windows-development-sandbox 1.25.1 → 1.27.1

package/dist/shared/accounts/kinds.d.ts

@@ -1,9 +1,9 @@
-export declare const SERVICE_KINDS: readonly ["epic", "steam", "unity", "cfx", "keystore", "play", "expo", "appstore", "perplexity", "comet"];
+export declare const SERVICE_KINDS: readonly ["epic", "steam", "unity", "cfx", "keystore", "play", "expo", "appstore", "perplexity", "comet", "perplexityapp"];
 export type ServiceKind = (typeof SERVICE_KINDS)[number];
 /** The toolchains a sign-in can serve (each is a key of `toolchains`). */
 export type ToolchainUser = 'unreal' | 'steam' | 'unity' | 'fivem' | 'android' | 'flutter' | 'reactNative' | 'godot' | 'dotnet';
 /** The apps a sign-in can serve: on when one of APP_USERS' apps is in apps.install. */
-export type AppUser = 'perplexity' | 'comet';
+export type AppUser = 'perplexity' | 'comet' | 'perplexityapp';
 /** What a sign-in serves (it is handed over only when one of them is on for the boot). */
 export type UsedBy = ToolchainUser | AppUser;
 /** The toolchains a sign-in can serve. */

package/dist/shared/accounts/kinds.js

@@ -13,6 +13,7 @@ export const SERVICE_KINDS = [
     'appstore',
     'perplexity',
     'comet',
+    'perplexityapp',
 ];
 /** The toolchains a sign-in can serve. */
 export const USED_BY = [
@@ -30,6 +31,7 @@ export const USED_BY = [
 export const APP_USERS = {
     perplexity: ['perplexity-mcp'],
     comet: ['comet'],
+    perplexityapp: ['perplexity-desktop'],
 };
 export const ACCOUNT_SOURCES = ['pc', 'file', 'typed', 'sandbox'];
 const AGENT_CAN_USE = 'The agent in the sandbox can use this sign-in while it is there.';
@@ -77,7 +79,9 @@ export const SERVICE_SPECS = {
         warnings: [
             AGENT_CAN_USE,
             ONE_PLACE,
-            'A Pro seat is handed back when the sandbox stops cleanly; a sandbox closed abruptly may keep it until you return it.',
+            'Unity Personal is activated by signing in: sign in to Unity once in a sandbox and the licence it makes is kept for the next ones (if Unity refuses it there, sign in again).',
+            'A Plus or Pro serial is activated in each sandbox and handed back when the sandbox stops cleanly; a sandbox closed abruptly may keep the seat until you remove it at id.unity.com (My Seats).',
+            'A licence file taken from this PC may not work in a sandbox: Unity ties it to the computer.',
         ],
         fields: [
             { name: 'email', label: 'Unity ID email', secret: false, optional: true },
@@ -206,6 +210,23 @@ export const SERVICE_SPECS = {
         ],
         fields: [],
     },
+    perplexityapp: {
+        kind: 'perplexityapp',
+        label: 'Perplexity desktop app',
+        usedBy: ['perplexityapp'],
+        sources: ['sandbox'],
+        singleHolder: false,
+        returns: true,
+        maxBytes: 256 * 1024,
+        warnings: [
+            AGENT_CAN_USE +
+                ' It can act as you in the Perplexity app and spend your Perplexity Computer credits; the app acts on the pages it reads, which can try to steer it.',
+            "Your sign-in in the Perplexity app can't be copied from this PC: Windows locks it to your PC account. Sign in once inside a sandbox and it is kept for the next ones.",
+            'Only the perplexity.ai sign-in cookies are kept: never saved passwords, other sites, localStorage or history.',
+            'Several sandboxes can use it at once: the sign-in the last one hands back is kept.',
+        ],
+        fields: [],
+    },
 };
 /** Where a sandbox leaves a renewed sign-in, under the data folder: state\accounts\<kind>.json. */
 export const HANDOFF_PARTS = ['state', 'accounts'];
@@ -218,6 +239,7 @@ export function isServiceKind(value) {
 const APP_USER_TEXT = {
     perplexity: 'the Perplexity MCP app',
     comet: 'the Comet app',
+    perplexityapp: 'the Perplexity desktop app',
 };
 /** What a sign-in serves, for a sentence: "unreal", "reactNative or flutter", "the Comet app". */
 export function usedByText(usedBy) {

