windows-development-sandbox 1.11.7 → 1.13.0

package/dist/shared/apps/catalogue.d.ts

@@ -1,20 +1,36 @@
-export type AppCategory = 'editors' | 'databases' | 'api' | 'git' | 'utilities' | 'browsers' | 'gamedev' | 'cloud' | 'diagrams' | 'network' | 'reversing' | 'cli';
+export type AppCategory = 'agents' | 'editors' | 'databases' | 'api' | 'git' | 'utilities' | 'browsers' | 'gamedev' | 'cloud' | 'diagrams' | 'network' | 'reversing' | 'cli';
 export declare const APP_CATEGORIES: {
     id: AppCategory;
     label: string;
     description: string;
 }[];
-/** Where a download comes from. Resolvers (sublime, kubectl ...) are code in guest/apps, named here by id. */
+/**
+ * Where a download comes from. Resolvers (sublime, kubectl ...) are code in guest/apps, named here by id. `locked`: a
+ * pinned package installed from the lock file in sandbox\addons\<id> (npm: package.json + package-lock.json, every
+ * tarball checked against its integrity; uv: requirements.txt, every wheel checked against its SHA-256).
+ */
 export type AppSource = {
     github: string;
     asset: string;
 } | {
     url: string;
+    sha256?: string;
 } | {
     resolve: string;
 } | {
     npm: string;
+} | {
+    locked: 'npm' | 'uv';
+    package: string;
+    version: string;
 };
+/** An MCP server an add-on adds to the sandbox's Claude Code: `node <its folder>\<script> <args>`. */
+export interface AddonMcp {
+    /** The server's name in Claude Code (sbx-...: the sandbox removes its own names again when the add-on is off). */
+    readonly name: string;
+    readonly script: string;
+    readonly args?: readonly string[];
+}
 export interface AppEntry {
     id: string;
     name: string;
@@ -39,6 +55,21 @@ export interface AppEntry {
     setting?: string;
     /** Only with full git access (it pushes on its own, past the sandbox's git guard). */
     fullGitOnly?: boolean;
+    /** Which agents it plugs into, and how (agent add-ons). */
+    plugsInto?: string;
+    /** Only in your own settings: a project's .sandbox-config.json cannot turn it on (it changes what the agents run). */
+    userOnly?: boolean;
+    /** Started by the sandbox or the agent (a proxy, an MCP server): not on PATH and no shortcut. */
+    service?: boolean;
+    /** The MCP server it adds to the sandbox's Claude Code while it is on. */
+    mcp?: AddonMcp;
 }
+/** rtk (rtk-ai/rtk), pinned: the Apache-2.0 edition's Windows build. The checksum is the release's checksums.txt. */
+export declare const RTK_VERSION = "1.0.1";
+/** Pinned agent add-ons, installed from the lock files in sandbox\addons\<id> (renewing them: docs/toolchains.md). */
+export declare const HEADROOM_VERSION = "0.41.0";
+export declare const CCUSAGE_VERSION = "20.0.36";
+export declare const PLAYWRIGHT_MCP_VERSION = "0.0.83";
+export declare const CONTEXT7_MCP_VERSION = "4.4.2";
 export declare const APPS: AppEntry[];
 export declare function appById(id: string): AppEntry | undefined;

