windows-development-sandbox 1.28.0 → 1.29.0

package/native/scripts/get-store-package.ps1

@@ -1,7 +1,8 @@
 #Requires -Version 5.1
 # Fetches a Microsoft Store app's package files (the .msix and the frameworks it needs) into -OutDir with this PC's own
 # Store tooling: winget download --source msstore, which uses your own Windows / Microsoft Store access (the script
-# never holds or asks for an account token). Prints one line of JSON: { ok, message, files: [file names in OutDir] }.
+# never holds or asks for an account token). Prints one line of JSON: { ok, message, files: [file names in OutDir],
+# dependencies: [the names among them that are frameworks] }.
 # host/apps/store-package.ts hashes and checks the files; the sandbox installs them with Add-AppxPackage.
 param(
     [Parameter(Mandatory = $true)][string]$ProductId,
@@ -10,13 +11,13 @@ param(
 )
 $ErrorActionPreference = 'Stop'
 
-function Finish([bool]$ok, [string]$message, $files) {
-    @{ ok = $ok; message = $message; files = @($files) } | ConvertTo-Json -Compress
+function Finish([bool]$ok, [string]$message, $files, $dependencies) {
+    @{ ok = $ok; message = $message; files = @($files); dependencies = @($dependencies) } | ConvertTo-Json -Compress
     exit 0
 }
 
-if ($ProductId -notmatch '^[A-Z0-9]{12}$') { Finish $false 'That is not a Microsoft Store product id.' @() }
-if ($PackageName -notmatch '^[A-Za-z0-9.]{1,100}$') { Finish $false 'That is not a package name.' @() }
+if ($ProductId -notmatch '^[A-Z0-9]{12}$') { Finish $false 'That is not a Microsoft Store product id.' @() @() }
+if ($PackageName -notmatch '^[A-Za-z0-9.]{1,100}$') { Finish $false 'That is not a package name.' @() @() }
 
 $winget = $null
 $command = Get-Command -Name winget.exe -CommandType Application -ErrorAction SilentlyContinue | Select-Object -First 1
@@ -26,11 +27,13 @@ if (-not $winget) {
     if (Test-Path -LiteralPath $alias) { $winget = $alias }
 }
 if (-not $winget) {
-    Finish $false 'winget is not on this PC. Install "App Installer" from the Microsoft Store, then launch again.' @()
+    Finish $false 'winget is not on this PC. Install "App Installer" from the Microsoft Store, then launch again.' @() @()
 }
 
 New-Item -ItemType Directory -Force -Path $OutDir | Out-Null
-$output = & $winget download --id $ProductId --source msstore --download-directory $OutDir `
+# x64 only: the sandbox is 64-bit Windows. winget puts the app in -OutDir and its frameworks (VCLibs, WindowsAppRuntime,
+# .NET runtime ...) in -OutDir\Dependencies; they are all needed, and installed first by the sandbox.
+$output = & $winget download --id $ProductId --source msstore --architecture x64 --download-directory $OutDir `
     --accept-package-agreements --accept-source-agreements --disable-interactivity 2>&1 | Out-String
 $code = $LASTEXITCODE
 
@@ -44,15 +47,23 @@ if ($code -ne 0 -or $found.Count -eq 0) {
     if ($installed) {
         $extra = ' The app is installed on this PC (' + $installed.Version + '), but Windows does not let its signed package be exported from there.'
     }
-    Finish $false ('winget could not download the package (exit ' + $code + ').' + $extra + ' ' + $tail) @()
+    Finish $false ('winget could not download the package (exit ' + $code + ').' + $extra + ' ' + $tail) @() @()
 }
 
-# Frameworks may come in a sub-folder: bring every package file up to -OutDir (host code reads them by name).
+# Everything goes up to -OutDir (host code reads the files by name). A name with characters the sandbox's file check
+# refuses (spaces, brackets) is changed to plain ones; the file itself is not touched.
+$root = (Resolve-Path -LiteralPath $OutDir).Path
 $names = @()
+$dependencies = @()
 foreach ($file in $found) {
-    if ((Split-Path -Parent $file.FullName) -ne (Resolve-Path -LiteralPath $OutDir).Path) {
-        Move-Item -LiteralPath $file.FullName -Destination (Join-Path $OutDir $file.Name) -Force
+    $isDependency = (Split-Path -Parent $file.FullName) -ne $root
+    $name = $file.Name -replace '[^A-Za-z0-9._~+-]', '_'
+    $target = Join-Path $root $name
+    if ($file.FullName -ne $target) {
+        if ($names -contains $name) { $name = ([guid]::NewGuid().ToString('N').Substring(0, 6)) + '_' + $name; $target = Join-Path $root $name }
+        Move-Item -LiteralPath $file.FullName -Destination $target -Force
     }
-    $names += $file.Name
+    $names += $name
+    if ($isDependency) { $dependencies += $name }
 }
-Finish $true 'ok' $names
+Finish $true 'ok' $names $dependencies

