windows-development-sandbox 1.1.0 → 1.4.1

package/dist/runtime/daemon.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path49) {
-          path49 = castPath(path49, object2);
-          var index = 0, length = path49.length;
+        function baseGet(object2, path53) {
+          path53 = castPath(path53, object2);
+          var index = 0, length = path53.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path49[index++])];
+            object2 = object2[toKey(path53[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path49, args) {
-          path49 = castPath(path49, object2);
-          object2 = parent(object2, path49);
-          var func = object2 == null ? object2 : object2[toKey(last(path49))];
+        function baseInvoke(object2, path53, args) {
+          path53 = castPath(path53, object2);
+          object2 = parent(object2, path53);
+          var func = object2 == null ? object2 : object2[toKey(last(path53))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path49, srcValue) {
-          if (isKey(path49) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path49), srcValue);
+        function baseMatchesProperty(path53, srcValue) {
+          if (isKey(path53) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path53), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path49);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path49) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path53);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path53) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path49) {
-            return hasIn(object2, path49);
+          return basePickBy(object2, paths, function(value, path53) {
+            return hasIn(object2, path53);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path49 = paths[index], value = baseGet(object2, path49);
-            if (predicate(value, path49)) {
-              baseSet(result2, castPath(path49, object2), value);
+            var path53 = paths[index], value = baseGet(object2, path53);
+            if (predicate(value, path53)) {
+              baseSet(result2, castPath(path53, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path49) {
+        function basePropertyDeep(path53) {
           return function(object2) {
-            return baseGet(object2, path49);
+            return baseGet(object2, path53);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path49, value, customizer) {
+        function baseSet(object2, path53, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path49 = castPath(path49, object2);
-          var index = -1, length = path49.length, lastIndex = length - 1, nested = object2;
+          path53 = castPath(path53, object2);
+          var index = -1, length = path53.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path49[index]), newValue = value;
+            var key = toKey(path53[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path49[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path53[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path49) {
-          path49 = castPath(path49, object2);
-          var index = -1, length = path49.length;
+        function baseUnset(object2, path53) {
+          path53 = castPath(path53, object2);
+          var index = -1, length = path53.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path49[index]);
+            var key = toKey(path53[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path49);
-          return obj == null || delete obj[toKey(last(path49))];
+          var obj = parent(object2, path53);
+          return obj == null || delete obj[toKey(last(path53))];
         }
-        function baseUpdate(object2, path49, updater, customizer) {
-          return baseSet(object2, path49, updater(baseGet(object2, path49)), customizer);
+        function baseUpdate(object2, path53, updater, customizer) {
+          return baseSet(object2, path53, updater(baseGet(object2, path53)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path49, hasFunc) {
-          path49 = castPath(path49, object2);
-          var index = -1, length = path49.length, result2 = false;
+        function hasPath(object2, path53, hasFunc) {
+          path53 = castPath(path53, object2);
+          var index = -1, length = path53.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path49[index]);
+            var key = toKey(path53[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path49) {
-          return path49.length < 2 ? object2 : baseGet(object2, baseSlice(path49, 0, -1));
+        function parent(object2, path53) {
+          return path53.length < 2 ? object2 : baseGet(object2, baseSlice(path53, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path49, args) {
-          var index = -1, isFunc = typeof path49 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path53, args) {
+          var index = -1, isFunc = typeof path53 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path49, value, args) : baseInvoke(value, path49, args);
+            result2[++index] = isFunc ? apply(path53, value, args) : baseInvoke(value, path53, args);
           });
           return result2;
         });
@@ -4175,7 +4175,7 @@ var require_lodash = __commonJS({
           customizer = typeof customizer == "function" ? customizer : undefined2;
           return baseIsMatch(object2, source, getMatchData(source), customizer);
         }
-        function isNaN(value) {
+        function isNaN2(value) {
           return isNumber(value) && value != +value;
         }
         function isNative(value) {
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path49, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path49);
+        function get(object2, path53, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path53);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path49) {
-          return object2 != null && hasPath(object2, path49, baseHas);
+        function has(object2, path53) {
+          return object2 != null && hasPath(object2, path53, baseHas);
         }
-        function hasIn(object2, path49) {
-          return object2 != null && hasPath(object2, path49, baseHasIn);
+        function hasIn(object2, path53) {
+          return object2 != null && hasPath(object2, path53, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path49) {
-            path49 = castPath(path49, object2);
-            isDeep || (isDeep = path49.length > 1);
-            return path49;
+          paths = arrayMap(paths, function(path53) {
+            path53 = castPath(path53, object2);
+            isDeep || (isDeep = path53.length > 1);
+            return path53;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path49) {
-            return predicate(value, path49[0]);
+          return basePickBy(object2, props, function(value, path53) {
+            return predicate(value, path53[0]);
           });
         }
-        function result(object2, path49, defaultValue) {
-          path49 = castPath(path49, object2);
-          var index = -1, length = path49.length;
+        function result(object2, path53, defaultValue) {
+          path53 = castPath(path53, object2);
+          var index = -1, length = path53.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path49[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path53[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path49, value) {
-          return object2 == null ? object2 : baseSet(object2, path49, value);
+        function set2(object2, path53, value) {
+          return object2 == null ? object2 : baseSet(object2, path53, value);
         }
-        function setWith(object2, path49, value, customizer) {
+        function setWith(object2, path53, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path49, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path53, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path49) {
-          return object2 == null ? true : baseUnset(object2, path49);
+        function unset(object2, path53) {
+          return object2 == null ? true : baseUnset(object2, path53);
         }
-        function update(object2, path49, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path49, castFunction(updater));
+        function update(object2, path53, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path53, castFunction(updater));
         }
-        function updateWith(object2, path49, updater, customizer) {
+        function updateWith(object2, path53, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path49, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path53, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path49, srcValue) {
-          return baseMatchesProperty(path49, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path53, srcValue) {
+          return baseMatchesProperty(path53, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path49, args) {
+        var method = baseRest(function(path53, args) {
           return function(object2) {
-            return baseInvoke(object2, path49, args);
+            return baseInvoke(object2, path53, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path49) {
-            return baseInvoke(object2, path49, args);
+          return function(path53) {
+            return baseInvoke(object2, path53, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path49) {
-          return isKey(path49) ? baseProperty(toKey(path49)) : basePropertyDeep(path49);
+        function property(path53) {
+          return isKey(path53) ? baseProperty(toKey(path53)) : basePropertyDeep(path53);
         }
         function propertyOf(object2) {
-          return function(path49) {
-            return object2 == null ? undefined2 : baseGet(object2, path49);
+          return function(path53) {
+            return object2 == null ? undefined2 : baseGet(object2, path53);
           };
         }
         var range = createRange();
@@ -5257,7 +5257,7 @@ var require_lodash = __commonJS({
         lodash.isMap = isMap;
         lodash.isMatch = isMatch;
         lodash.isMatchWith = isMatchWith;
-        lodash.isNaN = isNaN;
+        lodash.isNaN = isNaN2;
         lodash.isNative = isNative;
         lodash.isNil = isNil;
         lodash.isNull = isNull;
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path49, args) {
-          if (typeof path49 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path53, args) {
+          if (typeof path53 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path49, args);
+            return baseInvoke(value, path53, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5532,7 +5532,7 @@ var require_lodash = __commonJS({
 });
 
 // src/guest/daemon.ts
-import fs33 from "node:fs";
+import fs36 from "node:fs";
 
 // src/shared/rundir.ts
 import fs2 from "node:fs";
@@ -6354,10 +6354,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path49) {
-  if (!path49)
+function getElementAtPath(obj, path53) {
+  if (!path53)
     return obj;
-  return path49.reduce((acc, key) => acc?.[key], obj);
+  return path53.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6697,11 +6697,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path49, issues) {
+function prefixIssues(path53, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path49);
+    iss.path.unshift(path53);
     return iss;
   });
 }
@@ -7151,16 +7151,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path49 = []) => {
+  const processError = (error63, path53 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path49, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path53, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path53, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path53, ...issue2.path]);
       } else {
-        const fullpath = [...path49, ...issue2.path];
+        const fullpath = [...path53, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7199,17 +7199,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path49 = []) => {
+  const processError = (error63, path53 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path49, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path53, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path53, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path49, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path53, ...issue2.path]);
       } else {
-        const fullpath = [...path49, ...issue2.path];
+        const fullpath = [...path53, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7248,8 +7248,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path49 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path49) {
+  const path53 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path53) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -7383,18 +7383,18 @@ var validateAsync = async (schema, value, _ctx) => {
   return result.issues.length === 0;
 };
 var _encode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse5 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse3(schema, value, ctx, finalizeParams(fn, _params));
+    return parse5(schema, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
 var encode = /* @__PURE__ */ _encode($ZodRealError);
 var _decode = (_Err) => {
-  const parse3 = _parse(_Err);
+  const parse5 = _parse(_Err);
   const fn = (schema, value, _ctx, _params) => {
-    return parse3(schema, value, _ctx, finalizeParams(fn, _params));
+    return parse5(schema, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
@@ -9048,14 +9048,14 @@ var $ZodObject = /* @__PURE__ */ $constructor("$ZodObject", (inst, def) => {
     const shape = zod.def.shape;
     const propValues = {};
     for (const key in shape) {
-      const field = shape[key]._zod;
-      if (field.values) {
+      const field2 = shape[key]._zod;
+      if (field2.values) {
         if (!Object.prototype.hasOwnProperty.call(propValues, key)) {
           assignProp(propValues, key, /* @__PURE__ */ new Set());
         }
-        for (const v of field.values)
+        for (const v of field2.values)
           propValues[key].add(v);
-        if (field.optin !== void 0)
+        if (field2.optin !== void 0)
           propValues[key].add(void 0);
       }
     }
@@ -10564,7 +10564,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve) {
+function isRecursive(inst, stack, resolve2) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -10574,7 +10574,7 @@ function isRecursive(inst, stack, resolve) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve);
+      const answer = isRecursive(child, stack, resolve2);
       if (answer > result)
         result = answer;
     }
@@ -10585,7 +10585,7 @@ function isRecursive(inst, stack, resolve) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve2) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -10649,7 +10649,7 @@ function isRecursive(inst, stack, resolve) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve2 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -18759,8 +18759,8 @@ function generateMultipleOfCheck(doc, ctx, def, accessor) {
   }
 }
 function generateNumberFormatCheck(doc, def, accessor) {
-  const format = def.format;
-  switch (format) {
+  const format2 = def.format;
+  switch (format2) {
     case "safeint":
       doc.write(`if (!Number.isSafeInteger(${accessor})) return INVALID;`);
       break;
@@ -18777,16 +18777,16 @@ function generateNumberFormatCheck(doc, def, accessor) {
       doc.write(`if (!Number.isFinite(${accessor})) return INVALID;`);
       break;
     default: {
-      void format;
-      throw new ZodCompileUnsupportedError(`number format ${format}`);
+      void format2;
+      throw new ZodCompileUnsupportedError(`number format ${format2}`);
     }
   }
 }
 function generateBigIntFormatCheck(doc, def, accessor) {
-  const format = def.format;
-  if (!format)
+  const format2 = def.format;
+  if (!format2)
     return;
-  switch (format) {
+  switch (format2) {
     case "int64":
       doc.write(`if (${accessor} < -9223372036854775808n || ${accessor} > 9223372036854775807n) return INVALID;`);
       break;
@@ -18794,8 +18794,8 @@ function generateBigIntFormatCheck(doc, def, accessor) {
       doc.write(`if (${accessor} < 0n || ${accessor} > 18446744073709551615n) return INVALID;`);
       break;
     default: {
-      void format;
-      throw new ZodCompileUnsupportedError(`bigint format ${format}`);
+      void format2;
+      throw new ZodCompileUnsupportedError(`bigint format ${format2}`);
     }
   }
 }
@@ -18976,8 +18976,8 @@ function generateStringFormatCheck(doc, ctx, def, accessor, needsValue = true) {
     doc.write(`if (!${patternConst}.test(${accessor})) return INVALID;`);
     return accessor;
   }
-  const format = def.format;
-  switch (format) {
+  const format2 = def.format;
+  switch (format2) {
     case "regex":
       throw new ZodCompileUnsupportedError("regex format without a pattern");
     case "lowercase":
@@ -19000,8 +19000,8 @@ function generateStringFormatCheck(doc, ctx, def, accessor, needsValue = true) {
       break;
     }
     default: {
-      void format;
-      throw new ZodCompileUnsupportedError(`string format ${format}`);
+      void format2;
+      throw new ZodCompileUnsupportedError(`string format ${format2}`);
     }
   }
   return accessor;
@@ -21084,12 +21084,12 @@ function _stringbool(Classes, _params) {
   return codec2;
 }
 // @__NO_SIDE_EFFECTS__
-function _stringFormat(Class2, format, fnOrRegex, _params = {}) {
+function _stringFormat(Class2, format2, fnOrRegex, _params = {}) {
   const params = normalizeParams(_params);
   const def = {
     check: "string_format",
     type: "string",
-    format,
+    format: format2,
     fn: typeof fnOrRegex === "function" ? fnOrRegex : (val) => fnOrRegex.test(val),
     ...params
   };
@@ -21655,9 +21655,9 @@ var addPattern = (agg, pattern) => {
 var intersectMime = (agg, mime) => {
   agg.mime = agg.mime ? agg.mime.filter((m) => mime.includes(m)) : [...mime];
 };
-var setFormat = (agg, format) => {
-  agg.format = format;
-  if (format.includes("int"))
+var setFormat = (agg, format2) => {
+  agg.format = format2;
+  if (format2.includes("int"))
     agg.isInt = true;
 };
 var minContributor = (agg, def) => narrowMin(agg, "minimum", def.minimum);
@@ -21735,16 +21735,16 @@ var exactPattern = (p) => exactPatterns.get(p) ?? p;
 var stringProcessor = (schema, ctx, _json, _params) => {
   const json2 = _json;
   json2.type = "string";
-  const { minimum, maximum, format, patterns, contentEncoding, laxFormat } = aggregateChecks(schema);
+  const { minimum, maximum, format: format2, patterns, contentEncoding, laxFormat } = aggregateChecks(schema);
   if (typeof minimum === "number")
     json2.minLength = minimum;
   if (typeof maximum === "number")
     json2.maxLength = maximum;
-  if (format) {
-    json2.format = formatMap[format] ?? format;
+  if (format2) {
+    json2.format = formatMap[format2] ?? format2;
     if (json2.format === "")
       delete json2.format;
-    if (format === "time" || laxFormat) {
+    if (format2 === "time" || laxFormat) {
       delete json2.format;
     }
   }
@@ -21983,8 +21983,8 @@ var objectProcessor = (schema, ctx, _json, params) => {
   }
   const requiredKeys = [];
   for (const key of Object.keys(shape)) {
-    const field = def.shape[key];
-    if (ctx.io === "input" ? inputOptin(field) === void 0 : field._zod.optout === void 0) {
+    const field2 = def.shape[key];
+    if (ctx.io === "input" ? inputOptin(field2) === void 0 : field2._zod.optout === void 0) {
       requiredKeys.push(key);
     }
   }
@@ -22122,7 +22122,7 @@ function stringifyKeyNames(bySchema, json2, visited) {
   const values = json2.enum ?? (json2.const !== void 0 ? [json2.const] : void 0);
   if (!numericType && !values?.some((v) => typeof v === "number"))
     return json2;
-  const { minimum, maximum, exclusiveMinimum, exclusiveMaximum, multipleOf, format, id, ...rest } = json2;
+  const { minimum, maximum, exclusiveMinimum, exclusiveMaximum, multipleOf, format: format2, id, ...rest } = json2;
   if (rest.enum)
     rest.enum = rest.enum.map((v) => typeof v === "number" ? String(v) : v);
   else if (typeof rest.const === "number")
@@ -23258,8 +23258,8 @@ var ZodCustomStringFormat = /* @__PURE__ */ $constructor("ZodCustomStringFormat"
   $ZodCustomStringFormat.init(inst, def);
   ZodStringFormat.init(inst, def);
 });
-function stringFormat(format, fnOrRegex, _params = {}) {
-  return _stringFormat(ZodCustomStringFormat, format, fnOrRegex, _params);
+function stringFormat(format2, fnOrRegex, _params = {}) {
+  return _stringFormat(ZodCustomStringFormat, format2, fnOrRegex, _params);
 }
 function hostname2(_params) {
   return _stringFormat(ZodCustomStringFormat, "hostname", hostname, _params);
@@ -23272,11 +23272,11 @@ function currencyCode2(_params) {
 }
 function hash(alg, params) {
   const enc = params?.enc ?? "hex";
-  const format = `${alg}_${enc}`;
-  const regex = regexes_exports[format];
+  const format2 = `${alg}_${enc}`;
+  const regex = regexes_exports[format2];
   if (!regex)
-    throw new Error(`Unrecognized hash format: ${format}`);
-  return _stringFormat(ZodCustomStringFormat, format, regex, params);
+    throw new Error(`Unrecognized hash format: ${format2}`);
+  return _stringFormat(ZodCustomStringFormat, format2, regex, params);
 }
 var ZodNumber = /* @__PURE__ */ $constructor(
   "ZodNumber",
@@ -24351,13 +24351,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path49 = ref.slice(1).split("/").filter(Boolean);
-  if (path49.length === 0) {
+  const path53 = ref.slice(1).split("/").filter(Boolean);
+  if (path53.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path49[0] === defsKey) {
-    const key = path49[1] === void 0 ? void 0 : decodeJSONPointerSegment(path49[1]);
+  if (path53[0] === defsKey) {
+    const key = path53[1] === void 0 ? void 0 : decodeJSONPointerSegment(path53[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -24641,58 +24641,58 @@ function convertBaseSchema(schema, ctx) {
     case "string": {
       let stringSchema = z.string();
       if (schema.format) {
-        const format = schema.format;
-        if (format === "email") {
+        const format2 = schema.format;
+        if (format2 === "email") {
           stringSchema = stringSchema.check(z.email());
-        } else if (format === "uri" || format === "uri-reference") {
+        } else if (format2 === "uri" || format2 === "uri-reference") {
           stringSchema = stringSchema.check(z.url());
-        } else if (format === "uuid" || format === "guid") {
+        } else if (format2 === "uuid" || format2 === "guid") {
           stringSchema = stringSchema.check(z.uuid());
-        } else if (format === "date-time") {
+        } else if (format2 === "date-time") {
           stringSchema = stringSchema.check(z.iso.datetime({ offset: true }));
-        } else if (format === "date") {
+        } else if (format2 === "date") {
           stringSchema = stringSchema.check(z.iso.date());
-        } else if (format === "time") {
+        } else if (format2 === "time") {
           stringSchema = stringSchema.check(z.regex(fullTime));
-        } else if (format === "duration") {
+        } else if (format2 === "duration") {
           stringSchema = stringSchema.check(z.iso.duration());
-        } else if (format === "hostname") {
+        } else if (format2 === "hostname") {
           stringSchema = stringSchema.check(z.hostname());
-        } else if (format === "ipv4") {
+        } else if (format2 === "ipv4") {
           stringSchema = stringSchema.check(z.ipv4());
-        } else if (format === "ipv6") {
+        } else if (format2 === "ipv6") {
           stringSchema = stringSchema.check(z.ipv6());
-        } else if (format === "mac") {
+        } else if (format2 === "mac") {
           stringSchema = stringSchema.check(z.mac());
-        } else if (format === "cidr") {
+        } else if (format2 === "cidr") {
           stringSchema = stringSchema.check(z.cidrv4());
-        } else if (format === "cidr-v6") {
+        } else if (format2 === "cidr-v6") {
           stringSchema = stringSchema.check(z.cidrv6());
-        } else if (format === "base64") {
+        } else if (format2 === "base64") {
           stringSchema = stringSchema.check(z.base64());
-        } else if (format === "base64url") {
+        } else if (format2 === "base64url") {
           stringSchema = stringSchema.check(z.base64url());
-        } else if (format === "e164") {
+        } else if (format2 === "e164") {
           stringSchema = stringSchema.check(z.e164());
-        } else if (format === "credit_card") {
+        } else if (format2 === "credit_card") {
           stringSchema = stringSchema.check(z.creditCard());
-        } else if (format === "iban") {
+        } else if (format2 === "iban") {
           stringSchema = stringSchema.check(z.iban());
-        } else if (format === "jwt") {
+        } else if (format2 === "jwt") {
           stringSchema = stringSchema.check(z.jwt());
-        } else if (format === "emoji") {
+        } else if (format2 === "emoji") {
           stringSchema = stringSchema.check(z.emoji());
-        } else if (format === "nanoid") {
+        } else if (format2 === "nanoid") {
           stringSchema = stringSchema.check(z.nanoid());
-        } else if (format === "cuid") {
+        } else if (format2 === "cuid") {
           stringSchema = stringSchema.check(z.cuid());
-        } else if (format === "cuid2") {
+        } else if (format2 === "cuid2") {
           stringSchema = stringSchema.check(z.cuid2());
-        } else if (format === "ulid") {
+        } else if (format2 === "ulid") {
           stringSchema = stringSchema.check(z.ulid());
-        } else if (format === "xid") {
+        } else if (format2 === "xid") {
           stringSchema = stringSchema.check(z.xid());
-        } else if (format === "ksuid") {
+        } else if (format2 === "ksuid") {
           stringSchema = stringSchema.check(z.ksuid());
         }
       }
@@ -25310,15 +25310,17 @@ var ClaudeProfile = external_exports.strictObject({
   globalStateFile: external_exports.string().describe('Your .claude.json, or "auto". Empty string = do not copy.'),
   copyCredentials: external_exports.boolean().describe("Copy your Claude LOGIN into the sandbox. Prefer sandbox account instead."),
   overwrite: external_exports.boolean().describe("Refresh these settings from this PC on every launch."),
-  syncHistory: external_exports.boolean().describe("Bring all conversation history in, and sync new history back (path-translated)."),
-  syncClaudeMem: external_exports.boolean().describe("Bring claude-mem data in, and its database back when the sandbox closes.")
+  syncHistory: external_exports.boolean().describe("Bring conversation history in, and sync new history back (path-translated)."),
+  historyScope: external_exports.enum(["project", "all"]).describe(`Which history comes in: "project" = only the projects in this sandbox (other projects' conversations, file backups and prompts stay on this PC), "all" = everything. Only this sandbox's projects ever sync back.`),
+  syncClaudeMem: external_exports.boolean().describe("Bring claude-mem data into the sandbox (its settings and backups stay on this PC)."),
+  syncClaudeMemBack: external_exports.boolean().describe("Also copy claude-mem's database back to this PC when the sandbox closes. Off by default: what is in it is loaded into every Claude session on this PC, so a compromised agent could plant instructions there.")
 });
 
 // src/core/schema/sandbox.ts
 var GuestWorkspace = external_exports.union([external_exports.literal("auto"), external_exports.literal("mirror"), GuestPath]).describe('Where the workspace appears inside the sandbox. "auto" = C:\\Workspace\\<folder name>. "mirror" = the same path as on this PC, so absolute paths in configs and build caches match (another drive letter such as F: is a subst drive onto C:\\Mirror\\F); paths the sandbox reserves (C:\\Users\\..., C:\\Program Files\\...) fall back to "auto".');
 var Mapping = external_exports.strictObject({
   host: external_exports.string().min(1).describe("Folder on this PC (relative paths are relative to the config file)."),
-  guest: GuestPath.describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game: mapped to C:\\Mirror\\F\\... and shown as F: (subst) at boot."),
+  guest: external_exports.string().min(1).max(1024).optional().describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game (shown as F: at boot). Leave it out to use the same path as on this PC (a folder inside the project stays where it is in the project). A path the sandbox cannot use (C:\\Windows\\..., C:\\Users\\..., one already in use) goes to C:\\Mapped\\<drive>\\<path> instead, and the launch says so."),
   readOnly: external_exports.boolean().describe("true = the agent can only read it."),
   optional: external_exports.boolean().optional().describe("true = skip it quietly when the host folder does not exist.")
 });
@@ -25327,6 +25329,7 @@ var Sandbox = external_exports.strictObject({
   maxMemoryMb: external_exports.number().int().positive().describe('Upper limit for memoryMb "auto".'),
   maxMemoryPercent: external_exports.number().int().min(10).max(100).describe(`memoryMb "auto" never takes more than this share of this PC's total RAM (percent).`),
   cpuLimit: external_exports.union([external_exports.literal("none"), external_exports.number().int().min(5).max(100)]).describe(`Most of this PC's CPU the sandbox may use, in percent (5-100), e.g. 50 keeps half free for you; "none" = no cap (Windows Sandbox would take every processor). Covers everything this tool starts in the sandbox (agents, installs, builds, its terminal).`),
+  pageFileMb: external_exports.number().int().min(0).max(262144).describe(`Size of the sandbox's paging file in MB, created at full size when it starts so it never grows while builds run (8 GB of its disk always stays free). Windows Sandbox starts with about 1 GB: parallel builds then fail with "The paging file is too small", and Windows grows the file under load. 0 = leave Windows' own.`),
   reserveHostMb: external_exports.number().int().nonnegative().describe('RAM always left for this PC when memoryMb is "auto".'),
   vGpu: external_exports.boolean().describe("Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface."),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
@@ -25335,7 +25338,33 @@ var Sandbox = external_exports.strictObject({
   videoInput: external_exports.boolean().describe("Camera access."),
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
-  headless: external_exports.boolean().describe("Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends.")
+  headless: external_exports.boolean().describe("Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."),
+  keepAwake: external_exports.boolean().describe("Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it).")
+});
+var Port2 = external_exports.number().int().min(1).max(65535);
+var HostEntry = external_exports.string().max(253).regex(/^(@developer|(\*\.)?([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+)$/, "a host name like example.com, *.example.com, or @developer");
+var Network = external_exports.strictObject({
+  blockPrivateRanges: external_exports.boolean().describe("Block your LAN (10/8, 172.16/12, 192.168/16, SMB) from inside the sandbox."),
+  allowOnly: external_exports.array(HostEntry).describe("Only these hosts can be reached once the sandbox is set up (tools still download first). *.example.com covers its subdomains; @developer adds package registries, GitHub, toolchain downloads and the AI providers. Programs go through a proxy in the sandbox (HTTP_PROXY); anything else is blocked by its firewall. Empty = no limit."),
+  blockHosts: external_exports.array(external_exports.string().max(253).regex(/^([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+$/, "a host name like telemetry.example.com")).describe("Never reachable from the sandbox, e.g. production servers or telemetry (each exact name; the sandbox's hosts file sends them nowhere)."),
+  forwardPorts: external_exports.array(external_exports.strictObject({
+    pc: Port2.describe("The port on this PC (localhost only)."),
+    sandbox: Port2.describe("The port inside the sandbox (a server there may listen on localhost only).")
+  })).describe("Reach servers in the sandbox from this PC: http://localhost:<pc> here goes to <sandbox> inside, while it runs. Nothing else on your network can use them."),
+  dns: external_exports.array(external_exports.string().regex(/^\d{1,3}(\.\d{1,3}){3}$/, "an IPv4 address like 1.1.1.1")).describe("DNS servers for the sandbox instead of your network's, e.g. 1.1.1.1 and 9.9.9.9."),
+  proxy: external_exports.string().regex(/^(https?:\/\/[^\s]+)?$/, "http://host:port").describe("An HTTP proxy the sandbox uses to reach the internet (HTTP_PROXY / HTTPS_PROXY for everything in it), e.g. http://proxy.corp:8080. Empty = none.")
+});
+var Audit = external_exports.strictObject({
+  enabled: external_exports.boolean().describe("Keep an audit log on this PC of what happened in your sandboxes: programs started (with their command lines), files changed in the project, sessions, and what the repo guard caught. The sandbox cannot change it. Read it with sandbox audit."),
+  days: external_exports.number().int().min(1).max(365).describe("Days the audit log is kept."),
+  maxMb: external_exports.number().int().min(5).max(5e3).describe("Most space the audit log may take, in MB (older days go first). Days before today are compressed."),
+  processes: external_exports.boolean().describe("Record every program started in the sandbox with its command line (Windows process auditing; repeated runs are counted, not listed)."),
+  files: external_exports.boolean().describe("Record the files changed in the project while the sandbox runs.")
+});
+var WorkspaceFilter = external_exports.strictObject({
+  enabled: external_exports.boolean().describe("Keep what your .gitignore lists (.env files, node_modules, build output ...) out of the sandbox. The sandbox works on a copy of the project without those files, kept in step with it both ways within about a second; what it creates that is ignored (its own node_modules, builds) stays in the sandbox. Git works as usual. Off = the project folder itself is mapped."),
+  exclude: external_exports.array(external_exports.string().max(500)).describe("Also keep these out, as .gitignore patterns, e.g. secrets/, *.pem, data/private/."),
+  include: external_exports.array(external_exports.string().max(500)).describe("Let these in although .gitignore lists them, e.g. .env.example, data/fixtures/.")
 });
 var Git = external_exports.strictObject({ enabled: external_exports.boolean().describe("Provide Git for Windows (and Git Bash, which Claude Code needs)."), access: GitAccess });
 var Provisioning = external_exports.strictObject({
@@ -25343,7 +25372,8 @@ var Provisioning = external_exports.strictObject({
   fallbackToInstall: external_exports.boolean().describe("Download anything that cannot be copied from this PC."),
   refresh: external_exports.boolean().describe("Re-copy / re-download everything on the next launch."),
   git: Git,
-  terminal: toggle("Windows Terminal as the sandbox window (downloaded once).")
+  terminal: toggle("Windows Terminal as the sandbox window (downloaded once)."),
+  conpty: toggle("Agent sessions use Microsoft's newer pseudo console (conpty.dll, downloaded once) instead of the one built into Windows: no garbled screen after resizing, real scrollback for the mouse wheel. Off = the one built into Windows.")
 });
 var Downloads = external_exports.strictObject({
   requireChecksum: external_exports.boolean().describe("Refuse any toolchain, database or tool download that has no published checksum (SHA-256/SHA-512) to verify it against. false = allow those, as before. Downloads that do have a published checksum are always verified. A project's .sandbox-config.json can only turn this on.")
@@ -25427,10 +25457,150 @@ var Toolchains = external_exports.strictObject({
     enabled: external_exports.boolean().describe("Mesa 3D (llvmpipe): OpenGL 4.5 in software for games and apps when there is no GPU (sandbox.vGpu off). Copy opengl32.dll and libgallium_wgl.dll from %MESA_DIR% next to the program's .exe."),
     vulkan: external_exports.boolean().describe("Also software Vulkan 1.4 (Mesa lavapipe) with the Khronos loader, registered for every program; for wgpu set WGPU_BACKEND=vulkan.")
   }),
-  vscode: toggle("Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."),
+  vscode: external_exports.strictObject({
+    enabled: external_exports.boolean().describe("Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."),
+    setup: external_exports.boolean().describe("Point VS Code at the sandbox's own tools (JDK, Python, Go, compilers, .NET, Git, PowerShell 7 and Git Bash terminals) and install the language extensions for the toolchains in use."),
+    recommended: external_exports.boolean().describe("Also install the extensions a project recommends in its .vscode/extensions.json."),
+    extensions: external_exports.array(external_exports.string().regex(/^[\w-]+\.[\w-]+$/, "publisher.name, e.g. eamodio.gitlens")).describe("More extensions to install in every sandbox, e.g. eamodio.gitlens, ms-azuretools.vscode-docker.")
+  }),
   environment: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/, "letters, digits and _ only"), external_exports.string()).describe('Extra environment variables for the agent and every terminal, e.g. registry mirrors: {"NPM_CONFIG_REGISTRY": "https://...", "PIP_INDEX_URL": "https://..."}.')
 });
 
