windows-development-sandbox 1.18.4 → 1.23.0

package/dist/selftest/menu.test.js

@@ -243,8 +243,8 @@ export const menuSuite = {
             agentList.categories?.map((c) => c.id),
         ], [
             ['repeat', 'agent:codex', 'agent:claude', 'add'],
-            ['start', 'options'],
-        ], 'Agents: Repeat last, the default agent first, the others, then Add an agent; no "On this PC" while it is empty');
+            ['start', 'options', 'host'],
+        ], 'Agents: Repeat last, the default agent first, the others, then Add an agent; "On this PC" always holds the agent commands switch');
         t.check(agentList.items
             .filter((i) => i.category === 'options')
             .map((i) => i.value)
@@ -580,7 +580,9 @@ export const menuSuite = {
             keyFor('x', 'agent:mine') &&
             !keyFor('x', 'agent:codex') &&
             typeof actionList.actions === 'function' &&
-            actionList.actions('start').length === 2 &&
+            actionList.actions('start').length === 3 &&
+            keyFor('e', 'agent:claude') &&
+            !keyFor('e', 'agent:codex') &&
             actionList.actions('options').length === 0, 'Make default shows on any other agent, Remove only on one you added; neither on built-in agents or other rows');
         const agentsFile = ConfigFile.user(t.at('agents-actions', 'config.json'));
         t.write(agentsFile.file, '{\n  // mine\n  "defaultHarness": "claude"\n}\n');

package/dist/selftest/pc-installs.test.js

@@ -11,6 +11,7 @@ import { LocalOverridesSchema } from '../core/schema/index.js';
 import { discoverPcInstalls } from '../host/pc-installs/index.js';
 import { generateSandbox } from '../host/launch/index.js';
 import { isValidGuestPath, PC_INSTALLS_GUEST } from '../shared/paths/index.js';
+import { NOT_READY } from '../shared/readiness.js';
 const PC = { localAppData: '', appData: '', programData: '' };
 export const pcInstallsSuite = {
     name: 'pc-installs',
@@ -70,6 +71,9 @@ export const pcInstallsSuite = {
         t.check(session.pcInstalls?.items.map((i) => i.id).join() === '480,UE_5.4' &&
             !JSON.stringify(session.pcInstalls).includes(game), 'session.json lists them by their place in the sandbox only');
         t.section('detection of the new toolchains');
+        // These toolchains are hidden until written (NOT_READY); their detection rules are tested as if they were ready.
+        const hidden = [...NOT_READY.toolchains];
+        NOT_READY.toolchains.length = 0;
         const tc = structuredClone(DEFAULTS.toolchains);
         const decide = (entries, hints = {}, settingsOf = tc) => decideToolchains(settingsOf, entries, [], hints);
         const godot = decide(['project.godot']);
@@ -92,6 +96,7 @@ export const pcInstallsSuite = {
         t.check(decide(['project.godot'], {}, godotNet).dotnet.on, "Godot's .NET build brings .NET");
         const fivem = decide(['fxmanifest.lua']);
         t.check(!fivem.fivem.on && fivem.fivem.reason.includes('fivem.acceptLicense'), 'the FiveM server is licensed too');
+        NOT_READY.toolchains.push(...hidden);
         t.section('a project never accepts a licence or shares a sign-in');
         t.check(LICENSED_TOOLCHAINS.every((n) => OFF_IS_SAFER.includes('toolchains.' + n + '.acceptLicense')) &&
             OFF_IS_SAFER.includes('accounts.epic.share') &&

