windows-development-sandbox 1.23.2 → 1.25.1

package/dist/bin/{chunk-QFSJX2KW.js → chunk-G3TG4ZT7.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   attach
-} from "./chunk-USTRSHIE.js";
+} from "./chunk-F4PVBN23.js";
 export {
   attach
 };

package/dist/bin/claude-host.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-7YPEDAJD.js";
-import "./chunk-USTRSHIE.js";
+} from "./chunk-3GAXLATK.js";
+import "./chunk-F4PVBN23.js";
 
 // src/bin/claude-host.ts
 var args = process.argv.slice(2);

package/dist/bin/claude-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-7YPEDAJD.js";
-import "./chunk-USTRSHIE.js";
+} from "./chunk-3GAXLATK.js";
+import "./chunk-F4PVBN23.js";
 
 // src/bin/claude-sbx.ts
 run(process.argv.slice(2), { harness: "claude" });

package/dist/bin/codex-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-7YPEDAJD.js";
-import "./chunk-USTRSHIE.js";
+} from "./chunk-3GAXLATK.js";
+import "./chunk-F4PVBN23.js";
 
 // src/bin/codex-sbx.ts
 run(process.argv.slice(2), { harness: "codex" });

package/dist/bin/gemini-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-7YPEDAJD.js";
-import "./chunk-USTRSHIE.js";
+} from "./chunk-3GAXLATK.js";
+import "./chunk-F4PVBN23.js";
 
 // src/bin/gemini-sbx.ts
 run(process.argv.slice(2), { harness: "gemini" });

package/dist/bin/sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-7YPEDAJD.js";
-import "./chunk-USTRSHIE.js";
+} from "./chunk-3GAXLATK.js";
+import "./chunk-F4PVBN23.js";
 
 // src/bin/sandbox.ts
 run(process.argv.slice(2));

package/dist/bin/sbx-hide.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-7YPEDAJD.js";
-import "./chunk-USTRSHIE.js";
+} from "./chunk-3GAXLATK.js";
+import "./chunk-F4PVBN23.js";
 
 // src/bin/sbx-hide.ts
 run(process.argv.slice(2), { command: "hide" });

package/dist/bin/sbx-show.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-7YPEDAJD.js";
-import "./chunk-USTRSHIE.js";
+} from "./chunk-3GAXLATK.js";
+import "./chunk-F4PVBN23.js";
 
 // src/bin/sbx-show.ts
 run(process.argv.slice(2), { command: "show" });

package/dist/cli/commands/launch/launch.js

@@ -180,22 +180,25 @@ class Launcher {
             : prepareGithubToken(config, ctx.storageRoot, undefined, bootWants.wants.projects);
         // accounts.<kind>.share: the saved service sign-ins this boot's toolchains use, for the one-shot file only.
         const launchId = newLaunchId();
+        const toolchainsOn = toolchainsOnForBoot({ run }, bootWants.wants.projects);
         const accounts = generateOnly
             ? null
             : prepareServiceAccounts({
                 config,
                 others: bootWants.wants.projects,
-                on: toolchainsOnForBoot({ run }, bootWants.wants.projects),
+                on: toolchainsOn,
                 storageRoot: ctx.storageRoot,
                 dataPath: run.dataPath,
                 launchId,
                 // A new launch needs no sandbox running, so a lease held elsewhere is from one that stopped.
                 isRunning: () => isSandboxRunning(),
             });
-        // pcInstalls: this PC's games, engines and editors, read-only (yours only: never from a project file).
+        // pcInstalls: this PC's games, engines and editors, read-only (yours only: never from a project file). The
+        // engines ("auto") come along whenever this launch sets the sandbox up for Unreal.
         const pcInstalls = discoverPcInstalls(ctx.loaded.config.pcInstalls, {
             packageRoot: ctx.packageRoot,
             storageRoot: ctx.storageRoot,
+            unrealOn: toolchainsOn.has('unreal'),
         });
         // This PC's commit (RAM plus paging file) bounds the sandbox's memory as much as free RAM does.
         const hostMemory = generateOnly ? null : readHostMemory(ctx.storageRoot);

