Windows and WSL bootstrap one complete workstation from one depot

[filipeforattini]

Parent

Spec #201

What to build

Deliver the combined Windows x64 plus WSL2/Ubuntu Offline depot journey. One depot must carry both platform artifact sets; provision all seven coder CLIs, Herdr, Zellij, runtimes, and the sole redskilled daemon inside WSL; provision GUI, terminal, and VS Code on Windows; connect Windows companion surfaces to the WSL control plane; and prove network-denied install, update, rollback, migration, and zero drift without duplicate coder homes.

Acceptance criteria

• One signed depot manifest contains exact Windows x64 and Linux x64 locks without unrelated target artifacts.
• A clean Windows+WSL target imports with network egress blocked and installs every required surface on the decided side.
• No coder CLI, host cache, or daemon is duplicated on native Windows.
• Windows VS Code and compatible companion surfaces read the one WSL redskilled control plane.
• N-1 update, Worker-pending activation, full-lock rollback, migration, uninstall, and second zero-drift converge pass.
• Doctor reports one coherent workstation across both environments and separates unconfigured cloud auth from install readiness.
• Typecheck, tests, builds, and the Windows+WSL offline E2E command pass.

Blocked by

• Ubuntu 26 proves the complete offline update and rollback journey #213