ci: skip scheduled workflows on forks and fix the Windows sandbox W0 lane

.github/workflows/dependency-audit.yml

@@ -51,6 +51,7 @@ concurrency:
 
 jobs:
   audit:
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     runs-on: ubuntu-24.04
     timeout-minutes: 45
     steps:

.github/workflows/pr-effort-label.yml

@@ -46,6 +46,7 @@ concurrency:
 
 jobs:
   label:
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     runs-on: ubuntu-24.04
     timeout-minutes: 10
 

.github/workflows/release-linux-check.yml

@@ -83,6 +83,7 @@ jobs:
   # Not `package`: the Windows lane's job already claims that name, and two
   # checks reading `package` on the same pull request cannot be told apart.
   package-linux:
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     # x64 only. The arm64 packages are built from the same scripts, the same
     # configuration and the same descriptor, so this lane would re-prove all of
     # what it can reach and none of what differs — a 16K-page host and its own

.github/workflows/release-windows-check.yml

@@ -124,6 +124,7 @@ concurrency:
 
 jobs:
   package:
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     runs-on: windows-2025
     timeout-minutes: 45
     defaults:

.github/workflows/windows-acp.yml

@@ -45,6 +45,7 @@ concurrency:
 jobs:
   windows_acp:
     name: windows_acp
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     runs-on: windows-2025
     timeout-minutes: 45
     steps:

.github/workflows/windows-baseline.yml

@@ -36,6 +36,7 @@ permissions:
 jobs:
   windows_baseline:
     name: windows_baseline (non-blocking)
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     runs-on: windows-latest
     timeout-minutes: 45
     continue-on-error: true

.github/workflows/windows-recovery.yml

@@ -162,6 +162,7 @@ permissions:
 jobs:
   windows_recovery:
     name: windows_recovery
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     runs-on: windows-latest
     timeout-minutes: 45
     steps:

.github/workflows/windows-sandbox-w0.yml

@@ -47,6 +47,7 @@ concurrency:
 jobs:
   protocol:
     name: windows_sandbox_w0_protocol
+    if: github.event_name != 'schedule' || github.repository == 'apache/maka'
     runs-on: windows-2025
     timeout-minutes: 45
     steps:

apps/desktop/electron-builder.config.mjs

@@ -132,8 +132,8 @@ const baseDesktopBuilderConfig = {
       to: 'status',
     },
     {
-      from: 'resources/workers/filesystem-worker.js',
-      to: 'workers/filesystem-worker.js',
+      from: 'resources/workers/filesystem-worker.mjs',
+      to: 'workers/filesystem-worker.mjs',
     },
     {
       from: '../../native/runtime-host-peer/target/release/maka_runtime_host_peer.node',

apps/desktop/scripts/copy-runtime-filesystem-worker.mjs

@@ -20,10 +20,11 @@
 import { copyFile, mkdir, stat } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { FILESYSTEM_WORKER_BUNDLE_NAME } from '../../../packages/runtime/dist/filesystem-worker/resource-resolver.js';
 
 const desktopRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
-const source = resolve(desktopRoot, '..', '..', 'packages', 'runtime', 'dist', 'workers', 'filesystem-worker.js');
-const target = resolve(desktopRoot, 'resources', 'workers', 'filesystem-worker.js');
+const source = resolve(desktopRoot, '..', '..', 'packages', 'runtime', 'dist', 'workers', FILESYSTEM_WORKER_BUNDLE_NAME);
+const target = resolve(desktopRoot, 'resources', 'workers', FILESYSTEM_WORKER_BUNDLE_NAME);
 const metadata = await stat(source).catch(() => undefined);
 if (!metadata?.isFile()) throw new Error(`Runtime filesystem worker bundle is missing: ${source}`);
 await mkdir(dirname(target), { recursive: true });

packages/runtime/scripts/build-filesystem-worker.mjs

@@ -21,9 +21,10 @@ import { mkdir } from 'node:fs/promises';
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { build } from 'esbuild';
+import { FILESYSTEM_WORKER_BUNDLE_NAME } from '../dist/filesystem-worker/resource-resolver.js';
 
