windows-development-sandbox 1.23.2 → 1.25.1

package/dist/selftest/support/unreal-sample.js

@@ -0,0 +1,83 @@
+export const UNREAL_SAMPLE = {
+    setUp: true,
+    checkedAt: '2026-11-04T12:00:00.000Z',
+    engines: [
+        {
+            id: 'UE_5.6',
+            version: '5.6.1',
+            dir: 'C:\\PcInstalls\\unreal\\UE_5.6',
+            where: 'this PC, read-only',
+            writable: false,
+            build: 'installed',
+            sizeBytes: null,
+            projects: ['ShooterGame'],
+        },
+        {
+            id: 'UE_5.4',
+            version: '5.4.4',
+            dir: 'C:\\AgentData\\tools\\unreal\\engines\\UE_5.4',
+            where: 'Epic Games Launcher, data disk',
+            writable: true,
+            build: 'installed',
+            sizeBytes: 48 * 1024 ** 3,
+            projects: [],
+        },
+    ],
+    projects: [{ project: 'ShooterGame', engine: 'UE_5.6', reason: 'the project asks for 5.6' }],
+    launcher: {
+        installed: true,
+        installLocation: 'C:\\AgentData\\tools\\unreal\\engines',
+        problem: null,
+        free: '812 GB',
+    },
+    visualStudio: {
+        version: '17.14.37827.9',
+        path: 'C:\\AgentData\\tools\\visualstudio\\persist\\Community',
+        how: 'kept on the data disk',
+        check: 'Visual Studio 17.14.37827.9, MSVC 14.44.35207, Windows SDK 10.0.22621.0',
+        ok: true,
+    },
+    debugger: 'C:\\AgentData\\tools\\visualstudio\\persist\\WindowsKits10\\Debuggers\\x64\\cdb.exe',
+    ddc: 'C:\\AgentData\\tools\\unreal\\ddc',
+    mcpUrl: null,
+    pc: {
+        setting: 'auto',
+        engines: [
+            {
+                id: 'UE_5.6',
+                name: 'Unreal Engine 5.6.1',
+                folder: 'C:\\Program Files\\Epic Games\\UE_5.6',
+                writable: false,
+                source: false,
+            },
+            {
+                id: 'dir-UnrealEngine',
+                name: 'Unreal Engine 5.7.0 (UnrealEngine)',
+                folder: 'D:\\Src\\UnrealEngine',
+                writable: true,
+                source: false,
+            },
+        ],
+        problem: null,
+    },
+    vault: {
+        setting: 'auto',
+        folders: [
+            {
+                folder: 'C:\\ProgramData\\Epic\\EpicGamesLauncher\\VaultCache',
+                packs: [
+                    { name: 'CityParkEnvironment', size: '2.1 GB', kind: 'content' },
+                    { name: 'ToolkitPlugin', size: '45 MB', kind: 'plugin' },
+                ],
+                more: 0,
+            },
+        ],
+    },
+    settings: {
+        enabled: 'auto',
+        acceptLicense: true,
+        persistEngines: true,
+        derivedDataCache: 'persisted',
+        visualStudio: 'full',
+    },
+};

