windows-development-sandbox 1.17.0 → 1.18.0

package/dist/app/features/accounts/services.run.d.ts

@@ -0,0 +1,65 @@
+import type { Config } from '../../../core/types.js';
+import { AccountLeases, ServiceAccountStore, type PcEnv } from '../../../host/accounts/index.js';
+import { type ServiceKind } from '../../../shared/accounts/index.js';
+import { type OperationIO } from '../../kernel/index.js';
+import { type ServiceRow } from './services.def.js';
+/** One service's row: never the sign-in, and the store's summary through safeText. */
+export declare function serviceRow(kind: ServiceKind, config: Config, store: ServiceAccountStore, leases: AccountLeases): ServiceRow;
+export interface ImportDeps {
+    readonly store: ServiceAccountStore;
+    readonly pc: PcEnv;
+    readonly share: boolean;
+}
+/** Saves a kind's sign-in from this PC's program or from a file, after a confirmation (--yes answers it). */
+export declare function importServiceFlow(io: OperationIO, kind: ServiceKind, from: string | undefined, deps: ImportDeps): Promise<{
+    message: string;
+}>;
+/** Saves what you type for a kind (a key, a token). */
+export declare function loginServiceFlow(io: OperationIO, kind: ServiceKind, deps: Omit<ImportDeps, 'pc'>): Promise<{
+    message: string;
+}>;
+/** Forgets a kind's sign-in everywhere after asking (--yes answers it). */
+export declare function logoutServiceFlow(io: OperationIO, kind: ServiceKind, storageRoot: string, store: ServiceAccountStore, leases: AccountLeases): Promise<{
+    deleted: boolean;
+    message: string;
+}>;
+export declare const listServicesRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").QueryDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    services: import("zod").ZodArray<import("zod").ZodObject<{
+        kind: import("zod").ZodString;
+        label: import("zod").ZodString;
+        share: import("zod").ZodBoolean;
+        state: import("zod").ZodEnum<{
+            none: "none";
+            saved: "saved";
+            unreadable: "unreadable";
+        }>;
+        source: import("zod").ZodNullable<import("zod").ZodString>;
+        savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+        summary: import("zod").ZodNullable<import("zod").ZodString>;
+        heldBy: import("zod").ZodNullable<import("zod").ZodString>;
+        usedBy: import("zod").ZodArray<import("zod").ZodString>;
+        warnings: import("zod").ZodArray<import("zod").ZodString>;
+        canImport: import("zod").ZodBoolean;
+        canLogin: import("zod").ZodBoolean;
+        needsFile: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "accounts.services">, import("../../../cli/commands/context.js").Context>;
+export declare const serviceImportRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+    from: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "accounts.service.import">, import("../../../cli/commands/context.js").Context>;
+export declare const serviceLoginRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "accounts.service.login">, import("../../../cli/commands/context.js").Context>;
+export declare const serviceLogoutRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    deleted: import("zod").ZodBoolean;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "accounts.service.logout">, import("../../../cli/commands/context.js").Context>;