+// src/shared/apps.ts
+var gh = (github, asset) => ({ github, asset });
+var APPS = [
+  // ---- editors
+  { id: "vscode", name: "Visual Studio Code", category: "editors", about: "Code editor with debugging, set up for the sandbox's languages.", size: "150 MB", source: { resolve: "setting" }, exe: "Code.exe", setting: "toolchains.vscode.enabled" },
+  { id: "windows-terminal", name: "Windows Terminal", category: "utilities", about: "The sandbox window: tabs, panes, PowerShell 7 profile.", size: "40 MB", source: { resolve: "setting" }, exe: "WindowsTerminal.exe", setting: "provisioning.terminal.enabled" },
+  { id: "notepadpp", name: "Notepad++", category: "editors", about: "Fast text and code editor.", size: "8 MB", source: gh("notepad-plus-plus/notepad-plus-plus", "^npp\\.[\\d.]+\\.portable\\.x64\\.zip$"), exe: "notepad++.exe" },
+  { id: "sublime", name: "Sublime Text", category: "editors", about: "Fast code editor (paid licence, free to evaluate).", size: "28 MB", source: { resolve: "sublime" }, exe: "sublime_text.exe" },
+  { id: "neovim", name: "Neovim", category: "editors", about: "Terminal text editor (nvim).", size: "12 MB", source: gh("neovim/neovim", "^nvim-win64\\.zip$"), exe: "nvim.exe", cli: true },
+  // ---- database clients
+  { id: "dbeaver", name: "DBeaver Community", category: "databases", about: "Universal database client: PostgreSQL, MySQL, SQLite, SQL Server and more.", size: "120 MB", source: gh("dbeaver/dbeaver", "^dbeaver-ce-[\\d.]+-windows-x86_64\\.zip$"), exe: "dbeaver.exe" },
+  { id: "pgadmin", name: "pgAdmin 4", category: "databases", about: "The PostgreSQL admin GUI (from the PostgreSQL binaries zip).", size: "330 MB", source: { resolve: "pgadmin" }, exe: "pgAdmin4.exe" },
+  { id: "heidisql", name: "HeidiSQL", category: "databases", about: "Light client for MySQL, MariaDB, PostgreSQL and SQL Server.", size: "28 MB", source: gh("HeidiSQL/HeidiSQL", "^HeidiSQL_[\\d.]+_64_Portable\\.zip$"), exe: "heidisql.exe" },
+  { id: "sqlitebrowser", name: "DB Browser for SQLite", category: "databases", about: "Open, browse and edit SQLite files.", size: "21 MB", source: gh("sqlitebrowser/sqlitebrowser", "^DB\\.Browser\\.for\\.SQLite-v?[\\d.]+-win64\\.zip$"), exe: "DB Browser for SQLite.exe" },
+  { id: "compass", name: "MongoDB Compass", category: "databases", about: "The MongoDB GUI.", size: "220 MB", source: gh("mongodb-js/compass", "^mongodb-compass-[\\d.]+-win32-x64\\.zip$"), exe: "MongoDBCompass.exe" },
+  { id: "redisinsight", name: "Redis Insight", category: "databases", about: "The Redis GUI.", size: "110 MB", source: gh("redis/RedisInsight", "^Redis-Insight-win-installer\\.exe$"), unpack: "nsis", exe: "Redis Insight.exe", needs: ["7zip"] },
+  { id: "dbgate", name: "DbGate", category: "databases", about: "Database manager for SQL and NoSQL databases.", size: "180 MB", source: gh("dbgate/dbgate", "^dbgate-[\\d.]+-win_x64\\.zip$"), exe: "DbGate.exe" },
+  { id: "beekeeper", name: "Beekeeper Studio", category: "databases", about: "SQL editor and database manager.", size: "245 MB", source: gh("beekeeper-studio/beekeeper-studio", "^Beekeeper-Studio-[\\d.]+-portable\\.exe$"), unpack: "nsis", exe: "Beekeeper Studio.exe", needs: ["7zip"] },
+  { id: "dynamodb-admin", name: "dynamodb-admin", category: "databases", about: "Web GUI for DynamoDB Local: run dynamodb-admin, then open http://localhost:8001.", size: "5 MB", source: { npm: "dynamodb-admin" }, exe: "dynamodb-admin.cmd", cli: true },
+  // ---- API clients
+  { id: "bruno", name: "Bruno", category: "api", about: "Offline, git-friendly API client (collections are files in your repo).", size: "175 MB", source: gh("usebruno/bruno", "^bruno_[\\d.]+_x64_win\\.zip$"), exe: "Bruno.exe" },
+  { id: "insomnia", name: "Insomnia", category: "api", about: "REST, GraphQL and gRPC client.", size: "590 MB", source: gh("Kong/insomnia", "^insomnia-[\\d.]+-full\\.nupkg$"), exe: "Insomnia.exe" },
+  // ---- git
+  { id: "sourcegit", name: "SourceGit", category: "git", about: "Fast open-source Git GUI.", size: "26 MB", source: gh("sourcegit-scm/sourcegit", "^sourcegit_[\\d.]+\\.win-x64\\.zip$"), exe: "SourceGit.exe" },
+  { id: "githubdesktop", name: "GitHub Desktop", category: "git", about: 'Simple Git GUI from GitHub. It has its own git, so it needs provisioning.git.access "full".', size: "300 MB", source: gh("desktop/desktop", "^GitHubDesktop-[\\d.]+-x64-full\\.nupkg$"), exe: "GitHubDesktop.exe", fullGitOnly: true },
+  { id: "lazygit", name: "lazygit", category: "git", about: "Git in the terminal.", size: "7 MB", source: gh("jesseduffield/lazygit", "^lazygit_[\\d.]+_windows_x86_64\\.zip$"), exe: "lazygit.exe", cli: true },
+  // ---- utilities
+  { id: "7zip", name: "7-Zip", category: "utilities", about: "Archive manager (7z, zip, rar, tar ...). Also unpacks installers for other apps.", size: "2 MB", source: { resolve: "7zip" }, exe: "7zFM.exe" },
+  { id: "winmerge", name: "WinMerge", category: "utilities", about: "Compare and merge files and folders.", size: "23 MB", source: gh("WinMerge/winmerge", "^winmerge-[\\d.]+-x64-exe\\.zip$"), exe: "WinMergeU.exe" },
+  { id: "everything", name: "Everything", category: "utilities", about: "Finds files by name instantly.", size: "2 MB", source: { resolve: "everything" }, exe: "Everything.exe" },
+  { id: "sysinternals", name: "Sysinternals Suite", category: "utilities", about: "Process Explorer, Process Monitor, Autoruns, TCPView and more (on PATH).", size: "200 MB", source: { url: "https://download.sysinternals.com/files/SysinternalsSuite.zip" }, exe: "procexp64.exe" },
+  { id: "imhex", name: "ImHex", category: "utilities", about: "Hex editor for reverse engineering and binary formats.", size: "80 MB", source: gh("WerWolv/ImHex", "^imhex-[\\d.]+-Windows-Portable-NoGPU-x86_64\\.zip$"), exe: "imhex-gui.exe" },
+  // ---- browsers
+  { id: "chrome", name: "Chrome for Testing", category: "browsers", about: "Chrome build made for automated tests (with chromedriver on PATH).", size: "170 MB", source: { resolve: "chrome" }, exe: "chrome.exe" },
+  { id: "firefox", name: "Firefox", category: "browsers", about: "Firefox for testing.", size: "75 MB", source: { resolve: "firefox" }, unpack: "nsis", exe: "firefox.exe", needs: ["7zip"] },
+  // ---- game development
+  { id: "godot", name: "Godot", category: "gamedev", about: "Open-source 2D and 3D game engine.", size: "80 MB", source: gh("godotengine/godot", "^Godot_v[\\d.]+-stable_win64\\.exe\\.zip$"), exe: "/^Godot_v[\\d.]+-stable_win64\\.exe$/", needs: ["mesa"] },
+  { id: "blender", name: "Blender", category: "gamedev", about: "3D modelling, animation and rendering.", size: "400 MB", source: { resolve: "blender" }, exe: "blender.exe", needs: ["mesa"] },
+  { id: "love", name: "L\xD6VE", category: "gamedev", about: "Lua framework for 2D games.", size: "4 MB", source: gh("love2d/love", "^love-[\\d.]+-win64\\.zip$"), exe: "love.exe", needs: ["mesa"] },
+  { id: "defold", name: "Defold", category: "gamedev", about: "Free 2D/3D game engine and editor.", size: "330 MB", source: gh("defold/defold", "^Defold-x86_64-win32\\.zip$"), exe: "Defold.exe", needs: ["mesa"] },
+  { id: "pixelorama", name: "Pixelorama", category: "gamedev", about: "Pixel-art and sprite editor.", size: "40 MB", source: gh("Orama-Interactive/Pixelorama", "^Pixelorama-Windows-64bit\\.zip$"), exe: "Pixelorama.exe", needs: ["mesa"] },
+  { id: "tiled", name: "Tiled", category: "gamedev", about: "Tile map editor.", size: "22 MB", source: gh("mapeditor/tiled", "^Tiled-[\\d.]+_Windows-10\\+_x86_64\\.msi$"), unpack: "msi", exe: "tiled.exe" },
+  // ---- cloud
+  { id: "kubectl", name: "kubectl", category: "cloud", about: "Kubernetes command line.", size: "60 MB", source: { resolve: "kubectl" }, unpack: "file", exe: "kubectl.exe", cli: true },
+  { id: "helm", name: "Helm", category: "cloud", about: "Kubernetes package manager.", size: "20 MB", source: { resolve: "helm" }, exe: "helm.exe", cli: true },
+  { id: "k9s", name: "k9s", category: "cloud", about: "Kubernetes cluster UI in the terminal.", size: "40 MB", source: gh("derailed/k9s", "^k9s_Windows_amd64\\.zip$"), exe: "k9s.exe", cli: true },
+  { id: "terraform", name: "Terraform", category: "cloud", about: "Infrastructure as code.", size: "30 MB", source: { resolve: "terraform" }, exe: "terraform.exe", cli: true },
+  { id: "azure-cli", name: "Azure CLI", category: "cloud", about: "Manage Azure (az).", size: "90 MB", source: { url: "https://aka.ms/installazurecliwindowszipx64" }, exe: "az.cmd", cli: true },
+  { id: "gcloud", name: "Google Cloud CLI", category: "cloud", about: "Manage Google Cloud (gcloud, gsutil, bq).", size: "120 MB", source: { url: "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-windows-x86_64-bundled-python.zip" }, exe: "gcloud.cmd", cli: true },
+  { id: "aws-cli", name: "AWS CLI", category: "cloud", about: "Manage AWS (aws).", size: "50 MB", source: { url: "https://awscli.amazonaws.com/AWSCLIV2.msi" }, unpack: "msi", exe: "aws.exe", cli: true },
+  // ---- diagrams and docs
+  { id: "drawio", name: "draw.io", category: "diagrams", about: "Diagram editor (flowcharts, architecture, UML).", size: "170 MB", source: gh("jgraph/drawio-desktop", "^draw\\.io-[\\d.]+-windows\\.zip$"), exe: "draw.io.exe" },
+  { id: "pandoc", name: "Pandoc", category: "diagrams", about: "Convert documents between Markdown, HTML, Word, PDF ...", size: "35 MB", source: gh("jgm/pandoc", "^pandoc-[\\d.]+-windows-x86_64\\.zip$"), exe: "pandoc.exe", cli: true },
+  // ---- network
+  { id: "mitmproxy", name: "mitmproxy", category: "network", about: "Intercepting HTTPS proxy (mitmweb opens a web UI).", size: "90 MB", source: { resolve: "mitmproxy" }, exe: "mitmweb.exe", cli: true },
+  { id: "xh", name: "xh", category: "network", about: "Friendly HTTP requests from the terminal (like HTTPie).", size: "5 MB", source: gh("ducaale/xh", "^xh-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "xh.exe", cli: true },
+  { id: "grpcurl", name: "grpcurl", category: "network", about: "curl for gRPC servers.", size: "10 MB", source: gh("fullstorydev/grpcurl", "^grpcurl_[\\d.]+_windows_x86_64\\.zip$"), exe: "grpcurl.exe", cli: true },
+  { id: "k6", name: "k6", category: "network", about: "Load testing with JavaScript scripts.", size: "30 MB", source: gh("grafana/k6", "^k6-v[\\d.]+-windows-amd64\\.zip$"), exe: "k6.exe", cli: true },
+  // ---- command-line tools
+  { id: "jq", name: "jq", category: "cli", about: "Query and reshape JSON.", size: "1 MB", source: gh("jqlang/jq", "^jq-windows-amd64\\.exe$"), unpack: "file", exe: "jq.exe", cli: true },
+  { id: "yq", name: "yq", category: "cli", about: "Query and edit YAML, JSON, XML and TOML.", size: "10 MB", source: gh("mikefarah/yq", "^yq_windows_amd64\\.exe$"), unpack: "file", exe: "yq.exe", cli: true },
+  { id: "ripgrep", name: "ripgrep", category: "cli", about: "Very fast recursive search (rg).", size: "2 MB", source: gh("BurntSushi/ripgrep", "^ripgrep-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "rg.exe", cli: true },
+  { id: "fd", name: "fd", category: "cli", about: "Fast, friendly alternative to find.", size: "2 MB", source: gh("sharkdp/fd", "^fd-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "fd.exe", cli: true },
+  { id: "bat", name: "bat", category: "cli", about: "cat with syntax highlighting and git changes.", size: "3 MB", source: gh("sharkdp/bat", "^bat-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "bat.exe", cli: true },
+  { id: "fzf", name: "fzf", category: "cli", about: "Fuzzy finder for the terminal.", size: "2 MB", source: gh("junegunn/fzf", "^fzf-[\\d.]+-windows_amd64\\.zip$"), exe: "fzf.exe", cli: true },
+  { id: "delta", name: "delta", category: "cli", about: "Readable git diffs with syntax highlighting.", size: "3 MB", source: gh("dandavison/delta", "^delta-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "delta.exe", cli: true },
+  { id: "just", name: "just", category: "cli", about: "Command runner (a simpler make for project tasks).", size: "2 MB", source: gh("casey/just", "^just-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "just.exe", cli: true },
+  { id: "hyperfine", name: "hyperfine", category: "cli", about: "Benchmark commands.", size: "1 MB", source: gh("sharkdp/hyperfine", "^hyperfine-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "hyperfine.exe", cli: true },
+  { id: "watchexec", name: "watchexec", category: "cli", about: "Run a command when files change.", size: "5 MB", source: gh("watchexec/watchexec", "^watchexec-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "watchexec.exe", cli: true },
+  { id: "protoc", name: "protoc", category: "cli", about: "Protocol Buffers compiler.", size: "3 MB", source: gh("protocolbuffers/protobuf", "^protoc-[\\d.]+-win64\\.zip$"), exe: "protoc.exe", cli: true },
+  { id: "ninja", name: "Ninja", category: "cli", about: "Small, fast build system (CMake's favourite generator).", size: "1 MB", source: gh("ninja-build/ninja", "^ninja-win\\.zip$"), exe: "ninja.exe", cli: true },
+  { id: "ffmpeg", name: "FFmpeg", category: "cli", about: "Convert and process audio and video.", size: "200 MB", source: gh("BtbN/FFmpeg-Builds", "^ffmpeg-master-latest-win64-gpl\\.zip$"), exe: "ffmpeg.exe", cli: true },
+  { id: "sqlite", name: "SQLite tools", category: "cli", about: "sqlite3 command-line shell.", size: "5 MB", source: { resolve: "sqlite" }, exe: "sqlite3.exe", cli: true },
+  { id: "shellcheck", name: "ShellCheck", category: "cli", about: "Finds bugs in shell scripts.", size: "10 MB", source: gh("koalaman/shellcheck", "^shellcheck-v[\\d.]+\\.zip$"), exe: "shellcheck.exe", cli: true },
+  { id: "gitleaks", name: "Gitleaks", category: "cli", about: "Finds secrets committed to git.", size: "8 MB", source: gh("gitleaks/gitleaks", "^gitleaks_[\\d.]+_windows_x64\\.zip$"), exe: "gitleaks.exe", cli: true }
+];
+var appById = (id) => APPS.find((a) => a.id === id);
+var exeMatcher = (exe) => {
+  const regex = /^\/(.+)\/$/.exec(exe);
+  if (regex) {
+    const r = new RegExp(regex[1], "i");
+    return (name) => r.test(name);
+  }
+  return (name) => name.toLowerCase() === exe.toLowerCase();
+};
+var customEntry = (id, app) => ({
+  id: "custom/" + id,
+  name: app.name,
+  category: "utilities",
+  about: "Your own program.",
+  size: "?",
+  source: app.github && app.asset ? { github: app.github, asset: app.asset } : { url: app.url },
+  unpack: app.unpack,
+  exe: app.exe,
+  cli: app.cli
+});
+var appsToInstall = (apps, gitAccess) => {
+  const chosen = apps.install.flatMap((id) => {
+    const e = appById(id);
+    return e && !e.setting ? [e] : [];
+  });
+  const skipped = chosen.filter((e) => e.fullGitOnly && gitAccess !== "full").map((e) => e.name + ' (needs provisioning.git.access "full")');
+  const allowed = [...chosen.filter((e) => !(e.fullGitOnly && gitAccess !== "full")), ...Object.entries(apps.custom).map(([id, app]) => customEntry(id, app))];
+  const needs7zip = allowed.some((e) => e.needs?.includes("7zip") || e.unpack === "nsis") && !allowed.some((e) => e.id === "7zip");
+  return { entries: [...needs7zip ? [appById("7zip")] : [], ...allowed], skipped };
+};
+var appsNeedMesa = (apps) => Boolean(apps?.install.some((id) => appById(id)?.needs?.includes("mesa")));
+
+// src/core/schema/apps.ts
+var CATALOGUE_IDS = APPS.filter((a) => !a.setting).map((a) => a.id);
+var AppId = external_exports.enum(CATALOGUE_IDS);
+var CustomAppId = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,40}$/, "lower-case letters, digits and - only");
+var compiles = (pattern) => {
+  try {
+    new RegExp(pattern);
+    return true;
+  } catch {
+    return false;
+  }
+};
+var CustomApp = external_exports.strictObject({
+  name: external_exports.string().min(1).max(80).describe('The name on the desktop shortcut, e.g. "My Tool".'),
+  github: external_exports.string().regex(/^[\w.-]+\/[\w.-]+$/, "owner/repo, e.g. sharkdp/bat").optional().describe("GitHub repository (owner/repo): the file comes from its latest release."),
+  asset: external_exports.string().max(200).refine(compiles, "not a valid pattern").optional().describe("With github: a pattern (regular expression) matching the release file, e.g. windows.*x64\\.zip$"),
+  url: external_exports.string().url().startsWith("https://", "https:// only").optional().describe("Or a direct https:// download link (zip, 7z, exe or msi)."),
+  sha256: external_exports.string().regex(/^[0-9a-fA-F]{64}$/, "64 hex characters").optional().describe("SHA-256 of the download (GitHub releases usually publish one; then this is not needed)."),
+  unpack: external_exports.enum(["archive", "file", "nsis", "msi"]).optional().describe("archive (zip, 7z, tar: the default), file (a single .exe), nsis (an installer 7-Zip can open) or msi."),
+  exe: external_exports.string().min(1).max(200).describe("The program to start (found anywhere in the download), e.g. mytool.exe."),
+  cli: external_exports.boolean().optional().describe("A command-line tool: its folder goes on PATH instead of getting a desktop shortcut.")
+}).refine((a) => a.github && a.asset ? !a.url : Boolean(a.url) && !a.github && !a.asset, { message: "give github + asset, or url (not both)" });
+var Apps = external_exports.strictObject({
+  install: external_exports.array(AppId).describe("Apps from the catalogue to install in every sandbox (the Apps screen in the menu lists them by category). Each is downloaded once and kept."),
+  custom: external_exports.record(CustomAppId, CustomApp).describe("Programs of your own: a GitHub release or a download link, and the program to start. Installed like the catalogue apps.")
+});
+
 // src/core/schema/projects.ts
 var Projects = external_exports.strictObject({
   all: external_exports.boolean().describe("Map every project you have started before (and every folder in your roots) at every start, except those in exclude, so all of them open in the running sandbox without a restart. Every agent in the sandbox can then see all of them. Each one is still only set up when you first use it."),
@@ -25438,6 +25608,7 @@ var Projects = external_exports.strictObject({
   roots: external_exports.array(external_exports.string().min(1)).describe('Folders whose subfolders are your projects (e.g. "F:\\\\Code"), mapped read/write at every start. Any project inside one, including ones you create later, opens in the running sandbox at once, without a restart. Every agent in the sandbox can see all of them.'),
   askToAddRoot: external_exports.boolean().describe("When you start a project whose parent folder is not a root yet, ask once whether to add it."),
   declinedRoots: external_exports.array(external_exports.string().min(1)).describe("Parent folders you said no to (not asked again)."),
+  allowOutsideMappings: external_exports.union([external_exports.literal("ask"), external_exports.boolean()]).describe(`A project's .sandbox-config.json may map folders from outside the project (e.g. a game folder on another drive). "ask" = an interactive launch asks once per project and set of folders, and remembers your answer; true = always allowed (still listed when you approve the file); false = never (the launch stops and says which folders). Only your own settings decide this, never a project file.`),
   wsbShare: external_exports.boolean().describe("On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart.")
 });
 
@@ -25447,14 +25618,18 @@ var Config = external_exports.strictObject({
   defaultHarness: Name.describe("Agent started by `sandbox launch` (sandbox claude always runs claude)."),
   guestWorkspace: GuestWorkspace,
   readOnly: external_exports.boolean().describe("Map the workspace read-only."),
+  workspaceFilter: WorkspaceFilter,
+  audit: Audit,
   mappings: external_exports.array(Mapping).describe("Extra folders from this PC."),
   sandbox: Sandbox,
   storage: external_exports.strictObject({
     root: external_exports.string().min(1).describe("Where everything is kept on this PC (tools, databases, logins, launches)."),
     persistAgentState: external_exports.boolean().describe("Keep agent logins and history between sandboxes."),
-    dataName: Name.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces.")
+    dataName: Name.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces."),
+    markSandboxFiles: external_exports.boolean().describe(`Programs and scripts (.exe, .ps1, .bat, .cmd, .msi, .lnk ...) that appear or change in your project while a sandbox runs get Windows' "downloaded from the internet" mark, so SmartScreen and PowerShell ask before they run on this PC.`),
+    warnDataGb: external_exports.number().min(0).describe("Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. sandbox data shows what takes the space.")
   }),
-  network: external_exports.strictObject({ blockPrivateRanges: external_exports.boolean().describe("Block your LAN (10/8, 172.16/12, 192.168/16, SMB) from inside the sandbox.") }),
+  network: Network,
   provisioning: Provisioning,
   downloads: Downloads,
   toolchains: Toolchains,
@@ -25463,6 +25638,7 @@ var Config = external_exports.strictObject({
   agentCommands: AgentCommands,
   secrets: Secrets,
   personalization: toggle("Copy your desktop look (theme, accent, taskbar, wallpaper, ...) into the sandbox."),
+  apps: Apps,
   claudeProfile: ClaudeProfile,
   harnesses: external_exports.record(Name, Harness).describe("Agents that can run in the sandbox."),
   hooks: external_exports.strictObject({ failFast: external_exports.boolean().describe("Stop when a hook script fails.") }),
@@ -25473,10 +25649,14 @@ var LocalOverrides = external_exports.strictObject({
   harness: Name.describe("Agent for this project."),
   guestWorkspace: GuestWorkspace,
   readOnly: external_exports.boolean().describe("Map this project read-only."),
-  mappings: external_exports.array(Mapping).describe("Extra folders (relative to this file)."),
+  // A project may turn the filter on and keep more out, never let ignored files in.
+  workspaceFilter: WorkspaceFilter.pick({ enabled: true, exclude: true }).partial(),
+  mappings: external_exports.array(Mapping).describe("Extra folders (relative paths are relative to this file), e.g. a read-only data folder at another place in the sandbox. Folders outside the project are used only as your projects.allowOutsideMappings setting allows (by default you are asked once)."),
   scripts: Strings.describe("Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."),
-  sandbox: Sandbox.omit({ cpuLimit: true }).partial(),
-  network: external_exports.strictObject({ blockPrivateRanges: external_exports.boolean() }).partial(),
+  // This PC's resources are yours to share: CPU and paging file (this PC's disk) are not a project's to set.
+  sandbox: Sandbox.omit({ cpuLimit: true, pageFileMb: true }).partial(),
+  // A project may block more (the LAN, hosts); it never opens hosts, ports, DNS or a proxy.
+  network: Network.pick({ blockPrivateRanges: true, blockHosts: true }).partial(),
   provisioning: Provisioning.pick({ copyFromHost: true, fallbackToInstall: true, refresh: true }).extend({ git: Git.partial(), terminal: toggle("Windows Terminal as the sandbox window.").partial() }).partial(),
   downloads: Downloads.partial(),
   // Every toolchain setting, each one optional (a project usually only switches languages on or pins a version).
@@ -25487,7 +25667,9 @@ var LocalOverrides = external_exports.strictObject({
   databases: external_exports.strictObject(import_lodash.default.mapValues(Databases.shape, (shape) => shape.partial())).partial(),
   attach: Attach.partial(),
   personalization: toggle("Copy your desktop look into the sandbox.").partial(),
-  claudeProfile: ClaudeProfile.pick({ enabled: true, include: true, overwrite: true, copyCredentials: true, syncHistory: true, syncClaudeMem: true }).partial(),
+  // Catalogue apps only (a vetted list): your own programs (apps.custom) download anything, so a repo cannot add them.
+  apps: Apps.pick({ install: true }).partial(),
+  claudeProfile: ClaudeProfile.pick({ enabled: true, overwrite: true, copyCredentials: true, syncHistory: true, syncClaudeMem: true }).partial(),
   hooks: external_exports.strictObject({ failFast: external_exports.boolean() }).partial()
 }).partial();
 
