glimmervoid 0.33.0 → 0.34.0

package/dist/chunks/{main-J6y2RTri.js → main-Dh4udE7P.js}

@@ -4,8 +4,8 @@ import { a as isPathInside, c as sanitizeWorktreeName, n as caseFoldedPathKey, o
 import { a as packageRoot, n as cliPath, o as relayPath, r as clientDir, s as resolvePackageBin, t as bundled } from "./runtime-paths-BPoxENmK.js";
 import { A as KILLABLE_STATES, C as SshSignRequest, E as isSamePromptQuestion, M as RESTARTABLE_STATES, N as STATES, T as TaskTitle, _ as SIGN_URL_ENV, a as AgentDispatchRequest, c as AgentTicketRequest, h as SESSION_DOC_BODY_CAP_BYTES, j as MERGEABLE_LIVE_STATES, k as toolDetailLine, l as ORCHESTRATOR_AGENT_VERBS, m as RefinedTaskTitle, n as AGENT_URL_ENV, r as ASK_USER_QUESTION_TOOL_NAME, v as SSH_SIGN_BODY_CAP_BYTES, w as TASK_TITLE_CONTROL_CHARACTERS } from "./session-C7rstCmA.js";
 import { n as execFileAsync, o as spawn, r as execFileSync, t as execFile } from "./child-process-safe-DDELk9XC.js";
-import { n as glimmervoidHomeDir } from "./config-path-core-DFt-TemS.js";
-import { n as checkSandboxDependencies, t as allowSandboxedSpawn } from "./sandbox-deps-DuaNFq7n.js";
+import { n as glimmervoidHomeDir, t as decideConfigPath } from "./config-path-core-DFt-TemS.js";
+import { n as checkSandboxDependencies, t as allowSandboxedSpawn } from "./sandbox-deps-C63o3mZs.js";
 import { n as warnWhenGitIsTooOld } from "./git-version-CrLW4a6r.js";
 import { t as HOOK_URL_ENV } from "./hook-relay-core-DA_bz2KA.js";
 import { t as HOOK_VIA_SANDBOX_PROXY_ENV } from "./sandbox-proxy-core-hnQgKR0T.js";
@@ -19,13 +19,13 @@ import { n as unrefTimer, t as DEFAULT_TIMER_FNS } from "./timer-deps-u2DAQLok.j
 import { a as decideTicketAction, i as decideSpawnAllowance, l as isOrchestratorAgentVerb, n as REFUSAL_REASON, o as deriveChildSessionName, r as decideAgentRequest, s as describePushLanding, t as PUSH_UNAVAILABLE_REASON, u as parseAgentVerb } from "./agent-api-core-Ddg15j2j.js";
 import { s as GLIMMERVOID_SECRET_KEYS } from "./grok-BYKnBgdr.js";
 import { _ as isQueueAdmissionTimeout, a as jsonStateLoadError, c as loadedJsonValue, d as writeJsonAtomicSync, f as writeTextAtomic, g as createSpawnGate, h as createSerialQueue, i as createJsonStateWriter, m as createKeyedSerialQueue, n as appendJsonLines, o as loadJsonStateFile, p as writeTextAtomicSync, r as createJsonStateStore, s as loadJsonStateFileSync, t as appendJsonLine, u as writeJsonAtomic } from "./json-file-oEH9vt-0.js";
-import { $ as TeamReviewCompareFiles, A as MyPrSearchResponse, At as CoherenceWorkInspect, B as PostingPlan, C as MyPrMergeMethod, Ct as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, D as MyPrMergeWhenReadyRequest, E as MyPrMergeStateResponse, F as CommitSha, G as ReviewDraft, H as QueuedReview, I as DECIDING_REVIEW_STATES, J as ReviewThreadId, K as ReviewFinding, L as FindingSeverity, M as MyPrThreadsResponse, N as MyPrsState, Ot as CoherenceTicketCreated, P as MyPrsStatus, R as GithubReviewDecision, Tt as CoherenceOrient, U as ReviewChecksState, V as PrDetail, W as ReviewComment, X as SearchedPr, Y as ReviewVerdict, Z as TeamReviewActionRequest, _ as WorkflowSearchNode, a as ConfigUpdate, at as TeamReviewThreadsRepository, b as MyPrAutoRebase, bt as USAGE_COST_MODES, c as TASK_TITLE_SOURCE_PRIORITY, ct as hasStandingViewerApproval, d as BRANCH_GC_CONTROL_NUMERIC_KEYS, dt as shortSha$1, et as TeamReviewResolveResponse, ft as GH_SEGMENT, g as WorkflowLabelName, h as WorkflowCommentBody, ht as repoParts, it as TeamReviewThreadResult, j as MyPrThreadNode, k as MyPrSearchNode, kt as CoherenceWorkCreated, l as configIssueMessage, lt as FULL_SHA_RE, m as DEFAULT_FACTORY_PROTECTED_PATHS, mt as REPO_SLUG_RE, nt as TeamReviewStatus, o as PersistedTaskTitle, ot as canApproveAfterComment, p as DEFAULT_FACTORY_CHECKS, pt as NODE_ID_RE, q as ReviewResult, r as BrowserConfig, rt as TeamReviewThreadCommentsResponse, s as RUNTIME_CONFIG_SCALAR_KEYS, st as decisionAsIfApprovalRequired, tt as TeamReviewStateEntry, u as BRANCH_GC_CONTROL_BOOLEAN_KEYS, ut as HEX_SHA_RE, v as WorkflowsSettings, w as MyPrMergeRequest, wt as USAGE_INTEGER_RANGES, x as MyPrKeepMergeableRequest, xt as USAGE_VENDOR_KEYS, y as WorkflowsState, yt as USAGE_BUDGET_KEYS, z as GithubReviewState } from "./config-Cneb8Ujj.js";
-import { $ as sessionIdFromBranch, A as snapshotEvents, B as classifySessionExit, C as createIngestStore, D as resolveIngestConfig, E as publishEvent, F as adapterBucket, G as nodeMajorVersion, H as decideRemoteTelemetryState, I as buildAiGenerationEvents, J as stableConfigKey, K as parsePosthogReleaseId, L as buildBrowserExceptionProperties, M as FIRST_RUN_NOTICE, N as TELEMETRY_BATCH_URL, O as ringStats, P as TELEMETRY_FLAGS_URL, Q as planWorktreeGc, R as buildExceptionProperties, S as buildContextDigest, T as latestSeq, U as decideTelemetryConsent, V as decideIsDevInstall, W as exceptionFingerprint, X as matchedPrefix, Y as DEFAULT_BRANCH_GC_PREFIXES, Z as planBranchGc, _ as INGEST_SPEC, a as ensureProjectIds, b as DEFAULT_DIGEST_BUDGET_CHARS, d as assetForPlatform, et as usablePrefixes, f as decideRtkInstall, g as verifyDigest, h as isRtkBinaryName, i as createConfigStore, j as localDayKey, k as scrubText, m as installTargetPath, n as DEFAULT_CONFIG, o as generateProjectId, p as findEscapingArchiveMember, q as resolveProjectToken, s as glimmervoidHomeDir$1, t as ABORT_CONFIG_SAVE, tt as worktreeIntegrationTips, v as mergeSettingsBlock, w as enabledSourceNames, x as SOURCE_DEFAULTS, y as validateSettingsBlock, z as buildFactoryDecisionEvent } from "./config-store-DYsZJDux.js";
