windows-development-sandbox 1.1.0 → 1.4.1

package/dist/runtime/view.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path3) {
-          path3 = castPath(path3, object2);
-          var index = 0, length = path3.length;
+        function baseGet(object2, path4) {
+          path4 = castPath(path4, object2);
+          var index = 0, length = path4.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path3[index++])];
+            object2 = object2[toKey(path4[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path3, args) {
-          path3 = castPath(path3, object2);
-          object2 = parent(object2, path3);
-          var func = object2 == null ? object2 : object2[toKey(last(path3))];
+        function baseInvoke(object2, path4, args) {
+          path4 = castPath(path4, object2);
+          object2 = parent(object2, path4);
+          var func = object2 == null ? object2 : object2[toKey(last(path4))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path3, srcValue) {
-          if (isKey(path3) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path3), srcValue);
+        function baseMatchesProperty(path4, srcValue) {
+          if (isKey(path4) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path4), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path3);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path3) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path4);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path4) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path3) {
-            return hasIn(object2, path3);
+          return basePickBy(object2, paths, function(value, path4) {
+            return hasIn(object2, path4);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path3 = paths[index], value = baseGet(object2, path3);
-            if (predicate(value, path3)) {
-              baseSet(result2, castPath(path3, object2), value);
+            var path4 = paths[index], value = baseGet(object2, path4);
+            if (predicate(value, path4)) {
+              baseSet(result2, castPath(path4, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path3) {
+        function basePropertyDeep(path4) {
           return function(object2) {
-            return baseGet(object2, path3);
+            return baseGet(object2, path4);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path3, value, customizer) {
+        function baseSet(object2, path4, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length, lastIndex = length - 1, nested = object2;
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path3[index]), newValue = value;
+            var key = toKey(path4[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path3[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path4[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path3) {
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length;
+        function baseUnset(object2, path4) {
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path3[index]);
+            var key = toKey(path4[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path3);
-          return obj == null || delete obj[toKey(last(path3))];
+          var obj = parent(object2, path4);
+          return obj == null || delete obj[toKey(last(path4))];
         }
-        function baseUpdate(object2, path3, updater, customizer) {
-          return baseSet(object2, path3, updater(baseGet(object2, path3)), customizer);
+        function baseUpdate(object2, path4, updater, customizer) {
+          return baseSet(object2, path4, updater(baseGet(object2, path4)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path3, hasFunc) {
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length, result2 = false;
+        function hasPath(object2, path4, hasFunc) {
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path3[index]);
+            var key = toKey(path4[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path3) {
-          return path3.length < 2 ? object2 : baseGet(object2, baseSlice(path3, 0, -1));
+        function parent(object2, path4) {
+          return path4.length < 2 ? object2 : baseGet(object2, baseSlice(path4, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path3, args) {
-          var index = -1, isFunc = typeof path3 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path4, args) {
+          var index = -1, isFunc = typeof path4 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path3, value, args) : baseInvoke(value, path3, args);
+            result2[++index] = isFunc ? apply(path4, value, args) : baseInvoke(value, path4, args);
           });
           return result2;
         });
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path3, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path3);
+        function get(object2, path4, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path4);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path3) {
-          return object2 != null && hasPath(object2, path3, baseHas);
+        function has(object2, path4) {
+          return object2 != null && hasPath(object2, path4, baseHas);
         }
-        function hasIn(object2, path3) {
-          return object2 != null && hasPath(object2, path3, baseHasIn);
+        function hasIn(object2, path4) {
+          return object2 != null && hasPath(object2, path4, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path3) {
-            path3 = castPath(path3, object2);
-            isDeep || (isDeep = path3.length > 1);
-            return path3;
+          paths = arrayMap(paths, function(path4) {
+            path4 = castPath(path4, object2);
+            isDeep || (isDeep = path4.length > 1);
+            return path4;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path3) {
-            return predicate(value, path3[0]);
+          return basePickBy(object2, props, function(value, path4) {
+            return predicate(value, path4[0]);
           });
         }
-        function result(object2, path3, defaultValue) {
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length;
+        function result(object2, path4, defaultValue) {
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path3[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path4[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path3, value) {
-          return object2 == null ? object2 : baseSet(object2, path3, value);
+        function set2(object2, path4, value) {
+          return object2 == null ? object2 : baseSet(object2, path4, value);
         }
-        function setWith(object2, path3, value, customizer) {
+        function setWith(object2, path4, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path3, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path4, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path3) {
-          return object2 == null ? true : baseUnset(object2, path3);
+        function unset(object2, path4) {
+          return object2 == null ? true : baseUnset(object2, path4);
         }
-        function update(object2, path3, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path3, castFunction(updater));
+        function update(object2, path4, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path4, castFunction(updater));
         }
-        function updateWith(object2, path3, updater, customizer) {
+        function updateWith(object2, path4, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path3, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path4, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path3, srcValue) {
-          return baseMatchesProperty(path3, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path4, srcValue) {
+          return baseMatchesProperty(path4, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path3, args) {
+        var method = baseRest(function(path4, args) {
           return function(object2) {
-            return baseInvoke(object2, path3, args);
+            return baseInvoke(object2, path4, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path3) {
-            return baseInvoke(object2, path3, args);
+          return function(path4) {
+            return baseInvoke(object2, path4, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path3) {
-          return isKey(path3) ? baseProperty(toKey(path3)) : basePropertyDeep(path3);
+        function property(path4) {
+          return isKey(path4) ? baseProperty(toKey(path4)) : basePropertyDeep(path4);
         }
         function propertyOf(object2) {
