windows-development-sandbox 1.23.0 → 1.23.1

package/dist/bin/agent-sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/agent-sandbox.ts
 run(process.argv.slice(2));

package/dist/bin/{chunk-JETGP2C3.js → chunk-7YPEDAJD.js}

@@ -251,7 +251,7 @@ import {
   withOperationCommands,
   working,
   writeJson
-} from "./chunk-ZTTOF5V3.js";
+} from "./chunk-USTRSHIE.js";
 
 // node_modules/commander/lib/error.js
 var require_error = __commonJS({

package/dist/bin/{chunk-XZKOPGNH.js → chunk-QFSJX2KW.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   attach
-} from "./chunk-ZTTOF5V3.js";
+} from "./chunk-USTRSHIE.js";
 export {
   attach
 };

package/dist/bin/{chunk-ZTTOF5V3.js → chunk-USTRSHIE.js}

@@ -56595,14 +56595,14 @@ function cometSummary(p) {
 }
 
 // src/shared/accounts/anthropic.ts
-var ANTHROPIC_KEY_PATTERN = /^sk-ant-(api|usr)\d{2}-[A-Za-z0-9_-]{20,400}$/;
-var ANTHROPIC_KEY_HINT = /^sk-ant-\.\.\.[A-Za-z0-9_-]{4}$/;
+var ANTHROPIC_KEY_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.-]{19,511}$/;
+var ANTHROPIC_KEY_HINT = /^([A-Za-z0-9]{1,8}-?[A-Za-z]*-?)?\.\.\.[A-Za-z0-9_.-]{4}$/;
 function anthropicKeyProblem(key3) {
-  if (ANTHROPIC_KEY_PATTERN.test(key3)) return null;
   if (key3.startsWith("sk-ant-oat"))
     return "That is a Claude subscription token (from claude setup-token), not an API key. Save the subscription login instead.";
   if (key3.startsWith("sk-ant-admin")) return "That is an Admin key: it cannot run Claude. Make an API key instead.";
-  return "An Anthropic API key starts with sk-ant-api or sk-ant-usr and has only letters, digits, - and _ (copy it from the Claude Console).";
+  if (ANTHROPIC_KEY_PATTERN.test(key3)) return null;
+  return "That does not look like an API key: paste the whole key (letters, digits, - and _, no spaces).";
 }
 
 // src/core/local-config/file.ts
@@ -57556,7 +57556,8 @@ import path70 from "node:path";
 var LOGIN_KINDS = ["subscription", "console", "api-key"];
 var apiKeyProblem = anthropicKeyProblem;
 function maskApiKey(key3) {
-  return "sk-ant-..." + key3.slice(-4);
+  const prefix = /^[A-Za-z0-9]{1,8}-[A-Za-z]{1,8}-/.exec(key3)?.[0] ?? "";
+  return prefix + "..." + key3.slice(-4);
 }
 function approvalOf(key3) {
   return key3.trim().slice(-20);
@@ -82441,7 +82442,7 @@ async function attachOpened(ctx, session) {
     nextStep("sandbox attach " + session);
     return 0;
   }
-  const { attach: attach2 } = await import("./chunk-XZKOPGNH.js");
+  const { attach: attach2 } = await import("./chunk-QFSJX2KW.js");
   return attach2({ ...ctx, options: { ...ctx.options, positionals: [session] } });
 }
 function definitionHandler(def) {

package/dist/bin/claude-host.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/claude-host.ts
 var args = process.argv.slice(2);

package/dist/bin/claude-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/claude-sbx.ts
 run(process.argv.slice(2), { harness: "claude" });

package/dist/bin/codex-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/codex-sbx.ts
 run(process.argv.slice(2), { harness: "codex" });

package/dist/bin/gemini-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/gemini-sbx.ts
 run(process.argv.slice(2), { harness: "gemini" });

package/dist/bin/sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/sandbox.ts
 run(process.argv.slice(2));

package/dist/bin/sbx-hide.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/sbx-hide.ts
 run(process.argv.slice(2), { command: "hide" });

package/dist/bin/sbx-show.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/sbx-show.ts
 run(process.argv.slice(2), { command: "show" });

