windows-development-sandbox 1.16.0 → 1.17.0

package/dist/runtime/netproxy.js

@@ -25515,7 +25515,7 @@ var SandboxSchema = external_exports.strictObject({
     "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
-    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
   ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
   clipboard: external_exports.boolean().describe(
@@ -25677,6 +25677,21 @@ var ToolchainsSchema = external_exports.strictObject({
     msvcVersion: external_exports.string().min(1).describe('"latest" or an MSVC tools version prefix, e.g. "14.44".'),
     sdkVersion: external_exports.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".')
   }),
+  unreal: external_exports.strictObject({
+    enabled: enabled(
+      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.",
+      "a .uproject or .uplugin"
+    ),
+    acceptLicense: external_exports.boolean().describe(
+      "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+    ),
+    components: StringsSchema.describe(
+      'More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'
+    ),
+    keepInstallFiles: external_exports.boolean().describe(
+      "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+    )
+  }),
   cpp: external_exports.strictObject({
     enabled: enabled(
       "MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).",

package/dist/runtime/view.js

@@ -26090,7 +26090,7 @@ var SandboxSchema = external_exports.strictObject({
     "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
-    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
   ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
   clipboard: external_exports.boolean().describe(
@@ -26252,6 +26252,21 @@ var ToolchainsSchema = external_exports.strictObject({
     msvcVersion: external_exports.string().min(1).describe('"latest" or an MSVC tools version prefix, e.g. "14.44".'),
     sdkVersion: external_exports.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".')
   }),
+  unreal: external_exports.strictObject({
+    enabled: enabled(
+      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.",
+      "a .uproject or .uplugin"
+    ),
+    acceptLicense: external_exports.boolean().describe(
+      "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+    ),
+    components: StringsSchema.describe(
+      'More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'
+    ),
+    keepInstallFiles: external_exports.boolean().describe(
+      "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+    )
+  }),
   cpp: external_exports.strictObject({
     enabled: enabled(
       "MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).",

package/dist/selftest/accounts.test.js

@@ -79,6 +79,13 @@ export const accountsSuite = {
             settingsB.enabledPlugins['p@m'] === true &&
             settingsB.enabledPlugins['q@m'] === false &&
             !fs.existsSync(path.join(storage, 'accounts', 'shared-plugins', '.credentials.json')), 'on: plugins and enabledPlugins reach the other data set; its own settings win and no login travels');
+        const sentinel = path.join(storage, 'accounts', 'shared-plugins', 'plugins', 'cache', 'kept.js');
+        t.write(sentinel, 'k');
+        on.activate(dataP('p1'), 'one');
+        t.check(fs.existsSync(sentinel), 'switching with the same plugins does not copy the plugins folder again');
+        t.write(path.join(plugA, 'plugins', 'installed_plugins.json'), '{"version":2,"plugins":{"p@m":[]}}');
+        on.activate(dataP('p1'), 'one');
+        t.check(!fs.existsSync(sentinel), 'once a plugin changed, the switch refreshes the shared set');
         t.write(path.join(plugC, 'plugins', 'installed_plugins.json'), '{}');
         const outside = t.dir('plugin-victim');
         t.write(path.join(outside, 'secret.txt'), 's');

package/dist/selftest/detect.test.js

@@ -66,6 +66,13 @@ export const detectSuite = {
         t.check(fresh.python.on && fresh.dotnet.on && !fresh.go.on && fresh.python.reason.includes('this PC'), 'a folder that is no project yet gets the languages this PC has, and the reason names this PC');
         const rusty = decideToolchains({ ...tc, python: { ...tc.python, enabled: true } }, ['Cargo.toml'], []);
         t.check(rusty.rust.on && rusty.cpp.on && rusty.python.on && rusty.python.reason === 'enabled in config', 'Rust brings its C/C++ linker; true in config always wins');
+        const game = ['ZombieGame.uproject', 'Source/ZombieGame.Target.cs'];
+        const accepted = { ...tc, unreal: { ...tc.unreal, acceptLicense: true } };
+        t.check(decideToolchains(accepted, game, []).unreal.on &&
+            decideToolchains(accepted, ['Plugins/Kit.uplugin'], []).unreal.on &&
+            !decideToolchains(accepted, ['go.mod'], []).unreal.on, 'Unreal: "auto" follows a .uproject or .uplugin');
+        const unaccepted = decideToolchains(tc, game, []).unreal;
+        t.check(!unaccepted.on && unaccepted.reason.includes('toolchains.unreal.acceptLicense'), 'Unreal is not installed until its licence is accepted, and the reason says how');
         const resolved = resolveToolchains(tc, goProject);
         t.check(resolved.go.enabled === true && resolved.python.enabled === false, 'the sandbox gets plain decisions instead of "auto"');
         t.section('optional tools: Bun, uv, VS Code');