@@ -25500,6 +25682,15 @@ var AttachEndpoint = external_exports.strictObject({
   port: external_exports.number().int().min(1024).max(65535),
   token: Text(256)
 });
+var BootProgress = external_exports.strictObject({
+  step: external_exports.number().int().min(1).max(32),
+  steps: external_exports.number().int().min(1).max(32),
+  title: Text(120),
+  /** Being set up now; percent while it downloads (when the size is known). */
+  active: external_exports.array(external_exports.strictObject({ name: Text(64), percent: external_exports.number().int().min(0).max(100).optional() })).max(8),
+  done: external_exports.number().int().min(0).max(1e3),
+  total: external_exports.number().int().min(0).max(1e3)
+});
 var SandboxStatus = external_exports.object({
   launchId: Text(64),
   phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
@@ -25507,7 +25698,11 @@ var SandboxStatus = external_exports.object({
   updatedAt: Time,
   workspaceHost: Text(),
   guestWorkspace: Text(),
-  headless: external_exports.boolean()
+  headless: external_exports.boolean(),
+  /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
+  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
+  /** A malformed progress is dropped, never the status (the phase still counts). */
+  progress: BootProgress.optional().catch(void 0)
 });
 var Version = external_exports.strictObject({ spec: Text(128), source: Text(256) });
 var DatabasePlan = external_exports.strictObject({
@@ -25615,6 +25810,8 @@ var runPaths = (dataDir2) => {
     responses: path2.join(run2, "responses"),
     sessions: path2.join(run2, "sessions"),
     projects: path2.join(run2, "projects"),
+    /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
+    audit: path2.join(run2, "audit"),
     request: file3("requests"),
     response: file3("responses"),
     session: file3("sessions"),
@@ -25674,7 +25871,7 @@ var now = () => (/* @__PURE__ */ new Date()).toISOString();
 
 // src/guest/setup/claude.ts
 import fs6 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 import path7 from "node:path";
 
 // src/shared/safe-remove.ts
@@ -25738,6 +25935,7 @@ var safeRemove = (target, root) => {
 
 // src/guest/env.ts
 import fs5 from "node:fs";
+import os3 from "node:os";
 import path6 from "node:path";
 import { spawnSync } from "node:child_process";
 
@@ -25765,7 +25963,8 @@ var SYSTEM = {
   ipconfig: () => system32("ipconfig.exe"),
   robocopy: () => system32("Robocopy.exe"),
   shutdown: () => system32("shutdown.exe"),
-  dism: () => system32("Dism.exe")
+  dism: () => system32("Dism.exe"),
+  msiexec: () => system32("msiexec.exe")
 };
 
 // src/shared/download.ts
@@ -25797,6 +25996,10 @@ var checksumRequired = false;
 var setChecksumRequired = (on) => {
   checksumRequired = on;
 };
+var downloadWatcher = null;
+var watchDownloads = (watcher) => {
+  downloadWatcher = watcher;
+};
 var download = async (url2, destination, expected = null) => {
   const sums = typeof expected === "string" || expected === null ? { sha256: expected } : expected;
   if (checksumRequired && !sums.sha256?.trim() && !sums.sha512?.trim()) {
@@ -25809,8 +26012,25 @@ var download = async (url2, destination, expected = null) => {
     const want = sums[kind]?.trim().toLowerCase();
     return want ? [{ want, hash: crypto.createHash(kind) }] : [];
   });
+  const size = Number(response.headers.get("content-length")) || 0;
+  const report = size > 0 ? downloadWatcher?.() ?? null : null;
+  let received = 0;
+  let tenth = 0;
+  let reportedAt = Date.now();
   const tap = new Transform({ transform(chunk, _encoding, done) {
     for (const c of checks) c.hash.update(chunk);
+    if (report) {
+      received += chunk.length;
+      const now2 = Math.floor(received * 10 / size);
+      if (now2 !== tenth || Date.now() - reportedAt > 5e3) {
+        tenth = now2;
+        reportedAt = Date.now();
+        try {
+          report(Math.min(1, received / size));
+        } catch {
+        }
+      }
+    }
     done(null, chunk);
   } });
   const partial2 = destination + ".part";
@@ -25823,10 +26043,10 @@ var download = async (url2, destination, expected = null) => {
     fs4.rmSync(partial2, { force: true });
   }
 };
-var spawnAsync = (file3, args, options = {}) => new Promise((resolve, reject) => {
+var spawnAsync = (file3, args, options = {}) => new Promise((resolve2, reject) => {
   const child = spawn(file3, args, { stdio: "ignore", windowsHide: true, ...options });
   child.once("error", reject);
-  child.once("close", (code) => resolve(code ?? -1));
+  child.once("close", (code) => resolve2(code ?? -1));
 });
 var toAsset = (asset) => ({ url: asset.browser_download_url, name: asset.name, sha256: asset.digest?.startsWith("sha256:") ? asset.digest.slice(7) : null });
 var githubAsset = async (repo, pattern, searchOlder = false) => {
@@ -25958,15 +26178,25 @@ var mkdirp = (p) => {
   fs5.mkdirSync(p, { recursive: true });
   return p;
 };
-var setSandboxStatus = (phase, message) => {
+var progress;
+var setSandboxStatus = (phase, message, update) => {
   try {
+    if (update) progress = fitProgress({ step: 1, steps: 1, title: "", active: [], done: 0, total: 0, ...progress, ...update });
     writeJsonAtomicChecked(phase, message);
   } catch (e) {
     warn("Could not update sandbox status: " + errMsg(e));
   }
 };
+var fitProgress = (p) => ({
+  ...p,
+  title: p.title.slice(0, 120),
+  done: Math.min(p.done, 1e3),
+  total: Math.min(p.total, 1e3),
+  active: p.active.slice(0, 8).map((a) => ({ name: a.name.slice(0, 64), ...a.percent === void 0 ? {} : { percent: Math.max(0, Math.min(100, Math.round(a.percent))) } }))
+});
+var ownAddresses = () => Object.values(os3.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address).slice(0, 8);
 var writeJsonAtomicChecked = (phase, message) => {
-  writeJsonAtomic(run.sandbox, { launchId: session.launchId, phase, message, updatedAt: now(), workspaceHost: session.workspaceHost, guestWorkspace: workspace, headless: session.headless });
+  writeJsonAtomic(run.sandbox, { launchId: session.launchId, phase, message, updatedAt: now(), workspaceHost: session.workspaceHost, guestWorkspace: workspace, headless: session.headless, addresses: ownAddresses(), ...progress ? { progress } : {} });
 };
 var exec = (file3, args, options = {}) => {
   const result = spawnSync(file3, args, { stdio: "inherit", windowsHide: true, ...options });
@@ -26008,7 +26238,7 @@ var copyNode = (from, to) => {
 };
 
 // src/guest/setup/claude.ts
-var claudeMemPaths = { store: path7.join(stateDir, "claude-mem"), local: path7.join(os3.homedir(), ".claude-mem") };
+var claudeMemPaths = { store: path7.join(stateDir, "claude-mem"), local: path7.join(os4.homedir(), ".claude-mem") };
 var claudeMemEnabled = () => session.claudeProfile.syncClaudeMem && !dryRun;
 var databaseFingerprint = (dir) => {
   const parts = [];
@@ -26026,11 +26256,39 @@ var databaseFingerprint = (dir) => {
   return parts.sort().join("|");
 };
 var lastSaved = null;
+var SQLITE_HEADER = "SQLite format 3\0";
+var looksLikeSqlite = (file3) => {
+  if (!exists(file3)) return true;
+  const fd = fs6.openSync(file3, "r");
+  try {
+    const head = Buffer.alloc(16);
+    return fs6.readSync(fd, head, 0, 16, 0) === 16 && head.toString("latin1") === SQLITE_HEADER;
+  } finally {
+    fs6.closeSync(fd);
+  }
+};
+var MAX_BACKUPS = 3;
+var BACKUP_EVERY_MS = 6 * 3600 * 1e3;
+var keepBackup = (previous, dir) => {
+  if (!exists(previous)) return;
+  const backups = exists(dir) ? fs6.readdirSync(dir).filter((n) => /^\d{13}$/.test(n)).sort() : [];
+  const newest = Number(backups[backups.length - 1] ?? 0);
+  if (Date.now() - newest < BACKUP_EVERY_MS) {
+    fs6.rmSync(previous, { recursive: true, force: true });
+    return;
+  }
+  fs6.renameSync(previous, path7.join(mkdirp(dir), String(Date.now())));
+  for (const old of [...backups, String(Date.now())].slice(0, -MAX_BACKUPS)) fs6.rmSync(path7.join(dir, old), { recursive: true, force: true });
+};
 var saveClaudeMem = () => {
   if (!claudeMemEnabled() || !exists(claudeMemPaths.local)) return;
   const { store: store2, local } = claudeMemPaths;
   const fingerprint = databaseFingerprint(local);
   if (fingerprint === lastSaved && exists(store2)) return;
+  if (!looksLikeSqlite(path7.join(local, "claude-mem.db"))) {
+    warn("claude-mem: the local database does not look valid, so it was not saved over the stored copy (" + local + ").");
+    return;
+  }
   const incoming = store2 + ".incoming";
   const previous = store2 + ".previous";
   fs6.rmSync(incoming, { recursive: true, force: true });
@@ -26043,7 +26301,7 @@ var saveClaudeMem = () => {
     if (exists(previous)) fs6.renameSync(previous, store2);
     throw e;
   }
-  fs6.rmSync(previous, { recursive: true, force: true });
+  keepBackup(previous, store2 + ".backups");
   lastSaved = fingerprint;
 };
 
@@ -26051,12 +26309,13 @@ var saveClaudeMem = () => {
 import { spawn as spawn5 } from "node:child_process";
 
 // src/guest/daemon/project.ts
-import fs30 from "node:fs";
-import path44 from "node:path";
+import fs32 from "node:fs";
+import path45 from "node:path";
 
 // src/shared/projects.ts
 import path8 from "node:path";
 var PROJECTS_GUEST = "C:\\Projects";
+var WORKSPACES_GUEST = "C:\\Workspace";
 var norm2 = (p) => path8.win32.resolve(p).replace(/[\\/]+$/, "").toLowerCase();
 var isWithin = (parent, child) => {
   const a = norm2(parent);
@@ -26070,7 +26329,7 @@ var hubName = (hostDir, taken) => {
   for (let i = 2; ; i++) if (!used.has((base + "-" + i).toLowerCase())) return base + "-" + i;
 };
 var isBelow = (parent, child) => isWithin(parent, child) && norm2(parent) !== norm2(child);
-var insideProjects = (guestDir, roots = [], projectsDir = PROJECTS_GUEST) => isBelow(projectsDir, guestDir) || roots.some((r) => isWithin(r, guestDir));
+var insideProjects = (guestDir, roots = [], projectsDir = PROJECTS_GUEST) => isBelow(projectsDir, guestDir) || isBelow(WORKSPACES_GUEST, guestDir) || roots.some((r) => isWithin(r, guestDir));
 
 // src/guest/daemon/state.ts
 import path9 from "node:path";
@@ -26294,6 +26553,9 @@ var runHooksAsync = async (stage, env, target) => {
   }
 };
 
+// src/guest/toolchains/index.ts
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
+
 // src/guest/toolchains/common.ts
 import fs10 from "node:fs";
 import path14 from "node:path";
@@ -26387,11 +26649,11 @@ var remembered = () => Object.fromEntries(Object.entries(readState(resolvedFile(
 var FRESH_MS = 24 * 60 * 60 * 1e3;
 var offline = false;
 var networkError = (e) => /fetch failed|timed? ?out|aborted|ENOTFOUND|EAI_AGAIN|ECONN|ENETUNREACH|EHOSTUNREACH|HTTP 5\d\d|socket/i.test(errMsg(e) + " " + String(e?.cause ?? ""));
-var resolveCached = async (key, resolve) => {
+var resolveCached = async (key, resolve2) => {
   const cached2 = remembered()[key];
   if (cached2 && (offline || !session.provisioning.refresh && Date.now() - cached2.at < FRESH_MS)) return cached2.value;
   try {
-    const value = await resolve();
+    const value = await resolve2();
     fs10.mkdirSync(toolsDir, { recursive: true });
     writeJsonAtomic(resolvedFile(), { ...remembered(), [key]: { value, at: Date.now() } });
     return value;
@@ -26445,11 +26707,11 @@ var workspaceEntries = () => {
   return found;
 };
 var wanted = (setting, toolchain) => setting === "auto" ? projectUses(workspaceEntries(), MARKERS[toolchain] ?? []) : setting;
-var versionFromFiles = (files, parse3 = (t) => specFromVersionFile(t)) => {
+var versionFromFiles = (files, parse5 = (t) => specFromVersionFile(t)) => {
   for (const name of files) {
     const file3 = path14.join(projectWorkspace(), name);
     if (!exists(file3)) continue;
-    const spec = parse3(fs10.readFileSync(file3, "utf8"), name);
+    const spec = parse5(fs10.readFileSync(file3, "utf8"), name);
     if (spec) return { spec, source: name };
   }
   return null;
@@ -26472,16 +26734,280 @@ var installOnce = async (env, group, packages, install) => {
 };
 
 // src/guest/toolchains/plan.ts
-import path43 from "node:path";
+import fs31 from "node:fs";
+import os8 from "node:os";
+import path44 from "node:path";
+
+// src/guest/apps/index.ts
+import fs11 from "node:fs";
+import os5 from "node:os";
+import path15 from "node:path";
+
+// src/guest/apps/resolvers.ts
+var sumFor = (sums, file3) => sums.split(/\r?\n/).map((l) => /^([0-9a-f]{64})\s+\*?(.+)$/i.exec(l.trim())).find((m) => m && m[2].trim().endsWith(file3))?.[1].toLowerCase() ?? null;
+var firstHash = (text) => /\b([0-9a-f]{64})\b/i.exec(text)?.[1].toLowerCase() ?? null;
+var stripV = (tag) => tag.replace(/^v/, "");
+var RESOLVERS = {
+  sublime: async () => {
+    const { latest_version: build } = await fetchJson("https://www.sublimetext.com/updates/4/stable_update_check");
+    return { url: "https://download.sublimetext.com/sublime_text_build_" + build + "_x64.zip", fileName: "sublime_text_" + build + ".zip" };
+  },
+  pgadmin: async () => {
+    const versions = (await fetchJson("https://www.postgresql.org/versions.json")).filter((v) => v.supported);
+    const current = versions.find((v) => v.current) ?? versions[versions.length - 1];
+    const exact = current.major + "." + current.latestMinor;
+    return { url: "https://get.enterprisedb.com/postgresql/postgresql-" + exact + "-1-windows-x64-binaries.zip", fileName: "postgresql-" + exact + ".zip", members: ["pgsql/pgAdmin 4"] };
+  },
+  everything: async () => {
+    const page = await fetchText("https://www.voidtools.com/downloads/");
+    const version2 = /Everything-([\d.]+)\.x64\.zip/.exec(page)?.[1];
+    if (!version2) throw new Error("could not find the Everything download on voidtools.com");
+    const file3 = "Everything-" + version2 + ".x64.zip";
+    const sums = await fetchText("https://www.voidtools.com/Everything-" + version2 + ".sha256").catch(() => "");
+    return { url: "https://www.voidtools.com/" + file3, fileName: file3, sha256: sumFor(sums, file3) };
+  },
+  chrome: async () => {
+    const data = await fetchJson("https://googlechromelabs.github.io/chrome-for-testing/last-known-good-versions-with-downloads.json");
+    const hit = data.channels.Stable.downloads.chrome.find((d) => d.platform === "win64");
+    if (!hit) throw new Error("no win64 Chrome for Testing build listed");
+    return { url: hit.url, fileName: "chrome-win64.zip" };
+  },
+  firefox: async () => {
+    const { LATEST_FIREFOX_VERSION: v } = await fetchJson("https://product-details.mozilla.org/1.0/firefox_versions.json");
+    const base = "https://archive.mozilla.org/pub/firefox/releases/" + v + "/";
+    const sums = await fetchText(base + "SHA256SUMS");
+    return { url: base + "win64/en-US/Firefox%20Setup%20" + v + ".exe", fileName: "firefox-setup-" + v + ".exe", sha256: sumFor(sums, "win64/en-US/Firefox Setup " + v + ".exe") };
+  },
+  blender: async () => {
+    const releases = await fetchText("https://download.blender.org/release/");
+    const series = [...releases.matchAll(/href="Blender(\d+)\.(\d+)\/"/g)].map((m) => [Number(m[1]), Number(m[2])]).sort((a, b) => a[0] - b[0] || a[1] - b[1]).pop();
+    if (!series) throw new Error("could not list Blender releases");
+    const folder = "https://download.blender.org/release/Blender" + series[0] + "." + series[1] + "/";
+    const listing = await fetchText(folder);
+    const files = [...listing.matchAll(/href="(blender-([\d.]+)-windows-x64\.zip)"/g)].map((m) => ({ file: m[1], v: m[2].split(".").map(Number) }));
+    const latest = files.sort((a, b) => a.v[2] - b.v[2]).pop();
+    if (!latest) throw new Error("no Windows build in " + folder);
+    const sums = await fetchText(folder + "blender-" + latest.v.join(".") + ".sha256").catch(() => "");
+    return { url: folder + latest.file, fileName: latest.file, sha256: sumFor(sums, latest.file) };
+  },
+  kubectl: async () => {
+    const v = (await fetchText("https://dl.k8s.io/release/stable.txt")).trim();
+    const url2 = "https://dl.k8s.io/release/" + v + "/bin/windows/amd64/kubectl.exe";
+    return { url: url2, fileName: "kubectl.exe", sha256: firstHash(await fetchText(url2 + ".sha256")) };
+  },
+  helm: async () => {
+    const v = await latestGithubTag("helm/helm");
+    const url2 = "https://get.helm.sh/helm-" + v + "-windows-amd64.zip";
+    return { url: url2, fileName: "helm-" + v + ".zip", sha256: firstHash(await fetchText(url2 + ".sha256sum")) };
+  },
+  terraform: async () => {
+    const { current_version: v } = await fetchJson("https://checkpoint-api.hashicorp.com/v1/check/terraform");
+    const base = "https://releases.hashicorp.com/terraform/" + v + "/";
+    const file3 = "terraform_" + v + "_windows_amd64.zip";
+    return { url: base + file3, fileName: file3, sha256: sumFor(await fetchText(base + "terraform_" + v + "_SHA256SUMS"), file3) };
+  },
+  mitmproxy: async () => {
+    const v = stripV(await latestGithubTag("mitmproxy/mitmproxy"));
+    return { url: "https://downloads.mitmproxy.org/" + v + "/mitmproxy-" + v + "-windows-x86_64.zip", fileName: "mitmproxy-" + v + ".zip" };
+  },
+  sqlite: async () => {
+    const page = await fetchText("https://sqlite.org/download.html");
+    const file3 = /PRODUCT,[^,]+,(\d{4}\/sqlite-tools-win-x64-\d+\.zip),/.exec(page)?.[1];
+    if (!file3) throw new Error("could not find the sqlite tools download on sqlite.org");
+    return { url: "https://sqlite.org/" + file3, fileName: file3.split("/")[1] };
+  },
+  "7zip": async () => {
+    const asset = await githubAsset("ip7z/7zip", /^7z\d+-x64\.exe$/);
+    return { url: asset.url, fileName: asset.name, sha256: asset.sha256 };
+  }
+};
+
+// src/guest/apps/index.ts
+var MARKER = ".agent-sandbox-app";
+var PARALLEL = 3;
+var sevenZip = () => tool("apps", "7zip", "7z.exe");
+var resolve = async (entry) => {
+  const s = entry.source;
+  if ("github" in s) {
+    const a = await githubAsset(s.github, new RegExp(s.asset), true);
+    return { url: a.url, fileName: a.name, sha256: a.sha256 };
+  }
+  if ("url" in s) {
+    const name = decodeURIComponent(new URL(s.url).pathname.split("/").pop() || entry.id);
+    return { url: s.url, fileName: /\.\w{2,5}$/.test(name) ? name : name + ".zip" };
+  }
+  if ("resolve" in s && RESOLVERS[s.resolve]) return RESOLVERS[s.resolve]();
+  throw new Error("no download source for " + entry.name);
+};
+var findExe = (root, exe) => {
+  const match = exeMatcher(exe);
+  let queue = [root];
+  let seen = 0;
+  for (let depth = 0; depth < 7 && queue.length; depth++) {
+    const next = [];
+    for (const dir of queue) {
+      let entries2;
+      try {
+        entries2 = fs11.readdirSync(dir, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      const hit = entries2.find((e) => e.isFile() && match(e.name));
+      if (hit) return path15.join(dir, hit.name);
+      next.push(...entries2.filter((e) => e.isDirectory() && !e.isSymbolicLink()).map((e) => path15.join(dir, e.name)));
+      if ((seen += entries2.length) > 5e4) return null;
+    }
+    queue = next;
+  }
+  return null;
+};
+var installApp = async (entry, dest) => {
+  const work = stagingFolder(dest);
+  const out = path15.join(work, "out");
+  try {
+    if ("npm" in entry.source) {
+      const npmCli = path15.join(path15.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+      log("Installing " + entry.name + " (npm) ...");
+      await execAsync(process.execPath, [npmCli, "install", "--prefix", mkdirp(out), "--no-audit", "--no-fund", "--loglevel=error", entry.source.npm]);
+    } else {
+      const d = await resolve(entry);
+      log("Downloading " + entry.name + " (" + d.fileName + ", ~" + entry.size + " once) ...");
+      const file3 = path15.join(mkdirp(work), d.fileName.replace(/[\\/:*?"<>|]/g, "_"));
+      await download(d.url, file3, { sha256: d.sha256 ?? null });
+      await unpack(entry, file3, out, d);
+    }
+    fs11.writeFileSync(path15.join(out, MARKER), JSON.stringify({ id: entry.id, at: (/* @__PURE__ */ new Date()).toISOString() }));
+    moveIntoPlace(out, dest);
+  } finally {
+    safeRemove(work, path15.dirname(work));
+  }
+};
+var unpack = async (entry, file3, out, d) => {
+  if (entry.id === "7zip") {
+    const sevenZr = path15.join(path15.dirname(file3), "7zr.exe");
+    const zr = await githubAsset("ip7z/7zip", /^7zr\.exe$/);
+    await download(zr.url, sevenZr, zr.sha256);
+    await execAsync(sevenZr, ["x", "-y", "-o" + out, file3], { stdio: "ignore" });
+    return;
+  }
+  switch (entry.unpack ?? "archive") {
+    case "file": {
+      mkdirp(out);
+      fs11.renameSync(file3, path15.join(out, /^\//.test(entry.exe) ? path15.basename(file3) : entry.exe));
+      return;
+    }
+    case "nsis": {
+      if (!exists(sevenZip())) throw new Error("7-Zip is needed to unpack " + entry.name + " and could not be installed");
+      const raw = path15.join(path15.dirname(out), "raw");
+      await execAsync(sevenZip(), ["x", "-y", "-o" + raw, file3], { stdio: "ignore" });
+      const inner = findExe(raw, "/^app-64\\.7z$/");
+      if (inner) await execAsync(sevenZip(), ["x", "-y", "-o" + out, inner], { stdio: "ignore" });
+      else fs11.renameSync(raw, out);
+      return;
+    }
+    case "msi": {
+      mkdirp(out);
+      await execAsync(SYSTEM.msiexec(), ["/a", file3, "/qn", "TARGETDIR=" + out], { stdio: "ignore" });
+      return;
+    }
+    default:
+      await extractArchive(file3, out, d.members);
+  }
+};
+var afterInstall = async (entry, exe) => {
+  const dir = path15.dirname(exe);
+  if (entry.needs?.includes("mesa")) {
+    const mesa = tool("mesa", arch === "arm64" ? "arm64" : "x64");
+    for (const dll of ["opengl32.dll", "libgallium_wgl.dll", "dxil.dll"]) {
+      if (exists(path15.join(mesa, dll)) && !exists(path15.join(dir, dll))) fs11.copyFileSync(path15.join(mesa, dll), path15.join(dir, dll));
+    }
+  }
+  if (entry.id === "godot" && !exists(path15.join(dir, "._sc_"))) fs11.writeFileSync(path15.join(dir, "._sc_"), "");
+  if (entry.id === "sublime") mkdirp(path15.join(dir, "Data"));
+  if (entry.id === "sysinternals") {
+    for (const name of ["Process Explorer", "Process Monitor", "Autoruns", "TCPView", "PsExec", "PsList", "PsKill", "Handle", "ListDLLs", "Sigcheck", "Strings", "VMMap", "RAMMap", "DebugView", "Disk2vhd", "Du", "ZoomIt"]) {
+      await execAsync(SYSTEM.reg(), ["add", "HKCU\\Software\\Sysinternals\\" + name, "/v", "EulaAccepted", "/t", "REG_DWORD", "/d", "1", "/f"], { stdio: "ignore" }).catch(() => void 0);
+    }
+  }
+};
+var shortcuts = (apps) => {
+  if (!apps.length) return;
+  const q = (s) => "'" + s.replace(/'/g, "''") + "'";
+  const desktop = path15.join(os5.homedir(), "Desktop");
+  const start = path15.join(process.env.APPDATA ?? path15.join(os5.homedir(), "AppData", "Roaming"), "Microsoft", "Windows", "Start Menu", "Programs", "Sandbox apps");
+  const lines = ["$w = New-Object -ComObject WScript.Shell", "New-Item -ItemType Directory -Force -Path " + q(start) + " | Out-Null"];
+  for (const app of apps) {
+    for (const folder of [desktop, start]) {
+      const name = app.name.replace(/[\\/:*?"<>|]/g, "");
+      lines.push("$s = $w.CreateShortcut(" + q(path15.join(folder, name + ".lnk")) + "); $s.TargetPath = " + q(app.exe) + "; $s.WorkingDirectory = " + q(path15.dirname(app.exe)) + "; $s.Save()");
+    }
+  }
+  powershell(lines.join("\n"));
+};
+var setupApps = async (env, apps, o) => {
+  const { entries: entries2, skipped } = appsToInstall(apps, o.gitAccess);
+  for (const s of skipped) env.summary.push("app skipped: " + s);
+  if (dryRun) {
+    log("(dry run) would install apps: " + entries2.map((e) => e.name).join(", "));
+    return;
+  }
+  const gui = [];
+  const installed2 = [];
+  const one = async (entry) => {
+    try {
+      const dest = tool("apps", ...entry.id.split("/"));
+      if (!exists(path15.join(dest, MARKER)) || o.refresh) await installApp(entry, dest);
+      const exe = findExe(dest, entry.exe);
+      if (!exe) throw new Error(entry.exe + " not found in the download");
+      await afterInstall(entry, exe);
+      if (entry.cli || entry.id === "sysinternals") env.prepend.push(path15.dirname(exe));
+      if (!entry.cli) gui.push({ name: entry.name, exe });
+      installed2.push(entry.name);
+    } catch (e) {
+      warn(entry.name + " could not be installed and is skipped; the other apps are not affected. Reason: " + errMsg(e));
+      env.summary.push(entry.name + ": FAILED");
+    }
+  };
+  const [first, rest] = entries2[0]?.id === "7zip" ? [[entries2[0]], entries2.slice(1)] : [[], entries2];
+  for (const e of first) await one(e);
+  const queue = [...rest];
+  await Promise.all(Array.from({ length: Math.min(PARALLEL, queue.length) }, async () => {
+    for (let e = queue.shift(); e; e = queue.shift()) await one(e);
+  }));
+  try {
+    shortcuts(gui);
+  } catch (e) {
+    warn("App shortcuts could not be created: " + errMsg(e));
+  }
+  if (installed2.length) env.summary.push("apps: " + installed2.join(", ") + " (shortcuts on the desktop and in Start > Sandbox apps)");
+};
+
+// src/guest/helpers.ts
+import fs12 from "node:fs";
+import os6 from "node:os";
+import path16 from "node:path";
+import crypto2 from "node:crypto";
+import { spawnSync as spawnSync3 } from "node:child_process";
+var CSC = path16.join(process.env.WINDIR ?? "C:\\Windows", "Microsoft.NET", "Framework64", "v4.0.30319", "csc.exe");
+var sourceHash = (name) => crypto2.createHash("sha256").update(fs12.readFileSync(path16.join(launchDir, "sandbox", name + ".cs"))).digest("hex").slice(0, 12);
+var ensureCompiled = (name) => {
+  const exe = path16.join(os6.tmpdir(), "agent-sandbox", name + "-" + sourceHash(name) + ".exe");
+  if (exists(exe)) return exe;
+  if (!exists(CSC)) throw new Error("The .NET Framework C# compiler was not found at " + CSC + " (it ships with Windows 10/11).");
+  mkdirp(path16.dirname(exe));
+  const result = spawnSync3(CSC, ["/nologo", "/optimize", "/target:exe", "/out:" + exe, path16.join(launchDir, "sandbox", name + ".cs")], { encoding: "utf8", windowsHide: true });
+  if (result.status !== 0) throw new Error("Compiling " + name + " failed: " + ((result.stdout ?? "") + (result.stderr ?? "")).trim().slice(0, 1500));
+  return exe;
+};
 
