ToolsEnabled Sim 0.1.13 (prerelease)

ToolsEnabled Sim 0.1.13 adds native Windows CLI/MCP support and a self-distributed Codex plugin. Git checkouts and the ZIP include identical pinned runtime dependencies; installation and startup run no npm resolver or browser download. Linux ownership checks, the panes and the exact typed-action refusal remain enforced.

Use a normal, non-elevated Windows terminal. Tested environment: Windows 10 Pro 22H2 x64 build 19045, Node 22.14.0 and Windows PowerShell 5.1.19041.6456. The calibrated medium-token producer passed all 10 steps: private/path tests 8/8, stdio/protocol 6/6, both physics engines 12/12, Unicode installation and all 165 file hashes/private inherited ACLs/current-user owners, eight actual ancestor refusals, four inert pane lifetime/environment/EOF cases and the bounded history checks. The history fixture contains one real run and 255 explicitly synthetic copies; three native pane reads completed in about 9.8 seconds under the 12-second wrapper budget, and entry 257 was refused.

A different worker followed public docs from a fresh folder and passed all 12 normal-user checks on the final ZIP: installation/no-overwrite, both engines delivering three crates with zero collisions and score 300, four real MCP clients per demo with no model calls, 602-record chains and replay, tamper refusal and help. All extracted and installed files matched the final archive. Every temporary task was deleted and all owned Jobs ended at zero.

Elevated engineering is explicitly partial. Producer private-read tests demonstrate refusal of administrator-owned private files. The independent elevated run installed and verified all files but its demo stopped with “MCP exited”; surviving run metadata included six administrator-owned files and two directories. That wrapper did not expose the direct cause, so this is not reported as a passing elevated workflow. Do not repair owners or ACLs to bypass refusal; use the documented normal-user route.

Linux: 145 tests pass, zero fail, one native-only skip; strict plugin validation, 17 packaging tests and dependency/source inventories pass. Two final ZIP builds are identical. Final source is 283751d4f3f2fd686a3c1860d721b4ca0578fa82; the final documentation and derived doc hashes changed after native producer testing, with every runtime/test/dependency/launcher/policy byte verified identical and the final ZIP independently installed and exercised.

Windows 11, native browser capture, real Windows Claude Code/Codex or Claude Desktop host sessions and console GUI remain unqualified/owner-pending. Desktop bundle compatibility remains macOS-only; no signed Windows bundle is claimed. Actual Codex marketplace/model-task evidence covers Linux; its plugin does not implement Claude's pane hooks or origin guarantee. This is self-distribution, with no OpenAI or Anthropic directory approval claim.

The last measured Anthropic portal result remains 0.1.12: five warnings and eight holds. Root npm auto-install and send-side credential-command patterns were addressed, but scanner clearance is unmeasured. Three pane holds and the typed-action refusal remain owner decisions; product/publisher names require reviewer judgment. The three listing metadata warnings remain, and two test warnings were addressed without weakening assertions. Seven large upstream files and standalone MuJoCo WASM may add inspection holds. Publication triggers the accepted main-branch rescan; the release lead reconciles it and opens the form, and the owner submits.

Download the ZIP and SHA256 sidecar, verify before extraction, and follow docs/WINDOWS.md or the Linux README. Private Windows state requires fixed local NTFS and current-user ownership. Native installer recovery is a deliberate new-folder retry; existing destinations and permissions are never repaired. This remains a prerelease, matching 0.1.12.