package/dist/cli/commands/registry.js

@@ -7,6 +7,7 @@ import { agentCommandsStatus } from '../../app/features/agent-commands/index.js'
 import { listAccounts } from '../../app/features/accounts/index.js';
 import { containedStatus, showStorage } from '../../app/features/storage/index.js';
 import { listProjects } from '../../app/features/projects/index.js';
+import { unrealOverview } from '../../app/features/unreal/index.js';
 import { definitionHandler } from '../operations/index.js';
 import { fail } from '../../core/util/index.js';
 import { claudeHost, config, doctor, hostCommand, logs, sync, watcher } from './maintenance/index.js';
@@ -48,6 +49,8 @@ export const HANDLERS = {
         return fail('Unknown storage action "' + action + '".', 'Use: sandbox storage, sandbox storage move <folder>, sandbox storage use <folder> or sandbox storage contained on|off|status');
     },
     engine: engine,
+    // The bare command shows the overview; its actions (add-engine, forget-engine, launcher) are the operations' hints.
+    unreal: definitionHandler(unrealOverview),
     'host-claude': claudeHost,
     host: hostCommand,
     _watch: watcher,

package/dist/cli/manifest.d.ts

@@ -488,6 +488,24 @@ declare const COMMAND_LIST: readonly [{
         shownAs?: string | undefined;
     }];
     readonly json: true;
+}, {
+    readonly name: "unreal";
+    readonly summary: "Unreal Engine: the sandbox's engines, this PC's engines and assets, register an engine folder, open the launcher";
+    readonly group: "Projects & accounts";
+    readonly json: true;
+    readonly examples: readonly ["sandbox unreal                         engines, which project uses which, Visual Studio", "sandbox unreal add-engine D:\\UE5       use this engine folder in sandboxes (writable)", "sandbox unreal launcher                open the Epic Games Launcher in the running sandbox"];
+    readonly args: readonly [{
+        readonly name: "action";
+        readonly description: "status, add-engine, forget-engine, launcher";
+        readonly required: false;
+        readonly choices: readonly ["status"];
+    }, {
+        readonly name: "folder";
+        readonly description: "(add-engine, forget-engine) the engine folder";
+        readonly required: false;
+        readonly when: readonly [];
+    }];
+    readonly options: readonly [];
 }, {
     readonly name: "engine";
     readonly summary: "(beta) what runs your sandbox (Windows Sandbox or HCS) and what each engine can do on this PC";

package/dist/cli/manifest.js

@@ -381,6 +381,32 @@ const COMMAND_LIST = [
         ],
         json,
     },
+    {
+        name: 'unreal',
+        summary: "Unreal Engine: the sandbox's engines, this PC's engines and assets, register an engine folder, open the launcher",
+        group: 'Projects & accounts',
+        json,
+        examples: [
+            'sandbox unreal                         engines, which project uses which, Visual Studio',
+            'sandbox unreal add-engine D:\\UE5       use this engine folder in sandboxes (writable)',
+            'sandbox unreal launcher                open the Epic Games Launcher in the running sandbox',
+        ],
+        args: [
+            {
+                name: 'action',
+                description: 'status, add-engine, forget-engine, launcher',
+                required: false,
+                choices: ['status'],
+            },
+            {
+                name: 'folder',
+                description: '(add-engine, forget-engine) the engine folder',
+                required: false,
+                when: [],
+            },
+        ],
+        options: [],
+    },
     {
         name: 'engine',
         summary: '(beta) what runs your sandbox (Windows Sandbox or HCS) and what each engine can do on this PC',

