windows-development-sandbox 1.27.1 → 1.27.3

package/dist/host/pc-installs/discover.js

@@ -1,6 +1,7 @@
 import { assertSafeMapping } from '../../core/safe-paths.js';
 import { dirExists, errMsg } from '../../core/util/index.js';
 import { pcInstallGuest } from '../../shared/paths/index.js';
+import { relocateItem } from '../../shared/unreal/index.js';
 import { pcEnv } from '../accounts/index.js';
 import { epicInstalls } from './epic.js';
 import { steamInstalls } from './steam.js';
@@ -74,8 +75,10 @@ export function discoverPcInstalls(s, o, pc = pcEnv()) {
                     readOnly: !writable,
                     label: writable ? 'this PC, writable' : 'this PC, read-only',
                 });
-                const { host: _host, ...shown } = install;
-                items.push({ ...shown, guest });
+                const { host: _host, launcherItem, ...shown } = install;
+                // The manifest names the sandbox's folder, or it is left out: no path of this PC goes to the sandbox.
+                const moved = launcherItem ? relocateItem(launcherItem.text, install.host, guest) : null;
+                items.push({ ...shown, guest, ...(moved ? { launcherItem: { name: launcherItem.name, text: moved } } : {}) });
             }
             catch (e) {
                 notes.push('pcInstalls: ' + install.name + ' is not mapped: ' + errMsg(e));

package/dist/host/pc-installs/unreal.d.ts

@@ -13,6 +13,8 @@ export interface UnrealPcFiles {
     readonly defaultRoot: string;
     /** More folders that may hold UE_x.y folders: the same places on every drive (D:\Program Files\Epic Games ...). */
     readonly otherRoots?: readonly string[];
+    /** The launcher's Data\Manifests folder (its .item files), or none. */
+    readonly manifests?: string;
     readonly list: (dir: string) => string[];
     readonly read: (file: string, max: number) => Buffer | null;
 }
@@ -33,7 +35,7 @@ export interface PcSourceBuild {
 export declare function pcSourceBuilds(files: Pick<UnrealPcFiles, 'read' | 'builds'>): PcSourceBuild[];
 /** The engine folders you registered (pcInstalls.unrealEngineFolders), mapped writable. A folder that is a source
  * build of this PC keeps the PC's build id. */
-export declare function findEngineFolders(files: Pick<UnrealPcFiles, 'read' | 'builds'>, folders: readonly (string | number)[]): PcInstall[];
+export declare function findEngineFolders(files: Pick<UnrealPcFiles, 'read' | 'builds'> & Partial<Pick<UnrealPcFiles, 'launcherInstalled' | 'manifests' | 'list'>>, folders: readonly (string | number)[]): PcInstall[];
 /** This PC's files (reg.exe through system32, bounded reads). */
 export declare function unrealPcFiles(pc: PcEnv): UnrealPcFiles;
 export declare const unrealInstalls: PcInstallSource;

