feat(install): add no-WSL Windows candidate installer - #10799

Closed

ericksoa wants to merge 484 commits into

mainfrom

feat/windows-native-installer

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 11, 2026

fix(windows): build and verify contained MSYS pipe permissions
ericksoa
committed
d4eca74
test(windows): trace canonical MSYS pipeline startup
ericksoa
committed
ab93574
test(windows): inspect native pipeline default permissions
ericksoa
committed
1c77211
test(windows): retain successful pipe security readback
ericksoa
committed
b5cb79c
fix(windows): preserve native pipeline permissions inside MXC
ericksoa
committed
9527323
fix(windows): admit the canonical MSYS process tracker pipe
ericksoa
committed
d2c2770
test(windows): distinguish fork child token proof failures
ericksoa
committed
31ff4a0
test(windows): inspect denied fork token access
ericksoa
committed
e9f55fb
test(windows): inspect fork tokens through the owning MXC job
ericksoa
committed
f42b5ff
fix(windows): inspect prepared system drives without maximum access
ericksoa
committed
d13de64
fix(windows): repair preparation access and owned child token queries
ericksoa
committed
959cad7
fix(windows): validate build receipts and preserve preparation evidence
ericksoa
committed
46d74e7
test(windows): verify persisted metadata descriptors
ericksoa
committed
f9d0ca7
test(windows): capture owned Bash fork access violations
ericksoa
committed
04e2fa6
test(windows): qualify native setup errors and preview migration
ericksoa
committed
587dacd
fix(windows): finish installer cleanup and Bash image placement
ericksoa
committed
42b9531
test(windows): accept either canonical Bash failure marker
ericksoa
committed
4fbf1c3
fix(windows): let MSI remove the install root after its children
ericksoa
committed
a47ad6a
fix(windows): apply Bash image placement at MXC creation
ericksoa
committed
06b4142
fix(windows): remove the empty root after uninstall commit
ericksoa
committed
7935e0c
fix(windows): test canonical MSYS with shared image placement
ericksoa
committed
5ed17fd
fix(windows): reopen the owned MSYS shared mapping with required access
ericksoa
committed
740d823
fix(windows): share the private MSYS mapping with its contained children
ericksoa
committed
dea3c2b
fix(windows): support the canonical MSYS startup mutexes
ericksoa
committed
fd0a8e1
fix(windows): honor the Hermes search choice
ericksoa
committed
b7be4e3
fix(windows): prepare a stable Bash image for native fork
ericksoa
committed
04b3342
test(windows): diagnose native Bash pipe data transfer
ericksoa
committed
686bab0
test(windows): attribute the native Bash reader lifecycle
ericksoa
committed
2546b0f

