windows-development-sandbox 1.23.0 → 1.23.2

package/dist/bin/agent-sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/agent-sandbox.ts
 run(process.argv.slice(2));

package/dist/bin/{chunk-JETGP2C3.js → chunk-7YPEDAJD.js}

@@ -251,7 +251,7 @@ import {
   withOperationCommands,
   working,
   writeJson
-} from "./chunk-ZTTOF5V3.js";
+} from "./chunk-USTRSHIE.js";
 
 // node_modules/commander/lib/error.js
 var require_error = __commonJS({

package/dist/bin/{chunk-XZKOPGNH.js → chunk-QFSJX2KW.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   attach
-} from "./chunk-ZTTOF5V3.js";
+} from "./chunk-USTRSHIE.js";
 export {
   attach
 };

package/dist/bin/{chunk-ZTTOF5V3.js → chunk-USTRSHIE.js}

@@ -56595,14 +56595,14 @@ function cometSummary(p) {
 }
 
 // src/shared/accounts/anthropic.ts
-var ANTHROPIC_KEY_PATTERN = /^sk-ant-(api|usr)\d{2}-[A-Za-z0-9_-]{20,400}$/;
-var ANTHROPIC_KEY_HINT = /^sk-ant-\.\.\.[A-Za-z0-9_-]{4}$/;
+var ANTHROPIC_KEY_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.-]{19,511}$/;
+var ANTHROPIC_KEY_HINT = /^([A-Za-z0-9]{1,8}-?[A-Za-z]*-?)?\.\.\.[A-Za-z0-9_.-]{4}$/;
 function anthropicKeyProblem(key3) {
-  if (ANTHROPIC_KEY_PATTERN.test(key3)) return null;
   if (key3.startsWith("sk-ant-oat"))
     return "That is a Claude subscription token (from claude setup-token), not an API key. Save the subscription login instead.";
   if (key3.startsWith("sk-ant-admin")) return "That is an Admin key: it cannot run Claude. Make an API key instead.";
-  return "An Anthropic API key starts with sk-ant-api or sk-ant-usr and has only letters, digits, - and _ (copy it from the Claude Console).";
+  if (ANTHROPIC_KEY_PATTERN.test(key3)) return null;
+  return "That does not look like an API key: paste the whole key (letters, digits, - and _, no spaces).";
 }
 
 // src/core/local-config/file.ts
@@ -57556,7 +57556,8 @@ import path70 from "node:path";
 var LOGIN_KINDS = ["subscription", "console", "api-key"];
 var apiKeyProblem = anthropicKeyProblem;
 function maskApiKey(key3) {
-  return "sk-ant-..." + key3.slice(-4);
+  const prefix = /^[A-Za-z0-9]{1,8}-[A-Za-z]{1,8}-/.exec(key3)?.[0] ?? "";
+  return prefix + "..." + key3.slice(-4);
 }
 function approvalOf(key3) {
   return key3.trim().slice(-20);
@@ -82441,7 +82442,7 @@ async function attachOpened(ctx, session) {
     nextStep("sandbox attach " + session);
     return 0;
   }
-  const { attach: attach2 } = await import("./chunk-XZKOPGNH.js");
+  const { attach: attach2 } = await import("./chunk-QFSJX2KW.js");
   return attach2({ ...ctx, options: { ...ctx.options, positionals: [session] } });
 }
 function definitionHandler(def) {

package/dist/bin/claude-host.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/claude-host.ts
 var args = process.argv.slice(2);

package/dist/bin/claude-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/claude-sbx.ts
 run(process.argv.slice(2), { harness: "claude" });

package/dist/bin/codex-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/codex-sbx.ts
 run(process.argv.slice(2), { harness: "codex" });

package/dist/bin/gemini-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/gemini-sbx.ts
 run(process.argv.slice(2), { harness: "gemini" });

package/dist/bin/sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/sandbox.ts
 run(process.argv.slice(2));

package/dist/bin/sbx-hide.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/sbx-hide.ts
 run(process.argv.slice(2), { command: "hide" });

package/dist/bin/sbx-show.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-JETGP2C3.js";
-import "./chunk-ZTTOF5V3.js";
+} from "./chunk-7YPEDAJD.js";
+import "./chunk-USTRSHIE.js";
 
