windows-development-sandbox 1.27.1 → 1.27.3

package/dist/runtime/db.js

@@ -26069,6 +26069,7 @@ var GAMEDEV_APPS = [
     size: "100 MB",
     source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
     exe: "f3d.exe",
+    onPath: true,
     needs: ["mesa"]
   },
   {
@@ -27168,7 +27169,7 @@ var SERVICE_SPECS = {
   },
   steam: {
     kind: "steam",
-    label: "Steam (SteamCMD)",
+    label: "Steam",
     usedBy: ["steam"],
     sources: ["file", "sandbox"],
     singleHolder: true,
@@ -27204,7 +27205,7 @@ var SERVICE_SPECS = {
   },
   cfx: {
     kind: "cfx",
-    label: "Cfx.re (FiveM / RedM server key)",
+    label: "FiveM key",
     usedBy: ["fivem"],
     sources: ["typed", "file"],
     singleHolder: false,
@@ -27233,7 +27234,7 @@ var SERVICE_SPECS = {
   },
   keystore: {
     kind: "keystore",
-    label: "Android upload keystore",
+    label: "Android keystore",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27248,7 +27249,7 @@ var SERVICE_SPECS = {
   },
   play: {
     kind: "play",
-    label: "Google Play (service account)",
+    label: "Google Play",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27259,7 +27260,7 @@ var SERVICE_SPECS = {
   },
   expo: {
     kind: "expo",
-    label: "Expo (EAS)",
+    label: "Expo",
     usedBy: ["reactNative"],
     sources: ["typed"],
     singleHolder: false,
@@ -27270,7 +27271,7 @@ var SERVICE_SPECS = {
   },
   appstore: {
     kind: "appstore",
-    label: "App Store Connect API key",
+    label: "App Store Connect",
     usedBy: ["reactNative", "flutter"],
     sources: ["file", "typed"],
     singleHolder: false,
@@ -27284,7 +27285,7 @@ var SERVICE_SPECS = {
   },
   perplexity: {
     kind: "perplexity",
-    label: "Perplexity API key",
+    label: "Perplexity API",
     usedBy: ["perplexity"],
     sources: ["pc", "file", "typed"],
     singleHolder: false,
@@ -27308,7 +27309,7 @@ var SERVICE_SPECS = {
   },
   comet: {
     kind: "comet",
-    label: "Comet (Perplexity browser)",
+    label: "Comet",
     usedBy: ["comet"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -27324,7 +27325,7 @@ var SERVICE_SPECS = {
   },
   perplexityapp: {
     kind: "perplexityapp",
-    label: "Perplexity desktop app",
+    label: "Perplexity app",
     usedBy: ["perplexityapp"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -28160,10 +28161,20 @@ function scriptArgs(name, args = []) {
 }
 
 // src/shared/download/spawn.ts
+import os3 from "node:os";
 import { spawn } from "node:child_process";
+function lowerPriority(pid) {
+  if (pid === void 0) return;
+  try {
+    os3.setPriority(pid, os3.constants.priority.PRIORITY_BELOW_NORMAL);
+  } catch {
+  }
+}
 function spawnAsync(file2, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   return new Promise((resolve, reject) => {
-    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...options });
+    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     child.once("error", reject);
     child.once("close", (code) => resolve(code ?? -1));
   });
@@ -28184,13 +28195,16 @@ function extractArchive(archive, destination, members2 = []) {
 }
 async function extract(archive, destination, members2) {
   fs7.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2], {
+    lowPriority: true
+  });
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
     if (zip !== archive) fs7.copyFileSync(archive, zip);
     status = await spawnAsync(
       SYSTEM.powershell(),
-      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination]),
+      { lowPriority: true }
     );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
@@ -28439,7 +28453,7 @@ import { spawn as spawn4 } from "node:child_process";
 
