windows-development-sandbox 0.0.0-stage → 1.1.0

package/dist/shared/schema.d.ts

@@ -0,0 +1,527 @@
+import { z } from 'zod';
+export declare const Id: z.ZodString;
+export declare const AttachEndpoint: z.ZodObject<{
+    addresses: z.ZodArray<z.ZodString>;
+    port: z.ZodNumber;
+    token: z.ZodString;
+}, z.core.$strict>;
+/** C:\AgentData\run\sandbox.json: boot progress of the sandbox as a whole. */
+export declare const SandboxStatus: z.ZodObject<{
+    launchId: z.ZodString;
+    phase: z.ZodEnum<{
+        provisioning: "provisioning";
+        booting: "booting";
+        ready: "ready";
+        failed: "failed";
+    }>;
+    message: z.ZodString;
+    updatedAt: z.ZodString;
+    workspaceHost: z.ZodString;
+    guestWorkspace: z.ZodString;
+    headless: z.ZodBoolean;
+}, z.core.$strip>;
+/**
+ * A project the host registered after boot (sandbox claude from another folder): everything the guest needs to
+ * provision it and run its sessions with its own environment, resolved on the host exactly like a fresh launch (its
+ * approved .sandbox-config.json, version files, toolchain detection, database plan). Host -> guest only.
+ */
+export declare const ProjectSpec: z.ZodObject<{
+    name: z.ZodString;
+    workspace: z.ZodString;
+    workspaceHost: z.ZodString;
+    toolchains: z.ZodObject<{
+        node: z.ZodObject<{
+            version: z.ZodString;
+            extraVersions: z.ZodArray<z.ZodString>;
+            corepack: z.ZodBoolean;
+            volta: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            globalPackages: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        python: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+            python2: z.ZodBoolean;
+            pyenv: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            tools: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        rust: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            toolchain: z.ZodString;
+            host: z.ZodString;
+            components: z.ZodArray<z.ZodString>;
+            targets: z.ZodArray<z.ZodString>;
+            crates: z.ZodArray<z.ZodString>;
+            targetDir: z.ZodString;
+        }, z.core.$strict>;
+        msvc: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            acceptLicense: z.ZodBoolean;
+            msvcVersion: z.ZodString;
+            sdkVersion: z.ZodString;
+        }, z.core.$strict>;
+        cpp: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            flexBison: z.ZodBoolean;
+        }, z.core.$strict>;
+        dotnet: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            channels: z.ZodArray<z.ZodString>;
+            tools: z.ZodArray<z.ZodString>;
+            workloads: z.ZodArray<z.ZodString>;
+            frameworkTargets: z.ZodArray<z.ZodString>;
+            netfx35: z.ZodBoolean;
+        }, z.core.$strict>;
+        go: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+            tools: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        java: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+            maven: z.ZodBoolean;
+            gradle: z.ZodBoolean;
+        }, z.core.$strict>;
+        ruby: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+            gems: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        php: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+            composer: z.ZodBoolean;
+        }, z.core.$strict>;
+        deno: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+        }, z.core.$strict>;
+        pwsh: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+        }, z.core.$strict>;
+        cli: z.ZodObject<{
+            gh: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            zstd: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            openssl: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+        }, z.core.$strict>;
+        bun: z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strict>;
+        uv: z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strict>;
+        vcRuntime: z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strict>;
+        mesa: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            vulkan: z.ZodBoolean;
+        }, z.core.$strict>;
+        vscode: z.ZodObject<{
+            enabled: z.ZodBoolean;
+        }, z.core.$strict>;
+        environment: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.core.$strict>;
+    versions: z.ZodObject<{
+        node: z.ZodObject<{
+            spec: z.ZodString;
+            source: z.ZodString;
+        }, z.core.$strict>;
+        nodeExtra: z.ZodArray<z.ZodString>;
+        python: z.ZodObject<{
+            spec: z.ZodString;
+            source: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    databases: z.ZodArray<z.ZodObject<{
+        database: z.ZodEnum<{