package/dist/host/pc-installs/unreal.js

@@ -10,7 +10,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { readBoundedFile } from '../../shared/io/index.js';
 import { SYSTEM } from '../../shared/system.js';
-import { BUILDS_KEY, launcherInstallations, launcherInstalledFile, MAX_LAUNCHER_FILE_BYTES, parseBuildVersion, versionText, } from '../../shared/unreal/index.js';
+import { BUILDS_KEY, itemInstallLocation, ITEM_NAME, launcherInstallations, launcherInstalledFile, launcherManifestsDir, MAX_LAUNCHER_FILE_BYTES, parseBuildVersion, versionText, } from '../../shared/unreal/index.js';
 const win = path.win32;
 /** At most this many engines of this PC are mapped. */
 export const MAX_PC_ENGINES = 8;
@@ -29,6 +29,27 @@ const versionOf = (dir, files) => {
     const bytes = files.read(win.join(dir, 'Engine', 'Build', 'Build.version'), 64 * 1024);
     return bytes ? parseBuildVersion(bytes.toString('utf8')) : null;
 };
+/** At most this much of a manifest goes into session.json (an engine's is a few KB). */
+const MAX_ITEM_BYTES = 64 * 1024;
+/** The launcher's manifest of the app in `dir` (with this PC's paths), or nothing. */
+function launcherItemOf(dir, files) {
+    if (!files.manifests)
+        return {};
+    const want = win.resolve(dir).toLowerCase();
+    for (const name of files.list(files.manifests).filter((n) => ITEM_NAME.test(n))) {
+        const bytes = files.read(win.join(files.manifests, name), MAX_ITEM_BYTES);
+        const at = bytes ? itemInstallLocation(bytes.toString('utf8')) : null;
+        if (bytes && at && win.resolve(at).toLowerCase() === want)
+            return { launcherItem: { name, text: bytes.toString('utf8') } };
+    }
+    return {};
+}
+/** The launcher's ids for the app in `dir` (from LauncherInstalled.dat), or nothing. */
+function launcherIdsOf(dir, files) {
+    const want = win.resolve(dir).toLowerCase();
+    const entry = (files.launcherInstalled ? launcherInstallations(files.launcherInstalled) : []).find((i) => APP_NAME.test(i.appName) && i.ids && win.resolve(i.installLocation).toLowerCase() === want);
+    return entry?.ids ? { launcher: entry.ids } : {};
+}
 const isWanted = (wanted, v) => wanted === true || wanted.map((w) => String(w).replace(/^UE_/i, '')).includes(v.major + '.' + v.minor);
 /** The engines of this PC that `wanted` maps, each folder once, at most MAX_PC_ENGINES. */
 export function findUnrealInstalls(files, wanted) {
@@ -53,6 +74,7 @@ export function findUnrealInstalls(files, wanted) {
             host: win.normalize(dir),
             guest: '',
             ...(ids ? { launcher: ids } : {}),
+            ...launcherItemOf(dir, files),
         });
     };
     const listed = files.launcherInstalled ? launcherInstallations(files.launcherInstalled) : [];
@@ -117,6 +139,9 @@ export function findEngineFolders(files, folders) {
             guest: '',
             writable: true,
             ...(source ? { buildId: source.buildId } : {}),
+            // An engine the launcher installed keeps its ids and manifest, so the sandbox's launcher lists it too.
+            ...launcherIdsOf(dir, { launcherInstalled: files.launcherInstalled ?? null }),
+            ...(files.list ? launcherItemOf(dir, { manifests: files.manifests, list: files.list, read: files.read }) : {}),
         });
     }
     return found;
@@ -146,6 +171,7 @@ export function unrealPcFiles(pc) {
             win.join(d, 'Program Files', 'Epic Games'),
             win.join(d, 'Epic Games'),
         ]),
+        manifests: launcherManifestsDir(pc.programData),
         list: listDir,
         read: readBoundedFile,
     };

package/dist/runtime/agent.js

@@ -26093,6 +26093,7 @@ var GAMEDEV_APPS = [
     size: "100 MB",
     source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
     exe: "f3d.exe",
+    onPath: true,
     needs: ["mesa"]
   },
   {
@@ -27192,7 +27193,7 @@ var SERVICE_SPECS = {
   },
   steam: {
     kind: "steam",
-    label: "Steam (SteamCMD)",
+    label: "Steam",
     usedBy: ["steam"],
     sources: ["file", "sandbox"],
     singleHolder: true,
@@ -27228,7 +27229,7 @@ var SERVICE_SPECS = {
   },
   cfx: {
     kind: "cfx",
-    label: "Cfx.re (FiveM / RedM server key)",
+    label: "FiveM key",
     usedBy: ["fivem"],
     sources: ["typed", "file"],
     singleHolder: false,
@@ -27257,7 +27258,7 @@ var SERVICE_SPECS = {
   },
   keystore: {
     kind: "keystore",
-    label: "Android upload keystore",
+    label: "Android keystore",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27272,7 +27273,7 @@ var SERVICE_SPECS = {
   },
   play: {
     kind: "play",
-    label: "Google Play (service account)",
+    label: "Google Play",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27283,7 +27284,7 @@ var SERVICE_SPECS = {
   },
   expo: {
     kind: "expo",
-    label: "Expo (EAS)",
+    label: "Expo",
     usedBy: ["reactNative"],
     sources: ["typed"],
     singleHolder: false,
@@ -27294,7 +27295,7 @@ var SERVICE_SPECS = {
   },
   appstore: {
     kind: "appstore",
-    label: "App Store Connect API key",
+    label: "App Store Connect",
     usedBy: ["reactNative", "flutter"],
     sources: ["file", "typed"],
     singleHolder: false,
@@ -27308,7 +27309,7 @@ var SERVICE_SPECS = {
   },
   perplexity: {
     kind: "perplexity",
-    label: "Perplexity API key",
+    label: "Perplexity API",
     usedBy: ["perplexity"],
     sources: ["pc", "file", "typed"],
     singleHolder: false,
@@ -27332,7 +27333,7 @@ var SERVICE_SPECS = {
   },
   comet: {
     kind: "comet",
-    label: "Comet (Perplexity browser)",
+    label: "Comet",
     usedBy: ["comet"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -27348,7 +27349,7 @@ var SERVICE_SPECS = {
   },
   perplexityapp: {
     kind: "perplexityapp",
-    label: "Perplexity desktop app",
+    label: "Perplexity app",
     usedBy: ["perplexityapp"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -28074,7 +28075,7 @@ import path12 from "node:path";
 