package/dist/host/profile/claude-login.d.ts

@@ -17,9 +17,9 @@ export interface CaptureOptions {
     /** ANTHROPIC_API_KEY of this PC: the last place looked at (--from-host only). */
     readonly envKey?: string | null;
 }
-/** What is wrong with a typed or found API key (sk-ant-api or sk-ant-usr), or null. Never quotes the key. */
+/** What is wrong with a typed or found API key (any Claude Console key), or null. Never quotes the key. */
 export declare const apiKeyProblem: typeof anthropicKeyProblem;
-/** The most of a key that is ever shown: sk-ant-...abcd. */
+/** The most of a key that is ever shown: its prefix (sk-ant-...abcd, skt-ant-...abcd), then its last 4 characters. */
 export declare function maskApiKey(key: string): string;
 export interface LoginFiles {
     readonly claudeDir: string;

package/dist/host/profile/claude-login.js

@@ -14,11 +14,12 @@ import { assertTestWritable } from '../test-guard.js';
 import { hostDataFolder, hostDataRoot } from '../storage/index.js';
 import { assertNoLinks, fail, fileExists, isLink, removeLink, tryReadJson, writeJson } from '../../core/util/index.js';
 export const LOGIN_KINDS = ['subscription', 'console', 'api-key'];
-/** What is wrong with a typed or found API key (sk-ant-api or sk-ant-usr), or null. Never quotes the key. */
+/** What is wrong with a typed or found API key (any Claude Console key), or null. Never quotes the key. */
 export const apiKeyProblem = anthropicKeyProblem;
-/** The most of a key that is ever shown: sk-ant-...abcd. */
+/** The most of a key that is ever shown: its prefix (sk-ant-...abcd, skt-ant-...abcd), then its last 4 characters. */
 export function maskApiKey(key) {
-    return 'sk-ant-...' + key.slice(-4);
+    const prefix = /^[A-Za-z0-9]{1,8}-[A-Za-z]{1,8}-/.exec(key)?.[0] ?? '';
+    return prefix + '...' + key.slice(-4);
 }
 /** What Claude Code records in customApiKeyResponses for a key it may use (its last 20 characters). */
 function approvalOf(key) {

package/dist/selftest/accounts.test.js

@@ -263,7 +263,7 @@ async function apiKeyAccounts(t, f) {
     const said = JSON.stringify([out, asked.seen]);
     t.check(asked.seen.questions.length === 2 &&
         asked.seen.questions.every((q) => q.kind === 'secret') &&
-        asked.seen.questions[1].problem?.includes('sk-ant-api') === true &&
+        asked.seen.questions[1].problem?.includes('does not look like an API key') === true &&
         out.message === 'Saved account "typed" (API key sk-ant-...Type).' &&
         !said.includes(TYPED_KEY.slice(13)), 'save --api-key asks for the key hidden, asks again on a bad one, and says only sk-ant-...last4', said);
     await t.throws(() => runDefinition('accounts.save', ctx, { agent: 'codex', name: 'x', apiKey: true }, fakeIO([]).io), 'for Claude accounts only', 'save --api-key is refused for another agent');

package/dist/selftest/agent-settings.test.js

@@ -43,6 +43,12 @@ export const agentSettingsSuite = {
         t.check(ANTHROPIC_KEY_PATTERN.test('sk-ant-usr01-' + body) && ANTHROPIC_KEY_PATTERN.test('sk-ant-api03-' + body), 'sk-ant-api03- and sk-ant-usr01- keys are accepted');
         t.check(!ANTHROPIC_KEY_PATTERN.test('sk-ant-usr1-x') && anthropicKeyProblem('sk-ant-usr1-x') !== null, 'a short or malformed key is refused');
         t.check(anthropicKeyProblem('sk-ant-usr01-' + body) === null, 'no problem for a user-workspace key');
+        t.check(anthropicKeyProblem('skt-ant-usr-' + 'b'.repeat(40)) === null &&
+            ANTHROPIC_KEY_PATTERN.test('skt-ant-usr-' + 'b'.repeat(40)), 'a key with any Console prefix (skt-ant-usr-...) is accepted');
+        t.check(anthropicKeyProblem('sk-ant-api03-' + 'c'.repeat(20) + ' x') !== null &&
+            anthropicKeyProblem('k'.repeat(19)) !== null, 'a key with a space, or under 20 characters, is refused');
+        t.check(anthropicKeyProblem('sk-ant-oat01-' + body)?.includes('subscription token') === true &&
+            anthropicKeyProblem('sk-ant-admin01-' + body)?.includes('Admin key') === true, 'a subscription token and an Admin key still get their own messages');
         t.section('Claude environment catalogue');
         const names = CLAUDE_ENV.map((s) => s.name);
         t.check(new Set(names).size === names.length, 'names are unique');

