windows-development-sandbox 1.17.0 → 1.18.0

package/dist/shared/accounts/payloads.js

@@ -0,0 +1,128 @@
+// The shape of each saved sign-in (what the host seals, what travels in the one-shot secrets file, what a sandbox may
+// hand back). Pure zod, web-safe. Every text is size-bounded: the sandbox may have written it.
+import { z } from 'zod';
+import { SERVICE_KINDS } from './kinds.js';
+const KB = 1024;
+const base64 = (maxBytes) => z
+    .string()
+    .min(4)
+    .max(maxBytes)
+    .regex(/^[A-Za-z0-9+/]+={0,2}$/);
+const secretText = (max) => z
+    .string()
+    .min(1)
+    .max(max)
+    .regex(/^[^\r\n]+$/);
+/** The Epic Games Launcher's "Remember me" (the Data value of [RememberMe] in its GameUserSettings.ini). */
+export const EpicPayloadSchema = z.strictObject({
+    data: z
+        .string()
+        .min(16)
+        .max(16384)
+        .regex(/^[A-Za-z0-9+/=_-]+$/),
+});
+/** SteamCMD's cached login: config\config.vdf (ConnectCache) and the ssfn sentry files. No password. */
+export const SteamPayloadSchema = z.strictObject({
+    account: z.string().regex(/^[A-Za-z0-9_]{1,64}$/),
+    configVdf: z
+        .string()
+        .min(1)
+        .max(256 * KB),
+    sentries: z.array(z.strictObject({ name: z.string().regex(/^ssfn\d{1,40}$/), base64: base64(64 * KB) })).max(4),
+    /** Reserved for the Steam client's own login (very likely not portable between Windows users). */
+    client: base64(256 * KB).optional(),
+});
+/** A Unity licence file (Unity_lic.ulf), and the Unity ID to sign in with when it has to be made again. */
+export const UnityPayloadSchema = z.strictObject({
+    ulf: z
+        .string()
+        .min(1)
+        .max(128 * KB)
+        .optional(),
+    email: z.string().email().max(256).optional(),
+    password: secretText(1024).optional(),
+    serial: secretText(64).optional(),
+});
+/** A FiveM / RedM server licence key from the Cfx.re keymaster, and an optional Steam Web API key. */
+export const CfxPayloadSchema = z.strictObject({
+    licenseKey: z
+        .string()
+        .max(256)
+        .regex(/^cfxk_[A-Za-z0-9_]+$/),
+    steamWebApiKey: z
+        .string()
+        .regex(/^[A-F0-9]{32}$/)
+        .optional(),
+});
+/** An Android upload keystore and what opens it. */
+export const KeystorePayloadSchema = z.strictObject({
+    fileName: z.string().regex(/^[A-Za-z0-9._-]{1,100}\.(jks|keystore|p12)$/i),
+    jksBase64: base64(256 * KB),
+    storePassword: secretText(1024),
+    keyAlias: secretText(256),
+    keyPassword: secretText(1024),
+});
+/** A Google Play service account key (its JSON file). */
+export const PlayPayloadSchema = z.strictObject({
+    serviceAccountJson: z
+        .string()
+        .min(2)
+        .max(64 * KB)
+        .refine((text) => {
+        try {
+            const parsed = JSON.parse(text);
+            return (typeof parsed === 'object' && parsed !== null && parsed.type === 'service_account');
+        }
+        catch {
+            return false;
+        }
+    }, 'not a Google service account key (its "type" is not "service_account")'),
+});
+/** An Expo access token (EXPO_TOKEN). */
+export const ExpoPayloadSchema = z.strictObject({
+    token: z.string().regex(/^[A-Za-z0-9_-]{8,512}$/),
+});
+/** An App Store Connect API key: its issuer, its ID and the .p8 private key. */
+export const AppstorePayloadSchema = z.strictObject({
+    issuerId: z.string().uuid(),
+    keyId: z.string().regex(/^[A-Z0-9]{10}$/),
+    p8: z
+        .string()
+        .max(8 * KB)
+        .regex(/^-----BEGIN PRIVATE KEY-----\r?\n[A-Za-z0-9+/=\r\n]+-----END PRIVATE KEY-----\s*$/),
+});
+export const PAYLOADS = {
+    epic: EpicPayloadSchema,
+    steam: SteamPayloadSchema,
+    unity: UnityPayloadSchema,
+    cfx: CfxPayloadSchema,
+    keystore: KeystorePayloadSchema,
+    play: PlayPayloadSchema,
+    expo: ExpoPayloadSchema,
+    appstore: AppstorePayloadSchema,
+};
+/** The secrets-file field: the sign-ins this launch hands over, each optional. */
+export const ServiceAccountsSchema = z.strictObject({
+    epic: EpicPayloadSchema.optional(),
+    steam: SteamPayloadSchema.optional(),
+    unity: UnityPayloadSchema.optional(),
+    cfx: CfxPayloadSchema.optional(),
+    keystore: KeystorePayloadSchema.optional(),
+    play: PlayPayloadSchema.optional(),
+    expo: ExpoPayloadSchema.optional(),
+    appstore: AppstorePayloadSchema.optional(),
+});
+/** A launch's id (generate.ts: "<ms>-<6 hex>"). */
+export const LaunchIdSchema = z.string().regex(/^[A-Za-z0-9-]{1,64}$/);
+/** What a sandbox leaves in state\accounts\<kind>.json: the renewed sign-in and the launch it belongs to. */
+export function handoffSchema(kind) {
+    return z.strictObject({
+        kind: z.literal(kind),
+        launchId: LaunchIdSchema,
+        payload: PAYLOADS[kind],
+    });
+}
+/** The kinds that are in a secrets-file field, in order. */
+export function deliveredKinds(given) {
+    return given ? SERVICE_KINDS.filter((k) => given[k] !== undefined) : [];
+}

