@holoscript/holosystem 0.2.2 → 0.2.4

package/native/windows-sandbox/README.md

@@ -0,0 +1,19 @@
+# Windows low-integrity Job launcher
+
+`Program.cs` is the auditable source for the Windows AMD64 launcher consumed by
+`vm-launch-whpx-sandboxed`. `build.ps1` compiles it with the inbox .NET
+Framework AMD64 compiler and writes the measured artifact to
+`../windows-x64/holosystem-sandbox-launcher.exe`.
+
+The release contract pins the executable digest, not an unverified source-build
+claim. The inbox compiler does not offer deterministic output, so a rebuild is
+expected to change the binary digest even when the source is unchanged. Review
+the source and binary delta, update the plan fixture, run the HoloSystem package
+checks, and complete a real two-launch WHPX receipt before publishing a rebuilt
+launcher.
+
+The launcher applies only the process controls it reports: maximum-privilege
+filtering, low integrity, an explicit three-handle inheritance list, and a
+pre-resume Job Object with kill, process-count, memory, and UI limits. It is not
+an AppContainer and does not claim filesystem confidentiality or network
+capability isolation.

package/native/windows-sandbox/build.ps1

@@ -0,0 +1,18 @@
+$ErrorActionPreference = 'Stop'
+
+$source = Join-Path $PSScriptRoot 'Program.cs'
+$outputDirectory = Join-Path (Split-Path $PSScriptRoot -Parent) 'windows-x64'
+$output = Join-Path $outputDirectory 'holosystem-sandbox-launcher.exe'
+$compiler = Join-Path $env:SystemRoot 'Microsoft.NET\Framework64\v4.0.30319\csc.exe'
+
+if (-not (Test-Path -LiteralPath $compiler -PathType Leaf)) {
+  throw 'The Windows .NET Framework AMD64 compiler is unavailable.'
+}
+
+New-Item -ItemType Directory -Path $outputDirectory -Force | Out-Null
+& $compiler /nologo /target:exe /platform:x64 /optimize+ /debug- /out:$output $source
+if ($LASTEXITCODE -ne 0) {
+  throw "Native sandbox launcher compilation failed with exit code $LASTEXITCODE."
+}
+
+Get-FileHash -LiteralPath $output -Algorithm SHA256 | Select-Object Path, Hash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@holoscript/holosystem",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Portable bootstrap, consumption catalog, lineage, and bounded-work contract for HoloSystem consumers.",
   "releaseLane": "v0-preview",
   "keywords": [
@@ -33,6 +33,8 @@
   },
   "files": [
     "bin",
+    "docs",
+    "native",
     "src",
     "README.md",
     "LICENSE"
@@ -41,7 +43,7 @@
     "node": ">=18"
   },
   "scripts": {
-    "build": "node --check src/index.mjs && node --check src/catalog.mjs && node --check bin/holosystem.mjs",
+    "build": "node --check src/index.mjs && node --check src/catalog.mjs && node --check src/substrate.mjs && node --check src/substrate-import.mjs && node --check src/substrate-debian-release.mjs && node --check src/substrate-import-debian.mjs && node --check src/native-build.mjs && node --check src/vm-launch.mjs && node --check bin/holosystem.mjs",
     "test": "node --test test/*.test.mjs",
     "smoke": "node bin/holosystem.mjs --help",
     "check": "pnpm run build && pnpm run test && pnpm run smoke",

package/src/index.mjs

@@ -1,6 +1,51 @@
 export const HOLOSYSTEM_CONFIG_SCHEMA = 'holoscript.holosystem.consumer.v1';
 export const HOLOSYSTEM_INSPECTION_SCHEMA = 'holoscript.holosystem.inspection.v1';
 
+export {
+  HOLOSYSTEM_REBUILD_ATTESTATION_SCHEMA,
+  HOLOSYSTEM_SUBSTRATE_SCHEMA,
+  buildSubstrateClosure,
+  createRebuildAttestationPayload,
+} from './substrate.mjs';
+
+export { HOLOSYSTEM_SUBSTRATE_IMPORT_SCHEMA, importNpmPackageLock } from './substrate-import.mjs';
+export { importDebianPackageSnapshot } from './substrate-import-debian.mjs';
+export {
+  HOLOSYSTEM_DEBIAN_RELEASE_AUTH_SCHEMA,
+  verifyDebianRepositoryRelease,
+} from './substrate-debian-release.mjs';
+export {
+  HOLOSYSTEM_NATIVE_BUILD_PLAN_SCHEMA,
+  HOLOSYSTEM_NATIVE_BUILD_RECEIPT_SCHEMA,
+  HOLOSYSTEM_NATIVE_BUILD_SOURCE_SCHEMA,
+  createNativeRebuildAttestationPayload,
+  inspectNativeBuildPlan,
+  inspectNativeBuildSource,
+  runNativeBuild,
+} from './native-build.mjs';
+export {
+  HOLOSYSTEM_VM_ASSET_SCHEMA,
+  HOLOSYSTEM_VM_EXECUTOR_SCHEMA,
+  HOLOSYSTEM_VM_LAUNCH_PLAN_SCHEMA,
+  HOLOSYSTEM_VM_LAUNCH_RECEIPT_SCHEMA,
+  HOLOSYSTEM_WHPX_VM_LAUNCH_PLAN_SCHEMA,
+  HOLOSYSTEM_WHPX_VM_LAUNCH_RECEIPT_SCHEMA,
+  HOLOSYSTEM_WHPX_SANDBOXED_VM_LAUNCH_PLAN_SCHEMA,
+  HOLOSYSTEM_WHPX_SANDBOXED_VM_LAUNCH_RECEIPT_SCHEMA,
+  HOLOSYSTEM_WINDOWS_SANDBOX_LAUNCHER_DIGEST,
+  HOLOSYSTEM_WINDOWS_SANDBOX_LAUNCHER_SCHEMA,
+  HOLOSYSTEM_WINDOWS_SANDBOX_PROTOCOL,
+  inspectVmExecutor,
+  inspectVmLaunchAsset,
+  inspectVmLaunchPlan,
+  inspectWindowsVmSandboxLauncher,
+  inspectWhpxSandboxedVmLaunchPlan,
+  inspectWhpxVmLaunchPlan,
+  runVmLaunch,
+  runWhpxSandboxedVmLaunch,
+  runWhpxVmLaunch,
+} from './vm-launch.mjs';
+
 export {
   HOLOSYSTEM_CATALOG_SCHEMA,
   HOLOSYSTEM_CONSUMER_INPUT_SCHEMA,