windows-development-sandbox 1.0.5 → 1.4.0

package/sandbox/logon.cmd

@@ -1,16 +1,24 @@
-@echo off
-rem Windows Sandbox runs LogonCommand in a hidden window, so this opens the VISIBLE sandbox window: Windows Terminal
-rem (downloaded once by the host into persistent storage), or a plain PowerShell window if it is missing or fails.
-if not exist C:\AgentData\logs mkdir C:\AgentData\logs
-echo logon.cmd ran at %date% %time% > C:\AgentData\logs\logon-hit.txt
-call C:\AgentLaunch\sandbox\trust.cmd
-set "PS=%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe"
-set "BOOT=%PS% -NoLogo -NoProfile -ExecutionPolicy Bypass -NoExit -File C:\AgentLaunch\sandbox\bootstrap.ps1"
-if not exist C:\AgentData\tools\terminal\wt.exe goto plain
-start "" C:\AgentData\tools\terminal\wt.exe --maximized new-tab --title "Agent Sandbox" -d C:\AgentLaunch %BOOT%
-rem If Windows Terminal could not start, fall back to PowerShell so there is always a window.
-%SystemRoot%\System32\timeout.exe /t 10 /nobreak >nul
-%SystemRoot%\System32\tasklist.exe /fi "imagename eq WindowsTerminal.exe" | %SystemRoot%\System32\find.exe /i "WindowsTerminal" >nul && exit /b 0
-echo Windows Terminal did not start; using PowerShell. >> C:\AgentData\logs\logon-hit.txt
-:plain
-start "Agent Sandbox" %BOOT%
+@echo off
+rem Windows Sandbox runs LogonCommand in a hidden window, so this opens the VISIBLE sandbox window: Windows Terminal
+rem (downloaded once by the host into persistent storage), or a plain PowerShell window if it is missing or fails.
+if not exist C:\AgentData\logs mkdir C:\AgentData\logs
+echo logon.cmd ran at %date% %time% > C:\AgentData\logs\logon-hit.txt
+call C:\AgentLaunch\sandbox\trust.cmd
+rem New Terminal tabs start in %AGENT_WORKSPACE%: Terminal must have it before the runtime sets it machine-wide.
+if exist C:\AgentLaunch\env.cmd call C:\AgentLaunch\env.cmd
+set "PS=%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe"
+rem sandbox.cpuLimit: this window joins a CPU-capped job first, so everything started below inherits the cap.
+"%PS%" -NoLogo -NoProfile -ExecutionPolicy Bypass -File C:\AgentLaunch\sandbox\cpucap.ps1
+rem sandbox.pageFileMb: room for many parallel builds (the sandbox starts with about 1 GB of paging file).
+"%PS%" -NoLogo -NoProfile -ExecutionPolicy Bypass -File C:\AgentLaunch\sandbox\pagefile.ps1
+rem The memory state every 30 s into the persistent logs, so a crash leaves evidence.
+start "" /min "%PS%" -NoLogo -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File C:\AgentLaunch\sandbox\memlog.ps1
+set "BOOT=%PS% -NoLogo -NoProfile -ExecutionPolicy Bypass -NoExit -File C:\AgentLaunch\sandbox\bootstrap.ps1"
+if not exist C:\AgentData\tools\terminal\wt.exe goto plain
+start "" C:\AgentData\tools\terminal\wt.exe --maximized new-tab --title "Agent Sandbox" -d C:\AgentLaunch %BOOT%
+rem If Windows Terminal could not start, fall back to PowerShell so there is always a window.
+%SystemRoot%\System32\timeout.exe /t 10 /nobreak >nul
+%SystemRoot%\System32\tasklist.exe /fi "imagename eq WindowsTerminal.exe" | %SystemRoot%\System32\find.exe /i "WindowsTerminal" >nul && exit /b 0
+echo Windows Terminal did not start; using PowerShell. >> C:\AgentData\logs\logon-hit.txt
+:plain
+start "Agent Sandbox" %BOOT%