package/dist/shared/apps/catalogue-gamedev.d.ts

@@ -0,0 +1,2 @@
+import type { AppEntry } from './catalogue.js';
+export declare const GAMEDEV_APPS: readonly AppEntry[];

package/dist/shared/apps/catalogue-gamedev.js

@@ -0,0 +1 @@
+export const GAMEDEV_APPS = [];

package/dist/shared/apps/catalogue-mobile.d.ts

@@ -0,0 +1,2 @@
+import type { AppEntry } from './catalogue.js';
+export declare const MOBILE_APPS: readonly AppEntry[];

package/dist/shared/apps/catalogue-mobile.js

@@ -0,0 +1 @@
+export const MOBILE_APPS = [];

package/dist/shared/apps/catalogue-modding.d.ts

@@ -0,0 +1,2 @@
+import type { AppEntry } from './catalogue.js';
+export declare const MODDING_APPS: readonly AppEntry[];

package/dist/shared/apps/catalogue-modding.js

@@ -0,0 +1 @@
+export const MODDING_APPS = [];

package/dist/shared/apps/catalogue.d.ts

@@ -71,5 +71,6 @@ export declare const HEADROOM_VERSION = "0.41.0";
 export declare const CCUSAGE_VERSION = "20.0.36";
 export declare const PLAYWRIGHT_MCP_VERSION = "0.0.83";
 export declare const CONTEXT7_MCP_VERSION = "4.4.2";
+/** Every app: the ones above, then the game-development, modding and mobile ones (each list in its own file). */
 export declare const APPS: AppEntry[];
 export declare function appById(id: string): AppEntry | undefined;

package/dist/shared/apps/catalogue.js

@@ -3,6 +3,9 @@
 // shared by the menu on the PC (to list them) and the sandbox (to install them, guest/apps). VS Code and Windows
 // Terminal have settings of their own (toolchains.vscode, provisioning.terminal) and are listed here too, like
 // claude-mem (claudeProfile.syncClaudeMem) among the agent add-ons.
+import { GAMEDEV_APPS } from './catalogue-gamedev.js';
+import { MOBILE_APPS } from './catalogue-mobile.js';
+import { MODDING_APPS } from './catalogue-modding.js';
 export const APP_CATEGORIES = [
     {
         id: 'agents',
@@ -64,7 +67,7 @@ export const HEADROOM_VERSION = '0.41.0';
 export const CCUSAGE_VERSION = '20.0.36';
 export const PLAYWRIGHT_MCP_VERSION = '0.0.83';
 export const CONTEXT7_MCP_VERSION = '4.4.2';
-export const APPS = [
+const CORE_APPS = [
     // ---- agent add-ons
     {
         id: 'rtk',
@@ -887,6 +890,8 @@ export const APPS = [
         cli: true,
     },
 ];
+/** Every app: the ones above, then the game-development, modding and mobile ones (each list in its own file). */
+export const APPS = [...CORE_APPS, ...GAMEDEV_APPS, ...MODDING_APPS, ...MOBILE_APPS];
 export function appById(id) {
     return APPS.find((a) => a.id === id);
 }

