windows-development-sandbox 1.18.3 → 1.20.0

package/dist/host/sandbox/index.js

@@ -1,4 +1,5 @@
 export * from './platform.js';
+export * from './cleanup.js';
 export * from './probe.js';
 export * from './tasklist.js';
 export * from './host-claude.js';

package/dist/host/sandbox/platform.js

@@ -89,7 +89,7 @@ export async function confirmSandboxStarted(wsbPath, waitMs = START_WAIT_MS) {
         if (Date.now() >= deadline)
             fail('Windows Sandbox did not start within ' + Math.round(waitMs / 1000) + ' seconds.', 'Open ' +
                 wsbPath +
-                ' yourself to see the message Windows gives, or run sandbox doctor to check the Windows Sandbox feature.');
+                ' yourself to see the message Windows gives, or run sandbox doctor to check the Windows Sandbox feature. If Windows says the sandbox was signed out, a sandbox that died left its programs behind: run sandbox cleanup.');
         await sleep(1000);
     }
 }

package/dist/host/vpn/index.d.ts

@@ -1,4 +1,5 @@
-export { VpnLogin, loginProblem, type LoginState, type VpnCredentials } from './login.js';
+export { VpnLogin, loginProblem, loginWarning, type LoginState, type VpnCredentials } from './login.js';
 export { fetchBounded, findCountry, nordProfile, recommendedServer, type Fetcher, type NordServer } from './nordvpn.js';
 export { prepareVpn, vpnNotes, wireguardFileProblem, type PrepareOptions } from './prepare.js';
 export { hostPublicIp, readVpnLine, vpnLine, type VpnLine } from './status.js';
+export { readLastFailure, recordLastVpn, type LastVpn, type VpnFailureInfo } from './last.js';

package/dist/host/vpn/index.js

@@ -1,4 +1,5 @@
-export { VpnLogin, loginProblem } from './login.js';
+export { VpnLogin, loginProblem, loginWarning } from './login.js';
 export { fetchBounded, findCountry, nordProfile, recommendedServer } from './nordvpn.js';
 export { prepareVpn, vpnNotes, wireguardFileProblem } from './prepare.js';
 export { hostPublicIp, readVpnLine, vpnLine } from './status.js';
+export { readLastFailure, recordLastVpn } from './last.js';

package/dist/host/vpn/last.d.ts

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+declare const LastSchema: z.ZodObject<{
+    state: z.ZodEnum<{
+        failed: "failed";
+        up: "up";
+    }>;
+    code: z.ZodOptional<z.ZodEnum<{
+        auth: "auth";
+        unreachable: "unreachable";
+        driver: "driver";
+        timeout: "timeout";
+        other: "other";
+    }>>;
+    message: z.ZodString;
+    at: z.ZodString;
+}, z.core.$strip>;
+export type LastVpn = z.output<typeof LastSchema>;
+/** What the page shows for a failure: the plain sentence, never the raw log. */
+export interface VpnFailureInfo {
+    readonly code: NonNullable<LastVpn['code']>;
+    readonly text: string;
+    readonly at: string;
+}
+/** Copies the sandbox's final VPN state to host storage (nothing when the VPN was off). Never throws. */
+export declare function recordLastVpn(storageRoot: string, dataPath: string): void;
+/** The last attempt, when it failed (null when it worked or none is known). */
+export declare function readLastFailure(storageRoot: string): VpnFailureInfo | null;
+export {};

package/dist/host/vpn/last.js

@@ -0,0 +1,43 @@
+// The last VPN result of a sandbox, kept in host storage (<storage>\vpn\last.json) when the sandbox closes, so "the
+// login was refused" can still be shown after the sandbox is gone. Read from the sandbox's run\vpn.json (validated),
+// never from anything else the guest wrote; the text is made safe before it is kept.
+import path from 'node:path';
+import { z } from 'zod';
+import { RunDir } from '../../shared/channel/index.js';
+import { JsonFile } from '../../shared/io/index.js';
+import { FAILURE_TEXT } from '../../shared/vpn/failure.js';
+import { safeText } from '../../core/util/index.js';
+const LastSchema = z.object({
+    state: z.enum(['up', 'failed']),
+    code: z.enum(['auth', 'unreachable', 'driver', 'timeout', 'other']).optional(),
+    message: z.string().max(400),
+    at: z.string().max(64),
+});
+function lastFile(storageRoot) {
+    return new JsonFile(LastSchema, path.join(storageRoot, 'vpn', 'last.json'));
+}
+/** Copies the sandbox's final VPN state to host storage (nothing when the VPN was off). Never throws. */
+export function recordLastVpn(storageRoot, dataPath) {
+    try {
+        const status = new RunDir(dataPath).readVpnStatus();
+        if (!status || (status.state !== 'up' && status.state !== 'failed'))
+            return;
+        lastFile(storageRoot).write({
+            state: status.state,
+            ...(status.code ? { code: status.code } : {}),
+            message: safeText(status.message).slice(0, 400),
+            at: status.updatedAt,
+        });
+    }
+    catch {
+        // Only a convenience for the page: a failure here must not hold the final sync up.
+    }
+}
+/** The last attempt, when it failed (null when it worked or none is known). */
+export function readLastFailure(storageRoot) {
+    const last = lastFile(storageRoot).read();
+    if (!last || last.state !== 'failed')
+        return null;
+    const code = last.code ?? 'other';
+    return { code, text: FAILURE_TEXT[code], at: last.at };
+}

