windows-development-sandbox 1.25.1 → 1.27.0

package/sandbox/csharp/AppActivation.cs

@@ -0,0 +1,38 @@
+// Starts an installed Store (packaged) app by its app user model id, with a command line. Loaded by
+// scripts\start-store-app.ps1 (Add-Type). C# 5.
+using System;
+using System.ComponentModel;
+using System.Runtime.InteropServices;
+
+public static class SbxAppActivation
+{
+    private const int OptionsNone = 0;
+
+    [ComImport]
+    [Guid("2e941141-7f97-4756-ba1d-9decde894a3d")]
+    [InterfaceType(ComInterfaceType.InterfaceIsIUnknown)]
+    private interface IApplicationActivationManager
+    {
+        [PreserveSig]
+        int ActivateApplication([MarshalAs(UnmanagedType.LPWStr)] string appUserModelId, [MarshalAs(UnmanagedType.LPWStr)] string arguments, int options, out uint processId);
+    }
+
+    [ComImport]
+    [Guid("45BA127D-10A8-46EA-8AB7-56EA9078943C")]
+    private class ApplicationActivationManager
+    {
+    }
+
+    /// <summary>Starts the app and returns its process id; throws a Win32Exception when Windows refuses.</summary>
+    public static uint Start(string appUserModelId, string arguments)
+    {
+        IApplicationActivationManager manager = (IApplicationActivationManager)new ApplicationActivationManager();
+        uint processId;
+        int result = manager.ActivateApplication(appUserModelId, arguments, OptionsNone, out processId);
+        if (result < 0)
+        {
+            throw new Win32Exception(result, "ActivateApplication failed for " + appUserModelId);
+        }
+        return processId;
+    }
+}

package/sandbox/scripts/install-store-package.ps1

@@ -0,0 +1,28 @@
+#Requires -Version 5.1
+# Installs a Microsoft Store app from its package files with Add-AppxPackage (guest/apps/store-app.ts). -ListFile is
+# JSON written by the runtime: { main: "<full path of the app's .msix>", dependencies: ["<full path>", ...] }. The
+# package keeps the publisher's signature (nothing is repacked), so Windows checks it as it would any Store package.
+# The sandbox's Windows is new on every boot: this runs on every boot, from the package kept on the data disk.
+param(
+    [Parameter(Mandatory = $true)][string]$ListFile,
+    [Parameter(Mandatory = $true)][string]$PackageName
+)
+$ErrorActionPreference = 'Stop'
+
+if ($PackageName -notmatch '^[A-Za-z0-9.]{1,100}$') { throw 'That is not a package name.' }
+$list = ConvertFrom-Json -InputObject (Get-Content -LiteralPath $ListFile -Raw -Encoding UTF8)
+$dependencies = @()
+if ($list.dependencies) { $dependencies = @($list.dependencies | ForEach-Object { $_ }) }
+
+$existing = Get-AppxPackage -Name $PackageName -ErrorAction SilentlyContinue | Select-Object -First 1
+if (-not $existing) {
+    if ($dependencies.Count -gt 0) {
+        Add-AppxPackage -Path $list.main -DependencyPath $dependencies
+    }
+    else {
+        Add-AppxPackage -Path $list.main
+    }
+    $existing = Get-AppxPackage -Name $PackageName -ErrorAction Stop | Select-Object -First 1
+}
+[pscustomobject]@{ name = [string]$existing.Name; version = [string]$existing.Version; family = [string]$existing.PackageFamilyName } |
+    ConvertTo-Json -Compress

