windows-development-sandbox 1.4.0 → 1.4.3

package/dist/selftest/{live.js → support/live.js}

@@ -6,9 +6,9 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { spawn } from 'node:child_process';
-import { ensureDir, sleep } from '../core/util.js';
-import { connect, encodeFrame, FrameReader, FrameType, helloFrame, queryViewers } from '../shared/pty-client.js';
-import { readJsonFile, writeJsonAtomic } from '../shared/rundir.js';
+import { ensureDir, sleep } from '../../core/util/index.js';
+import { connect, encodeFrame, FrameReader, FrameType, helloFrame, queryViewers, } from '../../shared/pty/index.js';
+import { readJsonFile, writeJsonAtomic } from '../../shared/io/index.js';
 const WINDIR = process.env.WINDIR ?? 'C:\\Windows';
 export const CSC = path.join(WINDIR, 'Microsoft.NET', 'Framework64', 'v4.0.30319', 'csc.exe');
 /** Live suites need Windows (ConPTY) and the .NET Framework compiler that ships with it. */
@@ -49,7 +49,9 @@ export const openViewer = async (attach, options = {}) => {
         }
     });
     socket.on('error', () => undefined);
-    socket.on('close', () => { closed = true; });
+    socket.on('close', () => {
+        closed = true;
+    });
     socket.write(helloFrame(options.token ?? attach.token, options.cols ?? 100, options.rows ?? 30));
     return {
         socket,
@@ -57,7 +59,9 @@ export const openViewer = async (attach, options = {}) => {
         exitCode: () => exitCode,
         error: () => error,
         closed: () => closed,
-        type: (text) => { socket.write(encodeFrame(FrameType.Input, Buffer.from(text + '\r'))); },
+        type: (text) => {
+            socket.write(encodeFrame(FrameType.Input, Buffer.from(text + '\r')));
+        },
         close: () => socket.destroy(),
     };
 };
@@ -77,10 +81,25 @@ export const startDaemon = (t, f, options) => {
     const { launchPath, data } = options;
     const output = t.at(path.basename(data) + '-daemon.out');
     const fd = fs.openSync(output, 'w');
-    const env = { ...process.env, AGENT_LAUNCH_DIR: launchPath, AGENT_DATA_DIR: data, AGENT_WORKSPACE: options.workspace, AGENT_LOCAL_DIR: f.at(path.basename(data) + '-local'), AGENT_LOG_PREFIX: 'daemon', AGENT_NO_TABS: '1', ...options.env };
-    const child = spawn(process.execPath, [path.join(launchPath, 'runtime', 'daemon.js')], { env, stdio: ['ignore', fd, fd], windowsHide: true });
+    const env = {
+        ...process.env,
+        AGENT_LAUNCH_DIR: launchPath,
+        AGENT_DATA_DIR: data,
+        AGENT_WORKSPACE: options.workspace,
+        AGENT_LOCAL_DIR: f.at(path.basename(data) + '-local'),
+        AGENT_LOG_PREFIX: 'daemon',
+        AGENT_NO_TABS: '1',
+        ...options.env,
+    };
+    const child = spawn(process.execPath, [path.join(launchPath, 'runtime', 'daemon.js')], {
+        env,
+        stdio: ['ignore', fd, fd],
+        windowsHide: true,
+    });
     let exited = false;
-    child.on('exit', () => { exited = true; });
+    child.on('exit', () => {
+        exited = true;
+    });
     const run = path.join(data, 'run');
     const status = (id) => readJsonFile(path.join(run, 'sessions', id + '.json'));
     return {
@@ -89,7 +108,10 @@ export const startDaemon = (t, f, options) => {
         request: (body) => writeJsonAtomic(path.join(run, 'requests', body.id + '.json'), { createdAt: new Date().toISOString(), ...body }),
         response: (id, ms = WAIT.response) => t.waitFor(() => readJsonFile(path.join(run, 'responses', id + '.json')), ms),
         status,
-        started: (id, ms = WAIT.start) => t.waitFor(() => { const s = status(id); return s && s.phase !== 'starting' ? s : null; }, ms),
+        started: (id, ms = WAIT.start) => t.waitFor(() => {
+            const s = status(id);
+            return s && s.phase !== 'starting' ? s : null;
+        }, ms),
         diagnostics: () => {
             const logs = path.join(data, 'logs');
             const files = fs.existsSync(logs) ? fs.readdirSync(logs).filter((n) => n.startsWith('daemon')) : [];
@@ -103,7 +125,9 @@ export const startDaemon = (t, f, options) => {
             try {
                 fs.closeSync(fd);
             }
-            catch { /* already closed */ }
+            catch {
+                /* already closed */
+            }
         },
     };
 };

package/dist/selftest/support/suite.js

@@ -0,0 +1 @@
+export {};

package/dist/selftest/sync.test.d.ts

@@ -1,2 +1,2 @@
-import type { Suite } from './suite.js';
+import type { Suite } from './support/suite.js';
 export declare const syncSuite: Suite;

