@rehearsal-labs/retest 0.2.0 → 0.3.0

package/dist/cli/install/media-pins.d.ts

@@ -8,8 +8,14 @@ export declare const mediaSourceFiles: readonly {
     readonly path: string;
     readonly sha256: string;
 }[];
-export type MediaTarget = 'aarch64-apple-darwin' | 'x86_64-unknown-linux-gnu';
+export type MediaTarget = 'aarch64-apple-darwin' | 'x86_64-unknown-linux-gnu' | 'x86_64-pc-windows-msvc';
 export declare function mediaTarget(platform?: NodeJS.Platform, arch?: string): MediaTarget | undefined;
+/**
+ * The media binary's file name for a target, the name Cargo builds it under.
+ *
+ * @example mediaExecutableName('x86_64-pc-windows-msvc') // 'retest-media.exe'
+ */
+export declare function mediaExecutableName(target: MediaTarget): string;
 /** No publisher artifact has been released and checked. An absent checksum is a refusal, never trust on first use. */
 export type MediaPrebuiltPin = {
     readonly target: MediaTarget;

package/dist/cli/install/media-pins.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-pins.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-pins.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY,EAAE,MAAgB,CAAA;AAC3C,eAAO,MAAM,WAAW,EAAE,MAAiB,CAAA;AAC3C,uFAAuF;AACvF,eAAO,MAAM,uBAAuB,EAAE,MAAyB,CAAA;AAC/D,eAAO,MAAM,uBAAuB,EAAE,MAAoB,CAAA;AAC1D,eAAO,MAAM,iBAAiB,EAAE,MAA2E,CAAA;AAC3G,eAAO,MAAM,gBAAgB,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAsBzF,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,sBAAsB,GAAG,0BAA0B,CAAA;AAE7E,wBAAgB,WAAW,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAAE,IAAI,GAAE,MAAqB,GAAG,WAAW,GAAG,SAAS,CAI9H;AAED,sHAAsH;AACtH,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AACzN,eAAO,MAAM,iBAAiB,EAAE,SAAS,gBAAgB,EAAO,CAAA"}
+{"version":3,"file":"media-pins.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-pins.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,YAAY,EAAE,MAAgB,CAAA;AAC3C,eAAO,MAAM,WAAW,EAAE,MAAiB,CAAA;AAC3C,uFAAuF;AACvF,eAAO,MAAM,uBAAuB,EAAE,MAAyB,CAAA;AAC/D,eAAO,MAAM,uBAAuB,EAAE,MAAoB,CAAA;AAC1D,eAAO,MAAM,iBAAiB,EAAE,MAA2E,CAAA;AAC3G,eAAO,MAAM,gBAAgB,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAuBzF,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,sBAAsB,GAAG,0BAA0B,GAAG,wBAAwB,CAAA;AAExG,wBAAgB,WAAW,CAAC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAAE,IAAI,GAAE,MAAqB,GAAG,WAAW,GAAG,SAAS,CAK9H;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAE/D;AAED,sHAAsH;AACtH,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AACzN,eAAO,MAAM,iBAAiB,EAAE,SAAS,gBAAgB,EAAO,CAAA"}

