windows-development-sandbox 1.16.0 → 1.17.3

package/dist/runtime/daemon.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key2]);
           });
         }
-        function baseGet(object2, path72) {
-          path72 = castPath(path72, object2);
-          var index = 0, length = path72.length;
+        function baseGet(object2, path73) {
+          path73 = castPath(path73, object2);
+          var index = 0, length = path73.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path72[index++])];
+            object2 = object2[toKey(path73[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path72, args) {
-          path72 = castPath(path72, object2);
-          object2 = parent(object2, path72);
-          var func = object2 == null ? object2 : object2[toKey(last(path72))];
+        function baseInvoke(object2, path73, args) {
+          path73 = castPath(path73, object2);
+          object2 = parent(object2, path73);
+          var func = object2 == null ? object2 : object2[toKey(last(path73))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path72, srcValue) {
-          if (isKey(path72) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path72), srcValue);
+        function baseMatchesProperty(path73, srcValue) {
+          if (isKey(path73) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path73), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path72);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path72) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path73);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path73) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path72) {
-            return hasIn(object2, path72);
+          return basePickBy(object2, paths, function(value, path73) {
+            return hasIn(object2, path73);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path72 = paths[index], value = baseGet(object2, path72);
-            if (predicate(value, path72)) {
-              baseSet(result2, castPath(path72, object2), value);
+            var path73 = paths[index], value = baseGet(object2, path73);
+            if (predicate(value, path73)) {
+              baseSet(result2, castPath(path73, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path72) {
+        function basePropertyDeep(path73) {
           return function(object2) {
-            return baseGet(object2, path72);
+            return baseGet(object2, path73);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path72, value, customizer) {
+        function baseSet(object2, path73, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path72 = castPath(path72, object2);
-          var index = -1, length = path72.length, lastIndex = length - 1, nested = object2;
+          path73 = castPath(path73, object2);
+          var index = -1, length = path73.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key2 = toKey(path72[index]), newValue = value;
+            var key2 = toKey(path73[index]), newValue = value;
             if (key2 === "__proto__" || key2 === "constructor" || key2 === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key2];
               newValue = customizer ? customizer(objValue, key2, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path72[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path73[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key2, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path72) {
-          path72 = castPath(path72, object2);
-          var index = -1, length = path72.length;
+        function baseUnset(object2, path73) {
+          path73 = castPath(path73, object2);
+          var index = -1, length = path73.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key2 = toKey(path72[index]);
+            var key2 = toKey(path73[index]);
             if (key2 === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path72);
-          return obj == null || delete obj[toKey(last(path72))];
+          var obj = parent(object2, path73);
+          return obj == null || delete obj[toKey(last(path73))];
         }
-        function baseUpdate(object2, path72, updater, customizer) {
-          return baseSet(object2, path72, updater(baseGet(object2, path72)), customizer);
+        function baseUpdate(object2, path73, updater, customizer) {
+          return baseSet(object2, path73, updater(baseGet(object2, path73)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path72, hasFunc) {
-          path72 = castPath(path72, object2);
-          var index = -1, length = path72.length, result2 = false;
+        function hasPath(object2, path73, hasFunc) {
+          path73 = castPath(path73, object2);
+          var index = -1, length = path73.length, result2 = false;
           while (++index < length) {
-            var key2 = toKey(path72[index]);
+            var key2 = toKey(path73[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key2))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path72) {
-          return path72.length < 2 ? object2 : baseGet(object2, baseSlice(path72, 0, -1));
+        function parent(object2, path73) {
+          return path73.length < 2 ? object2 : baseGet(object2, baseSlice(path73, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path72, args) {
-          var index = -1, isFunc = typeof path72 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path73, args) {
+          var index = -1, isFunc = typeof path73 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path72, value, args) : baseInvoke(value, path72, args);
+            result2[++index] = isFunc ? apply(path73, value, args) : baseInvoke(value, path73, args);
           });
           return result2;
         });
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path72, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path72);
+        function get(object2, path73, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path73);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path72) {
-          return object2 != null && hasPath(object2, path72, baseHas);
+        function has(object2, path73) {
+          return object2 != null && hasPath(object2, path73, baseHas);
         }
-        function hasIn(object2, path72) {
-          return object2 != null && hasPath(object2, path72, baseHasIn);
+        function hasIn(object2, path73) {
+          return object2 != null && hasPath(object2, path73, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key2) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path72) {
-            path72 = castPath(path72, object2);
-            isDeep || (isDeep = path72.length > 1);
-            return path72;
+          paths = arrayMap(paths, function(path73) {
+            path73 = castPath(path73, object2);
+            isDeep || (isDeep = path73.length > 1);
+            return path73;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path72) {
-            return predicate(value, path72[0]);
+          return basePickBy(object2, props, function(value, path73) {
+            return predicate(value, path73[0]);
           });
         }
-        function result(object2, path72, defaultValue) {
-          path72 = castPath(path72, object2);
-          var index = -1, length = path72.length;
+        function result(object2, path73, defaultValue) {
+          path73 = castPath(path73, object2);
+          var index = -1, length = path73.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path72[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path73[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path72, value) {
-          return object2 == null ? object2 : baseSet(object2, path72, value);
+        function set2(object2, path73, value) {
+          return object2 == null ? object2 : baseSet(object2, path73, value);
         }
-        function setWith(object2, path72, value, customizer) {
+        function setWith(object2, path73, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path72, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path73, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path72) {
-          return object2 == null ? true : baseUnset(object2, path72);
+        function unset(object2, path73) {
+          return object2 == null ? true : baseUnset(object2, path73);
         }
-        function update(object2, path72, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path72, castFunction(updater));
+        function update(object2, path73, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path73, castFunction(updater));
         }
-        function updateWith(object2, path72, updater, customizer) {
+        function updateWith(object2, path73, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path72, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path73, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path72, srcValue) {
-          return baseMatchesProperty(path72, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path73, srcValue) {
+          return baseMatchesProperty(path73, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path72, args) {
+        var method = baseRest(function(path73, args) {
           return function(object2) {
-            return baseInvoke(object2, path72, args);
+            return baseInvoke(object2, path73, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path72) {
-            return baseInvoke(object2, path72, args);
+          return function(path73) {
+            return baseInvoke(object2, path73, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path72) {
-          return isKey(path72) ? baseProperty(toKey(path72)) : basePropertyDeep(path72);
+        function property(path73) {
+          return isKey(path73) ? baseProperty(toKey(path73)) : basePropertyDeep(path73);
         }
         function propertyOf(object2) {
-          return function(path72) {
-            return object2 == null ? undefined2 : baseGet(object2, path72);
+          return function(path73) {
+            return object2 == null ? undefined2 : baseGet(object2, path73);
           };
         }
         var range = createRange();
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path72, args) {
-          if (typeof path72 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path73, args) {
+          if (typeof path73 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path72, args);
+            return baseInvoke(value, path73, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -6366,10 +6366,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path72) {
-  if (!path72)
+function getElementAtPath(obj, path73) {
+  if (!path73)
     return obj;
-  return path72.reduce((acc, key2) => acc?.[key2], obj);
+  return path73.reduce((acc, key2) => acc?.[key2], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6709,11 +6709,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path72, issues) {
+function prefixIssues(path73, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path72);
+    iss.path.unshift(path73);
     return iss;
   });
 }
@@ -7163,16 +7163,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path72 = []) => {
+  const processError = (error63, path73 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path72, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path73, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path73, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path73, ...issue2.path]);
       } else {
-        const fullpath = [...path72, ...issue2.path];
+        const fullpath = [...path73, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7211,17 +7211,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path72 = []) => {
+  const processError = (error63, path73 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path72, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path73, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path73, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path72, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path73, ...issue2.path]);
       } else {
-        const fullpath = [...path72, ...issue2.path];
+        const fullpath = [...path73, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7260,8 +7260,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path72 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path72) {
+  const path73 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path73) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -24363,13 +24363,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path72 = ref.slice(1).split("/").filter(Boolean);
-  if (path72.length === 0) {
+  const path73 = ref.slice(1).split("/").filter(Boolean);
+  if (path73.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path72[0] === defsKey) {
-    const key2 = path72[1] === void 0 ? void 0 : decodeJSONPointerSegment(path72[1]);
+  if (path73[0] === defsKey) {
+    const key2 = path73[1] === void 0 ? void 0 : decodeJSONPointerSegment(path73[1]);
     if (!key2 || !ctx.defs[key2]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25505,7 +25505,7 @@ var SandboxSchema = external_exports.strictObject({
     "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
-    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
   ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
   clipboard: external_exports.boolean().describe(
@@ -25667,6 +25667,21 @@ var ToolchainsSchema = external_exports.strictObject({
     msvcVersion: external_exports.string().min(1).describe('"latest" or an MSVC tools version prefix, e.g. "14.44".'),
     sdkVersion: external_exports.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".')
   }),
+  unreal: external_exports.strictObject({
+    enabled: enabled(
+      "Unreal Engine development: Visual Studio Community 2022 with the C++ game workload (MSVC, a Windows 11 SDK, .NET Framework targeting packs, Unreal integration and the Epic Games Launcher) and the DirectX End-User Runtime. A real installer: it runs every boot (~10 GB on the sandbox disk). The engine itself comes from the Epic Games Launcher or its source.",
+      "a .uproject or .uplugin"
+    ),
+    acceptLicense: external_exports.boolean().describe(
+      "Required to install: you accept the Visual Studio Community licence terms (https://visualstudio.microsoft.com/license-terms/) and the DirectX End-User Runtime licence."
+    ),
+    components: StringsSchema.describe(
+      'More Visual Studio workload or component IDs to add, e.g. ["Microsoft.VisualStudio.Component.VC.Llvm.Clang"].'
+    ),
+    keepInstallFiles: external_exports.boolean().describe(
+      "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
+    )
+  }),
   cpp: external_exports.strictObject({
     enabled: enabled(
       "MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).",
@@ -28041,7 +28056,7 @@ function withRequestSecrets(req) {
 }
 
 // src/guest/daemon/daemon.ts
-import fs57 from "node:fs";
+import fs58 from "node:fs";
 
 // src/guest/setup/claude-mem.ts
 import fs15 from "node:fs";
@@ -28482,8 +28497,8 @@ function withRegistryPath(env) {
 }
 
 // src/guest/daemon/project-provisioner.ts
-import fs49 from "node:fs";
-import path63 from "node:path";
+import fs50 from "node:fs";
+import path64 from "node:path";
 
