Replace the Wayland-incompatible xrdp approach with gnome-remote-desktop system
"Remote Login": idempotent self-signed TLS cert, RDP enable, and an interactive
gate-credential prompt (ensure_rdp_credentials) — skipped when already set, never
hardcoding the secret, with a non-TTY fallback that prints the manual command.
Without gate credentials the RDP server rejects every connection (mstsc 0x904).
Also bundle prior uncommitted installer work: install code-server (skip if
present), swap wkhtmltopdf -> weasyprint for PDF rendering, and append a
login-time dtach auto-router to ~/.profile.
Verified: bash -n + shellcheck clean. Not run live; RDP connection untested.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JSFhCiEgndbRrMf7s8mmth
The bin/ scripts and pipx CLIs land in ~/.local/bin, which was not on
PATH in either deployed bashrc. Add an idempotent PATH guard to
bashrc-linux and bashrc-osx so dt, claude-provider, pymupdf, etc. are
found after login. Update the install.sh and README notes to match.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Rework install.sh:
- detect OS via uname (Darwin -> bashrc-osx, else bashrc-linux);
remove the {server|linux|arm|osx} argument and bashrc-server
- fix broken /tmp/config paths that made server+osx install no bashrc
- switch #!/bin/sh -> bash, add set -euo pipefail, quote expansions
- clone nerdtree into bundle (was a no-op cp of a dir), drop the
redundant molokai clone (already tracked in vim/colors)
- guard apt-get behind command -v so macOS skips it
- make re-runnable; drop the no-op trailing 'source ~/.bashrc'
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