package/dist/shared/accounts/anthropic.d.ts

@@ -1,5 +1,5 @@
 export declare const ANTHROPIC_KEY_PATTERN: RegExp;
-/** The only part of a key ever shown: sk-ant-...abcd. */
+/** The only part of a key ever shown: its own prefix (sk-ant-, skt-ant-), then ..., then its last 4 characters. */
 export declare const ANTHROPIC_KEY_HINT: RegExp;
 /** What is wrong with a typed or found API key, or null when it has the right shape. Never quotes the key. */
 export declare function anthropicKeyProblem(key: string): string | null;

package/dist/shared/accounts/anthropic.js

@@ -1,15 +1,16 @@
-// The one shape of an Anthropic API key, for the host and the web (no node imports). A key from the Claude Console
-// starts with sk-ant-api, a key from a user workspace with sk-ant-usr.
-export const ANTHROPIC_KEY_PATTERN = /^sk-ant-(api|usr)\d{2}-[A-Za-z0-9_-]{20,400}$/;
-/** The only part of a key ever shown: sk-ant-...abcd. */
-export const ANTHROPIC_KEY_HINT = /^sk-ant-\.\.\.[A-Za-z0-9_-]{4}$/;
+// The shape of an Anthropic API key, for the host and the web (no node imports). Any key from the Claude Console is
+// accepted, whatever its prefix (sk-ant-api03-..., skt-ant-usr-... and others): only text with spaces or other odd
+// characters, or under 20 characters, is refused. Subscription tokens and Admin keys are refused by name.
+export const ANTHROPIC_KEY_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.-]{19,511}$/;
+/** The only part of a key ever shown: its own prefix (sk-ant-, skt-ant-), then ..., then its last 4 characters. */
+export const ANTHROPIC_KEY_HINT = /^([A-Za-z0-9]{1,8}-?[A-Za-z]*-?)?\.\.\.[A-Za-z0-9_.-]{4}$/;
 /** What is wrong with a typed or found API key, or null when it has the right shape. Never quotes the key. */
 export function anthropicKeyProblem(key) {
-    if (ANTHROPIC_KEY_PATTERN.test(key))
-        return null;
     if (key.startsWith('sk-ant-oat'))
         return 'That is a Claude subscription token (from claude setup-token), not an API key. Save the subscription login instead.';
     if (key.startsWith('sk-ant-admin'))
         return 'That is an Admin key: it cannot run Claude. Make an API key instead.';
-    return 'An Anthropic API key starts with sk-ant-api or sk-ant-usr and has only letters, digits, - and _ (copy it from the Claude Console).';
+    if (ANTHROPIC_KEY_PATTERN.test(key))
+        return null;
+    return 'That does not look like an API key: paste the whole key (letters, digits, - and _, no spaces).';
 }

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.0.0")]
-[assembly: AssemblyFileVersion("1.23.0.0")]
-[assembly: AssemblyInformationalVersion("1.23.0")]
+[assembly: AssemblyVersion("1.23.1.0")]
+[assembly: AssemblyFileVersion("1.23.1.0")]
+[assembly: AssemblyInformationalVersion("1.23.1")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.0.0")]
-[assembly: AssemblyFileVersion("1.23.0.0")]
-[assembly: AssemblyInformationalVersion("1.23.0")]
+[assembly: AssemblyVersion("1.23.1.0")]
+[assembly: AssemblyFileVersion("1.23.1.0")]
+[assembly: AssemblyInformationalVersion("1.23.1")]
 [assembly: ComVisible(false)]

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.0.0")]
-[assembly: AssemblyFileVersion("1.23.0.0")]
-[assembly: AssemblyInformationalVersion("1.23.0")]
+[assembly: AssemblyVersion("1.23.1.0")]
+[assembly: AssemblyFileVersion("1.23.1.0")]
+[assembly: AssemblyInformationalVersion("1.23.1")]
 [assembly: ComVisible(false)]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.23.0",
+  "version": "1.23.1",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",