 // src/bin/sbx-show.ts
 run(process.argv.slice(2), { command: "show" });

package/dist/guest/toolchains/native/vs-request.d.ts

@@ -21,7 +21,11 @@ export declare function visualStudioWanted(t: Toolchains, on?: (setting: boolean
 export declare function unrealUsesAutosdk(t: Toolchains, on?: (setting: boolean | 'auto', name: string) => boolean): boolean;
 /** The Visual Studio installer's exit code in plain words (it is a uint32: -1 and 4294967295 are the same). */
 export declare function vsExitText(code: number): string;
-/** Room the staging copy of the layout needs on the sandbox's own disk, on top of the reserve. */
+/**
+ * Room the staging copy of the layout needs on the sandbox's own disk, on top of the reserve. The layout of the Unreal
+ * components is about the size of their download (5-8 GB); the sandbox's ~40 GB disk has about 14 GB free at boot
+ * (a fixed paging file takes 16 GB), so the estimate must stay under that. A layout that outgrows it fails cleanly.
+ */
 export declare const LAYOUT_STAGING_BYTES: number;
 /** Spare room on the sandbox's disk while the layout is built there (before Visual Studio is installed). */
 export declare const STAGING_RESERVE_BYTES: number;

package/dist/guest/toolchains/native/vs-request.js

@@ -74,10 +74,14 @@ export function vsExitText(code) {
             return 'the installer failed with exit ' + c + ' (0x' + c.toString(16).toUpperCase() + ')';
     }
 }
-/** Room the staging copy of the layout needs on the sandbox's own disk, on top of the reserve. */
-export const LAYOUT_STAGING_BYTES = 12 * 1024 ** 3;
+/**
+ * Room the staging copy of the layout needs on the sandbox's own disk, on top of the reserve. The layout of the Unreal
+ * components is about the size of their download (5-8 GB); the sandbox's ~40 GB disk has about 14 GB free at boot
+ * (a fixed paging file takes 16 GB), so the estimate must stay under that. A layout that outgrows it fails cleanly.
+ */
+export const LAYOUT_STAGING_BYTES = 8 * 1024 ** 3;
 /** Spare room on the sandbox's disk while the layout is built there (before Visual Studio is installed). */
-export const STAGING_RESERVE_BYTES = 3 * 1024 ** 3;
+export const STAGING_RESERVE_BYTES = 1.5 * 1024 ** 3;
 /**
  * What to do after the layout attempt in the data disk: 'done' when it worked, 'stage' (build it on the sandbox's
  * own disk and copy it over) when it failed and that disk has room, 'skip' (download this boot) otherwise.

package/dist/host/profile/claude-login.d.ts

@@ -17,9 +17,9 @@ export interface CaptureOptions {
     /** ANTHROPIC_API_KEY of this PC: the last place looked at (--from-host only). */
     readonly envKey?: string | null;
 }
-/** What is wrong with a typed or found API key (sk-ant-api or sk-ant-usr), or null. Never quotes the key. */
+/** What is wrong with a typed or found API key (any Claude Console key), or null. Never quotes the key. */
 export declare const apiKeyProblem: typeof anthropicKeyProblem;
-/** The most of a key that is ever shown: sk-ant-...abcd. */
+/** The most of a key that is ever shown: its prefix (sk-ant-...abcd, skt-ant-...abcd), then its last 4 characters. */
 export declare function maskApiKey(key: string): string;
 export interface LoginFiles {
     readonly claudeDir: string;

package/dist/host/profile/claude-login.js

@@ -14,11 +14,12 @@ import { assertTestWritable } from '../test-guard.js';
 import { hostDataFolder, hostDataRoot } from '../storage/index.js';
 import { assertNoLinks, fail, fileExists, isLink, removeLink, tryReadJson, writeJson } from '../../core/util/index.js';
 export const LOGIN_KINDS = ['subscription', 'console', 'api-key'];
-/** What is wrong with a typed or found API key (sk-ant-api or sk-ant-usr), or null. Never quotes the key. */
+/** What is wrong with a typed or found API key (any Claude Console key), or null. Never quotes the key. */
 export const apiKeyProblem = anthropicKeyProblem;
-/** The most of a key that is ever shown: sk-ant-...abcd. */
+/** The most of a key that is ever shown: its prefix (sk-ant-...abcd, skt-ant-...abcd), then its last 4 characters. */
 export function maskApiKey(key) {
-    return 'sk-ant-...' + key.slice(-4);
+    const prefix = /^[A-Za-z0-9]{1,8}-[A-Za-z]{1,8}-/.exec(key)?.[0] ?? '';
+    return prefix + '...' + key.slice(-4);
 }
 /** What Claude Code records in customApiKeyResponses for a key it may use (its last 20 characters). */
 function approvalOf(key) {

package/dist/runtime/daemon.js

@@ -32993,8 +32993,8 @@ function vsExitText(code) {
       return "the installer failed with exit " + c + " (0x" + c.toString(16).toUpperCase() + ")";
   }
 }
-var LAYOUT_STAGING_BYTES = 12 * 1024 ** 3;
-var STAGING_RESERVE_BYTES = 3 * 1024 ** 3;
+var LAYOUT_STAGING_BYTES = 8 * 1024 ** 3;
+var STAGING_RESERVE_BYTES = 1.5 * 1024 ** 3;
 function layoutNextStep(exit, localFreeBytes, reserveBytes) {
   if (exit !== null && (exit === 0 || exit === 3010)) return "done";
   return localFreeBytes >= LAYOUT_STAGING_BYTES + reserveBytes ? "stage" : "skip";