package/dist/selftest/sync.test.js

@@ -2,9 +2,10 @@
 // the sandbox can never send anything but transcripts and databases back.
 import fs from 'node:fs';
 import path from 'node:path';
-import { syncClaudeMem } from '../sync/claude-mem.js';
-import { readSyncState, syncHistoryIn, syncHistoryOut, syncStatePath, translatePaths } from '../sync/history.js';
-import { beatLife, endLife, explainStop, lastStopWarning, startLife } from '../host/stops.js';
+import { syncClaudeMem } from '../sync/index.js';
+import { readSyncState, syncStatePath } from '../sync/index.js';
+import { syncHistoryIn, syncHistoryOut, translatePaths } from '../sync/index.js';
+import { crashReportText, explainStop, LifeRecord } from '../host/life/index.js';
 export const syncSuite = {
     name: 'sync',
     title: 'history and claude-mem sync',
@@ -27,11 +28,13 @@ export const syncSuite = {
         t.check(!fs.existsSync(path.join(guestDot, 'projects', 'C--Other')) && !fs.existsSync(path.join(guestDot, 'todos')), 'history in (scope "project"): other projects\' conversations and session files stay on this PC');
         const promptIn = fs.readFileSync(path.join(guestDot, 'history.jsonl'), 'utf8');
         t.includes(promptIn, 'C:\\\\Workspace\\\\my-app', 'prompt history in: project paths are translated');
-        t.excludes(promptIn, 'secret plan', 'prompt history in: other projects\' prompts stay on this PC');
+        t.excludes(promptIn, 'secret plan', "prompt history in: other projects' prompts stay on this PC");
         const wide = { ...sides, guestClaudeDir: t.at('sync-guest-all') };
         syncHistoryIn(wide, { scope: 'all' });
-        t.check(fs.existsSync(path.join(wide.guestClaudeDir, 'projects', 'C--Other', 's2.jsonl')) && fs.existsSync(path.join(wide.guestClaudeDir, 'todos', 's1.json')), 'history in (scope "all"): everything comes in');
-        // The sandbox adds to the transcript (with a half-written last line), a new transcript, a prompt, and things that must not come back.
+        t.check(fs.existsSync(path.join(wide.guestClaudeDir, 'projects', 'C--Other', 's2.jsonl')) &&
+            fs.existsSync(path.join(wide.guestClaudeDir, 'todos', 's1.json')), 'history in (scope "all"): everything comes in');
+        // The sandbox adds to the transcript (with a half-written last line), a new transcript, a prompt, and things that
+        // must not come back.
         const guestTranscript = path.join(guestProject, 's1.jsonl');
         fs.appendFileSync(guestTranscript, '{"cwd":"C:\\\\Workspace\\\\my-app","t":2}\n{"partial":');
         t.touch(guestTranscript);
@@ -69,9 +72,18 @@ export const syncSuite = {
         t.equal(fs.readFileSync(path.join(hostile.hostClaudeDir, 'history.jsonl'), 'utf8'), '{"display":"ok","timestamp":2,"project":"D:\\\\Code\\\\my-app"}\n', 'only JSON prompt-history entries of this project come back from the sandbox, nothing else it wrote in that file');
         t.section('sync state file');
         const stateData = t.at('state-storage', 'data', 'd');
-        t.writeJson(syncStatePath(stateData), { hostClaudeDir: 'relative\\.claude', hostWorkspace: 'D:\\x', guestWorkspace: 'C:\\x' });
+        t.writeJson(syncStatePath(stateData), {
+            hostClaudeDir: 'relative\\.claude',
+            hostWorkspace: 'D:\\x',
+            guestWorkspace: 'C:\\x',
+        });
         t.equal(readSyncState(stateData), null, 'a sync state that points at a relative folder is ignored');
-        t.writeJson(syncStatePath(stateData), { hostClaudeDir: t.at('c'), hostWorkspace: 'D:\\x', guestWorkspace: 'C:\\x', syncHistory: true });
+        t.writeJson(syncStatePath(stateData), {
+            hostClaudeDir: t.at('c'),
+            hostWorkspace: 'D:\\x',
+            guestWorkspace: 'C:\\x',
+            syncHistory: true,
+        });
         t.equal(readSyncState(stateData)?.syncHistory, true, 'a valid sync state is read');
         t.section('claude-mem sync');
         const memHost = t.at('mem-host');
@@ -83,13 +95,14 @@ export const syncSuite = {
         t.equal(syncClaudeMem(memHost, memGuest, memState, 'in'), 'copied-in', 'claude-mem in: the folder is copied into the sandbox store');
         t.equal(fs.readFileSync(path.join(memGuest, 'claude-mem.db'), 'utf8'), 'host-v1', 'claude-mem in: the database arrives');
         t.check(fs.existsSync(path.join(memGuest, 'chroma', 'index.pickle')), 'claude-mem in: the whole folder arrives, vector store included');
-        // The sandbox changes its database and plants other files. (Changes are detected by modified time, so make them clearly newer.)
+        // The sandbox changes its database and plants other files. (Changes are detected by modified time, so make them
+        // clearly newer.)
         const guestDb = t.write(path.join(memGuest, 'claude-mem.db'), 'guest-v2');
         t.touch(guestDb, 10);
         t.write(path.join(memGuest, 'settings.json'), '{"evil":true}');
         t.write(path.join(memGuest, 'chroma', 'index.pickle'), 'PICKLE-PAYLOAD');
         t.write(path.join(memGuest, 'payload.exe'), 'MZ');
-        t.equal(syncClaudeMem(memHost, memGuest, memState, 'out'), 'copied-out', 'claude-mem out: the sandbox\'s database comes back');
+        t.equal(syncClaudeMem(memHost, memGuest, memState, 'out'), 'copied-out', "claude-mem out: the sandbox's database comes back");
         t.equal(fs.readFileSync(hostDb, 'utf8'), 'guest-v2', 'claude-mem out: this PC now has the new database');
         t.equal(fs.readFileSync(path.join(memHost, 'settings.json'), 'utf8'), '{"host":true}', 'claude-mem out: settings never come back');
         t.equal(fs.readFileSync(path.join(memHost, 'chroma', 'index.pickle'), 'utf8'), 'host-index', 'claude-mem out: the pickle-based vector store never comes back');
@@ -99,36 +112,61 @@ export const syncSuite = {
         t.touch(t.write(path.join(memGuest, 'claude-mem.db'), 'guest-v3'), 30);
         t.touch(t.write(hostDb, 'host-v3'), 30);
         t.equal(syncClaudeMem(memHost, memGuest, memState, 'out'), 'conflict', 'claude-mem: both sides changed is reported as a conflict');
-        t.check(fs.readdirSync(t.temp).some((name) => name.startsWith('mem-host.conflict-')), 'claude-mem: this PC\'s database is kept as .conflict-<time> first', fs.readdirSync(t.temp).join(', '));
+        t.check(fs.readdirSync(t.temp).some((name) => name.startsWith('mem-host.conflict-')), "claude-mem: this PC's database is kept as .conflict-<time> first", fs.readdirSync(t.temp).join(', '));
         t.section('how the last sandbox ended');
         const ev = (id, provider, at, process = '') => ({ id, provider, at, process });
