windows-development-sandbox 1.18.4 → 1.23.0

package/dist/runtime/netproxy.js

@@ -25379,6 +25379,22 @@ var DatabasesSchema = external_exports.strictObject({
   })
 });
 
+// src/core/schema/codex.ts
+var CodexSchema = external_exports.strictObject({
+  sandboxMode: external_exports.enum(["danger-full-access", "workspace-write", "read-only"]).describe(
+    "Codex's own sandbox. Inside Windows Sandbox Codex's own sandbox only slows it down (it re-grants file permissions over your profile at every boot), so the default is danger-full-access: Windows Sandbox is the sandbox."
+  ),
+  approvalPolicy: external_exports.enum(["never", "on-request", "on-failure", "untrusted"]).describe('When Codex asks before it runs a command. "never" with danger-full-access starts it with no questions.'),
+  model: external_exports.string().max(100).regex(/^[A-Za-z0-9._:/-]*$/, "letters, digits and . _ : / - only").describe("The model Codex uses. Empty = Codex's own default."),
+  reasoningEffort: external_exports.enum(["default", "minimal", "low", "medium", "high", "xhigh"]).describe(`How hard Codex thinks. "default" = Codex's own default.`),
+  windowsSandbox: external_exports.enum(["off", "unelevated", "elevated"]).describe(
+    `Codex's Windows sandbox mode in its config.toml. "off" removes the setting so Codex does not set up its sandbox users and firewall rules at every boot.`
+  ),
+  mcpLoginsInFile: external_exports.boolean().describe(
+    `Keep the sign-ins of Codex's MCP servers in a file in the saved Codex folder (mcp_oauth_credentials_store = "file"), so they survive between sandboxes. A value you set in config.toml is kept.`
+  )
+});
+
 // src/core/schema/harness.ts
 var SubfolderSchema = external_exports.string().regex(/^(?!.*(^|[\\/])\.\.([\\/]|$))[A-Za-z0-9._ -]+([\\/][A-Za-z0-9._ -]+)*$/, "a plain relative folder");
 var HarnessHomeSchema = external_exports.strictObject({
@@ -25438,15 +25454,17 @@ var SecretsSchema = external_exports.strictObject({
   )
 });
 var AttachSchema = external_exports.strictObject({
-  enabled: external_exports.boolean().describe("Allow sandbox claude --terminal / sandbox attach from this PC."),
+  enabled: external_exports.boolean().describe(
+    "Allow attaching this PC's terminal to a session (the terminal option when starting an agent, and attach)."
+  ),
   reuseSession: external_exports.boolean().describe(
-    "sandbox claude -t in a running sandbox reattaches to this folder's session when no terminal on this PC is attached to it (--new always starts another)."
+    "Starting an agent with a terminal in a running sandbox reattaches to this folder's session when no terminal on this PC is attached to it (starting a new session on purpose always starts another)."
   ),
   auto: external_exports.boolean().describe(
     "Starting an agent attaches this terminal automatically, as if you passed -t (only in an interactive terminal)."
   ),
   autoHide: external_exports.boolean().describe(
-    "Hide the Windows Sandbox window whenever this terminal attaches; it keeps running (sandbox show brings it back)."
+    "Hide the Windows Sandbox window whenever this terminal attaches; it keeps running (Sandbox > Status shows it again)."
   ),
   confirmCtrlC: external_exports.boolean().describe(
     'In an attached terminal and the sandbox window, a single Ctrl+C is held back (the title says so) and only a second one within 1.5 seconds reaches the agent: a Ctrl+C meant as "copy" no longer stops it. Esc still stops an agent.'
@@ -25463,7 +25481,7 @@ var ClaudeProfileSchema = external_exports.strictObject({
   hostDir: external_exports.string().describe('Your Claude folder, or "auto" (~/.claude or CLAUDE_CONFIG_DIR).'),
   include: external_exports.array(external_exports.string().regex(/^[A-Za-z0-9._-]+$/)).describe("Files and folders copied from it."),
   globalStateFile: external_exports.string().describe('Your .claude.json, or "auto". Empty string = do not copy.'),
-  copyCredentials: external_exports.boolean().describe("Copy your Claude LOGIN into the sandbox. Prefer sandbox account instead."),
+  copyCredentials: external_exports.boolean().describe("Copy your Claude LOGIN into the sandbox. Prefer saving the login in Accounts instead."),
   overwrite: external_exports.boolean().describe("Refresh these settings from this PC on every launch."),
   sharePluginsAcrossAccounts: external_exports.boolean().describe(
     "When you switch Claude accounts, copy your Claude plugins (and which ones are enabled) into a data set that has none yet. Off by default: plugins are code that runs in your sessions."
