windows-development-sandbox 1.4.1 → 1.5.0

package/dist/guest/apps/find-exe.js

@@ -0,0 +1,41 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { exeMatcher } from '../../shared/apps/index.js';
+const MAX_DEPTH = 7;
+const MAX_ENTRIES = 50000;
+/** A folder for 64-bit x86 builds (zips that ship amd64\ and i386\ copies of the same program). */
+const X64_FOLDER = /(^|[\\/])(amd64|x64|x86_64|win64)([\\/]|$)/i;
+/**
+ * The program in an installed folder (breadth first, bounded: big apps have tens of thousands of files). Of several
+ * copies at the same depth, one in an amd64/x64 folder wins.
+ */
+export function findExe(root, exe) {
+    const match = exeMatcher(exe);
+    const best = (hits) => hits.find((h) => X64_FOLDER.test(path.relative(root, h))) ?? hits[0] ?? null;
+    let queue = [root];
+    let seen = 0;
+    for (let depth = 0; depth < MAX_DEPTH && queue.length; depth++) {
+        const next = [];
+        const hits = [];
+        for (const dir of queue) {
+            let entries;
+            try {
+                entries = fs.readdirSync(dir, { withFileTypes: true });
+            }
+            catch {
+                continue;
+            }
+            const hit = entries.find((e) => e.isFile() && match(e.name));
+            if (hit)
+                hits.push(path.join(dir, hit.name));
+            else
+                next.push(...entries.filter((e) => e.isDirectory() && !e.isSymbolicLink()).map((e) => path.join(dir, e.name)));
+            if ((seen += entries.length) > MAX_ENTRIES)
+                return best(hits);
+        }
+        if (hits.length)
+            return best(hits);
+        queue = next;
+    }
+    return null;
+}

package/dist/guest/apps/index.d.ts

@@ -1,10 +1,3 @@
-import type { Config, GitAccess } from '../../core/types.js';
-import { type ToolEnv } from '../toolchains/common.js';
-export { appsNeedMesa } from '../../shared/apps.js';
-export interface AppsOptions {
-    gitAccess: GitAccess;
-    refresh: boolean;
-}
-/** The program in an installed folder (breadth first, bounded: big apps have tens of thousands of files). */
-export declare const findExe: (root: string, exe: string) => string | null;
-export declare const setupApps: (env: ToolEnv, apps: Config["apps"], o: AppsOptions) => Promise<void>;
+export { appsNeedMesa } from '../../shared/apps/index.js';
+export { setupApps, type AppsOptions } from './app-installer.js';
+export { findExe } from './find-exe.js';