package/sandbox/memlog.ps1

@@ -0,0 +1,34 @@
+#Requires -Version 5.1
+# Writes the sandbox's memory state to C:\AgentData\logs\memory-<time>.log every 30 seconds, while it runs. That folder
+# outlives the sandbox, so if Windows inside it ever crashes again, the last lines show what was using memory just
+# before. Bounded: a file is closed at 1 MB (about two days) and a new one started; only the newest 10 are kept, so
+# the logs never take more than about 10 MB. Started hidden by logon.cmd. Never stops the boot.
+$ErrorActionPreference = 'SilentlyContinue'
+$logFolder = 'C:\AgentData\logs'
+$maxFileBytes = 1MB
+$keepFiles = 10
+
+# A new log file, and the oldest ones beyond $keepFiles removed. Returns its path.
+function New-MemoryLog {
+    $path = Join-Path $logFolder ('memory-{0:yyyyMMdd-HHmmss}.log' -f (Get-Date))
+    'time     | RAM used/total MB | commit used/limit MB | biggest processes (private MB)' | Set-Content -LiteralPath $path
+    Get-ChildItem -LiteralPath $logFolder -Filter 'memory-*.log' | Sort-Object LastWriteTime -Descending |
+        Select-Object -Skip $keepFiles | Remove-Item -Force
+    return $path
+}
+
+$logPath = New-MemoryLog
+while ($true) {
+    $os = Get-CimInstance Win32_OperatingSystem
+    $ramTotalMb = [math]::Round($os.TotalVisibleMemorySize / 1KB)
+    $ramUsedMb = $ramTotalMb - [math]::Round($os.FreePhysicalMemory / 1KB)
+    $commitLimitMb = [math]::Round($os.TotalVirtualMemorySize / 1KB)
+    $commitUsedMb = $commitLimitMb - [math]::Round($os.FreeVirtualMemory / 1KB)
+    $processes = @(Get-Process)
+    $biggest = $processes | Sort-Object PrivateMemorySize64 -Descending | Select-Object -First 5 |
+        ForEach-Object { '{0} {1}' -f $_.ProcessName, [math]::Round($_.PrivateMemorySize64 / 1MB) }
+    '{0:HH:mm:ss} | {1}/{2} | {3}/{4} | {5} processes; {6}' -f (Get-Date), $ramUsedMb, $ramTotalMb, $commitUsedMb, $commitLimitMb, $processes.Count, ($biggest -join ', ') |
+        Add-Content -LiteralPath $logPath
+    if ((Get-Item -LiteralPath $logPath).Length -ge $maxFileBytes) { $logPath = New-MemoryLog }
+    Start-Sleep -Seconds 30
+}

package/sandbox/openssl.cs

@@ -0,0 +1,42 @@
+// openssl.exe stand-in on the sandbox's PATH (tools\shims), running the copy Git for Windows ships in
+// <tools>\git\mingw64\bin. A real .exe, so CreateProcess callers (Rust's Command::new("openssl"), Node's spawn) find it,
+// which a .cmd would not be; and mingw64\bin itself stays off PATH, where it would shadow the MinGW gcc.
+// It finds Git relative to itself (<tools>\shims\openssl.exe -> <tools>\git\...) and sets OPENSSL_CONF for the child
+// only when the caller has none. C# 5 (compiled in the sandbox by the .NET Framework csc).
+using System;
+using System.Diagnostics;
+using System.IO;
+
+static class OpensslShim
+{
+    static int Main()
+    {
+        string here = Path.GetDirectoryName(System.Reflection.Assembly.GetExecutingAssembly().Location);
+        string mingw = Path.GetFullPath(Path.Combine(here, "..\\git\\mingw64"));
+        string exe = Path.Combine(mingw, "bin\\openssl.exe");
+        if (!File.Exists(exe))
+        {
+            Console.Error.WriteLine("openssl is not available: Git for Windows is not installed in this sandbox.");
+            return 127;
+        }
+        var start = new ProcessStartInfo(exe, ArgumentsOf(Environment.CommandLine)) { UseShellExecute = false };
+        string conf = Path.Combine(mingw, "etc\\ssl\\openssl.cnf");
+        if (string.IsNullOrEmpty(Environment.GetEnvironmentVariable("OPENSSL_CONF")) && File.Exists(conf))
+            start.EnvironmentVariables["OPENSSL_CONF"] = conf;
+        using (Process p = Process.Start(start))
+        {
+            p.WaitForExit();
+            return p.ExitCode;
+        }
+    }
+
+    // Everything after the program name, untouched, so quoting survives exactly as the caller wrote it.
+    static string ArgumentsOf(string commandLine)
+    {
+        string s = commandLine.TrimStart();
+        int end;
+        if (s.StartsWith("\"")) { end = s.IndexOf('"', 1); end = end < 0 ? s.Length : end + 1; }
+        else { end = s.IndexOf(' '); if (end < 0) end = s.Length; }
+        return s.Substring(end).TrimStart();
+    }
+}

