windows-development-sandbox 1.15.0 → 1.17.0

package/dist/runtime/netproxy.js

@@ -25515,7 +25515,7 @@ var SandboxSchema = external_exports.strictObject({
     "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
-    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
   ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
   clipboard: external_exports.boolean().describe(
@@ -25677,6 +25677,21 @@ var ToolchainsSchema = external_exports.strictObject({
     msvcVersion: external_exports.string().min(1).describe('"latest" or an MSVC tools version prefix, e.g. "14.44".'),
     sdkVersion: external_exports.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".')
   }),
+  unreal: external_exports.strictObject({
+    enabled: enabled(
+      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.",
+      "a .uproject or .uplugin"
+    ),
+    acceptLicense: external_exports.boolean().describe(
+      "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+    ),
+    components: StringsSchema.describe(
+      'More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'
+    ),
+    keepInstallFiles: external_exports.boolean().describe(
+      "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+    )
+  }),
   cpp: external_exports.strictObject({
     enabled: enabled(
       "MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).",

package/dist/runtime/view.js

@@ -26090,7 +26090,7 @@ var SandboxSchema = external_exports.strictObject({
     "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
-    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
   ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
   clipboard: external_exports.boolean().describe(
@@ -26252,6 +26252,21 @@ var ToolchainsSchema = external_exports.strictObject({
     msvcVersion: external_exports.string().min(1).describe('"latest" or an MSVC tools version prefix, e.g. "14.44".'),
     sdkVersion: external_exports.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".')
   }),
+  unreal: external_exports.strictObject({
+    enabled: enabled(
+      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.",
+      "a .uproject or .uplugin"
+    ),
+    acceptLicense: external_exports.boolean().describe(
+      "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+    ),
+    components: StringsSchema.describe(
+      'More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'
+    ),
+    keepInstallFiles: external_exports.boolean().describe(
+      "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+    )
+  }),
   cpp: external_exports.strictObject({
     enabled: enabled(
       "MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).",

package/dist/selftest/accounts.test.js

@@ -2,6 +2,9 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { AccountStore } from '../host/profile/index.js';
+import { DEFAULTS } from '../core/config/index.js';
+import { defaultAccount } from '../app/features/accounts/index.js';
+import { MenuOperations } from '../cli/menu/io-menu.js';
 export const accountsSuite = {
     name: 'accounts',
     title: 'Claude accounts (save, switch, remove, safe names)',
@@ -32,6 +35,25 @@ export const accountsSuite = {
             stateAfter.other === 1 &&
             new AccountStore(storage).activeFor(dataA) === 'work', 'switching swaps in the other credentials and account, keeps the rest of the sandbox state, and marks it active');
         t.includes(JSON.stringify(new AccountStore(storage).read('personal')?.credentials), 'personal-2', "the outgoing account's refreshed tokens are saved back before switching");
+        t.section('make default, as the menu runs it');
+        const menuCtx = {
+            packageRoot: t.dir('acct-menu', 'package'),
+            options: {},
+            loaded: { config: structuredClone(DEFAULTS), configPath: null, base: t.temp },
+            storageRoot: storage,
+            dataPath: dataA,
+        };
+        let said;
+        let error = null;
+        try {
+            said = await new MenuOperations({}, menuCtx).run(defaultAccount, { agent: 'claude', name: 'personal', noRestart: false }, []);
+        }
+        catch (e) {
+            error = e;
+        }
+        t.check(error === null &&
+            new AccountStore(storage).defaultName() === 'personal' &&
+            new AccountStore(storage).activeFor(dataA) === 'personal', 'make default from the menu sets the default and switches the sandbox to it', String(error instanceof Error ? error.stack : (error ?? said)));
         t.section('sharing plugins between data sets');
         const plugA = path.join(storage, 'data', 'p1', 'state', 'claude');
         const plugB = path.join(storage, 'data', 'p2', 'state', 'claude');
@@ -57,6 +79,13 @@ export const accountsSuite = {
             settingsB.enabledPlugins['p@m'] === true &&
             settingsB.enabledPlugins['q@m'] === false &&
             !fs.existsSync(path.join(storage, 'accounts', 'shared-plugins', '.credentials.json')), 'on: plugins and enabledPlugins reach the other data set; its own settings win and no login travels');
+        const sentinel = path.join(storage, 'accounts', 'shared-plugins', 'plugins', 'cache', 'kept.js');
+        t.write(sentinel, 'k');
+        on.activate(dataP('p1'), 'one');
+        t.check(fs.existsSync(sentinel), 'switching with the same plugins does not copy the plugins folder again');
+        t.write(path.join(plugA, 'plugins', 'installed_plugins.json'), '{"version":2,"plugins":{"p@m":[]}}');
+        on.activate(dataP('p1'), 'one');
+        t.check(!fs.existsSync(sentinel), 'once a plugin changed, the switch refreshes the shared set');
         t.write(path.join(plugC, 'plugins', 'installed_plugins.json'), '{}');
         const outside = t.dir('plugin-victim');
         t.write(path.join(outside, 'secret.txt'), 's');

