windows-development-sandbox 1.27.3 → 1.29.0

package/native/csharp/HcsHost/AssemblyInfo.cs

@@ -8,9 +8,9 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.27.3.0")]
-[assembly: AssemblyFileVersion("1.27.3.0")]
-[assembly: AssemblyInformationalVersion("1.27.3")]
+[assembly: AssemblyVersion("1.29.0.0")]
+[assembly: AssemblyFileVersion("1.29.0.0")]
+[assembly: AssemblyInformationalVersion("1.29.0")]
 [assembly: ComVisible(false)]
 // computecore.dll and computestorage.dll are not KnownDLLs: load them from System32 only, never from the exe's folder.
 [assembly: DefaultDllImportSearchPaths(DllImportSearchPath.System32)]

package/native/csharp/HostTools/AssemblyInfo.cs

@@ -8,7 +8,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.27.3.0")]
-[assembly: AssemblyFileVersion("1.27.3.0")]
-[assembly: AssemblyInformationalVersion("1.27.3")]
+[assembly: AssemblyVersion("1.29.0.0")]
+[assembly: AssemblyFileVersion("1.29.0.0")]
+[assembly: AssemblyInformationalVersion("1.29.0")]
 [assembly: ComVisible(false)]

package/native/csharp/HostTools/Window.cs

@@ -1,4 +1,4 @@
-// The Windows Sandbox client window: hidden for a headless sandbox (the VM keeps running), shown again by sbx-show.
+// The Windows Sandbox client window: hidden for a headless sandbox (the VM keeps running), shown again by sandbox show.
 // HostTools hide-window / show-window, or Add-Type from scripts\*-window.ps1 when HostTools cannot be built. C# 5.
 using System;
 using System.Collections.Generic;

package/native/csharp/StorageHelper/AssemblyInfo.cs

@@ -9,7 +9,7 @@ using System.Runtime.InteropServices;
 [assembly: AssemblyCompany("windows-development-sandbox (open source)")]
 [assembly: AssemblyProduct("Windows Development Sandbox")]
 [assembly: AssemblyCopyright("MIT License, windows-development-sandbox contributors")]
-[assembly: AssemblyVersion("1.27.3.0")]
-[assembly: AssemblyFileVersion("1.27.3.0")]
-[assembly: AssemblyInformationalVersion("1.27.3")]
+[assembly: AssemblyVersion("1.29.0.0")]
+[assembly: AssemblyFileVersion("1.29.0.0")]
+[assembly: AssemblyInformationalVersion("1.29.0")]
 [assembly: ComVisible(false)]

package/native/scripts/get-store-package.ps1

@@ -1,7 +1,8 @@
 #Requires -Version 5.1
 # Fetches a Microsoft Store app's package files (the .msix and the frameworks it needs) into -OutDir with this PC's own
 # Store tooling: winget download --source msstore, which uses your own Windows / Microsoft Store access (the script
-# never holds or asks for an account token). Prints one line of JSON: { ok, message, files: [file names in OutDir] }.
+# never holds or asks for an account token). Prints one line of JSON: { ok, message, files: [file names in OutDir],
+# dependencies: [the names among them that are frameworks] }.
 # host/apps/store-package.ts hashes and checks the files; the sandbox installs them with Add-AppxPackage.
 param(
     [Parameter(Mandatory = $true)][string]$ProductId,
@@ -10,13 +11,13 @@ param(
 )
 $ErrorActionPreference = 'Stop'
 
-function Finish([bool]$ok, [string]$message, $files) {
-    @{ ok = $ok; message = $message; files = @($files) } | ConvertTo-Json -Compress
+function Finish([bool]$ok, [string]$message, $files, $dependencies) {
+    @{ ok = $ok; message = $message; files = @($files); dependencies = @($dependencies) } | ConvertTo-Json -Compress
     exit 0
 }
 