package/dist/shared/accounts/payloads.d.ts

@@ -17,6 +17,7 @@ export declare const SteamPayloadSchema: z.ZodObject<{
 /** A Unity licence file (Unity_lic.ulf), and the Unity ID to sign in with when it has to be made again. */
 export declare const UnityPayloadSchema: z.ZodObject<{
     ulf: z.ZodOptional<z.ZodString>;
+    entitlement: z.ZodOptional<z.ZodString>;
     email: z.ZodOptional<z.ZodString>;
     password: z.ZodOptional<z.ZodString>;
     serial: z.ZodOptional<z.ZodString>;
@@ -91,6 +92,23 @@ export declare const CometPayloadSchema: z.ZodObject<{
         }>>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
+/** The Perplexity desktop app's sign-in: the same perplexity.ai cookies as Comet's. */
+export declare const PerplexityAppPayloadSchema: z.ZodObject<{
+    cookies: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+        domain: z.ZodString;
+        path: z.ZodString;
+        expires: z.ZodOptional<z.ZodNumber>;
+        secure: z.ZodBoolean;
+        httpOnly: z.ZodBoolean;
+        sameSite: z.ZodOptional<z.ZodEnum<{
+            Strict: "Strict";
+            Lax: "Lax";
+            None: "None";
+        }>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 export declare const PAYLOADS: {
     readonly epic: z.ZodObject<{
         data: z.ZodString;
@@ -106,6 +124,7 @@ export declare const PAYLOADS: {
     }, z.core.$strict>;
     readonly unity: z.ZodObject<{
         ulf: z.ZodOptional<z.ZodString>;
+        entitlement: z.ZodOptional<z.ZodString>;
         email: z.ZodOptional<z.ZodString>;
         password: z.ZodOptional<z.ZodString>;
         serial: z.ZodOptional<z.ZodString>;
@@ -151,6 +170,22 @@ export declare const PAYLOADS: {
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strict>;
+    readonly perplexityapp: z.ZodObject<{
+        cookies: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            value: z.ZodString;
+            domain: z.ZodString;
+            path: z.ZodString;
+            expires: z.ZodOptional<z.ZodNumber>;
+            secure: z.ZodBoolean;
+            httpOnly: z.ZodBoolean;
+            sameSite: z.ZodOptional<z.ZodEnum<{
+                Strict: "Strict";
+                Lax: "Lax";
+                None: "None";
+            }>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
 };
 export type Payload<K extends ServiceKind> = z.output<(typeof PAYLOADS)[K]>;
 export type AnyPayload = Payload<ServiceKind>;
@@ -173,6 +208,7 @@ export declare const ServiceAccountsSchema: z.ZodObject<{
     }, z.core.$strict>>;
     unity: z.ZodOptional<z.ZodObject<{
         ulf: z.ZodOptional<z.ZodString>;
+        entitlement: z.ZodOptional<z.ZodString>;
         email: z.ZodOptional<z.ZodString>;
         password: z.ZodOptional<z.ZodString>;
         serial: z.ZodOptional<z.ZodString>;
@@ -218,6 +254,22 @@ export declare const ServiceAccountsSchema: z.ZodObject<{
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>;
+    perplexityapp: z.ZodOptional<z.ZodObject<{
+        cookies: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            value: z.ZodString;
+            domain: z.ZodString;
+            path: z.ZodString;
+            expires: z.ZodOptional<z.ZodNumber>;
+            secure: z.ZodBoolean;
+            httpOnly: z.ZodBoolean;
+            sameSite: z.ZodOptional<z.ZodEnum<{
+                Strict: "Strict";
+                Lax: "Lax";
+                None: "None";
+            }>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ServiceAccounts = z.output<typeof ServiceAccountsSchema>;
 /** A launch's id (generate.ts: "<ms>-<6 hex>"). */