package/sandbox/pagefile.cs

@@ -0,0 +1,31 @@
+// Sets the size of the sandbox's paging file at once, with no restart. Loaded by pagefile.ps1 (Add-Type). C# 5.
+using System;
+using System.ComponentModel;
+using System.Runtime.InteropServices;
+
+public static class SandboxPageFile {
+    // UNICODE_STRING. The marshaller copies Buffer to native memory for the length of the call.
+    [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
+    private struct NtString { public ushort Length; public ushort MaximumLength; public string Buffer; }
+
+    [DllImport("ntdll.dll")] private static extern int RtlAdjustPrivilege(int privilege, bool enable, bool currentThread, out bool wasEnabled);
+    [DllImport("ntdll.dll")] private static extern int NtCreatePagingFile(ref NtString path, ref long minimumBytes, ref long maximumBytes, uint priority);
+    [DllImport("ntdll.dll")] private static extern int RtlNtStatusToDosError(int status);
+
+    private const int SeCreatePagefilePrivilege = 15;
+
+    /// <summary>Makes C:\pagefile.sys sizeMb, fixed (it never grows). Throws with Windows' reason on failure.</summary>
+    public static void Set(int sizeMb) {
+        bool wasEnabled;
+        Check(RtlAdjustPrivilege(SeCreatePagefilePrivilege, true, false, out wasEnabled));
+        // The same call Windows makes at startup; for the existing file it changes the size in place.
+        const string path = @"\??\C:\pagefile.sys";
+        NtString name = new NtString { Length = (ushort)(path.Length * 2), MaximumLength = (ushort)(path.Length * 2 + 2), Buffer = path };
+        long minimum = sizeMb * 1048576L, maximum = minimum;
+        Check(NtCreatePagingFile(ref name, ref minimum, ref maximum, 0));
+    }
+
+    private static void Check(int status) {
+        if (status != 0) throw new Win32Exception(RtlNtStatusToDosError(status));
+    }
+}

package/sandbox/pagefile.ps1

@@ -0,0 +1,21 @@
+#Requires -Version 5.1
+# Gives the sandbox a paging file of sandbox.pageFileMb, created at full size now, before anything runs. Windows Sandbox
+# starts with about 1 GB, so parallel builds run out of memory ("The paging file is too small", os error 1455), and
+# then Windows grows the file while they run: both crashes of Windows inside the sandbox (13 Oct 2026, stop code 0x1A
+# MEMORY_MANAGEMENT) happened under that load. A fixed size never grows. Never stops the boot: it logs one line.
+param([int]$SizeMb = 0)  # 0 = read sandbox.pageFileMb from session.json
+$ErrorActionPreference = 'Stop'
+$log = 'C:\AgentData\logs\logon-hit.txt'
+try {
+    if ($SizeMb -eq 0) { $SizeMb = [int](Get-Content -LiteralPath 'C:\AgentLaunch\session.json' -Raw -Encoding UTF8 | ConvertFrom-Json).pageFileMb }
+    if ($SizeMb -le 0) { exit 0 }
+    # Keep 8 GB of the sandbox's disk free for everything else.
+    $SizeMb = [math]::Min($SizeMb, [math]::Floor((Get-PSDrive -Name C).Free / 1MB) - 8192)
+    if ($SizeMb -lt 1024) { throw 'too little free disk.' }
+    Add-Type -Path (Join-Path $PSScriptRoot 'pagefile.cs')
+    [SandboxPageFile]::Set($SizeMb)
+    "Paging file set to $SizeMb MB, fixed (sandbox.pageFileMb)." | Add-Content -LiteralPath $log
+} catch {
+    "Paging file left as it is: $($_.Exception.Message)" | Add-Content -LiteralPath $log
+}
+exit 0