 // src/guest/toolchains/databases/dynamodb.ts
-import fs13 from "node:fs";
-import path17 from "node:path";
+import fs15 from "node:fs";
+import path19 from "node:path";
 import { spawn as spawn3 } from "node:child_process";
 
 // src/guest/toolchains/java.ts
-import fs11 from "node:fs";
-import path15 from "node:path";
+import fs13 from "node:fs";
+import path17 from "node:path";
 var ADOPTIUM = "https://api.adoptium.net/v3";
 var MAVEN = "https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/";
 var temurin = async (major) => {
@@ -26500,19 +27026,19 @@ var setupJdk = async (env, config2) => {
   const { major, source } = await javaMajor(config2);
   const release = await resolveCached("java:" + major, async () => (await temurin(major)).release_name);
   const home = tool("java", release.replace(/[^A-Za-z0-9.-]/g, "_"));
-  if (!exists(path15.join(home, "bin", "java.exe"))) {
+  if (!exists(path17.join(home, "bin", "java.exe"))) {
     const asset = await temurin(major);
     log("Downloading Java " + release + " (JDK, ~200 MB once) ...");
     await installArchive(asset.binary.package.link, home, { sha256: asset.binary.package.checksum, locate: "release", fileName: asset.binary.package.name });
   }
   env.vars.JAVA_HOME = home;
-  env.prepend.push(path15.join(home, "bin"));
+  env.prepend.push(path17.join(home, "bin"));
   env.summary.push("java: " + release + " (Temurin, from " + source + ")");
 };
 var ensureJdk = async () => {
   const root = tool("java");
-  const installed2 = exists(root) ? fs11.readdirSync(root).filter((d) => exists(path15.join(root, d, "bin", "java.exe"))).sort((a, b) => b.localeCompare(a, void 0, { numeric: true })) : [];
-  if (installed2.length) return path15.join(root, installed2[0]);
+  const installed2 = exists(root) ? fs13.readdirSync(root).filter((d) => exists(path17.join(root, d, "bin", "java.exe"))).sort((a, b) => b.localeCompare(a, void 0, { numeric: true })) : [];
+  if (installed2.length) return path17.join(root, installed2[0]);
   const scratch = emptyEnv();
   await setupJdk(scratch, { enabled: true, version: "lts", maven: false, gradle: false });
   return scratch.vars.JAVA_HOME;
@@ -26523,29 +27049,29 @@ var setupMaven = async (env) => {
     return pickPackageVersion(versions, "3") ?? Promise.reject(new Error("No Maven 3 release found"));
   });
   const home = tool("maven", version2);
-  if (!exists(path15.join(home, "bin", "mvn.cmd"))) {
+  if (!exists(path17.join(home, "bin", "mvn.cmd"))) {
     const url2 = MAVEN + version2 + "/apache-maven-" + version2 + "-bin.zip";
     log("Downloading Maven " + version2 + " (~10 MB once) ...");
     await installArchive(url2, home, { sha512: (await fetchText(url2 + ".sha512")).trim().split(/\s+/)[0], locate: "LICENSE" });
   }
   const repo = tool("maven-repository");
   Object.assign(env.vars, { MAVEN_HOME: home, M2_HOME: home, MAVEN_OPTS: "-Dmaven.repo.local=" + repo });
-  env.prepend.push(path15.join(home, "bin"));
+  env.prepend.push(path17.join(home, "bin"));
   env.summary.push("maven: " + version2);
 };
 var setupGradle = async (env) => {
   const current = await fetchJson("https://services.gradle.org/versions/current").catch(() => null);
   const version2 = await resolveCached("gradle", async () => current?.version ?? Promise.reject(new Error("Gradle version lookup failed")));
   const home = tool("gradle", version2);
-  if (!exists(path15.join(home, "bin", "gradle.bat"))) {
+  if (!exists(path17.join(home, "bin", "gradle.bat"))) {
     if (!current || current.version !== version2) throw new Error("Gradle " + version2 + " is not installed and cannot be downloaded right now");
     log("Downloading Gradle " + version2 + " (~130 MB once) ...");
     await installArchive(current.downloadUrl, home, { sha256: (await fetchText(current.checksumUrl)).trim(), locate: "LICENSE", fileName: "gradle-" + version2 + ".zip" });
   }
   const userHome = tool("gradle-home");
-  fs11.mkdirSync(userHome, { recursive: true });
+  fs13.mkdirSync(userHome, { recursive: true });
   Object.assign(env.vars, { GRADLE_HOME: home, GRADLE_USER_HOME: userHome, GRADLE_OPTS: "-Dorg.gradle.vfs.watch=false" });
-  env.prepend.push(path15.join(home, "bin"));
+  env.prepend.push(path17.join(home, "bin"));
   env.summary.push("gradle: " + version2);
 };
 var setupJava = async (env, config2) => {
@@ -26564,20 +27090,20 @@ var setupJava = async (env, config2) => {
 
 // src/guest/ports.ts
 import net from "node:net";
-var freePort = () => new Promise((resolve, reject) => {
+var freePort = () => new Promise((resolve2, reject) => {
   const server = net.createServer();
   server.once("error", reject);
   server.listen(0, "127.0.0.1", () => {
     const { port } = server.address();
-    server.close(() => resolve(port));
+    server.close(() => resolve2(port));
   });
 });
-var portOpen = (port) => new Promise((resolve) => {
+var portOpen = (port) => new Promise((resolve2) => {
   const socket = net.connect({ host: "127.0.0.1", port }, () => {
     socket.destroy();
-    resolve(true);
+    resolve2(true);
   });
-  socket.once("error", () => resolve(false));
+  socket.once("error", () => resolve2(false));
 });
 var waitForPort = async (port, seconds) => {
   for (const end = Date.now() + seconds * 1e3; Date.now() < end; ) {
@@ -26588,26 +27114,26 @@ var waitForPort = async (port, seconds) => {
 };
 
 // src/guest/toolchains/databases/server.ts
-import fs12 from "node:fs";
-import path16 from "node:path";
+import fs14 from "node:fs";
+import path18 from "node:path";
 import { spawn as spawn2 } from "node:child_process";
-var dataFor = (name) => path16.join(dataDir, "databases", name);
+var dataFor = (name) => path18.join(dataDir, "databases", name);
 var startServer = async (name, exe, args, port) => {
   if (await portOpen(port)) throw new Error("port " + port + " is already in use (change databases." + name + ".port)");
-  const logFile2 = path16.join(logsDir, name + ".log");
-  const out = fs12.openSync(logFile2, "a");
+  const logFile2 = path18.join(logsDir, name + ".log");
+  const out = fs14.openSync(logFile2, "a");
   spawn2(exe, args, { detached: true, stdio: ["ignore", out, out], windowsHide: true }).unref();
-  fs12.closeSync(out);
+  fs14.closeSync(out);
   if (!await waitForPort(port, 60)) throw new Error(name + " did not start listening on port " + port + "; see " + logFile2);
 };
 var clearStaleLocks = async (dir, files, port) => {
   if (await portOpen(port)) return;
-  for (const f of files) fs12.rmSync(path16.join(dir, f), { force: true });
+  for (const f of files) fs14.rmSync(path18.join(dir, f), { force: true });
 };
 var createOnce = async (data, marker, create) => {
-  if (exists(path16.join(data, marker))) return;
+  if (exists(path18.join(data, marker))) return;
   const existed = exists(data);
-  mkdirp(path16.dirname(data));
+  mkdirp(path18.dirname(data));
   try {
     await create();
   } catch (e) {
@@ -26624,40 +27150,40 @@ var createOnce = async (data, marker, create) => {
 // src/guest/toolchains/databases/dynamodb.ts
 var DYNAMO_ZIP = "https://d1ni2b6xgvw0s0.cloudfront.net/v2.x/dynamodb_local_latest.zip";
 var setupDynamo = async (env, plan2) => {
-  const java = path17.join(await ensureJdk(), "bin", "java.exe");
+  const java = path19.join(await ensureJdk(), "bin", "java.exe");
   const home = tool("dynamodb-local");
-  if (!exists(path17.join(home, "DynamoDBLocal.jar"))) {
+  if (!exists(path19.join(home, "DynamoDBLocal.jar"))) {
     log("Downloading DynamoDB Local (~60 MB once) ...");
     const sha256 = (await fetchText(DYNAMO_ZIP + ".sha256")).trim().split(/\s+/)[0];
     await installArchive(DYNAMO_ZIP, home, { sha256, locate: "DynamoDBLocal.jar", fileName: "dynamodb_local.zip" });
   }
   const data = mkdirp(dataFor("dynamodb"));
-  await startServer("dynamodb", java, ["-Djava.library.path=" + path17.join(home, "DynamoDBLocal_lib"), "-jar", path17.join(home, "DynamoDBLocal.jar"), "-sharedDb", "-dbPath", data, "-port", String(plan2.port)], plan2.port);
+  await startServer("dynamodb", java, ["-Djava.library.path=" + path19.join(home, "DynamoDBLocal_lib"), "-jar", path19.join(home, "DynamoDBLocal.jar"), "-sharedDb", "-dbPath", data, "-port", String(plan2.port)], plan2.port);
   const endpoint = "http://localhost:" + plan2.port;
   const aws = { AWS_ENDPOINT_URL_DYNAMODB: endpoint, DYNAMO_ENDPOINT: endpoint, AWS_ACCESS_KEY_ID: "local", AWS_SECRET_ACCESS_KEY: "local", AWS_REGION: "us-east-1", AWS_DEFAULT_REGION: "us-east-1" };
   Object.assign(env.vars, aws);
   env.summary.push("dynamodb (DynamoDB Local): " + endpoint + " (AWS SDKs use it automatically via AWS_ENDPOINT_URL_DYNAMODB; dummy credentials)");
   if (!plan2.adminPort) return;
   const prefix = tool("dynamodb-admin");
-  const script = path17.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
+  const script = path19.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
   if (!exists(script)) {
     log("Installing dynamodb-admin, the DynamoDB web UI (~20 MB once) ...");
-    const npmCli = path17.join(path17.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+    const npmCli = path19.join(path19.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
     await execAsync(process.execPath, [npmCli, "install", "--global", "--prefix", prefix, "dynamodb-admin", "--no-fund", "--no-audit"], { stdio: "ignore" });
   }
   if (await portOpen(plan2.adminPort)) {
     env.summary.push("dynamodb-admin: NOT started, port " + plan2.adminPort + " is in use (change databases.dynamodb.adminPort)");
     return;
   }
-  const out = fs13.openSync(path17.join(logsDir, "dynamodb-admin.log"), "a");
+  const out = fs15.openSync(path19.join(logsDir, "dynamodb-admin.log"), "a");
   spawn3(process.execPath, [script, "--port", String(plan2.adminPort), "--dynamo-endpoint", endpoint, "--skip-default-credentials"], { detached: true, stdio: ["ignore", out, out], windowsHide: true, env: { ...process.env, ...aws } }).unref();
-  fs13.closeSync(out);
-  if (!await waitForPort(plan2.adminPort, 30)) throw new Error("dynamodb-admin did not start; see " + path17.join(logsDir, "dynamodb-admin.log"));
+  fs15.closeSync(out);
+  if (!await waitForPort(plan2.adminPort, 30)) throw new Error("dynamodb-admin did not start; see " + path19.join(logsDir, "dynamodb-admin.log"));
   env.summary.push("dynamodb-admin: http://localhost:" + plan2.adminPort + " (browse and edit tables in the sandbox's browser)");
 };
 
 // src/guest/toolchains/databases/mongodb.ts
-import path18 from "node:path";
+import path20 from "node:path";
 var setupMongo = async (env, plan2) => {
   const find = async () => {
     const { versions } = await fetchJson("https://downloads.mongodb.org/full.json");
@@ -26668,24 +27194,24 @@ var setupMongo = async (env, plan2) => {
   };
   const version2 = await resolveCached("mongodb:" + plan2.version, async () => (await find()).version);
   const home = tool("mongodb", version2);
-  if (!exists(path18.join(home, "bin", "mongod.exe"))) {
+  if (!exists(path20.join(home, "bin", "mongod.exe"))) {
     const { archive } = await find();
     log("Downloading MongoDB " + version2 + " (~400 MB once) ...");
     await installArchive(archive.url, home, { sha256: archive.sha256, locate: "mongod.exe", up: 1 });
   }
   const shell = tool("mongosh");
-  if (!exists(path18.join(shell, "mongosh.exe"))) {
+  if (!exists(path20.join(shell, "mongosh.exe"))) {
     await installFromGithub("mongodb-js/mongosh", /^mongosh-[\d.]+-win32-x64\.zip$/, { dest: shell, what: "mongosh, the MongoDB shell (~50 MB once)", locate: "mongosh.exe" });
   }
   const data = mkdirp(dataFor("mongodb"));
   await clearStaleLocks(data, ["mongod.lock"], plan2.port);
-  await startServer("mongodb", path18.join(home, "bin", "mongod.exe"), ["--dbpath", data, "--bind_ip", "127.0.0.1", "--port", String(plan2.port)], plan2.port);
-  env.prepend.push(path18.join(home, "bin"), shell);
+  await startServer("mongodb", path20.join(home, "bin", "mongod.exe"), ["--dbpath", data, "--bind_ip", "127.0.0.1", "--port", String(plan2.port)], plan2.port);
+  env.prepend.push(path20.join(home, "bin"), shell);
   env.summary.push("mongodb " + version2 + ": mongodb://127.0.0.1:" + plan2.port + " (mongosh on PATH)");
 };
 
 // src/guest/toolchains/databases/mysql.ts
-import path19 from "node:path";
+import path21 from "node:path";
 var MARIA = "https://downloads.mariadb.org/rest-api/mariadb/";
 var setupMysql = async (env, plan2) => {
   const series = await resolveCached("mariadb:" + plan2.version, async () => {
@@ -26701,8 +27227,8 @@ var setupMysql = async (env, plan2) => {
   };
   const version2 = await resolveCached("mariadb-version:" + series, async () => (await latest()).version);
   const home = tool("mariadb", version2);
-  const bin = path19.join(home, "bin");
-  if (!exists(path19.join(bin, "mariadbd.exe"))) {
+  const bin = path21.join(home, "bin");
+  if (!exists(path21.join(bin, "mariadbd.exe"))) {
     const { zip } = await latest();
     log("Downloading MariaDB " + version2 + " (~90 MB once) ...");
     await installArchive(zip.file_download_url.replace(/^http:/, "https:"), home, { sha256: zip.checksum?.sha256sum ?? null, locate: "mariadbd.exe", up: 1, fileName: zip.file_name });
@@ -26710,16 +27236,16 @@ var setupMysql = async (env, plan2) => {
   const data = dataFor("mariadb");
   await createOnce(data, "mysql", async () => {
     log("Creating the MariaDB database (first start) ...");
-    await execAsync(path19.join(bin, "mariadb-install-db.exe"), ["--datadir=" + data, "--port=" + plan2.port], { stdio: "ignore" });
+    await execAsync(path21.join(bin, "mariadb-install-db.exe"), ["--datadir=" + data, "--port=" + plan2.port], { stdio: "ignore" });
   });
-  await startServer("mysql", path19.join(bin, "mariadbd.exe"), ["--datadir=" + data, "--port=" + plan2.port, "--bind-address=127.0.0.1", "--console"], plan2.port);
+  await startServer("mysql", path21.join(bin, "mariadbd.exe"), ["--datadir=" + data, "--port=" + plan2.port, "--bind-address=127.0.0.1", "--console"], plan2.port);
   Object.assign(env.vars, { MYSQL_HOST: "127.0.0.1", MYSQL_TCP_PORT: String(plan2.port) });
   env.prepend.push(bin);
   env.summary.push("mysql (MariaDB " + version2 + "): 127.0.0.1:" + plan2.port + ", user root, no password (mysql://root@127.0.0.1:" + plan2.port + ")");
 };
 
 // src/guest/toolchains/databases/postgres.ts
-import path20 from "node:path";
+import path22 from "node:path";
 var postgresData = (version2) => dataFor("postgres-" + version2.split(".")[0]);
 var setupPostgres = async (env, plan2) => {
   const exact = await resolveCached("postgres:" + plan2.version, async () => {
@@ -26728,8 +27254,8 @@ var setupPostgres = async (env, plan2) => {
     return hit ? hit.major + "." + hit.latestMinor : Promise.reject(new Error("No supported PostgreSQL " + plan2.version));
   });
   const home = tool("postgres", exact);
-  const bin = path20.join(home, "bin");
-  if (!exists(path20.join(bin, "pg_ctl.exe"))) {
+  const bin = path22.join(home, "bin");
+  if (!exists(path22.join(bin, "pg_ctl.exe"))) {
     log("Downloading PostgreSQL " + exact + " (~330 MB once) ...");
     await installArchive("https://get.enterprisedb.com/postgresql/postgresql-" + exact + "-1-windows-x64-binaries.zip", home, {
       locate: "pg_ctl.exe",
@@ -26741,25 +27267,25 @@ var setupPostgres = async (env, plan2) => {
   const data = postgresData(exact);
   await createOnce(data, "PG_VERSION", async () => {
     log("Creating the PostgreSQL database (first start) ...");
-    await execAsync(path20.join(bin, "initdb.exe"), ["-D", data, "-U", "postgres", "-A", "trust", "-E", "UTF8", "--locale=C"], { stdio: "ignore" });
+    await execAsync(path22.join(bin, "initdb.exe"), ["-D", data, "-U", "postgres", "-A", "trust", "-E", "UTF8", "--locale=C"], { stdio: "ignore" });
   });
   if (await portOpen(plan2.port)) throw new Error("port " + plan2.port + " is already in use (change databases.postgres.port)");
   await clearStaleLocks(data, ["postmaster.pid"], plan2.port);
-  await execAsync(path20.join(bin, "pg_ctl.exe"), ["start", "-D", data, "-w", "-t", "60", "-l", path20.join(logsDir, "postgres.log"), "-o", "-p " + plan2.port + " -c listen_addresses=localhost"], { stdio: "ignore" });
+  await execAsync(path22.join(bin, "pg_ctl.exe"), ["start", "-D", data, "-w", "-t", "60", "-l", path22.join(logsDir, "postgres.log"), "-o", "-p " + plan2.port + " -c listen_addresses=localhost"], { stdio: "ignore" });
   Object.assign(env.vars, { PGHOST: "localhost", PGPORT: String(plan2.port), PGUSER: "postgres" });
   env.prepend.push(bin);
   env.summary.push("postgres " + exact + ": localhost:" + plan2.port + ", user postgres, no password (postgres://postgres@localhost:" + plan2.port + "/postgres)");
 };
 
 // src/guest/toolchains/databases/redis.ts
-import path21 from "node:path";
+import path23 from "node:path";
 var setupRedis = async (env, plan2) => {
   const home = tool("redis");
-  if (!exists(path21.join(home, "redis-server.exe"))) {
+  if (!exists(path23.join(home, "redis-server.exe"))) {
     await installFromGithub("redis-windows/redis-windows", /^Redis-[\d.]+-Windows-x64-msys2\.zip$/, { dest: home, what: (a) => "Redis (" + a.name + ", ~10 MB once)", locate: "redis-server.exe" });
   }
   const data = mkdirp(dataFor("redis"));
-  await startServer("redis", path21.join(home, "redis-server.exe"), ["--port", String(plan2.port), "--bind", "127.0.0.1", "--dir", data.replace(/\\/g, "/"), "--appendonly", "yes"], plan2.port);
+  await startServer("redis", path23.join(home, "redis-server.exe"), ["--port", String(plan2.port), "--bind", "127.0.0.1", "--dir", data.replace(/\\/g, "/"), "--appendonly", "yes"], plan2.port);
   env.prepend.push(home);
   env.summary.push("redis: redis://127.0.0.1:" + plan2.port + " (redis-cli on PATH)");
 };
@@ -26784,28 +27310,8 @@ var setupDatabase = async (env, plan2) => {
 };
 
 // src/guest/toolchains/git.ts
-import fs15 from "node:fs";
-import path23 from "node:path";
-
-// src/guest/helpers.ts
-import fs14 from "node:fs";
-import os4 from "node:os";
-import path22 from "node:path";
-import crypto2 from "node:crypto";
-import { spawnSync as spawnSync3 } from "node:child_process";
-var CSC = path22.join(process.env.WINDIR ?? "C:\\Windows", "Microsoft.NET", "Framework64", "v4.0.30319", "csc.exe");
-var sourceHash = (name) => crypto2.createHash("sha256").update(fs14.readFileSync(path22.join(launchDir, "sandbox", name + ".cs"))).digest("hex").slice(0, 12);
-var ensureCompiled = (name) => {
-  const exe = path22.join(os4.tmpdir(), "agent-sandbox", name + "-" + sourceHash(name) + ".exe");
-  if (exists(exe)) return exe;
-  if (!exists(CSC)) throw new Error("The .NET Framework C# compiler was not found at " + CSC + " (it ships with Windows 10/11).");
-  mkdirp(path22.dirname(exe));
-  const result = spawnSync3(CSC, ["/nologo", "/optimize", "/target:exe", "/out:" + exe, path22.join(launchDir, "sandbox", name + ".cs")], { encoding: "utf8", windowsHide: true });
-  if (result.status !== 0) throw new Error("Compiling " + name + " failed: " + ((result.stdout ?? "") + (result.stderr ?? "")).trim().slice(0, 1500));
-  return exe;
-};
-
-// src/guest/toolchains/git.ts
+import fs16 from "node:fs";
+import path24 from "node:path";
 var BLOCKED_HOOKS = ["pre-commit", "commit-msg", "pre-merge-commit", "pre-push", "pre-rebase", "pre-applypatch", "applypatch-msg"];
 var posix = (p) => p.replace(/\\/g, "/");
 var installPortableGit = async (root) => {
@@ -26816,50 +27322,50 @@ var installPortableGit = async (root) => {
     await download(asset.url, sfx, asset.sha256);
     await execAsync(sfx, ["-o" + root, "-y"], { stdio: "ignore" });
   } finally {
-    fs15.rmSync(sfx, { force: true });
+    fs16.rmSync(sfx, { force: true });
   }
 };
 var installGuard = (env, access, realGit) => {
   const dir = mkdirp(tool("gitguard"));
-  const guard = path23.join(launchDir, "runtime", "gitguard.js");
-  if (duringSession() && (exists(path23.join(dir, "git.exe")) || exists(path23.join(dir, "git.cmd")))) {
+  const guard = path24.join(launchDir, "runtime", "gitguard.js");
+  if (duringSession() && (exists(path24.join(dir, "git.exe")) || exists(path24.join(dir, "git.cmd")))) {
   } else try {
-    fs15.copyFileSync(ensureCompiled("gitshim"), path23.join(dir, "git.exe"));
-    fs15.rmSync(path23.join(dir, "git.cmd"), { force: true });
+    fs16.copyFileSync(ensureCompiled("gitshim"), path24.join(dir, "git.exe"));
+    fs16.rmSync(path24.join(dir, "git.cmd"), { force: true });
   } catch (e) {
     warn("git guard: falling back to git.cmd (" + errMsg(e) + ")");
-    fs15.writeFileSync(path23.join(dir, "git.cmd"), '@"' + process.execPath + '" "' + guard + '" %*\r\n');
+    fs16.writeFileSync(path24.join(dir, "git.cmd"), '@"' + process.execPath + '" "' + guard + '" %*\r\n');
   }
-  fs15.writeFileSync(path23.join(dir, "bashenv.sh"), 'git() { "' + posix(process.execPath) + '" "' + posix(guard) + '" "$@"; }\nexport -f git\n');
+  fs16.writeFileSync(path24.join(dir, "bashenv.sh"), 'git() { "' + posix(process.execPath) + '" "' + posix(guard) + '" "$@"; }\nexport -f git\n');
   env.prepend.unshift(dir);
   Object.assign(env.vars, {
     AGENT_GIT_ACCESS: access,
     AGENT_REAL_GIT: access === "readonly" ? realGit : "",
     AGENT_GUARD_NODE: process.execPath,
     AGENT_GUARD_SCRIPT: guard,
-    BASH_ENV: posix(path23.join(dir, "bashenv.sh"))
+    BASH_ENV: posix(path24.join(dir, "bashenv.sh"))
   });
   if (access === "readonly") {
-    const hooks = mkdirp(path23.join(dir, "hooks"));
-    for (const hook of BLOCKED_HOOKS) fs15.writeFileSync(path23.join(hooks, hook), '#!/bin/sh\necho "git is read-only in this sandbox: ' + hook + ' refused." >&2\nexit 1\n');
+    const hooks = mkdirp(path24.join(dir, "hooks"));
+    for (const hook of BLOCKED_HOOKS) fs16.writeFileSync(path24.join(hooks, hook), '#!/bin/sh\necho "git is read-only in this sandbox: ' + hook + ' refused." >&2\nexit 1\n');
     Object.assign(env.vars, { GIT_CONFIG_COUNT: "1", GIT_CONFIG_KEY_0: "core.hooksPath", GIT_CONFIG_VALUE_0: posix(hooks) });
   } else {
-    env.vars.GIT_DIR = path23.join(dataDir, "git-disabled");
+    env.vars.GIT_DIR = path24.join(dataDir, "git-disabled");
   }
 };
 var pointAtOwnCertificates = (root) => {
-  const config2 = path23.join(root, "etc", "gitconfig");
-  const bundle = path23.join(root, "mingw64", "etc", "ssl", "certs", "ca-bundle.crt");
+  const config2 = path24.join(root, "etc", "gitconfig");
+  const bundle = path24.join(root, "mingw64", "etc", "ssl", "certs", "ca-bundle.crt");
   if (!exists(config2) || !exists(bundle)) return;
-  const text = fs15.readFileSync(config2, "utf8");
+  const text = fs16.readFileSync(config2, "utf8");
   const fixed = text.replace(/^(\s*sslCAInfo\s*=\s*).*$/gim, (_m, key) => key + posix(bundle));
-  if (fixed !== text) fs15.writeFileSync(config2, fixed);
+  if (fixed !== text) fs16.writeFileSync(config2, fixed);
 };
 var setupGit = async (env, hostCopy, refresh, access) => {
   const root = tool("git");
-  const bash = path23.join(root, "bin", "bash.exe");
-  const gitExe = path23.join(root, "cmd", "git.exe");
-  const hostGit = path23.join(hostToolsDir, "git");
+  const bash = path24.join(root, "bin", "bash.exe");
+  const gitExe = path24.join(root, "cmd", "git.exe");
+  const hostGit = path24.join(hostToolsDir, "git");
   if (exists(root) && !exists(bash)) {
     log("Replacing the old MinGit (no bash) with full Git for Windows.");
     safeRemove(root, toolsDir);
@@ -26871,11 +27377,11 @@ var setupGit = async (env, hostCopy, refresh, access) => {
     }
     const work = stagingFolder(root);
     try {
-      if (hostCopy && exists(path23.join(hostGit, "bin", "bash.exe"))) {
+      if (hostCopy && exists(path24.join(hostGit, "bin", "bash.exe"))) {
         log("Copying Git for Windows from this PC ...");
         robocopy(hostGit, work);
       } else await installPortableGit(work);
-      if (!exists(path23.join(work, "bin", "bash.exe"))) throw new Error("bash.exe missing after installing Git");
+      if (!exists(path24.join(work, "bin", "bash.exe"))) throw new Error("bash.exe missing after installing Git");
       moveIntoPlace(work, root);
     } finally {
       safeRemove(work, toolsDir);
@@ -26884,10 +27390,10 @@ var setupGit = async (env, hostCopy, refresh, access) => {
   if (!exists(bash)) throw new Error("bash.exe missing after installing Git");
   pointAtOwnCertificates(root);
   env.vars.CLAUDE_CODE_GIT_BASH_PATH = bash;
-  env.append.push(path23.join(root, "usr", "bin"));
+  env.append.push(path24.join(root, "usr", "bin"));
   const version2 = execOutput(gitExe, ["--version"]).replace(/^git version /, "");
   if (access === "full") {
-    env.prepend.push(path23.join(root, "cmd"));
+    env.prepend.push(path24.join(root, "cmd"));
     env.summary.push("git: " + version2);
     return;
   }
@@ -26896,8 +27402,8 @@ var setupGit = async (env, hostCopy, refresh, access) => {
 };
 
