windows-development-sandbox 1.18.4 → 1.20.0

package/dist/shared/channel/schema.d.ts

@@ -93,6 +93,10 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             acceptLicense: z.ZodBoolean;
             components: z.ZodArray<z.ZodString>;
             keepInstallFiles: z.ZodBoolean;
+            visualStudio: z.ZodEnum<{
+                full: "full";
+                autosdk: "autosdk";
+            }>;
             persistEngines: z.ZodBoolean;
             derivedDataCache: z.ZodEnum<{
                 persisted: "persisted";
@@ -326,6 +330,10 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 acceptLicense: z.ZodBoolean;
                 components: z.ZodArray<z.ZodString>;
                 keepInstallFiles: z.ZodBoolean;
+                visualStudio: z.ZodEnum<{
+                    full: "full";
+                    autosdk: "autosdk";
+                }>;
                 persistEngines: z.ZodBoolean;
                 derivedDataCache: z.ZodEnum<{
                     persisted: "persisted";
@@ -579,6 +587,10 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 acceptLicense: z.ZodBoolean;
                 components: z.ZodArray<z.ZodString>;
                 keepInstallFiles: z.ZodBoolean;
+                visualStudio: z.ZodEnum<{
+                    full: "full";
+                    autosdk: "autosdk";
+                }>;
                 persistEngines: z.ZodBoolean;
                 derivedDataCache: z.ZodEnum<{
                     persisted: "persisted";
@@ -898,6 +910,13 @@ export declare const VpnStatusSchema: z.ZodObject<{
         up: "up";
     }>;
     message: z.ZodString;
+    code: z.ZodOptional<z.ZodEnum<{
+        auth: "auth";
+        unreachable: "unreachable";
+        driver: "driver";
+        timeout: "timeout";
+        other: "other";
+    }>>;
     killSwitch: z.ZodBoolean;
     killSwitchHeld: z.ZodOptional<z.ZodBoolean>;
     server: z.ZodOptional<z.ZodString>;

package/dist/shared/channel/schema.js

@@ -198,6 +198,8 @@ export const ProjectStatusSchema = z.object({
 export const VpnStatusSchema = z.object({
     state: z.enum(['off', 'starting', 'up', 'failed']),
     message: Text(2000),
+    /** Why it failed, when it did: `auth` (login refused), `unreachable`, `driver`, `timeout` or `other`. */
+    code: z.enum(['auth', 'unreachable', 'driver', 'timeout', 'other']).optional(),
     killSwitch: z.boolean(),
     /** A direct connection was tried after the kill switch was applied: false = it still got out. */
     killSwitchHeld: z.boolean().optional(),

package/dist/shared/io/disk.d.ts

@@ -0,0 +1,9 @@
+export type StatFs = (dir: string) => {
+    bavail: number;
+    bsize: number;
+};
+/**
+ * Free bytes for this user on the drive that holds `dir` (which may not exist yet: the nearest existing parent is
+ * asked); null when it cannot be told. `statfs` is injectable for tests.
+ */
+export declare function freeBytesAt(dir: string, statfs?: StatFs): number | null;

package/dist/shared/io/disk.js

@@ -0,0 +1,19 @@
+// Free room on a disk: one implementation for the PC (core/disk.ts) and the guest (toolchains/persisted.ts).
+import fs from 'node:fs';
+import path from 'node:path';
+/**
+ * Free bytes for this user on the drive that holds `dir` (which may not exist yet: the nearest existing parent is
+ * asked); null when it cannot be told. `statfs` is injectable for tests.
+ */
+export function freeBytesAt(dir, statfs = fs.statfsSync) {
+    let at = path.resolve(dir);
+    while (!fs.existsSync(at) && path.dirname(at) !== at)
+        at = path.dirname(at);
+    try {
+        const s = statfs(at);
+        return s.bavail * s.bsize;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/shared/io/index.d.ts

