Run and automate apps in persistent Windows execution targets - #779

Merged

Nikola Metulev (nmetulev) merged 124 commits into

mainfrom

nmetulev-sandbox-execution-target

Sep 16, 2026

Commits on Sep 4, 2026

Add execution-target foundations: state, mutation lock, and failure contract

Nikola Metulev (nmetulev)
and
Copilot
committed
9039926
Add authenticated guest transport protocol and fuzz coverage

Nikola Metulev (nmetulev)
and
Copilot
committed
2577336
Add Windows Sandbox CLI wrapper and singleton ownership

Nikola Metulev (nmetulev)
and
Copilot
committed
8fa5cd5
Add guest agent readiness rules

Nikola Metulev (nmetulev)
and
Copilot
committed
2c06150
Add target-neutral guest command channel and fake-transport contract tests

Nikola Metulev (nmetulev)
and
Copilot
committed
1ee90d5
Add deployment snapshot, exact reconciliation, and path containment

Nikola Metulev (nmetulev)
and
Copilot
committed
3f44d49
Fix four review findings and add Job Object process hosting

Nikola Metulev (nmetulev)
and
Copilot
committed
a31904f
Centralize managed path construction behind one fail-closed invariant

Nikola Metulev (nmetulev)
and
Copilot
committed
3d30cfb
Complete the guest agent and add versioned, rollback-safe updates

Nikola Metulev (nmetulev)
and
Copilot
committed
e913b5d
Add guest file transfer and exact deployment reconciliation

Nikola Metulev (nmetulev)
and
Copilot
committed
b3769c6
Route the last managed path through the central invariant

Nikola Metulev (nmetulev)
and
Copilot
committed
7229470
Trace the one genuinely silent cleanup failure

Nikola Metulev (nmetulev)
and
Copilot
committed
f5f2c8d
Connect the two halves: Sandbox backend and serving guest agent

Nikola Metulev (nmetulev)
and
Copilot
committed
e9e72a3
Add the single entry point every --sandbox command goes through

Nikola Metulev (nmetulev)
and
Copilot
committed
24f6ce2
Document Windows Sandbox execution

Nikola Metulev (nmetulev)
and
Copilot
committed
4d1324a
Fix ten review findings and add sandbox exec and cp

Nikola Metulev (nmetulev)
and
Copilot
committed
d193870
Close the per-operation containment race and state the path guarantee honestly

Nikola Metulev (nmetulev)
and
Copilot
committed
a7c2e83
Add the Sandbox page to the MS Learn navigation

Nikola Metulev (nmetulev)
and
Copilot
committed
711ee42
Scope the barrier release event and fix a test that passed by luck

Nikola Metulev (nmetulev)
and
Copilot
committed
76808b7
List the sandbox command group in the categorized help

Nikola Metulev (nmetulev)
and
Copilot
committed
19f8f61
Stop describing the barrier event name as unguessable

Nikola Metulev (nmetulev)
and
Copilot
committed
1346016
Separate materializing a package layout from installing it

Nikola Metulev (nmetulev)
and
Copilot
committed
f5c149f
Run and unregister apps in the Sandbox

Nikola Metulev (nmetulev)
and
Copilot
committed
9f59b91
Route UI commands into the Sandbox and bring their output back

Nikola Metulev (nmetulev)
and
Copilot
committed
26f68a1
Pin the telemetry exclusions and add gated live Sandbox coverage

Nikola Metulev (nmetulev)
and
Copilot
committed
13a7863
Complete Sandbox runtime provisioning

Nikola Metulev (nmetulev)
and
Copilot
committed
1c9635d
Address Sandbox code quality feedback

Nikola Metulev (nmetulev)
and
Copilot
committed
19d03a5
Simplify runtime version selection

Nikola Metulev (nmetulev)
and
Copilot
committed
349ffea
Address final-review blockers for Sandbox execution

Nikola Metulev (nmetulev)
and
Copilot
committed
1a1769d
Address automated code-quality review on the new tests

