windows-development-sandbox 1.23.2 → 1.25.1

package/dist/host/profile/claude-profile.d.ts

@@ -1,5 +1,13 @@
 import type { ClaudeProfileConfig, ProfileResult } from '../../core/types.js';
 import { type SecretsConfig } from './secrets.js';
+/**
+ * Which parts of your plugins folder are staged, as a filter over full paths. Everything Claude needs to load a plugin
+ * (installed_plugins.json, marketplaces, the plugin cache) is kept; when that is over the size cap, git history
+ * (`.git`) and then `node_modules` are left out, and the guest's plugins restore what they need on first use.
+ */
+export declare function pluginFilter(source: string, level: 0 | 1 | 2): (full: string) => boolean;
+/** The least trimmed level at which the plugins folder fits the cap, or null when even the most trimmed does not. */
+export declare function pluginTrimLevel(source: string): 0 | 1 | 2 | null;
 export declare function hostClaudeDir(settings: ClaudeProfileConfig): string;
 export declare function hostGlobalStateFile(settings: ClaudeProfileConfig): string;
 /**

package/dist/host/profile/claude-profile.js

@@ -5,17 +5,54 @@ import { dirExists, ensureDir, fileExists, homeDir, isLink, readJson, writeJson
 import { stripMcpServers, stripSettings } from './secrets.js';
 const MAX_BYTES = 250 * 1024 * 1024;
 /** Real files only: a link inside ~/.claude (even a loop or a dead one) is neither followed nor counted nor copied. */
-function directorySize(dir) {
+function directorySize(dir, keep = () => true) {
     let total = 0;
     for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
         const full = path.join(dir, entry.name);
+        if (!keep(full))
+            continue;
         if (entry.isDirectory())
-            total += directorySize(full);
+            total += directorySize(full, keep);
         else if (entry.isFile())
             total += fs.statSync(full).size;
     }
     return total;
 }
+/** Plugin leftovers Claude never reads: interrupted clones (temp_*) and marketplace backups. */
+function isPluginJunk(parts) {
+    const top = parts[0]?.toLowerCase();
+    const name = parts[1]?.toLowerCase() ?? '';
+    return (parts.length >= 2 &&
+        (top === 'cache' || top === 'marketplaces') &&
+        (name.startsWith('temp_') || name.endsWith('.backup') || name.endsWith('.staging')));
+}
+/**
+ * Which parts of your plugins folder are staged, as a filter over full paths. Everything Claude needs to load a plugin
+ * (installed_plugins.json, marketplaces, the plugin cache) is kept; when that is over the size cap, git history
+ * (`.git`) and then `node_modules` are left out, and the guest's plugins restore what they need on first use.
+ */
+export function pluginFilter(source, level) {
+    return (full) => {
+        if (full === source)
+            return true;
+        const parts = path.relative(source, full).split(path.sep);
+        if (isPluginJunk(parts))
+            return false;
+        if (level >= 1 && parts.includes('.git'))
+            return false;
+        if (level >= 2 && parts.includes('node_modules'))
+            return false;
+        return true;
+    };
+}
+/** The least trimmed level at which the plugins folder fits the cap, or null when even the most trimmed does not. */
+export function pluginTrimLevel(source) {
+    for (const level of [0, 1, 2]) {
+        if (directorySize(source, pluginFilter(source, level)) <= MAX_BYTES)
+            return level;
+    }
+    return null;
+}
 function validJson(file) {
     try {
         JSON.parse(fs.readFileSync(file, 'utf8').replace(/^\uFEFF/, ''));
@@ -84,14 +121,16 @@ export function stageClaudeProfile(settings, launchPath, workspaceHost, secrets)
                 fs.copyFileSync(source, destination);
         }
         else if (dirExists(source)) {
-            if (directorySize(source) > MAX_BYTES) {
+            const level = name === 'plugins' ? pluginTrimLevel(source) : directorySize(source) > MAX_BYTES ? null : 0;
+            if (level === null) {
                 result.skipped.push(name + ' (over 250 MB)');
                 continue;
             }
+            const keep = name === 'plugins' ? pluginFilter(source, level) : () => true;
             fs.cpSync(source, destination, {
                 recursive: true,
                 force: true,
-                filter: (from) => from === source || !isLink(from),
+                filter: (from) => from === source || (!isLink(from) && keep(from)),
             });
         }
         else {

