windows-development-sandbox 1.27.1 → 1.28.0

package/dist/selftest/heavy-load.test.js

@@ -8,7 +8,7 @@ import { DEFAULTS } from '../core/config/index.js';
 import { isWin } from '../core/util/index.js';
 import { SYSTEM } from '../shared/system.js';
 import { GuestRequestSchema, PressureStatusSchema } from '../shared/channel/index.js';
-import { compilersAllowed, DIAL_CALM_SAMPLES, DIAL_STEPS, HOST_THRESHOLDS, buildJobs, cargoJobs, linkSlotsFor, usableCpus, effectiveCpuLimit, gentleCpuLimit, maxCompilers, chooseTargetDir, cargoLinkerVar, } from '../shared/memory/index.js';
+import { BURST_GATE, compilersAllowed, DIAL_CALM_SAMPLES, DIAL_STEPS, HOST_THRESHOLDS, buildJobs, cargoJobs, linkSlotsFor, usableCpus, effectiveCpuLimit, gentleCpuLimit, maxCompilers, chooseTargetDir, cargoLinkerVar, ubtBuildConfiguration, } from '../shared/memory/index.js';
 import { HeartbeatSchema } from '../shared/channel/index.js';
 import { heartbeatLine, lastEndOf, vanishedCause, stopWarning } from '../host/life/index.js';
 import { cappedMemoryMb, decideMemory, memoryNote, residentCapMb, residentNote, resolveMemoryMb, } from '../host/launch/index.js';
@@ -16,10 +16,10 @@ import { vgpuWarning, GENTLE_NOTE } from '../host/launch/risk-notes.js';
 import { judgeSandbox } from '../host/health/index.js';
 import { cleanUpLeftovers, cleanupQuestion, killArgs } from '../host/sandbox/index.js';
 import { parseTasklist } from '../host/sharing/index.js';
-import { bugcheckCode, cpuPercentBetween, explainStop, findDumps, findingLines, freezeLine, hostPressure, lowReason, severeHost, pageFileRisk, parseHostMemory, crashReportText, watchdogStep, WATCHDOG_START, } from '../host/life/index.js';
+import { bugcheckCode, cpuPercentBetween, explainStop, findDumps, findingLines, freezeLine, hostPressure, lowReason, memoryWasFineLine, severeHost, pageFileRisk, parseHostMemory, crashReportText, watchdogStep, WATCHDOG_START, } from '../host/life/index.js';
 // The pure governor files only: governor.ts loads the guest runtime (session.json), which exists only in a sandbox.
-import { canLower, canPause, decide, INITIAL_STATE, isLinker, linkerSlots, ROTATE_MS, } from '../guest/governor/decide.js';
-import { GovernorCore } from '../guest/governor/core.js';
+import { canLower, canPause, decide, GATE_NAMES, INITIAL_STATE, isLinker, isNeverTouched, linkerSlots, ROTATE_MS, } from '../guest/governor/decide.js';
+import { GateEventSchema, GovernorCore, memgovArgs } from '../guest/governor/core.js';
 const GB = 1024;
 const MB_SANDBOX = DEFAULTS.sandbox;
 const proc = (pid, name, mb, prio = 'normal') => ({
@@ -96,6 +96,10 @@ export const heavyLoadSuite = {
         t.check(cargoJobs(16, 32, 3) === 2 && cargoJobs(16, 32, 8) === 1, 'fewer when several sessions build');
         t.check(cargoJobs(32, 32, 1) === 8, '32 processors, 32 GB: 8 jobs for one session');
         t.check(buildJobs(32, 32) === 8 && buildJobs(32, 64) === 19 && buildJobs(4, 64) === 4 && buildJobs(16, 4) === 2, 'the build budget: 3 GB per job after 6 GB, never more than the processors, at least 2');
+        const ubt = ubtBuildConfiguration(buildJobs(20, 36));
+        t.check(ubt.includes('<MaxParallelActions>10</MaxParallelActions>') &&
+            ubt.includes('xmlns="https://www.unrealengine.com/BuildConfiguration"') &&
+            ubtBuildConfiguration(0).includes('<MaxParallelActions>1</MaxParallelActions>'), "UnrealBuildTool's compiles at once follow the build budget (at least 1)", ubt);
         t.check(linkSlotsFor(32) === 8 && linkSlotsFor(16) === 3 && linkSlotsFor(8) === 2 && linkSlotsFor(128) === 8, 'links at once ("auto"): one per 3 GB after 6 GB, 2 to 8');
         t.check(usableCpus(32, 80) === 25 && usableCpus(32, null) === 32 && usableCpus(4, 10) === 2 && usableCpus(8, 100) === 8, 'the processors programs see follow the CPU cap (at least 2)');
         t.section('the governor: which programs');
@@ -374,6 +378,105 @@ export const heavyLoadSuite = {
         t.check(decide({ ...INITIAL_STATE, hostUntil: clock + 60000, hostStep: 4 }, sample(60, 40, procs), clock, 'normal').state
             .step === 4, 'with plenty of memory in the sandbox, a severe PC still turns the dial to 4');
         t.check(core.current.hostUntil === clock + 60000, 'a host request is remembered for its seconds');
+        t.section('the memory gate (rate of growth)');
+        t.check(['cl', 'link', 'rustc', 'clang-cl', 'lld-link', 'shadercompileworker'].every((n) => GATE_NAMES.includes(n)), 'the gate may freeze compilers, linkers and Unreal shader workers', GATE_NAMES.join(','));
+        t.check([
+            'node',
+            'claude',
+            'codex',
+            'opencode',
+            'cmd',
+            'pwsh',
+            'powershell',
+            'msbuild',
+            'dotnet',
+            'cargo',
+            'ninja',
+            'unrealbuildtool',
+            'ubahost',
+            'unrealeditor',
+            'unrealeditor-cmd',
+            'mspdbsrv',
+            'ptyhost',
+            'memgov',
+        ].every((n) => !GATE_NAMES.includes(n)) &&
+            GATE_NAMES.every((n) => (canPause(n) || n === 'shadercompileworker') && !isNeverTouched(n)), 'agents, shells, build coordinators, the editor and the tools themselves are never frozen');
+        t.check(JSON.stringify(memgovArgs('normal')) ===
+            JSON.stringify([
+                'serve',
+                '--interval',
+                '2',
+                '--gate',
+                '4096:3000:1500:30000',
+                '--gate-names',
+                GATE_NAMES.join(','),
+            ]) && memgovArgs('gentle').includes('3072:3000:2000:30000'), 'memgov starts with the gate for the profile', memgovArgs('gentle').join(' '));
+        t.check(['normal', 'gentle'].every((p) => {
+            const g = BURST_GATE[p];
+            return g.growthMb >= 1024 && g.maxHoldMs <= 30000 && g.releaseMs < g.maxHoldMs && g.windowMs >= 1000;
+        }) && BURST_GATE.gentle.growthMb <= BURST_GATE.normal.growthMb, 'the gate is sane: a real burst size, every hold ends within 30 s, vGPU is not looser');
