u-chan-secrets 3.0.3 → 4.0.1

package/dist/service/doctor.js

@@ -1,14 +1,14 @@
 import { lstat } from 'node:fs/promises';
 import { join } from 'node:path';
 import { privateBrowserPath } from '../platform/runtime-assets.js';
-import { bounded } from '../core/doctor.js';
+import { bounded, chromeState, safeCdpOrigin } from '../core/doctor.js';
 import { checkWindowsPermissions } from '../platform/windows/doctor.js';
 import { checkDarwinPermissions } from '../platform/darwin/doctor.js';
-export async function diagnoseService(home, vault, platform) {
+export async function diagnoseService(home, vault, platform, cdpEndpoint) {
     const paths = [join(home, 'program', 'dist', 'service', 'main.js'), join(home, 'program', 'node_modules'),
         platform === 'win32' ? join(home, 'bin', 'node.exe') : process.execPath,
         platform === 'win32' ? join(home, 'bin', 'bw.exe') : join(home, 'bin', 'bw')];
-    const [assets, permissions, status] = await Promise.all([
+    const [assets, permissions, status, browser] = await Promise.all([
         bounded(async () => {
             await privateBrowserPath(home);
             for (const p of paths) {
@@ -18,8 +18,10 @@ export async function diagnoseService(home, vault, platform) {
             }
             return 'pass';
         }, 'unknown'),
-        bounded(() => platform === 'win32' ? checkWindowsPermissions(home) : checkDarwinPermissions(home), 'unknown', 20000),
+        bounded(() => platform === 'win32' ? checkWindowsPermissions(home) : checkDarwinPermissions(home), 'unknown', 65000),
         bounded(() => vault.status(), 'unavailable'),
+        cdpEndpoint === undefined ? undefined : bounded(() => chromeState(cdpEndpoint), 'unknown'),
     ]);
-    return { assets, permissions, vault: status === 'unlocked' ? 'pass' : status === 'unavailable' ? 'unknown' : status };
+    return { assets, permissions, vault: status === 'unlocked' ? 'pass' : status === 'unavailable' ? 'unknown' : status,
+        ...(cdpEndpoint === undefined ? {} : { browser, browserEndpoint: safeCdpOrigin(cdpEndpoint) }) };
 }

package/dist/service/main.js

@@ -24,6 +24,7 @@ import { GrantCoordinator } from './grants.js';
 import { ensureV3State } from './state.js';
 import { ManagementService } from './manage.js';
 import { privateBrowserPath } from '../platform/runtime-assets.js';
+import { safeVersion } from '../core/doctor.js';
 export function prepareSocketEndpoint(endpoint, platform = process.platform) {
     if (platform !== 'win32') {
         const dir = dirname(endpoint);
@@ -64,9 +65,9 @@ export async function runService(platform = process.platform, env = process.env)
             target: new CdpSessionTarget(new CdpBrowserProvider(loadConfig(env, platform).cdpEndpoint)),
         });
         const core = new CoreService({ vault, allowlist, grants, approver, audit, login, mode: () => approver.effectiveMode() });
-        let currentVersion = '3.0.0';
+        let currentVersion = 'unknown';
         try {
-            currentVersion = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version;
+            currentVersion = safeVersion(JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8')).version) ?? 'unknown';
         }
         catch { }
         const verifier = new NpmPackageVerifier();
@@ -82,8 +83,8 @@ export async function runService(platform = process.platform, env = process.env)
             stagingDir: cfg.stagingDir,
             currentVersion,
         });
-        const diagnose = () => diagnoseService(cfg.home, vault, platform);
-        const control = new ControlService({ vault, approver, limiter, settings, allowlist, grants, audit, platform, updater, diagnose, manage: () => manager.open() });
+        const diagnose = async () => ({ ...await diagnoseService(cfg.home, vault, platform, loadConfig(env, platform).cdpEndpoint), serviceVersion: safeVersion(currentVersion) });
+        const control = new ControlService({ vault, approver, limiter, settings, allowlist, grants, audit, platform, updater, diagnose, serviceVersion: safeVersion(currentVersion), manage: () => manager.open() });
         const manager = new ManagementService({
             store: allowlist, grants, vault, audit, diagnose, phrase: async () => (await settings.get()).phrase,
             show: req => adapters.prompt.manage ? adapters.prompt.manage(req) : Promise.reject(new Error('unsupported')),