package/sandbox/ptyhost.cs

@@ -16,6 +16,9 @@
 //                  18 ERROR   utf8 message
 //                  19 RESTARTING
 //                  20 STATUS  [viewers:2][remoteViewers:2]  viewers heard from recently (remote = not loopback, i.e. the PC)
+//                  21 CONSOLE utf8 "conpty.dll" or "windows", sent after HELLO. With conpty.dll the output is passed
+//                             through (real scrollback, no repaint on resize): a viewer that joins later is sent the
+//                             output since the last screen clear instead, and must not clear its screen on a resize.
 using System;
 using System.Collections.Concurrent;
 using System.Collections.Generic;
@@ -75,6 +78,7 @@ sealed class SessionHost
             using (var console = PseudoConsole.Start(command, hub.Cols, hub.Rows, hub.Broadcast))
             {
                 hub.Attach(console);
+                log.Write("pseudo console: " + Native.ConsoleKind);
                 int exitCode = console.WaitForExit();
                 if (!restartRequested)
                 {
@@ -92,6 +96,7 @@ sealed class SessionHost
     public void Restart()
     {
         restartRequested = true;
+        hub.ResetReplay();
         hub.Notify(Frame.Restarting);
         hub.KillProgram();
     }
@@ -181,6 +186,8 @@ sealed class Client
     public readonly NetworkStream Stream;
     public readonly BlockingCollection<byte[]> Outbox = new BlockingCollection<byte[]>(4096);
     public readonly bool Remote;
+    /** Set by the writer thread once everything queued has been written and the connection is closed. */
+    public readonly ManualResetEvent Finished = new ManualResetEvent(false);
     public bool ControlOnly, Query;
     public short Cols, Rows;
     long lastSeen = DateTime.UtcNow.Ticks;
@@ -203,7 +210,11 @@ sealed class Client
     {
         try { foreach (byte[] frame in Outbox.GetConsumingEnumerable()) Stream.Write(frame, 0, frame.Length); }
         catch (Exception) { }
-        finally { try { Tcp.Close(); } catch (Exception) { } }
+        finally
+        {
+            try { Tcp.Close(); } catch (Exception) { }
+            Finished.Set();
+        }
     }
 }
 
@@ -219,6 +230,9 @@ sealed class ClientHub
     readonly byte[] token;
     readonly byte[] tail = new byte[8192];
     int tailLength;
+    readonly object replayGate = new object();
+    readonly MemoryStream replay = new MemoryStream();
+    const int MaxReplay = 4 << 20;
     PseudoConsole console;
     Client sizeOwner;
     short cols, rows;
@@ -245,8 +259,18 @@ sealed class ClientHub
         client.ControlOnly = (hello[4] & 3) != 0;
         client.Query = (hello[4] & 2) != 0;
         if (client.Query) return true;
-        lock (gate) clients.Add(client);
-        if (!client.ControlOnly) TakeOwnership(client);
+        if (!client.ControlOnly)
+        {
+            Send(client, Frame.Console, Encoding.UTF8.GetBytes(Native.ConsoleKind.StartsWith("conpty") ? "conpty.dll" : "windows"));
+            // Taken and queued under the replay lock, so no output falls between the replay and the live stream.
+            lock (replayGate)
+            {
+                if (Native.ConsoleKind.StartsWith("conpty") && replay.Length > 0) Send(client, Frame.Output, replay.ToArray());
+                lock (gate) clients.Add(client);
+            }
+            TakeOwnership(client);
+        }
+        else lock (gate) clients.Add(client);
         return true;
     }
 