package/dist/selftest/live-network.test.js

@@ -122,6 +122,11 @@ export const liveNetworkSuite = {
                 typeof e.id === 'number' &&
                 typeof e.provider === 'string' &&
                 typeof e.process === 'string'), 'HostTools stop-events prints a JSON list of { at, id, provider, process }', events.stdout.slice(0, 500) + events.stderr);
+        const plain = Buffer.from('a saved login').toString('base64');
+        const sealed = spawnSync(hostTools, ['protect'], { encoding: 'utf8', input: plain });
+        const opened = spawnSync(hostTools, ['unprotect'], { encoding: 'utf8', input: sealed.stdout });
+        t.check(sealed.status === 0 && sealed.stdout !== plain && opened.status === 0 && opened.stdout === plain, 'HostTools protect and unprotect round-trip through DPAPI', sealed.stderr + opened.stderr);
+        t.equal(spawnSync(hostTools, ['unprotect'], { encoding: 'utf8', input: 'not base64!' }).status, 1, 'HostTools unprotect refuses bad input');
         t.equal(spawnSync(hostTools, ['stop-events'], { encoding: 'utf8' }).status, 2, 'HostTools without --since prints its usage');
     },
 };

package/dist/selftest/support/fixtures.d.ts

@@ -157,6 +157,12 @@ export declare function createFixtures(t: Harness): {
                 msvcVersion: string;
                 sdkVersion: string;
             };
+            unreal: {
+                enabled: boolean | "auto";
+                acceptLicense: boolean;
+                components: string[];
+                keepInstallFiles: boolean;
+            };
             cpp: {
                 enabled: boolean | "auto";
                 flexBison: boolean;

package/dist/shared/channel/schema.d.ts

@@ -88,6 +88,12 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             msvcVersion: z.ZodString;
             sdkVersion: z.ZodString;
         }, z.core.$strict>;
+        unreal: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            acceptLicense: z.ZodBoolean;
+            components: z.ZodArray<z.ZodString>;
+            keepInstallFiles: z.ZodBoolean;
+        }, z.core.$strict>;
         cpp: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
             flexBison: z.ZodBoolean;
@@ -254,6 +260,12 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 msvcVersion: z.ZodString;
                 sdkVersion: z.ZodString;
             }, z.core.$strict>;
+            unreal: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                components: z.ZodArray<z.ZodString>;
+                keepInstallFiles: z.ZodBoolean;
+            }, z.core.$strict>;
             cpp: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
                 flexBison: z.ZodBoolean;
@@ -440,6 +452,12 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 msvcVersion: z.ZodString;
                 sdkVersion: z.ZodString;
             }, z.core.$strict>;
+            unreal: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                components: z.ZodArray<z.ZodString>;
+                keepInstallFiles: z.ZodBoolean;
+            }, z.core.$strict>;
             cpp: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
                 flexBison: z.ZodBoolean;

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.16.0.0")]
-[assembly: AssemblyFileVersion("1.16.0.0")]
-[assembly: AssemblyInformationalVersion("1.16.0")]
+[assembly: AssemblyVersion("1.17.0.0")]
+[assembly: AssemblyFileVersion("1.17.0.0")]
+[assembly: AssemblyInformationalVersion("1.17.0")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.16.0.0")]
-[assembly: AssemblyFileVersion("1.16.0.0")]
-[assembly: AssemblyInformationalVersion("1.16.0")]
+[assembly: AssemblyVersion("1.17.0.0")]
+[assembly: AssemblyFileVersion("1.17.0.0")]
+[assembly: AssemblyInformationalVersion("1.17.0")]
 [assembly: ComVisible(false)]

package/native/csharp/HostTools/Program.cs

@@ -8,6 +8,7 @@
 //   user-path --add|--remove D  D first on, or off, your PATH; exit 3 when PATH would be too long
 //   web-helper --pipe P --server-pid N   Windows sign-in for the web UI (WebHelper.cs), until stdin closes
 //   door-client --owner USER   another user's side of that sign-in: prints the answer
+//   protect | unprotect        DPAPI for the current user (Protect.cs): base64 on stdin, base64 on stdout
 using System;
 using System.Collections.Generic;
 using System.Diagnostics;
@@ -112,6 +113,10 @@ static class Program
                     return Usage();
                 }
                 return AgentSandbox.WebHelper.Client(value);
+            case "protect":
+                return AgentSandbox.Protect.Run(true);
+            case "unprotect":
+                return AgentSandbox.Protect.Run(false);
             default:
                 return Usage();
         }
@@ -119,7 +124,7 @@ static class Program
 
