elsewindow 0.1.0__tar.gz

elsewindow-0.1.0/.version

@@ -0,0 +1 @@
+0.1.0

elsewindow-0.1.0/CHANGELOG.md

@@ -0,0 +1,18 @@
+<!-- Copyright (c) 2026 kogeler. SPDX-License-Identifier: MIT. -->
+
+# Changelog
+
+All notable changes to Elsewindow are documented here.
+
+## [0.1.0] - 2026-08-30
+
+### Added
+
+- Established Elsewindow as an independent Linux project with one public
+  distribution, import package, command, and repository identity.
+- Preserved the one-authentication OpenSSH lifecycle, mux-only Xpra channels,
+  heartbeat-supervised remote process group, and selective cleanup behavior.
+- Shipped reviewed Xpra command and network profiles as package data and kept
+  release-backed package installation and container acceptance tooling.
+- Added CPython 3.13 and 3.14 governance, deterministic Python distributions,
+  Linux standalone artifacts, and fail-closed publication policy.

elsewindow-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 kogeler
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

elsewindow-0.1.0/MANIFEST.in

@@ -0,0 +1,17 @@
+include .version
+include CHANGELOG.md
+include LICENSE
+include MANIFEST.in
+include README.md
+include pyproject.toml
+recursive-include elsewindow *.py *.yml py.typed
+prune .github
+prune bin
+prune containers
+prune doc
+prune tests
+prune tmp
+prune tools
+global-exclude .DS_Store
+global-exclude *.py[cod]
+global-exclude __pycache__