-import { $ as FactoryHarnessVerdict, A as BenchmarkActionRequest, B as PrCheckoutCaseInput, C as IssueKey, D as IssuesStatus, E as IssuesState, F as BenchmarkStatus, G as TelemetryState, H as PendingCrashReport, I as BenchmarkSuite, J as FACTORY_ERROR_MAX_CHARS, K as FACTORY_DECISION_OUTPUT_MAX_BYTES, L as CommitComparison, M as BenchmarkId, N as BenchmarkJudgement, O as ChangeMap, P as BenchmarkRun, Q as FactoryHarnessStateLine, R as MergedPrListing, S as GithubIssueResponse, T as IssuesSearchResponse, U as TELEMETRY_EVENT_SCHEMAS, X as FactoryConsequences, Y as FACTORY_PROTECTED_PATH_FLOOR, Z as FactoryControlRequest, _ as PlanDecision, a as ClientMessage, at as FactoryWorkerEvent, b as planTitle, c as UpdateJournal, d as TraceRecord, et as FactoryLaneState, f as PLAN_BODY_CAP_BYTES, g as PLAN_TOOL_NAME, h as PLAN_RESULT_HOOK_EVENT, i as CONTROL_FRAME_MAX_BYTES, it as FactoryReviewerOutput, j as BenchmarkCase, k as changeMapFactId, l as MAX_RAW_LINE_CHARS, m as PLAN_HOOK_OUTPUT_MAX_CHARS, n as HookEnvelope, nt as FactoryQueueIntentRequest, o as DIFF_ANNOTATION_NOTE_MAX_CHARS, ot as isSingleFactoryPathSegment, p as PLAN_HOOK_EVENT, q as FactoryDecisionLogLine, r as parseDataClientMessage, rt as FactoryReviewVerdict, s as InstallFlavor, t as HTTP_URL_RE, tt as FactoryProjectState, u as TraceCheckpoint, v as PlanRevision, w as IssueUpdate, x as GithubIssuePullRequestsRepository, y as parseExitPlanModeHookPayload, z as MinedPrReviewData } from "./contracts-DWv6q8ir.js";
-import { a as describeAgentResolvability, c as isKnownAgentId, d as setCustomAgents, f as claudeCode, i as customAgentFingerprint, l as listAgentIds, n as cachedAgentResolvability, o as getAdapter, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resolveAdapter } from "./adapters-CUBEhjOR.js";
+import { $ as TeamReviewCompareFiles, A as MyPrSearchResponse, At as CoherenceWorkInspect, B as PostingPlan, C as MyPrMergeMethod, Ct as KEEP_MERGEABLE_TIMEOUT_MINUTES_RANGE, D as MyPrMergeWhenReadyRequest, E as MyPrMergeStateResponse, F as CommitSha, G as ReviewDraft, H as QueuedReview, I as DECIDING_REVIEW_STATES, J as ReviewThreadId, K as ReviewFinding, L as FindingSeverity, M as MyPrThreadsResponse, N as MyPrsState, Ot as CoherenceTicketCreated, P as MyPrsStatus, R as GithubReviewDecision, Tt as CoherenceOrient, U as ReviewChecksState, V as PrDetail, W as ReviewComment, X as SearchedPr, Y as ReviewVerdict, Z as TeamReviewActionRequest, _ as WorkflowSearchNode, a as ConfigUpdate, at as TeamReviewThreadsRepository, b as MyPrAutoRebase, bt as USAGE_COST_MODES, c as TASK_TITLE_SOURCE_PRIORITY, ct as hasStandingViewerApproval, d as BRANCH_GC_CONTROL_NUMERIC_KEYS, dt as shortSha$1, et as TeamReviewResolveResponse, ft as GH_SEGMENT, g as WorkflowLabelName, h as WorkflowCommentBody, ht as repoParts, it as TeamReviewThreadResult, j as MyPrThreadNode, k as MyPrSearchNode, kt as CoherenceWorkCreated, l as configIssueMessage, lt as FULL_SHA_RE, m as DEFAULT_FACTORY_PROTECTED_PATHS, mt as REPO_SLUG_RE, nt as TeamReviewStatus, o as PersistedTaskTitle, ot as canApproveAfterComment, p as DEFAULT_FACTORY_CHECKS, pt as NODE_ID_RE, q as ReviewResult, r as BrowserConfig, rt as TeamReviewThreadCommentsResponse, s as RUNTIME_CONFIG_SCALAR_KEYS, st as decisionAsIfApprovalRequired, tt as TeamReviewStateEntry, u as BRANCH_GC_CONTROL_BOOLEAN_KEYS, ut as HEX_SHA_RE, v as WorkflowsSettings, w as MyPrMergeRequest, wt as USAGE_INTEGER_RANGES, x as MyPrKeepMergeableRequest, xt as USAGE_VENDOR_KEYS, y as WorkflowsState, yt as USAGE_BUDGET_KEYS, z as GithubReviewState } from "./config-DTwMFUjx.js";
+import { $ as sessionIdFromBranch, A as snapshotEvents, B as classifySessionExit, C as createIngestStore, D as resolveIngestConfig, E as publishEvent, F as adapterBucket, G as nodeMajorVersion, H as decideRemoteTelemetryState, I as buildAiGenerationEvents, J as stableConfigKey, K as parsePosthogReleaseId, L as buildBrowserExceptionProperties, M as FIRST_RUN_NOTICE, N as TELEMETRY_BATCH_URL, O as ringStats, P as TELEMETRY_FLAGS_URL, Q as planWorktreeGc, R as buildExceptionProperties, S as buildContextDigest, T as latestSeq, U as decideTelemetryConsent, V as decideIsDevInstall, W as exceptionFingerprint, X as matchedPrefix, Y as DEFAULT_BRANCH_GC_PREFIXES, Z as planBranchGc, _ as INGEST_SPEC, a as ensureProjectIds, b as DEFAULT_DIGEST_BUDGET_CHARS, d as assetForPlatform, et as usablePrefixes, f as decideRtkInstall, g as verifyDigest, h as isRtkBinaryName, i as createConfigStore, j as localDayKey, k as scrubText, m as installTargetPath, n as DEFAULT_CONFIG, o as generateProjectId, p as findEscapingArchiveMember, q as resolveProjectToken, s as glimmervoidHomeDir$1, t as ABORT_CONFIG_SAVE, tt as worktreeIntegrationTips, v as mergeSettingsBlock, w as enabledSourceNames, x as SOURCE_DEFAULTS, y as validateSettingsBlock, z as buildFactoryDecisionEvent } from "./config-store-CggAQLUB.js";