package/dist/shared/apps/catalogue.js

@@ -1,8 +1,14 @@
 // The apps catalogue: desktop programs and command-line tools the sandbox can install on request (apps.install), each a
 // portable download kept in C:\AgentData\tools\apps\<id> (installers would be lost when the sandbox closes). Pure data,
 // shared by the menu on the PC (to list them) and the sandbox (to install them, guest/apps). VS Code and Windows
-// Terminal have settings of their own (toolchains.vscode, provisioning.terminal) and are listed here too.
+// Terminal have settings of their own (toolchains.vscode, provisioning.terminal) and are listed here too, like
+// claude-mem (claudeProfile.syncClaudeMem) among the agent add-ons.
 export const APP_CATEGORIES = [
+    {
+        id: 'agents',
+        label: 'Agent add-ons',
+        description: 'Things that plug into the agents: token savers, memory, MCP servers.',
+    },
     {
         id: 'editors',
         label: 'Editors & IDEs',
@@ -49,7 +55,102 @@ export const APP_CATEGORIES = [
     },
 ];
 const gh = (github, asset) => ({ github, asset });
+/** rtk (rtk-ai/rtk), pinned: the Apache-2.0 edition's Windows build. The checksum is the release's checksums.txt. */
+export const RTK_VERSION = '1.0.1';
+const RTK_URL = 'https://github.com/rtk-ai/rtk/releases/download/v' + RTK_VERSION + '/rtk-oss-x86_64-pc-windows-msvc.zip';
+const RTK_SHA256 = '0e53e2eca471e15fbd3636e64e6bc0b182cbc278ed0339c80450a2dd03f4cd6b';
+/** Pinned agent add-ons, installed from the lock files in sandbox\addons\<id> (renewing them: docs/toolchains.md). */
+export const HEADROOM_VERSION = '0.41.0';
+export const CCUSAGE_VERSION = '20.0.36';
+export const PLAYWRIGHT_MCP_VERSION = '0.0.83';
+export const CONTEXT7_MCP_VERSION = '4.4.2';
 export const APPS = [
+    // ---- agent add-ons
+    {
+        id: 'rtk',
+        name: 'rtk (Rust Token Killer)',
+        category: 'agents',
+        about: "Compacts the output of shell commands (git, tests, builds, ls ...) before the agent reads it, so it uses fewer tokens. Claude Code's Bash commands go through it on their own.",
+        size: '6 MB',
+        source: { url: RTK_URL, sha256: RTK_SHA256 },
+        exe: 'rtk.exe',
+        cli: true,
+        plugsInto: "Claude Code through a hook in the sandbox's managed settings; other agents are told to use it",
+        userOnly: true,
+    },
+    {
+        id: 'headroom',
+        name: 'Headroom',
+        category: 'agents',
+        about: "Compresses what Claude Code sends to the model (tool output, logs, files) so it uses fewer tokens: a local proxy on 127.0.0.1:8787 that sits in Claude Code's API path, offline apart from forwarding to api.anthropic.com.",
+        size: '150 MB',
+        source: { locked: 'uv', package: 'headroom-ai', version: HEADROOM_VERSION },
+        exe: 'headroom.exe',
+        service: true,
+        plugsInto: 'Claude Code: the sandbox starts the proxy and points Claude Code at it (managed settings)',
+        userOnly: true,
+    },
+    {
+        id: 'ccusage',
+        name: 'ccusage',
+        category: 'agents',
+        about: "Reports the agents' token use and cost by day, month or session from their logs in the sandbox (`ccusage daily`; add --offline to skip fetching prices).",
+        size: '5 MB',
+        source: { locked: 'npm', package: 'ccusage', version: CCUSAGE_VERSION },
+        exe: 'ccusage.cmd',
+        cli: true,
+        plugsInto: "Reads Claude Code's session logs in the sandbox; changes nothing",
+        userOnly: true,
+    },
+    {
+        id: 'playwright-mcp',
+        name: 'Playwright MCP',
+        category: 'agents',
+        about: 'Lets Claude Code drive a browser (Microsoft Edge, already in the sandbox) to open pages, click, fill forms and take screenshots: the MCP server of microsoft/playwright-mcp.',
+        size: '20 MB',
+        source: { locked: 'npm', package: '@playwright/mcp', version: PLAYWRIGHT_MCP_VERSION },
+        exe: 'playwright-mcp.cmd',
+        service: true,
+        mcp: { name: 'sbx-playwright', script: 'node_modules/@playwright/mcp/cli.js', args: ['--browser', 'msedge'] },
+        plugsInto: "Claude Code as the MCP server sbx-playwright (the sandbox's Claude settings)",
+        userOnly: true,
+    },
+    {
+        id: 'context7',
+        name: 'Context7 MCP',
+        category: 'agents',
+        about: "Up-to-date documentation and code examples for libraries, looked up by Claude Code while it works (upstash/context7). The library names and questions go to Upstash's context7.com.",
+        size: '55 MB',
+        source: { locked: 'npm', package: '@upstash/context7-mcp', version: CONTEXT7_MCP_VERSION },
+        exe: 'context7-mcp.cmd',
+        service: true,
+        mcp: { name: 'sbx-context7', script: 'node_modules/@upstash/context7-mcp/dist/index.js' },
+        plugsInto: "Claude Code as the MCP server sbx-context7 (the sandbox's Claude settings)",
+        userOnly: true,
+    },
+    {
+        id: 'claude-mem',
+        name: 'claude-mem',
+        category: 'agents',
+        about: 'Persistent memory for Claude Code (a plugin you install on this PC): its database is brought into the sandbox.',
+        size: '',
+        source: { resolve: 'setting' },
+        exe: '',
+        setting: 'claudeProfile.syncClaudeMem',
+        plugsInto: 'Claude Code, with your Claude settings copied from this PC',
+        userOnly: true,
+    },
+    {
+        id: 'rea',
+        name: 'REA (Reverse Engineer Anything)',
+        category: 'agents',
+        about: 'Agent-driven reverse engineering (MCP server and CLI, by morluto). Run `rea setup` once to add it to Claude Code and Codex. Native binaries need Ghidra; needs Node 22.19+.',
+        size: '8 MB',
+        source: { npm: 'rea-agents' },
+        exe: 'rea.cmd',
+        cli: true,
+        plugsInto: 'Claude Code and Codex as an MCP server, after `rea setup`',
+    },
     // ---- editors
     {
         id: 'vscode',
@@ -511,16 +612,6 @@ export const APPS = [
         cli: true,
     },
     // ---- reverse engineering
-    {
-        id: 'rea',
-        name: 'REA (Reverse Engineer Anything)',
-        category: 'reversing',
-        about: 'Agent-driven reverse engineering (MCP server and CLI, by morluto). Run `rea setup` once to add it to Claude Code and Codex. Native binaries need Ghidra; needs Node 22.19+.',
-        size: '8 MB',
-        source: { npm: 'rea-agents' },
-        exe: 'rea.cmd',
-        cli: true,
-    },
     {
         id: 'ghidra',
         name: 'Ghidra',