-          return function(path3) {
-            return object2 == null ? undefined2 : baseGet(object2, path3);
+          return function(path4) {
+            return object2 == null ? undefined2 : baseGet(object2, path4);
           };
         }
         var range = createRange();
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path3, args) {
-          if (typeof path3 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path4, args) {
+          if (typeof path4 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path3, args);
+            return baseInvoke(value, path4, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5533,8 +5533,87 @@ var require_lodash = __commonJS({
 
 // src/shared/pty-client.ts
 import net from "node:net";
-var FrameType = { Hello: 1, Input: 2, Resize: 3, Restart: 4, Ping: 5, Output: 16, Exit: 17, Error: 18, Restarting: 19, Status: 20 };
+
+// src/shared/console-input.ts
+import { spawn } from "node:child_process";
+
+// src/shared/system.ts
+import path from "node:path";
+var systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
+var system32 = (exe) => path.join(systemRoot(), "System32", exe);
+var SYSTEM = {
+  cmd: () => system32("cmd.exe"),
+  powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
+  tasklist: () => system32("tasklist.exe"),
+  tar: () => system32("tar.exe"),
+  reg: () => system32("reg.exe"),
+  netsh: () => system32("netsh.exe"),
+  netstat: () => system32("NETSTAT.EXE"),
+  route: () => system32("ROUTE.EXE"),
+  ipconfig: () => system32("ipconfig.exe"),
+  robocopy: () => system32("Robocopy.exe"),
+  shutdown: () => system32("shutdown.exe"),
+  dism: () => system32("Dism.exe"),
+  msiexec: () => system32("msiexec.exe")
+};
+
+// src/shared/console-input.ts
+var script = (pid) => [
+  'Add-Type -TypeDefinition @"',
+  "using System; using System.Runtime.InteropServices;",
+  "public static class SbxVtInput {",
+  '  [DllImport("kernel32.dll")] static extern bool FreeConsole();',
+  '  [DllImport("kernel32.dll")] static extern bool AttachConsole(uint pid);',
+  '  [DllImport("kernel32.dll", CharSet = CharSet.Unicode)] static extern IntPtr CreateFileW(string name, uint access, uint share, IntPtr security, uint creation, uint flags, IntPtr template);',
+  '  [DllImport("kernel32.dll")] static extern bool GetConsoleMode(IntPtr handle, out uint mode);',
+  '  [DllImport("kernel32.dll")] static extern bool SetConsoleMode(IntPtr handle, uint mode);',
+  '  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);',
+  "  public static int On(uint pid) {",
+  "    FreeConsole();",
+  "    if (!AttachConsole(pid)) return 2;",
+  '    IntPtr input = CreateFileW("CONIN$", 0xC0000000, 3, IntPtr.Zero, 3, 0, IntPtr.Zero);',
+  "    if (input == new IntPtr(-1)) return 3;",
+  "    uint mode; bool ok = GetConsoleMode(input, out mode) && SetConsoleMode(input, mode | 0x200);",
+  "    CloseHandle(input);",
+  "    FreeConsole();",
+  "    return ok ? 0 : 4;",
+  "  }",
+  "}",
+  '"@',
+  "exit [SbxVtInput]::On(" + pid + ")"
+].join("\n");
+var enableVtInput = () => {
+  if (process.platform !== "win32" || !process.stdin.isTTY) return { ready: Promise.resolve(false), stop: () => Promise.resolve() };
+  let child = null;
+  let exited = Promise.resolve();
+  const ready = new Promise((resolve) => {
+    try {
+      child = spawn(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-EncodedCommand", Buffer.from(script(process.pid), "utf16le").toString("base64")], { stdio: "ignore", windowsHide: true });
+    } catch {
+      resolve(false);
+      return;
+    }
+    exited = new Promise((done) => {
+      child?.on("exit", (code) => {
+        resolve(code === 0);
+        done();
+      });
+      child?.on("error", () => {
+        resolve(false);
+        done();
+      });
+    });
+  });
+  return { ready, stop: () => {
+    if (child && child.exitCode === null && child.signalCode === null) child.kill();
+    return exited;
+  } };
+};
+
+// src/shared/pty-client.ts
+var FrameType = { Hello: 1, Input: 2, Resize: 3, Restart: 4, Ping: 5, Output: 16, Exit: 17, Error: 18, Restarting: 19, Status: 20, Console: 21 };
 var PING_INTERVAL_MS = 5e3;
+var MOUSE_OFF = "\x1B[?1000l\x1B[?1002l\x1B[?1003l\x1B[?1005l\x1B[?1006l\x1B[?1015l";
 var encodeFrame = (type, payload = Buffer.alloc(0)) => {
   const header = Buffer.alloc(5);
   header.writeUInt8(type, 0);
@@ -5570,18 +5649,111 @@ var FrameReader = class {
     return frames;
   }
 };
+var KEPT_OSC = (body) => {
+  const number4 = /^(\d{1,4})(;|$)/.exec(body);
+  if (!number4) return false;
+  const n = Number(number4[1]);
+  return n <= 2 || n === 8 || n === 133 || n === 9 && body.startsWith(number4[1] + ";4;");
+};
+var MAX_KEPT_STRING = 4096;
 var OutputFilter = class {
-  carry = "";
+  /** text: normal output; esc: after ESC; c2: after a 0xC2 lead byte; string: inside an OSC/DCS/...; stringEsc / stringC2: a possible terminator inside one. */
+  state = "text";
+  /** The string being read: an OSC worth keeping is collected until its terminator; null = being dropped. */
+  body = null;
   push(chunk) {
-    let text = (this.carry + chunk.toString("latin1")).replace(/\x1b\]52;[^\x07\x1b]*(\x07|\x1b\\)/g, "");
-    this.carry = "";
-    const open2 = text.lastIndexOf("\x1B");
-    const tail = open2 === -1 ? "" : text.slice(open2);
-    if (tail.length < 1 << 16 && /^\x1b(\](5(2(;[^\x07\x1b]*)?)?)?)?$/.test(tail)) {
-      this.carry = tail;
-      text = text.slice(0, open2);
+    const out = Buffer.allocUnsafe(chunk.length + MAX_KEPT_STRING + 8);
+    let n = 0;
+    const put = (...bytes) => {
+      for (const b of bytes) out[n++] = b;
+    };
+    const opens = (b, c1) => {
+      if (b === (c1 ? 157 : 93)) {
+        this.body = c1 ? null : [];
+        this.state = "string";
+        return true;
+      }
+      if ((c1 ? [144, 152, 158, 159] : [80, 88, 94, 95]).includes(b)) {
+        this.body = null;
+        this.state = "string";
+        return true;
+      }
+      return false;
+    };
+    const endString = (terminator) => {
+      const body = this.body && Buffer.from(this.body).toString("latin1");
+      if (body !== null && KEPT_OSC(body)) {
+        put(27, 93);
+        out.write(body, n, "latin1");
+        n += body.length;
+        put(...terminator);
+      }
+      this.body = null;
+      this.state = "text";
+    };
+    const collect = (b) => {
+      if (this.body && this.body.push(b) > MAX_KEPT_STRING) this.body = null;
+    };
+    for (const b of chunk) {
+      switch (this.state) {
+        case "text":
+          if (b === 27) this.state = "esc";
+          else if (b === 194) this.state = "c2";
+          else put(b);
+          break;
+        case "esc":
+          if (opens(b, false)) break;
+          if (b !== 27) {
+            put(27, b);
+            this.state = "text";
+          } else put(27);
+          break;
+        case "c2":
+          if (opens(b, true)) break;
+          if (b === 27) {
+            put(194);
+            this.state = "esc";
+          } else if (b === 194) put(194);
+          else {
+            put(194, b);
+            this.state = "text";
+          }
+          break;
+        case "string":
+          if (b === 7) endString([7]);
+          else if (b === 27) this.state = "stringEsc";
+          else if (b === 194) this.state = "stringC2";
+          else if (b === 24 || b === 26) {
+            this.body = null;
+            this.state = "text";
+          } else collect(b);
+          break;
+        case "stringC2":
+          if (b === 156) endString([27, 92]);
+          else {
+            collect(194);
+            this.state = "string";
+            if (b === 7) endString([7]);
+            else if (b === 27) this.state = "stringEsc";
+            else if (b !== 194) collect(b);
+            else this.state = "stringC2";
+          }
+          break;
+        case "stringEsc":
+          if (b === 92) {
+            endString([27, 92]);
+            break;
+          }
+          this.body = null;
+          this.state = "esc";
+          if (!opens(b, false) && b !== 27) {
+            put(27, b);
+            this.state = "text";
+          }
+          break;
+      }
     }
-    return Buffer.from(text, "latin1");
+    return out.subarray(0, n);
   }
 };
 var connectOnce = (host, port, timeoutMs) => {
@@ -5617,6 +5789,34 @@ var fixWindowsKeys = (chunk) => {
   if (!chunk.includes(8) && !chunk.includes(127)) return chunk;
   return Buffer.from(chunk.map((b) => b === 8 ? 127 : b === 127 ? 8 : b));
