flatpak per-remote + bwrap tmpfs fix + btop system-wide preset + WSLg GUI export

Six regressions surfaced in operator's 2026-05-10 20:51 install screenshot.

1. `usr/lib/tmpfiles.d/mios-wslg.conf` `L+` -> `d`. Was force-symlinking
   /tmp/.X11-unix -> /mnt/wslg/.X11-unix every boot; flatpak bwrap then
   died with "Can't mount tmpfs on /newroot/tmp/.X11-unix: No such file
   or directory" (bwrap can't tmpfs over a symlink). Real directory
   lets bwrap tmpfs cleanly; mios-wslg-permissions-fix.service still
   bind-mounts the WSLg X11 socket dir onto it for non-sandboxed apps.

2. `etc/wsl.conf` add [gui] guiApplications=true. Was missing, so WSLg's
   auto-export of Linux GUI apps (.desktop -> Windows Start Menu) didn't
   fire. Operator: "no MiOS Linux apps in windows start menus". With
   this enabled, every flatpak in /var/lib/flatpak/exports/share/applications/
   surfaces as a Windows Start Menu entry under the distro folder.

3. `etc/profile.d/mios-btop.sh` add BTOP_CONFIG_DIR resolver. Operator's
   btop screenshot showed preset 3 = cpu+net (btop's compiled-in default,
   NOT ours) with update_ms=2000. btop reads $XDG_CONFIG_HOME/btop or
   $HOME/.config/btop and does NOT fall back to /etc on miss. On the
   /=git dev VM, $HOME for 'mios' can resolve to / so the config seeded
   to `~/.config/btop/btop.conf` is hit-or-miss. Force the resolver to
   point at /etc/btop/ when no user copy exists.

4. New `etc/btop/btop.conf` + `etc/btop/themes/mios.theme`. System-wide
   fallback baked into the OCI image so #3's resolver has a real target.
   Mirrors mios-bootstrap/src/btop/btop.conf exactly (preset 3 = cpu+mem
   full, update_ms=500, theme_background=False for acrylic, mios palette).

5. `automation/40-flatpak-bake.sh` parse `<remote>:<appid>`. Was
   hardcoding `flathub` as the remote, so mios.toml entries
   `gnome-nightly:org.gnome.Nautilus.Devel` and `fedora:org.gnome.Epiphany`
   tried to install from flathub and failed silently (operator: "epiphany
   error: app/org.gnome.Epiphany/x86_64/master not installed"). Now
   splits on first colon, ensures the named remote exists (adds
   gnome-nightly / fedora / flathub-beta on-demand with known URLs),
   and installs from the correct remote.

6. `usr/libexec/mios-flatpak-install` same parser. First-boot retry path
   had the same bug; fixed in parallel so a deferred install hits the
   right remote too.

Net effect on next fresh install: nautilus / epiphany launch cleanly
(no bwrap error, correct app version), btop renders the MiOS preset
out of the box, and the Linux flatpaks surface in the Windows Start
Menu under the distro folder.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: Kabuki94

.gitignore

@@ -136,6 +136,16 @@ etc/fapolicyd/*
 !/etc/aichat/
 !/etc/aichat/**
 
+# /etc/btop/ -- system-wide btop preset + MiOS palette theme. mios-btop.sh
+# resolves BTOP_CONFIG_DIR=/etc/btop when the user has no ~/.config/btop,
+# so this is the canonical fallback that ships with the image. Operator
+# can override per-user; the system-wide copy guarantees `btop` and
+# `btop -p 3` render the MiOS preset out of the box.
+!/etc/btop/
+!/etc/btop/btop.conf
+!/etc/btop/themes/
+!/etc/btop/themes/mios.theme
+
 # /etc/profile.d/ -- login-shell environment resolver (INDEX.md sec 4).
 # mios-env.sh walks the five-layer env overlay and exports MIOS_AI_* +
 # identity vars system-wide. Bash sources /etc/profile.d/*.sh from

automation/40-flatpak-bake.sh

@@ -76,6 +76,10 @@ flatpak remote-add --system --if-not-exists flathub \
 log "[40-flatpak-bake] selected refs: ${FLATPAK_LIST}"
 log "[40-flatpak-bake] beginning system-wide install (this may take several minutes)"
 
+# Per-remote install: mios.toml accepts `<remote>:<appid>` entries so
+# the operator can pull Nautilus.Devel from gnome-nightly and Epiphany
+# from fedora's flatpak registry rather than the stale Flathub copy.
+# Bare `<appid>` still defaults to flathub.
 INSTALLED=0
 FAILED=0
 IFS=',' read -ra REFS <<< "$FLATPAK_LIST"
@@ -89,15 +93,50 @@ for raw in "${REFS[@]}"; do
         \#*) continue ;;
     esac
 
