windows-development-sandbox 1.23.2 → 1.25.1

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.2.0")]
-[assembly: AssemblyFileVersion("1.23.2.0")]
-[assembly: AssemblyInformationalVersion("1.23.2")]
+[assembly: AssemblyVersion("1.25.0.0")]
+[assembly: AssemblyFileVersion("1.25.0.0")]
+[assembly: AssemblyInformationalVersion("1.25.0")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.2.0")]
-[assembly: AssemblyFileVersion("1.23.2.0")]
-[assembly: AssemblyInformationalVersion("1.23.2")]
+[assembly: AssemblyVersion("1.25.0.0")]
+[assembly: AssemblyFileVersion("1.25.0.0")]
+[assembly: AssemblyInformationalVersion("1.25.0")]
 [assembly: ComVisible(false)]

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.23.2.0")]
-[assembly: AssemblyFileVersion("1.23.2.0")]
-[assembly: AssemblyInformationalVersion("1.23.2")]
+[assembly: AssemblyVersion("1.25.0.0")]
+[assembly: AssemblyFileVersion("1.25.0.0")]
+[assembly: AssemblyInformationalVersion("1.25.0")]
 [assembly: ComVisible(false)]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.23.2",
+  "version": "1.25.1",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",

package/sandbox/csharp/VsSetup.cs

@@ -0,0 +1,210 @@
+// The Visual Studio Setup Configuration API as UnrealBuildTool calls it (MicrosoftPlatformSDK: SetupConfiguration,
+// ISetupConfiguration2.EnumAllInstances, ISetupInstance2): every instance with its state, version, product, path and
+// packages. Loaded by scripts\get-vs-setup.ps1 (Add-Type), which adds the file checks and writes the JSON. C# 5.
+using System;
+using System.Collections.Generic;
+using System.Runtime.InteropServices;
+using FILETIME = System.Runtime.InteropServices.ComTypes.FILETIME;
+
+namespace AgentSandbox
+{
+    [ComImport]
+    [Guid("42843719-DB4C-46C2-8E7C-64F1816EFD5B")]
+    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+    public interface ISetupConfiguration
+    {
+        IEnumSetupInstances EnumInstances();
+        ISetupInstance GetInstanceForCurrentProcess();
+        ISetupInstance GetInstanceForPath([In, MarshalAs(UnmanagedType.LPWStr)] string path);
+    }
+
+    [ComImport]
+    [Guid("26AAB78C-4A60-49D6-AF3B-3C35BC93365D")]
+    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+    public interface ISetupConfiguration2 : ISetupConfiguration
+    {
+        new IEnumSetupInstances EnumInstances();
+        new ISetupInstance GetInstanceForCurrentProcess();
+        new ISetupInstance GetInstanceForPath([In, MarshalAs(UnmanagedType.LPWStr)] string path);
+        IEnumSetupInstances EnumAllInstances();
+    }
+
+    [ComImport]
+    [Guid("6380BCFF-41D3-4B2E-8B2E-BF8A6810C848")]
+    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+    public interface IEnumSetupInstances
+    {
+        void Next(
+            [In, MarshalAs(UnmanagedType.U4)] int celt,
+            [Out, MarshalAs(UnmanagedType.LPArray, ArraySubType = UnmanagedType.Interface, SizeParamIndex = 0)]
+            ISetupInstance[] rgelt,
+            [Out, MarshalAs(UnmanagedType.U4)] out int pceltFetched);
+        void Skip([In, MarshalAs(UnmanagedType.U4)] int celt);
+        void Reset();
+        IEnumSetupInstances Clone();
+    }
+
+    [ComImport]
+    [Guid("B41463C3-8866-43B5-BC33-2B0676F7F42E")]
+    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+    public interface ISetupInstance
+    {
+        [return: MarshalAs(UnmanagedType.BStr)] string GetInstanceId();
+        [return: MarshalAs(UnmanagedType.Struct)] FILETIME GetInstallDate();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetInstallationName();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetInstallationPath();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetInstallationVersion();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetDisplayName([In, MarshalAs(UnmanagedType.U4)] int lcid);
+        [return: MarshalAs(UnmanagedType.BStr)] string GetDescription([In, MarshalAs(UnmanagedType.U4)] int lcid);