package/dist/service/manage.js

@@ -1,6 +1,6 @@
 import { performance } from 'node:perf_hooks';
 import { clean, normalizeDomain } from '../core/allowlist.js';
-import { bounded } from '../core/doctor.js';
+import { bounded, safeVersion, SERVICE_DIAGNOSTIC_TIMEOUT_MS } from '../core/doctor.js';
 export class ManagementService {
     d;
     opened = false;
@@ -19,12 +19,19 @@ export class ManagementService {
                 const snapshot = await this.d.grants.run(async () => {
                     const [entries, status, events, checks] = await Promise.all([
                         this.d.store.list(), bounded(() => this.d.vault.status(), 'unavailable'),
-                        bounded(() => this.d.audit.readTail(10), []), bounded(this.d.diagnose, null),
+                        bounded(() => this.d.audit.readTail(10), []), bounded(this.d.diagnose, null, SERVICE_DIAGNOSTIC_TIMEOUT_MS),
                     ]);
                     const all = entries.filter(e => e.domain === normalizeDomain(e.domain));
                     page = Math.min(page, Math.max(0, Math.ceil(all.length / 20) - 1));
                     const grants = all.slice(page * 20, page * 20 + 20);
                     const lines = ['Vault: ' + status, lastAction, 'Grant page ' + (page + 1) + ': ' + grants.length + ' of ' + entries.length + ' shown. Use Previous/Next for more.'];
+                    lines.push('Service version: ' + (safeVersion(checks?.serviceVersion) ?? 'unknown'), 'Service browser: ' + (['pass', 'fail'].includes(checks?.browser ?? '') ? checks?.browser : 'unknown'));
+                    if (status === 'locked')
+                        lines.push('Next step: use Unlock to approve a protected vault unlock.');
+                    if (checks?.assets !== 'pass' || checks?.permissions !== 'pass')
+                        lines.push('Next step: run u-chan doctor; repair from a trusted administrator terminal.');
+                    if (checks?.browser !== 'pass')
+                        lines.push('Next step: start dedicated Chrome and run u-chan setup.');
                     for (const e of grants) {
                         let label = e.expiresAt ? 'until ' + e.expiresAt : e.remainingUses !== undefined ? e.remainingUses + ' attempts remaining' : 'permanent';
                         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "u-chan-secrets",
-  "version": "3.0.3",
+  "version": "4.0.1",
   "description": "U-Chan Secrets: local MCP server for Bitwarden-backed logins",
   "license": "MIT",
   "type": "module",

