windows-development-sandbox 1.0.5 → 1.4.0

package/schemas/sandbox-config.schema.json

@@ -32,6 +32,24 @@
       "type": "boolean",
       "description": "Map this project read-only."
     },
+    "workspaceFilter": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Keep what your .gitignore lists (.env files, node_modules, build output ...) out of the sandbox. The sandbox works on a copy of the project without those files, kept in step with it both ways within about a second; what it creates that is ignored (its own node_modules, builds) stays in the sandbox. Git works as usual. Off = the project folder itself is mapped."
+        },
+        "exclude": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "maxLength": 500
+          },
+          "description": "Also keep these out, as .gitignore patterns, e.g. secrets/, *.pem, data/private/."
+        }
+      },
+      "additionalProperties": false
+    },
     "mappings": {
       "type": "array",
       "items": {
@@ -62,7 +80,7 @@
         ],
         "additionalProperties": false
       },
-      "description": "Extra folders (relative to this file)."
+      "description": "Extra folders inside this project (relative to this file), e.g. a read-only data folder at another place in the sandbox."
     },
     "scripts": {
       "type": "array",
@@ -94,6 +112,12 @@
           "maximum": 9007199254740991,
           "description": "Upper limit for memoryMb \"auto\"."
         },
+        "maxMemoryPercent": {
+          "type": "integer",
+          "minimum": 10,
+          "maximum": 100,
+          "description": "memoryMb \"auto\" never takes more than this share of this PC's total RAM (percent)."
+        },
         "reserveHostMb": {
           "type": "integer",
           "minimum": 0,
@@ -131,6 +155,10 @@
         "headless": {
           "type": "boolean",
           "description": "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+        },
+        "keepAwake": {
+          "type": "boolean",
+          "description": "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
         }
       },
       "additionalProperties": false
@@ -139,7 +167,17 @@
       "type": "object",
       "properties": {
         "blockPrivateRanges": {
-          "type": "boolean"
+          "type": "boolean",
+          "description": "Block your LAN (10/8, 172.16/12, 192.168/16, SMB) from inside the sandbox."
+        },
+        "blockHosts": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "maxLength": 253,
+            "pattern": "^([a-zA-Z0-9-]+\\.)*[a-zA-Z0-9-]+$"
+          },
+          "description": "Never reachable from the sandbox, e.g. production servers or telemetry (each exact name; the sandbox's hosts file sends them nowhere)."
         }
       },
       "additionalProperties": false
@@ -191,6 +229,16 @@
       },
       "additionalProperties": false
     },
+    "downloads": {
+      "type": "object",
+      "properties": {
+        "requireChecksum": {
+          "type": "boolean",
+          "description": "Refuse any toolchain, database or tool download that has no published checksum (SHA-256/SHA-512) to verify it against. false = allow those, as before. Downloads that do have a published checksum are always verified. A project's .sandbox-config.json can only turn this on."
+        }
+      },
+      "additionalProperties": false
+    },
     "toolchains": {
       "type": "object",
       "properties": {
@@ -685,6 +733,22 @@
             "enabled": {
               "type": "boolean",
               "description": "Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."
+            },
+            "setup": {
+              "type": "boolean",
+              "description": "Point VS Code at the sandbox's own tools (JDK, Python, Go, compilers, .NET, Git, PowerShell 7 and Git Bash terminals) and install the language extensions for the toolchains in use."
+            },
+            "recommended": {
+              "type": "boolean",
+              "description": "Also install the extensions a project recommends in its .vscode/extensions.json."
+            },
+            "extensions": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "pattern": "^[\\w-]+\\.[\\w-]+$"
+              },
+              "description": "More extensions to install in every sandbox, e.g. eamodio.gitlens, ms-azuretools.vscode-docker."
             }
           },
           "additionalProperties": false
@@ -864,7 +928,7 @@
                   "const": "auto"
                 }
               ],
-              "description": "SQL Server. It cannot run inside Windows Sandbox; when a project needs it you get a hint to reach the one on this PC through hostAccess.forwards: true, false, or \"auto\" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings)."