package/dist/shared/channel/schema.d.ts

@@ -93,6 +93,65 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             acceptLicense: z.ZodBoolean;
             components: z.ZodArray<z.ZodString>;
             keepInstallFiles: z.ZodBoolean;
+            persistEngines: z.ZodBoolean;
+            derivedDataCache: z.ZodEnum<{
+                persisted: "persisted";
+                local: "local";
+            }>;
+        }, z.core.$strict>;
+        unity: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            acceptLicense: z.ZodBoolean;
+            version: z.ZodString;
+            modules: z.ZodArray<z.ZodString>;
+            hub: z.ZodBoolean;
+            keepVersions: z.ZodNumber;
+        }, z.core.$strict>;
+        godot: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+            dotnet: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            exportTemplates: z.ZodBoolean;
+            keepVersions: z.ZodNumber;
+        }, z.core.$strict>;
+        steam: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            client: z.ZodBoolean;
+            sdkFolder: z.ZodString;
+        }, z.core.$strict>;
+        fivem: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            acceptLicense: z.ZodBoolean;
+            game: z.ZodEnum<{
+                gta5: "gta5";
+                rdr3: "rdr3";
+            }>;
+            artifact: z.ZodString;
+            txAdmin: z.ZodBoolean;
+            keepVersions: z.ZodNumber;
+        }, z.core.$strict>;
+        android: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            acceptLicense: z.ZodBoolean;
+            platforms: z.ZodArray<z.ZodString>;
+            buildTools: z.ZodString;
+            ndk: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString]>;
+            cmake: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString]>;
+            packages: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        flutter: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+            windowsDesktop: z.ZodBoolean;
+            precache: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+        dart: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            version: z.ZodString;
+        }, z.core.$strict>;
+        reactNative: z.ZodObject<{
+            enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+            easCli: z.ZodBoolean;
         }, z.core.$strict>;
         cpp: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -105,6 +164,7 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             workloads: z.ZodArray<z.ZodString>;
             frameworkTargets: z.ZodArray<z.ZodString>;
             netfx35: z.ZodBoolean;
+            templates: z.ZodArray<z.ZodString>;
         }, z.core.$strict>;
         go: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -116,6 +176,7 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             version: z.ZodString;
             maven: z.ZodBoolean;
             gradle: z.ZodBoolean;
+            kotlin: z.ZodBoolean;
         }, z.core.$strict>;
         ruby: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -265,6 +326,65 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 acceptLicense: z.ZodBoolean;
                 components: z.ZodArray<z.ZodString>;
                 keepInstallFiles: z.ZodBoolean;
+                persistEngines: z.ZodBoolean;
+                derivedDataCache: z.ZodEnum<{
+                    persisted: "persisted";
+                    local: "local";
+                }>;
+            }, z.core.$strict>;
+            unity: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                version: z.ZodString;
+                modules: z.ZodArray<z.ZodString>;
+                hub: z.ZodBoolean;
+                keepVersions: z.ZodNumber;
+            }, z.core.$strict>;
+            godot: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                dotnet: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                exportTemplates: z.ZodBoolean;
+                keepVersions: z.ZodNumber;
+            }, z.core.$strict>;
+            steam: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                client: z.ZodBoolean;
+                sdkFolder: z.ZodString;
+            }, z.core.$strict>;
+            fivem: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                game: z.ZodEnum<{
+                    gta5: "gta5";
+                    rdr3: "rdr3";
+                }>;
+                artifact: z.ZodString;
+                txAdmin: z.ZodBoolean;
+                keepVersions: z.ZodNumber;
+            }, z.core.$strict>;
+            android: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                platforms: z.ZodArray<z.ZodString>;
+                buildTools: z.ZodString;
+                ndk: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString]>;
+                cmake: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString]>;
+                packages: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            flutter: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                windowsDesktop: z.ZodBoolean;
+                precache: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            dart: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+            }, z.core.$strict>;
+            reactNative: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                easCli: z.ZodBoolean;
             }, z.core.$strict>;
             cpp: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -277,6 +397,7 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 workloads: z.ZodArray<z.ZodString>;
                 frameworkTargets: z.ZodArray<z.ZodString>;
                 netfx35: z.ZodBoolean;
+                templates: z.ZodArray<z.ZodString>;
             }, z.core.$strict>;
             go: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -288,6 +409,7 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 version: z.ZodString;
                 maven: z.ZodBoolean;
                 gradle: z.ZodBoolean;
+                kotlin: z.ZodBoolean;
             }, z.core.$strict>;
             ruby: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -457,6 +579,65 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 acceptLicense: z.ZodBoolean;
                 components: z.ZodArray<z.ZodString>;
                 keepInstallFiles: z.ZodBoolean;
+                persistEngines: z.ZodBoolean;
+                derivedDataCache: z.ZodEnum<{
+                    persisted: "persisted";
+                    local: "local";
+                }>;
+            }, z.core.$strict>;
+            unity: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                version: z.ZodString;
+                modules: z.ZodArray<z.ZodString>;
+                hub: z.ZodBoolean;
+                keepVersions: z.ZodNumber;
+            }, z.core.$strict>;
+            godot: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                dotnet: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                exportTemplates: z.ZodBoolean;
+                keepVersions: z.ZodNumber;
+            }, z.core.$strict>;
+            steam: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                client: z.ZodBoolean;
+                sdkFolder: z.ZodString;
+            }, z.core.$strict>;
+            fivem: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                game: z.ZodEnum<{
+                    gta5: "gta5";
+                    rdr3: "rdr3";
+                }>;
+                artifact: z.ZodString;
+                txAdmin: z.ZodBoolean;
+                keepVersions: z.ZodNumber;
+            }, z.core.$strict>;
+            android: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                acceptLicense: z.ZodBoolean;
+                platforms: z.ZodArray<z.ZodString>;
+                buildTools: z.ZodString;
+                ndk: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString]>;
+                cmake: z.ZodUnion<readonly [z.ZodLiteral<false>, z.ZodString]>;
+                packages: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            flutter: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+                windowsDesktop: z.ZodBoolean;
+                precache: z.ZodArray<z.ZodString>;
+            }, z.core.$strict>;
+            dart: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                version: z.ZodString;
+            }, z.core.$strict>;
+            reactNative: z.ZodObject<{
+                enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
+                easCli: z.ZodBoolean;
             }, z.core.$strict>;
             cpp: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -469,6 +650,7 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 workloads: z.ZodArray<z.ZodString>;
                 frameworkTargets: z.ZodArray<z.ZodString>;
                 netfx35: z.ZodBoolean;
+                templates: z.ZodArray<z.ZodString>;
             }, z.core.$strict>;
             go: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -480,6 +662,7 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 version: z.ZodString;
                 maven: z.ZodBoolean;
                 gradle: z.ZodBoolean;
+                kotlin: z.ZodBoolean;
             }, z.core.$strict>;
             ruby: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;