package/dist/shared/accounts/payloads.js

@@ -33,16 +33,24 @@ export const SteamPayloadSchema = z.strictObject({
     client: base64(256 * KB).optional(),
 });
 /** A Unity licence file (Unity_lic.ulf), and the Unity ID to sign in with when it has to be made again. */
-export const UnityPayloadSchema = z.strictObject({
+export const UnityPayloadSchema = z
+    .strictObject({
     ulf: z
         .string()
         .min(1)
         .max(128 * KB)
         .optional(),
+    /** The named-user licence (UnityEntitlementLicense.xml) a Unity sign-in makes. */
+    entitlement: z
+        .string()
+        .min(1)
+        .max(128 * KB)
+        .optional(),
     email: z.string().email().max(256).optional(),
     password: secretText(1024).optional(),
     serial: secretText(64).optional(),
-});
+})
+    .refine((p) => Object.keys(p).length > 0, 'empty Unity sign-in');
 /** A FiveM / RedM server licence key from the Cfx.re keymaster, and an optional Steam Web API key. */
 export const CfxPayloadSchema = z.strictObject({
     licenseKey: z
@@ -125,6 +133,8 @@ export const CometCookieSchema = z.strictObject({
 export const CometPayloadSchema = z.strictObject({
     cookies: z.array(CometCookieSchema).min(1).max(MAX_COMET_COOKIES),
 });
+/** The Perplexity desktop app's sign-in: the same perplexity.ai cookies as Comet's. */
+export const PerplexityAppPayloadSchema = CometPayloadSchema;
 export const PAYLOADS = {
     epic: EpicPayloadSchema,
     steam: SteamPayloadSchema,
@@ -136,6 +146,7 @@ export const PAYLOADS = {
     appstore: AppstorePayloadSchema,
     perplexity: PerplexityPayloadSchema,
     comet: CometPayloadSchema,
+    perplexityapp: PerplexityAppPayloadSchema,
 };
 /** The secrets-file field: the sign-ins this launch hands over, each optional. */
 export const ServiceAccountsSchema = z.strictObject({
@@ -149,6 +160,7 @@ export const ServiceAccountsSchema = z.strictObject({
     appstore: AppstorePayloadSchema.optional(),
     perplexity: PerplexityPayloadSchema.optional(),
     comet: CometPayloadSchema.optional(),
+    perplexityapp: PerplexityAppPayloadSchema.optional(),
 });
 /** A launch's id (generate.ts: "<ms>-<6 hex>"). */
 export const LaunchIdSchema = z.string().regex(/^[A-Za-z0-9-]{1,64}$/);

package/dist/shared/apps/catalogue-agents-web.d.ts

@@ -14,4 +14,11 @@ export declare const COMET_DOWNLOAD_URL = "https://www.perplexity.ai/rest/browse
  * subject with E=<contact address> first (E=..., CN="PERPLEXITY AI, INC.", O=...), so CN is not at the start.
  */
 export declare const COMET_SIGNER: AppSigner;
+/**
+ * The Perplexity desktop app is Store-only (its old installer is gone): product 9P9XG917PWCJ, an MSIX of about 300 MB.
+ * The package is fetched on this PC with your own Store tooling and installed in the sandbox with Add-AppxPackage.
+ */
+export declare const PERPLEXITY_DESKTOP_PRODUCT_ID = "9P9XG917PWCJ";
+export declare const PERPLEXITY_DESKTOP_PACKAGE = "PerplexityAI.PerplexityApp";
+export declare const PERPLEXITY_DESKTOP_FAMILY = "PerplexityAI.PerplexityApp_3jh4kjrg4dzr2";
 export declare const AGENTS_WEB_APPS: readonly AppEntry[];

package/dist/shared/apps/catalogue-agents-web.js

@@ -15,6 +15,13 @@ export const COMET_SIGNER = {
     subject: ['(^|, )CN="?PERPLEXITY AI, INC\\.?"?(,|$)', '(^|, )O="?PERPLEXITY AI, INC\\.?"?(,|$)'],
     issuer: ['^CN=GlobalSign GCC R45 EV CodeSigning CA 2020(,|$)'],
 };
+/**
+ * The Perplexity desktop app is Store-only (its old installer is gone): product 9P9XG917PWCJ, an MSIX of about 300 MB.
+ * The package is fetched on this PC with your own Store tooling and installed in the sandbox with Add-AppxPackage.
+ */
+export const PERPLEXITY_DESKTOP_PRODUCT_ID = '9P9XG917PWCJ';
+export const PERPLEXITY_DESKTOP_PACKAGE = 'PerplexityAI.PerplexityApp';
+export const PERPLEXITY_DESKTOP_FAMILY = 'PerplexityAI.PerplexityApp_3jh4kjrg4dzr2';
 /** Microsoft Edge, already in every sandbox: the browser Chrome DevTools MCP starts. */
 const EDGE_EXE = 'C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe';
 export const AGENTS_WEB_APPS = [
@@ -62,6 +69,22 @@ export const AGENTS_WEB_APPS = [
         signer: COMET_SIGNER,
         userOnly: true,
     },
+    {
+        id: 'perplexity-desktop',
+        name: 'Perplexity (desktop app)',
+        category: 'agents',
+        about: "Perplexity's desktop app, with Perplexity Computer, from the Microsoft Store. The package comes from this PC (winget with your own Microsoft Store access) and is kept on the data disk; the sandbox installs it on every boot. With accounts.perplexityapp.share on, your sign-in made in a sandbox is kept for the next ones (it cannot be copied from this PC). It acts on what it reads: use it only on what you would let it act on.",
+        size: '300 MB',
+        source: {
+            store: {
+                productId: PERPLEXITY_DESKTOP_PRODUCT_ID,
+                packageName: PERPLEXITY_DESKTOP_PACKAGE,
+                family: PERPLEXITY_DESKTOP_FAMILY,
+            },
+        },
+        exe: '',
+        userOnly: true,
+    },
     {
         id: 'comet-mcp',
         name: 'Comet MCP',