 // src/guest/boot/boot-env.ts
 import fs17 from "node:fs";
@@ -29312,6 +29327,7 @@ var MARKERS = {
   ],
   rust: ["Cargo.toml", "rust-toolchain", "rust-toolchain.toml"],
   msvc: ["*.vcxproj", "CMakePresets.json", "CMakeUserPresets.json"],
+  unreal: ["*.uproject", "*.uplugin"],
   cpp: [
     "CMakeLists.txt",
     "Makefile",
@@ -30952,25 +30968,230 @@ async function setupMsvc(env, config2) {
   env.summary.push("msvc: " + done.msvc + ", Windows SDK " + done.sdk + " (cl, link; vcvars64.bat and vswhere work)");
 }
 
-// src/guest/toolchains/native/rust.ts
+// src/guest/toolchains/native/unreal.ts
+import fs43 from "node:fs";
+import os7 from "node:os";
 import path55 from "node:path";
 
-// src/guest/toolchains/native/binstall.ts
+// src/guest/toolchains/native/vcruntime.ts
 import fs42 from "node:fs";
 import path54 from "node:path";
+var VC_REDIST = "https://aka.ms/vs/17/release/vc_redist.x64.exe";
+var MICROSOFT_SIGNER = "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US";
+var OK_EXIT_CODES = [0, 1638, 3010];
+var signerOf = (file3) => scriptOutput("get-signer.ps1", ["-Path", file3]).trim();
+async function setupVcRuntime(env, summary = true) {
+  if (dryRun) {
+    log("(dry run) would install the Visual C++ runtime");
+    return false;
+  }
+  const system322 = path54.join(process.env.WINDIR ?? "C:\\Windows", "System32");
+  const missing = !exists(path54.join(system322, "vcruntime140.dll")) || !exists(path54.join(system322, "msvcp140.dll"));
+  if (missing) {
+    const installer = tool("vcredist", "vc_redist.x64.exe");
+    if (!exists(installer)) {
+      log("Downloading the Visual C++ runtime (~25 MB once) ...");
+      await downloadFile(VC_REDIST, installer);
+    }
+    if (signerOf(installer) !== MICROSOFT_SIGNER) {
+      fs42.rmSync(installer, { force: true });
+      throw new Error("vc_redist.x64.exe is not signed by Microsoft; deleted it (it is downloaded again next boot)");
+    }
+    log("Installing the Visual C++ runtime ...");
+    const code = await spawnAsync(installer, ["/install", "/quiet", "/norestart"]);
+    if (!OK_EXIT_CODES.includes(code ?? -1) || !exists(path54.join(system322, "vcruntime140.dll")))
+      throw new Error("the Visual C++ runtime installer failed (exit " + code + ")");
+  }
+  if (summary) env.summary.push("vc++ runtime: installed");
+  return missing;
+}
+
+// src/guest/toolchains/native/unreal.ts
+var BOOTSTRAPPER_URL = "https://aka.ms/vs/17/release/vs_community.exe";
+var DIRECTX_URL = "https://download.microsoft.com/download/8/4/A/84A35BF1-DAFE-4AE8-82AF-AD2AE20B6B14/directx_Jun2010_redist.exe";
+var UNREAL_COMPONENTS = [
+  "Microsoft.VisualStudio.Workload.NativeGame",
+  "Microsoft.VisualStudio.Component.VC.Tools.x86.x64",
+  "Microsoft.VisualStudio.Component.Windows11SDK.22621",
+  "Microsoft.VisualStudio.Component.VC.DiagnosticTools",
+  "Microsoft.Net.Component.4.6.2.TargetingPack",
+  "Microsoft.Net.Component.4.8.SDK",
+  "Component.Unreal.Ide",
+  "Component.Unreal"
+];
+var OK_EXIT_CODES2 = [0, 3010];
+var LAYOUT_ROOM_BYTES = 15 * 1024 ** 3;
+var INSTALL_ROOM_BYTES = 20 * 1024 ** 3;
+var ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,199}$/;
+var VS_DIR = tool("visualstudio");
+var BOOTSTRAPPER = path55.join(VS_DIR, "vs_community.exe");
+var LAYOUT = path55.join(VS_DIR, "layout");
+var LAYOUT_MARKER = path55.join(LAYOUT, ".complete.json");
+var LayoutSchema = external_exports.object({ components: external_exports.array(external_exports.string()) });
+var VSWHERE = path55.join(
+  process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)",
+  "Microsoft Visual Studio",
+  "Installer",
+  "vswhere.exe"
+);
+function installedVs() {
+  if (!exists(VSWHERE)) return null;
+  const ask = (property) => execOutput(VSWHERE, [
+    "-latest",
+    "-products",
+    "*",
+    "-requires",
+    "Microsoft.VisualStudio.Component.VC.Tools.x86.x64",
+    "-property",
+    property
+  ]);
+  const at = ask("installationPath");
+  return at ? { path: at, version: ask("installationVersion") || "installed" } : null;
+}
+async function signedInstaller(url2, file3, what) {
+  if (!exists(file3)) {
+    log("Downloading " + what + " ...");
+    mkdirp(path55.dirname(file3));
+    await downloadFile(url2, file3);
+  }
+  if (signerOf(file3) !== MICROSOFT_SIGNER) {
+    fs43.rmSync(file3, { force: true });
+    throw new Error(path55.basename(file3) + " is not signed by Microsoft; deleted it (it is downloaded again next boot)");
+  }
+  return file3;
+}
+function freeBytes(dir) {
+  try {
+    const s = fs43.statfsSync(dir);
+    return s.bavail * s.bsize;
+  } catch {
+    return 0;
+  }
+}
+async function layoutInstaller(bootstrapper, ids) {
+  const installer = path55.join(LAYOUT, "vs_community.exe");
+  const has = () => {
+    if (!exists(LAYOUT_MARKER) || !exists(installer)) return false;
+    try {
+      const done = LayoutSchema.parse(JSON.parse(fs43.readFileSync(LAYOUT_MARKER, "utf8")));
+      return ids.every((id) => done.components.includes(id));
+    } catch {
+      return false;
+    }
+  };
+  if (has()) return installer;
+  if (freeBytes(mkdirp(VS_DIR)) < LAYOUT_ROOM_BYTES) {
+    warn("unreal: not keeping the install files (less than 15 GB free in " + VS_DIR + "); downloading this boot");
+    return null;
+  }
+  log("Saving the Visual Studio install files for later boots (~10 GB, once) ...");
+  fs43.rmSync(LAYOUT_MARKER, { force: true });
+  const code = await spawnAsync(bootstrapper, [
+    "--layout",
+    LAYOUT,
+    "--lang",
+    "en-US",
+    "--quiet",
+    "--wait",
+    ...ids.flatMap((id) => ["--add", id])
+  ]);
+  if (!OK_EXIT_CODES2.includes(code) || !exists(installer)) {
+    warn("unreal: saving the install files failed (exit " + code + "); downloading this boot");
+    return null;
+  }
+  writeJsonAtomic(LAYOUT_MARKER, { components: [...ids] });
+  return installer;
+}
+async function installVisualStudio(config2, ids) {
+  const bootstrapper = await signedInstaller(BOOTSTRAPPER_URL, BOOTSTRAPPER, "the Visual Studio installer");
+  let installer = null;
+  if (config2.keepInstallFiles) {
+    try {
+      installer = await layoutInstaller(bootstrapper, ids);
+    } catch (e) {
+      warn("unreal: the offline copy failed (" + errMsg(e) + "); downloading this boot");
+    }
+  }
+  log(
+    "Installing Visual Studio Community 2022 with the C++ game workload" + (installer ? " from the saved install files" : " (downloads ~5-8 GB)") + " ..."
+  );
+  const code = await spawnAsync(installer ?? bootstrapper, [
+    "--quiet",
+    "--wait",
+    "--norestart",
+    "--nocache",
+    ...installer ? ["--noWeb"] : [],
+    ...ids.flatMap((id) => ["--add", id])
+  ]);
+  if (!OK_EXIT_CODES2.includes(code) || !installedVs())
+    throw new Error(
+      "the Visual Studio installer failed (exit " + code + "); its logs are the dd_*.log files in " + os7.tmpdir()
+    );
+}
+async function installDirectX() {
+  const system322 = path55.join(process.env.WINDIR ?? "C:\\Windows", "System32");
+  if (exists(path55.join(system322, "d3dx9_43.dll")) && exists(path55.join(system322, "XAudio2_7.dll"))) return;
+  const redist = await signedInstaller(
+    DIRECTX_URL,
+    path55.join(VS_DIR, "directx_Jun2010_redist.exe"),
+    "the DirectX End-User Runtime (~95 MB once)"
+  );
+  const unpacked = path55.join(os7.tmpdir(), "directx-redist");
+  safeRemove(unpacked, os7.tmpdir());
+  mkdirp(unpacked);
+  if (await spawnAsync(redist, ["/Q", "/T:" + unpacked]) !== 0 || !exists(path55.join(unpacked, "DXSETUP.exe")))
+    throw new Error("could not unpack the DirectX End-User Runtime");
+  const code = await spawnAsync(path55.join(unpacked, "DXSETUP.exe"), ["/silent"]);
+  safeRemove(unpacked, os7.tmpdir());
+  if (code !== 0) throw new Error("the DirectX End-User Runtime installer failed (exit " + code + ")");
+}
+async function setupUnreal(env, config2) {
+  if (!config2.acceptLicense)
+    throw new Error(
+      "Unreal tools are installed only with toolchains.unreal.acceptLicense = true: Visual Studio Community and the DirectX End-User Runtime come under Microsoft licence terms (https://visualstudio.microsoft.com/license-terms/)"
+    );
+  const bad = config2.components.find((id) => !ID.test(id));
+  if (bad) throw new Error('toolchains.unreal.components: "' + bad + '" is not a Visual Studio component ID');
+  const ids = [.../* @__PURE__ */ new Set([...UNREAL_COMPONENTS, ...config2.components])];
+  if (dryRun) {
+    log("(dry run) would install Visual Studio Community 2022 with " + ids.join(", ") + " and DirectX");
+    return;
+  }
+  if (!installedVs()) {
+    const programFiles = process.env.ProgramFiles ?? "C:\\Program Files";
+    const free = freeBytes(programFiles);
+    if (free < INSTALL_ROOM_BYTES)
+      throw new Error(
+        "not installing Visual Studio: the sandbox disk has " + (free / 1024 ** 3).toFixed(1) + " GB free and it needs 20 GB (7 GB for Visual Studio, the rest for builds and the paging file)"
+      );
+    await installVisualStudio(config2, ids);
+  }
+  await installDirectX();
+  const vs = installedVs();
+  env.summary.push(
+    "unreal: Visual Studio Community " + vs.version + " (C++ game workload, Windows 11 SDK, Unreal support) at " + vs.path + "; DirectX End-User Runtime; get the engine from the Epic Games Launcher (Start menu)"
+  );
+}
+
+// src/guest/toolchains/native/rust.ts
+import path57 from "node:path";
+
+// src/guest/toolchains/native/binstall.ts
+import fs44 from "node:fs";
+import path56 from "node:path";
 var ensureBinstall = async (cargoBin) => {
-  const target = path54.join(cargoBin, "cargo-binstall.exe");
+  const target = path56.join(cargoBin, "cargo-binstall.exe");
   if (exists(target)) return true;
   try {
     const dir = tool("cargo-binstall");
-    if (!exists(path54.join(dir, "cargo-binstall.exe"))) {
+    if (!exists(path56.join(dir, "cargo-binstall.exe"))) {
       await installFromGithub("cargo-bins/cargo-binstall", binstallAsset(arch), {
         dest: dir,
         what: "cargo-binstall for prebuilt Rust tools (~10 MB once)",
         locate: "cargo-binstall.exe"
       });
     }
-    fs42.copyFileSync(path54.join(dir, "cargo-binstall.exe"), target);
+    fs44.copyFileSync(path56.join(dir, "cargo-binstall.exe"), target);
     return true;
   } catch (e) {
     warn("cargo-binstall unavailable, compiling crates with cargo install instead: " + errMsg(e));
@@ -30978,14 +31199,14 @@ var ensureBinstall = async (cargoBin) => {
   }
 };
 function crateInstaller(cargoHome, cargoEnv) {
-  const cargo = path54.join(cargoHome, "bin", "cargo.exe");
+  const cargo = path56.join(cargoHome, "bin", "cargo.exe");
   let binstall = null;
   const binstallEnv = {
     ...cargoEnv,
     env: { ...cargoEnv.env ?? process.env, BINSTALL_DISABLE_TELEMETRY: "true" }
   };
   return async (crate) => {
-    binstall ??= ensureBinstall(path54.join(cargoHome, "bin"));
+    binstall ??= ensureBinstall(path56.join(cargoHome, "bin"));
     if (await binstall) {
       try {
         await execAsync(
@@ -31007,7 +31228,7 @@ async function setupRust(env, config2, refresh) {
   const RUSTUP_HOME = tool("rust", "rustup");
   const CARGO_HOME = tool("rust", "cargo");
   const rustEnv = { env: { ...process.env, RUSTUP_HOME, CARGO_HOME } };
-  const rustup = path55.join(CARGO_HOME, "bin", "rustup.exe");
+  const rustup = path57.join(CARGO_HOME, "bin", "rustup.exe");
   if (dryRun) {
     log("(dry run) would provision Rust " + config2.toolchain + " (" + config2.host + ")");
     return;
@@ -31043,9 +31264,9 @@ async function setupRust(env, config2, refresh) {
     if (refresh) await execAsync(rustup, ["update"], rustEnv);
   }
   Object.assign(env.vars, { RUSTUP_HOME, CARGO_HOME });
-  env.prepend.push(path55.join(CARGO_HOME, "bin"));
+  env.prepend.push(path57.join(CARGO_HOME, "bin"));
   env.summary.push(
-    "rust: " + versionOf(path55.join(CARGO_HOME, "bin", "rustc.exe"), ["--version"], rustEnv) + " [" + config2.host + "]"
+    "rust: " + versionOf(path57.join(CARGO_HOME, "bin", "rustc.exe"), ["--version"], rustEnv) + " [" + config2.host + "]"
   );
   const toolchainKey = "rustup@" + config2.toolchain;
   await installOnce(
@@ -31066,36 +31287,36 @@ async function setupRust(env, config2, refresh) {
     env: {
       ...rustEnv.env,
       ...msvc.vars,
-      PATH: [path55.join(CARGO_HOME, "bin"), ...msvc.path, process.env.PATH ?? ""].join(path55.delimiter)
+      PATH: [path57.join(CARGO_HOME, "bin"), ...msvc.path, process.env.PATH ?? ""].join(path57.delimiter)
     }
   } : {
     env: {
       ...rustEnv.env,
-      CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER: path55.join(mingw, "gcc.exe"),
-      PATH: [path55.join(CARGO_HOME, "bin"), mingw, process.env.PATH ?? ""].join(path55.delimiter)
+      CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER: path57.join(mingw, "gcc.exe"),
+      PATH: [path57.join(CARGO_HOME, "bin"), mingw, process.env.PATH ?? ""].join(path57.delimiter)
     }
   };
   await installOnce(env, "cargo", config2.crates, crateInstaller(CARGO_HOME, cargoEnv));
 }
 
