windows-development-sandbox 1.18.2 → 1.18.3

package/dist/bin/{chunk-MQIA7GNB.js → chunk-FQWYCF6L.js}

@@ -25997,7 +25997,7 @@ var DEFAULTS = {
       components: [],
       targets: [],
       crates: [],
-      targetDir: "separate",
+      targetDir: "auto",
       linker: "lld",
       linkSlots: "auto"
     },
@@ -46130,7 +46130,7 @@ var SandboxSchema = external_exports.strictObject({
     '(alpha) What runs the sandbox. "windows-sandbox" = Windows Sandbox (the default: desktop, Windows Terminal, GPU, clipboard, audio, printers). "hcs" = a headless Hyper-V isolated Server Core container for agents (no desktop, GPU or clipboard); it needs Windows features and an image on this PC (sandbox engine check hcs lists what is missing), and starting it is not enabled yet in this alpha. sandbox engine shows what each engine can do. Yours only: a project file (.sandbox-config.json) cannot set it.'
   ),
   memoryMb: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(2048)]).describe(
-    'Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered.'
+    'Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 4 GB more with vGPU): a bigger value is lowered.'
   ),
   maxMemoryMb: external_exports.number().int().positive().describe('Upper limit for memoryMb "auto".'),
   maxMemoryPercent: external_exports.number().int().min(10).max(100).describe(`memoryMb "auto" never takes more than this share of this PC's total RAM (percent).`),
@@ -46292,13 +46292,13 @@ var ToolchainsSchema = external_exports.strictObject({
       '["sccache", "cargo-nextest", "cargo-deny"]'
     ),
     targetDir: external_exports.string().min(1).describe(
-      `"shared": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), "separate": <workspace>\\target\\sandbox (kept, no cross-talk), "local": on the sandbox's own disk (fastest, lost every boot), or a guest path.`
+      `"auto" (default): on the sandbox's own disk when C: has 25 GB free at boot, else "separate" (builds then write through the mapped workspace, which can overload this PC's disk). "shared": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), "separate": <workspace>\\target\\sandbox (kept, no cross-talk), "local": on the sandbox's own disk (fastest, lost every boot), or a guest path.`
     ),
     linker: external_exports.enum(["lld", "gnu"]).describe(
       `GNU host: "lld" links with Rust's own lld through MinGW's gcc (much less memory than GNU ld), "gnu" with GNU ld.`
     ),
     linkSlots: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(1).max(32)]).describe(
-      'GNU host: how many programs may link at the same time in the whole sandbox (other links wait). "auto" = one per 3 GB of sandbox memory after 6 GB, 2 to 8 (the memory governor slows links down too when memory runs short).'
+      'GNU host: how many programs may link at the same time in the whole sandbox (other links wait). "auto" = one per 6 GB of sandbox memory, 1 to 4 (the memory governor slows links down too when memory runs short).'
     )
   }),
   msvc: external_exports.strictObject({
@@ -48552,7 +48552,7 @@ function hostClaude(storageRoot, personal, args) {
 
 // src/host/sandbox/doctor.ts
 import os6 from "node:os";
-import path35 from "node:path";
+import path36 from "node:path";
 
 // src/host/storage/cleanup.ts
 var import_lodash4 = __toESM(require_lodash(), 1);
@@ -52293,8 +52293,8 @@ function stopWarning(life, find, crashReport = () => null) {
 }
 
 // src/host/life/crash-report.ts
-import fs25 from "node:fs";
-import path32 from "node:path";
+import fs26 from "node:fs";
+import path33 from "node:path";
 
 // src/host/launch/risk-notes.ts
 function loadProfileOf(config3) {
@@ -52445,12 +52445,542 @@ function takePageFileHint(storageRoot, now2 = /* @__PURE__ */ new Date()) {
   return true;
 }
 