 // src/guest/runtime/process.ts
 import fs10 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 import path11 from "node:path";
 import { spawn as spawn2, spawnSync } from "node:child_process";
 
@@ -28134,10 +28135,20 @@ function scriptArgs(name, args = []) {
 }
 
 // src/shared/download/spawn.ts
+import os3 from "node:os";
 import { spawn } from "node:child_process";
+function lowerPriority(pid) {
+  if (pid === void 0) return;
+  try {
+    os3.setPriority(pid, os3.constants.priority.PRIORITY_BELOW_NORMAL);
+  } catch {
+  }
+}
 function spawnAsync(file2, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   return new Promise((resolve, reject) => {
-    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...options });
+    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     child.once("error", reject);
     child.once("close", (code) => resolve(code ?? -1));
   });
@@ -28158,13 +28169,16 @@ function extractArchive(archive, destination, members2 = []) {
 }
 async function extract(archive, destination, members2) {
   fs8.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2], {
+    lowPriority: true
+  });
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
     if (zip !== archive) fs8.copyFileSync(archive, zip);
     status = await spawnAsync(
       SYSTEM.powershell(),
-      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination]),
+      { lowPriority: true }
     );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
@@ -28381,13 +28395,15 @@ function logLines(stream) {
   stream.on("end", () => logOutput(partial2));
 }
 async function execAsync(file2, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   const code = captureOutput() ? await new Promise((resolve, reject) => {
-    const child = spawn2(file2, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...options });
+    const child = spawn2(file2, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     logLines(child.stdout);
     logLines(child.stderr);
     child.once("error", reject);
     child.once("close", (c) => resolve(c ?? -1));
-  }) : await spawnAsync(file2, args, { stdio: "inherit", ...options });
+  }) : await spawnAsync(file2, args, { stdio: "inherit", ...spawnOptions, ...lowPriority ? { lowPriority } : {} });
   if (code !== 0)
     throw new Error(path11.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
@@ -28416,7 +28432,7 @@ function runScript(name, args = []) {
     throw new Error(name + " failed with exit code " + result.status + (errors ? ": " + errors.slice(0, 400) : ""));
 }
 function runScriptWithJson(name, param, data, args = []) {
-  const dir = fs10.mkdtempSync(path11.join(os3.tmpdir(), "sbx-"));
+  const dir = fs10.mkdtempSync(path11.join(os4.tmpdir(), "sbx-"));
   const file2 = path11.join(dir, "input.json");
   try {
     fs10.writeFileSync(file2, JSON.stringify(data), "utf8");
@@ -28492,9 +28508,6 @@ async function setupUv(env) {
   env.prepend.push(mkdirp(tool("uv-bin")));
 }
 
-// src/guest/runtime/pools.ts
-import os4 from "node:os";
-
 // src/shared/concurrency/limiter.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 var held = new AsyncLocalStorage2();
@@ -28554,14 +28567,13 @@ var Limiter = class {
 };
 
