windows-development-sandbox 1.20.0 → 1.23.0

package/dist/selftest/persisted-installs.test.js

@@ -6,7 +6,7 @@ import path from 'node:path';
 import { DEFAULTS } from '../core/config/index.js';
 import { assertLocalRoom, ensurePersisted, installRecords, InstallRecordsSchema, LOCAL_RESERVE_BYTES, recordUse, } from '../guest/toolchains/persisted.js';
 import { BUILD_TOOLS_COMPONENTS, UNREAL_COMPONENTS, visualStudioWanted, } from '../guest/toolchains/native/vs-request.js';
-import { autosdkLayout, layoutNextStep, unrealUsesAutosdk, vsExitText } from '../guest/toolchains/native/vs-request.js';
+import { autosdkLayout, layoutNextStep, STAGING_RESERVE_BYTES, unrealUsesAutosdk, vsExitText, } from '../guest/toolchains/native/vs-request.js';
 import { freeBytesAt } from '../shared/io/disk.js';
 import { SIGNERS, signerMatches } from '../shared/signer.js';
 import { decideToolchains } from '../core/detect/toolchains.js';
@@ -145,6 +145,8 @@ export const persistedInstallsSuite = {
             layoutNextStep(3762504530, room(40 * GB), reserve) === 'stage' &&
             layoutNextStep(3762504530, room(20 * GB), reserve) === 'skip' &&
             layoutNextStep(null, room(40 * GB), reserve) === 'stage', 'a failed layout is built on the sandbox disk only with room for it (12 GB plus the reserve)');
+        t.check(layoutNextStep(null, room(15 * GB), STAGING_RESERVE_BYTES) === 'stage' &&
+            layoutNextStep(null, room(14 * GB), STAGING_RESERVE_BYTES) === 'skip', 'before Visual Studio is installed, 15 GB free on C: is enough to build the install files there');
         t.equal(freeBytesAt(path.join(t.dir('layout-room'), 'not', 'there'), () => ({ bavail: 3, bsize: 2 })), 6, 'free room of a folder that does not exist asks its parent');
         t.equal(freeBytesAt(t.dir('layout-room'), () => {
             throw new Error('no');
@@ -170,7 +172,8 @@ export const persistedInstallsSuite = {
         const found = decideToolchains(everything, ['ProjectVersion.txt', 'project.godot', 'fxmanifest.lua'], ['unity']);
         t.check(NOT_READY.toolchains.every((n) => !found[n].on), '"auto" never turns on a toolchain that is not written yet, whatever the project holds');
         const shown = settingsOf(ConfigFile.user(t.at('settings', 'config.json'))).map((r) => r.key.join('.'));
-        t.check(!shown.some((k) => /^toolchains\.(unity|godot|android|flutter|dart|reactNative|fivem)\./.test(k)) &&
-            shown.includes('toolchains.unreal.visualStudio'), 'settings do not list the toolchains that are not written yet');
+        t.check(!shown.some((k) => /^toolchains\.(unity|godot|android|flutter|dart|reactNative)\./.test(k)) &&
+            shown.includes('toolchains.unreal.visualStudio') &&
+            shown.some((k) => k.startsWith('toolchains.fivem.')), 'settings do not list the toolchains that are not written yet');
     },
 };

package/dist/selftest/service-accounts.test.js

@@ -298,7 +298,7 @@ export const serviceAccountsSuite = {
             JSON.stringify(asked).includes('signs the launcher on this PC out') &&
             !JSON.stringify(seen).includes(SIGN_IN) &&
             !taken.message.includes(SIGN_IN) &&
-            taken.message.includes('accounts.epic.share'), 'importing asks first (the command line too: --yes answers it), warns the PC is signed out, never shows the sign-in');
+            taken.message.includes('Share with sandboxes'), 'importing asks first (the command line too: --yes answers it), warns the PC is signed out, never shows the sign-in');
         const empty = await importServiceFlow(fakeIO([true]).io, 'epic', undefined, {
             store: flowStore,
             pc: { ...pc, localAppData: t.dir('svc-pc-empty') },
@@ -306,7 +306,8 @@ export const serviceAccountsSuite = {
         });
         t.check(empty.message.includes('No saved'), 'no launcher sign-in on this PC: it says so');
         await t.throws(() => loginServiceFlow(fakeIO([]).io, 'epic', { store: flowStore, share: true }), 'nothing to type', 'Epic has nothing to type');
-        await t.throws(() => loginServiceFlow(fakeIO([CFX, '']).io, 'cfx', { store: flowStore, share: true }), 'comes in a later version', 'a kind whose host side is not written yet says so');
+        const typed = await loginServiceFlow(fakeIO([CFX, '']).io, 'cfx', { store: flowStore, share: true });
+        t.check(flowStore.read('cfx')?.licenseKey === CFX && !typed.message.includes(CFX), 'a typed kind (the Cfx.re key) is saved from what you type, and never shown back');
         t.check(Boolean(HOST_SOURCES.epic.fromPc) && !HOST_SOURCES.epic.fromAnswers, 'Epic comes from this PC (or a sandbox), never typed');
         const gone = await logoutServiceFlow(fakeIO([true]).io, 'epic', t.dir('svc-flow-root'), flowStore, new AccountLeases(t.dir('svc-flow-root')));
         t.check(gone.deleted && flowStore.state('epic') === 'none', 'forgetting deletes it after asking');

