windows-development-sandbox 1.20.0 → 1.23.1

package/dist/core/schema/config.d.ts

@@ -121,6 +121,12 @@ export declare const ConfigSchema: z.ZodObject<{
         appstore: z.ZodObject<{
             share: z.ZodBoolean;
         }, z.core.$strict>;
+        perplexity: z.ZodObject<{
+            share: z.ZodBoolean;
+        }, z.core.$strict>;
+        comet: z.ZodObject<{
+            share: z.ZodBoolean;
+        }, z.core.$strict>;
     }, z.core.$strict>;
     pcInstalls: z.ZodObject<{
         steamGames: z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodNumber>]>;
@@ -566,6 +572,12 @@ export declare const LocalOverridesSchema: z.ZodObject<{
         appstore: z.ZodOptional<z.ZodObject<{
             share: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict>>;
+        perplexity: z.ZodOptional<z.ZodObject<{
+            share: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        comet: z.ZodOptional<z.ZodObject<{
+            share: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
     provisioning: z.ZodOptional<z.ZodObject<{
         copyFromHost: z.ZodOptional<z.ZodBoolean>;
@@ -678,7 +690,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        fivem: z.ZodOptional<z.ZodObject<{
+        unreal: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -693,7 +705,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        unreal: z.ZodOptional<z.ZodObject<{
+        node: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -708,7 +720,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        node: z.ZodOptional<z.ZodObject<{
+        go: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -723,7 +735,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        go: z.ZodOptional<z.ZodObject<{
+        python: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -738,7 +750,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        python: z.ZodOptional<z.ZodObject<{
+        rust: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -753,7 +765,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        rust: z.ZodOptional<z.ZodObject<{
+        msvc: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -768,7 +780,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        msvc: z.ZodOptional<z.ZodObject<{
+        steam: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;
@@ -783,7 +795,7 @@ export declare const LocalOverridesSchema: z.ZodObject<{
             zstd: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
             openssl: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"auto">]>>;
         }, z.core.$strict>>;
-        steam: z.ZodOptional<z.ZodObject<{
+        fivem: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict> | z.ZodObject<{
             version: z.ZodOptional<z.ZodString>;

package/dist/core/schema/config.js

@@ -53,7 +53,7 @@ export function reservedEnvName(name) {
 export const ConfigSchema = z
     .strictObject({
     $schema: SchemaRefSchema.optional(),
-    defaultHarness: NameSchema.describe('Agent started by `sandbox launch` (sandbox claude always runs claude).'),
+    defaultHarness: NameSchema.describe('The agent that starts when you do not name one (starting claude by name always runs claude).'),
     guestWorkspace: GuestWorkspaceSchema,
     readOnly: z.boolean().describe('Map the workspace read-only.'),
     workspaceFilter: WorkspaceFilterSchema,
@@ -65,7 +65,7 @@ export const ConfigSchema = z
         root: z
             .string()
             .min(1)
-            .describe('Where everything is kept on this PC (tools, databases, logins, launches). The default is a private folder for you under %ProgramData%\\AgentSandbox\\users, which works for installs for one user and for everyone. sandbox storage move <folder> moves it.'),
+            .describe('Where everything is kept on this PC (tools, databases, logins, launches). The default is a private folder for you under %ProgramData%\\AgentSandbox\\users, which works for installs for one user and for everyone. Maintenance > Storage moves it.'),
         persistAgentState: z.boolean().describe('Keep agent logins and history between sandboxes.'),
         dataName: NameSchema.describe('Name of the persistent data set (C:\\AgentData) shared by all workspaces.'),
         markSandboxFiles: z
@@ -73,7 +73,7 @@ export const ConfigSchema = z
             .describe('Programs and scripts (.exe, .ps1, .bat, .cmd, .msi, .lnk ...) that appear or change in your project while a sandbox runs get Windows\' "downloaded from the internet" mark, so SmartScreen and PowerShell ask before they run on this PC.'),
         contained: z
             .enum(['off', 'vhdx'])
-            .describe('(beta) Keep the sandbox tools, state and logs inside one disk image file (vhdx) instead of loose folders, so scanning programs on this PC see one file. Not yet tried on a real PC. Turn it on with sandbox storage contained on (it moves your files and asks first); Windows asks for permission to mount the image when a sandbox starts. "off" = loose folders, as always. Yours only: a project file (.sandbox-config.json) cannot set it.'),
+            .describe('(beta) Keep the sandbox tools, state and logs inside one disk image file (vhdx) instead of loose folders, so scanning programs on this PC see one file. Not yet tried on a real PC. Turn it on in Maintenance > Storage (it moves your files and asks first); Windows asks for permission to mount the image when a sandbox starts. "off" = loose folders, as always. Yours only: a project file (.sandbox-config.json) cannot set it.'),
         containedMaxGb: z
             .number()
             .int()
@@ -83,7 +83,7 @@ export const ConfigSchema = z
         warnDataGb: z
             .number()
             .min(0)
-            .describe('Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. sandbox data shows what takes the space.'),
+            .describe('Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. Maintenance > Data shows what takes the space.'),
     }),
     network: NetworkSchema,
     vpn: VpnSchema,