package/dist/selftest/persisted-installs.test.js

@@ -6,6 +6,13 @@ import path from 'node:path';
 import { DEFAULTS } from '../core/config/index.js';
 import { assertLocalRoom, ensurePersisted, installRecords, InstallRecordsSchema, LOCAL_RESERVE_BYTES, recordUse, } from '../guest/toolchains/persisted.js';
 import { BUILD_TOOLS_COMPONENTS, UNREAL_COMPONENTS, visualStudioWanted, } from '../guest/toolchains/native/vs-request.js';
+import { autosdkLayout, layoutNextStep, STAGING_RESERVE_BYTES, unrealUsesAutosdk, vsExitText, } from '../guest/toolchains/native/vs-request.js';
+import { freeBytesAt } from '../shared/io/disk.js';
+import { SIGNERS, signerMatches } from '../shared/signer.js';
+import { decideToolchains } from '../core/detect/toolchains.js';
+import { NOT_READY } from '../shared/readiness.js';
+import { ConfigFile } from '../app/features/settings/settings-file.js';
+import { settingsOf } from '../app/features/settings/settings-rows.js';
 import { collectDataEntries } from '../cli/services/data-collect.js';
 const GB = 1024 ** 3;
 export const persistedInstallsSuite = {
@@ -103,5 +110,70 @@ export const persistedInstallsSuite = {
             all.for.join() === 'unreal,flutter,unity' &&
             UNREAL_COMPONENTS.every((c) => all.components.includes(c)) &&
             all.components.includes('Microsoft.VisualStudio.Component.VC.Llvm.Clang'), 'with Unreal: one Community install serves all of them');
+        t.section('Unreal on the portable MSVC (autosdk)');
+        tc.unreal.visualStudio = 'autosdk';
+        const noUnreal = visualStudioWanted(tc);
+        t.check(noUnreal?.product === 'buildtools' && noUnreal.for.join() === 'flutter,unity', 'autosdk: Unreal asks for no Visual Studio (the others still get the Build Tools)');
+        tc.flutter.enabled = false;
+        tc.unity.enabled = false;
+        t.equal(visualStudioWanted(tc), null, 'autosdk alone: no Visual Studio at all');
+        t.check(unrealUsesAutosdk(tc, (s) => s === true) && !unrealUsesAutosdk(DEFAULTS.toolchains), 'autosdk is only when asked');
+        const pairs = autosdkLayout('T:\\msvc', '14.44.35207', '10.0.26100.0', 'T:\\autosdk');
+        t.check(pairs.length === 4 &&
+            pairs[0].to === 'T:\\autosdk\\HostWin64\\Win64\\VS2022\\14.44.35207' &&
+            pairs[0].from === 'T:\\msvc\\VC\\Tools\\MSVC\\14.44.35207' &&
+            pairs[1].from === 'T:\\msvc\\Windows Kits\\10\\Include\\10.0.26100.0' &&
+            pairs[1].to === 'T:\\autosdk\\HostWin64\\Win64\\Windows Kits\\10\\Include\\10.0.26100.0', 'the AutoSDK tree is MSVC under VS2022\\<version> and the SDK under Windows Kits\\10 (copies)');
+        const on = DEFAULTS.toolchains;
+        const auto = {
+            ...structuredClone(on),
+            unreal: { ...on.unreal, visualStudio: 'autosdk', acceptLicense: true },
+        };
+        const decided = decideToolchains(auto, ['Game.uproject'], []);
+        t.check(decided.unreal.on && decided.msvc.on, 'an Unreal project with autosdk turns the portable MSVC on, under its licence');
+        t.section('the Visual Studio layout');
+        t.check(vsExitText(3762504530).includes('crashed') &&
+            vsExitText(-1).includes('exit 4294967295') &&
+            vsExitText(0) === 'installed' &&
+            vsExitText(1602) === 'cancelled' &&