package/dist/shared/apps/catalogue-gamedev.d.ts

@@ -1,2 +1,5 @@
 import type { AppEntry } from './catalogue.js';
+/** Pinned packages, installed from the lock files in sandbox\addons\<id> (renewing them: docs/toolchains.md). */
+export declare const UNITY_MCP_VERSION = "10.3.0";
+export declare const OPENUPM_CLI_VERSION = "4.5.3";
 export declare const GAMEDEV_APPS: readonly AppEntry[];

package/dist/shared/apps/catalogue-gamedev.js

@@ -1,3 +1,6 @@
+/** Pinned packages, installed from the lock files in sandbox\addons\<id> (renewing them: docs/toolchains.md). */
+export const UNITY_MCP_VERSION = '10.3.0';
+export const OPENUPM_CLI_VERSION = '4.5.3';
 export const GAMEDEV_APPS = [
     {
         id: 'krita',
@@ -68,4 +71,32 @@ export const GAMEDEV_APPS = [
         source: { github: 'nomacs/nomacs', asset: '^nomacs-portable-win\\.zip$' },
         exe: 'nomacs.exe',
     },
+    {
+        id: 'unity-mcp',
+        name: 'MCP for Unity',
+        category: 'agents',
+        about: 'Lets Claude Code and Codex work in an open Unity editor (CoplayDev/unity-mcp 10.3.0, MIT; Unity 2021.3 to 6.x). Your project needs its package (Unity page: Add the editor bridge). Telemetry is off.',
+        size: '60 MB',
+        source: { locked: 'uv', package: 'mcpforunityserver', version: UNITY_MCP_VERSION },
+        exe: 'mcp-for-unity.exe',
+        service: true,
+        mcp: {
+            name: 'sbx-unity-mcp',
+            program: true,
+            args: ['--transport', 'stdio'],
+            env: { DISABLE_TELEMETRY: '1', UNITY_MCP_DISABLE_TELEMETRY: '1', MCP_DISABLE_TELEMETRY: '1' },
+            codex: true,
+        },
+        plugsInto: 'Claude Code and Codex as the MCP server sbx-unity-mcp',
+        userOnly: true,
+    },
+    {
+        id: 'openupm-cli',
+        name: 'openupm-cli',
+        category: 'gamedev',
+        about: 'Adds OpenUPM packages to Unity projects from the command line (openupm 4.5.3, BSD-3-Clause).',
+        size: '15 MB',
+        source: { locked: 'npm', package: 'openupm-cli', version: OPENUPM_CLI_VERSION },
+        exe: 'openupm.cmd',
+    },
 ];

package/dist/shared/apps/catalogue.d.ts

@@ -28,6 +28,14 @@ export type AppSource = {
 /** Nothing to download: a remote MCP server (AddonMcp.url). */
  | {
     remote: true;
+}
+/** A Microsoft Store app: this PC fetches the package with its own Store tooling; the sandbox installs it. */
+ | {
+    store: {
+        productId: string;
+        packageName: string;
+        family: string;
+    };
 };
 /**
  * An MCP server an add-on adds to the sandbox's Claude Code (and Codex, with `codex`): `node <its folder>\<script>