 // src/guest/toolchains/go.ts
-import fs16 from "node:fs";
-import path24 from "node:path";
+import fs17 from "node:fs";
+import path25 from "node:path";
 var findRelease = async (spec) => pickGoRelease(await fetchJson("https://go.dev/dl/?mode=json&include=all"), spec) ?? Promise.reject(new Error('No Go release matches "' + spec + '"'));
 var setupGo = async (env, config2) => {
   if (dryRun) {
@@ -26906,7 +27412,7 @@ var setupGo = async (env, config2) => {
   }
   const version2 = await resolveCached("go:" + config2.version, async () => (await findRelease(config2.version)).version);
   const root = tool("go", version2);
-  if (!exists(path24.join(root, "bin", "go.exe"))) {
+  if (!exists(path25.join(root, "bin", "go.exe"))) {
     const goArch = arch === "arm64" ? "arm64" : "amd64";
     const file3 = (await findRelease(version2)).files.find((f) => f.os === "windows" && f.arch === goArch && f.kind === "archive");
     if (!file3) throw new Error(version2 + " has no Windows " + goArch + " zip");
@@ -26914,18 +27420,18 @@ var setupGo = async (env, config2) => {
     await installArchive("https://go.dev/dl/" + file3.filename, root, { sha256: file3.sha256, locate: "VERSION", fileName: file3.filename });
   }
   const GOPATH = tool("go-path");
-  const vars = { GOROOT: root, GOPATH, GOBIN: path24.join(GOPATH, "bin"), GOMODCACHE: path24.join(GOPATH, "pkg", "mod"), GOCACHE: tool("go-cache"), GOTOOLCHAIN: "auto", GOTELEMETRY: "off" };
-  fs16.mkdirSync(vars.GOBIN, { recursive: true });
+  const vars = { GOROOT: root, GOPATH, GOBIN: path25.join(GOPATH, "bin"), GOMODCACHE: path25.join(GOPATH, "pkg", "mod"), GOCACHE: tool("go-cache"), GOTOOLCHAIN: "auto", GOTELEMETRY: "off" };
+  fs17.mkdirSync(vars.GOBIN, { recursive: true });
   Object.assign(env.vars, vars);
-  env.prepend.push(path24.join(root, "bin"), vars.GOBIN);
-  const go = path24.join(root, "bin", "go.exe");
+  env.prepend.push(path25.join(root, "bin"), vars.GOBIN);
+  const go = path25.join(root, "bin", "go.exe");
   env.summary.push("go: " + versionOf(go, ["version"]));
   await installOnce(env, "go", config2.tools, (pkg) => execAsync(go, ["install", pkg.includes("@") ? pkg : pkg + "@latest"], { env: { ...process.env, ...vars } }));
 };
 
 // src/guest/toolchains/cli.ts
-import fs17 from "node:fs";
-import path26 from "node:path";
+import fs18 from "node:fs";
+import path27 from "node:path";
 
 // src/guest/toolchains/catalogue.ts
 var pwshAsset = (arch2) => arch2 === "arm64" ? /^PowerShell-\d+\.\d+\.\d+-win-arm64\.zip$/ : /^PowerShell-\d+\.\d+\.\d+-win-x64\.zip$/;
@@ -26950,14 +27456,14 @@ var decideCli = (settings, ctx) => {
 };
 
 // src/guest/toolchains/runtimes.ts
-import path25 from "node:path";
+import path26 from "node:path";
 var setupSingleExe = async (env, name, repo, pattern, exeName, dir, options = {}) => {
   if (dryRun) {
     log("(dry run) would provision " + name);
     return;
   }
-  const bin = options.subdir ? path25.join(dir, options.subdir) : dir;
-  const exe = path25.join(bin, exeName);
+  const bin = options.subdir ? path26.join(dir, options.subdir) : dir;
+  const exe = path26.join(bin, exeName);
   if (!exists(exe) || options.refresh) {
     const size = options.size ? ", ~" + options.size : "";
     await installFromGithub(repo, pattern, { dest: dir, what: (a) => name + " (" + a.name + size + " once)", ...options.subdir ? {} : { locate: exeName } });
@@ -26968,7 +27474,7 @@ var setupSingleExe = async (env, name, repo, pattern, exeName, dir, options = {}
 };
 var setupBun = async (env) => {
   await setupSingleExe(env, "bun", "oven-sh/bun", arch === "arm64" ? /^bun-windows-aarch64\.zip$/ : /^bun-windows-x64\.zip$/, "bun.exe", tool("bun", "bin"), { size: "35 MB" });
-  Object.assign(env.vars, { BUN_INSTALL: tool("bun"), BUN_INSTALL_CACHE_DIR: path25.join(localDir, "bun-cache"), BUN_TMPDIR: path25.join(localDir, "bun-tmp") });
+  Object.assign(env.vars, { BUN_INSTALL: tool("bun"), BUN_INSTALL_CACHE_DIR: path26.join(localDir, "bun-cache"), BUN_TMPDIR: path26.join(localDir, "bun-tmp") });
 };
 var setupDeno = async (env) => {
   await setupSingleExe(env, "deno", "denoland/deno", arch === "arm64" ? /^deno-aarch64-pc-windows-msvc[.]zip$/ : /^deno-x86_64-pc-windows-msvc[.]zip$/, "deno.exe", tool("deno", "bin"), { size: "40 MB" });
@@ -26982,7 +27488,7 @@ var setupUv = async (env) => {
 };
 
 // src/guest/toolchains/cli.ts
-var ghConfigDir = () => path26.join(stateDir, "gh");
+var ghConfigDir = () => path27.join(stateDir, "gh");
 var toolVars = {
   gh: () => ({ GH_CONFIG_DIR: mkdirp(ghConfigDir()), GH_NO_UPDATE_NOTIFIER: "1", GH_NO_EXTENSION_UPDATE_NOTIFIER: "1" })
 };
@@ -26992,16 +27498,16 @@ var shimOpenssl = (env) => {
     return;
   }
   const shims = mkdirp(tool("shims"));
-  fs17.copyFileSync(ensureCompiled("openssl"), path26.join(shims, "openssl.exe"));
-  fs17.rmSync(path26.join(shims, "openssl.cmd"), { force: true });
+  fs18.copyFileSync(ensureCompiled("openssl"), path27.join(shims, "openssl.exe"));
+  fs18.rmSync(path27.join(shims, "openssl.cmd"), { force: true });
   env.prepend.push(shims);
   env.summary.push("openssl: Git for Windows' copy");
 };
 var setupCli = async (env, settings, gitAccess, refresh = false) => {
-  const decisions = decideCli(settings, { gitAccess, hasGithubDir: exists(path26.join(projectWorkspace(), ".github")) });
+  const decisions = decideCli(settings, { gitAccess, hasGithubDir: exists(path27.join(projectWorkspace(), ".github")) });
   if (settings.gh && !decisions.gh.on) {
     env.summary.push("gh: off (" + decisions.gh.reason + ")");
-    if (exists(path26.join(ghConfigDir(), "hosts.yml"))) warn('gh is off (git access is not "full"), but an earlier gh login is still stored in ' + ghConfigDir() + " and readable by the agent. Run `gh auth logout` in a full-access sandbox, or delete that folder.");
+    if (exists(path27.join(ghConfigDir(), "hosts.yml"))) warn('gh is off (git access is not "full"), but an earlier gh login is still stored in ' + ghConfigDir() + " and readable by the agent. Run `gh auth logout` in a full-access sandbox, or delete that folder.");
   }
   if (dryRun) {
     log("(dry run) would provision CLI tools: " + Object.entries(decisions).filter(([, d]) => d.on).map(([n]) => n).join(", "));
@@ -27029,11 +27535,11 @@ var setupCli = async (env, settings, gitAccess, refresh = false) => {
 };
 
 // src/guest/toolchains/managers.ts
-import fs18 from "node:fs";
-import path27 from "node:path";
+import fs19 from "node:fs";
+import path28 from "node:path";
 var voltaPins = () => {
   try {
-    const pkg = JSON.parse(fs18.readFileSync(path27.join(projectWorkspace(), "package.json"), "utf8").replace(/^/, ""));
+    const pkg = JSON.parse(fs19.readFileSync(path28.join(projectWorkspace(), "package.json"), "utf8").replace(/^/, ""));
     return Object.fromEntries(Object.entries(pkg.volta ?? {}).filter((e) => ["node", "npm", "yarn", "pnpm"].includes(e[0]) && typeof e[1] === "string"));
   } catch {
     return {};
@@ -27047,22 +27553,22 @@ var setupVolta = async (env) => {
     return;
   }
   const dir = tool("volta");
-  if (!exists(path27.join(dir, "volta.exe"))) {
+  if (!exists(path28.join(dir, "volta.exe"))) {
     const pattern = arch === "arm64" ? /^volta-[\d.]+-windows-arm64\.zip$/ : /^volta-[\d.]+-windows\.zip$/;
     await installFromGithub("volta-cli/volta", pattern, { dest: dir, what: "Volta (~15 MB once)", locate: "volta.exe" });
   }
   for (const shim3 of ["node", "npm", "npx", "pnpm", "pnpx", "yarn", "yarnpkg"]) {
-    const target = path27.join(dir, shim3 + ".exe");
-    if (!exists(target)) fs18.copyFileSync(path27.join(dir, "volta-shim.exe"), target);
+    const target = path28.join(dir, shim3 + ".exe");
+    if (!exists(target)) fs19.copyFileSync(path28.join(dir, "volta-shim.exe"), target);
   }
   const home = mkdirp(tool("volta-home"));
-  const shims = mkdirp(path27.join(home, "bin"));
+  const shims = mkdirp(path28.join(home, "bin"));
   const vars = { VOLTA_HOME: home, VOLTA_FEATURE_PNPM: "1" };
   Object.assign(env.vars, vars);
   const pins = voltaPins();
   if (Object.keys(pins).length) env.prepend.push(dir, shims);
   else env.append.push(dir, shims);
-  const volta = path27.join(dir, "volta.exe");
+  const volta = path28.join(dir, "volta.exe");
   for (const [toolName, version2] of Object.entries(pins)) {
     try {
       await execAsync(volta, ["install", toolName + "@" + version2], { env: { ...process.env, ...vars }, cwd: projectWorkspace(), stdio: "ignore" });
@@ -27080,22 +27586,22 @@ var setupPyenv = async (env) => {
     return;
   }
   const root = tool("pyenv", "pyenv-win");
-  if (!exists(path27.join(root, "bin", "pyenv.bat"))) {
+  if (!exists(path28.join(root, "bin", "pyenv.bat"))) {
     const tag = await resolveCached("pyenv-win", () => latestGithubTag("pyenv-win/pyenv-win"));
     log("Downloading pyenv-win " + tag + " (~5 MB once) ...");
     await installArchive("https://github.com/pyenv-win/pyenv-win/archive/refs/tags/" + encodeURIComponent(tag) + ".zip", root, { locate: "pyenv.bat", up: 1, fileName: "pyenv-win.zip" });
   }
-  const home = root + path27.sep;
+  const home = root + path28.sep;
   Object.assign(env.vars, { PYENV: home, PYENV_ROOT: home, PYENV_HOME: home });
-  env.append.push(path27.join(root, "bin"), path27.join(root, "shims"));
+  env.append.push(path28.join(root, "bin"), path28.join(root, "shims"));
   env.summary.push("pyenv-win: pyenv install <version> / pyenv local <version> (versions persist)");
 };
 
 // src/guest/toolchains/native/cpp.ts
-import path28 from "node:path";
+import path29 from "node:path";
 var setupCpp = async (env, config2) => {
   const bin = tool("mingw", "mingw64", "bin");
-  const gcc = path28.join(bin, "gcc.exe");
+  const gcc = path29.join(bin, "gcc.exe");
   if (dryRun) {
     log("(dry run) would provision MinGW-w64 GCC");
     return;
@@ -27107,27 +27613,27 @@ var setupCpp = async (env, config2) => {
   if (!exists(gcc)) throw new Error("gcc.exe missing after installing MinGW");
   env.append.unshift(bin);
   env.vars.CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER = gcc;
-  const cmake = versionOf(path28.join(bin, "cmake.exe"));
+  const cmake = versionOf(path29.join(bin, "cmake.exe"));
   if (cmakeTooOld(cmake)) warn("The bundled CMake " + cmake + " is older than " + CMAKE_FLOOR + ", which many projects need; set toolchains.cpp.enabled to refresh it, or install a newer CMake into C:\\AgentData\\tools\\bin.");
   env.summary.push("gcc: " + versionOf(gcc) + " (MinGW-w64, with cmake " + cmake + ", ninja, premake5)");
   if (config2.flexBison) await setupFlexBison(env);
 };
 var setupFlexBison = async (env) => {
   const dir = tool("winflexbison");
-  if (!exists(path28.join(dir, "win_bison.exe"))) {
+  if (!exists(path29.join(dir, "win_bison.exe"))) {
     await installFromGithub("lexxmark/winflexbison", /^win_flex_bison-[\d.]+\.zip$/, { dest: dir, what: "win_flex / win_bison (~1 MB once)", locate: "win_bison.exe" });
   }
   env.append.push(dir);
-  env.summary.push("win_flex/win_bison: " + versionOf(path28.join(dir, "win_bison.exe")));
+  env.summary.push("win_flex/win_bison: " + versionOf(path29.join(dir, "win_bison.exe")));
 };
 
 // src/guest/toolchains/native/dotnet.ts
-import fs19 from "node:fs";
-import path29 from "node:path";
+import fs20 from "node:fs";
+import path30 from "node:path";
 var DotnetMarker = external_exports.record(external_exports.string(), external_exports.boolean());
 var setupDotnet = async (env, config2, refresh) => {
   const root = tool("dotnet");
-  const marker = path29.join(root, ".agent-sandbox-installed.json");
+  const marker = path30.join(root, ".agent-sandbox-installed.json");
   const script = tool("dotnet-install.ps1");
   if (dryRun) {
     log("(dry run) would provision .NET SDK channels " + config2.channels.join(", "));
@@ -27135,10 +27641,10 @@ var setupDotnet = async (env, config2, refresh) => {
   }
   const recorded = DotnetMarker.safeParse(exists(marker) && !refresh ? readJsonFile(marker) : {});
   const done = recorded.success ? recorded.data : {};
-  const globalJson = path29.join(projectWorkspace(), "global.json");
+  const globalJson = path30.join(projectWorkspace(), "global.json");
   const installs = [
     ...config2.channels.map((c) => ["channel:" + c, ["-Channel", c]]),
-    ...exists(globalJson) ? [["global.json:" + fs19.readFileSync(globalJson, "utf8").replace(/\s+/g, ""), ["-JSonFile", globalJson]]] : []
+    ...exists(globalJson) ? [["global.json:" + fs20.readFileSync(globalJson, "utf8").replace(/\s+/g, ""), ["-JSonFile", globalJson]]] : []
   ];
   for (const [key, args] of installs.filter(([k]) => !done[k])) {
     await downloadFile("https://dot.net/v1/dotnet-install.ps1", script);
@@ -27149,10 +27655,10 @@ var setupDotnet = async (env, config2, refresh) => {
   }
   const home = mkdirp(tool("dotnet-home"));
   Object.assign(env.vars, { DOTNET_ROOT: root, DOTNET_CLI_HOME: home, DOTNET_CLI_TELEMETRY_OPTOUT: "1", DOTNET_NOLOGO: "1", DOTNET_SKIP_FIRST_TIME_EXPERIENCE: "1", NUGET_PACKAGES: tool("nuget", "packages") });
-  env.prepend.push(root, path29.join(home, ".dotnet", "tools"));
-  env.summary.push("dotnet: " + execOutput(path29.join(root, "dotnet.exe"), ["--list-sdks"]).split(/\r?\n/).map((l) => l.split(" ")[0]).filter(Boolean).join(", "));
-  const dotnet = path29.join(root, "dotnet.exe");
-  const dotnetEnv = { env: { ...process.env, ...env.vars, PATH: root + path29.delimiter + (process.env.PATH ?? "") } };
+  env.prepend.push(root, path30.join(home, ".dotnet", "tools"));
+  env.summary.push("dotnet: " + execOutput(path30.join(root, "dotnet.exe"), ["--list-sdks"]).split(/\r?\n/).map((l) => l.split(" ")[0]).filter(Boolean).join(", "));
+  const dotnet = path30.join(root, "dotnet.exe");
+  const dotnetEnv = { env: { ...process.env, ...env.vars, PATH: root + path30.delimiter + (process.env.PATH ?? "") } };
   await installOnce(env, "dotnet workload", config2.workloads, (w) => execAsync(dotnet, ["workload", "install", w, "--skip-manifest-update"], dotnetEnv));
   await installOnce(env, "dotnet tool", config2.tools, (t) => execAsync(dotnet, ["tool", "install", "--global", t], dotnetEnv));
   await setupFrameworkReferences(env, config2.frameworkTargets);
@@ -27163,7 +27669,7 @@ var setupFrameworkReferences = async (env, targets) => {
   const root = tool("netfx-references");
   for (const target of targets) {
     const id = "microsoft.netframework.referenceassemblies." + target.toLowerCase();
-    const marker = path29.join(root, ".installed-" + target.toLowerCase());
+    const marker = path30.join(root, ".installed-" + target.toLowerCase());
     if (exists(marker)) continue;
     const staging = tool("netfx-references-" + target.toLowerCase());
     try {
@@ -27172,17 +27678,17 @@ var setupFrameworkReferences = async (env, targets) => {
       if (!version2) throw new Error("no stable version of " + id);
       log("Downloading the .NET Framework " + target + " reference assemblies (~30 MB once) ...");
       await installArchive("https://api.nuget.org/v3-flatcontainer/" + id + "/" + version2 + "/" + id + "." + version2 + ".nupkg", staging, { fileName: id + ".zip" });
-      fs19.cpSync(path29.join(staging, "build", ".NETFramework"), path29.join(root, ".NETFramework"), { recursive: true });
-      fs19.writeFileSync(marker, version2);
+      fs20.cpSync(path30.join(staging, "build", ".NETFramework"), path30.join(root, ".NETFramework"), { recursive: true });
+      fs20.writeFileSync(marker, version2);
     } catch (e) {
       warn(".NET Framework " + target + " reference assemblies could not be installed (projects targeting it will not build): " + errMsg(e));
     } finally {
       safeRemove(staging, dataDir);
     }
   }
-  if (!exists(path29.join(root, ".NETFramework"))) return;
-  env.vars.TargetFrameworkRootPath = root + path29.sep;
-  env.summary.push(".NET Framework targeting: " + fs19.readdirSync(path29.join(root, ".NETFramework")).join(", "));
+  if (!exists(path30.join(root, ".NETFramework"))) return;
+  env.vars.TargetFrameworkRootPath = root + path30.sep;
+  env.summary.push(".NET Framework targeting: " + fs20.readdirSync(path30.join(root, ".NETFramework")).join(", "));
 };
 var setupNetFx35 = async (env) => {
   if (execOutput(SYSTEM.reg(), ["query", "HKLM\\SOFTWARE\\Microsoft\\NET Framework Setup\\NDP\\v3.5", "/v", "Install"]).includes("0x1")) {
@@ -27200,15 +27706,15 @@ var setupNetFx35 = async (env) => {
 };
 
 // src/guest/toolchains/native/mesa.ts
-import path30 from "node:path";
+import path31 from "node:path";
 var setupMesa = async (env, config2) => {
   if (dryRun) {
     log("(dry run) would provision Mesa 3D");
     return;
   }
   const root = tool("mesa");
-  const dir = path30.join(root, arch === "arm64" ? "arm64" : "x64");
-  if (!exists(path30.join(dir, "opengl32.dll"))) {
+  const dir = path31.join(root, arch === "arm64" ? "arm64" : "x64");
+  if (!exists(path31.join(dir, "opengl32.dll"))) {
     await installFromGithub("pal1000/mesa-dist-win", /^mesa3d-[\d.]+-release-msvc\.7z$/, { dest: root, what: "Mesa 3D for software OpenGL (~100 MB once)", locate: "opengl32.dll", up: 1 });
   }
   Object.assign(env.vars, { MESA_DIR: dir, GALLIUM_DRIVER: "llvmpipe" });
@@ -27217,54 +27723,59 @@ var setupMesa = async (env, config2) => {
 };
 var VULKAN_RUNTIME = "https://sdk.lunarg.com/sdk/download/latest/windows/vulkan-runtime-components.zip";
 var setupLavapipe = async (env, mesaDir) => {
-  const icd = path30.join(mesaDir, arch === "arm64" ? "lvp_icd.aarch64.json" : "lvp_icd.x86_64.json");
-  if (!exists(icd)) throw new Error("this Mesa build has no lavapipe (" + path30.basename(icd) + ")");
+  const icd = path31.join(mesaDir, arch === "arm64" ? "lvp_icd.aarch64.json" : "lvp_icd.x86_64.json");
+  if (!exists(icd)) throw new Error("this Mesa build has no lavapipe (" + path31.basename(icd) + ")");
   const dir = tool("vulkan");
-  if (!exists(path30.join(dir, "vulkan-1.dll"))) {
+  if (!exists(path31.join(dir, "vulkan-1.dll"))) {
     log("Downloading the Vulkan loader (~10 MB once) ...");
     await installArchive(VULKAN_RUNTIME, dir, { locate: "vulkan-1.dll", fileName: "vulkan-runtime.zip", members: ["*/x64/*"] });
   }
-  await execAsync(SYSTEM.reg(), ["add", "HKLM\\SOFTWARE\\Khronos\\Vulkan\\Drivers", "/v", icd, "/t", "REG_DWORD", "/d", "0", "/f"], { stdio: "ignore" });
+  const register = (file3) => execAsync(SYSTEM.reg(), ["add", "HKLM\\SOFTWARE\\Khronos\\Vulkan\\Drivers", "/v", file3, "/t", "REG_DWORD", "/d", "0", "/f"], { stdio: "ignore" });
+  await register(icd);
+  const dozen = path31.join(mesaDir, arch === "arm64" ? "dzn_icd.aarch64.json" : "dzn_icd.x86_64.json");
+  const gpu = hasGpu();
+  if (gpu && exists(dozen)) await register(dozen);
   env.prepend.push(dir);
-  env.summary.push("vulkan: lavapipe (software Vulkan 1.4 on the CPU), vulkaninfo on PATH; WGPU_BACKEND=vulkan for wgpu");
+  env.summary.push("vulkan: " + (gpu && exists(dozen) ? "Dozen (Vulkan on the GPU via Direct3D 12) and " : "") + "lavapipe (software Vulkan 1.4 on the CPU), vulkaninfo on PATH; WGPU_BACKEND=vulkan for wgpu");
 };
+var hasGpu = () => execOutput(SYSTEM.powershell(), ["-NoProfile", "-NonInteractive", "-Command", "(Get-CimInstance Win32_VideoController).Name"], { timeout: 3e4 }).split(/\r?\n/).map((n) => n.trim()).some((n) => n && !/^Microsoft (Remote Display|Basic (Render|Display))/i.test(n));
 
 // src/guest/toolchains/native/msvc/index.ts
-import fs23 from "node:fs";
-import path34 from "node:path";
+import fs24 from "node:fs";
+import path35 from "node:path";
 
 // src/guest/toolchains/native/msvc/environment.ts
-import fs21 from "node:fs";
-import path32 from "node:path";
+import fs22 from "node:fs";
+import path33 from "node:path";
 
 // src/guest/toolchains/native/msvc/tree.ts
-import fs20 from "node:fs";
-import path31 from "node:path";
+import fs21 from "node:fs";
+import path32 from "node:path";
 var ROOT = tool("msvc");
-var MARKER = path31.join(ROOT, ".installed.json");
-var msvcTools = (msvc, ...parts) => path31.join(ROOT, "VC", "Tools", "MSVC", msvc, ...parts);
+var MARKER2 = path32.join(ROOT, ".installed.json");
+var msvcTools = (msvc, ...parts) => path32.join(ROOT, "VC", "Tools", "MSVC", msvc, ...parts);
 var hostBin = (msvc, ...parts) => msvcTools(msvc, "bin", "Hostx64", "x64", ...parts);
 var hasCompiler = (msvc) => exists(hostBin(msvc, "cl.exe"));
 var Installed = external_exports.object({ msvc: external_exports.string().min(1), sdk: external_exports.string().min(1), want: external_exports.string() });
 var readInstalled = () => {
   try {
-    return Installed.safeParse(JSON.parse(fs20.readFileSync(MARKER, "utf8"))).data ?? null;
+    return Installed.safeParse(JSON.parse(fs21.readFileSync(MARKER2, "utf8"))).data ?? null;
   } catch {
     return null;
   }
 };
 