 };
+var JOIN_MS = 30;
+var MAX_HELD = 64;
+var InputJoiner = class {
+  held = Buffer.alloc(0);
+  /** The bytes to send now; an unfinished sequence at the end is kept for the next chunk. */
+  push(chunk) {
+    const data = this.held.length ? Buffer.concat([this.held, chunk]) : chunk;
+    const cut = unfinishedSequence(data);
+    this.held = Buffer.from(data.subarray(cut));
+    return data.subarray(0, cut);
+  }
+  holding() {
+    return this.held.length > 0;
+  }
+  flush() {
+    const out = this.held;
+    this.held = Buffer.alloc(0);
+    return out;
+  }
+};
+var unfinishedSequence = (data) => {
+  const start = data.lastIndexOf(27, -1);
+  if (start === -1 || data.length - start > MAX_HELD) return data.length;
+  const rest = data.subarray(start + 1);
+  if (rest.length === 0) return start;
+  if (rest[0] === 91 || rest[0] === 79) return rest.subarray(1).every((b) => b >= 32 && b <= 63) && (rest[0] === 91 || rest.length === 1) ? start : data.length;
+  return data.length;
+};
 var runTerminalClient = (socket, token, options = {}) => {
   const stdin = process.stdin;
   const stdout = process.stdout;
@@ -5624,13 +5824,14 @@ var runTerminalClient = (socket, token, options = {}) => {
     const [c, r] = stdout.isTTY ? stdout.getWindowSize() : [0, 0];
     return [c || 120, r || 30];
   };
-  const swapKeys = process.platform === "win32" && stdin.isTTY;
+  let swapKeys = process.platform === "win32" && stdin.isTTY;
   return new Promise((resolve) => {
     let done = false;
     const reader = new FrameReader();
     const filter = new OutputFilter();
     let sent = size();
     let resizeTimer;
+    let vtInput;
     const finish = (result) => {
       if (done) return;
       done = true;
@@ -5639,24 +5840,35 @@ var runTerminalClient = (socket, token, options = {}) => {
       clearTimeout(resizeTimer);
       clearInterval(heartbeat);
       clearInterval(sizeWatch);
-      if (stdin.isTTY) stdin.setRawMode(false);
-      stdin.pause();
+      clearTimeout(joinTimer);
       socket.destroy();
-      stdout.write("\x1B[0m\x1B[?25h\r\n");
-      resolve(result);
+      stdout.write("\x1B[0m\x1B[?25h" + MOUSE_OFF + "\r\n");
+      void (vtInput?.stop() ?? Promise.resolve()).then(() => {
+        if (stdin.isTTY) stdin.setRawMode(false);
+        stdin.pause();
+        resolve(result);
+      });
+    };
+    const joiner = new InputJoiner();
+    let joinTimer;
+    const sendInput = (data) => {
+      if (data.length && !done) socket.write(encodeFrame(FrameType.Input, swapKeys ? fixWindowsKeys(data) : data));
     };
     const onInput = (chunk) => {
       if (options.detachKey !== void 0 && chunk.includes(options.detachKey)) {
         finish({ reason: "detach" });
         return;
       }
-      socket.write(encodeFrame(FrameType.Input, swapKeys ? fixWindowsKeys(chunk) : chunk));
+      clearTimeout(joinTimer);
+      sendInput(joiner.push(chunk));
+      if (joiner.holding()) joinTimer = setTimeout(() => sendInput(joiner.flush()), JOIN_MS);
     };
+    let passthrough = false;
     const sendSize = () => {
       const [c2, r2] = size();
       if (c2 === sent[0] && r2 === sent[1]) return;
       sent = [c2, r2];
-      stdout.write("\x1B[H\x1B[J");
+      if (!passthrough) stdout.write("\x1B[H\x1B[J");
       socket.write(resizeFrame(c2, r2));
     };
     const onResize = () => {
@@ -5680,7 +5892,8 @@ var runTerminalClient = (socket, token, options = {}) => {
       }
       for (const frame of frames) {
         if (frame.type === FrameType.Output) stdout.write(filter.push(frame.payload));
-        else if (frame.type === FrameType.Restarting) stdout.write("\x1B[2J\x1B[3J\x1B[H");
+        else if (frame.type === FrameType.Console) passthrough = frame.payload.toString("latin1") === "conpty.dll";
+        else if (frame.type === FrameType.Restarting) stdout.write(MOUSE_OFF + "\x1B[2J\x1B[3J\x1B[H");
         else if (frame.type === FrameType.Exit) finish({ reason: "exit", exitCode: frame.payload.length >= 4 ? frame.payload.readInt32LE(0) : 1 });
         else if (frame.type === FrameType.Error) finish({ reason: "error", message: frame.payload.toString("utf8").slice(0, 500).replace(/[\x00-\x1f\x7f]/g, " ") });
       }
@@ -5691,6 +5904,10 @@ var runTerminalClient = (socket, token, options = {}) => {
     stdout.write("\x1B[2J\x1B[3J\x1B[H");
     socket.write(helloFrame(token, c, r));
     if (stdin.isTTY) stdin.setRawMode(true);
+    vtInput = enableVtInput();
+    void vtInput.ready.then((on) => {
+      if (on) swapKeys = false;
+    });
     stdin.on("data", onInput);
     stdin.resume();
     stdout.on("resize", onResize);
@@ -5699,7 +5916,7 @@ var runTerminalClient = (socket, token, options = {}) => {
 
 // src/shared/rundir.ts
 import fs from "node:fs";
-import path from "node:path";
+import path2 from "node:path";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -6517,10 +6734,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path3) {
-  if (!path3)
+function getElementAtPath(obj, path4) {
+  if (!path4)
     return obj;
-  return path3.reduce((acc, key) => acc?.[key], obj);
+  return path4.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6860,11 +7077,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path3, issues) {
+function prefixIssues(path4, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path3);
+    iss.path.unshift(path4);
     return iss;
   });
 }
@@ -7314,16 +7531,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path3 = []) => {
+  const processError = (error63, path4 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path3, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else {
-        const fullpath = [...path3, ...issue2.path];
+        const fullpath = [...path4, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7362,17 +7579,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path3 = []) => {
+  const processError = (error63, path4 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path3, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else {
-        const fullpath = [...path3, ...issue2.path];
+        const fullpath = [...path4, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7411,8 +7628,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path3 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path3) {
+  const path4 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path4) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -24514,13 +24731,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path3 = ref.slice(1).split("/").filter(Boolean);
-  if (path3.length === 0) {
+  const path4 = ref.slice(1).split("/").filter(Boolean);
+  if (path4.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path3[0] === defsKey) {
-    const key = path3[1] === void 0 ? void 0 : decodeJSONPointerSegment(path3[1]);
+  if (path4[0] === defsKey) {
+    const key = path4[1] === void 0 ? void 0 : decodeJSONPointerSegment(path4[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25473,15 +25690,17 @@ var ClaudeProfile = external_exports.strictObject({
   globalStateFile: external_exports.string().describe('Your .claude.json, or "auto". Empty string = do not copy.'),
   copyCredentials: external_exports.boolean().describe("Copy your Claude LOGIN into the sandbox. Prefer sandbox account instead."),
   overwrite: external_exports.boolean().describe("Refresh these settings from this PC on every launch."),
-  syncHistory: external_exports.boolean().describe("Bring all conversation history in, and sync new history back (path-translated)."),
-  syncClaudeMem: external_exports.boolean().describe("Bring claude-mem data in, and its database back when the sandbox closes.")
+  syncHistory: external_exports.boolean().describe("Bring conversation history in, and sync new history back (path-translated)."),
+  historyScope: external_exports.enum(["project", "all"]).describe(`Which history comes in: "project" = only the projects in this sandbox (other projects' conversations, file backups and prompts stay on this PC), "all" = everything. Only this sandbox's projects ever sync back.`),
+  syncClaudeMem: external_exports.boolean().describe("Bring claude-mem data into the sandbox (its settings and backups stay on this PC)."),
+  syncClaudeMemBack: external_exports.boolean().describe("Also copy claude-mem's database back to this PC when the sandbox closes. Off by default: what is in it is loaded into every Claude session on this PC, so a compromised agent could plant instructions there.")