package/dist/cli/install/media-pins.js

@@ -4,35 +4,46 @@ export const minimumRust = '1.88.0';
 /** Fixed limits for the pinned media binary and each shipped source or notice file. */
 export const maximumMediaBinaryBytes = 64 * 1024 * 1024;
 export const maximumMediaSourceBytes = 1024 * 1024;
-export const mediaSourceDigest = '05ecad1aa1e0af65833a32c9cd4cdf62afb8409656f9c0314e114886b414d0e0';
+export const mediaSourceDigest = '1b5d0357a1fdf3e9f167131bfa25b95980016655134116dbf52b3ed67c8e9aa6';
 export const mediaSourceFiles = [
-    { path: 'media/Cargo.toml', sha256: '7d68b73873840d3968ba354b1d010186ef1df4b96ecdcc5a7b6a74e4696efbf4' },
-    { path: 'media/Cargo.lock', sha256: 'ded3cee3c32d990f089b0e4fba70222b200d386482869dff46d9987854451ed5' },
+    { path: 'media/Cargo.toml', sha256: 'f16379ae5212da4cb4c0ae2c06df4562342ad95455e61a6b83e4b7c8bdb2d190' },
+    { path: 'media/Cargo.lock', sha256: '43c003fc9a5581ad5439490efd4353fadb3eddd72902d863aa8f3adafcf90f9b' },
     { path: 'media/build.rs', sha256: 'fd8fac59c589459c46c32508f175ac47c60118612a7561c60e39ce2787d8bee2' },
     { path: 'media/src/allocations.rs', sha256: 'c752e4e7342e8886348da903854a624b2dbfcedfc0da087bc74ab80e4459434a' },
-    { path: 'media/src/encoder.rs', sha256: '675a7a7b299821af6e4e115ff8d7f30c6c12417284bd7027a573a337352d3768' },
-    { path: 'media/src/frame.rs', sha256: '88642491694812d3028ea1431d2afe8664aa29ca106db48b49f9bbff868cea3e' },
+    { path: 'media/src/encoder.rs', sha256: '09090bdd70849d45970eabab8c9320a47a511c7d5f2d9a85cfcb54094283c7ef' },
+    { path: 'media/src/frame.rs', sha256: 'ee2d6cfa4fd5f53a8cca08aecdd7504f5043b491c0d34de27e8caaf658a6c44a' },
     { path: 'media/src/jobs.rs', sha256: '3e8cef01fbda58e4ae5f306dd9301c24ec230380014cd17491c5727fe5011f0d' },
     { path: 'media/src/ledger.rs', sha256: 'f0e72a8a178deff760cfe6c768f2660966de5c3c25fdff4eac732bea0f96c2c9' },
     { path: 'media/src/live.rs', sha256: 'a195cd510988345ce66e1e1f6931cf72877007cc12763c94547cf01efa36f4b6' },
-    { path: 'media/src/main.rs', sha256: 'f8746ab90a4b1aa87e904b0e9081ee474968f6d9c8316731c4e21b001328e220' },
-    { path: 'media/src/place.rs', sha256: 'a47acbc1b52d3b4c4c4a89cd885e0986262f45d13b704f059e2aac3143af4b75' },
+    { path: 'media/src/main.rs', sha256: '37adada6ca274c9c42463bf3d816acce31a9030c8c6ea02b1cc66d227ab18e0a' },
+    { path: 'media/src/place.rs', sha256: 'a6e8270ec3f89b2fc277a550e5043af44406daf604e8890da3222ffe97d0d6e7' },
     { path: 'media/src/process_ownership.rs', sha256: '5f2913404de98e619166ed06b6c9830a2d07a3814fc263ee5b8ce20c21b55362' },
+    { path: 'media/src/process_ownership_windows.rs', sha256: '759d1ee5ec8191a84522e791828a55a4b733e6829d0b51ddb75a1f875f5c2dad' },
     { path: 'media/src/protocol.rs', sha256: '3060fe05ca5d63d291dec05449a3fa9f79bcd114e4fbd26e487619fe62ab68be' },
     { path: 'media/src/queue.rs', sha256: '8c5993bc5d2fdbdb4e5684cad9236af6c4a03e711e658256fb4ed27e413cc7fa' },
-    { path: 'media/src/recording.rs', sha256: '2240e9871bf25ecfab249fb8535677a4498e07b68f574ef4440ee652253891ee' },
-    { path: 'media/src/replies.rs', sha256: 'ccdcb7f3d3b901afa3aae2f628609de479693c7179c6916a6c556af5886adeb8' },
-    { path: 'media/src/server.rs', sha256: '74f62bd0c7242125bed264afa3c427431ceb83893f22e80cdae102145fcbb83a' },
-    { path: 'media/src/store.rs', sha256: '397544b2f2237ca58b4cdb1378411040fb4d4eabd80179446ceca2b0a86c1c76' },
+    { path: 'media/src/recording.rs', sha256: '84b2437aa62f52239606cf2da0c7319eea358b8b870732327a85ee97a6da304f' },
+    { path: 'media/src/replies.rs', sha256: '8fb2d312dc31a3090ae49a8e47f5697166a23dc9846c4788c7e61839f5746e17' },
+    { path: 'media/src/server.rs', sha256: '01834e8a6ace6d7517d7c6d2f96bdb41cd1171ceadde561aca46133169031b66' },
+    { path: 'media/src/store.rs', sha256: '48247649b875c2d508ebd860ec8492fdc9a0407cc803cbbc46a121d01378e9e9' },
     { path: 'media/src/timeline.rs', sha256: '48be1f8e08895a35a41c4bea2d99f59384523541fd024826f65acafdb9ac7310' },
     { path: 'LICENSE', sha256: 'cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30' },
-    { path: 'src/cli/install/media-notices.txt', sha256: '26c332ecf5ecee82d4557f1d794cec952da08dd5c9f4c2b3a1f73fd75fb79172' },
+    { path: 'src/cli/install/media-notices.txt', sha256: '172209e5295f60ef284f33dec45bac36d00d4803a329cafba27cd6218d14834a' },
 ];
 export function mediaTarget(platform = process.platform, arch = process.arch) {
     if (platform === 'darwin' && arch === 'arm64')
         return 'aarch64-apple-darwin';
     if (platform === 'linux' && arch === 'x64')
         return 'x86_64-unknown-linux-gnu';
+    if (platform === 'win32' && arch === 'x64')
+        return 'x86_64-pc-windows-msvc';
     return undefined;
 }
+/**
+ * The media binary's file name for a target, the name Cargo builds it under.
+ *
+ * @example mediaExecutableName('x86_64-pc-windows-msvc') // 'retest-media.exe'
+ */
+export function mediaExecutableName(target) {
+    return target === 'x86_64-pc-windows-msvc' ? 'retest-media.exe' : 'retest-media';
+}
 export const mediaPrebuiltPins = [];

package/dist/cli/install/media-record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-record.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-record.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAgBpE,MAAM,MAAM,WAAW,GAAG;IACxB,aAAa,EAAE,CAAC,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,WAAW,CAAA;IACnB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC3C,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB,CAAA;AAGD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC3G,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IAC7F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IACpG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,YAAY,CAAA;CAC3C,CAAA;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAAwE;AAClH,wBAAgB,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAG1F;AACD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAkG;AAEvJ,8GAA8G;AAC9G,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW/G;AAED,wBAAgB,eAAe,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAEpE;AAED,4HAA4H;AAC5H,wBAAsB,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,GAAE,eAAe,GAAG;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAwDzO"}
+{"version":3,"file":"media-record.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-record.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAgBpE,MAAM,MAAM,WAAW,GAAG;IACxB,aAAa,EAAE,CAAC,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,WAAW,CAAA;IACnB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC3C,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB,CAAA;AAGD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC3G,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IAC7F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;IACpG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,YAAY,CAAA;CAC3C,CAAA;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAAwE;AAClH,wBAAgB,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAG1F;AACD,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAA+E;AAEpI,8GAA8G;AAC9G,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW/G;AAED,wBAAgB,eAAe,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAEpE;AAED,4HAA4H;AAC5H,wBAAsB,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,GAAE,eAAe,GAAG;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAyDzO"}