+              "description": "SQL Server. It cannot run inside Windows Sandbox; when a project needs it you get a note to use Postgres or SQLite for local work: true, false, or \"auto\" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings)."
             }
           },
           "additionalProperties": false
@@ -904,20 +968,86 @@
       },
       "additionalProperties": false
     },
-    "claudeProfile": {
+    "apps": {
       "type": "object",
       "properties": {
-        "enabled": {
-          "type": "boolean",
-          "description": "Copy selected Claude settings from this PC into the sandbox."
-        },
-        "include": {
+        "install": {
           "type": "array",
           "items": {
             "type": "string",
-            "pattern": "^[A-Za-z0-9._-]+$"
+            "enum": [
+              "notepadpp",
+              "sublime",
+              "neovim",
+              "dbeaver",
+              "pgadmin",
+              "heidisql",
+              "sqlitebrowser",
+              "compass",
+              "redisinsight",
+              "dbgate",
+              "beekeeper",
+              "dynamodb-admin",
+              "bruno",
+              "insomnia",
+              "sourcegit",
+              "githubdesktop",
+              "lazygit",
+              "7zip",
+              "winmerge",
+              "everything",
+              "sysinternals",
+              "imhex",
+              "chrome",
+              "firefox",
+              "godot",
+              "blender",
+              "love",
+              "defold",
+              "pixelorama",
+              "tiled",
+              "kubectl",
+              "helm",
+              "k9s",
+              "terraform",
+              "azure-cli",
+              "gcloud",
+              "aws-cli",
+              "drawio",
+              "pandoc",
+              "mitmproxy",
+              "xh",
+              "grpcurl",
+              "k6",
+              "jq",
+              "yq",
+              "ripgrep",
+              "fd",
+              "bat",
+              "fzf",
+              "delta",
+              "just",
+              "hyperfine",
+              "watchexec",
+              "protoc",
+              "ninja",
+              "ffmpeg",
+              "sqlite",
+              "shellcheck",
+              "gitleaks"
+            ]
           },
-          "description": "Files and folders copied from it."
+          "description": "Apps from the catalogue to install in every sandbox (the Apps screen in the menu lists them by category). Each is downloaded once and kept."
+        }
+      },
+      "additionalProperties": false
+    },
+    "claudeProfile": {
+      "type": "object",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "description": "Copy selected Claude settings from this PC into the sandbox."
         },
         "overwrite": {
           "type": "boolean",
@@ -929,11 +1059,11 @@
         },
         "syncHistory": {
           "type": "boolean",
-          "description": "Bring all conversation history in, and sync new history back (path-translated)."
+          "description": "Bring conversation history in, and sync new history back (path-translated)."
         },
         "syncClaudeMem": {
           "type": "boolean",
-          "description": "Bring claude-mem data in, and its database back when the sandbox closes."
+          "description": "Bring claude-mem data into the sandbox (its settings and backups stay on this PC)."
         }
       },
       "additionalProperties": false

package/dist/cli/commands/data.d.ts

@@ -1,46 +0,0 @@
-import { type Context } from './context.js';
-export type DataArea = 'tools' | 'databases' | 'state' | 'logs' | 'data' | 'host';
-export interface DataEntry {
-    area: DataArea;
-    name: string;
-    path: string;
-    bytes: number;
-}
-/** 1536 -> "1.5 KB". */
-export declare const humanBytes: (bytes: number) => string;
-/** Size on disk, never following links or junctions (a link counts as 0). */
-export declare const sizeOf: (p: string) => number;
-/**
- * Deletes a folder or file without ever following a link: links found anywhere inside are removed themselves first,
- * then the (now link-free) tree is deleted. A link in place of `p` is removed itself.