package/dist/selftest/support/engine-golden.js

@@ -32,12 +32,20 @@ export const LAUNCH_FILES_GOLDEN = [
     'runtime/tool.js',
     'runtime/view.js',
     // The agent add-ons' lock files (pinned installs), copied with the rest of sandbox\.
+    'sandbox/addons/browser-use-mcp/requirements.in',
+    'sandbox/addons/browser-use-mcp/requirements.txt',
     'sandbox/addons/ccusage/package-lock.json',
     'sandbox/addons/ccusage/package.json',
+    'sandbox/addons/chrome-devtools-mcp/package-lock.json',
+    'sandbox/addons/chrome-devtools-mcp/package.json',
+    'sandbox/addons/comet-mcp/package-lock.json',
+    'sandbox/addons/comet-mcp/package.json',
     'sandbox/addons/context7/package-lock.json',
     'sandbox/addons/context7/package.json',
     'sandbox/addons/headroom/requirements.in',
     'sandbox/addons/headroom/requirements.txt',
+    'sandbox/addons/perplexity-mcp/package-lock.json',
+    'sandbox/addons/perplexity-mcp/package.json',
     'sandbox/addons/playwright-mcp/package-lock.json',
     'sandbox/addons/playwright-mcp/package.json',
     'sandbox/boot/bootstrap.ps1',
@@ -76,5 +84,24 @@ export const LAUNCH_FILES_GOLDEN = [
     'sandbox/scripts/set-dns-servers.ps1',
     'sandbox/scripts/set-machine-environment.ps1',
     'sandbox/templates/fivem/README.txt',
+    'sandbox/templates/fivem/cs/Client/Client.csproj',
+    'sandbox/templates/fivem/cs/Client/ClientMain.cs',
+    'sandbox/templates/fivem/cs/Server/Server.csproj',
+    'sandbox/templates/fivem/cs/Server/ServerMain.cs',
+    'sandbox/templates/fivem/cs/fxmanifest.lua',
+    'sandbox/templates/fivem/js/client.js',
+    'sandbox/templates/fivem/js/fxmanifest.lua',
+    'sandbox/templates/fivem/js/server.js',
+    'sandbox/templates/fivem/lua/client.lua',
+    'sandbox/templates/fivem/lua/fxmanifest.lua',
+    'sandbox/templates/fivem/lua/server.lua',
+    'sandbox/templates/fivem/server.cfg',
+    'sandbox/templates/fivem/ts/build.js',
+    'sandbox/templates/fivem/ts/fxmanifest.lua',
+    'sandbox/templates/fivem/ts/package.json',
+    'sandbox/templates/fivem/ts/src/client/client.ts',
+    'sandbox/templates/fivem/ts/src/client/tsconfig.json',
+    'sandbox/templates/fivem/ts/src/server/server.ts',
+    'sandbox/templates/fivem/ts/src/server/tsconfig.json',
     'session.json',
 ];

package/dist/selftest/support/fixtures.d.ts

@@ -132,6 +132,12 @@ export declare function createFixtures(t: Harness): {
             appstore: {
                 share: boolean;
             };
+            perplexity: {
+                share: boolean;
+            };
+            comet: {
+                share: boolean;
+            };
         };
         pcInstalls: {
             steamGames: boolean | number[];