package/dist/shared/channel/secrets.d.ts

@@ -10,6 +10,48 @@ export declare const SecretsFileSchema: z.ZodObject<{
     }, z.core.$strict>>;
     wireguardConfig: z.ZodOptional<z.ZodString>;
     githubToken: z.ZodOptional<z.ZodString>;
+    serviceAccounts: z.ZodOptional<z.ZodObject<{
+        epic: z.ZodOptional<z.ZodObject<{
+            data: z.ZodString;
+        }, z.core.$strict>>;
+        steam: z.ZodOptional<z.ZodObject<{
+            account: z.ZodString;
+            configVdf: z.ZodString;
+            sentries: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                base64: z.ZodString;
+            }, z.core.$strict>>;
+            client: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        unity: z.ZodOptional<z.ZodObject<{
+            ulf: z.ZodOptional<z.ZodString>;
+            email: z.ZodOptional<z.ZodString>;
+            password: z.ZodOptional<z.ZodString>;
+            serial: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        cfx: z.ZodOptional<z.ZodObject<{
+            licenseKey: z.ZodString;
+            steamWebApiKey: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        keystore: z.ZodOptional<z.ZodObject<{
+            fileName: z.ZodString;
+            jksBase64: z.ZodString;
+            storePassword: z.ZodString;
+            keyAlias: z.ZodString;
+            keyPassword: z.ZodString;
+        }, z.core.$strict>>;
+        play: z.ZodOptional<z.ZodObject<{
+            serviceAccountJson: z.ZodString;
+        }, z.core.$strict>>;
+        expo: z.ZodOptional<z.ZodObject<{
+            token: z.ZodString;
+        }, z.core.$strict>>;
+        appstore: z.ZodOptional<z.ZodObject<{
+            issuerId: z.ZodString;
+            keyId: z.ZodString;
+            p8: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
     liveFoldersKey: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export type SecretsFile = z.output<typeof SecretsFileSchema>;