package/dist/core/schema/github.js

@@ -3,5 +3,5 @@ import { z } from 'zod';
 export const GithubSchema = z.strictObject({
     shareToken: z
         .boolean()
-        .describe('Give each sandbox the GitHub token you saved with `sandbox github login` (best a fine-grained token limited to some repositories and permissions), so gh and https git work there without logging in. Only with provisioning.git.access "full". The agent in the sandbox can read the token and use it for whatever it allows. A project file (.sandbox-config.json) cannot turn this on.'),
+        .describe('Give each sandbox the GitHub token you saved in Accounts (best a fine-grained token limited to some repositories and permissions), so gh and https git work there without logging in. Only with provisioning.git.access "full". The agent in the sandbox can read the token and use it for whatever it allows. A project file (.sandbox-config.json) cannot turn this on.'),
 });

package/dist/core/schema/profile.js

@@ -12,16 +12,18 @@ export const SecretsSchema = z.strictObject({
         .describe('Warn at launch about files in the workspace that usually hold secrets (.env, *.pem, credentials.json, ...). The agent CAN read them: Windows Sandbox maps the whole folder.'),
 });
 export const AttachSchema = z.strictObject({
-    enabled: z.boolean().describe('Allow sandbox claude --terminal / sandbox attach from this PC.'),
+    enabled: z
+        .boolean()
+        .describe("Allow attaching this PC's terminal to a session (the terminal option when starting an agent, and attach)."),
     reuseSession: z
         .boolean()
-        .describe("sandbox claude -t in a running sandbox reattaches to this folder's session when no terminal on this PC is attached to it (--new always starts another)."),
+        .describe("Starting an agent with a terminal in a running sandbox reattaches to this folder's session when no terminal on this PC is attached to it (starting a new session on purpose always starts another)."),
     auto: z
         .boolean()
         .describe('Starting an agent attaches this terminal automatically, as if you passed -t (only in an interactive terminal).'),
     autoHide: z
         .boolean()
-        .describe('Hide the Windows Sandbox window whenever this terminal attaches; it keeps running (sandbox show brings it back).'),
+        .describe('Hide the Windows Sandbox window whenever this terminal attaches; it keeps running (Sandbox > Status shows it again).'),
     confirmCtrlC: z
         .boolean()
         .describe('In an attached terminal and the sandbox window, a single Ctrl+C is held back (the title says so) and only a second one within 1.5 seconds reaches the agent: a Ctrl+C meant as "copy" no longer stops it. Esc still stops an agent.'),
@@ -39,7 +41,9 @@ export const ClaudeProfileSchema = z.strictObject({
     hostDir: z.string().describe('Your Claude folder, or "auto" (~/.claude or CLAUDE_CONFIG_DIR).'),
     include: z.array(z.string().regex(/^[A-Za-z0-9._-]+$/)).describe('Files and folders copied from it.'),
     globalStateFile: z.string().describe('Your .claude.json, or "auto". Empty string = do not copy.'),
-    copyCredentials: z.boolean().describe('Copy your Claude LOGIN into the sandbox. Prefer sandbox account instead.'),
+    copyCredentials: z
+        .boolean()
+        .describe('Copy your Claude LOGIN into the sandbox. Prefer saving the login in Accounts instead.'),
     overwrite: z.boolean().describe('Refresh these settings from this PC on every launch.'),
     sharePluginsAcrossAccounts: z
         .boolean()