+        const gateExamples = [
+            { event: 'gate', at: 1, kind: 'ready', mode: 'notify', growthMb: 4096, windowMs: 3000 },
+            { event: 'gate', at: 1, kind: 'off', reason: 'bad --gate' },
+            { event: 'gate', at: 1, kind: 'trip', grewMb: 4210, ms: 1800, jobMb: 23456, held: [{ pid: 101, name: 'cl' }] },
+            { event: 'gate', at: 1, kind: 'hold', pid: 101, name: 'cl' },
+            { event: 'gate', at: 1, kind: 'release', pid: 101, name: 'cl', heldMs: 1500, forced: false },
+        ];
+        const heldOf = (n) => Array.from({ length: n }, (_, i) => ({ pid: i, name: 'cl' }));
+        t.check(gateExamples.every((e) => GateEventSchema.safeParse(e).success) &&
+            !GateEventSchema.safeParse({ event: 'gate', at: 1, kind: 'hold', pid: 1, name: 'x'.repeat(129) }).success &&
+            !GateEventSchema.safeParse({ event: 'gate', at: 1, kind: 'trip', grewMb: 1, ms: 1, jobMb: 1, held: heldOf(65) })
+                .success &&
+            !GateEventSchema.safeParse({ event: 'gate', at: 1, kind: 'boom' }).success &&
+            !GateEventSchema.safeParse({ at: 1, kind: 'hold', pid: 1, name: 'cl' }).success, 'gate events from memgov are checked: one of each kind passes; a long name, 65 held, a bad kind or no event fail');
+        {
+            const gateLogs = [];
+            const gateCore = new GovernorCore({
+                port,
+                profile: 'normal',
+                now: () => 0,
+                logLine: (l) => gateLogs.push(l),
+                saveStatus: () => undefined,
+                warn: (line) => gateLogs.push(line),
+            });
+            gateCore.onGate({
+                event: 'gate',
+                at: 1,
+                kind: 'trip',
+                grewMb: 4210,
+                ms: 1800,
+                jobMb: 23456,
+                held: [{ pid: 101, name: 'cl' }],
+            });
+            gateCore.onGate({
+                event: 'gate',
+                at: 2,
+                kind: 'release',
+                pid: 101,
+                name: 'cl',
+                heldMs: 30000,
+                forced: true,
+            });
+            t.check(gateLogs.some((l) => l.includes("governor: gate: the agents' programs grew 4210 MB in 1.8 s (now 23456 MB); holding 1: cl (101)")) &&
+                gateLogs.some((l) => l.endsWith('(the longest it may wait)')) &&
+                gateCore.current.step === 0, 'gate events go to the memory log and leave the dial alone', gateLogs.join('\n'));
+            const heldStatuses = [];
+            const heldCore = new GovernorCore({
+                port,
+                profile: 'normal',
+                now: () => 0,
+                logLine: () => undefined,
+                saveStatus: (s) => heldStatuses.push(s),
+                warn: () => undefined,
+            });
+            heldCore.onSample({ ...sample(60, 40, procs), gateHeld: 3 });
+            const heldStatus = heldStatuses[heldStatuses.length - 1];
+            t.check(PressureStatusSchema.safeParse(heldStatus).success &&
+                heldStatus.held === 3 &&
+                heldCore.snapshot?.held === 3, 'the number of held builds reaches the status file and the snapshot', JSON.stringify(heldStatus));
+            t.check(HeartbeatSchema.safeParse({ ...beat, held: 3 }).success &&
+                heartbeatLine({ ...beat, held: 3 }).includes('3 builds held by the memory gate'), 'the heartbeat carries the held builds into the crash report line');
+        }
         t.section("the PC's watchdog");
         const input = (memory, nowMs, cpu = 10, profile = 'normal') => ({
             memory,
@@ -541,6 +644,13 @@ export const heavyLoadSuite = {
             meaning.includes('froze, lost power') &&
             meaning.includes('hardware error') &&
             meaning.includes('vmwp.exe'), 'what each finding usually means, in plain words', meaning);
+        t.check(findingLines([ev(1000, 'Application Error', '2026-10-15T19:41:12Z', 'Faulting application name: vmwp.exe')])
+            .join('\n')
+            .includes('not a program inside the sandbox running out of memory'), 'a crash of vmwp.exe is named as a fault in Windows or a driver, not memory');
+        t.check(memoryWasFineLine('x\n2026-11-08T15:30:05.411Z | RAM free/total MB 42325/63170 | commit free/limit MB 52051/75458 | page file auto\n')?.includes('still had 41 GB of RAM and 50 GB') === true &&
+            memoryWasFineLine('2026-10-15T19:40:50Z | RAM free/total MB 900/32768 | commit free/limit MB 9000/40000') ===
+                null &&
+            memoryWasFineLine('') === null, 'the report says when this PC still had plenty of memory, and says nothing when it was low');
         const dumps = path.join(t.at('crash-dumps'), 'Minidump');
         fs.mkdirSync(dumps, { recursive: true });
         fs.writeFileSync(path.join(dumps, '101526-1.dmp'), 'x');
@@ -576,6 +686,7 @@ export const heavyLoadSuite = {
         };
         const sandboxCs = (n) => path.join(t.packageRoot, 'sandbox', 'csharp', n);
         build('ptyhost', [sandboxCs('PtyHost.cs')]);
+        build('clipboardwatch', [sandboxCs('ClipboardWatch.cs')], 'library');
         const memgov = build('memgov', [sandboxCs('MemGov.cs')]);
         const hostDir = path.join(t.packageRoot, 'native', 'csharp', 'HostTools');
         const tools = build('HostTools', fs
@@ -607,6 +718,7 @@ export const heavyLoadSuite = {
             // Not JSON: the check below fails.
         }
         t.check(sampleOk && served.status === 0, 'memgov serve prints a well-formed sample and ends when its input closes', firstLine);
+        t.check(!(served.stdout ?? '').split(/\r?\n/).some((l) => l.includes('"event":"gate"')), 'a memgov started without --gate never takes the job port (no gate events)');
         for (const script of ['memory-status.ps1', 'stop-events.ps1']) {
             const text = fs.readFileSync(path.join(t.packageRoot, 'native', 'scripts', script), 'utf8');
             t.check(text.startsWith('#Requires -Version 5.1'), script + ' says its PowerShell version');