Commits on Sep 12, 2026

fix(windows): resolve canonical Bash child process identifiers
ericksoa
committed
df444a6
fix(windows): use unsigned PID-link access constants
ericksoa
committed
965ea9a
fix(windows): open canonical Bash child process records
ericksoa
committed
9d5d989
fix(windows): reopen canonical shell user state
ericksoa
committed
91cddba
fix(windows): bound successful Bash diagnostic samples
ericksoa
committed
b3ea341
test(windows): address actual peer pipe objects
ericksoa
committed
645a04f
feat(windows): qualify the complete canonical Hermes runtime
ericksoa
committed
cb8aa82
fix(windows): reuse proven compiler discovery
ericksoa
committed
6d44f0a
fix(windows): isolate console build tool configuration
ericksoa
committed
cc0fcb8
fix(windows): retain console package metadata evidence
ericksoa
committed
07b79da
fix(windows): repair Hermes shell handoff and browser startup
ericksoa
committed
d9c4bde
ci(windows): qualify Hermes with the repaired Bash runtime
ericksoa
committed
e32adef
fix(windows): keep Hermes child startup available for the session
ericksoa
committed
43c9e32
ci(windows): use the session lifetime Bash proof for Hermes
ericksoa
committed
8d78fe4
fix(windows): keep native diagnostics out of Hermes tool output
ericksoa
committed
336a9ac
ci(windows): replay the finished canonical Hermes runtime
ericksoa
committed
8234554
fix(windows): handle Hermes console EOF and isolate browser startup
ericksoa
committed
ab60ead
test(windows): compare canonical Hermes browser across MXC and host
ericksoa
committed
de0db99
fix(windows): keep browser cleanup from compiling runtime bytecode
ericksoa
committed
b4c815f
test(windows): retain canonical Hermes browser failure evidence
ericksoa
committed
53dc14b
fix(windows): derive browser logs from admitted agent state
ericksoa
committed
57273e4
fix(windows): correct Hermes browser readiness and shutdown
ericksoa
committed
22d4a07
fix(windows): normalize discarded Chrome startup streams
ericksoa
committed
6db4b7a
fix(windows): qualify canonical Hermes with Chrome stream repair
ericksoa
committed
967553a
fix(windows): enable canonical Hermes private desktop startup
ericksoa
committed
d9b2c6d
fix(windows): admit independent owned desktop test identities
ericksoa
committed
0c91927
fix(windows): adapt canonical Hermes desktop startup
ericksoa
committed
f314264
fix(windows): test desktop creation independently of station handles
ericksoa
committed
3641183
fix(windows): provide owned Hermes desktop resources
ericksoa
committed
5c85602
fix(windows): connect Hermes Chrome to its owned desktop
ericksoa
committed
351ad92
fix(windows): replay Hermes with the proved browser handoff
ericksoa
committed
3a5d01e
fix(windows): retain exact Hermes browser startup diagnostics
ericksoa
committed
4ac5689
fix(windows): release native handles before Hermes desktop cleanup
ericksoa
committed
921c181
fix(windows): preserve independent Hermes browser failure evidence
ericksoa
committed
381a4f6
fix(windows): preserve restricted Chrome child imports
ericksoa
committed
9940501
fix(windows): qualify the canonical Chrome child launch path
ericksoa
committed
3a48888
fix(windows): bind browser diagnostics to the Windows image path
ericksoa
committed
2094c8b
fix(windows): retain canonical Chrome creation results
ericksoa
committed
050ab2e
fix(windows): replay the traced Chrome creation path
ericksoa
committed
3e84d27

Commits on Sep 13, 2026

test(windows): isolate canonical browser process creation
ericksoa
committed
c5684d8
fix(windows): adapt Chrome inner UI jobs to MXC
ericksoa
committed
c830cd3
test(windows): replay Chrome inner UI compatibility under Personal MXC
ericksoa
committed
aa9bd66
fix(windows): launch packaged Browser Use and observe final desktop cleanup
ericksoa
committed
a8227a9
test(windows): isolate browser startup ownership and warm replay
ericksoa
committed
423e329
fix(windows): avoid redundant Bash diagnostics and trace first startup
ericksoa
committed
53000de
fix(windows): pass recorder identity and retain early trace failures
ericksoa
committed
bf0c01f
ci(windows): analyze the captured Hermes startup trace
ericksoa
committed
535b50a
fix(windows): handle empty trace reports and supported analysis actions
ericksoa
committed
88acd77
fix(windows): use supported recorded-trace analysis arguments
ericksoa
committed
5e284d2
perf(windows): profile Personal startup and inspect runtime ACLs
ericksoa
committed
51e3202
fix(windows): prepare the public Hermes runtime for read-only access
ericksoa
committed
7bdabd0
fix(windows): separate Hermes tracing from ordinary startup
ericksoa
committed
cfd0c60
fix(windows): disable browser GPU acceleration under Personal MXC
ericksoa
committed
4acc963
chore(windows): retain recorded Hermes process exit details
ericksoa
committed
50db61f
fix(windows): retain Hermes browser fault details
ericksoa
committed
c6fe7ba
chore(windows): retain bounded Chrome crash metadata
ericksoa
committed
af82a66
chore(windows): observe renderer exception context in CI
ericksoa
committed
f9a112d
fix(windows): query renderer process architecture correctly
ericksoa
committed
35c1d4f
test(windows): isolate cold Hermes ownership and renderer failures
ericksoa
committed
a86ea67
test(windows): capture Hermes renderer failures through WER
ericksoa
committed
ea8e5f2
test(windows): capture original Hermes renderer exceptions
ericksoa
committed
db98756
fix(windows): inspect hard-linked system PowerShell safely
ericksoa
committed
3f370dd
fix(windows): discover preinstalled debugger tools directly
ericksoa
committed
bf60827
fix(windows): trace postmortem browser process lifetimes
ericksoa
committed
a3d47d7
chore(windows): analyze recorded postmortem browser trace
ericksoa
committed
c8f920c
test(windows): isolate canonical browser startup ordering
ericksoa
committed
35ce966
test(windows): compare failed browser startup with the host
ericksoa
committed
3176730
fix(windows): preserve canonical Chrome renderer jobs
ericksoa
committed
b99629e
test(windows): pin canonical Chrome job proof
ericksoa
committed
8b4496f
fix(windows): retain Chrome private desktop access
ericksoa
committed
fe06c05
chore(windows): abandon contained Chrome experiments
ericksoa
committed
efdeeaa
feat(windows): broker Hermes tools through native Edge
ericksoa
committed
77659a6
fix(windows): pass Edge identity as metadata
ericksoa
committed
5e7c2d1
fix(windows): retain precise Edge admission errors
ericksoa
committed
37d866d
test(windows): retain Edge signature status
ericksoa
committed
11e8f63
fix(windows): format Edge signature state
ericksoa
committed
aea690a
fix(windows): isolate Edge signature modules
ericksoa
committed
23dfbc5
feat(windows): ship finished Hermes Edge runtime
ericksoa
committed
7b79a6d
fix(windows): admit root Edge receipt
ericksoa
committed
e76b96a
fix(windows): upgrade Hermes adapter before sealing
ericksoa
committed
ed7977e
fix(windows): upgrade pinned Hermes Edge adapter
ericksoa
committed
75bfd72
fix(windows): verify prior Hermes hook bytes
ericksoa
committed
66ca35c
fix(windows): shorten WiX cabinet source paths
ericksoa
committed
3078535
fix(windows): shorten immutable runtime cabinet paths
ericksoa
committed
8c249d5

