?)$",
+        lambda m: m.group(1) + m.group(2).upper() + m.group(3).upper(),
+        str(value),
+    )
+
+
+_UNIT_SECONDS = {"h": 3600, "m": 60, "s": 1, "ms": 0.001, "us": 0.000001}
+
+
+def _stop_seconds(value: Any) -> str:
+    """--stop-timeout takes plain seconds; stop_grace_period is a Go duration.
+
+    Compose allows compound forms like `1m30s`, so a single-unit regex is not
+    enough -- `1m30s` must become 90, not pass through unchanged.
+    """
+    raw = str(value).strip()
+    if re.fullmatch(r"\d+", raw):
+        return raw
+    parts = re.findall(r"(\d+(?:\.\d+)?)(ms|us|h|m|s)", raw)
+    if not parts or "".join(n + u for n, u in parts) != raw:
+        return raw
+    total = sum(float(n) * _UNIT_SECONDS[u] for n, u in parts)
+    return str(round(total))
+
+
+def _shell_quote(value: Any) -> str:
+    """Args are joined into one shell line, so whitespace must be quoted."""
+    s = str(value)
+    if s == "":
+        return "''"
+    if not re.search(r"""[\s"'$`\\|&;<>()*?!#~\[\]{}]""", s):
+        return s
+    return "'" + s.replace("'", "'\\''") + "'"
+
+
+def _health_cmd(test: Any) -> str:
+    """Compose test: is a string, or a list led by CMD / CMD-SHELL / NONE."""
+    if not isinstance(test, list):
+        return str(test)
+    parts = [str(p) for p in test]
+    head = (parts[0] if parts else "").upper()
+    if head in ("CMD-SHELL", "CMD"):
+        return " ".join(parts[1:])
+    if head == "NONE":
+        return ""
+    return " ".join(parts)
+
+
 def _build_run(name: str, svc: dict[str, Any]) -> str:
     args: list[str] = ["wslc", "run", "-d", "--name", svc.get("container_name") or name]
 
     for env in _as_list(svc.get("environment")):
-        args += ["-e", env]
+        args += ["-e", _shell_quote(env)]
     for env_file in _as_list(svc.get("env_file")):
         args += ["--env-file", env_file]
     for port in _as_list(svc.get("ports")):
@@ -78,14 +130,17 @@ def _build_run(name: str, svc: dict[str, Any]) -> str:
         args += ["-v", vol]
     for net in _as_list(svc.get("networks")):
         args += ["--network", net]
-    for cap in _as_list(svc.get("cap_add")):
-        args += ["--cap-add", cap]
-    for dev in _as_list(svc.get("devices")):
-        args += ["--device", dev]
+    # cap_add / cap_drop / devices / privileged / security_opt / expose are
+    # deliberately NOT emitted: wslc 2.9.4 has no such flags, so emitting them
+    # yields "Argument name was not recognized". They surface as findings.
     for label in _as_list(svc.get("labels")):
-        args += ["--label", label]
+        args += ["--label", _shell_quote(label)]
     for tmp in _as_list(svc.get("tmpfs")):
         args += ["--tmpfs", tmp]
+    for dns in _as_list(svc.get("dns")):
+        args += ["--dns", str(dns)]
+    for ulimit in _as_list(svc.get("ulimits")):
+        args += ["--ulimit", _shell_quote(ulimit)]
 
     if svc.get("working_dir"):
         args += ["-w", str(svc["working_dir"])]
@@ -93,9 +148,37 @@ def _build_run(name: str, svc: dict[str, Any]) -> str:
         args += ["-u", str(svc["user"])]
     if svc.get("hostname"):
         args += ["--hostname", str(svc["hostname"])]
+    if svc.get("domainname"):
+        args += ["--domainname", str(svc["domainname"])]
+    if svc.get("shm_size"):
+        args += ["--shm-size", _upper_size(svc["shm_size"])]
+    if svc.get("mem_limit"):
+        args += ["-m", _upper_size(svc["mem_limit"])]
+    if svc.get("cpus"):
+        args += ["--cpus", str(svc["cpus"])]
+    if svc.get("stop_signal"):
+        args += ["--stop-signal", str(svc["stop_signal"])]
+    if svc.get("stop_grace_period"):
+        args += ["--stop-timeout", _stop_seconds(svc["stop_grace_period"])]
+    # healthcheck maps flag-for-flag onto wslc run --health-* (verified 2.9.4.0).