 // src/guest/runtime/process.ts
 import fs10 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 import path12 from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync2 } from "node:child_process";
 var outputSink = null;
@@ -28461,13 +28475,15 @@ function logLines(stream) {
   stream.on("end", () => logOutput(partial2));
 }
 async function execAsync(file2, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   const code = captureOutput() ? await new Promise((resolve, reject) => {
-    const child = spawn2(file2, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...options });
+    const child = spawn2(file2, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     logLines(child.stdout);
     logLines(child.stderr);
     child.once("error", reject);
     child.once("close", (c) => resolve(c ?? -1));
-  }) : await spawnAsync(file2, args, { stdio: "inherit", ...options });
+  }) : await spawnAsync(file2, args, { stdio: "inherit", ...spawnOptions, ...lowPriority ? { lowPriority } : {} });
   if (code !== 0)
     throw new Error(path12.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
@@ -28492,7 +28508,7 @@ function runScript(name, args = []) {
     throw new Error(name + " failed with exit code " + result.status + (errors ? ": " + errors.slice(0, 400) : ""));
 }
 function runScriptWithJson(name, param, data, args = []) {
-  const dir = fs10.mkdtempSync(path12.join(os3.tmpdir(), "sbx-"));
+  const dir = fs10.mkdtempSync(path12.join(os4.tmpdir(), "sbx-"));
   const file2 = path12.join(dir, "input.json");
   try {
     fs10.writeFileSync(file2, JSON.stringify(data), "utf8");

package/dist/runtime/main.js

@@ -26086,6 +26086,7 @@ var GAMEDEV_APPS = [
     size: "100 MB",
     source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
     exe: "f3d.exe",
+    onPath: true,
     needs: ["mesa"]
   },
   {
@@ -27426,7 +27427,7 @@ var SERVICE_SPECS = {
   },
   steam: {
     kind: "steam",
-    label: "Steam (SteamCMD)",
+    label: "Steam",
     usedBy: ["steam"],
     sources: ["file", "sandbox"],
     singleHolder: true,
@@ -27462,7 +27463,7 @@ var SERVICE_SPECS = {
   },
   cfx: {
     kind: "cfx",
-    label: "Cfx.re (FiveM / RedM server key)",
+    label: "FiveM key",
     usedBy: ["fivem"],
     sources: ["typed", "file"],
     singleHolder: false,
@@ -27491,7 +27492,7 @@ var SERVICE_SPECS = {
   },
   keystore: {
     kind: "keystore",
-    label: "Android upload keystore",
+    label: "Android keystore",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27506,7 +27507,7 @@ var SERVICE_SPECS = {
   },
   play: {
     kind: "play",
-    label: "Google Play (service account)",
+    label: "Google Play",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27517,7 +27518,7 @@ var SERVICE_SPECS = {
   },
   expo: {
     kind: "expo",
-    label: "Expo (EAS)",
+    label: "Expo",
     usedBy: ["reactNative"],
     sources: ["typed"],
     singleHolder: false,
@@ -27528,7 +27529,7 @@ var SERVICE_SPECS = {
   },
   appstore: {
     kind: "appstore",
-    label: "App Store Connect API key",
+    label: "App Store Connect",
     usedBy: ["reactNative", "flutter"],
     sources: ["file", "typed"],
     singleHolder: false,
@@ -27542,7 +27543,7 @@ var SERVICE_SPECS = {
   },
   perplexity: {
     kind: "perplexity",
-    label: "Perplexity API key",
+    label: "Perplexity API",
     usedBy: ["perplexity"],
     sources: ["pc", "file", "typed"],
     singleHolder: false,
@@ -27566,7 +27567,7 @@ var SERVICE_SPECS = {
   },
   comet: {
     kind: "comet",
-    label: "Comet (Perplexity browser)",
+    label: "Comet",
     usedBy: ["comet"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -27582,7 +27583,7 @@ var SERVICE_SPECS = {
   },
   perplexityapp: {
     kind: "perplexityapp",
-    label: "Perplexity desktop app",
+    label: "Perplexity app",
     usedBy: ["perplexityapp"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -28363,7 +28364,7 @@ var logsDir = path9.join(dataDir, "logs");
 var run = new RunDir(dataDir);
 
 // src/guest/runtime/status.ts
-import os3 from "node:os";
+import os4 from "node:os";
 
 // src/core/util/errors.ts
 function errMsg(e) {
@@ -28548,10 +28549,20 @@ function scriptArgs(name, args = []) {
 }
 