package/dist/guest/apps/index.js

@@ -1,206 +1,6 @@
-// Installs the apps you chose (apps.install from the catalogue, apps.custom of your own) into C:\AgentData\tools\apps,
-// once each: later sandboxes find them there. Programs get a desktop and Start menu shortcut; command-line tools go on
-// PATH. Installers are never run: archives are unpacked, NSIS installers opened with 7-Zip and MSIs extracted
-// (msiexec /a), so nothing is registered and nothing is lost when the sandbox closes. One app failing never stops the
-// others.
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { appsToInstall, exeMatcher } from '../../shared/apps.js';
-import { download, extractArchive, githubAsset, moveIntoPlace, stagingFolder } from '../../shared/download.js';
-import { safeRemove } from '../../shared/safe-remove.js';
-import { SYSTEM } from '../../shared/system.js';
-import { dryRun, errMsg, execAsync, exists, log, mkdirp, powershell, warn } from '../env.js';
-import { arch, tool } from '../toolchains/common.js';
-import { RESOLVERS } from './resolvers.js';
-export { appsNeedMesa } from '../../shared/apps.js';
-const MARKER = '.agent-sandbox-app';
-/** How many apps download and unpack at once (they are big: a few at a time keeps the disk and network busy). */
-const PARALLEL = 3;
-const sevenZip = () => tool('apps', '7zip', '7z.exe');
-/** Where to download an entry from. */
-const resolve = async (entry) => {
-    const s = entry.source;
-    if ('github' in s) {
-        const a = await githubAsset(s.github, new RegExp(s.asset), true);
-        return { url: a.url, fileName: a.name, sha256: a.sha256 };
-    }
-    if ('url' in s) {
-        const name = decodeURIComponent(new URL(s.url).pathname.split('/').pop() || entry.id);
-        return { url: s.url, fileName: /\.\w{2,5}$/.test(name) ? name : name + '.zip' };
-    }
-    if ('resolve' in s && RESOLVERS[s.resolve])
-        return RESOLVERS[s.resolve]();
-    throw new Error('no download source for ' + entry.name);
-};
-/** The program in an installed folder (breadth first, bounded: big apps have tens of thousands of files). */
-export const findExe = (root, exe) => {
-    const match = exeMatcher(exe);
-    let queue = [root];
-    let seen = 0;
-    for (let depth = 0; depth < 7 && queue.length; depth++) {
-        const next = [];
-        for (const dir of queue) {
-            let entries;
-            try {
-                entries = fs.readdirSync(dir, { withFileTypes: true });
-            }
-            catch {
-                continue;
-            }
-            const hit = entries.find((e) => e.isFile() && match(e.name));
-            if (hit)
-                return path.join(dir, hit.name);
-            next.push(...entries.filter((e) => e.isDirectory() && !e.isSymbolicLink()).map((e) => path.join(dir, e.name)));
-            if ((seen += entries.length) > 50000)
-                return null;
-        }
-        queue = next;
-    }
-    return null;
-};
-/** Downloads and unpacks one entry into its folder (replaced in one step: never half there). */
-const installApp = async (entry, dest) => {
-    const work = stagingFolder(dest);
-    const out = path.join(work, 'out');
-    try {
-        if ('npm' in entry.source) {
-            const npmCli = path.join(path.dirname(process.execPath), 'node_modules', 'npm', 'bin', 'npm-cli.js');
-            log('Installing ' + entry.name + ' (npm) ...');
-            await execAsync(process.execPath, [npmCli, 'install', '--prefix', mkdirp(out), '--no-audit', '--no-fund', '--loglevel=error', entry.source.npm]);