package/dist/cli/menu/coverage-exempt.js

@@ -12,6 +12,7 @@ export const COMMAND_PLACES = {
     data: { place: 'Maintenance > Data' },
     storage: { place: 'Maintenance > Storage' },
     engine: { place: 'Maintenance > Engine' },
+    unreal: { place: 'Sandbox > Unreal Engine' },
     sync: { place: 'Maintenance > More commands' },
     logs: { place: 'Maintenance > Logs (key f follows)' },
     setup: { place: 'Maintenance > Health' },

package/dist/cli/menu/pages/sandbox-page.d.ts

@@ -1,5 +1,6 @@
 import { type ProjectsList } from '../../../app/features/projects/index.js';
 import { type SandboxStatus } from '../../../app/features/sandbox/index.js';
+import { type UnrealOverview } from '../../../app/features/unreal/index.js';
 import type { Context } from '../../commands/context.js';
 import { type DatabaseRow } from '../../services/index.js';
 import { type App, type ListOptions, type ListResult } from '../../tui/index.js';
@@ -11,6 +12,8 @@ export interface SandboxModel {
     readonly databases: DatabaseRow[] | null;
     /** The agent "Start the sandbox" offers while nothing runs. */
     readonly defaultAgent: string;
+    /** The Unreal overview; null when it could not be read. */
+    readonly unreal: UnrealOverview | null;
 }
 /** The list for the sandbox tab. Pure. */
 export declare function sandboxOptions(m: SandboxModel): ListOptions<string>;

package/dist/cli/menu/pages/sandbox-page.js

@@ -1,9 +1,10 @@
 // Section 3: the sandbox as a whole. Status (the sandbox view: its facts, the window, stopping it), Projects (the
-// projects view: roots, the projects and the all-projects setting) and Databases (start and stop), each a category on
-// the left.
+// projects view: roots, the projects and the all-projects setting), Databases (start and stop) and Unreal Engine (the
+// unreal view), each a category on the left.
 import { listProjects, projectsPage } from '../../../app/features/projects/index.js';
 import { sandboxPage, sandboxStatus } from '../../../app/features/sandbox/index.js';
 import { readQuery } from '../../../app/registry.js';
+import { unrealOverview, unrealPage } from '../../../app/features/unreal/index.js';
 import { errMsg, safeText } from '../../../core/util/index.js';
 import { RunDir } from '../../../shared/channel/index.js';
 import { DatabasesService } from '../../services/index.js';
@@ -19,7 +20,18 @@ const CATEGORIES = [
         description: 'Project roots (folders of projects, opened without a restart) and the projects started before.',
     },
     { id: 'databases', label: 'Databases', description: 'Databases the sandbox can run: start and stop them.' },
+    {
+        id: 'unreal',
+        label: 'Unreal Engine',
+        description: "Engines, which project uses which, this PC's engines and assets, Visual Studio and the debugger.",
+    },
 ];
+/** The Unreal category: the Unreal view's rows and keys (prefixed, so they never clash with other rows). */
+function unrealMenu(m) {
+    return m.unreal
+        ? menuView(unrealPage(m.unreal), { category: 'unreal', prefix: 'unreal:', refresh: false })
+        : undefined;
+}
 /** The status category: the sandbox view's rows (prefixed, so they never clash with the projects' rows). */
 function statusView(m) {
     return menuView(sandboxPage(m.report), { category: 'status', prefix: 'status:', refresh: false });
@@ -32,6 +44,8 @@ function projectsView(m) {
 function viewFor(m, category) {
     if (category === 'projects')
         return projectsView(m);
+    if (category === 'unreal')
+        return unrealMenu(m);
     if (category === 'status' || category === undefined)
         return statusView(m);
     return undefined;
@@ -64,16 +78,31 @@ export function sandboxOptions(m) {
         section: 'Databases',
         description: d.title + '. Enter ' + (d.running ? 'stops' : 'starts') + ' it (the first start downloads it).',
     }));
+    const unreal = unrealMenu(m);
+    const noUnreal = unreal
+        ? []
+        : [
+            {
+                value: 'info:unreal',
+                label: 'Could not read the Unreal set-up',
+                category: 'unreal',
+                section: 'Unreal Engine',
+                description: 'l looks again.',
+                disabled: 'l looks again.',
+            },
+        ];
     return {
         path: [],
-        items: [...statusItems, ...projects.items, ...databases, ...noDatabases],
+        items: [...statusItems, ...projects.items, ...databases, ...noDatabases, ...(unreal?.items ?? []), ...noUnreal],
         categories: CATEGORIES,
         empty: 'Nothing here yet.',
         actions: (category) => category === 'projects'
             ? [...projects.actions, REFRESH]
             : category === 'databases'
                 ? [REFRESH]
-                : [...status.actions, REFRESH],
+                : category === 'unreal'
+                    ? [...(unreal?.actions ?? []), REFRESH]
+                    : [...status.actions, REFRESH],
         enterLabel: (category, id) => viewFor(m, category)?.enterLabel(category, id) || enterLabel(id ?? '', m),
     };
 }
@@ -133,6 +162,7 @@ export class SandboxPage extends ListPage {
             projects: await readQuery(listProjects, this.ctx),
             databases,
             defaultAgent: this.defaultAgent(),
+            unreal: await readQuery(unrealOverview, this.ctx).catch(() => null),
         };
     }
     /** The folder `sbx-db` runs in: the sandbox's own workspace. */