package/dist/selftest/app.test.js

@@ -319,9 +319,9 @@ export const appSuite = {
             !sessionLines.some((l) => l.includes('--wide')), 'sessions on the command line: the table with the folder column (--wide), the marker and its note', sessionLines.join('\n'));
         const statusLines = pageLines(statusPage);
         t.check(statusLines.some((l) => /^State\s+\S/.test(l)) &&
-            statusLines.some((l) => /^Helper\s+responding, 2 sessions running$/.test(l)) &&
+            statusLines.some((l) => /^Helper\s+Responding$/.test(l)) &&
             statusLines.includes('* api  C:\\Projects\\api  ->  C:\\Projects\\api  (started from here)') &&
-            statusLines.some((l) => l.startsWith('Repo guard  1 folder(s) guarded')), 'status on the command line: facts as rows, projects with their details, the repo guard', statusLines.join('\n'));
+            statusLines.some((l) => l.startsWith('Repo guard  Watching 1 folder.')), 'status on the command line: facts as rows, projects with their details, the repo guard', statusLines.join('\n'));
         t.equal(pageLines(sessionsPage({ ...list, sessions: [] })).at(-1), 'No sessions. Start one with: sandbox claude', 'an empty page prints its command-line text');
         const menu = menuView(sessions);
         const chosen = menu.resolve({ kind: 'pick', value: 'new' });

package/dist/selftest/detect.test.js

@@ -66,6 +66,13 @@ export const detectSuite = {
         t.check(fresh.python.on && fresh.dotnet.on && !fresh.go.on && fresh.python.reason.includes('this PC'), 'a folder that is no project yet gets the languages this PC has, and the reason names this PC');
         const rusty = decideToolchains({ ...tc, python: { ...tc.python, enabled: true } }, ['Cargo.toml'], []);
         t.check(rusty.rust.on && rusty.cpp.on && rusty.python.on && rusty.python.reason === 'enabled in config', 'Rust brings its C/C++ linker; true in config always wins');
+        const game = ['ZombieGame.uproject', 'Source/ZombieGame.Target.cs'];
+        const accepted = { ...tc, unreal: { ...tc.unreal, acceptLicense: true } };
+        t.check(decideToolchains(accepted, game, []).unreal.on &&
+            decideToolchains(accepted, ['Plugins/Kit.uplugin'], []).unreal.on &&
+            !decideToolchains(accepted, ['go.mod'], []).unreal.on, 'Unreal: "auto" follows a .uproject or .uplugin');
+        const unaccepted = decideToolchains(tc, game, []).unreal;
+        t.check(!unaccepted.on && unaccepted.reason.includes('toolchains.unreal.acceptLicense'), 'Unreal is not installed until its licence is accepted, and the reason says how');
         const resolved = resolveToolchains(tc, goProject);
         t.check(resolved.go.enabled === true && resolved.python.enabled === false, 'the sandbox gets plain decisions instead of "auto"');
         t.section('optional tools: Bun, uv, VS Code');

package/dist/selftest/live-network.test.js

@@ -122,6 +122,11 @@ export const liveNetworkSuite = {
                 typeof e.id === 'number' &&
                 typeof e.provider === 'string' &&
                 typeof e.process === 'string'), 'HostTools stop-events prints a JSON list of { at, id, provider, process }', events.stdout.slice(0, 500) + events.stderr);
+        const plain = Buffer.from('a saved login').toString('base64');
+        const sealed = spawnSync(hostTools, ['protect'], { encoding: 'utf8', input: plain });
+        const opened = spawnSync(hostTools, ['unprotect'], { encoding: 'utf8', input: sealed.stdout });
+        t.check(sealed.status === 0 && sealed.stdout !== plain && opened.status === 0 && opened.stdout === plain, 'HostTools protect and unprotect round-trip through DPAPI', sealed.stderr + opened.stderr);
+        t.equal(spawnSync(hostTools, ['unprotect'], { encoding: 'utf8', input: 'not base64!' }).status, 1, 'HostTools unprotect refuses bad input');
         t.equal(spawnSync(hostTools, ['stop-events'], { encoding: 'utf8' }).status, 2, 'HostTools without --since prints its usage');
     },
 };

package/dist/selftest/support/fixtures.d.ts

@@ -157,6 +157,12 @@ export declare function createFixtures(t: Harness): {
                 msvcVersion: string;
                 sdkVersion: string;
             };
+            unreal: {
+                enabled: boolean | "auto";
+                acceptLicense: boolean;
+                components: string[];
+                keepInstallFiles: boolean;
+            };
             cpp: {
                 enabled: boolean | "auto";
                 flexBison: boolean;

package/dist/shared/channel/schema.d.ts

@@ -88,6 +88,12 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             msvcVersion: z.ZodString;
             sdkVersion: z.ZodString;
         }, z.core.$strict>;
+        unreal: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            acceptLicense: z.ZodBoolean;
+            components: z.ZodArray<z.ZodString>;
+            keepInstallFiles: z.ZodBoolean;
+        }, z.core.$strict>;
         cpp: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
             flexBison: z.ZodBoolean;
@@ -254,6 +260,12 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 msvcVersion: z.ZodString;
                 sdkVersion: z.ZodString;
             }, z.core.$strict>;
+            unreal: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                components: z.ZodArray<z.ZodString>;
+                keepInstallFiles: z.ZodBoolean;
+            }, z.core.$strict>;
             cpp: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
                 flexBison: z.ZodBoolean;
@@ -440,6 +452,12 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 msvcVersion: z.ZodString;
                 sdkVersion: z.ZodString;
             }, z.core.$strict>;
+            unreal: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                components: z.ZodArray<z.ZodString>;
+                keepInstallFiles: z.ZodBoolean;
+            }, z.core.$strict>;
             cpp: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
                 flexBison: z.ZodBoolean;

package/dist/web/index.html

@@ -5,8 +5,8 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Sandbox</title>
     <link rel="icon" href="data:," />
-    <link rel="stylesheet" href="/main-UAQPI5XD.css" />
-    <script type="module" src="/main-7DJZ2M27.js"></script>
+    <link rel="stylesheet" href="/main-XT7T6ODM.css" />
+    <script type="module" src="/main-JTH3FT4O.js"></script>
   </head>
   <body>
     <div id="root"></div>