+// src/shared/channel/schema.ts
+var IdSchema = external_exports.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "invalid id");
+var Text = (max = 4096) => external_exports.string().max(max);
+var TimeSchema = Text(64);
+var AttachEndpointSchema = external_exports.strictObject({
+  addresses: external_exports.array(Text(64)).max(16),
+  port: external_exports.number().int().min(1024).max(65535),
+  token: Text(256)
+});
+var BootProgressSchema = external_exports.strictObject({
+  step: external_exports.number().int().min(1).max(32),
+  steps: external_exports.number().int().min(1).max(32),
+  title: Text(120),
+  /** Being set up now; percent while it downloads (when the size is known). */
+  active: external_exports.array(external_exports.strictObject({ name: Text(64), percent: external_exports.number().int().min(0).max(100).optional() })).max(8),
+  done: external_exports.number().int().min(0).max(1e3),
+  total: external_exports.number().int().min(0).max(1e3)
+});
+var SandboxStatusSchema = external_exports.object({
+  launchId: Text(64),
+  phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
+  message: Text(),
+  updatedAt: TimeSchema,
+  workspaceHost: Text(),
+  guestWorkspace: Text(),
+  headless: external_exports.boolean(),
+  /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
+  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
+  /** A malformed progress is dropped, never the status (the phase still counts). */
+  progress: BootProgressSchema.optional().catch(void 0)
+});
+var VersionSchema = external_exports.strictObject({ spec: Text(128), source: Text(256) });
+var DatabasePlanSchema = external_exports.strictObject({
+  database: external_exports.enum(["postgres", "mysql", "sqlserver", "mongodb", "redis", "dynamodb"]),
+  reasons: external_exports.array(Text(1024)).max(32),
+  version: Text(64),
+  port: external_exports.number().int().min(1024).max(65535),
+  adminPort: external_exports.number().int().min(1024).max(65535).optional()
+});
+var ProjectSpecSchema = external_exports.strictObject({
+  name: IdSchema,
+  /** Inside the sandbox: C:\Projects\<name>. */
+  workspace: Text(1024),
+  workspaceHost: Text(1024),
+  toolchains: ToolchainsSchema,
+  versions: external_exports.strictObject({ node: VersionSchema, nodeExtra: external_exports.array(Text(128)).max(16), python: VersionSchema }),
+  databases: external_exports.array(DatabasePlanSchema).max(8),
+  /** Agents this project may start that the sandbox did not boot with (its .sandbox-config.json "harness"). */
+  harnesses: external_exports.record(Text(64), HarnessSchema).refine((h) => Object.keys(h).length <= 8, "at most 8 agents"),
+  /** Its hooks were staged in C:\AgentLaunch\projects\<name>\hooks. */
+  hooks: external_exports.boolean()
+});
+var ShellChoiceSchema = external_exports.enum(["auto", "pwsh", "powershell", "cmd"]);
+var GuestRequestSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    kind: external_exports.literal("session"),
+    id: IdSchema,
+    harness: Text(64),
+    args: external_exports.array(Text()).max(256),
+    cwd: Text(),
+    project: ProjectSpecSchema.optional(),
+    harnessSpec: HarnessSchema.optional(),
+    /** A plain shell instead of an agent (harness is then "shell" and args are ignored). */
+    shell: ShellChoiceSchema.optional(),
+    createdAt: TimeSchema
+  }),
+  /** End a running session (an agent or a shell) and everything it started. */
+  external_exports.strictObject({ kind: external_exports.literal("close"), id: IdSchema, session: IdSchema, createdAt: TimeSchema }),
+  /** Provision a registered project without starting an agent (sandbox start / exec / db from its folder). */
+  external_exports.strictObject({ kind: external_exports.literal("project"), id: IdSchema, project: ProjectSpecSchema, createdAt: TimeSchema }),
+  external_exports.strictObject({
+    kind: external_exports.literal("exec"),
+    id: IdSchema,
+    command: external_exports.array(Text()).min(1).max(256),
+    cwd: Text(),
+    timeoutSeconds: external_exports.number().positive().max(86400),
+    createdAt: TimeSchema
+  }),
+  /** cwd: only the sessions in this folder or below (one project's); omitted = every session. */
+  external_exports.strictObject({
+    kind: external_exports.literal("restart"),
+    id: IdSchema,
+    harness: Text(64).nullable(),
+    cwd: Text().optional(),
+    createdAt: TimeSchema
+  }),
+  external_exports.strictObject({ kind: external_exports.literal("ping"), id: IdSchema, createdAt: TimeSchema }),
+  /**
+   * The PC's own memory or CPU is running low (the host watchdog): the sandbox slows its heaviest builds down for
+   * `seconds` (it never stops them) so Windows does not have to close it. Repeated while the PC stays low.
+   */
+  external_exports.strictObject({
+    kind: external_exports.literal("pressure"),
+    id: IdSchema,
+    reason: Text(300),
+    seconds: external_exports.number().int().min(10).max(300),
+    /** "severe": the PC is nearly out of memory; builds go to the governor's last step at once. */
+    level: external_exports.enum(["slow", "severe"]).optional(),
+    /** The disk queue the PC reported (shown in the heartbeat). */
+    diskQueue: external_exports.number().min(0).max(1e5).optional(),
+    createdAt: TimeSchema
+  })
+]);
+var PressureStatusSchema = external_exports.object({
+  level: external_exports.enum(["ok", "throttled", "suspending"]),
+  /** The governor's dial, 0 (nothing wrong) to 4 (one compiler at a time). */
+  step: external_exports.number().int().min(0).max(4).optional(),
+  profile: external_exports.enum(["normal", "gentle"]),
+  /** Share of the sandbox's RAM still free and of its commit limit in use (percent). */
+  ramFreePercent: external_exports.number().int().min(0).max(100),
+  commitPercent: external_exports.number().int().min(0).max(100),
+  /** Programs running at lower priority because of it. */
+  lowered: external_exports.number().int().min(0).max(1024),
+  /** Compilers waiting their turn right now (name, process id, seconds until they may go on). */
+  paused: external_exports.array(external_exports.object({ name: Text(64), pid: external_exports.number().int(), seconds: external_exports.number().int().min(0).max(60) })).max(8),
+  /** The CPU share the compilers get together (percent; 100 = no cap). */
+  cpuPercent: external_exports.number().int().min(0).max(100).optional(),
+  /** The PC itself asked for slowing down (its memory or CPU is low). */
+  pcLow: external_exports.boolean(),
+  lastAction: Text(300),
+  updatedAt: TimeSchema
+});
+var HeartbeatSchema = external_exports.object({
+  at: TimeSchema,
+  /** Seconds since the sandbox booted. */
+  uptimeS: external_exports.number().int().min(0).max(1e9),
+  ramFreePct: external_exports.number().min(0).max(100),
+  commitPct: external_exports.number().min(0).max(100),
+  /** The governor's dial now, and the step this PC asked for. */
+  step: external_exports.number().int().min(0).max(4),
+  hostStep: external_exports.number().int().min(0).max(4),
+  /** The biggest programs in the agents' job. */
+  topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
+  /** The disk queue this PC last reported while asking the sandbox to slow down. */
+  diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
+  phase: external_exports.enum(["ready", "working"])
+});
+var GuestResponseSchema = external_exports.object({
+  id: IdSchema,
+  ok: external_exports.boolean(),
+  message: Text(65536),
+  exitCode: external_exports.number().int().optional(),
+  stdout: Text(4 * 1024 * 1024).optional(),
+  stderr: Text(4 * 1024 * 1024).optional(),
+  finishedAt: TimeSchema
+});
+var SessionStatusSchema = external_exports.object({
+  id: IdSchema,
+  launchId: Text(64),
+  harness: Text(64),
+  /** A plain shell (harness is then the shell: pwsh, powershell or cmd); absent: an agent. */
+  kind: external_exports.enum(["agent", "shell"]).optional(),
+  cwd: Text(),
+  /** The project it runs in: its hub name, or the launch folder's for the first project. */
+  project: Text(64).optional(),
+  phase: external_exports.enum(["starting", "running", "exited", "failed"]),
+  message: Text(),
+  updatedAt: TimeSchema,
+  startedAt: TimeSchema,
+  /** The agent's own conversation this session is in (Claude: the file name of its .jsonl), once known. */
+  conversation: Text(128).optional(),
+  exitCode: external_exports.number().int().optional(),
+  attach: AttachEndpointSchema.optional()
+});
+var ProjectStatusSchema = external_exports.object({
+  name: IdSchema,
+  workspace: Text(1024),
+  phase: external_exports.enum(["provisioning", "ready", "failed"]),
+  message: Text(),
+  updatedAt: TimeSchema,
+  databases: external_exports.array(external_exports.object({ database: Text(32), port: external_exports.number().int() })).max(16),
+  summary: external_exports.array(Text(512)).max(64)
+});
+var VpnStatusSchema = external_exports.object({
+  state: external_exports.enum(["off", "starting", "up", "failed"]),
+  message: Text(2e3),
+  killSwitch: external_exports.boolean(),
+  /** A direct connection was tried after the kill switch was applied: false = it still got out. */
+  killSwitchHeld: external_exports.boolean().optional(),
+  /** The server's name, e.g. uk2201.nordvpn.com. */
+  server: Text(128).optional(),
+  /** What the sandbox's traffic looks like from outside, once the tunnel is up. */
+  publicIp: Text(64).optional(),
+  updatedAt: TimeSchema
+});
+
+// src/shared/channel/run-dir.ts
+import fs25 from "node:fs";
+import path32 from "node:path";
+function safeId(id) {
+  return IdSchema.parse(id);
+}
+function now() {
+  return (/* @__PURE__ */ new Date()).toISOString();
+}
+var scan = (schema, dir) => {
+  if (!fs25.existsSync(dir)) return { valid: [], invalid: [] };
+  const valid = [];
+  const invalid = [];
+  for (const name2 of fs25.readdirSync(dir)) {
+    if (name2.endsWith(".tmp")) continue;
+    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name2) ? readValid(schema, path32.join(dir, name2)) : null;
+    if (message) valid.push(message);
+    else invalid.push(path32.join(dir, name2));
+  }
+  return { valid, invalid };
+};
+var RunDir = class {
+  root;
+  sandboxFile;
+  vpnFile;
+  /** What the memory governor in the sandbox is doing (pressure.json). */
+  pressureFile;
+  /** The daemon's heartbeat every 10 seconds (heartbeat.json): what the sandbox did last. */
+  heartbeatFile;
+  /** What the sandbox's programs may really use (budget.json): processors, memory, build jobs, link slots. */
+  budgetFile;
+  requestsDir;
+  responsesDir;
+  sessionsDir;
+  projectsDir;
+  /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
+  auditDir;
+  /**
+   * Each running session's process tree, recorded by its ptyhost (guest only: the daemon ends what a ptyhost that was
+   * itself ended left running).
+   */
+  treesDir;
+  /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
+  secretsDir;
+  /** Live folders (live.ts): signed host requests, and the daemon's replies. */
+  liveDir;
+  liveRepliesDir;
+  constructor(dataDir) {
+    this.root = path32.join(dataDir, "run");
+    this.sandboxFile = path32.join(this.root, "sandbox.json");
+    this.vpnFile = path32.join(this.root, "vpn.json");
+    this.pressureFile = path32.join(this.root, "pressure.json");
+    this.heartbeatFile = path32.join(this.root, "heartbeat.json");
+    this.budgetFile = path32.join(this.root, "budget.json");
+    this.requestsDir = path32.join(this.root, "requests");
+    this.responsesDir = path32.join(this.root, "responses");
+    this.sessionsDir = path32.join(this.root, "sessions");
+    this.projectsDir = path32.join(this.root, "projects");
+    this.auditDir = path32.join(this.root, "audit");
+    this.treesDir = path32.join(this.root, "trees");
+    this.secretsDir = path32.join(dataDir, "secrets");
+    this.liveDir = path32.join(this.root, "live");
+    this.liveRepliesDir = path32.join(this.root, "live-replies");
+  }
+  liveFile(id) {
+    return path32.join(this.liveDir, safeId(id) + ".json");
+  }
+  liveReplyFile(id) {
+    return path32.join(this.liveRepliesDir, safeId(id) + ".json");
+  }
+  requestFile(id) {
+    return path32.join(this.requestsDir, safeId(id) + ".json");
+  }
+  responseFile(id) {
+    return path32.join(this.responsesDir, safeId(id) + ".json");
+  }
+  sessionFile(id) {
+    return path32.join(this.sessionsDir, safeId(id) + ".json");
+  }
+  treeFile(id) {
+    return path32.join(this.treesDir, safeId(id) + ".json");
+  }
+  projectFile(name2) {
+    return path32.join(this.projectsDir, safeId(name2) + ".json");
+  }
+  secretFile(id) {
+    return path32.join(this.secretsDir, safeId(id) + ".json");
+  }
+  readSandboxStatus() {
+    return readValid(SandboxStatusSchema, this.sandboxFile);
+  }
+  readVpnStatus() {
+    return readValid(VpnStatusSchema, this.vpnFile);
+  }
+  readPressure() {
+    return readValid(PressureStatusSchema, this.pressureFile);
+  }
+  readHeartbeat() {
+    return readValid(HeartbeatSchema, this.heartbeatFile);
+  }
+  readSession(id) {
+    return readValid(SessionStatusSchema, this.sessionFile(id));
+  }
+  readResponse(id) {
+    return readValid(GuestResponseSchema, this.responseFile(id));
+  }
+  listSessions() {
+    return scan(SessionStatusSchema, this.sessionsDir).valid.sort((a, b) => a.startedAt.localeCompare(b.startedAt));
+  }
+  readProjectStatus(name2) {
+    return readValid(ProjectStatusSchema, this.projectFile(name2));
+  }
+  listProjectStatus() {
+    return scan(ProjectStatusSchema, this.projectsDir).valid.slice(0, 64);
+  }
+  scanRequests() {
+    return scan(GuestRequestSchema, this.requestsDir);
+  }
+};
+
+// src/shared/accounts/payloads.ts
+var KB = 1024;
+var base643 = (maxBytes) => external_exports.string().min(4).max(maxBytes).regex(/^[A-Za-z0-9+/]+={0,2}$/);
+var secretText = (max) => external_exports.string().min(1).max(max).regex(/^[^\r\n]+$/);
+var EpicPayloadSchema = external_exports.strictObject({
+  data: external_exports.string().min(16).max(16384).regex(/^[A-Za-z0-9+/=_-]+$/)
+});
+var SteamPayloadSchema = external_exports.strictObject({
+  account: external_exports.string().regex(/^[A-Za-z0-9_]{1,64}$/),
+  configVdf: external_exports.string().min(1).max(256 * KB),
+  sentries: external_exports.array(external_exports.strictObject({ name: external_exports.string().regex(/^ssfn\d{1,40}$/), base64: base643(64 * KB) })).max(4),
+  /** Reserved for the Steam client's own login (very likely not portable between Windows users). */
+  client: base643(256 * KB).optional()
+});
+var UnityPayloadSchema = external_exports.strictObject({
+  ulf: external_exports.string().min(1).max(128 * KB).optional(),
+  email: external_exports.string().email().max(256).optional(),
+  password: secretText(1024).optional(),
+  serial: secretText(64).optional()
+});
+var CfxPayloadSchema = external_exports.strictObject({
+  licenseKey: external_exports.string().max(256).regex(/^cfxk_[A-Za-z0-9_]+$/),
+  steamWebApiKey: external_exports.string().regex(/^[A-F0-9]{32}$/).optional()
+});
+var KeystorePayloadSchema = external_exports.strictObject({
+  fileName: external_exports.string().regex(/^[A-Za-z0-9._-]{1,100}\.(jks|keystore|p12)$/i),
+  jksBase64: base643(256 * KB),
+  storePassword: secretText(1024),
+  keyAlias: secretText(256),
+  keyPassword: secretText(1024)
+});
+var PlayPayloadSchema = external_exports.strictObject({
+  serviceAccountJson: external_exports.string().min(2).max(64 * KB).refine((text) => {
+    try {
+      const parsed = JSON.parse(text);
+      return typeof parsed === "object" && parsed !== null && parsed.type === "service_account";
+    } catch {
+      return false;
+    }
+  }, 'not a Google service account key (its "type" is not "service_account")')
+});
+var ExpoPayloadSchema = external_exports.strictObject({
+  token: external_exports.string().regex(/^[A-Za-z0-9_-]{8,512}$/)
+});
+var AppstorePayloadSchema = external_exports.strictObject({
+  issuerId: external_exports.string().uuid(),
+  keyId: external_exports.string().regex(/^[A-Z0-9]{10}$/),
+  p8: external_exports.string().max(8 * KB).regex(/^-----BEGIN PRIVATE KEY-----\r?\n[A-Za-z0-9+/=\r\n]+-----END PRIVATE KEY-----\s*$/)
+});
+var PAYLOADS = {
+  epic: EpicPayloadSchema,
+  steam: SteamPayloadSchema,
+  unity: UnityPayloadSchema,
+  cfx: CfxPayloadSchema,
+  keystore: KeystorePayloadSchema,
+  play: PlayPayloadSchema,
+  expo: ExpoPayloadSchema,
+  appstore: AppstorePayloadSchema
+};
+var ServiceAccountsSchema = external_exports.strictObject({
+  epic: EpicPayloadSchema.optional(),
+  steam: SteamPayloadSchema.optional(),
+  unity: UnityPayloadSchema.optional(),
+  cfx: CfxPayloadSchema.optional(),
+  keystore: KeystorePayloadSchema.optional(),
+  play: PlayPayloadSchema.optional(),
+  expo: ExpoPayloadSchema.optional(),
+  appstore: AppstorePayloadSchema.optional()
+});
+var LaunchIdSchema = external_exports.string().regex(/^[A-Za-z0-9-]{1,64}$/);
+function handoffSchema(kind) {
+  return external_exports.strictObject({
+    kind: external_exports.literal(kind),
+    launchId: LaunchIdSchema,
+    payload: PAYLOADS[kind]
+  });
+}
+
+// src/shared/github/token.ts
+var GITHUB_TOKEN_KINDS = ["fine-grained", "classic"];
+var MIN_LENGTH = 20;
+var MAX_LENGTH = 255;
+var PRINTABLE = /^[\x21-\x7e]+$/;
+var GithubTokenSchema = external_exports.string().min(MIN_LENGTH).max(MAX_LENGTH).regex(PRINTABLE);
+var OTHER_TOKENS = {
+  gho_: "This is an OAuth token (from gh auth login or gh auth token), which can reach everything your account can.",
+  ghu_: "This is a GitHub App user token, not a personal access token.",
+  ghs_: "This is a GitHub App installation token, not a personal access token.",
+  ghr_: "This is a refresh token, not a personal access token."
+};
+var CREATE_FINE_GRAINED = "Create a fine-grained token at https://github.com/settings/personal-access-tokens/new with only the repositories and permissions the agent needs, then run: sandbox github login";
+function githubTokenKind(token) {
+  if (token.startsWith("github_pat_")) return "fine-grained";
+  if (token.startsWith("ghp_")) return "classic";
+  return null;
+}
+function githubTokenProblem(token) {
+  if (!token) return { message: "No token was typed.", fix: CREATE_FINE_GRAINED };
+  if (!PRINTABLE.test(token))
+    return {
+      message: "The token may not contain spaces, line breaks or other special characters.",
+      fix: "Copy the token again from GitHub (only the token itself) and run: sandbox github login"
+    };
+  if (token.length < MIN_LENGTH || token.length > MAX_LENGTH)
+    return {
+      message: "That is not the length of a GitHub token.",
+      fix: "Copy the whole token again from GitHub and run: sandbox github login"
+    };
+  const other = Object.keys(OTHER_TOKENS).find((p) => token.startsWith(p));
+  if (other) return { message: OTHER_TOKENS[other], fix: CREATE_FINE_GRAINED };
+  if (!githubTokenKind(token))
+    return {
+      message: "That is not a GitHub personal access token (they start with github_pat_ or ghp_).",
+      fix: CREATE_FINE_GRAINED
+    };
+  return null;
+}
+
+// src/shared/channel/secrets.ts
+var Environment = external_exports.record(external_exports.string().max(256), external_exports.string().max(65536));
+var SecretsFileSchema = external_exports.strictObject({
+  /** The agent the sandbox booted with: its harness environment. */
+  harnessEnvironment: Environment.optional(),
+  /** harnessSpec of a session request (an agent the sandbox did not boot with). */
+  harnessSpecEnvironment: Environment.optional(),
+  /** project.harnesses of a request, by agent name. */
+  projectHarnessEnvironment: external_exports.record(external_exports.string().max(64), Environment).optional(),
+  /** The login of this PC's Claude (claudeProfile.copyCredentials): the text of .credentials.json. */
+  claudeCredentials: external_exports.string().max(1024 * 1024).optional(),
+  /** VPN service credentials (vpn.provider's login), only for the launch's own sandbox. */
+  vpn: external_exports.strictObject({ username: external_exports.string().min(1).max(256), password: external_exports.string().min(1).max(1024) }).optional(),
+  /** The checked WireGuard config of vpn.provider wireguard-file (holds the private key). */
+  wireguardConfig: external_exports.string().min(1).max(32 * 1024).optional(),
+  /** The GitHub token you saved for sandboxes (github.shareToken), only with git access "full". */
+  githubToken: GithubTokenSchema.optional(),
+  /** Your saved service sign-ins (accounts.<kind>.share): each goes to its tool's own files at boot. */
+  serviceAccounts: ServiceAccountsSchema.optional(),
+  /** projects.liveFolders "hcs": this launch's key for signed live-folder requests (live.ts). */
+  liveFoldersKey: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
+});
+
+// src/shared/channel/live.ts
+import crypto3 from "node:crypto";
+var LIVE_SHARE_NAME = /^agentsbx-[0-9a-f]{8,32}$/;
+var LIVE_FOLDER_NAME = /^[a-z0-9][a-z0-9_-]{0,63}$/;
+var LIVE_KEY = /^[0-9a-f]{64}$/;
+var LIVE_TOKEN = /^[0-9a-f]{32}$/;
+var LIVE_MAX_AGE_MS = 2 * 60 * 1e3;
+var MAX_PAYLOAD = 4096;
+var LivePayloadSchema = external_exports.strictObject({
+  v: external_exports.literal(1),
+  /** canary: show the share, read token.txt, hide it again and reply with the token; map / unmap: the real folder. */
+  kind: external_exports.enum(["canary", "map", "unmap"]),
+  id: IdSchema,
+  launchId: external_exports.string().min(1).max(64),
+  share: external_exports.string().regex(LIVE_SHARE_NAME).optional(),
+  folder: external_exports.string().regex(LIVE_FOLDER_NAME),
+  readOnly: external_exports.boolean(),
+  createdAt: external_exports.string().max(64)
+});
+var LiveEnvelopeSchema = external_exports.strictObject({
+  payload: external_exports.string().min(2).max(MAX_PAYLOAD),
+  mac: external_exports.string().regex(/^[0-9a-f]{64}$/)
+});
+var LiveReplySchema = external_exports.strictObject({
+  id: IdSchema,
+  ok: external_exports.boolean(),
+  message: external_exports.string().max(1e3),
+  token: external_exports.string().regex(LIVE_TOKEN).optional(),
+  finishedAt: external_exports.string().max(64)
+});
+function mac3(key3, payload) {
+  return crypto3.createHmac("sha256", Buffer.from(key3, "hex")).update(payload, "utf8").digest("hex");
+}
+function signLive(key3, payload) {
+  if (!LIVE_KEY.test(key3)) throw new Error("not a live-folder key");
+  const text = JSON.stringify(LivePayloadSchema.parse(payload));
+  return { payload: text, mac: mac3(key3, text) };
+}
+function newShareName() {
+  return "agentsbx-" + crypto3.randomBytes(8).toString("hex");
+}
+function newLiveKey() {
+  return crypto3.randomBytes(32).toString("hex");
+}
+
+// src/host/life/last-end.ts
+function readHeartbeat(dataPath) {
+  try {
+    const root = hostDataRoot(dataPath);
+    const file2 = new RunDir(root).heartbeatFile;
+    assertNoLinks(root, file2);
+    return readValid(HeartbeatSchema, file2);
+  } catch {
+    return null;
+  }
+}
+var clock = (iso) => {
+  const at = new Date(iso);
+  return Number.isNaN(at.getTime()) ? iso : at.toLocaleTimeString(void 0, { hour: "2-digit", minute: "2-digit", hour12: false });
+};
+function heartbeatLine(hb) {
+  const top = hb.topProcesses.map((p) => safeText(p.name) + " " + p.privateMb + " MB").join(", ");
+  return "last seen inside at " + clock(hb.at) + ": up " + Math.round(hb.uptimeS / 60) + " min, " + hb.ramFreePct + "% RAM free, " + hb.commitPct + "% commit used, builds at step " + hb.step + (hb.hostStep > 0 ? " (this PC asked for step " + hb.hostStep + ")" : "") + (hb.diskQueueReported !== void 0 ? ", this PC disk queue " + hb.diskQueueReported : "") + (top ? "; biggest: " + top : "");
+}
+function guessReason(hb) {
+  if (hb && hb.diskQueueReported !== void 0 && hb.hostStep > 0)
+    return "this PC's disks were overloaded (queue " + hb.diskQueueReported + ")";
+  if (hb && (hb.ramFreePct < 8 || hb.commitPct > 92)) return "the sandbox was running out of memory";
+  return "Windows stopped it (no reason was logged)";
+}
+function lastEndOf(life, heartbeat, running) {
+  if (!life || running) return null;
+  if (life.ended && !life.ended.cause) return null;
+  const hb = heartbeat && Date.parse(heartbeat.at) >= Date.parse(life.started) - 6e4 ? heartbeat : null;
+  const at = life.ended?.at ?? life.lastSeen;
+  const why = life.ended?.cause ? safeText(life.ended.cause.text) : guessReason(hb);
+  return { at, text: "ended unexpectedly " + clock(at) + ": " + why };
+}
+function readLastEnd(lifeRead, dataPath, running) {
+  const life = lifeRead();
+  return lastEndOf(life, life && !running ? readHeartbeat(dataPath) : null, running);
+}
+
 // src/host/life/crash-report.ts
 var KEEP_REPORTS = 20;
 var MEMORY_TAIL_BYTES = 16 * 1024;
 var FREEZE_GAP_MS = 5 * 60 * 1e3;
 function crashDir(storageRoot) {
-  return path32.join(storageRoot, "logs", "crashes");
+  return path33.join(storageRoot, "logs", "crashes");
 }
 function freezeLine(cause, lastSeen) {
   if (cause.kind !== "crash") return null;
@@ -52493,11 +53023,11 @@ function findDumps(dirs, since) {
   const found = [];
   for (const dir of dirs) {
     try {
-      for (const name2 of fs25.readdirSync(dir)) {
+      for (const name2 of fs26.readdirSync(dir)) {
         if (!/\.dmp$/i.test(name2)) continue;
-        const stat = fs25.lstatSync(path32.join(dir, name2));
+        const stat = fs26.lstatSync(path33.join(dir, name2));
         if (stat.isFile() && stat.mtime >= since)
-          found.push({ name: path32.join(dir, name2), at: stat.mtime.toISOString() });
+          found.push({ name: path33.join(dir, name2), at: stat.mtime.toISOString() });
       }
     } catch {
     }
@@ -52506,30 +53036,30 @@ function findDumps(dirs, since) {
 }
 function launchHadVgpu(storageRoot, lastSeen) {
   try {
-    const root = path32.join(storageRoot, "launches");
+    const root = path33.join(storageRoot, "launches");
     const limit = Date.parse(lastSeen) + 60 * 1e3;
-    const newest = fs25.readdirSync(root).map((name2) => ({ name: name2, at: fs25.lstatSync(path32.join(root, name2)).mtimeMs })).filter((l) => l.at <= limit).sort((a, b) => b.at - a.at)[0];
+    const newest = fs26.readdirSync(root).map((name2) => ({ name: name2, at: fs26.lstatSync(path33.join(root, name2)).mtimeMs })).filter((l) => l.at <= limit).sort((a, b) => b.at - a.at)[0];
     if (!newest) return false;
-    const dir = path32.join(root, newest.name);
-    const wsb = fs25.readdirSync(dir).find((f) => f.endsWith(".wsb"));
-    return wsb ? /<VGpu>\s*Enable\s*<\/VGpu>/i.test(fs25.readFileSync(path32.join(dir, wsb), "utf8").slice(0, 65536)) : false;
+    const dir = path33.join(root, newest.name);
+    const wsb = fs26.readdirSync(dir).find((f) => f.endsWith(".wsb"));
+    return wsb ? /<VGpu>\s*Enable\s*<\/VGpu>/i.test(fs26.readFileSync(path33.join(dir, wsb), "utf8").slice(0, 65536)) : false;
   } catch {
     return false;
   }
 }
 function hostMemoryTail(storageRoot, dataPath) {
   try {
-    const file2 = path32.join(storageRoot, "logs", "host-memory-" + path32.basename(dataPath) + ".log");
-    const stat = fs25.lstatSync(file2);
+    const file2 = path33.join(storageRoot, "logs", "host-memory-" + path33.basename(dataPath) + ".log");
+    const stat = fs26.lstatSync(file2);
     if (!stat.isFile()) return "";
     const length2 = Math.min(stat.size, MEMORY_TAIL_BYTES);
-    const fd = fs25.openSync(file2, "r");
+    const fd = fs26.openSync(file2, "r");
     try {
       const buffer = Buffer.alloc(length2);
-      fs25.readSync(fd, buffer, 0, length2, stat.size - length2);
+      fs26.readSync(fd, buffer, 0, length2, stat.size - length2);
       return buffer.toString("utf8");
     } finally {
-      fs25.closeSync(fd);
+      fs26.closeSync(fd);
     }
   } catch {
     return "";
@@ -52571,6 +53101,7 @@ function crashReportText(cause, events, memoryLog, lastSeen, extra = {}) {
     ...hostLines.length ? hostLines : ["  (none: the background sync was not running)"],
     ...extra.hostMemoryNow ? ["  after the restart: " + extra.hostMemoryNow] : [],
     "",
+    ...extra.lastInside ? [safeText(extra.lastInside), ""] : [],
     "The sandbox's memory log, last lines (C:\\AgentData\\logs\\memory-*.log inside it):",
     ...memoryLines,
     ""
@@ -52579,10 +53110,10 @@ function crashReportText(cause, events, memoryLog, lastSeen, extra = {}) {
 function newestCrashReport(storageRoot) {
   try {
     const dir = crashDir(storageRoot);
-    const newest = fs25.readdirSync(dir).filter((f) => /^crash-.*\.txt$/.test(f)).sort().pop();
+    const newest = fs26.readdirSync(dir).filter((f) => /^crash-.*\.txt$/.test(f)).sort().pop();
     if (!newest) return null;
-    const file2 = path32.join(dir, newest);
-    return { file: file2, text: safeText(fs25.readFileSync(file2, "utf8").slice(0, 64 * 1024)) };
+    const file2 = path33.join(dir, newest);
+    return { file: file2, text: safeText(fs26.readFileSync(file2, "utf8").slice(0, 64 * 1024)) };
   } catch {
     return null;
   }
@@ -52591,19 +53122,19 @@ function memoryLogTail(dataPath) {
   try {
     const logs = hostDataFolder(dataPath, "logs");
     assertNoLinks(hostDataRoot(dataPath), logs);
-    const newest = fs25.readdirSync(logs).filter((f) => /^memory-\d{8}-\d{6}\.log$/.test(f)).sort().pop();
+    const newest = fs26.readdirSync(logs).filter((f) => /^memory-\d{8}-\d{6}\.log$/.test(f)).sort().pop();
     if (!newest) return "";
-    const file2 = path32.join(logs, newest);
-    if (!fs25.lstatSync(file2).isFile()) return "";
-    const size = fs25.statSync(file2).size;
-    const fd = fs25.openSync(file2, "r");
+    const file2 = path33.join(logs, newest);
+    if (!fs26.lstatSync(file2).isFile()) return "";
+    const size = fs26.statSync(file2).size;
+    const fd = fs26.openSync(file2, "r");
     try {
       const length2 = Math.min(size, MEMORY_TAIL_BYTES);
       const buffer = Buffer.alloc(length2);
-      fs25.readSync(fd, buffer, 0, length2, size - length2);
+      fs26.readSync(fd, buffer, 0, length2, size - length2);
       return buffer.toString("utf8");
     } finally {
-      fs25.closeSync(fd);
+      fs26.closeSync(fd);
     }
   } catch {
     return "";
@@ -52614,22 +53145,24 @@ function saveCrashReport(storageRoot, dataPath, lastSeen) {
   const cause = explainStop(events);
   if (!cause || !["sandboxCrash", "crash", "memory"].includes(cause.kind)) return null;
   const dir = crashDir(storageRoot);
-  fs25.mkdirSync(dir, { recursive: true });
-  const file2 = path32.join(dir, "crash-" + cause.at.replace(/[:.]/g, "-") + ".txt");
+  fs26.mkdirSync(dir, { recursive: true });
+  const file2 = path33.join(dir, "crash-" + cause.at.replace(/[:.]/g, "-") + ".txt");
   const since = new Date(Date.parse(lastSeen) - 10 * 60 * 1e3);
   const windir = process.env.SystemRoot ?? "C:\\Windows";
   const memoryNow = readHostMemory(storageRoot);
-  fs25.writeFileSync(
+  const heartbeat = readHeartbeat(dataPath);
+  fs26.writeFileSync(
     file2,
     crashReportText(cause, events, memoryLogTail(dataPath), lastSeen, {
       hostMemoryLog: hostMemoryTail(storageRoot, dataPath),
       vgpu: launchHadVgpu(storageRoot, lastSeen),
-      dumps: findDumps([path32.join(windir, "Minidump"), windir], since),
+      ...heartbeat ? { lastInside: heartbeatLine(heartbeat) } : {},
+      dumps: findDumps([path33.join(windir, "Minidump"), windir], since),
       ...memoryNow ? { hostMemoryNow: hostMemoryLine(memoryNow) } : {}
     })
   );
-  for (const old of fs25.readdirSync(dir).filter((f) => f.startsWith("crash-")).sort().slice(0, -KEEP_REPORTS))
-    fs25.rmSync(path32.join(dir, old), { force: true });
+  for (const old of fs26.readdirSync(dir).filter((f) => f.startsWith("crash-")).sort().slice(0, -KEEP_REPORTS))
+    fs26.rmSync(path33.join(dir, old), { force: true });
   return file2;
 }
 