+            vsExitText(8006).includes('running') &&
+            vsExitText(3010).includes('restart') &&
+            vsExitText(5007).includes('refused'), 'installer exit codes are told in words (0xE0434352 is a crash)');
+        const reserve = LOCAL_RESERVE_BYTES;
+        const room = (free) => freeBytesAt(t.dir('layout-room'), () => ({ bavail: free, bsize: 1 })) ?? 0;
+        t.check(layoutNextStep(0, 0, reserve) === 'done' &&
+            layoutNextStep(3762504530, room(40 * GB), reserve) === 'stage' &&
+            layoutNextStep(3762504530, room(20 * GB), reserve) === 'skip' &&
+            layoutNextStep(null, room(40 * GB), reserve) === 'stage', 'a failed layout is built on the sandbox disk only with room for it (12 GB plus the reserve)');
+        t.check(layoutNextStep(null, room(15 * GB), STAGING_RESERVE_BYTES) === 'stage' &&
+            layoutNextStep(null, room(14 * GB), STAGING_RESERVE_BYTES) === 'skip', 'before Visual Studio is installed, 15 GB free on C: is enough to build the install files there');
+        t.equal(freeBytesAt(path.join(t.dir('layout-room'), 'not', 'there'), () => ({ bavail: 3, bsize: 2 })), 6, 'free room of a folder that does not exist asks its parent');
+        t.equal(freeBytesAt(t.dir('layout-room'), () => {
+            throw new Error('no');
+        }), null, 'unknown free room is null');
+        t.section('signers');
+        const ms = { subject: SIGNERS.microsoft.subject, issuer: undefined };
+        const msSig = {
+            subject: 'CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US',
+            issuer: 'CN=Microsoft Code Signing PCA',
+        };
+        t.check(signerMatches(msSig, ms) &&
+            !signerMatches({ ...msSig, subject: 'CN=Microsoft Corporation Fake, O=Evil' }, ms) &&
+            !signerMatches(null, ms) &&
+            signerMatches({ subject: 'CN="Valve Corp.", O=Valve', issuer: 'x' }, SIGNERS.valve) &&
+            signerMatches({ subject: 'CN=Unity Technologies ApS', issuer: 'x' }, SIGNERS.unity) &&
+            !signerMatches({ subject: 'CN=Microsoft Corporation', issuer: 'x' }, SIGNERS.valve) &&
+            signerMatches(msSig, { subject: ['^CN=Microsoft'], issuer: ['code signing'] }) &&
+            !signerMatches(msSig, { subject: ['^CN=Microsoft'], issuer: ['nobody'] }), 'a signer matches by subject (and issuer when named), never an empty or unsigned file');
+        t.section('not ready yet');
+        const everything = structuredClone(on);
+        for (const name of NOT_READY.toolchains)
+            everything[name].enabled = 'auto';
+        const found = decideToolchains(everything, ['ProjectVersion.txt', 'project.godot', 'fxmanifest.lua'], ['unity']);
+        t.check(NOT_READY.toolchains.every((n) => !found[n].on), '"auto" never turns on a toolchain that is not written yet, whatever the project holds');
+        const shown = settingsOf(ConfigFile.user(t.at('settings', 'config.json'))).map((r) => r.key.join('.'));
+        t.check(!shown.some((k) => /^toolchains\.(unity|godot|android|flutter|dart|reactNative)\./.test(k)) &&
+            shown.includes('toolchains.unreal.visualStudio') &&
+            shown.some((k) => k.startsWith('toolchains.fivem.')), 'settings do not list the toolchains that are not written yet');
     },
 };