+        [return: MarshalAs(UnmanagedType.BStr)] string ResolvePath([In, MarshalAs(UnmanagedType.LPWStr)] string path);
+    }
+
+    [ComImport]
+    [Guid("89143C9A-05AF-49B0-B717-72E218A2185C")]
+    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+    public interface ISetupInstance2 : ISetupInstance
+    {
+        [return: MarshalAs(UnmanagedType.BStr)] new string GetInstanceId();
+        [return: MarshalAs(UnmanagedType.Struct)] new FILETIME GetInstallDate();
+        [return: MarshalAs(UnmanagedType.BStr)] new string GetInstallationName();
+        [return: MarshalAs(UnmanagedType.BStr)] new string GetInstallationPath();
+        [return: MarshalAs(UnmanagedType.BStr)] new string GetInstallationVersion();
+        [return: MarshalAs(UnmanagedType.BStr)] new string GetDisplayName([In, MarshalAs(UnmanagedType.U4)] int lcid);
+        [return: MarshalAs(UnmanagedType.BStr)] new string GetDescription([In, MarshalAs(UnmanagedType.U4)] int lcid);
+        [return: MarshalAs(UnmanagedType.BStr)] new string ResolvePath([In, MarshalAs(UnmanagedType.LPWStr)] string path);
+        [return: MarshalAs(UnmanagedType.U4)] uint GetState();
+        [return: MarshalAs(UnmanagedType.SafeArray, SafeArraySubType = VarEnum.VT_UNKNOWN)]
+        ISetupPackageReference[] GetPackages();
+        ISetupPackageReference GetProduct();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetProductPath();
+        [return: MarshalAs(UnmanagedType.IUnknown)] object GetErrors();
+        [return: MarshalAs(UnmanagedType.VariantBool)] bool IsLaunchable();
+        [return: MarshalAs(UnmanagedType.VariantBool)] bool IsComplete();
+    }
+
+    [ComImport]
+    [Guid("DA8D8A16-B2B6-4487-A2F1-594CCCCD6BF5")]
+    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+    public interface ISetupPackageReference
+    {
+        [return: MarshalAs(UnmanagedType.BStr)] string GetId();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetVersion();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetChip();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetLanguage();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetBranch();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetType();
+        [return: MarshalAs(UnmanagedType.BStr)] string GetUniqueId();
+        [return: MarshalAs(UnmanagedType.VariantBool)] bool GetIsExtension();
+    }
+
+    [ComImport]
+    [Guid("177F0C4A-1CD3-4DE7-A32C-71DBBB9FA36D")]
+    [ClassInterface(ClassInterfaceType.None)]
+    public class SetupConfiguration
+    {
+    }
+
+    /// <summary>One instance as the Setup API reports it.</summary>
+    public class SetupInstanceInfo
+    {
+        public string InstanceId;
+        public string InstallationPath;
+        public string InstallationVersion;
+        public string ProductId;
+        public uint State;
+        public bool IsComplete;
+        public bool IsLaunchable;
+        public string[] Packages;
+    }
+
+    public static class VsSetup
+    {
+        /// <summary>InstanceState.Local: the instance's files are on this machine (the only ones UnrealBuildTool uses).</summary>
+        public const uint StateLocal = 1;
+
+        /// <summary>Every instance EnumAllInstances lists (complete or not), as UnrealBuildTool enumerates them.</summary>
+        public static SetupInstanceInfo[] AllInstances()
+        {
+            List<SetupInstanceInfo> found = new List<SetupInstanceInfo>();
+            ISetupConfiguration2 setup = (ISetupConfiguration2)new SetupConfiguration();
+            IEnumSetupInstances instances = null;
+            try
+            {
+                instances = setup.EnumAllInstances();
+                ISetupInstance[] one = new ISetupInstance[1];
+                while (true)
+                {
+                    int fetched;
+                    instances.Next(1, one, out fetched);
+                    if (fetched == 0)
+                    {
+                        break;
+                    }