package/dist/cli/install/media-record.js

@@ -1,7 +1,7 @@
 import { createHash } from 'node:crypto';
 import { constants } from 'node:fs';
 import { access, lstat, readdir } from 'node:fs/promises';
-import { dirname, join, resolve } from 'node:path';
+import { basename, dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { cacheFolders } from "../../browser/builds.js";
 import { MEDIA_PROTOCOL_VERSION } from "../../media/protocol.js";
@@ -10,15 +10,15 @@ import { errorMessage } from "../../protocol/failures.js";
 import { Deadline } from "../../protocol/deadline.js";
 import { isMissingFile } from "../../shared/error-code.js";
 import { checkFileIdentity, readFileSha256, readRecordText } from "../../shared/regular-file.js";
-import { maximumMediaBinaryBytes, maximumMediaSourceBytes, mediaPrebuiltPins, mediaSourceDigest, mediaSourceFiles, mediaTarget, mediaVersion, minimumRust } from "./media-pins.js";
+import { maximumMediaBinaryBytes, maximumMediaSourceBytes, mediaExecutableName, mediaPrebuiltPins, mediaSourceDigest, mediaSourceFiles, mediaTarget, mediaVersion, minimumRust } from "./media-pins.js";
 import { rustAtLeast } from "./media-tools.js";
-const recordSchema = s.object({ schemaVersion: s.literal(1), version: s.string(), protocol: s.number({ integer: true, min: 1 }), sourceDigest: s.string(), target: s.enum(['aarch64-apple-darwin', 'x86_64-unknown-linux-gnu']), method: s.enum(['source', 'prebuilt']), rustcVersion: s.union([s.string(), s.literal(null)]), binarySha256: s.string(), notices: s.array(s.object({ path: s.string(), sha256: s.string() })), installedAt: s.string(), installedBy: s.string() });
+const recordSchema = s.object({ schemaVersion: s.literal(1), version: s.string(), protocol: s.number({ integer: true, min: 1 }), sourceDigest: s.string(), target: s.enum(['aarch64-apple-darwin', 'x86_64-unknown-linux-gnu', 'x86_64-pc-windows-msvc']), method: s.enum(['source', 'prebuilt']), rustcVersion: s.union([s.string(), s.literal(null)]), binarySha256: s.string(), notices: s.array(s.object({ path: s.string(), sha256: s.string() })), installedAt: s.string(), installedBy: s.string() });
 export function mediaPackageRoot() { return resolve(dirname(fileURLToPath(import.meta.url)), '../../..'); }
 export function mediaFolder(env, target) {
     const folders = cacheFolders(env);
     return folders === undefined ? undefined : join(dirname(folders.browsers), 'media', `media-${mediaVersion}-${target}`);
 }
-export function mediaLockPath(folder) { return join(dirname(dirname(folder)), 'locks', `${folder.split('/').at(-1) ?? 'media'}.lock`); }
+export function mediaLockPath(folder) { return join(dirname(dirname(folder)), 'locks', `${basename(folder)}.lock`); }
 /** Hashes the pinned allowlist only. A changed, absent or non-regular source is refused before cargo runs. */
 export async function checkMediaSource(root, options = {}) {
     const deadline = options.deadline ?? new Deadline(15_000, { signal: options.signal });
@@ -46,7 +46,8 @@ export async function inspectMedia(env, options = {}) {
     const folder = mediaFolder(env, target);
     if (folder === undefined)
         return undefined;
-    const base = { engine: 'media', version: mediaVersion, protocol: MEDIA_PROTOCOL_VERSION, target, folder, executablePath: join(folder, 'retest-media') };
+    const executable = mediaExecutableName(target);
+    const base = { engine: 'media', version: mediaVersion, protocol: MEDIA_PROTOCOL_VERSION, target, folder, executablePath: join(folder, executable) };
     const bad = (problem, state = 'damaged') => ({ ...base, state, problems: [problem] });
     try {
         const stats = await lstat(folder);
@@ -87,9 +88,9 @@ export async function inspectMedia(env, options = {}) {
     if (JSON.stringify(record.notices) !== JSON.stringify(notices))
         return bad(`${path} does not name the pinned licence notices.`);
     let executableIdentity;
-    for (const file of [{ path: 'retest-media', sha256: record.binarySha256 }, ...notices]) {
+    for (const file of [{ path: executable, sha256: record.binarySha256 }, ...notices]) {
         const filePath = join(folder, file.path);
-        const reading = await readFileSha256(filePath, { maximumBytes: file.path === 'retest-media' ? maximumMediaBinaryBytes : maximumMediaSourceBytes, deadline, ...(options.signal === undefined ? {} : { signal: options.signal }) });
+        const reading = await readFileSha256(filePath, { maximumBytes: file.path === executable ? maximumMediaBinaryBytes : maximumMediaSourceBytes, deadline, ...(options.signal === undefined ? {} : { signal: options.signal }) });
         if (reading.kind !== 'file')
             return bad(reading.kind === 'missing' ? `${filePath} is missing.` : reading.problem);
         if (reading.sha256 !== file.sha256)
@@ -102,7 +103,7 @@ export async function inspectMedia(env, options = {}) {
                 return bad(`${filePath} was replaced after Retest hashed it; its file identity no longer matches.`);
             if ((stats.mode & 3072n) !== 0n)
                 return bad(`${filePath} has a set-user-id or set-group-id bit.`);
-            if (file.path === 'retest-media')
+            if (file.path === executable)
                 executableIdentity = reading.identity;
         }
         catch (error) {
@@ -112,7 +113,7 @@ export async function inspectMedia(env, options = {}) {
     if (!(await access(base.executablePath, constants.X_OK).then(() => true, () => false)))
         return bad(`${base.executablePath} is not executable.`);
     if (options.verify === true) {
-        const allowed = new Set(['build.json', 'retest-media', ...notices.map((notice) => notice.path)]);
+        const allowed = new Set(['build.json', executable, ...notices.map((notice) => notice.path)]);
         let names;
         try {
             names = await readdir(folder);

package/dist/cli/install/media-report.d.ts

@@ -1,6 +1,8 @@
 import type { MediaInspection } from './media-record.ts';
 import type { MediaInstallResult } from './media-install.ts';
+import type { Marks } from '../../reporters/style.ts';
 /** Adds media to the existing list document without changing browser pin or record rules. */
 export declare function renderMediaListing(browserText: string, inspection: MediaInspection | undefined, json: boolean): string;
-export declare function renderMediaInstall(result: MediaInstallResult): string;
+/** The media install as the terminal shows it, with the marks the terminal draws. */
+export declare function renderMediaInstall(result: MediaInstallResult, marks?: Marks): string;
 //# sourceMappingURL=media-report.d.ts.map

package/dist/cli/install/media-report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-report.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAU5D,6FAA6F;AAC7F,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAOtH;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAGrE"}
+{"version":3,"file":"media-report.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AAWrD,6FAA6F;AAC7F,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAOtH;AAED,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,GAAE,KAAoB,GAAG,MAAM,CAGlG"}