package/dist/cli/menu/views.js

@@ -19,6 +19,7 @@ import { webView } from '../../app/features/web/index.js';
 import { vpnView } from '../../app/features/vpn/index.js';
 import { githubView } from '../../app/features/github/index.js';
 import { accessView } from '../../app/features/access/index.js';
+import { unrealView } from '../../app/features/unreal/index.js';
 export const MENU_VIEWS = [
     { view: agentsView, section: 'Agents' },
     { view: agentEnvView, section: 'Agents' },
@@ -28,6 +29,7 @@ export const MENU_VIEWS = [
     { view: accountsView, section: 'Accounts' },
     { view: appsView, section: 'Apps' },
     { view: projectsView, section: 'Sandbox' },
+    { view: unrealView, section: 'Sandbox' },
     { view: healthView, section: 'Maintenance' },
     { view: dataView, section: 'Maintenance' },
     { view: storageView, section: 'Maintenance' },

package/dist/core/config/defaults.js

@@ -58,7 +58,14 @@ export const DEFAULTS = {
         perplexity: { share: false },
         comet: { share: false },
     },
-    pcInstalls: { steamGames: false, epicGames: false, unrealEngines: false, unityEditors: false },
+    pcInstalls: {
+        steamGames: false,
+        epicGames: false,
+        unrealEngines: 'auto',
+        unrealEngineFolders: [],
+        unrealAssets: 'auto',
+        unityEditors: false,
+    },
     provisioning: {
         copyFromHost: true,
         fallbackToInstall: true,
@@ -87,7 +94,6 @@ export const DEFAULTS = {
             enabled: 'auto',
             acceptLicense: false,
             components: [],
-            keepInstallFiles: true,
             visualStudio: 'full',
             persistEngines: true,
             derivedDataCache: 'persisted',
@@ -197,9 +203,16 @@ export const DEFAULTS = {
             home: { env: { CODEX_HOME: 'codex' }, loginFiles: ['auth.json', '.credentials.json'], hostDir: '~/.codex' },
             localState: { CODEX_SQLITE_HOME: 'sqlite' },
             // Its own command sandbox keeps local users' passwords sealed with DPAPI: unreadable in the next sandbox
-            // ("CryptUnprotectData" on every command), so it sets that sandbox up again at each boot. tmp\arg0: folders
-            // Codex cannot remove in a mapped folder (os error 145, a warning at every start); nothing holds them at boot.
-            bootReset: ['.sandbox-secrets', '.sandbox\\setup_marker.json', '.sandbox\\deny_read_acl_state.json', 'tmp\\arg0'],
+            // ("CryptUnprotectData" on every command), so it sets that sandbox up again at each boot. tmp\arg0 and
+            // tmp\arg0-windows (newer Codex): folders Codex cannot remove in a mapped folder (os error 145, a warning at
+            // every start); nothing holds them at boot.
+            bootReset: [
+                '.sandbox-secrets',
+                '.sandbox\\setup_marker.json',
+                '.sandbox\\deny_read_acl_state.json',
+                'tmp\\arg0',
+                'tmp\\arg0-windows',
+            ],
             resumeArguments: ['resume', '--last'],
         },
         gemini: {

