windows-development-sandbox 1.18.4 → 1.20.0

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.4.0")]
-[assembly: AssemblyFileVersion("1.18.4.0")]
-[assembly: AssemblyInformationalVersion("1.18.4")]
+[assembly: AssemblyVersion("1.20.0.0")]
+[assembly: AssemblyFileVersion("1.20.0.0")]
+[assembly: AssemblyInformationalVersion("1.20.0")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.4.0")]
-[assembly: AssemblyFileVersion("1.18.4.0")]
-[assembly: AssemblyInformationalVersion("1.18.4")]
+[assembly: AssemblyVersion("1.20.0.0")]
+[assembly: AssemblyFileVersion("1.20.0.0")]
+[assembly: AssemblyInformationalVersion("1.20.0")]
 [assembly: ComVisible(false)]

package/native/csharp/HostTools/Program.cs

@@ -6,6 +6,7 @@
 //   hide-window --wait S        hides the sandbox window once it appears; prints the hidden handles as JSON
 //   show-window --handles a,b   shows those windows (else any sandbox window); prints how many
 //   user-path --add|--remove D  D first on, or off, your PATH; exit 3 when PATH would be too long
+//   user-path --has D  exit 0 when D is on your stored PATH, 1 when not
 //   web-helper --pipe P --server-pid N   Windows sign-in for the web UI (WebHelper.cs), until stdin closes
 //   door-client --owner USER   another user's side of that sign-in: prints the answer
 //   protect | unprotect        DPAPI for the current user (Protect.cs): base64 on stdin, base64 on stdout
@@ -85,6 +86,18 @@ static class Program
                 Console.Out.Write(AgentSandbox.Win.Show(handles).ToString(CultureInfo.InvariantCulture));
                 return 0;
             case "user-path":
+                if (options.TryGetValue("has", out value))
+                {
+                    try
+                    {
+                        return AgentSandbox.UserPath.Has(value);
+                    }
+                    catch (Exception e)
+                    {
+                        Console.Error.WriteLine(e.Message);
+                        return 2;
+                    }
+                }
                 bool add = options.TryGetValue("add", out value);
                 if (!add && !options.TryGetValue("remove", out value))
                 {
@@ -124,7 +137,7 @@ static class Program
 
     static int Usage()
     {
-        Console.Error.WriteLine("Usage: HostTools keep-awake --owner-pid N | stop-events --since <ISO time> | memory-status | hide-window --wait S | show-window [--handles a,b] | user-path --add|--remove <folder> | web-helper --pipe P --server-pid N | door-client --owner USER | protect | unprotect");
+        Console.Error.WriteLine("Usage: HostTools keep-awake --owner-pid N | stop-events --since <ISO time> | memory-status | hide-window --wait S | show-window [--handles a,b] | user-path --add|--remove|--has <folder> | web-helper --pipe P --server-pid N | door-client --owner USER | protect | unprotect");
         return 2;
     }
 

package/native/csharp/HostTools/UserPath.cs

@@ -59,6 +59,23 @@ namespace AgentSandbox
             return Done;
         }
 
+        /// <summary>Whether dir is on your stored PATH (the registry, not this process's copy): 0 = yes, 1 = no.</summary>
+        public static int Has(string dir)
+        {
+            using (RegistryKey key = Registry.CurrentUser.CreateSubKey("Environment"))
+            {
+                string raw = Convert.ToString(key.GetValue("Path", "", RegistryValueOptions.DoNotExpandEnvironmentNames));
+                foreach (string part in raw.Split(';'))
+                {
+                    if (part.Length > 0 && string.Equals(part.TrimEnd('\\'), dir.TrimEnd('\\'),StringComparison.OrdinalIgnoreCase))
+                    {
+                        return 0;
+                    }
+                }
+            }
+            return 1;
+        }
+
         private static bool HasValue(RegistryKey key, string name)
         {
             foreach (string existing in key.GetValueNames())

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.18.4.0")]
-[assembly: AssemblyFileVersion("1.18.4.0")]
-[assembly: AssemblyInformationalVersion("1.18.4")]
+[assembly: AssemblyVersion("1.20.0.0")]
+[assembly: AssemblyFileVersion("1.20.0.0")]
+[assembly: AssemblyInformationalVersion("1.20.0")]
 [assembly: ComVisible(false)]

package/native/scripts/edit-user-path.ps1

@@ -1,11 +1,15 @@
 #Requires -Version 5.1
-# Puts -Dir first on your PATH (-Add) or takes it off, then tells Windows it changed. Exit 3: PATH would be too long.
+# Puts -Dir first on your PATH (-Add) or takes it off, then tells Windows it changed. -Query only asks: exit 0 when it is on
+# your stored PATH, 1 when not. Exit 3: PATH would be too long.
 # The fallback for HostTools.exe user-path (host/agent-commands/user-path.ts).
 param(
     [Parameter(Mandatory = $true)][string]$Dir,
-    [switch]$Add
+    [switch]$Add,
+
+    [switch]$Query
 )
 $ErrorActionPreference = 'Stop'
 