package/dist/selftest/support/web-preview.d.ts

@@ -1 +1,34 @@
-export {};
+import { AuditLog } from '../../host/audit/index.js';
+import type { SessionStatus } from '../../core/types.js';
+export declare const SESSIONS: SessionStatus[];
+/** The sandbox as the status query would say it: running, two projects, the helper answering. */
+export declare function sampleStatus(running: boolean): unknown;
+/** Sample logins (names and emails only, no credentials): Claude with two, codex with one, opencode keeps none. */
+export declare function sampleAccounts(): unknown;
+export declare function sampleSessions(running: boolean): unknown;
+/** The program's updates: installed for you, one previous version, one failed update, one saved-settings change. */
+export declare function sampleUpdates(): unknown;
+/** Where the saved data is (the storage area's query), parsed with its own output schema. */
+export declare function sampleStorage(): unknown;
+/** Contained storage (beta): off, and this PC can use it. */
+export declare function sampleContained(): unknown;
+/** What is stored: a toolchain, the agent's login folder, databases and logs, and what this PC keeps (sample sizes). */
+export declare function sampleData(): unknown;
+/** The agents as settings and the sandbox say them: two built in (one ready), two added (one ready). */
+export declare function sampleAgents(): unknown;
+/** Sample projects: this folder's project and a root's (mapped), one not mapped, and one excluded. */
+export declare function sampleProjects(running: boolean): unknown;
+/** The last check: a few results of each kind, the doctor rows, the setup and a log (nothing here is run). */
+export declare function sampleHealth(): unknown;
+/** The engines and their checks (what engine.status returns): HCS is missing its features on this sample PC. */
+export declare function sampleEngines(): unknown;
+/** The sandbox's log files, newest first, and a crash report (what logs.list returns). */
+export declare function sampleLogs(): unknown;
+/** The end of one log (what logs.tail returns): plausible sandbox lines, one of them very long. */
+export declare function sampleLogTail(input: {
+    readonly name?: string;
+}): unknown;
+/** A plausible audit log: two agents' sessions, the sandbox's own setup, a commit each, a guard finding. */
+export declare function sampleAuditLog(dir: string): AuditLog;
+/** Remote access: LAN mode on, two devices, one Windows sign-in, a code waiting. */
+export declare function sampleAccess(): unknown;