-        t.equal(explainStop([ev(1074, 'User32', '2026-10-13T02:10:30Z', 'C:\\Windows\\servicing\\TrustedInstaller.exe (HOST)')])?.kind, 'updates', 'a restart by Windows Update is recognised');
+        t.equal(explainStop([ev(1074, 'User32', '2026-10-13T02:10:30Z', 'C:\\Windows\\servicing\\TrustedInstaller.exe (HOST)')])
+            ?.kind, 'updates', 'a restart by Windows Update is recognised');
         t.equal(explainStop([ev(1074, 'User32', '2026-10-13T02:10:30Z', 'C:\\Windows\\System32\\winlogon.exe (HOST)')])?.text, 'this PC was restarted or shut down (by winlogon.exe)', 'another restart names the program');
-        t.equal(explainStop([ev(41, 'Microsoft-Windows-Kernel-Power', '2026-10-13T02:20:00Z'), ev(42, 'Microsoft-Windows-Kernel-Power', '2026-10-13T02:10:00Z')])?.kind, 'sleep', 'the first event counts (sleep, then a crash)');
+        t.equal(explainStop([
+            ev(41, 'Microsoft-Windows-Kernel-Power', '2026-10-13T02:20:00Z'),
+            ev(42, 'Microsoft-Windows-Kernel-Power', '2026-10-13T02:10:00Z'),
+        ])?.kind, 'sleep', 'the first event counts (sleep, then a crash)');
         t.equal(explainStop([ev(2004, 'Microsoft-Windows-Resource-Exhaustion-Detector', '2026-10-13T02:10:00Z')])?.kind, 'memory', 'low memory is recognised');
         t.equal(explainStop([ev(41, 'SomethingElse', '2026-10-13T02:10:00Z')]), null, 'the same event id from another source is ignored');
         // The message Hyper-V logged on 13 Oct 2026 when Windows inside the sandbox crashed.
         const crashMessage = "'8abb707a-972e-42e2-9599-01d125d4595c' has encountered a fatal error.  The guest operating system reported that it failed with the following error codes: ErrorCode0: 0x1A, ErrorCode1: 0x13003, ErrorCode2: 0x2346E5, ErrorCode3: 0x1";
         t.equal(explainStop([ev(18590, 'Microsoft-Windows-Hyper-V-Worker', '2026-10-13T08:49:08Z', crashMessage)])?.text, 'Windows inside the sandbox crashed (stop code 0x1A, 0x13003)', 'a crash of Windows inside the sandbox is recognised, with its stop code');
-        t.equal(explainStop([ev(24, 'Microsoft-Windows-TerminalServices-LocalSessionManager', '2026-10-13T08:41:40Z', 'PC\\Admin')]), null, 'switching user is not taken for the cause (the sandbox keeps running)');
+        t.equal(explainStop([
+            ev(24, 'Microsoft-Windows-TerminalServices-LocalSessionManager', '2026-10-13T08:41:40Z', 'PC\\Admin'),
+        ]), null, 'switching user is not taken for the cause (the sandbox keeps running)');
+        const bugcheck = ev(1001, 'Microsoft-Windows-WER-SystemErrorReporting', '2026-10-13T19:55:00Z', 'The computer has rebooted from a bugcheck.  The bugcheck was: 0x0000001a (0x0000000000041792, 0x0, 0x0, 0x0).');
+        t.equal(explainStop([bugcheck])?.text, 'this PC blue-screened (stop code 0x0000001a)', 'a blue screen of this PC is recognised, with its stop code');
+        const report = crashReportText({
+            kind: 'sandboxCrash',
+            at: '2026-10-13T08:49:08Z',
+            text: 'Windows inside the sandbox crashed (stop code 0x1A, 0x13003)',
+        }, [ev(18590, 'Microsoft-Windows-Hyper-V-Worker', '2026-10-13T08:49:08Z', crashMessage)], 'time | RAM\n20:50:28 | 16847/32767 | 23552/49151 | rustc 2535\x1b]52;c;evil\x07\n', '2026-10-13T08:48:30Z');
+        t.check(report.includes('stop code 0x1A, 0x13003') &&
+            report.includes('Hyper-V-Worker 18590') &&
+            report.includes('20:50:28 | 16847/32767'), 'the crash report has what happened, the Windows events and the last memory samples', report);
+        t.excludes(report, '\x1b]52', "the sandbox's memory log is shown without escape codes");
         const lifeRoot = t.at('life-storage');
         const lifeData = path.join(lifeRoot, 'data', 'testdata');
         const noEvents = () => null;
-        t.equal(lastStopWarning(lifeRoot, lifeData, false, noEvents), null, 'no record: nothing to say');
-        startLife(lifeRoot, lifeData, true, new Date('2026-10-12T20:16:00Z'));
-        beatLife(lifeRoot, lifeData, new Date('2026-10-13T02:09:00Z'));
-        t.equal(lastStopWarning(lifeRoot, lifeData, true, noEvents), null, 'its watcher still runs: the sandbox has not ended');
+        const life = new LifeRecord(lifeRoot, lifeData);
+        t.equal(life.lastStopWarning(false, noEvents), null, 'no record: nothing to say');
+        life.start(true, new Date('2026-10-12T20:16:00Z'));
+        life.beat(new Date('2026-10-13T02:09:00Z'));
+        t.equal(life.lastStopWarning(true, noEvents), null, 'its watcher still runs: the sandbox has not ended');
         let since = '';
-        const warning = lastStopWarning(lifeRoot, lifeData, false, (s) => { since = s; return { kind: 'updates', at: '2026-10-13T02:10:30Z', text: 'Windows restarted this PC to install updates' }; });
+        const warning = life.lastStopWarning(false, (s) => {
+            since = s;
+            return { kind: 'updates', at: '2026-10-13T02:10:30Z', text: 'Windows restarted this PC to install updates' };
+        });
         t.includes(warning ?? '', 'Windows restarted this PC to install updates', 'the PC stopped under a running sandbox: the next launch says why');
         t.includes(warning ?? '', 'Pause updates', '... and what keeps it from happening again');
         t.equal(since, '2026-10-13T02:09:00.000Z', 'the System log is read from the last time the sandbox was seen running');
-        t.equal(lastStopWarning(lifeRoot, lifeData, false, noEvents), null, 'said once only');
-        startLife(lifeRoot, lifeData, true);
-        endLife(lifeRoot, lifeData, null);
-        t.equal(lastStopWarning(lifeRoot, lifeData, false, noEvents), null, 'closed while this PC ran (by you): nothing to say');
-        startLife(lifeRoot, lifeData, true);
-        endLife(lifeRoot, lifeData, { kind: 'sleep', at: '2026-10-13T02:10:00Z', text: 'this PC went to sleep or hibernated' });
-        t.includes(lastStopWarning(lifeRoot, lifeData, false, noEvents) ?? '', 'sandbox.keepAwake', 'ended by sleep: the next launch names keepAwake');
+        t.equal(life.lastStopWarning(false, noEvents), null, 'said once only');
+        life.start(true);
+        life.end(null);
+        t.equal(life.lastStopWarning(false, noEvents), null, 'closed while this PC ran (by you): nothing to say');
+        life.start(true);
+        life.end({
+            kind: 'sleep',
+            at: '2026-10-13T02:10:00Z',
+            text: 'this PC went to sleep or hibernated',
+        });
+        t.includes(life.lastStopWarning(false, noEvents) ?? '', 'sandbox.keepAwake', 'ended by sleep: the next launch names keepAwake');
     },
 };