+import { $ as FactoryHarnessVerdict, A as BenchmarkActionRequest, B as PrCheckoutCaseInput, C as IssueKey, D as IssuesStatus, E as IssuesState, F as BenchmarkStatus, G as TelemetryState, H as PendingCrashReport, I as BenchmarkSuite, J as FACTORY_ERROR_MAX_CHARS, K as FACTORY_DECISION_OUTPUT_MAX_BYTES, L as CommitComparison, M as BenchmarkId, N as BenchmarkJudgement, O as ChangeMap, P as BenchmarkRun, Q as FactoryHarnessStateLine, R as MergedPrListing, S as GithubIssueResponse, T as IssuesSearchResponse, U as TELEMETRY_EVENT_SCHEMAS, X as FactoryConsequences, Y as FACTORY_PROTECTED_PATH_FLOOR, Z as FactoryControlRequest, _ as PlanDecision, a as ClientMessage, at as FactoryWorkerEvent, b as planTitle, c as UpdateJournal, d as TraceRecord, et as FactoryLaneState, f as PLAN_BODY_CAP_BYTES, g as PLAN_TOOL_NAME, h as PLAN_RESULT_HOOK_EVENT, i as CONTROL_FRAME_MAX_BYTES, it as FactoryReviewerOutput, j as BenchmarkCase, k as changeMapFactId, l as MAX_RAW_LINE_CHARS, m as PLAN_HOOK_OUTPUT_MAX_CHARS, n as HookEnvelope, nt as FactoryQueueIntentRequest, o as DIFF_ANNOTATION_NOTE_MAX_CHARS, ot as isSingleFactoryPathSegment, p as PLAN_HOOK_EVENT, q as FactoryDecisionLogLine, r as parseDataClientMessage, rt as FactoryReviewVerdict, s as InstallFlavor, t as HTTP_URL_RE, tt as FactoryProjectState, u as TraceCheckpoint, v as PlanRevision, w as IssueUpdate, x as GithubIssuePullRequestsRepository, y as parseExitPlanModeHookPayload, z as MinedPrReviewData } from "./contracts-D1wLN5iO.js";
+import { a as describeAgentResolvability, c as isKnownAgentId, d as setCustomAgents, f as claudeCode, i as customAgentFingerprint, l as listAgentIds, n as cachedAgentResolvability, o as getAdapter, r as commandFor, s as hookProfileOf, t as DEFAULT_AGENT_ID, u as resolveAdapter } from "./adapters-BY8slY95.js";
 import { t as HOOK_TOOLS } from "./hook-tools-UX2fmt81.js";
 import { a as formatSshPublicKey, c as orderAgentSockets, i as commitSigningShimText, l as parseSshPublicKey, n as NO_AGENT_HOLDS_KEY, o as isForwardedAgentDirName, r as agentListsKey, s as isSignableGitObject, t as COMMIT_SIGNING_SHIM_NAME } from "./ssh-signing-core-CRhVVWNW.js";
-import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-DJHVb-HU.js";
+import { a as configSiblingPath, c as defaultPairingsPath, d as decideDeviceAuth, f as deviceNameFromUserAgent, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, p as hashSecret, r as validateRemoteConfig, s as createSeenStore, t as decideBindHost, u as DEFAULT_DEVICE_MAX_AGE_MS } from "./remote-config-DKMQEIZh.js";
 import { _ as escapeMarkup, g as createLaneLog, n as createVisionsSetup } from "./visions-setup-CfgNHiG3.js";
 import { t as getRtkPath } from "./rtk-resolver-jJxy_Mrt.js";
 import { createRequire } from "node:module";
@@ -37,7 +37,7 @@ import { z } from "zod";
 import http from "node:http";
 import { WebSocketServer } from "ws";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
-import fsp, { access, chmod, copyFile, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, stat, symlink } from "node:fs/promises";
+import fsp, { access, chmod, copyFile, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rename, rm, symlink } from "node:fs/promises";
 import { pipeline } from "node:stream";
 import express from "express";
 import pty from "node-pty";
@@ -2039,7 +2039,6 @@ function projectSessionSnapshots(source) {
 //#region server/core/sandbox-roles-core.ts
 var SESSION_VENDORS = Object.freeze(["claude", "codex"]);
 var CONFINED_SESSION_VENDORS = Object.freeze(["claude"]);
-var UNSHARED_WORKTREE_ENTRIES = Object.freeze([".claude"]);
 var LANE_CREDENTIAL_ENV = Object.freeze({
 	SSH_AUTH_SOCK: "",
 	SSH_ASKPASS: "",
@@ -2088,14 +2087,16 @@ function workRole({ vendor, cwd, checkout, readablePaths, writablePaths = [], ag
 		readableWithinDenied: [...readablePaths]
 	};
 }
-function sessionRole({ commitCheckouts, writableRoots, readDenied, readablePaths }) {
+function sessionRole({ writableRoots, readDenied, readablePaths, blockedPaths }) {
 	return {
+		guardrailLevel: "standard",
+		blockedPaths: [...blockedPaths],
 		vendors: SESSION_VENDORS,
 		vendorHome: { scope: "state" },
 		network: { access: "open" },
 		writableRoots: [...new Set(writableRoots)],
 		lockedCheckouts: [],
-		commitCheckouts,
+		commitCheckouts: [],
 		readDenied: [...readDenied],
 		readableWithinDenied: [...readablePaths]
 	};
@@ -2298,7 +2299,7 @@ function createAgentApiWiring({ config, agentSessions, listAllSessions, listBoar
 			name,
 			path: parent.path,