@@ -52728,25 +53261,25 @@ function updateRestartPending() {
 var UPDATE_RESTART_WARNING = "Windows is waiting to restart for updates and may do so on its own (often overnight), which closes the sandbox. Restart first, or pause updates: Settings > Windows Update > Pause updates.";
 
 // src/host/life/session-ledger.ts
-import path33 from "node:path";
+import path34 from "node:path";
 var MAX_SESSIONS = 50;
 var MAX_TEXT = 1024;
 var AUTO_RESTARTS = 3;
 var AUTO_RESTART_WINDOW_MS = 6 * 60 * 60 * 1e3;
-var Text = external_exports.string().max(MAX_TEXT);
+var Text2 = external_exports.string().max(MAX_TEXT);
 var LedgerSchema = external_exports.object({
   savedAt: external_exports.string().max(40),
   launch: external_exports.object({
-    primary: Text,
-    harness: Text.nullable(),
-    projects: external_exports.array(Text).max(MAX_SESSIONS),
+    primary: Text2,
+    harness: Text2.nullable(),
+    projects: external_exports.array(Text2).max(MAX_SESSIONS),
     headless: external_exports.boolean(),
-    configPath: Text.nullable()
+    configPath: Text2.nullable()
   }),
   sessions: external_exports.array(
     external_exports.object({
-      harness: Text,
-      project: Text,
+      harness: Text2,
+      project: Text2,
       conversation: external_exports.string().max(128).optional(),
       startedAt: external_exports.string().max(40)
     })
@@ -52778,7 +53311,7 @@ function recent(restarts, now2) {
   });
 }
 function describeLast(sessions) {
-  const names = sessions.map((s) => s.harness + " in " + (path33.win32.basename(s.project) || s.project));
+  const names = sessions.map((s) => s.harness + " in " + (path34.win32.basename(s.project) || s.project));
   return names.join(", ") + " (" + sessions.length + " session" + (sessions.length === 1 ? "" : "s") + ")";
 }
 var SessionLedger = class {
@@ -52862,8 +53395,8 @@ var SessionLedger = class {
 var key = (s) => [s.harness, s.project.toLowerCase(), s.startedAt].join("|");
 
 // src/host/life/watchdog.ts
-import fs26 from "node:fs";
-import path34 from "node:path";
+import fs27 from "node:fs";
+import path35 from "node:path";
 
 // src/shared/memory/policy.ts
 var HOST_THRESHOLDS = {
@@ -52895,6 +53428,7 @@ function effectiveCpuLimit(cpuLimit, profile) {
   if (profile === "gentle") return Math.min(gentleCpuLimit(cpuLimit), cpuLimit === "none" ? 100 : cpuLimit);
   return cpuLimit === "none" ? null : cpuLimit;
 }
+var LOCAL_TARGET_MIN_BYTES = 25 * 1024 ** 3;
 