- */
-/** Deletes p (strictly inside root): links inside are removed first and never followed; see shared/safe-remove.ts. */
-export declare const removeTree: (p: string, root: string) => void;
-/** Every row of `sandbox data`: the sandbox's data folder by area, then what this PC keeps for it. */
-export declare const collectDataEntries: (dataPath: string, storageRoot: string) => DataEntry[];
-export interface DiskUsage {
-    drive: string;
-    totalBytes: number;
-    freeBytes: number;
-    usedBytes: number;
-    holdsStorage: boolean;
-}
-/** Every local drive's size and free space, and which one holds the sandbox storage. */
-export declare const diskUsage: (storageRoot: string) => DiskUsage[];
-export declare const dataInfo: (ctx: Context) => number;
-export interface CleanTarget {
-    /** The target as normalised (forward slashes), e.g. "tools/go". */
-    target: string;
-    path: string;
-    /** Folder the target must stay inside, with no links between the two. */
-    root: string;
-    warning?: string;
-}
-/**
- * Turns `sandbox data clean` arguments into folders. Pure (no disk access); throws a UserError for anything that is
- * not a plain relative target inside the data folder: absolute paths, drive letters, `..`, wildcards, unknown areas.
- */
-export declare const resolveCleanTargets: (inputs: string[], dataPath: string, storageRoot: string) => CleanTarget[];
-export declare const dataClean: (ctx: Context) => Promise<number>;
-/** `sandbox data [info|clean] [targets...]`. */
-export declare const data: (ctx: Context) => number | Promise<number>;

package/dist/cli/commands/data.js

@@ -1,249 +0,0 @@
-// `sandbox data`: what persists between sandboxes (toolchains, databases, agent state, logs, host storage) and
-// removing chosen parts of it. Everything under the data folder is sandbox-writable: sizes and deletes never follow
-// links, and targets resolve strictly inside the data folder.
-import fs from 'node:fs';
-import path from 'node:path';
-import readline from 'node:readline';
-import _ from 'lodash';
-import { removeRefusal, safeRemove } from '../../shared/safe-remove.js';
-import { assertNoLinks, dirExists, fail, isInsideOrEqual, isLink, removeLink } from '../../core/util.js';
-import { askYesNo } from '../../core/workspace.js';
-import { isSandboxRunning } from '../../host/platform.js';
-import { printJson, table } from './context.js';
-const AREA_ORDER = ['tools', 'databases', 'state', 'logs', 'data', 'host'];
-/** Folders of the data folder that get one row per child; anything else at the top level is listed as itself. */
-const PER_CHILD = ['tools', 'databases', 'state'];
-/** 1536 -> "1.5 KB". */
-export const humanBytes = (bytes) => {
-    const units = ['B', 'KB', 'MB', 'GB', 'TB'];
-    const i = bytes <= 0 ? 0 : Math.min(units.length - 1, Math.floor(Math.log(bytes) / Math.log(1024)));
-    const value = bytes / 1024 ** i;
-    return (i === 0 ? String(bytes) : value.toFixed(value < 10 ? 1 : 0)) + ' ' + units[i];
-};
-/** Size on disk, never following links or junctions (a link counts as 0). */
-export const sizeOf = (p) => {
-    try {
-        const stat = fs.lstatSync(p);
-        if (stat.isSymbolicLink())
-            return 0;
-        if (!stat.isDirectory())
-            return stat.size;
-        return _.sumBy(fs.readdirSync(p, { withFileTypes: true }), (d) => (d.isSymbolicLink() ? 0 : sizeOf(path.join(p, d.name))));
-    }
-    catch {
-        return 0;
-    }
-};
-/**
- * Deletes a folder or file without ever following a link: links found anywhere inside are removed themselves first,
- * then the (now link-free) tree is deleted. A link in place of `p` is removed itself.
- */
-/** Deletes p (strictly inside root): links inside are removed first and never followed; see shared/safe-remove.ts. */
-export const removeTree = (p, root) => {
-    const unlinkInside = (dir) => {
-        for (const d of fs.readdirSync(dir, { withFileTypes: true })) {
-            const child = path.join(dir, d.name);
-            if (d.isSymbolicLink() || isLink(child))
-                removeLink(child);
-            else if (d.isDirectory())
-                unlinkInside(child);
-        }
-    };
-    if (isLink(p)) {
-        removeLink(p);
-        return;
-    }
-    if (!fs.existsSync(p))
-        return;
-    // Refused before anything is touched (safeRemove below checks again).