@@ -281,7 +305,41 @@ sealed class ClientHub
     public void Broadcast(byte[] output)
     {
         Remember(output);
-        foreach (Client c in Snapshot()) if (!c.ControlOnly) Send(c, Frame.Output, output);
+        lock (replayGate)
+        {
+            Record(output);
+            foreach (Client c in Snapshot()) if (!c.ControlOnly) Send(c, Frame.Output, output);
+        }
+    }
+
+    /**
+     * The output a viewer joining now needs to see the screen (conpty.dll does not repaint for it): everything since the
+     * last "clear screen", capped. Cut at a line start when capped, so the replay never begins inside an escape sequence.
+     */
+    void Record(byte[] output)
+    {
+        if (!Native.ConsoleKind.StartsWith("conpty")) return;
+        int clear = LastClear(output);
+        if (clear >= 0) { replay.SetLength(0); replay.Write(output, clear, output.Length - clear); }
+        else replay.Write(output, 0, output.Length);
+        if (replay.Length <= MaxReplay) return;
+        byte[] all = replay.ToArray();
+        int from = all.Length - MaxReplay / 2;
+        while (from < all.Length && all[from] != (byte)'\n') from++;
+        replay.SetLength(0);
+        if (from + 1 < all.Length) replay.Write(all, from + 1, all.Length - from - 1);
+    }
+
+    /** Where the last ESC[2J (clear screen) or ESC c (reset) starts in `data`, or -1. */
+    static int LastClear(byte[] data)
+    {
+        for (int i = data.Length - 2; i >= 0; i--)
+        {
+            if (data[i] != 0x1b) continue;
+            if (data[i + 1] == (byte)'c') return i;
+            if (i + 3 < data.Length && data[i + 1] == (byte)'[' && data[i + 2] == (byte)'2' && data[i + 3] == (byte)'J') return i;
+        }
+        return -1;
     }
 
     /** The program's last output as plain text (escape sequences removed), for the log when it exits. */
@@ -305,6 +363,9 @@ sealed class ClientHub
         }
     }
 
+    /** A restarted program starts on a clean screen (viewers clear theirs on RESTARTING). */
+    public void ResetReplay() { lock (replayGate) replay.SetLength(0); }
+
     public void Notify(byte type)
     {
         foreach (Client c in Snapshot()) if (!c.ControlOnly) Send(c, type, new byte[0]);
@@ -323,7 +384,7 @@ sealed class ClientHub
         var everyone = Snapshot();
         foreach (Client c in everyone) { Send(c, Frame.Exit, code); Retire(c); }
         // Give the writer threads a moment to deliver the EXIT frame before the process ends.
-        foreach (Client c in everyone) for (int i = 0; i < 20 && c.Outbox.Count > 0; i++) Thread.Sleep(50);
+        foreach (Client c in everyone) c.Finished.WaitOne(1000);
     }
 
     /** Stops sending to a client after what is already queued (its writer closes the connection when done). */
@@ -343,11 +404,16 @@ sealed class ClientHub
         if (next != null) TakeOwnership(next);
     }
 
-    /** Disconnects a client (after at most half a second for frames already queued, e.g. "access denied"). */
+    /**
+     * Disconnects a client. Frames already queued (e.g. "access denied", STATUS) are written first: the client's writer
+     * thread closes the connection when it is done, so wait for that rather than for an empty queue (the writer takes a
+     * frame off the queue before it has written it, so an empty queue does not mean "sent"), and only force the close
+     * if the peer is not reading.
+     */
     public void Kill(Client client)
     {
         Retire(client);
-        for (int i = 0; i < 20 && client.Outbox.Count > 0; i++) Thread.Sleep(25);
+        client.Finished.WaitOne(3000);
         try { client.Tcp.Close(); } catch (Exception) { }
     }
 