 			dangerouslySkipPermissions: parent.dangerouslySkipPermissions,
-			unconfined: !parent.isConfined
+			unguarded: !parent.isConfined
 		};
 		let child = null;
 		let released = false;
@@ -3975,7 +3976,7 @@ function runGh(args, options = {}) {
 }
 //#endregion
 //#region server/post-turn-checker.ts
-var GIT_TIMEOUT_MS$2 = 5e3;
+var GIT_TIMEOUT_MS$1 = 5e3;
 var DEFAULTS = Object.freeze({
 	enabled: true,
 	mode: "report",
@@ -4077,7 +4078,7 @@ var GIT_MAX_BUFFER_BYTES$1 = 8388608;
 async function execGit(args, cwd) {
 	const result = await runGit(args, {
 		cwd,
-		timeoutMs: GIT_TIMEOUT_MS$2,
+		timeoutMs: GIT_TIMEOUT_MS$1,
 		maxBuffer: GIT_MAX_BUFFER_BYTES$1,
 		trim: false
 	});
@@ -14108,6 +14109,51 @@ var SANDBOX_PLACEHOLDER_NAMES = Object.freeze([
 	".zprofile",
 	".zshrc"
 ]);
+var WHOLE_FILESYSTEM = "/";
+var GLIMMERVOID_CONFIG_SIBLING_ENTRIES = Object.freeze([
+	"bin",
+	"pairings.json",
+	"pairings-seen.json",
+	"plans",
+	"telegram-outbox.json",
+	"traces",
+	"uploads",
+	"usage-budget-state.json",
+	"usage-lanes.json",
+	"usage-warehouse.json",
+	"visions-intent.json"
+]);
+var GLIMMERVOID_HOME_STATE_ENTRIES = Object.freeze([
+	"benchmark-runs",
+	"benchmarks",
+	"config.json",
+	"factory",
+	"issues-cache.json",
+	"knowledge-graph",
+	"litellm-pricing.json",
+	"my-prs-state.json",
+	"my-prs-work",
+	"posthog-reports",
+	"posthog-state.json",
+	"posthog-work",
+	"recordings",
+	"sandbox-homes",
+	"sandbox-policies",
+	"sane-yolo",
+	"scratch",
+	"sounds",
+	"team-review-repos",
+	"team-review-state.json",
+	"team-review-work",
+	"team-review-worktrees",
+	"telemetry-pending-crash.json",
+	"telemetry.json",
+	"tmp",
+	"update-check.json",
+	"update-journal.json",
+	"workflows-state.json",
+	"workflows-work"
+]);
 var RUNTIME_MANDATORY_CLAUDE_DENY_FOLDERS = Object.freeze(["commands", "agents"]);
 var SANDBOXED_PROXY_BYPASS = "localhost,::1,169.254.0.0/16,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16";
 var HOOK_LOOPBACK_HOST = "127.0.0.1";
@@ -14226,6 +14272,36 @@ function relocatedXdgConfigPaths(host, homeEntries) {
 	if (xdgConfigHome === null) return [];
 	return homeEntries.filter((entry) => entry.startsWith(XDG_CONFIG_DEFAULT_HOME_PREFIX)).map((entry) => path.join(xdgConfigHome, entry.slice(8)));
 }
+function isStandardLevel(role) {
+	return role.guardrailLevel === "standard";
+}
+function credentialWriteBlocks(host) {
+	const credentialHomeEntries = [...CREDENTIAL_HOME_ENTRIES, ...CLOUD_CREDENTIAL_HOME_ENTRIES];
+	return [...homePaths(host, credentialHomeEntries), ...relocatedXdgConfigPaths(host, credentialHomeEntries)];
+}
+function glimmervoidStateWriteBlocks(role, host) {
+	const keptWritable = alwaysWritablePaths(role, host);
+	const configFolder = path.dirname(host.glimmervoidConfigFile);
+	const homeEntries = [
+		...GLIMMERVOID_HOME_STATE_ENTRIES,
+		...GLIMMERVOID_CONFIG_SIBLING_ENTRIES,
+		...host.glimmervoidHomeEntryNames
+	].map((entryName) => path.join(host.glimmervoidHome, entryName));
+	const configSiblings = GLIMMERVOID_CONFIG_SIBLING_ENTRIES.map((entryName) => path.join(configFolder, entryName));
+	return unique([
+		host.glimmervoidConfigFile,
+		...homeEntries,
+		...configSiblings
+	]).filter((entryPath) => !keptWritable.some((writable) => isPathInside(entryPath, writable)));
+}
+function standardWriteBlockCandidates(role, host) {
+	if (!isStandardLevel(role)) return [];
+	return unique([
+		...credentialWriteBlocks(host),
+		...glimmervoidStateWriteBlocks(role, host),
+		...role.blockedPaths ?? []
+	]);
+}
 function readDeniedPaths(role, host) {
 	const otherVendors = SANDBOX_VENDORS.filter((vendor) => !role.vendors.includes(vendor));
 	const otherVendorHomeEntries = [...otherVendors.flatMap((vendor) => VENDOR_PROFILES[vendor].homeEntries), ...UNWRAPPED_VENDOR_HOME_ENTRIES];
@@ -14259,6 +14335,7 @@ function hostNamedPaths(host) {
 	return [
 		host.homeDir,
 		host.glimmervoidHome,
+		host.glimmervoidConfigFile,
 		host.tempDir,
 		host.launchHomeDir,
 		...relocatedXdgConfigHomes,
@@ -14317,6 +14394,17 @@ function sandboxedEnvFor(role, host) {
 	if (role.network.access === "open") return { TMPDIR: host.tempDir };
 	return {};
 }
+function filesystemWrites(role, host, writablePaths) {
+	if (isStandardLevel(role)) return {
+		allowWrite: literalEntries([WHOLE_FILESYSTEM, ...writablePaths]),
+		denyWrite: literalEntries(host.writeBlockedPaths)
+	};
+	const isPresent = (candidate) => host.existingPaths.has(candidate);
+	return {
+		allowWrite: literalEntries(writablePaths),
+		denyWrite: literalEntries([...writeDeniesWhenPresent(role, host).filter(isPresent), ...lockedCheckoutWriteDenies(role)])
+	};
+}
 function buildSandboxLaunchPlan(role, host) {
 	const refusal = sandboxRoleRefusal(role, host);
 	if (refusal !== null) return {
@@ -14336,8 +14424,7 @@ function buildSandboxLaunchPlan(role, host) {
 				filesystem: {
 					denyRead: literalEntries(readDenied),
 					allowRead: literalEntries([...writableWithinDenied, ...role.readableWithinDenied]),