Nikola Metulev (nmetulev)
and
Copilot
committed
96c90f1
Close the source-root and file-leaf holes in host traversal

Nikola Metulev (nmetulev)
and
Copilot
committed
2601923
Address automated code-quality review on the containment tests

Nikola Metulev (nmetulev)
and
Copilot
committed
b786611
Fix four Sandbox usability regressions found in live testing

Nikola Metulev (nmetulev)
and
Copilot
committed
d58efbd
Persist the guest address and de-duplicate preparation progress

Nikola Metulev (nmetulev)
and
Copilot
committed
c71d05a
Stop long-lived Sandbox children inheriting the caller's output handles

Nikola Metulev (nmetulev)
and
Copilot
committed
185a078
Make sandbox cp land single files exactly, and refuse rooted guest paths

Nikola Metulev (nmetulev)
and
Copilot
committed
acf5933
Stop the previous run before a Sandbox redeploy mutates its layout (SBX-006/008)

Nikola Metulev (nmetulev)
and
Copilot
committed
a79a69c
Fix two review blockers: fail-open package lookup and clean-state ordering (H1/H2)

Nikola Metulev (nmetulev)
and
Copilot
committed
1b6cab7
Fix H3: same package identity across two deployment source paths

Nikola Metulev (nmetulev)
and
Copilot
committed
a307d37
Fix H4/H5: deleted-layout wedge and unpackaged process-tree kill safety

Nikola Metulev (nmetulev)
and
Copilot
committed
8ae8688
Hold the target mutation lock across the whole mutating window, not just PrepareAsync

Nikola Metulev (nmetulev)
and
Copilot
committed
7298f08
Close the packaged-registration mutation-lock gap in run --sandbox launches

Nikola Metulev (nmetulev)
and
Copilot
committed
60a06cc
Make phase 2 of a launching packaged sandbox run structurally unable to mutate

Nikola Metulev (nmetulev)
and
Copilot
committed
79629e4
Close H1/H2/H3: lock packaged registration for --no-launch, host-orchestrated exact-layout unregister-on-exit, and JSON parity for guest-launch activation failures

Copilot
authored and
Nikola Metulev (nmetulev)
committed
5f71d77
Serve concurrent Sandbox channels so a running app blocks nothing

Nikola Metulev (nmetulev)
and
Copilot
committed
8645a92
Classify a reset handshake, and tell a busy agent from a dead one

Nikola Metulev (nmetulev)
and
Copilot
committed
d4185a9
Stop the socket tests binding every interface

Nikola Metulev (nmetulev)
and
Copilot
committed
e48679d
Make the packaged mutation-lock harness deploy like a real run

Nikola Metulev (nmetulev)
and
Copilot
committed
cec8c96
Say which lock a prepared target still holds, and which it does not

Nikola Metulev (nmetulev)
and
Copilot
committed
e666c19
Let the release build and the docs script actually run

Nikola Metulev (nmetulev)
and
Copilot
committed
dff7bb0
Say how long a detached Sandbox app actually lives

Nikola Metulev (nmetulev)
and
Copilot
committed
cf0ef5a
Address CodeQL review feedback on the sandbox mutation-lock suite

Nikola Metulev (nmetulev)
and
Copilot
committed
9af1a66
Simplify nullable-bool assertions and stop-drop path composition in tests

Nikola Metulev (nmetulev)
and
Copilot
committed
4ca8d5e
Move SandboxHandleInheritanceTests P/Invoke to source-generated interop

Nikola Metulev (nmetulev)
and
Copilot
committed
53f2e8e
Let --sandbox set up and reuse Windows Sandbox by itself

Nikola Metulev (nmetulev)
and
Copilot
committed
1361e2e
Close the gaps a security and self review turned up

Nikola Metulev (nmetulev)
and
Copilot
committed
10ba42b
Stop bypassing the readiness probe, and only call a Sandbox warm once it is

Nikola Metulev (nmetulev)
and
Copilot
committed
bae87b7
Stop trusting PATH, read the guest's real exit code, and stop duplicating clients