package/dist/selftest/test-guard.test.d.ts

@@ -1,2 +1,2 @@
-import type { Suite } from './suite.js';
+import type { Suite } from './support/suite.js';
 export declare const testGuardSuite: Suite;

package/dist/selftest/test-guard.test.js

@@ -4,41 +4,69 @@
 import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
-import { saveAccount } from '../host/accounts.js';
-import { sendRequest } from '../host/channel.js';
-import { hostClaude, spawnDetached, startSandbox } from '../host/platform.js';
-import { hideSandboxWindow, showSandboxWindow } from '../host/window.js';
-import { ensureTerminal, syncPwshProfile } from '../host/terminal.js';
-import { safeRemove } from '../shared/safe-remove.js';
-import { writeJsonAtomic } from '../shared/rundir.js';
-import { syncClaudeMem } from '../sync/claude-mem.js';
-import { syncHistoryIn, syncHistoryOut } from '../sync/history.js';
-import { watch } from '../sync/watcher.js';
+import { AccountStore } from '../host/profile/index.js';
+import { SandboxChannel } from '../host/channel/index.js';
+import { hostClaude } from '../host/sandbox/index.js';
+import { spawnDetached, startSandbox } from '../host/sandbox/index.js';
+import { hideSandboxWindow, showSandboxWindow } from '../host/sandbox/index.js';
+import { ensureTerminal, syncPwshProfile } from '../host/tools/index.js';
+import { safeRemove } from '../shared/io/index.js';
+import { writeJsonAtomic } from '../shared/io/index.js';
+import { syncClaudeMem } from '../sync/index.js';
+import { syncHistoryIn, syncHistoryOut } from '../sync/index.js';
+import { watch } from '../sync/index.js';
 export const testGuardSuite = {
     name: 'test-guard',
     title: 'the self-test refuses to act on this PC',
     run: async (t) => {
         t.check(process.env.AGENT_SANDBOX_SELFTEST === '1', 'the self-test guard is switched on for the whole run');
         const real = path.join(os.homedir(), 'agent-sandbox-selftest-guard-probe');
-        const sides = { hostClaudeDir: real, guestClaudeDir: t.at('guard-guest'), hostWorkspace: 'D:\\Code\\my-app', guestWorkspace: 'C:\\Workspace\\my-app' };
+        const sides = {
+            hostClaudeDir: real,
+            guestClaudeDir: t.at('guard-guest'),
+            hostWorkspace: 'D:\\Code\\my-app',
+            guestWorkspace: 'C:\\Workspace\\my-app',
+        };
         const guardData = t.at('guard-data', 'data', 'd');
         const login = t.write(t.at('guard-login', '.credentials.json'), '{"claudeAiOauth":{}}');
         const blocked = [
             ['start Windows Sandbox', () => startSandbox(t.at('storage', 'agent.wsb'))],
-            ['start the background watcher process', () => spawnDetached(path.join(t.packageRoot, 'dist', 'bin', 'sandbox.js'), ['_watch'])],
+            [
+                'start the background watcher process',
+                () => spawnDetached(path.join(t.packageRoot, 'dist', 'bin', 'sandbox.js'), ['_watch']),
+            ],
             ['run Claude Code on this PC', () => hostClaude(t.at('storage'), false, ['--version'])],
             ['hide windows', () => hideSandboxWindow(t.at('storage'), 1)],
             ['show windows', () => showSandboxWindow(t.at('storage'))],
-            ['shut down Windows Sandbox', () => sendRequest(guardData, { kind: 'exec', id: 'sd', command: ['C:\\Windows\\System32\\shutdown.exe', '/s'], cwd: 'C:\\', timeoutSeconds: 5, createdAt: '' })],
+            [
+                'shut down Windows Sandbox',
+                () => new SandboxChannel(guardData).send({
+                    kind: 'exec',
+                    id: 'sd',
+                    command: ['C:\\Windows\\System32\\shutdown.exe', '/s'],
+                    cwd: 'C:\\',
+                    timeoutSeconds: 5,
+                    createdAt: '',
+                }),
+            ],
             ['start the background sync', () => watch(t.at('storage', 'data', 'w'))],
             ['write Windows Terminal settings', () => syncPwshProfile(real, true)],
             ['download Windows Terminal into a profile', () => ensureTerminal(real, true)],
             ['sync history into the real profile', () => syncHistoryOut(sides)],
             ['sync history into the sandbox state in a profile', () => syncHistoryIn({ ...sides, guestClaudeDir: real })],
-            ['sync claude-mem into the real profile', () => syncClaudeMem(real, t.at('mem-store'), { hostClaudeDir: real, hostWorkspace: 'D:\\x', guestWorkspace: 'C:\\x' }, 'out')],
+            [
+                'sync claude-mem into the real profile',
+                () => syncClaudeMem(real, t.at('mem-store'), { hostClaudeDir: real, hostWorkspace: 'D:\\x', guestWorkspace: 'C:\\x' }, 'out'),
+            ],
             ['write a state file in a profile', () => writeJsonAtomic(path.join(real, 'x.json'), {})],
             ['delete in a profile', () => safeRemove(path.join(real, 'x'), os.homedir())],
-            ['save a login into a profile', () => saveAccount(real, t.at('acct-storage', 'data', 'd'), 'work', { claudeDir: path.dirname(login), globalStateFile: t.at('guard-login', '.claude.json') })],
+            [
+                'save a login into a profile',
+                () => new AccountStore(real).save(t.at('acct-storage', 'data', 'd'), 'work', {
+                    claudeDir: path.dirname(login),
+                    globalStateFile: t.at('guard-login', '.claude.json'),
+                }),
+            ],
         ];
         for (const [what, action] of blocked)
             await t.throws(async () => action(), /self-test/i, 'self-test mode refuses to ' + what);