-					allowWrite: literalEntries(writablePaths),
-					denyWrite: literalEntries([...writeDeniesWhenPresent(role, host).filter(isPresent), ...lockedCheckoutWriteDenies(role)])
+					...filesystemWrites(role, host, writablePaths)
 				}
 			},
 			launchEnv: Object.assign({ CLAUDE_CODE_TMPDIR: host.tempDir }, ...role.vendors.map((vendor) => VENDOR_PROFILES[vendor].launchEnv), launchHomeEnv(role, host)),
@@ -18935,8 +19022,8 @@ var KILL_MAX_WAIT_MS = 3e3;
 var KILL_REAP_MAX_WAIT_MS = 2400;
 var SLEEP_KILL_TIMEOUT_MS = 9e5;
 var MAX_PENDING_ATTENTION_NOTES = 5;
-var SANDBOX_UNAPPLIED_ERROR = "sandbox settings could not be applied, session not started";
-var SANDBOX_REFUSED_PREFIX = "session not started, the sandbox refused: ";
+var SANDBOX_UNAPPLIED_ERROR = "guardrail settings could not be applied, session not started";
+var SANDBOX_REFUSED_PREFIX = "session not started, the guardrails refused: ";
 var INNER_SANDBOX_OFF = Object.freeze({ enabled: false });
 function settingsSandboxForHooks(adapter, hasOuterSandbox, requestedSettingsSandbox) {
 	if (!hasOuterSandbox) return requestedSettingsSandbox;
@@ -20128,7 +20215,7 @@ var Session = class extends EventEmitter {
 		if (!launch || launch !== this._sandboxLaunch) return;
 		this._sandboxLaunch = null;
 		launch.dispose().catch((error) => {
-			console.warn(`[session ${this.id}] sandbox cleanup failed: ${errorMessage(error)}`);
+			console.warn(`[session ${this.id}] guardrails cleanup failed: ${errorMessage(error)}`);
 		});
 	}
 	_guardPtyInputSocket() {
@@ -20689,6 +20776,7 @@ var LAUNCH_HOME_FOLDER = "sandbox-homes";
 var START_FOLDER = "start";
 var ENTER_FOLDER_SCRIPT = "cd \"$1\" && shift && exec \"$@\"";
 var LOGIN_FILE_MODE = 384;
+var ABSENT_PATH_DENY_PLATFORM = "darwin";
 async function isPresent(candidate) {
 	try {
 		await access(candidate);
@@ -20714,6 +20802,32 @@ async function realPathWhenPresent(candidate) {
 function realPathsWhenPresent(candidates) {
 	return Promise.all(candidates.map(realPathWhenPresent));
 }
+async function symlinkTargetsInside(folder) {
+	const symlinkEntries = (await readdir(folder, { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isSymbolicLink());
+	return (await Promise.all(symlinkEntries.map((entry) => realpath(path.join(folder, entry.name)).catch(() => null)))).filter((target) => target !== null);
+}
+async function blockedPathsWithRealTargets(candidates, operatorBlockedPaths) {
+	const resolved = await Promise.all(candidates.map(async (candidate) => {
+		const isPresentEntry = await lstat(candidate).then(() => true, (error) => !isMissingFileError(error));
+		const isKeptWhenAbsent = process.platform === ABSENT_PATH_DENY_PLATFORM || operatorBlockedPaths.includes(candidate);
+		if (!isPresentEntry) return isKeptWhenAbsent ? [candidate] : [];
+		const realCandidate = await realpath(candidate).catch(() => candidate);
+		return [
+			candidate,
+			realCandidate,
+			...await symlinkTargetsInside(realCandidate)
+		];
+	}));
+	return [...new Set(resolved.flat())];
+}
+async function configuredConfigFile(glimmervoidHome) {
+	const { envPath, homePath } = decideConfigPath({
+		env: process.env,
+		homeDir: glimmervoidHome
+	}, () => false);
+	const configFile = envPath ?? homePath;
+	return path.join(await realPathWhenPresent(path.dirname(configFile)), path.basename(configFile));
+}
 function scannedClaudeHomes(env, homeDir) {
 	return [env, {
 		...env,
@@ -20858,20 +20972,30 @@ async function prepareSandboxLaunch({ role, launchId, tempDir, enterDir }) {
 			reason: "CODEX_HOME names no folder"
 		};
 		const xdgConfigHomeOverride = rawTextOr(process.env.XDG_CONFIG_HOME, null);
-		const hostPaths = {
+		const stableHostPaths = {
 			homeDir,
 			glimmervoidHome,
+			glimmervoidConfigFile: await configuredConfigFile(glimmervoidHome),
 			tempDir: launchTempDir,
 			launchHomeDir,
-			homeEntryNames: await readdir(homeDir),
 			vendorLocations,
 			unwrappedVendorHomes: await realPathsWhenPresent(grokHomes(process.env, homeDir)),
 			relocatedXdgConfigHome: xdgConfigHomeOverride === null ? null : await realPathWhenPresent(xdgConfigHomeOverride)
 		};
-		const buildPlanFromCurrentDisk = async () => buildSandboxLaunchPlan(realRole, {
-			...hostPaths,
-			existingPaths: await presentPaths$1(sandboxPolicyProbePaths(realRole, hostPaths))
-		});
+		const buildPlanFromCurrentDisk = async () => {
+			const [homeEntryNames, glimmervoidHomeEntryNames] = await Promise.all([readdir(homeDir), readdir(glimmervoidHome)]);
+			const hostPaths = {
+				...stableHostPaths,
+				homeEntryNames,
+				glimmervoidHomeEntryNames
+			};
+			const [existingPaths, writeBlockedPaths] = await Promise.all([presentPaths$1(sandboxPolicyProbePaths(realRole, hostPaths)), blockedPathsWithRealTargets(standardWriteBlockCandidates(realRole, hostPaths), realRole.blockedPaths ?? [])]);
+			return buildSandboxLaunchPlan(realRole, {
+				...hostPaths,
+				existingPaths,
+				writeBlockedPaths
+			});
+		};
 		const built = await buildPlanFromCurrentDisk();