+    hc = svc.get("healthcheck")
+    if isinstance(hc, dict):
+        if hc.get("disable") in (True, "true"):
+            args.append("--no-healthcheck")
+        else:
+            if hc.get("test"):
+                args += ["--health-cmd", _shell_quote(_health_cmd(hc["test"]))]
+            if hc.get("interval"):
+                args += ["--health-interval", str(hc["interval"])]
+            if hc.get("retries"):
+                args += ["--health-retries", str(hc["retries"])]
+            if hc.get("timeout"):
+                args += ["--health-timeout", str(hc["timeout"])]
+            if hc.get("start_period"):
+                args += ["--health-start-period", str(hc["start_period"])]
     if svc.get("entrypoint"):
         ep = svc["entrypoint"]
-        args += ["--entrypoint", ep if isinstance(ep, str) else " ".join(ep)]
+        args += ["--entrypoint", _shell_quote(ep if isinstance(ep, str) else " ".join(ep))]
     if svc.get("stdin_open"):
         args.append("-i")
     if svc.get("tty"):

docker2wslc-0.2.0/src/docker2wslc/rules.json

@@ -0,0 +1,572 @@
+{
+  "$comment": "Single source of truth for Docker -> wslc translation. Consumed by the Python package, the npm CLI, the MCP server and the VS Code extension. Do not fork this logic per language. Every claim here is verified against a real wslc on a windows-2025 runner; see `verification`.",
+  "schemaVersion": 2,
+  "wslcPreview": "2.9.4.0",
+  "identical": [
+    "run",
+    "build",
+    "pull",
+    "push",
+    "stop",
+    "start",
+    "exec",
+    "logs",
+    "inspect",
+    "stats",
+    "tag",
+    "login",
+    "logout",
+    "kill",
+    "save",
+    "load",
+    "attach",
+    "version"
+  ],
+  "renamed": {
+    "ps": "container list",
+    "images": "image list",
+    "rmi": "image remove",
+    "rm": "container remove",
+    "create": "container create",
+    "cp": "container cp"
+  },
+  "renamedFlags": {
+    "ps": {
+      "-a": "--all",
+      "--all": "--all",
+      "-q": "--quiet",
+      "--quiet": "--quiet"
+    },
+    "images": {
+      "-a": "--all",
+      "--all": "--all"
+    },
+    "rm": {
+      "-f": "--force",
+      "--force": "--force"
+    },
+    "rmi": {
+      "-f": "--force",
+      "--force": "--force"
+    }
+  },
+  "unsupported": {
+    "swarm": "Swarm orchestration has no wslc equivalent. Use Kubernetes or keep Docker for this workload.",
+    "service": "Swarm services are not supported by wslc.",
+    "stack": "Swarm stacks are not supported by wslc.",
+    "node": "Swarm node management is not supported by wslc.",
+    "secret": "Swarm secrets are not supported. Pass values with -e or mount a file.",
+    "config": "Swarm configs are not supported by wslc.",
+    "plugin": "Docker plugins are not supported by wslc.",
+    "context": "wslc has a single local runtime, so there are no contexts to switch.",
+    "buildx": "buildx / bake is not available. Use wslc build for single-platform images.",
+    "manifest": "Manifest lists cannot be created with wslc in the preview.",
+    "trust": "Docker Content Trust is Docker-specific and has no wslc equivalent.",
+    "checkpoint": "Checkpoint/restore is not implemented in wslc.",
+    "restart": "No restart command in wslc 2.9.4. Run `wslc stop <id>` then `wslc start <id>`.",
+    "pause": "Pause/unpause (SIGSTOP freezing) is not implemented in wslc 2.9.4.",
+    "unpause": "Pause/unpause is not implemented in wslc 2.9.4.",
+    "info": "No `system info`. `wslc system` only exposes `session`. Use `wslc version` for build info.",
+    "top": "No `top`. Use `wslc exec <id> ps aux` inside the container.",
+    "wait": "No `wait`. Poll `wslc container list` or run the container in the foreground without --detach.",
+    "port": "No `port` command. Published ports are shown in the PORTS column of `wslc container list`.",
+    "rename": "Containers cannot be renamed in wslc 2.9.4. Recreate with the desired --name.",
+    "diff": "No filesystem diff. `wslc export <id>` writes the container filesystem to a tar for inspection.",
+    "commit": "No commit. Use `wslc export` then `wslc import`, or build from a Dockerfile.",
+    "history": "wslc 2.9.4 has no image history. `wslc image inspect` shows config but not per-layer history.",
+    "search": "wslc 2.9.4 cannot search a registry. Browse Docker Hub / the registry web UI instead."
+  },
+  "flags": {
+    "--platform": {
+      "action": "drop",
+      "takesValue": true,
+      "severity": "warn",
+      "note": "`--platform` is dropped: wslc builds and runs for the host architecture only in the preview."
+    },
+    "--restart": {
+      "action": "drop",
+      "takesValue": true,
+      "severity": "warn",
+      "note": "Restart policies are not implemented in the wslc preview. Flag dropped — use a Windows scheduled task or a wrapper script for auto-restart."
+    },
+    "--gpus": {
+      "action": "keep",
+      "takesValue": true,
+      "severity": "info",
+      "note": "`--gpus` is native in wslc 2.9.4 (`--gpus all`). Do NOT rewrite it to `--device`: wslc has no --device flag. On a host without an NVIDIA GPU the run fails at container init with an ldconfig error.",
+      "noteAlways": "`--gpus` is native in wslc 2.9.4, but the host must actually have the GPU: on a machine without one, `--gpus all` fails at container init with an ldconfig error."
+    },
+    "--network": {
+      "action": "conditional",
+      "takesValue": true,
+      "whenValue": {
+        "host": {
+          "action": "error",
+          "severity": "error",
+          "note": "wslc rejects host networking outright: `host mode networking is not supported` (exit 1). It is not implicit and cannot be dropped silently. `--network none` works."