package/dist/shared/apps/index.d.ts

@@ -1,7 +1,8 @@
 export { type AddonMcp, type AppCategory, APP_CATEGORIES, type AppSource, type AppEntry, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
 export { ASSOCIATIONS, associationPlan } from './associations.js';
 export { previewGuideLine } from './preview.js';
-export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
+export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv, storeApps } from './selection.js';
 export { signerMatches, type AppSigner, type Signature } from '../signer.js';
-export { AGENTS_WEB_APPS, BROWSER_USE_VERSION, CHROME_DEVTOOLS_MCP_VERSION, COMET_DOWNLOAD_URL, COMET_MCP_VERSION, COMET_SIGNER, PERPLEXITY_COMPUTER_MCP_URL, PERPLEXITY_MCP_VERSION, } from './catalogue-agents-web.js';
+export { AGENTS_WEB_APPS, BROWSER_USE_VERSION, CHROME_DEVTOOLS_MCP_VERSION, COMET_DOWNLOAD_URL, PERPLEXITY_DESKTOP_FAMILY, PERPLEXITY_DESKTOP_PACKAGE, PERPLEXITY_DESKTOP_PRODUCT_ID, COMET_MCP_VERSION, COMET_SIGNER, PERPLEXITY_COMPUTER_MCP_URL, PERPLEXITY_MCP_VERSION, } from './catalogue-agents-web.js';
 export { ADDON_MCP_PREFIX, addonGuideLine, addonMcpServer, type AddonPlace, claudeManagedSettings, codexWithAddonMcpServers, type CodexMcpServer, HEADROOM_ENV, HEADROOM_PORT, HEADROOM_UPSTREAM, headroomArgs, headroomEnv, headroomGuideLine, headroomUrl, type ManagedSettings, type McpServerConfig, rtkHookCommand, RTK_GUIDE_LINE, withAddonMcpServers, } from './agent-addons.js';
+export { isStorePackageFile, STORE_PACKAGE_MANIFEST, StorePackageFileSchema, StorePackageManifestSchema, storePackageRole, type StorePackageFile, type StorePackageManifest, } from './store-package.js';

package/dist/shared/apps/index.js

@@ -1,7 +1,8 @@
 export { APP_CATEGORIES, APPS, appById, CCUSAGE_VERSION, CONTEXT7_MCP_VERSION, HEADROOM_VERSION, PLAYWRIGHT_MCP_VERSION, RTK_VERSION, } from './catalogue.js';
 export { ASSOCIATIONS, associationPlan } from './associations.js';
 export { previewGuideLine } from './preview.js';
-export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv } from './selection.js';
+export { exeMatcher, appsToInstall, appsNeedMesa, appsNeedUv, storeApps } from './selection.js';
 export { signerMatches } from '../signer.js';
-export { AGENTS_WEB_APPS, BROWSER_USE_VERSION, CHROME_DEVTOOLS_MCP_VERSION, COMET_DOWNLOAD_URL, COMET_MCP_VERSION, COMET_SIGNER, PERPLEXITY_COMPUTER_MCP_URL, PERPLEXITY_MCP_VERSION, } from './catalogue-agents-web.js';
+export { AGENTS_WEB_APPS, BROWSER_USE_VERSION, CHROME_DEVTOOLS_MCP_VERSION, COMET_DOWNLOAD_URL, PERPLEXITY_DESKTOP_FAMILY, PERPLEXITY_DESKTOP_PACKAGE, PERPLEXITY_DESKTOP_PRODUCT_ID, COMET_MCP_VERSION, COMET_SIGNER, PERPLEXITY_COMPUTER_MCP_URL, PERPLEXITY_MCP_VERSION, } from './catalogue-agents-web.js';
 export { ADDON_MCP_PREFIX, addonGuideLine, addonMcpServer, claudeManagedSettings, codexWithAddonMcpServers, HEADROOM_ENV, HEADROOM_PORT, HEADROOM_UPSTREAM, headroomArgs, headroomEnv, headroomGuideLine, headroomUrl, rtkHookCommand, RTK_GUIDE_LINE, withAddonMcpServers, } from './agent-addons.js';
+export { isStorePackageFile, STORE_PACKAGE_MANIFEST, StorePackageFileSchema, StorePackageManifestSchema, storePackageRole, } from './store-package.js';

package/dist/shared/apps/selection.d.ts

@@ -11,3 +11,9 @@ export declare function appsToInstall(apps: Config['apps'], gitAccess: GitAccess
 export declare function appsNeedUv(apps: Config['apps'] | undefined): boolean;
 /** Does any chosen app draw with OpenGL (so the Mesa step must run first)? */
 export declare function appsNeedMesa(apps: Config['apps'] | undefined): boolean;
+/** The chosen apps that come from the Microsoft Store: what this PC has to fetch for them. */
+export declare function storeApps(install: readonly string[]): {
+    id: string;
+    productId: string;
+    packageName: string;
+}[];