package/scripts/debug-install.bat

@@ -1,69 +1,69 @@
-@echo off
-setlocal
-set ROOT=%~dp0..
-
-fltmc.exe >nul 2>&1
-if %errorlevel% neq 0 (
-    echo [*] Requesting Administrator elevation...
-    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
-    exit /b
-)
-
-cd /d "%ROOT%"
-echo ========================================================
-echo       U-Chan Secrets V2 Installation & Setup
-echo ========================================================
-echo.
-echo [*] Step 1: Stopping previous service (if any)...
-taskkill /F /IM prompt-helper.exe >nul 2>&1
-taskkill /F /IM auth-helper.exe >nul 2>&1
-call node dist\cli.js uninstall
-echo.
-echo [*] Step 2: Installing U-Chan Windows Service...
-call node dist\cli.js install
-if %errorlevel% neq 0 (
-    echo.
-    echo [X] Installation failed with exit code %errorlevel%.
-    pause
-    exit /b %errorlevel%
-)
-icacls C:\ProgramData\u-chan-secrets\bin /grant "Users:(OI)(CI)RX" >nul 2>&1
-echo.
-echo [*] Step 3: Checking service status...
-sc.exe query u-chan-secrets
-echo.
-
-echo [*] Step 4: Bitwarden Vault Login...
-set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
-set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
-if not exist "%BW_BIN%" (
-    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
-)
-
-if exist "%BW_BIN%" (
-    "%BW_BIN%" status > "%TEMP%\bw_stat.json" 2>&1
-    findstr /C:"\"unauthenticated\"" "%TEMP%\bw_stat.json" >nul 2>&1
-    if %errorlevel% equ 0 (
-        echo [!] Bitwarden is not logged in for the privileged service.
-        echo [*] Please log in to your Bitwarden vault below:
-        "%BW_BIN%" login
-    ) else (
-        echo [+] Bitwarden vault is already logged in.
-    )
-    del "%TEMP%\bw_stat.json" >nul 2>&1
-) else (
-    echo [!] Warning: bw.exe not found.
-)
-
-echo.
-copy /y C:\ProgramData\u-chan-secrets\service.log "%ROOT%\service-copy.log" >nul 2>&1
-copy /y C:\ProgramData\u-chan-secrets\settings.json "%ROOT%\settings-copy.json" >nul 2>&1
-echo ========================================================
-echo [+] Service and Bitwarden configuration complete!
-echo.
-echo Next: Close this window, open your normal terminal, and run:
-echo    u-chan import-v1
-echo    u-chan unlock
-echo ========================================================
-echo.
-pause
+@echo off
+setlocal
+set ROOT=%~dp0..
+
+fltmc.exe >nul 2>&1
+if %errorlevel% neq 0 (
+    echo [*] Requesting Administrator elevation...
+    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
+    exit /b
+)
+
+cd /d "%ROOT%"
+echo ========================================================
+echo       U-Chan Secrets V2 Installation & Setup
+echo ========================================================
+echo.
+echo [*] Step 1: Stopping previous service (if any)...
+taskkill /F /IM prompt-helper.exe >nul 2>&1
+taskkill /F /IM auth-helper.exe >nul 2>&1
+call node dist\cli.js uninstall
+echo.
+echo [*] Step 2: Installing U-Chan Windows Service...
+call node dist\cli.js install
+if %errorlevel% neq 0 (
+    echo.
+    echo [X] Installation failed with exit code %errorlevel%.
+    pause
+    exit /b %errorlevel%
+)
+icacls C:\ProgramData\u-chan-secrets\bin /grant "Users:(OI)(CI)RX" >nul 2>&1
+echo.
+echo [*] Step 3: Checking service status...
+sc.exe query u-chan-secrets
+echo.
+
+echo [*] Step 4: Bitwarden Vault Login...
+set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
+set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
+if not exist "%BW_BIN%" (
+    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
+)
+
+if exist "%BW_BIN%" (
+    "%BW_BIN%" status > "%TEMP%\bw_stat.json" 2>&1
+    findstr /C:"\"unauthenticated\"" "%TEMP%\bw_stat.json" >nul 2>&1
+    if %errorlevel% equ 0 (
+        echo [!] Bitwarden is not logged in for the privileged service.
+        echo [*] Please log in to your Bitwarden vault below:
+        "%BW_BIN%" login
+    ) else (
+        echo [+] Bitwarden vault is already logged in.
+    )
+    del "%TEMP%\bw_stat.json" >nul 2>&1
+) else (
+    echo [!] Warning: bw.exe not found.
+)
+
+echo.
+copy /y C:\ProgramData\u-chan-secrets\service.log "%ROOT%\service-copy.log" >nul 2>&1
+copy /y C:\ProgramData\u-chan-secrets\settings.json "%ROOT%\settings-copy.json" >nul 2>&1
+echo ========================================================
+echo [+] Service and Bitwarden configuration complete!
+echo.
+echo Next: Close this window, open your normal terminal, and run:
+echo    u-chan import-v1
+echo    u-chan unlock
+echo ========================================================
+echo.
+pause

package/scripts/login-bw.bat

@@ -1,21 +1,21 @@
-@echo off
-setlocal
-set ROOT=%~dp0..
-
-fltmc.exe >nul 2>&1
-if %errorlevel% neq 0 (
-    echo [*] Requesting Administrator elevation...
-    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
-    exit /b
-)
-
-set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
-set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
-if not exist "%BW_BIN%" (
-    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
-)
-
-echo [*] Logging in to Bitwarden for U-Chan Service Store...
-"%BW_BIN%" login
-echo.
-pause
+@echo off
+setlocal
+set ROOT=%~dp0..
+
+fltmc.exe >nul 2>&1
+if %errorlevel% neq 0 (
+    echo [*] Requesting Administrator elevation...
+    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
+    exit /b
+)
+
+set BITWARDENCLI_APPDATA_DIR=C:\ProgramData\u-chan-secrets\bw-data
+set BW_BIN=C:\ProgramData\u-chan-secrets\bin\bw.exe
+if not exist "%BW_BIN%" (
+    for /f "delims=" %%i in ('where.exe bw.exe 2^>nul') do set BW_BIN=%%i
+)
+
+echo [*] Logging in to Bitwarden for U-Chan Service Store...
+"%BW_BIN%" login
+echo.
+pause

