feat(sandbox): prototype Windows process confinement

Author: marius-kilocode

.changeset/windows-process-sandbox.md

@@ -0,0 +1,5 @@
+---
+"@kilocode/cli": minor
+---
+
+Confine commands launched by the experimental Windows sandbox to approved project and temporary directories.

.github/workflows/test.yml

@@ -63,6 +63,17 @@ jobs:
       - name: Setup Bun
         uses: ./.github/actions/setup-bun
 
+      - name: Build Windows sandbox helper
+        if: runner.os == 'Windows'
+        run: cargo build --locked --release --manifest-path packages/kilo-sandbox/native/windows/Cargo.toml
+
+      - name: Run Windows sandbox integration tests
+        if: runner.os == 'Windows'
+        working-directory: packages/kilo-sandbox
+        run: bun test test/windows.integration.test.ts --timeout 30000
+        env:
+          KILO_WINDOWS_SANDBOX_HELPER: ${{ github.workspace }}/packages/kilo-sandbox/native/windows/target/release/kilo-sandbox-win.exe
+
       - name: Configure git identity
         run: |
           git config --global user.email "kilo-maintainer[bot]@users.noreply.github.com"

packages/kilo-sandbox/native/windows/Cargo.lock

@@ -0,0 +1,34 @@
+[package]
+name = "kilo-sandbox-win"
+version = "0.1.0"
+edition = "2021"
+license = "MIT"
+publish = false
+
+[[bin]]
+name = "kilo-sandbox-win"
+path = "src/main.rs"
+
+[dependencies]
+anyhow = "1.0"
+base64 = "0.22"
+serde = { version = "1.0", features = ["derive"] }
+serde_json = "1.0"
+sha2 = "0.10"
+
+[target.'cfg(windows)'.dependencies]
+windows-sys = { version = "0.52", features = [
+  "Win32_Foundation",
+  "Win32_Security",
+  "Win32_Security_Authorization",
+  "Win32_Storage_FileSystem",
+  "Win32_System_Console",
+  "Win32_System_JobObjects",
+  "Win32_System_LibraryLoader",
+  "Win32_System_Threading",
+] }
+
+[profile.release]
+lto = "thin"
+panic = "abort"
+strip = true

packages/kilo-sandbox/native/windows/Cargo.toml

@@ -0,0 +1,3 @@
+[toolchain]
+channel = "1.92.0"
+profile = "minimal"