+                    ISetupInstance2 instance = (ISetupInstance2)one[0];
+                    try
+                    {
+                        found.Add(Describe(instance));
+                    }
+                    finally
+                    {
+                        Marshal.ReleaseComObject(instance);
+                    }
+                }
+            }
+            finally
+            {
+                if (instances != null)
+                {
+                    Marshal.ReleaseComObject(instances);
+                }
+                Marshal.ReleaseComObject(setup);
+            }
+            return found.ToArray();
+        }
+
+        private static SetupInstanceInfo Describe(ISetupInstance2 instance)
+        {
+            SetupInstanceInfo info = new SetupInstanceInfo();
+            info.InstanceId = instance.GetInstanceId();
+            info.InstallationPath = instance.GetInstallationPath();
+            info.InstallationVersion = instance.GetInstallationVersion();
+            info.State = instance.GetState();
+            ISetupPackageReference product = instance.GetProduct();
+            if (product == null)
+            {
+                info.ProductId = "";
+            }
+            else
+            {
+                try
+                {
+                    info.ProductId = product.GetId();
+                }
+                finally
+                {
+                    Marshal.ReleaseComObject(product);
+                }
+            }
+            info.IsComplete = instance.IsComplete();
+            info.IsLaunchable = instance.IsLaunchable();
+            ISetupPackageReference[] packages = instance.GetPackages();
+            List<string> ids = new List<string>();
+            if (packages != null)
+            {
+                foreach (ISetupPackageReference package in packages)
+                {
+                    try
+                    {
+                        ids.Add(package.GetId());
+                    }
+                    finally
+                    {
+                        Marshal.ReleaseComObject(package);
+                    }
+                }
+            }
+            info.Packages = ids.ToArray();
+            return info;
+        }
+    }
+}

package/sandbox/scripts/get-vs-setup.ps1

@@ -0,0 +1,93 @@
+#Requires -Version 5.1
+# Looks for Visual Studio the way UnrealBuildTool does (guest/toolchains/engines/unreal-engines.ts runs it; the
+# verdict is decided in vs-check.ts): every instance the Setup Configuration API lists (csharp\VsSetup.cs), the MSVC
+# toolchains under each one's VC\Tools\MSVC that have the x64 compiler, and the Windows SDKs under each KitsRoot10 the
+# registry names (HKLM in both views, HKCU) that have windows.h and the x64 kernel32.lib. Writes JSON to -ResultFile.
+param([Parameter(Mandatory = $true)][string]$ResultFile)
+$ErrorActionPreference = 'Stop'
+
+Add-Type -Path (Join-Path $PSScriptRoot '..\csharp\VsSetup.cs')
+
+$instances = New-Object System.Collections.ArrayList
+$setupError = ''
+try {
+    foreach ($i in [AgentSandbox.VsSetup]::AllInstances()) {
+        $toolchains = New-Object System.Collections.ArrayList
+        $msvc = Join-Path $i.InstallationPath 'VC\Tools\MSVC'
+        if (Test-Path -LiteralPath $msvc -PathType Container) {
+            foreach ($dir in Get-ChildItem -LiteralPath $msvc -Directory) {
+                $cl = Join-Path $dir.FullName 'bin\Hostx64\x64\cl.exe'
+                $link = Join-Path $dir.FullName 'bin\Hostx64\x64\link.exe'
+                [void]$toolchains.Add([ordered]@{
+                        version = $dir.Name
+                        cl      = (Test-Path -LiteralPath $cl -PathType Leaf)
+                        link    = (Test-Path -LiteralPath $link -PathType Leaf)
+                    })
+            }
+        }
+        $wanted = @('Microsoft.VisualStudio.Component.VC.Tools.x86.x64', 'Microsoft.VisualStudio.Workload.NativeGame',