+            postgres: "postgres";
+            mysql: "mysql";
+            mongodb: "mongodb";
+            redis: "redis";
+            dynamodb: "dynamodb";
+            sqlserver: "sqlserver";
+        }>;
+        reasons: z.ZodArray<z.ZodString>;
+        version: z.ZodString;
+        port: z.ZodNumber;
+        adminPort: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    harnesses: z.ZodRecord<z.ZodString, z.ZodObject<{
+        hostExecutable: z.ZodOptional<z.ZodString>;
+        hostDir: z.ZodOptional<z.ZodString>;
+        npmPackage: z.ZodOptional<z.ZodString>;
+        npmBin: z.ZodOptional<z.ZodString>;
+        uvPackage: z.ZodOptional<z.ZodString>;
+        uvBin: z.ZodOptional<z.ZodString>;
+        arguments: z.ZodArray<z.ZodString>;
+        environment: z.ZodRecord<z.ZodString, z.ZodString>;
+        resumeArguments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    hooks: z.ZodBoolean;
+}, z.core.$strict>;
+/** C:\AgentData\run\requests\<id>.json: the ONLY things the host can ask the sandbox to do. */
+export declare const GuestRequest: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"session">;
+    id: z.ZodString;
+    harness: z.ZodString;
+    args: z.ZodArray<z.ZodString>;
+    cwd: z.ZodString;
+    project: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        workspace: z.ZodString;
+        workspaceHost: z.ZodString;
+        toolchains: z.ZodObject<{
+            node: z.ZodObject<{
+                version: z.ZodString;
+                extraVersions: z.ZodArray<z.ZodString>;
+                corepack: z.ZodBoolean;
+                volta: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                globalPackages: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            python: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                python2: z.ZodBoolean;
+                pyenv: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                tools: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            rust: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                toolchain: z.ZodString;
+                host: z.ZodString;
+                components: z.ZodArray<z.ZodString>;
+                targets: z.ZodArray<z.ZodString>;
+                crates: z.ZodArray<z.ZodString>;
+                targetDir: z.ZodString;
+            }, z.core.$strict>;
+            msvc: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                msvcVersion: z.ZodString;
+                sdkVersion: z.ZodString;
+            }, z.core.$strict>;
+            cpp: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                flexBison: z.ZodBoolean;
+            }, z.core.$strict>;
+            dotnet: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                channels: z.ZodArray<z.ZodString>;
+                tools: z.ZodArray<z.ZodString>;
+                workloads: z.ZodArray<z.ZodString>;
+                frameworkTargets: z.ZodArray<z.ZodString>;
+                netfx35: z.ZodBoolean;
+            }, z.core.$strict>;
+            go: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                tools: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            java: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                maven: z.ZodBoolean;
+                gradle: z.ZodBoolean;
+            }, z.core.$strict>;
+            ruby: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                gems: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            php: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                composer: z.ZodBoolean;
+            }, z.core.$strict>;
+            deno: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            }, z.core.$strict>;
+            pwsh: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            }, z.core.$strict>;
+            cli: z.ZodObject<{
+                gh: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                zstd: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                openssl: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            }, z.core.$strict>;
+            bun: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            uv: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            vcRuntime: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            mesa: z.ZodObject<{
+                enabled: z.ZodBoolean;
+                vulkan: z.ZodBoolean;
+            }, z.core.$strict>;
+            vscode: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            environment: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.core.$strict>;
+        versions: z.ZodObject<{
+            node: z.ZodObject<{
+                spec: z.ZodString;
+                source: z.ZodString;
+            }, z.core.$strict>;
+            nodeExtra: z.ZodArray<z.ZodString>;