package/dist/selftest/live-terminal.test.js

@@ -11,6 +11,7 @@ import { spawn, spawnSync } from 'node:child_process';
 import { pathToFileURL } from 'node:url';
 import { encodeFrame, FrameType } from '../shared/pty/index.js';
 import { SYSTEM } from '../shared/system.js';
+import { GateEventSchema } from '../guest/governor/core.js';
 import { CSC, openViewer, tail, WAIT } from './support/live.js';
 /**
  * The stand-in agent: VT input and SGR mouse tracking on, echoes what it reads ("got <1b>[<0;10;5M"). L prints 500
@@ -268,6 +269,108 @@ export const liveTerminalSuite = {
                 Number(set[1]) === Math.max(Math.floor(commit / 2), commit - Math.max(1536, Math.floor((commit * 3) / 100))), 'the ptyhost that creates the job sets the backstop just below the commit limit (auto: 3 %, at least 1.5 GB)', read('job-first.log'));
             t.check(read('job-second.log').includes('joined the existing one'), 'a ptyhost that joins the job never changes its backstop', read('job-second.log'));
         }
+        t.section('the memory gate: a burst is held at once and let go in turn');
+        {
+            // A job of the test's own (never the agents' real one) for both ptyhosts and memgov.
+            const jobName = 'Local\\AgentSandboxAgentsJobTest' + process.pid + '-gate-' + Date.now();
+            const memgovExe = t.at('memgov-gate.exe');
+            const burstExe = t.at('MemoryBurst.exe');
+            const gateErrors = compile(path.join(t.packageRoot, 'sandbox', 'csharp', 'MemGov.cs'), memgovExe) ||
+                compile(path.join(t.packageRoot, 'src', 'selftest', 'fixtures', 'memory-burst', 'MemoryBurst.cs'), burstExe);
+            t.check(!gateErrors, 'memgov and the memory burst program compile', gateErrors);
+            if (!gateErrors) {
+                const ping = path.join(process.env.SystemRoot ?? 'C:\\Windows', 'System32', 'PING.EXE');
+                const holder = '"' + SYSTEM.cmd() + '" /c "' + ping + '" -n 60 127.0.0.1 >nul';
+                const progress = t.at('burst-progress.txt');
+                const startHost = async (command, log) => spawn(ptyhost, [String(await freePort()), 'tok', '80', '24', t.at(log), command], {
+                    env: { ...process.env, PTYHOST_BIND: 'loopback', PTYHOST_BACKSTOP_MB: 'none', PTYHOST_JOB_NAME: jobName },
+                    stdio: 'ignore',
+                    windowsHide: true,
+                });
+                const read = (file) => (fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : '');
+                const hosts = [];
+                let memgov = null;
+                try {
+                    hosts.push(await startHost(holder, 'gate-a.log'));
+                    await t.waitFor(() => read(t.at('gate-a.log')).includes('agent job:'), WAIT.screen);
+                    memgov = spawn(memgovExe, ['serve', '--interval', '1', '--gate', '512:3000:800:4000', '--gate-names', 'memoryburst'], {
+                        env: { ...process.env, MEMGOV_JOB_NAME: jobName },
+                        stdio: ['pipe', 'pipe', 'ignore'],
+                        windowsHide: true,
+                    });
+                    let text = '';
+                    memgov.stdout.on('data', (chunk) => (text += chunk.toString('utf8')));
+                    const events = () => text
+                        .split(/\r?\n/)
+                        .filter((l) => l.includes('"event":"gate"'))
+                        .flatMap((l) => {
+                        try {
+                            const parsed = GateEventSchema.safeParse(JSON.parse(l));
+                            return parsed.success ? [parsed.data] : [];
+                        }
+                        catch {
+                            return [];
+                        }
+                    });
+                    const ready = await t.waitFor(() => events().some((e) => e.kind === 'ready'), WAIT.screen);
+                    const readyEvent = events().find((e) => e.kind === 'ready');
+                    t.check(Boolean(ready) && readyEvent?.kind === 'ready' && readyEvent.mode === 'notify', "the gate listens to the job's notifications (no polling)", text.slice(-400));
+                    hosts.push(await startHost('"' + burstExe + '" 1536 "' + progress + '"', 'gate-b.log'));
+                    const finished = await t.waitFor(() => read(progress).includes('done'), 15000);
+                    const marks = read(progress)
+                        .split(/\r?\n/)
+                        .flatMap((l) => {
+                        const m = /^(\d+) \d+$/.exec(l.trim());
+                        return m ? [Number(m[1])] : [];
+                    });
+                    const all = events();
+                    const trips = all.flatMap((e) => (e.kind === 'trip' ? [e] : []));
+                    const releases = all.flatMap((e) => (e.kind === 'release' ? [e] : []));
+                    const evidence = text.slice(-1200) + '\nprogress: ' + marks.length + ' lines';
+                    const firstTrip = trips[0];
+                    t.check(trips.some((e) => e.held.some((h) => h.name === 'memoryburst')) &&
+                        firstTrip !== undefined &&
+                        firstTrip.grewMb >= 512 &&
+                        firstTrip.grewMb <= 1024, 'a burst past the gate is held at once', evidence);
+                    const stalls = [];
+                    for (const trip of trips) {
+                        if (!trip.held.some((h) => h.name === 'memoryburst'))
+                            continue;
+                        const release = releases.find((r) => r.at >= trip.at && r.name === 'memoryburst');
+                        const until = release ? release.at : Infinity;
+                        if (marks.some((m) => m > trip.at + 200 && m < until))
+                            stalls.push('trip at ' + trip.at);
+                    }
+                    t.check(stalls.length === 0, 'the held program made no progress more than 200 ms after the trip until it was let go', stalls.join(', ') + '\n' + evidence);
+                    t.check(releases.length > 0 && releases.every((r) => r.heldMs <= 4500) && releases.some((r) => !r.forced), 'held programs go on in turn, never longer than the most allowed', evidence);
+                    t.check(Boolean(finished) && trips.length >= 2, 'the burst program reached its end after at least 2 trips', evidence);
+                }
+                finally {
+                    if (memgov) {
+                        memgov.stdin.end();
+                        const ended = memgov;
+                        await t.waitFor(() => ended.exitCode !== null, 5000);
+                        t.check(ended.exitCode === 0, 'memgov with the gate ends cleanly when its input closes');
+                        try {
+                            if (ended.exitCode === null)
+                                ended.kill();
+                        }
+                        catch {
+                            /* it ended between the check and the kill: nothing left to stop */
+                        }
+                    }
+                    for (const c of hosts) {
+                        try {
+                            if (c.exitCode === null)
+                                c.kill();
+                        }
+                        catch {
+                            /* it ended between the check and the kill: nothing left to stop */
+                        }
+                    }
+                }
+            }
+        }
         const client = t.at('client.mjs');
         fs.writeFileSync(client, [
             'import { connect, runTerminalClient } from ' +

