Wawona ships a bundled zsh plus Weston terminal.c on Apple mobile (and a constrained zsh on watchOS). That is an on-device local shell: a native port path inside the app sandbox. No guest OS required.
It is not a VM or container machine. Those are separate, planned Machine kinds for running guests.
Also bundled where the target allows: coreutils, foot, neovim.
What is not shipping
wwn-apt (StoreKit modules) is not a Wawona flake input. Do not expect Debian apt install on iPhone.
watchOS
zsh ships with constrained UX. coreutils is excluded. See WATCHOS-SCOPE.
Hub: ios-local-shell.