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windows-development-sandbox",
-  "version": "1.28.0",
+  "version": "1.29.0",
   "description": "A disposable Windows Sandbox for development, with or without an AI agent (Claude Code, Codex, Gemini, opencode, ...): the folder you run it from is the workspace, toolchains and databases for your project install themselves, and nothing else on your PC is reachable.",
   "type": "module",
   "license": "MIT",
@@ -12,17 +12,7 @@
   },
   "bin": {
     "sandbox": "dist/bin/sandbox.js",
-    "windows-development-sandbox": "dist/bin/sandbox.js",
-    "agent-sandbox": "dist/bin/agent-sandbox.js",
-    "claude-sbx": "dist/bin/claude-sbx.js",
-    "claude-sandbox": "dist/bin/claude-sbx.js",
-    "codex-sbx": "dist/bin/codex-sbx.js",
-    "codex-sandbox": "dist/bin/codex-sbx.js",
-    "gemini-sbx": "dist/bin/gemini-sbx.js",
-    "gemini-sandbox": "dist/bin/gemini-sbx.js",
-    "claude-host": "dist/bin/claude-host.js",
-    "sbx-show": "dist/bin/sbx-show.js",
-    "sbx-hide": "dist/bin/sbx-hide.js"
+    "windows-development-sandbox": "dist/bin/sandbox.js"
   },
   "exports": {
     ".": {
@@ -45,14 +35,14 @@
     "build": "tsc -p tsconfig.json && tsc -p web/tsconfig.json --noEmit && node scripts/bundle.mjs && node scripts/bundle-web.mjs && node scripts/schemas.mjs",
     "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
     "rebuild": "npm run clean && npm run build",
-    "test": "npm run build && node dist/bin/agent-sandbox.js self-test",
+    "test": "npm run build && node dist/bin/sandbox.js self-test",
     "prepack": "npm run rebuild",
     "release:patch": "npm version patch && git push --follow-tags",
     "release:minor": "npm version minor && git push --follow-tags",
     "release:major": "npm version major && git push --follow-tags",
     "install:global": "node scripts/install-global.mjs",
     "publish:npm": "node scripts/publish-npm.mjs",
-    "doctor": "node dist/bin/agent-sandbox.js doctor",
+    "doctor": "node dist/bin/sandbox.js doctor",
     "lint": "eslint src scripts web",
     "format": "prettier --write src scripts web",
     "format:check": "prettier --check src scripts web",

package/sandbox/scripts/install-store-package.ps1

@@ -16,11 +16,18 @@ if ($list.dependencies) { $dependencies = @($list.dependencies | ForEach-Object
 
 $existing = Get-AppxPackage -Name $PackageName -ErrorAction SilentlyContinue | Select-Object -First 1
 if (-not $existing) {
-    if ($dependencies.Count -gt 0) {
-        Add-AppxPackage -Path $list.main -DependencyPath $dependencies
+    # The frameworks (VCLibs, WindowsAppRuntime ...) are handed over with the app: Windows installs the ones it lacks first.
+    try {
+        if ($dependencies.Count -gt 0) {
+            Add-AppxPackage -Path $list.main -DependencyPath $dependencies
+        }
+        else {
+            Add-AppxPackage -Path $list.main
+        }
     }
-    else {
-        Add-AppxPackage -Path $list.main
+    catch {
+        $names = ($dependencies | ForEach-Object { Split-Path -Leaf $_ }) -join ', '
+        throw ('Add-AppxPackage refused ' + (Split-Path -Leaf $list.main) + ' (with ' + $dependencies.Count + ' frameworks: ' + $names + '): ' + $_.Exception.Message)
     }
     $existing = Get-AppxPackage -Name $PackageName -ErrorAction Stop | Select-Object -First 1
 }

package/schemas/config.schema.json

@@ -236,7 +236,7 @@
         },
         "headless": {
           "type": "boolean",
-          "description": "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+          "description": "Hide the sandbox window (\"Show the window\" brings it back). A headless sandbox shuts down when its last session ends."
         },
         "keepAwake": {
           "type": "boolean",

package/schemas/sandbox-config.schema.json

@@ -137,7 +137,7 @@
         },
         "headless": {
           "type": "boolean",
-          "description": "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+          "description": "Hide the sandbox window (\"Show the window\" brings it back). A headless sandbox shuts down when its last session ends."
         },
         "keepAwake": {
           "type": "boolean",

package/dist/bin/agent-sandbox.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/dist/bin/agent-sandbox.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
-import {
-  run
-} from "./chunk-ZMZI3625.js";
-import "./chunk-CB44HTTN.js";
-
-// src/bin/agent-sandbox.ts
-run(process.argv.slice(2));