package/dist/app/features/accounts/services.run.js

@@ -0,0 +1,212 @@
+// The service sign-ins' work: their status, taking one from this PC or a file, typing one, and forgetting one
+// everywhere. Talks only through io; the sign-in itself is never an output, a log line or part of a question. The
+// flows take the store, the leases and this PC's folders, so the self-test runs them with its own.
+import fs from 'node:fs';
+import path from 'node:path';
+import { requireOnPc } from '../../../cli/commands/context.js';
+import { fail, safeText } from '../../../core/util/index.js';
+import { AccountLeases, forgetEverywhere, HOST_SOURCES, pcEnv, ServiceAccountStore, } from '../../../host/accounts/index.js';
+import { isServiceKind, SERVICE_KINDS, SERVICE_SPECS, } from '../../../shared/accounts/index.js';
+import { readBoundedFile } from '../../../shared/io/index.js';
+import { implement } from '../../context.js';
+import { cancelled } from '../../kernel/index.js';
+import { listServices, serviceImport, serviceLogin, serviceLogout } from './services.def.js';
+/** One service's row: never the sign-in, and the store's summary through safeText. */
+export function serviceRow(kind, config, store, leases) {
+    const spec = SERVICE_SPECS[kind];
+    const source = HOST_SOURCES[kind];
+    const state = store.state(kind);
+    const info = state === 'none' ? null : store.info(kind);
+    const holder = spec.singleHolder ? leases.holder(kind) : null;
+    return {
+        kind,
+        label: spec.label,
+        share: config.accounts[kind].share,
+        state,
+        source: info?.source ?? null,
+        savedAt: info?.savedAt ?? null,
+        summary: info?.summary ? safeText(info.summary) : null,
+        heldBy: holder ? safeText(holder.dataSet) : null,
+        usedBy: [...spec.usedBy],
+        warnings: [...spec.warnings],
+        canImport: Boolean(source.fromPc || source.fromFile),
+        canLogin: Boolean(source.fromAnswers),
+        needsFile: Boolean(source.fromFile && !source.fromPc),
+    };
+}
+/** The kind an operation is about: the name given (checked), else asked. */
+async function kindOf(io, given, verb, offered = () => true) {
+    if (given !== undefined) {
+        const name = given.trim().toLowerCase();
+        if (!isServiceKind(name))
+            fail('There is no service called "' + safeText(given) + '".', 'Use one of: ' + SERVICE_KINDS.join(', '));
+        return name;
+    }
+    const choices = SERVICE_KINDS.filter((k) => offered(SERVICE_SPECS[k])).map((k) => ({
+        value: k,
+        label: SERVICE_SPECS[k].label,
+    }));
+    if (!choices.length)
+        fail('No service can do that.');
+    const picked = await io.choose({ title: 'Which service do you want to ' + verb + '?', choices });
+    if (picked === undefined || !isServiceKind(picked))
+        cancelled();
+    return picked;
+}
+/** Asks for the kind's fields; optional ones may stay empty. */
+async function askFields(io, spec) {
+    const answers = {};
+    for (const field of spec.fields) {
+        const validate = (value) => {
+            const v = value.trim();
+            if (!v)
+                return field.optional ? true : 'This one is needed.';
+            return !field.pattern || field.pattern.test(v) ? true : 'That does not look right for ' + field.label + '.';
+        };
+        const title = field.label + (field.optional ? ' (Enter to skip)' : '') + ':';
+        const answer = field.secret
+            ? await io.secret({ title, validate })
+            : await io.text({ title, validate, allowEmpty: Boolean(field.optional) });
+        if (answer === undefined) {
+            if (field.optional)
+                continue;
+            cancelled();
+        }
+        if (answer.trim())
+            answers[field.name] = answer.trim();
+    }
+    return answers;
+}
+function savedMessage(kind, share) {
+    return ('Saved your ' +
+        SERVICE_SPECS[kind].label +
+        ' sign-in (encrypted for your Windows user).' +
+        (share ? '' : ' Sandboxes get it once you share it: sandbox config set accounts.' + kind + '.share true'));
+}
+/** Saves a kind's sign-in from this PC's program or from a file, after a confirmation (--yes answers it). */
+export async function importServiceFlow(io, kind, from, deps) {
+    const spec = SERVICE_SPECS[kind];
+    const source = HOST_SOURCES[kind];
+    if (!source.fromPc && !source.fromFile)
+        fail(spec.label + ' cannot be imported.', 'Type it instead: sandbox account login ' + kind);
+    let file = from === undefined ? undefined : path.resolve(from);
+    const isFile = (p) => {
+        try {
+            return fs.statSync(p).isFile();
+        }
+        catch {
+            return false;
+        }
+    };
+    const useFile = Boolean(source.fromFile && (file ? isFile(file) : !source.fromPc));
+    if (useFile && !file) {
+        const asked = await io.path({ title: 'The ' + spec.label + ' file:', pathKind: 'file' });
+        if (asked === undefined)
+            cancelled();
+        file = path.resolve(asked);