 // src/guest/toolchains/languages/node.ts
-import fs43 from "node:fs";
-import path56 from "node:path";
+import fs45 from "node:fs";
+import path58 from "node:path";
 import { spawn as spawn4 } from "node:child_process";
 var NVM_HOME = tool("nvm");
-var NVM_SYMLINK = path56.join(localDir, "nodejs");
-var HOST_NVM = path56.join(hostToolsDir, "nvm");
+var NVM_SYMLINK = path58.join(localDir, "nodejs");
+var HOST_NVM = path58.join(hostToolsDir, "nvm");
 var HOST_VERSIONS_MAX = 3;
-var hostNvmVersions = () => exists(HOST_NVM) ? fs43.readdirSync(HOST_NVM).filter((d) => /^v\d+\.\d+\.\d+$/.test(d) && exists(path56.join(HOST_NVM, d, "node.exe"))).map((d) => d.slice(1)) : [];
+var hostNvmVersions = () => exists(HOST_NVM) ? fs45.readdirSync(HOST_NVM).filter((d) => /^v\d+\.\d+\.\d+$/.test(d) && exists(path58.join(HOST_NVM, d, "node.exe"))).map((d) => d.slice(1)) : [];
 var resolveNode = (spec) => resolveCached("node:" + spec, async () => {
   const exact = spec.replace(/^v/, "");
   if (/^\d+\.\d+\.\d+$/.test(exact)) return exact;
   const releases = await fetchJson("https://nodejs.org/dist/index.json");
   return pickNodeVersion(releases, spec) ?? Promise.reject(new Error('No Node.js release matches "' + spec + '"'));
 });
-var NVM_TEMP = path56.join(NVM_HOME, ".tmp");
+var NVM_TEMP = path58.join(NVM_HOME, ".tmp");
 var nvm = (args) => new Promise((resolve2) => {
-  const child = spawn4(path56.join(NVM_HOME, "nvm.exe"), args, {
+  const child = spawn4(path58.join(NVM_HOME, "nvm.exe"), args, {
     windowsHide: true,
     env: { ...process.env, NVM_HOME, NVM_SYMLINK, TEMP: NVM_TEMP, TMP: NVM_TEMP }
   });
@@ -31110,12 +31331,12 @@ var nvm = (args) => new Promise((resolve2) => {
   child.once("close", () => resolve2(out));
 });
 var ensureNvm = async () => {
-  if (exists(path56.join(NVM_HOME, "nvm.exe"))) return;
-  if (exists(path56.join(HOST_NVM, "nvm.exe"))) {
+  if (exists(path58.join(NVM_HOME, "nvm.exe"))) return;
+  if (exists(path58.join(HOST_NVM, "nvm.exe"))) {
     log("Copying nvm from this PC ...");
     mkdirp(NVM_HOME);
-    const files = fs43.readdirSync(HOST_NVM).filter((f) => /\.(exe|cmd|vbs)$/i.test(f)).sort((a, b) => Number(a.toLowerCase() === "nvm.exe") - Number(b.toLowerCase() === "nvm.exe"));
-    for (const file3 of files) fs43.copyFileSync(path56.join(HOST_NVM, file3), path56.join(NVM_HOME, file3));
+    const files = fs45.readdirSync(HOST_NVM).filter((f) => /\.(exe|cmd|vbs)$/i.test(f)).sort((a, b) => Number(a.toLowerCase() === "nvm.exe") - Number(b.toLowerCase() === "nvm.exe"));
+    for (const file3 of files) fs45.copyFileSync(path58.join(HOST_NVM, file3), path58.join(NVM_HOME, file3));
     return;
   }
   const asset = await githubAsset("coreybutler/nvm-windows", /^nvm-noinstall\.zip$/, true);
@@ -31123,14 +31344,14 @@ var ensureNvm = async () => {
   await downloader.archive(asset.url, NVM_HOME, { sha256: asset.sha256, locate: "nvm.exe", fileName: asset.name });
 };
 var hostNodeFolder = (version2) => {
-  const dir = path56.join(hostToolsDir, "node");
-  return session.hostTools.nodeVersion?.replace(/^v/, "") === version2 && exists(path56.join(dir, "node.exe")) ? dir : null;
+  const dir = path58.join(hostToolsDir, "node");
+  return session.hostTools.nodeVersion?.replace(/^v/, "") === version2 && exists(path58.join(dir, "node.exe")) ? dir : null;
 };
 var installNodeVersion = async (version2) => {
-  const dir = path56.join(NVM_HOME, "v" + version2);
-  const fromHost = path56.join(HOST_NVM, "v" + version2);
-  if (exists(path56.join(dir, "node.exe"))) return;
-  if (exists(path56.join(fromHost, "node.exe"))) {
+  const dir = path58.join(NVM_HOME, "v" + version2);
+  const fromHost = path58.join(HOST_NVM, "v" + version2);
+  if (exists(path58.join(dir, "node.exe"))) return;
+  if (exists(path58.join(fromHost, "node.exe"))) {
     log("Copying Node " + version2 + " from this PC's nvm (without global packages) ...");
     copyNode(fromHost, dir);
     return;
@@ -31149,19 +31370,19 @@ var installNodeVersion = async (version2) => {
   } finally {
     safeRemove(NVM_TEMP, NVM_HOME);
   }
-  if (!exists(path56.join(dir, "node.exe"))) {
+  if (!exists(path58.join(dir, "node.exe"))) {
     const tail = out.trim().split(/\r?\n/).filter(Boolean).slice(-3).join(" ");
     const why = /complete/i.test(out) ? "nvm said it finished, but its move into the data folder did not happen" : "nvm could not download or unpack it: check the internet connection and the free disk space";
     throw new Error(
-      "nvm install " + version2 + " did not leave " + path56.join(dir, "node.exe") + " (" + why + ")" + (tail ? ". nvm printed: " + tail : "")
+      "nvm install " + version2 + " did not leave " + path58.join(dir, "node.exe") + " (" + why + ")" + (tail ? ". nvm printed: " + tail : "")
     );
   }
 };
 var activate = async (version2) => {
   await nvm(["use", version2]);
-  if (exists(path56.join(NVM_SYMLINK, "node.exe"))) return;
-  fs43.rmSync(NVM_SYMLINK, { recursive: true, force: true });
-  fs43.symlinkSync(path56.join(NVM_HOME, "v" + version2), NVM_SYMLINK, "junction");
+  if (exists(path58.join(NVM_SYMLINK, "node.exe"))) return;
+  fs45.rmSync(NVM_SYMLINK, { recursive: true, force: true });
+  fs45.symlinkSync(path58.join(NVM_HOME, "v" + version2), NVM_SYMLINK, "junction");
 };
 var PLAYWRIGHT_VARS = () => ({
   PLAYWRIGHT_BROWSERS_PATH: tool("ms-playwright"),
@@ -31173,8 +31394,8 @@ async function setupNode(env, versions, config2) {
     return;
   }
   await ensureNvm();
-  fs43.writeFileSync(
-    path56.join(NVM_HOME, "settings.txt"),
+  fs45.writeFileSync(
+    path58.join(NVM_HOME, "settings.txt"),
     [
       "root: " + NVM_HOME,
       "path: " + NVM_SYMLINK,
@@ -31201,7 +31422,7 @@ async function setupNode(env, versions, config2) {
     }
   }
   Object.assign(env.vars, { NVM_HOME, NVM_SYMLINK, ...PLAYWRIGHT_VARS() });
-  if (duringSession()) env.prepend.push(path56.join(NVM_HOME, "v" + main), NVM_HOME, NVM_SYMLINK);
+  if (duringSession()) env.prepend.push(path58.join(NVM_HOME, "v" + main), NVM_HOME, NVM_SYMLINK);
   else {
     await activate(main);
     env.prepend.push(NVM_HOME, NVM_SYMLINK);
@@ -31211,13 +31432,13 @@ async function setupNode(env, versions, config2) {
   await packageManagers(env, config2, main);
 }
 var packageManagers = async (env, config2, version2) => {
-  const dir = path56.join(NVM_HOME, "v" + version2);
-  const nodeEnv = { ...process.env, PATH: dir + path56.delimiter + (process.env.PATH ?? "") };
-  const npm = (args) => execAsync(path56.join(dir, "node.exe"), [path56.join(dir, "node_modules", "npm", "bin", "npm-cli.js"), ...args], {
+  const dir = path58.join(NVM_HOME, "v" + version2);
+  const nodeEnv = { ...process.env, PATH: dir + path58.delimiter + (process.env.PATH ?? "") };
+  const npm = (args) => execAsync(path58.join(dir, "node.exe"), [path58.join(dir, "node_modules", "npm", "bin", "npm-cli.js"), ...args], {
     env: nodeEnv,
     stdio: "ignore"
   });
-  const corepackJs = path56.join(dir, "node_modules", "corepack", "dist", "corepack.js");
+  const corepackJs = path58.join(dir, "node_modules", "corepack", "dist", "corepack.js");
   const extra = config2.corepack && !exists(corepackJs) ? ["corepack"] : [];
   await installOnce(
     env,
@@ -31238,7 +31459,7 @@ var packageManagers = async (env, config2, version2) => {
   }
   try {
     await execAsync(
-      path56.join(dir, "node.exe"),
+      path58.join(dir, "node.exe"),
       [corepackJs, "enable", "--install-directory", mkdirp(tool("bin")), "pnpm", "yarn"],
       { env: nodeEnv, stdio: "ignore" }
     );
@@ -31263,8 +31484,8 @@ async function setupPwsh(env, refresh = false) {
 }
 