package/dist/selftest/support/web-preview.js

@@ -65,7 +65,7 @@ function startFakePty() {
 function iso(msAgo) {
     return new Date(Date.now() - msAgo).toISOString();
 }
-const SESSIONS = [
+export const SESSIONS = [
     {
         id: 'mva4ungc50e051',
         launchId: 'launch1',
@@ -102,7 +102,7 @@ const SESSIONS = [
     },
 ];
 /** The sandbox as the status query would say it: running, two projects, the helper answering. */
-function sampleStatus(running) {
+export function sampleStatus(running) {
     const project = (name, here, sessions) => ({
         name,
         host: 'F:\\AgentProjects\\' + name,
@@ -142,9 +142,10 @@ function sampleStatus(running) {
     });
 }
 /** Sample logins (names and emails only, no credentials): Claude with two, codex with one, opencode keeps none. */
-function sampleAccounts() {
+export function sampleAccounts() {
     return listAccounts.output.parse({
         agent: 'claude',
+        services: [],
         agents: [
             {
                 name: 'claude',
@@ -190,7 +191,7 @@ function sampleAccounts() {
         ],
     });
 }
-function sampleSessions(running) {
+export function sampleSessions(running) {
     return listSessions.output.parse({
         sandboxRunning: running,
         defaultAgent: 'claude',
@@ -207,7 +208,7 @@ function sampleSessions(running) {
     });
 }
 /** The program's updates: installed for you, one previous version, one failed update, one saved-settings change. */
-function sampleUpdates() {
+export function sampleUpdates() {
     return updatesStatus.output.parse({
         managed: true,
         version: '1.4.3',
@@ -225,7 +226,7 @@ function sampleUpdates() {
     });
 }
 /** Where the saved data is (the storage area's query), parsed with its own output schema. */
-function sampleStorage() {
+export function sampleStorage() {
     return showStorage.output.parse({
         root: 'F:\\AgentSandbox',
         exists: true,
@@ -238,7 +239,7 @@ function sampleStorage() {
     });
 }
 /** Contained storage (beta): off, and this PC can use it. */
-function sampleContained() {
+export function sampleContained() {
     return containedStatus.output.parse({
         setting: 'off',
         maxGb: 60,
@@ -255,7 +256,7 @@ function sampleContained() {
     });
 }
 /** What is stored: a toolchain, the agent's login folder, databases and logs, and what this PC keeps (sample sizes). */
-function sampleData() {
+export function sampleData() {
     const GB = (n) => (n / 1e9).toFixed(1) + ' GB';
     const entry = (area, name, bytes, target) => ({
         area,
@@ -307,7 +308,7 @@ function sampleData() {
     });
 }
 /** The agents as settings and the sandbox say them: two built in (one ready), two added (one ready). */
-function sampleAgents() {
+export function sampleAgents() {
     return listAgents.output.parse({
         folder: 'F:\\AgentProjects\\windows-sandbox',
         defaultAgent: 'claude',
@@ -320,7 +321,7 @@ function sampleAgents() {
     });
 }
 /** Sample projects: this folder's project and a root's (mapped), one not mapped, and one excluded. */
-function sampleProjects(running) {
+export function sampleProjects(running) {
     const inSandbox = (name, how) => (running ? name + ' (' + how + ')' : null);
     return listProjects.output.parse({
         all: false,
@@ -367,7 +368,7 @@ function sampleProjects(running) {
     });
 }
 /** The last check: a few results of each kind, the doctor rows, the setup and a log (nothing here is run). */
-function sampleHealth() {
+export function sampleHealth() {
     const at = new Date(Date.now() - 3 * MINUTE).toISOString();
     return lastHealth.output.parse({
         last: {
@@ -398,7 +399,7 @@ function sampleHealth() {
                     status: 'needs-you',
                     detail: 'two folders from a sandbox that did not close',
                     means: 'they take space and can confuse the next start',
-                    fix: 'stop the sandbox, then run sandbox repair again',
+                    fix: 'stop the sandbox, then repair again',
                     lines: ['run-20261012-0931', 'run-20261013-1744'],
                     fixable: false,
                 },
@@ -434,7 +435,7 @@ function sampleHealth() {
 }
 const LOG_DIR = 'C:\\AgentData\\logs';
 /** The engines and their checks (what engine.status returns): HCS is missing its features on this sample PC. */
-function sampleEngines() {
+export function sampleEngines() {
     const capabilities = {
         desktop: true,
         gpu: true,
@@ -484,7 +485,7 @@ function sampleEngines() {
     });
 }
 /** The sandbox's log files, newest first, and a crash report (what logs.list returns). */
-function sampleLogs() {
+export function sampleLogs() {
     return listLogs.output.parse({
         folder: LOG_DIR,
         files: [
@@ -511,7 +512,7 @@ function sampleLogs() {
     });
 }
 /** The end of one log (what logs.tail returns): plausible sandbox lines, one of them very long. */
-function sampleLogTail(input) {
+export function sampleLogTail(input) {
     const name = input.name ?? 'guest-2026-10-16.log';
     if (name === CRASH)
         return tailLog.output.parse({
@@ -531,7 +532,7 @@ function sampleLogTail(input) {
     });
 }
 /** A plausible audit log: two agents' sessions, the sandbox's own setup, a commit each, a guard finding. */
-function sampleAuditLog(dir) {
+export function sampleAuditLog(dir) {
     const log = new AuditLog(dir, { days: 7, maxMb: 100 });
     const at = (minutesAgo) => new Date(Date.now() - minutesAgo * MINUTE).toISOString();
     const claude = { s: SESSIONS[0].id, ag: 'claude', pj: 'windows-sandbox', sv: 'p' };
@@ -620,7 +621,7 @@ function sampleAuditLog(dir) {
 }
 const ACCESS_FINGERPRINT = '3A:7F:01:C2:9B:44:E8:15:6D:A0:2B:93:CC:71:58:0E:F4:12:9A:BD:63:07:E5:2C:48:D9:B1:76:0A:3F:C8:E2';
 /** Remote access: LAN mode on, two devices, one Windows sign-in, a code waiting. */
-function sampleAccess() {
+export function sampleAccess() {
     const at = (hours) => new Date(Date.now() + hours * 3_600_000).toISOString();
     return {
         lan: {
@@ -1032,4 +1033,6 @@ async function main() {
     console.log('Web UI preview (sample data; settings in ' + configPath + '):');
     console.log('http://127.0.0.1:' + server.port + '/#k=' + TOKEN);
 }
-void main();
+// Only when run as the preview itself (the UI-text self-test imports the sample data above).
+if (/web-preview\.js$/.test(process.argv[1] ?? ''))
+    void main();