-        }
-        else {
-            const d = await resolve(entry);
-            log('Downloading ' + entry.name + ' (' + d.fileName + ', ~' + entry.size + ' once) ...');
-            const file = path.join(mkdirp(work), d.fileName.replace(/[\\/:*?"<>|]/g, '_'));
-            await download(d.url, file, { sha256: d.sha256 ?? null });
-            await unpack(entry, file, out, d);
-        }
-        fs.writeFileSync(path.join(out, MARKER), JSON.stringify({ id: entry.id, at: new Date().toISOString() }));
-        moveIntoPlace(out, dest);
-    }
-    finally {
-        safeRemove(work, path.dirname(work));
-    }
-};
-const unpack = async (entry, file, out, d) => {
-    if (entry.id === '7zip') {
-        // 7zr.exe (the small standalone 7-Zip) opens the full 7-Zip's installer.
-        const sevenZr = path.join(path.dirname(file), '7zr.exe');
-        const zr = await githubAsset('ip7z/7zip', /^7zr\.exe$/);
-        await download(zr.url, sevenZr, zr.sha256);
-        await execAsync(sevenZr, ['x', '-y', '-o' + out, file], { stdio: 'ignore' });
-        return;
-    }
-    switch (entry.unpack ?? 'archive') {
-        case 'file': {
-            mkdirp(out);
-            fs.renameSync(file, path.join(out, /^\//.test(entry.exe) ? path.basename(file) : entry.exe));
-            return;
-        }
-        case 'nsis': {
-            if (!exists(sevenZip()))
-                throw new Error('7-Zip is needed to unpack ' + entry.name + ' and could not be installed');
-            const raw = path.join(path.dirname(out), 'raw');
-            await execAsync(sevenZip(), ['x', '-y', '-o' + raw, file], { stdio: 'ignore' });
-            // electron-builder installers carry the app as one more archive inside.
-            const inner = findExe(raw, '/^app-64\\.7z$/');
-            if (inner)
-                await execAsync(sevenZip(), ['x', '-y', '-o' + out, inner], { stdio: 'ignore' });
-            else
-                fs.renameSync(raw, out);
-            return;
-        }
-        case 'msi': {
-            // An administrative install only extracts the files: nothing is registered with Windows.
-            mkdirp(out);
-            await execAsync(SYSTEM.msiexec(), ['/a', file, '/qn', 'TARGETDIR=' + out], { stdio: 'ignore' });
-            return;
-        }
-        default:
-            await extractArchive(file, out, d.members);
-    }
-};
-/** Settings an app needs on every boot (the sandbox's registry is new each time), and files next to its program. */
-const afterInstall = async (entry, exe) => {
-    const dir = path.dirname(exe);
-    if (entry.needs?.includes('mesa')) {
-        const mesa = tool('mesa', arch === 'arm64' ? 'arm64' : 'x64');
-        for (const dll of ['opengl32.dll', 'libgallium_wgl.dll', 'dxil.dll']) {
-            if (exists(path.join(mesa, dll)) && !exists(path.join(dir, dll)))
-                fs.copyFileSync(path.join(mesa, dll), path.join(dir, dll));
-        }
-    }
-    // Godot and Sublime keep their settings next to the program instead of in the profile, which is wiped on close.
-    if (entry.id === 'godot' && !exists(path.join(dir, '._sc_')))
-        fs.writeFileSync(path.join(dir, '._sc_'), '');
-    if (entry.id === 'sublime')
-        mkdirp(path.join(dir, 'Data'));
-    if (entry.id === 'sysinternals') {
-        for (const name of ['Process Explorer', 'Process Monitor', 'Autoruns', 'TCPView', 'PsExec', 'PsList', 'PsKill', 'Handle', 'ListDLLs', 'Sigcheck', 'Strings', 'VMMap', 'RAMMap', 'DebugView', 'Disk2vhd', 'Du', 'ZoomIt']) {