Commits on Sep 14, 2026

fix(windows): prune unsupported Hermes install trees
ericksoa
committed
2dcfaae
fix(windows): archive pruned Hermes licenses
ericksoa
committed
7237224
fix(windows): omit overlong Hermes bytecode paths
ericksoa
committed
568b31d
fix(windows): retain Edge identity probe errors
ericksoa
committed
6ad35f1
fix(windows): surface Edge signature probe cause
ericksoa
committed
e3e75cf
feat(windows): prepare selected Pi runtime
ericksoa
committed
14ff9f7
fix(windows): encode Edge identity probe command
ericksoa
committed
4d29257
fix(windows): parse native Edge identity probe
ericksoa
committed
a0bf240
fix(windows): preserve runtime files while pruning Pi
ericksoa
committed
9a90a30
feat(windows): deliver Hermes as a runtime image
ericksoa
committed
adef0c8
fix(windows): bind runtime image package inputs
ericksoa
committed
23dc1c5
fix(windows): compact the finished runtime image
ericksoa
committed
5c8b2a0
fix(windows): preserve image compression during population
ericksoa
committed
7206ef8
fix(windows): bound compact image build disk use
ericksoa
committed
d8df0f5
fix(windows): stream sealed runtime into its image
ericksoa
committed
6e1c297
fix(windows): stage runtime image on the spacious volume
ericksoa
committed
bca35e2
perf(windows): remove unused Hermes media and docs
ericksoa
committed
798d729
perf(windows): omit optional x64 Hermes media tools
ericksoa
committed
b04d4cd
perf(windows): omit Hermes runtime package managers
ericksoa
committed
a4c29d6
perf(windows): use Edge without emulated agent browser
ericksoa
committed
934bf1a
chore(windows): pin Edge-only Hermes adapter
ericksoa
committed
ec1be22
ci(windows): reuse byte-identical Bash qualification
ericksoa
committed
4a45fae
perf(windows): share the pinned Hermes Node runtime
ericksoa
committed
8790fac
fix(windows): exclude NTFS metadata from image verification
ericksoa
committed
a715314
ci(windows): run acceptance after Bash proof reuse
ericksoa
committed
472a568
fix(windows): admit verified runtime image mounts
ericksoa
committed
c07af33
fix(windows): seal compact runtime integrity in CI
ericksoa
committed
483d179
fix(windows): reserve compact image build capacity
ericksoa
committed
5ad29dc