+            python: z.ZodObject<{
+                spec: z.ZodString;
+                source: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        databases: z.ZodArray<z.ZodObject<{
+            database: z.ZodEnum<{
+                postgres: "postgres";
+                mysql: "mysql";
+                mongodb: "mongodb";
+                redis: "redis";
+                dynamodb: "dynamodb";
+                sqlserver: "sqlserver";
+            }>;
+            reasons: z.ZodArray<z.ZodString>;
+            version: z.ZodString;
+            port: z.ZodNumber;
+            adminPort: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        harnesses: z.ZodRecord<z.ZodString, z.ZodObject<{
+            hostExecutable: z.ZodOptional<z.ZodString>;
+            hostDir: z.ZodOptional<z.ZodString>;
+            npmPackage: z.ZodOptional<z.ZodString>;
+            npmBin: z.ZodOptional<z.ZodString>;
+            uvPackage: z.ZodOptional<z.ZodString>;
+            uvBin: z.ZodOptional<z.ZodString>;
+            arguments: z.ZodArray<z.ZodString>;
+            environment: z.ZodRecord<z.ZodString, z.ZodString>;
+            resumeArguments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        hooks: z.ZodBoolean;
+    }, z.core.$strict>>;
+    harnessSpec: z.ZodOptional<z.ZodObject<{
+        hostExecutable: z.ZodOptional<z.ZodString>;
+        hostDir: z.ZodOptional<z.ZodString>;
+        npmPackage: z.ZodOptional<z.ZodString>;
+        npmBin: z.ZodOptional<z.ZodString>;
+        uvPackage: z.ZodOptional<z.ZodString>;
+        uvBin: z.ZodOptional<z.ZodString>;
+        arguments: z.ZodArray<z.ZodString>;
+        environment: z.ZodRecord<z.ZodString, z.ZodString>;
+        resumeArguments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>;
+    createdAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"project">;
+    id: z.ZodString;
+    project: z.ZodObject<{
+        name: z.ZodString;
+        workspace: z.ZodString;
+        workspaceHost: z.ZodString;
+        toolchains: z.ZodObject<{
+            node: z.ZodObject<{
+                version: z.ZodString;
+                extraVersions: z.ZodArray<z.ZodString>;
+                corepack: z.ZodBoolean;
+                volta: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                globalPackages: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            python: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                python2: z.ZodBoolean;
+                pyenv: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                tools: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            rust: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                toolchain: z.ZodString;
+                host: z.ZodString;
+                components: z.ZodArray<z.ZodString>;
+                targets: z.ZodArray<z.ZodString>;
+                crates: z.ZodArray<z.ZodString>;
+                targetDir: z.ZodString;
+            }, z.core.$strict>;
+            msvc: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                msvcVersion: z.ZodString;
+                sdkVersion: z.ZodString;
+            }, z.core.$strict>;
+            cpp: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                flexBison: z.ZodBoolean;
+            }, z.core.$strict>;
+            dotnet: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                channels: z.ZodArray<z.ZodString>;
+                tools: z.ZodArray<z.ZodString>;
+                workloads: z.ZodArray<z.ZodString>;
+                frameworkTargets: z.ZodArray<z.ZodString>;
+                netfx35: z.ZodBoolean;
+            }, z.core.$strict>;
+            go: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                tools: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            java: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                maven: z.ZodBoolean;
+                gradle: z.ZodBoolean;
+            }, z.core.$strict>;
+            ruby: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                gems: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            php: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                composer: z.ZodBoolean;
+            }, z.core.$strict>;
+            deno: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            }, z.core.$strict>;
+            pwsh: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            }, z.core.$strict>;
+            cli: z.ZodObject<{
+                gh: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                zstd: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                openssl: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            }, z.core.$strict>;