-    log "[40-flatpak-bake]   installing ${ref}"
+    # Split on first colon -- `gnome-nightly:org.gnome.Nautilus.Devel`
+    # -> remote=gnome-nightly, app=org.gnome.Nautilus.Devel. No colon
+    # means bare app id -> flathub.
+    case "$ref" in
+        *:*)
+            remote="${ref%%:*}"
+            app="${ref#*:}"
+            ;;
+        *)
+            remote="flathub"
+            app="$ref"
+            ;;
+    esac
+
+    # Ensure the remote exists. flathub is added above; other remotes
+    # are added on-demand here (the standard URLs are well-known).
+    if ! flatpak remote-list --system --columns=name 2>/dev/null | grep -qw "$remote"; then
+        case "$remote" in
+            flathub)
+                flatpak remote-add --system --if-not-exists flathub \
+                    https://dl.flathub.org/repo/flathub.flatpakrepo 2>/dev/null || true ;;
+            flathub-beta)
+                flatpak remote-add --system --if-not-exists flathub-beta \
+                    https://flathub.org/beta-repo/flathub-beta.flatpakrepo 2>/dev/null || true ;;
+            gnome-nightly)
+                flatpak remote-add --system --if-not-exists gnome-nightly \
+                    https://nightly.gnome.org/gnome-nightly.flatpakrepo 2>/dev/null || true ;;
+            fedora)
+                flatpak remote-add --system --if-not-exists fedora \
+                    oci+https://registry.fedoraproject.org 2>/dev/null || true ;;
+            *)
+                warn "[40-flatpak-bake]   unknown remote '$remote' for $ref -- attempting install anyway" ;;
+        esac
+    fi
+
+    log "[40-flatpak-bake]   installing ${app} (from ${remote})"
     if flatpak install --system --noninteractive --assumeyes --or-update \
-            flathub "${ref}" 2>&1 \
+            "${remote}" "${app}" 2>&1 \
             | grep -E '^(Installing|Updating|Already installed|Skipping|Error|Warning)' \
             || true; then
         INSTALLED=$((INSTALLED + 1))
     else
         FAILED=$((FAILED + 1))
-        warn "[40-flatpak-bake]   ${ref} install returned non-zero -- will retry at first boot"
+        warn "[40-flatpak-bake]   ${remote}:${app} install returned non-zero -- will retry at first boot"
     fi
 done
 