package/dist/core/schema/resume.js

@@ -5,7 +5,7 @@ export const RESUME_SESSIONS = ['ask', 'always', 'afterCrash', 'never'];
 export const ResumeSchema = z.strictObject({
     sessions: z
         .enum(RESUME_SESSIONS)
-        .describe('When a sandbox starts after one that had agent sessions: "ask" lists them and asks whether to reopen them (without a terminal it prints the command sandbox resume), "always" reopens them, "afterCrash" reopens them only when the last sandbox ended unexpectedly, "never" leaves it to sandbox resume. Terminal tabs you opened yourself in the sandbox are never reopened.'),
+        .describe('When a sandbox starts after one that had agent sessions: "ask" lists them and asks whether to reopen them (without a terminal it only says they can be reopened), "always" reopens them, "afterCrash" reopens them only when the last sandbox ended unexpectedly, "never" leaves it to you (Sessions reopens them). Terminal tabs you opened yourself in the sandbox are never reopened.'),
     restartAfterCrash: z
         .boolean()
         .describe('When the sandbox ends because Windows Sandbox crashed or ran out of memory, start it again by itself and reopen its sessions (at most 3 times in 6 hours).'),

package/dist/core/schema/sandbox.js

@@ -18,7 +18,7 @@ export const MappingSchema = z.strictObject({
 export const SandboxSchema = z.strictObject({
     engine: z
         .enum(['windows-sandbox', 'hcs'])
-        .describe('(alpha) What runs the sandbox. "windows-sandbox" = Windows Sandbox (the default: desktop, Windows Terminal, GPU, clipboard, audio, printers). "hcs" = a headless Hyper-V isolated Server Core container for agents (no desktop, GPU or clipboard); it needs Windows features and an image on this PC (sandbox engine check hcs lists what is missing), and starting it is not enabled yet in this alpha. sandbox engine shows what each engine can do. Yours only: a project file (.sandbox-config.json) cannot set it.'),
+        .describe('(alpha) What runs the sandbox. "windows-sandbox" = Windows Sandbox (the default: desktop, Windows Terminal, GPU, clipboard, audio, printers). "hcs" = a headless Hyper-V isolated Server Core container for agents (no desktop, GPU or clipboard); it needs Windows features and an image on this PC (Maintenance > Engine lists what is missing), and starting it is not enabled yet in this alpha. Maintenance > Engine shows what each engine can do. Yours only: a project file (.sandbox-config.json) cannot set it.'),
     memoryMb: z
         .union([z.literal('auto'), z.number().int().min(2048)])
         .describe('Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 4 GB more with vGPU): a bigger value is lowered.'),
@@ -55,7 +55,7 @@ export const SandboxSchema = z.strictObject({
     networking: z.boolean().describe('Internet access. false is the only hard network isolation Windows Sandbox offers.'),
     clipboard: z
         .boolean()
-        .describe("Shared clipboard between this PC and the sandbox. Also lets an agent's copy (in sandbox attach) reach this PC's clipboard."),
+        .describe("Shared clipboard between this PC and the sandbox. Also lets an agent's copy (in an attached terminal) reach this PC's clipboard."),
     audioInput: z.boolean().describe('Microphone access.'),
     videoInput: z.boolean().describe('Camera access.'),
     printerRedirection: z.boolean().describe('Printers from this PC.'),
@@ -108,7 +108,7 @@ export const NetworkSchema = z.strictObject({
 export const AuditSchema = z.strictObject({
     enabled: z
         .boolean()
-        .describe('Keep an audit log on this PC of what your agents did: programs started (with their command lines, secrets hidden), files changed in the projects, git commits, sessions, and what the repo guard caught, each linked to the agent session that did it where that can be known. The sandbox cannot change it. Read it with sandbox audit or on the Activity page.'),
+        .describe('Keep an audit log on this PC of what your agents did: programs started (with their command lines, secrets hidden), files changed in the projects, git commits, sessions, and what the repo guard caught, each linked to the agent session that did it where that can be known. The sandbox cannot change it. Read it on the Activity page.'),
     days: z
         .number()
         .int()