package/dist/host/profile/index.d.ts

@@ -1,6 +1,6 @@
 export { isSecretName, isSecretValue, mayPass, stripMcpServers, stripSettings, stripVariables, type SecretsConfig, } from './secrets.js';
 export { findSecretFiles } from './secret-files.js';
-export { hostClaudeDir, hostGlobalStateFile, sandboxGlobalState, stageClaudeProfile } from './claude-profile.js';
+export { hostClaudeDir, hostGlobalStateFile, pluginFilter, pluginTrimLevel, sandboxGlobalState, stageClaudeProfile, } from './claude-profile.js';
 export { capturePersonalization } from './personalize.js';
 export { toRegFile, type RegValue } from './reg-file.js';
 export { AccountStore, accountsDir, type Account, type AccountMeta, type AccountRow } from './accounts.js';

package/dist/host/profile/index.js

@@ -1,6 +1,6 @@
 export { isSecretName, isSecretValue, mayPass, stripMcpServers, stripSettings, stripVariables, } from './secrets.js';
 export { findSecretFiles } from './secret-files.js';
-export { hostClaudeDir, hostGlobalStateFile, sandboxGlobalState, stageClaudeProfile } from './claude-profile.js';
+export { hostClaudeDir, hostGlobalStateFile, pluginFilter, pluginTrimLevel, sandboxGlobalState, stageClaudeProfile, } from './claude-profile.js';
 export { capturePersonalization } from './personalize.js';
 export { toRegFile } from './reg-file.js';
 export { AccountStore, accountsDir } from './accounts.js';

package/dist/runtime/agent.js

@@ -25650,7 +25650,7 @@ var ToolchainsSchema = external_exports.strictObject({
       `"auto" (default): on the sandbox's own disk when C: has 25 GB free at boot, else "separate" (builds then write through the mapped workspace, which can overload this PC's disk). "shared": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), "separate": <workspace>\\target\\sandbox (kept, no cross-talk), "local": on the sandbox's own disk (fastest, lost every boot), or a guest path.`
     ),
     linker: external_exports.enum(["lld", "gnu"]).describe(
-      `GNU host: "lld" links with Rust's own lld through MinGW's gcc (much less memory than GNU ld), "gnu" with GNU ld.`
+      `"lld" (default) links with Rust's own lld: through MinGW's gcc on the GNU host (much less memory than GNU ld), and instead of link.exe on the MSVC host (link.exe writes executables into mapped folders as all zeros: os error 1392). "gnu" keeps GNU ld / link.exe.`
     ),
     linkSlots: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(1).max(32)]).describe(
       'GNU host: how many programs may link at the same time in the whole sandbox (other links wait). "auto" = one per 6 GB of sandbox memory, 1 to 4 (the memory governor slows links down too when memory runs short).'
@@ -25669,7 +25669,7 @@ var ToolchainsSchema = external_exports.strictObject({
   }),
   unreal: external_exports.strictObject({
     enabled: enabled(
-      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.",
+      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. Visual Studio is installed once and kept on the data disk (~6.5 GB); later boots put it back in seconds. The engine itself comes from the Epic Games Launcher or its source.",
       "a .uproject or .uplugin"
     ),
     acceptLicense: external_exports.boolean().describe(
@@ -25678,11 +25678,8 @@ var ToolchainsSchema = external_exports.strictObject({
     components: StringsSchema.describe(
       'More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'
     ),
-    keepInstallFiles: external_exports.boolean().describe(
-      "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
-    ),
-    visualStudio: external_exports.enum(["full", "autosdk"]).describe(
-      `"full": install Visual Studio Community (the engine finds it through the Setup API; ~10 GB, redone every boot). "autosdk" (experimental): skip Visual Studio and build an Unreal AutoSDK tree from the portable MSVC in tools\\unreal\\autosdk (kept between sandboxes); UnrealBuildTool finds MSVC through AutoSDK, but the editor's Visual Studio integration is not available. Needs toolchains.msvc (turned on for you).`
+    visualStudio: external_exports.enum(["full", "buildtools"]).describe(
+      '"full": Visual Studio Community with the C++ game workload (the IDE, its debugger and Unreal integration). "buildtools": only the Visual Studio Build Tools (MSVC, the Windows SDK and the .NET Framework parts UnrealBuildTool needs; no IDE). Either is installed once and kept on the data disk (tools\\visualstudio\\persist, ~6.5 GB for Community); later boots put it back in seconds.'
     ),
     persistEngines: external_exports.boolean().describe(
       "Engines the Epic Games Launcher installs go to tools\\unreal\\engines (kept between sandboxes, 40-60 GB each) and are registered with the launcher again every boot. Off: they go on the sandbox disk and are lost when it closes. Engines installed on this PC can be mapped instead (pcInstalls.unrealEngines)."
@@ -25911,7 +25908,7 @@ var CHROME_DEVTOOLS_MCP_VERSION = "1.12.0";
 var BROWSER_USE_VERSION = "0.13.14";
 var PERPLEXITY_COMPUTER_MCP_URL = "https://www.perplexity.ai/rest/computer/mcp";
 var COMET_SIGNER = {
-  subject: ['^CN="?PERPLEXITY AI, INC\\.?"?(,|$)', '(^|, )O="?PERPLEXITY AI, INC\\.?"?(,|$)'],
+  subject: ['(^|, )CN="?PERPLEXITY AI, INC\\.?"?(,|$)', '(^|, )O="?PERPLEXITY AI, INC\\.?"?(,|$)'],
   issuer: ["^CN=GlobalSign GCC R45 EV CodeSigning CA 2020(,|$)"]
 };
 var EDGE_EXE = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe";
@@ -26013,7 +26010,77 @@ var AGENTS_WEB_APPS = [
 ];
 