package/dist/selftest/toolchains.test.d.ts

@@ -1,2 +1,2 @@
-import type { Suite } from './suite.js';
+import type { Suite } from './support/suite.js';
 export declare const toolchainsSuite: Suite;

package/dist/selftest/toolchains.test.js

@@ -1,51 +1,97 @@
 // Picking tool versions and release assets: Node/Go/Python/Java version rules, GitHub release pages, PowerShell 7,
 // cargo-binstall, the small CLI tools (gh, zstd, openssl), and when PowerShell 7 is wanted.
 import path from 'node:path';
-import { javaMajorFrom, pickGoRelease, pickNodeVersion, pickPackageVersion, pickSpreadVersions, projectUses, specFromVersionFile } from '../guest/toolchains/versions.js';
-import { parseReleasePage, parseReleaseTags } from '../shared/download.js';
-import { decidePwsh, pcHasPwsh, PWSH_MAX_BYTES, readPwshScripts, usesPwsh } from '../core/detect-pwsh.js';
+import { javaMajorFrom, pickGoRelease, pickNodeVersion, pickPackageVersion, pickSpreadVersions, projectUses, specFromVersionFile, } from '../core/detect/index.js';
+import { parseReleasePage, parseReleaseTags } from '../shared/download/index.js';
+import { decidePwsh, pcHasPwsh, PWSH_MAX_BYTES, readPwshScripts, usesPwsh } from '../core/detect/index.js';
 import { binstallAsset, CLI_TOOLS, decideCli, pwshAsset } from '../guest/toolchains/catalogue.js';
-import { missingExtensions, vscodeExtensions, vscodeSettings } from '../guest/toolchains/vscode-profile.js';
-import { APP_CATEGORIES, APPS, appsNeedMesa, appsToInstall, exeMatcher } from '../shared/apps.js';
-import { Config, LocalOverrides } from '../core/schema.js';
+import { missingExtensions, vscodeExtensions, vscodeSettings } from '../guest/toolchains/tools/vscode-profile.js';
+import { APP_CATEGORIES, APPS, appsNeedMesa, appsToInstall, exeMatcher } from '../shared/apps/index.js';
+import { ConfigSchema, LocalOverridesSchema } from '../core/schema/index.js';
 export const toolchainsSuite = {
     name: 'toolchains',
     title: 'version pickers, release assets, PowerShell 7 and CLI tool decisions',
     run: (t) => {
         t.section('version pickers');
-        const releases = [{ version: 'v23.1.0', lts: false }, { version: 'v22.11.0', lts: 'Jod' }, { version: 'v20.18.0', lts: 'Iron' }, { version: 'v20.9.0', lts: 'Iron' }];
+        const releases = [
+            { version: 'v23.1.0', lts: false },
+            { version: 'v22.11.0', lts: 'Jod' },
+            { version: 'v20.18.0', lts: 'Iron' },
+            { version: 'v20.9.0', lts: 'Iron' },
+        ];
         const node = (spec) => pickNodeVersion(releases, spec);
         t.equal([node('lts/*'), node('lts/iron'), node('20'), node('v20.9.0'), node('node'), node('99')], ['22.11.0', '20.18.0', '20.18.0', '20.9.0', '23.1.0', null], '.nvmrc specs resolve (lts/*, lts/<name>, major, exact, node)');
         const installed = ['16.20.2', '18.19.0', '18.20.4', '20.18.0', '22.3.0', '22.11.0', '23.1.0', 'notes'];
         t.equal(pickSpreadVersions(installed, '22.11.0', 3), ['22.11.0', '16.20.2', '23.1.0'], 'host nvm versions: capped, the current one first, the rest spread across other majors');
         t.equal(pickSpreadVersions(['20.18.0'], '22.3.0', 3), ['22.3.0', '20.18.0'], 'host nvm versions: a missing current version is added first');
         t.equal(pickSpreadVersions(['18.20.4', '20.18.0'], '22.3.0', 1), ['22.3.0'], 'host nvm versions: the cap wins');
-        const go = [{ version: 'go1.24rc1', stable: false, files: [] }, { version: 'go1.23.2', stable: true, files: [] }, { version: 'go1.23.1', stable: true, files: [] }, { version: 'go1.22.8', stable: true, files: [] }];
-        t.equal([pickGoRelease(go, 'stable')?.version, pickGoRelease(go, '1.22')?.version, pickGoRelease(go, 'go1.23.1')?.version, pickGoRelease(go, '1.30')], ['go1.23.2', 'go1.22.8', 'go1.23.1', null], 'Go versions resolve (stable, minor prefix, exact); release candidates are skipped');
-        t.equal([javaMajorFrom('21\n'), javaMajorFrom('17.0.9'), javaMajorFrom('1.8'), javaMajorFrom('temurin-21.0.2'), javaMajorFrom('# sdkman\njava=21.0.2-tem\n', true)], ['21', '17', '8', '21', '21'], 'version files: .java-version and .sdkmanrc');
+        const go = [
+            { version: 'go1.24rc1', stable: false, files: [] },
+            { version: 'go1.23.2', stable: true, files: [] },
+            { version: 'go1.23.1', stable: true, files: [] },
+            { version: 'go1.22.8', stable: true, files: [] },
+        ];
+        t.equal([
+            pickGoRelease(go, 'stable')?.version,
+            pickGoRelease(go, '1.22')?.version,
+            pickGoRelease(go, 'go1.23.1')?.version,
+            pickGoRelease(go, '1.30'),
+        ], ['go1.23.2', 'go1.22.8', 'go1.23.1', null], 'Go versions resolve (stable, minor prefix, exact); release candidates are skipped');
+        t.equal([
+            javaMajorFrom('21\n'),
+            javaMajorFrom('17.0.9'),
+            javaMajorFrom('1.8'),
+            javaMajorFrom('temurin-21.0.2'),
+            javaMajorFrom('# sdkman\njava=21.0.2-tem\n', true),
+        ], ['21', '17', '8', '21', '21'], 'version files: .java-version and .sdkmanrc');
         t.equal(specFromVersionFile('ruby-3.3.1\n'), '3.3.1', 'version files: .ruby-version');