@@ -5,3 +5,4 @@ export * from './robocopy-result.js';
 export * from './copy-tree.js';
 export * from './bounded.js';
 export * from './text.js';
+export * from './disk.js';

package/dist/shared/io/index.js

@@ -5,3 +5,4 @@ export * from './robocopy-result.js';
 export * from './copy-tree.js';
 export * from './bounded.js';
 export * from './text.js';
+export * from './disk.js';

package/dist/shared/readiness.d.ts

@@ -0,0 +1,9 @@
+export declare const NOT_READY: {
+    /** Toolchains whose step is a stub: their settings rows are hidden and "auto" never turns them on. */
+    readonly toolchains: readonly ["unity", "godot", "android", "flutter", "dart", "reactNative", "fivem"];
+    /** Service sign-ins whose host or guest side is a stub: the menu and the web do not list them. */
+    readonly kinds: readonly ["unity", "keystore", "play", "expo", "appstore", "cfx"];
+    readonly unreal: readonly ["engines"];
+};
+export declare const isToolchainReady: (name: string) => boolean;
+export declare const isKindReady: (kind: string) => boolean;

package/dist/shared/readiness.js

@@ -0,0 +1,11 @@
+// What is not written yet, so no menu, web page or "auto" decision offers it. Each package that lands deletes its own
+// entries here (the end of round 2 leaves it empty). Pure.
+export const NOT_READY = {
+    /** Toolchains whose step is a stub: their settings rows are hidden and "auto" never turns them on. */
+    toolchains: ['unity', 'godot', 'android', 'flutter', 'dart', 'reactNative', 'fivem'],
+    /** Service sign-ins whose host or guest side is a stub: the menu and the web do not list them. */
+    kinds: ['unity', 'keystore', 'play', 'expo', 'appstore', 'cfx'],
+    unreal: ['engines'],
+};
+export const isToolchainReady = (name) => !NOT_READY.toolchains.includes(name);
+export const isKindReady = (kind) => !NOT_READY.kinds.includes(kind);

package/dist/shared/signer.d.ts

@@ -0,0 +1,24 @@
+/** Patterns (regex sources, case-insensitive) the signature's subject and issuer must match; every one of them. */
+export interface AppSigner {
+    readonly subject: readonly string[];
+    readonly issuer?: readonly string[];
+}
+/** A valid Authenticode signature's certificate names (an invalid or missing one is reported as null). */
+export interface Signature {
+    readonly subject: string;
+    readonly issuer: string;
+}
+/** Whether a signature is the expected signer's: every subject and issuer pattern matches. */
+export declare function signerMatches(signature: Signature | null, signer: AppSigner): boolean;
+/** Who signs the installers the toolchains run (the patterns the signature's subject must match). */
+export declare const SIGNERS: {
+    readonly microsoft: {
+        readonly subject: readonly ["^CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US$"];
+    };
+    readonly valve: {
+        readonly subject: readonly ["^CN=\"?Valve(,| Corp)"];
+    };
+    readonly unity: {
+        readonly subject: readonly ["^CN=\"?Unity Technologies"];
+    };
+};

package/dist/shared/signer.js

@@ -0,0 +1,15 @@
+// Who must sign an app's download (AppEntry.signer), for vendors that publish no checksum: the Authenticode subject
+// and issuer as patterns, checked against what sandbox\scripts\get-signature.ps1 reports for a valid signature. Pure.
+/** Whether a signature is the expected signer's: every subject and issuer pattern matches. */
+export function signerMatches(signature, signer) {
+    if (!signature || !signature.subject)
+        return false;
+    const all = (text, patterns) => patterns.every((p) => new RegExp(p, 'i').test(text));
+    return all(signature.subject, signer.subject) && all(signature.issuer, signer.issuer ?? []);
+}
+/** Who signs the installers the toolchains run (the patterns the signature's subject must match). */
+export const SIGNERS = {
+    microsoft: { subject: ['^CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US$'] },
+    valve: { subject: ['^CN="?Valve(,| Corp)'] },
+    unity: { subject: ['^CN="?Unity Technologies'] },
+};