 // src/guest/toolchains/native/msvc/environment.ts
-var VSWHERE_DIR = path32.join(process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)", "Microsoft Visual Studio", "Installer");
+var VSWHERE_DIR = path33.join(process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)", "Microsoft Visual Studio", "Installer");
 var vcvars = (root, msvc, sdk) => {
-  const vc = path32.join(root, "VC", "Tools", "MSVC", msvc);
-  const kits = path32.join(root, "Windows Kits", "10");
-  const inc = (...p) => path32.join(kits, "Include", sdk, ...p);
-  const lib = (...p) => path32.join(kits, "Lib", sdk, ...p);
+  const vc = path33.join(root, "VC", "Tools", "MSVC", msvc);
+  const kits = path33.join(root, "Windows Kits", "10");
+  const inc = (...p) => path33.join(kits, "Include", sdk, ...p);
+  const lib = (...p) => path33.join(kits, "Lib", sdk, ...p);
   return {
     vars: {
       VSINSTALLDIR: root + "\\",
-      VCINSTALLDIR: path32.join(root, "VC") + "\\",
+      VCINSTALLDIR: path33.join(root, "VC") + "\\",
       VCToolsInstallDir: vc + "\\",
       VCToolsVersion: msvc,
       VisualStudioVersion: "17.0",
@@ -27276,15 +27787,15 @@ var vcvars = (root, msvc, sdk) => {
       VSCMD_ARG_HOST_ARCH: "x64",
       VSCMD_ARG_TGT_ARCH: "x64",
       Platform: "x64",
-      INCLUDE: [path32.join(vc, "include"), inc("ucrt"), inc("shared"), inc("um"), inc("winrt"), inc("cppwinrt")].join(";"),
-      LIB: [path32.join(vc, "lib", "x64"), lib("ucrt", "x64"), lib("um", "x64")].join(";"),
-      LIBPATH: [path32.join(vc, "lib", "x64"), path32.join(vc, "lib", "x86", "store", "references")].join(";")
+      INCLUDE: [path33.join(vc, "include"), inc("ucrt"), inc("shared"), inc("um"), inc("winrt"), inc("cppwinrt")].join(";"),
+      LIB: [path33.join(vc, "lib", "x64"), lib("ucrt", "x64"), lib("um", "x64")].join(";"),
+      LIBPATH: [path33.join(vc, "lib", "x64"), path33.join(vc, "lib", "x86", "store", "references")].join(";")
     },
-    path: [path32.join(vc, "bin", "Hostx64", "x64"), path32.join(kits, "bin", sdk, "x64")]
+    path: [path33.join(vc, "bin", "Hostx64", "x64"), path33.join(kits, "bin", sdk, "x64")]
   };
 };
 var writeVcvars = (env) => {
-  const dir = mkdirp(path32.join(ROOT, "VC", "Auxiliary", "Build"));
+  const dir = mkdirp(path33.join(ROOT, "VC", "Auxiliary", "Build"));
   const lines = [
     "@echo off",
     "rem Written by Windows Development Sandbox for its portable MSVC (host x64, target x64).",
@@ -27292,26 +27803,26 @@ var writeVcvars = (env) => {
     'set "PATH=' + env.path.join(";") + ';%PATH%"',
     "exit /b 0"
   ];
-  fs21.writeFileSync(path32.join(dir, "vcvars64.bat"), lines.join("\r\n") + "\r\n");
-  fs21.writeFileSync(path32.join(dir, "vcvarsall.bat"), ["@echo off", "rem Only x64 (amd64) is installed.", 'call "%~dp0vcvars64.bat"', "exit /b %errorlevel%"].join("\r\n") + "\r\n");
+  fs22.writeFileSync(path33.join(dir, "vcvars64.bat"), lines.join("\r\n") + "\r\n");
+  fs22.writeFileSync(path33.join(dir, "vcvarsall.bat"), ["@echo off", "rem Only x64 (amd64) is installed.", 'call "%~dp0vcvars64.bat"', "exit /b %errorlevel%"].join("\r\n") + "\r\n");
 };
 var installVswhere = (msvc) => {
   mkdirp(VSWHERE_DIR);
-  fs21.copyFileSync(ensureCompiled("vswhere"), path32.join(VSWHERE_DIR, "vswhere.exe"));
+  fs22.copyFileSync(ensureCompiled("vswhere"), path33.join(VSWHERE_DIR, "vswhere.exe"));
   const [major, minor] = msvc.split(".").slice(2);
-  fs21.writeFileSync(path32.join(VSWHERE_DIR, "vswhere.json"), JSON.stringify({ installationPath: ROOT, installationVersion: "17." + (minor ?? "0") + ".0." + (major ?? "0") }));
+  fs22.writeFileSync(path33.join(VSWHERE_DIR, "vswhere.json"), JSON.stringify({ installationPath: ROOT, installationVersion: "17." + (minor ?? "0") + ".0." + (major ?? "0") }));
 };
 var removeTelemetry = (msvc) => {
   try {
-    fs21.rmSync(hostBin(msvc, "vctip.exe"), { force: true });
+    fs22.rmSync(hostBin(msvc, "vctip.exe"), { force: true });
   } catch (e) {
     warn("Could not remove MSVC's telemetry helper (vctip.exe); it may keep tools\\msvc locked: " + errMsg(e));
   }
 };
 
 // src/guest/toolchains/native/msvc/packages.ts
-import fs22 from "node:fs";
-import path33 from "node:path";
+import fs23 from "node:fs";
+import path34 from "node:path";
 var CHANNEL = "https://aka.ms/vs/17/release/channel";
 var MANIFEST_DAY_MS = 24 * 60 * 60 * 1e3;
 var MSVC_PARTS = ["tools.hostx64.targetx64.base", "tools.hostx64.targetx64.res.base", "crt.headers.base", "crt.x64.desktop.base", "crt.x64.store.base", "crt.source.base", "asan.headers.base", "pgo.headers.base"];
@@ -27328,10 +27839,10 @@ var SDK_MSIS = [
   "Windows SDK Desktop Tools x64-x86_en-us.msi"
 ];
 var manifest = async () => {
-  const cached2 = path33.join(ROOT, ".manifest.json");
-  if (exists(cached2) && Date.now() - fs22.statSync(cached2).mtimeMs < MANIFEST_DAY_MS) {
+  const cached2 = path34.join(ROOT, ".manifest.json");
+  if (exists(cached2) && Date.now() - fs23.statSync(cached2).mtimeMs < MANIFEST_DAY_MS) {
     try {
-      return JSON.parse(fs22.readFileSync(cached2, "utf8"));
+      return JSON.parse(fs23.readFileSync(cached2, "utf8"));
     } catch {
     }
   }
@@ -27340,26 +27851,26 @@ var manifest = async () => {
   if (!item) throw new Error("the Visual Studio channel has no package manifest");
   mkdirp(ROOT);
   await download(item.url, cached2);
-  return JSON.parse(fs22.readFileSync(cached2, "utf8"));
+  return JSON.parse(fs23.readFileSync(cached2, "utf8"));
 };
 var unpackVsix = async (vsix, work) => {
-  const out = mkdirp(path33.join(work, "vsix-" + path33.basename(vsix)));
+  const out = mkdirp(path34.join(work, "vsix-" + path34.basename(vsix)));
   await extractArchive(vsix, out, ["Contents"]);
-  const decode3 = (dir) => {
-    for (const entry of fs22.readdirSync(dir, { withFileTypes: true })) {
-      const from = path33.join(dir, entry.name);
+  const decode4 = (dir) => {
+    for (const entry of fs23.readdirSync(dir, { withFileTypes: true })) {
+      const from = path34.join(dir, entry.name);
       let name = entry.name;
       try {
         if (name.includes("%")) name = decodeURIComponent(name);
       } catch {
       }
-      const to = path33.join(dir, name);
-      if (to !== from) fs22.renameSync(from, to);
-      if (entry.isDirectory()) decode3(to);
+      const to = path34.join(dir, name);
+      if (to !== from) fs23.renameSync(from, to);
+      if (entry.isDirectory()) decode4(to);
     }
   };
-  decode3(out);
-  fs22.cpSync(path33.join(out, "Contents"), ROOT, { recursive: true, force: true });
+  decode4(out);
+  fs23.cpSync(path34.join(out, "Contents"), ROOT, { recursive: true, force: true });
   safeRemove(out, work);
 };
 var unpackMsi = async (msi) => {
@@ -27367,8 +27878,8 @@ var unpackMsi = async (msi) => {
   try {
     await execAsync(system32("msiexec.exe"), ["/a", msi, "/quiet", "/qn", "TARGETDIR=" + ROOT, "/l*v", logFile2], { stdio: "ignore" });
   } catch (e) {
-    const lines = exists(logFile2) ? fs22.readFileSync(logFile2, "utf16le").split(/\r?\n/).filter((l) => /error|return value 3|failed/i.test(l)).slice(-4).join(" | ") : "";
-    throw new Error(path33.basename(msi) + " did not unpack: " + (e instanceof Error ? e.message : String(e)) + (lines ? " (" + lines.slice(0, 600) + ")" : ""));
+    const lines = exists(logFile2) ? fs23.readFileSync(logFile2, "utf16le").split(/\r?\n/).filter((l) => /error|return value 3|failed/i.test(l)).slice(-4).join(" | ") : "";
+    throw new Error(path34.basename(msi) + " did not unpack: " + (e instanceof Error ? e.message : String(e)) + (lines ? " (" + lines.slice(0, 600) + ")" : ""));
   }
 };
 var catalogue = (m) => {
@@ -27380,13 +27891,13 @@ var catalogue = (m) => {
   };
 };
 var payloadFetcher = (work) => async (p) => {
-  const file3 = path33.join(work, path33.basename(p.fileName.replace(/\\/g, "/")));
+  const file3 = path34.join(work, path34.basename(p.fileName.replace(/\\/g, "/")));
   if (!exists(file3)) await download(p.url, file3, p.sha256);
   return file3;
 };
 var unpackedToolset = () => {
-  const toolsRoot = path33.join(ROOT, "VC", "Tools", "MSVC");
-  return fs22.readdirSync(toolsRoot).filter((d) => exists(hostBin(d, "cl.exe"))).sort((a, b) => a.localeCompare(b, void 0, { numeric: true })).pop();
+  const toolsRoot = path34.join(ROOT, "VC", "Tools", "MSVC");
+  return fs23.readdirSync(toolsRoot).filter((d) => exists(hostBin(d, "cl.exe"))).sort((a, b) => a.localeCompare(b, void 0, { numeric: true })).pop();
 };
 var installPackages = async (config2) => {
   const { ids, pick: pick2 } = catalogue(await manifest());
@@ -27394,7 +27905,7 @@ var installPackages = async (config2) => {
   if (!version2) throw new Error("no MSVC " + config2.msvcVersion + " in the Visual Studio manifest");
   const sdk = pickWindowsSdk(ids, config2.sdkVersion);
   if (!sdk) throw new Error("no Windows SDK " + config2.sdkVersion + " in the Visual Studio manifest");
-  const work = mkdirp(path33.join(ROOT, ".download"));
+  const work = mkdirp(path34.join(ROOT, ".download"));
   const fetchPayload = payloadFetcher(work);
   log("Downloading the MSVC " + version2 + " compiler and C/C++ libraries ...");
   for (const part of MSVC_PARTS) {
@@ -27413,16 +27924,16 @@ var installPackages = async (config2) => {
     if (!p) throw new Error("the Windows SDK package has no " + name);
     const file3 = await fetchPayload(p);
     msis.push(file3);
-    for (const cab of msiCabs(fs22.readFileSync(file3))) {
+    for (const cab of msiCabs(fs23.readFileSync(file3))) {
       const c = payload(cab);
       if (c) await fetchPayload(c);
     }
   }
   log("Unpacking the Windows SDK (a few minutes) ...");
   for (const msi of msis) await unpackMsi(msi);
-  for (const name of fs22.readdirSync(ROOT).filter((n) => n.toLowerCase().endsWith(".msi"))) fs22.rmSync(path33.join(ROOT, name), { force: true });
+  for (const name of fs23.readdirSync(ROOT).filter((n) => n.toLowerCase().endsWith(".msi"))) fs23.rmSync(path34.join(ROOT, name), { force: true });
   safeRemove(work, ROOT);
-  const sdkVersion = fs22.readdirSync(path33.join(ROOT, "Windows Kits", "10", "Include")).filter((d) => d.startsWith("10.0." + sdk.build)).sort().pop();
+  const sdkVersion = fs23.readdirSync(path34.join(ROOT, "Windows Kits", "10", "Include")).filter((d) => d.startsWith("10.0." + sdk.build)).sort().pop();
   if (!sdkVersion) throw new Error("the Windows SDK did not unpack (no Include\\10.0." + sdk.build + ".*)");
   const toolset = unpackedToolset();
   if (!toolset) throw new Error("MSVC " + version2 + " did not unpack (no cl.exe under VC\\Tools\\MSVC)");
@@ -27436,7 +27947,7 @@ var installedMsvcEnv = () => {
 };
 var clearTree = () => {
   if (!exists(ROOT)) return;
-  for (const name of fs23.readdirSync(ROOT).filter((n) => n !== ".manifest.json" && n !== ".download")) safeRemove(path34.join(ROOT, name), ROOT);
+  for (const name of fs24.readdirSync(ROOT).filter((n) => n !== ".manifest.json" && n !== ".download")) safeRemove(path35.join(ROOT, name), ROOT);
 };
 var setupMsvc = async (env, config2) => {
   if (!config2.acceptLicense) {
@@ -27452,7 +27963,7 @@ var setupMsvc = async (env, config2) => {
     log("Installing MSVC and the Windows SDK (~1-2 GB, once; licence accepted in toolchains.msvc.acceptLicense) ...");
     clearTree();
     done = { ...await installPackages(config2), want };
-    writeJsonAtomic(MARKER, done);
+    writeJsonAtomic(MARKER2, done);
   }
   removeTelemetry(done.msvc);
   const vc = vcvars(ROOT, done.msvc, done.sdk);
@@ -27464,20 +27975,20 @@ var setupMsvc = async (env, config2) => {
 };
 
 // src/guest/toolchains/native/rust.ts
-import path36 from "node:path";
+import path37 from "node:path";
 
 // src/guest/toolchains/native/binstall.ts
-import fs24 from "node:fs";
-import path35 from "node:path";
+import fs25 from "node:fs";
+import path36 from "node:path";
 var ensureBinstall = async (cargoBin) => {
-  const target = path35.join(cargoBin, "cargo-binstall.exe");
+  const target = path36.join(cargoBin, "cargo-binstall.exe");
   if (exists(target)) return true;
   try {
     const dir = tool("cargo-binstall");
-    if (!exists(path35.join(dir, "cargo-binstall.exe"))) {
+    if (!exists(path36.join(dir, "cargo-binstall.exe"))) {
       await installFromGithub("cargo-bins/cargo-binstall", binstallAsset(arch), { dest: dir, what: "cargo-binstall for prebuilt Rust tools (~10 MB once)", locate: "cargo-binstall.exe" });
     }
-    fs24.copyFileSync(path35.join(dir, "cargo-binstall.exe"), target);
+    fs25.copyFileSync(path36.join(dir, "cargo-binstall.exe"), target);
     return true;
   } catch (e) {
     warn("cargo-binstall unavailable, compiling crates with cargo install instead: " + errMsg(e));
@@ -27485,11 +27996,11 @@ var ensureBinstall = async (cargoBin) => {
   }
 };
 var crateInstaller = (cargoHome, cargoEnv) => {
-  const cargo = path35.join(cargoHome, "bin", "cargo.exe");
+  const cargo = path36.join(cargoHome, "bin", "cargo.exe");
   let binstall = null;
   const binstallEnv = { ...cargoEnv, env: { ...cargoEnv.env ?? process.env, BINSTALL_DISABLE_TELEMETRY: "true" } };
   return async (crate) => {
-    binstall ??= ensureBinstall(path35.join(cargoHome, "bin"));
+    binstall ??= ensureBinstall(path36.join(cargoHome, "bin"));
     if (await binstall) {
       try {
         await execAsync(cargo, ["binstall", "--no-confirm", "--locked", "--disable-strategies", "compile", crate], binstallEnv);
@@ -27507,7 +28018,7 @@ var setupRust = async (env, config2, refresh) => {
   const RUSTUP_HOME = tool("rust", "rustup");
   const CARGO_HOME = tool("rust", "cargo");
   const rustEnv = { env: { ...process.env, RUSTUP_HOME, CARGO_HOME } };
-  const rustup = path36.join(CARGO_HOME, "bin", "rustup.exe");
+  const rustup = path37.join(CARGO_HOME, "bin", "rustup.exe");
   if (dryRun) {
     log("(dry run) would provision Rust " + config2.toolchain + " (" + config2.host + ")");
     return;
@@ -27524,35 +28035,35 @@ var setupRust = async (env, config2, refresh) => {
     if (refresh) await execAsync(rustup, ["update"], rustEnv);
   }
   Object.assign(env.vars, { RUSTUP_HOME, CARGO_HOME });
-  env.prepend.push(path36.join(CARGO_HOME, "bin"));
-  env.summary.push("rust: " + versionOf(path36.join(CARGO_HOME, "bin", "rustc.exe"), ["--version"], rustEnv) + " [" + config2.host + "]");
+  env.prepend.push(path37.join(CARGO_HOME, "bin"));
+  env.summary.push("rust: " + versionOf(path37.join(CARGO_HOME, "bin", "rustc.exe"), ["--version"], rustEnv) + " [" + config2.host + "]");
   const toolchainKey = "rustup@" + config2.toolchain;
   await installOnce(env, toolchainKey + " components", config2.components, (c) => execAsync(rustup, ["component", "add", c], rustEnv));
   await installOnce(env, toolchainKey + " targets", config2.targets, (t) => execAsync(rustup, ["target", "add", t], rustEnv));
   const msvc = config2.host.endsWith("-msvc") ? installedMsvcEnv() : null;
   const mingw = tool("mingw", "mingw64", "bin");
-  const cargoEnv = msvc ? { env: { ...rustEnv.env, ...msvc.vars, PATH: [path36.join(CARGO_HOME, "bin"), ...msvc.path, process.env.PATH ?? ""].join(path36.delimiter) } } : { env: { ...rustEnv.env, CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER: path36.join(mingw, "gcc.exe"), PATH: [path36.join(CARGO_HOME, "bin"), mingw, process.env.PATH ?? ""].join(path36.delimiter) } };
+  const cargoEnv = msvc ? { env: { ...rustEnv.env, ...msvc.vars, PATH: [path37.join(CARGO_HOME, "bin"), ...msvc.path, process.env.PATH ?? ""].join(path37.delimiter) } } : { env: { ...rustEnv.env, CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER: path37.join(mingw, "gcc.exe"), PATH: [path37.join(CARGO_HOME, "bin"), mingw, process.env.PATH ?? ""].join(path37.delimiter) } };
   await installOnce(env, "cargo", config2.crates, crateInstaller(CARGO_HOME, cargoEnv));
 };
 
 // src/guest/toolchains/node.ts
-import fs25 from "node:fs";
-import path37 from "node:path";
+import fs26 from "node:fs";
+import path38 from "node:path";
 import { spawn as spawn4 } from "node:child_process";
 var NVM_HOME = tool("nvm");
-var NVM_SYMLINK = path37.join(localDir, "nodejs");
-var HOST_NVM = path37.join(hostToolsDir, "nvm");
+var NVM_SYMLINK = path38.join(localDir, "nodejs");
+var HOST_NVM = path38.join(hostToolsDir, "nvm");
 var HOST_VERSIONS_MAX = 3;
-var hostNvmVersions = () => exists(HOST_NVM) ? fs25.readdirSync(HOST_NVM).filter((d) => /^v\d+\.\d+\.\d+$/.test(d) && exists(path37.join(HOST_NVM, d, "node.exe"))).map((d) => d.slice(1)) : [];
+var hostNvmVersions = () => exists(HOST_NVM) ? fs26.readdirSync(HOST_NVM).filter((d) => /^v\d+\.\d+\.\d+$/.test(d) && exists(path38.join(HOST_NVM, d, "node.exe"))).map((d) => d.slice(1)) : [];
 var resolveNode = (spec) => resolveCached("node:" + spec, async () => {
   const exact = spec.replace(/^v/, "");
   if (/^\d+\.\d+\.\d+$/.test(exact)) return exact;
   const releases = await fetchJson("https://nodejs.org/dist/index.json");
   return pickNodeVersion(releases, spec) ?? Promise.reject(new Error('No Node.js release matches "' + spec + '"'));
 });
-var NVM_TEMP = path37.join(NVM_HOME, ".tmp");
-var nvm = (args) => new Promise((resolve) => {
-  const child = spawn4(path37.join(NVM_HOME, "nvm.exe"), args, { windowsHide: true, env: { ...process.env, NVM_HOME, NVM_SYMLINK, TEMP: NVM_TEMP, TMP: NVM_TEMP } });
+var NVM_TEMP = path38.join(NVM_HOME, ".tmp");
+var nvm = (args) => new Promise((resolve2) => {
+  const child = spawn4(path38.join(NVM_HOME, "nvm.exe"), args, { windowsHide: true, env: { ...process.env, NVM_HOME, NVM_SYMLINK, TEMP: NVM_TEMP, TMP: NVM_TEMP } });
   let out = "";
   child.stdout.on("data", (d) => {
     out += d.toString();
@@ -27560,16 +28071,16 @@ var nvm = (args) => new Promise((resolve) => {
   child.stderr.on("data", (d) => {
     out += d.toString();
   });
-  child.once("error", (e) => resolve(out + e.message));
-  child.once("close", () => resolve(out));
+  child.once("error", (e) => resolve2(out + e.message));
+  child.once("close", () => resolve2(out));
 });
 var ensureNvm = async () => {
-  if (exists(path37.join(NVM_HOME, "nvm.exe"))) return;
-  if (exists(path37.join(HOST_NVM, "nvm.exe"))) {
+  if (exists(path38.join(NVM_HOME, "nvm.exe"))) return;
+  if (exists(path38.join(HOST_NVM, "nvm.exe"))) {
     log("Copying nvm from this PC ...");
     mkdirp(NVM_HOME);
-    const files = fs25.readdirSync(HOST_NVM).filter((f) => /\.(exe|cmd|vbs)$/i.test(f)).sort((a, b) => Number(a.toLowerCase() === "nvm.exe") - Number(b.toLowerCase() === "nvm.exe"));
-    for (const file3 of files) fs25.copyFileSync(path37.join(HOST_NVM, file3), path37.join(NVM_HOME, file3));
+    const files = fs26.readdirSync(HOST_NVM).filter((f) => /\.(exe|cmd|vbs)$/i.test(f)).sort((a, b) => Number(a.toLowerCase() === "nvm.exe") - Number(b.toLowerCase() === "nvm.exe"));
+    for (const file3 of files) fs26.copyFileSync(path38.join(HOST_NVM, file3), path38.join(NVM_HOME, file3));
     return;
   }
   const asset = await githubAsset("coreybutler/nvm-windows", /^nvm-noinstall\.zip$/, true);
@@ -27577,10 +28088,10 @@ var ensureNvm = async () => {
   await installArchive(asset.url, NVM_HOME, { sha256: asset.sha256, locate: "nvm.exe", fileName: asset.name });
 };
 var installNodeVersion = async (version2) => {
-  const dir = path37.join(NVM_HOME, "v" + version2);
-  const fromHost = path37.join(HOST_NVM, "v" + version2);
-  if (exists(path37.join(dir, "node.exe"))) return;
-  if (exists(path37.join(fromHost, "node.exe"))) {
+  const dir = path38.join(NVM_HOME, "v" + version2);
+  const fromHost = path38.join(HOST_NVM, "v" + version2);
+  if (exists(path38.join(dir, "node.exe"))) return;
+  if (exists(path38.join(fromHost, "node.exe"))) {
     log("Copying Node " + version2 + " from this PC's nvm (without global packages) ...");
     copyNode(fromHost, dir);
     return;
@@ -27593,13 +28104,13 @@ var installNodeVersion = async (version2) => {
   } finally {
     safeRemove(NVM_TEMP, NVM_HOME);
   }
-  if (!exists(path37.join(dir, "node.exe"))) throw new Error("nvm install " + version2 + " failed: " + out.trim().split("\n").slice(-2).join(" "));
+  if (!exists(path38.join(dir, "node.exe"))) throw new Error("nvm install " + version2 + " failed: " + out.trim().split("\n").slice(-2).join(" "));
 };
 var activate = async (version2) => {
   await nvm(["use", version2]);
-  if (exists(path37.join(NVM_SYMLINK, "node.exe"))) return;
-  fs25.rmSync(NVM_SYMLINK, { recursive: true, force: true });
-  fs25.symlinkSync(path37.join(NVM_HOME, "v" + version2), NVM_SYMLINK, "junction");
+  if (exists(path38.join(NVM_SYMLINK, "node.exe"))) return;
+  fs26.rmSync(NVM_SYMLINK, { recursive: true, force: true });
+  fs26.symlinkSync(path38.join(NVM_HOME, "v" + version2), NVM_SYMLINK, "junction");
 };
 var setupNode = async (env, versions, config2) => {
   if (dryRun) {
@@ -27607,7 +28118,7 @@ var setupNode = async (env, versions, config2) => {
     return;
   }
   await ensureNvm();
-  fs25.writeFileSync(path37.join(NVM_HOME, "settings.txt"), ["root: " + NVM_HOME, "path: " + NVM_SYMLINK, "arch: " + (arch === "arm64" ? "arm64" : "64"), "proxy: none", ""].join("\r\n"));
+  fs26.writeFileSync(path38.join(NVM_HOME, "settings.txt"), ["root: " + NVM_HOME, "path: " + NVM_SYMLINK, "arch: " + (arch === "arm64" ? "arm64" : "64"), "proxy: none", ""].join("\r\n"));
   mkdirp(localDir);
   for (const extra of versions.nodeExtra) {
     try {
@@ -27626,7 +28137,7 @@ var setupNode = async (env, versions, config2) => {
     }
   }
   Object.assign(env.vars, { NVM_HOME, NVM_SYMLINK });
-  if (duringSession()) env.prepend.push(path37.join(NVM_HOME, "v" + main), NVM_HOME, NVM_SYMLINK);
+  if (duringSession()) env.prepend.push(path38.join(NVM_HOME, "v" + main), NVM_HOME, NVM_SYMLINK);
   else {
     await activate(main);
     env.prepend.push(NVM_HOME, NVM_SYMLINK);
@@ -27635,10 +28146,10 @@ var setupNode = async (env, versions, config2) => {
   await packageManagers(env, config2, main);
 };
 var packageManagers = async (env, config2, version2) => {
-  const dir = path37.join(NVM_HOME, "v" + version2);
-  const nodeEnv = { ...process.env, PATH: dir + path37.delimiter + (process.env.PATH ?? "") };
-  const npm = (args) => execAsync(path37.join(dir, "node.exe"), [path37.join(dir, "node_modules", "npm", "bin", "npm-cli.js"), ...args], { env: nodeEnv, stdio: "ignore" });
-  const corepackJs = path37.join(dir, "node_modules", "corepack", "dist", "corepack.js");
+  const dir = path38.join(NVM_HOME, "v" + version2);
+  const nodeEnv = { ...process.env, PATH: dir + path38.delimiter + (process.env.PATH ?? "") };
+  const npm = (args) => execAsync(path38.join(dir, "node.exe"), [path38.join(dir, "node_modules", "npm", "bin", "npm-cli.js"), ...args], { env: nodeEnv, stdio: "ignore" });
+  const corepackJs = path38.join(dir, "node_modules", "corepack", "dist", "corepack.js");
   const extra = config2.corepack && !exists(corepackJs) ? ["corepack"] : [];
   await installOnce(env, "npm@" + version2, [...extra, ...config2.globalPackages], (pkg) => npm(["install", "--global", pkg, "--no-fund", "--no-audit"]));
   if (!config2.corepack) return;
@@ -27648,7 +28159,7 @@ var packageManagers = async (env, config2, version2) => {
     return;
   }
   try {
-    await execAsync(path37.join(dir, "node.exe"), [corepackJs, "enable", "--install-directory", mkdirp(tool("bin")), "pnpm", "yarn"], { env: nodeEnv, stdio: "ignore" });
+    await execAsync(path38.join(dir, "node.exe"), [corepackJs, "enable", "--install-directory", mkdirp(tool("bin")), "pnpm", "yarn"], { env: nodeEnv, stdio: "ignore" });
     env.summary.push('pnpm, yarn: via corepack (package.json "packageManager" picks the version)');
   } catch (e) {
     warn("corepack enable failed: " + errMsg(e));
@@ -27663,31 +28174,48 @@ var setupPwsh = async (env, refresh = false) => {
 };
 