package/sandbox/scripts/start-store-app.ps1

@@ -0,0 +1,29 @@
+#Requires -Version 5.1
+# Starts an installed Microsoft Store app with command-line arguments (a shortcut to shell:AppsFolder cannot pass any).
+# The Perplexity desktop app is started with its own profile folder and its DevTools port, so the sandbox can keep
+# its perplexity.ai sign-in (guest/browser/perplexity-app.ts). -Port 0 picks a free port, written to the profile.
+param(
+    [Parameter(Mandatory = $true)][string]$PackageName,
+    [string]$UserDataDir = '',
+    [int]$Port = -1
+)
+$ErrorActionPreference = 'Stop'
+
+if ($PackageName -notmatch '^[A-Za-z0-9.]{1,100}$') { throw 'That is not a package name.' }
+$package = Get-AppxPackage -Name $PackageName -ErrorAction Stop | Select-Object -First 1
+if (-not $package) { throw ($PackageName + ' is not installed.') }
+$manifest = Get-AppxPackageManifest -Package $package
+$application = @($manifest.Package.Applications.Application)[0]
+$aumid = $package.PackageFamilyName + '!' + $application.Id
+
+$arguments = ''
+if ($UserDataDir) {
+    New-Item -ItemType Directory -Force -Path $UserDataDir | Out-Null
+    Remove-Item -LiteralPath (Join-Path $UserDataDir 'DevToolsActivePort') -Force -ErrorAction SilentlyContinue
+    $arguments = '--user-data-dir="' + $UserDataDir + '"'
+}
+if ($Port -ge 0) { $arguments = ($arguments + ' --remote-debugging-port=' + $Port).Trim() }
+
+Add-Type -Path (Join-Path $PSScriptRoot '..\csharp\AppActivation.cs')
+$processId = [SbxAppActivation]::Start($aumid, $arguments)
+Write-Output $processId

