v0.7.4: probe-based introspection — remote shares classify, gparted bug fixed, Storage pagination

Introspection (the headline): detection is now probe-based. Instead of
grepping raw sectors for filename strings, we walk the ISO9660
directory tree and check whether the well-known boot files actually
exist — and the same probes run over NFS READ3 / SFTP seek-reads, so
share-hosted ISOs finally classify instead of registering as Unknown.

iso-store:
- New iso_fs module: the read-only ISO9660 walker (generalized from
  http-api) over an IsoReadAt trait — local files, NFS, SFTP, and the
  in-memory test images all share it. Iterative walk, 4 MiB directory
  cap, strict-mastering trailing-dot normalization (VMLINUZ.;1 now
  matches /vmlinuz), CachingReadAt collapses repeated directory reads
  during the probe pass (~60 → ~6 round-trips per remote ISO).
- introspect.rs rewritten (INTROSPECT_REV 2): PVD label → El Torito →
  /sources/boot.wim probe → verified Linux kernel+initrd probe table →
  local-only 16 MiB UDF-Windows scan → filename-token fallback.
  * Fixes the false-Windows bug: any Linux ISO shipping GRUB/syslinux
    chainload modules contains the literal "bootmgr", so gparted-live
    classified as WindowsPe. Linux probes now run first; the byte scan
    only sees ISOs nothing else claimed. Local ISOs re-probe once on
    startup via the rev bump — no re-upload.
  * Kernel entries are emitted only when kernel+initrd verifiably
    exist (no more guessed paths that 404 at boot). Debian-live /
    d-i netinst / CoreOS shapes classify for the UI but keep their
    working sanboot entries (their boot protocols need args we don't
    render yet; CoreOS additionally needs its embedded ignition).
  * Label + filename vocab extended: rhcos/coreos/openshift/okd,
    gparted/clonezilla/kali/tails, almalinux/rocky, sles, manjaro.
- NFS + SFTP managers: per-ISO IsoReadAt readers (READ3-at-offset with
  short-read looping / seek+read_exact), background introspection pass
  after each scan — entries register instantly with a provisional
  filename-based report (rev 0, optimistic sanboot preserved) and
  upgrade in place as probes land (30s/ISO timeout, failures keep the
  provisional). locate_in_iso() exposes the walker to the HTTP layer.
- remote_cache: introspection results persisted per protocol keyed
  share/path@size and gated on INTROSPECT_REV — container restarts
  re-probe only new/replaced ISOs; upgrades re-probe exactly once.
- SMB: smbclient can't seek, so SMB ISOs get the filename-token family
  (rev stays 0 → sanboot entry + "awaiting introspection" label).
- IsoStore::update_external_introspection swaps in completed reports
  and regenerates boot entries, preserving category/password.

http-api:
- /iso/{id}/{*path} now serves files from inside NFS/SFTP-hosted ISOs
  (remote ISO9660 lookup + ranged share stream) — verified kernel
  entries on remote Linux ISOs are actually bootable, end to end.
- iso_fs.rs deleted in favor of the shared iso-store module.
- full_flow fixtures build real directory trees via the shared
  test-image builder (new iso-store feature) — a label-only blob no
  longer earns a kernel entry, by design.

webui:
- Available images: paged 5 per page with a quiet footer pager
  (Showing X–Y of N · Prev/Next), filter-then-paginate, page resets on
  search input. Fifty images is five clean pages, not a scroll wall.
- Hosts/Queue profile: "Unattended file (in Storage → Advanced)" so
  the picker says where the files live.
- Row badge keys on introspect_rev: probed remote ISOs read like local
  ones; un-probed say "awaiting introspection".

Validation: clippy pedantic clean, fmt clean, 316 workspace tests
green (+17: walker, probe shapes incl. gparted regression + CoreOS,
filename table, cache round-trips), webui syntax-checked.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

crates/webui/src/app.css

@@ -925,3 +925,15 @@ tr.unbootable td:first-child { border-left: 3px solid var(--warn); }
    and matches every other input in the app; this wrapper just insets it
    from the card edges so it lines up with the header text above. */
 .list-search { padding: 14px 16px; }
+
+/* v0.7.4: pager footer under the Available-images table — quiet status
+   text on the left, ghost Prev/Next on the right. */
+.list-pager {
+  display: flex; align-items: center; gap: 8px;
+  padding: 12px 16px;
+  color: var(--fg-dim); font-size: 12px;
+  font-variant-numeric: tabular-nums;
+}
+.list-pager .spacer { flex: 1; }
+.list-pager button { padding: 4px 12px; font-size: 12px; }
+.list-pager button:disabled { opacity: 0.45; cursor: default; }