+            bun: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            uv: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            vcRuntime: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            mesa: z.ZodObject<{
+                enabled: z.ZodBoolean;
+                vulkan: z.ZodBoolean;
+            }, z.core.$strict>;
+            vscode: z.ZodObject<{
+                enabled: z.ZodBoolean;
+            }, z.core.$strict>;
+            environment: z.ZodRecord<z.ZodString, z.ZodString>;
+        }, z.core.$strict>;
+        versions: z.ZodObject<{
+            node: z.ZodObject<{
+                spec: z.ZodString;
+                source: z.ZodString;
+            }, z.core.$strict>;
+            nodeExtra: z.ZodArray<z.ZodString>;
+            python: z.ZodObject<{
+                spec: z.ZodString;
+                source: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        databases: z.ZodArray<z.ZodObject<{
+            database: z.ZodEnum<{
+                postgres: "postgres";
+                mysql: "mysql";
+                mongodb: "mongodb";
+                redis: "redis";
+                dynamodb: "dynamodb";
+                sqlserver: "sqlserver";
+            }>;
+            reasons: z.ZodArray<z.ZodString>;
+            version: z.ZodString;
+            port: z.ZodNumber;
+            adminPort: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        harnesses: z.ZodRecord<z.ZodString, z.ZodObject<{
+            hostExecutable: z.ZodOptional<z.ZodString>;
+            hostDir: z.ZodOptional<z.ZodString>;
+            npmPackage: z.ZodOptional<z.ZodString>;
+            npmBin: z.ZodOptional<z.ZodString>;
+            uvPackage: z.ZodOptional<z.ZodString>;
+            uvBin: z.ZodOptional<z.ZodString>;
+            arguments: z.ZodArray<z.ZodString>;
+            environment: z.ZodRecord<z.ZodString, z.ZodString>;
+            resumeArguments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+        hooks: z.ZodBoolean;
+    }, z.core.$strict>;
+    createdAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"exec">;
+    id: z.ZodString;
+    command: z.ZodArray<z.ZodString>;
+    cwd: z.ZodString;
+    timeoutSeconds: z.ZodNumber;
+    createdAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"restart">;
+    id: z.ZodString;
+    harness: z.ZodNullable<z.ZodString>;
+    cwd: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"ping">;
+    id: z.ZodString;
+    createdAt: z.ZodString;
+}, z.core.$strict>], "kind">;
+/** C:\AgentData\run\responses\<id>.json: the guest's reply. */
+export declare const GuestResponse: z.ZodObject<{
+    id: z.ZodString;
+    ok: z.ZodBoolean;
+    message: z.ZodString;
+    exitCode: z.ZodOptional<z.ZodNumber>;
+    stdout: z.ZodOptional<z.ZodString>;
+    stderr: z.ZodOptional<z.ZodString>;
+    finishedAt: z.ZodString;
+}, z.core.$strip>;
+/** C:\AgentData\run\sessions\<id>.json: one agent session (its own pseudo console and terminal tab). */
+export declare const SessionStatus: z.ZodObject<{
+    id: z.ZodString;
+    launchId: z.ZodString;
+    harness: z.ZodString;
+    cwd: z.ZodString;
+    project: z.ZodOptional<z.ZodString>;
+    phase: z.ZodEnum<{
+        failed: "failed";
+        starting: "starting";
+        running: "running";
+        exited: "exited";
+    }>;
+    message: z.ZodString;
+    updatedAt: z.ZodString;
+    startedAt: z.ZodString;
+    exitCode: z.ZodOptional<z.ZodNumber>;
+    attach: z.ZodOptional<z.ZodObject<{
+        addresses: z.ZodArray<z.ZodString>;
+        port: z.ZodNumber;
+        token: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+/** C:\AgentData\run\projects\<name>.json: how far a project's provisioning is (guest-written, so validated and capped). */
+export declare const ProjectStatus: z.ZodObject<{
+    name: z.ZodString;
+    workspace: z.ZodString;
+    phase: z.ZodEnum<{
+        provisioning: "provisioning";
+        ready: "ready";
+        failed: "failed";
+    }>;
+    message: z.ZodString;
+    updatedAt: z.ZodString;
+    databases: z.ZodArray<z.ZodObject<{
+        database: z.ZodString;
+        port: z.ZodNumber;
+    }, z.core.$strip>>;
+    summary: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ProjectSpecT = z.output<typeof ProjectSpec>;
+export type ProjectStatusT = z.output<typeof ProjectStatus>;
+export type AttachEndpointT = z.output<typeof AttachEndpoint>;
+export type SandboxStatusT = z.output<typeof SandboxStatus>;
+export type GuestRequestT = z.output<typeof GuestRequest>;
+export type GuestResponseT = z.output<typeof GuestResponse>;
+export type SessionStatusT = z.output<typeof SessionStatus>;

package/dist/shared/schema.js

@@ -0,0 +1,90 @@
+// The host <-> sandbox channel messages, defined once with zod. Both sides parse what they read: the guest only acts on
+// these request kinds, and the host treats everything the guest writes as untrusted (shapes checked, sizes capped).