package/dist/core/schema/vpn.js

@@ -4,7 +4,7 @@ export const VPN_PROVIDERS = ['nordvpn', 'openvpn-file', 'wireguard-file'];
 export const VpnSchema = z.strictObject({
     enabled: z
         .boolean()
-        .describe("(Alpha: not yet tried on a real PC) Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (sandbox vpn login). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."),
+        .describe("(Alpha: not yet tried on a real PC) Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (Settings > Network > VPN). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."),
     provider: z
         .enum(VPN_PROVIDERS)
         .describe('nordvpn: a recommended NordVPN server is picked at every launch. openvpn-file: your own .ovpn file (configFile). wireguard-file: your own WireGuard .conf (configFile), e.g. from your company.'),

package/dist/core/schema/web.js

@@ -20,7 +20,7 @@ export const RemoteUserSchema = z.strictObject({
 export const WebLanSchema = z.strictObject({
     enabled: z
         .boolean()
-        .describe('(Beta) Devices on your network (a phone): an HTTPS address on this PC for devices you pair with a one-time code (sandbox web pair). Needs a firewall rule (sandbox web lan on asks Windows once). Off: every paired device is signed out.'),
+        .describe('(Beta) Devices on your network (a phone): an HTTPS address on this PC for devices you pair with a one-time code (Remote access). Needs a firewall rule (turning it on asks Windows once). Off: every paired device is signed out.'),
     port: z.number().int().min(1024).max(65535).describe('HTTPS port for paired devices on your network.'),
     address: z
         .string()
@@ -32,7 +32,7 @@ export const WebLanSchema = z.strictObject({
 export const WebRemoteSchema = z.strictObject({
     windowsSignIn: z
         .boolean()
-        .describe('(Beta) Other Windows users of this PC named in web.remote.users sign in to your web UI (and sandbox remote) with their own Windows account: no password, no link.'),
+        .describe('(Beta) Other Windows users of this PC named in web.remote.users sign in to your web UI (and the remote menu) with their own Windows account: no password, no link.'),
     users: z
         .array(RemoteUserSchema)
         .max(32)
@@ -48,7 +48,7 @@ export const WebRemoteSchema = z.strictObject({
 export const WebSchema = z.strictObject({
     enabled: z
         .boolean()
-        .describe('(Beta) The web UI: your sandbox sessions in a browser on this PC (http://127.0.0.1:<port>, this PC only). On: every sandbox start also starts it in the background (it keeps running until sandbox web stop or a restart of the PC). Off: only sandbox web start runs it. Open it signed in with sandbox web open.'),
+        .describe('(Beta) The web UI: your sessions in a browser on this PC (http://127.0.0.1:<port>, this PC only). On: every start of a sandbox also starts it in the background (it keeps running until you stop it in Maintenance > Web UI or restart the PC). Off: it runs only when you start it there. Open it signed in from the same page.'),
     port: z
         .number()
         .int()

package/dist/core/types.d.ts

@@ -225,6 +225,12 @@ export interface GuestSession {
      */
     projectsDir?: string;
     roots?: string[];
+    /** The same folders with the PC folder each shows (roots first), for the sandbox guide. */
+    mappedProjects?: {
+        host: string;
+        guest: string;
+        root?: boolean;
+    }[];
     /** false: start no agent session at boot (a restart that adds a project opens its sessions itself). */
     autoSession?: boolean;
     harnessName: string;

package/dist/core/util/errors.d.ts

@@ -1,8 +1,18 @@
+/** A step that fixes a problem: the menu and the web offer `op` as a button, the command line prints `cli`. */
+export interface ErrorAction {
+    readonly op: string;
+    readonly input?: Readonly<Record<string, unknown>>;
+    readonly label: string;
+    readonly cli: string;
+}
 /** An expected problem the user can act on: what went wrong, and (optionally) how to fix it. */
 export declare class UserError extends Error {
     readonly fix?: string | undefined;
-    constructor(message: string, fix?: string | undefined);
+    readonly action?: ErrorAction | undefined;
+    constructor(message: string, fix?: string | undefined, action?: ErrorAction | undefined);
 }
 /** Throws a UserError. Typed explicitly so TypeScript narrows after calls (arrow functions need it to act as never). */
 export declare const fail: (message: string, fix?: string) => never;
+/** Throws a UserError whose fix is also a button (menu, web) and a command line (CLI). */
+export declare const failWith: (message: string, fix: string, action: ErrorAction) => never;
 export declare function errMsg(e: unknown): string;