@@ -25492,7 +25510,7 @@ var MappingSchema = external_exports.strictObject({
 });
 var SandboxSchema = external_exports.strictObject({
   engine: external_exports.enum(["windows-sandbox", "hcs"]).describe(
-    '(alpha) What runs the sandbox. "windows-sandbox" = Windows Sandbox (the default: desktop, Windows Terminal, GPU, clipboard, audio, printers). "hcs" = a headless Hyper-V isolated Server Core container for agents (no desktop, GPU or clipboard); it needs Windows features and an image on this PC (sandbox engine check hcs lists what is missing), and starting it is not enabled yet in this alpha. sandbox engine shows what each engine can do. Yours only: a project file (.sandbox-config.json) cannot set it.'
+    '(alpha) What runs the sandbox. "windows-sandbox" = Windows Sandbox (the default: desktop, Windows Terminal, GPU, clipboard, audio, printers). "hcs" = a headless Hyper-V isolated Server Core container for agents (no desktop, GPU or clipboard); it needs Windows features and an image on this PC (Maintenance > Engine lists what is missing), and starting it is not enabled yet in this alpha. Maintenance > Engine shows what each engine can do. Yours only: a project file (.sandbox-config.json) cannot set it.'
   ),
   memoryMb: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(2048)]).describe(
     'Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 4 GB more with vGPU): a bigger value is lowered.'
@@ -25519,7 +25537,7 @@ var SandboxSchema = external_exports.strictObject({
   ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
   clipboard: external_exports.boolean().describe(
-    "Shared clipboard between this PC and the sandbox. Also lets an agent's copy (in sandbox attach) reach this PC's clipboard."
+    "Shared clipboard between this PC and the sandbox. Also lets an agent's copy (in an attached terminal) reach this PC's clipboard."
   ),
   audioInput: external_exports.boolean().describe("Microphone access."),
   videoInput: external_exports.boolean().describe("Camera access."),
@@ -25570,7 +25588,7 @@ var NetworkSchema = external_exports.strictObject({
 });
 var AuditSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "Keep an audit log on this PC of what your agents did: programs started (with their command lines, secrets hidden), files changed in the projects, git commits, sessions, and what the repo guard caught, each linked to the agent session that did it where that can be known. The sandbox cannot change it. Read it with sandbox audit or on the Activity page."
+    "Keep an audit log on this PC of what your agents did: programs started (with their command lines, secrets hidden), files changed in the projects, git commits, sessions, and what the repo guard caught, each linked to the agent session that did it where that can be known. The sandbox cannot change it. Read it on the Activity page."
   ),
   days: external_exports.number().int().min(1).max(365).describe(
     "Days the audit log is kept (1 to 30; a larger number keeps 30); older days are deleted when a sandbox starts and once a day."
@@ -25691,6 +25709,9 @@ var ToolchainsSchema = external_exports.strictObject({
     keepInstallFiles: external_exports.boolean().describe(
       "Keep an offline copy of the Visual Studio install files in tools\\visualstudio (~10 GB, made once), so later boots install without downloading them again. Skipped while that disk has too little room."
     ),
+    visualStudio: external_exports.enum(["full", "autosdk"]).describe(
+      `"full": install Visual Studio Community (the engine finds it through the Setup API; ~10 GB, redone every boot). "autosdk" (experimental): skip Visual Studio and build an Unreal AutoSDK tree from the portable MSVC in tools\\unreal\\autosdk (kept between sandboxes); UnrealBuildTool finds MSVC through AutoSDK, but the editor's Visual Studio integration is not available. Needs toolchains.msvc (turned on for you).`
+    ),
     persistEngines: external_exports.boolean().describe(
       "Engines the Epic Games Launcher installs go to tools\\unreal\\engines (kept between sandboxes, 40-60 GB each) and are registered with the launcher again every boot. Off: they go on the sandbox disk and are lost when it closes. Engines installed on this PC can be mapped instead (pcInstalls.unrealEngines)."