 // src/shared/download/spawn.ts
+import os3 from "node:os";
 import { spawn } from "node:child_process";
+function lowerPriority(pid) {
+  if (pid === void 0) return;
+  try {
+    os3.setPriority(pid, os3.constants.priority.PRIORITY_BELOW_NORMAL);
+  } catch {
+  }
+}
 function spawnAsync(file3, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   return new Promise((resolve2, reject) => {
-    const child = spawn(file3, args, { stdio: "ignore", windowsHide: true, ...options });
+    const child = spawn(file3, args, { stdio: "ignore", windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     child.once("error", reject);
     child.once("close", (code) => resolve2(code ?? -1));
   });
@@ -28575,13 +28586,16 @@ function extractArchive(archive, destination, members2 = []) {
 }
 async function extract(archive, destination, members2) {
   fs10.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2], {
+    lowPriority: true
+  });
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
     if (zip !== archive) fs10.copyFileSync(archive, zip);
     status = await spawnAsync(
       SYSTEM.powershell(),
-      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination]),
+      { lowPriority: true }
     );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
@@ -28825,7 +28839,7 @@ function setBackgroundWork(work) {
   }
 }
 function ownAddresses() {
-  return Object.values(os3.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address).slice(0, 8);
+  return Object.values(os4.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address).slice(0, 8);
 }
 function writeStatus(phase, message) {
   writeJsonAtomic(run.sandboxFile, {
@@ -28893,7 +28907,7 @@ import path18 from "node:path";
 
 // src/guest/runtime/process.ts
 import fs14 from "node:fs";
-import os4 from "node:os";
+import os5 from "node:os";
 import path17 from "node:path";
 import { spawn as spawn2, spawnSync } from "node:child_process";
 var outputSink = null;
@@ -28931,13 +28945,15 @@ function exec(file3, args, options = {}) {
     throw new Error(path17.basename(file3) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + result.status);
 }
 async function execAsync(file3, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   const code = captureOutput() ? await new Promise((resolve2, reject) => {
-    const child = spawn2(file3, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...options });
+    const child = spawn2(file3, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     logLines(child.stdout);
     logLines(child.stderr);
     child.once("error", reject);
     child.once("close", (c) => resolve2(c ?? -1));
-  }) : await spawnAsync(file3, args, { stdio: "inherit", ...options });
+  }) : await spawnAsync(file3, args, { stdio: "inherit", ...spawnOptions, ...lowPriority ? { lowPriority } : {} });
   if (code !== 0)
     throw new Error(path17.basename(file3) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
@@ -28991,8 +29007,23 @@ function runScriptAsync(name, args = []) {
 function scriptOutput(name, args = [], options = {}) {
   return execOutput(SYSTEM.powershell(), scriptArgs(name, args), options);
 }
+function scriptOutputAsync(name, args = []) {
+  return new Promise((resolve2) => {
+    const child = spawn2(SYSTEM.powershell(), scriptArgs(name, args), {
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true
+    });
+    let out = "";
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      if (out.length < CAPTURE_BYTES) out += chunk;
+    });
+    child.once("error", () => resolve2(""));
+    child.once("close", (code) => resolve2(code === 0 ? out.trim() : ""));
+  });
+}
 function runScriptWithJson(name, param, data, args = []) {
-  const dir = fs14.mkdtempSync(path17.join(os4.tmpdir(), "sbx-"));
+  const dir = fs14.mkdtempSync(path17.join(os5.tmpdir(), "sbx-"));
   const file3 = path17.join(dir, "input.json");
   try {
     fs14.writeFileSync(file3, JSON.stringify(data), "utf8");
@@ -29002,7 +29033,7 @@ function runScriptWithJson(name, param, data, args = []) {
   }
 }
 async function runScriptWithJsonAsync(name, param, data, args = []) {
-  const dir = fs14.mkdtempSync(path17.join(os4.tmpdir(), "sbx-"));
+  const dir = fs14.mkdtempSync(path17.join(os5.tmpdir(), "sbx-"));
   const file3 = path17.join(dir, "input.json");
   try {
     fs14.writeFileSync(file3, JSON.stringify(data), "utf8");
@@ -29451,13 +29482,14 @@ function itemSizes(saved) {
   }
   return sizes;
 }
+var ITEM_NAME = /^[A-Za-z0-9_-]{1,80}\.item$/;
 function isItemUnder(text2, root) {
   const at = itemInstallLocation(text2);
   return at !== null && isWithin(root, at) && win2.resolve(at) !== win2.resolve(root);
 }
 function itemFiles(dir) {
   try {
-    return fs16.readdirSync(dir).filter((f) => /^[A-Za-z0-9_-]{1,80}\.item$/.test(f));
+    return fs16.readdirSync(dir).filter((f) => ITEM_NAME.test(f));
   } catch {
     return [];
   }
@@ -30706,7 +30738,6 @@ import fs21 from "node:fs";
 import path34 from "node:path";
 
 // src/guest/runtime/pools.ts
-import os5 from "node:os";
 import { spawn as spawn4 } from "node:child_process";
 import path31 from "node:path";
 