+    }
+    const yes = await io.confirm({
+        title: useFile
+            ? 'Save the ' + spec.label + ' sign-in from this file for sandboxes?'
+            : "Take this PC's " + spec.label + ' sign-in for sandboxes?',
+        lines: [...spec.warnings],
+        yes: 'Save it',
+        noTerminal: { message: 'Cannot ask here (no terminal).', fix: 'Add --yes to save it without asking.' },
+    });
+    if (!yes)
+        cancelled('Nothing saved.');
+    let payload;
+    let saved;
+    if (useFile) {
+        const bytes = readBoundedFile(file, spec.maxBytes);
+        if (!bytes)
+            fail('Cannot read ' + file + ' (missing, a link, or bigger than ' + spec.maxBytes / 1024 + ' KB).');
+        payload = source.fromFile(bytes, await askFields(io, spec));
+        saved = 'file';
+    }
+    else {
+        payload = source.fromPc(deps.pc, file);
+        saved = 'pc';
+    }
+    if (!payload)
+        return {
+            message: 'No saved ' +
+                spec.label +
+                ' sign-in found on this PC' +
+                (file ? ' in ' + file : '') +
+                (spec.returns ? ' (sign in there first, or sign in once inside a sandbox).' : '.'),
+        };
+    deps.store.save(kind, payload, saved, source.summary(payload));
+    for (const w of spec.warnings)
+        io.log(w, 'warn');
+    return { message: savedMessage(kind, deps.share) };
+}
+/** Saves what you type for a kind (a key, a token). */
+export async function loginServiceFlow(io, kind, deps) {
+    const spec = SERVICE_SPECS[kind];
+    const source = HOST_SOURCES[kind];
+    if (!source.fromAnswers)
+        fail(spec.label + ' has nothing to type.', spec.sources.includes('sandbox')
+            ? 'Sign in once inside a sandbox (it is kept), or: sandbox account import ' + kind
+            : 'Run: sandbox account import ' + kind + ' --from <file>');
+    const payload = source.fromAnswers(await askFields(io, spec));
+    deps.store.save(kind, payload, 'typed', source.summary(payload));
+    for (const w of spec.warnings)
+        io.log(w, 'warn');
+    return { message: savedMessage(kind, deps.share) };
+}
+/** Forgets a kind's sign-in everywhere after asking (--yes answers it). */
+export async function logoutServiceFlow(io, kind, storageRoot, store, leases) {
+    const label = SERVICE_SPECS[kind].label;
+    const yes = await io.confirm({
+        title: 'Forget the saved ' + label + ' sign-in?',
+        lines: ['The next sandboxes start signed out; a copy a sandbox left behind is deleted too.'],
+        yes: 'Forget',
+        danger: true,
+        noTerminal: { message: 'Cannot ask here (no terminal).', fix: 'Add --yes to forget it without asking.' },
+    });
+    if (!yes)
+        cancelled('Nothing changed.');
+    const { removed, pendingDeleted } = forgetEverywhere(kind, storageRoot, store, leases);
+    if (!removed && !pendingDeleted)
+        return { deleted: false, message: 'No ' + label + ' sign-in was saved.' };
+    return {
+        deleted: true,
+        message: 'The saved ' +
+            label +
+            ' sign-in is deleted' +
+            (pendingDeleted ? ' (and ' + pendingDeleted + ' copy a sandbox left)' : '') +
+            '. The next sandboxes start signed out.',
+    };
+}
+export const listServicesRun = implement(listServices, async (ctx, input) => {
+    const store = new ServiceAccountStore(ctx.storageRoot);
+    const leases = new AccountLeases(ctx.storageRoot);
+    const name = input.name?.trim().toLowerCase();
+    if (name !== undefined && name !== '' && !isServiceKind(name))
+        fail('There is no service called "' + safeText(input.name ?? '') + '".', 'Use one of: ' + SERVICE_KINDS.join(', '));
+    const kinds = name ? [name] : [...SERVICE_KINDS];
+    return { services: kinds.map((k) => serviceRow(k, ctx.loaded.config, store, leases)) };
+});
+export const serviceImportRun = implement(serviceImport, async (ctx, input, io) => {
+    requireOnPc('account import');
+    const kind = await kindOf(io, input.name, 'import', (s) => Boolean(HOST_SOURCES[s.kind].fromPc || HOST_SOURCES[s.kind].fromFile));
+    return importServiceFlow(io, kind, input.from, {
+        store: new ServiceAccountStore(ctx.storageRoot),
+        pc: pcEnv(),
+        share: ctx.loaded.config.accounts[kind].share,
+    });
+});
+export const serviceLoginRun = implement(serviceLogin, async (ctx, input, io) => {
+    requireOnPc('account login');
+    const kind = await kindOf(io, input.name, 'sign in to', (s) => Boolean(HOST_SOURCES[s.kind].fromAnswers));
+    return loginServiceFlow(io, kind, {
+        store: new ServiceAccountStore(ctx.storageRoot),
+        share: ctx.loaded.config.accounts[kind].share,
+    });
+});
+export const serviceLogoutRun = implement(serviceLogout, async (ctx, input, io) => {
+    requireOnPc('account logout');
+    const kind = await kindOf(io, input.name, 'forget');
+    return logoutServiceFlow(io, kind, ctx.storageRoot, new ServiceAccountStore(ctx.storageRoot), new AccountLeases(ctx.storageRoot));
+});

