windows-development-sandbox 1.11.7 → 1.13.0

package/sandbox/addons/playwright-mcp/package-lock.json

@@ -0,0 +1,56 @@
+{
+  "name": "sandbox-addon-playwright-mcp",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "sandbox-addon-playwright-mcp",
+      "dependencies": {
+        "@playwright/mcp": "0.0.83"
+      }
+    },
+    "node_modules/@playwright/mcp": {
+      "version": "0.0.83",
+      "resolved": "https://registry.npmjs.org/@playwright/mcp/-/mcp-0.0.83.tgz",
+      "integrity": "sha512-oNcl+Ae2/IAjhfPeP46BfIkSakfmprY+aOtkv5MjrQ4lPav4/yNtPhL0iq8SlIM90oApWgBDUxaNKvktazUKOg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright": "1.64.0-alpha-1790635538000",
+        "playwright-core": "1.64.0-alpha-1790635538000"
+      },
+      "bin": {
+        "playwright-mcp": "cli.js"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/playwright": {
+      "version": "1.64.0-alpha-1790635538000",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.0-alpha-1790635538000.tgz",
+      "integrity": "sha512-/5XDUMxpOd/9AojJtWDFIRV3EJZNQ0AwvK69wgt3CPzy8wTgiBG9pX45VfxtqtvIRGwfWzMhrvawNKreG69Snw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright-core": "1.64.0-alpha-1790635538000"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.64.0-alpha-1790635538000",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.0-alpha-1790635538000.tgz",
+      "integrity": "sha512-pNwaXirhXMRLaRQs4NQ18EpTdtDoFwyPH9FOaaDC7YXG4hpwE2xmwCic/1srbuExVQC7zT9LJSJpDBAru+Vo9A==",
+      "license": "Apache-2.0",
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    }
+  }
+}

package/sandbox/addons/playwright-mcp/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "sandbox-addon-playwright-mcp",
+  "private": true,
+  "dependencies": {
+    "@playwright/mcp": "0.0.83"
+  }
+}

package/sandbox/csharp/PtyHost.cs

@@ -11,6 +11,7 @@
 //                   3 RESIZE  [cols:2][rows:2]
 //                   4 RESTART restart the program with <restartCommandLine> (e.g. after switching accounts)
 //                   5 PING    "still here": viewers send it every few seconds, so a closed terminal stops counting
+//                   6 CLOSE   end the program (and everything it started) and with it the session
 //   host -> client 16 OUTPUT  VT output
 //                  17 EXIT    [exitCode:4]
 //                  18 ERROR   utf8 message
@@ -65,6 +66,7 @@ sealed class SessionHost
     private readonly string restartCommand;
     private string command;
     private volatile bool restartRequested;
+    private volatile bool closeRequested;
 
     public SessionHost(ClientHub hub, Log log, string command, string restartCommand)
     {
@@ -99,11 +101,24 @@ sealed class SessionHost
 
     public void Restart()
     {
+        if (closeRequested)
+        {
+            return;
+        }
         restartRequested = true;
         hub.ResetReplay();
         hub.Notify(Frame.Restarting);
         hub.KillProgram();
     }
+
+    /// <summary>Ends the program for good (CLOSE): the session exits the way it does when the program exits.</summary>
+    public void Close()
+    {
+        closeRequested = true;
+        restartRequested = false;
+        log.Write("closing the session on request");
+        hub.KillProgram();
+    }
 }
 
 /// <summary>Accepts TCP clients and turns their frames into actions.</summary>
@@ -201,6 +216,10 @@ sealed class Listener
                 {
                     host.Restart();
                 }
+                else if (type == Frame.Close)
+                {
+                    host.Close();
+                }
             }
         }
         catch (IOException)
@@ -1251,6 +1270,7 @@ static class Frame
     public const byte Resize = 3;
     public const byte Restart = 4;
     public const byte Ping = 5;
+    public const byte Close = 6;
     public const byte Output = 16;
     public const byte Exit = 17;
     public const byte Error = 18;