@@ -492,7 +558,7 @@ sealed class PseudoConsole : IDisposable
 static class Frame
 {
     public const byte Hello = 1, Input = 2, Resize = 3, Restart = 4, Ping = 5;
-    public const byte Output = 16, Exit = 17, Error = 18, Restarting = 19, Status = 20;
+    public const byte Output = 16, Exit = 17, Error = 18, Restarting = 19, Status = 20, Console = 21;
     const int MaxPayload = 1 << 20;
 
     public static bool Read(Stream stream, out byte type, out byte[] payload)
@@ -587,9 +653,52 @@ static class Native
         }
     }
 
-    [DllImport("kernel32.dll")] public static extern int CreatePseudoConsole(Coord size, SafeFileHandle hInput, SafeFileHandle hOutput, uint dwFlags, out IntPtr phPC);
-    [DllImport("kernel32.dll")] public static extern int ResizePseudoConsole(IntPtr hPC, Coord size);
-    [DllImport("kernel32.dll")] public static extern void ClosePseudoConsole(IntPtr hPC);
+    // The pseudo console: the newer conpty.dll (+ OpenConsole.exe next to it) when PTYHOST_CONPTY names one, else the one
+    // built into Windows. Windows 10/11 before 24H2 ship a ConPTY that re-renders the screen instead of passing the
+    // program's output through, which garbles wide characters after a resize and loses mouse input and scrollback.
+    [UnmanagedFunctionPointer(CallingConvention.Winapi)] delegate int CreateFn(Coord size, SafeFileHandle hInput, SafeFileHandle hOutput, uint dwFlags, out IntPtr phPC);
+    [UnmanagedFunctionPointer(CallingConvention.Winapi)] delegate int ResizeFn(IntPtr hPC, Coord size);
+    [UnmanagedFunctionPointer(CallingConvention.Winapi)] delegate void CloseFn(IntPtr hPC);
+    static CreateFn create;
+    static ResizeFn resize;
+    static CloseFn close;
+    /** "conpty.dll" or "windows": which pseudo console is in use (logged, and told to viewers). */
+    public static string ConsoleKind = "windows";
+
+    static Native()
+    {
+        string dll = Environment.GetEnvironmentVariable("PTYHOST_CONPTY");
+        if (string.IsNullOrEmpty(dll) || !File.Exists(dll) || !File.Exists(Path.Combine(Path.GetDirectoryName(dll), "OpenConsole.exe"))) return;
+        IntPtr module = LoadLibraryW(dll);
+        if (module == IntPtr.Zero) return;
+        IntPtr c = GetProcAddress(module, "ConptyCreatePseudoConsole"), r = GetProcAddress(module, "ConptyResizePseudoConsole"), x = GetProcAddress(module, "ConptyClosePseudoConsole");
+        if (c == IntPtr.Zero || r == IntPtr.Zero || x == IntPtr.Zero) return;
+        create = (CreateFn)Marshal.GetDelegateForFunctionPointer(c, typeof(CreateFn));
+        resize = (ResizeFn)Marshal.GetDelegateForFunctionPointer(r, typeof(ResizeFn));
+        close = (CloseFn)Marshal.GetDelegateForFunctionPointer(x, typeof(CloseFn));
+        ConsoleKind = "conpty.dll";
+    }
+
+    /** conpty.dll first; if it cannot start one (OpenConsole.exe blocked or broken), the built-in one for good. */
+    public static int CreatePseudoConsole(Coord size, SafeFileHandle hInput, SafeFileHandle hOutput, uint dwFlags, out IntPtr phPC)
+    {
+        if (create != null)
+        {
+            int hr = create(size, hInput, hOutput, dwFlags, out phPC);
+            if (hr == 0) return 0;
+            create = null; resize = null; close = null;
+            ConsoleKind = "windows (conpty.dll failed: 0x" + hr.ToString("X8") + ")";
+        }
+        return KernelCreatePseudoConsole(size, hInput, hOutput, dwFlags, out phPC);
+    }
+    public static int ResizePseudoConsole(IntPtr hPC, Coord size) { return resize != null ? resize(hPC, size) : KernelResizePseudoConsole(hPC, size); }
+    public static void ClosePseudoConsole(IntPtr hPC) { if (close != null) close(hPC); else KernelClosePseudoConsole(hPC); }
+
+    [DllImport("kernel32.dll", EntryPoint = "CreatePseudoConsole")] static extern int KernelCreatePseudoConsole(Coord size, SafeFileHandle hInput, SafeFileHandle hOutput, uint dwFlags, out IntPtr phPC);
+    [DllImport("kernel32.dll", EntryPoint = "ResizePseudoConsole")] static extern int KernelResizePseudoConsole(IntPtr hPC, Coord size);
+    [DllImport("kernel32.dll", EntryPoint = "ClosePseudoConsole")] static extern void KernelClosePseudoConsole(IntPtr hPC);
+    [DllImport("kernel32.dll", SetLastError = true, CharSet = CharSet.Unicode)] static extern IntPtr LoadLibraryW(string path);
+    [DllImport("kernel32.dll", CharSet = CharSet.Ansi, BestFitMapping = false)] static extern IntPtr GetProcAddress(IntPtr module, string name);
     [DllImport("kernel32.dll", SetLastError = true)] public static extern bool CreatePipe(out SafeFileHandle hReadPipe, out SafeFileHandle hWritePipe, IntPtr lpPipeAttributes, int nSize);
     [DllImport("kernel32.dll", SetLastError = true)] static extern bool InitializeProcThreadAttributeList(IntPtr lpAttributeList, int dwAttributeCount, int dwFlags, ref IntPtr lpSize);
     [DllImport("kernel32.dll", SetLastError = true)] static extern bool UpdateProcThreadAttribute(IntPtr lpAttributeList, uint dwFlags, IntPtr attribute, IntPtr lpValue, IntPtr cbSize, IntPtr lpPreviousValue, IntPtr lpReturnSize);