package/dist/host/vpn/login.d.ts

@@ -7,7 +7,9 @@ export interface VpnCredentials {
 /** What `sandbox vpn status` may say about the login: never the values. */
 export type LoginState = 'none' | 'saved' | 'unreadable';
 /** The login must go on two lines of a file for OpenVPN, so no line breaks or other control characters. */
-export declare function loginProblem(c: VpnCredentials): string | null;
+export declare function loginProblem(c: VpnCredentials, provider?: VpnProvider): string | null;
+/** A hint (not a refusal) when a NordVPN login does not look like service credentials (letters and digits, ~24). */
+export declare function loginWarning(c: VpnCredentials, provider: VpnProvider): string | null;
 export declare class VpnLogin {
     private readonly storageRoot;
     private readonly secrets;

package/dist/host/vpn/login.js

@@ -14,16 +14,30 @@ const SavedSchema = z.object({
     sealed: z.string().max(10000),
 });
 /** The login must go on two lines of a file for OpenVPN, so no line breaks or other control characters. */
-export function loginProblem(c) {
+export function loginProblem(c, provider) {
     const clean = (v) => !/[\u0000-\u001f\u007f]/.test(v);
     if (!c.username.trim() || !c.password)
         return 'Both the user name and the password are needed.';
     if (!clean(c.username) || !clean(c.password))
         return 'The login may not contain line breaks or control characters.';
+    // The markers a terminal puts around pasted text ([200~ ... [201~) are not part of any login.
+    if (/\[20[01]~/.test(c.username + c.password))
+        return 'The login has hidden paste characters in it (the terminal added them when you pasted).';
     if (c.username.length > 256 || c.password.length > 1024)
         return 'The user name or password is too long.';
+    if (provider === 'nordvpn' && /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(c.username.trim()))
+        return 'That looks like your NordVPN account e-mail. Use the service credentials: Nord Account > NordVPN > Manual setup.';
     return null;
 }
+/** A hint (not a refusal) when a NordVPN login does not look like service credentials (letters and digits, ~24). */
+export function loginWarning(c, provider) {
+    if (provider !== 'nordvpn')
+        return null;
+    const ok = (v) => /^[A-Za-z0-9]{16,64}$/.test(v.trim());
+    return ok(c.username) && ok(c.password)
+        ? null
+        : 'NordVPN service credentials are letters and digits only (about 24 each). If the VPN says the login was refused, copy them again from Nord Account > NordVPN > Manual setup.';
+}
 export class VpnLogin {
     storageRoot;
     secrets;
@@ -36,13 +50,13 @@ export class VpnLogin {
     }
     /** Encrypts and saves the login (replacing an earlier one). */
     save(provider, login) {
-        const problem = loginProblem(login);
+        const problem = loginProblem({ username: login.username.trim(), password: login.password.trim() }, provider);
         if (problem)
             fail(problem, 'Type the service credentials again.');
         this.file(provider).write({
             provider,
             savedAt: new Date().toISOString(),
-            sealed: this.secrets.sealJson({ username: login.username.trim(), password: login.password }),
+            sealed: this.secrets.sealJson({ username: login.username.trim(), password: login.password.trim() }),
         });
     }
     /** The login, decrypted. Only the launch calls this. */

package/dist/runtime/agent.js

@@ -5541,6 +5541,7 @@ var SYSTEM = {
   cmd: () => system32("cmd.exe"),
   powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
   tasklist: () => system32("tasklist.exe"),
+  taskkill: () => system32("taskkill.exe"),
   whoami: () => system32("whoami.exe"),
   icacls: () => system32("icacls.exe"),
   tar: () => system32("tar.exe"),
@@ -25350,6 +25351,22 @@ var DatabasesSchema = external_exports.strictObject({
   })
 });
 