crates/webui/src/app.js

@@ -178,12 +178,14 @@
     if (iso.introspection.el_torito) {
       return { ok: true, warn: 'generic bootable ISO — boots via sanboot (emulated CD)' };
     }
-    // Remote-share ISOs aren't introspected (no random access over the
-    // network), so el_torito is unknown — assume bootable and let sanboot
-    // try rather than cry wolf.
+    // v0.7.4: NFS/SFTP ISOs now introspect over the share, so a probed
+    // remote ISO flows through the kernel/el_torito branches above like
+    // a local one. introspect_rev 0 means the probe hasn't landed yet
+    // (it runs in the background right after a scan) or never can (SMB —
+    // smbclient can't seek): stay optimistic and let sanboot try.
     const remote = iso.source && iso.source.kind && iso.source.kind !== 'local';
-    if (remote) {
-      return { ok: true, warn: 'remote ISO — not introspected; sanboot is attempted at boot' };
+    if (remote && (iso.introspection.introspect_rev || 0) === 0) {
+      return { ok: true, warn: 'remote ISO — awaiting introspection; sanboot is attempted at boot' };
     }
     // Local ISO with no Windows/Linux boot files and no El Torito catalog:
     // a data/appliance image (e.g. a VMware vCenter bundle), not a bootable
@@ -267,7 +269,7 @@
       el('label', {class:'field'}, [
         el('span', {class:'name'}, 'Auto IP address (optional)'), ipInput]),
       el('label', {class:'field'}, [
-        el('span', {class:'name'}, 'Unattended file'), sel]),
+        el('span', {class:'name'}, 'Unattended file (in Storage → Advanced)'), sel]),
     ]);
     return {
       wrap,
@@ -894,20 +896,38 @@
         rowsAndEditors.push(tr, editorRow);
       });
 
-      // v0.7.2: client-side filter over the image table. Rows travel in
-      // (row, password-editor) pairs; filtering hides both, and an open
-      // editor stays closed for filtered-out rows.
+      // v0.7.2: client-side filter over the image table; v0.7.4: paged
+      // 5 at a time so a 50-image library doesn't become a scroll wall.
+      // Rows travel in (row, password-editor) pairs. One view function
+      // applies filter-then-page; editors close on any view change.
+      const ISO_PAGE_SIZE = 5;
+      let isoPage = 0;
+      const pagerInfo = el('span', {});
+      const prevBtn = el('button', {class:'ghost', onclick: () => { isoPage -= 1; applyIsoListView(); }}, '‹ Prev');
+      const nextBtn = el('button', {class:'ghost', onclick: () => { isoPage += 1; applyIsoListView(); }}, 'Next ›');
+      function applyIsoListView() {
+        const q = isoSearch.value.trim().toLowerCase();
+        const visible = [];
+        for (let k = 0; k + 1 < rowsAndEditors.length; k += 2) {
+          const row = rowsAndEditors[k];
+          rowsAndEditors[k + 1].style.display = 'none';
+          row.style.display = 'none';
+          if (!q || (row.dataset.search || '').includes(q)) visible.push(row);
+        }
+        const pages = Math.max(1, Math.ceil(visible.length / ISO_PAGE_SIZE));
+        if (isoPage >= pages) isoPage = pages - 1;
+        if (isoPage < 0) isoPage = 0;
+        visible.slice(isoPage * ISO_PAGE_SIZE, (isoPage + 1) * ISO_PAGE_SIZE)
+          .forEach(r => { r.style.display = ''; });
+        pagerInfo.textContent = visible.length
+          ? 'Showing ' + (isoPage * ISO_PAGE_SIZE + 1) + '–' +
+            Math.min(visible.length, (isoPage + 1) * ISO_PAGE_SIZE) + ' of ' + visible.length
+          : 'No images match';
+        prevBtn.disabled = isoPage === 0;
+        nextBtn.disabled = isoPage >= pages - 1;
+      }
       const isoSearch = el('input', {type:'search', placeholder:'Filter images by name, type, or source',
-        spellcheck:'false', oninput: () => {
-          const q = isoSearch.value.trim().toLowerCase();
-          for (let k = 0; k + 1 < rowsAndEditors.length; k += 2) {
-            const row = rowsAndEditors[k];
-            const editor = rowsAndEditors[k + 1];
-            const show = !q || (row.dataset.search || '').includes(q);
-            row.style.display = show ? '' : 'none';
-            if (!show) editor.style.display = 'none';
-          }
-        }});
+        spellcheck:'false', oninput: () => { isoPage = 0; applyIsoListView(); }});
       const isoTable = isos.length
         ? el('table', {}, [
             el('thead', {}, el('tr', {}, [
@@ -919,6 +939,13 @@
             el('tbody', {}, rowsAndEditors),
           ])
         : el('div', {class:'empty'}, 'No images yet. Upload an ISO or add an SMB share.');
+      // v0.7.4: pager footer, shown once the library outgrows one page.
+      const isoPager = isos.length > ISO_PAGE_SIZE
+        ? el('div', {class:'list-pager'}, [
+            pagerInfo, el('span', {class:'spacer'}), prevBtn, nextBtn,
+          ])
+        : null;
+      if (isos.length) applyIsoListView();
 
       // ── Remote shares section (v0.5.1) ──
       // SMB + NFS unified into one "Remote shares" card with a protocol
@@ -1337,6 +1364,7 @@
             ? el('div', {class:'list-search'}, el('label', {class:'field', style:'margin-bottom:0'}, isoSearch))
             : null,
           isoTable,
+          isoPager,
         ]),
       ]), unattendedAdvanced]);
     },