Golden WSL2 image v19 (adom-cli 0.5.12)

Golden WSL2 image v19 — adom-cli 0.5.12 (HD-local proxy fix).

Required change from v18: bakes adom-cli 0.5.12, which adds the ~/.adom/hd-proxy-url base-url fallback (adom-inc/adom-cli PR #9) so adom-cli works in env-less non-login shells inside HD local workspaces. v18 shipped 0.5.11, which fell back to the real carbon.adom.inc and 404'd.

Verified in-image before packaging:

• adom-cli --version → 0.5.12
• the hd-proxy-url literal is present in /usr/local/bin/adom-cli (checked with LC_ALL=C grep -qa; note plain grep -q false-negatives on this binary, and strings isn't in the image since binutils was stripped in v15)
• /etc/adom-golden-version → v19

⚠️ The 0.5.12 binary is built from source (fix/hd-local-proxy-discovery, Ubuntu 24.04 / glibc 2.39) and overlaid, because the registry's adom/adom-cli package still ships 0.5.11. It is not registry-tracked — once a package carrying 0.5.12+ is published, the normal adom-wiki pkg update path takes over and the bake's overlay block should be deleted.

Also in this image (registry drift since v18 — resolved-latest, not requested):

• adom/hd-bootstrap 0.2.10 → 0.2.23, adom/hd-windows-bootstrap 0.2.6 → 0.2.8, adom/core 4.13.1 → 4.13.2
• hd-* skills 49 → 51 (new: hd-demo-recording, hd-editor-state)
• Both bootstraps are the first published on scripts.install (migrated from the deprecated scripts.postinstall); adom-wiki 1.0.45 runs them in dependency order with no shim.

Build hygiene: the bake now fetches the adom-wiki CLI fresh at bake time (never a staged/pinned copy) — a stale pinned 1.0.41 caused a false bug report during v19 development.

Size: 456.5 MB compressed (478,672,029 bytes).
sha256: c5e54555b6ecd3ea5c88af7a65de77aa6af675405f5b19b14f2e6c8fc8ece3b5 (also attached as .sha256)

HD must bump the pin: src-tauri/crates/hd-app/src/runtime/wsl.rs hardcodes the tarball name/URL/sha/version (currently v18) — a one-line-per-const change plus a rebuild is required for HD to actually pull v19.

Golden WSL2 image v18 (registry-native)

Golden WSL2 image v18 — registry-native.

Built with the adom-wiki CLI (adompkg is deprecated): ONE declarative install — adom-wiki pkg install adom/hd-windows-bootstrap → adom/core@4.13.1 (ecosystem incl. adom-wiki-cli + the adom/hook auto-updater) ← adom/hd-bootstrap@0.2.10 (38 generic hd-* skills + editor config) ← adom/hd-windows-bootstrap@0.2.6 (11 WSL2 hd-* skills + workbench seed) + adom-desktop@1.9.126. Gallia is never invoked — adom/core is the new gallia. Whole tree installs anonymously and sudo-free.

Retired (asserted absent by the bake): adom-workspace-updater (daemon + systemd units; auto-update is now adom/hook → adom-wiki pkg update against the public registry) and hd-skillpack (skills ship bundled in the bootstraps). The hd-workspace-updater skill is renamed hd-staying-current. No ADOMPKG_ALLOW_SUDO anywhere.

Carried invariants (litmus-guarded): clean first-load editor (no sidebar/panel/tabs/welcome; per-workspace seed), remote.autoForwardPortsSource: "hybrid" (Web Hydrogen /proxy/<port>/ parity), no C/C++ toolchain, no gallia checkout, no private check-updates hook.

Known workaround baked in: adom-wiki@1.0.41 doesn't execute scripts.postinstall (issue #9 on adom/adom-wiki-cli) — the bake runs the two bootstrap postinstalls explicitly, guarded to self-disable once the CLI is fixed.

Boot-tested on a throwaway import: systemd up in 20s (only the benign WSL kmod-static-nodes unit fails), code-server serves HTTP 200, 49 hd-* skills, /etc/adom-golden-version = v18, adom-wiki --version works.

Size: 455.1 MB compressed (477,242,417 bytes).
sha256: 9a88a28388366772b913b09c306bb701cb466e548261d06e1f4fdd2beb44be90 (also attached as .sha256)

Not baked (runtime/per-machine): the claude CLI (HD's install-claude-cli + claude-auth setup steps), Carbon API key, DefaultUid, host aliases. Note: core@4.13.1 does NOT carry adom-google/adom-tts/adom-gchat.

Golden WSL2 image v17

Golden WSL2 image v17 — Web Hydrogen port-forwarding parity.