package/dist/app/features/defs.d.ts

@@ -11,6 +11,7 @@ export type { SessionRow, SessionsList } from './sessions/sessions.def.js';
 export type { SettingRow, SettingsList } from './settings/settings.def.js';
 export type { VpnStatus } from './vpn/vpn.def.js';
 export type { GithubStatus } from './github/github.def.js';
+export type { ServiceRow, ServicesList } from './accounts/services.def.js';
 export type { AccessStatus } from './access/access.def.js';
 export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     available: import("zod").ZodBoolean;
@@ -99,6 +100,7 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
     agent: import("zod").ZodDefault<import("zod").ZodString>;
     name: import("zod").ZodOptional<import("zod").ZodString>;
     fromHost: import("zod").ZodDefault<import("zod").ZodBoolean>;
+    apiKey: import("zod").ZodDefault<import("zod").ZodBoolean>;
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     name: import("zod").ZodString;
     message: import("zod").ZodString;
@@ -276,6 +278,20 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
     deleted: import("zod").ZodBoolean;
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "github.logout">, OperationDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+    from: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "accounts.service.import">, OperationDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "accounts.service.login">, OperationDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    deleted: import("zod").ZodBoolean;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "accounts.service.logout">, OperationDef<import("zod").ZodObject<{
     role: import("zod").ZodDefault<import("zod").ZodEnum<{
         view: "view";
         control: "control";
@@ -475,8 +491,33 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
             isDefault: import("zod").ZodBoolean;
             isActive: import("zod").ZodBoolean;
             savedAt: import("zod").ZodString;
+            kind: import("zod").ZodOptional<import("zod").ZodEnum<{
+                subscription: "subscription";
+                console: "console";
+                "api-key": "api-key";
+            }>>;
+            keyHint: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>>;
+    services: import("zod").ZodArray<import("zod").ZodObject<{
+        kind: import("zod").ZodString;
+        label: import("zod").ZodString;
+        share: import("zod").ZodBoolean;
+        state: import("zod").ZodEnum<{
+            none: "none";
+            saved: "saved";
+            unreadable: "unreadable";
+        }>;
+        source: import("zod").ZodNullable<import("zod").ZodString>;
+        savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+        summary: import("zod").ZodNullable<import("zod").ZodString>;
+        heldBy: import("zod").ZodNullable<import("zod").ZodString>;
+        usedBy: import("zod").ZodArray<import("zod").ZodString>;
+        warnings: import("zod").ZodArray<import("zod").ZodString>;
+        canImport: import("zod").ZodBoolean;
+        canLogin: import("zod").ZodBoolean;
+        needsFile: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "accounts.list">, QueryDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";
@@ -898,7 +939,29 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         classic: "classic";
     }>>;
     savedAt: import("zod").ZodNullable<import("zod").ZodString>;
-}, import("zod/v4/core").$strip>, "github.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+}, import("zod/v4/core").$strip>, "github.status">, QueryDef<import("zod").ZodObject<{
+    name: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    services: import("zod").ZodArray<import("zod").ZodObject<{
+        kind: import("zod").ZodString;
+        label: import("zod").ZodString;
+        share: import("zod").ZodBoolean;