 // src/guest/toolchains/languages/python.ts
-import fs44 from "node:fs";
-import path57 from "node:path";
+import fs46 from "node:fs";
+import path59 from "node:path";
 var installPython = async (pkg, spec) => {
   const version2 = await resolveCached(pkg + ":" + spec, async () => {
     const { versions } = await fetchJson(
@@ -31273,7 +31494,7 @@ var installPython = async (pkg, spec) => {
     return pickPackageVersion(versions, spec) ?? Promise.reject(new Error("No " + pkg + ' release matches "' + spec + '"'));
   });
   const dir = tool("python", pkg + "-" + version2);
-  const exe = path57.join(dir, "python.exe");
+  const exe = path59.join(dir, "python.exe");
   if (!exists(exe)) {
     log("Downloading Python " + version2 + (pkg === "python2" ? " (Python 2, " : " (") + "~30 MB once) ...");
     await downloader.archive(
@@ -31282,32 +31503,32 @@ var installPython = async (pkg, spec) => {
       { locate: "python.exe", fileName: pkg + "." + version2 + ".zip" }
     );
   }
-  if (!exists(path57.join(dir, "Scripts", "pip.exe")) && !exists(path57.join(dir, "Scripts", "pip2.exe")))
+  if (!exists(path59.join(dir, "Scripts", "pip.exe")) && !exists(path59.join(dir, "Scripts", "pip2.exe")))
     await execAsync(exe, ["-m", "ensurepip", "--default-pip"], { stdio: "ignore" });
   return dir;
 };
-var shimDir = (dir) => duringSession() ? tool("shims", path57.basename(dir)) : tool("shims");
+var shimDir = (dir) => duringSession() ? tool("shims", path59.basename(dir)) : tool("shims");
 var shim = (folder, name, program, args = []) => {
   const fixed = [program, ...args];
-  fs44.writeFileSync(
-    path57.join(mkdirp(folder), name + ".cmd"),
+  fs46.writeFileSync(
+    path59.join(mkdirp(folder), name + ".cmd"),
     "@echo off\r\n" + fixed.map((a) => '"' + a + '"').join(" ") + " %*\r\n"
   );
   const sh = fixed.map((a) => "'" + a.replace(/\\/g, "/").replace(/'/g, "'\\''") + "'").join(" ");
-  fs44.writeFileSync(path57.join(folder, name), "#!/bin/sh\nexec " + sh + ' "$@"\n');
+  fs46.writeFileSync(path59.join(folder, name), "#!/bin/sh\nexec " + sh + ' "$@"\n');
 };
 var shimPair = (folder, version2, dir) => {
-  const python = path57.join(dir, "python.exe");
+  const python = path59.join(dir, "python.exe");
   shim(folder, "python" + version2, python);
   shim(folder, "pip" + version2, python, ["-m", "pip"]);
 };
 var pyLauncher = (folder, py3, py2) => {
-  const script = path57.join(mkdirp(folder), "py-launcher.py");
-  fs44.writeFileSync(
+  const script = path59.join(mkdirp(folder), "py-launcher.py");
+  fs46.writeFileSync(
     script,
     [
       "import subprocess, sys",
-      "PY3, PY2 = " + JSON.stringify(path57.join(py3, "python.exe")) + ", " + JSON.stringify(py2 ? path57.join(py2, "python.exe") : null),
+      "PY3, PY2 = " + JSON.stringify(path59.join(py3, "python.exe")) + ", " + JSON.stringify(py2 ? path59.join(py2, "python.exe") : null),
       "args = sys.argv[1:]",
       "exe = PY3",
       "if args and args[0].startswith('-2'):",
@@ -31319,7 +31540,7 @@ var pyLauncher = (folder, py3, py2) => {
       ""
     ].join("\n")
   );
-  shim(folder, "py", path57.join(py3, "python.exe"), [script]);
+  shim(folder, "py", path59.join(py3, "python.exe"), [script]);
 };
 async function setupPython(env, config2, versions) {
   if (dryRun) {
@@ -31329,10 +31550,10 @@ async function setupPython(env, config2, versions) {
   const py3 = await installPython("python", versions.python.spec);
   const shims = shimDir(py3);
   shimPair(shims, "3", py3);
-  env.prepend.push(py3, mkdirp(path57.join(py3, "Scripts")), shims);
+  env.prepend.push(py3, mkdirp(path59.join(py3, "Scripts")), shims);
   env.vars.PYTHONIOENCODING = "utf-8";
   env.summary.push(
-    "python: " + path57.basename(py3).replace("python-", "") + " (from " + versions.python.source + "; py works too)"
+    "python: " + path59.basename(py3).replace("python-", "") + " (from " + versions.python.source + "; py works too)"
   );
   if (!config2.python2) {
     pyLauncher(shims, py3, null);
@@ -31341,47 +31562,12 @@ async function setupPython(env, config2, versions) {
   const py2 = await installPython("python2", "2.7");
   shimPair(shims, "2", py2);
   pyLauncher(shims, py3, py2);
-  env.summary.push("python2: " + path57.basename(py2).replace("python2-", ""));
-}
-
-// src/guest/toolchains/languages/php.ts
-import fs46 from "node:fs";
-import path59 from "node:path";
-
-// src/guest/toolchains/native/vcruntime.ts
-import fs45 from "node:fs";
-import path58 from "node:path";
-var VC_REDIST = "https://aka.ms/vs/17/release/vc_redist.x64.exe";
-var MICROSOFT_SIGNER = "CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US";
-var OK_EXIT_CODES = [0, 1638, 3010];
-var signerOf = (file3) => scriptOutput("get-signer.ps1", ["-Path", file3]).trim();
-async function setupVcRuntime(env, summary = true) {
-  if (dryRun) {
-    log("(dry run) would install the Visual C++ runtime");
-    return false;
-  }
-  const system322 = path58.join(process.env.WINDIR ?? "C:\\Windows", "System32");
-  const missing = !exists(path58.join(system322, "vcruntime140.dll")) || !exists(path58.join(system322, "msvcp140.dll"));
-  if (missing) {
-    const installer = tool("vcredist", "vc_redist.x64.exe");
-    if (!exists(installer)) {
-      log("Downloading the Visual C++ runtime (~25 MB once) ...");
-      await downloadFile(VC_REDIST, installer);
-    }
-    if (signerOf(installer) !== MICROSOFT_SIGNER) {
-      fs45.rmSync(installer, { force: true });
-      throw new Error("vc_redist.x64.exe is not signed by Microsoft; deleted it (it is downloaded again next boot)");
-    }
-    log("Installing the Visual C++ runtime ...");
-    const code = await spawnAsync(installer, ["/install", "/quiet", "/norestart"]);
-    if (!OK_EXIT_CODES.includes(code ?? -1) || !exists(path58.join(system322, "vcruntime140.dll")))
-      throw new Error("the Visual C++ runtime installer failed (exit " + code + ")");
-  }
-  if (summary) env.summary.push("vc++ runtime: installed");
-  return missing;
+  env.summary.push("python2: " + path59.basename(py2).replace("python2-", ""));
 }
 
