fix(dashboard,wslg): clean grep -c counts + WSLg env propagation

Two visible glitches in the dashboard's "Working tree" panel and a
silent flatpak-GUI-launch failure under WSLg, both rooted in
shell-quirk / namespace-quirk that's specific to podman-machine WSL
distros' nested systemd setup.

1. dashboard "Working tree" rendered:
     staged     0
     0
     modified   0
     0
     untracked  497
   Two-line counts where there should be one.

   Root cause: `grep -c <pattern>` exits 1 when match count is 0
   (POSIX). The previous code did `grep -cE ... || echo 0` -- when
   no matches existed, BOTH `grep -c 0\n` AND `echo 0\n` ran, and
   the captured value was "0\n0" (one trailing newline trimmed by
   $(...)). printf rendered it across two rows.

   Fix: pipe the porcelain output once into a local var, then run
   each grep -c against that var with `2>/dev/null; true` (lets the
   command substitution always succeed) and a trailing
   `${var%%[!0-9]*}` to strip any non-digit suffix. The resulting
   var is always exactly one integer.

   Also fix `ahead`/`behind` rendering as "?": the previous code
   tried `git rev-list --count '@{upstream}..HEAD'` which errors
   when no upstream tracking branch is set on the local branch.
   Now probes `refs/remotes/origin/<branch>` first; if present,
   uses the explicit `origin/<branch>..HEAD` form. Otherwise shows
   "?" without the rev-list stderr leak.

2. /etc/profile.d/mios-wslg.sh: new file. Exports DISPLAY,
   WAYLAND_DISPLAY, XDG_RUNTIME_DIR, PULSE_SERVER, WSL_INTEROP for
   shells that land in the NESTED systemd namespace of a
   podman-machine WSL distro. The outer namespace mounts /mnt/wslg/
   (with the wayland socket, PulseServer pipe, etc.); the inner
   ns (where the operator's interactive shell lives) does NOT
   inherit the env that points at those sockets, so flatpak GUI
   apps (Ptyxis, Nautilus, Epiphany, etc.) error with
   "Gdk-CRITICAL ... 'GDK_IS_DISPLAY (self)' failed" or
   "cannot open display:" the moment they launch.

   Detection is by `[ -d /mnt/wslg ]` -- present only on WSLg-
   capable distros, so the file is inert on bare-metal /
   Hyper-V / QEMU MiOS hosts.

Verified live on podman-MiOS-DEV:
  DISPLAY=:0 WAYLAND_DISPLAY=wayland-0
  XDG_RUNTIME_DIR=/mnt/wslg/runtime-dir
  /mnt/wslg/{distro,doc,PulseAudioRDPSink,PulseAudioRDPSource}
  branch 'main' set up to track 'origin/main'.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: Kabuki94

etc/profile.d/mios-wslg.sh

@@ -0,0 +1,35 @@
+# /etc/profile.d/mios-wslg.sh
+#
+# Exports the env vars Wayland/X11 clients need to reach WSLg's compositor
+# socket on Windows. Required because podman-machine WSL distros run a
+# NESTED systemd namespace (per the welcome banner) -- the outer namespace
+# mounts /mnt/wslg/, but the nested ns where the user's interactive shell
+# lives doesn't auto-inherit DISPLAY/WAYLAND_DISPLAY/XDG_RUNTIME_DIR.
+# Without this, flatpak GUI apps (Ptyxis, Nautilus, Epiphany, etc.) error
+# with "Gdk-CRITICAL ... 'GDK_IS_DISPLAY (self)' failed" or "cannot open
+# display:" the moment the operator launches them.
+#
+# Detection: /mnt/wslg/ is mounted by WSL2 host on every distro that has
+# `guiApplications=true` in .wslconfig. Its presence is the unambiguous
+# signal that we're running in a WSLg-capable distro and should wire the
+# socket env. Inert on bare-metal / Hyper-V / QEMU MiOS hosts where that
+# path doesn't exist.
+
+[ -d /mnt/wslg ] || return 0
+
+# Wayland socket: WSLg publishes wayland-0 inside /mnt/wslg/ which itself
+# becomes XDG_RUNTIME_DIR's source. Some flatpak runtimes also need
+# WAYLAND_DISPLAY pointing at the bare socket name.
+export XDG_RUNTIME_DIR="${XDG_RUNTIME_DIR:-/mnt/wslg/runtime-dir}"
+export WAYLAND_DISPLAY="${WAYLAND_DISPLAY:-wayland-0}"
+export DISPLAY="${DISPLAY:-:0}"
+export PULSE_SERVER="${PULSE_SERVER:-/mnt/wslg/PulseServer}"
+
+# WSLg sets WSL_INTEROP via /init for the outer ns; the nested ns may
+# lose it. Re-derive from /run/WSL/<pid>_interop if present so
+# explorer.exe / wslpath etc. still work from the nested shell.
+if [ -z "${WSL_INTEROP:-}" ]; then
+    _wsl_interop="$(find /run/WSL/ -maxdepth 1 -name '*_interop' 2>/dev/null | head -n1)"
+    [ -n "$_wsl_interop" ] && export WSL_INTEROP="$_wsl_interop"
+    unset _wsl_interop
+fi

