windows-development-sandbox 1.13.2 → 1.15.0

package/dist/runtime/daemon.js

@@ -1245,13 +1245,13 @@ var require_lodash = __commonJS({
           }
           return true;
         }
-        function baseDelay(func, wait, args) {
+        function baseDelay(func, wait2, args) {
           if (typeof func != "function") {
             throw new TypeError2(FUNC_ERROR_TEXT);
           }
           return setTimeout2(function() {
             func.apply(undefined2, args);
-          }, wait);
+          }, wait2);
         }
         function baseDifference(array2, values2, iteratee2, comparator) {
           var index = -1, includes2 = arrayIncludes, isCommon = true, length = array2.length, result2 = [], valuesLength = values2.length;
@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key2]);
           });
         }
-        function baseGet(object2, path70) {
-          path70 = castPath(path70, object2);
-          var index = 0, length = path70.length;
+        function baseGet(object2, path72) {
+          path72 = castPath(path72, object2);
+          var index = 0, length = path72.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path70[index++])];
+            object2 = object2[toKey(path72[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path70, args) {
-          path70 = castPath(path70, object2);
-          object2 = parent(object2, path70);
-          var func = object2 == null ? object2 : object2[toKey(last(path70))];
+        function baseInvoke(object2, path72, args) {
+          path72 = castPath(path72, object2);
+          object2 = parent(object2, path72);
+          var func = object2 == null ? object2 : object2[toKey(last(path72))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path70, srcValue) {
-          if (isKey(path70) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path70), srcValue);
+        function baseMatchesProperty(path72, srcValue) {
+          if (isKey(path72) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path72), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path70);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path70) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path72);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path72) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path70) {
-            return hasIn(object2, path70);
+          return basePickBy(object2, paths, function(value, path72) {
+            return hasIn(object2, path72);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path70 = paths[index], value = baseGet(object2, path70);
-            if (predicate(value, path70)) {
-              baseSet(result2, castPath(path70, object2), value);
+            var path72 = paths[index], value = baseGet(object2, path72);
+            if (predicate(value, path72)) {
+              baseSet(result2, castPath(path72, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path70) {
+        function basePropertyDeep(path72) {
           return function(object2) {
-            return baseGet(object2, path70);
+            return baseGet(object2, path72);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path70, value, customizer) {
+        function baseSet(object2, path72, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path70 = castPath(path70, object2);
-          var index = -1, length = path70.length, lastIndex = length - 1, nested = object2;
+          path72 = castPath(path72, object2);
+          var index = -1, length = path72.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key2 = toKey(path70[index]), newValue = value;
+            var key2 = toKey(path72[index]), newValue = value;
             if (key2 === "__proto__" || key2 === "constructor" || key2 === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key2];
               newValue = customizer ? customizer(objValue, key2, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path70[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path72[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key2, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path70) {
-          path70 = castPath(path70, object2);
-          var index = -1, length = path70.length;
+        function baseUnset(object2, path72) {
+          path72 = castPath(path72, object2);
+          var index = -1, length = path72.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key2 = toKey(path70[index]);
+            var key2 = toKey(path72[index]);
             if (key2 === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path70);
-          return obj == null || delete obj[toKey(last(path70))];
+          var obj = parent(object2, path72);
+          return obj == null || delete obj[toKey(last(path72))];
         }
-        function baseUpdate(object2, path70, updater, customizer) {
-          return baseSet(object2, path70, updater(baseGet(object2, path70)), customizer);
+        function baseUpdate(object2, path72, updater, customizer) {
+          return baseSet(object2, path72, updater(baseGet(object2, path72)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path70, hasFunc) {
-          path70 = castPath(path70, object2);
-          var index = -1, length = path70.length, result2 = false;
+        function hasPath(object2, path72, hasFunc) {
+          path72 = castPath(path72, object2);
+          var index = -1, length = path72.length, result2 = false;
           while (++index < length) {
-            var key2 = toKey(path70[index]);
+            var key2 = toKey(path72[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key2))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path70) {
-          return path70.length < 2 ? object2 : baseGet(object2, baseSlice(path70, 0, -1));
+        function parent(object2, path72) {
+          return path72.length < 2 ? object2 : baseGet(object2, baseSlice(path72, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3093,8 +3093,8 @@ var require_lodash = __commonJS({
           return object2[key2];
         }
         var setData = shortOut(baseSetData);
-        var setTimeout2 = ctxSetTimeout || function(func, wait) {
-          return root.setTimeout(func, wait);
+        var setTimeout2 = ctxSetTimeout || function(func, wait2) {
+          return root.setTimeout(func, wait2);
         };
         var setToString = shortOut(baseSetToString);
         function setWrapToString(wrapper, reference, bitmask) {