Nikola Metulev (nmetulev)
and
Copilot
committed
f21dcf4
Make the session probe keep its promise, and stop overselling an alias check

Nikola Metulev (nmetulev)
and
Copilot
committed
1bdb7c3
Only a confirmed missing session may create a client, and stop spinning on a closed one

Nikola Metulev (nmetulev)
and
Copilot
committed
6f28af2
Connect for a Sandbox winapp started, and reconnect a closed window once

Nikola Metulev (nmetulev)
and
Copilot
committed
56c730d
Say honestly which wait the reconnect bound governs

Nikola Metulev (nmetulev)
and
Copilot
committed
17f2171
Make the two live Sandbox tests test what they claimed to

Nikola Metulev (nmetulev)
and
Copilot
committed
beb428e
Reconcile the Sandbox target with the UI Automation package split

Nikola Metulev (nmetulev)
and
Copilot
committed
e3810c4
Select an execution target with --on, and act on one with winapp target

Nikola Metulev (nmetulev)
and
Copilot
committed
c965a3e
Teach the docs, skills, and npm bindings the target-first surface

Nikola Metulev (nmetulev)
and
Copilot
committed
dad8c46
Fail a bad transfer path before booting a target, and keep dashed values reachable

Nikola Metulev (nmetulev)
and
Copilot
committed
82bef3d
Report a typo instead of booting a target, and hand back the record a launch advanced

Nikola Metulev (nmetulev)
and
Copilot
committed
201abad
Merge branch 'main' into nmetulev-sandbox-execution-target
Nikola Metulev (nmetulev)
authored
07d14d7
Fix packaged sandbox state paths

Nikola Metulev (nmetulev)
and
Copilot
committed
2410c69

Commits on Sep 5, 2026

Document Sandbox Share target limit

Nikola Metulev (nmetulev)
and
Copilot
committed
0129ae0
Improve Sandbox run completion UX

Nikola Metulev (nmetulev)
and
Copilot
committed
b6c851c
Add target snapshot, screenshot, and record for whole-desktop diagnostics

Nikola Metulev (nmetulev)
and
Copilot
committed
3199d81
Make target diagnostics honest about what they touch

Nikola Metulev (nmetulev)
and
Copilot
committed
c443bfe
Prove Sandbox client ownership and harden target capture

Nikola Metulev (nmetulev)
and
Copilot
committed
fccec29
Prove client ownership by age, and never activate during a target recording

Nikola Metulev (nmetulev)
and
Copilot
committed
de34804
Do not record black frames and call it a successful take

Nikola Metulev (nmetulev)
and
Copilot
committed
346742a
Check the drained frame too, not just the recorded ones

Nikola Metulev (nmetulev)
and
Copilot
committed
eaa131f
Resolve target capture integration

Nikola Metulev (nmetulev)
and
Copilot
committed
f2faef5
Narrow the Sandbox Share limitation

Nikola Metulev (nmetulev)
and
Copilot
committed
4fbcdb8
Reconcile target package ownership

Nikola Metulev (nmetulev)
and
Copilot
committed
916c10d
Make Sandbox target state truthful

Nikola Metulev (nmetulev)
and
Copilot
committed
62da346
Preserve deployment state compatibility

Nikola Metulev (nmetulev)
and
Copilot
committed
caa95cc
Keep Sandbox client ownership explicit

Nikola Metulev (nmetulev)
and
Copilot
committed
25deb07
Preserve Sandbox client ownership

Nikola Metulev (nmetulev)
and
Copilot
committed
fa20f41
Align legacy ownership integration test

Nikola Metulev (nmetulev)
and
Copilot
committed
d2347fa

Commits on Sep 6, 2026

Reconcile the generated AppX loose layout with the build

Nikola Metulev (nmetulev)
and
Copilot
committed
621e85c
Only delete layout files winapp staged, and fail when it cannot

Nikola Metulev (nmetulev)
and
Copilot
committed
c83e891
Decide AppX layout ownership at the call site instead of tracking it