-            await execAsync(SYSTEM.reg(), ['add', 'HKCU\\Software\\Sysinternals\\' + name, '/v', 'EulaAccepted', '/t', 'REG_DWORD', '/d', '1', '/f'], { stdio: 'ignore' }).catch(() => undefined);
-        }
-    }
-};
-/** Desktop and Start menu shortcuts, all in one PowerShell call. */
-const shortcuts = (apps) => {
-    if (!apps.length)
-        return;
-    const q = (s) => "'" + s.replace(/'/g, "''") + "'";
-    const desktop = path.join(os.homedir(), 'Desktop');
-    const start = path.join(process.env.APPDATA ?? path.join(os.homedir(), 'AppData', 'Roaming'), 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Sandbox apps');
-    const lines = ['$w = New-Object -ComObject WScript.Shell', 'New-Item -ItemType Directory -Force -Path ' + q(start) + ' | Out-Null'];
-    for (const app of apps) {
-        for (const folder of [desktop, start]) {
-            const name = app.name.replace(/[\\/:*?"<>|]/g, '');
-            lines.push('$s = $w.CreateShortcut(' + q(path.join(folder, name + '.lnk')) + '); $s.TargetPath = ' + q(app.exe) + '; $s.WorkingDirectory = ' + q(path.dirname(app.exe)) + '; $s.Save()');
-        }
-    }
-    powershell(lines.join('\n'));
-};
-export const setupApps = async (env, apps, o) => {
-    const { entries, skipped } = appsToInstall(apps, o.gitAccess);
-    for (const s of skipped)
-        env.summary.push('app skipped: ' + s);
-    if (dryRun) {
-        log('(dry run) would install apps: ' + entries.map((e) => e.name).join(', '));
-        return;
-    }
-    const gui = [];
-    const installed = [];
-    const one = async (entry) => {
-        try {
-            const dest = tool('apps', ...entry.id.split('/'));
-            if (!exists(path.join(dest, MARKER)) || o.refresh)
-                await installApp(entry, dest);
-            const exe = findExe(dest, entry.exe);
-            if (!exe)
-                throw new Error(entry.exe + ' not found in the download');
-            await afterInstall(entry, exe);
-            if (entry.cli || entry.id === 'sysinternals')
-                env.prepend.push(path.dirname(exe));
-            if (!entry.cli)
-                gui.push({ name: entry.name, exe });
-            installed.push(entry.name);
-        }
-        catch (e) {
-            warn(entry.name + ' could not be installed and is skipped; the other apps are not affected. Reason: ' + errMsg(e));
-            env.summary.push(entry.name + ': FAILED');
-        }
-    };
-    // 7-Zip first: the NSIS apps need it to unpack.
-    const [first, rest] = entries[0]?.id === '7zip' ? [[entries[0]], entries.slice(1)] : [[], entries];
-    for (const e of first)
-        await one(e);
-    const queue = [...rest];
-    await Promise.all(Array.from({ length: Math.min(PARALLEL, queue.length) }, async () => { for (let e = queue.shift(); e; e = queue.shift())
-        await one(e); }));
-    try {
-        shortcuts(gui);
-    }
-    catch (e) {
-        warn('App shortcuts could not be created: ' + errMsg(e));
-    }
-    if (installed.length)
-        env.summary.push('apps: ' + installed.join(', ') + ' (shortcuts on the desktop and in Start > Sandbox apps)');
-};
+// Installs the apps you chose (apps.install from the catalogue, apps.custom of your own) into C:\AgentData\tools\apps.
+// Installers are never run: archives are unpacked, NSIS installers opened with 7-Zip and MSIs extracted (msiexec /a),
+// so nothing is registered and nothing is lost when the sandbox closes.
+export { appsNeedMesa } from '../../shared/apps/index.js';
+export { setupApps } from './app-installer.js';
+export { findExe } from './find-exe.js';