 // src/guest/toolchains/languages/php.ts
+import fs47 from "node:fs";
+import path60 from "node:path";
 var PHP_EXTENSIONS = [
   "curl",
   "fileinfo",
@@ -31412,16 +31598,16 @@ var phpBuild = async (spec) => {
   return { version: release.version, ...build.zip };
 };
 var writePhpIni = (home) => {
-  const ini = path59.join(home, "php.ini");
-  if (exists(ini) || !exists(path59.join(home, "php.ini-development"))) return;
-  let text = fs46.readFileSync(path59.join(home, "php.ini-development"), "utf8").replace(/^;\s*extension_dir\s*=\s*"ext"/m, 'extension_dir = "' + path59.join(home, "ext") + '"');
-  for (const ext of PHP_EXTENSIONS.filter((e) => exists(path59.join(home, "ext", "php_" + e + ".dll"))))
+  const ini = path60.join(home, "php.ini");
+  if (exists(ini) || !exists(path60.join(home, "php.ini-development"))) return;
+  let text = fs47.readFileSync(path60.join(home, "php.ini-development"), "utf8").replace(/^;\s*extension_dir\s*=\s*"ext"/m, 'extension_dir = "' + path60.join(home, "ext") + '"');
+  for (const ext of PHP_EXTENSIONS.filter((e) => exists(path60.join(home, "ext", "php_" + e + ".dll"))))
     text = text.replace(new RegExp("^;(extension=" + ext + ")\\s*$", "m"), "$1");
-  fs46.writeFileSync(ini + ".tmp", text);
-  fs46.renameSync(ini + ".tmp", ini);
+  fs47.writeFileSync(ini + ".tmp", text);
+  fs47.renameSync(ini + ".tmp", ini);
 };
 var shim2 = (env, name, command) => {
-  fs46.writeFileSync(path59.join(mkdirp(tool("shims")), name + ".cmd"), "@echo off\r\n" + command + " %*\r\n");
+  fs47.writeFileSync(path60.join(mkdirp(tool("shims")), name + ".cmd"), "@echo off\r\n" + command + " %*\r\n");
   env.prepend.push(tool("shims"));
 };
 var setupComposer = async (env, php) => {
@@ -31433,7 +31619,7 @@ var setupComposer = async (env, php) => {
   }
   const composerHome = tool("composer-home");
   env.vars.COMPOSER_HOME = composerHome;
-  env.prepend.push(path59.join(composerHome, "vendor", "bin"));
+  env.prepend.push(path60.join(composerHome, "vendor", "bin"));
   shim2(env, "composer", '"' + php + '" "' + phar + '"');
   env.summary.push(
     "composer: " + (/\d+\.\d+\.\d+/.exec(execOutput(php, [phar, "--version", "--no-ansi"]))?.[0] ?? "installed")
@@ -31448,7 +31634,7 @@ async function setupPhp(env, config2) {
   await setupVcRuntime(env, false);
   const version2 = await resolveCached("php:" + wantedSpec.spec, async () => (await phpBuild(wantedSpec.spec)).version);
   const home = tool("php", version2);
-  if (!exists(path59.join(home, "php.exe"))) {
+  if (!exists(path60.join(home, "php.exe"))) {
     const build = await phpBuild(version2);
     log("Downloading PHP " + version2 + " (~30 MB once) ...");
     await downloader.archive("https://windows.php.net/downloads/releases/" + build.path, home, {
@@ -31460,11 +31646,11 @@ async function setupPhp(env, config2) {
   writePhpIni(home);
   env.prepend.push(home);
   env.summary.push("php: " + version2 + " (from " + wantedSpec.source + ")");
-  if (config2.composer) await setupComposer(env, path59.join(home, "php.exe"));
+  if (config2.composer) await setupComposer(env, path60.join(home, "php.exe"));
 }
 
 // src/guest/toolchains/languages/ruby.ts
-import path60 from "node:path";
+import path61 from "node:path";
 var RUBY_ASSET = /^rubyinstaller-(\d+\.\d+\.\d+)-(\d+)-x64\.7z$/;
 var buildNumber = (asset) => Number(RUBY_ASSET.exec(asset.name)?.[2] ?? 0);
 var rubyBuilds = async () => {
@@ -31492,7 +31678,7 @@ async function setupRuby(env, config2) {
     async () => pickPackageVersion([...(await rubyBuilds()).keys()], wantedSpec.spec) ?? Promise.reject(new Error('No RubyInstaller build matches "' + wantedSpec.spec + '"'))
   );
   const home = tool("ruby", version2);
-  if (!exists(path60.join(home, "bin", "ruby.exe"))) {
+  if (!exists(path61.join(home, "bin", "ruby.exe"))) {
     const asset = (await rubyBuilds()).get(version2);
     if (!asset) throw new Error("RubyInstaller " + version2 + " is no longer published");
     log("Downloading Ruby " + version2 + " (~100 MB once) ...");
@@ -31505,11 +31691,11 @@ async function setupRuby(env, config2) {
   }
   const gems = tool("ruby-gems", version2.split(".").slice(0, 2).join("."));
   Object.assign(env.vars, { GEM_HOME: gems, BUNDLE_USER_HOME: tool("bundle-home") });
-  env.prepend.push(path60.join(home, "bin"), path60.join(gems, "bin"));
+  env.prepend.push(path61.join(home, "bin"), path61.join(gems, "bin"));
   env.summary.push(
-    "ruby: " + versionOf(path60.join(home, "bin", "ruby.exe")) + " (from " + wantedSpec.source + "; gems with C extensions need MSYS2, not included)"
+    "ruby: " + versionOf(path61.join(home, "bin", "ruby.exe")) + " (from " + wantedSpec.source + "; gems with C extensions need MSYS2, not included)"
   );
-  const gem = path60.join(home, "bin", "gem.cmd");
+  const gem = path61.join(home, "bin", "gem.cmd");
   await installOnce(
     env,
     "gem@" + version2,
@@ -31521,9 +31707,9 @@ async function setupRuby(env, config2) {
 }
 
 // src/guest/toolchains/tools/vscode.ts
-import fs47 from "node:fs";
-import os7 from "node:os";
-import path61 from "node:path";
+import fs48 from "node:fs";
+import os8 from "node:os";
+import path62 from "node:path";
 
 // node_modules/jsonc-parser/lib/esm/impl/scanner.js
 var CharacterCodes;
@@ -31703,14 +31889,14 @@ var ParseErrorCode;
 var VERSION_MARKER = ".agent-sandbox-version";
 var desktopShortcut = (exe) => {
   if (!isWin) return;
-  const link = path61.join(os7.homedir(), "Desktop", "Visual Studio Code.lnk");
+  const link = path62.join(os8.homedir(), "Desktop", "Visual Studio Code.lnk");
   runScriptWithJson("new-shortcuts.ps1", "ListFile", [
     { link, target: exe, arguments: '"' + (process.env.AGENT_WORKSPACE ?? "") + '"' }
   ]);
 };
 async function setupVscode(env, refresh) {
   const root = tool("vscode");
-  const exe = path61.join(root, "Code.exe");
+  const exe = path62.join(root, "Code.exe");
   if (dryRun) {
     log("(dry run) would provision VS Code");
     return;
@@ -31720,11 +31906,11 @@ async function setupVscode(env, refresh) {
       "https://update.code.visualstudio.com/api/update/win32-" + (arch === "arm64" ? "arm64" : "x64") + "-archive/stable/latest"
     );
     log("Downloading VS Code " + release.productVersion + " (~150 MB once) ...");
-    const keep = path61.join(root, "data");
+    const keep = path62.join(root, "data");
     const parked = root + "-data";
     if (exists(keep)) {
-      fs47.rmSync(parked, { recursive: true, force: true });
-      fs47.renameSync(keep, parked);
+      fs48.rmSync(parked, { recursive: true, force: true });
+      fs48.renameSync(keep, parked);
     }
     try {
       await downloader.archive(release.url, root, {
@@ -31732,26 +31918,26 @@ async function setupVscode(env, refresh) {
         locate: "Code.exe",
         fileName: "vscode.zip"
       });
-      fs47.writeFileSync(path61.join(root, VERSION_MARKER), release.productVersion);
+      fs48.writeFileSync(path62.join(root, VERSION_MARKER), release.productVersion);
     } finally {
       if (exists(parked)) {
         mkdirp(root);
-        fs47.rmSync(keep, { recursive: true, force: true });
-        fs47.renameSync(parked, keep);
+        fs48.rmSync(keep, { recursive: true, force: true });
+        fs48.renameSync(parked, keep);
       }
     }
   }
-  mkdirp(path61.join(root, "data"));
-  env.prepend.push(path61.join(root, "bin"));
+  mkdirp(path62.join(root, "data"));
+  env.prepend.push(path62.join(root, "bin"));
   desktopShortcut(exe);
-  const version2 = exists(path61.join(root, VERSION_MARKER)) ? fs47.readFileSync(path61.join(root, VERSION_MARKER), "utf8").trim() : "installed";
+  const version2 = exists(path62.join(root, VERSION_MARKER)) ? fs48.readFileSync(path62.join(root, VERSION_MARKER), "utf8").trim() : "installed";
   env.summary.push("vscode: " + version2 + " (portable; run code . or use the desktop shortcut)");
 }
 
 // src/guest/toolchains/native/rust-extras.ts
-import fs48 from "node:fs";
-import os8 from "node:os";
-import path62 from "node:path";
+import fs49 from "node:fs";
+import os9 from "node:os";
+import path63 from "node:path";
 