elsewindow-0.1.0/PKG-INFO

@@ -0,0 +1,176 @@
+Metadata-Version: 2.4
+Name: elsewindow
+Version: 0.1.0
+Summary: Run one remote Linux GUI application through Xpra over one owned OpenSSH master
+Author: kogeler
+Maintainer: kogeler
+License-Expression: MIT
+Project-URL: Homepage, https://kogeler.github.io/elsewindow/
+Project-URL: Documentation, https://kogeler.github.io/elsewindow/
+Project-URL: Repository, https://github.com/kogeler/elsewindow
+Project-URL: Issues, https://github.com/kogeler/elsewindow/issues
+Project-URL: Changelog, https://github.com/kogeler/elsewindow/blob/main/CHANGELOG.md
+Keywords: xpra,openssh,ssh,wayland,remote-desktop
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: X11 Applications
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: Topic :: System :: Networking
+Classifier: Typing :: Typed
+Requires-Python: <3.15,>=3.13
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: ssh-wrapper==0.1.0
+Provides-Extra: quality
+Requires-Dist: bandit[toml]==1.9.4; extra == "quality"
+Requires-Dist: mypy==2.3.1; extra == "quality"
+Requires-Dist: pip-audit==2.10.1; extra == "quality"
+Requires-Dist: pip-licenses==5.5.5; extra == "quality"
+Requires-Dist: ruff==0.16.5; extra == "quality"
+Provides-Extra: test
+Requires-Dist: pytest==9.1.1; extra == "test"
+Requires-Dist: pytest-asyncio==1.4.0; extra == "test"
+Requires-Dist: pytest-cov==7.1.0; extra == "test"
+Requires-Dist: pytest-xdist==3.8.0; extra == "test"
+Provides-Extra: package
+Requires-Dist: build==1.6.0; extra == "package"
+Requires-Dist: setuptools==84.0.0; extra == "package"
+Requires-Dist: wheel==0.48.0; extra == "package"
+Provides-Extra: standalone
+Requires-Dist: pyinstaller==6.22.2; extra == "standalone"
+Provides-Extra: docs
+Requires-Dist: mkdocs-material==9.7.7; extra == "docs"
+Dynamic: license-file
+
+# Elsewindow
+
+`elsewindow` starts one GUI application on a remote Linux host and shows
+its windows through Xpra. One owned OpenSSH ControlMaster carries every Xpra
+control channel; the command opens no forwarding or Xpra TCP listener and
+cleans only the server, application process group, sockets, and runtime state
+created by that invocation.
+
+The application renders through the remote Wayland compositor and remote GPU.
+Only Xpra picture, input, and control traffic crosses SSH.
+
+## Install And Run
+
+The Python distribution requires Linux, CPython 3.13 or 3.14, OpenSSH,
+`false`, a local graphical session, and compatible Xpra packages on both
+systems. Install with pip or pipx after the first release:
+
+```bash
+python3.14 -m pip install "elsewindow==0.1.0"
+# or: pipx install "elsewindow==0.1.0"
+elsewindow --ssh-alias agents-a -- xterm
+```
+
+Check packaged versions, profile digests, Linux support, and local commands
+without opening a connection:
+
+```bash
+elsewindow --diagnose
+```
+
+The published distribution resolves the exact reviewed
+[`ssh-wrapper==0.1.0`](https://pypi.org/project/ssh-wrapper/0.1.0/) dependency.
+For a source checkout, prepare the hash-locked runtime and use the repository
+launcher from any working directory:
+
+```bash
+make runtime-venv
+./bin/elsewindow --help
+```
+
+Use a direct authority when an OpenSSH alias is not appropriate:
+
+```bash
+elsewindow \
+  --host host.example \
+  --user desktop-user \
+  --port 2222 \
+  -- /opt/application/bin/application
+```
+
+The default encoding and network profiles are `rgb` and `gigabit_lan`.
+Production arguments come exclusively from the reviewed YAML mirrors shipped
+inside the Python package. See [the Xpra guide](doc/xpra.md) for profile,
+hardware, application, and lifecycle details.
+
+## Installing The Maintained Xpra Build
+
+[`tools/install_xpra_release.py`](tools/install_xpra_release.py) is a standalone