package/dist/selftest/service-accounts.test.js

@@ -298,7 +298,7 @@ export const serviceAccountsSuite = {
             JSON.stringify(asked).includes('signs the launcher on this PC out') &&
             !JSON.stringify(seen).includes(SIGN_IN) &&
             !taken.message.includes(SIGN_IN) &&
-            taken.message.includes('accounts.epic.share'), 'importing asks first (the command line too: --yes answers it), warns the PC is signed out, never shows the sign-in');
+            taken.message.includes('Share with sandboxes'), 'importing asks first (the command line too: --yes answers it), warns the PC is signed out, never shows the sign-in');
         const empty = await importServiceFlow(fakeIO([true]).io, 'epic', undefined, {
             store: flowStore,
             pc: { ...pc, localAppData: t.dir('svc-pc-empty') },
@@ -306,7 +306,8 @@ export const serviceAccountsSuite = {
         });
         t.check(empty.message.includes('No saved'), 'no launcher sign-in on this PC: it says so');
         await t.throws(() => loginServiceFlow(fakeIO([]).io, 'epic', { store: flowStore, share: true }), 'nothing to type', 'Epic has nothing to type');
-        await t.throws(() => loginServiceFlow(fakeIO([CFX, '']).io, 'cfx', { store: flowStore, share: true }), 'not available yet', 'a kind whose host side is not written yet says so');
+        const typed = await loginServiceFlow(fakeIO([CFX, '']).io, 'cfx', { store: flowStore, share: true });
+        t.check(flowStore.read('cfx')?.licenseKey === CFX && !typed.message.includes(CFX), 'a typed kind (the Cfx.re key) is saved from what you type, and never shown back');
         t.check(Boolean(HOST_SOURCES.epic.fromPc) && !HOST_SOURCES.epic.fromAnswers, 'Epic comes from this PC (or a sandbox), never typed');
         const gone = await logoutServiceFlow(fakeIO([true]).io, 'epic', t.dir('svc-flow-root'), flowStore, new AccountLeases(t.dir('svc-flow-root')));
         t.check(gone.deleted && flowStore.state('epic') === 'none', 'forgetting deletes it after asking');

package/dist/selftest/support/engine-golden.js

@@ -32,12 +32,20 @@ export const LAUNCH_FILES_GOLDEN = [
     'runtime/tool.js',
     'runtime/view.js',
     // The agent add-ons' lock files (pinned installs), copied with the rest of sandbox\.
+    'sandbox/addons/browser-use-mcp/requirements.in',
+    'sandbox/addons/browser-use-mcp/requirements.txt',
     'sandbox/addons/ccusage/package-lock.json',
     'sandbox/addons/ccusage/package.json',
+    'sandbox/addons/chrome-devtools-mcp/package-lock.json',
+    'sandbox/addons/chrome-devtools-mcp/package.json',
+    'sandbox/addons/comet-mcp/package-lock.json',
+    'sandbox/addons/comet-mcp/package.json',
     'sandbox/addons/context7/package-lock.json',
     'sandbox/addons/context7/package.json',
     'sandbox/addons/headroom/requirements.in',
     'sandbox/addons/headroom/requirements.txt',
+    'sandbox/addons/perplexity-mcp/package-lock.json',
+    'sandbox/addons/perplexity-mcp/package.json',
     'sandbox/addons/playwright-mcp/package-lock.json',
     'sandbox/addons/playwright-mcp/package.json',
     'sandbox/boot/bootstrap.ps1',
@@ -67,7 +75,7 @@ export const LAUNCH_FILES_GOLDEN = [
     'sandbox/scripts/enable-vt-input.ps1',
     'sandbox/scripts/expand-archive.ps1',
     'sandbox/scripts/get-gpu-names.ps1',
-    'sandbox/scripts/get-signer.ps1',
+    'sandbox/scripts/get-signature.ps1',
     'sandbox/scripts/install-shell-path.ps1',
     'sandbox/scripts/link-profile-dirs.ps1',
     'sandbox/scripts/new-shortcuts.ps1',
@@ -76,5 +84,24 @@ export const LAUNCH_FILES_GOLDEN = [
     'sandbox/scripts/set-dns-servers.ps1',
     'sandbox/scripts/set-machine-environment.ps1',
     'sandbox/templates/fivem/README.txt',
+    'sandbox/templates/fivem/cs/Client/Client.csproj',
+    'sandbox/templates/fivem/cs/Client/ClientMain.cs',
+    'sandbox/templates/fivem/cs/Server/Server.csproj',
+    'sandbox/templates/fivem/cs/Server/ServerMain.cs',
+    'sandbox/templates/fivem/cs/fxmanifest.lua',
+    'sandbox/templates/fivem/js/client.js',
+    'sandbox/templates/fivem/js/fxmanifest.lua',
+    'sandbox/templates/fivem/js/server.js',
+    'sandbox/templates/fivem/lua/client.lua',
+    'sandbox/templates/fivem/lua/fxmanifest.lua',
+    'sandbox/templates/fivem/lua/server.lua',
+    'sandbox/templates/fivem/server.cfg',
+    'sandbox/templates/fivem/ts/build.js',
+    'sandbox/templates/fivem/ts/fxmanifest.lua',
+    'sandbox/templates/fivem/ts/package.json',
+    'sandbox/templates/fivem/ts/src/client/client.ts',
+    'sandbox/templates/fivem/ts/src/client/tsconfig.json',
+    'sandbox/templates/fivem/ts/src/server/server.ts',
+    'sandbox/templates/fivem/ts/src/server/tsconfig.json',
     'session.json',
 ];