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path70, args) {
-          var index = -1, isFunc = typeof path70 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path72, args) {
+          var index = -1, isFunc = typeof path72 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path70, value, args) : baseInvoke(value, path70, args);
+            result2[++index] = isFunc ? apply(path72, value, args) : baseInvoke(value, path72, args);
           });
           return result2;
         });
@@ -3864,16 +3864,16 @@ var require_lodash = __commonJS({
           result2.placeholder = curryRight.placeholder;
           return result2;
         }
-        function debounce(func, wait, options) {
+        function debounce(func, wait2, options) {
           var lastArgs, lastThis, maxWait, result2, timerId, lastCallTime, lastInvokeTime = 0, leading = false, maxing = false, trailing = true;
           if (typeof func != "function") {
             throw new TypeError2(FUNC_ERROR_TEXT);
           }
-          wait = toNumber(wait) || 0;
+          wait2 = toNumber(wait2) || 0;
           if (isObject2(options)) {
             leading = !!options.leading;
             maxing = "maxWait" in options;
-            maxWait = maxing ? nativeMax(toNumber(options.maxWait) || 0, wait) : maxWait;
+            maxWait = maxing ? nativeMax(toNumber(options.maxWait) || 0, wait2) : maxWait;
             trailing = "trailing" in options ? !!options.trailing : trailing;
           }
           function invokeFunc(time3) {
@@ -3885,16 +3885,16 @@ var require_lodash = __commonJS({
           }
           function leadingEdge(time3) {
             lastInvokeTime = time3;
-            timerId = setTimeout2(timerExpired, wait);
+            timerId = setTimeout2(timerExpired, wait2);
             return leading ? invokeFunc(time3) : result2;
           }
           function remainingWait(time3) {
-            var timeSinceLastCall = time3 - lastCallTime, timeSinceLastInvoke = time3 - lastInvokeTime, timeWaiting = wait - timeSinceLastCall;
+            var timeSinceLastCall = time3 - lastCallTime, timeSinceLastInvoke = time3 - lastInvokeTime, timeWaiting = wait2 - timeSinceLastCall;
             return maxing ? nativeMin(timeWaiting, maxWait - timeSinceLastInvoke) : timeWaiting;
           }
           function shouldInvoke(time3) {
             var timeSinceLastCall = time3 - lastCallTime, timeSinceLastInvoke = time3 - lastInvokeTime;
-            return lastCallTime === undefined2 || timeSinceLastCall >= wait || timeSinceLastCall < 0 || maxing && timeSinceLastInvoke >= maxWait;
+            return lastCallTime === undefined2 || timeSinceLastCall >= wait2 || timeSinceLastCall < 0 || maxing && timeSinceLastInvoke >= maxWait;
           }
           function timerExpired() {
             var time3 = now2();
@@ -3932,12 +3932,12 @@ var require_lodash = __commonJS({
               }
               if (maxing) {
                 clearTimeout2(timerId);
-                timerId = setTimeout2(timerExpired, wait);
+                timerId = setTimeout2(timerExpired, wait2);
                 return invokeFunc(lastCallTime);
               }
             }
             if (timerId === undefined2) {
-              timerId = setTimeout2(timerExpired, wait);
+              timerId = setTimeout2(timerExpired, wait2);
             }
             return result2;
           }
@@ -3948,8 +3948,8 @@ var require_lodash = __commonJS({
         var defer = baseRest(function(func, args) {
           return baseDelay(func, 1, args);
         });
-        var delay = baseRest(function(func, wait, args) {
-          return baseDelay(func, toNumber(wait) || 0, args);
+        var delay = baseRest(function(func, wait2, args) {
+          return baseDelay(func, toNumber(wait2) || 0, args);
         });
         function flip(func) {
           return createWrap(func, WRAP_FLIP_FLAG);
@@ -4035,7 +4035,7 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           });
         }
-        function throttle(func, wait, options) {
+        function throttle(func, wait2, options) {
           var leading = true, trailing = true;
           if (typeof func != "function") {
             throw new TypeError2(FUNC_ERROR_TEXT);
@@ -4044,9 +4044,9 @@ var require_lodash = __commonJS({
             leading = "leading" in options ? !!options.leading : leading;
             trailing = "trailing" in options ? !!options.trailing : trailing;
           }
-          return debounce(func, wait, {
+          return debounce(func, wait2, {
             "leading": leading,
-            "maxWait": wait,
+            "maxWait": wait2,
             "trailing": trailing
           });
         }
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path70, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path70);
+        function get(object2, path72, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path72);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path70) {
-          return object2 != null && hasPath(object2, path70, baseHas);
+        function has(object2, path72) {
+          return object2 != null && hasPath(object2, path72, baseHas);
         }
-        function hasIn(object2, path70) {
-          return object2 != null && hasPath(object2, path70, baseHasIn);
+        function hasIn(object2, path72) {
+          return object2 != null && hasPath(object2, path72, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key2) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path70) {
-            path70 = castPath(path70, object2);
-            isDeep || (isDeep = path70.length > 1);
-            return path70;
+          paths = arrayMap(paths, function(path72) {
+            path72 = castPath(path72, object2);
+            isDeep || (isDeep = path72.length > 1);
+            return path72;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path70) {
-            return predicate(value, path70[0]);
+          return basePickBy(object2, props, function(value, path72) {
+            return predicate(value, path72[0]);
           });
         }
-        function result(object2, path70, defaultValue) {
-          path70 = castPath(path70, object2);
-          var index = -1, length = path70.length;
+        function result(object2, path72, defaultValue) {
+          path72 = castPath(path72, object2);