     ),
@@ -25911,6 +25932,114 @@ var ToolchainsSchema = external_exports.strictObject({
   )
 });
 
+// src/shared/apps/catalogue-agents-web.ts
+var PERPLEXITY_MCP_VERSION = "1.3.0";
+var COMET_MCP_VERSION = "2.3.0";
+var CHROME_DEVTOOLS_MCP_VERSION = "1.12.0";
+var BROWSER_USE_VERSION = "0.13.14";
+var PERPLEXITY_COMPUTER_MCP_URL = "https://www.perplexity.ai/rest/computer/mcp";
+var COMET_SIGNER = {
+  subject: ['^CN="?PERPLEXITY AI, INC\\.?"?(,|$)', '(^|, )O="?PERPLEXITY AI, INC\\.?"?(,|$)'],
+  issuer: ["^CN=GlobalSign GCC R45 EV CodeSigning CA 2020(,|$)"]
+};
+var EDGE_EXE = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe";
+var AGENTS_WEB_APPS = [
+  {
+    id: "perplexity-mcp",
+    name: "Perplexity MCP (API)",
+    category: "agents",
+    about: "Web search, answers and deep research from Perplexity's API in Claude Code and Codex (perplexity_search, perplexity_ask, perplexity_research, perplexity_reason): Perplexity's own @perplexity-ai/mcp-server. Needs your Perplexity API key in Accounts; API use is billed separately from Perplexity Pro.",
+    size: "30 MB",
+    source: { locked: "npm", package: "@perplexity-ai/mcp-server", version: PERPLEXITY_MCP_VERSION },
+    exe: "perplexity-mcp.cmd",
+    service: true,
+    mcp: {
+      name: "sbx-perplexity",
+      script: "node_modules/@perplexity-ai/mcp-server/dist/index.js",
+      envVars: ["PERPLEXITY_API_KEY"],
+      codex: true
+    },
+    plugsInto: "Claude Code and Codex as the MCP server sbx-perplexity; the key comes from Accounts as PERPLEXITY_API_KEY, never from a file",
+    userOnly: true
+  },
+  {
+    id: "perplexity-computer-mcp",
+    name: "Perplexity Computer MCP",
+    category: "agents",
+    about: "Hands tasks to Perplexity Computer, Perplexity's cloud agent (it browses and works in its own cloud computer), from Claude Code and Codex: Perplexity's official remote MCP server. Nothing is installed. Sign in with your Perplexity account the first time (Claude Code: /mcp; Codex: codex mcp login sbx-perplexity-computer); tasks spend your Computer credits.",
+    size: "0 MB",
+    source: { remote: true },
+    exe: "",
+    service: true,
+    mcp: { name: "sbx-perplexity-computer", url: PERPLEXITY_COMPUTER_MCP_URL, codex: true },
+    plugsInto: "Claude Code and Codex as the remote MCP server sbx-perplexity-computer; its sign-in is kept with your agent login",
+    userOnly: true
+  },
+  {
+    id: "comet",
+    name: "Comet (Perplexity browser)",
+    category: "browsers",
+    about: "Perplexity's agentic browser (Chromium), unpacked to run portable with its own profile on the sandbox's disk. With accounts.comet.share on, your perplexity.ai sign-in is kept for the next sandboxes. Its assistant acts on the pages it reads, so a page can try to steer it: browse only what you would let it act on.",
+    size: "600 MB",
+    source: { resolve: "comet" },
+    unpack: "chromium",
+    exe: "comet.exe",
+    needs: ["7zip"],
+    signer: COMET_SIGNER,
+    userOnly: true
+  },
+  {
+    id: "comet-mcp",
+    name: "Comet MCP",
+    category: "agents",
+    about: "Lets Claude Code and Codex hand web tasks to Comet's own assistant and read its answers (hanzili/comet-mcp). Needs the Comet app: start Comet from its shortcut first, so the agent uses the sandbox's Comet profile and your sign-in.",
+    size: "15 MB",
+    source: { locked: "npm", package: "comet-mcp", version: COMET_MCP_VERSION },
+    exe: "comet-mcp.cmd",
+    service: true,
+    mcp: { name: "sbx-comet", script: "node_modules/comet-mcp/dist/index.js", codex: true },
+    plugsInto: "Claude Code and Codex as the MCP server sbx-comet, talking to Comet's DevTools on 127.0.0.1:9222",
+    userOnly: true
+  },
+  {
+    id: "chrome-devtools-mcp",
+    name: "Chrome DevTools MCP",
+    category: "agents",
+    about: "Lets Claude Code and Codex drive and inspect a browser with DevTools: navigate, click, read the console and network, record performance traces (ChromeDevTools/chrome-devtools-mcp). It starts Microsoft Edge with a throwaway profile; Google's usage statistics and CrUX lookups are off.",
+    size: "40 MB",
+    source: { locked: "npm", package: "chrome-devtools-mcp", version: CHROME_DEVTOOLS_MCP_VERSION },
+    exe: "chrome-devtools-mcp.cmd",
+    service: true,
+    mcp: {
+      name: "sbx-chrome-devtools",
+      script: "node_modules/chrome-devtools-mcp/build/src/bin/chrome-devtools-mcp.js",
+      args: ["--executablePath", EDGE_EXE, "--isolated", "--no-usage-statistics", "--no-performance-crux"],
+      codex: true
+    },
+    plugsInto: "Claude Code and Codex as the MCP server sbx-chrome-devtools (with Edge)",
+    userOnly: true
+  },
+  {
+    id: "browser-use-mcp",
+    name: "Browser Use MCP",
+    category: "agents",