package/sandbox/trust.cmd

@@ -1,35 +1,35 @@
-@echo off
-rem Runs first at logon, INSIDE the disposable sandbox only (the host PC is never touched).
-rem Lets the sandbox's own tools run without "Open File - Security Warning", SmartScreen, script-policy or UAC prompts.
-rem The security boundary is Windows Sandbox itself plus workspace-only write access and the LAN block; these prompts add
-rem nothing inside a throwaway VM except interruptions.
-set "POL=HKCU\Software\Microsoft\Windows\CurrentVersion\Policies"
-reg add "%POL%\Associations" /v LowRiskFileTypes /t REG_SZ /d ".exe;.com;.cmd;.bat;.ps1;.psm1;.msi;.vbs;.js;.zip;.7z" /f >nul
-reg add "%POL%\Attachments" /v SaveZoneInformation /t REG_DWORD /d 1 /f >nul
-rem Mapped folders and UNC paths count as Local Intranet, where launching programs is allowed without asking.
-reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" /v UNCAsIntranet /t REG_DWORD /d 1 /f >nul
-reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" /v IntranetName /t REG_DWORD /d 1 /f >nul
-rem Files copied from this PC keep their "downloaded from the internet" mark, so launching is allowed in every zone
-rem (1806 = 0), for this user and machine-wide, and ShellExecute skips the zone check altogether.
-for %%Z in (0 1 2 3 4) do (
-  reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%%Z" /v 1806 /t REG_DWORD /d 0 /f >nul
-  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%%Z" /v 1806 /t REG_DWORD /d 0 /f >nul 2>&1
-)
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v SEE_MASK_NOZONECHECKS /t REG_SZ /d 1 /f >nul 2>&1
-set "SEE_MASK_NOZONECHECKS=1"
-rem Paths over 260 characters (deep node_modules, Gradle and NuGet caches) work for every program.
-reg add "HKLM\SYSTEM\CurrentControlSet\Control\FileSystem" /v LongPathsEnabled /t REG_DWORD /d 1 /f >nul 2>&1
-rem "Windows Defender Firewall has blocked some features of this app" pops up whenever a program (node, a dev server,
-rem the session host) listens on the network. Inbound stays blocked, just silently; the attach rule lets this PC in.
-netsh advfirewall set allprofiles settings inboundusernotification disable >nul 2>&1
-for %%P in (DomainProfile PrivateProfile PublicProfile) do reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\%%P" /v DisableNotifications /t REG_DWORD /d 1 /f >nul 2>&1
-rem SmartScreen ("Windows protected your PC") for downloaded, unsigned tools.
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v EnableSmartScreen /t REG_DWORD /d 0 /f >nul 2>&1
-reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_SZ /d Off /f >nul 2>&1
-rem PowerShell scripts (hooks, installers) run without the "Do you want to run ..." question.
-reg add "HKLM\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" /v ExecutionPolicy /t REG_SZ /d Bypass /f >nul 2>&1
-reg add "HKCU\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" /v ExecutionPolicy /t REG_SZ /d Bypass /f >nul
-rem Elevation requests from the (already admin) sandbox user are granted without a dialog.
-reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f >nul 2>&1
-reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v PromptOnSecureDesktop /t REG_DWORD /d 0 /f >nul 2>&1