 });
 
 // src/core/schema/sandbox.ts
 var GuestWorkspace = external_exports.union([external_exports.literal("auto"), external_exports.literal("mirror"), GuestPath]).describe('Where the workspace appears inside the sandbox. "auto" = C:\\Workspace\\<folder name>. "mirror" = the same path as on this PC, so absolute paths in configs and build caches match (another drive letter such as F: is a subst drive onto C:\\Mirror\\F); paths the sandbox reserves (C:\\Users\\..., C:\\Program Files\\...) fall back to "auto".');
 var Mapping = external_exports.strictObject({
   host: external_exports.string().min(1).describe("Folder on this PC (relative paths are relative to the config file)."),
-  guest: GuestPath.describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game: mapped to C:\\Mirror\\F\\... and shown as F: (subst) at boot."),
+  guest: external_exports.string().min(1).max(1024).optional().describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game (shown as F: at boot). Leave it out to use the same path as on this PC (a folder inside the project stays where it is in the project). A path the sandbox cannot use (C:\\Windows\\..., C:\\Users\\..., one already in use) goes to C:\\Mapped\\<drive>\\<path> instead, and the launch says so."),
   readOnly: external_exports.boolean().describe("true = the agent can only read it."),
   optional: external_exports.boolean().optional().describe("true = skip it quietly when the host folder does not exist.")
 });
@@ -25490,6 +25709,7 @@ var Sandbox = external_exports.strictObject({
   maxMemoryMb: external_exports.number().int().positive().describe('Upper limit for memoryMb "auto".'),
   maxMemoryPercent: external_exports.number().int().min(10).max(100).describe(`memoryMb "auto" never takes more than this share of this PC's total RAM (percent).`),
   cpuLimit: external_exports.union([external_exports.literal("none"), external_exports.number().int().min(5).max(100)]).describe(`Most of this PC's CPU the sandbox may use, in percent (5-100), e.g. 50 keeps half free for you; "none" = no cap (Windows Sandbox would take every processor). Covers everything this tool starts in the sandbox (agents, installs, builds, its terminal).`),
+  pageFileMb: external_exports.number().int().min(0).max(262144).describe(`Size of the sandbox's paging file in MB, created at full size when it starts so it never grows while builds run (8 GB of its disk always stays free). Windows Sandbox starts with about 1 GB: parallel builds then fail with "The paging file is too small", and Windows grows the file under load. 0 = leave Windows' own.`),
   reserveHostMb: external_exports.number().int().nonnegative().describe('RAM always left for this PC when memoryMb is "auto".'),
   vGpu: external_exports.boolean().describe("Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface."),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
@@ -25498,7 +25718,33 @@ var Sandbox = external_exports.strictObject({
   videoInput: external_exports.boolean().describe("Camera access."),
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
-  headless: external_exports.boolean().describe("Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends.")
+  headless: external_exports.boolean().describe("Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."),
+  keepAwake: external_exports.boolean().describe("Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it).")
+});
+var Port2 = external_exports.number().int().min(1).max(65535);
+var HostEntry = external_exports.string().max(253).regex(/^(@developer|(\*\.)?([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+)$/, "a host name like example.com, *.example.com, or @developer");
+var Network = external_exports.strictObject({
+  blockPrivateRanges: external_exports.boolean().describe("Block your LAN (10/8, 172.16/12, 192.168/16, SMB) from inside the sandbox."),
+  allowOnly: external_exports.array(HostEntry).describe("Only these hosts can be reached once the sandbox is set up (tools still download first). *.example.com covers its subdomains; @developer adds package registries, GitHub, toolchain downloads and the AI providers. Programs go through a proxy in the sandbox (HTTP_PROXY); anything else is blocked by its firewall. Empty = no limit."),
+  blockHosts: external_exports.array(external_exports.string().max(253).regex(/^([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+$/, "a host name like telemetry.example.com")).describe("Never reachable from the sandbox, e.g. production servers or telemetry (each exact name; the sandbox's hosts file sends them nowhere)."),
+  forwardPorts: external_exports.array(external_exports.strictObject({
+    pc: Port2.describe("The port on this PC (localhost only)."),
+    sandbox: Port2.describe("The port inside the sandbox (a server there may listen on localhost only).")
+  })).describe("Reach servers in the sandbox from this PC: http://localhost:<pc> here goes to <sandbox> inside, while it runs. Nothing else on your network can use them."),
+  dns: external_exports.array(external_exports.string().regex(/^\d{1,3}(\.\d{1,3}){3}$/, "an IPv4 address like 1.1.1.1")).describe("DNS servers for the sandbox instead of your network's, e.g. 1.1.1.1 and 9.9.9.9."),
+  proxy: external_exports.string().regex(/^(https?:\/\/[^\s]+)?$/, "http://host:port").describe("An HTTP proxy the sandbox uses to reach the internet (HTTP_PROXY / HTTPS_PROXY for everything in it), e.g. http://proxy.corp:8080. Empty = none.")
+});
+var Audit = external_exports.strictObject({
+  enabled: external_exports.boolean().describe("Keep an audit log on this PC of what happened in your sandboxes: programs started (with their command lines), files changed in the project, sessions, and what the repo guard caught. The sandbox cannot change it. Read it with sandbox audit."),
+  days: external_exports.number().int().min(1).max(365).describe("Days the audit log is kept."),
+  maxMb: external_exports.number().int().min(5).max(5e3).describe("Most space the audit log may take, in MB (older days go first). Days before today are compressed."),
+  processes: external_exports.boolean().describe("Record every program started in the sandbox with its command line (Windows process auditing; repeated runs are counted, not listed)."),
+  files: external_exports.boolean().describe("Record the files changed in the project while the sandbox runs.")
+});
+var WorkspaceFilter = external_exports.strictObject({
+  enabled: external_exports.boolean().describe("Keep what your .gitignore lists (.env files, node_modules, build output ...) out of the sandbox. The sandbox works on a copy of the project without those files, kept in step with it both ways within about a second; what it creates that is ignored (its own node_modules, builds) stays in the sandbox. Git works as usual. Off = the project folder itself is mapped."),
+  exclude: external_exports.array(external_exports.string().max(500)).describe("Also keep these out, as .gitignore patterns, e.g. secrets/, *.pem, data/private/."),
+  include: external_exports.array(external_exports.string().max(500)).describe("Let these in although .gitignore lists them, e.g. .env.example, data/fixtures/.")
 });
 var Git = external_exports.strictObject({ enabled: external_exports.boolean().describe("Provide Git for Windows (and Git Bash, which Claude Code needs)."), access: GitAccess });
 var Provisioning = external_exports.strictObject({
@@ -25506,7 +25752,8 @@ var Provisioning = external_exports.strictObject({
   fallbackToInstall: external_exports.boolean().describe("Download anything that cannot be copied from this PC."),
   refresh: external_exports.boolean().describe("Re-copy / re-download everything on the next launch."),
   git: Git,
-  terminal: toggle("Windows Terminal as the sandbox window (downloaded once).")
+  terminal: toggle("Windows Terminal as the sandbox window (downloaded once)."),
+  conpty: toggle("Agent sessions use Microsoft's newer pseudo console (conpty.dll, downloaded once) instead of the one built into Windows: no garbled screen after resizing, real scrollback for the mouse wheel. Off = the one built into Windows.")
 });
 var Downloads = external_exports.strictObject({
   requireChecksum: external_exports.boolean().describe("Refuse any toolchain, database or tool download that has no published checksum (SHA-256/SHA-512) to verify it against. false = allow those, as before. Downloads that do have a published checksum are always verified. A project's .sandbox-config.json can only turn this on.")