package/schemas/config.schema.json

@@ -63,13 +63,13 @@
       "properties": {
         "enabled": {
           "type": "boolean",
-          "description": "Keep an audit log on this PC of what happened in your sandboxes: programs started (with their command lines), files changed in the project, sessions, and what the repo guard caught. The sandbox cannot change it. Read it with sandbox audit."
+          "description": "Keep an audit log on this PC of what your agents did: programs started (with their command lines, secrets hidden), files changed in the projects, git commits, sessions, and what the repo guard caught, each linked to the agent session that did it where that can be known. The sandbox cannot change it. Read it with sandbox audit or on the Activity page."
         },
         "days": {
           "type": "integer",
           "minimum": 1,
           "maximum": 365,
-          "description": "Days the audit log is kept."
+          "description": "Days the audit log is kept (1 to 30; a larger number keeps 30); older days are deleted when a sandbox starts and once a day."
         },
         "maxMb": {
           "type": "integer",
@@ -83,7 +83,11 @@
         },
         "files": {
           "type": "boolean",
-          "description": "Record the files changed in the project while the sandbox runs."
+          "description": "Record the files changed in the projects while the sandbox runs."
+        },
+        "commits": {
+          "type": "boolean",
+          "description": "Record the git commits made in the projects while the sandbox runs (read from each project's .git folder on this PC)."
         }
       },
       "additionalProperties": false
@@ -1261,6 +1265,71 @@
         "openOnLaunch": {
           "type": "boolean",
           "description": "(Beta) With the web UI on: open it in your browser, already signed in, every time a sandbox starts."
+        },
+        "remote": {
+          "type": "object",
+          "properties": {
+            "windowsSignIn": {
+              "type": "boolean",
+              "description": "(Beta) Other Windows users of this PC named in web.remote.users sign in to your web UI (and sandbox remote) with their own Windows account: no password, no link."
+            },
+            "users": {
+              "maxItems": 32,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 120,
+                    "pattern": "^(?:[A-Za-z0-9][A-Za-z0-9._ -]{0,62}\\\\)?[^\\\\/\"[\\]:;|=,+*?<>@]{1,64}$",
+                    "description": "The Windows user (name, or DOMAIN\\name)"
+                  },
+                  "role": {
+                    "type": "string",
+                    "enum": [
+                      "view",
+                      "control"
+                    ],
+                    "description": "view: sees everything, terminals read-only. control: everything but remote access, logins and tokens."
+                  }
+                },
+                "additionalProperties": false
+              },
+              "description": "Who else may sign in with Windows, and their role (view or control)."
+            },
+            "rememberDays": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 90,
+              "description": "How many days a paired device or a Windows sign-in stays signed in (from when it signed in, not renewed)."
+            },
+            "lan": {
+              "type": "object",
+              "properties": {
+                "enabled": {
+                  "type": "boolean",
+                  "description": "(Beta) Devices on your network (a phone): an HTTPS address on this PC for devices you pair with a one-time code (sandbox web pair). Needs a firewall rule (sandbox web lan on asks Windows once). Off: every paired device is signed out."
+                },
+                "port": {
+                  "type": "integer",
+                  "minimum": 1024,
+                  "maximum": 65535,
+                  "description": "HTTPS port for paired devices on your network."
+                },
+                "address": {
+                  "type": "string",
+                  "maxLength": 15,
+                  "pattern": "^$|^\\d{1,3}(\\.\\d{1,3}){3}$",
+                  "description": "This PC's private address to listen on. Empty: the one of its network adapter (never a public one)."
+                }
+              },
+              "additionalProperties": false
+            }
+          },
+          "additionalProperties": false,
+          "description": "(Beta) Access for other Windows users of this PC and for paired devices."
         }
       },
       "additionalProperties": false
@@ -1337,6 +1406,12 @@
           "items": {
             "type": "string",
             "enum": [
+              "rtk",
+              "headroom",
+              "ccusage",
+              "playwright-mcp",
+              "context7",
+              "rea",
               "notepadpp",
               "sublime",
               "neovim",
@@ -1381,7 +1456,6 @@
               "xh",
               "grpcurl",
               "k6",
-              "rea",
               "ghidra",
               "x64dbg",
               "ilspy",