+          var index = -1, length = path72.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path70[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path72[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path70, value) {
-          return object2 == null ? object2 : baseSet(object2, path70, value);
+        function set2(object2, path72, value) {
+          return object2 == null ? object2 : baseSet(object2, path72, value);
         }
-        function setWith(object2, path70, value, customizer) {
+        function setWith(object2, path72, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path70, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path72, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path70) {
-          return object2 == null ? true : baseUnset(object2, path70);
+        function unset(object2, path72) {
+          return object2 == null ? true : baseUnset(object2, path72);
         }
-        function update(object2, path70, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path70, castFunction(updater));
+        function update(object2, path72, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path72, castFunction(updater));
         }
-        function updateWith(object2, path70, updater, customizer) {
+        function updateWith(object2, path72, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path70, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path72, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path70, srcValue) {
-          return baseMatchesProperty(path70, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path72, srcValue) {
+          return baseMatchesProperty(path72, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path70, args) {
+        var method = baseRest(function(path72, args) {
           return function(object2) {
-            return baseInvoke(object2, path70, args);
+            return baseInvoke(object2, path72, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path70) {
-            return baseInvoke(object2, path70, args);
+          return function(path72) {
+            return baseInvoke(object2, path72, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path70) {
-          return isKey(path70) ? baseProperty(toKey(path70)) : basePropertyDeep(path70);
+        function property(path72) {
+          return isKey(path72) ? baseProperty(toKey(path72)) : basePropertyDeep(path72);
         }
         function propertyOf(object2) {
-          return function(path70) {
-            return object2 == null ? undefined2 : baseGet(object2, path70);
+          return function(path72) {
+            return object2 == null ? undefined2 : baseGet(object2, path72);
           };
         }
         var range = createRange();
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path70, args) {
-          if (typeof path70 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path72, args) {
+          if (typeof path72 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path70, args);
+            return baseInvoke(value, path72, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -6366,10 +6366,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path70) {
-  if (!path70)
+function getElementAtPath(obj, path72) {
+  if (!path72)
     return obj;
-  return path70.reduce((acc, key2) => acc?.[key2], obj);
+  return path72.reduce((acc, key2) => acc?.[key2], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6709,11 +6709,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path70, issues) {
+function prefixIssues(path72, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path70);
+    iss.path.unshift(path72);
     return iss;
   });
 }
@@ -7163,16 +7163,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path70 = []) => {
+  const processError = (error63, path72 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path70, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path72, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
       } else {
-        const fullpath = [...path70, ...issue2.path];
+        const fullpath = [...path72, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7211,17 +7211,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path70 = []) => {
+  const processError = (error63, path72 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path70, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path72, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path70, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
       } else {
-        const fullpath = [...path70, ...issue2.path];
+        const fullpath = [...path72, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7260,8 +7260,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path70 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path70) {
+  const path72 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path72) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -24363,13 +24363,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path70 = ref.slice(1).split("/").filter(Boolean);
-  if (path70.length === 0) {
+  const path72 = ref.slice(1).split("/").filter(Boolean);
+  if (path72.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path70[0] === defsKey) {
-    const key2 = path70[1] === void 0 ? void 0 : decodeJSONPointerSegment(path70[1]);
+  if (path72[0] === defsKey) {
+    const key2 = path72[1] === void 0 ? void 0 : decodeJSONPointerSegment(path72[1]);
     if (!key2 || !ctx.defs[key2]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -26728,6 +26728,9 @@ var ProjectsSchema = external_exports.strictObject({
   ),
   wsbShare: external_exports.boolean().describe(
     "On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart."
+  ),
+  liveFolders: external_exports.enum(["off", "hcs"]).describe(
+    'ALPHA, UNTESTED ON A REAL PC: "hcs" adds a project folder to the running sandbox through the Host Compute Service where `wsb share` is missing (one administrator prompt per add or remove; always read-only in this alpha). If it fails, the sandbox may close: save your work first. Turn it on before the sandbox starts. "off" (default) offers a restart instead. The real-PC tests still to pass are in docs/design/hcs-live-folders.md ("Test plan").'
   )
 });
 
@@ -27338,8 +27341,16 @@ var RunDir = class {
   projectsDir;
   /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
   auditDir;
+  /**
+   * Each running session's process tree, recorded by its ptyhost (guest only: the daemon ends what a ptyhost that was
+   * itself ended left running).