@@ -25590,10 +25837,119 @@ var Toolchains = external_exports.strictObject({
     enabled: external_exports.boolean().describe("Mesa 3D (llvmpipe): OpenGL 4.5 in software for games and apps when there is no GPU (sandbox.vGpu off). Copy opengl32.dll and libgallium_wgl.dll from %MESA_DIR% next to the program's .exe."),
     vulkan: external_exports.boolean().describe("Also software Vulkan 1.4 (Mesa lavapipe) with the Khronos loader, registered for every program; for wgpu set WGPU_BACKEND=vulkan.")
   }),
-  vscode: toggle("Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."),
+  vscode: external_exports.strictObject({
+    enabled: external_exports.boolean().describe("Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."),
+    setup: external_exports.boolean().describe("Point VS Code at the sandbox's own tools (JDK, Python, Go, compilers, .NET, Git, PowerShell 7 and Git Bash terminals) and install the language extensions for the toolchains in use."),
+    recommended: external_exports.boolean().describe("Also install the extensions a project recommends in its .vscode/extensions.json."),
+    extensions: external_exports.array(external_exports.string().regex(/^[\w-]+\.[\w-]+$/, "publisher.name, e.g. eamodio.gitlens")).describe("More extensions to install in every sandbox, e.g. eamodio.gitlens, ms-azuretools.vscode-docker.")
+  }),
   environment: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/, "letters, digits and _ only"), external_exports.string()).describe('Extra environment variables for the agent and every terminal, e.g. registry mirrors: {"NPM_CONFIG_REGISTRY": "https://...", "PIP_INDEX_URL": "https://..."}.')
 });
 
+// src/shared/apps.ts
+var gh = (github, asset) => ({ github, asset });
+var APPS = [
+  // ---- editors
+  { id: "vscode", name: "Visual Studio Code", category: "editors", about: "Code editor with debugging, set up for the sandbox's languages.", size: "150 MB", source: { resolve: "setting" }, exe: "Code.exe", setting: "toolchains.vscode.enabled" },
+  { id: "windows-terminal", name: "Windows Terminal", category: "utilities", about: "The sandbox window: tabs, panes, PowerShell 7 profile.", size: "40 MB", source: { resolve: "setting" }, exe: "WindowsTerminal.exe", setting: "provisioning.terminal.enabled" },
+  { id: "notepadpp", name: "Notepad++", category: "editors", about: "Fast text and code editor.", size: "8 MB", source: gh("notepad-plus-plus/notepad-plus-plus", "^npp\\.[\\d.]+\\.portable\\.x64\\.zip$"), exe: "notepad++.exe" },
+  { id: "sublime", name: "Sublime Text", category: "editors", about: "Fast code editor (paid licence, free to evaluate).", size: "28 MB", source: { resolve: "sublime" }, exe: "sublime_text.exe" },
+  { id: "neovim", name: "Neovim", category: "editors", about: "Terminal text editor (nvim).", size: "12 MB", source: gh("neovim/neovim", "^nvim-win64\\.zip$"), exe: "nvim.exe", cli: true },
+  // ---- database clients
+  { id: "dbeaver", name: "DBeaver Community", category: "databases", about: "Universal database client: PostgreSQL, MySQL, SQLite, SQL Server and more.", size: "120 MB", source: gh("dbeaver/dbeaver", "^dbeaver-ce-[\\d.]+-windows-x86_64\\.zip$"), exe: "dbeaver.exe" },
+  { id: "pgadmin", name: "pgAdmin 4", category: "databases", about: "The PostgreSQL admin GUI (from the PostgreSQL binaries zip).", size: "330 MB", source: { resolve: "pgadmin" }, exe: "pgAdmin4.exe" },
+  { id: "heidisql", name: "HeidiSQL", category: "databases", about: "Light client for MySQL, MariaDB, PostgreSQL and SQL Server.", size: "28 MB", source: gh("HeidiSQL/HeidiSQL", "^HeidiSQL_[\\d.]+_64_Portable\\.zip$"), exe: "heidisql.exe" },
+  { id: "sqlitebrowser", name: "DB Browser for SQLite", category: "databases", about: "Open, browse and edit SQLite files.", size: "21 MB", source: gh("sqlitebrowser/sqlitebrowser", "^DB\\.Browser\\.for\\.SQLite-v?[\\d.]+-win64\\.zip$"), exe: "DB Browser for SQLite.exe" },
+  { id: "compass", name: "MongoDB Compass", category: "databases", about: "The MongoDB GUI.", size: "220 MB", source: gh("mongodb-js/compass", "^mongodb-compass-[\\d.]+-win32-x64\\.zip$"), exe: "MongoDBCompass.exe" },
+  { id: "redisinsight", name: "Redis Insight", category: "databases", about: "The Redis GUI.", size: "110 MB", source: gh("redis/RedisInsight", "^Redis-Insight-win-installer\\.exe$"), unpack: "nsis", exe: "Redis Insight.exe", needs: ["7zip"] },
+  { id: "dbgate", name: "DbGate", category: "databases", about: "Database manager for SQL and NoSQL databases.", size: "180 MB", source: gh("dbgate/dbgate", "^dbgate-[\\d.]+-win_x64\\.zip$"), exe: "DbGate.exe" },
+  { id: "beekeeper", name: "Beekeeper Studio", category: "databases", about: "SQL editor and database manager.", size: "245 MB", source: gh("beekeeper-studio/beekeeper-studio", "^Beekeeper-Studio-[\\d.]+-portable\\.exe$"), unpack: "nsis", exe: "Beekeeper Studio.exe", needs: ["7zip"] },
+  { id: "dynamodb-admin", name: "dynamodb-admin", category: "databases", about: "Web GUI for DynamoDB Local: run dynamodb-admin, then open http://localhost:8001.", size: "5 MB", source: { npm: "dynamodb-admin" }, exe: "dynamodb-admin.cmd", cli: true },
+  // ---- API clients
+  { id: "bruno", name: "Bruno", category: "api", about: "Offline, git-friendly API client (collections are files in your repo).", size: "175 MB", source: gh("usebruno/bruno", "^bruno_[\\d.]+_x64_win\\.zip$"), exe: "Bruno.exe" },
+  { id: "insomnia", name: "Insomnia", category: "api", about: "REST, GraphQL and gRPC client.", size: "590 MB", source: gh("Kong/insomnia", "^insomnia-[\\d.]+-full\\.nupkg$"), exe: "Insomnia.exe" },
+  // ---- git
+  { id: "sourcegit", name: "SourceGit", category: "git", about: "Fast open-source Git GUI.", size: "26 MB", source: gh("sourcegit-scm/sourcegit", "^sourcegit_[\\d.]+\\.win-x64\\.zip$"), exe: "SourceGit.exe" },
+  { id: "githubdesktop", name: "GitHub Desktop", category: "git", about: 'Simple Git GUI from GitHub. It has its own git, so it needs provisioning.git.access "full".', size: "300 MB", source: gh("desktop/desktop", "^GitHubDesktop-[\\d.]+-x64-full\\.nupkg$"), exe: "GitHubDesktop.exe", fullGitOnly: true },
+  { id: "lazygit", name: "lazygit", category: "git", about: "Git in the terminal.", size: "7 MB", source: gh("jesseduffield/lazygit", "^lazygit_[\\d.]+_windows_x86_64\\.zip$"), exe: "lazygit.exe", cli: true },
+  // ---- utilities
+  { id: "7zip", name: "7-Zip", category: "utilities", about: "Archive manager (7z, zip, rar, tar ...). Also unpacks installers for other apps.", size: "2 MB", source: { resolve: "7zip" }, exe: "7zFM.exe" },
+  { id: "winmerge", name: "WinMerge", category: "utilities", about: "Compare and merge files and folders.", size: "23 MB", source: gh("WinMerge/winmerge", "^winmerge-[\\d.]+-x64-exe\\.zip$"), exe: "WinMergeU.exe" },
+  { id: "everything", name: "Everything", category: "utilities", about: "Finds files by name instantly.", size: "2 MB", source: { resolve: "everything" }, exe: "Everything.exe" },