+        state: import("zod").ZodEnum<{
+            none: "none";
+            saved: "saved";
+            unreadable: "unreadable";
+        }>;
+        source: import("zod").ZodNullable<import("zod").ZodString>;
+        savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+        summary: import("zod").ZodNullable<import("zod").ZodString>;
+        heldBy: import("zod").ZodNullable<import("zod").ZodString>;
+        usedBy: import("zod").ZodArray<import("zod").ZodString>;
+        warnings: import("zod").ZodArray<import("zod").ZodString>;
+        canImport: import("zod").ZodBoolean;
+        canLogin: import("zod").ZodBoolean;
+        needsFile: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "accounts.services">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     lan: import("zod").ZodObject<{
         enabled: import("zod").ZodBoolean;
         running: import("zod").ZodBoolean;
@@ -1104,9 +1167,57 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
                 isDefault: import("zod").ZodBoolean;
                 isActive: import("zod").ZodBoolean;
                 savedAt: import("zod").ZodString;
+                kind: import("zod").ZodOptional<import("zod").ZodEnum<{
+                    subscription: "subscription";
+                    console: "console";
+                    "api-key": "api-key";
+                }>>;
+                keyHint: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
             }, import("zod/v4/core").$strip>>;
         }, import("zod/v4/core").$strip>>;
+        services: import("zod").ZodArray<import("zod").ZodObject<{
+            kind: import("zod").ZodString;
+            label: import("zod").ZodString;
+            share: import("zod").ZodBoolean;
+            state: import("zod").ZodEnum<{
+                none: "none";
+                saved: "saved";
+                unreadable: "unreadable";
+            }>;
+            source: import("zod").ZodNullable<import("zod").ZodString>;
+            savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+            summary: import("zod").ZodNullable<import("zod").ZodString>;
+            heldBy: import("zod").ZodNullable<import("zod").ZodString>;
+            usedBy: import("zod").ZodArray<import("zod").ZodString>;
+            warnings: import("zod").ZodArray<import("zod").ZodString>;
+            canImport: import("zod").ZodBoolean;
+            canLogin: import("zod").ZodBoolean;
+            needsFile: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "accounts.list">;
+    services: QueryDef<import("zod").ZodObject<{
+        name: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        services: import("zod").ZodArray<import("zod").ZodObject<{
+            kind: import("zod").ZodString;
+            label: import("zod").ZodString;
+            share: import("zod").ZodBoolean;
+            state: import("zod").ZodEnum<{
+                none: "none";
+                saved: "saved";
+                unreadable: "unreadable";
+            }>;
+            source: import("zod").ZodNullable<import("zod").ZodString>;
+            savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+            summary: import("zod").ZodNullable<import("zod").ZodString>;
+            heldBy: import("zod").ZodNullable<import("zod").ZodString>;
+            usedBy: import("zod").ZodArray<import("zod").ZodString>;
+            warnings: import("zod").ZodArray<import("zod").ZodString>;
+            canImport: import("zod").ZodBoolean;
+            canLogin: import("zod").ZodBoolean;
+            needsFile: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "accounts.services">;
 }, Record<string, never>, "accounts">, import("../kernel/define.js").ViewDef<{
     apps: QueryDef<import("zod").ZodObject<{
         scope: import("zod").ZodDefault<import("zod").ZodEnum<{