         t.check(projectUses(['README.md', 'server/go.mod'], ['go.mod']) && projectUses(['App.csproj'], ['*.csproj']), 'enabled "auto": a language is used when its marker file is in the workspace or one folder down');
         t.check(!projectUses(['notes.txt', 'docs/readme.md'], ['go.mod', '*.csproj']), 'enabled "auto": a language is not used without its marker file');
         const python = ['3.9.13', '3.12.7', '3.12.10', '3.13.0-rc1', '3.13.1'];
-        t.equal([pickPackageVersion(python, '3'), pickPackageVersion(['3.12.7', '3.12.10'], '3.12'), pickPackageVersion(['2.7.18'], '2.7')], ['3.13.1', '3.12.10', '2.7.18'], 'Python versions resolve to the newest stable match');
+        t.equal([
+            pickPackageVersion(python, '3'),
+            pickPackageVersion(['3.12.7', '3.12.10'], '3.12'),
+            pickPackageVersion(['2.7.18'], '2.7'),
+        ], ['3.13.1', '3.12.10', '2.7.18'], 'Python versions resolve to the newest stable match');
         t.section('GitHub release pages (the fallback when the API is rate limited)');
         const tags = '<a href="/coreybutler/nvm-windows/releases/tag/1.2.2">x</a><a href="/coreybutler/nvm-windows/releases/tag/1.2.2">y</a><a href="/other/repo/releases/tag/9">z</a><a href="/coreybutler/nvm-windows/releases/tag/1.1.12">w</a>';
-        t.equal(parseReleaseTags(tags, 'coreybutler/nvm-windows'), ['1.2.2', '1.1.12'], 'release list page: this repo\'s tags in order, once each');
-        const page = '<a href="/o/r/releases/download/v1/tool-win-x64.zip">x</a><span>sha256:' + 'a'.repeat(64) + '</span><a href="/o/r/releases/download/v1/tool-linux.tar.gz">y</a>';
+        t.equal(parseReleaseTags(tags, 'coreybutler/nvm-windows'), ['1.2.2', '1.1.12'], "release list page: this repo's tags in order, once each");
+        const page = '<a href="/o/r/releases/download/v1/tool-win-x64.zip">x</a><span>sha256:' +
+            'a'.repeat(64) +
+            '</span><a href="/o/r/releases/download/v1/tool-linux.tar.gz">y</a>';
         const assets = parseReleasePage(page);
         t.equal(assets.length, 2, 'release page: both assets are found');
         t.equal(assets[0].url, 'https://github.com/o/r/releases/download/v1/tool-win-x64.zip', 'release page: asset links become full URLs');
-        t.equal([assets[0].sha256, assets[1].sha256], ['a'.repeat(64), null], 'release page: only an asset\'s own sha256 is used');
+        t.equal([assets[0].sha256, assets[1].sha256], ['a'.repeat(64), null], "release page: only an asset's own sha256 is used");
         t.section('release assets per architecture');
         const matching = (pattern, names) => names.filter((n) => pattern.test(n));
-        const pwshNames = ['PowerShell-7.6.6-win-x64.zip', 'PowerShell-7.6.6-win-arm64.zip', 'PowerShell-7.6.6-win-x64.msi', 'PowerShell-7.6.6-win-fxdependent.zip', 'PowerShell-7.6.6-win-x86.zip', 'PowerShell-7.6.6-win-x64.zip.sha256'];
+        const pwshNames = [
+            'PowerShell-7.6.6-win-x64.zip',
+            'PowerShell-7.6.6-win-arm64.zip',
+            'PowerShell-7.6.6-win-x64.msi',
+            'PowerShell-7.6.6-win-fxdependent.zip',
+            'PowerShell-7.6.6-win-x86.zip',
+            'PowerShell-7.6.6-win-x64.zip.sha256',
+        ];
         t.equal(matching(pwshAsset('x64'), pwshNames), ['PowerShell-7.6.6-win-x64.zip'], 'PowerShell 7 (x64): the portable zip, not the MSI, fxdependent or x86 build');
         t.equal(matching(pwshAsset('arm64'), pwshNames), ['PowerShell-7.6.6-win-arm64.zip'], 'PowerShell 7 (arm64): the portable zip');
-        const binstallNames = ['cargo-binstall-x86_64-pc-windows-msvc.zip', 'cargo-binstall-x86_64-pc-windows-msvc.full.zip', 'cargo-binstall-x86_64-pc-windows-msvc.zip.sig', 'cargo-binstall-aarch64-pc-windows-msvc.zip', 'cargo-binstall-x86_64-unknown-linux-musl.tgz'];
+        const binstallNames = [
+            'cargo-binstall-x86_64-pc-windows-msvc.zip',
+            'cargo-binstall-x86_64-pc-windows-msvc.full.zip',
+            'cargo-binstall-x86_64-pc-windows-msvc.zip.sig',
+            'cargo-binstall-aarch64-pc-windows-msvc.zip',
+            'cargo-binstall-x86_64-unknown-linux-musl.tgz',
+        ];
         t.equal(matching(binstallAsset('x64'), binstallNames), ['cargo-binstall-x86_64-pc-windows-msvc.zip'], 'cargo-binstall (x64): the plain Windows zip, not .full or the signature');
         t.equal(matching(binstallAsset('arm64'), binstallNames), ['cargo-binstall-aarch64-pc-windows-msvc.zip'], 'cargo-binstall (arm64): the plain Windows zip');
         const cliAsset = (name, arch, names) => matching(CLI_TOOLS.find((c) => c.name === name).asset(arch), names);
-        const ghNames = ['gh_2.102.0_windows_amd64.zip', 'gh_2.102.0_windows_amd64.msi', 'gh_2.102.0_windows_386.zip', 'gh_2.102.0_windows_arm64.zip', 'gh_2.102.0_linux_amd64.tar.gz'];
+        const ghNames = [
+            'gh_2.102.0_windows_amd64.zip',
+            'gh_2.102.0_windows_amd64.msi',
+            'gh_2.102.0_windows_386.zip',
+            'gh_2.102.0_windows_arm64.zip',
+            'gh_2.102.0_linux_amd64.tar.gz',
+        ];
         const zstdNames = ['zstd-v1.5.7-win64.zip', 'zstd-v1.5.7-win32.zip', 'zstd-v1.5.7.tar.gz'];