package/dist/selftest/toolchains.test.js

@@ -8,12 +8,12 @@ import { decidePwsh, pcHasPwsh, PWSH_MAX_BYTES, readPwshScripts, usesPwsh } from
 import { projectFolderLines, toolLines } from '../guest/boot/guide-lines.js';
 import { binstallAsset, CLI_TOOLS, decideCli, pwshAsset } from '../guest/toolchains/catalogue.js';
 import { missingExtensions, vscodeExtensions, vscodeSettings } from '../guest/toolchains/tools/vscode-profile.js';
-import { addonGuideLine, addonMcpServer, APP_CATEGORIES, APPS, appsNeedMesa, appsNeedUv, appsToInstall, CCUSAGE_VERSION, claudeManagedSettings, CONTEXT7_MCP_VERSION, exeMatcher, HEADROOM_VERSION, headroomArgs, headroomEnv, headroomUrl, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, withAddonMcpServers, } from '../shared/apps/index.js';
+import { addonGuideLine, addonMcpServer, APP_CATEGORIES, APPS, associationPlan, appsNeedMesa, appsNeedUv, appsToInstall, CCUSAGE_VERSION, claudeManagedSettings, CONTEXT7_MCP_VERSION, exeMatcher, HEADROOM_VERSION, headroomArgs, headroomEnv, headroomUrl, PLAYWRIGHT_MCP_VERSION, previewGuideLine, RTK_VERSION, withAddonMcpServers, } from '../shared/apps/index.js';
 import { ConfigSchema, LocalOverridesSchema } from '../core/schema/index.js';
 export const toolchainsSuite = {
     name: 'toolchains',
     title: 'version pickers, release assets, PowerShell 7 and CLI tool decisions',
-    run: (t) => {
+    run: async (t) => {
         t.section('version pickers');
         const releases = [
             { version: 'v23.1.0', lts: false },
@@ -198,6 +198,36 @@ export const toolchainsSuite = {
         t.check(ids.every((id, i) => ids.indexOf(id) === i) &&
             APPS.every((a) => APP_CATEGORIES.some((c) => c.id === a.category)) &&
             !APPS.some(badPattern), 'apps: ids are unique, every app is in a known category, every GitHub asset pattern compiles');
+        t.section('asset preview apps');
+        const previewPick = (id, files) => {
+            const source = APPS.find((x) => x.id === id)?.source;
+            const re = new RegExp(source && 'github' in source ? source.asset : '$^');
+            return files.filter((f) => re.test(f));
+        };
+        t.check(['f3d', 'imagemagick', 'nomacs'].every((id) => APPS.some((a) => a.id === id && a.category === 'gamedev')) &&
+            previewPick('f3d', [
+                'F3D-4.0.1-Windows-x86_64.zip',
+                'F3D-4.0.1-Windows-x86_64.exe',
+                'F3D-4.0.1-Windows-x86_64-raytracing.zip',
+            ]).join() === 'F3D-4.0.1-Windows-x86_64.zip' &&
+            previewPick('imagemagick', [
+                'ImageMagick-7.1.2-35-portable-Q16-HDRI-x64.7z',
+                'ImageMagick-7.1.2-35-portable-Q16-x64.7z',
+                'ImageMagick-7.1.2-35-portable-Q16-HDRI-arm64.7z',
+            ]).join() === 'ImageMagick-7.1.2-35-portable-Q16-HDRI-x64.7z' &&
+            previewPick('nomacs', ['nomacs-portable-win.zip', 'nomacs-setup.exe']).join() === 'nomacs-portable-win.zip', 'preview apps: F3D, ImageMagick and nomacs are in the catalogue and pick the portable download only');
+        const f3d = associationPlan('f3d', 'C:\\x\\f3d.exe');
+        t.check(f3d.some((v) => v.key === 'Software\\Classes\\.fbx' && v.value === 'Sandbox.f3d') &&
+            f3d.some((v) => v.key.endsWith('\\shell\\open\\command') && v.value === '"C:\\x\\f3d.exe" "%1"') &&
+            f3d.every((v) => v.hive === 'HKCU' && v.name === '') &&
+            associationPlan('nomacs', 'C:\\x\\nomacs.exe').some((v) => v.key === 'Software\\Classes\\.tga') &&
+            associationPlan('krita', 'C:\\x\\k.exe').length === 0, 'preview apps: double-click associations name the app per extension; an app without any gets none');
+        await t.throws(() => associationPlan('f3d', 'f3d.exe'), 'not a program path', 'a relative program path is refused');
+        await t.throws(() => associationPlan('f3d', 'C:\\a"b.exe'), 'not a program path', 'a quoted program path is refused');
+        t.check(previewGuideLine([]) === null &&
+            previewGuideLine(['jq']) === null &&
+            (previewGuideLine(['f3d']) ?? '').includes('--output=') &&
+            previewGuideLine(['imagemagick']) !== null, 'preview apps: the agent preview line appears only when F3D or ImageMagick is installed');
         t.check(exeMatcher('/^Godot_v[\\d.]+-stable_win64\\.exe$/')('Godot_v4.7.2-stable_win64.exe') &&
             !exeMatcher('/^Godot_v[\\d.]+-stable_win64\\.exe$/')('Godot_v4.7.2-stable_win64_console.exe') &&
             exeMatcher('Code.exe')('code.EXE'), 'apps: the program is found by name or by pattern');

