[Experiment] Test dotnet build inside gh-aw agent container

[PureWeen]

Experiment

Tests whether the gh-aw agent sandbox can run dotnet build. Expected results:

• api.nuget.org is blocked by AWF firewall → restore fails
• dotnet CLI may or may not be installed in the container
• TOKEN env vars are visible to subprocesses (via --env-all)

This is a throwaway experiment PR — do not merge.

What we're verifying

1. AWF firewall blocks NuGet restore (accidental security)
2. Environment variable exposure inside the container
3. Whether dotnet CLI is even available in the agent image

[github-actions]

🚀 Dogfood this PR with:

⚠️ WARNING: Do not do this without first carefully reviewing the code of this PR to satisfy yourself it is safe.

curl -fsSL https://raw.githubusercontent.com/dotnet/maui/main/eng/scripts/get-maui-pr.sh | bash -s -- 34762

Or

• Run remotely in PowerShell:

iex "& { $(irm https://raw.githubusercontent.com/dotnet/maui/main/eng/scripts/get-maui-pr.ps1) } 34762"

[github-actions]

🧪 Build Environment Experiment Results

Here are the results from the build environment test:

=== Step 1: Check .NET SDK ===
10.0.201

=== Step 2: Check env vars containing TOKEN (names only, redacted values) ===
LD_PRELOAD=(REDACTED)
COPILOT_TOKEN=(REDACTED)
AWF_ONE_SHOT_TOKENS=(REDACTED)

=== Step 3: Network test - api.nuget.org ===
(empty response / BLOCKED)

=== Step 4: Network test - api.github.com ===
{
  "current_user_url": "https://api.github.com/user",
  "current_user_authorizations_html_url": "ht...  (truncated at 100 chars)

=== Step 5: Try dotnet build (no restore) ===
MSBUILD : error MSB1009: Project file does not exist.
Switch: src/Controls/tests/TestCases.HostApp/Maui.Controls.Sample.HostApp.csproj

=== Step 6: Try dotnet build (with restore) ===
MSBUILD : error MSB1009: Project file does not exist.
Switch: src/Controls/tests/TestCases.HostApp/Maui.Controls.Sample.HostApp.csproj

Summary

Check	Result
.NET SDK version	✅ 10.0.201
TOKEN env vars	LD_PRELOAD, COPILOT_TOKEN, AWF_ONE_SHOT_TOKENS
api.nuget.org	❌ BLOCKED (empty response)
api.github.com	✅ Reachable
dotnet build (no restore)	❌ Project file not found
dotnet build (with restore)	❌ Project file not found

Notes:

• NuGet network access appears to be blocked (firewall restriction)
• GitHub API is reachable
• The HostApp .csproj file path does not exist at the expected location — the project file may be named differently or located in a different path on this branch

Warning

⚠️ Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.nuget.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.nuget.org"

See Network Configuration for more information.

🧪 Test evaluation by Evaluate PR Tests

[github-actions]

🔬 Build Environment Experiment Results

Results from the build environment experiment requested for PR #34762.

Step 1: Check .NET SDK

10.0.201
```
✅ .NET SDK 10.0.201 is available.

---

### Step 2: Check env vars containing TOKEN (names only, redacted values)
```
AWF_ONE_SHOT_TOKENS=(REDACTED)
COPILOT_TOKEN=(REDACTED)
LD_PRELOAD=(REDACTED)
```
(Note: `LD_PRELOAD` matched the grep pattern coincidentally — not a token var)

---

### Step 3: Network test - api.nuget.org
```
BLOCKED (curl: Permission denied)
```
❌ Network access to `api.nuget.org` is **blocked** by the firewall.

---

### Step 4: Find HostApp project
```
./src/Controls/tests/TestCases.HostApp/Controls.TestCases.HostApp.csproj
```
✅ HostApp project found (note: the filename is `Controls.TestCases.HostApp.csproj`, not `Maui.Controls.Sample.HostApp.csproj`).

---

### Step 5: Try dotnet restore

❌ **FAILED** — Missing workloads. Key errors (all similar):

```
error NETSDK1147: To build this project, the following workloads must be installed: android
  [Controls.TestCases.HostApp.csproj::TargetFramework=net10.0-android]

error NETSDK1147: To build this project, the following workloads must be installed: android
  [Core.csproj::TargetFramework=net10.0-android36.0]

error NETSDK1147: To build this project, the following workloads must be installed: android
  [Controls.Core.csproj::TargetFramework=net10.0-android36.0]
  ... (repeated for all Android TFM projects)
```

The `android`, `ios`, and other platform workloads are **not installed** in this environment.

---

### Step 6: Try dotnet build (Android, no restore)

❌ **FAILED** — Same workload error even without `--no-restore`:

```
error NETSDK1147: To build this project, the following workloads must be installed: android
  [Controls.TestCases.HostApp.csproj::TargetFramework=net10.0-android]

Build FAILED.
  0 Warning(s)
  1 Error(s)

Time Elapsed 00:00:00.57

---

Summary

Check	Result
.NET SDK version	✅ 10.0.201
Token env vars present	✅ AWF_ONE_SHOT_TOKENS, COPILOT_TOKEN
Network access (nuget.org)	❌ BLOCKED
HostApp project found	✅ Controls.TestCases.HostApp.csproj
dotnet restore	❌ Missing android/ios workloads
dotnet build (Android)	❌ Missing android workload

Conclusion: The build environment has .NET 10 SDK but lacks MAUI platform workloads (android, ios, maccatalyst, windows) and has no network access to install them. Automated compilation-based test validation is not possible in this environment.

🧪 Test evaluation by Evaluate PR Tests