-exit /b 0
+@echo off
+rem Runs first at logon, INSIDE the disposable sandbox only (the host PC is never touched).
+rem Lets the sandbox's own tools run without "Open File - Security Warning", SmartScreen, script-policy or UAC prompts.
+rem The security boundary is Windows Sandbox itself plus workspace-only write access and the LAN block; these prompts add
+rem nothing inside a throwaway VM except interruptions.
+set "POL=HKCU\Software\Microsoft\Windows\CurrentVersion\Policies"
+reg add "%POL%\Associations" /v LowRiskFileTypes /t REG_SZ /d ".exe;.com;.cmd;.bat;.ps1;.psm1;.msi;.vbs;.js;.zip;.7z" /f >nul
+reg add "%POL%\Attachments" /v SaveZoneInformation /t REG_DWORD /d 1 /f >nul
+rem Mapped folders and UNC paths count as Local Intranet, where launching programs is allowed without asking.
+reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" /v UNCAsIntranet /t REG_DWORD /d 1 /f >nul
+reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap" /v IntranetName /t REG_DWORD /d 1 /f >nul
+rem Files copied from this PC keep their "downloaded from the internet" mark, so launching is allowed in every zone
+rem (1806 = 0), for this user and machine-wide, and ShellExecute skips the zone check altogether.
+for %%Z in (0 1 2 3 4) do (
+  reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%%Z" /v 1806 /t REG_DWORD /d 0 /f >nul
+  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\%%Z" /v 1806 /t REG_DWORD /d 0 /f >nul 2>&1
+)
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v SEE_MASK_NOZONECHECKS /t REG_SZ /d 1 /f >nul 2>&1
+set "SEE_MASK_NOZONECHECKS=1"
+rem Paths over 260 characters (deep node_modules, Gradle and NuGet caches) work for every program.
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\FileSystem" /v LongPathsEnabled /t REG_DWORD /d 1 /f >nul 2>&1
+rem "Windows Defender Firewall has blocked some features of this app" pops up whenever a program (node, a dev server,
+rem the session host) listens on the network. Inbound stays blocked, just silently; the attach rule lets this PC in.
+netsh advfirewall set allprofiles settings inboundusernotification disable >nul 2>&1
+for %%P in (DomainProfile PrivateProfile PublicProfile) do reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\%%P" /v DisableNotifications /t REG_DWORD /d 1 /f >nul 2>&1
+rem SmartScreen ("Windows protected your PC") for downloaded, unsigned tools.
+reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v EnableSmartScreen /t REG_DWORD /d 0 /f >nul 2>&1
+reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_SZ /d Off /f >nul 2>&1
+rem PowerShell scripts (hooks, installers) run without the "Do you want to run ..." question.
+reg add "HKLM\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" /v ExecutionPolicy /t REG_SZ /d Bypass /f >nul 2>&1
+reg add "HKCU\SOFTWARE\Microsoft\PowerShell\1\ShellIds\Microsoft.PowerShell" /v ExecutionPolicy /t REG_SZ /d Bypass /f >nul
+rem Elevation requests from the (already admin) sandbox user are granted without a dialog.
+reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f >nul 2>&1
+reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v PromptOnSecureDesktop /t REG_DWORD /d 0 /f >nul 2>&1
+exit /b 0