package/dist/shared/channel/secrets.js

@@ -4,6 +4,7 @@
 // sandbox may change run\, never this folder. The agent in the sandbox can still read what it was given (its own
 // environment, its login): that is inherent. Every part is optional.
 import { z } from 'zod';
+import { ServiceAccountsSchema } from '../accounts/payloads.js';
 import { GithubTokenSchema } from '../github/index.js';
 const Environment = z.record(z.string().max(256), z.string().max(65536));
 export const SecretsFileSchema = z.strictObject({
@@ -28,6 +29,8 @@ export const SecretsFileSchema = z.strictObject({
         .optional(),
     /** The GitHub token you saved for sandboxes (github.shareToken), only with git access "full". */
     githubToken: GithubTokenSchema.optional(),
+    /** Your saved service sign-ins (accounts.<kind>.share): each goes to its tool's own files at boot. */
+    serviceAccounts: ServiceAccountsSchema.optional(),
     /** projects.liveFolders "hcs": this launch's key for signed live-folder requests (live.ts). */
     liveFoldersKey: z
         .string()

package/dist/shared/download/downloader.d.ts

@@ -2,6 +2,13 @@
 export interface Checksums {
     sha256?: string | null;
     sha512?: string | null;
+    /** Only where a vendor publishes nothing better (the Android repository). */
+    sha1?: string | null;
+    /**
+     * Checks the finished file before it is moved into place (an Authenticode signer); throwing refuses it. It counts as
+     * integrity for downloads.requireChecksum.
+     */
+    verify?: (file: string) => void | Promise<void>;
 }
 export interface ArchiveOptions extends Checksums {
     /** Keep only the folder holding this file. */

package/dist/shared/download/downloader.js

@@ -21,7 +21,7 @@ export class Downloader {
      */
     async file(url, destination, expected = null) {
         const sums = typeof expected === 'string' || expected === null ? { sha256: expected } : expected;
-        if (this.requireChecksum && !sums.sha256?.trim() && !sums.sha512?.trim()) {
+        if (this.requireChecksum && !sums.sha256?.trim() && !sums.sha512?.trim() && !sums.sha1?.trim() && !sums.verify) {
             throw new Error('Refusing to download ' +
                 path.basename(destination) +
                 ' (' +
@@ -33,7 +33,7 @@ export class Downloader {
             throw new Error('Empty response for ' + url);
         fs.mkdirSync(path.dirname(destination), { recursive: true });
         // Only the hashes that will be checked (sha512 of a 330 MB archive is not free).
-        const checks = ['sha256', 'sha512'].flatMap((kind) => {
+        const checks = ['sha256', 'sha512', 'sha1'].flatMap((kind) => {
             const want = sums[kind]?.trim().toLowerCase();
             return want ? [{ want, hash: crypto.createHash(kind) }] : [];
         });
@@ -72,6 +72,8 @@ export class Downloader {
             await pipeline(Readable.fromWeb(response.body), tap, fs.createWriteStream(partial));
             if (checks.some((c) => c.hash.digest('hex') !== c.want))
                 throw new Error('Checksum mismatch for ' + url);
+            if (sums.verify)
+                await sums.verify(partial);
             // Mapped folders refuse rename-over, so the old file goes first.
             fs.rmSync(destination, { force: true });
             fs.renameSync(partial, destination);
@@ -88,7 +90,12 @@ export class Downloader {
         const work = stagingFolder(destination);
         try {
             const archive = path.join(work, options.fileName ?? path.basename(new URL(url).pathname));
-            await this.file(url, archive, { sha256: options.sha256, sha512: options.sha512 });
+            await this.file(url, archive, {
+                sha256: options.sha256,
+                sha512: options.sha512,
+                sha1: options.sha1,
+                ...(options.verify ? { verify: options.verify } : {}),
+            });
             const extracted = path.join(work, 'x');
             await extractArchive(archive, extracted, options.members);
             let root = extracted;