 // src/guest/toolchains/python.ts
-import fs26 from "node:fs";
-import path38 from "node:path";
+import fs27 from "node:fs";
+import path39 from "node:path";
 var installPython = async (pkg, spec) => {
   const version2 = await resolveCached(pkg + ":" + spec, async () => {
     const { versions } = await fetchJson("https://api.nuget.org/v3-flatcontainer/" + pkg + "/index.json");
     return pickPackageVersion(versions, spec) ?? Promise.reject(new Error("No " + pkg + ' release matches "' + spec + '"'));
   });
   const dir = tool("python", pkg + "-" + version2);
-  const exe = path38.join(dir, "python.exe");
+  const exe = path39.join(dir, "python.exe");
   if (!exists(exe)) {
     log("Downloading Python " + version2 + (pkg === "python2" ? " (Python 2, " : " (") + "~30 MB once) ...");
     await installArchive("https://api.nuget.org/v3-flatcontainer/" + pkg + "/" + version2 + "/" + pkg + "." + version2 + ".nupkg", dir, { locate: "python.exe", fileName: pkg + "." + version2 + ".zip" });
   }
-  if (!exists(path38.join(dir, "Scripts", "pip.exe")) && !exists(path38.join(dir, "Scripts", "pip2.exe"))) await execAsync(exe, ["-m", "ensurepip", "--default-pip"], { stdio: "ignore" });
+  if (!exists(path39.join(dir, "Scripts", "pip.exe")) && !exists(path39.join(dir, "Scripts", "pip2.exe"))) await execAsync(exe, ["-m", "ensurepip", "--default-pip"], { stdio: "ignore" });
   return dir;
 };
-var shimDir = (dir) => duringSession() ? tool("shims", path38.basename(dir)) : tool("shims");
+var shimDir = (dir) => duringSession() ? tool("shims", path39.basename(dir)) : tool("shims");
 var shim = (folder, name, command) => {
-  fs26.writeFileSync(path38.join(mkdirp(folder), name + ".cmd"), "@echo off\r\n" + command + " %*\r\n");
+  fs27.writeFileSync(path39.join(mkdirp(folder), name + ".cmd"), "@echo off\r\n" + command + " %*\r\n");
 };
 var shimPair = (folder, version2, dir) => {
-  const python = '"' + path38.join(dir, "python.exe") + '"';
+  const python = '"' + path39.join(dir, "python.exe") + '"';
   shim(folder, "python" + version2, python);
   shim(folder, "pip" + version2, python + " -m pip");
 };
+var pyLauncher = (folder, py3, py2) => {
+  const script = path39.join(mkdirp(folder), "py-launcher.py");
+  fs27.writeFileSync(script, [
+    "import subprocess, sys",
+    "PY3, PY2 = " + JSON.stringify(path39.join(py3, "python.exe")) + ", " + JSON.stringify(py2 ? path39.join(py2, "python.exe") : null),
+    "args = sys.argv[1:]",
+    "exe = PY3",
+    "if args and args[0].startswith('-2'):",
+    '    if not PY2: sys.exit("py: Python 2 is not installed (toolchains.python.python2)")',
+    "    exe, args = PY2, args[1:]",
+    "elif args and (args[0] == '-3' or args[0].startswith('-3.') or args[0].startswith('-3-')):",
+    "    args = args[1:]",
+    "sys.exit(subprocess.call([exe] + args))",
+    ""
+  ].join("\n"));
+  shim(folder, "py", '"' + path39.join(py3, "python.exe") + '" "' + script + '"');
+};
 var setupPython = async (env, config2, versions) => {
   if (dryRun) {
     log("(dry run) would provision Python " + versions.python.spec + (config2.python2 ? " and Python 2.7" : ""));
@@ -27696,22 +28224,26 @@ var setupPython = async (env, config2, versions) => {
   const py3 = await installPython("python", versions.python.spec);
   const shims = shimDir(py3);
   shimPair(shims, "3", py3);
-  env.prepend.push(py3, path38.join(py3, "Scripts"), shims);
+  env.prepend.push(py3, path39.join(py3, "Scripts"), shims);
   env.vars.PYTHONIOENCODING = "utf-8";
-  env.summary.push("python: " + path38.basename(py3).replace("python-", "") + " (from " + versions.python.source + ")");
-  if (!config2.python2) return;
+  env.summary.push("python: " + path39.basename(py3).replace("python-", "") + " (from " + versions.python.source + "; py works too)");
+  if (!config2.python2) {
+    pyLauncher(shims, py3, null);
+    return;
+  }
   const py2 = await installPython("python2", "2.7");
   shimPair(shims, "2", py2);
-  env.summary.push("python2: " + path38.basename(py2).replace("python2-", ""));
+  pyLauncher(shims, py3, py2);
+  env.summary.push("python2: " + path39.basename(py2).replace("python2-", ""));
 };
 
 // src/guest/toolchains/scripting/php.ts
-import fs28 from "node:fs";
-import path40 from "node:path";
+import fs29 from "node:fs";
+import path41 from "node:path";
 
 // src/guest/toolchains/scripting/vcruntime.ts
-import fs27 from "node:fs";
-import path39 from "node:path";
+import fs28 from "node:fs";
+import path40 from "node:path";
 var VC_REDIST = "https://aka.ms/vs/17/release/vc_redist.x64.exe";
 var MICROSOFT_SIGNER = "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US";
 var OK_EXIT_CODES = [0, 1638, 3010];
@@ -27726,8 +28258,8 @@ var setupVcRuntime = async (env, summary = true) => {
     log("(dry run) would install the Visual C++ runtime");
     return false;
   }
-  const system322 = path39.join(process.env.WINDIR ?? "C:\\Windows", "System32");
-  const missing = !exists(path39.join(system322, "vcruntime140.dll")) || !exists(path39.join(system322, "msvcp140.dll"));
+  const system322 = path40.join(process.env.WINDIR ?? "C:\\Windows", "System32");
+  const missing = !exists(path40.join(system322, "vcruntime140.dll")) || !exists(path40.join(system322, "msvcp140.dll"));
   if (missing) {
     const installer = tool("vcredist", "vc_redist.x64.exe");
     if (!exists(installer)) {
@@ -27735,12 +28267,12 @@ var setupVcRuntime = async (env, summary = true) => {
       await downloadFile(VC_REDIST, installer);
     }
     if (signerOf(installer) !== MICROSOFT_SIGNER) {
-      fs27.rmSync(installer, { force: true });
+      fs28.rmSync(installer, { force: true });
       throw new Error("vc_redist.x64.exe is not signed by Microsoft; deleted it (it is downloaded again next boot)");
     }
     log("Installing the Visual C++ runtime ...");
     const code = await spawnAsync(installer, ["/install", "/quiet", "/norestart"]);
-    if (!OK_EXIT_CODES.includes(code ?? -1) || !exists(path39.join(system322, "vcruntime140.dll"))) throw new Error("the Visual C++ runtime installer failed (exit " + code + ")");
+    if (!OK_EXIT_CODES.includes(code ?? -1) || !exists(path40.join(system322, "vcruntime140.dll"))) throw new Error("the Visual C++ runtime installer failed (exit " + code + ")");
   }
   if (summary) env.summary.push("vc++ runtime: installed");
   return missing;
@@ -27758,15 +28290,15 @@ var phpBuild = async (spec) => {
   return { version: release.version, ...build.zip };
 };
 var writePhpIni = (home) => {
-  const ini = path40.join(home, "php.ini");
-  if (exists(ini) || !exists(path40.join(home, "php.ini-development"))) return;
-  let text = fs28.readFileSync(path40.join(home, "php.ini-development"), "utf8").replace(/^;\s*extension_dir\s*=\s*"ext"/m, 'extension_dir = "' + path40.join(home, "ext") + '"');
-  for (const ext of PHP_EXTENSIONS.filter((e) => exists(path40.join(home, "ext", "php_" + e + ".dll")))) text = text.replace(new RegExp("^;(extension=" + ext + ")\\s*$", "m"), "$1");
-  fs28.writeFileSync(ini + ".tmp", text);
-  fs28.renameSync(ini + ".tmp", ini);
+  const ini = path41.join(home, "php.ini");
+  if (exists(ini) || !exists(path41.join(home, "php.ini-development"))) return;
+  let text = fs29.readFileSync(path41.join(home, "php.ini-development"), "utf8").replace(/^;\s*extension_dir\s*=\s*"ext"/m, 'extension_dir = "' + path41.join(home, "ext") + '"');
+  for (const ext of PHP_EXTENSIONS.filter((e) => exists(path41.join(home, "ext", "php_" + e + ".dll")))) text = text.replace(new RegExp("^;(extension=" + ext + ")\\s*$", "m"), "$1");
+  fs29.writeFileSync(ini + ".tmp", text);
+  fs29.renameSync(ini + ".tmp", ini);
 };
 var shim2 = (env, name, command) => {
-  fs28.writeFileSync(path40.join(mkdirp(tool("shims")), name + ".cmd"), "@echo off\r\n" + command + " %*\r\n");
+  fs29.writeFileSync(path41.join(mkdirp(tool("shims")), name + ".cmd"), "@echo off\r\n" + command + " %*\r\n");
   env.prepend.push(tool("shims"));
 };
 var setupComposer = async (env, php) => {
@@ -27778,7 +28310,7 @@ var setupComposer = async (env, php) => {
   }
   const composerHome = tool("composer-home");
   env.vars.COMPOSER_HOME = composerHome;
-  env.prepend.push(path40.join(composerHome, "vendor", "bin"));
+  env.prepend.push(path41.join(composerHome, "vendor", "bin"));
   shim2(env, "composer", '"' + php + '" "' + phar + '"');
   env.summary.push("composer: " + (/\d+\.\d+\.\d+/.exec(execOutput(php, [phar, "--version", "--no-ansi"]))?.[0] ?? "installed"));
 };
@@ -27791,7 +28323,7 @@ var setupPhp = async (env, config2) => {
   await setupVcRuntime(env, false);
   const version2 = await resolveCached("php:" + wantedSpec.spec, async () => (await phpBuild(wantedSpec.spec)).version);
   const home = tool("php", version2);
-  if (!exists(path40.join(home, "php.exe"))) {
+  if (!exists(path41.join(home, "php.exe"))) {
     const build = await phpBuild(version2);
     log("Downloading PHP " + version2 + " (~30 MB once) ...");
     await installArchive("https://windows.php.net/downloads/releases/" + build.path, home, { sha256: build.sha256, locate: "php.exe", fileName: build.path });
@@ -27799,11 +28331,11 @@ var setupPhp = async (env, config2) => {
   writePhpIni(home);
   env.prepend.push(home);
   env.summary.push("php: " + version2 + " (from " + wantedSpec.source + ")");
-  if (config2.composer) await setupComposer(env, path40.join(home, "php.exe"));
+  if (config2.composer) await setupComposer(env, path41.join(home, "php.exe"));
 };
 
 // src/guest/toolchains/scripting/ruby.ts
-import path41 from "node:path";
+import path42 from "node:path";
 var RUBY_ASSET = /^rubyinstaller-(\d+\.\d+\.\d+)-(\d+)-x64\.7z$/;
 var buildNumber = (asset) => Number(RUBY_ASSET.exec(asset.name)?.[2] ?? 0);
 var rubyBuilds = async () => {
@@ -27826,7 +28358,7 @@ var setupRuby = async (env, config2) => {
   }
   const version2 = await resolveCached("ruby:" + wantedSpec.spec, async () => pickPackageVersion([...(await rubyBuilds()).keys()], wantedSpec.spec) ?? Promise.reject(new Error('No RubyInstaller build matches "' + wantedSpec.spec + '"')));
   const home = tool("ruby", version2);
-  if (!exists(path41.join(home, "bin", "ruby.exe"))) {
+  if (!exists(path42.join(home, "bin", "ruby.exe"))) {
     const asset = (await rubyBuilds()).get(version2);
     if (!asset) throw new Error("RubyInstaller " + version2 + " is no longer published");
     log("Downloading Ruby " + version2 + " (~100 MB once) ...");
@@ -27834,26 +28366,202 @@ var setupRuby = async (env, config2) => {
   }
   const gems = tool("ruby-gems", version2.split(".").slice(0, 2).join("."));
   Object.assign(env.vars, { GEM_HOME: gems, BUNDLE_USER_HOME: tool("bundle-home") });
-  env.prepend.push(path41.join(home, "bin"), path41.join(gems, "bin"));
-  env.summary.push("ruby: " + versionOf(path41.join(home, "bin", "ruby.exe")) + " (from " + wantedSpec.source + "; gems with C extensions need MSYS2, not included)");
-  const gem = path41.join(home, "bin", "gem.cmd");
+  env.prepend.push(path42.join(home, "bin"), path42.join(gems, "bin"));
+  env.summary.push("ruby: " + versionOf(path42.join(home, "bin", "ruby.exe")) + " (from " + wantedSpec.source + "; gems with C extensions need MSYS2, not included)");
+  const gem = path42.join(home, "bin", "gem.cmd");
   await installOnce(env, "gem@" + version2, config2.gems, (pkg) => execAsync(SYSTEM.cmd(), ["/d", "/c", gem, "install", pkg, "--no-document"], { env: { ...process.env, GEM_HOME: gems } }));
 };
 
 // src/guest/toolchains/vscode.ts
-import fs29 from "node:fs";
-import os5 from "node:os";
-import path42 from "node:path";
+import fs30 from "node:fs";
+import os7 from "node:os";
+import path43 from "node:path";
+
+// node_modules/jsonc-parser/lib/esm/impl/scanner.js
+var CharacterCodes;
+(function(CharacterCodes2) {
+  CharacterCodes2[CharacterCodes2["lineFeed"] = 10] = "lineFeed";
+  CharacterCodes2[CharacterCodes2["carriageReturn"] = 13] = "carriageReturn";
+  CharacterCodes2[CharacterCodes2["space"] = 32] = "space";
+  CharacterCodes2[CharacterCodes2["_0"] = 48] = "_0";
+  CharacterCodes2[CharacterCodes2["_1"] = 49] = "_1";
+  CharacterCodes2[CharacterCodes2["_2"] = 50] = "_2";
+  CharacterCodes2[CharacterCodes2["_3"] = 51] = "_3";
+  CharacterCodes2[CharacterCodes2["_4"] = 52] = "_4";
+  CharacterCodes2[CharacterCodes2["_5"] = 53] = "_5";
+  CharacterCodes2[CharacterCodes2["_6"] = 54] = "_6";
+  CharacterCodes2[CharacterCodes2["_7"] = 55] = "_7";
+  CharacterCodes2[CharacterCodes2["_8"] = 56] = "_8";
+  CharacterCodes2[CharacterCodes2["_9"] = 57] = "_9";
+  CharacterCodes2[CharacterCodes2["a"] = 97] = "a";
+  CharacterCodes2[CharacterCodes2["b"] = 98] = "b";
+  CharacterCodes2[CharacterCodes2["c"] = 99] = "c";
+  CharacterCodes2[CharacterCodes2["d"] = 100] = "d";
+  CharacterCodes2[CharacterCodes2["e"] = 101] = "e";
+  CharacterCodes2[CharacterCodes2["f"] = 102] = "f";
+  CharacterCodes2[CharacterCodes2["g"] = 103] = "g";
+  CharacterCodes2[CharacterCodes2["h"] = 104] = "h";
+  CharacterCodes2[CharacterCodes2["i"] = 105] = "i";
+  CharacterCodes2[CharacterCodes2["j"] = 106] = "j";
+  CharacterCodes2[CharacterCodes2["k"] = 107] = "k";
+  CharacterCodes2[CharacterCodes2["l"] = 108] = "l";
+  CharacterCodes2[CharacterCodes2["m"] = 109] = "m";
+  CharacterCodes2[CharacterCodes2["n"] = 110] = "n";
+  CharacterCodes2[CharacterCodes2["o"] = 111] = "o";
+  CharacterCodes2[CharacterCodes2["p"] = 112] = "p";
+  CharacterCodes2[CharacterCodes2["q"] = 113] = "q";
+  CharacterCodes2[CharacterCodes2["r"] = 114] = "r";
+  CharacterCodes2[CharacterCodes2["s"] = 115] = "s";
+  CharacterCodes2[CharacterCodes2["t"] = 116] = "t";
+  CharacterCodes2[CharacterCodes2["u"] = 117] = "u";
+  CharacterCodes2[CharacterCodes2["v"] = 118] = "v";
+  CharacterCodes2[CharacterCodes2["w"] = 119] = "w";
+  CharacterCodes2[CharacterCodes2["x"] = 120] = "x";
+  CharacterCodes2[CharacterCodes2["y"] = 121] = "y";
+  CharacterCodes2[CharacterCodes2["z"] = 122] = "z";
+  CharacterCodes2[CharacterCodes2["A"] = 65] = "A";
+  CharacterCodes2[CharacterCodes2["B"] = 66] = "B";
+  CharacterCodes2[CharacterCodes2["C"] = 67] = "C";
+  CharacterCodes2[CharacterCodes2["D"] = 68] = "D";
+  CharacterCodes2[CharacterCodes2["E"] = 69] = "E";
+  CharacterCodes2[CharacterCodes2["F"] = 70] = "F";
+  CharacterCodes2[CharacterCodes2["G"] = 71] = "G";
+  CharacterCodes2[CharacterCodes2["H"] = 72] = "H";
+  CharacterCodes2[CharacterCodes2["I"] = 73] = "I";
+  CharacterCodes2[CharacterCodes2["J"] = 74] = "J";
+  CharacterCodes2[CharacterCodes2["K"] = 75] = "K";
+  CharacterCodes2[CharacterCodes2["L"] = 76] = "L";
+  CharacterCodes2[CharacterCodes2["M"] = 77] = "M";
+  CharacterCodes2[CharacterCodes2["N"] = 78] = "N";
+  CharacterCodes2[CharacterCodes2["O"] = 79] = "O";
+  CharacterCodes2[CharacterCodes2["P"] = 80] = "P";
+  CharacterCodes2[CharacterCodes2["Q"] = 81] = "Q";
+  CharacterCodes2[CharacterCodes2["R"] = 82] = "R";
+  CharacterCodes2[CharacterCodes2["S"] = 83] = "S";
+  CharacterCodes2[CharacterCodes2["T"] = 84] = "T";
+  CharacterCodes2[CharacterCodes2["U"] = 85] = "U";
+  CharacterCodes2[CharacterCodes2["V"] = 86] = "V";
+  CharacterCodes2[CharacterCodes2["W"] = 87] = "W";
+  CharacterCodes2[CharacterCodes2["X"] = 88] = "X";
+  CharacterCodes2[CharacterCodes2["Y"] = 89] = "Y";
+  CharacterCodes2[CharacterCodes2["Z"] = 90] = "Z";
+  CharacterCodes2[CharacterCodes2["asterisk"] = 42] = "asterisk";
+  CharacterCodes2[CharacterCodes2["backslash"] = 92] = "backslash";
+  CharacterCodes2[CharacterCodes2["closeBrace"] = 125] = "closeBrace";
+  CharacterCodes2[CharacterCodes2["closeBracket"] = 93] = "closeBracket";
+  CharacterCodes2[CharacterCodes2["colon"] = 58] = "colon";
+  CharacterCodes2[CharacterCodes2["comma"] = 44] = "comma";
+  CharacterCodes2[CharacterCodes2["dot"] = 46] = "dot";
+  CharacterCodes2[CharacterCodes2["doubleQuote"] = 34] = "doubleQuote";
+  CharacterCodes2[CharacterCodes2["minus"] = 45] = "minus";
+  CharacterCodes2[CharacterCodes2["openBrace"] = 123] = "openBrace";
+  CharacterCodes2[CharacterCodes2["openBracket"] = 91] = "openBracket";
+  CharacterCodes2[CharacterCodes2["plus"] = 43] = "plus";
+  CharacterCodes2[CharacterCodes2["slash"] = 47] = "slash";
+  CharacterCodes2[CharacterCodes2["formFeed"] = 12] = "formFeed";
+  CharacterCodes2[CharacterCodes2["tab"] = 9] = "tab";
+})(CharacterCodes || (CharacterCodes = {}));
+
+// node_modules/jsonc-parser/lib/esm/impl/string-intern.js
+var cachedSpaces = new Array(20).fill(0).map((_2, index) => {
+  return " ".repeat(index);
+});
+var maxCachedValues = 200;
+var cachedBreakLinesWithSpaces = {
+  " ": {
+    "\n": new Array(maxCachedValues).fill(0).map((_2, index) => {
+      return "\n" + " ".repeat(index);
+    }),
+    "\r": new Array(maxCachedValues).fill(0).map((_2, index) => {
+      return "\r" + " ".repeat(index);
+    }),
+    "\r\n": new Array(maxCachedValues).fill(0).map((_2, index) => {
+      return "\r\n" + " ".repeat(index);
+    })
+  },
+  "	": {
+    "\n": new Array(maxCachedValues).fill(0).map((_2, index) => {
+      return "\n" + "	".repeat(index);
+    }),
+    "\r": new Array(maxCachedValues).fill(0).map((_2, index) => {
+      return "\r" + "	".repeat(index);
+    }),
+    "\r\n": new Array(maxCachedValues).fill(0).map((_2, index) => {
+      return "\r\n" + "	".repeat(index);
+    })
+  }
+};
+
+// node_modules/jsonc-parser/lib/esm/impl/parser.js
+var ParseOptions;
+(function(ParseOptions2) {
+  ParseOptions2.DEFAULT = {
+    allowTrailingComma: false
+  };
+})(ParseOptions || (ParseOptions = {}));
+
+// node_modules/jsonc-parser/lib/esm/main.js
+var ScanError;
+(function(ScanError2) {
+  ScanError2[ScanError2["None"] = 0] = "None";
+  ScanError2[ScanError2["UnexpectedEndOfComment"] = 1] = "UnexpectedEndOfComment";
+  ScanError2[ScanError2["UnexpectedEndOfString"] = 2] = "UnexpectedEndOfString";
+  ScanError2[ScanError2["UnexpectedEndOfNumber"] = 3] = "UnexpectedEndOfNumber";
+  ScanError2[ScanError2["InvalidUnicode"] = 4] = "InvalidUnicode";
+  ScanError2[ScanError2["InvalidEscapeCharacter"] = 5] = "InvalidEscapeCharacter";
+  ScanError2[ScanError2["InvalidCharacter"] = 6] = "InvalidCharacter";
+})(ScanError || (ScanError = {}));
+var SyntaxKind;
+(function(SyntaxKind2) {
+  SyntaxKind2[SyntaxKind2["OpenBraceToken"] = 1] = "OpenBraceToken";
+  SyntaxKind2[SyntaxKind2["CloseBraceToken"] = 2] = "CloseBraceToken";
+  SyntaxKind2[SyntaxKind2["OpenBracketToken"] = 3] = "OpenBracketToken";
+  SyntaxKind2[SyntaxKind2["CloseBracketToken"] = 4] = "CloseBracketToken";
+  SyntaxKind2[SyntaxKind2["CommaToken"] = 5] = "CommaToken";
+  SyntaxKind2[SyntaxKind2["ColonToken"] = 6] = "ColonToken";
+  SyntaxKind2[SyntaxKind2["NullKeyword"] = 7] = "NullKeyword";
+  SyntaxKind2[SyntaxKind2["TrueKeyword"] = 8] = "TrueKeyword";
+  SyntaxKind2[SyntaxKind2["FalseKeyword"] = 9] = "FalseKeyword";
+  SyntaxKind2[SyntaxKind2["StringLiteral"] = 10] = "StringLiteral";
+  SyntaxKind2[SyntaxKind2["NumericLiteral"] = 11] = "NumericLiteral";
+  SyntaxKind2[SyntaxKind2["LineCommentTrivia"] = 12] = "LineCommentTrivia";
+  SyntaxKind2[SyntaxKind2["BlockCommentTrivia"] = 13] = "BlockCommentTrivia";
+  SyntaxKind2[SyntaxKind2["LineBreakTrivia"] = 14] = "LineBreakTrivia";
+  SyntaxKind2[SyntaxKind2["Trivia"] = 15] = "Trivia";
+  SyntaxKind2[SyntaxKind2["Unknown"] = 16] = "Unknown";
+  SyntaxKind2[SyntaxKind2["EOF"] = 17] = "EOF";
+})(SyntaxKind || (SyntaxKind = {}));
+var ParseErrorCode;
+(function(ParseErrorCode2) {
+  ParseErrorCode2[ParseErrorCode2["InvalidSymbol"] = 1] = "InvalidSymbol";
+  ParseErrorCode2[ParseErrorCode2["InvalidNumberFormat"] = 2] = "InvalidNumberFormat";
+  ParseErrorCode2[ParseErrorCode2["PropertyNameExpected"] = 3] = "PropertyNameExpected";
+  ParseErrorCode2[ParseErrorCode2["ValueExpected"] = 4] = "ValueExpected";
+  ParseErrorCode2[ParseErrorCode2["ColonExpected"] = 5] = "ColonExpected";
+  ParseErrorCode2[ParseErrorCode2["CommaExpected"] = 6] = "CommaExpected";
+  ParseErrorCode2[ParseErrorCode2["CloseBraceExpected"] = 7] = "CloseBraceExpected";
+  ParseErrorCode2[ParseErrorCode2["CloseBracketExpected"] = 8] = "CloseBracketExpected";
+  ParseErrorCode2[ParseErrorCode2["EndOfFileExpected"] = 9] = "EndOfFileExpected";
+  ParseErrorCode2[ParseErrorCode2["InvalidCommentToken"] = 10] = "InvalidCommentToken";
+  ParseErrorCode2[ParseErrorCode2["UnexpectedEndOfComment"] = 11] = "UnexpectedEndOfComment";
+  ParseErrorCode2[ParseErrorCode2["UnexpectedEndOfString"] = 12] = "UnexpectedEndOfString";
+  ParseErrorCode2[ParseErrorCode2["UnexpectedEndOfNumber"] = 13] = "UnexpectedEndOfNumber";
+  ParseErrorCode2[ParseErrorCode2["InvalidUnicode"] = 14] = "InvalidUnicode";
+  ParseErrorCode2[ParseErrorCode2["InvalidEscapeCharacter"] = 15] = "InvalidEscapeCharacter";
+  ParseErrorCode2[ParseErrorCode2["InvalidCharacter"] = 16] = "InvalidCharacter";
+})(ParseErrorCode || (ParseErrorCode = {}));
+
+// src/guest/toolchains/vscode.ts
 var VERSION_MARKER = ".agent-sandbox-version";
 var desktopShortcut = (exe) => {
   if (!isWin) return;
-  const link = path42.join(os5.homedir(), "Desktop", "Visual Studio Code.lnk");
+  const link = path43.join(os7.homedir(), "Desktop", "Visual Studio Code.lnk");
   const q = (s) => "'" + s.replace(/'/g, "''") + "'";
   powershell("$s = (New-Object -ComObject WScript.Shell).CreateShortcut(" + q(link) + "); $s.TargetPath = " + q(exe) + "; $s.Arguments = " + q('"' + (process.env.AGENT_WORKSPACE ?? "") + '"') + "; $s.Save()");
 };
 var setupVscode = async (env, refresh) => {
   const root = tool("vscode");
-  const exe = path42.join(root, "Code.exe");
+  const exe = path43.join(root, "Code.exe");
   if (dryRun) {
     log("(dry run) would provision VS Code");
     return;
@@ -27861,27 +28569,27 @@ var setupVscode = async (env, refresh) => {
   if (!exists(exe) || refresh) {
     const release = await fetchJson("https://update.code.visualstudio.com/api/update/win32-" + (arch === "arm64" ? "arm64" : "x64") + "-archive/stable/latest");
     log("Downloading VS Code " + release.productVersion + " (~150 MB once) ...");
-    const keep = path42.join(root, "data");
+    const keep = path43.join(root, "data");
     const parked = root + "-data";
     if (exists(keep)) {
-      fs29.rmSync(parked, { recursive: true, force: true });
-      fs29.renameSync(keep, parked);
+      fs30.rmSync(parked, { recursive: true, force: true });
+      fs30.renameSync(keep, parked);
     }
     try {
       await installArchive(release.url, root, { sha256: release.sha256hash, locate: "Code.exe", fileName: "vscode.zip" });
-      fs29.writeFileSync(path42.join(root, VERSION_MARKER), release.productVersion);
+      fs30.writeFileSync(path43.join(root, VERSION_MARKER), release.productVersion);
     } finally {
       if (exists(parked)) {
         mkdirp(root);
-        fs29.rmSync(keep, { recursive: true, force: true });
-        fs29.renameSync(parked, keep);
+        fs30.rmSync(keep, { recursive: true, force: true });
+        fs30.renameSync(parked, keep);
       }
     }
   }
-  mkdirp(path42.join(root, "data"));
-  env.prepend.push(path42.join(root, "bin"));
+  mkdirp(path43.join(root, "data"));
+  env.prepend.push(path43.join(root, "bin"));
   desktopShortcut(exe);
-  const version2 = exists(path42.join(root, VERSION_MARKER)) ? fs29.readFileSync(path42.join(root, VERSION_MARKER), "utf8").trim() : "installed";
+  const version2 = exists(path43.join(root, VERSION_MARKER)) ? fs30.readFileSync(path43.join(root, VERSION_MARKER), "utf8").trim() : "installed";
   env.summary.push("vscode: " + version2 + " (portable; run code . or use the desktop shortcut)");
 };
 