package/dist/shared/vpn/failure.d.ts

@@ -0,0 +1,10 @@
+export declare const VPN_FAILURE_CODES: readonly ["auth", "unreachable", "driver", "timeout", "other"];
+export type VpnFailureCode = (typeof VPN_FAILURE_CODES)[number];
+export interface VpnFailure {
+    readonly code: VpnFailureCode;
+    readonly reason: string;
+}
+/** What the log says went wrong, or null when it says nothing (yet). */
+export declare function classifyFailure(text: string): VpnFailure | null;
+/** The plain words for a code, for the page ("login refused by NordVPN"). */
+export declare const FAILURE_TEXT: Readonly<Record<VpnFailureCode, string>>;

package/dist/shared/vpn/failure.js

@@ -0,0 +1,28 @@
+// Why an OpenVPN run failed, from its log: a stable code (what the host acts on) and a plain sentence. Pure.
+export const VPN_FAILURE_CODES = ['auth', 'unreachable', 'driver', 'timeout', 'other'];
+/** What the log says went wrong, or null when it says nothing (yet). */
+export function classifyFailure(text) {
+    if (/AUTH_FAILED/i.test(text))
+        return {
+            code: 'auth',
+            reason: 'the VPN refused the login (for NordVPN use the service credentials, not your account password)',
+        };
+    if (/TLS Error: TLS key negotiation failed|TLS handshake failed/i.test(text))
+        return {
+            code: 'unreachable',
+            reason: 'it could not reach the VPN server (the network blocks it, or the server is down)',
+        };
+    if (/All wintun adapters on this system are in use|Cannot open TUN\/TAP|Could not create Wintun|ovpn-dco.*(error|failed)/i.test(text))
+        return { code: 'driver', reason: 'the network driver for the tunnel could not be used' };
+    if (/Exiting due to fatal error/i.test(text))
+        return { code: 'other', reason: 'OpenVPN stopped with an error' };
+    return null;
+}
+/** The plain words for a code, for the page ("login refused by NordVPN"). */
+export const FAILURE_TEXT = {
+    auth: 'login refused by the VPN',
+    unreachable: 'the VPN server could not be reached',
+    driver: 'the tunnel driver could not be used',
+    timeout: 'the tunnel did not come up in time',
+    other: 'the VPN failed',
+};

package/dist/sync/watcher.js

@@ -14,6 +14,7 @@ import { AuditCollector, AuditLog, readAuditSettings } from '../host/audit/index
 import { readMarkedProjects, saveDataSize, watchAndMark } from '../host/guard/index.js';
 import { sizeWithin } from '../core/disk.js';
 import { autoRestartAllowed, causeSince, readHeartbeat, vanishedCause, appendHostMemory, cpuPercentBetween, KeepAwake, LifeRecord, HostMemoryStream, readHostMemoryAsync, readLoadSettings, REQUEST_SECONDS, WATCHDOG_START, watchdogStep, saveCrashReport, SessionLedger, } from '../host/life/index.js';
+import { recordLastVpn } from '../host/vpn/index.js';
 import { SandboxChannel } from '../host/channel/index.js';
 import { ProjectRegistry } from '../host/projects/registry.js';
 import { ContainedStorage, setNameOf, storageOf } from '../host/storage/index.js';
@@ -276,6 +277,7 @@ export class Watcher {
         catch (e) {
             this.note('repo guard failed: ' + errMsg(e));
         }
+        recordLastVpn(this.storageRoot, this.dataPath);
         try {
             const s = syncBack(this.dataPath, final);
             if (s.history || final)

package/dist/web/index.html

@@ -6,7 +6,7 @@
     <title>Sandbox</title>
     <link rel="icon" href="data:," />
     <link rel="stylesheet" href="/main-XT7T6ODM.css" />
-    <script type="module" src="/main-GVZWWP4I.js"></script>
+    <script type="module" src="/main-OUUQYNK4.js"></script>
   </head>
   <body>
     <div id="root"></div>