package/dist/shared/accounts/index.d.ts

@@ -1,7 +1,7 @@
 export * from './kinds.js';
 export * from './payloads.js';
 export { fingerprint } from './fingerprint.js';
-export { epicSettingsFile, MAX_EPIC_INI_BYTES, readEpicLogin, withEpicLogin, type EpicPayload } from './kinds/epic.js';
+export { epicSettingsFile, epicSettingsFiles, MAX_EPIC_INI_BYTES, readEpicLogin, withEpicLogin, type EpicPayload, } from './kinds/epic.js';
 export * from './kinds/steam.js';
 export { PERPLEXITY_ENV, perplexityKeyFromText, perplexitySummary, type PerplexityPayload, } from './kinds/perplexity.js';
 export { cometPayloadFromCookies, cometSummary, cookiesToRestore, type CometPayload } from './kinds/comet.js';

package/dist/shared/accounts/index.js

@@ -3,7 +3,7 @@
 export * from './kinds.js';
 export * from './payloads.js';
 export { fingerprint } from './fingerprint.js';
-export { epicSettingsFile, MAX_EPIC_INI_BYTES, readEpicLogin, withEpicLogin } from './kinds/epic.js';
+export { epicSettingsFile, epicSettingsFiles, MAX_EPIC_INI_BYTES, readEpicLogin, withEpicLogin, } from './kinds/epic.js';
 export * from './kinds/steam.js';
 export { PERPLEXITY_ENV, perplexityKeyFromText, perplexitySummary, } from './kinds/perplexity.js';
 export { cometPayloadFromCookies, cometSummary, cookiesToRestore } from './kinds/comet.js';

package/dist/shared/accounts/kinds/epic.d.ts

@@ -2,8 +2,13 @@ import type { Payload } from '../payloads.js';
 /** At most this much of a GameUserSettings.ini is read. */
 export declare const MAX_EPIC_INI_BYTES: number;
 export type EpicPayload = Payload<'epic'>;
-/** GameUserSettings.ini under a LocalAppData folder (the PC's or the sandbox's). */
+/** GameUserSettings.ini under a LocalAppData folder (the PC's or the sandbox's), where launchers before 17 keep it. */
 export declare function epicSettingsFile(localAppData: string): string;
+/**
+ * Every GameUserSettings.ini the launcher may read, newest place first: launcher 17 and later (20.3 checked) keep it in
+ * Config\WindowsEditor, older ones in Config\Windows.
+ */
+export declare function epicSettingsFiles(localAppData: string): string[];
 /** The saved sign-in in an ini text, or null (none, turned off, or not the expected shape). */
 export declare function readEpicLogin(ini: string): EpicPayload | null;
 /** The ini text with its [RememberMe] section replaced by this sign-in (the other sections are kept). */

package/dist/shared/accounts/kinds/epic.js

@@ -6,10 +6,20 @@ import { EpicPayloadSchema } from '../payloads.js';
 /** At most this much of a GameUserSettings.ini is read. */
 export const MAX_EPIC_INI_BYTES = 1024 * 1024;
 const SECTION = '[rememberme]';
-/** GameUserSettings.ini under a LocalAppData folder (the PC's or the sandbox's). */
+/** GameUserSettings.ini under a LocalAppData folder (the PC's or the sandbox's), where launchers before 17 keep it. */
 export function epicSettingsFile(localAppData) {
     return localAppData + '\\EpicGamesLauncher\\Saved\\Config\\Windows\\GameUserSettings.ini';
 }
+/**
+ * Every GameUserSettings.ini the launcher may read, newest place first: launcher 17 and later (20.3 checked) keep it in
+ * Config\WindowsEditor, older ones in Config\Windows.
+ */
+export function epicSettingsFiles(localAppData) {
+    return [
+        localAppData + '\\EpicGamesLauncher\\Saved\\Config\\WindowsEditor\\GameUserSettings.ini',
+        epicSettingsFile(localAppData),
+    ];
+}
 const isHeader = (line) => line.trimStart().startsWith('[');
 /** The saved sign-in in an ini text, or null (none, turned off, or not the expected shape). */
 export function readEpicLogin(ini) {

package/dist/shared/apps/associations.d.ts

@@ -0,0 +1,7 @@
+import type { RegistryValue } from '../unreal/engines.js';
+export declare const ASSOCIATIONS: {
+    readonly f3d: readonly [".fbx", ".glb", ".gltf", ".obj", ".stl", ".ply", ".3ds", ".usd", ".usdz"];
+    readonly nomacs: readonly [".tga", ".psd", ".dds", ".exr"];
+};
+/** The registry values that make `appId` open its file types; no values for an app that opens none. */
+export declare function associationPlan(appId: string, exe: string): RegistryValue[];