 		if (!built.ok) return built;
 		const { plan } = built;
@@ -46850,7 +46974,7 @@ function computeCrossRepoLinks(repos) {
 }
 //#endregion
 //#region server/change-map-wiring.ts
-var GIT_TIMEOUT_MS$1 = 15e3;
+var GIT_TIMEOUT_MS = 15e3;
 var GIT_MAX_BUFFER_BYTES = 67108864;
 var FILE_READ_BATCH = 64;
 var MAX_CACHED_FILES = 5e4;
@@ -46862,11 +46986,11 @@ var MAX_MEMOIZED_REPO_FACTS = 64;
 async function runGitAsync(args, cwd) {
 	const result = await runGit(args, {
 		cwd,
-		timeoutMs: GIT_TIMEOUT_MS$1,
+		timeoutMs: GIT_TIMEOUT_MS,
 		maxBuffer: GIT_MAX_BUFFER_BYTES,
 		trim: false
 	});
-	if (!result.ok) throw gitCommandFailure(args, result, GIT_TIMEOUT_MS$1);
+	if (!result.ok) throw gitCommandFailure(args, result, GIT_TIMEOUT_MS);
 	return result.out;
 }
 function yieldToEventLoop() {
@@ -47371,9 +47495,9 @@ Object.freeze([
 	...USAGE_BUDGET_KEYS.map((key) => `usage.budget.${key}`),
 	...TELEGRAM_STRING_KEYS.map((key) => `telegram.${key}`),
 	"agentApi.enabled",
-	"sandbox.unconfinedRepos",
-	"sandbox.writablePaths",
-	"sandbox.unreadablePaths",
+	"guardrails.unguardedRepos",
+	"guardrails.blockedPaths",
+	"guardrails.unreadablePaths",
 	"telemetry.enabled"
 ]);
 var USAGE_REPORT_MAX_DAYS = 3650;
@@ -47954,7 +48078,7 @@ function registerControlHandlers(controlWss, deps) {
 			if (incoming.ingest != null) cfg.ingest = mergeSettingsBlock(cfg.ingest, incoming.ingest, INGEST_SPEC);
 			if (s.telegram != null) cfg.telegram = mergeSettingsBlockOverStored(cfg.telegram, s.telegram);
 			if (s.agentApi != null) cfg.agentApi = mergeSettingsBlockOverStored(cfg.agentApi, s.agentApi);
-			if (s.sandbox != null) cfg.sandbox = mergeSettingsBlockOverStored(cfg.sandbox, s.sandbox);
+			if (s.guardrails != null) cfg.guardrails = mergeSettingsBlockOverStored(cfg.guardrails, s.guardrails);
 			if (s.telemetry != null) cfg.telemetry = mergeSettingsBlockOverStored(cfg.telemetry, s.telemetry);
 			if (!workflowsUpdate) return void 0;
 			const storedWorkflowsMerge = mergeWorkflowsUpdateOverStored(cfg.workflows, workflowsUpdate);
@@ -48108,7 +48232,7 @@ function registerControlHandlers(controlWss, deps) {
 		};
 		if (workspaceRepos) project.repos = workspaceRepos;
 		if (typeof dangerouslySkipPermissions === "boolean") project.dangerouslySkipPermissions = dangerouslySkipPermissions;
-		if (unconfined) project.unconfined = true;
+		if (unconfined) project.unguarded = true;
 		if (agent) project.agent = agent;
 		const freshConfig = configStore.save((cfg) => {
 			cfg.projects.push(project);
@@ -48222,7 +48346,7 @@ function registerControlHandlers(controlWss, deps) {
 				path: project.path,
 				agent: project.agent,
 				dangerouslySkipPermissions: project.dangerouslySkipPermissions,
-				unconfined: project.unconfined
+				unconfined: project.unguarded
 			});
 			if (!created.ok) {
 				reply({ error: created.error });
@@ -50769,10 +50893,10 @@ function createSessionFactory(dependencies) {
 	}
 	function defaultSandboxFor(project, config, overrides) {
 		if (!dependencies.sessionSandbox) return null;
-		const unconfinedRepos = (config.sandbox?.unconfinedRepos ?? []).map((repo) => expandTilde(repo, process.env, dependencies.homeDir ?? null));
+		const unconfinedRepos = (config.guardrails?.unguardedRepos ?? []).map((repo) => expandTilde(repo, process.env, dependencies.homeDir ?? null));
 		return isSessionConfined({
 			usageVendor: getAdapter(overrides.agent ?? project.agent)?.usageVendor ?? null,
-			isMarkedUnconfined: project.unconfined === true,
+			isMarkedUnconfined: project.unguarded === true,
 			sessionFolders: [project.path, ...project.repos ?? []],
 			unconfinedRepos
 		}) ? dependencies.sessionSandbox.prepareFor({
@@ -50829,8 +50953,7 @@ function createSessionFactory(dependencies) {
 //#region server/session-sandbox.ts
 var UNWRAPPED_PLATFORM = "win32";
 var GITHUB_TOKEN_TIMEOUT_MS = 5e3;
-var GIT_TIMEOUT_MS = 3e4;
-var OPT_OUT_HINT = "Mark the session or its repository unconfined to start it outside the sandbox.";
+var OPT_OUT_HINT = "Mark the session or its repository unguarded to start it without guardrails.";
 async function readGithubCliToken(env) {
 	if (rawTextOr(env.GH_TOKEN, null) || rawTextOr(env.GITHUB_TOKEN, null)) return null;
 	return await execFileAsync("gh", ["auth", "token"], {
@@ -50838,65 +50961,9 @@ async function readGithubCliToken(env) {
 		encoding: "utf8"
 	}).then(({ stdout }) => stdout.trim(), () => "") || null;
 }
-async function gitCheckoutOf(startFolder) {
-	const toplevel = await runHardenedGit(["rev-parse", "--show-toplevel"], {
-		cwd: startFolder,
-		timeout: GIT_TIMEOUT_MS
-	}).then(({ stdout }) => stdout.trim(), () => "");
-	if (!toplevel) return null;
-	const checkout = await existingRealPath(toplevel);
-	if (checkout === null || !isPathInside(checkout, startFolder)) return null;
-	return checkout;
-}
-async function isRegisteredGitEntry(gitEntry, worktreeAdminDir) {
-	return await readFile(path.join(worktreeAdminDir, "gitdir"), "utf8").then((registeredPath) => realpath(path.resolve(worktreeAdminDir, registeredPath.trim()))).catch(() => null) === gitEntry;