package/dist/guest/apps/resolvers.js

@@ -1,22 +1,33 @@
 // Where the latest version of an app is, for apps that are not a plain GitHub release: each looks it up on the
 // vendor's own site (and its published checksum, where there is one). Named by AppSource.resolve in shared/apps.ts.
-import { fetchJson, fetchText, githubAsset, latestGithubTag } from '../../shared/download.js';
+import { fetchJson, fetchText, githubAsset, latestGithubTag } from '../../shared/download/index.js';
 /** The SHA-256 on the line of a SHA256SUMS-style file that names `file`. */
-const sumFor = (sums, file) => sums.split(/\r?\n/).map((l) => /^([0-9a-f]{64})\s+\*?(.+)$/i.exec(l.trim())).find((m) => m && m[2].trim().endsWith(file))?.[1].toLowerCase() ?? null;
+const sumFor = (sums, file) => sums
+    .split(/\r?\n/)
+    .map((l) => /^([0-9a-f]{64})\s+\*?(.+)$/i.exec(l.trim()))
+    .find((m) => m && m[2].trim().endsWith(file))?.[1]
+    .toLowerCase() ?? null;
 const firstHash = (text) => /\b([0-9a-f]{64})\b/i.exec(text)?.[1].toLowerCase() ?? null;
 const stripV = (tag) => tag.replace(/^v/, '');
 export const RESOLVERS = {
     sublime: async () => {
         // Sublime publishes no checksums; the download is HTTPS from sublimetext.com.
         const { latest_version: build } = await fetchJson('https://www.sublimetext.com/updates/4/stable_update_check');
-        return { url: 'https://download.sublimetext.com/sublime_text_build_' + build + '_x64.zip', fileName: 'sublime_text_' + build + '.zip' };
+        return {
+            url: 'https://download.sublimetext.com/sublime_text_build_' + build + '_x64.zip',
+            fileName: 'sublime_text_' + build + '.zip',
+        };
     },
     pgadmin: async () => {
         // pgAdmin is only an installer on pgadmin.org; EnterpriseDB's PostgreSQL binaries zip has a portable copy.
         const versions = (await fetchJson('https://www.postgresql.org/versions.json')).filter((v) => v.supported);
         const current = versions.find((v) => v.current) ?? versions[versions.length - 1];
         const exact = current.major + '.' + current.latestMinor;
-        return { url: 'https://get.enterprisedb.com/postgresql/postgresql-' + exact + '-1-windows-x64-binaries.zip', fileName: 'postgresql-' + exact + '.zip', members: ['pgsql/pgAdmin 4'] };
+        return {
+            url: 'https://get.enterprisedb.com/postgresql/postgresql-' + exact + '-1-windows-x64-binaries.zip',
+            fileName: 'postgresql-' + exact + '.zip',
+            members: ['pgsql/pgAdmin 4'],
+        };
     },
     everything: async () => {
         const page = await fetchText('https://www.voidtools.com/downloads/');
@@ -38,16 +49,26 @@ export const RESOLVERS = {
         const { LATEST_FIREFOX_VERSION: v } = await fetchJson('https://product-details.mozilla.org/1.0/firefox_versions.json');
         const base = 'https://archive.mozilla.org/pub/firefox/releases/' + v + '/';
         const sums = await fetchText(base + 'SHA256SUMS');
-        return { url: base + 'win64/en-US/Firefox%20Setup%20' + v + '.exe', fileName: 'firefox-setup-' + v + '.exe', sha256: sumFor(sums, 'win64/en-US/Firefox Setup ' + v + '.exe') };
+        return {
+            url: base + 'win64/en-US/Firefox%20Setup%20' + v + '.exe',
+            fileName: 'firefox-setup-' + v + '.exe',
+            sha256: sumFor(sums, 'win64/en-US/Firefox Setup ' + v + '.exe'),
+        };
     },
     blender: async () => {
         const releases = await fetchText('https://download.blender.org/release/');
-        const series = [...releases.matchAll(/href="Blender(\d+)\.(\d+)\/"/g)].map((m) => [Number(m[1]), Number(m[2])]).sort((a, b) => a[0] - b[0] || a[1] - b[1]).pop();
+        const series = [...releases.matchAll(/href="Blender(\d+)\.(\d+)\/"/g)]
+            .map((m) => [Number(m[1]), Number(m[2])])
+            .sort((a, b) => a[0] - b[0] || a[1] - b[1])
+            .pop();
         if (!series)
             throw new Error('could not list Blender releases');
         const folder = 'https://download.blender.org/release/Blender' + series[0] + '.' + series[1] + '/';
         const listing = await fetchText(folder);
-        const files = [...listing.matchAll(/href="(blender-([\d.]+)-windows-x64\.zip)"/g)].map((m) => ({ file: m[1], v: m[2].split('.').map(Number) }));
+        const files = [...listing.matchAll(/href="(blender-([\d.]+)-windows-x64\.zip)"/g)].map((m) => ({
+            file: m[1],
+            v: m[2].split('.').map(Number),
+        }));
         const latest = files.sort((a, b) => a.v[2] - b.v[2]).pop();
         if (!latest)
             throw new Error('no Windows build in ' + folder);
@@ -68,12 +89,19 @@ export const RESOLVERS = {
         const { current_version: v } = await fetchJson('https://checkpoint-api.hashicorp.com/v1/check/terraform');
         const base = 'https://releases.hashicorp.com/terraform/' + v + '/';
         const file = 'terraform_' + v + '_windows_amd64.zip';
-        return { url: base + file, fileName: file, sha256: sumFor(await fetchText(base + 'terraform_' + v + '_SHA256SUMS'), file) };
+        return {
+            url: base + file,
+            fileName: file,
+            sha256: sumFor(await fetchText(base + 'terraform_' + v + '_SHA256SUMS'), file),
+        };
     },
     mitmproxy: async () => {
         // mitmproxy's GitHub releases have no files; its own download server has them (no published checksums).
         const v = stripV(await latestGithubTag('mitmproxy/mitmproxy'));
-        return { url: 'https://downloads.mitmproxy.org/' + v + '/mitmproxy-' + v + '-windows-x86_64.zip', fileName: 'mitmproxy-' + v + '.zip' };
+        return {
+            url: 'https://downloads.mitmproxy.org/' + v + '/mitmproxy-' + v + '-windows-x86_64.zip',
+            fileName: 'mitmproxy-' + v + '.zip',
+        };
     },
     sqlite: async () => {
         // The download page lists every file in a CSV comment: PRODUCT,<version>,<year>/<file>,<size>,<sha3>.

package/dist/guest/apps/shortcuts.d.ts

@@ -0,0 +1,6 @@
+export interface Shortcut {
+    readonly name: string;
+    readonly exe: string;
+}
+/** Desktop and Start menu shortcuts, all in one PowerShell call (sandbox\scripts\new-shortcuts.ps1). */
+export declare function shortcuts(apps: readonly Shortcut[]): void;