+            'Microsoft.VisualStudio.Workload.VCTools', 'Component.Unreal', 'Component.Unreal.Ide')
+        [void]$instances.Add([ordered]@{
+                instanceId          = $i.InstanceId
+                installationPath    = $i.InstallationPath
+                installationVersion = $i.InstallationVersion
+                productId           = $i.ProductId
+                state               = [int64]$i.State
+                isComplete          = $i.IsComplete
+                isLaunchable        = $i.IsLaunchable
+                packages            = @($i.Packages | Where-Object { $wanted -contains $_ })
+                packageCount        = @($i.Packages).Count
+                toolchains          = @($toolchains)
+            })
+    }
+} catch {
+    $setupError = $_.Exception.Message
+}
+
+$roots = New-Object System.Collections.ArrayList
+$places = @(
+    @{ hive = [Microsoft.Win32.RegistryHive]::LocalMachine; view = [Microsoft.Win32.RegistryView]::Registry64; name = 'HKLM (64-bit)' },
+    @{ hive = [Microsoft.Win32.RegistryHive]::LocalMachine; view = [Microsoft.Win32.RegistryView]::Registry32; name = 'HKLM (32-bit)' },
+    @{ hive = [Microsoft.Win32.RegistryHive]::CurrentUser; view = [Microsoft.Win32.RegistryView]::Registry64; name = 'HKCU' }
+)
+foreach ($place in $places) {
+    $base = [Microsoft.Win32.RegistryKey]::OpenBaseKey($place.hive, $place.view)
+    try {
+        $key = $base.OpenSubKey('SOFTWARE\Microsoft\Windows Kits\Installed Roots')
+        if ($key) {
+            $value = [string]$key.GetValue('KitsRoot10')
+            $key.Close()
+            if ($value) { [void]$roots.Add([ordered]@{ where = $place.name; path = $value }) }
+        }
+    } finally {
+        $base.Close()
+    }
+}
+
+$sdks = New-Object System.Collections.ArrayList
+$seen = @{}
+foreach ($root in $roots) {
+    $include = Join-Path $root.path 'Include'
+    if ($seen.ContainsKey($include.ToLowerInvariant())) { continue }
+    $seen[$include.ToLowerInvariant()] = $true
+    if (-not (Test-Path -LiteralPath $include -PathType Container)) { continue }
+    foreach ($dir in Get-ChildItem -LiteralPath $include -Directory) {
+        if ($dir.Name -notmatch '^10\.\d+\.\d+\.\d+$') { continue }
+        [void]$sdks.Add([ordered]@{
+                version  = $dir.Name
+                root     = $root.path
+                windowsH = (Test-Path -LiteralPath (Join-Path $dir.FullName 'um\windows.h') -PathType Leaf)
+                kernel32 = (Test-Path -LiteralPath (Join-Path $root.path ('Lib\' + $dir.Name + '\um\x64\kernel32.lib')) -PathType Leaf)
+                ucrt     = (Test-Path -LiteralPath (Join-Path $root.path ('Lib\' + $dir.Name + '\ucrt\x64\ucrt.lib')) -PathType Leaf)
+            })
+    }
+}
+
+$result = [ordered]@{
+    setupError = $setupError
+    instances  = @($instances)
+    kitsRoots  = @($roots)
+    sdks       = @($sdks)
+}
+$json = ConvertTo-Json -InputObject $result -Depth 6
+[System.IO.File]::WriteAllText($ResultFile, $json, (New-Object System.Text.UTF8Encoding($false)))

package/sandbox/scripts/restore-visual-studio.ps1

@@ -0,0 +1,78 @@
+#Requires -Version 5.1
+# Puts a saved Visual Studio back at boot, in seconds (guest/toolchains/native/visual-studio.ts; what goes where is
+# decided in vs-persist.ts): the small folders programs look for at fixed paths are copied back, then the registry
+# values that point at the big folders on the data disk and the Setup Configuration COM class are written. -PlanFile is
+# JSON written by the runtime:
+#   copies:   [{ name, from, to, mode: 'all' | 'missing' }]   'all': robocopy /E (only what differs is copied);
+#                                                            'missing': each subfolder only when the target has none
+#   registry: [{ view: '64'|'32', key, name, kind: 'string'|'expand'|'dword', value }]   under HKLM ('' = default)
+# Safe to run again. Exit 0 when everything is in place, 1 when a copy failed, 2 when a registry value could not be set.
