[2050 by GPT-5.6 Sol] Stage packaged Windows ARM64 desktop artifacts for ordinary-user Connect smoke

.github/workflows/desktop-connect-discovery-guard.yml

@@ -79,6 +79,10 @@ jobs:
         if: matrix.platform == 'win32'
         run: npm run test:windows-fixture-acl -w @propr/desktop
 
+      - name: Verify Windows packaged launcher authority
+        if: matrix.platform == 'win32'
+        run: node --test apps/desktop/scripts/windows-packaged-connect-staging.test.mjs
+
       - name: Package the target-native desktop app
         run: npm run desktop:package
 
@@ -99,29 +103,6 @@ jobs:
       - name: Run packaged Windows main-to-renderer discovery as an ordinary user
         if: matrix.platform == 'win32'
         shell: powershell
-        run: |
-          $ErrorActionPreference = 'Stop'
-          $userName = 'propr-connect-ci'
-          if ($userName.Length -gt 20) { throw 'packaged discovery user name exceeds the local-account limit' }
-          $plainPassword = [Guid]::NewGuid().ToString('N') + 'aA1!'
-          $securePassword = ConvertTo-SecureString $plainPassword -AsPlainText -Force
-          $credential = [PSCredential]::new("$env:COMPUTERNAME\$userName", $securePassword)
-          $stdout = Join-Path $env:RUNNER_TEMP 'packaged-connect.stdout'
-          $stderr = Join-Path $env:RUNNER_TEMP 'packaged-connect.stderr'
-          try {
-            New-LocalUser -Name $userName -Password $securePassword -PasswordNeverExpires | Out-Null
-            $administrators = Get-LocalGroupMember -Group 'Administrators' | ForEach-Object { $_.Name }
-            if ($administrators -contains "$env:COMPUTERNAME\$userName") { throw 'packaged discovery user is an administrator' }
-            $node = (Get-Command node.exe).Source
-            $desktopDirectory = Join-Path $env:GITHUB_WORKSPACE 'apps/desktop'
-            $process = Start-Process -FilePath $node -ArgumentList @('scripts/smoke-packaged-connect.mjs') -WorkingDirectory $desktopDirectory -Credential $credential -LoadUserProfile -Wait -PassThru -RedirectStandardOutput $stdout -RedirectStandardError $stderr
-            Get-Content -LiteralPath $stdout
-            if ($process.ExitCode -ne 0) {
-              Get-Content -LiteralPath $stderr
-              throw "packaged Connect discovery exited $($process.ExitCode)"
-            }
-            if ((Get-Content -Raw -LiteralPath $stderr).Length -ne 0) { throw 'packaged Connect discovery wrote stderr' }
-          } finally {
-            Remove-LocalUser -Name $userName -ErrorAction SilentlyContinue
-            Remove-Item -LiteralPath $stdout,$stderr -Force -ErrorAction SilentlyContinue
-          }
+        run: >-
+          & apps/desktop/scripts/run-packaged-windows-connect-smoke.ps1
+          -Architecture '${{ matrix.arch }}'

apps/desktop/scripts/packaged-layout.d.mts

@@ -0,0 +1,3 @@
+export const parseEventRecord: (smokeOutput: string, expectedEvent: string) => Record<string, unknown> | undefined;
+export const parseEventLayout: (smokeOutput: string, expectedEvent: string) => unknown;
+export const assertPackagedLayout: (layout: unknown, platform?: NodeJS.Platform) => void;

apps/desktop/scripts/packaged-layout.mjs

@@ -1,6 +1,23 @@
 const EXPECTED_WINDOW_SIZE = { width: 1280, height: 820 };
 const MINIMUM_WINDOW_SIZE = { width: 880, height: 620 };
 
+export const parseEventRecord = (smokeOutput, expectedEvent) => {
+  for (const line of smokeOutput.split(/\r?\n/)) {
+    if (!line.includes(expectedEvent)) continue;
+    try {
+      const record = JSON.parse(line.slice(line.indexOf('{')));
+      if (record.event === expectedEvent) return record;
+    } catch {
+      // Ignore non-JSON Chromium output that happens to mention the event name.
+    }
+  }
+  return undefined;
+};
+
+export const parseEventLayout = (smokeOutput, expectedEvent) => (
+  parseEventRecord(smokeOutput, expectedEvent)?.layout
+);
+
 const fail = message => {
   throw new Error(message);
 };

apps/desktop/scripts/packaged-layout.test.mjs

@@ -1,6 +1,6 @@
 import assert from 'node:assert/strict';
 import { describe, it } from 'node:test';
-import { assertPackagedLayout } from './packaged-layout.mjs';
+import { assertPackagedLayout, parseEventRecord } from './packaged-layout.mjs';
 
 const bounds = (left, top, width, height) => ({
   bottom: top + height,
@@ -30,6 +30,36 @@ const layout = ({
   connectDescription: bounds((viewportWidth - 300) / 2, 270, 300, 18),
 });
 
+describe('packaged desktop event parsing', () => {
+  it('returns the first full record for the exact matching event', () => {
+    const firstProof = {
+      event: 'desktop.renderer.mvp_flows.ready',
+      localProfile: true,
+      remoteActiveProfile: true,
+      lifecycleBoundary: true,
+      connectUiPopulated: true,
+    };
+    const output = [
+      'not JSON: desktop.renderer.mvp_flows.ready',
+      JSON.stringify({ event: 'desktop.renderer.mvp_flows.ready.extra', localProfile: false }),
+      JSON.stringify({ event: 'desktop.renderer.other', note: 'desktop.renderer.mvp_flows.ready' }),
+      JSON.stringify(firstProof),
+      JSON.stringify({ event: 'desktop.renderer.mvp_flows.ready', localProfile: false }),
+    ].join('\n');
+
+    assert.deepEqual(parseEventRecord(output, firstProof.event), firstProof);
+  });
+
+  it('returns undefined when the event is absent', () => {
+    const output = [
+      '{malformed',
+      JSON.stringify({ event: 'desktop.renderer.other' }),
+    ].join('\n');
+
+    assert.equal(parseEventRecord(output, 'desktop.renderer.mvp_flows.ready'), undefined);
+  });
+});
+
 describe('packaged desktop layout assertions', () => {
   it('retains the exact 1280x820 Linux Xvfb proof', () => {
     assert.doesNotThrow(() => assertPackagedLayout(layout(), 'linux'));