windows-development-sandbox 1.14.0 → 1.15.0

package/dist/runtime/db.js

@@ -26621,6 +26621,9 @@ var ProjectsSchema = external_exports.strictObject({
   ),
   wsbShare: external_exports.boolean().describe(
     "On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart."
+  ),
+  liveFolders: external_exports.enum(["off", "hcs"]).describe(
+    'ALPHA, UNTESTED ON A REAL PC: "hcs" adds a project folder to the running sandbox through the Host Compute Service where `wsb share` is missing (one administrator prompt per add or remove; always read-only in this alpha). If it fails, the sandbox may close: save your work first. Turn it on before the sandbox starts. "off" (default) offers a restart instead. The real-PC tests still to pass are in docs/design/hcs-live-folders.md ("Test plan").'
   )
 });
 
@@ -27218,6 +27221,9 @@ var RunDir = class {
   treesDir;
   /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
   secretsDir;
+  /** Live folders (live.ts): signed host requests, and the daemon's replies. */
+  liveDir;
+  liveRepliesDir;
   constructor(dataDir2) {
     this.root = path5.join(dataDir2, "run");
     this.sandboxFile = path5.join(this.root, "sandbox.json");
@@ -27231,6 +27237,14 @@ var RunDir = class {
     this.auditDir = path5.join(this.root, "audit");
     this.treesDir = path5.join(this.root, "trees");
     this.secretsDir = path5.join(dataDir2, "secrets");
+    this.liveDir = path5.join(this.root, "live");
+    this.liveRepliesDir = path5.join(this.root, "live-replies");
+  }
+  liveFile(id) {
+    return path5.join(this.liveDir, safeId(id) + ".json");
+  }
+  liveReplyFile(id) {
+    return path5.join(this.liveRepliesDir, safeId(id) + ".json");
   }
   requestFile(id) {
     return path5.join(this.requestsDir, safeId(id) + ".json");

package/dist/runtime/main.js

@@ -26750,6 +26750,9 @@ var ProjectsSchema = external_exports.strictObject({
   ),
   wsbShare: external_exports.boolean().describe(
     "On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart."
+  ),
+  liveFolders: external_exports.enum(["off", "hcs"]).describe(
+    'ALPHA, UNTESTED ON A REAL PC: "hcs" adds a project folder to the running sandbox through the Host Compute Service where `wsb share` is missing (one administrator prompt per add or remove; always read-only in this alpha). If it fails, the sandbox may close: save your work first. Turn it on before the sandbox starts. "off" (default) offers a restart instead. The real-PC tests still to pass are in docs/design/hcs-live-folders.md ("Test plan").'
   )
 });
 
@@ -27329,6 +27332,9 @@ var RunDir = class {
   treesDir;
   /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
   secretsDir;
+  /** Live folders (live.ts): signed host requests, and the daemon's replies. */
+  liveDir;
+  liveRepliesDir;
   constructor(dataDir2) {
     this.root = path6.join(dataDir2, "run");
     this.sandboxFile = path6.join(this.root, "sandbox.json");
@@ -27342,6 +27348,14 @@ var RunDir = class {
     this.auditDir = path6.join(this.root, "audit");
     this.treesDir = path6.join(this.root, "trees");
     this.secretsDir = path6.join(dataDir2, "secrets");
+    this.liveDir = path6.join(this.root, "live");
+    this.liveRepliesDir = path6.join(this.root, "live-replies");
+  }
+  liveFile(id) {
+    return path6.join(this.liveDir, safeId(id) + ".json");
+  }
+  liveReplyFile(id) {
+    return path6.join(this.liveRepliesDir, safeId(id) + ".json");
   }
   requestFile(id) {
     return path6.join(this.requestsDir, safeId(id) + ".json");
@@ -29299,7 +29313,8 @@ var SOURCES = {
   cargoshim: "CargoShim.cs",
   linkgate: "LinkGate.cs",
   pathsync: "PathSync.cs",
-  memgov: "MemGov.cs"
+  memgov: "MemGov.cs",
+  bindmount: "BindMount.cs"
 };
 function sourceOf(name) {
   return path31.join(launchDir, "sandbox", "csharp", SOURCES[name]);
@@ -35748,7 +35763,9 @@ var SecretsFileSchema = external_exports.strictObject({
   /** The checked WireGuard config of vpn.provider wireguard-file (holds the private key). */
   wireguardConfig: external_exports.string().min(1).max(32 * 1024).optional(),
   /** The GitHub token you saved for sandboxes (github.shareToken), only with git access "full". */
-  githubToken: GithubTokenSchema.optional()
+  githubToken: GithubTokenSchema.optional(),
+  /** projects.liveFolders "hcs": this launch's key for signed live-folder requests (live.ts). */
+  liveFoldersKey: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
 });
 
