windows-development-sandbox 1.12.0 → 1.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.12.0",
+  "version": "1.13.0",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",

package/sandbox/csharp/PtyHost.cs

@@ -11,6 +11,7 @@
 //                   3 RESIZE  [cols:2][rows:2]
 //                   4 RESTART restart the program with <restartCommandLine> (e.g. after switching accounts)
 //                   5 PING    "still here": viewers send it every few seconds, so a closed terminal stops counting
+//                   6 CLOSE   end the program (and everything it started) and with it the session
 //   host -> client 16 OUTPUT  VT output
 //                  17 EXIT    [exitCode:4]
 //                  18 ERROR   utf8 message
@@ -65,6 +66,7 @@ sealed class SessionHost
     private readonly string restartCommand;
     private string command;
     private volatile bool restartRequested;
+    private volatile bool closeRequested;
 
     public SessionHost(ClientHub hub, Log log, string command, string restartCommand)
     {
@@ -99,11 +101,24 @@ sealed class SessionHost
 
     public void Restart()
     {
+        if (closeRequested)
+        {
+            return;
+        }
         restartRequested = true;
         hub.ResetReplay();
         hub.Notify(Frame.Restarting);
         hub.KillProgram();
     }
+
+    /// <summary>Ends the program for good (CLOSE): the session exits the way it does when the program exits.</summary>
+    public void Close()
+    {
+        closeRequested = true;
+        restartRequested = false;
+        log.Write("closing the session on request");
+        hub.KillProgram();
+    }
 }
 
 /// <summary>Accepts TCP clients and turns their frames into actions.</summary>
@@ -201,6 +216,10 @@ sealed class Listener
                 {
                     host.Restart();
                 }
+                else if (type == Frame.Close)
+                {
+                    host.Close();
+                }
             }
         }
         catch (IOException)
@@ -1251,6 +1270,7 @@ static class Frame
     public const byte Resize = 3;
     public const byte Restart = 4;
     public const byte Ping = 5;
+    public const byte Close = 6;
     public const byte Output = 16;
     public const byte Exit = 17;
     public const byte Error = 18;

package/schemas/config.schema.json

@@ -1265,6 +1265,71 @@
         "openOnLaunch": {
           "type": "boolean",
           "description": "(Beta) With the web UI on: open it in your browser, already signed in, every time a sandbox starts."
+        },
+        "remote": {
+          "type": "object",
+          "properties": {
+            "windowsSignIn": {
+              "type": "boolean",
+              "description": "(Beta) Other Windows users of this PC named in web.remote.users sign in to your web UI (and sandbox remote) with their own Windows account: no password, no link."
+            },
+            "users": {
+              "maxItems": 32,
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 120,
+                    "pattern": "^(?:[A-Za-z0-9][A-Za-z0-9._ -]{0,62}\\\\)?[^\\\\/\"[\\]:;|=,+*?<>@]{1,64}$",
+                    "description": "The Windows user (name, or DOMAIN\\name)"
+                  },
+                  "role": {
+                    "type": "string",
+                    "enum": [
+                      "view",
+                      "control"
+                    ],
+                    "description": "view: sees everything, terminals read-only. control: everything but remote access, logins and tokens."
+                  }
+                },
+                "additionalProperties": false
+              },
+              "description": "Who else may sign in with Windows, and their role (view or control)."
+            },
+            "rememberDays": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 90,
+              "description": "How many days a paired device or a Windows sign-in stays signed in (from when it signed in, not renewed)."
+            },
+            "lan": {
+              "type": "object",
+              "properties": {
+                "enabled": {
+                  "type": "boolean",
+                  "description": "(Beta) Devices on your network (a phone): an HTTPS address on this PC for devices you pair with a one-time code (sandbox web pair). Needs a firewall rule (sandbox web lan on asks Windows once). Off: every paired device is signed out."
+                },
+                "port": {
+                  "type": "integer",
+                  "minimum": 1024,
+                  "maximum": 65535,
+                  "description": "HTTPS port for paired devices on your network."
+                },
+                "address": {
+                  "type": "string",
+                  "maxLength": 15,
+                  "pattern": "^$|^\\d{1,3}(\\.\\d{1,3}){3}$",
+                  "description": "This PC's private address to listen on. Empty: the one of its network adapter (never a public one)."
+                }
+              },
+              "additionalProperties": false
+            }
+          },
+          "additionalProperties": false,
+          "description": "(Beta) Access for other Windows users of this PC and for paired devices."
         }
       },
       "additionalProperties": false

package/schemas/sandbox-config.schema.json

@@ -107,24 +107,6 @@
           ],
           "description": "Sandbox RAM in MB (>= 2048), or \"auto\": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered."
         },
-        "maxMemoryMb": {
-          "type": "integer",
-          "exclusiveMinimum": 0,
-          "maximum": 9007199254740991,
-          "description": "Upper limit for memoryMb \"auto\"."
-        },
-        "maxMemoryPercent": {
-          "type": "integer",
-          "minimum": 10,
-          "maximum": 100,
-          "description": "memoryMb \"auto\" never takes more than this share of this PC's total RAM (percent)."
-        },
-        "reserveHostMb": {
-          "type": "integer",
-          "minimum": 0,
-          "maximum": 9007199254740991,
-          "description": "Memory always left for this PC when memoryMb is \"auto\": the sandbox gets at most (free RAM, and RAM plus paging file still unused) minus this."
-        },
         "vGpu": {
           "type": "boolean",
           "description": "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."