 // src/host/life/watchdog.ts
 var WATCHDOG_START = {
@@ -52903,6 +53437,7 @@ var WATCHDOG_START = {
   calm: 0,
   cpuHighSeconds: 0,
   diskHighSeconds: 0,
+  diskSevereSeconds: 0,
   lastSentAt: 0
 };
 var RESEND_MS = 3e4;
@@ -52930,8 +53465,10 @@ function watchdogStep(prev, input2) {
     reason = "this PC's CPU has been above " + t.cpuPercent + "% for " + cpuHigh + " seconds";
   const diskQueue = input2.memory?.diskQueue;
   const diskHigh = diskQueue !== void 0 && diskQueue >= t.diskQueue ? prev.diskHighSeconds + input2.intervalSeconds : 0;
+  const diskDouble = diskQueue !== void 0 && diskQueue >= 2 * t.diskQueue ? prev.diskSevereSeconds + input2.intervalSeconds : 0;
+  const diskSevere = diskDouble >= t.diskSeconds || diskHigh >= 3 * t.diskSeconds;
   if (!reason && diskHigh >= t.diskSeconds)
-    reason = "this PC's disks have had a queue of " + diskQueue + " for " + diskHigh + " seconds";
+    reason = diskSevere ? "this PC's disks are overloaded (queue " + diskQueue + " for " + diskHigh + " seconds)" : "this PC's disks have had a queue of " + diskQueue + " for " + diskHigh + " seconds";
   const calmNow = input2.memory ? lowReason(input2.memory, input2.reserveHostMb, t, 1.25) === "" : true;
   let low = prev.low;
   let calm = prev.calm;
@@ -52945,7 +53482,7 @@ function watchdogStep(prev, input2) {
       calm = 0;
     }
   }
-  const severe = low && input2.memory !== null && severeHost(input2.memory);
+  const severe = low && (input2.memory !== null && severeHost(input2.memory) || diskSevere);
   const send = low && (input2.nowMs - prev.lastSentAt >= RESEND_MS || severe && !prev.severe);
   return {
     state: {
@@ -52954,6 +53491,7 @@ function watchdogStep(prev, input2) {
       calm,
       cpuHighSeconds: cpuHigh,
       diskHighSeconds: diskHigh,
+      diskSevereSeconds: diskDouble,
       lastSentAt: send ? input2.nowMs : prev.lastSentAt
     },
     send,
@@ -52978,12 +53516,12 @@ function cpuPercentBetween(a, b) {
 var MAX_LOG_BYTES = 512 * 1024;
 function appendHostMemory(file2, memory, cpuPercent) {
   try {
-    fs26.mkdirSync(path34.dirname(file2), { recursive: true });
+    fs27.mkdirSync(path35.dirname(file2), { recursive: true });
     try {
-      if (fs26.statSync(file2).size > MAX_LOG_BYTES) fs26.renameSync(file2, file2 + ".old");
+      if (fs27.statSync(file2).size > MAX_LOG_BYTES) fs27.renameSync(file2, file2 + ".old");
     } catch {
     }
-    fs26.appendFileSync(file2, hostMemoryLine(memory) + (cpuPercent === null ? "" : " | CPU " + cpuPercent + "%") + "\n");
+    fs27.appendFileSync(file2, hostMemoryLine(memory) + (cpuPercent === null ? "" : " | CPU " + cpuPercent + "%") + "\n");
   } catch {
   }
 }
@@ -52992,16 +53530,16 @@ var LoadSettingsSchema = external_exports.object({
   reserveHostMb: external_exports.number().int().nonnegative()
 });
 function loadFile(storageRoot, dataPath) {
-  return path34.join(storageRoot, "run", "load-" + path34.basename(dataPath) + ".json");
+  return path35.join(storageRoot, "run", "load-" + path35.basename(dataPath) + ".json");
 }
 function writeLoadSettings(storageRoot, dataPath, settings) {
   const file2 = loadFile(storageRoot, dataPath);
-  fs26.mkdirSync(path34.dirname(file2), { recursive: true });
-  fs26.writeFileSync(file2, JSON.stringify(settings));
+  fs27.mkdirSync(path35.dirname(file2), { recursive: true });
+  fs27.writeFileSync(file2, JSON.stringify(settings));
 }
 function readLoadSettings(storageRoot, dataPath) {
   try {
-    return LoadSettingsSchema.parse(JSON.parse(fs26.readFileSync(loadFile(storageRoot, dataPath), "utf8")));
+    return LoadSettingsSchema.parse(JSON.parse(fs27.readFileSync(loadFile(storageRoot, dataPath), "utf8")));
   } catch {
     return { profile: "normal", reserveHostMb: 8192 };
   }
@@ -53032,7 +53570,7 @@ function doctorRows(config3, harnessName, storageRoot, configPath) {
     ["Host nvm versions", probe.nvmDir ?? "(no NVM_HOME; versions will be downloaded)"],
     [
       "Host " + harnessName,
-      probe.harnessExe ? path35.join(probe.harnessExe.dir, probe.harnessExe.file) : "(none; will npm install)"
+      probe.harnessExe ? path36.join(probe.harnessExe.dir, probe.harnessExe.file) : "(none; will npm install)"
     ],
     ["Host Git for Windows", probe.gitDir ?? "(none with bash; PortableGit will be downloaded)"],
     ["Storage root", storageRoot + (dirExists(storageRoot) ? "" : " (will be created)")]
@@ -53040,10 +53578,10 @@ function doctorRows(config3, harnessName, storageRoot, configPath) {
 }
 
 // src/host/sandbox/window.ts
-import path36 from "node:path";
+import path37 from "node:path";
 import { spawn as spawn7, spawnSync as spawnSync11 } from "node:child_process";
 function stateFile(storageRoot) {
-  return path36.join(storageRoot, "run", "hidden-windows.json");
+  return path37.join(storageRoot, "run", "hidden-windows.json");
 }
 function run(file2, args) {
   return new Promise((resolve, reject) => {
@@ -53081,19 +53619,19 @@ function showSandboxWindow(storageRoot) {
 }
 
 // src/host/sandbox/wsb-cli.ts
-import fs27 from "node:fs";
-import path37 from "node:path";
+import fs28 from "node:fs";
+import path38 from "node:path";
 import { spawnSync as spawnSync12 } from "node:child_process";
 var GUID = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/i;
 var MAX_OUTPUT = 1024 * 1024;
 function wsbCandidates(env = process.env) {
   return [
-    env.LOCALAPPDATA ? path37.join(env.LOCALAPPDATA, "Microsoft", "WindowsApps", "wsb.exe") : "",
-    path37.join(env.SystemRoot ?? env.WINDIR ?? "C:\\Windows", "System32", "wsb.exe")
+    env.LOCALAPPDATA ? path38.join(env.LOCALAPPDATA, "Microsoft", "WindowsApps", "wsb.exe") : "",
+    path38.join(env.SystemRoot ?? env.WINDIR ?? "C:\\Windows", "System32", "wsb.exe")
   ].filter(Boolean);
 }
-function findWsb(env = process.env, exists2 = fs27.existsSync) {
-  return process.platform === "win32" || exists2 !== fs27.existsSync ? wsbCandidates(env).find((p) => exists2(p)) ?? null : null;
+function findWsb(env = process.env, exists2 = fs28.existsSync) {
+  return process.platform === "win32" || exists2 !== fs28.existsSync ? wsbCandidates(env).find((p) => exists2(p)) ?? null : null;
 }
 function parseVersion(out) {
   return /\d+\.\d+(?:\.\d+){0,2}/.exec(out)?.[0] ?? null;
@@ -53177,17 +53715,17 @@ function shareFolder(wsb, id, hostPath, sandboxPath, readOnly = false) {
 }
 
 // src/host/sharing/machine-paths.ts
-import path38 from "node:path";
+import path39 from "node:path";
 function usersDir(env = process.env) {
-  return path38.join(machineRoot(env), "users");
+  return path39.join(machineRoot(env), "users");
 }
 function activeDir(env = process.env) {
-  return path38.join(machineRoot(env), "active");
+  return path39.join(machineRoot(env), "active");
 }
 
 // src/host/sharing/active-record.ts
-import fs28 from "node:fs";
-import path39 from "node:path";
+import fs29 from "node:fs";
+import path40 from "node:path";
 var SID = /^S-1-[0-9-]{3,180}$/;
 var TEXT = external_exports.string().max(1024);
 var MAX_RECORD_BYTES = 64 * 1024;
@@ -53215,17 +53753,17 @@ var ActiveRecords = class {
   readAll() {
     let names;
     try {
-      names = fs28.readdirSync(this.dir);
+      names = fs29.readdirSync(this.dir);
     } catch {
       return [];
     }
     const records2 = [];
     for (const name2 of names) {
       if (!name2.toLowerCase().endsWith(".json")) continue;
-      const file2 = path39.join(this.dir, name2);
+      const file2 = path40.join(this.dir, name2);
       let stat;
       try {
-        stat = fs28.lstatSync(file2);
+        stat = fs29.lstatSync(file2);
       } catch {
         continue;
       }
@@ -53241,7 +53779,7 @@ var ActiveRecords = class {
   }
   fileOf(sid) {
     if (!SID.test(sid)) throw new Error("Not a Windows SID: " + sid);
-    return path39.join(this.dir, sid + ".json");
+    return path40.join(this.dir, sid + ".json");
   }
 };
 
@@ -53328,13 +53866,13 @@ function runningOwner(records2 = new ActiveRecords(activeDir())) {
 }
 
 // src/host/sharing/borrow.ts
-import path40 from "node:path";
+import path41 from "node:path";
 function sharedDataPath(record2, machine3 = machineRoot()) {
-  const users = path40.join(machine3, "users");
-  const dataPath = path40.resolve(record2.dataPath);
-  const parts = path40.relative(users, dataPath).split(path40.sep);
+  const users = path41.join(machine3, "users");
+  const dataPath = path41.resolve(record2.dataPath);
+  const parts = path41.relative(users, dataPath).split(path41.sep);
   const inside = parts.length === 3 && parts[1].toLowerCase() === "data" && parts.every((p) => p && p !== "..");
-  if (!inside || path40.isAbsolute(path40.relative(users, dataPath)))
+  if (!inside || path41.isAbsolute(path41.relative(users, dataPath)))
     fail(
       "The record of " + ownerName(record2.user) + "'s sandbox points outside the shared folder, so it is not used.",
       "Ask them to restart their sandbox."
@@ -53347,475 +53885,6 @@ function sharedDataPath(record2, machine3 = machineRoot()) {
 import fs33 from "node:fs";
 import path49 from "node:path";
 