package/dist/core/util/errors.js

@@ -1,9 +1,11 @@
 /** An expected problem the user can act on: what went wrong, and (optionally) how to fix it. */
 export class UserError extends Error {
     fix;
-    constructor(message, fix) {
+    action;
+    constructor(message, fix, action) {
         super(message);
         this.fix = fix;
+        this.action = action;
         this.name = 'UserError';
     }
 }
@@ -11,6 +13,10 @@ export class UserError extends Error {
 export const fail = (message, fix) => {
     throw new UserError(message, fix);
 };
+/** Throws a UserError whose fix is also a button (menu, web) and a command line (CLI). */
+export const failWith = (message, fix, action) => {
+    throw new UserError(message, fix, action);
+};
 export function errMsg(e) {
     return e instanceof Error ? e.message : String(e);
 }

package/dist/core/util/index.d.ts

@@ -1,5 +1,5 @@
 export { isWin, sleep, captureOutput } from './process.js';
-export { UserError, fail, errMsg } from './errors.js';
+export { UserError, fail, failWith, errMsg, type ErrorAction } from './errors.js';
 export { parseJsonc, readJsonc } from './jsonc.js';
 export { ensureDir, dirExists, fileExists, fileExistsAsync, readJson, readSmallFile, tryReadJson, writeJson, realPath, } from './fs.js';
 export { xmlEscape, safeText, plainText } from './text.js';

package/dist/core/util/index.js

@@ -1,5 +1,5 @@
 export { isWin, sleep, captureOutput } from './process.js';
-export { UserError, fail, errMsg } from './errors.js';
+export { UserError, fail, failWith, errMsg } from './errors.js';
 export { parseJsonc, readJsonc } from './jsonc.js';
 export { ensureDir, dirExists, fileExists, fileExistsAsync, readJson, readSmallFile, tryReadJson, writeJson, realPath, } from './fs.js';
 export { xmlEscape, safeText, plainText } from './text.js';

package/dist/guest/accounts/adapter.d.ts

@@ -10,6 +10,8 @@ export interface GuestAdapter<K extends ServiceKind> {
     apply(p: Payload<K>): Promise<Applied> | Applied;
     /** Bounded, BOM-aware read of what the tool holds now; null when it holds none. */
     current?(): Payload<K> | null;
+    /** Asks the tool before each look, for tools that only answer asynchronously (Comet over its DevTools port). */
+    refresh?(): Promise<void>;
     /** How often current() is asked (default 60000 ms). */
     readonly checkMs?: number;
     /** When the sandbox stops: let go of what must not stay taken (a Unity seat). */

package/dist/guest/accounts/adapters.js

@@ -1,8 +1,10 @@
 import { appstoreAdapter } from './kinds/appstore.js';
 import { cfxAdapter } from './kinds/cfx.js';
+import { cometAdapter } from './kinds/comet.js';
 import { epicAdapter } from './kinds/epic.js';
 import { expoAdapter } from './kinds/expo.js';
 import { keystoreAdapter } from './kinds/keystore.js';
+import { perplexityAdapter } from './kinds/perplexity.js';
 import { playAdapter } from './kinds/play.js';
 import { steamAdapter } from './kinds/steam.js';
 import { unityAdapter } from './kinds/unity.js';
@@ -15,4 +17,6 @@ export const ADAPTERS = {
     play: playAdapter,
     expo: expoAdapter,
     appstore: appstoreAdapter,
+    perplexity: perplexityAdapter,
+    comet: cometAdapter,
 };