package/dist/shared/apps/associations.js

@@ -0,0 +1,26 @@
+// Which apps open which game-asset files when you double-click them (per user, written to the registry each boot
+// because the sandbox's registry is new every time). Pure: the guest writes the plan with set-registry-values.ps1.
+import path from 'node:path';
+export const ASSOCIATIONS = {
+    f3d: ['.fbx', '.glb', '.gltf', '.obj', '.stl', '.ply', '.3ds', '.usd', '.usdz'],
+    nomacs: ['.tga', '.psd', '.dds', '.exr'],
+};
+const NAMES = { f3d: 'F3D', nomacs: 'nomacs' };
+/** The registry values that make `appId` open its file types; no values for an app that opens none. */
+export function associationPlan(appId, exe) {
+    if (!Object.hasOwn(ASSOCIATIONS, appId))
+        return [];
+    const id = appId;
+    if (!path.win32.isAbsolute(exe) || /["\r\n]/.test(exe))
+        throw new Error('not a program path: ' + exe);
+    const classes = 'Software\\Classes';
+    const type = classes + '\\Sandbox.' + id;
+    const quoted = '"' + exe + '"';
+    const v = (key, value) => ({ hive: 'HKCU', key, name: '', value });
+    return [
+        ...ASSOCIATIONS[id].map((ext) => v(classes + '\\' + ext, 'Sandbox.' + id)),
+        v(type, NAMES[id] + ' file'),
+        v(type + '\\DefaultIcon', quoted + ',0'),
+        v(type + '\\shell\\open\\command', quoted + ' "%1"'),
+    ];
+}

package/dist/shared/apps/catalogue-agents-web.d.ts

@@ -9,6 +9,9 @@ export declare const BROWSER_USE_VERSION = "0.13.14";
 export declare const PERPLEXITY_COMPUTER_MCP_URL = "https://www.perplexity.ai/rest/computer/mcp";
 /** Comet's Windows installer: a redirect to the current release (no checksum is published; its signer is checked). */
 export declare const COMET_DOWNLOAD_URL = "https://www.perplexity.ai/rest/browser/download?platform=win_x64&channel=stable";
-/** Who signs Comet: Perplexity AI, Inc., with an EV code-signing certificate from GlobalSign. */
+/**
+ * Who signs Comet: Perplexity AI, Inc., with an EV code-signing certificate from GlobalSign. Windows reports the
+ * subject with E=<contact address> first (E=..., CN="PERPLEXITY AI, INC.", O=...), so CN is not at the start.
+ */
 export declare const COMET_SIGNER: AppSigner;
 export declare const AGENTS_WEB_APPS: readonly AppEntry[];

package/dist/shared/apps/catalogue-agents-web.js

@@ -7,9 +7,12 @@ export const BROWSER_USE_VERSION = '0.13.14';
 export const PERPLEXITY_COMPUTER_MCP_URL = 'https://www.perplexity.ai/rest/computer/mcp';
 /** Comet's Windows installer: a redirect to the current release (no checksum is published; its signer is checked). */
 export const COMET_DOWNLOAD_URL = 'https://www.perplexity.ai/rest/browser/download?platform=win_x64&channel=stable';
-/** Who signs Comet: Perplexity AI, Inc., with an EV code-signing certificate from GlobalSign. */
+/**
+ * Who signs Comet: Perplexity AI, Inc., with an EV code-signing certificate from GlobalSign. Windows reports the
+ * subject with E=<contact address> first (E=..., CN="PERPLEXITY AI, INC.", O=...), so CN is not at the start.
+ */
 export const COMET_SIGNER = {
-    subject: ['^CN="?PERPLEXITY AI, INC\\.?"?(,|$)', '(^|, )O="?PERPLEXITY AI, INC\\.?"?(,|$)'],
+    subject: ['(^|, )CN="?PERPLEXITY AI, INC\\.?"?(,|$)', '(^|, )O="?PERPLEXITY AI, INC\\.?"?(,|$)'],
     issuer: ['^CN=GlobalSign GCC R45 EV CodeSigning CA 2020(,|$)'],
 };
 /** Microsoft Edge, already in every sandbox: the browser Chrome DevTools MCP starts. */