package/dist/runtime/main.js

@@ -32442,8 +32442,8 @@ function vsExitText(code) {
       return "the installer failed with exit " + c + " (0x" + c.toString(16).toUpperCase() + ")";
   }
 }
-var LAYOUT_STAGING_BYTES = 12 * 1024 ** 3;
-var STAGING_RESERVE_BYTES = 3 * 1024 ** 3;
+var LAYOUT_STAGING_BYTES = 8 * 1024 ** 3;
+var STAGING_RESERVE_BYTES = 1.5 * 1024 ** 3;
 function layoutNextStep(exit, localFreeBytes, reserveBytes) {
   if (exit !== null && (exit === 0 || exit === 3010)) return "done";
   return localFreeBytes >= LAYOUT_STAGING_BYTES + reserveBytes ? "stage" : "skip";

package/dist/selftest/accounts.test.js

@@ -263,7 +263,7 @@ async function apiKeyAccounts(t, f) {
     const said = JSON.stringify([out, asked.seen]);
     t.check(asked.seen.questions.length === 2 &&
         asked.seen.questions.every((q) => q.kind === 'secret') &&
-        asked.seen.questions[1].problem?.includes('sk-ant-api') === true &&
+        asked.seen.questions[1].problem?.includes('does not look like an API key') === true &&
         out.message === 'Saved account "typed" (API key sk-ant-...Type).' &&
         !said.includes(TYPED_KEY.slice(13)), 'save --api-key asks for the key hidden, asks again on a bad one, and says only sk-ant-...last4', said);
     await t.throws(() => runDefinition('accounts.save', ctx, { agent: 'codex', name: 'x', apiKey: true }, fakeIO([]).io), 'for Claude accounts only', 'save --api-key is refused for another agent');

package/dist/selftest/agent-settings.test.js

@@ -43,6 +43,12 @@ export const agentSettingsSuite = {
         t.check(ANTHROPIC_KEY_PATTERN.test('sk-ant-usr01-' + body) && ANTHROPIC_KEY_PATTERN.test('sk-ant-api03-' + body), 'sk-ant-api03- and sk-ant-usr01- keys are accepted');
         t.check(!ANTHROPIC_KEY_PATTERN.test('sk-ant-usr1-x') && anthropicKeyProblem('sk-ant-usr1-x') !== null, 'a short or malformed key is refused');
         t.check(anthropicKeyProblem('sk-ant-usr01-' + body) === null, 'no problem for a user-workspace key');
+        t.check(anthropicKeyProblem('skt-ant-usr-' + 'b'.repeat(40)) === null &&
+            ANTHROPIC_KEY_PATTERN.test('skt-ant-usr-' + 'b'.repeat(40)), 'a key with any Console prefix (skt-ant-usr-...) is accepted');
+        t.check(anthropicKeyProblem('sk-ant-api03-' + 'c'.repeat(20) + ' x') !== null &&
+            anthropicKeyProblem('k'.repeat(19)) !== null, 'a key with a space, or under 20 characters, is refused');
+        t.check(anthropicKeyProblem('sk-ant-oat01-' + body)?.includes('subscription token') === true &&
+            anthropicKeyProblem('sk-ant-admin01-' + body)?.includes('Admin key') === true, 'a subscription token and an Admin key still get their own messages');
         t.section('Claude environment catalogue');
         const names = CLAUDE_ENV.map((s) => s.name);
         t.check(new Set(names).size === names.length, 'names are unique');

package/dist/selftest/persisted-installs.test.js

@@ -144,9 +144,10 @@ export const persistedInstallsSuite = {
         t.check(layoutNextStep(0, 0, reserve) === 'done' &&
             layoutNextStep(3762504530, room(40 * GB), reserve) === 'stage' &&
             layoutNextStep(3762504530, room(20 * GB), reserve) === 'skip' &&
-            layoutNextStep(null, room(40 * GB), reserve) === 'stage', 'a failed layout is built on the sandbox disk only with room for it (12 GB plus the reserve)');
-        t.check(layoutNextStep(null, room(15 * GB), STAGING_RESERVE_BYTES) === 'stage' &&
-            layoutNextStep(null, room(14 * GB), STAGING_RESERVE_BYTES) === 'skip', 'before Visual Studio is installed, 15 GB free on C: is enough to build the install files there');
+            layoutNextStep(null, room(40 * GB), reserve) === 'stage', 'a failed layout is built on the sandbox disk only with room for it (8 GB plus the reserve)');
+        t.check(layoutNextStep(null, room(14 * GB), STAGING_RESERVE_BYTES) === 'stage' &&
+            layoutNextStep(null, room(9.5 * GB), STAGING_RESERVE_BYTES) === 'stage' &&
+            layoutNextStep(null, room(9 * GB), STAGING_RESERVE_BYTES) === 'skip', 'before Visual Studio is installed, the ~14 GB free at boot is enough to build the install files (9.5 GB needed)');
         t.equal(freeBytesAt(path.join(t.dir('layout-room'), 'not', 'there'), () => ({ bavail: 3, bsize: 2 })), 6, 'free room of a folder that does not exist asks its parent');
         t.equal(freeBytesAt(t.dir('layout-room'), () => {
             throw new Error('no');