package/schemas/config.schema.json

@@ -407,6 +407,10 @@
         "shareToken": {
           "type": "boolean",
           "description": "Give each sandbox the GitHub token you saved in Accounts (best a fine-grained token limited to some repositories and permissions), so gh and https git work there without logging in. Only with provisioning.git.access \"full\". The agent in the sandbox can read the token and use it for whatever it allows. A project file (.sandbox-config.json) cannot turn this on."
+        },
+        "usePcLogin": {
+          "type": "boolean",
+          "description": "Give each sandbox the GitHub CLI (gh) login from this PC, when there is one, so gh and https git work there without logging in. Used when no token saved for sandboxes is handed over. Only with provisioning.git.access \"full\". Without a gh login on the PC nothing happens. The login reaches everything your account can, and the agent in the sandbox can read it. A project file (.sandbox-config.json) cannot turn this on."
         }
       },
       "additionalProperties": false
@@ -439,7 +443,7 @@
           "properties": {
             "share": {
               "type": "boolean",
-              "description": "Hand your saved Unity sign-in to sandboxes that use unity (sign in once in a sandbox, or take this PC's licence from Accounts). Kept encrypted on this PC; The agent in the sandbox can use this sign-in while it is there. It works in one sandbox at a time: a second sandbox starts without it while the first one runs. A Pro seat is handed back when the sandbox stops cleanly; a sandbox closed abruptly may keep it until you return it. Yours only: a project file can only turn it off."
+              "description": "Hand your saved Unity sign-in to sandboxes that use unity (sign in once in a sandbox, or take this PC's licence from Accounts). Kept encrypted on this PC; The agent in the sandbox can use this sign-in while it is there. It works in one sandbox at a time: a second sandbox starts without it while the first one runs. Unity Personal is activated by signing in: sign in to Unity once in a sandbox and the licence it makes is kept for the next ones (if Unity refuses it there, sign in again). A Plus or Pro serial is activated in each sandbox and handed back when the sandbox stops cleanly; a sandbox closed abruptly may keep the seat until you remove it at id.unity.com (My Seats). A licence file taken from this PC may not work in a sandbox: Unity ties it to the computer. Yours only: a project file can only turn it off."
             }
           },
           "additionalProperties": false
@@ -513,6 +517,16 @@
             }
           },
           "additionalProperties": false
+        },
+        "perplexityapp": {
+          "type": "object",
+          "properties": {
+            "share": {
+              "type": "boolean",
+              "description": "Hand your saved Perplexity desktop app sign-in to sandboxes that use the Perplexity desktop app (sign in to the Perplexity app once in a sandbox: it cannot be taken from this PC). Kept encrypted on this PC; The agent in the sandbox can use this sign-in while it is there. It can act as you in the Perplexity app and spend your Perplexity Computer credits; the app acts on the pages it reads, which can try to steer it. Your sign-in in the Perplexity app can't be copied from this PC: Windows locks it to your PC account. Sign in once inside a sandbox and it is kept for the next ones. Only the perplexity.ai sign-in cookies are kept: never saved passwords, other sites, localStorage or history. Several sandboxes can use it at once: the sign-in the last one hands back is kept. Yours only: a project file can only turn it off."
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false,
@@ -595,6 +609,10 @@
         },
         "unityEditors": {
           "anyOf": [
+            {
+              "type": "string",
+              "const": "auto"
+            },
             {
               "type": "boolean"
             },
@@ -606,7 +624,19 @@
               }
             }
           ],
-          "description": "Unity editors installed with Unity Hub of this PC, read-only in the sandbox under C:\\PcInstalls: true = all of them, false = none, or a list (e.g. [\"6000.0.32f1\"]). The agent can read their files."
+          "description": "Unity editors installed on this PC (with Unity Hub), read-only in the sandbox under C:\\PcInstalls\\unity: a project opens with the PC's editor without a download. \"auto\" = all of them whenever the sandbox is set up for Unity, true = always, false = never, or a list (e.g. [\"6000.0.32f1\"])."
+        },
+        "unityAssets": {
+          "anyOf": [
+            {
+              "type": "string",
+              "const": "auto"
+            },
+            {
+              "type": "boolean"
+            }
+          ],
+          "description": "This PC's Unity Asset Store downloads (.unitypackage files), read-only at C:\\PcInstalls\\unity\\AssetStore: what you download on your PC is there for the agents at once. \"auto\" = whenever the sandbox is set up for Unity, true = always, false = never."