     static int Usage()
     {
-        Console.Error.WriteLine("Usage: HostTools keep-awake --owner-pid N | stop-events --since <ISO time> | memory-status | hide-window --wait S | show-window [--handles a,b] | user-path --add|--remove <folder> | web-helper --pipe P --server-pid N | door-client --owner USER");
+        Console.Error.WriteLine("Usage: HostTools keep-awake --owner-pid N | stop-events --since <ISO time> | memory-status | hide-window --wait S | show-window [--handles a,b] | user-path --add|--remove <folder> | web-helper --pipe P --server-pid N | door-client --owner USER | protect | unprotect");
         return 2;
     }
 

package/native/csharp/HostTools/Protect.cs

@@ -0,0 +1,41 @@
+// HostTools protect / unprotect: Windows DPAPI for the current user, as native\scripts\protect-data.ps1 does it (same
+// entropy, same format), without starting PowerShell. Standard input: base64 of the bytes; standard output: base64 of
+// the result. Nothing goes on the command line or to disk.
+using System;
+using System.IO;
+using System.Security.Cryptography;
+using System.Text;
+
+namespace AgentSandbox
+{
+    static class Protect
+    {
+        /// <summary>The fixed extra secret of protect-data.ps1: another program that calls DPAPI without it cannot open these.</summary>
+        private const string Entropy = "agent-sandbox/secret-store/v1";
+
+        public static int Run(bool protect)
+        {
+            try
+            {
+                string text;
+                using (Stream input = Console.OpenStandardInput())
+                using (StreamReader reader = new StreamReader(input, Encoding.ASCII))
+                {
+                    text = reader.ReadToEnd().Trim();
+                }
+                byte[] data = Convert.FromBase64String(text);
+                byte[] entropy = Encoding.UTF8.GetBytes(Entropy);
+                byte[] result = protect
+                    ? ProtectedData.Protect(data, entropy, DataProtectionScope.CurrentUser)
+                    : ProtectedData.Unprotect(data, entropy, DataProtectionScope.CurrentUser);
+                Console.Out.Write(Convert.ToBase64String(result));
+                return 0;
+            }
+            catch (Exception e)
+            {
+                Console.Error.WriteLine(e.Message);
+                return 1;
+            }
+        }
+    }
+}

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.16.0.0")]
-[assembly: AssemblyFileVersion("1.16.0.0")]
-[assembly: AssemblyInformationalVersion("1.16.0")]
+[assembly: AssemblyVersion("1.17.0.0")]
+[assembly: AssemblyFileVersion("1.17.0.0")]
+[assembly: AssemblyInformationalVersion("1.17.0")]
 [assembly: ComVisible(false)]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.16.0",
+  "version": "1.17.0",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",

package/schemas/config.schema.json

@@ -208,7 +208,7 @@
         },
         "vGpu": {
           "type": "boolean",
-          "description": "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+          "description": "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
         },
         "networking": {
           "type": "boolean",
@@ -676,6 +676,39 @@
           },
           "additionalProperties": false
         },
+        "unreal": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "anyOf": [
+                {
+                  "type": "boolean"
+                },
+                {
+                  "type": "string",
+                  "const": "auto"
+                }
+              ],
+              "description": "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source. true, false, or \"auto\" = only when the project has a .uproject or .uplugin."
+            },
+            "acceptLicense": {
+              "type": "boolean",
+              "description": "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+            },
+            "components": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "More Visual Studio workload or component IDs to add, e.g. [\"Microsoft.VisualStudio.Component.VC.Llvm.Clang\"]."
+            },
+            "keepInstallFiles": {
+              "type": "boolean",
+              "description": "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+            }
+          },
+          "additionalProperties": false
+        },
         "cpp": {
           "type": "object",
           "properties": {

package/schemas/sandbox-config.schema.json

@@ -109,7 +109,7 @@
         },
         "vGpu": {
           "type": "boolean",
-          "description": "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+          "description": "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
         },
         "networking": {
           "type": "boolean",
@@ -430,6 +430,39 @@
           },
           "additionalProperties": false
         },
+        "unreal": {
+          "type": "object",
+          "properties": {
+            "enabled": {
+              "anyOf": [
+                {
+                  "type": "boolean"
+                },
+                {
+                  "type": "string",
+                  "const": "auto"
+                }
+              ],
+              "description": "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source. true, false, or \"auto\" = only when the project has a .uproject or .uplugin."
+            },
+            "acceptLicense": {
+              "type": "boolean",
+              "description": "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+            },
+            "components": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "description": "More Visual Studio workload or component IDs to add, e.g. [\"Microsoft.VisualStudio.Component.VC.Llvm.Clang\"]."
+            },
+            "keepInstallFiles": {
+              "type": "boolean",
+              "description": "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+            }
+          },
+          "additionalProperties": false
+        },
         "cpp": {
           "type": "object",
           "properties": {