+standard-library installer for Debian 13 and Ubuntu 26.04. It resolves the
+newest canonical package release from `kogeler/xpra:develop`, verifies archive
+and DEB contents before mutation, prints the exact installed Xpra inventory,
+and requires interactive confirmation before purging that inventory. It uses
+APT for the validated local packages and dependencies.
+
+Elsewindow deliberately uses this maintained fork rather than treating a
+generic upstream Xpra build as interchangeable. Project development uncovered
+dozens of blocking Xpra defects: some fixes were accepted as direct upstream
+contributions, some were implemented by the upstream maintainer after issue
+reports, and some were not accepted after technical disagreements. The last
+category requires continued maintenance of additional fork patches. The
+[Xpra guide](doc/xpra.md#why-the-maintained-xpra-fork-is-required) explains
+the resulting user compatibility boundary.
+
+Review the installer and the [security contract](doc/security.md). The streamed
+route below is pending until the first reviewed `main` push; it must not be
+treated as available before then:
+
+```bash
+( set -o pipefail; curl --proto '=https' --tlsv1.2 -fsSL 'https://raw.githubusercontent.com/kogeler/elsewindow/main/tools/install_xpra_release.py' | /usr/bin/python3 - )
+```
+
+Do not prefix the pipeline or Python process with `sudo`. When privilege is
+needed, the reviewed script reads purge confirmation from the controlling
+terminal and invokes `/usr/bin/sudo` itself only for its root-owned staging and
+APT transaction.
+
+## Standalone Linux Executables
+
+After the first release, GitHub Releases provide `elsewindow-linux-amd64` and
+`elsewindow-linux-arm64`. These native one-file ELF executables bundle
+Elsewindow, CPython, `ssh-wrapper`, version metadata, and the reviewed YAML
+profiles. They do not bundle OpenSSH, Xpra, Podman, GPU drivers, VA-API, or
+distribution packages. Verify the release's `SHA256SUMS.txt`, make the selected
+file executable, and run `./elsewindow-linux-amd64 --diagnose` (or the arm64
+equivalent) before starting a session.
+
+## Documentation
+
+- [Rendered documentation site](https://kogeler.github.io/elsewindow/)
+  (published by the first reviewed direct `main` push)
+- [Getting started](doc/getting-started.md)
+- [Complete Xpra behavior and options](doc/xpra.md)
+- [Security model](doc/security.md)
+- [Architecture](doc/architecture.md)
+- [Development and validation](doc/development.md)
+- [Contributing](doc/contributing.md)
+- [Maintainer CI contract](doc/maintenance/CI.md)
+- [Dependency maintenance](doc/maintenance/DEPENDENCIES.md)
+- [Release maintenance](doc/maintenance/RELEASES.md)
+
+The Pages workflow renders these same maintained Markdown files and validates
+every generated route, local link, anchor, canonical URL, sitemap, crawler
+file, and advertised `llms.txt` route without network access.
+
+## Automatic Live Validation
+
+`make live-test` resolves the newest fork release, builds checksum-bound Ubuntu
+target and Debian client images, and runs detach and abrupt-master-loss cases
+on a private rootless Podman network. The payload excludes `elsewindow/` source
+and clean-installs the already verified wheel. The harness generates a fresh
+Ed25519 key, performs exactly one authentication per case, verifies a visible
+window and picture updates through the production profile assembler, preserves
+an unrelated session, and removes only its labelled containers and network.
+All wheel, test, and key material enters through validated tar streams; the
+test uses no host bind, data volume, or copy channel.
+
+Released under the [MIT License](LICENSE).