 // src/guest/runtime/secrets.ts
@@ -35809,7 +35826,13 @@ function startDaemon(env, secrets) {
       ...env,
       AGENT_LOG_PREFIX: "daemon",
       // The agent's environment (it may hold API keys): the daemon moves it into memory and removes this at once.
-      ...secrets.harnessEnvironment ? { [BOOT_SECRETS_VARIABLE]: JSON.stringify({ harnessEnvironment: secrets.harnessEnvironment }) } : {}
+      // The live-folder key (projects.liveFolders "hcs") goes the same way into the daemon's own state.
+      ...secrets.harnessEnvironment || secrets.liveFoldersKey ? {
+        [BOOT_SECRETS_VARIABLE]: JSON.stringify({
+          ...secrets.harnessEnvironment ? { harnessEnvironment: secrets.harnessEnvironment } : {},
+          ...secrets.liveFoldersKey ? { liveFoldersKey: secrets.liveFoldersKey } : {}
+        })
+      } : {}
     }
   }).unref();
 }

package/dist/runtime/netproxy.js

@@ -26674,6 +26674,9 @@ var ProjectsSchema = external_exports.strictObject({
   ),
   wsbShare: external_exports.boolean().describe(
     "On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart."
+  ),
+  liveFolders: external_exports.enum(["off", "hcs"]).describe(
+    'ALPHA, UNTESTED ON A REAL PC: "hcs" adds a project folder to the running sandbox through the Host Compute Service where `wsb share` is missing (one administrator prompt per add or remove; always read-only in this alpha). If it fails, the sandbox may close: save your work first. Turn it on before the sandbox starts. "off" (default) offers a restart instead. The real-PC tests still to pass are in docs/design/hcs-live-folders.md ("Test plan").'
   )
 });
 
@@ -27209,6 +27212,9 @@ var RunDir = class {
   treesDir;
   /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
   secretsDir;
+  /** Live folders (live.ts): signed host requests, and the daemon's replies. */
+  liveDir;
+  liveRepliesDir;
   constructor(dataDir2) {
     this.root = path3.join(dataDir2, "run");
     this.sandboxFile = path3.join(this.root, "sandbox.json");
@@ -27222,6 +27228,14 @@ var RunDir = class {
     this.auditDir = path3.join(this.root, "audit");
     this.treesDir = path3.join(this.root, "trees");
     this.secretsDir = path3.join(dataDir2, "secrets");
+    this.liveDir = path3.join(this.root, "live");
+    this.liveRepliesDir = path3.join(this.root, "live-replies");
+  }
+  liveFile(id) {
+    return path3.join(this.liveDir, safeId(id) + ".json");
+  }
+  liveReplyFile(id) {
+    return path3.join(this.liveRepliesDir, safeId(id) + ".json");
   }
   requestFile(id) {
     return path3.join(this.requestsDir, safeId(id) + ".json");

package/dist/runtime/view.js

@@ -27249,6 +27249,9 @@ var ProjectsSchema = external_exports.strictObject({
   ),
   wsbShare: external_exports.boolean().describe(
     "On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart."
+  ),
+  liveFolders: external_exports.enum(["off", "hcs"]).describe(
+    'ALPHA, UNTESTED ON A REAL PC: "hcs" adds a project folder to the running sandbox through the Host Compute Service where `wsb share` is missing (one administrator prompt per add or remove; always read-only in this alpha). If it fails, the sandbox may close: save your work first. Turn it on before the sandbox starts. "off" (default) offers a restart instead. The real-PC tests still to pass are in docs/design/hcs-live-folders.md ("Test plan").'
   )
 });
 
@@ -27784,6 +27787,9 @@ var RunDir = class {
   treesDir;
   /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
   secretsDir;
+  /** Live folders (live.ts): signed host requests, and the daemon's replies. */
+  liveDir;
+  liveRepliesDir;
   constructor(dataDir2) {
     this.root = path5.join(dataDir2, "run");
     this.sandboxFile = path5.join(this.root, "sandbox.json");
@@ -27797,6 +27803,14 @@ var RunDir = class {
     this.auditDir = path5.join(this.root, "audit");
     this.treesDir = path5.join(this.root, "trees");
     this.secretsDir = path5.join(dataDir2, "secrets");
+    this.liveDir = path5.join(this.root, "live");
+    this.liveRepliesDir = path5.join(this.root, "live-replies");
+  }
+  liveFile(id) {
+    return path5.join(this.liveDir, safeId(id) + ".json");
+  }
+  liveReplyFile(id) {
+    return path5.join(this.liveRepliesDir, safeId(id) + ".json");
   }
   requestFile(id) {
     return path5.join(this.requestsDir, safeId(id) + ".json");

package/dist/selftest/index.js

@@ -36,6 +36,7 @@ import { engineSuite } from './engine.test.js';
 import { containedSuite } from './contained.test.js';
 import { storageHelperSuite } from './storage-helper.test.js';
 import { hcsSuite } from './hcs.test.js';
+import { liveFoldersSuite } from './live-folders.test.js';
 import { gitAccessSuite } from './git-access.test.js';
 import { guestBootSuite } from './guest-boot.test.js';
 import { hostileInputSuite } from './hostile-input.test.js';
@@ -89,6 +90,7 @@ export const SUITES = [
     containedSuite,
     storageHelperSuite,
     hcsSuite,
+    liveFoldersSuite,
     guestBootSuite,
     mirrorSuite,
     projectsSuite,

package/dist/selftest/layout.test.js

@@ -24,6 +24,7 @@ const PURE_GUEST = [
     'guest/toolchains/tools/vscode-profile.js',
     'guest/governor/decide.js',
     'guest/governor/core.js',
+    'guest/daemon/live-folders.js',
 ];
 const SIDE_EFFECTS = ['guest/runtime/session.js', 'guest/runtime/log.js'];
 const readModules = (dist) => {

package/dist/selftest/live-folders.test.d.ts

@@ -0,0 +1,2 @@
+import type { Suite } from './support/suite.js';
+export declare const liveFoldersSuite: Suite;