package/dist/core/detect/toolchains.js

@@ -127,15 +127,9 @@ function applyImplications(settings, result) {
         imply(settings, result, 'android', 'React Native builds for Android');
     if (result.godot.on && settings.godot.dotnet === true)
         imply(settings, result, 'dotnet', "Godot's .NET build");
-    if (result.unreal.on && settings.unreal.visualStudio === 'autosdk')
-        imply(settings, result, 'msvc', 'Unreal builds from the portable MSVC (AutoSDK)');
-    // Unreal's licence acceptance covers the MSVC it builds from (the same Visual Studio terms).
-    const autosdkLicence = settings.unreal.visualStudio === 'autosdk' && settings.unreal.acceptLicense;
     for (const name of LICENSED_TOOLCHAINS) {
         if (settings[name].enabled !== 'auto' || !result[name].on || settings[name].acceptLicense)
             continue;
-        if (name === 'msvc' && autosdkLicence)
-            continue;
         result[name] = {
             on: false,
             reason: 'would be used (' + result[name].reason + '); set toolchains.' + name + '.acceptLicense to install it',

package/dist/core/schema/config.d.ts

@@ -131,7 +131,9 @@ export declare const ConfigSchema: z.ZodObject<{
     pcInstalls: z.ZodObject<{
         steamGames: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodNumber>]>;
         epicGames: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>;
-        unrealEngines: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>;
+        unrealEngines: z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean, z.ZodArray<z.ZodString>]>;
+        unrealEngineFolders: z.ZodArray<z.ZodString>;
+        unrealAssets: z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>;
         unityEditors: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>;
     }, z.core.$strict>;
     provisioning: z.ZodObject<{
@@ -195,10 +197,9 @@ export declare const ConfigSchema: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
             acceptLicense: z.ZodBoolean;
             components: z.ZodArray<z.ZodString>;
-            keepInstallFiles: z.ZodBoolean;
             visualStudio: z.ZodEnum<{
                 full: "full";
-                autosdk: "autosdk";
+                buildtools: "buildtools";
             }>;
             persistEngines: z.ZodBoolean;
             derivedDataCache: z.ZodEnum<{
@@ -690,7 +691,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        unreal: z.ZodOptional<z.ZodObject<{
+        node: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -705,7 +706,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        node: z.ZodOptional<z.ZodObject<{
+        go: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -720,7 +721,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        go: z.ZodOptional<z.ZodObject<{
+        python: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -735,7 +736,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        python: z.ZodOptional<z.ZodObject<{
+        rust: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -750,7 +751,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        rust: z.ZodOptional<z.ZodObject<{
+        msvc: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -765,7 +766,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        msvc: z.ZodOptional<z.ZodObject<{
+        unreal: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;

package/dist/core/schema/pc-installs.d.ts

@@ -2,6 +2,8 @@ import { z } from 'zod';
 export declare const PcInstallsSchema: z.ZodObject<{
     steamGames: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodNumber>]>;
     epicGames: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>;
-    unrealEngines: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>;
+    unrealEngines: z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean, z.ZodArray<z.ZodString>]>;
+    unrealEngineFolders: z.ZodArray<z.ZodString>;
+    unrealAssets: z.ZodUnion<readonly [z.ZodLiteral<"auto">, z.ZodBoolean]>;
     unityEditors: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>;
 }, z.core.$strict>;