package/dist/selftest/toolchains.test.js

@@ -5,6 +5,7 @@ import path from 'node:path';
 import { javaMajorFrom, pickGoRelease, pickNodeVersion, pickPackageVersion, pickSpreadVersions, projectUses, specFromVersionFile, } from '../core/detect/index.js';
 import { parseReleasePage, parseReleaseTags } from '../shared/download/index.js';
 import { decidePwsh, pcHasPwsh, PWSH_MAX_BYTES, readPwshScripts, usesPwsh } from '../core/detect/index.js';
+import { projectFolderLines, toolLines } from '../guest/boot/guide-lines.js';
 import { binstallAsset, CLI_TOOLS, decideCli, pwshAsset } from '../guest/toolchains/catalogue.js';
 import { missingExtensions, vscodeExtensions, vscodeSettings } from '../guest/toolchains/tools/vscode-profile.js';
 import { addonGuideLine, addonMcpServer, APP_CATEGORIES, APPS, appsNeedMesa, appsNeedUv, appsToInstall, CCUSAGE_VERSION, claudeManagedSettings, CONTEXT7_MCP_VERSION, exeMatcher, HEADROOM_VERSION, headroomArgs, headroomEnv, headroomUrl, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, withAddonMcpServers, } from '../shared/apps/index.js';
@@ -371,7 +372,8 @@ export const toolchainsSuite = {
         const mine = { playwright: { type: 'stdio', command: 'npx', args: ['@playwright/mcp'] } };
         const on = withAddonMcpServers(mine, pw ? { 'sbx-playwright': pw } : {}, known);
         const off = withAddonMcpServers({ ...on, 'sbx-context7': {} }, {}, known);
-        t.check(known.length === 2 &&
+        t.check(['sbx-playwright', 'sbx-context7'].every((n) => known.includes(n)) &&
+            new Set(known).size === known.length &&
             known.every((n) => n.startsWith('sbx-')) &&
             context7?.name === 'sbx-context7' &&
             'sbx-playwright' in on &&
@@ -381,5 +383,25 @@ export const toolchainsSuite = {
         t.check(addonGuideLine([], false).length === 0 &&
             addonGuideLine(['sbx-playwright'], true).length === 2 &&
             addonGuideLine(['sbx-playwright'], false)[0].includes('sbx-playwright'), 'add-ons: the agent guide names the MCP servers and ccusage only when they are on');
+        t.section('sandbox guide: every project in the sandbox');
+        const wsGuest = 'C:\\Projects\\AgentProjects\\windows-sandbox';
+        const rootMap = { host: 'F:\\AgentProjects', guest: 'C:\\Projects\\AgentProjects', root: true };
+        const inRoot = projectFolderLines(wsGuest, 'F:\\AgentProjects\\windows-sandbox', [rootMap], []);
+        t.equal(inRoot.length, 1, 'a launch folder inside a mapped root is covered by the one root line (not listed twice)');
+        t.check(inRoot[0].includes('`C:\\Projects\\AgentProjects\\*`') && inRoot[0].includes('F:\\AgentProjects\\*'), 'the persists line names the mapped root and its PC folder');
+        const outside = projectFolderLines('C:\\Workspace\\app', 'D:\\app', [rootMap], [
+            { guest: 'C:\\Projects\\AgentProjects\\mw2-agent', host: 'F:\\AgentProjects\\mw2-agent' },
+            { guest: 'C:\\Workspace\\other', host: 'D:\\other' },
+        ]);
+        t.check(outside.length === 3 && outside[0].includes('C:\\Workspace\\app') && outside[2].includes('C:\\Workspace\\other'), 'the workspace outside any root is listed, a project already under a root is not repeated');
+        t.equal(toolLines('a', ['node: 24'], []), ['- Tools: node: 24'], 'one project: the single Tools line, as before');
+        const many = toolLines('a', ['node: 24'], [
+            { guest: 'C:\\Projects\\b', host: 'F:\\b', name: 'b', tools: ['python: 3.15.2', 'rust: 1.99'] },
+            { guest: 'C:\\Projects\\c', host: 'F:\\c', name: 'c', tools: [] },
+        ]);
+        t.check(many[0] === '- Tools (a): node: 24' &&
+            many[1] === '- Tools (b): python: 3.15.2 · rust: 1.99' &&
+            many.length === 3 &&
+            !many.join().includes('(c)'), 'several projects: the tools of each one that was set up, by name');
     },
 };

package/dist/selftest/ui-text.test.d.ts

@@ -0,0 +1,7 @@
+import { type Page } from '../app/kernel/index.js';
+import type { Suite } from './support/suite.js';
+/** Every visible string of a page: what a person reads in the menu or the web (CLI-only text is left out). */
+export declare function visibleText(page: Page): string[];
+/** What is wrong with a text, or undefined. */
+export declare function textProblem(text: string, where: string, command?: RegExp): string | undefined;
+export declare const uiTextSuite: Suite;