package/dist/selftest/support/fixtures.d.ts

@@ -132,6 +132,12 @@ export declare function createFixtures(t: Harness): {
             appstore: {
                 share: boolean;
             };
+            perplexity: {
+                share: boolean;
+            };
+            comet: {
+                share: boolean;
+            };
         };
         pcInstalls: {
             steamGames: boolean | number[];
@@ -194,6 +200,7 @@ export declare function createFixtures(t: Harness): {
                 acceptLicense: boolean;
                 components: string[];
                 keepInstallFiles: boolean;
+                visualStudio: "full" | "autosdk";
                 persistEngines: boolean;
                 derivedDataCache: "persisted" | "local";
             };
@@ -429,6 +436,14 @@ export declare function createFixtures(t: Harness): {
             resumeArguments?: string[] | undefined;
             resumeOneArguments?: string[] | undefined;
         }>;
+        codex: {
+            sandboxMode: "danger-full-access" | "workspace-write" | "read-only";
+            approvalPolicy: "never" | "on-request" | "on-failure" | "untrusted";
+            model: string;
+            reasoningEffort: "default" | "minimal" | "low" | "medium" | "high" | "xhigh";
+            windowsSandbox: "off" | "unelevated" | "elevated";
+            mcpLoginsInFile: boolean;
+        };
         hooks: {
             failFast: boolean;
         };

package/dist/selftest/support/web-preview.d.ts

@@ -1 +1,34 @@
-export {};
+import { AuditLog } from '../../host/audit/index.js';
+import type { SessionStatus } from '../../core/types.js';
+export declare const SESSIONS: SessionStatus[];
+/** The sandbox as the status query would say it: running, two projects, the helper answering. */
+export declare function sampleStatus(running: boolean): unknown;
+/** Sample logins (names and emails only, no credentials): Claude with two, codex with one, opencode keeps none. */
+export declare function sampleAccounts(): unknown;
+export declare function sampleSessions(running: boolean): unknown;
+/** The program's updates: installed for you, one previous version, one failed update, one saved-settings change. */
+export declare function sampleUpdates(): unknown;
+/** Where the saved data is (the storage area's query), parsed with its own output schema. */
+export declare function sampleStorage(): unknown;
+/** Contained storage (beta): off, and this PC can use it. */
+export declare function sampleContained(): unknown;
+/** What is stored: a toolchain, the agent's login folder, databases and logs, and what this PC keeps (sample sizes). */
+export declare function sampleData(): unknown;
+/** The agents as settings and the sandbox say them: two built in (one ready), two added (one ready). */
+export declare function sampleAgents(): unknown;
+/** Sample projects: this folder's project and a root's (mapped), one not mapped, and one excluded. */
+export declare function sampleProjects(running: boolean): unknown;
+/** The last check: a few results of each kind, the doctor rows, the setup and a log (nothing here is run). */
+export declare function sampleHealth(): unknown;
+/** The engines and their checks (what engine.status returns): HCS is missing its features on this sample PC. */
+export declare function sampleEngines(): unknown;
+/** The sandbox's log files, newest first, and a crash report (what logs.list returns). */
+export declare function sampleLogs(): unknown;
+/** The end of one log (what logs.tail returns): plausible sandbox lines, one of them very long. */
+export declare function sampleLogTail(input: {
+    readonly name?: string;
+}): unknown;
+/** A plausible audit log: two agents' sessions, the sandbox's own setup, a commit each, a guard finding. */
+export declare function sampleAuditLog(dir: string): AuditLog;
+/** Remote access: LAN mode on, two devices, one Windows sign-in, a code waiting. */
+export declare function sampleAccess(): unknown;