+        }
+      },
+      "severity": "info",
+      "note": "Custom networks are supported: create with `wslc network create`, then `wslc network connect`. `none` is valid; `host` is rejected."
+    },
+    "--volume": {
+      "action": "keep",
+      "takesValue": true,
+      "aliases": [
+        "-v",
+        "--mount"
+      ],
+      "severity": "info",
+      "noteWhenWindowsPath": "Windows host paths are shared over VirtioFS. Use forward slashes (`C:/work:/app`) and expect Linux-style permissions on the container side."
+    },
+    "--memory": {
+      "action": "keep",
+      "takesValue": true,
+      "severity": "info",
+      "note": "Supported (`-m`). Unit suffix must be UPPERCASE: `512M` works, `512m` is rejected with `Invalid memory argument value`. Plain byte counts also work. Expect a kernel warning that swap limits are unavailable.",
+      "requireValuePattern": "^[0-9]+([KMGT]|[KMGT]B)?$",
+      "noteWhenValueRejected": "wslc rejects lowercase size units: `--memory 512m` fails with `Invalid memory argument value`. Use an UPPERCASE suffix (512M, 1G) or a plain byte count.",
+      "aliases": [
+        "-m"
+      ],
+      "fixValueCase": "upperSizeSuffix",
+      "noteWhenValueFixed": "Rewrote the size to use an UPPERCASE unit suffix: wslc rejects lowercase units (`Invalid memory argument value`) while Docker accepts both."
+    },
+    "--shm-size": {
+      "action": "keep",
+      "takesValue": true,
+      "severity": "info",
+      "note": "Supported. Same uppercase-unit rule as --memory: `64M` works, `64m` is rejected.",
+      "requireValuePattern": "^[0-9]+([KMGT]|[KMGT]B)?$",
+      "noteWhenValueRejected": "wslc rejects lowercase size units: `--shm-size 64m` fails with `Invalid shm-size argument value`. Use an UPPERCASE suffix (64M, 1G).",
+      "fixValueCase": "upperSizeSuffix",
+      "noteWhenValueFixed": "Rewrote the size to use an UPPERCASE unit suffix: wslc rejects lowercase units (`Invalid shm-size argument value`) while Docker accepts both."
+    },
+    "--cpus": {
+      "action": "keep",
+      "takesValue": true,
+      "severity": "info",
+      "note": "Supported, accepts fractional values (0.5, 1, 2.5)."
+    },
+    "--ulimit": {
+      "action": "keep",
+      "takesValue": true,
+      "severity": "info",
+      "note": "Supported, e.g. `--ulimit nofile=1024:1024`."
+    },
+    "--stop-timeout": {
+      "action": "keep",
+      "takesValue": true,
+      "severity": "info",
+      "note": "Supported, seconds; -1 means no timeout."
+    },
+    "--health-cmd": {
+      "action": "keep",
+      "takesValue": true,
+      "severity": "info",
+      "note": "Supported. wslc has the full health-check family: --health-cmd, --health-interval, --health-retries, --health-start-period, --health-timeout, --no-healthcheck."
+    },
+    "--device": {
+      "action": "drop",
+      "takesValue": true,
+      "severity": "warn",
+      "note": "wslc 2.9.4 has no --device flag (`Argument name was not recognized`). For GPUs use --gpus."
+    },
+    "--publish": {
+      "action": "keep",
+      "takesValue": true,
+      "aliases": [
+        "-p"
+      ],
+      "severity": "info",
+      "note": "Supported (`-p`). `-P/--publish-all` publishes all exposed ports."
+    },
+    "--cap-add": {
+      "action": "drop",
+      "takesValue": true,
+      "severity": "warn",
+      "note": "wslc 2.9.4 has no --cap-add (`Argument name was not recognized`). There is no way to grant extra capabilities; --privileged and --security-opt are missing too."
+    },
+    "--cap-drop": {
+      "action": "drop",
+      "takesValue": true,
+      "severity": "warn",
+      "note": "wslc 2.9.4 has no --cap-drop (`Argument name was not recognized`)."
+    },
+    "--privileged": {
+      "action": "drop",
+      "takesValue": false,
+      "severity": "warn",
+      "note": "wslc 2.9.4 has no --privileged (`Argument name was not recognized`)."
+    },
+    "--security-opt": {
+      "action": "drop",
+      "takesValue": true,
+      "severity": "warn",
+      "note": "wslc 2.9.4 has no --security-opt (`Argument name was not recognized`)."
+    },
+    "--expose": {
+      "action": "drop",
+      "takesValue": true,
+      "severity": "warn",
+      "note": "wslc 2.9.4 has no --expose. Publish the port with -p, or use -P/--publish-all to publish every port the image exposes."