Commits on Sep 15, 2026

fix(windows): pass valid runtime mount path to DiskPart
ericksoa
committed
14dfa97
fix(windows): own runtime attachment through Virtual Disk API
ericksoa
committed
3ab6081
fix(windows): enable scoped volume attachment privilege
ericksoa
committed
f312a7f
fix(windows): finalize runtime image in elevated bundle
ericksoa
committed
fe19677
fix(windows): parse bundle-owned MSI audit conditions
ericksoa
committed
32e78da
fix(windows): admit image before bundle finalization
ericksoa
committed
a407a85
fix(windows): seal exact runtime image ACL
ericksoa
committed
bb90ac0
fix(windows): trust only pinned read-only runtime volumes
ericksoa
committed
0d882d4
fix(windows): bound Edge identity probe work
ericksoa
committed
dfef4c3
fix(windows): verify Edge trust without PowerShell
ericksoa
committed
e75583f
fix(windows): use generic verify policy for Edge
ericksoa
committed
b6291b0
test(windows): exercise native Edge trust owner
ericksoa
committed
3050e85
fix(windows): verify Edge identity without PowerShell
ericksoa
committed
44d6726
test(windows): retain Edge trust denial
ericksoa
committed
273f121
test(windows): observe native Edge helper results
ericksoa
committed
63c1fbb
fix(windows): pregrant MXC runtime reads
ericksoa
committed
2699599
test(windows): prove preauthorized MXC image reads
ericksoa
committed
8a375cd
test(windows): retain runtime image attach evidence
ericksoa
committed
6256561
test(windows): select runtime image partition
ericksoa
committed
cd9a400
test(windows): normalize ACL evidence masks
ericksoa
committed
59bf532
test(windows): preserve failing image ACL evidence
ericksoa
committed
516bc17
fix(windows): protect mounted runtime roots
ericksoa
committed
3e57ba0
fix(windows): handle image ACL principals
ericksoa
committed
120fd64
test(windows): preserve runtime root ACL evidence
ericksoa
committed
867419f
fix(windows): normalize AppContainer ACL identities
ericksoa
committed
8277162
test(windows): accept explicit runtime grants
ericksoa
committed
7b2aea3
ci(windows): rebind passing Bash evidence
ericksoa
committed
3f97638
ci(windows): advance Bash proof baseline
ericksoa
committed
1233b4b
fix(windows): support legacy PowerShell image build
ericksoa
committed
5abe4e5
test(windows): match system-drive PowerShell host
ericksoa
committed
1443616

Commits on Sep 16, 2026

fix(windows): qualify installer candidate on N1X BaseContainer (#11872)
prekshivyas
authored
9a07f94
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
caede1a
fix(windows): satisfy current branch checks
ericksoa
committed
819c141
fix(windows): bind preauthorized image proof
ericksoa
committed
59c07ad
fix(windows): initialize owned cleanup handles
ericksoa
committed
7ca296a
fix(windows): satisfy current workflow contracts
ericksoa
committed
42b4904
test(windows): bind focused system-drive verifier
ericksoa
committed
bd6eaa3
fix(windows): retain named worker factories
ericksoa
committed
ab90fcc
fix(windows): compact Pi SDK paths and speed Hermes packaging
prekshivyas
committed
d626b9a
fix(windows): add credential-free Pi installed smoke
prekshivyas
committed
4bb0793
fix(windows): verify Pi startup evidence safely
prekshivyas
committed
730da8c
test(windows): preserve PowerShell profile context
ericksoa
committed
94c073b
test(windows): bound legacy shell controls reliably
ericksoa
committed
f73da9c
fix(windows): authorize installed runtime mount
ericksoa
committed
b15ade7
Merge branch 'main' into feat/windows-native-installer
ericksoa
committed
da14980
fix(windows): request mount attribute access
ericksoa
committed
a1f0ecd
fix(windows): normalize reviewed npm scratch path
ericksoa
committed
c179c22
fix(windows): keep reviewed npm archive local
ericksoa
committed
830e67e
test(windows): align installer control census
ericksoa
committed
2edf334
test(windows): expose mount authorization status
ericksoa
committed
ce7f5d6
test(windows): isolate mount ACL diagnostics
ericksoa
committed
e6929c7
fix(windows): secure runtime mount by name
ericksoa
committed
33ca9c8
fix(windows): authorize assigned runtime mount
ericksoa
committed
c53e6e3
Merge branch 'main' into feat/windows-native-installer
ericksoa
committed
bbf6c43
Merge branch 'main' into feat/windows-native-installer
ericksoa
committed
3bf621d
test(windows): repin canonical Bash proof
ericksoa
committed
f7ab7aa
Merge branch 'main' into feat/windows-native-installer
ericksoa
committed
8d50c6c
fix(windows): authorize runtime volume root
ericksoa
committed
07fa1d2
test(windows): repin volume-root Bash proof
ericksoa
committed
2f71056
fix(windows): admit verified runtime volume mount
ericksoa
committed
a7c32c6
test(windows): model the Edge-only browser profile
ericksoa
committed
9eb41f9
test(windows): canonicalize runtime fixture roots
ericksoa
committed
64f3692
fix(windows): pin mount-aware Hermes adapter
ericksoa
committed
18b8a72
fix(windows): preserve sealed Hermes worker path
ericksoa
committed
2852890
test(windows): repin sealed-worker Bash proof
ericksoa
committed
b4cf3d9
fix(windows): bind Hermes policy imports
ericksoa
committed
5a1f4c7
test(windows): select adapter fallback seam
ericksoa
committed
eaa2249