-if ($ProductId -notmatch '^[A-Z0-9]{12}$') { Finish $false 'That is not a Microsoft Store product id.' @() }
-if ($PackageName -notmatch '^[A-Za-z0-9.]{1,100}$') { Finish $false 'That is not a package name.' @() }
+if ($ProductId -notmatch '^[A-Z0-9]{12}$') { Finish $false 'That is not a Microsoft Store product id.' @() @() }
+if ($PackageName -notmatch '^[A-Za-z0-9.]{1,100}$') { Finish $false 'That is not a package name.' @() @() }
 
 $winget = $null
 $command = Get-Command -Name winget.exe -CommandType Application -ErrorAction SilentlyContinue | Select-Object -First 1
@@ -26,11 +27,13 @@ if (-not $winget) {
     if (Test-Path -LiteralPath $alias) { $winget = $alias }
 }
 if (-not $winget) {
-    Finish $false 'winget is not on this PC. Install "App Installer" from the Microsoft Store, then launch again.' @()
+    Finish $false 'winget is not on this PC. Install "App Installer" from the Microsoft Store, then launch again.' @() @()
 }
 
 New-Item -ItemType Directory -Force -Path $OutDir | Out-Null
-$output = & $winget download --id $ProductId --source msstore --download-directory $OutDir `
+# x64 only: the sandbox is 64-bit Windows. winget puts the app in -OutDir and its frameworks (VCLibs, WindowsAppRuntime,
+# .NET runtime ...) in -OutDir\Dependencies; they are all needed, and installed first by the sandbox.
+$output = & $winget download --id $ProductId --source msstore --architecture x64 --download-directory $OutDir `
     --accept-package-agreements --accept-source-agreements --disable-interactivity 2>&1 | Out-String
 $code = $LASTEXITCODE
 
@@ -44,15 +47,23 @@ if ($code -ne 0 -or $found.Count -eq 0) {
     if ($installed) {
         $extra = ' The app is installed on this PC (' + $installed.Version + '), but Windows does not let its signed package be exported from there.'
     }
-    Finish $false ('winget could not download the package (exit ' + $code + ').' + $extra + ' ' + $tail) @()
+    Finish $false ('winget could not download the package (exit ' + $code + ').' + $extra + ' ' + $tail) @() @()
 }
 
-# Frameworks may come in a sub-folder: bring every package file up to -OutDir (host code reads them by name).
+# Everything goes up to -OutDir (host code reads the files by name). A name with characters the sandbox's file check
+# refuses (spaces, brackets) is changed to plain ones; the file itself is not touched.
+$root = (Resolve-Path -LiteralPath $OutDir).Path
 $names = @()
+$dependencies = @()
 foreach ($file in $found) {
-    if ((Split-Path -Parent $file.FullName) -ne (Resolve-Path -LiteralPath $OutDir).Path) {
-        Move-Item -LiteralPath $file.FullName -Destination (Join-Path $OutDir $file.Name) -Force
+    $isDependency = (Split-Path -Parent $file.FullName) -ne $root
+    $name = $file.Name -replace '[^A-Za-z0-9._~+-]', '_'
+    $target = Join-Path $root $name
+    if ($file.FullName -ne $target) {
+        if ($names -contains $name) { $name = ([guid]::NewGuid().ToString('N').Substring(0, 6)) + '_' + $name; $target = Join-Path $root $name }
+        Move-Item -LiteralPath $file.FullName -Destination $target -Force
     }
-    $names += $file.Name
+    $names += $name
+    if ($isDependency) { $dependencies += $name }
 }
-Finish $true 'ok' $names
+Finish $true 'ok' $names $dependencies