package/dist/guest/accounts/apply.d.ts

@@ -9,9 +9,11 @@ export declare const DeliveredSchema: z.ZodObject<{
         play: "play";
         expo: "expo";
         appstore: "appstore";
-        cfx: "cfx";
         steam: "steam";
         epic: "epic";
+        cfx: "cfx";
+        perplexity: "perplexity";
+        comet: "comet";
     }> & z.core.$partial, z.ZodString>;
     leased: z.ZodArray<z.ZodEnum<{
         unity: "unity";
@@ -19,9 +21,11 @@ export declare const DeliveredSchema: z.ZodObject<{
         play: "play";
         expo: "expo";
         appstore: "appstore";
-        cfx: "cfx";
         steam: "steam";
         epic: "epic";
+        cfx: "cfx";
+        perplexity: "perplexity";
+        comet: "comet";
     }>>;
 }, z.core.$strip>;
 export type Delivered = z.output<typeof DeliveredSchema>;

package/dist/guest/accounts/kinds/cfx.d.ts

@@ -1,2 +1,9 @@
+import type { Payload } from '../../../shared/accounts/index.js';
 import { type GuestAdapter } from '../adapter.js';
+/** The cfg FXServer reads with +exec (forward slashes: FXServer's exec takes them). */
+export declare function cfxSecretsFile(dir?: string): string;
+/** The cfg's text. The payload's patterns allow no quotes or line breaks, so the values cannot escape their line. */
+export declare function cfxSecretsText(p: Payload<'cfx'>): string;
+/** Writes the cfg into `dir` (only there); returns its path. */
+export declare function writeCfxSecrets(p: Payload<'cfx'>, dir?: string): string;
 export declare const cfxAdapter: GuestAdapter<'cfx'>;

package/dist/guest/accounts/kinds/cfx.js

@@ -1,7 +1,37 @@
-import { notAvailableYet } from '../adapter.js';
+// Cfx.re: the server licence key (and the optional Steam Web API key) go into one cfg on the sandbox's own disk
+// (secretDir: %LOCALAPPDATA%\AgentSandbox\accounts\cfx, wiped with the sandbox) that `sbx-fivem serve` hands FXServer
+// with +exec before the project's server.cfg. Never into the project, the data disk or the tools folder; not in the
+// agent's environment either. It never comes back (the key does not change in the sandbox).
+import fs from 'node:fs';
+import path from 'node:path';
+import { secretDir } from '../adapter.js';
+/** The cfg FXServer reads with +exec (forward slashes: FXServer's exec takes them). */
+export function cfxSecretsFile(dir = secretDir('cfx')) {
+    return path.join(dir, 'server-secrets.cfg');
+}
+/** The cfg's text. The payload's patterns allow no quotes or line breaks, so the values cannot escape their line. */
+export function cfxSecretsText(p) {
+    return [
+        '# Written by the sandbox at boot from your saved Cfx.re key (sandbox account login cfx). It lives on the',
+        "# sandbox's own disk and goes when it closes: never copy these lines into a project or a server.cfg.",
+        'sv_licenseKey "' + p.licenseKey + '"',
+        ...(p.steamWebApiKey ? ['set steam_webApiKey "' + p.steamWebApiKey + '"'] : []),
+        '',
+    ].join('\r\n');
+}
+/** Writes the cfg into `dir` (only there); returns its path. */
+export function writeCfxSecrets(p, dir = secretDir('cfx')) {
+    const file = cfxSecretsFile(dir);
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(file, cfxSecretsText(p), { encoding: 'utf8', mode: 0o600 });
+    return file;
+}
 export const cfxAdapter = {
     kind: 'cfx',
-    apply(_p) {
-        return notAvailableYet('cfx');
+    apply(p) {
+        writeCfxSecrets(p);
+        return {
+            summary: 'Cfx.re: the server key is ready for sbx-fivem serve' + (p.steamWebApiKey ? ' (with a Steam Web API key)' : ''),
+        };
     },
 };

package/dist/guest/accounts/kinds/comet.d.ts

@@ -0,0 +1,7 @@
+import { type CometPayload } from '../../../shared/accounts/index.js';
+import { type GuestAdapter } from '../adapter.js';
+/** Where the sign-in waits for Comet. */
+export declare function cometPendingFile(root?: string): string;
+/** The sign-in waiting for Comet, or null (none, or not the expected shape). */
+export declare function takePendingComet(root?: string): CometPayload | null;
+export declare const cometAdapter: GuestAdapter<'comet'>;