+    }
+  },
+  "compose": {
+    "supported": false,
+    "note": "wslc has no built-in Compose runtime. Translate each service into a wslc run call, or drive them from a PowerShell/bash script.",
+    "docsUrl": "https://wslcontainers.com/guides/compose/",
+    "keys": {
+      "image": {
+        "status": "ok",
+        "maps": "positional image argument"
+      },
+      "build": {
+        "status": "ok",
+        "maps": "wslc build -t <name>"
+      },
+      "command": {
+        "status": "ok",
+        "maps": "trailing command args"
+      },
+      "entrypoint": {
+        "status": "ok",
+        "maps": "--entrypoint"
+      },
+      "environment": {
+        "status": "ok",
+        "maps": "-e KEY=VALUE"
+      },
+      "env_file": {
+        "status": "ok",
+        "maps": "--env-file"
+      },
+      "ports": {
+        "status": "ok",
+        "maps": "-p HOST:CONTAINER"
+      },
+      "volumes": {
+        "status": "partial",
+        "maps": "-v",
+        "note": "Named volumes must be created first with wslc volume create. Windows paths go over VirtioFS."
+      },
+      "networks": {
+        "status": "partial",
+        "maps": "--network",
+        "note": "Bridge-only. Create with wslc network create before running."
+      },
+      "working_dir": {
+        "status": "ok",
+        "maps": "-w"
+      },
+      "user": {
+        "status": "ok",
+        "maps": "-u"
+      },
+      "hostname": {
+        "status": "ok",
+        "maps": "--hostname"
+      },
+      "container_name": {
+        "status": "ok",
+        "maps": "--name"
+      },
+      "labels": {
+        "status": "ok",
+        "maps": "--label"
+      },
+      "cap_add": {
+        "status": "missing",
+        "note": "wslc 2.9.4 has no --cap-add (`Argument name was not recognized`), and no --privileged or --security-opt either."
+      },
+      "devices": {
+        "status": "missing",
+        "note": "wslc 2.9.4 has no --device. GPUs go through --gpus; there is no generic device passthrough."
+      },
+      "tmpfs": {
+        "status": "ok",
+        "maps": "--tmpfs"
+      },
+      "stdin_open": {
+        "status": "ok",
+        "maps": "-i"
+      },
+      "tty": {
+        "status": "ok",
+        "maps": "-t"
+      },
+      "restart": {
+        "status": "missing",
+        "note": "No restart policies in the wslc preview."
+      },
+      "healthcheck": {
+        "status": "ok",
+        "maps": "--health-cmd / --health-interval / --health-retries / --health-timeout / --health-start-period",
+        "emit": "health",
+        "note": "wslc run implements all five health flags plus --no-healthcheck. Nothing reads the compose file, so the flags are emitted onto the run command for you. What is still missing is depends_on gating on health state."
+      },
+      "depends_on": {
+        "status": "missing",
+        "note": "No dependency ordering. Start services in order yourself and add readiness waits."
+      },
+      "deploy": {
+        "status": "missing",
+        "note": "Swarm-only section, ignored entirely."
+      },
+      "profiles": {
+        "status": "missing",
+        "note": "Compose-only concept."
+      },
+      "extends": {
+        "status": "missing",
+        "note": "Compose-only concept."
+      },
+      "configs": {
+        "status": "missing",
+        "note": "Swarm configs are unsupported; mount a file instead."
+      },
+      "secrets": {
+        "status": "missing",
+        "note": "Swarm secrets are unsupported; use -e or a mounted file."
+      },
+      "cap_drop": {
+        "status": "missing",
+        "note": "wslc 2.9.4 has no --cap-drop."
+      },
+      "expose": {
+        "status": "missing",
+        "note": "No --expose on wslc run. Publish with ports: (-p), or use -P to publish everything the image exposes."
+      },
+      "network_mode": {
+        "status": "missing",
+        "note": "network_mode: host is refused with `host mode networking is not supported`. Use a user-defined network plus published ports."
+      },
+      "privileged": {
+        "status": "missing",
+        "note": "No --privileged on wslc run."
+      },
+      "security_opt": {
+        "status": "missing",
+        "note": "No --security-opt on wslc run."
+      },
+      "shm_size": {
+        "status": "ok",
+        "maps": "--shm-size",
+        "note": "Unit suffix must be UPPERCASE (64M, not 64m)."
+      },
+      "mem_limit": {
+        "status": "ok",
+        "maps": "-m",
+        "note": "Unit suffix must be UPPERCASE (512M, not 512m)."
+      },
+      "dns": {
+        "status": "ok",
+        "maps": "--dns"
+      },
+      "ulimits": {
+        "status": "ok",
+        "maps": "--ulimit"
+      },
+      "domainname": {
+        "status": "ok",
+        "maps": "--domainname"
+      },
+      "stop_signal": {
+        "status": "ok",
+        "maps": "--stop-signal"
+      },
+      "stop_grace_period": {
+        "status": "ok",
+        "maps": "--stop-timeout",
+        "note": "Converted to whole seconds."
+      }
+    }
+  },
+  "devcontainer": {
+    "keys": {
+      "image": {
+        "status": "ok"
+      },
+      "build.dockerfile": {
+        "status": "ok"
+      },
+      "build.args": {
+        "status": "ok",
+        "maps": "--build-arg"
+      },
+      "build.platform": {
+        "status": "missing",
+        "note": "Host architecture only."