package/dist/shared/accounts/anthropic.d.ts

@@ -1,5 +1,5 @@
 export declare const ANTHROPIC_KEY_PATTERN: RegExp;
-/** The only part of a key ever shown: sk-ant-...abcd. */
+/** The only part of a key ever shown: its own prefix (sk-ant-, skt-ant-), then ..., then its last 4 characters. */
 export declare const ANTHROPIC_KEY_HINT: RegExp;
 /** What is wrong with a typed or found API key, or null when it has the right shape. Never quotes the key. */
 export declare function anthropicKeyProblem(key: string): string | null;

package/dist/shared/accounts/anthropic.js

@@ -1,15 +1,16 @@
-// The one shape of an Anthropic API key, for the host and the web (no node imports). A key from the Claude Console
-// starts with sk-ant-api, a key from a user workspace with sk-ant-usr.
-export const ANTHROPIC_KEY_PATTERN = /^sk-ant-(api|usr)\d{2}-[A-Za-z0-9_-]{20,400}$/;
-/** The only part of a key ever shown: sk-ant-...abcd. */
-export const ANTHROPIC_KEY_HINT = /^sk-ant-\.\.\.[A-Za-z0-9_-]{4}$/;
+// The shape of an Anthropic API key, for the host and the web (no node imports). Any key from the Claude Console is
+// accepted, whatever its prefix (sk-ant-api03-..., skt-ant-usr-... and others): only text with spaces or other odd
+// characters, or under 20 characters, is refused. Subscription tokens and Admin keys are refused by name.
+export const ANTHROPIC_KEY_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_.-]{19,511}$/;
+/** The only part of a key ever shown: its own prefix (sk-ant-, skt-ant-), then ..., then its last 4 characters. */
+export const ANTHROPIC_KEY_HINT = /^([A-Za-z0-9]{1,8}-?[A-Za-z]*-?)?\.\.\.[A-Za-z0-9_.-]{4}$/;
 /** What is wrong with a typed or found API key, or null when it has the right shape. Never quotes the key. */
 export function anthropicKeyProblem(key) {
-    if (ANTHROPIC_KEY_PATTERN.test(key))
-        return null;
     if (key.startsWith('sk-ant-oat'))
         return 'That is a Claude subscription token (from claude setup-token), not an API key. Save the subscription login instead.';
     if (key.startsWith('sk-ant-admin'))
         return 'That is an Admin key: it cannot run Claude. Make an API key instead.';
-    return 'An Anthropic API key starts with sk-ant-api or sk-ant-usr and has only letters, digits, - and _ (copy it from the Claude Console).';
+    if (ANTHROPIC_KEY_PATTERN.test(key))
+        return null;
+    return 'That does not look like an API key: paste the whole key (letters, digits, - and _, no spaces).';
 }

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.0.0")]
-[assembly: AssemblyFileVersion("1.23.0.0")]
-[assembly: AssemblyInformationalVersion("1.23.0")]
+[assembly: AssemblyVersion("1.23.2.0")]
+[assembly: AssemblyFileVersion("1.23.2.0")]
+[assembly: AssemblyInformationalVersion("1.23.2")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.0.0")]
-[assembly: AssemblyFileVersion("1.23.0.0")]
-[assembly: AssemblyInformationalVersion("1.23.0")]
+[assembly: AssemblyVersion("1.23.2.0")]
+[assembly: AssemblyFileVersion("1.23.2.0")]
+[assembly: AssemblyInformationalVersion("1.23.2")]
 [assembly: ComVisible(false)]

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.0.0")]
-[assembly: AssemblyFileVersion("1.23.0.0")]
-[assembly: AssemblyInformationalVersion("1.23.0")]
+[assembly: AssemblyVersion("1.23.2.0")]
+[assembly: AssemblyFileVersion("1.23.2.0")]
+[assembly: AssemblyInformationalVersion("1.23.2")]
 [assembly: ComVisible(false)]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.23.0",
+  "version": "1.23.2",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",