package/schemas/sandbox-config.schema.json

@@ -107,24 +107,6 @@
           ],
           "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered."
         },
-        "maxMemoryMb": {
-          "type": "integer",
-          "exclusiveMinimum": 0,
-          "maximum": 9007199254740991,
-          "description": "Upper limit for memoryMb \"auto\"."
-        },
-        "maxMemoryPercent": {
-          "type": "integer",
-          "minimum": 10,
-          "maximum": 100,
-          "description": "memoryMb \"auto\" never takes more than this share of this PC's total RAM (percent)."
-        },
-        "reserveHostMb": {
-          "type": "integer",
-          "minimum": 0,
-          "maximum": 9007199254740991,
-          "description": "Memory always left for this PC when memoryMb is \"auto\": the sandbox gets at most (free RAM, and RAM plus paging file still unused) minus this."
-        },
         "vGpu": {
           "type": "boolean",
           "description": "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
@@ -1037,6 +1019,7 @@
           "items": {
             "type": "string",
             "enum": [
+              "rea",
               "notepadpp",
               "sublime",
               "neovim",
@@ -1081,7 +1064,6 @@
               "xh",
               "grpcurl",
               "k6",
-              "rea",
               "ghidra",
               "x64dbg",
               "ilspy",
@@ -1112,7 +1094,7 @@
               "rust-analyzer"
             ]
           },
-          "description": "Apps from the catalogue to install in every sandbox (the Apps screen in the menu lists them by category). Each is downloaded once and kept."
+          "description": "Apps from the catalogue this project adds to yours (agent add-ons such as rtk, Headroom and the MCP servers are set in your own settings only)."
         }
       },
       "additionalProperties": false

package/dist/cli/commands/maintenance/audit.d.ts

@@ -1,3 +0,0 @@
-import { type Context } from '../context.js';
-/** `sandbox audit`: the audit log of the last days (audit.enabled), newest last. */
-export declare function audit(ctx: Context): Promise<number>;

package/dist/cli/commands/maintenance/audit.js

@@ -1,58 +0,0 @@
-import path from 'node:path';
-import { fail, plainText } from '../../../core/util/index.js';
-import { humanBytes } from '../../../core/disk.js';
-import { AuditLog } from '../../../host/audit/log.js';
-import { printJson, c } from '../../output/index.js';
-const KINDS = ['proc', 'file', 'session', 'guard', 'note'];
-const KIND_LABEL = {
-    proc: 'program',
-    file: 'file',
-    session: 'session',
-    guard: 'GUARD',
-    note: 'note',
-};
-/** `sandbox audit`: the audit log of the last days (audit.enabled), newest last. */
-export async function audit(ctx) {
-    const settings = ctx.loaded.config.audit;
-    const kind = ctx.options.kind;
-    if (kind && !KINDS.includes(kind))
-        fail('Unknown kind "' + kind + '".', 'Use one of: ' + KINDS.join(', '));
-    const log = new AuditLog(AuditLog.dirFor(ctx.storageRoot, ctx.dataPath), settings);
-    const events = log.read({
-        days: ctx.options.days,
-        kinds: kind ? [kind] : undefined,
-        grep: ctx.options.grep,
-    });
-    if (printJson(ctx, events))
-        return 0;
-    if (!events.length) {
-        console.log(settings.enabled
-            ? 'Nothing in the audit log for the last ' + ctx.options.days + ' day(s).'
-            : 'The audit log is off. Turn it on in the menu (Settings > Security & privacy > Audit log) or with: sandbox config set audit.enabled true');
-        return 0;
-    }
-    for (const e of events) {
-        // What the sandbox reported is text from the sandbox: no control codes reach your terminal.
-        const [p, cmd, parent, dir, act] = [e.p, e.c, e.pp, e.w, e.a].map((v) => plainText(v ?? ''));
-        const what = e.k === 'proc'
-            ? (cmd || p) + (parent ? c.dim('  <- ' + path.win32.basename(parent)) : '')
-            : e.k === 'file'
-                ? act + ' ' + p + c.dim('  in ' + dir)
-                : e.k === 'session'
-                    ? act + ' ' + p + c.dim('  ' + dir + ' ' + cmd)
-                    : p;
-        console.log(c.dim(new Date(e.t).toLocaleString()) +
-            '  ' +
-            (e.k === 'guard' ? c.yellow(KIND_LABEL[e.k].padEnd(8)) : KIND_LABEL[e.k].padEnd(8)) +
-            what +
-            (e.n && e.n > 1 ? c.dim('  x' + e.n) : ''));
-    }
-    console.log(c.dim('\n' +
-        events.length +
-        ' event(s); the log takes ' +
-        humanBytes(log.bytes()) +
-        ' (' +
-        AuditLog.dirFor(ctx.storageRoot, ctx.dataPath) +
-        ').'));
-    return 0;
-}