+  { id: "sysinternals", name: "Sysinternals Suite", category: "utilities", about: "Process Explorer, Process Monitor, Autoruns, TCPView and more (on PATH).", size: "200 MB", source: { url: "https://download.sysinternals.com/files/SysinternalsSuite.zip" }, exe: "procexp64.exe" },
+  { id: "imhex", name: "ImHex", category: "utilities", about: "Hex editor for reverse engineering and binary formats.", size: "80 MB", source: gh("WerWolv/ImHex", "^imhex-[\\d.]+-Windows-Portable-NoGPU-x86_64\\.zip$"), exe: "imhex-gui.exe" },
+  // ---- browsers
+  { id: "chrome", name: "Chrome for Testing", category: "browsers", about: "Chrome build made for automated tests (with chromedriver on PATH).", size: "170 MB", source: { resolve: "chrome" }, exe: "chrome.exe" },
+  { id: "firefox", name: "Firefox", category: "browsers", about: "Firefox for testing.", size: "75 MB", source: { resolve: "firefox" }, unpack: "nsis", exe: "firefox.exe", needs: ["7zip"] },
+  // ---- game development
+  { id: "godot", name: "Godot", category: "gamedev", about: "Open-source 2D and 3D game engine.", size: "80 MB", source: gh("godotengine/godot", "^Godot_v[\\d.]+-stable_win64\\.exe\\.zip$"), exe: "/^Godot_v[\\d.]+-stable_win64\\.exe$/", needs: ["mesa"] },
+  { id: "blender", name: "Blender", category: "gamedev", about: "3D modelling, animation and rendering.", size: "400 MB", source: { resolve: "blender" }, exe: "blender.exe", needs: ["mesa"] },
+  { id: "love", name: "L\xD6VE", category: "gamedev", about: "Lua framework for 2D games.", size: "4 MB", source: gh("love2d/love", "^love-[\\d.]+-win64\\.zip$"), exe: "love.exe", needs: ["mesa"] },
+  { id: "defold", name: "Defold", category: "gamedev", about: "Free 2D/3D game engine and editor.", size: "330 MB", source: gh("defold/defold", "^Defold-x86_64-win32\\.zip$"), exe: "Defold.exe", needs: ["mesa"] },
+  { id: "pixelorama", name: "Pixelorama", category: "gamedev", about: "Pixel-art and sprite editor.", size: "40 MB", source: gh("Orama-Interactive/Pixelorama", "^Pixelorama-Windows-64bit\\.zip$"), exe: "Pixelorama.exe", needs: ["mesa"] },
+  { id: "tiled", name: "Tiled", category: "gamedev", about: "Tile map editor.", size: "22 MB", source: gh("mapeditor/tiled", "^Tiled-[\\d.]+_Windows-10\\+_x86_64\\.msi$"), unpack: "msi", exe: "tiled.exe" },
+  // ---- cloud
+  { id: "kubectl", name: "kubectl", category: "cloud", about: "Kubernetes command line.", size: "60 MB", source: { resolve: "kubectl" }, unpack: "file", exe: "kubectl.exe", cli: true },
+  { id: "helm", name: "Helm", category: "cloud", about: "Kubernetes package manager.", size: "20 MB", source: { resolve: "helm" }, exe: "helm.exe", cli: true },
+  { id: "k9s", name: "k9s", category: "cloud", about: "Kubernetes cluster UI in the terminal.", size: "40 MB", source: gh("derailed/k9s", "^k9s_Windows_amd64\\.zip$"), exe: "k9s.exe", cli: true },
+  { id: "terraform", name: "Terraform", category: "cloud", about: "Infrastructure as code.", size: "30 MB", source: { resolve: "terraform" }, exe: "terraform.exe", cli: true },
+  { id: "azure-cli", name: "Azure CLI", category: "cloud", about: "Manage Azure (az).", size: "90 MB", source: { url: "https://aka.ms/installazurecliwindowszipx64" }, exe: "az.cmd", cli: true },
+  { id: "gcloud", name: "Google Cloud CLI", category: "cloud", about: "Manage Google Cloud (gcloud, gsutil, bq).", size: "120 MB", source: { url: "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-windows-x86_64-bundled-python.zip" }, exe: "gcloud.cmd", cli: true },
+  { id: "aws-cli", name: "AWS CLI", category: "cloud", about: "Manage AWS (aws).", size: "50 MB", source: { url: "https://awscli.amazonaws.com/AWSCLIV2.msi" }, unpack: "msi", exe: "aws.exe", cli: true },
+  // ---- diagrams and docs
+  { id: "drawio", name: "draw.io", category: "diagrams", about: "Diagram editor (flowcharts, architecture, UML).", size: "170 MB", source: gh("jgraph/drawio-desktop", "^draw\\.io-[\\d.]+-windows\\.zip$"), exe: "draw.io.exe" },
+  { id: "pandoc", name: "Pandoc", category: "diagrams", about: "Convert documents between Markdown, HTML, Word, PDF ...", size: "35 MB", source: gh("jgm/pandoc", "^pandoc-[\\d.]+-windows-x86_64\\.zip$"), exe: "pandoc.exe", cli: true },
+  // ---- network
+  { id: "mitmproxy", name: "mitmproxy", category: "network", about: "Intercepting HTTPS proxy (mitmweb opens a web UI).", size: "90 MB", source: { resolve: "mitmproxy" }, exe: "mitmweb.exe", cli: true },
+  { id: "xh", name: "xh", category: "network", about: "Friendly HTTP requests from the terminal (like HTTPie).", size: "5 MB", source: gh("ducaale/xh", "^xh-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "xh.exe", cli: true },
+  { id: "grpcurl", name: "grpcurl", category: "network", about: "curl for gRPC servers.", size: "10 MB", source: gh("fullstorydev/grpcurl", "^grpcurl_[\\d.]+_windows_x86_64\\.zip$"), exe: "grpcurl.exe", cli: true },
+  { id: "k6", name: "k6", category: "network", about: "Load testing with JavaScript scripts.", size: "30 MB", source: gh("grafana/k6", "^k6-v[\\d.]+-windows-amd64\\.zip$"), exe: "k6.exe", cli: true },
+  // ---- command-line tools
+  { id: "jq", name: "jq", category: "cli", about: "Query and reshape JSON.", size: "1 MB", source: gh("jqlang/jq", "^jq-windows-amd64\\.exe$"), unpack: "file", exe: "jq.exe", cli: true },
+  { id: "yq", name: "yq", category: "cli", about: "Query and edit YAML, JSON, XML and TOML.", size: "10 MB", source: gh("mikefarah/yq", "^yq_windows_amd64\\.exe$"), unpack: "file", exe: "yq.exe", cli: true },
+  { id: "ripgrep", name: "ripgrep", category: "cli", about: "Very fast recursive search (rg).", size: "2 MB", source: gh("BurntSushi/ripgrep", "^ripgrep-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "rg.exe", cli: true },
+  { id: "fd", name: "fd", category: "cli", about: "Fast, friendly alternative to find.", size: "2 MB", source: gh("sharkdp/fd", "^fd-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "fd.exe", cli: true },
+  { id: "bat", name: "bat", category: "cli", about: "cat with syntax highlighting and git changes.", size: "3 MB", source: gh("sharkdp/bat", "^bat-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "bat.exe", cli: true },
+  { id: "fzf", name: "fzf", category: "cli", about: "Fuzzy finder for the terminal.", size: "2 MB", source: gh("junegunn/fzf", "^fzf-[\\d.]+-windows_amd64\\.zip$"), exe: "fzf.exe", cli: true },
+  { id: "delta", name: "delta", category: "cli", about: "Readable git diffs with syntax highlighting.", size: "3 MB", source: gh("dandavison/delta", "^delta-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "delta.exe", cli: true },
+  { id: "just", name: "just", category: "cli", about: "Command runner (a simpler make for project tasks).", size: "2 MB", source: gh("casey/just", "^just-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "just.exe", cli: true },
+  { id: "hyperfine", name: "hyperfine", category: "cli", about: "Benchmark commands.", size: "1 MB", source: gh("sharkdp/hyperfine", "^hyperfine-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "hyperfine.exe", cli: true },