Commits on Sep 17, 2026

fix(windows): bound Hermes identity walk to mount
ericksoa
committed
430e017
test(windows): qualify backend-specific setup
ericksoa
committed
1499f5b
test(windows): serialize final installer controls
ericksoa
committed
a4b18aa
test(windows): bind proof to selected MXC tier
ericksoa
committed
1113797
test(windows): repin selected-tier Bash proof
ericksoa
committed
aaf95f3
test(windows): read Edge signer subject
ericksoa
committed
2de2960
test(windows): count live Hermes PTY sockets
ericksoa
committed
6b92e6e
test(windows): preflight installed acceptance once
ericksoa
committed
3068813
feat(windows): qualify installed Hermes and Pi
prekshivyas
committed
d4a41ac
test(windows): admit canonical global Hermes events
ericksoa
committed
67c9166
test(windows): repin stacked Bash proof
ericksoa
committed
0b79a2a
test(windows): bind stacked Bash baseline
ericksoa
committed
1e0bd3f
test(windows): bind Hermes transcript profile
ericksoa
committed
fb78d25
test(windows): poll lazy Hermes transcript
ericksoa
committed
f764162
merge: sync current main into windows installer
prekshivyas
committed
4d1ffd2
merge: refresh current main for windows installer
prekshivyas
committed
20d5566
test(windows): identify pasted Hermes turns
ericksoa
committed
2eecb90
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
bb016c3
fix(windows): narrow OpenSSL cleanup exceptions
ericksoa
committed
b1df120
test(windows): repin current Hermes adapter
ericksoa
committed
1a54da0
test(windows): admit pre-session PTY reconnect
ericksoa
committed
9535498
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
18cea00
test(windows): bind Hermes turns by transcript id
ericksoa
committed
e2805eb
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
a065909
fix(windows): retry locked Edge endpoint
ericksoa
committed
d6fe96a
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
6ebb891

Commits on Sep 18, 2026

fix(windows): refresh live Hermes transcripts
ericksoa
committed
617aef2
fix(windows): validate migration isolation tier
ericksoa
committed
ff4418d
fix(windows): align Edge observer driver
ericksoa
committed
6c8eaf3
Revert "fix(windows): align Edge observer driver"
ericksoa
committed
94f8389
fix(windows): observe Hermes sockets in page
ericksoa
committed
77e5b70
fix(windows): submit multiline Hermes turns
ericksoa
committed
d367719
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
e9da498
fix(windows): submit turns through Hermes PTY
ericksoa
committed
2902e52
fix(windows): pace Hermes PTY input
ericksoa
committed
59b525a
fix(windows): activate Hermes chat route
ericksoa
committed
13b7dbc
Revert "fix(windows): activate Hermes chat route"
ericksoa
committed
2b26089
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
a503c03
test(windows): retain Hermes startup diagnostics
ericksoa
committed
aca1910
fix(windows): avoid denied Hermes root lookup
ericksoa
committed
6a962db
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
8b9428e
fix(windows): bind shared Hermes Node authority
ericksoa
committed
8d61add
Merge remote-tracking branch 'origin/main' into feat/windows-native-installer
ericksoa
committed
0b9e1c7