-    const refusal = removeRefusal(p, root);
-    if (refusal)
-        throw new Error('Refusing to delete ' + p + ': ' + refusal);
-    if (dirExists(p))
-        unlinkInside(p);
-    safeRemove(p, root);
-};
-/** Real (non-link) children of a real folder; a link in place of the folder yields nothing. */
-const entriesOf = (dir) => (dirExists(dir) && !isLink(dir) ? fs.readdirSync(dir, { withFileTypes: true }).filter((d) => !d.isSymbolicLink()) : []);
-const toolRows = (toolsDir) => {
-    const entries = entriesOf(toolsDir);
-    const folders = entries.filter((d) => d.isDirectory());
-    const files = entries.filter((d) => !d.isDirectory());
-    const row = (name, p) => ({ area: 'tools', name, path: p, bytes: sizeOf(p) });
-    return [
-        ...folders.flatMap((d) => (d.name.toLowerCase() === 'agents'
-            ? entriesOf(path.join(toolsDir, d.name)).map((a) => row('agents/' + a.name, path.join(toolsDir, d.name, a.name)))
-            : [row(d.name, path.join(toolsDir, d.name))])),
-        ...(files.length ? [{ area: 'tools', name: '(files in tools)', path: toolsDir, bytes: _.sumBy(files, (f) => sizeOf(path.join(toolsDir, f.name))) }] : []),
-    ];
-};
-/** Every row of `sandbox data`: the sandbox's data folder by area, then what this PC keeps for it. */
-export const collectDataEntries = (dataPath, storageRoot) => {
-    const inData = entriesOf(dataPath);
-    const rows = inData.flatMap((d) => {
-        const p = path.join(dataPath, d.name);
-        const area = d.name.toLowerCase();
-        if (area === 'tools')
-            return toolRows(p);
-        if (PER_CHILD.includes(area))
-            return entriesOf(p).map((c) => ({ area, name: area + '/' + c.name, path: path.join(p, c.name), bytes: sizeOf(path.join(p, c.name)) }));
-        return [{ area: area === 'logs' ? 'logs' : 'data', name: d.name, path: p, bytes: sizeOf(p) }];
-    });
-    const otherData = entriesOf(path.join(storageRoot, 'data')).filter((d) => d.isDirectory() && path.join(storageRoot, 'data', d.name).toLowerCase() !== path.resolve(dataPath).toLowerCase());
-    const host = [
-        ...['launches', 'accounts', 'sync', 'logs', 'run', 'host'].map((name) => ({ area: 'host', name, path: path.join(storageRoot, name), bytes: sizeOf(path.join(storageRoot, name)) })),
-        ...otherData.map((d) => ({ area: 'host', name: 'other data folder: ' + d.name, path: path.join(storageRoot, 'data', d.name), bytes: sizeOf(path.join(storageRoot, 'data', d.name)) })),
-    ].filter((r) => fs.existsSync(r.path));
-    return _.sortBy([...rows, ...host], (r) => AREA_ORDER.indexOf(r.area), (r) => -r.bytes, (r) => r.name.toLowerCase());
-};
-const AREA_LABEL = { tools: 'Toolchains', databases: 'Databases', state: 'Agent state', logs: 'Logs', data: 'Other', host: 'On this PC' };
-/** Every local drive's size and free space, and which one holds the sandbox storage. */
-export const diskUsage = (storageRoot) => {
-    const storageDrive = path.parse(path.resolve(storageRoot)).root.toUpperCase();
-    return 'CDEFGHIJKLMNOPQRSTUVWXYZ'.split('').map((letter) => letter + ':\\').flatMap((drive) => {
-        try {
-            const s = fs.statfsSync(drive);
-            const totalBytes = s.blocks * s.bsize;
-            if (!totalBytes)
-                return [];
-            return [{ drive, totalBytes, freeBytes: s.bavail * s.bsize, usedBytes: totalBytes - s.bfree * s.bsize, holdsStorage: drive.toUpperCase() === storageDrive }];
-        }
-        catch {
-            return [];
-        }
-    });
-};
-export const dataInfo = (ctx) => {
-    const entries = collectDataEntries(ctx.dataPath, ctx.storageRoot);
-    const total = _.sumBy(entries, 'bytes');
-    const disks = diskUsage(ctx.storageRoot);
-    if (printJson(ctx, { dataPath: ctx.dataPath, storageRoot: ctx.storageRoot, totalBytes: total, entries, disks }))
-        return 0;
-    console.log('Disks\n');