package/dist/guest/apps/shortcuts.js

@@ -0,0 +1,19 @@
+import os from 'node:os';
+import path from 'node:path';
+import { runScriptWithJson } from '../runtime/process.js';
+/** Desktop and Start menu shortcuts, all in one PowerShell call (sandbox\scripts\new-shortcuts.ps1). */
+export function shortcuts(apps) {
+    if (!apps.length)
+        return;
+    const desktop = path.join(os.homedir(), 'Desktop');
+    const start = path.join(process.env.APPDATA ?? path.join(os.homedir(), 'AppData', 'Roaming'), 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Sandbox apps');
+    const links = apps.flatMap((app) => {
+        const name = app.name.replace(/[\\/:*?"<>|]/g, '');
+        return [desktop, start].map((folder) => ({
+            link: path.join(folder, name + '.lnk'),
+            target: app.exe,
+            workingDirectory: path.dirname(app.exe),
+        }));
+    });
+    runScriptWithJson('new-shortcuts.ps1', 'ListFile', links);
+}

package/dist/guest/apps/sources.d.ts

@@ -0,0 +1,4 @@
+import { type AppEntry } from '../../shared/apps/index.js';
+import { type Download } from './resolvers.js';
+/** Where to download an entry from. */
+export declare function resolve(entry: AppEntry): Promise<Download>;

package/dist/guest/apps/sources.js

@@ -0,0 +1,17 @@
+import { githubAsset } from '../../shared/download/index.js';
+import { RESOLVERS } from './resolvers.js';
+/** Where to download an entry from. */
+export async function resolve(entry) {
+    const s = entry.source;
+    if ('github' in s) {
+        const a = await githubAsset(s.github, new RegExp(s.asset), true);
+        return { url: a.url, fileName: a.name, sha256: a.sha256 };
+    }
+    if ('url' in s) {
+        const name = decodeURIComponent(new URL(s.url).pathname.split('/').pop() || entry.id);
+        return { url: s.url, fileName: /\.\w{2,5}$/.test(name) ? name : name + '.zip' };
+    }
+    if ('resolve' in s && RESOLVERS[s.resolve])
+        return RESOLVERS[s.resolve]();
+    throw new Error('no download source for ' + entry.name);
+}

package/dist/guest/apps/unpack.d.ts

@@ -0,0 +1,3 @@
+import { type AppEntry } from '../../shared/apps/index.js';
+import { type Download } from './resolvers.js';
+export declare function unpack(entry: AppEntry, file: string, out: string, d: Download): Promise<void>;

package/dist/guest/apps/unpack.js

@@ -0,0 +1,47 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { downloader, extractArchive, githubAsset } from '../../shared/download/index.js';
+import { SYSTEM } from '../../shared/system.js';
+import { execAsync } from '../runtime/process.js';
+import { exists, mkdirp } from '../runtime/fs.js';
+import { tool } from '../toolchains/tool-env.js';
+import { findExe } from './find-exe.js';
+const sevenZip = () => tool('apps', '7zip', '7z.exe');
+export async function unpack(entry, file, out, d) {
+    if (entry.id === '7zip') {
+        // 7zr.exe (the small standalone 7-Zip) opens the full 7-Zip's installer.
+        const sevenZr = path.join(path.dirname(file), '7zr.exe');
+        const zr = await githubAsset('ip7z/7zip', /^7zr\.exe$/);
+        await downloader.file(zr.url, sevenZr, zr.sha256);
+        await execAsync(sevenZr, ['x', '-y', '-o' + out, file], { stdio: 'ignore' });
+        return;
+    }
+    switch (entry.unpack ?? 'archive') {
+        case 'file': {
+            mkdirp(out);
+            fs.renameSync(file, path.join(out, /^\//.test(entry.exe) ? path.basename(file) : entry.exe));
+            return;
+        }
+        case 'nsis': {
+            if (!exists(sevenZip()))
+                throw new Error('7-Zip is needed to unpack ' + entry.name + ' and could not be installed');
+            const raw = path.join(path.dirname(out), 'raw');
+            await execAsync(sevenZip(), ['x', '-y', '-o' + raw, file], { stdio: 'ignore' });
+            // electron-builder installers carry the app as one more archive inside.
+            const inner = findExe(raw, '/^app-64\\.7z$/');
+            if (inner)
+                await execAsync(sevenZip(), ['x', '-y', '-o' + out, inner], { stdio: 'ignore' });
+            else
+                fs.renameSync(raw, out);
+            return;
+        }
+        case 'msi': {
+            // An administrative install only extracts the files: nothing is registered with Windows.
+            mkdirp(out);
+            await execAsync(SYSTEM.msiexec(), ['/a', file, '/qn', 'TARGETDIR=' + out], { stdio: 'ignore' });
+            return;
+        }
+        default:
+            await extractArchive(file, out, d.members);
+    }
+}