+    about: "Browser automation for agents from Browser Use (browser-use --mcp): open pages, click, type, read them, and hand a whole task to Browser Use's own agent (that one needs an OpenAI or Anthropic API key). It finds Edge in the sandbox; its telemetry is off.",
+    size: "250 MB",
+    source: { locked: "uv", package: "browser-use", version: BROWSER_USE_VERSION },
+    exe: "browser-use.exe",
+    service: true,
+    mcp: {
+      name: "sbx-browser-use",
+      program: true,
+      args: ["--mcp"],
+      env: { ANONYMIZED_TELEMETRY: "false" },
+      codex: true
+    },
+    plugsInto: "Claude Code and Codex as the MCP server sbx-browser-use",
+    userOnly: true
+  }
+];
+
 // src/shared/apps/catalogue-gamedev.ts
 var GAMEDEV_APPS = [];
 
@@ -25918,7 +26047,38 @@ var GAMEDEV_APPS = [];
 var MOBILE_APPS = [];
 
 // src/shared/apps/catalogue-modding.ts
-var MODDING_APPS = [];
+var MODDING_APPS = [
+  {
+    id: "lua-language-server",
+    name: "Lua Language Server",
+    category: "cli",
+    about: "The Lua language server (LuaLS): completion, diagnostics and go-to-definition for Lua in editors and agents that speak LSP. FiveM resources use Lua 5.4 (lua54 in fxmanifest.lua).",
+    size: "15 MB",
+    source: { github: "LuaLS/lua-language-server", asset: "^lua-language-server-[\\d.]+-win32-x64\\.zip$" },
+    exe: "lua-language-server.exe",
+    cli: true
+  },
+  {
+    id: "stylua",
+    name: "StyLua",
+    category: "cli",
+    about: "An opinionated Lua formatter (`stylua .`), configured with a stylua.toml in the project.",
+    size: "6 MB",
+    source: { github: "JohnnyMorganz/StyLua", asset: "^stylua-windows-x86_64\\.zip$" },
+    exe: "stylua.exe",
+    cli: true
+  },
+  {
+    id: "selene",
+    name: "selene",
+    category: "cli",
+    about: 'A Lua linter (`selene .`), configured with a selene.toml (std = "lua54", and a standard library file for the FiveM / RedM globals).',
+    size: "7 MB",
+    source: { github: "Kampfkarren/selene", asset: "^selene-[\\d.]+-windows\\.zip$" },
+    exe: "selene.exe",
+    cli: true
+  }
+];
 
 // src/shared/apps/catalogue.ts
 var gh = (github, asset) => ({ github, asset });
@@ -26752,7 +26912,7 @@ var CORE_APPS = [
     cli: true
   }
 ];
-var APPS = [...CORE_APPS, ...GAMEDEV_APPS, ...MODDING_APPS, ...MOBILE_APPS];
+var APPS = [...CORE_APPS, ...GAMEDEV_APPS, ...MODDING_APPS, ...MOBILE_APPS, ...AGENTS_WEB_APPS];
 
 // src/core/schema/apps.ts
 var CATALOGUE_IDS = APPS.filter((a) => !a.setting).map((a) => a.id);
@@ -26822,7 +26982,7 @@ var ProjectsSchema = external_exports.strictObject({
 var RESUME_SESSIONS = ["ask", "always", "afterCrash", "never"];
 var ResumeSchema = external_exports.strictObject({
   sessions: external_exports.enum(RESUME_SESSIONS).describe(
-    'When a sandbox starts after one that had agent sessions: "ask" lists them and asks whether to reopen them (without a terminal it prints the command sandbox resume), "always" reopens them, "afterCrash" reopens them only when the last sandbox ended unexpectedly, "never" leaves it to sandbox resume. Terminal tabs you opened yourself in the sandbox are never reopened.'
+    'When a sandbox starts after one that had agent sessions: "ask" lists them and asks whether to reopen them (without a terminal it only says they can be reopened), "always" reopens them, "afterCrash" reopens them only when the last sandbox ended unexpectedly, "never" leaves it to you (Sessions reopens them). Terminal tabs you opened yourself in the sandbox are never reopened.'
   ),
   restartAfterCrash: external_exports.boolean().describe(
     "When the sandbox ends because Windows Sandbox crashed or ran out of memory, start it again by itself and reopen its sessions (at most 3 times in 6 hours)."
@@ -26841,14 +27001,14 @@ var RemoteUserSchema = external_exports.strictObject({
 });
 var WebLanSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "(Beta) Devices on your network (a phone): an HTTPS address on this PC for devices you pair with a one-time code (sandbox web pair). Needs a firewall rule (sandbox web lan on asks Windows once). Off: every paired device is signed out."
+    "(Beta) Devices on your network (a phone): an HTTPS address on this PC for devices you pair with a one-time code (Remote access). Needs a firewall rule (turning it on asks Windows once). Off: every paired device is signed out."
   ),
   port: external_exports.number().int().min(1024).max(65535).describe("HTTPS port for paired devices on your network."),
   address: external_exports.string().trim().max(15).regex(/^$|^\d{1,3}(\.\d{1,3}){3}$/, "an IPv4 address or empty").describe("This PC's private address to listen on. Empty: the one of its network adapter (never a public one).")
 });
 var WebRemoteSchema = external_exports.strictObject({
   windowsSignIn: external_exports.boolean().describe(
-    "(Beta) Other Windows users of this PC named in web.remote.users sign in to your web UI (and sandbox remote) with their own Windows account: no password, no link."