-    table([['DRIVE', 'USED', 'FREE', 'SIZE', ''], ...disks.map((d) => [d.drive, humanBytes(d.usedBytes) + ' (' + Math.round((d.usedBytes / d.totalBytes) * 100) + '%)', humanBytes(d.freeBytes), humanBytes(d.totalBytes), d.holdsStorage ? '<- sandbox storage (' + humanBytes(total) + ' of it)' : ''])]);
-    console.log('');
-    console.log('Persistent data for the sandbox: ' + ctx.dataPath + ' (C:\\AgentData inside)\n');
-    if (!entries.length) {
-        console.log('Nothing stored yet. Toolchains, databases and agent logins appear here after the first start.');
-        return 0;
-    }
-    const rows = _.flatMap(_.groupBy(entries, 'area'), (group, area) => [
-        [AREA_LABEL[area], humanBytes(_.sumBy(group, 'bytes')), ''],
-        ...group.map((e) => ['  ' + e.name, humanBytes(e.bytes), e.path]),
-    ]);
-    table([...rows, ['', '', ''], ['Total', humanBytes(total), '']]);
-    console.log('\nFree space with: sandbox data clean <target...>  (e.g. tools/go, databases/postgres-18, logs, launches)');
-    return 0;
-};
-const DATA_AREAS = ['tools', 'databases', 'state', 'logs'];
-const SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._ +@-]*$/;
-const LOGIN_WARNING = 'removes the agent logins, settings and history inside the sandbox (save a Claude login first with: sandbox account save <name>)';
-const ALL_WARNING = 'removes EVERYTHING the sandbox keeps: toolchains, databases, agent logins and history, logs and launch folders';
-/**
- * Turns `sandbox data clean` arguments into folders. Pure (no disk access); throws a UserError for anything that is
- * not a plain relative target inside the data folder: absolute paths, drive letters, `..`, wildcards, unknown areas.
- */
-export const resolveCleanTargets = (inputs, dataPath, storageRoot) => {
-    const usage = 'Targets: all | tools | tools/<name> | tools/agents/<name> | databases | databases/<name> | state | state/<agent> | logs | launches. See them with: sandbox data';
-    if (!inputs.length)
-        fail('Say what to remove.', usage);
-    const resolved = inputs.map((raw) => {
-        const input = raw.trim();
-        if (!input)
-            fail('Empty target.', usage);
-        if (path.win32.isAbsolute(input) || path.posix.isAbsolute(input) || /^[A-Za-z]:/.test(input) || input.includes(':'))
-            fail('Refusing "' + raw + '": targets are relative to the data folder, not paths on this PC.', usage);
-        const parts = input.replace(/\\/g, '/').split('/').filter(Boolean);
-        const bad = parts.find((p) => !SEGMENT.test(p) || /^\.+$/.test(p) || /[. ]$/.test(p));
-        if (bad !== undefined)
-            fail('Refusing "' + raw + '": "' + bad + '" is not a plain folder name (no .., wildcards or special characters).', usage);
-        const [head, ...rest] = parts;
-        const area = head.toLowerCase();
-        if (parts.length > 3)
-            fail('Refusing "' + raw + '": too deep.', usage);
-        const target = [area, ...rest].join('/');
-        if (area === 'all' && !rest.length)
-            return { target: 'all', path: dataPath, root: path.join(storageRoot, 'data'), warning: ALL_WARNING };
-        if (area === 'launches')
-            return { target, path: path.join(storageRoot, 'launches', ...rest), root: storageRoot };
-        if (area === 'accounts' || area === 'sync')
-            fail('"' + area + '" is kept on this PC on purpose and is not removed here.', area === 'accounts' ? 'Remove a saved login with: sandbox account remove <name>' : usage);
-        if (!DATA_AREAS.includes(area))
-            fail('Unknown target "' + raw + '".', usage);
-        if (area === 'logs' && rest.length)
-            fail('Remove all logs ("logs"), not single files.', usage);
-        if (rest.length > (area === 'tools' && rest[0]?.toLowerCase() === 'agents' ? 2 : 1))
-            fail('Refusing "' + raw + '": too deep.', usage);
-        return { target, path: path.join(dataPath, area, ...rest), root: dataPath, ...(area === 'state' ? { warning: LOGIN_WARNING } : {}) };
-    });
-    // "all" covers everything; otherwise drop targets inside another target (tools + tools/go = tools).