elsewindow-0.1.0/README.md

@@ -0,0 +1,127 @@
+# Elsewindow
+
+`elsewindow` starts one GUI application on a remote Linux host and shows
+its windows through Xpra. One owned OpenSSH ControlMaster carries every Xpra
+control channel; the command opens no forwarding or Xpra TCP listener and
+cleans only the server, application process group, sockets, and runtime state
+created by that invocation.
+
+The application renders through the remote Wayland compositor and remote GPU.
+Only Xpra picture, input, and control traffic crosses SSH.
+
+## Install And Run
+
+The Python distribution requires Linux, CPython 3.13 or 3.14, OpenSSH,
+`false`, a local graphical session, and compatible Xpra packages on both
+systems. Install with pip or pipx after the first release:
+
+```bash
+python3.14 -m pip install "elsewindow==0.1.0"
+# or: pipx install "elsewindow==0.1.0"
+elsewindow --ssh-alias agents-a -- xterm
+```
+
+Check packaged versions, profile digests, Linux support, and local commands
+without opening a connection:
+
+```bash
+elsewindow --diagnose
+```
+
+The published distribution resolves the exact reviewed
+[`ssh-wrapper==0.1.0`](https://pypi.org/project/ssh-wrapper/0.1.0/) dependency.
+For a source checkout, prepare the hash-locked runtime and use the repository
+launcher from any working directory:
+
+```bash
+make runtime-venv
+./bin/elsewindow --help
+```
+
+Use a direct authority when an OpenSSH alias is not appropriate:
+
+```bash
+elsewindow \
+  --host host.example \
+  --user desktop-user \
+  --port 2222 \
+  -- /opt/application/bin/application
+```
+
+The default encoding and network profiles are `rgb` and `gigabit_lan`.
+Production arguments come exclusively from the reviewed YAML mirrors shipped
+inside the Python package. See [the Xpra guide](doc/xpra.md) for profile,
+hardware, application, and lifecycle details.
+
+## Installing The Maintained Xpra Build
+
+[`tools/install_xpra_release.py`](tools/install_xpra_release.py) is a standalone
+standard-library installer for Debian 13 and Ubuntu 26.04. It resolves the
+newest canonical package release from `kogeler/xpra:develop`, verifies archive
+and DEB contents before mutation, prints the exact installed Xpra inventory,
+and requires interactive confirmation before purging that inventory. It uses
+APT for the validated local packages and dependencies.
+
+Elsewindow deliberately uses this maintained fork rather than treating a
+generic upstream Xpra build as interchangeable. Project development uncovered
+dozens of blocking Xpra defects: some fixes were accepted as direct upstream
+contributions, some were implemented by the upstream maintainer after issue
+reports, and some were not accepted after technical disagreements. The last
+category requires continued maintenance of additional fork patches. The
+[Xpra guide](doc/xpra.md#why-the-maintained-xpra-fork-is-required) explains
+the resulting user compatibility boundary.
+
+Review the installer and the [security contract](doc/security.md). The streamed
+route below is pending until the first reviewed `main` push; it must not be
+treated as available before then:
+
+```bash
+( set -o pipefail; curl --proto '=https' --tlsv1.2 -fsSL 'https://raw.githubusercontent.com/kogeler/elsewindow/main/tools/install_xpra_release.py' | /usr/bin/python3 - )
+```
+
+Do not prefix the pipeline or Python process with `sudo`. When privilege is
+needed, the reviewed script reads purge confirmation from the controlling
+terminal and invokes `/usr/bin/sudo` itself only for its root-owned staging and
+APT transaction.
+
+## Standalone Linux Executables
+
+After the first release, GitHub Releases provide `elsewindow-linux-amd64` and
+`elsewindow-linux-arm64`. These native one-file ELF executables bundle
+Elsewindow, CPython, `ssh-wrapper`, version metadata, and the reviewed YAML
+profiles. They do not bundle OpenSSH, Xpra, Podman, GPU drivers, VA-API, or
+distribution packages. Verify the release's `SHA256SUMS.txt`, make the selected
+file executable, and run `./elsewindow-linux-amd64 --diagnose` (or the arm64
+equivalent) before starting a session.
+
+## Documentation
+
+- [Rendered documentation site](https://kogeler.github.io/elsewindow/)
+  (published by the first reviewed direct `main` push)
+- [Getting started](doc/getting-started.md)
+- [Complete Xpra behavior and options](doc/xpra.md)
+- [Security model](doc/security.md)
+- [Architecture](doc/architecture.md)
+- [Development and validation](doc/development.md)
+- [Contributing](doc/contributing.md)
+- [Maintainer CI contract](doc/maintenance/CI.md)
+- [Dependency maintenance](doc/maintenance/DEPENDENCIES.md)
+- [Release maintenance](doc/maintenance/RELEASES.md)
+
+The Pages workflow renders these same maintained Markdown files and validates
+every generated route, local link, anchor, canonical URL, sitemap, crawler
+file, and advertised `llms.txt` route without network access.
+
+## Automatic Live Validation
+
+`make live-test` resolves the newest fork release, builds checksum-bound Ubuntu
+target and Debian client images, and runs detach and abrupt-master-loss cases
+on a private rootless Podman network. The payload excludes `elsewindow/` source
+and clean-installs the already verified wheel. The harness generates a fresh
+Ed25519 key, performs exactly one authentication per case, verifies a visible
+window and picture updates through the production profile assembler, preserves
+an unrelated session, and removes only its labelled containers and network.
+All wheel, test, and key material enters through validated tar streams; the
+test uses no host bind, data volume, or copy channel.
+
+Released under the [MIT License](LICENSE).

elsewindow-0.1.0/elsewindow/__init__.py

@@ -0,0 +1,33 @@
+# Copyright (c) 2026 kogeler
+# SPDX-License-Identifier: MIT
+
+"""Xpra application runner over one owned SSH master."""
+
+from __future__ import annotations
+
+
+def _resolve_version() -> str:
+    """Resolve the source-tree or installed distribution version."""
+    try:
+        from pathlib import Path
+
+        root = Path(__file__).resolve().parent.parent
+        if (root / "pyproject.toml").is_file():
+            return (root / ".version").read_text(encoding="utf-8").strip()
+        bundled = Path(__file__).resolve().parent / ".version"
+        if bundled.is_file():
+            return bundled.read_text(encoding="utf-8").strip()
+    except OSError:
+        pass
+
+    try:
+        from importlib.metadata import PackageNotFoundError, version
+
+        return version("elsewindow")
+    except PackageNotFoundError:
+        return "0.0.0+unknown"
+
+
+__version__ = _resolve_version()
+
+__all__ = ["__version__"]