usr/libexec/mios/mios-dashboard.sh

@@ -176,13 +176,33 @@ print_git_state() {
             "$C_D" "$MIOS_LINUX_USER" "$MIOS_LINUX_USER" "$C_R"
         return
     fi
-    local branch ahead behind modified untracked staged
+    local branch ahead behind modified untracked staged porcelain
     branch="$(git -C / symbolic-ref --short HEAD 2>/dev/null || echo "(detached)")"
-    ahead="$(git -C / rev-list --count '@{upstream}..HEAD' 2>/dev/null || echo "?")"
-    behind="$(git -C / rev-list --count 'HEAD..@{upstream}' 2>/dev/null || echo "?")"
-    modified="$(git -C / status --porcelain=v1 2>/dev/null | grep -cE '^.M' || echo 0)"
-    staged="$(git -C / status --porcelain=v1 2>/dev/null | grep -cE '^M.|^A.' || echo 0)"
-    untracked="$(git -C / status --porcelain=v1 2>/dev/null | grep -cE '^\?\?' || echo 0)"
+    # `git rev-list @{upstream}..HEAD` errors when no upstream tracking
+    # branch is set. We try the explicit `origin/<branch>` form first;
+    # if that ref also doesn't exist, show "?". The previous `|| echo "?"`
+    # path returned the literal string but ALSO the partial number from
+    # rev-list's stderr leak in some shells.
+    if git -C / show-ref --verify --quiet "refs/remotes/origin/$branch" 2>/dev/null; then
+        ahead="$(git -C / rev-list --count "origin/${branch}..HEAD" 2>/dev/null || echo "?")"
+        behind="$(git -C / rev-list --count "HEAD..origin/${branch}" 2>/dev/null || echo "?")"
+    else
+        ahead="?"; behind="?"
+    fi
+    # `grep -c` exits 1 when match count is 0 -- which fires `|| echo 0`,
+    # producing the literal string "0\n0" in the captured value (one 0
+    # from grep's count, one from the fallback echo). Pipe the output
+    # through `wc -l` instead so the count is always an integer with a
+    # well-defined exit status.
+    porcelain="$(git -C / status --porcelain=v1 2>/dev/null)"
+    modified="$(printf '%s\n' "$porcelain"  | grep -cE '^.M'   2>/dev/null; true)"
+    staged="$(printf '%s\n'   "$porcelain"  | grep -cE '^[MA]' 2>/dev/null; true)"
+    untracked="$(printf '%s\n' "$porcelain" | grep -cE '^\?\?' 2>/dev/null; true)"
+    # Strip any trailing newline (grep -c only ever emits one int) so
+    # the dashboard formatting doesn't break a row across two lines.
+    modified="${modified%%[!0-9]*}"; modified="${modified:-0}"
+    staged="${staged%%[!0-9]*}";     staged="${staged:-0}"
+    untracked="${untracked%%[!0-9]*}"; untracked="${untracked:-0}"
     printf '    %sbranch%s     %s%s%s\n' "$C_D" "$C_R" "$C_B" "$branch" "$C_R"
     printf '    %sahead%s      %s%s%s\n' "$C_D" "$C_R" "$C_GRN" "$ahead" "$C_R"
     printf '    %sbehind%s     %s%s%s\n' "$C_D" "$C_R" "$C_YLW" "$behind" "$C_R"