package/dist/guest/accounts/kinds/comet.js

@@ -0,0 +1,50 @@
+// Comet: the saved perplexity.ai sign-in cookies wait in secretDir('comet') (the sandbox's own disk) until the apps
+// step has Comet ready, which writes them into its profile over DevTools and deletes the file. While the sandbox runs,
+// the watch asks the running Comet for its perplexity.ai cookies, so a sign-in made here (or renewed) is kept for the
+// next sandbox. When Comet is not running, the last sign-in seen stands.
+import fs from 'node:fs';
+import path from 'node:path';
+import { cometSummary, PAYLOADS } from '../../../shared/accounts/index.js';
+import { readBoundedFile } from '../../../shared/io/bounded.js';
+import { readCometSignIn } from '../../browser/comet.js';
+import { secretDir } from '../adapter.js';
+/** Where the sign-in waits for Comet. */
+export function cometPendingFile(root = secretDir('comet')) {
+    return path.join(root, 'restore.json');
+}
+/** The sign-in waiting for Comet, or null (none, or not the expected shape). */
+export function takePendingComet(root) {
+    const file = cometPendingFile(root);
+    const bytes = readBoundedFile(file, 512 * 1024);
+    fs.rmSync(file, { force: true });
+    if (!bytes)
+        return null;
+    try {
+        const parsed = PAYLOADS.comet.safeParse(JSON.parse(bytes.toString('utf8')));
+        return parsed.success ? parsed.data : null;
+    }
+    catch {
+        return null; // Not JSON: nothing to restore.
+    }
+}
+/** The last sign-in seen in this process (the daemon's watch). */
+let held = null;
+export const cometAdapter = {
+    kind: 'comet',
+    apply(p) {
+        const file = cometPendingFile();
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, JSON.stringify(p), { encoding: 'utf8', mode: 0o600 });
+        held = p;
+        return { summary: 'Comet: your saved sign-in (' + cometSummary(p) + ') goes into its profile once it is ready' };
+    },
+    async refresh() {
+        const now = await readCometSignIn();
+        if (now)
+            held = now;
+    },
+    current() {
+        return held;
+    },
+    checkMs: 120_000,
+};

package/dist/guest/accounts/kinds/perplexity.d.ts

@@ -0,0 +1,2 @@
+import type { GuestAdapter } from '../adapter.js';
+export declare const perplexityAdapter: GuestAdapter<'perplexity'>;

package/dist/guest/accounts/kinds/perplexity.js

@@ -0,0 +1,12 @@
+// Perplexity: the API key becomes PERPLEXITY_API_KEY in the agent's environment, in memory only. Nothing is written
+// to a file: the MCP servers read the variable (Claude Code passes its environment on; Codex is told its name).
+import { PERPLEXITY_ENV, perplexitySummary } from '../../../shared/accounts/index.js';
+export const perplexityAdapter = {
+    kind: 'perplexity',
+    apply(p) {
+        return {
+            env: { [PERPLEXITY_ENV]: p.apiKey },
+            summary: 'Perplexity API key (' + perplexitySummary(p) + ') in ' + PERPLEXITY_ENV + ' for the agent',
+        };
+    },
+};

package/dist/guest/accounts/watch.d.ts

@@ -21,6 +21,8 @@ export declare class AccountWatch {
     /** The kinds being watched. */
     watched(): readonly ServiceKind[];
     start(): void;
+    /** Lets an adapter that answers asynchronously ask its tool first, then looks; never throws. */
+    private look;
     /** One look at one kind; true when a handoff was written. */
     check(kind: ServiceKind): boolean;
     /** Looks at every kind now; with `final` (the sandbox stops) each adapter also lets go of what it holds. */