package/dist/shared/apps/catalogue-gamedev.js

@@ -1 +1,71 @@
-export const GAMEDEV_APPS = [];
+export const GAMEDEV_APPS = [
+    {
+        id: 'krita',
+        name: 'Krita',
+        category: 'gamedev',
+        about: 'Painting and texture editor (PSD, layers, brushes), checked against the SHA-256 download.kde.org publishes.',
+        size: '450 MB',
+        source: { resolve: 'krita' },
+        exe: 'krita.exe',
+        needs: ['mesa'],
+    },
+    {
+        id: 'inkscape',
+        name: 'Inkscape',
+        category: 'gamedev',
+        about: 'Vector graphics for UI, icons and 2D art (SVG), checked against the SHA-256 inkscape.org publishes.',
+        size: '400 MB',
+        source: { resolve: 'inkscape' },
+        exe: 'inkscape.exe',
+        needs: ['7zip'],
+    },
+    {
+        id: 'audacity',
+        name: 'Audacity',
+        category: 'gamedev',
+        about: 'Records and edits sound effects and music (WAV, OGG, FLAC).',
+        size: '80 MB',
+        source: { github: 'audacity/audacity', asset: '^audacity-win-[\\d.]+-(?:64bit\\.zip|x86_64\\.7z)$' },
+        exe: 'Audacity.exe',
+        needs: ['7zip'],
+    },
+    {
+        id: 'renderdoc',
+        name: 'RenderDoc',
+        category: 'gamedev',
+        about: "Captures a frame of a game (Unreal's -d3d12/-vulkan builds) to inspect every draw call, texture and shader. Needs the sandbox's GPU (vGPU) for live captures.",
+        size: '70 MB',
+        source: { resolve: 'renderdoc' },
+        exe: 'qrenderdoc.exe',
+    },
+    {
+        id: 'f3d',
+        name: 'F3D',
+        category: 'gamedev',
+        about: 'Fast 3D viewer (FBX, glTF/GLB, OBJ, STL, PLY, 3DS, USD); renders still previews from the command line.',
+        size: '100 MB',
+        source: { github: 'f3d-app/f3d', asset: '^F3D-[\\d.]+-Windows-x86_64\\.zip$' },
+        exe: 'f3d.exe',
+        needs: ['mesa'],
+    },
+    {
+        id: 'imagemagick',
+        name: 'ImageMagick',
+        category: 'gamedev',
+        about: 'Converts and thumbnails textures (TGA, PSD, DDS, EXR, HDR) and builds contact sheets (magick montage).',
+        size: '150 MB',
+        source: { github: 'ImageMagick/ImageMagick', asset: '^ImageMagick-[\\d.]+-\\d+-portable-Q16-HDRI-x64\\.7z$' },
+        exe: 'magick.exe',
+        cli: true,
+        needs: ['7zip'],
+    },
+    {
+        id: 'nomacs',
+        name: 'nomacs',
+        category: 'gamedev',
+        about: 'Image viewer for textures (TGA, PSD, DDS, EXR).',
+        size: '60 MB',
+        source: { github: 'nomacs/nomacs', asset: '^nomacs-portable-win\\.zip$' },
+        exe: 'nomacs.exe',
+    },
+];

package/dist/shared/apps/index.d.ts

@@ -1,4 +1,6 @@
 export { type AddonMcp, type AppCategory, APP_CATEGORIES, type AppSource, type AppEntry, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
+export { ASSOCIATIONS, associationPlan } from './associations.js';
+export { previewGuideLine } from './preview.js';
 export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
 export { signerMatches, type AppSigner, type Signature } from '../signer.js';
 export { AGENTS_WEB_APPS, BROWSER_USE_VERSION, CHROME_DEVTOOLS_MCP_VERSION, COMET_DOWNLOAD_URL, COMET_MCP_VERSION, COMET_SIGNER, PERPLEXITY_COMPUTER_MCP_URL, PERPLEXITY_MCP_VERSION, } from './catalogue-agents-web.js';

