windows-development-sandbox 1.11.6 → 1.12.0

package/dist/shared/apps/catalogue.js

@@ -1,8 +1,14 @@
 // The apps catalogue: desktop programs and command-line tools the sandbox can install on request (apps.install), each a
 // portable download kept in C:\AgentData\tools\apps\<id> (installers would be lost when the sandbox closes). Pure data,
 // shared by the menu on the PC (to list them) and the sandbox (to install them, guest/apps). VS Code and Windows
-// Terminal have settings of their own (toolchains.vscode, provisioning.terminal) and are listed here too.
+// Terminal have settings of their own (toolchains.vscode, provisioning.terminal) and are listed here too, like
+// claude-mem (claudeProfile.syncClaudeMem) among the agent add-ons.
 export const APP_CATEGORIES = [
+    {
+        id: 'agents',
+        label: 'Agent add-ons',
+        description: 'Things that plug into the agents: token savers, memory, MCP servers.',
+    },
     {
         id: 'editors',
         label: 'Editors & IDEs',
@@ -49,7 +55,102 @@ export const APP_CATEGORIES = [
     },
 ];
 const gh = (github, asset) => ({ github, asset });
+/** rtk (rtk-ai/rtk), pinned: the Apache-2.0 edition's Windows build. The checksum is the release's checksums.txt. */
+export const RTK_VERSION = '1.0.1';
+const RTK_URL = 'https://github.com/rtk-ai/rtk/releases/download/v' + RTK_VERSION + '/rtk-oss-x86_64-pc-windows-msvc.zip';
+const RTK_SHA256 = '0e53e2eca471e15fbd3636e64e6bc0b182cbc278ed0339c80450a2dd03f4cd6b';
+/** Pinned agent add-ons, installed from the lock files in sandbox\addons\<id> (renewing them: docs/toolchains.md). */
+export const HEADROOM_VERSION = '0.41.0';
+export const CCUSAGE_VERSION = '20.0.36';
+export const PLAYWRIGHT_MCP_VERSION = '0.0.83';
+export const CONTEXT7_MCP_VERSION = '4.4.2';
 export const APPS = [
+    // ---- agent add-ons
+    {
+        id: 'rtk',
+        name: 'rtk (Rust Token Killer)',
+        category: 'agents',
+        about: "Compacts the output of shell commands (git, tests, builds, ls ...) before the agent reads it, so it uses fewer tokens. Claude Code's Bash commands go through it on their own.",
+        size: '6 MB',
+        source: { url: RTK_URL, sha256: RTK_SHA256 },
+        exe: 'rtk.exe',
+        cli: true,
+        plugsInto: "Claude Code through a hook in the sandbox's managed settings; other agents are told to use it",
+        userOnly: true,
+    },
+    {
+        id: 'headroom',
+        name: 'Headroom',
+        category: 'agents',
+        about: "Compresses what Claude Code sends to the model (tool output, logs, files) so it uses fewer tokens: a local proxy on 127.0.0.1:8787 that sits in Claude Code's API path, offline apart from forwarding to api.anthropic.com.",
+        size: '150 MB',
+        source: { locked: 'uv', package: 'headroom-ai', version: HEADROOM_VERSION },
+        exe: 'headroom.exe',
+        service: true,
+        plugsInto: 'Claude Code: the sandbox starts the proxy and points Claude Code at it (managed settings)',
+        userOnly: true,
+    },
+    {
+        id: 'ccusage',
+        name: 'ccusage',
+        category: 'agents',
+        about: "Reports the agents' token use and cost by day, month or session from their logs in the sandbox (`ccusage daily`; add --offline to skip fetching prices).",