package/dist/shared/apps/selection.js

@@ -47,3 +47,12 @@ export function appsNeedUv(apps) {
 export function appsNeedMesa(apps) {
     return Boolean(apps?.install.some((id) => appById(id)?.needs?.includes('mesa')));
 }
+/** The chosen apps that come from the Microsoft Store: what this PC has to fetch for them. */
+export function storeApps(install) {
+    return install.flatMap((id) => {
+        const source = appById(id)?.source;
+        return source !== undefined && 'store' in source
+            ? [{ id, productId: source.store.productId, packageName: source.store.packageName }]
+            : [];
+    });
+}

package/dist/shared/apps/store-package.d.ts

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+export declare const StorePackageFileSchema: z.ZodObject<{
+    name: z.ZodString;
+    role: z.ZodEnum<{
+        main: "main";
+        dependency: "dependency";
+    }>;
+    sha256: z.ZodString;
+    bytes: z.ZodNumber;
+}, z.core.$strict>;
+export type StorePackageFile = z.output<typeof StorePackageFileSchema>;
+/** store-package.json: next to the package files, on this PC's cache and in the sandbox's data folder. */
+export declare const StorePackageManifestSchema: z.ZodObject<{
+    productId: z.ZodString;
+    fetchedAt: z.ZodString;
+    files: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        role: z.ZodEnum<{
+            main: "main";
+            dependency: "dependency";
+        }>;
+        sha256: z.ZodString;
+        bytes: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type StorePackageManifest = z.output<typeof StorePackageManifestSchema>;
+export declare const STORE_PACKAGE_MANIFEST = "store-package.json";
+/** Whether a file name is a package file this feature handles. */
+export declare function isStorePackageFile(name: string): boolean;
+/** The app itself (named <package name>_<version>_...), as opposed to a framework it depends on (VCLibs ...). */
+export declare function storePackageRole(fileName: string, packageName: string): 'main' | 'dependency';

package/dist/shared/apps/store-package.js

@@ -0,0 +1,34 @@
+// A Microsoft Store app handed to the sandbox as package files (.msix and its dependencies). The PC fetches them with
+// its own Store tooling (host/apps/store-package.ts) and the sandbox installs them with Add-AppxPackage.
+// Pure, web-safe: the shape of the manifest that travels with the files, and which file is the app itself.
+import { z } from 'zod';
+const GB = 1024 * 1024 * 1024;
+const FILE_NAME = /^[A-Za-z0-9._~+-]{1,200}\.(msix|appx|msixbundle|appxbundle)$/i;
+export const StorePackageFileSchema = z.strictObject({
+    name: z.string().regex(FILE_NAME),
+    role: z.enum(['main', 'dependency']),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/),
+    bytes: z
+        .number()
+        .int()
+        .positive()
+        .max(2 * GB),
+});
+/** store-package.json: next to the package files, on this PC's cache and in the sandbox's data folder. */
+export const StorePackageManifestSchema = z
+    .strictObject({
+    productId: z.string().regex(/^[A-Z0-9]{12}$/),
+    fetchedAt: z.string().max(40),
+    files: z.array(StorePackageFileSchema).min(1).max(24),
+})
+    .refine((m) => m.files.filter((f) => f.role === 'main').length === 1, 'exactly one file must be the app itself')
+    .refine((m) => new Set(m.files.map((f) => f.name.toLowerCase())).size === m.files.length, 'file names repeat');
+export const STORE_PACKAGE_MANIFEST = 'store-package.json';
+/** Whether a file name is a package file this feature handles. */
+export function isStorePackageFile(name) {
+    return FILE_NAME.test(name);
+}
+/** The app itself (named <package name>_<version>_...), as opposed to a framework it depends on (VCLibs ...). */
+export function storePackageRole(fileName, packageName) {
+    return fileName.toLowerCase().startsWith(packageName.toLowerCase() + '_') ? 'main' : 'dependency';
+}