+      },
+      "workspaceMount": {
+        "status": "partial",
+        "note": "VirtioFS; use forward slashes for Windows paths."
+      },
+      "workspaceFolder": {
+        "status": "ok"
+      },
+      "containerEnv": {
+        "status": "ok",
+        "maps": "-e"
+      },
+      "remoteEnv": {
+        "status": "ok"
+      },
+      "forwardPorts": {
+        "status": "ok",
+        "maps": "-p"
+      },
+      "postCreateCommand": {
+        "status": "ok",
+        "maps": "wslc exec"
+      },
+      "postStartCommand": {
+        "status": "ok"
+      },
+      "postAttachCommand": {
+        "status": "ok"
+      },
+      "remoteUser": {
+        "status": "ok",
+        "maps": "-u"
+      },
+      "containerUser": {
+        "status": "ok"
+      },
+      "mounts": {
+        "status": "partial",
+        "note": "VirtioFS path rules apply."
+      },
+      "runArgs": {
+        "status": "partial",
+        "note": "Passed through verbatim; unsupported flags will fail at runtime."
+      },
+      "dockerComposeFile": {
+        "status": "missing",
+        "note": "No Compose runtime. Replace with a single image or build entry."
+      },
+      "features": {
+        "status": "missing",
+        "note": "Requires BuildKit metadata that wslc build does not emit."
+      },
+      "runServices": {
+        "status": "missing",
+        "note": "Compose-only key."
+      },
+      "shutdownAction": {
+        "status": "partial",
+        "note": "stopCompose is meaningless without Compose."
+      }
+    },
+    "requiredSetting": {
+      "key": "dev.containers.dockerPath",
+      "value": "wslc",
+      "note": "Point the Dev Containers extension at wslc. Prefer workspace scope over global."
+    }
+  },
+  "apiIncompatible": {
+    "note": "CLI-driven tooling ports to wslc. API-driven tooling cannot, because wslc is daemonless and exposes no Docker Engine API or socket.",
+    "tools": [
+      {
+        "name": "Testcontainers",
+        "via": "Engine API",
+        "works": false
+      },
+      {
+        "name": "Docker-in-Docker sidecars",
+        "via": "mounted socket",
+        "works": false
+      },
+      {
+        "name": "Portainer",
+        "via": "Engine API",
+        "works": false
+      },
+      {
+        "name": "Lazydocker",
+        "via": "Engine API",
+        "works": false
+      },
+      {
+        "name": "LocalStack (docker mode)",
+        "via": "Engine API",
+        "works": false
+      },
+      {
+        "name": "act",
+        "via": "Engine API",
+        "works": false
+      },
+      {
+        "name": "VS Code Dev Containers",
+        "via": "CLI binary",
+        "works": true
+      },
+      {
+        "name": "shell scripts calling docker",
+        "via": "CLI binary",
+        "works": true
+      }
+    ]
+  },
+  "links": {
+    "site": "https://wslcontainers.com",
+    "converter": "https://wslcontainers.com/",
+    "cheatsheet": "https://wslcontainers.com/reference/cheatsheet/",
+    "compose": "https://wslcontainers.com/guides/compose/",
+    "install": "https://wslcontainers.com/guides/install/",
+    "vsDocker": "https://wslcontainers.com/guides/vs-docker-desktop/",
+    "devcontainers": "https://wslcontainers.com/guides/vscode-dev-containers/",
+    "testcontainers": "https://wslcontainers.com/guides/testcontainers/"
+  },
+  "renamedOptional": {
+    "$comment": "wslc accepts BOTH the docker-style short command and the noun-verb form (verified: `wslc ps` and `wslc container list` both exit 0). These rewrites are cosmetic; converters should not treat the short form as an error.",
+    "commands": {
+      "ps": "container list",
+      "images": "image list",
+      "rmi": "image remove",
+      "rm": "container remove",
+      "create": "container create"
+    }
+  },
+  "verification": {
+    "wslcVersion": "2.9.4.0",
+    "verifiedAt": "2026-07-29",
+    "method": "GitHub Actions windows-2025 runner, real wslc invocations",
+    "runs": [
+      "30417819781",
+      "30417964880",
+      "30418758451"
+    ]
+  },
+  "twoWord": {
+    "system prune": {
+      "status": "unsupported",
+      "note": "`wslc system` only exposes `session` in 2.9.4 — there is no `system prune`. Run the per-noun prunes instead: `wslc container prune`, `wslc image prune`, `wslc volume prune`, `wslc network prune`."
+    },
+    "system info": {
+      "status": "unsupported",
+      "note": "No `system info` in wslc 2.9.4. Use `wslc version`."
+    },
+    "system df": {
+      "status": "unsupported",
+      "note": "No `system df` in wslc 2.9.4. Inspect per-noun listings instead."
+    },
+    "container prune": {
+      "status": "supported",
+      "note": "Removes all stopped containers."
+    },
+    "image prune": {
+      "status": "supported",
+      "note": "Removes dangling images; --all removes all unused images."