package/scripts/migrate.bat

@@ -1,4 +1,4 @@
-@echo off
-setlocal
-call "%~dp0debug-install.bat" %*
-
+@echo off
+setlocal
+call "%~dp0debug-install.bat" %*
+

package/scripts/start-chrome.ps1

@@ -1,7 +1,11 @@
+param([switch]$Background)
 $ErrorActionPreference = 'Stop'
 $home_ = if ($env:U_CHAN_HOME) { $env:U_CHAN_HOME } else { Join-Path $env:APPDATA 'u-chan-secrets' }
 $profileDir = Join-Path $home_ 'chrome-profile'   # dedicated profile, never the default Chrome profile
 $cdp = [Uri]$(if ($env:U_CHAN_CDP) { $env:U_CHAN_CDP } else { 'http://127.0.0.1:9222' })
+if ($cdp.Scheme -ne 'http' -or $cdp.Host -notin @('127.0.0.1', 'localhost', '[::1]', '::1') -or $cdp.UserInfo -or $cdp.AbsolutePath -ne '/' -or $cdp.Query -or $cdp.Fragment) {
+  throw 'Use an HTTP loopback CDP origin without user information, path, query or fragment.'
+}
 $port = $cdp.Port
 $bindHost = $cdp.Host
 
@@ -24,10 +28,12 @@ $chrome = $candidates | Where-Object { $_ -and (Test-Path $_) } | Select-Object
 if (-not $chrome) { throw 'chrome.exe not found' }
 
 New-Item -ItemType Directory -Force -Path $profileDir | Out-Null
-Start-Process -FilePath $chrome -ArgumentList @(
+$chromeArgs = @(
   "--remote-debugging-port=$port",
   "--remote-debugging-address=$bindHost",
-  "--user-data-dir=$profileDir",
+  "--user-data-dir=`"$profileDir`"",
   '--no-first-run'
 )
+if ($Background) { $chromeArgs += '--no-startup-window' }
+Start-Process -FilePath $chrome -ArgumentList $chromeArgs -WindowStyle Hidden
 Write-Host "Chrome started (profile: $profileDir, CDP: http://${bindHost}:$port)"