@@ -27892,14 +28600,34 @@ var setupPythonTools = async (env, tools) => {
   await installOnce(env, "uv tool", tools, (pkg) => execAsync(uv, ["tool", "install", pkg], { env: { ...process.env, ...uvVars() } }));
 };
 var cargoTarget = (targetDir) => {
-  if (targetDir === "shared") return null;
-  if (targetDir === "separate") return path43.join(projectWorkspace(), "target", "sandbox");
-  if (targetDir === "local") return path43.join(localDir, "cargo-target");
+  if (targetDir === "shared" || targetDir === "separate") return null;
+  if (targetDir === "local") return path44.join(localDir, "cargo-target");
   return targetDir;
 };
+var cargoShim = (env, rust) => {
+  const real = path44.join(tool("rust", "cargo", "bin"), "cargo.exe");
+  if (rust.targetDir !== "separate" || !exists(real)) return;
+  const dir = mkdirp(tool("shims", "cargo"));
+  fs31.copyFileSync(ensureCompiled("cargoshim"), path44.join(dir, "cargo.exe"));
+  env.prepend.unshift(dir);
+  env.vars.AGENT_REAL_CARGO = real;
+};
+var cargoDefaults = (host) => {
+  const file3 = tool("rust", "cargo", "config.toml");
+  if (exists(file3) || !exists(path44.dirname(file3))) return;
+  const jobs = Math.max(2, Math.min(4, Math.floor(os8.cpus().length / 4)));
+  const gnu = host.endsWith("-gnu");
+  fs31.writeFileSync(file3, [
+    "# Written by windows-development-sandbox once; edit freely, it is never overwritten.",
+    "[build]",
+    "jobs = " + jobs,
+    "",
+    ...gnu ? ["[profile.dev]", 'debug = "line-tables-only"', "", "[profile.test]", 'debug = "line-tables-only"', ""] : []
+  ].join("\n"));
+};
 var rustCaches = (rust) => {
   const target = cargoTarget(rust.targetDir);
-  return { ...target ? { CARGO_TARGET_DIR: target } : {}, ...process.env.SCCACHE_DIR ? {} : { SCCACHE_DIR: path43.join(dataDir, "cache", "sccache") } };
+  return { ...target ? { CARGO_TARGET_DIR: target } : {}, ...process.env.SCCACHE_DIR ? {} : { SCCACHE_DIR: path44.join(dataDir, "cache", "sccache") } };
 };
 var rustHost = (config2) => {
   if (config2.rust.host !== "auto") return config2.rust.host;
@@ -27907,6 +28635,7 @@ var rustHost = (config2) => {
   return cpu + (wanted(config2.msvc.enabled, "msvc") ? "-pc-windows-msvc" : "-pc-windows-gnu");
 };
 var plan = (config2, versions, o) => {
+  const apps = Boolean(o.apps && (o.apps.install.length || Object.keys(o.apps.custom).length));
   const java = wanted(config2.java.enabled, "java");
   const python = wanted(config2.python.enabled, "python");
   return [
@@ -27926,6 +28655,10 @@ var plan = (config2, versions, o) => {
       run: async (env) => {
         await setupRust(env, { ...config2.rust, host: rustHost(config2) }, o.refresh);
         Object.assign(env.vars, rustCaches(config2.rust));
+        if (!dryRun) {
+          cargoDefaults(rustHost(config2));
+          cargoShim(env, config2.rust);
+        }
       }
     },
     { name: ".NET", on: wanted(config2.dotnet.enabled, "dotnet"), run: (env) => setupDotnet(env, config2.dotnet, o.refresh) },
@@ -27933,7 +28666,8 @@ var plan = (config2, versions, o) => {
     { name: "Java", on: java, run: (env) => setupJava(env, config2.java) },
     { name: "Ruby", on: wanted(config2.ruby.enabled, "ruby"), run: (env) => setupRuby(env, config2.ruby) },
     // PHP installs the Visual C++ runtime itself: one installer at a time.
-    { name: "Visual C++ runtime", on: config2.vcRuntime.enabled, shared: true, run: async (env) => {
+    // Many apps (bat, delta, Neovim, most GUIs, your own programs) are built against it too.
+    { name: "Visual C++ runtime", on: config2.vcRuntime.enabled || apps, shared: true, run: async (env) => {
       await setupVcRuntime(env);
     } },
     { name: "PHP", on: wanted(config2.php.enabled, "php"), after: ["Visual C++ runtime"], run: (env) => setupPhp(env, config2.php) },
@@ -27943,8 +28677,10 @@ var plan = (config2, versions, o) => {
     { name: "PowerShell 7", on: wanted(config2.pwsh.enabled, "pwsh"), run: (env) => setupPwsh(env, o.refresh) },
     // The openssl tool comes from Git's install: after Git.
     { name: "CLI tools", on: Object.values(config2.cli).some((v) => v !== false), after: ["Git"], run: (env) => setupCli(env, config2.cli, o.gitAccess, o.refresh) },
-    { name: "Mesa 3D", on: config2.mesa.enabled, shared: true, run: (env) => setupMesa(env, config2.mesa) },
+    { name: "Mesa 3D", on: config2.mesa.enabled || appsNeedMesa(o.apps), shared: true, run: (env) => setupMesa(env, config2.mesa) },
     { name: "VS Code", on: config2.vscode.enabled, shared: true, run: (env) => setupVscode(env, o.refresh) },
+    // Desktop apps and extra tools (apps.install / apps.custom); games and 3D apps copy Mesa's OpenGL next to them.
+    { name: "Apps", on: apps, shared: true, after: ["Mesa 3D", "Visual C++ runtime"], run: (env) => setupApps(env, o.apps, { gitAccess: o.gitAccess, refresh: o.refresh }) },
     { name: "Python tools", on: python && config2.python.tools.length > 0, after: ["Python", "uv"], run: (env) => setupPythonTools(env, config2.python.tools) },
     // DynamoDB Local runs on Java: the Java step installs the JDK first instead of racing it.
     // One server per database in the sandbox: a project that joins later shares the one the boot started.
@@ -27953,7 +28689,8 @@ var plan = (config2, versions, o) => {
 };
 
 // src/guest/toolchains/index.ts
-var PARALLEL = 4;
+var PARALLEL2 = 4;
+var currentStep = new AsyncLocalStorage2();
 var locks = /* @__PURE__ */ new Map();
 var lockKey = (name) => name.split(" ")[0].toLowerCase();
 var exclusive = async (name, work) => {
@@ -27979,10 +28716,19 @@ var runSteps = async (steps, o) => {
   const running = /* @__PURE__ */ new Set();
   const waiting = [];
   let done = 0;
-  const say = o.report ?? ((message) => setSandboxStatus("provisioning", message));
+  const percent = /* @__PURE__ */ new Map();
+  const active = () => [...running].map((name) => ({ name, ...percent.has(name) ? { percent: percent.get(name) } : {} }));
+  const say = o.report ?? ((message) => setSandboxStatus("provisioning", message, { active: active(), done, total: steps.length }));
   const report = () => {
     if (running.size) say("Installing " + [...running].join(", ") + " (" + done + " of " + steps.length + " done)");
   };
+  if (!o.report) watchDownloads(() => {
+    const name = currentStep.getStore();
+    return name ? (fraction) => {
+      percent.set(name, Math.round(fraction * 100));
+      report();
+    } : null;
+  });
   for (const s of steps) {
     finished.set(s.name, (async () => {
       await Promise.all((s.after ?? []).map((name) => finished.get(name)));
@@ -27992,20 +28738,26 @@ var runSteps = async (steps, o) => {
         done++;
         return;
       }
-      while (running.size >= PARALLEL) await new Promise((r) => waiting.push(r));
+      while (running.size >= PARALLEL2) await new Promise((r) => waiting.push(r));
       running.add(s.name);
       report();
       try {
-        await exclusive(s.name, () => step(s.name, envs.get(s.name), async () => s.run(envs.get(s.name))));
+        await currentStep.run(s.name, () => exclusive(s.name, () => step(s.name, envs.get(s.name), async () => s.run(envs.get(s.name)))));
       } finally {
         running.delete(s.name);
+        percent.delete(s.name);
         done++;
         report();
         waiting.shift()?.();
       }
     })());
   }
-  await Promise.all(finished.values());
+  try {
+    await Promise.all(finished.values());
+  } finally {
+    if (!o.report) watchDownloads(null);
+  }
+  if (!o.report) setSandboxStatus("provisioning", "Set up " + steps.length + " toolchains and databases", { active: [], done, total: steps.length });
   return envs;
 };
 var setupToolchains = async (config2, versions, options, run2 = {}) => {
@@ -28031,14 +28783,14 @@ var provisionedFor = (cwd) => [...ready.values()].filter((p) => isWithin(p.spec.
 var provisionedProjects = () => [...ready.values()];
 var cmdSet = (env, names) => names.filter((n) => env[n] !== void 0 && !/[\r\n]/.test(String(env[n]))).map((n) => '@set "' + n + "=" + String(env[n]).replace(/%/g, "%%") + '"');
 var writeShell = (spec, env, names) => {
-  const dir = mkdirp(path44.join(localDir, "projects", spec.name));
-  fs30.writeFileSync(path44.join(dir, "env.cmd"), [...cmdSet(env, [...names, "PATH"]), ""].join("\r\n"));
-  fs30.writeFileSync(path44.join(dir, "shell.cmd"), ['@call "' + path44.join(dir, "env.cmd") + '"', '@cd /d "' + spec.workspace + '"', "@title " + spec.name, ""].join("\r\n"));
-  const bin = mkdirp(path44.join(localDir, "bin"));
-  fs30.writeFileSync(path44.join(bin, "sbx-shell.cmd"), [
-    '@if "%~1"=="" (echo Usage: sbx-shell ^<project^>   ^(a terminal in that project with its tools^) & dir /b "' + path44.join(localDir, "projects") + '" & exit /b 2)',
-    '@if not exist "' + path44.join(localDir, "projects") + '\\%~1\\shell.cmd" (echo No project %~1 in this sandbox. & exit /b 2)',
-    '@cmd /k ""' + path44.join(localDir, "projects") + '\\%~1\\shell.cmd""',
+  const dir = mkdirp(path45.join(localDir, "projects", spec.name));
+  fs32.writeFileSync(path45.join(dir, "env.cmd"), [...cmdSet(env, [...names, "PATH"]), ""].join("\r\n"));
+  fs32.writeFileSync(path45.join(dir, "shell.cmd"), ['@call "' + path45.join(dir, "env.cmd") + '"', '@cd /d "' + spec.workspace + '"', "@title " + spec.name, ""].join("\r\n"));
+  const bin = mkdirp(path45.join(localDir, "bin"));
+  fs32.writeFileSync(path45.join(bin, "sbx-shell.cmd"), [
+    '@if "%~1"=="" (echo Usage: sbx-shell ^<project^>   ^(a terminal in that project with its tools^) & dir /b "' + path45.join(localDir, "projects") + '" & exit /b 2)',
+    '@if not exist "' + path45.join(localDir, "projects") + '\\%~1\\shell.cmd" (echo No project %~1 in this sandbox. & exit /b 2)',
+    '@cmd /k ""' + path45.join(localDir, "projects") + '\\%~1\\shell.cmd""',
     ""
   ].join("\r\n"));
 };
@@ -28077,10 +28829,10 @@ var provision = async (spec, say) => {
     saveProjectStatus(spec.name, spec.workspace, "provisioning", m, spec.databases, []);
     say(m);
   }, reuse: boot?.steps }));
-  tools.prepend.push(path44.join(localDir, "bin"));
+  tools.prepend.push(path45.join(localDir, "bin"));
   const env = agentEnv(tools, { workspace: spec.workspace, project: spec.name, base });
-  const specFile = path44.join(mkdirp(path44.join(localDir, "projects", spec.name)), "project.json");
-  fs30.writeFileSync(specFile, JSON.stringify(spec));
+  const specFile = path45.join(mkdirp(path45.join(localDir, "projects", spec.name)), "project.json");
+  fs32.writeFileSync(specFile, JSON.stringify(spec));
   env.AGENT_PROJECT_FILE = specFile;
   addMachineEnvironment(tools.vars, [...tools.prepend, ...tools.append], true);
   try {
@@ -28154,14 +28906,83 @@ var execCommand = (req) => {
   });
 };
 
+// src/guest/daemon/relays.ts
+import net2 from "node:net";
+
+// src/shared/netpolicy.ts
+var relayPort = (index) => 38100 + index;
+
+// src/guest/daemon/relays.ts
+var startRelays = () => {
+  (session.network.forwardPorts ?? []).forEach((f, i) => {
+    const server = net2.createServer((client) => {
+      const target = net2.connect(f.sandbox, "127.0.0.1");
+      client.pipe(target).pipe(client);
+      target.on("error", () => client.destroy());
+      client.on("error", () => target.destroy());
+    });
+    server.on("error", (e) => warn("Port forward " + f.pc + " -> " + f.sandbox + " could not start: " + errMsg(e)));
+    server.listen(relayPort(i), "0.0.0.0", () => log("Port forward: the PC's localhost:" + f.pc + " reaches localhost:" + f.sandbox + " here."));
+  });
+};
+
+// src/guest/audit.ts
+import fs33 from "node:fs";
+import path47 from "node:path";
+import { spawnSync as spawnSync4 } from "node:child_process";
+
+// src/guest/audit-parse.ts
+import path46 from "node:path";
+var NOISE = /* @__PURE__ */ new Set(["conhost.exe", "svchost.exe", "backgroundtaskhost.exe", "runtimebroker.exe", "wmiprvse.exe", "dllhost.exe", "searchprotocolhost.exe", "searchfilterhost.exe", "taskhostw.exe", "sppsvc.exe", "wermgr.exe", "consent.exe", "smartscreen.exe", "mpcmdrun.exe", "compattelrunner.exe", "wevtutil.exe", "audiodg.exe", "ctfmon.exe", "sihost.exe", "werfault.exe", "msmpeng.exe", "nissrv.exe", "usoclient.exe", "musnotification.exe"]);
+var decode3 = (s) => s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&amp;/g, "&");
+var field = (event, name) => decode3(new RegExp("<Data Name='" + name + "'>([^<]*)</Data>").exec(event)?.[1] ?? "");
+var parseProcessEvents = (xml) => {
+  const lines = [];
+  let last = 0;
+  for (const event of xml.split("</Event>")) {
+    const id = Number(/<EventRecordID>(\d+)<\/EventRecordID>/.exec(event)?.[1] ?? 0);
+    if (!id) continue;
+    last = Math.max(last, id);
+    const program = field(event, "NewProcessName");
+    if (!program || NOISE.has(path46.win32.basename(program).toLowerCase())) continue;
+    const t = /SystemTime='([^']+)'/.exec(event)?.[1] ?? (/* @__PURE__ */ new Date()).toISOString();
+    lines.push(JSON.stringify({ t, k: "proc", p: program.slice(0, 1024), c: field(event, "CommandLine").slice(0, 2e3), pp: field(event, "ParentProcessName").slice(0, 1024) }));
+  }
+  return { lines, last };
+};
+
+// src/guest/audit.ts
+var MAX_PER_PASS = 2e3;
+var auditOn = () => Boolean(session.auditProcesses) && isWin && !dryRun;
+var wevtutil = () => path47.join(process.env.WINDIR ?? "C:\\Windows", "System32", "wevtutil.exe");
+var newestRecord = () => {
+  const r = spawnSync4(wevtutil(), ["qe", "Security", "/q:*[System[(EventID=4688)]]", "/f:xml", "/c:1", "/rd:true"], { encoding: "utf8", windowsHide: true });
+  return parseProcessEvents(r.stdout ?? "").last;
+};
+var startProcessCollector = () => {
+  if (!auditOn()) return;
+  let last = newestRecord();
+  const pass = () => {
+    try {
+      const r = spawnSync4(wevtutil(), ["qe", "Security", "/q:*[System[(EventID=4688) and (EventRecordID>" + last + ")]]", "/f:xml", "/c:" + MAX_PER_PASS], { encoding: "utf8", windowsHide: true, maxBuffer: 64 * 1024 * 1024 });
+      const { lines, last: newest } = parseProcessEvents(r.stdout ?? "");
+      if (newest) last = newest;
+      if (lines.length) fs33.writeFileSync(path47.join(mkdirp(run.audit), Date.now() + "-" + process.pid + ".jsonl"), lines.join("\n") + "\n");
+    } catch (e) {
+      warn("audit: " + errMsg(e));
+    }
+  };
+  setInterval(pass, 15e3).unref?.();
+};
+
 // src/guest/daemon/session.ts
-import path48 from "node:path";
+import path52 from "node:path";
 import crypto3 from "node:crypto";
 import { spawn as spawn7 } from "node:child_process";
 
 // src/shared/pty-client.ts
-import net2 from "node:net";
-var FrameType = { Hello: 1, Input: 2, Resize: 3, Restart: 4, Ping: 5, Output: 16, Exit: 17, Error: 18, Restarting: 19, Status: 20 };
+import net3 from "node:net";
+var FrameType = { Hello: 1, Input: 2, Resize: 3, Restart: 4, Ping: 5, Output: 16, Exit: 17, Error: 18, Restarting: 19, Status: 20, Console: 21 };
 var HelloFlag = { ControlOnly: 1, Query: 2 };
 var encodeFrame = (type, payload = Buffer.alloc(0)) => {
   const header = Buffer.alloc(5);
@@ -28178,8 +28999,8 @@ var helloFrame = (token, cols, rows, flags = 0) => {
 };
 var MAX_FRAME_BYTES = 1 << 20;
 var connectOnce = (host, port, timeoutMs) => {
-  return new Promise((resolve, reject) => {
-    const socket = net2.connect({ host, port });
+  return new Promise((resolve2, reject) => {
+    const socket = net3.connect({ host, port });
     const timer = setTimeout(() => {
       socket.destroy();
       reject(new Error("timed out connecting to " + host + ":" + port));
@@ -28187,7 +29008,7 @@ var connectOnce = (host, port, timeoutMs) => {
     socket.once("connect", () => {
       clearTimeout(timer);
       socket.setNoDelay(true);
-      resolve(socket);
+      resolve2(socket);
     });
     socket.once("error", (e) => {
       clearTimeout(timer);
@@ -28208,11 +29029,11 @@ var connect = async (endpoint, timeoutMs = 3e3) => {
 };
 var sendControl = async (endpoint, type) => {
   const socket = await connect(endpoint);
-  await new Promise((resolve) => socket.end(Buffer.concat([helloFrame(endpoint.token, 80, 24, HelloFlag.ControlOnly), encodeFrame(type)]), resolve));
+  await new Promise((resolve2) => socket.end(Buffer.concat([helloFrame(endpoint.token, 80, 24, HelloFlag.ControlOnly), encodeFrame(type)]), resolve2));
 };
 
 // src/guest/cmdline.ts
-import path45 from "node:path";
+import path48 from "node:path";
 var quoted = (arg) => '"' + arg.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/, "$1$1") + '"';
 var quoteArg = (arg) => arg !== "" && !/[\s"]/.test(arg) ? arg : quoted(arg);
 var cmdArgs = (args) => {
@@ -28223,11 +29044,11 @@ var cmdArgs = (args) => {
     return !inQuotes && /[&|<>^]/.test(c) ? "^^^" + c : c;
   }).join("");
 };
-var commandLine = (file3, args) => path45.win32.basename(file3).toLowerCase() === "cmd.exe" ? [quoteArg(file3), cmdArgs(args)].filter(Boolean).join(" ") : [file3, ...args].map(quoteArg).join(" ");
+var commandLine = (file3, args) => path48.win32.basename(file3).toLowerCase() === "cmd.exe" ? [quoteArg(file3), cmdArgs(args)].filter(Boolean).join(" ") : [file3, ...args].map(quoteArg).join(" ");
 
 // src/guest/ptyhost.ts
-import fs31 from "node:fs";
-import path46 from "node:path";
+import fs34 from "node:fs";
+import path49 from "node:path";
 import { spawn as spawn6 } from "node:child_process";
 var ensurePtyHost = () => ensureCompiled("ptyhost");
 var waitForPtyHost = async (child, port, timeoutMs) => {
@@ -28243,33 +29064,37 @@ var waitForPtyHost = async (child, port, timeoutMs) => {
   }
   throw new Error("the session host did not start listening on port " + port);
 };
-var ptyHostLog = (id) => path46.join(logsDir, "ptyhost-" + id + ".log");
+var ptyHostLog = (id) => path49.join(logsDir, "ptyhost-" + id + ".log");
 var ptyHostLogTail = (id, lines = 12) => {
   try {
-    return fs31.readFileSync(ptyHostLog(id), "utf8").trim().split(/\r?\n/).slice(-lines).join("\n");
+    return fs34.readFileSync(ptyHostLog(id), "utf8").trim().split(/\r?\n/).slice(-lines).join("\n");
   } catch {
     return "";
   }
 };
-var startPtyHost = (o) => spawn6(o.exe, [String(o.port), o.token, String(o.cols), String(o.rows), ptyHostLog(o.id), o.command, o.restartCommand], {
-  cwd: o.cwd,
-  env: { ...o.env, PTYHOST_BIND: o.remote ? "any" : "loopback" },
-  detached: true,
-  stdio: "ignore",
-  windowsHide: true
-});
+var conptyDll = () => {
+  const dll = path49.join(toolsDir, "conpty", "conpty.dll");
+  return session.provisioning.conpty?.enabled !== false && fs34.existsSync(dll) && fs34.existsSync(path49.join(toolsDir, "conpty", "OpenConsole.exe")) ? dll : null;
+};
+var startPtyHost = (o) => {
+  const env = { ...o.env, PTYHOST_BIND: o.remote ? "any" : "loopback" };
+  delete env.PTYHOST_CONPTY;
+  const dll = conptyDll();
+  if (dll) env.PTYHOST_CONPTY = dll;
+  return spawn6(o.exe, [String(o.port), o.token, String(o.cols), String(o.rows), ptyHostLog(o.id), o.command, o.restartCommand], { cwd: o.cwd, env, detached: true, stdio: "ignore", windowsHide: true });
+};
 
 // src/guest/setup/agents.ts
-import fs32 from "node:fs";
-import path47 from "node:path";
+import fs35 from "node:fs";
+import path50 from "node:path";
 var harnessPaths = (name, harness) => {
-  const dir = path47.join(toolsDir, "agents", name);
+  const dir = path50.join(toolsDir, "agents", name);
   const exe = harness.hostExecutable ?? (harness.uvBin ? harness.uvBin + ".exe" : null);
-  return { dir, exe: exe ? path47.join(dir, exe) : null, cmd: harness.npmBin ? path47.join(dir, harness.npmBin + ".cmd") : null };
+  return { dir, exe: exe ? path50.join(dir, exe) : null, cmd: harness.npmBin ? path50.join(dir, harness.npmBin + ".cmd") : null };
 };
 var installViaNpm = async (name, harness, dir, env) => {
   if (!harness.npmPackage) throw new Error("No npmPackage configured for " + name + " and no host executable was available.");
-  const npmCli = path47.join(path47.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+  const npmCli = path50.join(path50.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
   const args = [npmCli, "install", "--global", "--prefix", dir, harness.npmPackage, "--no-fund", "--no-audit"];
   log("Installing " + harness.npmPackage + " (this can take a minute)...");
   if (dryRun) {
@@ -28280,7 +29105,7 @@ var installViaNpm = async (name, harness, dir, env) => {
   await execAsync(process.execPath, args, { env });
 };
 var installViaUv = async (name, harness, dir, env) => {
-  const uv = path47.join(toolsDir, "uv", "uv.exe");
+  const uv = path50.join(toolsDir, "uv", "uv.exe");
   log("Installing " + harness.uvPackage + " with uv (this can take a minute)...");
   if (dryRun) {
     log("(dry run) uv tool install " + harness.uvPackage);
@@ -28306,9 +29131,9 @@ var installHarness = async (name, harness, env, refresh) => {
   }
   mkdirp(p.dir);
   if (session.provisioning.copyFromHost && harness.hostExecutable && name === session.harnessName) {
-    const source = path47.join(hostToolsDir, "agents", name, harness.hostExecutable);
+    const source = path50.join(hostToolsDir, "agents", name, harness.hostExecutable);
     if (exists(source) && p.exe) {
-      fs32.copyFileSync(source, p.exe);
+      fs35.copyFileSync(source, p.exe);
       log("Copied " + name + " from this PC: " + source);
       return;
     }
@@ -28327,11 +29152,13 @@ var resolveLaunch = (name, harness) => {
 };
 
 // src/guest/setup/network.ts
-import os6 from "node:os";
-var guestAddresses = () => Object.values(os6.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address);
+import os9 from "node:os";
+import path51 from "node:path";
+var HOSTS_FILE = path51.join(process.env.WINDIR ?? "C:\\Windows", "System32", "drivers", "etc", "hosts");
+var guestAddresses = () => Object.values(os9.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address);
 
 // src/guest/daemon/shutdown.ts
-import { spawnSync as spawnSync4 } from "node:child_process";
+import { spawnSync as spawnSync5 } from "node:child_process";
 var maybeShutdown = () => {
   if (!session.headless || !isWin) return;
   const idle = () => live.size === 0 && pending.starting === 0 && scanRequests(dataDir).valid.length === 0;
@@ -28340,14 +29167,14 @@ var maybeShutdown = () => {
     if (!idle()) return;
     log("Headless sandbox has no sessions left; shutting down.");
     safely("claude-mem save", saveClaudeMem);
-    spawnSync4(SYSTEM.shutdown(), ["/s", "/t", "5"], { windowsHide: true });
+    spawnSync5(SYSTEM.shutdown(), ["/s", "/t", "5"], { windowsHide: true });
   }, 15e3);
 };
 
 // src/guest/daemon/session.ts
 var terminalTab = (id, title, cwd) => {
-  const view = [process.execPath, path48.join(path48.dirname(process.argv[1]), "view.js"), id];
-  const wt = path48.join(toolsDir, "terminal", "wt.exe");
+  const view = [process.execPath, path52.join(path52.dirname(process.argv[1]), "view.js"), id];
+  const wt = path52.join(toolsDir, "terminal", "wt.exe");
   if (exists(wt)) spawn7(wt, ["-w", "0", "nt", "--title", title, "-d", cwd, ...view], { detached: true, stdio: "ignore" }).unref();
   else spawn7(SYSTEM.cmd(), ["/d", "/c", "start", title, ...view], { detached: true, stdio: "ignore", cwd }).unref();
 };
@@ -28392,7 +29219,7 @@ var launchPtyHost = async (req, remote, env, say) => {
     await waitForPtyHost(child, port, 15e3);
   } catch (e) {
     const tail = ptyHostLogTail(req.id);
-    throw new Error(errMsg(e) + (tail ? ". From its log:\n" + tail : "") + "\nLog: " + path48.join(dataDir, "logs", "ptyhost-" + req.id + ".log"));
+    throw new Error(errMsg(e) + (tail ? ". From its log:\n" + tail : "") + "\nLog: " + path52.join(dataDir, "logs", "ptyhost-" + req.id + ".log"));
   }
   return { child, port, token };
 };
@@ -28414,7 +29241,7 @@ var startSession = async (req) => {
     saveStatus(status);
   };
   pending.starting++;
-  if (req.id !== session.launchId && process.env.AGENT_NO_TABS !== "1") safely("terminal tab", () => terminalTab(req.id, req.harness + " " + path48.basename(req.cwd), req.cwd));
+  if (req.id !== session.launchId && process.env.AGENT_NO_TABS !== "1") safely("terminal tab", () => terminalTab(req.id, req.harness + " " + path52.basename(req.cwd), req.cwd));
   try {
     const place = await placeFor(req, say);
     const remote = session.networking && session.attach.enabled;
@@ -28470,9 +29297,9 @@ var handle = (req) => {
 };
 var tick = () => {
   const { valid, invalid } = scanRequests(dataDir);
-  for (const file3 of invalid) safely("removing an invalid request", () => fs33.rmSync(file3, { recursive: true, force: true }));
+  for (const file3 of invalid) safely("removing an invalid request", () => fs36.rmSync(file3, { recursive: true, force: true }));
   for (const req of valid) {
-    safely("claiming a request", () => fs33.rmSync(run.request(req.id), { force: true }));
+    safely("claiming a request", () => fs36.rmSync(run.request(req.id), { force: true }));
     if (readSession(dataDir, req.id)) continue;
     void Promise.resolve(handle(req)).catch((e) => respond(req.id, { ok: false, message: errMsg(e) }));
   }
@@ -28491,4 +29318,6 @@ var loop = () => {
   }
 };
 log("Session daemon started (pid " + process.pid + ").");
+safely("port forwards", startRelays);
+safely("audit", startProcessCollector);
 loop();