package/dist/selftest/support/web-preview.js

@@ -65,7 +65,7 @@ function startFakePty() {
 function iso(msAgo) {
     return new Date(Date.now() - msAgo).toISOString();
 }
-const SESSIONS = [
+export const SESSIONS = [
     {
         id: 'mva4ungc50e051',
         launchId: 'launch1',
@@ -102,7 +102,7 @@ const SESSIONS = [
     },
 ];
 /** The sandbox as the status query would say it: running, two projects, the helper answering. */
-function sampleStatus(running) {
+export function sampleStatus(running) {
     const project = (name, here, sessions) => ({
         name,
         host: 'F:\\AgentProjects\\' + name,
@@ -142,9 +142,10 @@ function sampleStatus(running) {
     });
 }
 /** Sample logins (names and emails only, no credentials): Claude with two, codex with one, opencode keeps none. */
-function sampleAccounts() {
+export function sampleAccounts() {
     return listAccounts.output.parse({
         agent: 'claude',
+        services: [],
         agents: [
             {
                 name: 'claude',
@@ -190,7 +191,7 @@ function sampleAccounts() {
         ],
     });
 }
-function sampleSessions(running) {
+export function sampleSessions(running) {
     return listSessions.output.parse({
         sandboxRunning: running,
         defaultAgent: 'claude',
@@ -207,7 +208,7 @@ function sampleSessions(running) {
     });
 }
 /** The program's updates: installed for you, one previous version, one failed update, one saved-settings change. */
-function sampleUpdates() {
+export function sampleUpdates() {
     return updatesStatus.output.parse({
         managed: true,
         version: '1.4.3',
@@ -225,7 +226,7 @@ function sampleUpdates() {
     });
 }
 /** Where the saved data is (the storage area's query), parsed with its own output schema. */
-function sampleStorage() {
+export function sampleStorage() {
     return showStorage.output.parse({
         root: 'F:\\AgentSandbox',
         exists: true,
@@ -238,7 +239,7 @@ function sampleStorage() {
     });
 }
 /** Contained storage (beta): off, and this PC can use it. */
-function sampleContained() {
+export function sampleContained() {
     return containedStatus.output.parse({
         setting: 'off',
         maxGb: 60,
@@ -255,7 +256,7 @@ function sampleContained() {
     });
 }
 /** What is stored: a toolchain, the agent's login folder, databases and logs, and what this PC keeps (sample sizes). */
-function sampleData() {
+export function sampleData() {
     const GB = (n) => (n / 1e9).toFixed(1) + ' GB';
     const entry = (area, name, bytes, target) => ({
         area,
@@ -307,7 +308,7 @@ function sampleData() {
     });
 }
 /** The agents as settings and the sandbox say them: two built in (one ready), two added (one ready). */
-function sampleAgents() {
+export function sampleAgents() {
     return listAgents.output.parse({
         folder: 'F:\\AgentProjects\\windows-sandbox',
         defaultAgent: 'claude',
@@ -320,7 +321,7 @@ function sampleAgents() {
     });
 }
 /** Sample projects: this folder's project and a root's (mapped), one not mapped, and one excluded. */
-function sampleProjects(running) {
+export function sampleProjects(running) {
     const inSandbox = (name, how) => (running ? name + ' (' + how + ')' : null);
