windows-development-sandbox 1.16.0 → 1.17.3

package/dist/host/profile/plugin-share.js

@@ -17,6 +17,9 @@ export const MAX_PLUGIN_BYTES = 1024 * 1024 * 1024;
 const MAX_SETTINGS_BYTES = 4 * 1024 * 1024;
 const MAX_DEPTH = 24;
 const INSTALLED = 'installed_plugins.json';
+/** What Claude rewrites when a plugin or marketplace is added, removed or updated: equal files, same plugins. */
+const RECORDS = [INSTALLED, 'known_marketplaces.json'];
+const MAX_RECORD_BYTES = 4 * 1024 * 1024;
 function isObject(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -69,7 +72,7 @@ export class PluginShare {
     /** When a sandbox ends: its plugins refresh the shared set. Never throws; returns the problem, if any. */
     saveQuietly(dataPath, claudeDir) {
         try {
-            if (PluginShare.hasPlugins(claudeDir))
+            if (PluginShare.hasPlugins(claudeDir) && !this.matches(claudeDir))
                 this.save(dataPath, claudeDir);
             return null;
         }
@@ -131,9 +134,27 @@ export class PluginShare {
                 merged[key] = { ...shared[key], ...(isObject(merged[key]) ? merged[key] : {}) };
         writeSandboxJson(file, merged);
     }
+    /**
+     * Whether the shared set already holds this Claude folder's plugins: the same plugin records and plugin settings.
+     * Copying a big plugins folder takes seconds, so a switch between accounts with the same plugins skips it.
+     */
+    matches(claudeDir) {
+        if (!this.hasShared())
+            return false;
+        const same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+        for (const name of RECORDS) {
+            const own = readUntrusted(path.join(claudeDir, 'plugins', name), MAX_RECORD_BYTES);
+            if (!same(own, readUntrusted(path.join(this.pluginsDir, name), MAX_RECORD_BYTES)))
+                return false;
+        }
+        const shared = readUntrusted(this.settingsFile, MAX_SETTINGS_BYTES);
+        return same(pluginSettings(claudeDir), isObject(shared) ? shared : {});
+    }
     /** One step when an account is switched to. */
     sync(dataPath, claudeDir) {
         if (PluginShare.hasPlugins(claudeDir)) {
+            if (this.matches(claudeDir))
+                return 'nothing';
             this.save(dataPath, claudeDir);
             return 'saved';
         }

package/dist/host/secrets/secret-store.d.ts

@@ -8,12 +8,12 @@ export interface SecretBox {
 export declare class SecretStore {
     private readonly box;
     constructor(box: SecretBox);
-    /** Windows DPAPI, current user. */
-    static dpapi(): SecretStore;
+    /** Windows DPAPI, current user; with a storage folder, through its HostTools.exe (much faster than PowerShell). */
+    static dpapi(storageRoot?: string | null): SecretStore;
     /** The test stand-in (not secure). */
     static memory(): SecretStore;
     /** What the program uses: DPAPI, except during the self-test (it never spawns Windows for this). */
-    static standard(): SecretStore;
+    static standard(storageRoot?: string | null): SecretStore;
     /** True when `value` looks like something seal() made (any box). */
     static isSealed(value: unknown): value is string;
     seal(text: string): string;