package/scripts/verify-windows-adversarial.mjs

@@ -0,0 +1,142 @@
+// Two-stage disposable check: --prepare runs non-elevated; --run requires UAC approval.
+// No vault is unlocked and no real passwords, keyboard text or screenshots are recorded.
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import os from 'node:os'
+import { randomUUID } from 'node:crypto'
+import { spawn, execFile } from 'node:child_process'
+import { promisify } from 'node:util'
+import { compileCsharp } from '../dist/platform/windows/assets/compiler.js'
+import { PROMPT_HELPER_CSHARP } from '../dist/platform/windows/assets/prompt-src.js'
+import { defaultAdminCheck } from '../dist/platform/windows/install.js'
+import { setAdminOnlyAcl } from '../dist/platform/windows/acl.js'
+import { accepted } from './windows-security/result-policy.mjs'
+
+if (process.platform !== 'win32') throw new Error('Windows required')
+const exec = promisify(execFile), command = process.argv[2], runIdArgument = process.argv[3]
+const quote = s => "'" + s.replaceAll("'", "''") + "'"
+const ps = script => exec('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', Buffer.from(script, 'utf16le').toString('base64')], { windowsHide: true })
+const sleep = ms => new Promise(resolve => setTimeout(resolve, ms))
+const publicRoot = path.join(process.env.ProgramData ?? 'C:\\ProgramData', 'UChanSecurityChecks')
+async function createChannel(runId) {
+  if (!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(runId ?? '')) throw new Error('Fresh run UUID required')
+  const directory = path.join(publicRoot, runId)
+  const channelScript = await fs.readFile(new URL('./windows-security/public-channel.ps1', import.meta.url), 'utf8')
+  await ps('$probePublicRoot=' + quote(publicRoot) + ';$probeRunDirectory=' + quote(directory) + ';' + channelScript)
+  return directory
+}
+async function publishReport(directory, report) {
+  const temporaryReport = path.join(directory, 'report.json.tmp')
+  await fs.writeFile(temporaryReport, JSON.stringify(report, null, 2), { flag: 'wx' })
+  await fs.rename(temporaryReport, path.join(directory, 'report.json'))
+}
+
+if (command === '--prepare') {
+  if (await defaultAdminCheck()) throw new Error('Prepare must run non-elevated')
+  const directory = await fs.mkdtemp(path.join(os.tmpdir(), 'u-chan-security-'))
+  const runId = randomUUID(), prefix = path.join(directory, 'probe'), publicDirectory = path.join(publicRoot, runId), publicPrefix = path.join(publicDirectory, 'probe'), attacker = path.join(directory, 'attacker.exe')
+  await compileCsharp(await fs.readFile(new URL('./windows-security/attacker.cs', import.meta.url), 'utf8'), attacker, { outputType: 'WindowsApplication', referencedAssemblies: ['System.Windows.Forms.dll', 'System.Drawing.dll'] })
+  const child = spawn(attacker, [publicPrefix, prefix, runId], { windowsHide: true, stdio: 'ignore' })
+  let spawnError
+  child.once('error', e => { spawnError = e })
+  const exited = new Promise(resolve => child.once('exit', resolve))
+  const config = { runId, prefix, attackerPid: child.pid, directory, publicDirectory }
+  await fs.writeFile(path.join(directory, 'config.json'), JSON.stringify(config))
+  const deadline = Date.now() + 5000
+  while (Date.now() < deadline) {
+    if (spawnError) throw spawnError
+    if (await fs.stat(prefix + '.armed').catch(() => null)) break
+    if (await fs.stat(prefix + '.attacker').catch(() => null)) throw new Error('Attacker positive control failed: ' + await fs.readFile(prefix + '.attacker', 'utf8'))
+    await sleep(100)
+  }
+  if (!await fs.stat(prefix + '.armed').catch(() => null)) throw new Error('Attacker did not arm')
+  // Keep the child referenced: run --run <runId> concurrently in a second, elevated terminal.
+  console.log(JSON.stringify({ ...config, armed: true, nextCommand: 'node scripts/verify-windows-adversarial.mjs --run ' + runId }))
+  await exited
+  const nativeReport = path.join(publicDirectory, 'report.json'), reportDeadline = Date.now() + 30000
+  while (Date.now() < reportDeadline && !await fs.stat(nativeReport).catch(() => null)) await sleep(100)
+  const native = JSON.parse(await fs.readFile(nativeReport, 'utf8'))
+  const observed = Object.fromEntries((await fs.readFile(prefix + '.attacker', 'utf8')).trim().split(/\r?\n/).map(line => line.split('=')))
+  const report = { ...native, attacker: observed, ok: accepted(native, observed, runId) }
+  await fs.writeFile(path.join(directory, 'report.json'), JSON.stringify(report, null, 2))
+  console.log(JSON.stringify(report))
+  if (!report.ok) process.exitCode = 1
+} else if (command === '--run') {
+  if (!await defaultAdminCheck()) throw new Error('Run requires administrator privileges')
+  const runId = runIdArgument