+        size: '5 MB',
+        source: { locked: 'npm', package: 'ccusage', version: CCUSAGE_VERSION },
+        exe: 'ccusage.cmd',
+        cli: true,
+        plugsInto: "Reads Claude Code's session logs in the sandbox; changes nothing",
+        userOnly: true,
+    },
+    {
+        id: 'playwright-mcp',
+        name: 'Playwright MCP',
+        category: 'agents',
+        about: 'Lets Claude Code drive a browser (Microsoft Edge, already in the sandbox) to open pages, click, fill forms and take screenshots: the MCP server of microsoft/playwright-mcp.',
+        size: '20 MB',
+        source: { locked: 'npm', package: '@playwright/mcp', version: PLAYWRIGHT_MCP_VERSION },
+        exe: 'playwright-mcp.cmd',
+        service: true,
+        mcp: { name: 'sbx-playwright', script: 'node_modules/@playwright/mcp/cli.js', args: ['--browser', 'msedge'] },
+        plugsInto: "Claude Code as the MCP server sbx-playwright (the sandbox's Claude settings)",
+        userOnly: true,
+    },
+    {
+        id: 'context7',
+        name: 'Context7 MCP',
+        category: 'agents',
+        about: "Up-to-date documentation and code examples for libraries, looked up by Claude Code while it works (upstash/context7). The library names and questions go to Upstash's context7.com.",
+        size: '55 MB',
+        source: { locked: 'npm', package: '@upstash/context7-mcp', version: CONTEXT7_MCP_VERSION },
+        exe: 'context7-mcp.cmd',
+        service: true,
+        mcp: { name: 'sbx-context7', script: 'node_modules/@upstash/context7-mcp/dist/index.js' },
+        plugsInto: "Claude Code as the MCP server sbx-context7 (the sandbox's Claude settings)",
+        userOnly: true,
+    },
+    {
+        id: 'claude-mem',
+        name: 'claude-mem',
+        category: 'agents',
+        about: 'Persistent memory for Claude Code (a plugin you install on this PC): its database is brought into the sandbox.',
+        size: '',
+        source: { resolve: 'setting' },
+        exe: '',
+        setting: 'claudeProfile.syncClaudeMem',
+        plugsInto: 'Claude Code, with your Claude settings copied from this PC',
+        userOnly: true,
+    },
+    {
+        id: 'rea',
+        name: 'REA (Reverse Engineer Anything)',
+        category: 'agents',
+        about: 'Agent-driven reverse engineering (MCP server and CLI, by morluto). Run `rea setup` once to add it to Claude Code and Codex. Native binaries need Ghidra; needs Node 22.19+.',
+        size: '8 MB',
+        source: { npm: 'rea-agents' },
+        exe: 'rea.cmd',
+        cli: true,
+        plugsInto: 'Claude Code and Codex as an MCP server, after `rea setup`',
+    },
     // ---- editors
     {
         id: 'vscode',
@@ -511,16 +612,6 @@ export const APPS = [
         cli: true,
     },
     // ---- reverse engineering
-    {
-        id: 'rea',
-        name: 'REA (Reverse Engineer Anything)',
-        category: 'reversing',
-        about: 'Agent-driven reverse engineering (MCP server and CLI, by morluto). Run `rea setup` once to add it to Claude Code and Codex. Native binaries need Ghidra; needs Node 22.19+.',
-        size: '8 MB',
-        source: { npm: 'rea-agents' },
-        exe: 'rea.cmd',
-        cli: true,
-    },
     {
         id: 'ghidra',
         name: 'Ghidra',