package/dist/shared/apps/index.js

@@ -1,4 +1,6 @@
 export { APP_CATEGORIES, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
+export { ASSOCIATIONS, associationPlan } from './associations.js';
+export { previewGuideLine } from './preview.js';
 export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
 export { signerMatches } from '../signer.js';
 export { AGENTS_WEB_APPS, BROWSER_USE_VERSION, CHROME_DEVTOOLS_MCP_VERSION, COMET_DOWNLOAD_URL, COMET_MCP_VERSION, COMET_SIGNER, PERPLEXITY_COMPUTER_MCP_URL, PERPLEXITY_MCP_VERSION, } from './catalogue-agents-web.js';

package/dist/shared/apps/preview.d.ts

@@ -0,0 +1,2 @@
+/** Null unless F3D or ImageMagick is installed; `installed` holds app ids. */
+export declare function previewGuideLine(installed: readonly string[]): string | null;

package/dist/shared/apps/preview.js

@@ -0,0 +1,10 @@
+// The one line that tells an agent how to render previews of meshes and textures for the owner (pure).
+/** Null unless F3D or ImageMagick is installed; `installed` holds app ids. */
+export function previewGuideLine(installed) {
+    if (!installed.includes('f3d') && !installed.includes('imagemagick'))
+        return null;
+    return ('asset previews: `f3d "<mesh>" --output="<pkg>\\previews\\<name>.png" --resolution=1024,768 --up=+Y` per mesh ' +
+        '(--up=+Z for Unreal-space files), `magick montage "<pkg>\\source\\**\\*.png" -thumbnail 256x256 -geometry +4+4 ' +
+        '-label %f "<pkg>\\previews\\textures.png"` for textures (convert TGA/PSD/DDS/EXR to PNG first with magick); ' +
+        "leave them in the package's previews\\ folder for the owner to look at before import");
+}

package/dist/shared/browser-policy.d.ts

@@ -0,0 +1,14 @@
+export interface BrowserPolicy {
+    readonly key: string;
+    readonly name: string;
+    readonly type: 'REG_DWORD' | 'REG_SZ';
+    readonly data: string;
+}
+export declare const BROWSER_POLICY_KEYS: readonly ["HKLM\\SOFTWARE\\Policies\\Microsoft\\Edge", "HKLM\\SOFTWARE\\Policies\\Google\\Chrome"];
+/**
+ * The policies for each browser: no hardware acceleration (today's behaviour) and, when a downloads folder is given,
+ * DefaultDownloadDirectory (the default only: Playwright's download path and the user's own choice still win).
+ */
+export declare function browserPolicies(o: {
+    readonly downloads: string | null;
+}): BrowserPolicy[];

package/dist/shared/browser-policy.js

@@ -0,0 +1,22 @@
+// The machine policy of the sandbox's browsers (Edge and Chrome), written under HKLM at every boot by the guest: no GPU
+// and the folder downloads go to. Pure (no reads or writes here): the guest runs reg.exe with these entries and the
+// self-test checks them.
+import path from 'node:path';
+export const BROWSER_POLICY_KEYS = [
+    'HKLM\\SOFTWARE\\Policies\\Microsoft\\Edge',
+    'HKLM\\SOFTWARE\\Policies\\Google\\Chrome',
+];
+/**
+ * The policies for each browser: no hardware acceleration (today's behaviour) and, when a downloads folder is given,
+ * DefaultDownloadDirectory (the default only: Playwright's download path and the user's own choice still win).
+ */
+export function browserPolicies(o) {
+    if (o.downloads !== null && (!path.win32.isAbsolute(o.downloads) || /["\r\n%]/.test(o.downloads)))
+        throw new Error('not a folder');
+    return BROWSER_POLICY_KEYS.flatMap((key) => [
+        { key, name: 'HardwareAccelerationModeEnabled', type: 'REG_DWORD', data: '0' },
+        ...(o.downloads === null
+            ? []
+            : [{ key, name: 'DefaultDownloadDirectory', type: 'REG_SZ', data: o.downloads }]),
+    ]);
+}