-}
-async function ownGitDirOf(checkout, startFolder) {
-	const gitDirs = await readGitDirsOfOwnCheckout(startFolder).catch(() => null);
-	if (gitDirs === null) return null;
-	const { commonGitDir, worktreeAdminDir } = gitDirs;
-	const gitEntry = path.join(checkout, ".git");
-	const gitEntryStats = await lstat(gitEntry).catch(() => null);
-	if (gitEntryStats?.isDirectory()) return worktreeAdminDir === gitEntry && commonGitDir === gitEntry ? commonGitDir : null;
-	const isLinkedWorktree = worktreeAdminDir !== commonGitDir;
-	if (!gitEntryStats?.isFile() || !isLinkedWorktree) return null;
-	if ((checkout === startFolder ? gitDirs : await readGitDirsOfOwnCheckout(checkout).catch(() => null))?.worktreeAdminDir !== worktreeAdminDir) return null;
-	return await isRegisteredGitEntry(gitEntry, worktreeAdminDir) ? commonGitDir : null;
-}
-async function commitCheckoutOf(startFolder) {
-	const checkout = await gitCheckoutOf(startFolder);
-	if (checkout === null) return null;
-	const gitDir = await ownGitDirOf(checkout, startFolder);
-	return gitDir === null ? null : {
-		checkout,
-		gitDir
-	};
-}
-async function memberCommitCheckoutOf(memberFolder) {
-	const commitCheckout = await commitCheckoutOf(memberFolder);
-	return commitCheckout?.checkout === memberFolder ? commitCheckout : null;
-}
-async function workspaceMemberCheckouts(workspaceFolder) {
-	const memberFolders = (await readdir(workspaceFolder, { withFileTypes: true })).filter((entry) => entry.isDirectory()).map((entry) => path.join(workspaceFolder, entry.name));
-	const gitPointers = await Promise.all(memberFolders.map((memberFolder) => existingRealPath(path.join(memberFolder, ".git"))));
-	return (await Promise.all(memberFolders.filter((_memberFolder, index) => gitPointers[index] !== null).map(memberCommitCheckoutOf))).filter((commitCheckout) => commitCheckout !== null);
-}
-async function sessionCheckouts(cwd, isWorkspace) {
-	if (isWorkspace) return workspaceMemberCheckouts(cwd);
-	const commitCheckout = await commitCheckoutOf(cwd);
-	return commitCheckout === null ? [] : [commitCheckout];
-}
-async function sharedFolderBehind(linkPath, repositoryFolder) {
-	if (!(await lstat(linkPath).catch(() => null))?.isSymbolicLink()) return null;
-	const sharedPath = await existingRealPath(linkPath);
-	if (sharedPath !== repositoryFolder) return null;
-	return (await stat(sharedPath)).isDirectory() ? sharedPath : null;
-}
-async function sharedFoldersOf({ checkout, gitDir }, worktreeShare) {
-	const repositoryRoot = repositoryRootOfCommonGitDir(gitDir);
-	if (repositoryRoot === null) return [];
-	const sharedEntries = worktreeShare.filter((entry) => !UNSHARED_WORKTREE_ENTRIES.includes(entry));
-	return (await Promise.all(sharedEntries.map((entry) => sharedFolderBehind(path.join(checkout, entry), path.resolve(path.join(repositoryRoot, entry)))))).filter((sharedFolder) => sharedFolder !== null);
+async function repositoryRootOf(cwd) {
+	const gitDirs = await readGitDirsOfOwnCheckout(cwd).catch(() => null);
+	return gitDirs === null ? null : repositoryRootOfCommonGitDir(gitDirs.commonGitDir);
 }
 function createSessionSandbox({ getSettings, uploadsRoot, sandboxRefusal = allowSandboxedSpawn, prepareSandbox = prepareSandboxLaunch, trustClaudeFolder, platform = process.platform, homeDir = os.homedir(), env = process.env, readGithubToken = () => readGithubCliToken(env), log = console }) {
 	const expandHome = (candidates) => candidates.map((candidate) => expandTilde(candidate.trim(), env, homeDir)).filter(Boolean);
@@ -50906,27 +50973,24 @@ function createSessionSandbox({ getSettings, uploadsRoot, sandboxRefusal = allow
 		const sessionUploads = path.join(uploadsRoot, sessionId);
 		await mkdir(sessionUploads, { recursive: true });
 		const cwd = await realpath(facts.cwd);
-		const commitCheckouts = await sessionCheckouts(cwd, isWorkspace);
-		const sharedFolders = (await Promise.all(commitCheckouts.map((commitCheckout) => sharedFoldersOf(commitCheckout, settings.worktreeShare)))).flat();
-		const startFolderRoots = commitCheckouts.length === 0 ? [cwd] : [];
+		const ownRepositoryRoot = isWorkspace ? null : await repositoryRootOf(cwd);
+		const expandedBlockedPaths = expandHome(settings.blockedPaths);
+		const ignoredBlockedPaths = expandedBlockedPaths.filter((blockedPath) => !path.isAbsolute(blockedPath));
+		if (ignoredBlockedPaths.length > 0) log.warn(`[guardrails] ignoring guardrails.blockedPaths entries that are not absolute paths: ${ignoredBlockedPaths.join(", ")}`);
 		return {
 			cwd,
-			trustFolder: (isWorkspace || commitCheckouts[0] === void 0 ? null : repositoryRootOfCommonGitDir(commitCheckouts[0].gitDir)) ?? cwd,
+			trustFolder: ownRepositoryRoot ?? cwd,
 			role: sessionRole({
-				commitCheckouts,
-				writableRoots: [
-					...startFolderRoots,
-					...sharedFolders,
-					...await existingRealPaths([...expandHome(settings.writablePaths), ...facts.writablePaths])