package/dist/guest/audit/parse.d.ts

@@ -0,0 +1,7 @@
+/** Background programs of Windows itself: never what an agent ran. */
+export declare const NOISE: Set<string>;
+/** The events in wevtutil's XML output as audit lines, with the newest record id seen. */
+export declare function parseProcessEvents(xml: string): {
+    lines: string[];
+    last: number;
+};

package/dist/guest/audit/parse.js

@@ -0,0 +1,60 @@
+// Reading Windows process-creation events (Security log, 4688, as wevtutil prints them) into audit lines. Pure, so
+// the self-test can check it on the PC side.
+import path from 'node:path';
+/** Background programs of Windows itself: never what an agent ran. */
+export const NOISE = new Set([
+    'conhost.exe',
+    'svchost.exe',
+    'backgroundtaskhost.exe',
+    'runtimebroker.exe',
+    'wmiprvse.exe',
+    'dllhost.exe',
+    'searchprotocolhost.exe',
+    'searchfilterhost.exe',
+    'taskhostw.exe',
+    'sppsvc.exe',
+    'wermgr.exe',
+    'consent.exe',
+    'smartscreen.exe',
+    'mpcmdrun.exe',
+    'compattelrunner.exe',
+    'wevtutil.exe',
+    'audiodg.exe',
+    'ctfmon.exe',
+    'sihost.exe',
+    'werfault.exe',
+    'msmpeng.exe',
+    'nissrv.exe',
+    'usoclient.exe',
+    'musnotification.exe',
+]);
+const decode = (s) => s
+    .replace(/&lt;/g, '<')
+    .replace(/&gt;/g, '>')
+    .replace(/&quot;/g, '"')
+    .replace(/&apos;/g, "'")
+    .replace(/&amp;/g, '&');
+const field = (event, name) => decode(new RegExp("<Data Name='" + name + "'>([^<]*)</Data>").exec(event)?.[1] ?? '');
+/** The events in wevtutil's XML output as audit lines, with the newest record id seen. */
+export function parseProcessEvents(xml) {
+    const lines = [];
+    let last = 0;
+    for (const event of xml.split('</Event>')) {
+        const id = Number(/<EventRecordID>(\d+)<\/EventRecordID>/.exec(event)?.[1] ?? 0);
+        if (!id)
+            continue;
+        last = Math.max(last, id);
+        const program = field(event, 'NewProcessName');
+        if (!program || NOISE.has(path.win32.basename(program).toLowerCase()))
+            continue;
+        const t = /SystemTime='([^']+)'/.exec(event)?.[1] ?? new Date().toISOString();
+        lines.push(JSON.stringify({
+            t,
+            k: 'proc',
+            p: program.slice(0, 1024),
+            c: field(event, 'CommandLine').slice(0, 2000),
+            pp: field(event, 'ParentProcessName').slice(0, 1024),
+        }));
+    }
+    return { lines, last };
+}

package/dist/guest/audit/process-audit.d.ts

@@ -0,0 +1,6 @@
+/** Turns on process-creation auditing with command lines (the registry is new every boot). */
+export declare function enableProcessAudit(): void;
+/**
+ * Reads new process events every 15 s for the daemon's life (from the moment it started: older ones are boot noise).
+ */
+export declare function startProcessCollector(): void;