+    "(Beta) Other Windows users of this PC named in web.remote.users sign in to your web UI (and the remote menu) with their own Windows account: no password, no link."
   ),
   users: external_exports.array(RemoteUserSchema).max(32).describe("Who else may sign in with Windows, and their role (view or control)."),
   rememberDays: external_exports.number().int().min(1).max(90).describe(
@@ -26858,7 +27018,7 @@ var WebRemoteSchema = external_exports.strictObject({
 });
 var WebSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "(Beta) The web UI: your sandbox sessions in a browser on this PC (http://127.0.0.1:<port>, this PC only). On: every sandbox start also starts it in the background (it keeps running until sandbox web stop or a restart of the PC). Off: only sandbox web start runs it. Open it signed in with sandbox web open."
+    "(Beta) The web UI: your sessions in a browser on this PC (http://127.0.0.1:<port>, this PC only). On: every start of a sandbox also starts it in the background (it keeps running until you stop it in Maintenance > Web UI or restart the PC). Off: it runs only when you start it there. Open it signed in from the same page."
   ),
   port: external_exports.number().int().min(1024).max(65535).describe("Port of the web UI on 127.0.0.1 (this PC only). Pick another when it is taken."),
   openOnLaunch: external_exports.boolean().describe("(Beta) With the web UI on: open it in your browser, already signed in, every time a sandbox starts."),
@@ -26869,7 +27029,7 @@ var WebSchema = external_exports.strictObject({
 var VPN_PROVIDERS = ["nordvpn", "openvpn-file", "wireguard-file"];
 var VpnSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "(Alpha: not yet tried on a real PC) Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (sandbox vpn login). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."
+    "(Alpha: not yet tried on a real PC) Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (Settings > Network > VPN). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."
   ),
   provider: external_exports.enum(VPN_PROVIDERS).describe(
     "nordvpn: a recommended NordVPN server is picked at every launch. openvpn-file: your own .ovpn file (configFile). wireguard-file: your own WireGuard .conf (configFile), e.g. from your company."
@@ -26887,13 +27047,14 @@ var VpnSchema = external_exports.strictObject({
 // src/core/schema/github.ts
 var GithubSchema = external_exports.strictObject({
   shareToken: external_exports.boolean().describe(
-    'Give each sandbox the GitHub token you saved with `sandbox github login` (best a fine-grained token limited to some repositories and permissions), so gh and https git work there without logging in. Only with provisioning.git.access "full". The agent in the sandbox can read the token and use it for whatever it allows. A project file (.sandbox-config.json) cannot turn this on.'
+    'Give each sandbox the GitHub token you saved in Accounts (best a fine-grained token limited to some repositories and permissions), so gh and https git work there without logging in. Only with provisioning.git.access "full". The agent in the sandbox can read the token and use it for whatever it allows. A project file (.sandbox-config.json) cannot turn this on.'
   )
 });
 
 // src/shared/accounts/kinds.ts
 var AGENT_CAN_USE = "The agent in the sandbox can use this sign-in while it is there.";
 var ONE_PLACE = "It works in one sandbox at a time: a second sandbox starts without it while the first one runs.";
+var PERPLEXITY_KEY_PATTERN = /^pplx-[A-Za-z0-9_-]{8,200}$/;
 var SERVICE_SPECS = {
   epic: {
     kind: "epic",
@@ -26947,19 +27108,28 @@ var SERVICE_SPECS = {
     kind: "cfx",
     label: "Cfx.re (FiveM / RedM server key)",
     usedBy: ["fivem"],
-    sources: ["typed"],
+    sources: ["typed", "file"],
     singleHolder: false,
     returns: false,
+    // `import cfx --from` reads a whole server.cfg (they often run to tens of KB); the payload itself is tiny.
     maxBytes: 4 * 1024,
+    maxFileBytes: 256 * 1024,
     warnings: [AGENT_CAN_USE + " Anyone with the key can run a server under your Cfx.re account."],
     fields: [
-      { name: "licenseKey", label: "Server licence key (cfxk_...)", secret: true, pattern: /^cfxk_[A-Za-z0-9_]+$/ },
+      {
+        name: "licenseKey",
+        label: "Server licence key (cfxk_...)",
+        secret: true,
+        pattern: /^cfxk_[A-Za-z0-9_]+$/,
+        only: "typed"
+      },
       {
         name: "steamWebApiKey",
         label: "Steam Web API key (optional)",
         secret: true,
         optional: true,
-        pattern: /^[A-F0-9]{32}$/
+        pattern: /^[A-F0-9]{32}$/,
+        only: "typed"
       }
     ]
   },
@@ -27013,33 +27183,77 @@ var SERVICE_SPECS = {
       { name: "issuerId", label: "Issuer ID", secret: false },
       { name: "keyId", label: "Key ID", secret: false, pattern: /^[A-Z0-9]{10}$/ }
     ]
+  },
+  perplexity: {
+    kind: "perplexity",
+    label: "Perplexity API key",
+    usedBy: ["perplexity"],
+    sources: ["pc", "file", "typed"],
+    singleHolder: false,
+    returns: false,
+    maxBytes: 1024,
+    maxFileBytes: 64 * 1024,
+    warnings: [
+      AGENT_CAN_USE + " It can read the key and spend your API credit: use a separate API key with a spending limit.",
+      "Perplexity Pro does not include API use; the API key is billed separately.",
+      "Only the variable PERPLEXITY_API_KEY of the agent gets it: nothing in the sandbox writes it to a file."