etc/btop/btop.conf

@@ -0,0 +1,171 @@
+#? Config file for btop v. 1.4.x -- MiOS preset (80x20 portal)
+#
+# Operator 2026-05-09: "btop can run if a preset can fit the dimensions
+# provided--just need a profile preset(make it match the entire MiOS
+# themes and color palette". This preset trims the default config to
+# fit the 80x20 MiOS canonical terminal size: hides net + processes
+# boxes, packs cpu+mem into the smallest layout that still shows
+# meaningful info.
+
+# Color theme -- MiOS palette via mios.theme.
+color_theme = "mios"
+
+# Theme background (true = use theme bg, false = terminal default).
+# false preserves WT's acrylic backdrop.
+theme_background = False
+
+# Sets if 24-bit truecolor should be used.
+truecolor = True
+
+# Force tty mode (off -- we have a real terminal).
+force_tty = False
+
+# Presets accessible by pressing `p` then 0-9 in btop. Format:
+#   <boxes>:<mode>:<theme>
+# where mode = 0 (full) or 1 (compact/minimal).
+#
+# Operator 2026-05-10: "btop -p 3 that's the correct profile -- make
+# it default launch to preset 3 and have the background be uncolored
+# so we can utilize the Windows acrylic rendering -- make btops
+# colorpalette match and preset 4 to be only showing processes
+# section". The `btop` shell function in /etc/profile.d/mios-verbs.sh
+# (and the Windows-side `btop` wrapper) calls `btop -p 3 "$@"` so the
+# operator's launch defaults match this slot.
+#
+# Preset slots:
+#   0  cpu compact          (fallback for tiny windows < 75 cols)
+#   1  cpu full
+#   2  cpu+mem compact
+#   3  cpu+mem full         <- canonical launch via `btop -p 3`
+#   4  processes only       <- operator-requested process viewer
+#   5  cpu+mem+net+proc full  (legacy verbose mode)
+presets = "cpu:1:default,cpu:0:default,cpu mem:1:default,cpu mem:0:default,proc:0:default,cpu mem net proc:0:default user mios"
+
+# Set to True to add "v" mark when value is volatile.
+vim_keys = False
+
+# Rounded corners on boxes (matches MiOS frame chars).
+rounded_corners = True
+
+# Default symbols for graphs: "braille", "block", "tty".
+graph_symbol = "block"
+
+# Individual graph symbol (for cpu graph).
+graph_symbol_cpu = "block"
+graph_symbol_gpu = "block"
+graph_symbol_mem = "block"
+graph_symbol_net = "block"
+graph_symbol_proc = "block"
+
+# Boxes shown at launch. Matches the canonical -p 3 preset
+# (cpu+mem full) so even if btop is invoked without an explicit -p
+# arg, it still loads the operator's intended view.
+shown_boxes = "cpu mem"
+
+# Update time in milliseconds. Operator 2026-05-10: "not 500ms update
+# speed" -- the displayed value was 2000ms. Lock to 500ms here so
+# btop refreshes 2x/sec on the dev VM out of the box.
+update_ms = 500
+
+# Process sort column (when proc box re-enabled).
+proc_sorting = "cpu lazy"
+
+# Reverse sort.
+proc_reversed = False
+
+# Show command line of processes.
+proc_tree = False
+
+# Show colliding cpu colors in tree mode.
+proc_colors = True
+
+# Show graph for each process (cpu / mem usage).
+proc_gradient = True
+
+# Filter via "/" key.
+proc_filter_kernel = False
+
+# Display PID by default.
+proc_per_core = False
+
+# Show memory in process box.
+proc_mem_bytes = True
+
+# Show CPU graph in process box.
+proc_cpu_graphs = True
+
+# Use psutil for process info (Linux).
+proc_info_smaps = False
+
+# Show command in process box.
+proc_left = False
+
+# Display CPU as percentage (true) or single core load (false).
+proc_filter = ""
+
+# CPU graph height (rows). Minimal for 80x20.
+cpu_graph_upper = "total"
+cpu_graph_lower = "total"
+cpu_invert_lower = True
+cpu_single_graph = True
+cpu_bottom = False
+
+# Show top of CPU box.
+show_uptime = True
+
+# Show cpu temperatures (per-core if available).
+check_temp = True
+
+# Which sensor to use for cpu temperature.
+cpu_sensor = "Auto"
+
+# Show all cores in cpu temp.
+show_coretemp = True
+
+# CPU core map order: layout/numa/etc.
+cpu_core_map = ""
+
+# Custom cpu model name in cpu percentage box.
+custom_cpu_name = ""
+
+# Cpu freq display: True/False.
+show_cpu_freq = True
+
+# Update graphs for processes / cpu freq even when paused.
+clock_format = "%X"
+
+# Background update while paused.
+background_update = True
+
+# Filter all-zero CPU.
+custom_filters = ""
+
+# Memory box -- compact.
+show_swap = True
+swap_disk = True
+show_disks = True
+only_physical = True
+use_fstab = False
+zfs_hide_datasets = False
+
+# Disable disk meter graph for compact 80x20 fit.
+disk_free_priv = False
+show_io_stat = False
+io_mode = False
+io_graph_combined = False
+io_graph_speeds = ""
+
+# Network box (hidden via shown_boxes -- still configured for when re-enabled).
+net_download = 100
+net_upload = 100
+net_auto = True
+net_sync = False
+net_iface = ""
+
+# Show battery status (when applicable).
+show_battery = True
+selected_battery = "Auto"
+show_battery_watts = True
+
+# Logging level.
+log_level = "WARNING"