 // src/shared/apps/catalogue-gamedev.ts
-var GAMEDEV_APPS = [];
+var GAMEDEV_APPS = [
+  {
+    id: "krita",
+    name: "Krita",
+    category: "gamedev",
+    about: "Painting and texture editor (PSD, layers, brushes), checked against the SHA-256 download.kde.org publishes.",
+    size: "450 MB",
+    source: { resolve: "krita" },
+    exe: "krita.exe",
+    needs: ["mesa"]
+  },
+  {
+    id: "inkscape",
+    name: "Inkscape",
+    category: "gamedev",
+    about: "Vector graphics for UI, icons and 2D art (SVG), checked against the SHA-256 inkscape.org publishes.",
+    size: "400 MB",
+    source: { resolve: "inkscape" },
+    exe: "inkscape.exe",
+    needs: ["7zip"]
+  },
+  {
+    id: "audacity",
+    name: "Audacity",
+    category: "gamedev",
+    about: "Records and edits sound effects and music (WAV, OGG, FLAC).",
+    size: "80 MB",
+    source: { github: "audacity/audacity", asset: "^audacity-win-[\\d.]+-(?:64bit\\.zip|x86_64\\.7z)$" },
+    exe: "Audacity.exe",
+    needs: ["7zip"]
+  },
+  {
+    id: "renderdoc",
+    name: "RenderDoc",
+    category: "gamedev",
+    about: "Captures a frame of a game (Unreal's -d3d12/-vulkan builds) to inspect every draw call, texture and shader. Needs the sandbox's GPU (vGPU) for live captures.",
+    size: "70 MB",
+    source: { resolve: "renderdoc" },
+    exe: "qrenderdoc.exe"
+  },
+  {
+    id: "f3d",
+    name: "F3D",
+    category: "gamedev",
+    about: "Fast 3D viewer (FBX, glTF/GLB, OBJ, STL, PLY, 3DS, USD); renders still previews from the command line.",
+    size: "100 MB",
+    source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
+    exe: "f3d.exe",
+    needs: ["mesa"]
+  },
+  {
+    id: "imagemagick",
+    name: "ImageMagick",
+    category: "gamedev",
+    about: "Converts and thumbnails textures (TGA, PSD, DDS, EXR, HDR) and builds contact sheets (magick montage).",
+    size: "150 MB",
+    source: { github: "ImageMagick/ImageMagick", asset: "^ImageMagick-[\\d.]+-\\d+-portable-Q16-HDRI-x64\\.7z$" },
+    exe: "magick.exe",
+    cli: true,
+    needs: ["7zip"]
+  },
+  {
+    id: "nomacs",
+    name: "nomacs",
+    category: "gamedev",
+    about: "Image viewer for textures (TGA, PSD, DDS, EXR).",
+    size: "60 MB",
+    source: { github: "nomacs/nomacs", asset: "^nomacs-portable-win\\.zip$" },
+    exe: "nomacs.exe"
+  }
+];
 