-				],
+				writableRoots: await existingRealPaths(facts.writablePaths),
 				readDenied: expandHome(settings.unreadablePaths).filter((unreadablePath) => path.isAbsolute(unreadablePath)),
+				blockedPaths: expandedBlockedPaths.filter((blockedPath) => path.isAbsolute(blockedPath)),
 				readablePaths: [...facts.readablePaths, ...await existingRealPaths([sessionUploads, githubCliConfigDir()])]
 			})
 		};
 	}
 	async function recordClaudeFolderTrust(folder) {
 		if (!trustClaudeFolder) return;
-		await trustClaudeFolder(folder).catch((error) => log.warn(`[sandbox] ${errorMessage(error)}`));
+		await trustClaudeFolder(folder).catch((error) => log.warn(`[guardrails] ${errorMessage(error)}`));
 	}
 	function prepareFor(request) {
 		if (platform === UNWRAPPED_PLATFORM) return null;
@@ -51023,11 +51087,10 @@ function createBackendSessionRuntime(dependencies) {
 			getUserHooks: (projectId) => hooksForProject(dependencies.config.hooks, projectId),
 			sessionSandbox: createSessionSandbox({
 				getSettings: () => {
-					const { sandbox, worktreeShare } = dependencies.configStore.config;
+					const { guardrails } = dependencies.configStore.config;
 					return {
-						writablePaths: sandbox?.writablePaths ?? DEFAULT_CONFIG.sandbox.writablePaths,
-						unreadablePaths: sandbox?.unreadablePaths ?? DEFAULT_CONFIG.sandbox.unreadablePaths,
-						worktreeShare: worktreeShare ?? DEFAULT_CONFIG.worktreeShare
+						blockedPaths: guardrails?.blockedPaths ?? DEFAULT_CONFIG.guardrails.blockedPaths,
+						unreadablePaths: guardrails?.unreadablePaths ?? DEFAULT_CONFIG.guardrails.unreadablePaths
 					};
 				},
 				uploadsRoot: configSiblingPath(dependencies.configStore.configPath, "uploads"),

package/dist/chunks/{pair-cli-BuyzST-U.js → pair-cli-Nnrd0il_.js}

@@ -1,6 +1,6 @@
 import { r as errorMessage } from "./text-DoirglWV.js";
-import { l as resolveConfigPath } from "./config-store-DYsZJDux.js";
-import { c as defaultPairingsPath, i as REVOCATION_PROPAGATION_SECONDS, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, s as createSeenStore } from "./remote-config-DJHVb-HU.js";
+import { l as resolveConfigPath } from "./config-store-CggAQLUB.js";
+import { c as defaultPairingsPath, i as REVOCATION_PROPAGATION_SECONDS, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, s as createSeenStore } from "./remote-config-DKMQEIZh.js";
 import fs from "node:fs";
 //#region server/text-format.ts
 function trimIso(iso) {

package/dist/chunks/{remote-config-DJHVb-HU.js → remote-config-DKMQEIZh.js}

@@ -3,7 +3,7 @@ import { i as equalsIgnoringCaseOnWindows, t as canonicalizePath } from "./paths
 import { n as isRecord } from "./coerce-NSst8oRP.js";
 import { n as unrefTimer, t as DEFAULT_TIMER_FNS } from "./timer-deps-u2DAQLok.js";
 import { a as jsonStateLoadError, d as writeJsonAtomicSync, l as sleepSync, s as loadJsonStateFileSync, u as writeJsonAtomic } from "./json-file-oEH9vt-0.js";
-import { s as glimmervoidHomeDir } from "./config-store-DYsZJDux.js";
+import { s as glimmervoidHomeDir } from "./config-store-CggAQLUB.js";
 import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";

package/dist/chunks/{sandbox-deps-DuaNFq7n.js → sandbox-deps-C63o3mZs.js}

@@ -8,7 +8,7 @@ var LINUX_SANDBOX_BINARIES = Object.freeze([
 ]);
 var NO_SANDBOX_BINARIES = Object.freeze([]);
 var SANDBOX_INSTALL_HINT = "Install bubblewrap, socat and ripgrep, for example: sudo apt install bubblewrap socat ripgrep";
-var SANDBOXED_WORK = "sandboxed sessions and factory checks";
+var SANDBOXED_WORK = "guarded sessions and factory checks";
 function requiredSandboxBinaries(platform) {
 	return platform === "linux" ? LINUX_SANDBOX_BINARIES : NO_SANDBOX_BINARIES;
 }
@@ -31,14 +31,14 @@ function missingBinariesPhrase(report) {
 }
 function sandboxSpawnRefusal(report) {
 	if (report.missingBinaries.length === 0) return null;
-	return `not started: the sandbox needs ${namesList(report.requiredBinaries)}, and ${missingBinariesPhrase(report)}. ${report.installHint}`;
+	return `not started: the guardrails need ${namesList(report.requiredBinaries)}, and ${missingBinariesPhrase(report)}. ${report.installHint}`;
 }
 function sandboxBootWarning(report) {
 	if (report.missingBinaries.length === 0) return null;
-	return `[sandbox] ${missingBinariesPhrase(report)}, so ${SANDBOXED_WORK} will refuse to start. ${report.installHint}`;
+	return `[guardrails] ${missingBinariesPhrase(report)}, so ${SANDBOXED_WORK} will refuse to start. ${report.installHint}`;
 }
 function sandboxDoctorRows(report) {
-	if (report.requiredBinaries.length === 0) return [["sandbox", `nothing to check on ${report.platform}`]];
+	if (report.requiredBinaries.length === 0) return [["guardrails", `nothing to check on ${report.platform}`]];
 	const binaryRows = report.requiredBinaries.map((binary) => [binary, report.missingBinaries.includes(binary) ? "MISSING" : "found"]);
 	if (report.installHint === null) return binaryRows;
 	return [...binaryRows, ["hint", report.installHint]];