-// src/shared/channel/schema.ts
-var IdSchema = external_exports.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "invalid id");
-var Text2 = (max = 4096) => external_exports.string().max(max);
-var TimeSchema = Text2(64);
-var AttachEndpointSchema = external_exports.strictObject({
-  addresses: external_exports.array(Text2(64)).max(16),
-  port: external_exports.number().int().min(1024).max(65535),
-  token: Text2(256)
-});
-var BootProgressSchema = external_exports.strictObject({
-  step: external_exports.number().int().min(1).max(32),
-  steps: external_exports.number().int().min(1).max(32),
-  title: Text2(120),
-  /** Being set up now; percent while it downloads (when the size is known). */
-  active: external_exports.array(external_exports.strictObject({ name: Text2(64), percent: external_exports.number().int().min(0).max(100).optional() })).max(8),
-  done: external_exports.number().int().min(0).max(1e3),
-  total: external_exports.number().int().min(0).max(1e3)
-});
-var SandboxStatusSchema = external_exports.object({
-  launchId: Text2(64),
-  phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
-  message: Text2(),
-  updatedAt: TimeSchema,
-  workspaceHost: Text2(),
-  guestWorkspace: Text2(),
-  headless: external_exports.boolean(),
-  /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
-  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
-  /** A malformed progress is dropped, never the status (the phase still counts). */
-  progress: BootProgressSchema.optional().catch(void 0)
-});
-var VersionSchema = external_exports.strictObject({ spec: Text2(128), source: Text2(256) });
-var DatabasePlanSchema = external_exports.strictObject({
-  database: external_exports.enum(["postgres", "mysql", "sqlserver", "mongodb", "redis", "dynamodb"]),
-  reasons: external_exports.array(Text2(1024)).max(32),
-  version: Text2(64),
-  port: external_exports.number().int().min(1024).max(65535),
-  adminPort: external_exports.number().int().min(1024).max(65535).optional()
-});
-var ProjectSpecSchema = external_exports.strictObject({
-  name: IdSchema,
-  /** Inside the sandbox: C:\Projects\<name>. */
-  workspace: Text2(1024),
-  workspaceHost: Text2(1024),
-  toolchains: ToolchainsSchema,
-  versions: external_exports.strictObject({ node: VersionSchema, nodeExtra: external_exports.array(Text2(128)).max(16), python: VersionSchema }),
-  databases: external_exports.array(DatabasePlanSchema).max(8),
-  /** Agents this project may start that the sandbox did not boot with (its .sandbox-config.json "harness"). */
-  harnesses: external_exports.record(Text2(64), HarnessSchema).refine((h) => Object.keys(h).length <= 8, "at most 8 agents"),
-  /** Its hooks were staged in C:\AgentLaunch\projects\<name>\hooks. */
-  hooks: external_exports.boolean()
-});
-var ShellChoiceSchema = external_exports.enum(["auto", "pwsh", "powershell", "cmd"]);
-var GuestRequestSchema = external_exports.discriminatedUnion("kind", [
-  external_exports.strictObject({
-    kind: external_exports.literal("session"),
-    id: IdSchema,
-    harness: Text2(64),
-    args: external_exports.array(Text2()).max(256),
-    cwd: Text2(),
-    project: ProjectSpecSchema.optional(),
-    harnessSpec: HarnessSchema.optional(),
-    /** A plain shell instead of an agent (harness is then "shell" and args are ignored). */
-    shell: ShellChoiceSchema.optional(),
-    createdAt: TimeSchema
-  }),
-  /** End a running session (an agent or a shell) and everything it started. */
-  external_exports.strictObject({ kind: external_exports.literal("close"), id: IdSchema, session: IdSchema, createdAt: TimeSchema }),
-  /** Provision a registered project without starting an agent (sandbox start / exec / db from its folder). */
-  external_exports.strictObject({ kind: external_exports.literal("project"), id: IdSchema, project: ProjectSpecSchema, createdAt: TimeSchema }),
-  external_exports.strictObject({
-    kind: external_exports.literal("exec"),
-    id: IdSchema,
-    command: external_exports.array(Text2()).min(1).max(256),
-    cwd: Text2(),
-    timeoutSeconds: external_exports.number().positive().max(86400),
-    createdAt: TimeSchema
-  }),
-  /** cwd: only the sessions in this folder or below (one project's); omitted = every session. */
-  external_exports.strictObject({
-    kind: external_exports.literal("restart"),
-    id: IdSchema,
-    harness: Text2(64).nullable(),
-    cwd: Text2().optional(),
-    createdAt: TimeSchema
-  }),
-  external_exports.strictObject({ kind: external_exports.literal("ping"), id: IdSchema, createdAt: TimeSchema }),
-  /**
-   * The PC's own memory or CPU is running low (the host watchdog): the sandbox slows its heaviest builds down for
-   * `seconds` (it never stops them) so Windows does not have to close it. Repeated while the PC stays low.
-   */
-  external_exports.strictObject({
-    kind: external_exports.literal("pressure"),
-    id: IdSchema,
-    reason: Text2(300),
-    seconds: external_exports.number().int().min(10).max(300),
-    /** "severe": the PC is nearly out of memory; builds go to the governor's last step at once. */
-    level: external_exports.enum(["slow", "severe"]).optional(),
-    createdAt: TimeSchema
-  })
-]);
-var PressureStatusSchema = external_exports.object({
-  level: external_exports.enum(["ok", "throttled", "suspending"]),
-  /** The governor's dial, 0 (nothing wrong) to 4 (one compiler at a time). */
-  step: external_exports.number().int().min(0).max(4).optional(),
-  profile: external_exports.enum(["normal", "gentle"]),
-  /** Share of the sandbox's RAM still free and of its commit limit in use (percent). */
-  ramFreePercent: external_exports.number().int().min(0).max(100),
-  commitPercent: external_exports.number().int().min(0).max(100),
-  /** Programs running at lower priority because of it. */
-  lowered: external_exports.number().int().min(0).max(1024),
-  /** Compilers waiting their turn right now (name, process id, seconds until they may go on). */
-  paused: external_exports.array(external_exports.object({ name: Text2(64), pid: external_exports.number().int(), seconds: external_exports.number().int().min(0).max(60) })).max(8),
-  /** The CPU share the compilers get together (percent; 100 = no cap). */
-  cpuPercent: external_exports.number().int().min(0).max(100).optional(),
-  /** The PC itself asked for slowing down (its memory or CPU is low). */
-  pcLow: external_exports.boolean(),
-  lastAction: Text2(300),
-  updatedAt: TimeSchema
-});
-var GuestResponseSchema = external_exports.object({
-  id: IdSchema,
-  ok: external_exports.boolean(),
-  message: Text2(65536),
-  exitCode: external_exports.number().int().optional(),
-  stdout: Text2(4 * 1024 * 1024).optional(),
-  stderr: Text2(4 * 1024 * 1024).optional(),
-  finishedAt: TimeSchema
-});
-var SessionStatusSchema = external_exports.object({
-  id: IdSchema,
-  launchId: Text2(64),
-  harness: Text2(64),
-  /** A plain shell (harness is then the shell: pwsh, powershell or cmd); absent: an agent. */
-  kind: external_exports.enum(["agent", "shell"]).optional(),
-  cwd: Text2(),
-  /** The project it runs in: its hub name, or the launch folder's for the first project. */
-  project: Text2(64).optional(),
-  phase: external_exports.enum(["starting", "running", "exited", "failed"]),
-  message: Text2(),
-  updatedAt: TimeSchema,
-  startedAt: TimeSchema,
-  /** The agent's own conversation this session is in (Claude: the file name of its .jsonl), once known. */
-  conversation: Text2(128).optional(),
-  exitCode: external_exports.number().int().optional(),
-  attach: AttachEndpointSchema.optional()
-});
-var ProjectStatusSchema = external_exports.object({
-  name: IdSchema,
-  workspace: Text2(1024),
-  phase: external_exports.enum(["provisioning", "ready", "failed"]),
-  message: Text2(),
-  updatedAt: TimeSchema,
-  databases: external_exports.array(external_exports.object({ database: Text2(32), port: external_exports.number().int() })).max(16),
-  summary: external_exports.array(Text2(512)).max(64)
-});
-var VpnStatusSchema = external_exports.object({
-  state: external_exports.enum(["off", "starting", "up", "failed"]),
-  message: Text2(2e3),
-  killSwitch: external_exports.boolean(),
-  /** A direct connection was tried after the kill switch was applied: false = it still got out. */
-  killSwitchHeld: external_exports.boolean().optional(),
-  /** The server's name, e.g. uk2201.nordvpn.com. */
-  server: Text2(128).optional(),
-  /** What the sandbox's traffic looks like from outside, once the tunnel is up. */
-  publicIp: Text2(64).optional(),
-  updatedAt: TimeSchema
-});
-
-// src/shared/channel/run-dir.ts
-import fs29 from "node:fs";
-import path41 from "node:path";
-function safeId(id) {
-  return IdSchema.parse(id);
-}
-function now() {
-  return (/* @__PURE__ */ new Date()).toISOString();
-}
-var scan = (schema, dir) => {
-  if (!fs29.existsSync(dir)) return { valid: [], invalid: [] };
-  const valid = [];
-  const invalid = [];
-  for (const name2 of fs29.readdirSync(dir)) {
-    if (name2.endsWith(".tmp")) continue;
-    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name2) ? readValid(schema, path41.join(dir, name2)) : null;
-    if (message) valid.push(message);
-    else invalid.push(path41.join(dir, name2));
-  }
-  return { valid, invalid };
-};
-var RunDir = class {
-  root;
-  sandboxFile;
-  vpnFile;
-  /** What the memory governor in the sandbox is doing (pressure.json). */
-  pressureFile;
-  /** What the sandbox's programs may really use (budget.json): processors, memory, build jobs, link slots. */
-  budgetFile;
-  requestsDir;
-  responsesDir;
-  sessionsDir;
-  projectsDir;
-  /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
-  auditDir;
-  /**
-   * Each running session's process tree, recorded by its ptyhost (guest only: the daemon ends what a ptyhost that was
-   * itself ended left running).
-   */
-  treesDir;
-  /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
-  secretsDir;
-  /** Live folders (live.ts): signed host requests, and the daemon's replies. */
-  liveDir;
-  liveRepliesDir;
-  constructor(dataDir) {
-    this.root = path41.join(dataDir, "run");
-    this.sandboxFile = path41.join(this.root, "sandbox.json");
-    this.vpnFile = path41.join(this.root, "vpn.json");
-    this.pressureFile = path41.join(this.root, "pressure.json");
-    this.budgetFile = path41.join(this.root, "budget.json");
-    this.requestsDir = path41.join(this.root, "requests");
-    this.responsesDir = path41.join(this.root, "responses");
-    this.sessionsDir = path41.join(this.root, "sessions");
-    this.projectsDir = path41.join(this.root, "projects");
-    this.auditDir = path41.join(this.root, "audit");
-    this.treesDir = path41.join(this.root, "trees");
-    this.secretsDir = path41.join(dataDir, "secrets");
-    this.liveDir = path41.join(this.root, "live");
-    this.liveRepliesDir = path41.join(this.root, "live-replies");
-  }
-  liveFile(id) {
-    return path41.join(this.liveDir, safeId(id) + ".json");
-  }
-  liveReplyFile(id) {
-    return path41.join(this.liveRepliesDir, safeId(id) + ".json");
-  }
-  requestFile(id) {
-    return path41.join(this.requestsDir, safeId(id) + ".json");
-  }
-  responseFile(id) {
-    return path41.join(this.responsesDir, safeId(id) + ".json");
-  }
-  sessionFile(id) {
-    return path41.join(this.sessionsDir, safeId(id) + ".json");
-  }
-  treeFile(id) {
-    return path41.join(this.treesDir, safeId(id) + ".json");
-  }
-  projectFile(name2) {
-    return path41.join(this.projectsDir, safeId(name2) + ".json");
-  }
-  secretFile(id) {
-    return path41.join(this.secretsDir, safeId(id) + ".json");
-  }
-  readSandboxStatus() {
-    return readValid(SandboxStatusSchema, this.sandboxFile);
-  }
-  readVpnStatus() {
-    return readValid(VpnStatusSchema, this.vpnFile);
-  }
-  readPressure() {
-    return readValid(PressureStatusSchema, this.pressureFile);
-  }
-  readSession(id) {
-    return readValid(SessionStatusSchema, this.sessionFile(id));
-  }
-  readResponse(id) {
-    return readValid(GuestResponseSchema, this.responseFile(id));
-  }
-  listSessions() {
-    return scan(SessionStatusSchema, this.sessionsDir).valid.sort((a, b) => a.startedAt.localeCompare(b.startedAt));
-  }
-  readProjectStatus(name2) {
-    return readValid(ProjectStatusSchema, this.projectFile(name2));
-  }
-  listProjectStatus() {
-    return scan(ProjectStatusSchema, this.projectsDir).valid.slice(0, 64);
-  }
-  scanRequests() {
-    return scan(GuestRequestSchema, this.requestsDir);
-  }
-};
-
-// src/shared/accounts/payloads.ts
-var KB = 1024;
-var base643 = (maxBytes) => external_exports.string().min(4).max(maxBytes).regex(/^[A-Za-z0-9+/]+={0,2}$/);
-var secretText = (max) => external_exports.string().min(1).max(max).regex(/^[^\r\n]+$/);
-var EpicPayloadSchema = external_exports.strictObject({
-  data: external_exports.string().min(16).max(16384).regex(/^[A-Za-z0-9+/=_-]+$/)
-});
-var SteamPayloadSchema = external_exports.strictObject({
-  account: external_exports.string().regex(/^[A-Za-z0-9_]{1,64}$/),
-  configVdf: external_exports.string().min(1).max(256 * KB),
-  sentries: external_exports.array(external_exports.strictObject({ name: external_exports.string().regex(/^ssfn\d{1,40}$/), base64: base643(64 * KB) })).max(4),
-  /** Reserved for the Steam client's own login (very likely not portable between Windows users). */
-  client: base643(256 * KB).optional()
-});
-var UnityPayloadSchema = external_exports.strictObject({
-  ulf: external_exports.string().min(1).max(128 * KB).optional(),
-  email: external_exports.string().email().max(256).optional(),
-  password: secretText(1024).optional(),
-  serial: secretText(64).optional()
-});
-var CfxPayloadSchema = external_exports.strictObject({
-  licenseKey: external_exports.string().max(256).regex(/^cfxk_[A-Za-z0-9_]+$/),
-  steamWebApiKey: external_exports.string().regex(/^[A-F0-9]{32}$/).optional()
-});
-var KeystorePayloadSchema = external_exports.strictObject({
-  fileName: external_exports.string().regex(/^[A-Za-z0-9._-]{1,100}\.(jks|keystore|p12)$/i),
-  jksBase64: base643(256 * KB),
-  storePassword: secretText(1024),
-  keyAlias: secretText(256),
-  keyPassword: secretText(1024)
-});
-var PlayPayloadSchema = external_exports.strictObject({
-  serviceAccountJson: external_exports.string().min(2).max(64 * KB).refine((text) => {
-    try {
-      const parsed = JSON.parse(text);
-      return typeof parsed === "object" && parsed !== null && parsed.type === "service_account";
-    } catch {
-      return false;
-    }
-  }, 'not a Google service account key (its "type" is not "service_account")')
-});
-var ExpoPayloadSchema = external_exports.strictObject({
-  token: external_exports.string().regex(/^[A-Za-z0-9_-]{8,512}$/)
-});
-var AppstorePayloadSchema = external_exports.strictObject({
-  issuerId: external_exports.string().uuid(),
-  keyId: external_exports.string().regex(/^[A-Z0-9]{10}$/),
-  p8: external_exports.string().max(8 * KB).regex(/^-----BEGIN PRIVATE KEY-----\r?\n[A-Za-z0-9+/=\r\n]+-----END PRIVATE KEY-----\s*$/)
-});
-var PAYLOADS = {
-  epic: EpicPayloadSchema,
-  steam: SteamPayloadSchema,
-  unity: UnityPayloadSchema,
-  cfx: CfxPayloadSchema,
-  keystore: KeystorePayloadSchema,
-  play: PlayPayloadSchema,
-  expo: ExpoPayloadSchema,
-  appstore: AppstorePayloadSchema
-};
-var ServiceAccountsSchema = external_exports.strictObject({
-  epic: EpicPayloadSchema.optional(),
-  steam: SteamPayloadSchema.optional(),
-  unity: UnityPayloadSchema.optional(),
-  cfx: CfxPayloadSchema.optional(),
-  keystore: KeystorePayloadSchema.optional(),
-  play: PlayPayloadSchema.optional(),
-  expo: ExpoPayloadSchema.optional(),
-  appstore: AppstorePayloadSchema.optional()
-});
-var LaunchIdSchema = external_exports.string().regex(/^[A-Za-z0-9-]{1,64}$/);
-function handoffSchema(kind) {
-  return external_exports.strictObject({
-    kind: external_exports.literal(kind),
-    launchId: LaunchIdSchema,
-    payload: PAYLOADS[kind]
-  });
-}
-
-// src/shared/github/token.ts
-var GITHUB_TOKEN_KINDS = ["fine-grained", "classic"];
-var MIN_LENGTH = 20;
-var MAX_LENGTH = 255;
-var PRINTABLE = /^[\x21-\x7e]+$/;
-var GithubTokenSchema = external_exports.string().min(MIN_LENGTH).max(MAX_LENGTH).regex(PRINTABLE);
-var OTHER_TOKENS = {
-  gho_: "This is an OAuth token (from gh auth login or gh auth token), which can reach everything your account can.",
-  ghu_: "This is a GitHub App user token, not a personal access token.",
-  ghs_: "This is a GitHub App installation token, not a personal access token.",
-  ghr_: "This is a refresh token, not a personal access token."
-};
-var CREATE_FINE_GRAINED = "Create a fine-grained token at https://github.com/settings/personal-access-tokens/new with only the repositories and permissions the agent needs, then run: sandbox github login";
-function githubTokenKind(token) {
-  if (token.startsWith("github_pat_")) return "fine-grained";
-  if (token.startsWith("ghp_")) return "classic";
-  return null;
-}
-function githubTokenProblem(token) {
-  if (!token) return { message: "No token was typed.", fix: CREATE_FINE_GRAINED };
-  if (!PRINTABLE.test(token))
-    return {
-      message: "The token may not contain spaces, line breaks or other special characters.",
-      fix: "Copy the token again from GitHub (only the token itself) and run: sandbox github login"
-    };
-  if (token.length < MIN_LENGTH || token.length > MAX_LENGTH)
-    return {
-      message: "That is not the length of a GitHub token.",
-      fix: "Copy the whole token again from GitHub and run: sandbox github login"
-    };
-  const other = Object.keys(OTHER_TOKENS).find((p) => token.startsWith(p));
-  if (other) return { message: OTHER_TOKENS[other], fix: CREATE_FINE_GRAINED };
-  if (!githubTokenKind(token))
-    return {
-      message: "That is not a GitHub personal access token (they start with github_pat_ or ghp_).",
-      fix: CREATE_FINE_GRAINED
-    };
-  return null;
-}
-
-// src/shared/channel/secrets.ts
-var Environment = external_exports.record(external_exports.string().max(256), external_exports.string().max(65536));
-var SecretsFileSchema = external_exports.strictObject({
-  /** The agent the sandbox booted with: its harness environment. */
-  harnessEnvironment: Environment.optional(),
-  /** harnessSpec of a session request (an agent the sandbox did not boot with). */
-  harnessSpecEnvironment: Environment.optional(),
-  /** project.harnesses of a request, by agent name. */
-  projectHarnessEnvironment: external_exports.record(external_exports.string().max(64), Environment).optional(),
-  /** The login of this PC's Claude (claudeProfile.copyCredentials): the text of .credentials.json. */
-  claudeCredentials: external_exports.string().max(1024 * 1024).optional(),
-  /** VPN service credentials (vpn.provider's login), only for the launch's own sandbox. */
-  vpn: external_exports.strictObject({ username: external_exports.string().min(1).max(256), password: external_exports.string().min(1).max(1024) }).optional(),
-  /** The checked WireGuard config of vpn.provider wireguard-file (holds the private key). */
-  wireguardConfig: external_exports.string().min(1).max(32 * 1024).optional(),
-  /** The GitHub token you saved for sandboxes (github.shareToken), only with git access "full". */
-  githubToken: GithubTokenSchema.optional(),
-  /** Your saved service sign-ins (accounts.<kind>.share): each goes to its tool's own files at boot. */
-  serviceAccounts: ServiceAccountsSchema.optional(),
-  /** projects.liveFolders "hcs": this launch's key for signed live-folder requests (live.ts). */
-  liveFoldersKey: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
-});
-
-// src/shared/channel/live.ts
-import crypto3 from "node:crypto";
-var LIVE_SHARE_NAME = /^agentsbx-[0-9a-f]{8,32}$/;
-var LIVE_FOLDER_NAME = /^[a-z0-9][a-z0-9_-]{0,63}$/;
-var LIVE_KEY = /^[0-9a-f]{64}$/;
-var LIVE_TOKEN = /^[0-9a-f]{32}$/;
-var LIVE_MAX_AGE_MS = 2 * 60 * 1e3;
-var MAX_PAYLOAD = 4096;
-var LivePayloadSchema = external_exports.strictObject({
-  v: external_exports.literal(1),
-  /** canary: show the share, read token.txt, hide it again and reply with the token; map / unmap: the real folder. */
-  kind: external_exports.enum(["canary", "map", "unmap"]),
-  id: IdSchema,
-  launchId: external_exports.string().min(1).max(64),
-  share: external_exports.string().regex(LIVE_SHARE_NAME).optional(),
-  folder: external_exports.string().regex(LIVE_FOLDER_NAME),
-  readOnly: external_exports.boolean(),
-  createdAt: external_exports.string().max(64)
-});
-var LiveEnvelopeSchema = external_exports.strictObject({
-  payload: external_exports.string().min(2).max(MAX_PAYLOAD),
-  mac: external_exports.string().regex(/^[0-9a-f]{64}$/)
-});
-var LiveReplySchema = external_exports.strictObject({
-  id: IdSchema,
-  ok: external_exports.boolean(),
-  message: external_exports.string().max(1e3),
-  token: external_exports.string().regex(LIVE_TOKEN).optional(),
-  finishedAt: external_exports.string().max(64)
-});
-function mac3(key3, payload) {
-  return crypto3.createHmac("sha256", Buffer.from(key3, "hex")).update(payload, "utf8").digest("hex");
-}
-function signLive(key3, payload) {
-  if (!LIVE_KEY.test(key3)) throw new Error("not a live-folder key");
-  const text = JSON.stringify(LivePayloadSchema.parse(payload));
-  return { payload: text, mac: mac3(key3, text) };
-}
-function newShareName() {
-  return "agentsbx-" + crypto3.randomBytes(8).toString("hex");
-}
-function newLiveKey() {
-  return crypto3.randomBytes(32).toString("hex");
-}
-
 // src/host/install/layout.ts
 import fs30 from "node:fs";
 import path42 from "node:path";
@@ -58473,7 +58542,7 @@ var GUEST = {
 var MB = 1048576;
 var MIN_AUTO_MEMORY_MB = 4096;
 var roundDown = (mb) => Math.floor(mb / 1024) * 1024;
-var VGPU_RESERVE_MB = 2048;
+var VGPU_RESERVE_MB = 4096;
 function residentCapMb(sandbox, totalMb) {
   const keep = Math.max(sandbox.reserveHostMb, Math.floor(totalMb / 4)) + (sandbox.vGpu ? VGPU_RESERVE_MB : 0);
   return roundDown(totalMb - keep);
@@ -58488,8 +58557,9 @@ function residentNote(asked, given) {
 }
 function decideMemory(sandbox, freeMb, totalMb, commitAvailableMb) {
   const shareMb = Math.floor(totalMb * sandbox.maxMemoryPercent / 100);
-  const byFree = freeMb - sandbox.reserveHostMb;
-  const byCommit = commitAvailableMb === null ? Infinity : commitAvailableMb - sandbox.reserveHostMb;
+  const reserveMb = sandbox.reserveHostMb + (sandbox.vGpu ? VGPU_RESERVE_MB : 0);
+  const byFree = freeMb - reserveMb;
+  const byCommit = commitAvailableMb === null ? Infinity : commitAvailableMb - reserveMb;
   const candidates = [
     ["max", sandbox.maxMemoryMb],
     ["share", shareMb],
@@ -62343,8 +62413,16 @@ var SandboxChannel = class {
     return this.waitForResponse(requestId, 3e4);
   }
   /** The PC is low on memory or CPU: the sandbox slows its builds down for `seconds`. Never waits for an answer. */
-  pressure(reason, seconds, level = "slow") {
-    this.send({ kind: "pressure", id: newId(), reason, seconds, level, createdAt: now() });
+  pressure(reason, seconds, level = "slow", diskQueue) {
+    this.send({
+      kind: "pressure",
+      id: newId(),
+      reason,
+      seconds,
+      level,
+      ...diskQueue === void 0 ? {} : { diskQueue },
+      createdAt: now()
+    });
   }
   async ping() {
     const requestId = newId();
@@ -64083,7 +64161,12 @@ var Watcher = class {
           step.state.low ? "this PC is low (" + step.reason + "): asking the sandbox to slow its builds down" : "this PC has recovered: no longer asking the sandbox to slow down"
         );
       if (step.send)
-        new SandboxChannel(this.dataPath).pressure(step.reason, REQUEST_SECONDS, step.severe ? "severe" : "slow");
+        new SandboxChannel(this.dataPath).pressure(
+          step.reason,
+          REQUEST_SECONDS,
+          step.severe ? "severe" : "slow",
+          memory?.diskQueue
+        );
     } catch (e) {
       this.note("host watchdog: " + errMsg(e));
     } finally {
@@ -76784,6 +76867,16 @@ async function ensureConpty(dataPath, refresh) {
 