package/dist/shared/channel/schema.d.ts

@@ -126,6 +126,14 @@ export declare const ProjectSpecSchema: z.ZodObject<{
             modules: z.ZodArray<z.ZodString>;
             hub: z.ZodBoolean;
             keepVersions: z.ZodNumber;
+            mcp: z.ZodBoolean;
+            agentSkills: z.ZodBoolean;
+            cliVersion: z.ZodString;
+            assetCache: z.ZodEnum<{
+                pc: "pc";
+                persisted: "persisted";
+                local: "local";
+            }>;
         }, z.core.$strict>;
         godot: z.ZodObject<{
             enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -362,6 +370,14 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 modules: z.ZodArray<z.ZodString>;
                 hub: z.ZodBoolean;
                 keepVersions: z.ZodNumber;
+                mcp: z.ZodBoolean;
+                agentSkills: z.ZodBoolean;
+                cliVersion: z.ZodString;
+                assetCache: z.ZodEnum<{
+                    pc: "pc";
+                    persisted: "persisted";
+                    local: "local";
+                }>;
             }, z.core.$strict>;
             godot: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;
@@ -618,6 +634,14 @@ export declare const GuestRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 modules: z.ZodArray<z.ZodString>;
                 hub: z.ZodBoolean;
                 keepVersions: z.ZodNumber;
+                mcp: z.ZodBoolean;
+                agentSkills: z.ZodBoolean;
+                cliVersion: z.ZodString;
+                assetCache: z.ZodEnum<{
+                    pc: "pc";
+                    persisted: "persisted";
+                    local: "local";
+                }>;
             }, z.core.$strict>;
             godot: z.ZodObject<{
                 enabled: z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>;

package/dist/shared/channel/secrets.d.ts

@@ -25,6 +25,7 @@ export declare const SecretsFileSchema: z.ZodObject<{
         }, z.core.$strict>>;
         unity: z.ZodOptional<z.ZodObject<{
             ulf: z.ZodOptional<z.ZodString>;
+            entitlement: z.ZodOptional<z.ZodString>;
             email: z.ZodOptional<z.ZodString>;
             password: z.ZodOptional<z.ZodString>;
             serial: z.ZodOptional<z.ZodString>;
@@ -70,6 +71,22 @@ export declare const SecretsFileSchema: z.ZodObject<{
                 }>>;
             }, z.core.$strict>>;
         }, z.core.$strict>>;
+        perplexityapp: z.ZodOptional<z.ZodObject<{
+            cookies: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                value: z.ZodString;
+                domain: z.ZodString;
+                path: z.ZodString;
+                expires: z.ZodOptional<z.ZodNumber>;
+                secure: z.ZodBoolean;
+                httpOnly: z.ZodBoolean;
+                sameSite: z.ZodOptional<z.ZodEnum<{
+                    Strict: "Strict";
+                    Lax: "Lax";
+                    None: "None";
+                }>>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
     liveFoldersKey: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;

package/dist/shared/paths/pc-installs.d.ts

@@ -1,6 +1,6 @@
 /** Where this PC's installs appear in the sandbox (reserved: RESERVED_GUEST). */
 export declare const PC_INSTALLS_GUEST = "C:\\PcInstalls";
-export type PcInstallKind = 'steam-game' | 'steam-library' | 'epic-game' | 'unreal' | 'unreal-vault' | 'unity';
+export type PcInstallKind = 'steam-game' | 'steam-library' | 'epic-game' | 'unreal' | 'unreal-vault' | 'unity' | 'unity-assets';
 export interface PcInstall {
     readonly kind: PcInstallKind;
     /** The Steam app ID or library (library1), the Epic app name, the engine (UE_5.4) or editor version. */

package/dist/shared/paths/pc-installs.js

@@ -11,6 +11,7 @@ const AREA = {
     unreal: 'unreal',
     'unreal-vault': 'unreal',
     unity: 'unity',
+    'unity-assets': 'unity',
 };
 /** The guest folder of one install: C:\PcInstalls\steam\<appid>, \epic\<AppName>, \unreal\UE_5.4, \unity\<ver>. */
 export function pcInstallGuest(kind, id) {

package/dist/shared/readiness.d.ts

@@ -1,8 +1,8 @@
 export declare const NOT_READY: {
     /** Toolchains whose step is a stub: their settings rows are hidden and "auto" never turns them on. */
-    readonly toolchains: readonly ["unity", "godot", "android", "flutter", "dart", "reactNative"];
+    readonly toolchains: readonly ["godot", "android", "flutter", "dart", "reactNative"];
     /** Service sign-ins whose host or guest side is a stub: the menu and the web do not list them. */
-    readonly kinds: readonly ["unity", "keystore", "play", "expo", "appstore"];
+    readonly kinds: readonly ["keystore", "play", "expo", "appstore"];
 };
 export declare const isToolchainReady: (name: string) => boolean;
 export declare const isKindReady: (kind: string) => boolean;