 // src/shared/concurrency/pools.ts
-var net = new Limiter(4, "net");
+var net = new Limiter(3, "net");
 var heavy = new Limiter(2, "heavy");
 var installer = new Limiter(1, "installer");
 
 // src/guest/runtime/pools.ts
-var BELOW_NORMAL = os4.constants.priority.PRIORITY_BELOW_NORMAL;
 function execHeavy(file2, args, options = {}) {
-  return heavy.run(() => execAsync(file2, args, options));
+  return heavy.run(() => execAsync(file2, args, { ...options, lowPriority: true }));
 }
 
 // src/guest/runtime/session.ts

package/dist/runtime/daemon.js

@@ -26113,6 +26113,7 @@ var GAMEDEV_APPS = [
     size: "100 MB",
     source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
     exe: "f3d.exe",
+    onPath: true,
     needs: ["mesa"]
   },
   {
@@ -27413,7 +27414,7 @@ var SERVICE_SPECS = {
   },
   steam: {
     kind: "steam",
-    label: "Steam (SteamCMD)",
+    label: "Steam",
     usedBy: ["steam"],
     sources: ["file", "sandbox"],
     singleHolder: true,
@@ -27449,7 +27450,7 @@ var SERVICE_SPECS = {
   },
   cfx: {
     kind: "cfx",
-    label: "Cfx.re (FiveM / RedM server key)",
+    label: "FiveM key",
     usedBy: ["fivem"],
     sources: ["typed", "file"],
     singleHolder: false,
@@ -27478,7 +27479,7 @@ var SERVICE_SPECS = {
   },
   keystore: {
     kind: "keystore",
-    label: "Android upload keystore",
+    label: "Android keystore",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27493,7 +27494,7 @@ var SERVICE_SPECS = {
   },
   play: {
     kind: "play",
-    label: "Google Play (service account)",
+    label: "Google Play",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27504,7 +27505,7 @@ var SERVICE_SPECS = {
   },
   expo: {
     kind: "expo",
-    label: "Expo (EAS)",
+    label: "Expo",
     usedBy: ["reactNative"],
     sources: ["typed"],
     singleHolder: false,
@@ -27515,7 +27516,7 @@ var SERVICE_SPECS = {
   },
   appstore: {
     kind: "appstore",
-    label: "App Store Connect API key",
+    label: "App Store Connect",
     usedBy: ["reactNative", "flutter"],
     sources: ["file", "typed"],
     singleHolder: false,
@@ -27529,7 +27530,7 @@ var SERVICE_SPECS = {
   },
   perplexity: {
     kind: "perplexity",
-    label: "Perplexity API key",
+    label: "Perplexity API",
     usedBy: ["perplexity"],
     sources: ["pc", "file", "typed"],
     singleHolder: false,
@@ -27553,7 +27554,7 @@ var SERVICE_SPECS = {
   },
   comet: {
     kind: "comet",
-    label: "Comet (Perplexity browser)",
+    label: "Comet",
     usedBy: ["comet"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -27569,7 +27570,7 @@ var SERVICE_SPECS = {
   },
   perplexityapp: {
     kind: "perplexityapp",
-    label: "Perplexity desktop app",
+    label: "Perplexity app",
     usedBy: ["perplexityapp"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -28531,10 +28532,20 @@ function scriptArgs(name, args = []) {
 }
 
 // src/shared/download/spawn.ts
+import os3 from "node:os";
 import { spawn } from "node:child_process";
+function lowerPriority(pid) {
+  if (pid === void 0) return;
+  try {
+    os3.setPriority(pid, os3.constants.priority.PRIORITY_BELOW_NORMAL);
+  } catch {
+  }
+}
 function spawnAsync(file3, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   return new Promise((resolve2, reject) => {
-    const child = spawn(file3, args, { stdio: "ignore", windowsHide: true, ...options });
+    const child = spawn(file3, args, { stdio: "ignore", windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     child.once("error", reject);
     child.once("close", (code) => resolve2(code ?? -1));
   });
@@ -28558,13 +28569,16 @@ function extractArchive(archive, destination, members2 = []) {
 }
 async function extract(archive, destination, members2) {
   fs10.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2], {
+    lowPriority: true
+  });
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
     if (zip !== archive) fs10.copyFileSync(archive, zip);
     status = await spawnAsync(
       SYSTEM.powershell(),
-      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination]),
+      { lowPriority: true }
     );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
@@ -29160,7 +29174,6 @@ function withRequestSecrets(req) {
 }
 