+    ],
+    fields: [
+      {
+        name: "apiKey",
+        label: "Perplexity API key (pplx-...)",
+        secret: true,
+        pattern: PERPLEXITY_KEY_PATTERN,
+        only: "typed"
+      }
+    ]
+  },
+  comet: {
+    kind: "comet",
+    label: "Comet (Perplexity browser)",
+    usedBy: ["comet"],
+    sources: ["sandbox"],
+    singleHolder: false,
+    returns: true,
+    maxBytes: 256 * 1024,
+    warnings: [
+      AGENT_CAN_USE + " It can act as you in Comet and spend your Perplexity Computer credits; agentic browsing is open to prompt injection from the pages it reads.",
+      "Your Comet sign-in can't be copied from this PC: Windows locks it to your PC account. Sign in once inside a sandbox and it is kept for the next ones.",
+      "Only the perplexity.ai sign-in cookies are kept: never saved passwords, other sites, localStorage or history. Never import your main browser profile.",
+      "Several sandboxes can use it at once: the sign-in the last one hands back is kept."
+    ],
+    fields: []
   }
 };
+var APP_USER_TEXT = {
+  perplexity: "the Perplexity MCP app",
+  comet: "the Comet app"
+};
+function usedByText(usedBy) {
+  return usedBy.map((u) => u in APP_USER_TEXT ? APP_USER_TEXT[u] : u).join(" or ");
+}
 
 // src/core/schema/accounts.ts
 function share(kind, how) {
   const spec = SERVICE_SPECS[kind];
   return external_exports.strictObject({
     share: external_exports.boolean().describe(
-      "Hand your saved " + spec.label + " sign-in to sandboxes that use " + spec.usedBy.join(" or ") + " (" + how + "). Kept encrypted on this PC; " + spec.warnings.join(" ") + " Yours only: a project file can only turn it off."
+      "Hand your saved " + spec.label + " sign-in to sandboxes that use " + usedByText(spec.usedBy) + " (" + how + "). Kept encrypted on this PC; " + spec.warnings.join(" ") + " Yours only: a project file can only turn it off."
     )
   });
 }
 var AccountsSchema = external_exports.strictObject({
-  epic: share("epic", "sign in to the launcher once in a sandbox, or take this PC's: sandbox account import epic"),
-  steam: share(
-    "steam",
-    "sign in once with sbx-steam login, or: sandbox account import steam --from <steamcmd folder>"
-  ),
-  unity: share("unity", "sign in once in a sandbox, or take this PC's licence: sandbox account import unity"),
-  cfx: share("cfx", "sandbox account login cfx"),
-  keystore: share("keystore", "sandbox account import keystore --from <upload.jks>"),
-  play: share("play", "sandbox account import play --from <service-account.json>"),
-  expo: share("expo", "sandbox account login expo"),
-  appstore: share("appstore", "sandbox account import appstore --from <AuthKey.p8>")
-}).describe(
-  "Service sign-ins for sandboxes (game stores, engines, app signing). Manage them in Accounts: sandbox account status."
-);
+  epic: share("epic", "sign in to the launcher once in a sandbox, or take this PC's from Accounts"),
+  steam: share("steam", "sign in once with sbx-steam login, or take it from a SteamCMD folder in Accounts"),
+  unity: share("unity", "sign in once in a sandbox, or take this PC's licence from Accounts"),
+  cfx: share("cfx", "type the key in Accounts"),
+  keystore: share("keystore", "import the upload.jks file in Accounts"),
+  play: share("play", "import the service-account.json file in Accounts"),
+  expo: share("expo", "type the token in Accounts"),
+  appstore: share("appstore", "import the AuthKey.p8 file in Accounts"),
+  perplexity: share("perplexity", "type the API key in Accounts, or import it from a .env file"),
+  comet: share("comet", "sign in to Comet once in a sandbox: it cannot be taken from this PC")
+}).describe("Service sign-ins for sandboxes (game stores, engines, app signing, Perplexity). Manage them in Accounts.");
 
 // src/core/schema/pc-installs.ts
 var pick2 = (item, what, example) => external_exports.union([external_exports.boolean(), external_exports.array(item)]).describe(
@@ -27103,7 +27317,9 @@ function reservedEnvName(name) {
 }
 var ConfigSchema = external_exports.strictObject({
   $schema: SchemaRefSchema.optional(),
-  defaultHarness: NameSchema.describe("Agent started by `sandbox launch` (sandbox claude always runs claude)."),
+  defaultHarness: NameSchema.describe(
+    "The agent that starts when you do not name one (starting claude by name always runs claude)."