 // src/shared/apps/catalogue-mobile.ts
 var MOBILE_APPS = [];
@@ -27242,10 +27309,14 @@ var PcInstallsSchema = external_exports.strictObject({
     "Epic Games Launcher games (by their app name)",
     '["Fortnite"]'
   ),
-  unrealEngines: pick2(
-    external_exports.string().regex(/^(UE_)?\d+\.\d+$/),
-    "Unreal Engine versions installed with the Epic Games Launcher",
-    '["5.4"]'
+  unrealEngines: external_exports.union([external_exports.literal("auto"), external_exports.boolean(), external_exports.array(external_exports.string().regex(/^(UE_)?\d+\.\d+$/))]).describe(
+    'Unreal Engine versions installed on this PC (with the Epic Games Launcher, or source builds it lists), read-only in the sandbox under C:\\PcInstalls\\unreal and registered there, so projects build with them without a download. "auto" = all of them whenever the sandbox is set up for Unreal, true = always, false = never, or a list (e.g. ["5.4"]).'
+  ),
+  unrealEngineFolders: external_exports.array(external_exports.string().min(3).max(260)).max(8).describe(
+    "Unreal Engine folders of this PC to use in the sandbox, writable (a source build, or a copy you build plugins into): each must hold Engine\\Build\\Build.version. Mapped under C:\\PcInstalls\\unreal and registered there."
+  ),
+  unrealAssets: external_exports.union([external_exports.literal("auto"), external_exports.boolean()]).describe(
+    `The Epic Games Launcher's vault cache of this PC (the Fab and Marketplace packs you downloaded), read-only in the sandbox at C:\\PcInstalls\\unreal\\Vault: what you download on your PC is there for the agents at once. "auto" = whenever the sandbox is set up for Unreal, true = always, false = never.`
   ),
   unityEditors: pick2(
     external_exports.string().regex(/^\d+\.\d+\.\d+[abfp]\d+$/),
@@ -27852,36 +27923,45 @@ function mkdirp(p) {
 import fs6 from "node:fs";
 import path7 from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
+
+// src/guest/runtime/log-line.ts
+var ESCAPES = /\x1b\[[0-9;?]{0,32}[A-Za-z]/g;
+function plainText(text) {
+  return text.replace(ESCAPES, "");
+}
+function fileLines(message, at = /* @__PURE__ */ new Date(), task) {
+  const stamp = at.toISOString() + " " + (task ? "[" + task + "] " : "");
+  return plainText(message).split(/\r?\n/).filter((line) => line.trim() !== "").map((line) => stamp + line.trimEnd());
+}
+
+// src/guest/runtime/log.ts
 fs6.mkdirSync(logsDir, { recursive: true });
 var logFile = path7.join(
   logsDir,
   (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log"
 );
 var context = new AsyncLocalStorage();
-function fileLine(message, at = /* @__PURE__ */ new Date()) {
-  return at.toISOString() + " " + message;
-}
-var append = (line) => {
+var sink = null;
+var append = (message, ctx) => {
   try {
-    fs6.appendFileSync(logFile, fileLine(line) + "\n");
+    const lines = fileLines(message, /* @__PURE__ */ new Date(), ctx?.task);
+    if (lines.length) fs6.appendFileSync(logFile, lines.join("\n") + "\n");
   } catch {
   }
 };
-var tagged = (message, ctx) => {
-  const prefix = ctx?.prefix?.();
-  return prefix ? prefix + " | " + message : message;
-};
 function log(message) {
   const ctx = context.getStore();
-  const line = tagged(message, ctx);
-  if (!ctx?.quiet) console.log(line);
-  append(line);
+  append(message, ctx);
+  if (ctx?.quiet) return;
+  if (sink) sink.line(message, ctx?.stage);
+  else console.log(message);
 }
 function warn(message) {
   const ctx = context.getStore();
-  const line = tagged(message, ctx);
-  if (!ctx?.quiet) console.warn("\x1B[33mWARNING: " + line + "\x1B[0m");
-  append("WARNING: " + line);
+  append("WARNING: " + message, ctx);
+  if (ctx?.quiet) return;
+  if (sink) sink.warning(message);
+  else console.warn("\x1B[33mWARNING: " + message + "\x1B[0m");
 }
 