+    },
+    "volume prune": {
+      "status": "supported",
+      "note": "Removes unused anonymous volumes; --all includes named ones."
+    },
+    "network prune": {
+      "status": "supported",
+      "note": "Removes all unused networks."
+    }
+  }
+}

{docker2wslc-0.1.0 → docker2wslc-0.2.0}/src/docker2wslc/translate.py

@@ -45,7 +45,12 @@ class Result:
         """0 clean, 1 degraded (flags dropped/rewritten), 2 unmigratable."""
         if self.unsupported_hit or self.compose_hit:
             return 2
-        if any(n.severity in ("warn", "error") for n in self.notes):
+        # severity=error means wslc refuses the command outright (e.g.
+        # `--network host` exits 1 with "host mode networking is not
+        # supported"), so the result is unmigratable, not merely degraded.
+        if any(n.severity == "error" for n in self.notes):
+            return 2
+        if any(n.severity == "warn" for n in self.notes):
             return 1
         return 0
 
@@ -83,6 +88,11 @@ def tokenize(line: str) -> list[str]:
     return out
 
 
+# Verbs where wslc also accepts the docker-style top-level form, so rewriting to
+# the noun form is cosmetic rather than required. Verified on wslc 2.9.4.
+_ALIAS_OK = set(RULES.get("renamedOptional", {}).get("commands", {}))
+
+
 def _flag_spec(flag: str) -> tuple[str, dict[str, Any]] | tuple[None, None]:
     flags = RULES["flags"]
     if flag in flags:
@@ -120,6 +130,15 @@ def _translate_args(args: list[str], notes: list[Note]) -> list[str]:
                     notes.append(Note(branch.get("severity", "info"), branch["note"]))
                     i += consumed
                     continue
+                if branch["action"] == "error":
+                    # Value is passed through so the reader sees what they wrote,
+                    # but flagged as an error: wslc rejects it outright.
+                    notes.append(Note(branch.get("severity", "error"), branch["note"]))
+                    out.append(f"{bare}={value}" if has_inline else bare)
+                    if not has_inline and takes_value and value:
+                        out.append(value)
+                    i += consumed
+                    continue
             notes.append(Note(spec.get("severity", "info"), spec["note"]))
             out.append(f"{bare}={value}" if has_inline else bare)
             if not has_inline and takes_value and value:
@@ -142,9 +161,30 @@ def _translate_args(args: list[str], notes: list[Note]) -> list[str]:
         note_win = spec.get("noteWhenWindowsPath")
         if note_win and (WINDOWS_PATH.match(value) or value.startswith("/mnt/")):
             notes.append(Note(spec.get("severity", "info"), note_win))
-        out.append(arg)
-        if not has_inline and takes_value and value:
-            out.append(value)
+        # Some flags exist but reject certain value formats (verified: wslc wants
+        # uppercase size units, so `-m 512m` fails while `512M` works).
+        emit_value = value
+        fixed = False
+        if spec.get("fixValueCase") == "upperSizeSuffix" and value:
+            up = re.sub(
+                r"^(\d+(?:\.\d+)?)\s*([kmgtKMGT])(b?|B?)$",
+                lambda m: m.group(1) + m.group(2).upper() + m.group(3).upper(),
+                value,
+            )
+            if up != value:
+                emit_value, fixed = up, True
+        if fixed:
+            notes.append(Note("warn", spec["noteWhenValueFixed"]))
+        else:
+            require = spec.get("requireValuePattern")
+            if require and emit_value and not re.match(require, emit_value):
+                notes.append(Note("error", spec["noteWhenValueRejected"]))
+        note_always = spec.get("noteAlways")
+        if note_always:
+            notes.append(Note(spec.get("severity", "info"), note_always))
+        out.append(f"{bare}={emit_value}" if has_inline else arg)
+        if not has_inline and takes_value and emit_value:
+            out.append(emit_value)
         i += consumed
     return out
 
@@ -193,6 +233,20 @@ def translate_line(raw: str) -> Result | None:
         )
 
     two = f"{tokens[0]} {tokens[1]}" if len(tokens) > 1 else ""
+    # Two-word forms with a verified verdict of their own (e.g. `docker system
+    # prune` has no wslc equivalent, but the per-noun prunes do).
+    two_word = RULES.get("twoWord", {})
+    if two and two in two_word:
+        entry = two_word[two]
+        if entry["status"] == "unsupported":
+            notes.append(Note("error", entry["note"]))
+            return Result(
+                output=f"# {two}: not supported by wslc", notes=notes, unsupported_hit=True
+            )
+        notes.append(Note("info", entry["note"]))
+        rest = _translate_args(tokens[2:], notes)
+        return Result(output=" ".join(["wslc", two, *rest]).strip(), notes=notes)
+
     if two and two in (RULES["renamed"].values()):
         rest = _translate_args(tokens[2:], notes)
         return Result(output=" ".join(["wslc", two, *rest]).strip(), notes=notes)
@@ -216,7 +270,12 @@ def translate_line(raw: str) -> Result | None:
             Note(
                 "info",
                 f"`docker {verb}` is grouped under a noun in wslc: `wslc {mapped}`. "
-                f"Recent previews accept `wslc {verb}` as an alias, but the noun form is stable.",
+                + (
+                    f"`wslc {verb}` also works as a top-level alias (verified on 2.9.4), "
+                    "so this rewrite is cosmetic."