+  // Atomically create a read-public, admin/SYSTEM-write-only channel. Never read or write user-supplied paths while elevated.
+  const directory = await createChannel(runId), prefix = path.join(directory, 'probe')
+  const home = path.join(process.env.ProgramData ?? 'C:\\ProgramData', 'u-chan-secrets')
+  const root = path.join(home, '#0 backup', 'adversarial-' + randomUUID())
+  const task = 'UChanSecurityProbe-' + randomUUID()
+  const report = { ok: false, nativeFixture: true, root, runId }
+  let registered = false
+  try {
+    await fs.mkdir(root); await setAdminOnlyAcl(root)
+    const trace = path.join(root, 'trace.txt')
+    const metadata = prefix + '.metadata'
+    const head = 'public static class PromptHelper\n    {'
+    if (!PROMPT_HELPER_CSHARP.includes(head)) throw new Error('Fixture hooks no longer match')
+    let source = PROMPT_HELPER_CSHARP.replace(head, head + '\n        private static string ProbeDesktop; private static NamedPipeServerStream ProbeIdlePipe;')
+      .replace('desktop = CreateDesktop("UChan-" + Guid.NewGuid().ToString("N"),', 'ProbeDesktop="UChanProbe-"+Guid.NewGuid().ToString("N"); desktop = CreateDesktop(ProbeDesktop,')
+      .replace('int remainingSeconds = 120;', 'int remainingSeconds = 4;')
+      .replace('SwitchDesktop(original);', `if(SwitchDesktop(original)) File.AppendAllText(@"${trace}", "restored"+Environment.NewLine);`)
+    source = source.replace('timer.Start();\n                if (txtPassword != null)', `timer.Start();
+                string probePipe="";
+                for(int k=0;k+1<args.Length;k++)if(args[k]=="--output-pipe")probePipe=args[k+1];
+                File.AppendAllText(@"${trace}", "shown-system:"+WindowsIdentity.GetCurrent().IsSystem+";session:"+Process.GetCurrentProcess().SessionId+Environment.NewLine);
+                File.WriteAllLines(@"${metadata}",new string[]{ProbeDesktop,probePipe,form.Handle.ToInt64().ToString(),btnOk.Handle.ToInt64().ToString(),"${runId}",probePipe+"-idle"});
+                form.BeginInvoke((Action)delegate { form.Activate();btnOk.Focus();File.AppendAllText(@"${trace}","canary-send-count:"+UChanProbeCanary.Send()+Environment.NewLine); });
+                if (txtPassword != null)`)
+    source = source.replace('DialogResult result = form.ShowDialog();', `Panel probeMarker=new Panel(); probeMarker.BackColor=Color.FromArgb(1,254,71); probeMarker.Size=new Size(64,64); probeMarker.Location=new Point(0,0); form.Controls.Add(probeMarker); probeMarker.BringToFront();
+            form.KeyPreview=true; form.KeyDown+=(sender,eventArgs)=>{if(eventArgs.KeyCode==Keys.F24)File.AppendAllText(@"${trace}","protected-canary-received"+Environment.NewLine);};
+            DialogResult result = form.ShowDialog();`)
+    source = source.replace('List<string> childArgs = new List<string>(args);', `ProbeIdlePipe=new NamedPipeServerStream(name+"-idle",PipeDirection.In,1,PipeTransmissionMode.Byte,PipeOptions.Asynchronous,4096,4096,security);bool onlySystem=true;int systemRules=0;foreach(PipeAccessRule rule in pipe.GetAccessControl().GetAccessRules(true,true,typeof(SecurityIdentifier))){if(rule.AccessControlType==AccessControlType.Allow){systemRules++;if(rule.IdentityReference.Value!="S-1-5-18")onlySystem=false;}}File.AppendAllText(@"${trace}","pipe-system-only:"+(onlySystem&&systemRules>0)+Environment.NewLine);List<string> childArgs = new List<string>(args);`)
+    source += '\n' + await fs.readFile(new URL('./windows-security/canary.cs', import.meta.url), 'utf8')
+    if (!source.includes('shown-system:') || source.includes('int remainingSeconds = 120;')) throw new Error('Fixture substitution failed')
+    const attacked = path.join(root, 'attacked.exe'), failure = path.join(root, 'failure.exe')
+    await compileCsharp(source, attacked, { outputType: 'WindowsApplication', referencedAssemblies: ['System.Windows.Forms.dll', 'System.Drawing.dll'] })
+    const failing = PROMPT_HELPER_CSHARP
+      .replace('return RunDialog(args);', 'throw new InvalidOperationException("Disposable failure fixture");')
+      .replace('SwitchDesktop(original);', `if(SwitchDesktop(original)) File.AppendAllText(@"${trace}","failure-restored"+Environment.NewLine);`)
+    await compileCsharp(failing, failure, { outputType: 'WindowsApplication', referencedAssemblies: ['System.Windows.Forms.dll', 'System.Drawing.dll'] })
+    const output = path.join(root, 'native-result.json'), runner = path.join(root, 'runner.mjs')