package/dist/shared/apps/index.d.ts

@@ -1,2 +1,3 @@
-export { type AppCategory, APP_CATEGORIES, type AppSource, type AppEntry, APPS, appById } from './catalogue.js';
-export { exeMatcher, appsToInstall, appsNeedMesa } from './selection.js';
+export { type AddonMcp, type AppCategory, APP_CATEGORIES, type AppSource, type AppEntry, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
+export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
+export { ADDON_MCP_PREFIX, addonGuideLine, addonMcpServer, claudeManagedSettings, HEADROOM_ENV, HEADROOM_PORT, HEADROOM_UPSTREAM, headroomArgs, headroomEnv, headroomGuideLine, headroomUrl, type ManagedSettings, type McpServerConfig, rtkHookCommand, RTK_GUIDE_LINE, withAddonMcpServers, } from './agent-addons.js';

package/dist/shared/apps/index.js

@@ -1,2 +1,3 @@
-export { APP_CATEGORIES, APPS, appById } from './catalogue.js';
-export { exeMatcher, appsToInstall, appsNeedMesa } from './selection.js';
+export { APP_CATEGORIES, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
+export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
+export { ADDON_MCP_PREFIX, addonGuideLine, addonMcpServer, claudeManagedSettings, HEADROOM_ENV, HEADROOM_PORT, HEADROOM_UPSTREAM, headroomArgs, headroomEnv, headroomGuideLine, headroomUrl, rtkHookCommand, RTK_GUIDE_LINE, withAddonMcpServers, } from './agent-addons.js';