package/dist/shared/apps/index.d.ts

@@ -1,2 +1,3 @@
-export { type AppCategory, APP_CATEGORIES, type AppSource, type AppEntry, APPS, appById } from './catalogue.js';
-export { exeMatcher, appsToInstall, appsNeedMesa } from './selection.js';
+export { type AddonMcp, type AppCategory, APP_CATEGORIES, type AppSource, type AppEntry, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
+export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
+export { ADDON_MCP_PREFIX, addonGuideLine, addonMcpServer, claudeManagedSettings, HEADROOM_ENV, HEADROOM_PORT, HEADROOM_UPSTREAM, headroomArgs, headroomEnv, headroomGuideLine, headroomUrl, type ManagedSettings, type McpServerConfig, rtkHookCommand, RTK_GUIDE_LINE, withAddonMcpServers, } from './agent-addons.js';

package/dist/shared/apps/index.js

@@ -1,2 +1,3 @@
-export { APP_CATEGORIES, APPS, appById } from './catalogue.js';
-export { exeMatcher, appsToInstall, appsNeedMesa } from './selection.js';
+export { APP_CATEGORIES, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
+export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
+export { ADDON_MCP_PREFIX, addonGuideLine, addonMcpServer, claudeManagedSettings, HEADROOM_ENV, HEADROOM_PORT, HEADROOM_UPSTREAM, headroomArgs, headroomEnv, headroomGuideLine, headroomUrl, rtkHookCommand, RTK_GUIDE_LINE, withAddonMcpServers, } from './agent-addons.js';

package/dist/shared/apps/selection.d.ts

@@ -7,5 +7,7 @@ export declare function appsToInstall(apps: Config['apps'], gitAccess: GitAccess
     entries: AppEntry[];
     skipped: string[];
 };
+/** Does any chosen app install with uv (Headroom), so the uv step must run first? */
+export declare function appsNeedUv(apps: Config['apps'] | undefined): boolean;
 /** Does any chosen app draw with OpenGL (so the Mesa step must run first)? */
 export declare function appsNeedMesa(apps: Config['apps'] | undefined): boolean;

package/dist/shared/apps/selection.js

@@ -36,6 +36,13 @@ export function appsToInstall(apps, gitAccess) {
     const needs7zip = allowed.some((e) => e.needs?.includes('7zip') || e.unpack === 'nsis') && !allowed.some((e) => e.id === '7zip');
     return { entries: [...(needs7zip ? [appById('7zip')] : []), ...allowed], skipped };
 }
+/** Does any chosen app install with uv (Headroom), so the uv step must run first? */
+export function appsNeedUv(apps) {
+    return Boolean(apps?.install.some((id) => {
+        const source = appById(id)?.source;
+        return source !== undefined && 'locked' in source && source.locked === 'uv';
+    }));
+}
 /** Does any chosen app draw with OpenGL (so the Mesa step must run first)? */
 export function appsNeedMesa(apps) {
     return Boolean(apps?.install.some((id) => appById(id)?.needs?.includes('mesa')));

package/dist/sync/watcher.js

@@ -10,7 +10,7 @@ import { RepoGuardStore } from '../host/guard/index.js';
 import { isSandboxRunning, realContainedDeps, spawnDetached } from '../host/sandbox/index.js';
 import { readActiveViews, WorkspaceView } from '../host/workspace-view/index.js';
 import { readForwards, sandboxAddress, startPortForwards } from '../host/network/index.js';
-import { AuditCollector, readAuditSettings } from '../host/audit/collect.js';
+import { AuditCollector, AuditLog, readAuditSettings } from '../host/audit/index.js';
 import { readMarkedProjects, saveDataSize, watchAndMark } from '../host/guard/index.js';
 import { sizeWithin } from '../core/disk.js';
 import { autoRestartAllowed, causeSince, appendHostMemory, cpuPercentBetween, KeepAwake, LifeRecord, HostMemoryStream, readHostMemoryAsync, readLoadSettings, REQUEST_SECONDS, WATCHDOG_START, watchdogStep, saveCrashReport, SessionLedger, } from '../host/life/index.js';
@@ -183,6 +183,14 @@ export class Watcher {
         const audit = auditSettings?.enabled ? new AuditCollector(dataPath, storageRoot, auditSettings) : null;
         this.audit = audit;
         audit?.start();
+        // Off now, but kept before: its old days still go.
+        if (auditSettings && !audit)
+            try {
+                new AuditLog(AuditLog.dirFor(storageRoot, dataPath), auditSettings).maintain();
+            }
+            catch (e) {
+                this.note('audit: ' + errMsg(e));
+            }
         this.auditTimer = audit
             ? setInterval(() => {
                 try {

package/dist/web/index.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Sandbox</title>
     <link rel="icon" href="data:," />
-    <link rel="stylesheet" href="/main-RQFN4WBY.css" />
-    <script type="module" src="/main-QL7KHCEE.js"></script>
+    <link rel="stylesheet" href="/main-UAQPI5XD.css" />
+    <script type="module" src="/main-UD4QCXZR.js"></script>
   </head>
   <body>
     <div id="root"></div>