+  { id: "watchexec", name: "watchexec", category: "cli", about: "Run a command when files change.", size: "5 MB", source: gh("watchexec/watchexec", "^watchexec-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "watchexec.exe", cli: true },
+  { id: "protoc", name: "protoc", category: "cli", about: "Protocol Buffers compiler.", size: "3 MB", source: gh("protocolbuffers/protobuf", "^protoc-[\\d.]+-win64\\.zip$"), exe: "protoc.exe", cli: true },
+  { id: "ninja", name: "Ninja", category: "cli", about: "Small, fast build system (CMake's favourite generator).", size: "1 MB", source: gh("ninja-build/ninja", "^ninja-win\\.zip$"), exe: "ninja.exe", cli: true },
+  { id: "ffmpeg", name: "FFmpeg", category: "cli", about: "Convert and process audio and video.", size: "200 MB", source: gh("BtbN/FFmpeg-Builds", "^ffmpeg-master-latest-win64-gpl\\.zip$"), exe: "ffmpeg.exe", cli: true },
+  { id: "sqlite", name: "SQLite tools", category: "cli", about: "sqlite3 command-line shell.", size: "5 MB", source: { resolve: "sqlite" }, exe: "sqlite3.exe", cli: true },
+  { id: "shellcheck", name: "ShellCheck", category: "cli", about: "Finds bugs in shell scripts.", size: "10 MB", source: gh("koalaman/shellcheck", "^shellcheck-v[\\d.]+\\.zip$"), exe: "shellcheck.exe", cli: true },
+  { id: "gitleaks", name: "Gitleaks", category: "cli", about: "Finds secrets committed to git.", size: "8 MB", source: gh("gitleaks/gitleaks", "^gitleaks_[\\d.]+_windows_x64\\.zip$"), exe: "gitleaks.exe", cli: true }
+];
+
+// src/core/schema/apps.ts
+var CATALOGUE_IDS = APPS.filter((a) => !a.setting).map((a) => a.id);
+var AppId = external_exports.enum(CATALOGUE_IDS);
+var CustomAppId = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,40}$/, "lower-case letters, digits and - only");
+var compiles = (pattern) => {
+  try {
+    new RegExp(pattern);
+    return true;
+  } catch {
+    return false;
+  }
+};
+var CustomApp = external_exports.strictObject({
+  name: external_exports.string().min(1).max(80).describe('The name on the desktop shortcut, e.g. "My Tool".'),
+  github: external_exports.string().regex(/^[\w.-]+\/[\w.-]+$/, "owner/repo, e.g. sharkdp/bat").optional().describe("GitHub repository (owner/repo): the file comes from its latest release."),
+  asset: external_exports.string().max(200).refine(compiles, "not a valid pattern").optional().describe("With github: a pattern (regular expression) matching the release file, e.g. windows.*x64\\.zip$"),
+  url: external_exports.string().url().startsWith("https://", "https:// only").optional().describe("Or a direct https:// download link (zip, 7z, exe or msi)."),
+  sha256: external_exports.string().regex(/^[0-9a-fA-F]{64}$/, "64 hex characters").optional().describe("SHA-256 of the download (GitHub releases usually publish one; then this is not needed)."),
+  unpack: external_exports.enum(["archive", "file", "nsis", "msi"]).optional().describe("archive (zip, 7z, tar: the default), file (a single .exe), nsis (an installer 7-Zip can open) or msi."),
+  exe: external_exports.string().min(1).max(200).describe("The program to start (found anywhere in the download), e.g. mytool.exe."),
+  cli: external_exports.boolean().optional().describe("A command-line tool: its folder goes on PATH instead of getting a desktop shortcut.")
+}).refine((a) => a.github && a.asset ? !a.url : Boolean(a.url) && !a.github && !a.asset, { message: "give github + asset, or url (not both)" });
+var Apps = external_exports.strictObject({
+  install: external_exports.array(AppId).describe("Apps from the catalogue to install in every sandbox (the Apps screen in the menu lists them by category). Each is downloaded once and kept."),
+  custom: external_exports.record(CustomAppId, CustomApp).describe("Programs of your own: a GitHub release or a download link, and the program to start. Installed like the catalogue apps.")
+});
+
 // src/core/schema/projects.ts
 var Projects = external_exports.strictObject({
   all: external_exports.boolean().describe("Map every project you have started before (and every folder in your roots) at every start, except those in exclude, so all of them open in the running sandbox without a restart. Every agent in the sandbox can then see all of them. Each one is still only set up when you first use it."),
@@ -25601,6 +25957,7 @@ var Projects = external_exports.strictObject({
   roots: external_exports.array(external_exports.string().min(1)).describe('Folders whose subfolders are your projects (e.g. "F:\\\\Code"), mapped read/write at every start. Any project inside one, including ones you create later, opens in the running sandbox at once, without a restart. Every agent in the sandbox can see all of them.'),
   askToAddRoot: external_exports.boolean().describe("When you start a project whose parent folder is not a root yet, ask once whether to add it."),
   declinedRoots: external_exports.array(external_exports.string().min(1)).describe("Parent folders you said no to (not asked again)."),
+  allowOutsideMappings: external_exports.union([external_exports.literal("ask"), external_exports.boolean()]).describe(`A project's .sandbox-config.json may map folders from outside the project (e.g. a game folder on another drive). "ask" = an interactive launch asks once per project and set of folders, and remembers your answer; true = always allowed (still listed when you approve the file); false = never (the launch stops and says which folders). Only your own settings decide this, never a project file.`),
   wsbShare: external_exports.boolean().describe("On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart.")
 });
 
@@ -25610,14 +25967,18 @@ var Config = external_exports.strictObject({
   defaultHarness: Name.describe("Agent started by `sandbox launch` (sandbox claude always runs claude)."),
   guestWorkspace: GuestWorkspace,
   readOnly: external_exports.boolean().describe("Map the workspace read-only."),
+  workspaceFilter: WorkspaceFilter,
+  audit: Audit,
   mappings: external_exports.array(Mapping).describe("Extra folders from this PC."),
   sandbox: Sandbox,
   storage: external_exports.strictObject({
     root: external_exports.string().min(1).describe("Where everything is kept on this PC (tools, databases, logins, launches)."),
     persistAgentState: external_exports.boolean().describe("Keep agent logins and history between sandboxes."),
-    dataName: Name.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces.")
+    dataName: Name.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces."),
+    markSandboxFiles: external_exports.boolean().describe(`Programs and scripts (.exe, .ps1, .bat, .cmd, .msi, .lnk ...) that appear or change in your project while a sandbox runs get Windows' "downloaded from the internet" mark, so SmartScreen and PowerShell ask before they run on this PC.`),
+    warnDataGb: external_exports.number().min(0).describe("Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. sandbox data shows what takes the space.")