+   */
+  treesDir;
   /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
   secretsDir;
+  /** Live folders (live.ts): signed host requests, and the daemon's replies. */
+  liveDir;
+  liveRepliesDir;
   constructor(dataDir2) {
     this.root = path7.join(dataDir2, "run");
     this.sandboxFile = path7.join(this.root, "sandbox.json");
@@ -27351,7 +27362,16 @@ var RunDir = class {
     this.sessionsDir = path7.join(this.root, "sessions");
     this.projectsDir = path7.join(this.root, "projects");
     this.auditDir = path7.join(this.root, "audit");
+    this.treesDir = path7.join(this.root, "trees");
     this.secretsDir = path7.join(dataDir2, "secrets");
+    this.liveDir = path7.join(this.root, "live");
+    this.liveRepliesDir = path7.join(this.root, "live-replies");
+  }
+  liveFile(id) {
+    return path7.join(this.liveDir, safeId(id) + ".json");
+  }
+  liveReplyFile(id) {
+    return path7.join(this.liveRepliesDir, safeId(id) + ".json");
   }
   requestFile(id) {
     return path7.join(this.requestsDir, safeId(id) + ".json");
@@ -27362,6 +27382,9 @@ var RunDir = class {
   sessionFile(id) {
     return path7.join(this.sessionsDir, safeId(id) + ".json");
   }
+  treeFile(id) {
+    return path7.join(this.treesDir, safeId(id) + ".json");
+  }
   projectFile(name) {
     return path7.join(this.projectsDir, safeId(name) + ".json");
   }
@@ -27946,7 +27969,9 @@ var SecretsFileSchema = external_exports.strictObject({
   /** The checked WireGuard config of vpn.provider wireguard-file (holds the private key). */
   wireguardConfig: external_exports.string().min(1).max(32 * 1024).optional(),
   /** The GitHub token you saved for sandboxes (github.shareToken), only with git access "full". */
-  githubToken: GithubTokenSchema.optional()
+  githubToken: GithubTokenSchema.optional(),
+  /** projects.liveFolders "hcs": this launch's key for signed live-folder requests (live.ts). */
+  liveFoldersKey: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
 });
 var withEnvironment = (harness, environment) => environment ? { ...harness, environment: { ...harness.environment, ...environment } } : harness;
 function mergeRequestSecrets(request, secrets) {
@@ -27996,13 +28021,19 @@ function applyBootEnvironment(environment) {
 function adoptBootSecrets() {
   const text = process.env[BOOT_SECRETS_VARIABLE];
   delete process.env[BOOT_SECRETS_VARIABLE];
-  if (!text) return;
+  if (!text) return void 0;
   try {
-    const parsed = SecretsFileSchema.pick({ harnessEnvironment: true }).safeParse(JSON.parse(text));
-    if (parsed.success) applyBootEnvironment(parsed.data.harnessEnvironment);
+    const parsed = SecretsFileSchema.pick({ harnessEnvironment: true, liveFoldersKey: true }).safeParse(
+      JSON.parse(text)
+    );
+    if (parsed.success) {
+      applyBootEnvironment(parsed.data.harnessEnvironment);
+      return parsed.data.liveFoldersKey;
+    }
   } catch {
-    warn("The boot secrets given to the daemon were not valid.");
   }
+  warn("The boot secrets given to the daemon were not valid.");
+  return void 0;
 }
 function withRequestSecrets(req) {
   if (req.kind !== "session" && req.kind !== "project") return req;
@@ -28010,7 +28041,7 @@ function withRequestSecrets(req) {
 }
 
 // src/guest/daemon/daemon.ts
-import fs55 from "node:fs";
+import fs57 from "node:fs";
 
 // src/guest/setup/claude-mem.ts
 import fs15 from "node:fs";
@@ -28208,15 +28239,15 @@ function agentPaths(toolsDir2, name, harness) {
 function agentCommand(name, harness) {
   return harness.npmBin ?? harness.uvBin ?? (harness.hostExecutable ?? name).replace(/\.exe$/i, "");
 }
-function localStateEntries(agents2, stateDir2, localRoot2) {
+function localStateEntries(agents2, stateDir3, localRoot2) {