         t.equal(cliAsset('gh', 'x64', ghNames), ['gh_2.102.0_windows_amd64.zip'], 'CLI catalogue: gh zip for x64');
         t.equal(cliAsset('gh', 'arm64', ghNames), ['gh_2.102.0_windows_arm64.zip'], 'CLI catalogue: gh zip for arm64');
@@ -53,7 +99,10 @@ export const toolchainsSuite = {
         t.equal(cliAsset('zstd', 'arm64', zstdNames), ['zstd-v1.5.7-win64.zip'], 'CLI catalogue: zstd win64 also serves Arm');
         t.check(CLI_TOOLS.every((c) => c.exe.endsWith('.exe')), 'CLI catalogue: every tool is an .exe');
         t.section('which CLI tools are installed');
-        const cli = (settings, gitAccess, hasGithubDir = false) => Object.entries(decideCli(settings, { gitAccess, hasGithubDir })).filter(([, d]) => d.on).map(([n]) => n).join();
+        const cli = (settings, gitAccess, hasGithubDir = false) => Object.entries(decideCli(settings, { gitAccess, hasGithubDir }))
+            .filter(([, d]) => d.on)
+            .map(([n]) => n)
+            .join();
         t.equal(cli({ gh: true, zstd: true, openssl: true }, 'full'), 'gh,zstd,openssl', 'CLI tools: everything asked for is installed with git access "full"');
         t.equal(cli({ gh: true, zstd: true }, 'readonly'), 'zstd', 'CLI tools: gh needs git access "full" (it pushes through the API), whatever the config says');
         t.equal(cli({ gh: 'auto' }, 'none', true), '', 'CLI tools: no git access, no gh');
@@ -77,7 +126,14 @@ export const toolchainsSuite = {
         t.equal(ps('Write-Host hi'), null, 'not a marker: an ordinary script');
         // Hostile scripts (a cloned repository is untrusted): capped and scanned in linear time.
         const evilStart = Date.now();
-        const evilText = (' #requires' + ' -version'.repeat(5000) + '\n' + 'xpwsh pwsh\t\t'.repeat(20000) + '\n' + ' '.repeat(100000) + 'pwsh\n' + 'pwsh\n'.repeat(50000)).repeat(3);
+        const evilText = (' #requires' +
+            ' -version'.repeat(5000) +
+            '\n' +
+            'xpwsh pwsh\t\t'.repeat(20000) +
+            '\n' +
+            ' '.repeat(100000) +
+            'pwsh\n' +
+            'pwsh\n'.repeat(50000)).repeat(3);
         const evil = usesPwsh(Array.from({ length: 100 }, (_, i) => ({ path: 'a' + i + '.ps1', text: evilText })));
         const evilMs = Date.now() - evilStart;
         t.equal(evil, null, 'hostile scripts (huge lines, endless repeats) do not match');
@@ -103,31 +159,74 @@ export const toolchainsSuite = {
         t.equal(scanned.map((s) => s.path), ['moh.ps1', 'scripts/build.ps1'], 'pwsh scan: *.ps1 at the root and one folder down only (node_modules skipped)');
         t.equal(scanned[1].text.length, PWSH_MAX_BYTES, 'pwsh scan: each script is read up to its cap');
         t.section('VS Code set-up');
-        const vs = vscodeSettings({ javaHome: 'C:\\t\\java\\jdk-17.0.9+9', python: 'C:\\t\\python\\python.exe', pwsh: 'C:\\t\\pwsh\\pwsh.exe', gcc: 'C:\\t\\mingw\\bin\\gcc.exe', cl: 'C:\\t\\msvc\\cl.exe', dotnet: 'C:\\t\\dotnet\\dotnet.exe' });
-        t.equal([vs['java.jdt.ls.java.home'], vs['java.configuration.runtimes'][0].name, vs['python.defaultInterpreterPath'], vs['terminal.integrated.defaultProfile.windows'], vs['C_Cpp.default.compilerPath'], vs['dotnet.dotnetPath']], ['C:\\t\\java\\jdk-17.0.9+9', 'JavaSE-17', 'C:\\t\\python\\python.exe', 'PowerShell 7', 'C:\\t\\msvc\\cl.exe', 'C:\\t\\dotnet'], 'vscode: settings point at the sandbox\'s JDK (with its version), Python, PowerShell 7, compiler (MSVC first) and .NET');
+        const vs = vscodeSettings({
+            javaHome: 'C:\\t\\java\\jdk-17.0.9+9',
+            python: 'C:\\t\\python\\python.exe',
+            pwsh: 'C:\\t\\pwsh\\pwsh.exe',
+            gcc: 'C:\\t\\mingw\\bin\\gcc.exe',
+            cl: 'C:\\t\\msvc\\cl.exe',
+            dotnet: 'C:\\t\\dotnet\\dotnet.exe',
+        });
+        t.equal([
+            vs['java.jdt.ls.java.home'],
+            vs['java.configuration.runtimes'][0].name,
+            vs['python.defaultInterpreterPath'],
+            vs['terminal.integrated.defaultProfile.windows'],
+            vs['C_Cpp.default.compilerPath'],
+            vs['dotnet.dotnetPath'],
+        ], [
+            'C:\\t\\java\\jdk-17.0.9+9',
+            'JavaSE-17',
+            'C:\\t\\python\\python.exe',
+            'PowerShell 7',
+            'C:\\t\\msvc\\cl.exe',
+            'C:\\t\\dotnet',
+        ], "vscode: settings point at the sandbox's JDK (with its version), Python, PowerShell 7, compiler (MSVC first) and .NET");
         t.check(!('go.goroot' in vs) && !('git.path' in vs), 'vscode: tools that are not installed are not set');
-        const ext = vscodeExtensions({ toolchains: ['node', 'java'], databases: ['postgres'], recommended: ['Foo.Bar', 'not an id'], extra: ['eamodio.gitlens', 'redhat.java'] });
-        t.check(ext.includes('redhat.java') && ext.includes('mtxr.sqltools-driver-pg') && ext.includes('foo.bar') && ext.includes('eamodio.gitlens') && !ext.includes('not an id') && ext.filter((e) => e === 'redhat.java').length === 1, 'vscode: extensions for the languages and databases in use, the project\'s and yours (no duplicates, nothing malformed)');
+        const ext = vscodeExtensions({
+            toolchains: ['node', 'java'],
+            databases: ['postgres'],