 // src/shared/memory/policy.ts
 var DIAL_STEPS = {
@@ -31800,41 +31986,41 @@ function maxCompilers(cpus, profile) {
 // src/guest/toolchains/native/rust-extras.ts
 var cargoTarget = (targetDir) => {
   if (targetDir === "shared" || targetDir === "separate") return null;
-  if (targetDir === "local") return path62.join(localDir, "cargo-target");
+  if (targetDir === "local") return path63.join(localDir, "cargo-target");
   return targetDir;
 };
 function cargoShim(env, rust) {
-  const real = path62.join(tool("rust", "cargo", "bin"), "cargo.exe");
+  const real = path63.join(tool("rust", "cargo", "bin"), "cargo.exe");
   if (rust.targetDir !== "separate" || !exists(real)) return;
   const dir = mkdirp(tool("shims", "cargo"));
-  fs48.copyFileSync(ensureCompiled("cargoshim"), path62.join(dir, "cargo.exe"));
+  fs49.copyFileSync(ensureCompiled("cargoshim"), path63.join(dir, "cargo.exe"));
   env.prepend.unshift(dir);
   env.vars.AGENT_REAL_CARGO = real;
 }
 function linkGate(env, rust, host) {
   const gcc = tool("mingw", "mingw64", "bin", "gcc.exe");
   if (!host.endsWith("-pc-windows-gnu") || !exists(gcc)) return;
-  const gate = path62.join(mkdirp(tool("shims")), "linkgate.exe");
-  fs48.copyFileSync(ensureCompiled("linkgate"), gate);
-  const memoryGb = os8.totalmem() / 1024 ** 3;
+  const gate = path63.join(mkdirp(tool("shims")), "linkgate.exe");
+  fs49.copyFileSync(ensureCompiled("linkgate"), gate);
+  const memoryGb = os9.totalmem() / 1024 ** 3;
   const slots = rust.linkSlots === "auto" ? linkSlotsFor(memoryGb) : rust.linkSlots;
   env.vars.AGENT_LINK_SLOTS = String(slots);
   env.vars.AGENT_REAL_LINKER = gcc;
   env.vars.CARGO_TARGET_X86_64_PC_WINDOWS_GNU_LINKER = gate;
   const rustEnv = { ...process.env, RUSTUP_HOME: tool("rust", "rustup"), CARGO_HOME: tool("rust", "cargo") };
   const sysroot = rust.linker === "lld" ? execOutput(tool("rust", "cargo", "bin", "rustc.exe"), ["--print", "sysroot"], { env: rustEnv }) : "";
-  const lld = sysroot ? path62.join(sysroot, "lib", "rustlib", host, "bin", "gcc-ld") : "";
-  if (lld && exists(path62.join(lld, "ld.lld.exe"))) env.vars.AGENT_LLD_DIR = lld;
+  const lld = sysroot ? path63.join(sysroot, "lib", "rustlib", host, "bin", "gcc-ld") : "";
+  if (lld && exists(path63.join(lld, "ld.lld.exe"))) env.vars.AGENT_LLD_DIR = lld;
   env.summary.push(
     "rust linking: " + (env.vars.AGENT_LLD_DIR ? "lld" : "GNU ld") + ", at most " + env.vars.AGENT_LINK_SLOTS + " at once"
   );
 }
 function cargoDefaults(host) {
   const file3 = tool("rust", "cargo", "config.toml");
-  if (exists(file3) || !exists(path62.dirname(file3))) return;
-  const jobs = cargoJobs(os8.cpus().length, os8.totalmem() / 1024 ** 3, 1);
+  if (exists(file3) || !exists(path63.dirname(file3))) return;
+  const jobs = cargoJobs(os9.cpus().length, os9.totalmem() / 1024 ** 3, 1);
   const gnu = host.endsWith("-gnu");
-  fs48.writeFileSync(
+  fs49.writeFileSync(
     file3,
     [
       "# Written by windows-development-sandbox once; edit freely, it is never overwritten.",
@@ -31849,13 +32035,14 @@ function rustCaches(rust) {
   const target = cargoTarget(rust.targetDir);
   return {
     ...target ? { CARGO_TARGET_DIR: target } : {},
-    ...process.env.SCCACHE_DIR ? {} : { SCCACHE_DIR: path62.join(dataDir, "cache", "sccache") }
+    ...process.env.SCCACHE_DIR ? {} : { SCCACHE_DIR: path63.join(dataDir, "cache", "sccache") }
   };
 }
 function rustHost(config2) {
   if (config2.rust.host !== "auto") return config2.rust.host;
   const cpu = arch === "arm64" ? "aarch64" : "x86_64";
-  return cpu + (wanted(config2.msvc.enabled, "msvc") ? "-pc-windows-msvc" : "-pc-windows-gnu");
+  const msvc = wanted(config2.msvc.enabled, "msvc") || wanted(config2.unreal.enabled, "unreal");
+  return cpu + (msvc ? "-pc-windows-msvc" : "-pc-windows-gnu");
 }
 
 // src/guest/toolchains/languages/python-tools.ts
@@ -31875,6 +32062,7 @@ function plan(config2, versions, o) {
   const apps = Boolean(o.apps && (o.apps.install.length || Object.keys(o.apps.custom).length));
   const java = wanted(config2.java.enabled, "java");
   const python = wanted(config2.python.enabled, "python");
+  const unreal = wanted(config2.unreal.enabled, "unreal");
   return [
     {
       name: "Git",
@@ -31892,12 +32080,18 @@ function plan(config2, versions, o) {
       enabled: wanted(config2.cpp.enabled, "cpp") || wanted(config2.rust.enabled, "rust"),
       install: (env) => setupCpp(env, config2.cpp)
     },
-    { name: "MSVC", enabled: wanted(config2.msvc.enabled, "msvc"), install: (env) => setupMsvc(env, config2.msvc) },
+    // Unreal's Visual Studio brings MSVC and the real vswhere: the portable MSVC (and its stand-in vswhere) stays out.
+    { name: "Unreal", enabled: unreal, shared: true, install: (env) => setupUnreal(env, config2.unreal) },
+    {
+      name: "MSVC",
+      enabled: wanted(config2.msvc.enabled, "msvc") && !unreal,
+      install: (env) => setupMsvc(env, config2.msvc)
+    },
     // Rust links with MSVC (msvc host) or MinGW's gcc (GNU host): whichever it uses goes first.
     {
       name: "Rust",
       enabled: wanted(config2.rust.enabled, "rust"),
-      after: ["C/C++", "MSVC"],
+      after: ["C/C++", "MSVC", "Unreal"],
       install: async (env) => {
         await setupRust(env, { ...config2.rust, host: rustHost(config2) }, o.refresh);
         Object.assign(env.vars, rustCaches(config2.rust));
@@ -31990,7 +32184,7 @@ function plan(config2, versions, o) {
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 
 // src/guest/runtime/status.ts
-import os9 from "node:os";
+import os10 from "node:os";
 var progress;
 function setSandboxStatus(phase, message, update) {
   try {
@@ -32014,7 +32208,7 @@ function fitProgress(p) {
   };
 }
 function ownAddresses() {
-  return Object.values(os9.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address).slice(0, 8);
+  return Object.values(os10.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address).slice(0, 8);
 }
 function writeStatus(phase, message) {
   writeJsonAtomic(run.sandboxFile, {
@@ -32159,21 +32353,21 @@ function cmdSet(env, names) {
   return names.filter((n) => env[n] !== void 0 && !/[\r\n]/.test(String(env[n]))).map((n) => '@set "' + n + "=" + String(env[n]).replace(/%/g, "%%") + '"');
 }
 function writeShell(spec, env, names) {
-  const dir = mkdirp(path63.join(localDir, "projects", spec.name));
-  fs49.writeFileSync(path63.join(dir, "env.cmd"), [...cmdSet(env, [...names, "PATH"]), ""].join("\r\n"));
-  fs49.writeFileSync(
-    path63.join(dir, "shell.cmd"),
-    ['@call "' + path63.join(dir, "env.cmd") + '"', '@cd /d "' + spec.workspace + '"', "@title " + spec.name, ""].join(
+  const dir = mkdirp(path64.join(localDir, "projects", spec.name));
+  fs50.writeFileSync(path64.join(dir, "env.cmd"), [...cmdSet(env, [...names, "PATH"]), ""].join("\r\n"));
+  fs50.writeFileSync(
+    path64.join(dir, "shell.cmd"),
+    ['@call "' + path64.join(dir, "env.cmd") + '"', '@cd /d "' + spec.workspace + '"', "@title " + spec.name, ""].join(
       "\r\n"
     )
   );
-  const bin = mkdirp(path63.join(localDir, "bin"));
-  fs49.writeFileSync(
-    path63.join(bin, "sbx-shell.cmd"),
+  const bin = mkdirp(path64.join(localDir, "bin"));
+  fs50.writeFileSync(
+    path64.join(bin, "sbx-shell.cmd"),
     [
-      '@if "%~1"=="" (echo Usage: sbx-shell ^<project^>   ^(a terminal in that project with its tools^) & dir /b "' + path63.join(localDir, "projects") + '" & exit /b 2)',
-      '@if not exist "' + path63.join(localDir, "projects") + '\\%~1\\shell.cmd" (echo No project %~1 in this sandbox. & exit /b 2)',
-      '@cmd /k ""' + path63.join(localDir, "projects") + '\\%~1\\shell.cmd""',
+      '@if "%~1"=="" (echo Usage: sbx-shell ^<project^>   ^(a terminal in that project with its tools^) & dir /b "' + path64.join(localDir, "projects") + '" & exit /b 2)',
+      '@if not exist "' + path64.join(localDir, "projects") + '\\%~1\\shell.cmd" (echo No project %~1 in this sandbox. & exit /b 2)',
+      '@cmd /k ""' + path64.join(localDir, "projects") + '\\%~1\\shell.cmd""',
       ""
     ].join("\r\n")
   );
@@ -32226,10 +32420,10 @@ async function setUp(spec, say) {
       }
     )
   );
-  tools.prepend.push(path63.join(localDir, "bin"));
+  tools.prepend.push(path64.join(localDir, "bin"));
   const env = agentEnv(tools, { workspace: spec.workspace, project: spec.name, base });
-  const specFile = path63.join(mkdirp(path63.join(localDir, "projects", spec.name)), "project.json");
-  fs49.writeFileSync(specFile, JSON.stringify(spec));
+  const specFile = path64.join(mkdirp(path64.join(localDir, "projects", spec.name)), "project.json");
+  fs50.writeFileSync(specFile, JSON.stringify(spec));
   env.AGENT_PROJECT_FILE = specFile;
   addMachineEnvironment(tools.vars, [...tools.prepend, ...tools.append], true);
   try {
@@ -32346,10 +32540,10 @@ function execCommand(req) {
 }
 
 // src/guest/daemon/sessions.ts
-import fs53 from "node:fs";
-import path68 from "node:path";
+import fs54 from "node:fs";
+import path69 from "node:path";
 import crypto4 from "node:crypto";
-import os11 from "node:os";
+import os12 from "node:os";
 import { spawn as spawn7 } from "node:child_process";
 
 // src/shared/pty/protocol.ts
@@ -32428,7 +32622,7 @@ async function sendControl(endpoint, type) {
 var MAX_CLIPBOARD_STRING = 1024 * 1024;
 
 // src/guest/sessions/cmdline.ts
-import path64 from "node:path";
+import path65 from "node:path";
 var quoted = (arg) => '"' + arg.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/, "$1$1") + '"';
 function quoteArg(arg) {
   return arg !== "" && !/[\s"]/.test(arg) ? arg : quoted(arg);
@@ -32442,7 +32636,7 @@ function cmdArgs(args) {
   }).join("");
 }
 function commandLine(file3, args) {
-  return path64.win32.basename(file3).toLowerCase() === "cmd.exe" ? [quoteArg(file3), cmdArgs(args)].filter(Boolean).join(" ") : [file3, ...args].map(quoteArg).join(" ");
+  return path65.win32.basename(file3).toLowerCase() === "cmd.exe" ? [quoteArg(file3), cmdArgs(args)].filter(Boolean).join(" ") : [file3, ...args].map(quoteArg).join(" ");
 }
 function shellLaunch(asked, paths) {
   if (asked === "cmd") return { name: "cmd", file: paths.cmd, args: [] };
@@ -32456,8 +32650,8 @@ function shellLaunch(asked, paths) {
 }
 
