unattend

type Config struct {
	Username      string
	Password      string
	Locale        string
	Hostname      string
	VirtIODrivers []VirtIODriver
	SSHPubKey     string
	TimeZone      string
	// EnableRDP turns on Remote Desktop and disables the Windows firewall so
	// the forwarded RDP port is reachable. Gate this on Spec.RDPPort > 0 so
	// cells that never expose RDP do not get it.
	EnableRDP bool
	// WinPEAgent ships the WinPE control agent on the answer volume and adds
	// the windowsPE launcher that starts it. The agent snapshots Setup's
	// Panther logs to the volume every few seconds and executes commands the
	// host drops there — the only look inside a failing windowsPE phase.
	WinPEAgent bool
	// OpenSSHPayload is the filename of the Win32-OpenSSH release shipped on
	// the answer volume, empty when none was fetched.
	//
	// OpenSSH Server cannot be installed from our media: the capability is
	// present in the manifest but its payload is not, so Add-WindowsCapability
	// fails 0x80070002 with the capability stuck `Staged` — even with Windows
	// Update reachable and permitted (DISM logged LimitAccess:0). The UUP
	// package carries only OpenSSH-Client; the Server FoD ships on a separate
	// build-matched ISO we do not have. Shipping the standalone release side-
	// steps Windows servicing entirely.
	OpenSSHPayload string
	// OpenSSHPayloadData is the payload's bytes, written to the answer volume
	// by BuildAnswerVolume.
	OpenSSHPayloadData []byte
	// OpenSSHPayloadSize is the payload's true length. PadForFAT cluster-aligns
	// every file with trailing newlines, which is harmless for text but can
	// break a zip: readers locate the End-of-Central-Directory record by
	// scanning back from the end, and unexpected trailing bytes make that
	// inconsistent. The guest truncates to this length before extracting.
	OpenSSHPayloadSize int
	// PwshFiles is the extracted PowerShell 7 directory, keyed by answer-
	// volume path (e.g. "/pwsh/pwsh.exe"). Stock WinPE has no powershell.exe;
	// these files provide pwsh.exe which the bootstrap.cmd shim and the
	// windowsPE agent launcher probe for at runtime.
	PwshFiles map[string][]byte
	// ImageName selects which image in install.wim to install. The Windows 11
	// ARM64 media carries three (Home, Home Single Language, Pro); without a
	// choice Setup stops to ask. Defaults to "Windows 11 Pro".
	ImageName string
	// InstallWimPath, when set, tells Windows Setup to install from a custom
	// WIM at this path (e.g. "X:\devcell-install.wim") instead of the stock
	// install.wim inside the ISO. The path must be reachable from WinPE — a
	// drive letter assigned to a USB volume the VM mounts.
	InstallWimPath string
	// EFIBootLoader is the raw bytes of the Windows EFI bootloader
	// (BOOTAA64.EFI), extracted from the installer ISO at build time. When
	// set, BuildAnswerVolume writes it to /EFI/BOOT/BOOTAA64.EFI on the
	// answer FAT volume. This lets startup.nsh chainload the installer from
	// the USB volume (FS0) instead of the CD (FS1), working around QEMU
	// 11/HVF where the firmware can enumerate CD files but cannot execute
	// PE binaries from them (CELL-427).
	EFIBootLoader []byte
	// AnswerDrivers are driver files BuildAnswerVolume ships on the answer
	// volume, keyed by volume path (see LoadWinPEStorageDrivers). Every
	// .inf among them gets a windowsPE RunSynchronous drvload command —
	// see WinPEDriverLoads — which runs just before Modern Setup searches
	// for install media. ARM64 WinPE has no inbox vioscsi, so without this
	// the virtio-scsi installer CD is invisible and Setup stops at "a media
	// driver your computer needs is missing" (CELL-429).
	//
	// The files ship byte-exact, not PadForFAT-padded: Setup's driver
	// import validates them against the catalog's hashes.
	AnswerDrivers map[string][]byte
	// AgentCommand, when WinPEAgent is set, is pre-baked into the agent's
	// command file (winpe.AgentCommandFile) so the agent executes it on its first
	// poll and writes the combined output to devcell-out.txt — a one-shot
	// diagnostic channel into WinPE, which has no network and no QGA.
	AgentCommand string
}

type VirtIODriver struct {
	// INFRelPath is the INF's path relative to the root of whatever volume
	// carries it (the virtio driver CD), without a drive letter — the letter
	// is probed at runtime. E.g. `NetKVM\w11\ARM64\netkvm.inf`.
	INFRelPath  string
	Description string
}

type WinPEDriverLoad struct {
	Order       int
	Path        string
	Description string
}