package/dist/cli/install/media-report.js

@@ -1,10 +1,11 @@
 import { mediaSourceDigest } from "./media-pins.js";
 import { parse, s } from "../../protocol/schema.js";
+import { unicodeMarks } from "../../reporters/style.js";
 const licenceFile = s.object({ path: s.string(), title: s.string(), licence: s.string(), sha256: s.optional(s.string()), published: s.boolean(), bundled: s.optional(s.string()) });
 const licences = s.union([s.object({ inspected: s.literal(true), files: s.array(licenceFile) }), s.object({ inspected: s.literal(false), reason: s.string() })]);
 const sourceCode = s.object({ repository: s.string(), revision: s.string(), patches: s.string() });
-const listedBuild = s.object({ engine: s.string(), title: s.string(), version: s.string(), build: s.optional(s.string()), platform: s.enum(['mac-arm64', 'linux-x64']), source: s.string(), pinnedSha256: s.union([s.string(), s.literal(null)]), state: s.enum(['missing', 'installed', 'damaged', 'unverifiable']), folder: s.string(), executablePath: s.optional(s.string()), sha256: s.optional(s.string()), installedAt: s.optional(s.string()), problems: s.array(s.string()), licences, sourceCode: s.optional(sourceCode), install: s.union([s.object({ command: s.string() }), s.object({ refused: s.string(), missingNotices: s.optional(s.array(s.string())) })]) });
-const browserDocument = s.object({ schemaVersion: s.literal(1), platform: s.enum(['mac-arm64', 'linux-x64']), cache: s.object({ browsers: s.string(), executors: s.string() }), builds: s.array(listedBuild) });
+const listedBuild = s.object({ engine: s.string(), title: s.string(), version: s.string(), build: s.optional(s.string()), platform: s.enum(['mac-arm64', 'linux-x64', 'win-x64']), source: s.string(), pinnedSha256: s.union([s.string(), s.literal(null)]), state: s.enum(['missing', 'installed', 'damaged', 'unverifiable']), folder: s.string(), executablePath: s.optional(s.string()), sha256: s.optional(s.string()), installedAt: s.optional(s.string()), problems: s.array(s.string()), licences, sourceCode: s.optional(sourceCode), install: s.union([s.object({ command: s.string() }), s.object({ refused: s.string(), missingNotices: s.optional(s.array(s.string())) })]) });
+const browserDocument = s.object({ schemaVersion: s.literal(1), platform: s.enum(['mac-arm64', 'linux-x64', 'win-x64']), cache: s.object({ browsers: s.string(), executors: s.string() }), builds: s.array(listedBuild) });
 /** Adds media to the existing list document without changing browser pin or record rules. */
 export function renderMediaListing(browserText, inspection, json) {
     if (inspection === undefined)
@@ -17,8 +18,9 @@ export function renderMediaListing(browserText, inspection, json) {
     const media = { engine: 'media', title: 'retest-media', version: inspection.version, protocol: inspection.protocol, target: inspection.target, platform: document.value.platform, source: 'shipped crate source', pinnedSha256: null, sourceDigest: mediaSourceDigest, state: inspection.state, folder: inspection.folder, executablePath: inspection.executablePath, binarySha256: inspection.record?.binarySha256, rustcVersion: inspection.record?.rustcVersion, installedAt: inspection.record?.installedAt, problems: inspection.problems, install: { command: 'npx retest install media', prebuiltRefused: 'No published prebuilt checksum is pinned.' } };
     return `${JSON.stringify({ ...document.value, builds: [...document.value.builds, media] }, null, 2)}\n`;
 }
-export function renderMediaInstall(result) {
+/** The media install as the terminal shows it, with the marks the terminal draws. */
+export function renderMediaInstall(result, marks = unicodeMarks) {
     if (!result.ok)
-        return `  ✗ media            ${result.message}\n`;
-    return `  ✓ media            retest-media ${result.inspection.version} ${result.action === 'installed' ? 'installed' : 'was already installed'}\n                     ${result.inspection.executablePath}\n                     binary SHA-256 ${result.inspection.record?.binarySha256 ?? 'unavailable'}\n                     Recording finds it from this checked cache. ffmpeg is a separate host prerequisite.\n`;
+        return `  ${marks.failed} media            ${result.message}\n`;
+    return `  ${marks.passed} media            retest-media ${result.inspection.version} ${result.action === 'installed' ? 'installed' : 'was already installed'}\n                     ${result.inspection.executablePath}\n                     binary SHA-256 ${result.inspection.record?.binarySha256 ?? 'unavailable'}\n                     Recording finds it from this checked cache. ffmpeg is a separate host prerequisite.\n`;
 }

package/dist/cli/install/media-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media-tools.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAUlE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;AAC3E,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,CAAA;AACzN,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;AAE7H,sGAAsG;AACtG,eAAO,MAAM,YAAY,EAAE,eAO1B,CAAA;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAWpG;AAED,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AACxM,eAAO,MAAM,OAAO,EAAE,MAAmM,CAAA;AAEzN,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAoB,GAAG,OAAO,CAUnF;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,GAAE,eAA8B,GAAG,OAAO,CAAC,SAAS,CAAC,CAcxI;AAED,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzJ,sHAAsH;AACtH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,SAAS,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBjJ"}
+{"version":3,"file":"media-tools.d.ts","sourceRoot":"","sources":["../../../src/cli/install/media-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAA;AAWlE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;AAC3E,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,CAAA;AACzN,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;AAE7H,sGAAsG;AACtG,eAAO,MAAM,YAAY,EAAE,eAO1B,CAAA;AAED,4FAA4F;AAC5F,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAYpG;AAED,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AACxM,eAAO,MAAM,OAAO,EAAE,MAAmM,CAAA;AAEzN,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAoB,GAAG,OAAO,CAUnF;AAED,wBAAsB,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,GAAE,eAA8B,GAAG,OAAO,CAAC,SAAS,CAAC,CAcxI;AAED,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzJ,sHAAsH;AACtH,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,SAAS,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBjJ"}