   }),
-  network: external_exports.strictObject({ blockPrivateRanges: external_exports.boolean().describe("Block your LAN (10/8, 172.16/12, 192.168/16, SMB) from inside the sandbox.") }),
+  network: Network,
   provisioning: Provisioning,
   downloads: Downloads,
   toolchains: Toolchains,
@@ -25626,6 +25987,7 @@ var Config = external_exports.strictObject({
   agentCommands: AgentCommands,
   secrets: Secrets,
   personalization: toggle("Copy your desktop look (theme, accent, taskbar, wallpaper, ...) into the sandbox."),
+  apps: Apps,
   claudeProfile: ClaudeProfile,
   harnesses: external_exports.record(Name, Harness).describe("Agents that can run in the sandbox."),
   hooks: external_exports.strictObject({ failFast: external_exports.boolean().describe("Stop when a hook script fails.") }),
@@ -25636,10 +25998,14 @@ var LocalOverrides = external_exports.strictObject({
   harness: Name.describe("Agent for this project."),
   guestWorkspace: GuestWorkspace,
   readOnly: external_exports.boolean().describe("Map this project read-only."),
-  mappings: external_exports.array(Mapping).describe("Extra folders (relative to this file)."),
+  // A project may turn the filter on and keep more out, never let ignored files in.
+  workspaceFilter: WorkspaceFilter.pick({ enabled: true, exclude: true }).partial(),
+  mappings: external_exports.array(Mapping).describe("Extra folders (relative paths are relative to this file), e.g. a read-only data folder at another place in the sandbox. Folders outside the project are used only as your projects.allowOutsideMappings setting allows (by default you are asked once)."),
   scripts: Strings.describe("Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."),
-  sandbox: Sandbox.omit({ cpuLimit: true }).partial(),
-  network: external_exports.strictObject({ blockPrivateRanges: external_exports.boolean() }).partial(),
+  // This PC's resources are yours to share: CPU and paging file (this PC's disk) are not a project's to set.
+  sandbox: Sandbox.omit({ cpuLimit: true, pageFileMb: true }).partial(),
+  // A project may block more (the LAN, hosts); it never opens hosts, ports, DNS or a proxy.
+  network: Network.pick({ blockPrivateRanges: true, blockHosts: true }).partial(),
   provisioning: Provisioning.pick({ copyFromHost: true, fallbackToInstall: true, refresh: true }).extend({ git: Git.partial(), terminal: toggle("Windows Terminal as the sandbox window.").partial() }).partial(),
   downloads: Downloads.partial(),
   // Every toolchain setting, each one optional (a project usually only switches languages on or pins a version).
@@ -25650,7 +26016,9 @@ var LocalOverrides = external_exports.strictObject({
   databases: external_exports.strictObject(import_lodash.default.mapValues(Databases.shape, (shape) => shape.partial())).partial(),
   attach: Attach.partial(),
   personalization: toggle("Copy your desktop look into the sandbox.").partial(),
-  claudeProfile: ClaudeProfile.pick({ enabled: true, include: true, overwrite: true, copyCredentials: true, syncHistory: true, syncClaudeMem: true }).partial(),
+  // Catalogue apps only (a vetted list): your own programs (apps.custom) download anything, so a repo cannot add them.
+  apps: Apps.pick({ install: true }).partial(),
+  claudeProfile: ClaudeProfile.pick({ enabled: true, overwrite: true, copyCredentials: true, syncHistory: true, syncClaudeMem: true }).partial(),
   hooks: external_exports.strictObject({ failFast: external_exports.boolean() }).partial()
 }).partial();
 
@@ -25663,6 +26031,15 @@ var AttachEndpoint = external_exports.strictObject({
   port: external_exports.number().int().min(1024).max(65535),
   token: Text(256)
 });
+var BootProgress = external_exports.strictObject({
+  step: external_exports.number().int().min(1).max(32),
+  steps: external_exports.number().int().min(1).max(32),
+  title: Text(120),
+  /** Being set up now; percent while it downloads (when the size is known). */
+  active: external_exports.array(external_exports.strictObject({ name: Text(64), percent: external_exports.number().int().min(0).max(100).optional() })).max(8),
+  done: external_exports.number().int().min(0).max(1e3),
+  total: external_exports.number().int().min(0).max(1e3)
+});
 var SandboxStatus = external_exports.object({
   launchId: Text(64),
   phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
@@ -25670,7 +26047,11 @@ var SandboxStatus = external_exports.object({
   updatedAt: Time,
   workspaceHost: Text(),
   guestWorkspace: Text(),
-  headless: external_exports.boolean()
+  headless: external_exports.boolean(),
+  /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
+  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
+  /** A malformed progress is dropped, never the status (the phase still counts). */
+  progress: BootProgress.optional().catch(void 0)
 });
 var Version = external_exports.strictObject({ spec: Text(128), source: Text(256) });
 var DatabasePlan = external_exports.strictObject({
@@ -25739,15 +26120,17 @@ var ProjectStatus = external_exports.object({
 var MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
 var safeId = (id) => Id.parse(id);
 var runPaths = (dataDir2) => {
-  const run2 = path.join(dataDir2, "run");
-  const file2 = (dir) => (id) => path.join(run2, dir, safeId(id) + ".json");
+  const run2 = path2.join(dataDir2, "run");
+  const file2 = (dir) => (id) => path2.join(run2, dir, safeId(id) + ".json");
   return {
     run: run2,
-    sandbox: path.join(run2, "sandbox.json"),
-    requests: path.join(run2, "requests"),
-    responses: path.join(run2, "responses"),
-    sessions: path.join(run2, "sessions"),
-    projects: path.join(run2, "projects"),
+    sandbox: path2.join(run2, "sandbox.json"),
+    requests: path2.join(run2, "requests"),
+    responses: path2.join(run2, "responses"),
+    sessions: path2.join(run2, "sessions"),
+    projects: path2.join(run2, "projects"),
+    /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
+    audit: path2.join(run2, "audit"),
     request: file2("requests"),
     response: file2("responses"),
     session: file2("sessions"),
@@ -25770,7 +26153,7 @@ var readSession = (dataDir2, id) => readValid(SessionStatus, runPaths(dataDir2).
 
 // src/guest/env.ts
 import fs2 from "node:fs";
-import path2 from "node:path";
+import path3 from "node:path";
 
 // src/shared/download.ts
 var checksumRequired = false;
@@ -25786,16 +26169,16 @@ var launchDir = process.env.AGENT_LAUNCH_DIR ?? "C:\\AgentLaunch";
 var dataDir = process.env.AGENT_DATA_DIR ?? "C:\\AgentData";
 var hostToolsDir = process.env.AGENT_HOST_TOOLS_DIR ?? "C:\\HostTools";
 var localDir = process.env.AGENT_LOCAL_DIR ?? "C:\\nvm";
-var toolsDir = path2.join(dataDir, "tools");
-var logsDir = path2.join(dataDir, "logs");
+var toolsDir = path3.join(dataDir, "tools");
+var logsDir = path3.join(dataDir, "logs");
 var run = runPaths(dataDir);
-var session = JSON.parse(fs2.readFileSync(path2.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, ""));
+var session = JSON.parse(fs2.readFileSync(path3.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, ""));
 setChecksumRequired(session.downloads?.requireChecksum === true);
 var workspace = process.env.AGENT_WORKSPACE ?? session.workspace;
-var stateDir = path2.join(dataDir, session.persistAgentState ? "state" : "state-session");
-var claudeDir = path2.join(stateDir, "claude");
+var stateDir = path3.join(dataDir, session.persistAgentState ? "state" : "state-session");
+var claudeDir = path3.join(stateDir, "claude");
 fs2.mkdirSync(logsDir, { recursive: true });
-var logFile = path2.join(logsDir, (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log");
+var logFile = path3.join(logsDir, (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log");
 
 // src/guest/view.ts
 var waitUntilStarted = async (id) => {