etc/btop/themes/mios.theme

@@ -0,0 +1,103 @@
+# mios.theme -- MiOS color palette for btop
+#
+# Sourced from mios.toml [colors]:
+#   accent       #1A407F  (operator-blue, primary brand color)
+#   bg           #0A0E1A  (deep blue-black)
+#   fg           #B7C9D7  (subtle dim text)
+#   ok           #6CC777  (cool green)
+#   warn         #E5B14B  (amber)
+#   err          #E76F4F  (warm red)
+#   highlight    #1A407F  (operator-blue accent for selection)
+#
+# Operator 2026-05-09: btop config "needs to match the entire MiOS themes
+# and color palette". Theme keys map to btop's standard slots.
+
+# Main background. Set "" for transparent (preserves WT acrylic).
+theme[main_bg]=""
+
+# Main text color
+theme[main_fg]="#B7C9D7"
+
+# Title color for boxes
+theme[title]="#1A407F"
+
+# Highlight color for keyboard shortcuts
+theme[hi_fg]="#E5B14B"
+
+# Background color of selected item in processes box
+theme[selected_bg]="#1A407F"
+
+# Foreground color of selected item in processes box
+theme[selected_fg]="#FFFFFF"
+
+# Color of inactive/disabled text
+theme[inactive_fg]="#5A6770"
+
+# Color of text appearing on top of graphs (process name etc.)
+theme[graph_text]="#B7C9D7"
+
+# Misc colors for processes box including mini cpu graphs, details memory graph and details status text
+theme[meter_bg]="#2A3A4F"
+
+# Foreground color of summary/percentage text
+theme[proc_misc]="#6CC777"
+
+# CPU box outline color
+theme[cpu_box]="#1A407F"
+
+# Memory/disks box outline color
+theme[mem_box]="#1A407F"
+
+# Network box outline color
+theme[net_box]="#1A407F"
+
+# Processes box outline color
+theme[proc_box]="#1A407F"
+
+# Box divider line and small boxes line color
+theme[div_line]="#2A3A4F"
+
+# Temperature graph color (low - mid - high)
+theme[temp_start]="#6CC777"
+theme[temp_mid]="#E5B14B"
+theme[temp_end]="#E76F4F"
+
+# CPU graph colors (start - mid - end)
+theme[cpu_start]="#1A407F"
+theme[cpu_mid]="#3D6CB8"
+theme[cpu_end]="#7AAAEE"
+
+# Mem/Disk free meter (start - mid - end)
+theme[free_start]="#0F2547"
+theme[free_mid]="#1A407F"
+theme[free_end]="#3D6CB8"
+
+# Mem/Disk cached meter (start - mid - end)
+theme[cached_start]="#5A6770"
+theme[cached_mid]="#7A8B9A"
+theme[cached_end]="#B7C9D7"
+
+# Mem/Disk available meter (start - mid - end)
+theme[available_start]="#3A5234"
+theme[available_mid]="#4F8050"
+theme[available_end]="#6CC777"
+
+# Mem/Disk used meter (start - mid - end)
+theme[used_start]="#5A2A1F"
+theme[used_mid]="#A04A33"
+theme[used_end]="#E76F4F"
+
+# Download graph colors (start - mid - end)
+theme[download_start]="#1A407F"
+theme[download_mid]="#3D6CB8"
+theme[download_end]="#7AAAEE"
+
+# Upload graph colors (start - mid - end)
+theme[upload_start]="#5A2A1F"
+theme[upload_mid]="#A04A33"
+theme[upload_end]="#E76F4F"
+
+# Process box color gradient for threads, mem and cpu usage
+theme[process_start]="#3A5234"
+theme[process_mid]="#A0A040"
+theme[process_end]="#E76F4F"

etc/profile.d/mios-btop.sh

@@ -9,15 +9,30 @@
 # `btop -p 4` (also reachable via `mios proc`-style) shows only the
 # processes section per operator's preset-4 request.
 #
-# Operator can bypass by passing any explicit -p / --preset arg:
-#   btop          -> btop -p 3
-#   btop -p 4     -> btop -p 4         (operator override wins)
-#   btop --preset 1 -> btop --preset 1 (operator override wins)
-#
-# Interactive-shell only; cron/scripted btop sees the real binary.
+# Operator-flagged 2026-05-10 (screenshot): btop launched at preset 3
+# but rendered cpu+NET (btop's compiled-in default preset 3) with
+# update_ms=2000 (default). That's btop ignoring our config entirely.
+# Root cause: btop reads `$XDG_CONFIG_HOME/btop/btop.conf` ->
+# `$HOME/.config/btop/btop.conf` and DOESN'T fall back to /etc when
+# either is unset/invalid. On the dev VM, `mios` user's $HOME can
+# resolve to `/` (the /=git root), and `/.config/btop/btop.conf`
+# may not exist if the build-time seed missed that path. Force the
+# resolution explicitly via BTOP_CONFIG_DIR so the canonical MiOS
+# config under /etc/btop/ is always honored.
 
 [ -n "${PS1:-}" ] || return 0
 
+# Resolve BTOP_CONFIG_DIR if the operator hasn't pinned one. Prefer
+# the user's own config if it exists; otherwise fall back to the
+# system-wide MiOS preset baked into the image.
+if [ -z "${BTOP_CONFIG_DIR:-}" ]; then
+    if [ -f "${HOME:-/root}/.config/btop/btop.conf" ]; then
+        export BTOP_CONFIG_DIR="${HOME:-/root}/.config/btop"
+    elif [ -f /etc/btop/btop.conf ]; then
+        export BTOP_CONFIG_DIR=/etc/btop
+    fi
+fi
+
 btop() {
     local has_preset=0
     for arg in "$@"; do