+  ),
   guestWorkspace: GuestWorkspaceSchema,
   readOnly: external_exports.boolean().describe("Map the workspace read-only."),
   workspaceFilter: WorkspaceFilterSchema,
@@ -27113,7 +27329,7 @@ var ConfigSchema = external_exports.strictObject({
   sharing: SharingSchema,
   storage: external_exports.strictObject({
     root: external_exports.string().min(1).describe(
-      "Where everything is kept on this PC (tools, databases, logins, launches). The default is a private folder for you under %ProgramData%\\AgentSandbox\\users, which works for installs for one user and for everyone. sandbox storage move <folder> moves it."
+      "Where everything is kept on this PC (tools, databases, logins, launches). The default is a private folder for you under %ProgramData%\\AgentSandbox\\users, which works for installs for one user and for everyone. Maintenance > Storage moves it."
     ),
     persistAgentState: external_exports.boolean().describe("Keep agent logins and history between sandboxes."),
     dataName: NameSchema.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces."),
@@ -27121,11 +27337,11 @@ var ConfigSchema = external_exports.strictObject({
       `Programs and scripts (.exe, .ps1, .bat, .cmd, .msi, .lnk ...) that appear or change in your project while a sandbox runs get Windows' "downloaded from the internet" mark, so SmartScreen and PowerShell ask before they run on this PC.`
     ),
     contained: external_exports.enum(["off", "vhdx"]).describe(
-      '(beta) Keep the sandbox tools, state and logs inside one disk image file (vhdx) instead of loose folders, so scanning programs on this PC see one file. Not yet tried on a real PC. Turn it on with sandbox storage contained on (it moves your files and asks first); Windows asks for permission to mount the image when a sandbox starts. "off" = loose folders, as always. Yours only: a project file (.sandbox-config.json) cannot set it.'
+      '(beta) Keep the sandbox tools, state and logs inside one disk image file (vhdx) instead of loose folders, so scanning programs on this PC see one file. Not yet tried on a real PC. Turn it on in Maintenance > Storage (it moves your files and asks first); Windows asks for permission to mount the image when a sandbox starts. "off" = loose folders, as always. Yours only: a project file (.sandbox-config.json) cannot set it.'
     ),
     containedMaxGb: external_exports.number().int().min(8).max(4096).describe("(beta) Largest size, in GB, the disk image of storage.contained may grow to."),
     warnDataGb: external_exports.number().min(0).describe(
-      "Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. sandbox data shows what takes the space."
+      "Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. Maintenance > Data shows what takes the space."
     )
   }),
   network: NetworkSchema,
@@ -27147,6 +27363,7 @@ var ConfigSchema = external_exports.strictObject({
   apps: AppsSchema,
   claudeProfile: ClaudeProfileSchema,
   harnesses: external_exports.record(NameSchema, HarnessSchema).describe("Agents that can run in the sandbox."),
+  codex: CodexSchema,
   hooks: external_exports.strictObject({ failFast: external_exports.boolean().describe("Stop when a hook script fails.") }),
   projects: ProjectsSchema.describe(
     "Several projects in one sandbox: folders of projects mapped at every start, and adding folders while it runs."
@@ -27231,6 +27448,10 @@ var BootProgressSchema = external_exports.strictObject({
   done: external_exports.number().int().min(0).max(1e3),
   total: external_exports.number().int().min(0).max(1e3)
 });
+var BackgroundWorkSchema = external_exports.strictObject({
+  name: Text(64),
+  state: external_exports.enum(["running", "done", "failed"])
+});
 var SandboxStatusSchema = external_exports.object({
   launchId: Text(64),
   phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
@@ -27242,7 +27463,9 @@ var SandboxStatusSchema = external_exports.object({
   /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
   addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
   /** A malformed progress is dropped, never the status (the phase still counts). */
-  progress: BootProgressSchema.optional().catch(void 0)
+  progress: BootProgressSchema.optional().catch(void 0),
+  /** Installs that continue after the boot is ready; a malformed list is dropped, never the status. */
+  background: external_exports.array(BackgroundWorkSchema).max(16).optional().catch(void 0)
 });
 var VersionSchema = external_exports.strictObject({ spec: Text(128), source: Text(256) });
 var DatabasePlanSchema = external_exports.strictObject({
@@ -27390,6 +27613,8 @@ var ProjectStatusSchema = external_exports.object({
 var VpnStatusSchema = external_exports.object({
   state: external_exports.enum(["off", "starting", "up", "failed"]),
   message: Text(2e3),
+  /** Why it failed, when it did: `auth` (login refused), `unreachable`, `driver`, `timeout` or `other`. */
+  code: external_exports.enum(["auth", "unreachable", "driver", "timeout", "other"]).optional(),
   killSwitch: external_exports.boolean(),
   /** A direct connection was tried after the kill switch was applied: false = it still got out. */
   killSwitchHeld: external_exports.boolean().optional(),
@@ -27741,7 +27966,11 @@ function moveIntoPlace(work, destination) {
   fs6.mkdirSync(path7.dirname(destination), { recursive: true });
   fs6.renameSync(work, destination);
 }
-async function extractArchive(archive, destination, members2 = []) {
+var extractLimit = null;
+function extractArchive(archive, destination, members2 = []) {
+  return extractLimit ? extractLimit.run(() => extract(archive, destination, members2)) : extract(archive, destination, members2);
+}
+async function extract(archive, destination, members2) {
   fs6.mkdirSync(destination, { recursive: true });
   let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
@@ -27776,6 +28005,8 @@ import { pipeline } from "node:stream/promises";
 var Downloader = class {
   /** downloads.requireChecksum: refuse anything without an expected hash. The guest sets it from session.json. */
   requireChecksum = false;
+  /** The guest's net pool: how many HTTP bodies stream at once. Host code leaves it null. */
+  limit = null;
   watcher = null;
   /** Reports coarse progress of the downloads that start from now on to `watcher` (null: stop). */
   watch(watcher) {
@@ -27793,39 +28024,42 @@ var Downloader = class {
         "Refusing to download " + path8.basename(destination) + " (" + url2 + "): no checksum is published for it, and downloads.requireChecksum is on. Turn that setting off to allow downloads that cannot be verified."