package/dist/shared/installs.d.ts

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+export declare const INSTALL_RECORDS_FILE = "installs.json";
+export declare const InstallRecordSchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    sizeBytes: z.ZodNullable<z.ZodNumber>;
+    installedAt: z.ZodString;
+    usedAt: z.ZodString;
+}, z.core.$strip>;
+export type InstallRecord = z.output<typeof InstallRecordSchema>;
+export declare const InstallRecordsSchema: z.ZodObject<{
+    installs: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        sizeBytes: z.ZodNullable<z.ZodNumber>;
+        installedAt: z.ZodString;
+        usedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;

package/dist/shared/installs.js

@@ -0,0 +1,13 @@
+// tools\installs.json: the large installs a sandbox keeps (engines, editors, SDKs), each with its size and last use.
+// The sandbox writes it (guest/toolchains/persisted.ts); this PC reads it zod-checked, so `sandbox data` can show 60 GB
+// of engines without walking them, and prints what it says through safeText.
+import { z } from 'zod';
+export const INSTALL_RECORDS_FILE = 'installs.json';
+export const InstallRecordSchema = z.object({
+    name: z.string().max(100),
+    version: z.string().max(100),
+    sizeBytes: z.number().nonnegative().nullable(),
+    installedAt: z.string().max(64),
+    usedAt: z.string().max(64),
+});
+export const InstallRecordsSchema = z.object({ installs: z.array(InstallRecordSchema).max(1000) });

package/dist/shared/io/bounded.d.ts

@@ -0,0 +1,6 @@
+/** Test seam: runs between the size check and the read (a file that grows there must still be refused). */
+export interface BoundedReadHooks {
+    readonly afterStat?: () => void;
+}
+/** The file's bytes, or null: missing, a link, not a plain file, or bigger than `max` bytes. */
+export declare function readBoundedFile(file: string, max: number, hooks?: BoundedReadHooks): Buffer | null;

package/dist/shared/io/bounded.js

@@ -0,0 +1,38 @@
+// Reading a file another party may still be writing (the sandbox, through the data folder) with a hard size bound: no
+// link is followed, and the bound holds even when the file grows between the size check and the read (at most max + 1
+// bytes are ever read from the open descriptor).
+import fs from 'node:fs';
+/** The file's bytes, or null: missing, a link, not a plain file, or bigger than `max` bytes. */
+export function readBoundedFile(file, max, hooks = {}) {
+    try {
+        if (!fs.lstatSync(file).isFile())
+            return null;
+    }
+    catch {
+        return null;
+    }
+    let fd = null;
+    try {
+        fd = fs.openSync(file, 'r');
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > max)
+            return null;
+        hooks.afterStat?.();
+        const buffer = Buffer.alloc(max + 1);
+        let total = 0;
+        while (total < buffer.length) {
+            const read = fs.readSync(fd, buffer, total, buffer.length - total, total);
+            if (read === 0)
+                break;
+            total += read;
+        }
+        return total > max ? null : buffer.subarray(0, total);
+    }
+    catch {
+        return null;
+    }
+    finally {
+        if (fd !== null)
+            fs.closeSync(fd);
+    }
+}

package/dist/shared/io/index.d.ts

@@ -3,3 +3,5 @@ export * from './json-file.js';
 export * from './safe-remove.js';
 export * from './robocopy-result.js';
 export * from './copy-tree.js';
+export * from './bounded.js';
+export * from './text.js';

package/dist/shared/io/index.js

@@ -3,3 +3,5 @@ export * from './json-file.js';
 export * from './safe-remove.js';
 export * from './robocopy-result.js';
 export * from './copy-tree.js';
+export * from './bounded.js';
+export * from './text.js';

package/dist/shared/io/text.d.ts

@@ -0,0 +1,9 @@
+export type TextEncoding = 'utf8' | 'utf8bom' | 'utf16le';
+export interface DecodedText {
+    readonly text: string;
+    readonly encoding: TextEncoding;
+}
+/** The text of a file's bytes: UTF-16LE with its mark, UTF-8 with or without one (the mark is not part of the text). */
+export declare function decodeText(bytes: Buffer): DecodedText;
+/** The bytes of a text in an encoding (with its mark for UTF-16LE and UTF-8 with a mark). */
+export declare function encodeText(text: string, encoding: TextEncoding): Buffer;