         }
       },
       "additionalProperties": false,
@@ -939,7 +969,7 @@
                   "const": "auto"
                 }
               ],
-              "description": "Unity: the editor version a project asks for, from Unity's release API (checked against its published hash), installed into tools\\unity\\<version> (6-7 GB each), with the modules you list. true, false, or \"auto\" = only when the project has ProjectSettings/ProjectVersion.txt."
+              "description": "Unity: the editor version a project asks for, from Unity's release API (checked against its published hash), installed on the data disk (tools\\unity\\editors\\<version>, 8-13 GB each, kept between sandboxes), with the modules you list. This PC's editors (pcInstalls.unityEditors) are used first. true, false, or \"auto\" = only when the project has ProjectSettings/ProjectVersion.txt."
             },
             "acceptLicense": {
               "type": "boolean",
@@ -948,7 +978,7 @@
             "version": {
               "type": "string",
               "minLength": 1,
-              "description": "\"project\" = the version in ProjectSettings/ProjectVersion.txt, or an editor version such as \"6000.0.32f1\"."
+              "description": "\"project\" = the version in ProjectSettings/ProjectVersion.txt, or an editor version such as \"6000.0.32f1\" for folders without one (a project's own version always wins)."
             },
             "modules": {
               "type": "array",
@@ -960,13 +990,35 @@
             },
             "hub": {
               "type": "boolean",
-              "description": "Also Unity Hub, with the installed editors listed in it."
+              "description": "Also Unity Hub (kept on the data disk), for signing in to Unity Personal and installing editors by hand."
             },
             "keepVersions": {
               "type": "integer",
               "minimum": 1,
               "maximum": 20,
               "description": "How many editor versions to keep in tools\\unity; older ones are removed (the least recently used first)."
+            },
+            "mcp": {
+              "type": "boolean",
+              "description": "The Unity CLI's MCP server (unity mcp) in Claude Code and Codex as sbx-unity: Unity's read-only tools always, the open editor's tools when the project has the Unity Pipeline package (Unity 6 and later). Nothing in your project changes."
+            },
+            "agentSkills": {
+              "type": "boolean",
+              "description": "Unity's skills for Claude Code and Codex, from Unity-Technologies/skills at the commit the Unity CLI pins."
+            },
+            "cliVersion": {
+              "type": "string",
+              "pattern": "^(latest|\\d+\\.\\d+\\.\\d+(-[A-Za-z0-9.]+)?)$",
+              "description": "The Unity CLI version, checked against the SHA-256 Unity publishes: a version such as \"1.0.0-beta.16\", or \"latest\". It never updates itself."
+            },
+            "assetCache": {
+              "type": "string",
+              "enum": [
+                "persisted",
+                "pc",
+                "local"
+              ],
+              "description": "\"persisted\": Asset Store downloads made in the sandbox go to tools\\unity\\asset-store (kept). \"pc\": the sandbox uses this PC's Asset Store downloads (read-only; download new ones on your PC). \"local\": Unity's own place on the sandbox disk (lost when it closes)."
             }
           },
           "additionalProperties": false
@@ -1483,7 +1535,7 @@
                   "const": "auto"
                 }
               ],
-              "description": "GitHub CLI (gh). Only with provisioning.git.access \"full\": gh can push and merge through the GitHub API, past a read-only git. Your PC's gh login is never copied; `gh auth login` inside persists (GH_CONFIG_DIR), unless a token you saved for sandboxes is handed over (github.shareToken). \"auto\" = when the project has a .github folder."
+              "description": "GitHub CLI (gh). Only with provisioning.git.access \"full\": gh can push and merge through the GitHub API, past a read-only git. Your PC's gh login is copied only with github.usePcLogin (or a token you saved for sandboxes with github.shareToken); otherwise `gh auth login` inside persists (GH_CONFIG_DIR). \"auto\" = when the project has a .github folder."
             },
             "zstd": {
               "anyOf": [
@@ -2059,12 +2111,15 @@
               "f3d",
               "imagemagick",
               "nomacs",
+              "unity-mcp",
+              "openupm-cli",
               "lua-language-server",
               "stylua",
               "selene",
               "perplexity-mcp",
               "perplexity-computer-mcp",
               "comet",
+              "perplexity-desktop",
               "comet-mcp",
               "chrome-devtools-mcp",
               "browser-use-mcp"