+                    if verb in _ALIAS_OK
+                    else f"There is no top-level `wslc {verb}`; the noun form is required."
+                ),
             )
         )
         return Result(output=" ".join(["wslc", mapped, *rest]).strip(), notes=notes)

docker2wslc-0.1.0/src/docker2wslc/rules.json

@@ -1,167 +0,0 @@
-{
-  "$comment": "Single source of truth for Docker -> wslc translation. Consumed by the Python package, the npm CLI, the MCP server and the VS Code extension. Do not fork this logic per language.",
-  "schemaVersion": 1,
-  "wslcPreview": "2026-07",
-  "identical": [
-    "run", "build", "pull", "push", "stop", "start", "restart", "exec", "logs",
-    "inspect", "stats", "cp", "tag", "login", "logout", "kill", "pause",
-    "unpause", "version", "info", "top", "wait", "port", "rename", "diff",
-    "commit", "save", "load", "attach"
-  ],
-  "renamed": {
-    "ps": "container list",
-    "images": "image list",
-    "rmi": "image remove",
-    "rm": "container remove",
-    "create": "container create",
-    "history": "image history",
-    "search": "image search"
-  },
-  "renamedFlags": {
-    "ps": { "-a": "--all", "--all": "--all", "-q": "--quiet", "--quiet": "--quiet" },
-    "images": { "-a": "--all", "--all": "--all" },
-    "rm": { "-f": "--force", "--force": "--force" },
-    "rmi": { "-f": "--force", "--force": "--force" }
-  },
-  "unsupported": {
-    "swarm": "Swarm orchestration has no wslc equivalent. Use Kubernetes or keep Docker for this workload.",
-    "service": "Swarm services are not supported by wslc.",
-    "stack": "Swarm stacks are not supported by wslc.",
-    "node": "Swarm node management is not supported by wslc.",
-    "secret": "Swarm secrets are not supported. Pass values with -e or mount a file.",
-    "config": "Swarm configs are not supported by wslc.",
-    "plugin": "Docker plugins are not supported by wslc.",
-    "context": "wslc has a single local runtime, so there are no contexts to switch.",
-    "buildx": "buildx / bake is not available. Use wslc build for single-platform images.",
-    "manifest": "Manifest lists cannot be created with wslc in the preview.",
-    "trust": "Docker Content Trust is Docker-specific and has no wslc equivalent.",
-    "checkpoint": "Checkpoint/restore is not implemented in wslc."
-  },
-  "flags": {
-    "--platform": {
-      "action": "drop",
-      "takesValue": true,
-      "severity": "warn",
-      "note": "`--platform` is dropped: wslc builds and runs for the host architecture only in the preview."
-    },
-    "--restart": {
-      "action": "drop",
-      "takesValue": true,
-      "severity": "warn",
-      "note": "Restart policies are not implemented in the wslc preview. Flag dropped — use a Windows scheduled task or a wrapper script for auto-restart."
-    },
-    "--gpus": {
-      "action": "rewrite",
-      "takesValue": true,
-      "replaceWith": "--device nvidia.com/gpu=all",
-      "severity": "info",
-      "note": "GPU access in wslc goes through the Container Device Interface. Use `--device nvidia.com/gpu=all` instead of `--gpus`."
-    },
-    "--network": {
-      "action": "conditional",
-      "takesValue": true,
-      "whenValue": {
-        "host": {
-          "action": "drop",
-          "severity": "info",
-          "note": "`--network host` behaves differently: wslc routes container traffic through the Windows host stack already, so host networking is implicit. Flag dropped."
-        }
-      },
-      "severity": "info",
-      "note": "Custom networks are supported but bridge-only. Create it first with `wslc network create`."
-    },
-    "--volume": {
-      "action": "keep",
-      "takesValue": true,
-      "aliases": ["-v", "--mount"],
-      "severity": "info",
-      "noteWhenWindowsPath": "Windows host paths are shared over VirtioFS. Use forward slashes (`C:/work:/app`) and expect Linux-style permissions on the container side."