+param([Parameter(Mandatory = $true)][string]$PlanFile)
+$ErrorActionPreference = 'Stop'
+
+$plan = Get-Content -LiteralPath $PlanFile -Raw -Encoding UTF8 | ConvertFrom-Json
+$robocopy = Join-Path $env:SystemRoot 'System32\Robocopy.exe'
+
+function Copy-Folder([string]$From, [string]$To) {
+    New-Item -ItemType Directory -Force -Path $To | Out-Null
+    & $robocopy $From $To /E /COPY:DAT /XJ /R:1 /W:1 /MT:16 /NP /NFL /NDL /NJH /NJS | Where-Object { $_ -and $_.Trim() } | Out-Host
+    return $LASTEXITCODE
+}
+
+$copied = 0
+$failed = New-Object System.Collections.ArrayList
+foreach ($copy in @($plan.copies)) {
+    if (-not (Test-Path -LiteralPath $copy.from -PathType Container)) {
+        [void]$failed.Add($copy.name + ' (' + $copy.from + ' is missing)')
+        continue
+    }
+    if ($copy.mode -eq 'missing') {
+        foreach ($child in Get-ChildItem -LiteralPath $copy.from -Directory) {
+            $target = Join-Path $copy.to $child.Name
+            if (Test-Path -LiteralPath $target) { continue }
+            $code = Copy-Folder -From $child.FullName -To $target
+            if ($code -ge 8) { [void]$failed.Add($copy.name + '\' + $child.Name + ' (robocopy ' + $code + ')') }
+        }
+        $copied++
+        continue
+    }
+    $code = Copy-Folder -From $copy.from -To $copy.to
+    if ($code -ge 8) { [void]$failed.Add($copy.name + ' (robocopy ' + $code + ')') } else { $copied++ }
+}
+if ($failed.Count) {
+    Write-Error ('restore-visual-studio: could not copy ' + ($failed -join ', '))
+    exit 1
+}
+
+$set = 0
+$bad = New-Object System.Collections.ArrayList
+foreach ($entry in @($plan.registry)) {
+    $view = [Microsoft.Win32.RegistryView]::Registry64
+    if ($entry.view -eq '32') { $view = [Microsoft.Win32.RegistryView]::Registry32 }
+    $base = [Microsoft.Win32.RegistryKey]::OpenBaseKey([Microsoft.Win32.RegistryHive]::LocalMachine, $view)
+    try {
+        $key = $base.CreateSubKey([string]$entry.key)
+        try {
+            if ($entry.kind -eq 'dword') {
+                $key.SetValue([string]$entry.name, [int]$entry.value, [Microsoft.Win32.RegistryValueKind]::DWord)
+            } elseif ($entry.kind -eq 'expand') {
+                $key.SetValue([string]$entry.name, [string]$entry.value, [Microsoft.Win32.RegistryValueKind]::ExpandString)
+            } else {
+                $key.SetValue([string]$entry.name, [string]$entry.value, [Microsoft.Win32.RegistryValueKind]::String)
+            }
+            $set++
+        } finally {
+            $key.Close()
+        }
+    } catch {
+        [void]$bad.Add($entry.view + ':' + $entry.key + '\' + $entry.name + ' (' + $_.Exception.Message + ')')
+    } finally {
+        $base.Close()
+    }
+}
+if ($bad.Count) {
+    Write-Error ('restore-visual-studio: could not set ' + ($bad -join '; '))
+    exit 2
+}
+Write-Output ('Restored Visual Studio: ' + $copied + ' folders in place, ' + $set + ' registry values set')
+exit 0

package/sandbox/scripts/save-visual-studio.ps1

@@ -0,0 +1,106 @@
+#Requires -Version 5.1
+# Saves a finished Visual Studio install onto the data disk, once (guest/toolchains/native/visual-studio.ts; what goes
+# where is decided in vs-persist.ts). -PlanFile is JSON written by the runtime:
+#   copies:     [{ name, from, to, optional }]   each mirrored with robocopy (/MIR); a missing optional one is skipped
+#   registry:   [{ view: '64'|'32', key, names: [..] | null, recurse }]   string and DWORD values read under HKLM
+#   resultFile: where the result goes, as JSON: { copied: [names], registry: [{ view, key, name, kind, value }] }
+# -LowPriority runs it (and robocopy) below normal priority. Safe to run again: robocopy copies only what differs.