   return Object.entries(agents2).flatMap(
     ([agent, harness]) => Object.entries(harness.localState ?? {}).map(([env, folder]) => ({
       agent,
       env,
-      store: path20.join(stateDir2, agent, folder),
+      store: path20.join(stateDir3, agent, folder),
       local: path20.join(localRoot2, agent, folder),
       processes: [agentCommand(agent, harness) + ".exe"],
-      legacy: path20.join(stateDir2, agent)
+      legacy: path20.join(stateDir3, agent)
     }))
   );
 }
@@ -29981,7 +30012,8 @@ var SOURCES = {
   cargoshim: "CargoShim.cs",
   linkgate: "LinkGate.cs",
   pathsync: "PathSync.cs",
-  memgov: "MemGov.cs"
+  memgov: "MemGov.cs",
+  bindmount: "BindMount.cs"
 };
 function sourceOf(name) {
   return path42.join(launchDir, "sandbox", "csharp", SOURCES[name]);
@@ -32426,7 +32458,7 @@ function shellLaunch(asked, paths) {
 // src/guest/sessions/pty-host.ts
 import fs50 from "node:fs";
 import path65 from "node:path";
-import { spawn as spawn6 } from "node:child_process";
+import { execFile, spawn as spawn6 } from "node:child_process";
 function ensurePtyHost() {
   return ensureCompiled("ptyhost");
 }
@@ -32458,7 +32490,12 @@ var conptyDll = () => {
   return session.provisioning.conpty?.enabled !== false && fs50.existsSync(dll) && fs50.existsSync(path65.join(toolsDir, "conpty", "OpenConsole.exe")) ? dll : null;
 };
 function startPtyHost(o) {
-  const env = { ...o.env, PTYHOST_BIND: o.remote ? "any" : "loopback" };
+  fs50.mkdirSync(run.treesDir, { recursive: true });
+  const env = {
+    ...o.env,
+    PTYHOST_BIND: o.remote ? "any" : "loopback",
+    PTYHOST_TREE_FILE: run.treeFile(o.id)
+  };
   delete env.PTYHOST_CONPTY;
   const dll = conptyDll();
   if (dll) env.PTYHOST_CONPTY = dll;
@@ -32468,6 +32505,29 @@ function startPtyHost(o) {
     { cwd: o.cwd, env, detached: true, stdio: "ignore", windowsHide: true }
   );
 }
+var END_TREE_MS = 3e4;
+function endLeftoverTree(id, exe = ensurePtyHost()) {
+  const file3 = run.treeFile(id);
+  if (!fs50.existsSync(file3)) return Promise.resolve(null);
+  return new Promise((resolve2) => {
+    execFile(exe, ["--end-tree", file3], { timeout: END_TREE_MS, windowsHide: true }, (error62, stdout) => {
+      const code = error62 ? typeof error62.code === "number" ? error62.code : -1 : 0;
+      if (code !== 3)
+        try {
+          fs50.rmSync(file3, { force: true });
+        } catch {
+        }
+      resolve2(code === 0 ? stdout.trim().slice(0, 200) : code === 3 ? null : "could not end them (code " + code + ")");
+    });
+  });
+}
+function recordedTrees() {
+  try {
+    return fs50.readdirSync(run.treesDir).filter((n) => /^[A-Za-z0-9_-]{1,64}\.json$/.test(n)).map((n) => n.slice(0, -".json".length));
+  } catch {
+    return [];
+  }
+}
 
 // src/guest/agents/agent-installer.ts
 import fs51 from "node:fs";
@@ -32797,7 +32857,23 @@ var SessionManager = class {
   }
   rootStarted(id, child, from) {
     if (child.pid) this.ptyHosts.set(id, { session: id, pid: child.pid, from });
-    child.once("exit", () => this.rootEnded(id));
+    child.once("exit", () => {
+      this.rootEnded(id);
+      this.endLeftovers(id);
+    });
+  }
+  /** What a session's ptyhost left running when it was itself ended (Task Manager, a crash) is ended now. */
+  endLeftovers(id) {
+    void endLeftoverTree(id).then((done) => {
+      if (done) log("Session " + id + ": its session host was ended from outside; " + done + " it left running");
+    }).catch((e) => warn("Ending what session " + id + " left running failed: " + errMsg(e)));
+  }
+  /**
+   * At the daemon's start: trees recorded by session hosts that are gone (a daemon that ended with them) are ended
+   * too. One whose session host still runs is left alone (ptyhost --end-tree checks).