package/dist/core/schema/pc-installs.js

@@ -11,7 +11,16 @@ export const PcInstallsSchema = z
     .strictObject({
     steamGames: pick(z.number().int().positive(), 'Steam games (true maps each library; a list of app IDs maps only those games)', '[480, 730]'),
     epicGames: pick(z.string().regex(/^[A-Za-z0-9._-]{1,100}$/), 'Epic Games Launcher games (by their app name)', '["Fortnite"]'),
-    unrealEngines: pick(z.string().regex(/^(UE_)?\d+\.\d+$/), 'Unreal Engine versions installed with the Epic Games Launcher', '["5.4"]'),
+    unrealEngines: z
+        .union([z.literal('auto'), z.boolean(), z.array(z.string().regex(/^(UE_)?\d+\.\d+$/))])
+        .describe('Unreal Engine versions installed on this PC (with the Epic Games Launcher, or source builds it lists), read-only in the sandbox under C:\\PcInstalls\\unreal and registered there, so projects build with them without a download. "auto" = all of them whenever the sandbox is set up for Unreal, true = always, false = never, or a list (e.g. ["5.4"]).'),
+    unrealEngineFolders: z
+        .array(z.string().min(3).max(260))
+        .max(8)
+        .describe('Unreal Engine folders of this PC to use in the sandbox, writable (a source build, or a copy you build plugins into): each must hold Engine\\Build\\Build.version. Mapped under C:\\PcInstalls\\unreal and registered there.'),
+    unrealAssets: z
+        .union([z.literal('auto'), z.boolean()])
+        .describe('The Epic Games Launcher\'s vault cache of this PC (the Fab and Marketplace packs you downloaded), read-only in the sandbox at C:\\PcInstalls\\unreal\\Vault: what you download on your PC is there for the agents at once. "auto" = whenever the sandbox is set up for Unreal, true = always, false = never.'),
     unityEditors: pick(z.string().regex(/^\d+\.\d+\.\d+[abfp]\d+$/), 'Unity editors installed with Unity Hub', '["6000.0.32f1"]'),
 })
     .describe("Games, engines and editors installed on this PC, mapped read-only into sandboxes (no copy, no room on the sandbox's disk).");

package/dist/core/schema/toolchains.d.ts

@@ -38,10 +38,9 @@ export declare const ToolchainsSchema: z.ZodObject<{
         enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
         acceptLicense: z.ZodBoolean;
         components: z.ZodArray<z.ZodString>;
-        keepInstallFiles: z.ZodBoolean;
         visualStudio: z.ZodEnum<{
             full: "full";
-            autosdk: "autosdk";
+            buildtools: "buildtools";
         }>;
         persistEngines: z.ZodBoolean;
         derivedDataCache: z.ZodEnum<{