package/dist/host/secrets/secret-store.js

@@ -1,15 +1,38 @@
 // Encryption at rest for what must not sit in plain files (saved logins, the VPN login). The real box is Windows DPAPI
-// for the current user (native\scripts\protect-data.ps1: data on standard input, never on a command line); the memory
-// box is the self-test's stand-in and is not secure. A sealed value is a short string: "<kind>:<base64>".
+// for the current user (HostTools.exe protect, else native\scripts\protect-data.ps1: data on standard input, never on
+// a command line); the memory box is the self-test's stand-in and is not secure. A sealed value is a short string:
+// "<kind>:<base64>".
 import { spawnSync } from 'node:child_process';
 import { fail } from '../../core/util/index.js';
 import { SYSTEM } from '../../shared/system.js';
 import { selfTestRunning } from '../../shared/test-guard.js';
-import { nativeScript } from '../native.js';
+import { hostToolsExe, nativeScript } from '../native.js';
 const TIMEOUT_MS = 60000;
-/** DPAPI for the current Windows user, through powershell.exe 5.1. */
+/** HostTools.exe per storage folder (null: it cannot be built there), found once per process. */
+const toolsFor = new Map();
+function dpapiTool(storageRoot) {
+    if (!toolsFor.has(storageRoot)) {
+        let exe = null;
+        try {
+            exe = hostToolsExe(storageRoot);
+        }
+        catch {
+            // Its bin folder cannot be written (another user's storage): PowerShell does the work.
+        }
+        toolsFor.set(storageRoot, exe);
+    }
+    return toolsFor.get(storageRoot) ?? null;
+}
+/**
+ * DPAPI for the current Windows user: HostTools.exe (built in <storageRoot>\bin; about 0.15 s a call) when a storage
+ * folder is known, else powershell.exe 5.1 (about 2 s a call, which a menu feels). Both read and write the same format.
+ */
 class DpapiBox {
+    storageRoot;
     kind = 'dpapi1';
+    constructor(storageRoot) {
+        this.storageRoot = storageRoot;
+    }
     seal(plain) {
         return this.run('protect', plain.toString('base64'));
     }
@@ -17,7 +40,11 @@ class DpapiBox {
         return Buffer.from(this.run('unprotect', sealed), 'base64');
     }
     run(mode, input) {
-        const result = spawnSync(SYSTEM.powershell(), nativeScript('protect-data.ps1', ['-Mode', mode]), {
+        const tools = this.storageRoot ? dpapiTool(this.storageRoot) : null;
+        const [exe, args] = tools
+            ? [tools, [mode]]
+            : [SYSTEM.powershell(), nativeScript('protect-data.ps1', ['-Mode', mode])];
+        const result = spawnSync(exe, args, {
             input,
             encoding: 'utf8',
             windowsHide: true,
@@ -49,17 +76,17 @@ export class SecretStore {
     constructor(box) {
         this.box = box;
     }
-    /** Windows DPAPI, current user. */
-    static dpapi() {
-        return new SecretStore(new DpapiBox());
+    /** Windows DPAPI, current user; with a storage folder, through its HostTools.exe (much faster than PowerShell). */
+    static dpapi(storageRoot = null) {
+        return new SecretStore(new DpapiBox(storageRoot));
     }
     /** The test stand-in (not secure). */
     static memory() {
         return new SecretStore(new MemoryBox());
     }
     /** What the program uses: DPAPI, except during the self-test (it never spawns Windows for this). */
-    static standard() {
-        return selfTestRunning() ? SecretStore.memory() : SecretStore.dpapi();
+    static standard(storageRoot = null) {
+        return selfTestRunning() ? SecretStore.memory() : SecretStore.dpapi(storageRoot);
     }
     /** True when `value` looks like something seal() made (any box). */
     static isSealed(value) {

package/dist/host/vpn/login.js

@@ -27,7 +27,7 @@ export function loginProblem(c) {
 export class VpnLogin {
     storageRoot;
     secrets;
-    constructor(storageRoot, secrets = SecretStore.standard()) {
+    constructor(storageRoot, secrets = SecretStore.standard(storageRoot)) {
         this.storageRoot = storageRoot;
         this.secrets = secrets;
     }

package/dist/runtime/agent.js

@@ -25486,7 +25486,7 @@ var SandboxSchema = external_exports.strictObject({
     "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
-    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
   ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
   clipboard: external_exports.boolean().describe(
@@ -25648,6 +25648,21 @@ var ToolchainsSchema = external_exports.strictObject({
     msvcVersion: external_exports.string().min(1).describe('"latest" or an MSVC tools version prefix, e.g. "14.44".'),
     sdkVersion: external_exports.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".')
   }),
+  unreal: external_exports.strictObject({
+    enabled: enabled(
+      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.",
+      "a .uproject or .uplugin"
+    ),
+    acceptLicense: external_exports.boolean().describe(
+      "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+    ),
+    components: StringsSchema.describe(
+      'More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'
+    ),
+    keepInstallFiles: external_exports.boolean().describe(
+      "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+    )
+  }),
   cpp: external_exports.strictObject({
     enabled: enabled(
       "MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).",