package/dist/cli/install/media-tools.js

@@ -1,16 +1,17 @@
 import { constants } from 'node:fs';
 import { access, realpath, stat } from 'node:fs/promises';
-import { isAbsolute, join, resolve } from 'node:path';
+import { delimiter, isAbsolute, join, resolve, sep } from 'node:path';
 import { MediaProcess, mediaArguments } from "../../media/client.js";
 import { mediaGreetingProblem } from "../../media/build-identity.js";
+import { hostVariable, programFileName, toolchainVariables } from "../../media/host.js";
 import { describeCommand, runCommand } from "../../native/processes.js";
 import { errorMessage } from "../../protocol/failures.js";
 import { minimumRust } from "./media-pins.js";
 /** Tools inherit only the paths needed by the host toolchain, never test or evaluator credentials. */
 export const runMediaTool = (command, args, options) => {
     const environment = { LC_ALL: 'C' };
-    for (const key of ['PATH', 'HOME', 'CARGO_HOME', 'RUSTUP_HOME', 'TMPDIR']) {
-        const value = options.env[key];
+    for (const key of toolchainVariables) {
+        const value = hostVariable(options.env, key);
         if (value !== undefined)
             environment[key] = value;
     }
@@ -18,7 +19,8 @@ export const runMediaTool = (command, args, options) => {
 };
 /** An explicit name wins even when it is unusable. PATH lookup never substitutes for it. */
 export async function findMediaTool(name, env) {
-    const paths = name.includes('/') ? [resolve(name)] : (env['PATH'] ?? '').split(':').filter((part) => isAbsolute(part)).map((part) => join(part, name));
+    const named = name.includes('/') || name.includes(sep);
+    const paths = named ? [resolve(name)] : (hostVariable(env, 'PATH') ?? '').split(delimiter).filter((part) => isAbsolute(part)).map((part) => join(part, programFileName(name)));
     for (const path of paths) {
         try {
             const found = await realpath(path);

package/dist/cli/install/process-start.d.ts

@@ -2,10 +2,11 @@ import type { NativeTools } from '../../native/processes.ts';
 /**
  * When a process started. On Linux, the kernel's clock ticks from boot to its start, as /proc keeps them, which a step
  * of the wall clock does not move; on macOS, the second `ps` prints, read in UTC so it is the same whatever time zone
- * the reader runs in.
+ * the reader runs in. On Windows a holder is told alive by the file it holds open, not by its start, and records
+ * `held-file`, which compares to no other start.
  */
 export type ProcessStart = {
-    readonly clock: 'boot-ticks' | 'utc-seconds';
+    readonly clock: 'boot-ticks' | 'utc-seconds' | 'held-file';
     readonly value: number;
 };
 /** A process's start as read now: there, with its start; no process under that pid; or why it could not be read. */

package/dist/cli/install/process-start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process-start.d.ts","sourceRoot":"","sources":["../../../src/cli/install/process-start.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAW5D;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEnG,oHAAoH;AACpH,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAElL,gDAAgD;AAChD,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;AAEhE,2GAA2G;AAC3G,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,iBAAiB,CAAC,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAE,CAAA;AAE/K;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAIpE;AA2BD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS9D;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO9D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAKxG;AAED,8GAA8G;AAC9G,MAAM,MAAM,OAAO,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpE,oHAAoH;AACpH,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAE,CAAA;AAExI;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAU5E;AAED,kEAAkE;AAClE,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA"}
+{"version":3,"file":"process-start.d.ts","sourceRoot":"","sources":["../../../src/cli/install/process-start.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAW5D;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjH,oHAAoH;AACpH,MAAM,MAAM,YAAY,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAElL,gDAAgD;AAChD,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;AAEhE,2GAA2G;AAC3G,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,iBAAiB,CAAC,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAE,CAAA;AAE/K;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAIpE;AA2BD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS9D;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO9D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAKxG;AAED,8GAA8G;AAC9G,MAAM,MAAM,OAAO,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpE,oHAAoH;AACpH,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAE,CAAA;AAExI;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAU5E;AAED,kEAAkE;AAClE,MAAM,MAAM,cAAc,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA"}

package/dist/cli/install/process-start.js

@@ -126,6 +126,10 @@ async function readMachineOnce(options) {
                 return { ok: false, problem: `Retest could not read this Mac's boot session: ${describeCommand('sysctl', result)}.` };
             return { ok: true, machine: { id: `macos boot ${session}`, host } };
         }
+        // A Windows holder is told alive by the file it holds open, which Windows closes when it ends, at a reboot too, so no
+        // pid or boot is compared there; the name keeps another machine's lock in a shared cache from being judged.
+        if (options.platform === 'win32')
+            return { ok: true, machine: { id: `windows ${host.toLowerCase()}`, host } };
     }
     catch (error) {
         return { ok: false, problem: `Retest could not read which machine this is: ${errorMessage(error)}.` };

package/dist/cli/install/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/cli/install/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAc,MAAM,yBAAyB,CAAA;AAC/J,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAMzD,kGAAkG;AAClG,eAAO,MAAM,cAAc,2BAA2B,CAAA;AAItD,kHAAkH;AAClH,wBAAgB,YAAY,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,EAAE,CAOpD;AAWD,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAEhE;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAQ3F;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYhE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAY/F;AAED,uCAAuC;AACvC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAA;IAChD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CACtB,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAsClE;AAWD,0EAA0E;AAC1E,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAA;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAC3H,CAAA"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../src/cli/install/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAc,MAAM,yBAAyB,CAAA;AAC/J,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAMzD,kGAAkG;AAClG,eAAO,MAAM,cAAc,2BAA2B,CAAA;AAItD,kHAAkH;AAClH,wBAAgB,YAAY,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,EAAE,CAOpD;AAWD,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAKhE;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAQ3F;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYhE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,CAY/F;AAED,uCAAuC;AACvC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAA;IAChD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CACtB,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAsClE;AAWD,0EAA0E;AAC1E,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAA;IACrC,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAC3H,CAAA"}