-    const all = resolved.find((t) => t.target === 'all');
-    if (all)
-        return [all, { target: 'launches', path: path.join(storageRoot, 'launches'), root: storageRoot }];
-    const unique = _.uniqBy(resolved, (t) => t.path.toLowerCase());
-    return unique.filter((t) => !unique.some((o) => o !== t && isInsideOrEqual(o.path, t.path)));
-};
-/** Asks the user to type `expected` (a stronger confirmation than y/N). */
-const askTyped = async (question, expected) => {
-    if (!process.stdin.isTTY)
-        return false;
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    const answer = await new Promise((resolve) => rl.question(question + ' Type "' + expected + '" to confirm: ', resolve));
-    rl.close();
-    return answer.trim().toLowerCase() === expected;
-};
-export const dataClean = async (ctx) => {
-    const targets = resolveCleanTargets(ctx.options.positionals.slice(1), ctx.dataPath, ctx.storageRoot);
-    if (isSandboxRunning())
-        fail('A Windows Sandbox is running, and it uses these folders.', 'Close it first (sandbox stop), then run this again.');
-    // Every folder from the root down to the target's parent must be real; a link in place of the target is removed itself.
-    for (const t of targets)
-        assertNoLinks(t.root, path.dirname(t.path));
-    const present = targets.filter((t) => fs.existsSync(t.path) || isLink(t.path));
-    if (!present.length) {
-        console.log('Nothing to remove: ' + targets.map((t) => t.target).join(', ') + ' do(es) not exist.');
-        return 0;
-    }
-    const sized = present.map((t) => ({ ...t, bytes: sizeOf(t.path) }));
-    const total = _.sumBy(sized, 'bytes');
-    table(sized.map((t) => ['  ' + t.target, humanBytes(t.bytes), t.path]));
-    for (const t of sized)
-        if (t.warning)
-            console.log('Warning: ' + t.target + ' ' + t.warning + '.');
-    const yes = Boolean(ctx.options.yes);
-    if (!yes) {
-        const ok = sized.some((t) => t.target === 'all')
-            ? await askTyped('This cannot be undone; the next sandbox starts from scratch and reinstalls everything.', 'all')
-            : await askYesNo('Remove ' + (sized.length === 1 ? 'this' : 'these ' + sized.length) + ' (' + humanBytes(total) + ')?');
-        if (!ok) {
-            console.log('Nothing removed.' + (process.stdin.isTTY ? '' : ' Pass --yes to confirm without a prompt.'));
-            return 1;
-        }
-    }
-    const failed = [];
-    for (const t of sized) {
-        try {
-            removeTree(t.path, t.root);
-        }
-        catch (e) {
-            failed.push(t.target + ' (' + (e instanceof Error ? e.message : String(e)) + ')');
-        }
-    }
-    const freed = total - _.sumBy(sized, (t) => sizeOf(t.path));
-    console.log('Freed ' + humanBytes(freed) + '. ' + (sized.some((t) => t.root === ctx.dataPath || t.target === 'all') ? 'The next sandbox reinstalls what it needs.' : ''));
-    if (failed.length)
-        fail('Could not remove everything: ' + failed.join('; '), 'Close programs using those folders and run the same command again.');
-    return 0;
-};
-/** `sandbox data [info|clean] [targets...]`. */
-export const data = (ctx) => {
-    const [action = 'info'] = ctx.options.positionals;
-    switch (action) {
-        case 'info':
-        case 'show':
-        case 'list': return dataInfo(ctx);
-        case 'clean':
-        case 'remove': return dataClean(ctx);
-        default: return fail('Unknown data action "' + action + '".', 'Use: sandbox data  (what is stored)  or  sandbox data clean <target...>');
-    }
-};