 // src/cli/commands/repair/checks/sandbox.ts
 var LAUNCH_DAYS = 7;
+var PAGE_FILE_MAX_SHARE = 0.4;
+function pageFileFinding(pageFileMb, driveBytes) {
+  if (pageFileMb <= 0 || driveBytes <= 0 || pageFileMb * 1024 * 1024 <= PAGE_FILE_MAX_SHARE * driveBytes) return null;
+  return {
+    status: "warn",
+    detail: "the paging file is " + pageFileMb + " MB on a " + humanBytes(driveBytes) + " drive",
+    means: "sandbox.pageFileMb takes more than 40% of the drive, so builds and installs have little room left and the disk fills up (a full disk can freeze the sandbox).",
+    fix: "Run: sandbox config set sandbox.pageFileMb 8192 (or 0 to let Windows decide)."
+  };
+}
 var hiddenWindowsFile = (env) => path169.join(env.storageRoot, "run", "hidden-windows.json");
 var SANDBOX_CHECKS = [
   {
@@ -76797,6 +76890,16 @@ var SANDBOX_CHECKS = [
       fix: "Run: sandbox config set sandbox.vGpu false"
     } : ok("off")
   },
+  {
+    id: "sandbox-pagefile",
+    group: "Sandbox",
+    name: "Paging file size",
+    run: (env) => {
+      const mb = env.ctx.loaded.config.sandbox.pageFileMb;
+      const drive = diskUsage(env.storageRoot).find((d) => d.drive.toUpperCase() === "C:\\");
+      return pageFileFinding(mb, drive?.totalBytes ?? 0) ?? ok(mb > 0 ? mb + " MB" : "Windows' own");
+    }
+  },
   {
     id: "sandbox-exe",
     group: "Sandbox",
@@ -77679,311 +77782,6 @@ var enableSandboxRun = implement(enableSandbox, async (ctx, _input, io) => {
 });
 var lastHealthRun = implement(lastHealth, (ctx) => ({ last: readLast(ctx.storageRoot) }));
 