package/dist/app/features/defs.js

@@ -1,5 +1,6 @@
 import { addAgent, agentsView, listAgents, makeDefaultAgent, removeAgent, startAgent } from './agents/agents.def.js';
 import { accountsView, defaultAccount, listAccounts, removeAccount, renameAccount, saveAccount, useAccount, } from './accounts/accounts.def.js';
+import { listServices, serviceImport, serviceLogin, serviceLogout } from './accounts/services.def.js';
 import { appsView, listApps, requestApp, setCustomApps, toggleApp } from './apps/apps.def.js';
 import { browseFolder } from './files/files.def.js';
 import { checkEngine, cleanEngine, engineLeftovers, engineStatus, engineView } from './engine/engine.def.js';
@@ -67,6 +68,9 @@ export const OPERATIONS = [
     vpnLogout,
     githubLogin,
     githubLogout,
+    serviceImport,
+    serviceLogin,
+    serviceLogout,
     allowDevice,
     revokeAccess,
     revokeAllAccess,
@@ -97,6 +101,7 @@ export const QUERIES = [
     webStatus,
     vpnStatus,
     githubStatus,
+    listServices,
     accessStatus,
 ];
 export const VIEWS = [

package/dist/app/features/settings/categories.def.js

@@ -6,8 +6,8 @@ export const CATEGORIES = [
     {
         id: 'general',
         label: 'General',
-        description: 'Which agent starts, where the project appears in the sandbox, extra folders from this PC, and where the sandbox keeps its data.',
-        keys: ['defaultHarness', 'harness', 'guestWorkspace', 'readOnly', 'mappings', 'scripts'],
+        description: 'Which agent starts, where the project appears in the sandbox, extra folders from this PC (and its games, engines and editors, read-only), and where the sandbox keeps its data.',
+        keys: ['defaultHarness', 'harness', 'guestWorkspace', 'readOnly', 'mappings', 'pcInstalls', 'scripts'],
     },
     {
         id: 'machine',
@@ -42,8 +42,8 @@ export const CATEGORIES = [
     {
         id: 'security',
         label: 'Security & privacy',
-        description: 'Git-ignored files kept out, secrets kept out of the sandbox, a GitHub token for sandboxes (with its login set here), download checks, what is kept on this PC, and sharing your sandbox with other Windows users.',
-        keys: ['workspaceFilter', 'audit', 'secrets', 'github', 'downloads', 'storage', 'sharing'],
+        description: 'Git-ignored files kept out, secrets kept out of the sandbox, a GitHub token for sandboxes (with its login set here), which service sign-ins sandboxes get (saved in Accounts), download checks, what is kept on this PC, and sharing your sandbox with other Windows users.',
+        keys: ['workspaceFilter', 'audit', 'secrets', 'github', 'accounts', 'downloads', 'storage', 'sharing'],
     },
     {
         id: 'projects',
@@ -68,6 +68,23 @@ const NAMES = {
     network: 'Network',
     vpn: 'VPN',
     github: 'GitHub',
+    accounts: 'Service sign-ins',
+    pcInstalls: 'Installs on this PC',
+    unreal: 'Unreal Engine',
+    unity: 'Unity',
+    godot: 'Godot',
+    steam: 'Steam (SteamCMD)',
+    fivem: 'FiveM / RedM server',
+    android: 'Android SDK',
+    flutter: 'Flutter',
+    dart: 'Dart',
+    reactNative: 'React Native / Expo',
+    epic: 'Epic Games',
+    cfx: 'Cfx.re',
+    keystore: 'Android upload keystore',
+    play: 'Google Play',
+    expo: 'Expo (EAS)',
+    appstore: 'App Store Connect',
     hooks: 'Hooks',
     personalization: 'Desktop look',
     projects: 'Projects',

package/dist/app/registry.js

@@ -1,7 +1,7 @@
 import { fail } from '../core/util/errors.js';
 import { accessNeeded, allows, invoke, OWNER, refusalText, NO_QUESTIONS, onSurface, } from './kernel/index.js';
 import { addAgentRun, listAgentsRun, makeDefaultAgentRun, removeAgentRun, startAgentRun, } from './features/agents/index.js';
-import { defaultAccountRun, listAccountsRun, removeAccountRun, renameAccountRun, saveAccountRun, useAccountRun, } from './features/accounts/index.js';
+import { defaultAccountRun, listAccountsRun, removeAccountRun, renameAccountRun, saveAccountRun, useAccountRun, listServicesRun, serviceImportRun, serviceLoginRun, serviceLogoutRun, } from './features/accounts/index.js';
 import { listAppsRun, requestAppRun, setCustomAppsRun, toggleAppRun } from './features/apps/index.js';
 import { browseFolderRun } from './features/files/index.js';
 import { cleanDataRun, pruneStorageRun, showDataRun } from './features/data/index.js';
@@ -91,6 +91,10 @@ export const IMPLEMENTATIONS = [
     githubStatusRun,
     githubLoginRun,
     githubLogoutRun,
+    listServicesRun,
+    serviceImportRun,
+    serviceLoginRun,
+    serviceLogoutRun,
     webStatusRun,
     accessStatusRun,
     allowDeviceRun,

package/dist/bin/agent-sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-QLGGAG3D.js";
-import "./chunk-REE3EMHD.js";
+} from "./chunk-BKF43GJ3.js";
+import "./chunk-YD3A67RS.js";
 
 // src/bin/agent-sandbox.ts
 run(process.argv.slice(2));