package/dist/shared/apps/selection.d.ts

@@ -7,5 +7,7 @@ export declare function appsToInstall(apps: Config['apps'], gitAccess: GitAccess
     entries: AppEntry[];
     skipped: string[];
 };
+/** Does any chosen app install with uv (Headroom), so the uv step must run first? */
+export declare function appsNeedUv(apps: Config['apps'] | undefined): boolean;
 /** Does any chosen app draw with OpenGL (so the Mesa step must run first)? */
 export declare function appsNeedMesa(apps: Config['apps'] | undefined): boolean;

package/dist/shared/apps/selection.js

@@ -36,6 +36,13 @@ export function appsToInstall(apps, gitAccess) {
     const needs7zip = allowed.some((e) => e.needs?.includes('7zip') || e.unpack === 'nsis') && !allowed.some((e) => e.id === '7zip');
     return { entries: [...(needs7zip ? [appById('7zip')] : []), ...allowed], skipped };
 }
+/** Does any chosen app install with uv (Headroom), so the uv step must run first? */
+export function appsNeedUv(apps) {
+    return Boolean(apps?.install.some((id) => {
+        const source = appById(id)?.source;
+        return source !== undefined && 'locked' in source && source.locked === 'uv';
+    }));
+}
 /** Does any chosen app draw with OpenGL (so the Mesa step must run first)? */
 export function appsNeedMesa(apps) {
     return Boolean(apps?.install.some((id) => appById(id)?.needs?.includes('mesa')));

package/dist/shared/channel/schema.d.ts

@@ -200,6 +200,14 @@ export declare const ProjectSpecSchema: z.ZodObject<{
     }, z.core.$strict>>;
     hooks: z.ZodBoolean;
 }, z.core.$strict>;
+/** The plain shells a session can run instead of an agent; auto: PowerShell 7 when the sandbox has it, else 5.1. */
+export declare const ShellChoiceSchema: z.ZodEnum<{
+    pwsh: "pwsh";
+    auto: "auto";
+    powershell: "powershell";
+    cmd: "cmd";
+}>;
+export type ShellChoice = z.output<typeof ShellChoiceSchema>;
 /** C:\AgentData\run\requests\<id>.json: the ONLY things the host can ask the sandbox to do. */
 export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"session">;
@@ -378,6 +386,17 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         resumeArguments: z.ZodOptional<z.ZodArray<z.ZodString>>;
         resumeOneArguments: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strict>>;
+    shell: z.ZodOptional<z.ZodEnum<{
+        pwsh: "pwsh";
+        auto: "auto";
+        powershell: "powershell";
+        cmd: "cmd";
+    }>>;
+    createdAt: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"close">;
+    id: z.ZodString;
+    session: z.ZodString;
     createdAt: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"project">;
@@ -603,6 +622,10 @@ export declare const SessionStatusSchema: z.ZodObject<{
     id: z.ZodString;
     launchId: z.ZodString;
     harness: z.ZodString;
+    kind: z.ZodOptional<z.ZodEnum<{
+        shell: "shell";
+        agent: "agent";
+    }>>;
     cwd: z.ZodString;
     project: z.ZodOptional<z.ZodString>;
     phase: z.ZodEnum<{

