macOS: current Lilu/VirtualSMC/WhateverGreen/RestrictEvents, no isa-applesmc

The OSX-KVM ESP ships Lilu 1.6.8 / VirtualSMC 1.3.3 / WhateverGreen 1.6.7,
which disable themselves on macOS 26; Apple's SMC driver then runs on QEMU's
isa-applesmc stub and the restart path panics (SMCWDT smcWriteKey
kSMCBadCommand → nested panic after MACH Reboot). Overlay pinned current
releases (upstream.json opencore.kexts) and drop isa-applesmc: with the stub
present VirtualSMC steps aside ("multiple devices present"); alone it carries
the OSK and reboots work (PE restart test: 10 s, clean). RestrictEvents with
revpatch=memtab silences MacPro7,1's "Memory Modules Misconfigured".

- makeOpenCore: kext overlay + Kernel.Add entries for overlaid kexts,
  --memory-mb (4 DIMMs), bootArgs default revpatch=memtab
- qemu.nix: deviceArgsFor { appleSmc } (default false); cli: --applesmc for
  images built before this change
- vm-driver: reboot-death detection (reset 60 s after a guest reboot request
  that never comes back), panics wait for XNU's own auto-reboot, debug dir
  works across nixbld users
- generalize: QEMU USB keyboard declared ANSI (no Keyboard Setup Assistant)
- README: architecture, reliability handling, debugging

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XsESshRCoBoUVWV9qKURUF

lib/images/macos/helpers/oc-config.py

@@ -44,6 +44,7 @@ def main():
     p.add_argument('--timeout', type=int, default=2)
     p.add_argument('--extra-json', default='{}')
     p.add_argument('--memory-mb', type=int, default=8192, help='VM RAM, described as 4 DIMMs')
+    p.add_argument('--add-kexts', default='', help='comma-separated kext names (without .kext) that need a Kernel.Add entry')
     a = p.parse_args()
 
     with open(a.base, 'rb') as f:
@@ -85,6 +86,18 @@ def main():
     cfg['Misc']['Boot']['Timeout'] = a.timeout
     cfg['Misc']['Boot']['HideAuxiliary'] = True
     cfg['Misc']['Security']['ScanPolicy'] = 0
+    # kexts overlaid into the ESP that the OSX-KVM config does not list yet
+    # (RestrictEvents: silences MacPro7,1's "Memory Modules Misconfigured", revpatch=memtab)
+    listed = {k['BundlePath'] for k in cfg['Kernel']['Add']}
+    for kext in [k + '.kext' for k in a.add_kexts.split(',') if k]:
+        if kext not in listed:
+            name = kext[:-5]
+            cfg['Kernel']['Add'].append({
+                'Arch': 'Any', 'BundlePath': kext, 'Comment': f'{name} (vmix)', 'Enabled': True,
+                'ExecutablePath': f'Contents/MacOS/{name}', 'MaxKernel': '', 'MinKernel': '',
+                'PlistPath': 'Contents/Info.plist'})
+            print('Kernel.Add +', kext)
+
     # MacPro7,1 firmware expects DIMMs in pairs (>= 4); with QEMU's single SMBIOS
     # module macOS shows "Memory Modules Misconfigured" at every login. Describe
     # the VM's RAM as four DDR4 modules instead.