+# Exit 0 when every copy worked, 1 when one failed (no result file then), 2 for a bad plan.
+param(
+    [Parameter(Mandatory = $true)][string]$PlanFile,
+    [switch]$LowPriority
+)
+$ErrorActionPreference = 'Stop'
+
+if ($LowPriority) {
+    try {
+        [System.Diagnostics.Process]::GetCurrentProcess().PriorityClass = [System.Diagnostics.ProcessPriorityClass]::BelowNormal
+    } catch {
+        # Normal priority only makes the copy compete a little more with the sessions.
+    }
+}
+
+$plan = Get-Content -LiteralPath $PlanFile -Raw -Encoding UTF8 | ConvertFrom-Json
+if (-not $plan.resultFile -or -not $plan.copies) {
+    Write-Error 'save-visual-studio: the plan has no copies or no result file'
+    exit 2
+}
+$robocopy = Join-Path $env:SystemRoot 'System32\Robocopy.exe'
+
+function Copy-Folder([string]$From, [string]$To) {
+    New-Item -ItemType Directory -Force -Path $To | Out-Null
+    # /MIR drops files a previous capture left; /XJ skips links (the data disk refuses them); /A-:R keeps read-only
+    # files rewritable by the next capture.
+    & $robocopy $From $To /MIR /COPY:DAT /XJ /A-:R /R:1 /W:1 /MT:16 /NP /NFL /NDL /NJH /NJS | Where-Object { $_ -and $_.Trim() } | Out-Host
+    return $LASTEXITCODE
+}
+
+$copied = New-Object System.Collections.ArrayList
+$failed = New-Object System.Collections.ArrayList
+foreach ($copy in @($plan.copies)) {
+    if (-not (Test-Path -LiteralPath $copy.from -PathType Container)) {
+        if ($copy.optional) { continue }
+        [void]$failed.Add($copy.name + ' (' + $copy.from + ' is missing)')
+        continue
+    }
+    $code = Copy-Folder -From $copy.from -To $copy.to
+    if ($code -ge 8) { [void]$failed.Add($copy.name + ' (robocopy ' + $code + ')') } else { [void]$copied.Add([string]$copy.name) }
+}
+if ($failed.Count) {
+    Write-Error ('save-visual-studio: could not save ' + ($failed -join ', '))
+    exit 1
+}
+
+function Get-View([string]$View) {
+    if ($View -eq '32') { return [Microsoft.Win32.RegistryView]::Registry32 }
+    return [Microsoft.Win32.RegistryView]::Registry64
+}
+
+function Read-Values([Microsoft.Win32.RegistryKey]$Key, [string]$Path, [string]$View, $Names, [bool]$Recurse, $Out) {
+    $options = [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames
+    foreach ($name in $Key.GetValueNames()) {
+        if ($null -ne $Names -and -not ($Names -contains $name)) { continue }
+        $kind = $Key.GetValueKind($name)
+        $value = $Key.GetValue($name, $null, $options)
+        $label = $null
+        if ($kind -eq [Microsoft.Win32.RegistryValueKind]::String) { $label = 'string' }
+        elseif ($kind -eq [Microsoft.Win32.RegistryValueKind]::ExpandString) { $label = 'expand' }
+        elseif ($kind -eq [Microsoft.Win32.RegistryValueKind]::DWord) { $label = 'dword'; $value = [int]$value }
+        if ($null -eq $label -or $null -eq $value) { continue }
+        [void]$Out.Add([ordered]@{ view = $View; key = $Path; name = $name; kind = $label; value = $value })
+    }
+    if (-not $Recurse) { return }
+    foreach ($sub in $Key.GetSubKeyNames()) {
+        $child = $Key.OpenSubKey($sub)
+        if ($null -eq $child) { continue }
+        try {
+            Read-Values -Key $child -Path ($Path + '\' + $sub) -View $View -Names $Names -Recurse $true -Out $Out
+        } finally {