+    await fs.writeFile(runner, `import{execFile}from'node:child_process';import fs from'node:fs';import{promisify}from'node:util';const exec=promisify(execFile);const results={};for(const[name,file]of ${JSON.stringify([['attacked', attacked], ['failure', failure]])}){const start=Date.now();try{const r=await exec(file,['--mode','confirm','--title','DISPOSABLE SECURITY TEST - DO NOT INTERACT','--phrase','DISPOSABLE TEST - NO PASSWORD','--lines','[]'],{timeout:20000,windowsHide:true});results[name]={exitCode:0,stdoutBytes:Buffer.byteLength(r.stdout),elapsedMs:Date.now()-start};}catch(e){results[name]={exitCode:e.code,stdoutBytes:Buffer.byteLength(e.stdout??''),elapsedMs:Date.now()-start};}if(name==='attacked')fs.writeFileSync(${JSON.stringify(prefix + '.done')},'done');}fs.writeFileSync(${JSON.stringify(output)},JSON.stringify(results));`)
+    await setAdminOnlyAcl(root)
+    await ps(`$ErrorActionPreference='Stop';$a=New-ScheduledTaskAction -Execute ${quote(path.join(home, 'bin', 'node.exe'))} -Argument ${quote('"' + runner + '"')} -WorkingDirectory ${quote(root)};$p=New-ScheduledTaskPrincipal -UserId 'SYSTEM' -LogonType ServiceAccount -RunLevel Highest;$s=New-ScheduledTaskSettingsSet -ExecutionTimeLimit (New-TimeSpan -Minutes 2) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries;Register-ScheduledTask -TaskName ${quote(task)} -Action $a -Principal $p -Settings $s | Out-Null`)
+    registered = true
+    await ps(`Start-ScheduledTask -TaskName ${quote(task)}`)
+    const deadline = Date.now() + 60000
+    while (Date.now() < deadline && !await fs.stat(output).catch(() => null)) await sleep(200)
+    report.execution = JSON.parse(await fs.readFile(output, 'utf8'))
+    report.events = (await fs.readFile(trace, 'utf8')).trim().split(/\r?\n/)
+    report.ok = report.execution.attacked.exitCode === 1 && report.execution.attacked.elapsedMs >= 3500 && report.execution.attacked.stdoutBytes === 0 && report.execution.failure.exitCode === 1 && report.events.some(e => e.startsWith('shown-system:True;session:')) && report.events.includes('protected-canary-received') && report.events.includes('pipe-system-only:True') && report.events.includes('restored') && report.events.includes('failure-restored')
+  } catch (e) { report.errorType = e.name; report.errorMessage = String(e.message).slice(0, 300) }
+  finally { if (registered) await ps(`Stop-ScheduledTask -TaskName ${quote(task)} -ErrorAction SilentlyContinue;Unregister-ScheduledTask -TaskName ${quote(task)} -Confirm:$false`) }
+  await publishReport(directory, report)
+  console.log(JSON.stringify(report))
+  if (!report.ok) process.exitCode = 1
+} else if (command === '--browser') {
+  if (!await defaultAdminCheck()) throw new Error('Browser fixture requires administrator privileges')
+  const publicDirectory = await createChannel(runIdArgument ?? randomUUID())
+  const home = path.join(process.env.ProgramData ?? 'C:\\ProgramData', 'u-chan-secrets')
+  const root = path.join(home, '#0 backup', 'browser-probe-' + randomUUID()), task = 'UChanBrowserProbe-' + randomUUID()
+  let registered = false
+  try {
+    await fs.mkdir(root); await setAdminOnlyAcl(root)
+    const runner = path.join(root, 'runner.mjs')
+    await fs.copyFile(new URL('./windows-security/browser-worker.mjs', import.meta.url), runner)
+    await fs.copyFile(new URL('./windows-security/module-audit.ps1', import.meta.url), path.join(root, 'module-audit.ps1'))
+    await fs.copyFile(new URL('./windows-security/result-policy.mjs', import.meta.url), path.join(root, 'result-policy.mjs'))
+    await setAdminOnlyAcl(root)
+    const transcripts = path.join(process.env.USERPROFILE, '.codex', 'sessions')
+    await ps(`$ErrorActionPreference='Stop';$a=New-ScheduledTaskAction -Execute ${quote(path.join(home, 'bin', 'node.exe'))} -Argument ${quote('"' + runner + '" "' + root + '" "' + transcripts + '"')} -WorkingDirectory ${quote(root)};$p=New-ScheduledTaskPrincipal -UserId 'SYSTEM' -LogonType ServiceAccount -RunLevel Highest;$s=New-ScheduledTaskSettingsSet -ExecutionTimeLimit (New-TimeSpan -Minutes 3) -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries;Register-ScheduledTask -TaskName ${quote(task)} -Action $a -Principal $p -Settings $s | Out-Null`)
+    registered = true; await ps(`Start-ScheduledTask -TaskName ${quote(task)}`)
+    const output = path.join(root, 'browser-result.json'), deadline = Date.now() + 90000
+    while (Date.now() < deadline && !await fs.stat(output).catch(() => null)) await sleep(200)
+    const report = JSON.parse(await fs.readFile(output, 'utf8'))
+    await publishReport(publicDirectory, { ...report, evidence: root })
+    console.log(JSON.stringify({ ...report, evidence: root }))
+    if (!report.ok) process.exitCode = 1
+  } finally { if (registered) await ps(`Stop-ScheduledTask -TaskName ${quote(task)} -ErrorAction SilentlyContinue;Unregister-ScheduledTask -TaskName ${quote(task)} -Confirm:$false`) }
+} else throw new Error('Use concurrent --prepare and --run <runId> terminals, or --browser from an administrator terminal')