 // src/guest/runtime/pools.ts
-import os4 from "node:os";
 import { spawn as spawn3 } from "node:child_process";
 import path21 from "node:path";
 
@@ -29234,13 +29247,13 @@ function installerRetry(code, attempt) {
 }
 
 // src/shared/concurrency/pools.ts
-var net2 = new Limiter(4, "net");
+var net2 = new Limiter(3, "net");
 var heavy = new Limiter(2, "heavy");
 var installer = new Limiter(1, "installer");
 
 // src/guest/runtime/process.ts
 import fs16 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 import path20 from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync2 } from "node:child_process";
 var outputSink = null;
@@ -29262,13 +29275,15 @@ function logLines(stream) {
   stream.on("end", () => logOutput(partial2));
 }
 async function execAsync(file3, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   const code = captureOutput() ? await new Promise((resolve2, reject) => {
-    const child = spawn2(file3, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...options });
+    const child = spawn2(file3, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     logLines(child.stdout);
     logLines(child.stderr);
     child.once("error", reject);
     child.once("close", (c) => resolve2(c ?? -1));
-  }) : await spawnAsync(file3, args, { stdio: "inherit", ...options });
+  }) : await spawnAsync(file3, args, { stdio: "inherit", ...spawnOptions, ...lowPriority ? { lowPriority } : {} });
   if (code !== 0)
     throw new Error(path20.basename(file3) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
@@ -29322,8 +29337,23 @@ function runScriptAsync(name, args = []) {
 function scriptOutput(name, args = [], options = {}) {
   return execOutput(SYSTEM.powershell(), scriptArgs(name, args), options);
 }
+function scriptOutputAsync(name, args = []) {
+  return new Promise((resolve2) => {
+    const child = spawn2(SYSTEM.powershell(), scriptArgs(name, args), {
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true
+    });
+    let out = "";
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      if (out.length < CAPTURE_BYTES) out += chunk;
+    });
+    child.once("error", () => resolve2(""));
+    child.once("close", (code) => resolve2(code === 0 ? out.trim() : ""));
+  });
+}
 function runScriptWithJson(name, param, data, args = []) {
-  const dir = fs16.mkdtempSync(path20.join(os3.tmpdir(), "sbx-"));
+  const dir = fs16.mkdtempSync(path20.join(os4.tmpdir(), "sbx-"));
   const file3 = path20.join(dir, "input.json");
   try {
     fs16.writeFileSync(file3, JSON.stringify(data), "utf8");
@@ -29333,7 +29363,7 @@ function runScriptWithJson(name, param, data, args = []) {
   }
 }
 async function runScriptWithJsonAsync(name, param, data, args = []) {
-  const dir = fs16.mkdtempSync(path20.join(os3.tmpdir(), "sbx-"));
+  const dir = fs16.mkdtempSync(path20.join(os4.tmpdir(), "sbx-"));
   const file3 = path20.join(dir, "input.json");
   try {
     fs16.writeFileSync(file3, JSON.stringify(data), "utf8");
@@ -29404,14 +29434,7 @@ function installPools() {
   downloader.limit = net2;
   limitExtraction(heavy);
 }
-var BELOW_NORMAL = os4.constants.priority.PRIORITY_BELOW_NORMAL;
-function belowNormal(pid) {
-  if (pid === void 0) return;
-  try {
-    os4.setPriority(pid, BELOW_NORMAL);
-  } catch {
-  }
-}
+var belowNormal = lowerPriority;
 async function runInstaller(file3, args, o = {}) {
   for (let attempt = 1; ; attempt++) {
     const code = await installer.run(
@@ -29437,7 +29460,7 @@ async function runInstallerChecked(file3, args, o = {}) {
     throw new Error(path21.basename(file3) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
 function execHeavy(file3, args, options = {}) {
-  return heavy.run(() => execAsync(file3, args, options));
+  return heavy.run(() => execAsync(file3, args, { ...options, lowPriority: true }));
 }
 