package/dist/guest/accounts/watch.js

@@ -33,11 +33,21 @@ export class AccountWatch {
     }
     start() {
         for (const kind of this.kinds) {
-            const timer = setInterval(() => this.check(kind), this.adapter(kind).checkMs ?? DEFAULT_CHECK_MS);
+            const timer = setInterval(() => void this.look(kind), this.adapter(kind).checkMs ?? DEFAULT_CHECK_MS);
             timer.unref();
             this.timers.push(timer);
         }
     }
+    /** Lets an adapter that answers asynchronously ask its tool first, then looks; never throws. */
+    async look(kind) {
+        try {
+            await this.adapter(kind).refresh?.();
+        }
+        catch (e) {
+            this.o.warn?.(SERVICE_SPECS[kind].label + ' sign-in: could not read it: ' + errMsg(e));
+        }
+        return this.check(kind);
+    }
     /** One look at one kind; true when a handoff was written. */
     check(kind) {
         try {
@@ -61,7 +71,7 @@ export class AccountWatch {
     /** Looks at every kind now; with `final` (the sandbox stops) each adapter also lets go of what it holds. */
     async flush(final = false) {
         for (const kind of this.kinds)
-            this.check(kind);
+            await this.look(kind);
         if (!final)
             return;
         for (const timer of this.timers)

package/dist/guest/agents/agent-installer.js

@@ -6,7 +6,7 @@ import { SYSTEM } from '../../shared/system.js';
 import { setupUv, uvVars } from '../toolchains/runtimes.js';
 import { emptyEnv } from '../toolchains/tool-env.js';
 import { dryRun, hostToolsDir, isWin, toolsDir } from '../runtime/paths.js';
-import { execAsync } from '../runtime/process.js';
+import { execHeavy as execAsync } from '../runtime/pools.js';
 import { exists, mkdirp } from '../runtime/fs.js';
 import { log, warn } from '../runtime/log.js';
 import { session } from '../runtime/session.js';

package/dist/guest/agents/profile-links.d.ts

@@ -1,4 +1,6 @@
 import type { Harness } from '../../core/types.js';
+/** The boot's linkProfileDirs without blocking the event loop. */
+export declare function linkProfileDirsAsync(agents: Readonly<Record<string, readonly string[] | undefined>>): Promise<void>;
 /** Makes the profile folders of these agents junctions into state\<agent>\profile; one failure never stops the boot. */
 export declare function linkProfileDirs(agents: Readonly<Record<string, readonly string[] | undefined>>): void;
 /** The same for one agent, when it is installed (the daemon starts agents the boot did not know). */

package/dist/guest/agents/profile-links.js

@@ -1,16 +1,30 @@
 import { profileLinkPairs } from '../../shared/paths/index.js';
 import { dryRun, isWin, testMode } from '../runtime/paths.js';
-import { runScriptWithJson } from '../runtime/process.js';
+import { runScriptWithJson, runScriptWithJsonAsync } from '../runtime/process.js';
 import { stateDir } from '../runtime/session.js';
 import { log, warn } from '../runtime/log.js';
 import { errMsg } from '../../core/util/errors.js';
 /** The sandbox's own user profile folder (not a setting: the guest's account). */
 const profileRoot = () => process.env.USERPROFILE ?? '';
+const linkPairs = (agents) => !isWin || dryRun || testMode || !profileRoot()
+    ? []
+    : Object.entries(agents).flatMap(([agent, dirs]) => dirs?.length ? profileLinkPairs(agent, dirs, profileRoot(), stateDir) : []);
+/** The boot's linkProfileDirs without blocking the event loop. */
+export async function linkProfileDirsAsync(agents) {
+    const pairs = linkPairs(agents);
+    if (!pairs.length)
+        return;
+    try {
+        await runScriptWithJsonAsync('link-profile-dirs.ps1', 'PairsFile', pairs);
+        log('Agent logins kept: ' + pairs.length + ' profile folder(s) linked into persistent storage.');
+    }
+    catch (e) {
+        warn('Could not link the agent profile folders (their logins will not be kept): ' + errMsg(e));
+    }
+}
 /** Makes the profile folders of these agents junctions into state\<agent>\profile; one failure never stops the boot. */
 export function linkProfileDirs(agents) {
-    if (!isWin || dryRun || testMode || !profileRoot())
-        return;
-    const pairs = Object.entries(agents).flatMap(([agent, dirs]) => dirs?.length ? profileLinkPairs(agent, dirs, profileRoot(), stateDir) : []);
+    const pairs = linkPairs(agents);
     if (!pairs.length)
         return;
     try {