package/dist/cli/install/report.js

@@ -25,7 +25,11 @@ const licenceNames = {
 };
 /** The project's licence names; component terms remain in the full notices and JSON pin. */
 export function licenceSummary(pin) {
-    return pin.licences.inspected && pin.licences.files.length > 0 ? `${licenceNames[pin.engine]}, notices kept with the build` : undefined;
+    if (!pin.licences.inspected || pin.licences.files.length === 0)
+        return undefined;
+    // Chrome for Testing carries Google's Widevine module on macOS and Linux, and not on Windows.
+    const names = pin.engine === 'chromium' && !pin.licences.files.some((file) => file.licence === 'LicenseRef-Widevine') ? 'BSD' : licenceNames[pin.engine];
+    return `${names}, notices kept with the build`;
 }
 /** The one notice message printed for each engine named in an install. */
 export function installLicenceText(pin, folders) {
@@ -72,11 +76,11 @@ export function mirrorProblem(mirror) {
 export function describeResult(engine, result, style) {
     const indent = ' '.repeat(4 + engineColumn);
     if (!result.ok && result.notices !== undefined)
-        return [`  ${style.red('✗')} ${engine.padEnd(engineColumn)}${result.notices.lead}`, ...result.notices.files.map((file) => `${indent}${file.path}, ${file.title}`), ''].join('\n');
+        return [`  ${style.red(style.marks.failed)} ${engine.padEnd(engineColumn)}${result.notices.lead}`, ...result.notices.files.map((file) => `${indent}${file.path}, ${file.title}`), ''].join('\n');
     if (!result.ok)
-        return `  ${style.red('✗')} ${engine.padEnd(engineColumn)}${result.message}\n`;
+        return `  ${style.red(style.marks.failed)} ${engine.padEnd(engineColumn)}${result.message}\n`;
     const { inspection } = result;
-    const lines = [`  ${style.green('✓')} ${engine.padEnd(engineColumn)}${describePin(inspection.pin)} ${result.action === 'installed' ? 'installed' : 'was already installed'}`];
+    const lines = [`  ${style.green(style.marks.passed)} ${engine.padEnd(engineColumn)}${describePin(inspection.pin)} ${result.action === 'installed' ? 'installed' : 'was already installed'}`];
     if (inspection.executablePath !== undefined)
         lines.push(`${indent}${inspection.executablePath}`);
     else
@@ -106,19 +110,19 @@ export function renderInspections(report) {
         const head = `  ${pin.engine.padEnd(engineColumn)}${describePin(pin).padEnd(titleWidth)}`;
         const refusal = pinRefusal(pin);
         if (inspection.state === 'installed') {
-            lines.push(`${head}${style.green('✓')} installed${inspection.sha256 === undefined ? '' : style.dim(` · ${pin.kind === 'archive' ? 'archive' : 'products'} SHA-256 ${inspection.sha256}`)}`);
+            lines.push(`${head}${style.green(style.marks.passed)} installed${inspection.sha256 === undefined ? '' : style.dim(` · ${pin.kind === 'archive' ? 'archive' : 'products'} SHA-256 ${inspection.sha256}`)}`);
             lines.push(`${indent}${inspection.executablePath ?? inspection.folder}`);
         }
         else if (inspection.state === 'damaged') {
             // Only a pin `retest install` installs is ever damaged, so running it again is a fix it accepts.
-            lines.push(`${head}${style.red('✗')} not as recorded in ${inspection.folder}`);
+            lines.push(`${head}${style.red(style.marks.failed)} not as recorded in ${inspection.folder}`);
             for (const problem of inspection.problems)
                 lines.push(`${indent}${problem}`);
             lines.push(`${indent}Remove the folder and run ${retestCommand} install ${pin.engine} again.`);
         }
         else if (inspection.state === 'unverifiable') {
             // Nothing in such a folder was read, since no install of Retest's put it there to check against the pin.
-            lines.push(`${head}${style.red('✗')} not installed by Retest, and nothing in ${inspection.folder} was checked`);
+            lines.push(`${head}${style.red(style.marks.failed)} not installed by Retest, and nothing in ${inspection.folder} was checked`);
             lines.push(`${indent}Remove the folder.`);
             if (refusal !== undefined)
                 lines.push(...refusalLines(pin.engine, refusal, indent, style));

package/dist/cli/install/supervisor-install.d.ts

@@ -0,0 +1,33 @@
+import type { SupervisorInspection, SupervisorEnvironment } from './supervisor-record.ts';
+import type { SupervisorTarget } from './supervisor-pins.ts';
+import type { SupervisorToolRunner } from './supervisor-tools.ts';
+export type SupervisorInstallOptions = {
+    readonly env: SupervisorEnvironment;
+    readonly signal: AbortSignal;
+    readonly version: string;
+    readonly report: (line: string) => void;
+    readonly offline?: boolean;
+    readonly packageRoot?: string;
+    readonly target?: SupervisorTarget;
+    readonly run?: SupervisorToolRunner;
+};
+export type SupervisorInstallResult = {
+    readonly ok: true;
+    readonly action: 'installed' | 'already_installed';
+    readonly inspection: SupervisorInspection;
+} | {
+    readonly ok: false;
+    readonly message: string;
+    readonly stopped: boolean;
+};
+/** The sentence `retest install supervisor` gives where no supervisor is needed. */
+export declare const supervisorNotNeeded: string;
+/**
+ * Builds the shipped supervisor crate with `cargo build --release --locked` into the cache, under the install lock, and
+ * records it. Nothing is downloaded but the pinned crates cargo fetches, and none with `offline`. A build already
+ * recorded is left as it is; a damaged cache is refused, never repaired.
+ *
+ * @example await installSupervisor({ env: process.env, signal, version: '0.3.0', report: console.log })
+ */
+export declare function installSupervisor(options: SupervisorInstallOptions): Promise<SupervisorInstallResult>;
+//# sourceMappingURL=supervisor-install.d.ts.map

package/dist/cli/install/supervisor-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor-install.d.ts","sourceRoot":"","sources":["../../../src/cli/install/supervisor-install.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAoB,MAAM,wBAAwB,CAAA;AAC3G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAajE,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACpI,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,oBAAoB,CAAA;CACnI,CAAA;AACD,MAAM,MAAM,uBAAuB,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAA;AAExO,oFAAoF;AACpF,eAAO,MAAM,mBAAmB,EAAE,MAAqH,CAAA;AAEvJ;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA6B3G"}