+// src/core/schema/codex.ts
+var CodexSchema = external_exports.strictObject({
+  sandboxMode: external_exports.enum(["danger-full-access", "workspace-write", "read-only"]).describe(
+    "Codex's own sandbox. Inside Windows Sandbox Codex's own sandbox only slows it down (it re-grants file permissions over your profile at every boot), so the default is danger-full-access: Windows Sandbox is the sandbox."
+  ),
+  approvalPolicy: external_exports.enum(["never", "on-request", "on-failure", "untrusted"]).describe('When Codex asks before it runs a command. "never" with danger-full-access starts it with no questions.'),
+  model: external_exports.string().max(100).regex(/^[A-Za-z0-9._:/-]*$/, "letters, digits and . _ : / - only").describe("The model Codex uses. Empty = Codex's own default."),
+  reasoningEffort: external_exports.enum(["default", "minimal", "low", "medium", "high", "xhigh"]).describe(`How hard Codex thinks. "default" = Codex's own default.`),
+  windowsSandbox: external_exports.enum(["off", "unelevated", "elevated"]).describe(
+    `Codex's Windows sandbox mode in its config.toml. "off" removes the setting so Codex does not set up its sandbox users and firewall rules at every boot.`
+  ),
+  mcpLoginsInFile: external_exports.boolean().describe(
+    `Keep the sign-ins of Codex's MCP servers in a file in the saved Codex folder (mcp_oauth_credentials_store = "file"), so they survive between sandboxes. A value you set in config.toml is kept.`
+  )
+});
+
 // src/core/schema/harness.ts
 var SubfolderSchema = external_exports.string().regex(/^(?!.*(^|[\\/])\.\.([\\/]|$))[A-Za-z0-9._ -]+([\\/][A-Za-z0-9._ -]+)*$/, "a plain relative folder");
 var HarnessHomeSchema = external_exports.strictObject({
@@ -25662,6 +25679,9 @@ var ToolchainsSchema = external_exports.strictObject({
     keepInstallFiles: external_exports.boolean().describe(
       "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
     ),
+    visualStudio: external_exports.enum(["full", "autosdk"]).describe(
+      `"full": install Visual Studio Community (the engine finds it through the Setup API; ~10 GB, redone every boot). "autosdk" (experimental): skip Visual Studio and build an Unreal AutoSDK tree from the portable MSVC in tools\\unreal\\autosdk (kept between sandboxes); UnrealBuildTool finds MSVC through AutoSDK, but the editor's Visual Studio integration is not available. Needs toolchains.msvc (turned on for you).`
+    ),
     persistEngines: external_exports.boolean().describe(
       "Engines the Epic Games Launcher installs go to tools\\unreal\\engines (kept between sandboxes, 40-60 GB each) and are registered with the launcher again every boot. Off: they go on the sandbox disk and are lost when it closes. Engines installed on this PC can be mapped instead (pcInstalls.unrealEngines)."
     ),
@@ -27118,6 +27138,7 @@ var ConfigSchema = external_exports.strictObject({
   apps: AppsSchema,
   claudeProfile: ClaudeProfileSchema,
   harnesses: external_exports.record(NameSchema, HarnessSchema).describe("Agents that can run in the sandbox."),
+  codex: CodexSchema,
   hooks: external_exports.strictObject({ failFast: external_exports.boolean().describe("Stop when a hook script fails.") }),
   projects: ProjectsSchema.describe(
     "Several projects in one sandbox: folders of projects mapped at every start, and adding folders while it runs."
@@ -27319,7 +27340,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
-  phase: external_exports.enum(["ready", "working"])
+  /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
+  phase: external_exports.enum(["ready", "working", "ending"])
 });
 var GuestResponseSchema = external_exports.object({
   id: IdSchema,
@@ -27360,6 +27382,8 @@ var ProjectStatusSchema = external_exports.object({
 var VpnStatusSchema = external_exports.object({
   state: external_exports.enum(["off", "starting", "up", "failed"]),
   message: Text(2e3),
+  /** Why it failed, when it did: `auth` (login refused), `unreachable`, `driver`, `timeout` or `other`. */
+  code: external_exports.enum(["auth", "unreachable", "driver", "timeout", "other"]).optional(),
   killSwitch: external_exports.boolean(),
   /** A direct connection was tried after the kill switch was applied: false = it still got out. */
   killSwitchHeld: external_exports.boolean().optional(),
@@ -28054,6 +28078,12 @@ function agentPaths(toolsDir2, name, harness) {
 function agentCommand(name, harness) {
   return harness.npmBin ?? harness.uvBin ?? (harness.hostExecutable ?? name).replace(/\.exe$/i, "");
 }
+var CODEX_MARKER = "# Set by the sandbox";
+var MAX_CODEX_CONFIG_BYTES = 1024 * 1024;
+var MARKED_LINES = new RegExp(
+  "^" + CODEX_MARKER + "[^\r\n]*\r?\n(?:(?:sandbox_mode|approval_policy)[ 	]*=[^\r\n]*\r?\n)*(?:[ 	]*\r?\n)?",
+  "m"
+);
 
 // src/guest/setup/path-plan.ts
 import path16 from "node:path";