package/dist/core/schema/toolchains.js

@@ -40,7 +40,7 @@ export const ToolchainsSchema = z.strictObject({
             .describe('"auto" (default): on the sandbox\'s own disk when C: has 25 GB free at boot, else "separate" (builds then write through the mapped workspace, which can overload this PC\'s disk). "shared": cargo\'s default target\\ (shared with builds on this PC, so builds on either side invalidate the other), "separate": <workspace>\\target\\sandbox (kept, no cross-talk), "local": on the sandbox\'s own disk (fastest, lost every boot), or a guest path.'),
         linker: z
             .enum(['lld', 'gnu'])
-            .describe('GNU host: "lld" links with Rust\'s own lld through MinGW\'s gcc (much less memory than GNU ld), "gnu" with GNU ld.'),
+            .describe('"lld" (default) links with Rust\'s own lld: through MinGW\'s gcc on the GNU host (much less memory than GNU ld), and instead of link.exe on the MSVC host (link.exe writes executables into mapped folders as all zeros: os error 1392). "gnu" keeps GNU ld / link.exe.'),
         linkSlots: z
             .union([z.literal('auto'), z.number().int().min(1).max(32)])
             .describe('GNU host: how many programs may link at the same time in the whole sandbox (other links wait). "auto" = one per 6 GB of sandbox memory, 1 to 4 (the memory governor slows links down too when memory runs short).'),
@@ -54,17 +54,14 @@ export const ToolchainsSchema = z.strictObject({
         sdkVersion: z.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".'),
     }),
     unreal: z.strictObject({
-        enabled: enabled('Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.', 'a .uproject or .uplugin'),
+        enabled: enabled('Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. Visual Studio is installed once and kept on the data disk (~6.5 GB); later boots put it back in seconds. The engine itself comes from the Epic Games Launcher or its source.', 'a .uproject or .uplugin'),
         acceptLicense: z
             .boolean()
             .describe('Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence.'),
         components: StringsSchema.describe('More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'),
-        keepInstallFiles: z
-            .boolean()
-            .describe('Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room.'),
         visualStudio: z
-            .enum(['full', 'autosdk'])
-            .describe('"full": install Visual Studio Community (the engine finds it through the Setup API; ~10 GB, redone every boot). "autosdk" (experimental): skip Visual Studio and build an Unreal AutoSDK tree from the portable MSVC in tools\\unreal\\autosdk (kept between sandboxes); UnrealBuildTool finds MSVC through AutoSDK, but the editor\'s Visual Studio integration is not available. Needs toolchains.msvc (turned on for you).'),
+            .enum(['full', 'buildtools'])
+            .describe('"full": Visual Studio Community with the C++ game workload (the IDE, its debugger and Unreal integration). "buildtools": only the Visual Studio Build Tools (MSVC, the Windows SDK and the .NET Framework parts UnrealBuildTool needs; no IDE). Either is installed once and kept on the data disk (tools\\visualstudio\\persist, ~6.5 GB for Community); later boots put it back in seconds.'),
         persistEngines: z
             .boolean()
             .describe('Engines the Epic Games Launcher installs go to tools\\unreal\\engines (kept between sandboxes, 40-60 GB each) and are registered with the launcher again every boot. Off: they go on the sandbox disk and are lost when it closes. Engines installed on this PC can be mapped instead (pcInstalls.unrealEngines).'),