package/dist/selftest/menu-screens.js

@@ -19,6 +19,7 @@ import { SECTION_LABELS } from '../cli/menu/shell.js';
 import { Frame, ListScreen, OverlayScreen, Text } from '../cli/tui/index.js';
 export const SIZES = [
     { width: 200, height: 60 },
+    { width: 120, height: 30 },
     { width: 100, height: 30 },
     { width: 80, height: 24 },
     { width: 60, height: 20 },
@@ -38,6 +39,48 @@ const DATA_FOLDER_ROW = [
 const ACCOUNTS = {
     agent: 'claude',
     services: [
+        {
+            kind: 'epic',
+            label: SERVICE_SPECS.epic.label,
+            share: true,
+            state: 'none',
+            source: null,
+            savedAt: null,
+            summary: null,
+            heldBy: null,
+            usedBy: ['unreal'],
+            usedFor: 'unreal',
+            warnings: [...SERVICE_SPECS.epic.warnings],
+            canImport: true,
+            canLogin: false,
+            needsFile: false,
+            fromPc: true,
+            hasFileSource: false,
+            onPc: true,
+            sandboxOnly: false,
+            ready: true,
+        },
+        {
+            kind: 'keystore',
+            label: SERVICE_SPECS.keystore.label,
+            share: false,
+            state: 'none',
+            source: null,
+            savedAt: null,
+            summary: null,
+            heldBy: null,
+            usedBy: ['flutter'],
+            usedFor: 'flutter',
+            warnings: [...SERVICE_SPECS.keystore.warnings],
+            canImport: true,
+            canLogin: false,
+            needsFile: true,
+            fromPc: false,
+            hasFileSource: true,
+            onPc: null,
+            sandboxOnly: false,
+            ready: false,
+        },
         {
             kind: 'perplexity',
             label: SERVICE_SPECS.perplexity.label,
@@ -53,6 +96,10 @@ const ACCOUNTS = {
             canImport: true,
             canLogin: true,
             needsFile: false,
+            fromPc: true,
+            hasFileSource: true,
+            onPc: true,
+            sandboxOnly: false,
             ready: true,
         },
         {
@@ -70,6 +117,10 @@ const ACCOUNTS = {
             canImport: false,
             canLogin: false,
             needsFile: false,
+            fromPc: false,
+            hasFileSource: false,
+            onPc: null,
+            sandboxOnly: true,
             ready: true,
         },
     ],
@@ -423,7 +474,7 @@ export function renderScreens(dir) {
             ],
             escape: 'cancel',
         });
-        out.push(block('5 Settings: Save / Discard / Cancel', Frame.render({ ...dialog.render(bodySize), nav }, size.width, size.height).map((l) => Text.strip(l).replace(/\s+$/, '')), size), block('6 Accounts', draw(5, accountsOptions(ACCOUNTS), size, status), size), block('6 Accounts · codex', draw(5, { ...accountsOptions(ACCOUNTS), startCategory: 'codex' }, size, status), size), block('6 Accounts · opencode (login not kept)', draw(5, { ...accountsOptions(ACCOUNTS), startCategory: 'opencode' }, size, status), size));
+        out.push(block('5 Settings: Save / Discard / Cancel', Frame.render({ ...dialog.render(bodySize), nav }, size.width, size.height).map((l) => Text.strip(l).replace(/\s+$/, '')), size), block('6 Accounts', draw(5, accountsOptions(ACCOUNTS), size, status), size), ...['epic', 'perplexity', 'comet'].map((kind) => block('6 Accounts · ' + kind, draw(5, { ...accountsOptions(ACCOUNTS), startCategory: 'service:' + kind }, size, status), size)), block('6 Accounts · codex', draw(5, { ...accountsOptions(ACCOUNTS), startCategory: 'codex' }, size, status), size), block('6 Accounts · opencode (login not kept)', draw(5, { ...accountsOptions(ACCOUNTS), startCategory: 'opencode' }, size, status), size));
         for (const category of ['updates', 'data', 'health', 'logs', 'more'])
             out.push(block('7 Maintenance · ' + category, draw(6, { ...maintenanceOptions(maintenance), startCategory: category }, size, status), size));
     }