@@ -30780,7 +30811,7 @@ function installerRetry(code, attempt) {
 }
 
 // src/shared/concurrency/pools.ts
-var net2 = new Limiter(4, "net");
+var net2 = new Limiter(3, "net");
 var heavy = new Limiter(2, "heavy");
 var installer = new Limiter(1, "installer");
 
@@ -30789,14 +30820,7 @@ function installPools() {
   downloader.limit = net2;
   limitExtraction(heavy);
 }
-var BELOW_NORMAL = os5.constants.priority.PRIORITY_BELOW_NORMAL;
-function belowNormal(pid) {
-  if (pid === void 0) return;
-  try {
-    os5.setPriority(pid, BELOW_NORMAL);
-  } catch {
-  }
-}
+var belowNormal = lowerPriority;
 async function runInstaller(file3, args, o = {}) {
   for (let attempt = 1; ; attempt++) {
     const code = await installer.run(
@@ -30822,7 +30846,7 @@ async function runInstallerChecked(file3, args, o = {}) {
     throw new Error(path31.basename(file3) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
 function execHeavy(file3, args, options = {}) {
-  return heavy.run(() => execAsync(file3, args, options));
+  return heavy.run(() => execAsync(file3, args, { ...options, lowPriority: true }));
 }
 
 // src/guest/toolchains/installers.ts
@@ -30832,7 +30856,10 @@ import path32 from "node:path";
 // src/guest/toolchains/signature.ts
 var SignatureSchema = external_exports.object({ subject: external_exports.string().max(4096), issuer: external_exports.string().max(4096) });
 function signatureOf(file3) {
-  const text2 = scriptOutput("get-signature.ps1", ["-Path", file3]).trim();
+  return parseSignature(scriptOutput("get-signature.ps1", ["-Path", file3]));
+}
+function parseSignature(output3) {
+  const text2 = output3.trim();
   if (!text2) return null;
   try {
     const parsed = SignatureSchema.safeParse(JSON.parse(text2));
@@ -30844,11 +30871,14 @@ function signatureOf(file3) {
 function signedBy(file3, signer) {
   return signerMatches(signatureOf(file3), signer);
 }
+async function signedByAsync(file3, signer) {
+  return signerMatches(parseSignature(await scriptOutputAsync("get-signature.ps1", ["-Path", file3])), signer);
+}
 