     return listProjects.output.parse({
         all: false,
@@ -367,7 +368,7 @@ function sampleProjects(running) {
     });
 }
 /** The last check: a few results of each kind, the doctor rows, the setup and a log (nothing here is run). */
-function sampleHealth() {
+export function sampleHealth() {
     const at = new Date(Date.now() - 3 * MINUTE).toISOString();
     return lastHealth.output.parse({
         last: {
@@ -398,7 +399,7 @@ function sampleHealth() {
                     status: 'needs-you',
                     detail: 'two folders from a sandbox that did not close',
                     means: 'they take space and can confuse the next start',
-                    fix: 'stop the sandbox, then run sandbox repair again',
+                    fix: 'stop the sandbox, then repair again',
                     lines: ['run-20261012-0931', 'run-20261013-1744'],
                     fixable: false,
                 },
@@ -434,7 +435,7 @@ function sampleHealth() {
 }
 const LOG_DIR = 'C:\\AgentData\\logs';
 /** The engines and their checks (what engine.status returns): HCS is missing its features on this sample PC. */
-function sampleEngines() {
+export function sampleEngines() {
     const capabilities = {
         desktop: true,
         gpu: true,
@@ -484,7 +485,7 @@ function sampleEngines() {
     });
 }
 /** The sandbox's log files, newest first, and a crash report (what logs.list returns). */
-function sampleLogs() {
+export function sampleLogs() {
     return listLogs.output.parse({
         folder: LOG_DIR,
         files: [
@@ -511,7 +512,7 @@ function sampleLogs() {
     });
 }
 /** The end of one log (what logs.tail returns): plausible sandbox lines, one of them very long. */
-function sampleLogTail(input) {
+export function sampleLogTail(input) {
     const name = input.name ?? 'guest-2026-10-16.log';
     if (name === CRASH)
         return tailLog.output.parse({
@@ -531,7 +532,7 @@ function sampleLogTail(input) {
     });
 }
 /** A plausible audit log: two agents' sessions, the sandbox's own setup, a commit each, a guard finding. */
-function sampleAuditLog(dir) {
+export function sampleAuditLog(dir) {
     const log = new AuditLog(dir, { days: 7, maxMb: 100 });
     const at = (minutesAgo) => new Date(Date.now() - minutesAgo * MINUTE).toISOString();
     const claude = { s: SESSIONS[0].id, ag: 'claude', pj: 'windows-sandbox', sv: 'p' };
@@ -620,7 +621,7 @@ function sampleAuditLog(dir) {
 }
 const ACCESS_FINGERPRINT = '3A:7F:01:C2:9B:44:E8:15:6D:A0:2B:93:CC:71:58:0E:F4:12:9A:BD:63:07:E5:2C:48:D9:B1:76:0A:3F:C8:E2';
 /** Remote access: LAN mode on, two devices, one Windows sign-in, a code waiting. */
-function sampleAccess() {
+export function sampleAccess() {
     const at = (hours) => new Date(Date.now() + hours * 3_600_000).toISOString();
     return {
         lan: {
@@ -1032,4 +1033,6 @@ async function main() {
     console.log('Web UI preview (sample data; settings in ' + configPath + '):');
     console.log('http://127.0.0.1:' + server.port + '/#k=' + TOKEN);
 }
-void main();
+// Only when run as the preview itself (the UI-text self-test imports the sample data above).
+if (/web-preview\.js$/.test(process.argv[1] ?? ''))
+    void main();