+   */
+  sweepLeftovers() {
+    for (const id of recordedTrees()) if (!this.live.has(id)) this.endLeftovers(id);
   }
   rootEnded(id) {
     const r = this.ptyHosts.get(id);
@@ -33446,6 +33522,315 @@ var Governor = class {
 };
 var governor = new Governor();
 
+// src/guest/daemon/live.ts
+import fs56 from "node:fs";
+import path71 from "node:path";
+import { spawnSync as spawnSync7 } from "node:child_process";
+
+// src/guest/daemon/live-folders.ts
+import fs55 from "node:fs";
+import path70 from "node:path";
+
+// src/shared/channel/live.ts
+import crypto5 from "node:crypto";
+var LIVE_SHARE_NAME = /^agentsbx-[0-9a-f]{8,32}$/;
+var LIVE_FOLDER_NAME = /^[a-z0-9][a-z0-9_-]{0,63}$/;
+var LIVE_KEY = /^[0-9a-f]{64}$/;
+var LIVE_TOKEN = /^[0-9a-f]{32}$/;
+var LIVE_MAX_AGE_MS = 2 * 60 * 1e3;
+var MAX_PAYLOAD = 4096;
+var LivePayloadSchema = external_exports.strictObject({
+  v: external_exports.literal(1),
+  /** canary: show the share, read token.txt, hide it again and reply with the token; map / unmap: the real folder. */
+  kind: external_exports.enum(["canary", "map", "unmap"]),
+  id: IdSchema,
+  launchId: external_exports.string().min(1).max(64),
+  share: external_exports.string().regex(LIVE_SHARE_NAME).optional(),
+  folder: external_exports.string().regex(LIVE_FOLDER_NAME),
+  readOnly: external_exports.boolean(),
+  createdAt: external_exports.string().max(64)
+});
+var LiveEnvelopeSchema = external_exports.strictObject({
+  payload: external_exports.string().min(2).max(MAX_PAYLOAD),
+  mac: external_exports.string().regex(/^[0-9a-f]{64}$/)
+});
+var LiveReplySchema = external_exports.strictObject({
+  id: IdSchema,
+  ok: external_exports.boolean(),
+  message: external_exports.string().max(1e3),
+  token: external_exports.string().regex(LIVE_TOKEN).optional(),
+  finishedAt: external_exports.string().max(64)
+});
+function mac3(key2, payload) {
+  return crypto5.createHmac("sha256", Buffer.from(key2, "hex")).update(payload, "utf8").digest("hex");
+}
+function openLive(key2, envelope, o) {
+  if (!key2 || !LIVE_KEY.test(key2))
+    return { refused: "no live-folder key (live folders were off when the sandbox started)" };
+  const env = LiveEnvelopeSchema.safeParse(envelope);
+  if (!env.success) return { refused: "not a live-folder request" };
+  const want = Buffer.from(mac3(key2, env.data.payload), "hex");
+  const got = Buffer.from(env.data.mac, "hex");
+  if (want.length !== got.length || !crypto5.timingSafeEqual(want, got))
+    return { refused: "the signature does not match" };
+  let json2;
+  try {
+    json2 = JSON.parse(env.data.payload);
+  } catch {
+    return { refused: "the signed payload is not JSON" };
+  }
+  const parsed = LivePayloadSchema.safeParse(json2);
+  if (!parsed.success) return { refused: "the signed payload has the wrong shape" };
+  const p = parsed.data;
+  if (p.launchId !== o.launchId) return { refused: "it is for another launch" };
+  const at = Date.parse(p.createdAt);
+  if (!Number.isFinite(at) || Math.abs(o.now - at) > LIVE_MAX_AGE_MS) return { refused: "it is too old" };
+  if (p.kind !== "unmap" && !p.share) return { refused: "it names no share" };
+  return { payload: p };
+}
+
+// src/guest/daemon/live-folders.ts
+var MAX_REQUEST_BYTES = 16 * 1024;
+var MAX_SEEN = 512;
+var EXIT_OK = 0;
+var EXIT_NO_SHARE = 3;
+var EXIT_NOT_MAPPED = 4;
+var StateSchema = external_exports.object({
+  key: external_exports.string().regex(LIVE_KEY).nullable(),
+  launchId: external_exports.string().max(64),
+  seen: external_exports.array(external_exports.object({ id: external_exports.string().max(64), at: external_exports.number() })).max(MAX_SEEN),
+  mappings: external_exports.array(
+    external_exports.object({
+      folder: external_exports.string().regex(LIVE_FOLDER_NAME),
+      share: external_exports.string().regex(LIVE_SHARE_NAME),
+      readOnly: external_exports.boolean()
+    })
+  ).max(256)
+});
+var wait = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+var LiveFolderHandler = class {
+  constructor(o) {
+    this.o = o;
+  }
+  o;
+  queue = Promise.resolve();
+  now() {
+    return (this.o.now ?? Date.now)();
+  }
+  log(line) {
+    this.o.log?.(line);
+  }
+  read() {
+    try {
+      const text = fs55.readFileSync(this.o.stateFile, "utf8");
+      const parsed = StateSchema.safeParse(JSON.parse(text));
+      if (parsed.success && parsed.data.launchId === this.o.launchId) return parsed.data;
+    } catch {
+    }
+    return { key: null, launchId: this.o.launchId, seen: [], mappings: [] };
+  }
+  save(state) {
+    fs55.mkdirSync(path70.dirname(this.o.stateFile), { recursive: true });
+    writeJsonAtomic(this.o.stateFile, state);
+  }