package/scripts/verify-windows-user-boundary.mjs

@@ -0,0 +1,56 @@
+// Non-destructive checks. Run as the ordinary desktop user, never as administrator.
+import fs from 'node:fs/promises'
+import net from 'node:net'
+import path from 'node:path'
+import { defaultAdminCheck } from '../dist/platform/windows/install.js'
+import { IpcClient } from '../dist/ipc/client.js'
+import { defaultEndpoint } from '../dist/ipc/endpoint.js'
+import { FrameReader } from '../dist/ipc/protocol.js'
+
+if (process.platform !== 'win32' || await defaultAdminCheck()) throw new Error('Run from a non-elevated Windows terminal')
+const home = path.join(process.env.ProgramData ?? 'C:\\ProgramData', 'u-chan-secrets')
+const targets = ['settings.json', 'allowlist.json', 'audit.log', 'bin/node.exe', 'bin/bw.exe', 'bin/prompt-helper.exe', 'bin/service-host.exe', 'bin/service-target.txt', 'program/package.json', 'program/dist/service/main.js', 'bin/browser/chrome.exe']
+const files = []
+for (const target of targets) {
+  const item = { target, readDenied: false, writeDenied: false }
+  for (const [flag, key] of [['r', 'readDenied'], ['r+', 'writeDenied']]) {
+    try { const handle = await fs.open(path.join(home, target), flag); await handle.close() }
+    catch (e) { if (e.code === 'EACCES' || e.code === 'EPERM') item[key] = true; else item[key + 'Error'] = e.code }
+  }
+  files.push(item)
+}
+let protectedDirectoryDenied = false
+try { await fs.opendir(path.join(home, 'bw-data')).then(d => d.close()) }
+catch (e) { protectedDirectoryDenied = e.code === 'EACCES' || e.code === 'EPERM' }
+const endpoint = defaultEndpoint(process.env, process.platform)
+const client = new IpcClient(endpoint, { timeoutMs: 10000 })
+const before = await client.listAllowed()
+if (!before.ok) throw new Error('Cannot establish grant baseline')
+const options = [
+  { grant: { kind: 'timed', minutes: 0 } }, { grant: { kind: 'timed', minutes: 1441 } },
+  { grant: { kind: 'timed', minutes: 1.5 } }, { grant: { kind: 'once', remainingUses: 100 } },
+  { grant: { kind: 'permanent', expiresAt: 'never' } }, { success: { url: 'http://example.invalid/' } },
+  { success: { url: 'https://user:password@example.invalid/' } }, { success: { selector: '' } },
+  { grant: { kind: 'other' } }, { bypassApproval: true },
+]
+async function raw(params) {
+  return new Promise((resolve, reject) => {
+    const socket = net.connect(endpoint), reader = new FrameReader()
+    const timer = setTimeout(() => { socket.destroy(); reject(new Error('Invalid request did not fail promptly')) }, 3000)
+    const finish = r => { clearTimeout(timer); socket.destroy(); resolve(r) }
+    socket.on('connect', () => socket.write(JSON.stringify({ id: 1, method: 'request_allow', params }) + '\n'))
+    socket.on('data', chunk => { for (const frame of reader.push(chunk)) finish(frame) })
+    socket.on('error', e => { clearTimeout(timer); reject(e) })
+  })
+}
+let malformedRequestsDenied = 0
+for (const value of options) {
+  const r = await raw({ domain: 'v3-verification.invalid', loginUrl: 'https://v3-verification.invalid/', item: 'DISPOSABLE-INVALID-REQUEST', options: value })
+  if (r.ok !== false || r.message !== 'bad request') throw new Error('Malformed policy reached approval or mutation')
+  malformedRequestsDenied++
+}
+const after = await client.listAllowed()
+const grantsUnchanged = after.ok && before.message === after.message
+const ok = files.every(f => f.readDenied && f.writeDenied) && protectedDirectoryDenied && grantsUnchanged
+console.log(JSON.stringify({ ok, nonElevated: true, files, protectedDirectoryDenied, malformedRequestsDenied, grantsUnchanged }))
+if (!ok) process.exitCode = 1