+            recommended: ['Foo.Bar', 'not an id'],
+            extra: ['eamodio.gitlens', 'redhat.java'],
+        });
+        t.check(ext.includes('redhat.java') &&
+            ext.includes('mtxr.sqltools-driver-pg') &&
+            ext.includes('foo.bar') &&
+            ext.includes('eamodio.gitlens') &&
+            !ext.includes('not an id') &&
+            ext.filter((e) => e === 'redhat.java').length === 1, "vscode: extensions for the languages and databases in use, the project's and yours (no duplicates, nothing malformed)");
         t.equal(missingExtensions(['golang.go', 'redhat.java'], ['golang.go-0.48.0', 'extensions.json']), ['redhat.java'], 'vscode: only extensions not installed yet are downloaded');
         t.section('apps catalogue');
         const ids = APPS.map((a) => a.id);
         t.equal(ids.filter((id, i) => ids.indexOf(id) !== i), [], 'apps: every id is unique');
         t.equal(APPS.filter((a) => !APP_CATEGORIES.some((c) => c.id === a.category)).map((a) => a.id), [], 'apps: every app is in a known category');
-        t.equal(APPS.filter((a) => 'github' in a.source && (() => { try {
-            new RegExp(a.source.asset);
-            return false;
-        }
-        catch {
-            return true;
-        } })()).map((a) => a.id), [], 'apps: every GitHub asset pattern compiles');
-        t.check(exeMatcher('/^Godot_v[\\d.]+-stable_win64\\.exe$/')('Godot_v4.7.2-stable_win64.exe') && !exeMatcher('/^Godot_v[\\d.]+-stable_win64\\.exe$/')('Godot_v4.7.2-stable_win64_console.exe') && exeMatcher('Code.exe')('code.EXE'), 'apps: the program is found by name or by pattern');
-        const chosen = appsToInstall({ install: ['firefox', 'jq', 'githubdesktop'], custom: { mine: { name: 'Mine', url: 'https://example.com/m.zip', exe: 'm.exe' } } }, 'readonly');
+        t.equal(APPS.filter((a) => 'github' in a.source &&
+            (() => {
+                try {
+                    new RegExp(a.source.asset);
+                    return false;
+                }
+                catch {
+                    return true;
+                }
+            })()).map((a) => a.id), [], 'apps: every GitHub asset pattern compiles');
+        t.check(exeMatcher('/^Godot_v[\\d.]+-stable_win64\\.exe$/')('Godot_v4.7.2-stable_win64.exe') &&
+            !exeMatcher('/^Godot_v[\\d.]+-stable_win64\\.exe$/')('Godot_v4.7.2-stable_win64_console.exe') &&
+            exeMatcher('Code.exe')('code.EXE'), 'apps: the program is found by name or by pattern');
+        const chosen = appsToInstall({
+            install: ['firefox', 'jq', 'githubdesktop'],
+            custom: { mine: { name: 'Mine', url: 'https://example.com/m.zip', exe: 'm.exe' } },
+        }, 'readonly');
         t.equal(chosen.entries.map((e) => e.id), ['7zip', 'firefox', 'jq', 'custom/mine'], 'apps: 7-Zip comes first when an installer needs it; your own programs follow');
         t.equal(chosen.skipped.length, 1, 'apps: an app with its own git (GitHub Desktop) is skipped unless git access is "full"');
         t.check(appsNeedMesa({ install: ['godot'], custom: {} }) && !appsNeedMesa({ install: ['jq'], custom: {} }), 'apps: game engines bring Mesa (OpenGL without a GPU) along');
-        const custom = (app) => Config.shape.apps.shape.custom.safeParse({ x: app }).success;
-        t.check(custom({ name: 'A', github: 'o/r', asset: 'win.*\\.zip$', exe: 'a.exe' }) && custom({ name: 'B', url: 'https://x.org/b.zip', exe: 'b.exe' }), 'apps: your own program comes from a GitHub release or an https link');
-        t.check(!custom({ name: 'C', url: 'http://x.org/c.zip', exe: 'c.exe' }) && !custom({ name: 'D', github: 'o/r', asset: '(', exe: 'd.exe' }) && !custom({ name: 'E', github: 'o/r', asset: 'x', url: 'https://x.org', exe: 'e.exe' }), 'apps: plain http, a broken pattern, or both sources are refused');
-        t.check(!LocalOverrides.safeParse({ apps: { custom: {} } }).success && LocalOverrides.safeParse({ apps: { install: ['jq'] } }).success, 'apps: a project file may add catalogue apps but never programs of its own');
+        const custom = (app) => ConfigSchema.shape.apps.shape.custom.safeParse({ x: app }).success;
+        t.check(custom({ name: 'A', github: 'o/r', asset: 'win.*\\.zip$', exe: 'a.exe' }) &&
+            custom({ name: 'B', url: 'https://x.org/b.zip', exe: 'b.exe' }), 'apps: your own program comes from a GitHub release or an https link');
+        t.check(!custom({ name: 'C', url: 'http://x.org/c.zip', exe: 'c.exe' }) &&
+            !custom({ name: 'D', github: 'o/r', asset: '(', exe: 'd.exe' }) &&
+            !custom({ name: 'E', github: 'o/r', asset: 'x', url: 'https://x.org', exe: 'e.exe' }), 'apps: plain http, a broken pattern, or both sources are refused');
+        t.check(!LocalOverridesSchema.safeParse({ apps: { custom: {} } }).success &&
+            LocalOverridesSchema.safeParse({ apps: { install: ['jq'] } }).success, 'apps: a project file may add catalogue apps but never programs of its own');
     },
 };

package/dist/selftest/workspace-view.test.d.ts

@@ -1,2 +1,2 @@
-import type { Suite } from './suite.js';
+import type { Suite } from './support/suite.js';
 export declare const workspaceViewSuite: Suite;