package/dist/guest/audit/process-audit.js

@@ -0,0 +1,72 @@
+// audit.processes, sandbox side: Windows records every program started (Security log, event 4688, with its command
+// line); the daemon reads the new events every 15 s and leaves them in run\audit\ as small .jsonl files, which the
+// host takes into its own log (and deletes). Windows' own background programs are left out. The host treats all of it
+// as untrusted (it is checked line by line there).
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { SYSTEM } from '../../shared/system.js';
+import { parseProcessEvents } from './parse.js';
+import { dryRun, isWin, run } from '../runtime/paths.js';
+import { log, warn } from '../runtime/log.js';
+import { mkdirp } from '../runtime/fs.js';
+import { session } from '../runtime/session.js';
+import { errMsg } from '../../core/util/errors.js';
+/** The "Process Creation" audit subcategory (a GUID, so it works in every Windows language). */
+const PROCESS_CREATION = '{0CCE922B-69AE-11D9-BED3-505054503030}';
+const MAX_PER_PASS = 2000;
+const auditOn = () => Boolean(session.auditProcesses) && isWin && !dryRun;
+/** Turns on process-creation auditing with command lines (the registry is new every boot). */
+export function enableProcessAudit() {
+    if (!auditOn())
+        return;
+    spawnSync(path.join(process.env.WINDIR ?? 'C:\\Windows', 'System32', 'auditpol.exe'), ['/set', '/subcategory:' + PROCESS_CREATION, '/success:enable'], { windowsHide: true, stdio: 'ignore' });
+    spawnSync(SYSTEM.reg(), [
+        'add',
+        'HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Audit',
+        '/v',
+        'ProcessCreationIncludeCmdLine_Enabled',
+        '/t',
+        'REG_DWORD',
+        '/d',
+        '1',
+        '/f',
+    ], { windowsHide: true, stdio: 'ignore' });
+    log('Audit: programs started in the sandbox are recorded (audit.processes).');
+}
+const wevtutil = () => path.join(process.env.WINDIR ?? 'C:\\Windows', 'System32', 'wevtutil.exe');
+const newestRecord = () => {
+    const r = spawnSync(wevtutil(), ['qe', 'Security', '/q:*[System[(EventID=4688)]]', '/f:xml', '/c:1', '/rd:true'], {
+        encoding: 'utf8',
+        windowsHide: true,
+    });
+    return parseProcessEvents(r.stdout ?? '').last;
+};
+/**
+ * Reads new process events every 15 s for the daemon's life (from the moment it started: older ones are boot noise).
+ */
+export function startProcessCollector() {
+    if (!auditOn())
+        return;
+    let last = newestRecord();
+    const pass = () => {
+        try {
+            const r = spawnSync(wevtutil(), [
+                'qe',
+                'Security',
+                '/q:*[System[(EventID=4688) and (EventRecordID>' + last + ')]]',
+                '/f:xml',
+                '/c:' + MAX_PER_PASS,
+            ], { encoding: 'utf8', windowsHide: true, maxBuffer: 64 * 1024 * 1024 });
+            const { lines, last: newest } = parseProcessEvents(r.stdout ?? '');
+            if (newest)
+                last = newest;
+            if (lines.length)
+                fs.writeFileSync(path.join(mkdirp(run.auditDir), Date.now() + '-' + process.pid + '.jsonl'), lines.join('\n') + '\n');
+        }
+        catch (e) {
+            warn('audit: ' + errMsg(e));
+        }
+    };
+    setInterval(pass, 15000).unref?.();
+}

package/dist/guest/boot/boot-env.d.ts

@@ -0,0 +1,4 @@
+import { type BootEnv } from './project-env.js';
+export { baseEnvFor, type BootEnv } from './project-env.js';
+export declare function saveBootEnv(value: BootEnv): void;
+export declare function readBootEnv(): BootEnv | null;

package/dist/guest/boot/boot-env.js

@@ -0,0 +1,27 @@
+// What the boot's provisioning left for projects that join later: the PATH before any toolchain was added, which
+// variables the toolchains set, and what each step contributed. Kept on the sandbox's own disk (lost on close, as it
+// should be). The session daemon builds every later project's environment from it instead of from the boot
+// project's, so project A's Node, Rust target folder or database variables never leak into project B's sessions.
+import fs from 'node:fs';
+import path from 'node:path';
+import { writeJsonAtomic } from '../../shared/io/json.js';
+import { localDir } from '../runtime/paths.js';
+import { BootEnvSchema } from './project-env.js';
+export { baseEnvFor } from './project-env.js';
+const file = () => path.join(localDir, 'boot-env.json');
+export function saveBootEnv(value) {
+    try {
+        writeJsonAtomic(file(), value);
+    }
+    catch {
+        /* projects added later then fall back to the boot environment */
+    }
+}
+export function readBootEnv() {
+    try {
+        return BootEnvSchema.safeParse(JSON.parse(fs.readFileSync(file(), 'utf8'))).data ?? null;
+    }
+    catch {
+        return null;
+    }
+}