 // src/guest/daemon/daemon.ts
@@ -30361,13 +30384,14 @@ function itemSizes(saved2) {
   }
   return sizes;
 }
+var ITEM_NAME = /^[A-Za-z0-9_-]{1,80}\.item$/;
 function isItemUnder(text2, root) {
   const at = itemInstallLocation(text2);
   return at !== null && isWithin2(root, at) && win2.resolve(at) !== win2.resolve(root);
 }
 function itemFiles(dir) {
   try {
-    return fs22.readdirSync(dir).filter((f) => /^[A-Za-z0-9_-]{1,80}\.item$/.test(f));
+    return fs22.readdirSync(dir).filter((f) => ITEM_NAME.test(f));
   } catch {
     return [];
   }
@@ -31525,7 +31549,10 @@ import path42 from "node:path";
 // src/guest/toolchains/signature.ts
 var SignatureSchema = external_exports.object({ subject: external_exports.string().max(4096), issuer: external_exports.string().max(4096) });
 function signatureOf(file3) {
-  const text2 = scriptOutput("get-signature.ps1", ["-Path", file3]).trim();
+  return parseSignature(scriptOutput("get-signature.ps1", ["-Path", file3]));
+}
+function parseSignature(output2) {
+  const text2 = output2.trim();
   if (!text2) return null;
   try {
     const parsed = SignatureSchema.safeParse(JSON.parse(text2));
@@ -31537,11 +31564,14 @@ function signatureOf(file3) {
 function signedBy(file3, signer) {
   return signerMatches(signatureOf(file3), signer);
 }
+async function signedByAsync(file3, signer) {
+  return signerMatches(parseSignature(await scriptOutputAsync("get-signature.ps1", ["-Path", file3])), signer);
+}
 