Nikola Metulev (nmetulev)
and
Copilot
committed
699c728
Tell the guest that its registration layout is winapp's own

Nikola Metulev (nmetulev)
and
Copilot
committed
2c13966
Stop the layout from swallowing itself, and from hiding stale links

Nikola Metulev (nmetulev)
and
Copilot
committed
5ad529b
Say what a link in the build output cost, and refuse an input reached through one

Nikola Metulev (nmetulev)
and
Copilot
committed
985c00c
Refuse a link in the build output instead of quietly working around it

Nikola Metulev (nmetulev)
and
Copilot
committed
3302ac5
Say where the link rule applies

Nikola Metulev (nmetulev)
and
Copilot
committed
6452b6b

Commits on Sep 8, 2026

Merge branch 'main' into nmetulev-sandbox-execution-target
Zach Teutsch (zateutsch)
authored
43f19d8

Commits on Sep 9, 2026

Commits on Sep 10, 2026

Fix target cleanup and pull containment

Nikola Metulev (nmetulev)
and
Copilot
committed
60fea5f
Fix Sandbox workflow boundaries and simplify execution support

Nikola Metulev (nmetulev)
and
Copilot
committed
7fa4452
Merge latest main and preserve Sandbox capture deadlines

Nikola Metulev (nmetulev)
and
Copilot
committed
62ea9e1
Validate Sandbox recording finalization and refresh generated schema

Nikola Metulev (nmetulev)
and
Copilot
committed
4f403ca
Keep shared recording publication outside the public package API

Nikola Metulev (nmetulev)
and
Copilot
committed
c13a81e
Use the shared runtime architecture resolver for Sandbox runs

Nikola Metulev (nmetulev)
and
Copilot
committed
d3e4504
Clarify recording contracts and actionable guest artifact recovery

Nikola Metulev (nmetulev)
and
Copilot
committed
69022d0
Merge branch 'main' into nmetulev-sandbox-execution-target
Nikola Metulev (nmetulev)
authored
1eef357

Commits on Sep 11, 2026

Align guest capture coordinates and streamline warm target commands

Nikola Metulev (nmetulev)
and
Copilot
committed
75920f4
Merge PR branch updates alongside target ergonomics

Nikola Metulev (nmetulev)
and
Copilot
committed
0f37076
Merge current main while retaining target routing and native capture

Nikola Metulev (nmetulev)
and
Copilot
committed
bb11887
Dispose desktop capture test consoles deterministically

Nikola Metulev (nmetulev)
and
Copilot
committed
c56742c
Restore concise public layout option help

Nikola Metulev (nmetulev)
and
Copilot
committed
c0c2bee
Remove temporary release-status notes from Sandbox documentation

Nikola Metulev (nmetulev)
and
Copilot
committed
581c09d
Keep Windows Sandbox prerequisite setup user-controlled

Nikola Metulev (nmetulev)
and
Copilot
committed
c939d26
Condense run layout output documentation

Nikola Metulev (nmetulev)
and
Copilot
committed
16f4750
Report execution-target usage telemetry only from the host

Nikola Metulev (nmetulev)
and
Copilot
committed
93419cb
Remove unused no-activation window capture policy

Nikola Metulev (nmetulev)
and
Copilot
committed
af7ad4b
Remove orphaned recording policy documentation

Nikola Metulev (nmetulev)
and
Copilot
committed
337a80b
Merge branch 'main' into nmetulev-sandbox-execution-target
Nikola Metulev (nmetulev)
authored
2f694be
Coordinate whole-desktop screenshots exclusively

Nikola Metulev (nmetulev)
and
Copilot
committed
90e52a4
Do not follow directory links during guest cleanup

Nikola Metulev (nmetulev)
and
Copilot
committed
10341d7
Fail closed when source path attributes cannot be inspected

Nikola Metulev (nmetulev)
and
Copilot
committed
c033de0

Commits on Sep 16, 2026

Merge branch 'main' into nmetulev-sandbox-execution-target
Nikola Metulev (nmetulev)
authored
ccc0fc7