-// src/app/features/sandbox/sandbox.def.ts
-var ProjectSchema = external_exports.object({
-  name: external_exports.string().describe("The project"),
-  host: external_exports.string().describe("Its folder on this PC"),
-  guest: external_exports.string().describe("Its folder in the sandbox"),
-  mechanism: external_exports.string().describe("How it got into the sandbox (launch, root, boot, wsb or hcs)"),
-  here: external_exports.boolean().describe("The project of the current folder"),
-  setup: external_exports.object({ phase: external_exports.string(), message: external_exports.string() }).describe("How far its setup is"),
-  databases: external_exports.array(external_exports.object({ database: external_exports.string(), port: external_exports.number(), state: external_exports.string() })),
-  sessions: external_exports.array(external_exports.object({ id: external_exports.string(), harness: external_exports.string(), viewers: external_exports.string(), started: external_exports.string() })),
-  repoGuard: external_exports.array(external_exports.string()).describe("Repo guard findings in its folder")
-});
-var StateSchema2 = external_exports.object({
-  running: external_exports.boolean().describe("A Windows Sandbox is running"),
-  phase: external_exports.string().describe("What it is doing (ready, provisioning ...)"),
-  message: external_exports.string().optional().describe("Its last message"),
-  headless: external_exports.boolean().optional().describe("Its window is hidden"),
-  startedAt: external_exports.number().nullable().describe("When it started (ms), if known"),
-  daemon: external_exports.string().describe("The sandbox helper's answer"),
-  account: external_exports.string().nullable().describe("The Claude login it uses"),
-  syncWatcher: external_exports.boolean().describe("The background history sync runs")
-});
-var SandboxStatusSchema2 = external_exports.object({
-  /** Present when the running sandbox is another user's. */
-  shared: external_exports.object({
-    line: external_exports.string().describe('"Running, started by alice (shared with you)"'),
-    limited: external_exports.boolean().describe("Not shared with you: nothing more is shown"),
-    startedBy: external_exports.string().nullable().describe("Whose it is")
-  }).optional(),
-  sandbox: StateSchema2,
-  here: external_exports.object({ folder: external_exports.string(), project: external_exports.string().nullable(), guest: external_exports.string().nullable() }),
-  roots: external_exports.array(external_exports.object({ host: external_exports.string(), guest: external_exports.string() })),
-  projects: external_exports.array(ProjectSchema),
-  otherSessions: external_exports.array(external_exports.object({ id: external_exports.string(), harness: external_exports.string(), cwd: external_exports.string() })),
-  repoGuard: external_exports.object({ guarded: external_exports.number(), findings: external_exports.array(external_exports.string()) })
-});
-var MessageSchema5 = external_exports.object({ message: external_exports.string().describe("What happened") });
-function uptime(s) {
-  return s.running && s.startedAt ? ago(s.startedAt).replace(" ago", "") : null;
-}
-var sandboxStatus = defineQuery({
-  id: "sandbox.status",
-  title: "Sandbox status",
-  summary: "show what the sandbox is doing",
-  input: external_exports.object({}),
-  output: SandboxStatusSchema2,
-  live: { everyMs: 2500 },
-  cli: {
-    name: "status",
-    group: "Sessions",
-    json: true,
-    // The --json shape `sandbox status` has always printed.
-    shapeJson: (o) => {
-      if (o.shared?.limited) return { sandbox: { running: true, shared: false, startedBy: o.shared.startedBy } };
-      const s = o.sandbox;
-      const borrowed = o.shared?.startedBy ? { startedBy: o.shared.startedBy, shared: true } : {};
-      return {
-        sandbox: {
-          ...borrowed,
-          running: s.running,
-          phase: s.phase,
-          message: s.message,
-          headless: s.headless,
-          uptime: uptime(s),
-          daemon: s.daemon,
-          account: s.account,
-          syncWatcher: s.syncWatcher
-        },
-        here: o.here,
-        roots: o.roots,
-        projects: o.projects,
-        otherSessions: o.otherSessions,
-        repoGuard: o.repoGuard
-      };
-    }
-  }
-});
-var showWindow = defineOperation({
-  id: "sandbox.showWindow",
-  access: "control",
-  title: "Show the window",
-  summary: "show the sandbox window",
-  input: external_exports.object({}),
-  output: MessageSchema5,
-  text: (o) => o.message,
-  cli: { name: "show", group: "Sessions" }
-});
-var hideWindow = defineOperation({
-  id: "sandbox.hideWindow",
-  access: "control",
-  title: "Hide the window",
-  summary: "hide the sandbox window (it keeps running)",
-  input: external_exports.object({}),
-  output: MessageSchema5,
-  text: (o) => o.message,
-  cli: { name: "hide", group: "Sessions" }
-});
-var stopSandbox = defineOperation({
-  id: "sandbox.stop",
-  access: "control",
-  title: "Stop the sandbox\u2026",
-  summary: "shut the sandbox down (every project's sessions end)",
-  input: external_exports.object({}),
-  output: external_exports.object({ stopped: external_exports.boolean().describe("It was asked to shut down"), message: external_exports.string() }),
-  danger: true,
-  text: (o) => o.message,
-  cli: { name: "stop", group: "Agents", yes: "do not ask when other projects' sessions would end" }
-});
-var MECHANISM_TEXT = {
-  launch: "started from here",
-  root: "in a project root",
-  boot: "mapped at start",
-  wsb: "wsb share",
-  hcs: "live folder through HCS, alpha"
-};
-function projectItem2(p) {
-  return {
-    id: "project:" + p.name,
-    label: p.name,
-    icon: "project",
-    hint: p.host + "  ->  " + p.guest + "  (" + (MECHANISM_TEXT[p.mechanism] ?? "wsb share") + ")",
-    marked: p.here,
-    details: [
-      "Setup: " + p.setup.phase + (p.setup.phase === "ready" ? "" : " - " + p.setup.message),
-      ...p.databases.length ? ["Databases: " + p.databases.map((d) => d.database + " :" + d.port + " " + d.state).join(", ")] : [],
-      ...p.sessions.map((s) => "Session: " + s.harness + " " + s.id + ", " + s.viewers + ", started " + ago(s.started)),
-      ...p.repoGuard.map((f) => "Guard: " + f)
-    ]
-  };
-}
-function facts(o) {
-  const s = o.sandbox;
-  const sessions = o.projects.reduce((n, p) => n + p.sessions.length, 0) + o.otherSessions.length;
-  const fact = (id, label2, value, extra = {}) => ({
-    id,
-    label: label2,
-    value,
-    ...extra
-  });
-  return [
-    ...o.shared?.startedBy ? [fact("owner", "Started by", o.shared.startedBy)] : [],
-    // One line for what it is doing: "Ready", "Installing Rust ...", or "not running".
-    fact("state", "State", s.running ? s.message || s.phase : "not running", {
-      tone: !s.running ? "muted" : s.phase === "ready" ? "ok" : "warn"
-    }),
-    ...s.running ? [
-      fact("window", "Window", s.headless ? "hidden (sandbox show opens it)" : "shown"),
-      fact("uptime", "Uptime", uptime(s) ?? "-"),
-      // The session count is its own fact: the helper only says whether it answers.
-      fact("helper", "Helper", s.daemon === "-" ? "-" : s.daemon.startsWith("pong") ? "Responding" : s.daemon),
-      fact("sessions", "Sessions", String(sessions))
-    ] : [],
-    fact("account", "Account", s.account ?? "none selected (sandbox account use)"),
-    fact("sync", "Background sync", s.syncWatcher ? "on" : "off")
-  ];
-}
-function projectsSection(o) {
-  const roots = o.roots.map((r) => ({
-    id: "root:" + r.host,
-    label: "root",
-    icon: "folder",
-    hint: r.host + "  ->  " + r.guest + "  (every project in it opens without a restart)"
-  }));
-  const here = o.projects.some((p) => p.here);
-  return {
-    id: "projects",
-    title: "Projects",
-    items: [...o.projects.map(projectItem2), ...roots],
-    notes: [
-      here ? { text: "* = the project of this folder", tone: "muted" } : { text: o.here.folder + " is not in this sandbox (start it here: sandbox claude)", tone: "muted" }
-    ]
-  };
-}
-function guardSection(o) {
-  const findings = o.repoGuard.findings;
-  return {
-    id: "guard",
-    title: "Repo guard",
-    summary: "Watching " + plural2(o.repoGuard.guarded, "folder") + ". " + (findings.length ? plural2(findings.length, "change") + " from the sandbox were blocked:" : "Nothing from the sandbox needed blocking."),
-    items: findings.slice(-10).map((f, i) => ({ id: "guard:" + i, label: f, tone: "warn" }))
-  };
-}
-function sandboxPage(o) {
-  const notice = o.shared ? {
-    text: o.shared.line + (o.shared.limited ? "" : ". Its window is on their desktop; use its agents here."),
-    tone: "accent"
-  } : void 0;
-  if (o.shared?.limited) return { title: "Sandbox", notice, sections: [] };
-  const running = o.sandbox.running;
-  const status = {
-    id: "status",
-    title: "Status",
-    facts: facts(o),
-    // Only the window action that changes something: show a hidden window, hide a shown one.
-    actions: running ? [
-      o.sandbox.headless ? action(showWindow, {}, { key: "w", verb: "show", importance: 3 }) : action(hideWindow, {}, { key: "h", verb: "hide", importance: 3 }),
-      action(stopSandbox, {}, { key: "x", verb: "stop", importance: 1 })
-    ] : []
-  };
-  const others = {
-    id: "other-sessions",
-    title: "Other sessions",
-    items: o.otherSessions.map((s) => ({
-      id: "session:" + s.id,
-      label: "session " + s.id,
-      hint: s.harness + "  " + s.cwd
-    }))
-  };
-  return {
-    title: "Sandbox",
-    notice,
-    sections: [
-      status,
-      ...running ? [projectsSection(o)] : [],
-      ...others.items?.length ? [others] : [],
-      guardSection(o)
-    ]
-  };
-}
-var sandboxView = defineView({
-  id: "sandbox",
-  title: "Sandbox",
-  summary: "Status, projects and controls of the running sandbox.",
-  queries: { status: sandboxStatus },
-  operations: [showWindow, hideWindow, stopSandbox],
-  build: ({ status }) => sandboxPage(status)
-});
-
-// src/app/features/sandbox/sandbox.run.ts
-import path173 from "node:path";
-function limitedStatus(view, folder) {
-  const owner = view.owner;
-  return {
-    shared: { line: view.line ?? "", limited: true, startedBy: owner?.kind === "other" ? owner.user : null },
-    sandbox: {
-      running: true,
-      phase: "unknown",
-      startedAt: null,
-      daemon: "-",
-      account: null,
-      syncWatcher: false
-    },
-    here: { folder, project: null, guest: null },
-    roots: [],
-    projects: [],
-    otherSessions: [],
-    repoGuard: { guarded: 0, findings: [] }
-  };
-}
-var sandboxStatusRun = implement(sandboxStatus, async (asked) => {
-  const view = lookAtSandbox(asked);
-  if (view.limited) return limitedStatus(view, hereDir(asked));
-  const report = await new SandboxService(view.ctx).status();
-  return {
-    ...view.line ? { shared: { line: view.line, limited: false, startedBy: view.ctx.borrowed?.user ?? null } } : {},
-    ...report,
-    sandbox: { ...report.sandbox, daemon: safeText(report.sandbox.daemon) }
-  };
-});
-var showWindowRun = implement(showWindow, async (ctx, _input, io) => {
-  requireOnPc("show");
-  requireRunning();
-  await useSharedSandbox(ctx, { kind: "owner-only", what: "show the window", window: true }, typedConfirm(io));
-  new SandboxService(ctx).showWindow();
-  return { message: "Sandbox window shown." };
-});
-var hideWindowRun = implement(hideWindow, async (ctx, _input, io) => {
-  requireOnPc("hide");
-  requireRunning();
-  await useSharedSandbox(ctx, { kind: "owner-only", what: "hide the window", window: true }, typedConfirm(io));
-  io.progress("Hiding the window");
-  await new SandboxService(ctx).hideWindow();
-  return { message: "Sandbox window hidden. Bring it back with: sbx-show" };
-});
-var stopSandboxRun = implement(stopSandbox, async (asked, _input, io) => {
-  requireOnPc("stop");
-  if (!new SandboxService(asked).isRunning()) return { stopped: false, message: "No Windows Sandbox is running." };
-  const ctx = runningOwner().kind === "mine" ? asked : await useSharedSandbox(
-    asked,
-    (shared) => ({ kind: "stop", sessions: new SandboxChannel(shared.dataPath).currentSessions().length }),
-    typedConfirm(io)
-  );
-  const service = new SandboxService(ctx);
-  const { sandbox, running, others } = service.stopPlan();
-  if (running.length)
-    io.log(
-      "Stopping ends " + running.length + " session(s): " + running.map((s) => safeText(s.harness) + " in " + safeText(s.project ?? path173.win32.basename(s.cwd))).join(", ") + "."
-    );
-  const yes = await io.confirm({
-    title: others.length ? "Stop the whole sandbox?" : "Stop the sandbox?",
-    lines: others.length ? [others.length + " of them belong to other projects."] : [],
-    yes: "Stop",
-    danger: true,
-    implied: others.length === 0,
-    noTerminal: {
-      message: others.length + " of these sessions belong to other projects, so the sandbox was not stopped.",
-      fix: "Stop it anyway with: sandbox stop --yes"
-    }
-  });
-  if (!yes) cancelled();
-  io.progress("Asking the sandbox to shut down");
-  await service.shutdown(sandbox);
-  return { stopped: true, message: "Sandbox is shutting down; history and claude-mem sync back when it closes." };
-});
-
 // src/app/features/logs/logs.def.ts
 var CRASH = "@crash";
 var MAX_SHOWN = 1e3;
@@ -78083,6 +77881,323 @@ var logsView = defineView({
   build: ({ files, tail }) => logsPage(files, tail)
 });
 