package/dist/cli/install/supervisor-install.js

@@ -0,0 +1,158 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, rename, rm, writeFile } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+import { describeCommand } from "../../native/processes.js";
+import { errorMessage } from "../../protocol/failures.js";
+import { Deadline } from "../../protocol/deadline.js";
+import { openRegularFile, readFileSha256, readRecordText } from "../../shared/regular-file.js";
+import { takeInstallLock } from "./lock.js";
+import { maximumSupervisorBinaryBytes, supervisorExecutable, supervisorSourceDigest, supervisorSourceFiles, supervisorTarget, supervisorVersion } from "./supervisor-pins.js";
+import { checkSupervisorSource, inspectSupervisor, supervisorFolder, supervisorInstallCommand, supervisorLockPath, supervisorNoticePins, supervisorPackageRoot } from "./supervisor-record.js";
+import { probeSupervisor, readSupervisorRust, runSupervisorTool } from "./supervisor-tools.js";
+/** The sentence `retest install supervisor` gives where no supervisor is needed. */
+export const supervisorNotNeeded = 'retest-supervisor is for Windows. On macOS and Linux Retest needs nothing installed to end what it starts.';
+/**
+ * Builds the shipped supervisor crate with `cargo build --release --locked` into the cache, under the install lock, and
+ * records it. Nothing is downloaded but the pinned crates cargo fetches, and none with `offline`. A build already
+ * recorded is left as it is; a damaged cache is refused, never repaired.
+ *
+ * @example await installSupervisor({ env: process.env, signal, version: '0.3.0', report: console.log })
+ */
+export async function installSupervisor(options) {
+    const refuse = (message) => ({ ok: false, message, stopped: options.signal.aborted });
+    const target = options.target ?? supervisorTarget();
+    if (target === undefined)
+        return refuse(process.platform === 'win32' ? `Retest builds retest-supervisor for Windows x64 only, and this machine is Windows ${process.arch}.` : supervisorNotNeeded);
+    const folder = supervisorFolder(options.env, target);
+    if (folder === undefined)
+        return refuse(`Retest has no cache folder here, so it cannot install retest-supervisor. Set the folder Retest caches into, then run ${supervisorInstallCommand}.`);
+    const root = options.packageRoot ?? supervisorPackageRoot();
+    const sourceProblem = await checkSupervisorSource(root, { signal: options.signal });
+    if (sourceProblem !== undefined)
+        return refuse(sourceProblem);
+    const lock = await takeInstallLock(supervisorLockPath(folder), { signal: options.signal });
+    if (!lock.ok)
+        return { ok: false, message: lock.message, stopped: lock.stopped === true };
+    let result;
+    let cleanupProblem;
+    const staging = `${folder}.staging-${process.pid}-${randomUUID()}`;
+    try {
+        result = await installLocked(options, target, folder, root, staging);
+    }
+    catch (error) {
+        result = refuse(`The supervisor install failed: ${errorMessage(error)} Nothing was installed.`);
+    }
+    finally {
+        try {
+            await rm(staging, { recursive: true, force: true, maxRetries: 3 });
+        }
+        catch (error) {
+            cleanupProblem = `Supervisor staging cleanup failed at ${staging}: ${errorMessage(error)}.`;
+        }
+        finally {
+            const problem = await lock.release();
+            if (problem !== undefined)
+                options.report(problem);
+        }
+    }
+    if (cleanupProblem !== undefined)
+        return result.ok
+            ? refuse(`retest-supervisor ${result.action === 'installed' ? 'was installed' : 'was already installed'}, but cleanup is not proven. ${cleanupProblem}`)
+            : { ...result, message: `${result.message} ${cleanupProblem}` };
+    return result;
+}
+async function installLocked(options, target, folder, root, staging) {
+    const refuse = (message) => ({ ok: false, message, stopped: options.signal.aborted });
+    const before = await inspectSupervisor(options.env, { target, verify: true, signal: options.signal });
+    if (before?.state === 'installed')
+        return { ok: true, action: 'already_installed', inspection: before };
+    if (before !== undefined && before.state !== 'missing')
+        return refuse(`${before.problems.join(' ')} Remove ${folder} and run ${supervisorInstallCommand} again.`);
+    if (options.signal.aborted)
+        return refuse('The supervisor install was stopped before it built anything.');
+    const run = options.run ?? runSupervisorTool;
+    const tools = await readSupervisorRust(options.env, options.signal, run);
+    if (!tools.ok)
+        return refuse(tools.message);
+    if (tools.target !== target)
+        return refuse(`rustc builds for ${tools.target}, and this machine needs ${target}. Select the matching Rust host toolchain, then run ${supervisorInstallCommand}.`);
+    await mkdir(staging, { recursive: true });
+    const source = join(staging, 'source');
+    for (const file of supervisorSourceFiles) {
+        const from = join(root, ...file.path.split('/'));
+        const to = join(source, ...file.path.split('/'));
+        const reading = await readRecordText(from);
+        if (reading.kind !== 'text')
+            return refuse(`${from} cannot be copied: ${reading.kind === 'missing' ? 'missing' : reading.problem}.`);
+        await mkdir(dirname(to), { recursive: true });
+        await writeFile(to, reading.text, { flag: 'wx' });
+    }
+    const copiedProblem = await checkSupervisorSource(source, { signal: options.signal });
+    if (copiedProblem !== undefined)
+        return refuse(copiedProblem);
+    const targetDir = join(staging, 'target');
+    const args = ['build', '--release', '--locked', ...(options.offline === true ? ['--offline'] : []), '--manifest-path', join(source, 'supervisor', 'Cargo.toml'), '--target', target, '--target-dir', targetDir];
+    options.report(`Building retest-supervisor ${supervisorVersion} with ${tools.rustcVersion}; Cargo.lock is pinned.`);
+    const built = await run(tools.cargo, args, { env: options.env, signal: options.signal, cwd: source, timeoutMs: 30 * 60_000, environment: { RUSTC: tools.rustc, CARGO_TARGET_DIR: targetDir } });
+    const afterProblem = await checkSupervisorSource(source, { signal: options.signal });
+    if (afterProblem !== undefined)
+        return refuse(`The build changed the pinned source or Cargo.lock. ${afterProblem}`);
+    if (built.code !== 0 || built.stopped || built.timedOut || built.cleanupProblems.length > 0)
+        return refuse(`${describeCommand('cargo build --release --locked', built)}. Nothing was installed.`);
+    const executable = join(staging, supervisorExecutable);
+    const placed = await copyBinary(join(targetDir, target, 'release', supervisorExecutable), executable);
+    if (placed !== undefined)
+        return refuse(placed);
+    await rm(source, { recursive: true, maxRetries: 3 });
+    await rm(targetDir, { recursive: true, maxRetries: 3 });
+    if (options.signal.aborted)
+        return refuse('The supervisor install was stopped after its build. Nothing was installed.');
+    const probe = await probeSupervisor(executable, target, { env: options.env, signal: options.signal }, run);
+    if (probe !== undefined)
+        return refuse(probe);
+    const hash = await readFileSha256(executable, { maximumBytes: maximumSupervisorBinaryBytes, deadline: new Deadline(15_000, { signal: options.signal }) });
+    if (hash.kind === 'other')
+        return refuse(hash.problem);
+    if (hash.kind !== 'file')
+        return refuse('The built supervisor cannot be checked as a regular file.');
+    for (const file of supervisorSourceFiles.filter((file) => file.path === 'LICENSE' || file.path === 'supervisor/NOTICES')) {
+        const read = await readRecordText(join(root, ...file.path.split('/')));
+        if (read.kind !== 'text')
+            return refuse(`The pinned licence ${file.path} cannot be read.`);
+        await writeFile(join(staging, file.path === 'LICENSE' ? 'LICENSE' : 'THIRD-PARTY-NOTICES.txt'), read.text, { flag: 'wx' });
+    }
+    const sourceProblem = await checkSupervisorSource(root, { signal: options.signal });
+    if (sourceProblem !== undefined)
+        return refuse(sourceProblem);
+    const record = { schemaVersion: 1, version: supervisorVersion, sourceDigest: supervisorSourceDigest, target, rustcVersion: tools.rustcVersion, binarySha256: hash.sha256, notices: supervisorNoticePins(), installedAt: new Date().toISOString(), installedBy: options.version };
+    await writeFile(join(staging, 'build.json'), `${JSON.stringify(record, null, 2)}\n`, { flag: 'wx' });
+    await mkdir(dirname(folder), { recursive: true });
+    await rename(staging, folder);
+    const after = await inspectSupervisor(options.env, { target, verify: true, signal: options.signal });
+    return after?.state === 'installed' ? { ok: true, action: 'installed', inspection: after } : refuse(`The supervisor folder did not read as installed: ${after?.problems.join(' ') ?? 'no cache'}.`);
+}
+// The built binary, copied from the one descriptor it was checked through, within the binary bound.
+async function copyBinary(from, to) {
+    const opened = await openRegularFile(from);
+    if (opened.kind !== 'opened')
+        return `${from} is not a readable regular supervisor binary: ${opened.kind}.`;
+    try {
+        if (opened.size > maximumSupervisorBinaryBytes)
+            return `${from} is larger than ${maximumSupervisorBinaryBytes} bytes.`;
+        const bytes = Buffer.alloc(opened.size + 1);
+        let filled = 0;
+        while (filled < bytes.length) {
+            const read = await opened.handle.read(bytes, filled, bytes.length - filled, null);
+            if (read.bytesRead === 0)
+                break;
+            filled += read.bytesRead;
+        }
+        if (filled !== opened.size)
+            return `${from} changed size while it was copied.`;
+        await writeFile(to, bytes.subarray(0, filled), { flag: 'wx', mode: 0o755 });
+        return undefined;
+    }
+    finally {
+        await opened.handle.close();
+    }
+}