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
-const outfile = resolve(packageRoot, 'dist', 'workers', 'filesystem-worker.js');
+const outfile = resolve(packageRoot, 'dist', 'workers', FILESYSTEM_WORKER_BUNDLE_NAME);
 const agentsCoreUtils = fileURLToPath(import.meta.resolve('@openai/agents-core/utils'));
 
 await mkdir(dirname(outfile), { recursive: true });

packages/runtime/src/__tests__/filesystem-worker-client.test.ts

@@ -669,9 +669,9 @@ function fakeClient(
         ok: true,
         spec: {
           program: '/usr/bin/node',
-          args: ['/runtime/filesystem-worker.js', '--grep-executable', '/usr/bin/rg'],
+          args: ['/runtime/filesystem-worker.mjs', '--grep-executable', '/usr/bin/rg'],
           env: {},
-          runtimeReadableRoots: ['/runtime/filesystem-worker.js'],
+          runtimeReadableRoots: ['/runtime/filesystem-worker.mjs'],
           executableRoots: ['/usr/bin/node', '/usr/bin/rg'],
         },
       };
@@ -787,9 +787,9 @@ describe('filesystem worker client dispatch classification', () => {
         ok: true,
         spec: {
           program: '/usr/bin/node',
-          args: ['/runtime/filesystem-worker.js', '--grep-executable', '/usr/bin/rg'],
+          args: ['/runtime/filesystem-worker.mjs', '--grep-executable', '/usr/bin/rg'],
           env: {},
-          runtimeReadableRoots: ['/runtime/filesystem-worker.js'],
+          runtimeReadableRoots: ['/runtime/filesystem-worker.mjs'],
           executableRoots: ['/usr/bin/node', '/usr/bin/rg'],
         },
       }),
@@ -882,9 +882,9 @@ describe('filesystem worker client dispatch classification', () => {
         ok: true,
         spec: {
           program: '/usr/bin/node',
-          args: ['/runtime/filesystem-worker.js', '--grep-executable', '/usr/bin/rg'],
+          args: ['/runtime/filesystem-worker.mjs', '--grep-executable', '/usr/bin/rg'],
           env: {},
-          runtimeReadableRoots: ['/runtime/filesystem-worker.js'],
+          runtimeReadableRoots: ['/runtime/filesystem-worker.mjs'],
           executableRoots: ['/usr/bin/node', '/usr/bin/rg'],
         },
       }),
@@ -940,9 +940,9 @@ describe('filesystem worker client dispatch classification', () => {
         ok: true,
         spec: {
           program: '/usr/bin/node',
-          args: ['/runtime/filesystem-worker.js', '--grep-executable', '/usr/bin/rg'],
+          args: ['/runtime/filesystem-worker.mjs', '--grep-executable', '/usr/bin/rg'],
           env: {},
-          runtimeReadableRoots: ['/runtime/filesystem-worker.js'],
+          runtimeReadableRoots: ['/runtime/filesystem-worker.mjs'],
           executableRoots: ['/usr/bin/node', '/usr/bin/rg'],
         },
       }),

packages/runtime/src/__tests__/linux-sandbox.test.ts

@@ -278,7 +278,7 @@ describe('buildBubblewrapArgv', () => {
     const request = workspaceRequest(profile);
     const pathContext: SandboxPathContext = {
       ...request.command.pathContext,
-      runtimeReadableRoots: ['/runtime/filesystem-worker.js'],
+      runtimeReadableRoots: ['/runtime/filesystem-worker.mjs'],
       executableRoots: ['/opt/node/bin/node', '/opt/rg/bin/rg'],
       runtimeWritableRoots: ['/outside'],
     };
@@ -294,8 +294,8 @@ describe('buildBubblewrapArgv', () => {
       hasTriple(
         argv,
         '--ro-bind',
-        '/runtime/filesystem-worker.js',
-        '/runtime/filesystem-worker.js',
+        '/runtime/filesystem-worker.mjs',
+        '/runtime/filesystem-worker.mjs',
       ),
     );
     assert.ok(hasTriple(argv, '--ro-bind', '/opt/node/bin/node', '/opt/node/bin/node'));