-    }
-  },
-  "compose": {
-    "supported": false,
-    "note": "wslc has no built-in Compose runtime. Translate each service into a wslc run call, or drive them from a PowerShell/bash script.",
-    "docsUrl": "https://wslcontainers.com/guides/compose/",
-    "keys": {
-      "image":        { "status": "ok",      "maps": "positional image argument" },
-      "build":        { "status": "ok",      "maps": "wslc build -t <name>" },
-      "command":      { "status": "ok",      "maps": "trailing command args" },
-      "entrypoint":   { "status": "ok",      "maps": "--entrypoint" },
-      "environment":  { "status": "ok",      "maps": "-e KEY=VALUE" },
-      "env_file":     { "status": "ok",      "maps": "--env-file" },
-      "ports":        { "status": "ok",      "maps": "-p HOST:CONTAINER" },
-      "volumes":      { "status": "partial", "maps": "-v", "note": "Named volumes must be created first with wslc volume create. Windows paths go over VirtioFS." },
-      "networks":     { "status": "partial", "maps": "--network", "note": "Bridge-only. Create with wslc network create before running." },
-      "working_dir":  { "status": "ok",      "maps": "-w" },
-      "user":         { "status": "ok",      "maps": "-u" },
-      "hostname":     { "status": "ok",      "maps": "--hostname" },
-      "container_name": { "status": "ok",    "maps": "--name" },
-      "labels":       { "status": "ok",      "maps": "--label" },
-      "cap_add":      { "status": "partial", "maps": "--cap-add", "note": "Some capabilities are restricted inside the utility VM." },
-      "devices":      { "status": "partial", "maps": "--device", "note": "CDI syntax differs from Docker for GPUs." },
-      "tmpfs":        { "status": "ok",      "maps": "--tmpfs" },
-      "stdin_open":   { "status": "ok",      "maps": "-i" },
-      "tty":          { "status": "ok",      "maps": "-t" },
-      "restart":      { "status": "missing", "note": "No restart policies in the wslc preview." },
-      "healthcheck":  { "status": "missing", "note": "wslc has no healthcheck support; depends_on conditions relying on it cannot work." },
-      "depends_on":   { "status": "missing", "note": "No dependency ordering. Start services in order yourself and add readiness waits." },
-      "deploy":       { "status": "missing", "note": "Swarm-only section, ignored entirely." },
-      "profiles":     { "status": "missing", "note": "Compose-only concept." },
-      "extends":      { "status": "missing", "note": "Compose-only concept." },
-      "configs":      { "status": "missing", "note": "Swarm configs are unsupported; mount a file instead." },
-      "secrets":      { "status": "missing", "note": "Swarm secrets are unsupported; use -e or a mounted file." }
-    }
-  },
-  "devcontainer": {
-    "keys": {
-      "image":             { "status": "ok" },
-      "build.dockerfile":  { "status": "ok" },
-      "build.args":        { "status": "ok",      "maps": "--build-arg" },
-      "build.platform":    { "status": "missing", "note": "Host architecture only." },
-      "workspaceMount":    { "status": "partial", "note": "VirtioFS; use forward slashes for Windows paths." },
-      "workspaceFolder":   { "status": "ok" },
-      "containerEnv":      { "status": "ok",      "maps": "-e" },
-      "remoteEnv":         { "status": "ok" },
-      "forwardPorts":      { "status": "ok",      "maps": "-p" },
-      "postCreateCommand": { "status": "ok",      "maps": "wslc exec" },
-      "postStartCommand":  { "status": "ok" },
-      "postAttachCommand": { "status": "ok" },
-      "remoteUser":        { "status": "ok",      "maps": "-u" },
-      "containerUser":     { "status": "ok" },
-      "mounts":            { "status": "partial", "note": "VirtioFS path rules apply." },
-      "runArgs":           { "status": "partial", "note": "Passed through verbatim; unsupported flags will fail at runtime." },
-      "dockerComposeFile": { "status": "missing", "note": "No Compose runtime. Replace with a single image or build entry." },
-      "features":          { "status": "missing", "note": "Requires BuildKit metadata that wslc build does not emit." },
-      "runServices":       { "status": "missing", "note": "Compose-only key." },
-      "shutdownAction":    { "status": "partial", "note": "stopCompose is meaningless without Compose." }
-    },
-    "requiredSetting": {
-      "key": "dev.containers.dockerPath",
-      "value": "wslc",
-      "note": "Point the Dev Containers extension at wslc. Prefer workspace scope over global."
-    }
-  },
-  "apiIncompatible": {
-    "note": "CLI-driven tooling ports to wslc. API-driven tooling cannot, because wslc is daemonless and exposes no Docker Engine API or socket.",
-    "tools": [
-      { "name": "Testcontainers", "via": "Engine API", "works": false },
-      { "name": "Docker-in-Docker sidecars", "via": "mounted socket", "works": false },
-      { "name": "Portainer", "via": "Engine API", "works": false },
-      { "name": "Lazydocker", "via": "Engine API", "works": false },
-      { "name": "LocalStack (docker mode)", "via": "Engine API", "works": false },
-      { "name": "act", "via": "Engine API", "works": false },
-      { "name": "VS Code Dev Containers", "via": "CLI binary", "works": true },
-      { "name": "shell scripts calling docker", "via": "CLI binary", "works": true }
-    ]
-  },
-  "links": {
-    "site": "https://wslcontainers.com",
-    "converter": "https://wslcontainers.com/",
-    "cheatsheet": "https://wslcontainers.com/reference/cheatsheet/",
-    "compose": "https://wslcontainers.com/guides/compose/",
-    "install": "https://wslcontainers.com/guides/install/",
-    "vsDocker": "https://wslcontainers.com/guides/vs-docker-desktop/",
-    "devcontainers": "https://wslcontainers.com/guides/vscode-dev-containers/",
-    "testcontainers": "https://wslcontainers.com/guides/testcontainers/"
-  }
-}