       );
     }
-    const response = await fetchRetry(url2, {}, 3, 20 * 60 * 1e3);
-    if (!response.body) throw new Error("Empty response for " + url2);
     fs7.mkdirSync(path8.dirname(destination), { recursive: true });
     const checks = ["sha256", "sha512", "sha1"].flatMap((kind) => {
       const want = sums[kind]?.trim().toLowerCase();
       return want ? [{ want, hash: crypto2.createHash(kind) }] : [];
     });
-    const size = Number(response.headers.get("content-length")) || 0;
-    const report = size > 0 ? this.watcher?.() ?? null : null;
-    let received = 0;
-    let tenth = 0;
-    let reportedAt = Date.now();
-    const tap = new Transform({
-      transform(chunk, _encoding, done) {
-        for (const c of checks) c.hash.update(chunk);
-        if (report) {
-          received += chunk.length;
-          const now = Math.floor(received * 10 / size);
-          if (now !== tenth || Date.now() - reportedAt > 5e3) {
-            tenth = now;
-            reportedAt = Date.now();
-            try {
-              report(Math.min(1, received / size));
-            } catch {
+    const partial2 = destination + ".part";
+    const transfer = async () => {
+      const response = await fetchRetry(url2, {}, 3, 20 * 60 * 1e3);
+      if (!response.body) throw new Error("Empty response for " + url2);
+      const size = Number(response.headers.get("content-length")) || 0;
+      const report = size > 0 ? this.watcher?.() ?? null : null;
+      let received = 0;
+      let tenth = 0;
+      let reportedAt = Date.now();
+      const tap = new Transform({
+        transform(chunk, _encoding, done) {
+          for (const c of checks) c.hash.update(chunk);
+          if (report) {
+            received += chunk.length;
+            const now = Math.floor(received * 10 / size);
+            if (now !== tenth || Date.now() - reportedAt > 5e3) {
+              tenth = now;
+              reportedAt = Date.now();
+              try {
+                report(Math.min(1, received / size));
+              } catch {
+              }
             }
           }
+          done(null, chunk);
         }
-        done(null, chunk);
-      }
-    });
-    const partial2 = destination + ".part";
-    try {
+      });
       await pipeline(Readable.fromWeb(response.body), tap, fs7.createWriteStream(partial2));
+    };
+    try {
+      await (this.limit ? this.limit.run(transfer) : transfer());
       if (checks.some((c) => c.hash.digest("hex") !== c.want)) throw new Error("Checksum mismatch for " + url2);
       if (sums.verify) await sums.verify(partial2);
       fs7.rmSync(destination, { force: true });
@@ -27842,12 +28076,17 @@ var Downloader = class {
     const work = stagingFolder(destination);
     try {
       const archive = path8.join(work, options.fileName ?? path8.basename(new URL(url2).pathname));
-      await this.file(url2, archive, {
-        sha256: options.sha256,
-        sha512: options.sha512,
-        sha1: options.sha1,
-        ...options.verify ? { verify: options.verify } : {}
-      });
+      if (options.cached && fs7.existsSync(options.cached)) {
+        fs7.mkdirSync(work, { recursive: true });
+        fs7.copyFileSync(options.cached, archive);
+        fs7.rmSync(options.cached, { force: true });
+      } else
+        await this.file(url2, archive, {
+          sha256: options.sha256,
+          sha512: options.sha512,
+          sha1: options.sha1,
+          ...options.verify ? { verify: options.verify } : {}
+        });
       const extracted = path8.join(work, "x");
       await extractArchive(archive, extracted, options.members);
       let root = extracted;