Builds on v16 (clean first-load editor) and fixes the "Over 20 ports… switched to hybrid" popup by matching Web Hydrogen exactly: pins "remote.autoForwardPortsSource": "hybrid" in code-server settings (the same value the Web Hydrogen cloud container uses). Pinning the source to hybrid from the start means there's no process→hybrid switch, so the popup never fires.

Verified on the real image: code-server's /proxy/<port>/ route is independent of the auto-forward setting (a never-forwarded port still serves through /proxy/<port>/), so this preserves Web Hydrogen's …/proxy/{{port}}/ access pattern. WSL2 mirrored-mode localhost is unaffected. A build-time litmus fails the bake if the setting isn't hybrid.

Size: 402.6 MB compressed (422,197,969 bytes), ~1.4 GB extracted.
sha256: abfe195dff7264a0f7a087d256a3df32a6bbf25fc5720fc7d8d8ac301b461b53

Built from wiki.adom.inc bootstraps: adom/hd-windows-bootstrap@0.2.2 → adom/hd-bootstrap@0.2.3 → adom/core@4.9.4 + updater + adom-desktop.

Golden WSL2 image v16

Golden WSL2 image v16 — clean first-load editor.

Builds on v15's lean base (no C/C++ toolchain) and adds a clean default layout: the editor opens to an empty workbench — no Explorer sidebar, no bottom panel, no open tabs, no welcome page (just the 48px activity-bar rail as the entry point).

How: adom/hd-windows-bootstrap@0.2.2 seeds workbench.html to collapse the primary sidebar once per workspace (won't fight the user if they later open it) on top of the existing activity-bar/trusted-domains seed. workbench.startupEditor:none keeps the welcome page off. A build-time litmus in the bake's smoke test now fails the build if startupEditor:none or either seed marker is missing.

Validated live on fresh code-server profiles at both /home/adom and /home/adom/project — both open clean.

Size: 402.6 MB compressed (422,122,434 bytes), ~1.4 GB extracted.
sha256: aca1481cebb3365009e260a12066691dca0769df428dc62edc3eddf39b93e445

Built from wiki.adom.inc bootstraps (no gallia): adom/hd-windows-bootstrap@0.2.2 → adom/hd-bootstrap@0.2.2 → adom/core@4.9.4, plus adom/adom-workspace-updater@0.1.11 and adom/adom-desktop@1.8.160.

Note on opened folder: which folder code-server opens is an HD launch-time arg, not baked in. Bare code-server defaults to /home/adom.

Golden WSL2 image v15

Golden WSL2 image v15 — lean rebuild.

Size: 400.5 MB compressed (419,999,156 bytes), ~1.4 GB extracted.
Down from v14 (505 MB) and v13 (626 MB) — dropped the unused C/C++ build toolchain (~246 MB) and stripped docs/man-pages/non-English locales. The image only runs pre-built binaries, so nothing was lost.

sha256: 1d67da7b6927469f50d096fb12ffbf9173e351bb66e7a3650e494b558b77e489

Built from wiki.adom.inc bootstraps (no gallia):
adompkg install adom/hd-windows-bootstrap@0.2.0 → adom/hd-bootstrap@0.2.2 → adom/core@4.9.4, plus adom/adom-workspace-updater@0.1.11 and adom/adom-desktop@1.8.160.

Baked: Ubuntu 24.04 (uid 1001), systemd init, code-server 4.124.2, 59 hd-* skills, anthropic.claude-code + adom.adom-vscode extensions, gh/git/node/python3. Auto-updates via the workspace-updater systemd timer (OnBootSec=5min, then every 2h).

Not baked (HD installs at runtime): the claude CLI binary, user auth. No C/C++ build toolchain.

Golden WSL2 rootfs v13

Flat rootfs for wsl --import. Ubuntu 24.04 + code-server + Adom CLIs baked. SHA256 in the .sha256 asset. Built by the build-golden-image workflow from this tag's Dockerfile.

Golden WSL2 rootfs v12

Flat rootfs for wsl --import. Ubuntu 24.04 + code-server + Adom CLIs baked. SHA256 in the .sha256 asset. Built by the build-golden-image workflow from this tag's Dockerfile.

Golden WSL2 rootfs v11

Flat rootfs for wsl --import. Ubuntu 24.04 + code-server + Adom CLIs baked. SHA256 in the .sha256 asset. Built by the build-golden-image workflow from this tag's Dockerfile.

Golden WSL2 rootfs v10

Flat rootfs for wsl --import. Ubuntu 24.04 + code-server + Adom CLIs baked. SHA256 in the .sha256 asset. Built by the build-golden-image workflow from this tag's Dockerfile.

Golden WSL2 rootfs v9

Flat rootfs for wsl --import. Ubuntu 24.04 + code-server + Adom CLIs baked. SHA256 in the .sha256 asset. Built by the build-golden-image workflow from this tag's Dockerfile.