+            $child.Close()
+        }
+    }
+}
+
+$values = New-Object System.Collections.ArrayList
+foreach ($read in @($plan.registry)) {
+    $base = [Microsoft.Win32.RegistryKey]::OpenBaseKey([Microsoft.Win32.RegistryHive]::LocalMachine, (Get-View $read.view))
+    try {
+        $key = $base.OpenSubKey([string]$read.key)
+        if ($null -eq $key) { continue }
+        try {
+            $names = $null
+            if ($null -ne $read.names) { $names = @($read.names) }
+            Read-Values -Key $key -Path ([string]$read.key) -View ([string]$read.view) -Names $names -Recurse ([bool]$read.recurse) -Out $values
+        } finally {
+            $key.Close()
+        }
+    } finally {
+        $base.Close()
+    }
+}
+
+$result = [ordered]@{ copied = @($copied.ToArray()); registry = @($values.ToArray()) }
+$json = ConvertTo-Json -InputObject $result -Depth 6
+[System.IO.File]::WriteAllText($plan.resultFile, $json, (New-Object System.Text.UTF8Encoding $false))
+Write-Output ('Saved Visual Studio: ' + $copied.Count + ' folders, ' + $values.Count + ' registry values')
+exit 0

package/sandbox/scripts/set-registry-values.ps1

@@ -0,0 +1,35 @@
+#Requires -Version 5.1
+# Writes string registry values from a plan (guest/toolchains/engines/unreal-engines.ts: the Unreal engines'
+# registration and the .uproject file association; what goes where is decided in shared/unreal/engines.ts). -PlanFile
+# is JSON written by the runtime:
+#   values: [{ hive: 'HKLM' | 'HKCU', key, name, value }]   64-bit view, '' = the default value
+# Safe to run again. Exit 0 when every value is set, 2 when one could not be.
+param([Parameter(Mandatory = $true)][string]$PlanFile)
+$ErrorActionPreference = 'Stop'
+
+$plan = Get-Content -LiteralPath $PlanFile -Raw -Encoding UTF8 | ConvertFrom-Json
+$failed = New-Object System.Collections.ArrayList
+$set = 0
+foreach ($v in @($plan.values)) {
+    $hive = if ($v.hive -eq 'HKLM') { [Microsoft.Win32.RegistryHive]::LocalMachine } else { [Microsoft.Win32.RegistryHive]::CurrentUser }
+    $base = [Microsoft.Win32.RegistryKey]::OpenBaseKey($hive, [Microsoft.Win32.RegistryView]::Registry64)
+    try {
+        $key = $base.CreateSubKey([string]$v.key)
+        try {
+            $key.SetValue([string]$v.name, [string]$v.value, [Microsoft.Win32.RegistryValueKind]::String)
+            $set++
+        } finally {
+            $key.Close()
+        }
+    } catch {
+        [void]$failed.Add($v.hive + '\' + $v.key + ' ' + $v.name + ' (' + $_.Exception.Message + ')')
+    } finally {
+        $base.Close()
+    }
+}
+if ($failed.Count) {
+    Write-Host ('Could not set: ' + ($failed -join '; '))
+    exit 2
+}
+Write-Host ('Set ' + $set + ' registry values')
+exit 0

package/schemas/config.schema.json

@@ -554,6 +554,10 @@
         },
         "unrealEngines": {
           "anyOf": [
+            {
+              "type": "string",
+              "const": "auto"
+            },
             {
               "type": "boolean"
             },
@@ -565,7 +569,29 @@
               }
             }
           ],
-          "description": "Unreal Engine versions installed with the Epic Games Launcher of this PC, read-only in the sandbox under C:\\PcInstalls: true = all of them, false = none, or a list (e.g. [\"5.4\"]). The agent can read their files."