packages/runtime/src/filesystem-worker/resource-resolver.ts

@@ -21,7 +21,9 @@ import { realpath, stat } from 'node:fs/promises';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
-export const FILESYSTEM_WORKER_BUNDLE_NAME = 'filesystem-worker.js';
+// `.mjs` so Node never looks for a package.json to decide the module type:
+// the Windows AppContainer sandbox denies that read and the worker crashes.
+export const FILESYSTEM_WORKER_BUNDLE_NAME = 'filesystem-worker.mjs';
 
 export type FilesystemWorkerResourceLocation =
   | { kind: 'runtime'; moduleUrl?: string }

scripts/release-cli-package.mjs

@@ -77,7 +77,7 @@ const internalPackageNames = workspacePackages
 const internalPackageSet = new Set(internalPackageNames);
 const buildOrder = orderWorkspaceBuilds(workspacePackages);
 const developmentGeneratedFiles = new Map([
-  ['@maka/runtime', new Set(['workers/filesystem-worker.js'])],
+  ['@maka/runtime', new Set(['workers/filesystem-worker.mjs'])],
 ]);
 const strippedInstallScripts = new Map([
   // The clean repository install has already produced every generated file and
@@ -749,7 +749,7 @@ function validateStaging(publishable) {
     'DISCLAIMER-WIP',
     'RUNTIME_HOST_PEER_DEPENDENCIES.rust.tsv',
     'RUNTIME_HOST_PEER_THIRD_PARTY_NOTICES.txt',
-    'node_modules/@maka/runtime/dist/workers/filesystem-worker.js',
+    'node_modules/@maka/runtime/dist/workers/filesystem-worker.mjs',
     'node_modules/@maka/runtime-host/dist/execution-candidate-main.js',
     'node_modules/@maka/eval/dist/harbor-external-subject.js',
     'node_modules/@maka/eval/harbor/relay_agent.py',
@@ -862,7 +862,7 @@ function validatePackedFiles(files, expectedDependencyManifests, publishable) {
   const requiredPacked = [
     'dist/cli.js',
     'DISCLAIMER-WIP',
-    'node_modules/@maka/runtime/dist/workers/filesystem-worker.js',
+    'node_modules/@maka/runtime/dist/workers/filesystem-worker.mjs',
     'node_modules/@maka/runtime-host/dist/execution-candidate-main.js',
     'node_modules/@maka/eval/harbor/relay_agent.py',
     ...(publishable || privateRuntimeHostTarget !== 'none'

scripts/smoke-release-cli-package.mjs

@@ -612,7 +612,7 @@ function validateInstalledRuntimeFiles(packageRoot) {
     // Incubator policy: the installed package carries the incubating
     // disclaimer next to LICENSE/NOTICE, like every other Maka release.
     'DISCLAIMER-WIP',
-    'node_modules/@maka/runtime/dist/workers/filesystem-worker.js',
+    'node_modules/@maka/runtime/dist/workers/filesystem-worker.mjs',
     'node_modules/@maka/runtime-host/dist/execution-candidate-main.js',
     'node_modules/@maka/eval/dist/index.js',
     'node_modules/@maka/eval/harbor/relay_agent.py',

scripts/verify-macos-dmg.mjs

@@ -342,7 +342,7 @@ export async function verifyPackagedMacApp(
   }
   const executableName = await readPlistValue(run, infoPlist, 'CFBundleExecutable');
   const executable = join(contents, 'MacOS', executableName);
-  const filesystemWorker = join(resources, 'workers', 'filesystem-worker.js');
+  const filesystemWorker = join(resources, 'workers', 'filesystem-worker.mjs');
   const appAsar = join(resources, 'app.asar');
 
   await requirePath(executable);