package/dist/guest/accounts/kinds/epic.js

@@ -1,26 +1,31 @@
 // Epic Games: the handed-over sign-in goes into the launcher's GameUserSettings.ini before anyone opens it (its other
-// settings are kept, and the file keeps the encoding it had: the launcher often writes UTF-16). The watch reads it
-// back to notice when the launcher renews it, or when you sign in here the first time.
+// settings are kept, and the file keeps the encoding it had: the launcher often writes UTF-16). Launcher 17+ reads
+// Config\WindowsEditor, older ones Config\Windows: both get it. The watch reads it back to notice when the launcher
+// renews it, or when you sign in here the first time.
 import fs from 'node:fs';
 import path from 'node:path';
-import { epicSettingsFile, MAX_EPIC_INI_BYTES, readEpicLogin, withEpicLogin, } from '../../../shared/accounts/index.js';
+import { epicSettingsFiles, MAX_EPIC_INI_BYTES, readEpicLogin, withEpicLogin, } from '../../../shared/accounts/index.js';
 import { decodeText, encodeText, readBoundedFile } from '../../../shared/io/index.js';
 import { localAppData } from '../adapter.js';
-function settingsFile() {
-    return epicSettingsFile(localAppData());
-}
 export const epicAdapter = {
     kind: 'epic',
     apply(p) {
-        const file = settingsFile();
-        const bytes = readBoundedFile(file, MAX_EPIC_INI_BYTES);
-        const read = bytes ? decodeText(bytes) : { text: '', encoding: 'utf8' };
-        fs.mkdirSync(path.dirname(file), { recursive: true });
-        fs.writeFileSync(file, encodeText(withEpicLogin(read.text, p), read.encoding));
+        for (const file of epicSettingsFiles(localAppData())) {
+            const bytes = readBoundedFile(file, MAX_EPIC_INI_BYTES);
+            const read = bytes ? decodeText(bytes) : { text: '', encoding: 'utf8' };
+            fs.mkdirSync(path.dirname(file), { recursive: true });
+            fs.writeFileSync(file, encodeText(withEpicLogin(read.text, p), read.encoding));
+        }
         return { summary: 'Epic Games Launcher: signed in with your saved sign-in' };
     },
     current() {
-        const bytes = readBoundedFile(settingsFile(), MAX_EPIC_INI_BYTES);
-        return bytes ? readEpicLogin(decodeText(bytes).text) : null;
+        // The newest place first: the one the launcher in this sandbox writes when it renews the sign-in.
+        for (const file of epicSettingsFiles(localAppData())) {
+            const bytes = readBoundedFile(file, MAX_EPIC_INI_BYTES);
+            const login = bytes ? readEpicLogin(decodeText(bytes).text) : null;
+            if (login)
+                return login;
+        }
+        return null;
     },
 };

package/dist/guest/agents/agent-files.d.ts

@@ -52,9 +52,10 @@ export declare function bootResetPaths(agents: Readonly<Record<string, Harness>>
 }[];
 type CodexSettings = Config['codex'];
 /**
- * The flags every Codex start gets. Flags beat config.toml and a resumed thread's saved permissions, which is why the
- * sandbox does not rely on the file. Full access with no questions is the one flag that skips Codex's Windows sandbox
- * setup for certain. Pure.
+ * The flags every Codex start through the sandbox gets (the codex.cmd shim, the daemon's sessions). Flags beat
+ * config.toml and a resumed thread's saved permissions; config.toml carries the same settings for a start without
+ * them (codexConfigOwned). Full access with no questions is the one flag that skips Codex's Windows sandbox setup for
+ * certain. Pure.
  */
 export declare function codexArguments(c: CodexSettings): string[];
 /** The arguments an agent always starts with: its own, and for codex the sandbox's settings. */
@@ -62,10 +63,13 @@ export declare function agentArguments(name: string, harness: Harness, codex: Co
 /** The largest config.toml the sandbox edits. */
 export declare const MAX_CODEX_CONFIG_BYTES: number;
 /**
- * Codex's config.toml as the sandbox wants it, every other line byte for byte: the lines an older version wrote above
- * the first table (sandbox_mode, approval_policy, under the marker comment) are gone, `[windows] sandbox` follows
- * windowsSandbox ("off" removes the line, so Codex does not set up its own sandbox users), and
- * mcp_oauth_credentials_store = "file" is added when it is not set. Running it again changes nothing. Pure.
+ * Codex's config.toml as the sandbox wants it, every other line byte for byte. Above the first table, under the
+ * marker comment: sandbox_mode, approval_policy (and model, model_reasoning_effort when set), so ANY start of Codex
+ * obeys the codex settings, also one without the shim's flags (a copy installed with npm -g). The marked lines are
+ * replaced each time; a key the user set on a line of their own above the first table is left to them.
+ * `[windows] sandbox` follows windowsSandbox ("off" removes the line, which Codex adds back after its own setup, so it
+ * does not set up its own sandbox users), and mcp_oauth_credentials_store = "file" is added when it is not set.
+ * Keeps the file's line endings; running it again changes nothing. Pure.
  */
 export declare function codexConfigOwned(toml: string, c: CodexSettings): string;
 /**