package/dist/cli/install/supervisor-locate.d.ts

@@ -0,0 +1,47 @@
+import type { SupervisorProgram } from '../../shared/process-supervisor.ts';
+import type { SupervisorTarget } from './supervisor-pins.ts';
+/** The environment the install and the runner read the cache folder from. */
+export type SupervisorEnvironment = Readonly<Record<string, string | undefined>>;
+/** What `build.json` beside an installed supervisor says of it. */
+export type SupervisorRecord = {
+    schemaVersion: 1;
+    version: string;
+    sourceDigest: string;
+    target: SupervisorTarget;
+    rustcVersion: string;
+    binarySha256: string;
+    notices: {
+        path: string;
+        sha256: string;
+    }[];
+    installedAt: string;
+    installedBy: string;
+};
+/** The command a person runs to install the supervisor. */
+export declare const supervisorInstallCommand: string;
+/**
+ * The cache folder one supervisor build is installed in: `%LOCALAPPDATA%\retest\supervisor\…`, beside the browsers in
+ * the root `cacheFolders` gives on Windows, the one platform it is built for. LOCALAPPDATA is read in any case, as
+ * Windows reads it.
+ *
+ * @example supervisorFolder(process.env, 'x86_64-pc-windows-msvc') // 'C:\\Users\\ada\\AppData\\Local\\retest\\supervisor\\supervisor-0.1.0-x86_64-pc-windows-msvc'
+ */
+export declare function supervisorFolder(env: SupervisorEnvironment, target: SupervisorTarget): string | undefined;
+/** A `build.json` read as this version's record, or why it is not one; its notices and toolchain are the install's to check. */
+export declare function readSupervisorRecord(path: string, text: string, target: SupervisorTarget): {
+    readonly ok: true;
+    readonly record: SupervisorRecord;
+} | {
+    readonly ok: false;
+    readonly problem: string;
+};
+/**
+ * The supervisor the runner runs, found as it starts its first process on Windows: the executable
+ * RETEST_SUPERVISOR_BINARY names, as a developer build is given, or the installed one, read back against its record and
+ * its checksum. It reads synchronously, since it runs once, right before a launch that cannot start without it. Throws a
+ * sentence that says how to install it.
+ *
+ * @example const program = locateSupervisor(process.env) // { command: '…\\retest-supervisor.exe', args: [], environment: { SystemRoot: 'C:\\Windows' } }
+ */
+export declare function locateSupervisor(env: SupervisorEnvironment): SupervisorProgram;
+//# sourceMappingURL=supervisor-locate.d.ts.map