package/schemas/sandbox-config.schema.json

@@ -203,7 +203,7 @@
           "properties": {
             "share": {
               "type": "boolean",
-              "description": "Hand your saved Unity sign-in to sandboxes that use unity (sign in once in a sandbox, or take this PC's licence from Accounts). Kept encrypted on this PC; The agent in the sandbox can use this sign-in while it is there. It works in one sandbox at a time: a second sandbox starts without it while the first one runs. A Pro seat is handed back when the sandbox stops cleanly; a sandbox closed abruptly may keep it until you return it. Yours only: a project file can only turn it off."
+              "description": "Hand your saved Unity sign-in to sandboxes that use unity (sign in once in a sandbox, or take this PC's licence from Accounts). Kept encrypted on this PC; The agent in the sandbox can use this sign-in while it is there. It works in one sandbox at a time: a second sandbox starts without it while the first one runs. Unity Personal is activated by signing in: sign in to Unity once in a sandbox and the licence it makes is kept for the next ones (if Unity refuses it there, sign in again). A Plus or Pro serial is activated in each sandbox and handed back when the sandbox stops cleanly; a sandbox closed abruptly may keep the seat until you remove it at id.unity.com (My Seats). A licence file taken from this PC may not work in a sandbox: Unity ties it to the computer. Yours only: a project file can only turn it off."
             }
           },
           "additionalProperties": false
@@ -277,6 +277,16 @@
             }
           },
           "additionalProperties": false
+        },
+        "perplexityapp": {
+          "type": "object",
+          "properties": {
+            "share": {
+              "type": "boolean",
+              "description": "Hand your saved Perplexity desktop app sign-in to sandboxes that use the Perplexity desktop app (sign in to the Perplexity app once in a sandbox: it cannot be taken from this PC). Kept encrypted on this PC; The agent in the sandbox can use this sign-in while it is there. It can act as you in the Perplexity app and spend your Perplexity Computer credits; the app acts on the pages it reads, which can try to steer it. Your sign-in in the Perplexity app can't be copied from this PC: Windows locks it to your PC account. Sign in once inside a sandbox and it is kept for the next ones. Only the perplexity.ai sign-in cookies are kept: never saved passwords, other sites, localStorage or history. Several sandboxes can use it at once: the sign-in the last one hands back is kept. Yours only: a project file can only turn it off."
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false
@@ -598,7 +608,7 @@
                   "const": "auto"
                 }
               ],
-              "description": "Unity: the editor version a project asks for, from Unity's release API (checked against its published hash), installed into tools\\unity\\<version> (6-7 GB each), with the modules you list. true, false, or \"auto\" = only when the project has ProjectSettings/ProjectVersion.txt."
+              "description": "Unity: the editor version a project asks for, from Unity's release API (checked against its published hash), installed on the data disk (tools\\unity\\editors\\<version>, 8-13 GB each, kept between sandboxes), with the modules you list. This PC's editors (pcInstalls.unityEditors) are used first. true, false, or \"auto\" = only when the project has ProjectSettings/ProjectVersion.txt."
             },
             "acceptLicense": {
               "type": "boolean",
@@ -607,7 +617,7 @@
             "version": {
               "type": "string",
               "minLength": 1,
-              "description": "\"project\" = the version in ProjectSettings/ProjectVersion.txt, or an editor version such as \"6000.0.32f1\"."
+              "description": "\"project\" = the version in ProjectSettings/ProjectVersion.txt, or an editor version such as \"6000.0.32f1\" for folders without one (a project's own version always wins)."
             },
             "modules": {
               "type": "array",
@@ -619,13 +629,35 @@
             },
             "hub": {
               "type": "boolean",
-              "description": "Also Unity Hub, with the installed editors listed in it."
+              "description": "Also Unity Hub (kept on the data disk), for signing in to Unity Personal and installing editors by hand."
             },
             "keepVersions": {
               "type": "integer",
               "minimum": 1,
               "maximum": 20,
               "description": "How many editor versions to keep in tools\\unity; older ones are removed (the least recently used first)."
+            },
+            "mcp": {
+              "type": "boolean",
+              "description": "The Unity CLI's MCP server (unity mcp) in Claude Code and Codex as sbx-unity: Unity's read-only tools always, the open editor's tools when the project has the Unity Pipeline package (Unity 6 and later). Nothing in your project changes."
+            },
+            "agentSkills": {
+              "type": "boolean",
+              "description": "Unity's skills for Claude Code and Codex, from Unity-Technologies/skills at the commit the Unity CLI pins."
+            },
+            "cliVersion": {
+              "type": "string",
+              "pattern": "^(latest|\\d+\\.\\d+\\.\\d+(-[A-Za-z0-9.]+)?)$",
+              "description": "The Unity CLI version, checked against the SHA-256 Unity publishes: a version such as \"1.0.0-beta.16\", or \"latest\". It never updates itself."
+            },
+            "assetCache": {
+              "type": "string",
+              "enum": [
+                "persisted",
+                "pc",
+                "local"
+              ],
+              "description": "\"persisted\": Asset Store downloads made in the sandbox go to tools\\unity\\asset-store (kept). \"pc\": the sandbox uses this PC's Asset Store downloads (read-only; download new ones on your PC). \"local\": Unity's own place on the sandbox disk (lost when it closes)."
             }
           },
           "additionalProperties": false
@@ -1142,7 +1174,7 @@
                   "const": "auto"
                 }
               ],
-              "description": "GitHub CLI (gh). Only with provisioning.git.access \"full\": gh can push and merge through the GitHub API, past a read-only git. Your PC's gh login is never copied; `gh auth login` inside persists (GH_CONFIG_DIR), unless a token you saved for sandboxes is handed over (github.shareToken). \"auto\" = when the project has a .github folder."
+              "description": "GitHub CLI (gh). Only with provisioning.git.access \"full\": gh can push and merge through the GitHub API, past a read-only git. Your PC's gh login is copied only with github.usePcLogin (or a token you saved for sandboxes with github.shareToken); otherwise `gh auth login` inside persists (GH_CONFIG_DIR). \"auto\" = when the project has a .github folder."
             },
             "zstd": {
               "anyOf": [
@@ -1572,6 +1604,7 @@
               "f3d",
               "imagemagick",
               "nomacs",
+              "openupm-cli",
               "lua-language-server",
               "stylua",
               "selene"

package/dist/guest/devtools/unity.d.ts

@@ -1,2 +0,0 @@
-import { type DevTool } from './devtool.js';
-export declare const unityTool: DevTool;

package/dist/guest/devtools/unity.js

@@ -1,7 +0,0 @@
-// sbx-unity: install editors, list them, build with -executeMethod, the licence status. Not available yet.
-import { notAvailableYet } from './devtool.js';
-export const unityTool = {
-    name: 'unity',
-    summary: 'install editors, list them, build with -executeMethod, the licence status',
-    run: () => notAvailableYet('unity'),
-};