+import { z } from 'zod';
+import { Harness, Toolchains } from '../core/schema.js';
+export const Id = z.string().regex(/^[A-Za-z0-9_-]{1,64}$/, 'invalid id');
+const Text = (max = 4096) => z.string().max(max);
+const Time = Text(64);
+export const AttachEndpoint = z.strictObject({
+    addresses: z.array(Text(64)).max(16),
+    port: z.number().int().min(1024).max(65535),
+    token: Text(256),
+});
+/** C:\AgentData\run\sandbox.json: boot progress of the sandbox as a whole. */
+export const SandboxStatus = z.object({
+    launchId: Text(64),
+    phase: z.enum(['booting', 'provisioning', 'ready', 'failed']),
+    message: Text(),
+    updatedAt: Time,
+    workspaceHost: Text(),
+    guestWorkspace: Text(),
+    headless: z.boolean(),
+});
+const Version = z.strictObject({ spec: Text(128), source: Text(256) });
+const DatabasePlan = z.strictObject({
+    database: z.enum(['postgres', 'mysql', 'sqlserver', 'mongodb', 'redis', 'dynamodb']),
+    reasons: z.array(Text(1024)).max(32), version: Text(64), port: z.number().int().min(1024).max(65535), adminPort: z.number().int().min(1024).max(65535).optional(),
+});
+/**
+ * A project the host registered after boot (sandbox claude from another folder): everything the guest needs to
+ * provision it and run its sessions with its own environment, resolved on the host exactly like a fresh launch (its
+ * approved .sandbox-config.json, version files, toolchain detection, database plan). Host -> guest only.
+ */
+export const ProjectSpec = z.strictObject({
+    name: Id,
+    /** Inside the sandbox: C:\Projects\<name>. */
+    workspace: Text(1024),
+    workspaceHost: Text(1024),
+    toolchains: Toolchains,
+    versions: z.strictObject({ node: Version, nodeExtra: z.array(Text(128)).max(16), python: Version }),
+    databases: z.array(DatabasePlan).max(8),
+    /** Agents this project may start that the sandbox did not boot with (its .sandbox-config.json "harness"). */
+    harnesses: z.record(Text(64), Harness).refine((h) => Object.keys(h).length <= 8, 'at most 8 agents'),
+    /** Its hooks were staged in C:\AgentLaunch\projects\<name>\hooks. */
+    hooks: z.boolean(),
+});
+/** C:\AgentData\run\requests\<id>.json: the ONLY things the host can ask the sandbox to do. */
+export const GuestRequest = z.discriminatedUnion('kind', [
+    z.strictObject({ kind: z.literal('session'), id: Id, harness: Text(64), args: z.array(Text()).max(256), cwd: Text(), project: ProjectSpec.optional(), harnessSpec: Harness.optional(), createdAt: Time }),
+    /** Provision a registered project without starting an agent (sandbox start / exec / db from its folder). */
+    z.strictObject({ kind: z.literal('project'), id: Id, project: ProjectSpec, createdAt: Time }),
+    z.strictObject({ kind: z.literal('exec'), id: Id, command: z.array(Text()).min(1).max(256), cwd: Text(), timeoutSeconds: z.number().positive().max(86400), createdAt: Time }),
+    /** cwd: only the sessions in this folder or below (one project's); omitted = every session. */
+    z.strictObject({ kind: z.literal('restart'), id: Id, harness: Text(64).nullable(), cwd: Text().optional(), createdAt: Time }),
+    z.strictObject({ kind: z.literal('ping'), id: Id, createdAt: Time }),
+]);
+/** C:\AgentData\run\responses\<id>.json: the guest's reply. */