 // src/guest/toolchains/installers.ts
 function signatureCheck(signer, what) {
-  return (file3) => {
-    if (!signedBy(file3, signer)) throw new Error(what + " is not signed by its vendor");
+  return async (file3) => {
+    if (!await signedByAsync(file3, signer)) throw new Error(what + " is not signed by its vendor");
   };
 }
 async function signedInstaller(url2, file3, what, signer, sha256 = null) {
@@ -30857,7 +30887,7 @@ async function signedInstaller(url2, file3, what, signer, sha256 = null) {
     mkdirp(path32.dirname(file3));
     await downloader.file(url2, file3, { sha256, verify: signatureCheck(signer, path32.basename(file3)) });
   }
-  if (!signedBy(file3, signer)) {
+  if (!await signedByAsync(file3, signer)) {
     fs20.rmSync(file3, { force: true });
     throw new Error(
       path32.basename(file3) + " is not signed by its vendor; deleted it (it is downloaded again next boot)"
@@ -30965,6 +30995,18 @@ function savedEntries() {
 function restoreLauncherItems() {
   return restoreItems(SAVED_MANIFESTS, launcherManifestsDir(programData()), ENGINES_DIR, exists);
 }
+function writePcLauncherItems(items) {
+  const dir = launcherManifestsDir(programData());
+  let written = 0;
+  for (const i of items) {
+    if (i.kind !== "unreal" || !i.launcherItem || !ITEM_NAME.test(i.launcherItem.name)) continue;
+    const at = itemInstallLocation(i.launcherItem.text);
+    if (!at || path34.win32.resolve(at).toLowerCase() !== path34.win32.resolve(i.guest).toLowerCase()) continue;
+    fs21.writeFileSync(path34.join(mkdirp(dir), i.launcherItem.name), i.launcherItem.text, "utf8");
+    written++;
+  }
+  return written;
+}
 function writeLauncherEntries(entries3) {
   if (!entries3.length) return;
   const file3 = launcherInstalledFile(programData());
@@ -31029,6 +31071,7 @@ async function registerEngines(engines, selectorFrom, ctx, aliases = []) {
   ];
   if (values.length) await runScriptWithJsonAsync("set-registry-values.ps1", "PlanFile", { values });
   try {
+    writePcLauncherItems(ctx.pcInstalls.items);
     writeLauncherEntries(launcherEntries(engines, ctx));
   } catch (e) {
     warn("Unreal: the Epic Games Launcher's LauncherInstalled.dat was left as it is (" + errMsg(e) + ")");
@@ -31912,7 +31955,7 @@ async function installFromKept(dest, signer, what) {
   if (!installer2) return null;
   const installed = installedCometExe();
   if (fs29.existsSync(installed)) return installed;
-  if (!signedBy(installer2, signer)) {
+  if (!await signedByAsync(installer2, signer)) {
     fs29.rmSync(path44.join(dest, ".agent-sandbox-app"), { force: true });
     fs29.rmSync(installer2, { force: true });
     throw new Error(what + "'s installer is not signed by its vendor; deleted it (it is downloaded again next boot)");
@@ -32214,7 +32257,7 @@ var MARKER = ".agent-sandbox-app";
 function prefetchedFile(entry, fileName) {
   return path48.join(tool("apps", ...entry.id.split("/")) + ".download", fileName.replace(/[\\/:*?"<>|]/g, "_"));
 }
-var PARALLEL = 3;
+var PARALLEL = 2;
 var AppInstaller = class {
   constructor(env, options, parallel = PARALLEL) {
     this.env = env;
@@ -32235,19 +32278,21 @@ var AppInstaller = class {
     const todo = entries3.filter(
       (e) => !("remote" in e.source) && !("locked" in e.source) && !("store" in e.source) && !("npm" in e.source) && e.id !== "7zip" && (this.options.refresh || !exists(path48.join(tool("apps", ...e.id.split("/")), MARKER)))
     );
-    await Promise.all(
-      todo.map(async (entry) => {
-        try {
-          const d = await resolve(entry);
-          const file3 = prefetchedFile(entry, d.fileName);
-          if (exists(file3)) return;
-          await downloader.file(d.url, file3, {
-            sha256: d.sha256 ?? null,
-            ...entry.signer ? { verify: signatureCheck(entry.signer, d.fileName) } : {}
-          });
-        } catch {
-        }
-      })
+    await asBackground(
+      () => Promise.all(
+        todo.map(async (entry) => {
+          try {
+            const d = await resolve(entry);
+            const file3 = prefetchedFile(entry, d.fileName);
+            if (exists(file3)) return;
+            await downloader.file(d.url, file3, {
+              sha256: d.sha256 ?? null,
+              ...entry.signer ? { verify: signatureCheck(entry.signer, d.fileName) } : {}
+            });
+          } catch {
+          }
+        })
+      )
     );
   }
   /** Installs the entries (7-Zip first: the NSIS apps need it to unpack), then their shortcuts. */
@@ -32304,7 +32349,7 @@ var AppInstaller = class {
       const exe = findExe(dest, entry.exe) ?? (entry.unpack === "chromium" && entry.signer ? await installFromKept(dest, entry.signer, entry.name) : null);
       if (!exe) throw new Error(entry.exe + " not found in the download");
       await afterInstall(entry, exe);
-      if (!entry.service && (entry.cli || entry.id === "sysinternals")) {
+      if (!entry.service && (entry.cli || entry.onPath || entry.id === "sysinternals")) {
         if (entry.id === "rust-analyzer") this.env.prepend.unshift(path48.dirname(exe));
         else this.env.prepend.push(path48.dirname(exe));
       }
@@ -35406,7 +35451,7 @@ async function setupVcRuntime(env, summary = true) {
       log("Downloading the Visual C++ runtime (~25 MB once) ...");
       await downloadFile(VC_REDIST, installer2);
     }
-    if (!signedBy(installer2, SIGNERS.microsoft)) {
+    if (!await signedByAsync(installer2, SIGNERS.microsoft)) {
       fs56.rmSync(installer2, { force: true });
       throw new Error("vc_redist.x64.exe is not signed by Microsoft; deleted it (it is downloaded again next boot)");
     }
@@ -38645,7 +38690,7 @@ function plan(config3, versions, o) {
 
 // src/guest/toolchains/step-scheduler.ts
 import { AsyncLocalStorage as AsyncLocalStorage4 } from "node:async_hooks";
-var PARALLEL2 = 4;
+var PARALLEL2 = 3;
 async function runReported(sink2, name, env, work) {
   try {
     await work();