package/dist/selftest/menu.test.js

@@ -7,7 +7,7 @@ import { Draft } from '../cli/menu/settings/draft.js';
 import { z } from 'zod';
 import { addedAgents, agentNameProblem, commandFromPackage, newAgent } from '../app/features/agents/index.js';
 import { APP_GROUPS, appRows, REQUEST_APP, requestAppUrl } from '../app/features/apps/index.js';
-import { appsCategories, appsItems } from '../cli/menu/pages/apps-page.js';
+import { appsCategories, appsItems, stageTicks } from '../cli/menu/pages/apps-page.js';
 import { readMenuView, saveMenuView } from '../cli/menu/memory.js';
 import path from 'node:path';
 import { argPathKind, optionLabel, optionPathKind, plainDescription } from '../cli/menu/command-fields.js';
@@ -633,6 +633,24 @@ export const menuSuite = {
             appItems.every((i) => groupIds.includes(i.category ?? '')) &&
             appItems.length === appRows(user2, t.dir('apps-groups')).length &&
             APP_CATEGORIES.every((c) => APP_GROUPS.some((g) => g.members.includes(c.id))), 'the apps are in at most 7 groups (with your own programs); every catalogue category belongs to one and every app is listed', groupIds.join());
+        t.section('a Store app ticked on the Apps page is saved and shown on');
+        const appsFile = ConfigFile.user(t.at('apps-store', 'config.json'));
+        const appsDraft = new Draft();
+        const perplexityRow = (d) => appsItems(appsFile, t.dir('apps-store-data'), d).find((i) => i.value === 'perplexity-desktop')?.checked;
+        t.check(perplexityRow(appsDraft) === false, 'the Perplexity desktop app starts off');
+        const alreadyOn = appRows(appsFile, t.dir('apps-store-data'))
+            .filter((r) => r.on)
+            .map((r) => r.id);
+        stageTicks(appsFile, appsDraft, [...alreadyOn, 'perplexity-desktop']);
+        t.check(perplexityRow(appsDraft) === true && appsDraft.count() === 1, 'ticking it shows it on and stages one change');
+        const applied = appsDraft.apply();
+        t.check(applied.saved === 1 &&
+            applied.problems.length === 0 &&
+            appsFile.valueInFile(['apps', 'install']).includes('perplexity-desktop') &&
+            perplexityRow(new Draft()) === true, 'Ctrl+S writes it into apps.install and the page still shows it on');
+        const toggleCtx = { loaded: { configPath: appsFile.file }, options: {}, dataPath: t.dir('apps-store-data') };
+        await runDefinition('apps.toggle', toggleCtx, { id: 'perplexity-desktop', on: false }, quiet());
+        t.check(!(ConfigFile.user(appsFile.file).valueInFile(['apps', 'install']) ?? []).includes('perplexity-desktop'), 'and the web toggle (apps.toggle) turns it off in the same list');
         t.section('dialog box');
         const box = dialogBox({ title: 'Unsaved changes', lines: ['You have 2 unsaved changes.'], buttons: 'Save' }, 61);
         const base = Array.from({ length: 12 }, () => 'x'.repeat(60));
@@ -742,11 +760,19 @@ export const menuSuite = {
             const size = /\((\d+)x(\d+)\)/.exec(head);
             return !size || rows.length !== Number(size[2]) || rows.some((l) => Text.width(l) > Number(size[1]) - 1);
         });
-        t.equal(overflow.map((b) => b.slice(0, b.indexOf('\n'))), [], 'every screen is exactly as tall as the terminal and never wider, at 200x60, 100x30, 80x24 and 60x20');
-        t.check(SIZES.length === 4 &&
+        t.equal(overflow.map((b) => b.slice(0, b.indexOf('\n'))), [], 'every screen is exactly as tall as the terminal and never wider, at 200x60, 120x30, 100x30, 80x24 and 60x20');
+        t.check(SIZES.length === 5 &&
             screens.includes('=== 7 Maintenance · health (80x24) ===') &&
             screens.includes('unsaved: 2') &&
             screens.includes('Save'), 'all screens render at both sizes; the settings screen shows its unsaved count and the leave dialog offers Save');
+        const serviceScreens = blocks.filter((b) => /^6 Accounts · (epic|perplexity|comet) \((80x24|120x30)\)/.test(b));
+        const serviceRows = serviceScreens.flatMap((b) => b.split('\n').slice(1));
+        t.check(serviceScreens.length === 6 &&
+            serviceRows.every((l) => !/\bsandbox (account|launch|config)\b/.test(l)) &&
+            serviceRows.every((l) => !l.includes('(encrypted)') && !/[A-Za-z]…/.test(l.replace(/(file|sign-in|Forget)…/g, ''))) &&
+            serviceRows.some((l) => l.includes('On this PC') && l.includes('found')) &&
+            serviceRows.some((l) => l.includes('Perplexity API')) &&
+            !serviceRows.some((l) => l.includes('Perplexity API key')), 'the service pages read short at 80 and 120 columns: short names, a few facts, no cut words, no command hints');
         const out = process.env.MENU_SCREENS_OUT;
         if (out)
             fs.writeFileSync(out, screens, 'utf8');

package/dist/selftest/personalization.test.js

@@ -47,7 +47,8 @@ export const personalizationSuite = {
         const untouched = fs.readFileSync(settings, 'utf8');
         t.check(untouched.startsWith('// edited') &&
             /"guid": "\{x\}",\s*\}/.test(untouched) &&
-            /"reloadEnvironmentVariables":\s*true/.test(untouched), 'until pwsh is installed only the reload switch is added (comments and trailing commas survive)');
+            /"reloadEnvironmentVariables":\s*true/.test(untouched) &&
+            /"copyOnSelect":\s*true/.test(untouched), 'until pwsh is installed only the default switches are added (comments and trailing commas survive)');
         t.write(path.join(data, 'tools', 'pwsh', 'pwsh.exe'), 'MZ');
         syncPwshProfile(data, true);
         const added = read();