+  /** The key the boot handed over (from the one-shot secrets file). */
+  setKey(key2) {
+    if (!LIVE_KEY.test(key2)) return;
+    this.save({ ...this.read(), key: key2 });
+  }
+  /** C:\Workspace\<name> from a checked name only. */
+  folderPath(name) {
+    if (!LIVE_FOLDER_NAME.test(name)) throw new Error("not a plain folder name");
+    return path70.win32.join(this.o.workspaces ?? WORKSPACES_GUEST, name);
+  }
+  /** One pass over run\live: every file is claimed (deleted) at once; valid ones are handled one after another. */
+  tick() {
+    const dir = this.o.run.liveDir;
+    let names;
+    try {
+      names = fs55.readdirSync(dir);
+    } catch {
+      return;
+    }
+    for (const name of names.slice(0, 64)) {
+      if (name.endsWith(".tmp")) continue;
+      const file3 = path70.join(dir, name);
+      let envelope = null;
+      try {
+        const stat = fs55.lstatSync(file3);
+        if (stat.isFile() && stat.size <= MAX_REQUEST_BYTES && /^[A-Za-z0-9_-]{1,64}\.json$/.test(name))
+          envelope = JSON.parse(fs55.readFileSync(file3, "utf8"));
+      } catch {
+        envelope = null;
+      } finally {
+        try {
+          fs55.rmSync(file3, { recursive: true, force: true });
+        } catch {
+        }
+      }
+      if (envelope === null) continue;
+      this.queue = this.queue.then(() => this.handle(envelope)).catch((e) => this.log("live folder: " + errMsg(e)));
+    }
+  }
+  /** Waits for what tick() queued (tests). */
+  idle() {
+    return this.queue;
+  }
+  async handle(envelope) {
+    const state = this.read();
+    const now2 = this.now();
+    const opened = openLive(state.key, envelope, { launchId: this.o.launchId, now: now2 });
+    if ("refused" in opened) {
+      this.log("live folder request ignored: " + opened.refused);
+      return;
+    }
+    const p = opened.payload;
+    const seen = state.seen.filter((s) => now2 - s.at < 10 * 60 * 1e3);
+    if (seen.some((s) => s.id === p.id)) {
+      this.log("live folder request ignored: seen before (" + p.id + ")");
+      return;
+    }
+    this.save({ ...state, seen: [...seen, { id: p.id, at: now2 }].slice(-MAX_SEEN) });
+    let reply;
+    try {
+      reply = await this.act(p);
+    } catch (e) {
+      reply = { ok: false, message: errMsg(e).slice(0, 900) };
+    }
+    this.reply(p.id, reply);
+  }
+  reply(id, r) {
+    try {
+      fs55.mkdirSync(this.o.run.liveRepliesDir, { recursive: true });
+      writeJsonAtomic(this.o.run.liveReplyFile(id), { id, ...r, finishedAt: new Date(this.now()).toISOString() });
+    } catch (e) {
+      this.log("live folder reply not written: " + errMsg(e));
+    }
+  }
+  /** map with retries while the share is not there yet. */
+  async mapWithRetry(folder, share, readOnly) {
+    const tries = this.o.tries ?? 20;
+    let code = EXIT_NO_SHARE;
+    for (let i = 0; i < tries; i++) {
+      code = this.o.bind.map(folder, share, readOnly);
+      if (code !== EXIT_NO_SHARE) return code;
+      await (this.o.sleep ?? wait)(500);
+    }
+    return code;
+  }
+  /** The folder must not exist yet: not as a folder, a file or a link. */
+  assertFree(folder) {
+    let exists2 = true;
+    try {
+      fs55.lstatSync(folder);
+    } catch {
+      exists2 = false;
+    }
+    if (exists2) throw new Error(folder + " exists already");
+    const parent = path70.dirname(folder);
+    fs55.mkdirSync(parent, { recursive: true });
+    if (!fs55.lstatSync(parent).isDirectory()) throw new Error(parent + " is not a plain folder");
+  }
+  async act(p) {
+    const folder = this.folderPath(p.folder);
+    if (p.kind === "unmap") {
+      const state2 = this.read();
+      const known = state2.mappings.find((m) => m.folder === p.folder);
+      if (!known) return { ok: false, message: "no live folder at " + folder };
+      const code2 = this.o.bind.unmap(folder);
+      if (code2 !== EXIT_OK || this.o.bind.mapped(folder) !== EXIT_NOT_MAPPED)
+        return { ok: false, message: "the folder could not be hidden again (are files in it open?)" };
+      const after = this.read();
+      this.save({ ...after, mappings: after.mappings.filter((m) => m.folder !== p.folder) });
+      return { ok: true, message: "hidden: " + folder };
+    }
+    const share = p.share ?? "";
+    this.assertFree(folder);
+    if (p.kind === "canary") {
+      const code2 = await this.mapWithRetry(folder, share, true);
+      if (code2 !== EXIT_OK) return { ok: false, message: "the test share could not be shown (" + code2 + ")" };
+      try {
+        const file3 = path70.join(folder, "token.txt");
+        const stat = fs55.statSync(file3);
+        const token = stat.size <= 64 ? fs55.readFileSync(file3, "utf8").trim() : "";