elsewindow-0.1.0/elsewindow/__main__.py

@@ -0,0 +1,8 @@
+# Copyright (c) 2026 kogeler
+# SPDX-License-Identifier: MIT
+
+"""Module entry point for Elsewindow."""
+
+from .cli import main
+
+raise SystemExit(main())

elsewindow-0.1.0/elsewindow/cli.py

@@ -0,0 +1,204 @@
+# Copyright (c) 2026 kogeler
+# SPDX-License-Identifier: MIT
+
+"""Command-line interface for one owned remote Xpra application."""
+
+from __future__ import annotations
+
+import argparse
+import asyncio
+import hashlib
+import shutil
+import signal
+import sys
+from collections.abc import Sequence
+from contextlib import suppress
+from importlib.metadata import PackageNotFoundError
+from importlib.metadata import version as distribution_version
+
+from ssh_wrapper.errors import SSHError
+
+from . import __version__
+from .config import (
+    DEFAULT_CONNECT_TIMEOUT,
+    DEFAULT_ENCODING_PROFILE,
+    DEFAULT_GRACE_TIMEOUT,
+    DEFAULT_HEARTBEAT_INTERVAL,
+    DEFAULT_LEASE_TIMEOUT,
+    DEFAULT_NETWORK_PROFILE,
+    DEFAULT_POLL_INTERVAL,
+    DEFAULT_PROBE_TIMEOUT,
+    DEFAULT_READY_TIMEOUT,
+    SUPPORTED_ENCODING_PROFILES,
+    SUPPORTED_NETWORK_PROFILES,
+    XpraConfig,
+)
+from .session import XpraSession
+
+
+def build_parser() -> argparse.ArgumentParser:
+    """Build the public command-line contract."""
+    parser = argparse.ArgumentParser(
+        prog="elsewindow",
+        description="Run one new remote GUI application through Xpra over owned SSH.",
+    )
+    parser.add_argument(
+        "--version", action="version", version=f"%(prog)s {__version__}"
+    )
+    parser.add_argument(
+        "--diagnose",
+        action="store_true",
+        help="report bundled versions, profile digests, and local prerequisites",
+    )
+    authority = parser.add_mutually_exclusive_group()
+    authority.add_argument("--ssh-alias", help="trusted OpenSSH host alias")
+    authority.add_argument("--host", help="direct SSH host or address")
+    parser.add_argument("--user", help="remote user required with --host")
+    parser.add_argument("--port", type=int, default=22, help="direct SSH port")
+    parser.add_argument(
+        "--encoding-profile",
+        choices=SUPPORTED_ENCODING_PROFILES,
+        default=DEFAULT_ENCODING_PROFILE,
+        help=(
+            "reviewed pixel transport profile; h264 uses native VA-API, "
+            "libyuv, OpenGL, and alpha-capable fallback"
+        ),
+    )
+    parser.add_argument(
+        "--network-profile",
+        choices=SUPPORTED_NETWORK_PROFILES,
+        default=DEFAULT_NETWORK_PROFILE,
+        help="reviewed client quality/network profile (default: %(default)s)",
+    )
+    parser.add_argument(
+        "--connect-timeout", type=float, default=DEFAULT_CONNECT_TIMEOUT
+    )
+    parser.add_argument("--ready-timeout", type=float, default=DEFAULT_READY_TIMEOUT)
+    parser.add_argument("--probe-timeout", type=float, default=DEFAULT_PROBE_TIMEOUT)
+    parser.add_argument("--poll-interval", type=float, default=DEFAULT_POLL_INTERVAL)
+    parser.add_argument(
+        "--heartbeat-interval", type=float, default=DEFAULT_HEARTBEAT_INTERVAL
+    )
+    parser.add_argument("--lease-timeout", type=float, default=DEFAULT_LEASE_TIMEOUT)
+    parser.add_argument("--cleanup-grace", type=float, default=DEFAULT_GRACE_TIMEOUT)
+    parser.add_argument(
+        "application",
+        nargs=argparse.REMAINDER,
+        metavar="APP [ARG ...]",
+        help="application argv after --",
+    )
+    return parser
+
+
+def _diagnose() -> int:
+    """Report immutable bundled inputs and actionable host prerequisites."""
+    from .live_config import LIVE_CLI_PATH, NETWORK_PROFILES_PATH
+
+    failed = False
+    print(f"elsewindow: {__version__}")