package/dist/selftest/toolchains.test.js

@@ -5,6 +5,7 @@ import path from 'node:path';
 import { javaMajorFrom, pickGoRelease, pickNodeVersion, pickPackageVersion, pickSpreadVersions, projectUses, specFromVersionFile, } from '../core/detect/index.js';
 import { parseReleasePage, parseReleaseTags } from '../shared/download/index.js';
 import { decidePwsh, pcHasPwsh, PWSH_MAX_BYTES, readPwshScripts, usesPwsh } from '../core/detect/index.js';
+import { projectFolderLines, toolLines } from '../guest/boot/guide-lines.js';
 import { binstallAsset, CLI_TOOLS, decideCli, pwshAsset } from '../guest/toolchains/catalogue.js';
 import { missingExtensions, vscodeExtensions, vscodeSettings } from '../guest/toolchains/tools/vscode-profile.js';
 import { addonGuideLine, addonMcpServer, APP_CATEGORIES, APPS, appsNeedMesa, appsNeedUv, appsToInstall, CCUSAGE_VERSION, claudeManagedSettings, CONTEXT7_MCP_VERSION, exeMatcher, HEADROOM_VERSION, headroomArgs, headroomEnv, headroomUrl, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, withAddonMcpServers, } from '../shared/apps/index.js';
@@ -371,7 +372,8 @@ export const toolchainsSuite = {
         const mine = { playwright: { type: 'stdio', command: 'npx', args: ['@playwright/mcp'] } };
         const on = withAddonMcpServers(mine, pw ? { 'sbx-playwright': pw } : {}, known);
         const off = withAddonMcpServers({ ...on, 'sbx-context7': {} }, {}, known);
-        t.check(known.length === 2 &&
+        t.check(['sbx-playwright', 'sbx-context7'].every((n) => known.includes(n)) &&
+            new Set(known).size === known.length &&
             known.every((n) => n.startsWith('sbx-')) &&
             context7?.name === 'sbx-context7' &&
             'sbx-playwright' in on &&
@@ -381,5 +383,25 @@ export const toolchainsSuite = {
         t.check(addonGuideLine([], false).length === 0 &&
             addonGuideLine(['sbx-playwright'], true).length === 2 &&
             addonGuideLine(['sbx-playwright'], false)[0].includes('sbx-playwright'), 'add-ons: the agent guide names the MCP servers and ccusage only when they are on');
+        t.section('sandbox guide: every project in the sandbox');
+        const wsGuest = 'C:\\Projects\\AgentProjects\\windows-sandbox';
+        const rootMap = { host: 'F:\\AgentProjects', guest: 'C:\\Projects\\AgentProjects', root: true };
+        const inRoot = projectFolderLines(wsGuest, 'F:\\AgentProjects\\windows-sandbox', [rootMap], []);
+        t.equal(inRoot.length, 1, 'a launch folder inside a mapped root is covered by the one root line (not listed twice)');
+        t.check(inRoot[0].includes('`C:\\Projects\\AgentProjects\\*`') && inRoot[0].includes('F:\\AgentProjects\\*'), 'the persists line names the mapped root and its PC folder');
+        const outside = projectFolderLines('C:\\Workspace\\app', 'D:\\app', [rootMap], [
+            { guest: 'C:\\Projects\\AgentProjects\\mw2-agent', host: 'F:\\AgentProjects\\mw2-agent' },
+            { guest: 'C:\\Workspace\\other', host: 'D:\\other' },
+        ]);
+        t.check(outside.length === 3 && outside[0].includes('C:\\Workspace\\app') && outside[2].includes('C:\\Workspace\\other'), 'the workspace outside any root is listed, a project already under a root is not repeated');
+        t.equal(toolLines('a', ['node: 24'], []), ['- Tools: node: 24'], 'one project: the single Tools line, as before');
+        const many = toolLines('a', ['node: 24'], [
+            { guest: 'C:\\Projects\\b', host: 'F:\\b', name: 'b', tools: ['python: 3.15.2', 'rust: 1.99'] },
+            { guest: 'C:\\Projects\\c', host: 'F:\\c', name: 'c', tools: [] },
+        ]);
+        t.check(many[0] === '- Tools (a): node: 24' &&
+            many[1] === '- Tools (b): python: 3.15.2 · rust: 1.99' &&
+            many.length === 3 &&
+            !many.join().includes('(c)'), 'several projects: the tools of each one that was set up, by name');
     },
 };

package/dist/selftest/ui-text.test.d.ts

@@ -0,0 +1,7 @@
+import { type Page } from '../app/kernel/index.js';
+import type { Suite } from './support/suite.js';
+/** Every visible string of a page: what a person reads in the menu or the web (CLI-only text is left out). */
+export declare function visibleText(page: Page): string[];
+/** What is wrong with a text, or undefined. */
+export declare function textProblem(text: string, where: string, command?: RegExp): string | undefined;
+export declare const uiTextSuite: Suite;