package/dist/selftest/service-accounts.test.js

@@ -18,9 +18,10 @@ import { clearSecrets, SecretStore } from '../host/secrets/index.js';
 import { applyServiceAccounts, readDelivered } from '../guest/accounts/apply.js';
 import { AccountWatch } from '../guest/accounts/watch.js';
 import { epicAdapter } from '../guest/accounts/kinds/epic.js';
-import { epicSettingsFile, epicSettingsFiles, fingerprint, readEpicLogin, SERVICE_KINDS, SERVICE_SPECS, serviceWanted, withEpicLogin, } from '../shared/accounts/index.js';
+import { epicSettingsFile, epicSettingsFiles, fingerprint, readEpicLogin, SERVICE_KINDS, serviceWanted, withEpicLogin, } from '../shared/accounts/index.js';
 import { RunDir } from '../shared/channel/index.js';
 import { decodeText, encodeText, readBoundedFile } from '../shared/io/index.js';
+import { isKindReady } from '../shared/readiness.js';
 const SIGN_IN = 'PlantedEpicSignIn' + 'AbCdEf0123456789+/'.repeat(6) + '==';
 const RENEWED = 'PlantedRenewed' + 'ZyXw9876543210'.repeat(6);
 const CFX = 'cfxk_PlantedServerKey_0123456789';
@@ -150,6 +151,11 @@ export const serviceAccountsSuite = {
         signIns.remove('epic');
         const fromPc = deliver({ pc: thisPc });
         t.check(fromPc.payloads.epic?.data === SIGN_IN && signIns.info('epic')?.source === 'pc', "shared with nothing saved: this PC's own sign-in is taken and saved, as import would");
+        for (const file of epicSettingsFiles(pcLocal))
+            fs.writeFileSync(file, INI.replace(SIGN_IN, RENEWED));
+        t.check(deliver({ pc: thisPc }).payloads.epic?.data === RENEWED && signIns.read('epic')?.data === RENEWED, "one taken from this PC follows it: the PC's renewed sign-in replaces the stale copy");
+        signIns.save('epic', { data: SIGN_IN }, 'sandbox');
+        t.check(deliver({ pc: thisPc }).payloads.epic?.data === SIGN_IN && signIns.info('epic')?.source === 'sandbox', 'one a sandbox handed back is newer than the PC’s and is kept');
         signIns.remove('epic');
         t.check(!deliver().payloads.epic, 'without this PC (pc left out) nothing is taken');
         const sharedRun = await f.run({}, config);
@@ -325,8 +331,77 @@ export const serviceAccountsSuite = {
         t.section('the accounts page');
         const row = serviceRow('epic', { ...config, accounts: { ...config.accounts, epic: { share: true } } }, signIns, launchLeases);
         const lines = pageLines(servicePage(row)).join('\n');
-        t.check(lines.includes('Epic Games') && lines.includes(SERVICE_SPECS.epic.warnings[1]) && !lines.includes(SIGN_IN), 'a service shows its state and its warnings, never the sign-in');
+        t.check(lines.includes('Epic Games') &&
+            servicePage(row).sections[0].facts?.some((f) => f.description === 'The agent can use it.') === true &&
+            !lines.includes(SIGN_IN), 'a service shows its state and one short warning, never the sign-in');
         t.check(Object.values(accountsView.queries).some((q) => q.id === 'accounts.services') &&
             ['accounts.service.import', 'accounts.service.login', 'accounts.service.logout', 'settings.set'].every((id) => accountsView.operations.some((o) => o.id === id)), 'the accounts view offers the services and their actions on every surface');
+        t.section('every action a service page shows works from the menu');
+        const shareOn = { ...config, accounts: { ...config.accounts, perplexity: { share: true } } };
+        const pcFound = { localAppData: t.dir('svc-pc-found'), appData: '', programData: '', env: {} };
+        t.write(epicSettingsFile(pcFound.localAppData), INI);
+        const pcNone = { localAppData: t.dir('svc-pc-none'), appData: '', programData: '', env: {} };
+        const pageStore = new ServiceAccountStore(t.dir('svc-page'), SecretStore.memory());
+        const pageLeases = new AccountLeases(t.dir('svc-page-leases'));
+        const rowOn = (kind, pc, c = config) => serviceRow(kind, c, pageStore, pageLeases, pc);
+        const labelsOf = (row) => servicePage(row).sections[0].actions.map((a) => a.label);
+        const descriptionsOf = (r) => (servicePage(r).sections[0].facts ?? []).map((f) => ' ' + (f.description ?? '')).join('');
+        const epicFound = rowOn('epic', pcFound);
+        const epicText = pageLines(servicePage(epicFound)).join('\n') + descriptionsOf(epicFound);