+    try:
+        wrapper_version = distribution_version("ssh-wrapper")
+    except PackageNotFoundError:
+        wrapper_version = "missing"
+        failed = True
+    print(f"ssh-wrapper: {wrapper_version}")
+    for label, path in (
+        ("live-cli.yml", LIVE_CLI_PATH),
+        ("profiles.yml", NETWORK_PROFILES_PATH),
+    ):
+        try:
+            digest = hashlib.sha256(path.read_bytes()).hexdigest()
+        except OSError as error:
+            print(f"elsewindow: invalid_resource: {label}: {error}", file=sys.stderr)
+            failed = True
+        else:
+            print(f"{label}: sha256:{digest}")
+    if not sys.platform.startswith("linux"):
+        print(
+            f"elsewindow: unsupported_platform: Linux is required, found {sys.platform}",
+            file=sys.stderr,
+        )
+        failed = True
+    for command in ("ssh", "false", "xpra"):
+        resolved = shutil.which(command)
+        if resolved is None:
+            print(
+                "elsewindow: missing_dependency: "
+                f"required command not found on PATH: {command}",
+                file=sys.stderr,
+            )
+            failed = True
+        else:
+            print(f"{command}: {resolved}")
+    return int(failed)
+
+
+async def _run_with_signals(config: XpraConfig) -> int:
+    session = XpraSession(config)
+    loop = asyncio.get_running_loop()
+    interrupted: asyncio.Future[int] = loop.create_future()
+
+    def stop(exit_code: int) -> None:
+        if not interrupted.done():
+            interrupted.set_result(exit_code)
+
+    installed: list[signal.Signals] = []
+    for selected in (signal.SIGINT, signal.SIGTERM):
+        try:
+            loop.add_signal_handler(selected, stop, 128 + selected)
+        except NotImplementedError:
+            continue
+        installed.append(selected)
+
+    run_task = asyncio.create_task(session.run())
+    try:
+        done, _pending = await asyncio.wait(
+            {run_task, interrupted}, return_when=asyncio.FIRST_COMPLETED
+        )
+        if interrupted in done:
+            run_task.cancel()
+            with suppress(asyncio.CancelledError):
+                await run_task
+            return interrupted.result()
+        return run_task.result()
+    finally:
+        if not interrupted.done():
+            interrupted.cancel()
+        for selected in installed:
+            loop.remove_signal_handler(selected)
+
+
+def main(argv: Sequence[str] | None = None) -> int:
+    """Validate configuration, run one session, and return a stable exit code."""
+    parser = build_parser()
+    args = parser.parse_args(argv)
+    if args.diagnose:
+        if (
+            args.ssh_alias is not None
+            or args.host is not None
+            or args.user is not None
+            or args.port != 22
+            or args.application
+        ):
+            parser.error("--diagnose cannot be combined with a session authority")
+        return _diagnose()
+    if args.ssh_alias is None and args.host is None:
+        parser.error("provide either --ssh-alias or --host")
+    try:
+        config = XpraConfig.from_namespace(args)
+    except SSHError as error:
+        parser.error(error.message)
+
+    try:
+        return asyncio.run(_run_with_signals(config))
+    except KeyboardInterrupt:
+        return 130
+    except SSHError as error:
+        print(f"elsewindow: {error.code}: {error.message}", file=sys.stderr)
+        return 1
+    except Exception as error:  # noqa: BLE001 - public diagnostics stay sanitized.
+        print(
+            f"elsewindow: session_failed: {type(error).__name__}",
+            file=sys.stderr,
+        )
+        return 1