 // src/guest/toolchains/installers.ts
 function signatureCheck(signer, what) {
-  return (file3) => {
-    if (!signedBy(file3, signer)) throw new Error(what + " is not signed by its vendor");
+  return async (file3) => {
+    if (!await signedByAsync(file3, signer)) throw new Error(what + " is not signed by its vendor");
   };
 }
 async function signedInstaller(url2, file3, what, signer, sha256 = null) {
@@ -31550,7 +31580,7 @@ async function signedInstaller(url2, file3, what, signer, sha256 = null) {
     mkdirp(path42.dirname(file3));
     await downloader.file(url2, file3, { sha256, verify: signatureCheck(signer, path42.basename(file3)) });
   }
-  if (!signedBy(file3, signer)) {
+  if (!await signedByAsync(file3, signer)) {
     fs25.rmSync(file3, { force: true });
     throw new Error(
       path42.basename(file3) + " is not signed by its vendor; deleted it (it is downloaded again next boot)"
@@ -31658,6 +31688,18 @@ function savedEntries() {
 function restoreLauncherItems() {
   return restoreItems(SAVED_MANIFESTS, launcherManifestsDir(programData()), ENGINES_DIR, exists);
 }
+function writePcLauncherItems(items) {
+  const dir = launcherManifestsDir(programData());
+  let written = 0;
+  for (const i of items) {
+    if (i.kind !== "unreal" || !i.launcherItem || !ITEM_NAME.test(i.launcherItem.name)) continue;
+    const at = itemInstallLocation(i.launcherItem.text);
+    if (!at || path44.win32.resolve(at).toLowerCase() !== path44.win32.resolve(i.guest).toLowerCase()) continue;
+    fs26.writeFileSync(path44.join(mkdirp(dir), i.launcherItem.name), i.launcherItem.text, "utf8");
+    written++;
+  }
+  return written;
+}
 function writeLauncherEntries(entries2) {
   if (!entries2.length) return;
   const file3 = launcherInstalledFile(programData());
@@ -31741,6 +31783,7 @@ async function registerEngines(engines, selectorFrom, ctx, aliases = []) {
   ];
   if (values.length) await runScriptWithJsonAsync("set-registry-values.ps1", "PlanFile", { values });
   try {
+    writePcLauncherItems(ctx.pcInstalls.items);
     writeLauncherEntries(launcherEntries(engines, ctx));
   } catch (e) {
     warn("Unreal: the Epic Games Launcher's LauncherInstalled.dat was left as it is (" + errMsg(e) + ")");
@@ -32621,7 +32664,7 @@ async function installFromKept(dest, signer, what) {
   if (!installer2) return null;
   const installed = installedCometExe();
   if (fs35.existsSync(installed)) return installed;
-  if (!signedBy(installer2, signer)) {
+  if (!await signedByAsync(installer2, signer)) {
     fs35.rmSync(path54.join(dest, ".agent-sandbox-app"), { force: true });
     fs35.rmSync(installer2, { force: true });
     throw new Error(what + "'s installer is not signed by its vendor; deleted it (it is downloaded again next boot)");
@@ -32923,7 +32966,7 @@ var MARKER = ".agent-sandbox-app";
 function prefetchedFile(entry, fileName) {
   return path58.join(tool("apps", ...entry.id.split("/")) + ".download", fileName.replace(/[\\/:*?"<>|]/g, "_"));
 }
-var PARALLEL = 3;
+var PARALLEL = 2;
 var AppInstaller = class {
   constructor(env, options, parallel = PARALLEL) {
     this.env = env;
@@ -32944,19 +32987,21 @@ var AppInstaller = class {
     const todo = entries2.filter(
       (e) => !("remote" in e.source) && !("locked" in e.source) && !("store" in e.source) && !("npm" in e.source) && e.id !== "7zip" && (this.options.refresh || !exists(path58.join(tool("apps", ...e.id.split("/")), MARKER)))
     );
-    await Promise.all(
-      todo.map(async (entry) => {
-        try {
-          const d = await resolve(entry);
-          const file3 = prefetchedFile(entry, d.fileName);
-          if (exists(file3)) return;
-          await downloader.file(d.url, file3, {
-            sha256: d.sha256 ?? null,
-            ...entry.signer ? { verify: signatureCheck(entry.signer, d.fileName) } : {}
-          });
-        } catch {
-        }
-      })
+    await asBackground(
+      () => Promise.all(
+        todo.map(async (entry) => {
+          try {
+            const d = await resolve(entry);
+            const file3 = prefetchedFile(entry, d.fileName);
+            if (exists(file3)) return;
+            await downloader.file(d.url, file3, {
+              sha256: d.sha256 ?? null,
+              ...entry.signer ? { verify: signatureCheck(entry.signer, d.fileName) } : {}
+            });
+          } catch {
+          }
+        })
+      )
     );
   }
   /** Installs the entries (7-Zip first: the NSIS apps need it to unpack), then their shortcuts. */
@@ -33013,7 +33058,7 @@ var AppInstaller = class {
       const exe = findExe(dest, entry.exe) ?? (entry.unpack === "chromium" && entry.signer ? await installFromKept(dest, entry.signer, entry.name) : null);
       if (!exe) throw new Error(entry.exe + " not found in the download");
       await afterInstall(entry, exe);
-      if (!entry.service && (entry.cli || entry.id === "sysinternals")) {
+      if (!entry.service && (entry.cli || entry.onPath || entry.id === "sysinternals")) {
         if (entry.id === "rust-analyzer") this.env.prepend.unshift(path58.dirname(exe));
         else this.env.prepend.push(path58.dirname(exe));
       }
@@ -36168,7 +36213,7 @@ async function setupVcRuntime(env, summary = true) {
       log("Downloading the Visual C++ runtime (~25 MB once) ...");
       await downloadFile(VC_REDIST, installer2);
     }
-    if (!signedBy(installer2, SIGNERS.microsoft)) {
+    if (!await signedByAsync(installer2, SIGNERS.microsoft)) {
       fs62.rmSync(installer2, { force: true });
       throw new Error("vc_redist.x64.exe is not signed by Microsoft; deleted it (it is downloaded again next boot)");
     }
@@ -38204,7 +38249,7 @@ function plan(config2, versions, o) {
 
 // src/guest/toolchains/step-scheduler.ts
 import { AsyncLocalStorage as AsyncLocalStorage4 } from "node:async_hooks";
-var PARALLEL2 = 4;
+var PARALLEL2 = 3;
 async function runReported(sink2, name, env, work) {
   try {
     await work();