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.27.3",
+  "version": "1.29.0",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",
@@ -12,17 +12,7 @@
   },
   "bin": {
     "sandbox": "dist/bin/sandbox.js",
-    "windows-development-sandbox": "dist/bin/sandbox.js",
-    "agent-sandbox": "dist/bin/agent-sandbox.js",
-    "claude-sbx": "dist/bin/claude-sbx.js",
-    "claude-sandbox": "dist/bin/claude-sbx.js",
-    "codex-sbx": "dist/bin/codex-sbx.js",
-    "codex-sandbox": "dist/bin/codex-sbx.js",
-    "gemini-sbx": "dist/bin/gemini-sbx.js",
-    "gemini-sandbox": "dist/bin/gemini-sbx.js",
-    "claude-host": "dist/bin/claude-host.js",
-    "sbx-show": "dist/bin/sbx-show.js",
-    "sbx-hide": "dist/bin/sbx-hide.js"
+    "windows-development-sandbox": "dist/bin/sandbox.js"
   },
   "exports": {
     ".": {
@@ -45,14 +35,14 @@
     "build": "tsc -p tsconfig.json && tsc -p web/tsconfig.json --noEmit && node scripts/bundle.mjs && node scripts/bundle-web.mjs && node scripts/schemas.mjs",
     "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
     "rebuild": "npm run clean && npm run build",
-    "test": "npm run build && node dist/bin/agent-sandbox.js self-test",
+    "test": "npm run build && node dist/bin/sandbox.js self-test",
     "prepack": "npm run rebuild",
     "release:patch": "npm version patch && git push --follow-tags",
     "release:minor": "npm version minor && git push --follow-tags",
     "release:major": "npm version major && git push --follow-tags",
     "install:global": "node scripts/install-global.mjs",
     "publish:npm": "node scripts/publish-npm.mjs",
-    "doctor": "node dist/bin/agent-sandbox.js doctor",
+    "doctor": "node dist/bin/sandbox.js doctor",
     "lint": "eslint src scripts web",
     "format": "prettier --write src scripts web",
     "format:check": "prettier --check src scripts web",

package/sandbox/csharp/ClipboardWatch.cs

@@ -0,0 +1,59 @@
+// Reports each change of the clipboard on stdout until a parent process ends. Loaded by scripts\watch-clipboard.ps1 (Add-Type). C# 5.
+using System;
+using System.Runtime.InteropServices;
+using System.Threading;
+
+public static class SbxClipboardWatch
+{
+    private const uint Synchronize = 0x00100000;
+    private const uint WaitObject0 = 0;
+    private const int PollMs = 150;
+
+    private static class NativeMethods
+    {
+        [DllImport("kernel32.dll", SetLastError = true)]
+        public static extern IntPtr OpenProcess(uint access, bool inherit, uint pid);
+
+        [DllImport("kernel32.dll", SetLastError = true)]
+        public static extern uint WaitForSingleObject(IntPtr handle, uint milliseconds);
+
+        [DllImport("kernel32.dll", SetLastError = true)]
+        public static extern bool CloseHandle(IntPtr handle);
+
+        [DllImport("user32.dll", SetLastError = true)]
+        public static extern uint GetClipboardSequenceNumber();
+    }
+
+    /// <summary>
+    /// Writes the line "changed" for every clipboard change, until process parentPid ends. 0 = the parent ended,
+    /// 2 = the parent could not be opened.
+    /// </summary>
+    public static int Run(uint parentPid)
+    {
+        IntPtr parent = NativeMethods.OpenProcess(Synchronize, false, parentPid);
+        if (parent == IntPtr.Zero)
+        {
+            return 2;
+        }
+        try
+        {
+            uint last = NativeMethods.GetClipboardSequenceNumber();
+            while (NativeMethods.WaitForSingleObject(parent, 0) != WaitObject0)
+            {
+                uint now = NativeMethods.GetClipboardSequenceNumber();
+                if (now != last)
+                {
+                    last = now;
+                    Console.Out.WriteLine("changed");
+                    Console.Out.Flush();
+                }
+                Thread.Sleep(PollMs);
+            }
+            return 0;
+        }
+        finally
+        {
+            NativeMethods.CloseHandle(parent);
+        }
+    }
+}