package/dist/shared/channel/schema.d.ts

@@ -109,10 +109,9 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
             acceptLicense: z.ZodBoolean;
             components: z.ZodArray<z.ZodString>;
-            keepInstallFiles: z.ZodBoolean;
             visualStudio: z.ZodEnum<{
                 full: "full";
-                autosdk: "autosdk";
+                buildtools: "buildtools";
             }>;
             persistEngines: z.ZodBoolean;
             derivedDataCache: z.ZodEnum<{
@@ -346,10 +345,9 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
                 acceptLicense: z.ZodBoolean;
                 components: z.ZodArray<z.ZodString>;
-                keepInstallFiles: z.ZodBoolean;
                 visualStudio: z.ZodEnum<{
                     full: "full";
-                    autosdk: "autosdk";
+                    buildtools: "buildtools";
                 }>;
                 persistEngines: z.ZodBoolean;
                 derivedDataCache: z.ZodEnum<{
@@ -603,10 +601,9 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
                 acceptLicense: z.ZodBoolean;
                 components: z.ZodArray<z.ZodString>;
-                keepInstallFiles: z.ZodBoolean;
                 visualStudio: z.ZodEnum<{
                     full: "full";
-                    autosdk: "autosdk";
+                    buildtools: "buildtools";
                 }>;
                 persistEngines: z.ZodBoolean;
                 derivedDataCache: z.ZodEnum<{

package/dist/shared/io/index.d.ts

@@ -6,3 +6,4 @@ export * from './copy-tree.js';
 export * from './bounded.js';
 export * from './text.js';
 export * from './disk.js';
+export * from './rotate-log.js';

package/dist/shared/io/index.js

@@ -6,3 +6,4 @@ export * from './copy-tree.js';
 export * from './bounded.js';
 export * from './text.js';
 export * from './disk.js';
+export * from './rotate-log.js';

package/dist/shared/io/rotate-log.d.ts

@@ -0,0 +1,2 @@
+/** Moves `file` to `file + '.1'` (replacing the older copy) when it is over `maxBytes`; true when it moved. */
+export declare function rotateLog(file: string, maxBytes: number): boolean;

package/dist/shared/io/rotate-log.js

@@ -0,0 +1,16 @@
+// Keeps a log that a detached program appends to from growing for ever: past the limit it becomes <log>.1.
+import fs from 'node:fs';
+/** Moves `file` to `file + '.1'` (replacing the older copy) when it is over `maxBytes`; true when it moved. */
+export function rotateLog(file, maxBytes) {
+    try {
+        if (fs.statSync(file).size <= maxBytes)
+            return false;
+        fs.rmSync(file + '.1', { force: true });
+        fs.renameSync(file, file + '.1');
+        return true;
+    }
+    catch {
+        // No log yet, or it is held open: the next start tries again.
+        return false;
+    }
+}

package/dist/shared/memory/policy.d.ts

@@ -67,3 +67,8 @@ export declare function chooseTargetDir(targetDir: string, freeBytes: number): {
 };
 /** The most heavy compilers (rustc, clippy-driver, link ...) that run at once in the agents' job: only with vGPU on. */
 export declare function maxCompilers(cpus: number, profile: LoadProfile): number | null;
+/**
+ * The cargo variable that names the linker of a Rust host (`x86_64-pc-windows-msvc` ->
+ * `CARGO_TARGET_X86_64_PC_WINDOWS_MSVC_LINKER`).
+ */
+export declare function cargoLinkerVar(host: string): string;

package/dist/shared/memory/policy.js

@@ -108,3 +108,10 @@ export function chooseTargetDir(targetDir, freeBytes) {
 export function maxCompilers(cpus, profile) {
     return profile === 'gentle' ? Math.min(4, Math.max(2, Math.floor(cpus / 4))) : null;
 }
+/**
+ * The cargo variable that names the linker of a Rust host (`x86_64-pc-windows-msvc` ->
+ * `CARGO_TARGET_X86_64_PC_WINDOWS_MSVC_LINKER`).
+ */
+export function cargoLinkerVar(host) {
+    return 'CARGO_TARGET_' + host.toUpperCase().replace(/[^A-Z0-9]/g, '_') + '_LINKER';
+}