 Add-Type -Path (Join-Path $PSScriptRoot '..\csharp\HostTools\UserPath.cs')
+if ($Query) { exit [AgentSandbox.UserPath]::Has($Dir) }
 exit [AgentSandbox.UserPath]::Edit($Dir, [bool]$Add)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.18.4",
+  "version": "1.20.0",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",

package/sandbox/scripts/get-signature.ps1

@@ -0,0 +1,13 @@
+#Requires -Version 5.1
+# Prints the certificate names of a file's Authenticode signature as JSON ({"subject": ..., "issuer": ...}) when the
+# signature is valid; prints nothing when the file is unsigned or was tampered with. guest/apps/signature.ts checks
+# them against an app's expected signer (AppEntry.signer) before the download is kept or an installer is run.
+param([Parameter(Mandatory = $true)][string]$Path)
+$ErrorActionPreference = 'Stop'
+
+$signature = Get-AuthenticodeSignature -LiteralPath $Path
+if ($signature.Status -eq 'Valid' -and $signature.SignerCertificate) {
+    $certificate = $signature.SignerCertificate
+    [pscustomobject]@{ subject = [string]$certificate.Subject; issuer = [string]$certificate.Issuer } |
+        ConvertTo-Json -Compress
+}

package/schemas/config.schema.json

@@ -861,6 +861,14 @@
               "type": "boolean",
               "description": "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
             },
+            "visualStudio": {
+              "type": "string",
+              "enum": [
+                "full",
+                "autosdk"
+              ],
+              "description": "\"full\": install Visual Studio Community (the engine finds it through the Setup API; ~10 GB, redone every boot). \"autosdk\" (experimental): skip Visual Studio and build an Unreal AutoSDK tree from the portable MSVC in tools\\unreal\\autosdk (kept between sandboxes); UnrealBuildTool finds MSVC through AutoSDK, but the editor's Visual Studio integration is not available. Needs toolchains.msvc (turned on for you)."
+            },
             "persistEngines": {
               "type": "boolean",
               "description": "Engines the Epic Games Launcher installs go to tools\\unreal\\engines (kept between sandboxes, 40-60 GB each) and are registered with the launcher again every boot. Off: they go on the sandbox disk and are lost when it closes. Engines installed on this PC can be mapped instead (pcInstalls.unrealEngines)."
@@ -2259,6 +2267,62 @@
       },
       "description": "Agents that can run in the sandbox."
     },
+    "codex": {
+      "type": "object",
+      "properties": {
+        "sandboxMode": {
+          "type": "string",
+          "enum": [
+            "danger-full-access",
+            "workspace-write",
+            "read-only"
+          ],
+          "description": "Codex's own sandbox. Inside Windows Sandbox Codex's own sandbox only slows it down (it re-grants file permissions over your profile at every boot), so the default is danger-full-access: Windows Sandbox is the sandbox."
+        },
+        "approvalPolicy": {
+          "type": "string",
+          "enum": [
+            "never",
+            "on-request",
+            "on-failure",
+            "untrusted"
+          ],
+          "description": "When Codex asks before it runs a command. \"never\" with danger-full-access starts it with no questions."
+        },
+        "model": {
+          "type": "string",
+          "maxLength": 100,
+          "pattern": "^[A-Za-z0-9._:/-]*$",
+          "description": "The model Codex uses. Empty = Codex's own default."
+        },
+        "reasoningEffort": {
+          "type": "string",
+          "enum": [
+            "default",
+            "minimal",
+            "low",
+            "medium",
+            "high",
+            "xhigh"
+          ],
+          "description": "How hard Codex thinks. \"default\" = Codex's own default."
+        },
+        "windowsSandbox": {
+          "type": "string",
+          "enum": [
+            "off",
+            "unelevated",
+            "elevated"
+          ],
+          "description": "Codex's Windows sandbox mode in its config.toml. \"off\" removes the setting so Codex does not set up its sandbox users and firewall rules at every boot."
+        },
+        "mcpLoginsInFile": {
+          "type": "boolean",
+          "description": "Keep the sign-ins of Codex's MCP servers in a file in the saved Codex folder (mcp_oauth_credentials_store = \"file\"), so they survive between sandboxes. A value you set in config.toml is kept."
+        }
+      },
+      "additionalProperties": false
+    },
     "hooks": {
       "type": "object",
       "properties": {

package/schemas/sandbox-config.schema.json

@@ -546,6 +546,14 @@
               "type": "boolean",
               "description": "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
             },
+            "visualStudio": {
+              "type": "string",
+              "enum": [
+                "full",
+                "autosdk"
+              ],
+              "description": "\"full\": install Visual Studio Community (the engine finds it through the Setup API; ~10 GB, redone every boot). \"autosdk\" (experimental): skip Visual Studio and build an Unreal AutoSDK tree from the portable MSVC in tools\\unreal\\autosdk (kept between sandboxes); UnrealBuildTool finds MSVC through AutoSDK, but the editor's Visual Studio integration is not available. Needs toolchains.msvc (turned on for you)."
+            },
             "persistEngines": {
               "type": "boolean",
               "description": "Engines the Epic Games Launcher installs go to tools\\unreal\\engines (kept between sandboxes, 40-60 GB each) and are registered with the launcher again every boot. Off: they go on the sandbox disk and are lost when it closes. Engines installed on this PC can be mapped instead (pcInstalls.unrealEngines)."

package/sandbox/scripts/get-signer.ps1

@@ -1,8 +0,0 @@
-#Requires -Version 5.1
-# Prints the subject of a file's Authenticode signature when it is valid; prints nothing when the file is unsigned or
-# was tampered with (guest/toolchains/native/vcruntime.ts checks Microsoft's signature before running an installer).
-param([Parameter(Mandatory = $true)][string]$Path)
-$ErrorActionPreference = 'Stop'
-
-$signature = Get-AuthenticodeSignature -LiteralPath $Path
-if ($signature.Status -eq 'Valid') { $signature.SignerCertificate.Subject }