package/dist/shared/readiness.js

@@ -2,9 +2,9 @@
 // entries here (the end of round 2 leaves it empty). Pure.
 export const NOT_READY = {
     /** Toolchains whose step is a stub: their settings rows are hidden and "auto" never turns them on. */
-    toolchains: ['unity', 'godot', 'android', 'flutter', 'dart', 'reactNative'],
+    toolchains: ['godot', 'android', 'flutter', 'dart', 'reactNative'],
     /** Service sign-ins whose host or guest side is a stub: the menu and the web do not list them. */
-    kinds: ['unity', 'keystore', 'play', 'expo', 'appstore'],
+    kinds: ['keystore', 'play', 'expo', 'appstore'],
 };
 export const isToolchainReady = (name) => !NOT_READY.toolchains.includes(name);
 export const isKindReady = (kind) => !NOT_READY.kinds.includes(kind);

package/dist/shared/unity/asset-cache.d.ts

@@ -0,0 +1,20 @@
+export declare function assetStoreDir(root: string): string;
+/** The cache roots of this PC that hold an Asset Store-5.x folder: the environment's first, then %APPDATA%\Unity. */
+export declare function pcAssetCacheDirs(pc: {
+    readonly appData: string;
+    readonly envValue?: string | undefined;
+}, isDir: (dir: string) => boolean): string[];
+export interface AssetFs {
+    list(dir: string): string[];
+    isDir(dir: string): boolean;
+    /** A file's size, or null when it is a folder or missing. */
+    size(file: string): number | null;
+}
+export interface AssetPackage {
+    readonly publisher: string;
+    readonly category: string;
+    readonly name: string;
+    readonly sizeBytes: number;
+}
+/** The .unitypackage files in an Asset Store-5.x folder (three levels deep), sorted, at most 2000. */
+export declare function assetPackages(dir: string, fs: AssetFs): AssetPackage[];

package/dist/shared/unity/asset-cache.js

@@ -0,0 +1,44 @@
+// The Unity Asset Store's download cache: <root>\Asset Store-5.x\<publisher>\<category>\<name>.unitypackage. The root
+// is ASSETSTORE_CACHE_PATH, else %APPDATA%\Unity. Pure apart from the reads it is given; every walk is bounded.
+import path from 'node:path';
+const win = path.win32;
+const MAX_PACKAGES = 2000;
+const MAX_ROOTS = 2;
+export function assetStoreDir(root) {
+    return root + '\\Asset Store-5.x';
+}
+/** The cache roots of this PC that hold an Asset Store-5.x folder: the environment's first, then %APPDATA%\Unity. */
+export function pcAssetCacheDirs(pc, isDir) {
+    const all = [pc.envValue?.trim() ?? '', pc.appData ? win.join(pc.appData, 'Unity') : ''].filter(Boolean);
+    return all
+        .map((d) => win.normalize(d).replace(/\\+$/, ''))
+        .filter((d, i, a) => a.findIndex((o) => o.toLowerCase() === d.toLowerCase()) === i)
+        .filter((d) => isDir(assetStoreDir(d)))
+        .slice(0, MAX_ROOTS);
+}
+/** The .unitypackage files in an Asset Store-5.x folder (three levels deep), sorted, at most 2000. */
+export function assetPackages(dir, fs) {
+    const found = [];
+    const sorted = (d) => fs.list(d).sort((a, b) => a.localeCompare(b));
+    for (const publisher of sorted(dir)) {
+        const pdir = win.join(dir, publisher);
+        if (!fs.isDir(pdir))
+            continue;
+        for (const category of sorted(pdir)) {
+            const cdir = win.join(pdir, category);
+            if (!fs.isDir(cdir))
+                continue;
+            for (const file of sorted(cdir)) {
+                if (!/\.unitypackage$/i.test(file))
+                    continue;
+                const size = fs.size(win.join(cdir, file));
+                if (size === null)
+                    continue;
+                found.push({ publisher, category, name: file.replace(/\.unitypackage$/i, ''), sizeBytes: size });
+                if (found.length >= MAX_PACKAGES)
+                    return found;
+            }
+        }
+    }
+    return found;
+}