+        return LIVE_TOKEN.test(token) ? { ok: true, message: "read the test share", token } : { ok: false, message: "the test share holds no token" };
+      } finally {
+        this.o.bind.unmap(folder);
+      }
+    }
+    const code = await this.mapWithRetry(folder, share, p.readOnly);
+    if (code !== EXIT_OK)
+      return {
+        ok: false,
+        message: code === EXIT_NO_SHARE ? "the share did not reach the sandbox" : "the folder could not be shown (" + code + ")"
+      };
+    const state = this.read();
+    this.save({
+      ...state,
+      mappings: [
+        ...state.mappings.filter((m) => m.folder !== p.folder),
+        { folder: p.folder, share, readOnly: p.readOnly }
+      ]
+    });
+    return { ok: true, message: "shown at " + folder };
+  }
+  /** When the daemon starts: the recorded mappings this launch made, made again where they are gone. */
+  reapply() {
+    let done = 0;
+    for (const m of this.read().mappings) {
+      const folder = this.folderPath(m.folder);
+      if (this.o.bind.mapped(folder) === EXIT_OK) continue;
+      fs55.mkdirSync(path70.dirname(folder), { recursive: true });
+      if (this.o.bind.map(folder, m.share, m.readOnly) === EXIT_OK) done++;
+      else this.log("live folder " + folder + " could not be shown again");
+    }
+    return done;
+  }
+};
+
+// src/guest/daemon/live.ts
+var BIND_TIMEOUT_MS = 3e4;
+var testing = Boolean(process.env.AGENT_DAEMON_STATE_DIR || process.env.AGENT_LOCAL_DIR);
+var stateDir2 = process.env.AGENT_DAEMON_STATE_DIR ?? (process.env.AGENT_LOCAL_DIR ? path71.join(localDir, "daemon-state") : path71.join(process.env.ProgramData ?? "C:\\ProgramData", "AgentSandboxDaemon"));
+function bindMount(args) {
+  const r = spawnSync7(ensureCompiled("bindmount"), args, {
+    windowsHide: true,
+    timeout: BIND_TIMEOUT_MS,
+    encoding: "utf8"
+  });
+  return r.status ?? 1;
+}
+var realBind = {
+  map: (folder, share, readOnly) => bindMount(["map", folder, share, ...readOnly ? [] : ["rw"]]),
+  unmap: (folder) => bindMount(["unmap", folder]),
+  mapped: (folder) => bindMount(["mapped", folder])
+};
+function protectStateDir() {
+  fs56.mkdirSync(stateDir2, { recursive: true });
+  if (!isWin || testMode || testing) return;
+  spawnSync7(
+    SYSTEM.icacls(),
+    [stateDir2, "/inheritance:r", "/grant:r", "*S-1-5-32-544:(OI)(CI)F", "*S-1-5-18:(OI)(CI)F"],
+    {
+      windowsHide: true,
+      timeout: BIND_TIMEOUT_MS
+    }
+  );
+}
+var liveFolders = new LiveFolderHandler({
+  run,
+  stateFile: path71.join(stateDir2, "live-folders.json"),
+  launchId: session.launchId,
+  bind: realBind,
+  log: warn
+});
+function startLiveFolders(key2) {
+  protectStateDir();
+  if (key2) liveFolders.setKey(key2);
+  const again = liveFolders.reapply();
+  if (again) warn("Live folders: " + again + " shown again after the daemon restarted.");
+}
+
 // src/guest/daemon/daemon.ts
 var POLL_MS = 400;
 var MEM_SAVE_MS = 12e4;
@@ -33464,14 +33849,15 @@ var Daemon = class {
   tick() {
     const { valid, invalid } = run.scanRequests();
     for (const file3 of invalid)
-      safely("removing an invalid request", () => fs55.rmSync(file3, { recursive: true, force: true }));
+      safely("removing an invalid request", () => fs57.rmSync(file3, { recursive: true, force: true }));
     for (const req of valid) {
-      safely("claiming a request", () => fs55.rmSync(run.requestFile(req.id), { force: true }));
+      safely("claiming a request", () => fs57.rmSync(run.requestFile(req.id), { force: true }));
       if (run.readSession(req.id)) continue;
       void Promise.resolve(this.handle(withRequestSecrets(req))).catch(
         (e) => respond(req.id, { ok: false, message: errMsg(e) })
       );
     }
+    safely("live folders", () => liveFolders.tick());
     if (Date.now() - this.lastMemSave > MEM_SAVE_MS) {
       this.lastMemSave = Date.now();
       safely("claude-mem save", saveClaudeMem);
@@ -33501,10 +33887,12 @@ var Daemon = class {
 // src/guest/entries/daemon.ts
 process.on("uncaughtException", (e) => warn("daemon: unexpected error (continuing): " + (e.stack ?? errMsg(e))));
 process.on("unhandledRejection", (e) => warn("daemon: unexpected error (continuing): " + errMsg(e)));
-adoptBootSecrets();
+var liveKey = adoptBootSecrets();
 log("Session daemon started (pid " + process.pid + ").");
+safely("live folders", () => startLiveFolders(liveKey));
 safely("port forwards", startRelays);
 safely("audit", () => startProcessCollector(() => sessions.roots()));
+safely("leftover processes", () => sessions.sweepLeftovers());
 safely("memory governor", () => governor.start());
 log("Memory governor: " + governor.describe());
 new Daemon().start();