scripts/verify-packaged-app.mjs

@@ -1053,13 +1053,15 @@ export async function assertPackagedResources(
     // Current Desktop builds ship the direct-peer Client addon beside its Rust
     // notices. Upgrade baselines may predate both resources.
     requireDirectPeerArtifact = true,
+    // Upgrade baselines may still ship the worker as `filesystem-worker.js`.
+    requireMjsFilesystemWorker = true,
   } = {},
 ) {
   const required = [
     'app.asar',
     'bundled-tools.json',
     ...(requireCanonicalIcon ? [join('assets', 'icon.png')] : []),
-    join('workers', 'filesystem-worker.js'),
+    ...(requireMjsFilesystemWorker ? [join('workers', 'filesystem-worker.mjs')] : []),
     ...(requireDirectPeerArtifact
       ? [
           join('runtime-host-peer', 'maka_runtime_host_peer.node'),

scripts/verify-packaged-app.test.mjs

@@ -245,11 +245,13 @@ test('the upgrade baseline keeps the Git absence rule while relaxing newer resou
     requireCanonicalIcon: false,
     requireAppIconCatalog: false,
     requireDirectPeerArtifact: false,
+    requireMjsFilesystemWorker: false,
   });
 
   // A pinned baseline may predate any of these; none of them may be demanded
   // of bytes that were correct when they shipped.
   for (const path of [
+    join('resources', 'workers', 'filesystem-worker.mjs'),
     join('resources', 'assets', 'icon.png'),
     join('resources', 'licenses', 'maka', 'DISCLAIMER-WIP'),
     join('resources', 'runtime-host-peer', 'maka_runtime_host_peer.node'),

scripts/verify-windows-sandbox-e2e.mjs

@@ -86,7 +86,7 @@ function assertCondition(condition, message) {
  * PACKAGED Windows app: the packaged broker executable enforces the
  * AppContainer boundary, the packaged Electron executable is the worker
  * runtime (ELECTRON_RUN_AS_NODE, exactly as production launches it) and the
- * packaged `resources\workers\filesystem-worker.js` is the worker bundle.
+ * packaged `resources\workers\filesystem-worker.mjs` is the worker bundle.
  * Only the driver (client + launch-spec code) comes from the repository
  * build, because the packaged copy lives inside app.asar which plain node
  * cannot import; every executed artifact is the shipped one.
@@ -96,7 +96,7 @@ export async function verifyWindowsSandboxWorkerE2E(appDirectoryPath) {
   const appExecutable = join(appDirectory, 'Maka.exe');
   const resourcesPath = join(appDirectory, 'resources');
   const sandboxExecutable = join(resourcesPath, 'windows-sandbox', 'maka-windows-sandbox.exe');
-  const workerBundle = join(resourcesPath, 'workers', 'filesystem-worker.js');
+  const workerBundle = join(resourcesPath, 'workers', 'filesystem-worker.mjs');
   for (const [path, label] of [
     [appExecutable, 'packaged Electron executable'],
     [sandboxExecutable, 'packaged sandbox broker'],

scripts/verify-windows-x64.mjs

@@ -158,6 +158,7 @@ export async function verifyPackagedWindowsApp(
     requireCanonicalIcon: requiresCurrentContract,
     requireAppIconCatalog: requiresCurrentContract,
     requireDirectPeerArtifact: requiresCurrentContract,
+    requireMjsFilesystemWorker: requiresCurrentContract,
   });
   // The upgrade baseline is a build that shipped on its own channel, from its
   // own commit: its update feed and dependency closure are the ones that were

scripts/windows-smoke.mjs

@@ -36,7 +36,7 @@ const DESKTOP_RUNTIME_WORKER = join(
   'desktop',
   'resources',
   'workers',
-  'filesystem-worker.js',
+  'filesystem-worker.mjs',
 );
 const DESKTOP_SMOKE = join(REPO_ROOT, 'scripts', 'desktop-real-window-smoke.mjs');
 const CLI_TIMEOUT_MS = 15_000;