+        t.check(epicFound.onPc === true &&
+            /On this PC\s+found/.test(epicText) &&
+            epicText.includes("takes this PC's") &&
+            !epicText.includes(SIGN_IN), 'a kind that comes from this PC says it is found there (never the sign-in), and what sharing does');
+        t.check(rowOn('epic', pcNone).onPc === false &&
+            /On this PC\s+not found/.test(pageLines(servicePage(rowOn('epic', pcNone))).join('\n')), 'and says not found when this PC has none');
+        t.check(labelsOf(epicFound).includes("Take this PC's sign-in") &&
+            !labelsOf(epicFound).some((l) => l.startsWith('Import…')), 'taking it from this PC has a plain name');
+        const perplexityLabels = labelsOf(rowOn('perplexity', pcFound, shareOn));
+        t.check(perplexityLabels.includes("Take this PC's sign-in") &&
+            perplexityLabels.includes('Import from a file…') &&
+            perplexityLabels.includes('Type the sign-in…'), 'the API key can be taken from this PC, read from a file or typed');
+        const cometRow = rowOn('comet', pcFound);
+        const cometText = pageLines(servicePage(cometRow)).join('\n') + descriptionsOf(cometRow);
+        t.check(cometRow.onPc === null &&
+            cometRow.sandboxOnly &&
+            labelsOf(cometRow).every((l) => l === 'Share with sandboxes') &&
+            cometText.includes('Sign in once inside a sandbox; it is kept for the next ones.'), 'Comet offers only sharing and says plainly to sign in once inside a sandbox');
+        // Every action a page shows is one its kind can do (import: a PC or file way; sign in: a typed way).
+        for (const kind of SERVICE_KINDS.filter(isKindReady)) {
+            const r = rowOn(kind, pcFound);
+            for (const a of servicePage(r).sections[0].actions ?? []) {
+                if (a.kind !== 'operation')
+                    continue;
+                const src = HOST_SOURCES[kind];
+                const ok = a.op === 'accounts.service.import'
+                    ? Boolean(src.fromPc || src.fromFile)
+                    : a.op === 'accounts.service.login'
+                        ? Boolean(src.fromAnswers)
+                        : ['accounts.service.logout', 'settings.set'].includes(a.op);
+                t.check(ok, kind + ': "' + a.label + '" is something this kind can do');
+            }
+        }
+        // The paths themselves, through the menu's questions (fakeIO): a file, typed, forgotten.
+        const envFile = t.write(t.at('svc-page', 'keys.env'), 'PERPLEXITY_API_KEY=pplx-PlantedKey0123456789\n');
+        const fileIO = fakeIO([envFile, true]);
+        const fromFile = await importServiceFlow(fileIO.io, 'perplexity', undefined, { store: pageStore, pc: pcNone, share: true }, true);
+        t.check(pageStore.info('perplexity')?.source === 'file' &&
+            fileIO.seen.questions[0].kind === 'path' &&
+            !fromFile.message.includes('PlantedKey'), 'Import from a file asks for the file even when this PC could give one, and saves it');
+        await logoutServiceFlow(fakeIO([true]).io, 'perplexity', t.dir('svc-page-root'), pageStore, pageLeases);
+        const pcWithKey = { ...pcNone, env: { PERPLEXITY_API_KEY: 'pplx-FromThisPc0123456789' } };
+        const keyRow = rowOn('perplexity', pcWithKey);
+        t.check(keyRow.onPc === true, 'the API key in this terminal is found on this PC');
+        await importServiceFlow(fakeIO([true]).io, 'perplexity', undefined, {
+            store: pageStore,
+            pc: pcWithKey,
+            share: true,
+        });
+        t.check(pageStore.info('perplexity')?.source === 'pc', "Take this PC's sign-in saves the PC's key");
+        await loginServiceFlow(fakeIO(['pplx-Typed0123456789']).io, 'perplexity', { store: pageStore, share: true });
+        t.check(pageStore.info('perplexity')?.source === 'typed', 'Type the sign-in saves what was typed');
+        const savedRow = rowOn('perplexity', pcWithKey);
+        t.check(labelsOf(savedRow).includes('Forget…') && savedRow.state === 'saved', 'a saved sign-in offers Forget');
+        await t.throws(() => importServiceFlow(fakeIO([true]).io, 'comet', undefined, { store: pageStore, pc: pcWithKey, share: true }), 'inside a sandbox', 'Comet has nothing to import: the error says to sign in inside a sandbox');
     },
 };