 // src/guest/toolchains/tool-env.ts
@@ -28177,24 +28257,56 @@ var githubAssetFromPage = async (repo, pattern, searchOlder) => {
 };
 
 // src/guest/runtime/process.ts
+var outputSink = null;
+var captureOutput = () => outputSink?.capturing() ?? false;
+function logOutput(text) {
+  for (const line of text.split(/\r?\n/)) if (line.trim()) outputSink?.line(line.trimEnd());
+}
+var CAPTURE_BYTES = 64 * 1024 * 1024;
+var LINE_CHARS = 2e3;
+function logLines(stream) {
+  if (!stream) return;
+  let partial2 = "";
+  stream.setEncoding("utf8");
+  stream.on("data", (chunk) => {
+    const lines = (partial2 + chunk).split(/\r?\n/);
+    partial2 = lines.pop().slice(0, LINE_CHARS);
+    logOutput(lines.map((l) => l.slice(0, LINE_CHARS)).join("\n"));
+  });
+  stream.on("end", () => logOutput(partial2));
+}
 async function execAsync(file2, args, options = {}) {
-  const code = await spawnAsync(file2, args, { stdio: "inherit", ...options });
+  const code = captureOutput() ? await new Promise((resolve, reject) => {
+    const child = spawn2(file2, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...options });
+    logLines(child.stdout);
+    logLines(child.stderr);
+    child.once("error", reject);
+    child.once("close", (c) => resolve(c ?? -1));
+  }) : await spawnAsync(file2, args, { stdio: "inherit", ...options });
   if (code !== 0)
     throw new Error(path11.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
+function scriptErrors(errors) {
+  if (!errors) return;
+  if (captureOutput()) logOutput(errors);
+  else process.stderr.write(errors + "\n");
+}
 function execOutput(file2, args, options = {}) {
   const result = spawnSync(file2, args, { encoding: "utf8", windowsHide: true, ...options });
   return result.status === 0 ? String(result.stdout ?? "").trim() : "";
 }
 function runScript(name, args = []) {
+  const capture = captureOutput();
   const result = spawnSync(SYSTEM.powershell(), scriptArgs(name, args), {
-    stdio: ["inherit", "inherit", "pipe"],
+    stdio: ["inherit", capture ? "pipe" : "inherit", "pipe"],
     encoding: "utf8",
-    windowsHide: true
+    windowsHide: true,
+    ...capture ? { maxBuffer: CAPTURE_BYTES } : {}
   });
+  if (capture) logOutput(String(result.stdout ?? ""));
   if (result.error) throw result.error;
   const errors = String(result.stderr ?? "").trim();
-  if (errors) process.stderr.write(errors + "\n");
+  scriptErrors(errors);
   if (result.status !== 0)
     throw new Error(name + " failed with exit code " + result.status + (errors ? ": " + errors.slice(0, 400) : ""));
 }
@@ -28381,9 +28493,12 @@ function agentCommand(name, harness) {
   return harness.npmBin ?? harness.uvBin ?? (harness.hostExecutable ?? name).replace(/\.exe$/i, "");
 }
 var CODEX_MARKER = "# Set by the sandbox";
+var CODEX_MARKER_LINE = CODEX_MARKER + " from its codex settings (`sandbox config`); a line of your own without it wins.";
+var CODEX_MARKERS = [CODEX_MARKER, "# agent-sandbox:"];
+var CODEX_OWNED_KEYS = ["sandbox_mode", "approval_policy", "model", "model_reasoning_effort"];
 var MAX_CODEX_CONFIG_BYTES = 1024 * 1024;
 var MARKED_LINES = new RegExp(
-  "^" + CODEX_MARKER + "[^\r\n]*\r?\n(?:(?:sandbox_mode|approval_policy)[ 	]*=[^\r\n]*\r?\n)*(?:[ 	]*\r?\n)?",
+  "^(?:" + CODEX_MARKERS.join("|") + ")[^\r\n]*\r?\n(?:(?:" + CODEX_OWNED_KEYS.join("|") + ")[ 	]*=[^\r\n]*(?:\r?\n|$))*(?:[ 	]*\r?\n)?",
   "m"
 );