package/dist/shared/channel/schema.js

@@ -60,6 +60,8 @@ export const ProjectSpecSchema = z.strictObject({
     /** Its hooks were staged in C:\AgentLaunch\projects\<name>\hooks. */
     hooks: z.boolean(),
 });
+/** The plain shells a session can run instead of an agent; auto: PowerShell 7 when the sandbox has it, else 5.1. */
+export const ShellChoiceSchema = z.enum(['auto', 'pwsh', 'powershell', 'cmd']);
 /** C:\AgentData\run\requests\<id>.json: the ONLY things the host can ask the sandbox to do. */
 export const GuestRequestSchema = z.discriminatedUnion('kind', [
     z.strictObject({
@@ -70,8 +72,12 @@ export const GuestRequestSchema = z.discriminatedUnion('kind', [
         cwd: Text(),
         project: ProjectSpecSchema.optional(),
         harnessSpec: HarnessSchema.optional(),
+        /** A plain shell instead of an agent (harness is then "shell" and args are ignored). */
+        shell: ShellChoiceSchema.optional(),
         createdAt: TimeSchema,
     }),
+    /** End a running session (an agent or a shell) and everything it started. */
+    z.strictObject({ kind: z.literal('close'), id: IdSchema, session: IdSchema, createdAt: TimeSchema }),
     /** Provision a registered project without starting an agent (sandbox start / exec / db from its folder). */
     z.strictObject({ kind: z.literal('project'), id: IdSchema, project: ProjectSpecSchema, createdAt: TimeSchema }),
     z.strictObject({
@@ -140,6 +146,8 @@ export const SessionStatusSchema = z.object({
     id: IdSchema,
     launchId: Text(64),
     harness: Text(64),
+    /** A plain shell (harness is then the shell: pwsh, powershell or cmd); absent: an agent. */
+    kind: z.enum(['agent', 'shell']).optional(),
     cwd: Text(),
     /** The project it runs in: its hub name, or the launch folder's for the first project. */
     project: Text(64).optional(),

package/dist/shared/pty/protocol.d.ts

@@ -4,6 +4,8 @@ export declare const FrameType: {
     readonly Resize: 3;
     readonly Restart: 4;
     readonly Ping: 5;
+    /** Ends the program and everything it started, and with it the session. */
+    readonly Close: 6;
     readonly Output: 16;
     readonly Exit: 17;
     readonly Error: 18;

package/dist/shared/pty/protocol.js

@@ -6,6 +6,8 @@ export const FrameType = {
     Resize: 3,
     Restart: 4,
     Ping: 5,
+    /** Ends the program and everything it started, and with it the session. */
+    Close: 6,
     Output: 16,
     Exit: 17,
     Error: 18,

package/dist/sync/watcher.js

@@ -10,7 +10,7 @@ import { RepoGuardStore } from '../host/guard/index.js';
 import { isSandboxRunning, realContainedDeps, spawnDetached } from '../host/sandbox/index.js';
 import { readActiveViews, WorkspaceView } from '../host/workspace-view/index.js';
 import { readForwards, sandboxAddress, startPortForwards } from '../host/network/index.js';
-import { AuditCollector, readAuditSettings } from '../host/audit/collect.js';
+import { AuditCollector, AuditLog, readAuditSettings } from '../host/audit/index.js';
 import { readMarkedProjects, saveDataSize, watchAndMark } from '../host/guard/index.js';
 import { sizeWithin } from '../core/disk.js';
 import { autoRestartAllowed, causeSince, appendHostMemory, cpuPercentBetween, KeepAwake, LifeRecord, HostMemoryStream, readHostMemoryAsync, readLoadSettings, REQUEST_SECONDS, WATCHDOG_START, watchdogStep, saveCrashReport, SessionLedger, } from '../host/life/index.js';
@@ -183,6 +183,14 @@ export class Watcher {
         const audit = auditSettings?.enabled ? new AuditCollector(dataPath, storageRoot, auditSettings) : null;
         this.audit = audit;
         audit?.start();
+        // Off now, but kept before: its old days still go.
+        if (auditSettings && !audit)
+            try {
+                new AuditLog(AuditLog.dirFor(storageRoot, dataPath), auditSettings).maintain();
+            }
+            catch (e) {
+                this.note('audit: ' + errMsg(e));
+            }
         this.auditTimer = audit
             ? setInterval(() => {
                 try {

package/dist/web/index.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Sandbox</title>
     <link rel="icon" href="data:," />
-    <link rel="stylesheet" href="/main-RQFN4WBY.css" />
-    <script type="module" src="/main-K2JMCAZI.js"></script>
+    <link rel="stylesheet" href="/main-UAQPI5XD.css" />
+    <script type="module" src="/main-Z2WYAE2Z.js"></script>
   </head>
   <body>
     <div id="root"></div>