package/dist/selftest/support/engine-golden.js

@@ -62,6 +62,7 @@ export const LAUNCH_FILES_GOLDEN = [
     'sandbox/csharp/AppActivation.cs',
     'sandbox/csharp/BindMount.cs',
     'sandbox/csharp/CargoShim.cs',
+    'sandbox/csharp/ClipboardWatch.cs',
     'sandbox/csharp/Desktop.cs',
     'sandbox/csharp/EnvBroadcast.cs',
     'sandbox/csharp/GitShim.cs',
@@ -95,6 +96,7 @@ export const LAUNCH_FILES_GOLDEN = [
     'sandbox/scripts/set-machine-environment.ps1',
     'sandbox/scripts/set-registry-values.ps1',
     'sandbox/scripts/start-store-app.ps1',
+    'sandbox/scripts/watch-clipboard.ps1',
     'sandbox/templates/fivem/README.txt',
     'sandbox/templates/fivem/cs/Client/Client.csproj',
     'sandbox/templates/fivem/cs/Client/ClientMain.cs',

package/dist/selftest/ui-text.test.js

@@ -104,6 +104,10 @@ function serviceRow(over) {
         canImport: true,
         canLogin: true,
         needsFile: false,
+        fromPc: false,
+        hasFileSource: false,
+        onPc: null,
+        sandboxOnly: false,
         ready: true,
         ...over,
     };