 // src/guest/sessions/pty-host.ts
-import fs50 from "node:fs";
-import path65 from "node:path";
+import fs51 from "node:fs";
+import path66 from "node:path";
 import { execFile, spawn as spawn6 } from "node:child_process";
 function ensurePtyHost() {
   return ensureCompiled("ptyhost");
@@ -32476,21 +32670,21 @@ async function waitForPtyHost(child, port, timeoutMs) {
   throw new Error("the session host did not start listening on port " + port);
 }
 function ptyHostLog(id) {
-  return path65.join(logsDir, "ptyhost-" + id + ".log");
+  return path66.join(logsDir, "ptyhost-" + id + ".log");
 }
 function ptyHostLogTail(id, lines = 12) {
   try {
-    return fs50.readFileSync(ptyHostLog(id), "utf8").trim().split(/\r?\n/).slice(-lines).join("\n");
+    return fs51.readFileSync(ptyHostLog(id), "utf8").trim().split(/\r?\n/).slice(-lines).join("\n");
   } catch {
     return "";
   }
 }
 var conptyDll = () => {
-  const dll = path65.join(toolsDir, "conpty", "conpty.dll");
-  return session.provisioning.conpty?.enabled !== false && fs50.existsSync(dll) && fs50.existsSync(path65.join(toolsDir, "conpty", "OpenConsole.exe")) ? dll : null;
+  const dll = path66.join(toolsDir, "conpty", "conpty.dll");
+  return session.provisioning.conpty?.enabled !== false && fs51.existsSync(dll) && fs51.existsSync(path66.join(toolsDir, "conpty", "OpenConsole.exe")) ? dll : null;
 };
 function startPtyHost(o) {
-  fs50.mkdirSync(run.treesDir, { recursive: true });
+  fs51.mkdirSync(run.treesDir, { recursive: true });
   const env = {
     ...o.env,
     PTYHOST_BIND: o.remote ? "any" : "loopback",
@@ -32508,13 +32702,13 @@ function startPtyHost(o) {
 var END_TREE_MS = 3e4;
 function endLeftoverTree(id, exe = ensurePtyHost()) {
   const file3 = run.treeFile(id);
-  if (!fs50.existsSync(file3)) return Promise.resolve(null);
+  if (!fs51.existsSync(file3)) return Promise.resolve(null);
   return new Promise((resolve2) => {
     execFile(exe, ["--end-tree", file3], { timeout: END_TREE_MS, windowsHide: true }, (error62, stdout) => {
       const code = error62 ? typeof error62.code === "number" ? error62.code : -1 : 0;
       if (code !== 3)
         try {
-          fs50.rmSync(file3, { force: true });
+          fs51.rmSync(file3, { force: true });
         } catch {
         }
       resolve2(code === 0 ? stdout.trim().slice(0, 200) : code === 3 ? null : "could not end them (code " + code + ")");
@@ -32523,15 +32717,15 @@ function endLeftoverTree(id, exe = ensurePtyHost()) {
 }
 function recordedTrees() {
   try {
-    return fs50.readdirSync(run.treesDir).filter((n) => /^[A-Za-z0-9_-]{1,64}\.json$/.test(n)).map((n) => n.slice(0, -".json".length));
+    return fs51.readdirSync(run.treesDir).filter((n) => /^[A-Za-z0-9_-]{1,64}\.json$/.test(n)).map((n) => n.slice(0, -".json".length));
   } catch {
     return [];
   }
 }
 
 // src/guest/agents/agent-installer.ts
-import fs51 from "node:fs";
-import path66 from "node:path";
+import fs52 from "node:fs";
+import path67 from "node:path";
 
 // src/guest/agents/profile-links.ts
 var profileRoot = () => process.env.USERPROFILE ?? "";
@@ -32557,7 +32751,7 @@ var agentPaths2 = (name, harness) => agentPaths(toolsDir, name, harness);
 async function installViaNpm(name, harness, dir, env) {
   if (!harness.npmPackage)
     throw new Error("No npmPackage configured for " + name + " and no host executable was available.");
-  const npmCli = path66.join(path66.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+  const npmCli = path67.join(path67.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
   const args = [npmCli, "install", "--global", "--prefix", dir, harness.npmPackage, "--no-fund", "--no-audit"];
   log("Installing " + harness.npmPackage + " (this can take a minute)...");
   if (dryRun) {
@@ -32568,7 +32762,7 @@ async function installViaNpm(name, harness, dir, env) {
   await execAsync(process.execPath, args, { env });
 }
 async function installViaUv(name, harness, dir, env) {
-  const uv = path66.join(toolsDir, "uv", "uv.exe");
+  const uv = path67.join(toolsDir, "uv", "uv.exe");
   log("Installing " + harness.uvPackage + " with uv (this can take a minute)...");
   if (dryRun) {
     log("(dry run) uv tool install " + harness.uvPackage);
@@ -32583,8 +32777,8 @@ async function installViaUv(name, harness, dir, env) {
   });
 }
 function putOnPath(dir, env) {
-  const parts2 = (env.PATH ?? "").split(path66.delimiter);
-  if (!parts2.some((p) => p.toLowerCase() === dir.toLowerCase())) env.PATH = [...parts2, dir].join(path66.delimiter);
+  const parts2 = (env.PATH ?? "").split(path67.delimiter);
+  if (!parts2.some((p) => p.toLowerCase() === dir.toLowerCase())) env.PATH = [...parts2, dir].join(path67.delimiter);
   addMachineEnvironment({}, [dir], true);
 }
 var AgentInstaller = class {
@@ -32625,9 +32819,9 @@ var AgentInstaller = class {
     }
     mkdirp(p.dir);
     if (this.sourceOf(name, harness) === "host") {
-      const source = path66.join(hostToolsDir, "agents", name, harness.hostExecutable);
+      const source = path67.join(hostToolsDir, "agents", name, harness.hostExecutable);
       if (exists(source) && p.exe) {
-        fs51.copyFileSync(source, p.exe);
+        fs52.copyFileSync(source, p.exe);
         log("Copied " + name + " from this PC: " + source);
         return;
       }
@@ -32642,28 +32836,28 @@ var AgentInstaller = class {
 var agents = new AgentInstaller();
 
 // src/guest/network/addresses.ts
-import os10 from "node:os";
+import os11 from "node:os";
 function guestAddresses() {
-  return Object.values(os10.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address);
+  return Object.values(os11.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address);
 }
 
 // src/guest/sessions/conversation.ts
-import fs52 from "node:fs";
-import path67 from "node:path";
+import fs53 from "node:fs";
+import path68 from "node:path";
 var MAX_FILES = 2e3;
 function conversationFiles(claudeDir2, cwd) {
   const names = /* @__PURE__ */ new Set([projectFolderName(cwd), projectFolderName(sandboxFolder(cwd))]);
   return [...names].flatMap((name) => {
-    const dir = path67.join(claudeDir2, "projects", name);
+    const dir = path68.join(claudeDir2, "projects", name);
     let entries2;
     try {
-      entries2 = fs52.readdirSync(dir);
+      entries2 = fs53.readdirSync(dir);
     } catch {
       return [];
     }
     return entries2.filter((e) => e.endsWith(".jsonl") && isConversationId(e.slice(0, -".jsonl".length))).slice(0, MAX_FILES).flatMap((e) => {
       try {
-        return [{ id: e.slice(0, -".jsonl".length), createdMs: fs52.statSync(path67.join(dir, e)).birthtimeMs }];
+        return [{ id: e.slice(0, -".jsonl".length), createdMs: fs53.statSync(path68.join(dir, e)).birthtimeMs }];
       } catch {
         return [];
       }
@@ -32704,8 +32898,8 @@ var IdleShutdown = class {
 var CLOSE_WAIT_MS = 8e3;
 var ROOTS_KEPT_MS = 10 * 60 * 1e3;
 function terminalTab(id, title, cwd) {
-  const view = [process.execPath, path68.join(path68.dirname(process.argv[1]), "view.js"), id];
-  const wt = path68.join(toolsDir, "terminal", "wt.exe");
+  const view = [process.execPath, path69.join(path69.dirname(process.argv[1]), "view.js"), id];
+  const wt = path69.join(toolsDir, "terminal", "wt.exe");
   if (exists(wt))
     spawn7(wt, ["-w", "0", "nt", "--title", title, "-d", cwd, ...view], { detached: true, stdio: "ignore" }).unref();
   else spawn7(SYSTEM.cmd(), ["/d", "/c", "start", title, ...view], { detached: true, stdio: "ignore", cwd }).unref();
@@ -32721,8 +32915,8 @@ var harnessFor = (req) => {
 function memoryEnv(env, sessions2) {
   const out = {};
   out.PTYHOST_BACKSTOP_MB = String(session.agentBackstop ?? "auto");
-  const cpus = usableCpus(os11.cpus().length, session.cpuLimitPercent ?? null);
-  const memoryGb = os11.totalmem() / 1024 ** 3;
+  const cpus = usableCpus(os12.cpus().length, session.cpuLimitPercent ?? null);
+  const memoryGb = os12.totalmem() / 1024 ** 3;
   const jobs = cargoJobs(cpus, memoryGb, sessions2);
   out.NUMBER_OF_PROCESSORS = String(cpus);
   if (!env.CARGO_BUILD_JOBS) out.CARGO_BUILD_JOBS = String(jobs);
@@ -32761,10 +32955,10 @@ var agentProgram = async (req, env, say) => {
 };
 function shellPaths() {
   const candidates = [
-    path68.join(pwshDir(), "pwsh.exe"),
-    path68.join(process.env.ProgramFiles ?? "C:\\Program Files", "PowerShell", "7", "pwsh.exe")
+    path69.join(pwshDir(), "pwsh.exe"),
+    path69.join(process.env.ProgramFiles ?? "C:\\Program Files", "PowerShell", "7", "pwsh.exe")
   ];
-  return { pwsh: candidates.find((f) => fs53.existsSync(f)) ?? null, powershell: SYSTEM.powershell(), cmd: SYSTEM.cmd() };
+  return { pwsh: candidates.find((f) => fs54.existsSync(f)) ?? null, powershell: SYSTEM.powershell(), cmd: SYSTEM.cmd() };
 }
 var shellProgram = (shell) => {
   const line = commandLine(shell.file, shell.args);
@@ -32798,7 +32992,7 @@ var launchPtyHost = async (req, program, remote, env, sessions2, onSpawn) => {
   } catch (e) {
     const tail = ptyHostLogTail(req.id);
     throw new Error(
-      errMsg(e) + (tail ? ". From its log:\n" + tail : "") + "\nLog: " + path68.join(dataDir, "logs", "ptyhost-" + req.id + ".log")
+      errMsg(e) + (tail ? ". From its log:\n" + tail : "") + "\nLog: " + path69.join(dataDir, "logs", "ptyhost-" + req.id + ".log")
     );
   }
   return { child, port, token };
@@ -32912,7 +33106,7 @@ var SessionManager = class {
     };
     this.starting++;
     if (req.id !== session.launchId && process.env.AGENT_NO_TABS !== "1")
-      safely("terminal tab", () => terminalTab(req.id, name + " " + path68.basename(req.cwd), req.cwd));
+      safely("terminal tab", () => terminalTab(req.id, name + " " + path69.basename(req.cwd), req.cwd));
     try {
       if (problem) throw new Error(problem);
       const place = await placeFor(req, say);
@@ -33406,9 +33600,9 @@ var GovernorCore = class {
 };
 