package/dist/shared/paths/pc-installs.d.ts

@@ -1,6 +1,6 @@
 /** Where this PC's installs appear in the sandbox (reserved: RESERVED_GUEST). */
 export declare const PC_INSTALLS_GUEST = "C:\\PcInstalls";
-export type PcInstallKind = 'steam-game' | 'steam-library' | 'epic-game' | 'unreal' | 'unity';
+export type PcInstallKind = 'steam-game' | 'steam-library' | 'epic-game' | 'unreal' | 'unreal-vault' | 'unity';
 export interface PcInstall {
     readonly kind: PcInstallKind;
     /** The Steam app ID or library (library1), the Epic app name, the engine (UE_5.4) or editor version. */
@@ -9,8 +9,19 @@ export interface PcInstall {
     readonly version?: string;
     /** The folder on this PC (never sent to the sandbox). */
     readonly host: string;
-    /** Where it appears in the sandbox, read-only. */
+    /** Where it appears in the sandbox, read-only unless `writable`. */
     readonly guest: string;
+    /** Mapped writable: an engine folder you registered (pcInstalls.unrealEngineFolders). */
+    readonly writable?: boolean;
+    /** An Unreal source build's registered name on this PC (HKCU\Software\Epic Games\Unreal Engine\Builds). */
+    readonly buildId?: string;
+    /** The Epic Games Launcher's own ids of the app (from this PC's LauncherInstalled.dat). */
+    readonly launcher?: {
+        readonly namespaceId: string;
+        readonly itemId: string;
+        readonly artifactId: string;
+        readonly appVersion: string;
+    };
 }
 /** What session.json says about them: no host paths. */
 export interface PcInstallManifest {

package/dist/shared/paths/pc-installs.js

@@ -9,6 +9,7 @@ const AREA = {
     'steam-library': 'steam',
     'epic-game': 'epic',
     unreal: 'unreal',
+    'unreal-vault': 'unreal',
     unity: 'unity',
 };
 /** The guest folder of one install: C:\PcInstalls\steam\<appid>, \epic\<AppName>, \unreal\UE_5.4, \unity\<ver>. */

package/dist/shared/pty/terminal.js

@@ -185,7 +185,8 @@ options = {}) {
         socket.on('close', () => finish({ reason: 'closed' }));
         socket.on('error', () => finish({ reason: 'closed' }));
         const [c, r] = size();
-        stdout.write('\x1b[2J\x1b[3J\x1b[H');
+        // A clean screen, but the scrollback stays: the boot's summary (warnings, tools, Ready) is just above the session.
+        stdout.write('\x1b[2J\x1b[H');
         socket.write(helloFrame(token, c, r));
         if (stdin.isTTY)
             stdin.setRawMode(true);

package/dist/shared/readiness.d.ts

@@ -3,7 +3,6 @@ export declare const NOT_READY: {
     readonly toolchains: readonly ["unity", "godot", "android", "flutter", "dart", "reactNative"];
     /** Service sign-ins whose host or guest side is a stub: the menu and the web do not list them. */
     readonly kinds: readonly ["unity", "keystore", "play", "expo", "appstore"];
-    readonly unreal: readonly ["engines"];
 };
 export declare const isToolchainReady: (name: string) => boolean;
 export declare const isKindReady: (kind: string) => boolean;

package/dist/shared/readiness.js

@@ -5,7 +5,6 @@ export const NOT_READY = {
     toolchains: ['unity', 'godot', 'android', 'flutter', 'dart', 'reactNative'],
     /** Service sign-ins whose host or guest side is a stub: the menu and the web do not list them. */
     kinds: ['unity', 'keystore', 'play', 'expo', 'appstore'],
-    unreal: ['engines'],
 };
 export const isToolchainReady = (name) => !NOT_READY.toolchains.includes(name);
 export const isKindReady = (kind) => !NOT_READY.kinds.includes(kind);

package/dist/shared/signer.d.ts

@@ -21,4 +21,8 @@ export declare const SIGNERS: {
     readonly unity: {
         readonly subject: readonly ["^CN=\"?Unity Technologies"];
     };
+    /** The Epic Games Launcher's MSI (checked on EpicInstaller-20.3.3.msi). */
+    readonly epic: {
+        readonly subject: readonly ["^CN=Epic Games Inc\\., O=Epic Games Inc\\., L=Cary, S=North Carolina, C=US"];
+    };
 };

package/dist/shared/signer.js

@@ -12,4 +12,6 @@ export const SIGNERS = {
     microsoft: { subject: ['^CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US$'] },
     valve: { subject: ['^CN="?Valve(,| Corp)'] },
     unity: { subject: ['^CN="?Unity Technologies'] },
+    /** The Epic Games Launcher's MSI (checked on EpicInstaller-20.3.3.msi). */
+    epic: { subject: ['^CN=Epic Games Inc\\., O=Epic Games Inc\\., L=Cary, S=North Carolina, C=US'] },
 };