+// src/app/features/sandbox/sandbox.def.ts
+var ProjectSchema = external_exports.object({
+  name: external_exports.string().describe("The project"),
+  host: external_exports.string().describe("Its folder on this PC"),
+  guest: external_exports.string().describe("Its folder in the sandbox"),
+  mechanism: external_exports.string().describe("How it got into the sandbox (launch, root, boot, wsb or hcs)"),
+  here: external_exports.boolean().describe("The project of the current folder"),
+  setup: external_exports.object({ phase: external_exports.string(), message: external_exports.string() }).describe("How far its setup is"),
+  databases: external_exports.array(external_exports.object({ database: external_exports.string(), port: external_exports.number(), state: external_exports.string() })),
+  sessions: external_exports.array(external_exports.object({ id: external_exports.string(), harness: external_exports.string(), viewers: external_exports.string(), started: external_exports.string() })),
+  repoGuard: external_exports.array(external_exports.string()).describe("Repo guard findings in its folder")
+});
+var StateSchema2 = external_exports.object({
+  running: external_exports.boolean().describe("A Windows Sandbox is running"),
+  phase: external_exports.string().describe("What it is doing (ready, provisioning ...)"),
+  message: external_exports.string().optional().describe("Its last message"),
+  headless: external_exports.boolean().optional().describe("Its window is hidden"),
+  startedAt: external_exports.number().nullable().describe("When it started (ms), if known"),
+  daemon: external_exports.string().describe("The sandbox helper's answer"),
+  account: external_exports.string().nullable().describe("The Claude login it uses"),
+  syncWatcher: external_exports.boolean().describe("The background history sync runs")
+});
+var SandboxStatusSchema2 = external_exports.object({
+  /** Present when the running sandbox is another user's. */
+  shared: external_exports.object({
+    line: external_exports.string().describe('"Running, started by alice (shared with you)"'),
+    limited: external_exports.boolean().describe("Not shared with you: nothing more is shown"),
+    startedBy: external_exports.string().nullable().describe("Whose it is")
+  }).optional(),
+  sandbox: StateSchema2,
+  here: external_exports.object({ folder: external_exports.string(), project: external_exports.string().nullable(), guest: external_exports.string().nullable() }),
+  roots: external_exports.array(external_exports.object({ host: external_exports.string(), guest: external_exports.string() })),
+  projects: external_exports.array(ProjectSchema),
+  otherSessions: external_exports.array(external_exports.object({ id: external_exports.string(), harness: external_exports.string(), cwd: external_exports.string() })),
+  repoGuard: external_exports.object({ guarded: external_exports.number(), findings: external_exports.array(external_exports.string()) }),
+  /** How the last sandbox ended when nobody closed it (it is not running now). */
+  lastEnd: external_exports.object({ text: external_exports.string().describe("What happened"), at: external_exports.string().describe("When (ISO time)") }).optional().describe("The last sandbox ended unexpectedly")
+});
+var MessageSchema5 = external_exports.object({ message: external_exports.string().describe("What happened") });
+function uptime(s) {
+  return s.running && s.startedAt ? ago(s.startedAt).replace(" ago", "") : null;
+}
+var sandboxStatus = defineQuery({
+  id: "sandbox.status",
+  title: "Sandbox status",
+  summary: "show what the sandbox is doing",
+  input: external_exports.object({}),
+  output: SandboxStatusSchema2,
+  live: { everyMs: 2500 },
+  cli: {
+    name: "status",
+    group: "Sessions",
+    json: true,
+    // The --json shape `sandbox status` has always printed.
+    shapeJson: (o) => {
+      if (o.shared?.limited) return { sandbox: { running: true, shared: false, startedBy: o.shared.startedBy } };
+      const s = o.sandbox;
+      const borrowed = o.shared?.startedBy ? { startedBy: o.shared.startedBy, shared: true } : {};
+      return {
+        sandbox: {
+          ...borrowed,
+          running: s.running,
+          phase: s.phase,
+          message: s.message,
+          headless: s.headless,
+          uptime: uptime(s),
+          daemon: s.daemon,
+          account: s.account,
+          syncWatcher: s.syncWatcher
+        },
+        here: o.here,
+        roots: o.roots,
+        projects: o.projects,
+        otherSessions: o.otherSessions,
+        repoGuard: o.repoGuard,
+        ...o.lastEnd ? { lastEnd: o.lastEnd } : {}
+      };
+    }
+  }
+});
+var showWindow = defineOperation({
+  id: "sandbox.showWindow",
+  access: "control",
+  title: "Show the window",
+  summary: "show the sandbox window",
+  input: external_exports.object({}),
+  output: MessageSchema5,
+  text: (o) => o.message,
+  cli: { name: "show", group: "Sessions" }
+});
+var hideWindow = defineOperation({
+  id: "sandbox.hideWindow",
+  access: "control",
+  title: "Hide the window",
+  summary: "hide the sandbox window (it keeps running)",
+  input: external_exports.object({}),
+  output: MessageSchema5,
+  text: (o) => o.message,
+  cli: { name: "hide", group: "Sessions" }
+});
+var stopSandbox = defineOperation({
+  id: "sandbox.stop",
+  access: "control",
+  title: "Stop the sandbox\u2026",
+  summary: "shut the sandbox down (every project's sessions end)",
+  input: external_exports.object({}),
+  output: external_exports.object({ stopped: external_exports.boolean().describe("It was asked to shut down"), message: external_exports.string() }),
+  danger: true,
+  text: (o) => o.message,
+  cli: { name: "stop", group: "Agents", yes: "do not ask when other projects' sessions would end" }
+});
+var MECHANISM_TEXT = {
+  launch: "started from here",
+  root: "in a project root",
+  boot: "mapped at start",
+  wsb: "wsb share",
+  hcs: "live folder through HCS, alpha"
+};
+function projectItem2(p) {
+  return {
+    id: "project:" + p.name,
+    label: p.name,
+    icon: "project",
+    hint: p.host + "  ->  " + p.guest + "  (" + (MECHANISM_TEXT[p.mechanism] ?? "wsb share") + ")",
+    marked: p.here,
+    details: [
+      "Setup: " + p.setup.phase + (p.setup.phase === "ready" ? "" : " - " + p.setup.message),
+      ...p.databases.length ? ["Databases: " + p.databases.map((d) => d.database + " :" + d.port + " " + d.state).join(", ")] : [],
+      ...p.sessions.map((s) => "Session: " + s.harness + " " + s.id + ", " + s.viewers + ", started " + ago(s.started)),
+      ...p.repoGuard.map((f) => "Guard: " + f)
+    ]
+  };
+}
+function facts(o) {
+  const s = o.sandbox;
+  const sessions = o.projects.reduce((n, p) => n + p.sessions.length, 0) + o.otherSessions.length;
+  const fact = (id, label2, value, extra = {}) => ({
+    id,
+    label: label2,
+    value,
+    ...extra
+  });
+  return [
+    ...o.shared?.startedBy ? [fact("owner", "Started by", o.shared.startedBy)] : [],
+    // One line for what it is doing: "Ready", "Installing Rust ...", or "not running".
+    fact("state", "State", s.running ? s.message || s.phase : "not running", {
+      tone: !s.running ? "muted" : s.phase === "ready" ? "ok" : "warn"
+    }),
+    ...s.running ? [
+      fact("window", "Window", s.headless ? "hidden (sandbox show opens it)" : "shown"),
+      fact("uptime", "Uptime", uptime(s) ?? "-"),
+      // The session count is its own fact: the helper only says whether it answers.
+      fact("helper", "Helper", s.daemon === "-" ? "-" : s.daemon.startsWith("pong") ? "Responding" : s.daemon),
+      fact("sessions", "Sessions", String(sessions))
+    ] : [],
+    ...o.lastEnd ? [fact("lastEnd", "Last sandbox", o.lastEnd.text, { tone: "warn" })] : [],
+    fact("account", "Account", s.account ?? "none selected (sandbox account use)"),
+    fact("sync", "Background sync", s.syncWatcher ? "on" : "off")
+  ];
+}
+function projectsSection(o) {
+  const roots = o.roots.map((r) => ({
+    id: "root:" + r.host,
+    label: "root",
+    icon: "folder",
+    hint: r.host + "  ->  " + r.guest + "  (every project in it opens without a restart)"
+  }));
+  const here = o.projects.some((p) => p.here);
+  return {
+    id: "projects",
+    title: "Projects",
+    items: [...o.projects.map(projectItem2), ...roots],
+    notes: [
+      here ? { text: "* = the project of this folder", tone: "muted" } : { text: o.here.folder + " is not in this sandbox (start it here: sandbox claude)", tone: "muted" }
+    ]
+  };
+}
+function guardSection(o) {
+  const findings = o.repoGuard.findings;
+  return {
+    id: "guard",
+    title: "Repo guard",
+    summary: "Watching " + plural2(o.repoGuard.guarded, "folder") + ". " + (findings.length ? plural2(findings.length, "change") + " from the sandbox were blocked:" : "Nothing from the sandbox needed blocking."),
+    items: findings.slice(-10).map((f, i) => ({ id: "guard:" + i, label: f, tone: "warn" }))
+  };
+}
+function sandboxPage(o) {
+  const notice = o.shared ? {
+    text: o.shared.line + (o.shared.limited ? "" : ". Its window is on their desktop; use its agents here."),
+    tone: "accent"
+  } : void 0;
+  if (o.shared?.limited) return { title: "Sandbox", notice, sections: [] };
+  const running = o.sandbox.running;
+  const status = {
+    id: "status",
+    title: "Status",
+    facts: facts(o),
+    // Only the window action that changes something: show a hidden window, hide a shown one.
+    actions: running ? [
+      o.sandbox.headless ? action(showWindow, {}, { key: "w", verb: "show", importance: 3 }) : action(hideWindow, {}, { key: "h", verb: "hide", importance: 3 }),
+      action(stopSandbox, {}, { key: "x", verb: "stop", importance: 1 })
+    ] : o.lastEnd ? [
+      link({ kind: "view", view: "logs", params: { name: CRASH } }, "Show crash report", {
+        verb: "show",
+        importance: 2
+      })
+    ] : []
+  };
+  const others = {
+    id: "other-sessions",
+    title: "Other sessions",
+    items: o.otherSessions.map((s) => ({
+      id: "session:" + s.id,
+      label: "session " + s.id,
+      hint: s.harness + "  " + s.cwd
+    }))
+  };
+  return {
+    title: "Sandbox",
+    notice,
+    sections: [
+      status,
+      ...running ? [projectsSection(o)] : [],
+      ...others.items?.length ? [others] : [],
+      guardSection(o)
+    ]
+  };
+}
+var sandboxView = defineView({
+  id: "sandbox",
+  title: "Sandbox",
+  summary: "Status, projects and controls of the running sandbox.",
+  queries: { status: sandboxStatus },
+  operations: [showWindow, hideWindow, stopSandbox],
+  build: ({ status }) => sandboxPage(status)
+});
+
+// src/app/features/sandbox/sandbox.run.ts
+import path173 from "node:path";
+function limitedStatus(view, folder) {
+  const owner = view.owner;
+  return {
+    shared: { line: view.line ?? "", limited: true, startedBy: owner?.kind === "other" ? owner.user : null },
+    sandbox: {
+      running: true,
+      phase: "unknown",
+      startedAt: null,
+      daemon: "-",
+      account: null,
+      syncWatcher: false
+    },
+    here: { folder, project: null, guest: null },
+    roots: [],
+    projects: [],
+    otherSessions: [],
+    repoGuard: { guarded: 0, findings: [] }
+  };
+}
+var sandboxStatusRun = implement(sandboxStatus, async (asked) => {
+  const view = lookAtSandbox(asked);
+  if (view.limited) return limitedStatus(view, hereDir(asked));
+  const report = await new SandboxService(view.ctx).status();
+  const { storageRoot, dataPath } = view.ctx;
+  const lastEnd = readLastEnd(() => new LifeRecord(storageRoot, dataPath).read(), dataPath, report.sandbox.running);
+  return {
+    ...lastEnd ? { lastEnd } : {},
+    ...view.line ? { shared: { line: view.line, limited: false, startedBy: view.ctx.borrowed?.user ?? null } } : {},
+    ...report,
+    sandbox: { ...report.sandbox, daemon: safeText(report.sandbox.daemon) }
+  };
+});
+var showWindowRun = implement(showWindow, async (ctx, _input, io) => {
+  requireOnPc("show");
+  requireRunning();
+  await useSharedSandbox(ctx, { kind: "owner-only", what: "show the window", window: true }, typedConfirm(io));
+  new SandboxService(ctx).showWindow();
+  return { message: "Sandbox window shown." };
+});
+var hideWindowRun = implement(hideWindow, async (ctx, _input, io) => {
+  requireOnPc("hide");
+  requireRunning();
+  await useSharedSandbox(ctx, { kind: "owner-only", what: "hide the window", window: true }, typedConfirm(io));
+  io.progress("Hiding the window");
+  await new SandboxService(ctx).hideWindow();
+  return { message: "Sandbox window hidden. Bring it back with: sbx-show" };
+});
+var stopSandboxRun = implement(stopSandbox, async (asked, _input, io) => {
+  requireOnPc("stop");
+  if (!new SandboxService(asked).isRunning()) return { stopped: false, message: "No Windows Sandbox is running." };
+  const ctx = runningOwner().kind === "mine" ? asked : await useSharedSandbox(
+    asked,
+    (shared) => ({ kind: "stop", sessions: new SandboxChannel(shared.dataPath).currentSessions().length }),
+    typedConfirm(io)
+  );
+  const service = new SandboxService(ctx);
+  const { sandbox, running, others } = service.stopPlan();
+  if (running.length)
+    io.log(
+      "Stopping ends " + running.length + " session(s): " + running.map((s) => safeText(s.harness) + " in " + safeText(s.project ?? path173.win32.basename(s.cwd))).join(", ") + "."
+    );
+  const yes = await io.confirm({
+    title: others.length ? "Stop the whole sandbox?" : "Stop the sandbox?",
+    lines: others.length ? [others.length + " of them belong to other projects."] : [],
+    yes: "Stop",
+    danger: true,
+    implied: others.length === 0,
+    noTerminal: {
+      message: others.length + " of these sessions belong to other projects, so the sandbox was not stopped.",
+      fix: "Stop it anyway with: sandbox stop --yes"
+    }
+  });
+  if (!yes) cancelled();
+  io.progress("Asking the sandbox to shut down");
+  await service.shutdown(sandbox);
+  return { stopped: true, message: "Sandbox is shutting down; history and claude-mem sync back when it closes." };
+});
+
 // src/app/features/logs/logs.run.ts
 function lastLines(text, n) {
   return text.split("\n").slice(-n).join("\n");
@@ -80442,7 +80557,7 @@ async function attachOpened(ctx, session) {
     nextStep("sandbox attach " + session);
     return 0;
   }
-  const { attach: attach2 } = await import("./chunk-M4OM632I.js");
+  const { attach: attach2 } = await import("./chunk-M6XUQK53.js");
   return attach2({ ...ctx, options: { ...ctx.options, positionals: [session] } });
 }
 function definitionHandler(def) {
@@ -81292,13 +81407,13 @@ export {
   StorageHistory,
   planOffer,
   staleMountNote,
+  RunDir,
   LifeRecord,
   shouldReopen,
   describeLast,
   SessionLedger,
   currentUserName,
   runningOwner,
-  RunDir,
   describeCopy,
   takeHiddenInstallNotice,
   protectPrivateFolder,
@@ -81328,14 +81443,14 @@ export {
   showData,
   cleanData,
   dataPage,
-  sandboxStatus,
-  sandboxPage,
-  listProjects,
-  projectsPage,
   CRASH,
   listLogs,
   tailLog,
   logsPage,
+  sandboxStatus,
+  sandboxPage,
+  listProjects,
+  projectsPage,
   listAudit,
   auditPage,
   auditArgv,