+          "description": "Unreal Engine versions installed on this PC (with the Epic Games Launcher, or source builds it lists), read-only in the sandbox under C:\\PcInstalls\\unreal and registered there, so projects build with them without a download. \"auto\" = all of them whenever the sandbox is set up for Unreal, true = always, false = never, or a list (e.g. [\"5.4\"])."
+        },
+        "unrealEngineFolders": {
+          "maxItems": 8,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 3,
+            "maxLength": 260
+          },
+          "description": "Unreal Engine folders of this PC to use in the sandbox, writable (a source build, or a copy you build plugins into): each must hold Engine\\Build\\Build.version. Mapped under C:\\PcInstalls\\unreal and registered there."
+        },
+        "unrealAssets": {
+          "anyOf": [
+            {
+              "type": "string",
+              "const": "auto"
+            },
+            {
+              "type": "boolean"
+            }
+          ],
+          "description": "The Epic Games Launcher's vault cache of this PC (the Fab and Marketplace packs you downloaded), read-only in the sandbox at C:\\PcInstalls\\unreal\\Vault: what you download on your PC is there for the agents at once. \"auto\" = whenever the sandbox is set up for Unreal, true = always, false = never."
         },
         "unityEditors": {
           "anyOf": [
@@ -800,7 +826,7 @@
                 "lld",
                 "gnu"
               ],
-              "description": "GNU host: \"lld\" links with Rust's own lld through MinGW's gcc (much less memory than GNU ld), \"gnu\" with GNU ld."
+              "description": "\"lld\" (default) links with Rust's own lld: through MinGW's gcc on the GNU host (much less memory than GNU ld), and instead of link.exe on the MSVC host (link.exe writes executables into mapped folders as all zeros: os error 1392). \"gnu\" keeps GNU ld / link.exe."
             },
             "linkSlots": {
               "anyOf": [
@@ -864,7 +890,7 @@
                   "const": "auto"
                 }
               ],
-              "description": "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source. true, false, or \"auto\" = only when the project has a .uproject or .uplugin."
+              "description": "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. Visual Studio is installed once and kept on the data disk (~6.5 GB); later boots put it back in seconds. The engine itself comes from the Epic Games Launcher or its source. true, false, or \"auto\" = only when the project has a .uproject or .uplugin."
             },
             "acceptLicense": {
               "type": "boolean",
@@ -877,17 +903,13 @@
               },
               "description": "More Visual Studio workload or component IDs to add, e.g. [\"Microsoft.VisualStudio.Component.VC.Llvm.Clang\"]."
             },
-            "keepInstallFiles": {
-              "type": "boolean",
-              "description": "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
-            },
             "visualStudio": {
               "type": "string",
               "enum": [
                 "full",
-                "autosdk"
+                "buildtools"
               ],
-              "description": "\"full\": install Visual Studio Community (the engine finds it through the Setup API; ~10 GB, redone every boot). \"autosdk\" (experimental): skip Visual Studio and build an Unreal AutoSDK tree from the portable MSVC in tools\\unreal\\autosdk (kept between sandboxes); UnrealBuildTool finds MSVC through AutoSDK, but the editor's Visual Studio integration is not available. Needs toolchains.msvc (turned on for you)."
+              "description": "\"full\": Visual Studio Community with the C++ game workload (the IDE, its debugger and Unreal integration). \"buildtools\": only the Visual Studio Build Tools (MSVC, the Windows SDK and the .NET Framework parts UnrealBuildTool needs; no IDE). Either is installed once and kept on the data disk (tools\\visualstudio\\persist, ~6.5 GB for Community); later boots put it back in seconds."
             },
             "persistEngines": {
               "type": "boolean",
@@ -2030,6 +2052,13 @@
               "gitleaks",
               "ast-grep",
               "rust-analyzer",
+              "krita",
+              "inkscape",
+              "audacity",
+              "renderdoc",
+              "f3d",
+              "imagemagick",
+              "nomacs",
               "lua-language-server",
               "stylua",
               "selene",