+export const GuestResponse = z.object({
+    id: Id,
+    ok: z.boolean(),
+    message: Text(65536),
+    exitCode: z.number().int().optional(),
+    stdout: Text(4 * 1024 * 1024).optional(),
+    stderr: Text(4 * 1024 * 1024).optional(),
+    finishedAt: Time,
+});
+/** C:\AgentData\run\sessions\<id>.json: one agent session (its own pseudo console and terminal tab). */
+export const SessionStatus = z.object({
+    id: Id,
+    launchId: Text(64),
+    harness: Text(64),
+    cwd: Text(),
+    /** The project it runs in: its hub name, or the launch folder's for the first project. */
+    project: Text(64).optional(),
+    phase: z.enum(['starting', 'running', 'exited', 'failed']),
+    message: Text(),
+    updatedAt: Time,
+    startedAt: Time,
+    exitCode: z.number().int().optional(),
+    attach: AttachEndpoint.optional(),
+});
+/** C:\AgentData\run\projects\<name>.json: how far a project's provisioning is (guest-written, so validated and capped). */
+export const ProjectStatus = z.object({
+    name: Id,
+    workspace: Text(1024),
+    phase: z.enum(['provisioning', 'ready', 'failed']),
+    message: Text(),
+    updatedAt: Time,
+    databases: z.array(z.object({ database: Text(32), port: z.number().int() })).max(16),
+    summary: z.array(Text(512)).max(64),
+});

package/dist/shared/system.d.ts

@@ -0,0 +1,15 @@
+export declare const system32: (exe: string) => string;
+export declare const SYSTEM: {
+    readonly cmd: () => string;
+    readonly powershell: () => string;
+    readonly tasklist: () => string;
+    readonly tar: () => string;
+    readonly reg: () => string;
+    readonly netsh: () => string;
+    readonly netstat: () => string;
+    readonly route: () => string;
+    readonly ipconfig: () => string;
+    readonly robocopy: () => string;
+    readonly shutdown: () => string;
+    readonly dism: () => string;
+};

package/dist/shared/system.js

@@ -0,0 +1,19 @@
+// Absolute paths for the Windows programs agent-sandbox runs. Never spawn them by bare name: Windows looks in the
+// current folder before PATH, and the current folder is often the workspace, which the sandbox can write.
+import path from 'node:path';
+const systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? 'C:\\Windows';
+export const system32 = (exe) => path.join(systemRoot(), 'System32', exe);
+export const SYSTEM = {
+    cmd: () => system32('cmd.exe'),
+    powershell: () => system32('WindowsPowerShell\\v1.0\\powershell.exe'),
+    tasklist: () => system32('tasklist.exe'),
+    tar: () => system32('tar.exe'),
+    reg: () => system32('reg.exe'),
+    netsh: () => system32('netsh.exe'),
+    netstat: () => system32('NETSTAT.EXE'),
+    route: () => system32('ROUTE.EXE'),
+    ipconfig: () => system32('ipconfig.exe'),
+    robocopy: () => system32('Robocopy.exe'),
+    shutdown: () => system32('shutdown.exe'),
+    dism: () => system32('Dism.exe'),
+};

package/dist/shared/test-guard.d.ts

@@ -0,0 +1,4 @@
+export declare const selfTestRunning: () => boolean;
+/** Why the self-test may not write, copy or delete at `target` (anywhere but the temp folder), or null. */
+export declare const testWriteRefusal: (target: string) => string | null;
+export declare const assertTestWritable: (target: string) => void;