 // src/guest/governor/governor.ts
-import fs54 from "node:fs";
-import os12 from "node:os";
-import path69 from "node:path";
+import fs55 from "node:fs";
+import os13 from "node:os";
+import path70 from "node:path";
 import { spawn as spawn8 } from "node:child_process";
 import { createInterface } from "node:readline";
 var SampleSchema = external_exports.object({
@@ -33478,12 +33672,12 @@ var MemGovProcess = class {
 };
 function appendToMemoryLog(line) {
   try {
-    const logs = path69.join(dataDir, "logs");
-    const newest = fs54.readdirSync(logs).filter((f) => /^memory-\d{8}-\d{6}\.log$/.test(f)).sort().pop();
+    const logs = path70.join(dataDir, "logs");
+    const newest = fs55.readdirSync(logs).filter((f) => /^memory-\d{8}-\d{6}\.log$/.test(f)).sort().pop();
     if (!newest) return;
     const t = /* @__PURE__ */ new Date();
     const stamp = [t.getHours(), t.getMinutes(), t.getSeconds()].map((n) => String(n).padStart(2, "0")).join(":");
-    fs54.appendFileSync(path69.join(logs, newest), stamp + " | " + line + "\r\n");
+    fs55.appendFileSync(path70.join(logs, newest), stamp + " | " + line + "\r\n");
   } catch {
   }
 }
@@ -33501,7 +33695,7 @@ var Governor = class {
     this.core = new GovernorCore({
       port: proc,
       profile,
-      maxCompilers: maxCompilers(os12.cpus().length, profile),
+      maxCompilers: maxCompilers(os13.cpus().length, profile),
       now: () => Date.now(),
       logLine: appendToMemoryLog,
       warn,
@@ -33523,13 +33717,13 @@ var Governor = class {
 var governor = new Governor();
 
 // src/guest/daemon/live.ts
-import fs56 from "node:fs";
-import path71 from "node:path";
+import fs57 from "node:fs";
+import path72 from "node:path";
 import { spawnSync as spawnSync7 } from "node:child_process";
 
 // src/guest/daemon/live-folders.ts
-import fs55 from "node:fs";
-import path70 from "node:path";
+import fs56 from "node:fs";
+import path71 from "node:path";
 
 // src/shared/channel/live.ts
 import crypto5 from "node:crypto";
@@ -33622,7 +33816,7 @@ var LiveFolderHandler = class {
   }
   read() {
     try {
-      const text = fs55.readFileSync(this.o.stateFile, "utf8");
+      const text = fs56.readFileSync(this.o.stateFile, "utf8");
       const parsed = StateSchema.safeParse(JSON.parse(text));
       if (parsed.success && parsed.data.launchId === this.o.launchId) return parsed.data;
     } catch {
@@ -33630,7 +33824,7 @@ var LiveFolderHandler = class {
     return { key: null, launchId: this.o.launchId, seen: [], mappings: [] };
   }
   save(state) {
-    fs55.mkdirSync(path70.dirname(this.o.stateFile), { recursive: true });
+    fs56.mkdirSync(path71.dirname(this.o.stateFile), { recursive: true });
     writeJsonAtomic(this.o.stateFile, state);
   }
   /** The key the boot handed over (from the one-shot secrets file). */
@@ -33641,30 +33835,30 @@ var LiveFolderHandler = class {
   /** C:\Workspace\<name> from a checked name only. */
   folderPath(name) {
     if (!LIVE_FOLDER_NAME.test(name)) throw new Error("not a plain folder name");
-    return path70.win32.join(this.o.workspaces ?? WORKSPACES_GUEST, name);
+    return path71.win32.join(this.o.workspaces ?? WORKSPACES_GUEST, name);
   }
   /** One pass over run\live: every file is claimed (deleted) at once; valid ones are handled one after another. */
   tick() {
     const dir = this.o.run.liveDir;
     let names;
     try {
-      names = fs55.readdirSync(dir);
+      names = fs56.readdirSync(dir);
     } catch {
       return;
     }
     for (const name of names.slice(0, 64)) {
       if (name.endsWith(".tmp")) continue;
-      const file3 = path70.join(dir, name);
+      const file3 = path71.join(dir, name);
       let envelope = null;
       try {
-        const stat = fs55.lstatSync(file3);
+        const stat = fs56.lstatSync(file3);
         if (stat.isFile() && stat.size <= MAX_REQUEST_BYTES && /^[A-Za-z0-9_-]{1,64}\.json$/.test(name))
-          envelope = JSON.parse(fs55.readFileSync(file3, "utf8"));
+          envelope = JSON.parse(fs56.readFileSync(file3, "utf8"));
       } catch {
         envelope = null;
       } finally {
         try {
-          fs55.rmSync(file3, { recursive: true, force: true });
+          fs56.rmSync(file3, { recursive: true, force: true });
         } catch {
         }
       }
@@ -33701,7 +33895,7 @@ var LiveFolderHandler = class {
   }
   reply(id, r) {
     try {
-      fs55.mkdirSync(this.o.run.liveRepliesDir, { recursive: true });
+      fs56.mkdirSync(this.o.run.liveRepliesDir, { recursive: true });
       writeJsonAtomic(this.o.run.liveReplyFile(id), { id, ...r, finishedAt: new Date(this.now()).toISOString() });
     } catch (e) {
       this.log("live folder reply not written: " + errMsg(e));
@@ -33722,14 +33916,14 @@ var LiveFolderHandler = class {
   assertFree(folder) {
     let exists2 = true;
     try {
-      fs55.lstatSync(folder);
+      fs56.lstatSync(folder);
     } catch {
       exists2 = false;
     }
     if (exists2) throw new Error(folder + " exists already");
-    const parent = path70.dirname(folder);
-    fs55.mkdirSync(parent, { recursive: true });
-    if (!fs55.lstatSync(parent).isDirectory()) throw new Error(parent + " is not a plain folder");
+    const parent = path71.dirname(folder);
+    fs56.mkdirSync(parent, { recursive: true });
+    if (!fs56.lstatSync(parent).isDirectory()) throw new Error(parent + " is not a plain folder");
   }
   async act(p) {
     const folder = this.folderPath(p.folder);
@@ -33750,9 +33944,9 @@ var LiveFolderHandler = class {
       const code2 = await this.mapWithRetry(folder, share, true);
       if (code2 !== EXIT_OK) return { ok: false, message: "the test share could not be shown (" + code2 + ")" };
       try {
-        const file3 = path70.join(folder, "token.txt");
-        const stat = fs55.statSync(file3);
-        const token = stat.size <= 64 ? fs55.readFileSync(file3, "utf8").trim() : "";
+        const file3 = path71.join(folder, "token.txt");
+        const stat = fs56.statSync(file3);
+        const token = stat.size <= 64 ? fs56.readFileSync(file3, "utf8").trim() : "";
         return LIVE_TOKEN.test(token) ? { ok: true, message: "read the test share", token } : { ok: false, message: "the test share holds no token" };
       } finally {
         this.o.bind.unmap(folder);
@@ -33780,7 +33974,7 @@ var LiveFolderHandler = class {
     for (const m of this.read().mappings) {
       const folder = this.folderPath(m.folder);
       if (this.o.bind.mapped(folder) === EXIT_OK) continue;
-      fs55.mkdirSync(path70.dirname(folder), { recursive: true });
+      fs56.mkdirSync(path71.dirname(folder), { recursive: true });
       if (this.o.bind.map(folder, m.share, m.readOnly) === EXIT_OK) done++;
       else this.log("live folder " + folder + " could not be shown again");
     }
@@ -33791,7 +33985,7 @@ var LiveFolderHandler = class {
 // src/guest/daemon/live.ts
 var BIND_TIMEOUT_MS = 3e4;
 var testing = Boolean(process.env.AGENT_DAEMON_STATE_DIR || process.env.AGENT_LOCAL_DIR);
-var stateDir2 = process.env.AGENT_DAEMON_STATE_DIR ?? (process.env.AGENT_LOCAL_DIR ? path71.join(localDir, "daemon-state") : path71.join(process.env.ProgramData ?? "C:\\ProgramData", "AgentSandboxDaemon"));
+var stateDir2 = process.env.AGENT_DAEMON_STATE_DIR ?? (process.env.AGENT_LOCAL_DIR ? path72.join(localDir, "daemon-state") : path72.join(process.env.ProgramData ?? "C:\\ProgramData", "AgentSandboxDaemon"));
 function bindMount(args) {
   const r = spawnSync7(ensureCompiled("bindmount"), args, {
     windowsHide: true,
@@ -33806,7 +34000,7 @@ var realBind = {
   mapped: (folder) => bindMount(["mapped", folder])
 };
 function protectStateDir() {
-  fs56.mkdirSync(stateDir2, { recursive: true });
+  fs57.mkdirSync(stateDir2, { recursive: true });
   if (!isWin || testMode || testing) return;
   spawnSync7(
     SYSTEM.icacls(),
@@ -33819,7 +34013,7 @@ function protectStateDir() {
 }
 var liveFolders = new LiveFolderHandler({
   run,
-  stateFile: path71.join(stateDir2, "live-folders.json"),
+  stateFile: path72.join(stateDir2, "live-folders.json"),
   launchId: session.launchId,
   bind: realBind,
   log: warn
@@ -33849,9 +34043,9 @@ var Daemon = class {
   tick() {
     const { valid, invalid } = run.scanRequests();
     for (const file3 of invalid)
-      safely("removing an invalid request", () => fs57.rmSync(file3, { recursive: true, force: true }));
+      safely("removing an invalid request", () => fs58.rmSync(file3, { recursive: true, force: true }));
     for (const req of valid) {
-      safely("claiming a request", () => fs57.rmSync(run.requestFile(req.id), { force: true }));
+      safely("claiming a request", () => fs58.rmSync(run.requestFile(req.id), { force: true }));
       if (run.readSession(req.id)) continue;
       void Promise.resolve(this.handle(withRequestSecrets(req))).catch(
         (e) => respond(req.id, { ok: false, message: errMsg(e) })