windows-development-sandbox 1.27.0 → 1.27.3

package/dist/runtime/daemon.js

@@ -26113,6 +26113,7 @@ var GAMEDEV_APPS = [
     size: "100 MB",
     source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
     exe: "f3d.exe",
+    onPath: true,
     needs: ["mesa"]
   },
   {
@@ -27413,7 +27414,7 @@ var SERVICE_SPECS = {
   },
   steam: {
     kind: "steam",
-    label: "Steam (SteamCMD)",
+    label: "Steam",
     usedBy: ["steam"],
     sources: ["file", "sandbox"],
     singleHolder: true,
@@ -27449,7 +27450,7 @@ var SERVICE_SPECS = {
   },
   cfx: {
     kind: "cfx",
-    label: "Cfx.re (FiveM / RedM server key)",
+    label: "FiveM key",
     usedBy: ["fivem"],
     sources: ["typed", "file"],
     singleHolder: false,
@@ -27478,7 +27479,7 @@ var SERVICE_SPECS = {
   },
   keystore: {
     kind: "keystore",
-    label: "Android upload keystore",
+    label: "Android keystore",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27493,7 +27494,7 @@ var SERVICE_SPECS = {
   },
   play: {
     kind: "play",
-    label: "Google Play (service account)",
+    label: "Google Play",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27504,7 +27505,7 @@ var SERVICE_SPECS = {
   },
   expo: {
     kind: "expo",
-    label: "Expo (EAS)",
+    label: "Expo",
     usedBy: ["reactNative"],
     sources: ["typed"],
     singleHolder: false,
@@ -27515,7 +27516,7 @@ var SERVICE_SPECS = {
   },
   appstore: {
     kind: "appstore",
-    label: "App Store Connect API key",
+    label: "App Store Connect",
     usedBy: ["reactNative", "flutter"],
     sources: ["file", "typed"],
     singleHolder: false,
@@ -27529,7 +27530,7 @@ var SERVICE_SPECS = {
   },
   perplexity: {
     kind: "perplexity",
-    label: "Perplexity API key",
+    label: "Perplexity API",
     usedBy: ["perplexity"],
     sources: ["pc", "file", "typed"],
     singleHolder: false,
@@ -27553,7 +27554,7 @@ var SERVICE_SPECS = {
   },
   comet: {
     kind: "comet",
-    label: "Comet (Perplexity browser)",
+    label: "Comet",
     usedBy: ["comet"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -27569,7 +27570,7 @@ var SERVICE_SPECS = {
   },
   perplexityapp: {
     kind: "perplexityapp",
-    label: "Perplexity desktop app",
+    label: "Perplexity app",
     usedBy: ["perplexityapp"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -28531,10 +28532,20 @@ function scriptArgs(name, args = []) {
 }
 
 // src/shared/download/spawn.ts
+import os3 from "node:os";
 import { spawn } from "node:child_process";
+function lowerPriority(pid) {
+  if (pid === void 0) return;
+  try {
+    os3.setPriority(pid, os3.constants.priority.PRIORITY_BELOW_NORMAL);
+  } catch {
+  }
+}
 function spawnAsync(file3, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   return new Promise((resolve2, reject) => {
-    const child = spawn(file3, args, { stdio: "ignore", windowsHide: true, ...options });
+    const child = spawn(file3, args, { stdio: "ignore", windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     child.once("error", reject);
     child.once("close", (code) => resolve2(code ?? -1));
   });
@@ -28558,13 +28569,16 @@ function extractArchive(archive, destination, members2 = []) {
 }
 async function extract(archive, destination, members2) {
   fs10.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2], {
+    lowPriority: true
+  });
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
     if (zip !== archive) fs10.copyFileSync(archive, zip);
     status = await spawnAsync(
       SYSTEM.powershell(),
-      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination]),
+      { lowPriority: true }
     );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
@@ -29160,7 +29174,6 @@ function withRequestSecrets(req) {
 }
 
 // src/guest/runtime/pools.ts
-import os4 from "node:os";
 import { spawn as spawn3 } from "node:child_process";
 import path21 from "node:path";
 
@@ -29234,13 +29247,13 @@ function installerRetry(code, attempt) {
 }
 
 // src/shared/concurrency/pools.ts
-var net2 = new Limiter(4, "net");
+var net2 = new Limiter(3, "net");
 var heavy = new Limiter(2, "heavy");
 var installer = new Limiter(1, "installer");
 
 // src/guest/runtime/process.ts
 import fs16 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 import path20 from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync2 } from "node:child_process";
 var outputSink = null;
@@ -29262,13 +29275,15 @@ function logLines(stream) {
   stream.on("end", () => logOutput(partial2));
 }
 async function execAsync(file3, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   const code = captureOutput() ? await new Promise((resolve2, reject) => {
-    const child = spawn2(file3, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...options });
+    const child = spawn2(file3, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     logLines(child.stdout);
     logLines(child.stderr);
     child.once("error", reject);
     child.once("close", (c) => resolve2(c ?? -1));
-  }) : await spawnAsync(file3, args, { stdio: "inherit", ...options });
+  }) : await spawnAsync(file3, args, { stdio: "inherit", ...spawnOptions, ...lowPriority ? { lowPriority } : {} });
   if (code !== 0)
     throw new Error(path20.basename(file3) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
@@ -29322,8 +29337,23 @@ function runScriptAsync(name, args = []) {
 function scriptOutput(name, args = [], options = {}) {
   return execOutput(SYSTEM.powershell(), scriptArgs(name, args), options);
 }
+function scriptOutputAsync(name, args = []) {
+  return new Promise((resolve2) => {
+    const child = spawn2(SYSTEM.powershell(), scriptArgs(name, args), {
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true
+    });
+    let out = "";
+    child.stdout?.setEncoding("utf8");
+    child.stdout?.on("data", (chunk) => {
+      if (out.length < CAPTURE_BYTES) out += chunk;
+    });
+    child.once("error", () => resolve2(""));
+    child.once("close", (code) => resolve2(code === 0 ? out.trim() : ""));
+  });
+}
 function runScriptWithJson(name, param, data, args = []) {
-  const dir = fs16.mkdtempSync(path20.join(os3.tmpdir(), "sbx-"));
+  const dir = fs16.mkdtempSync(path20.join(os4.tmpdir(), "sbx-"));
   const file3 = path20.join(dir, "input.json");
   try {
     fs16.writeFileSync(file3, JSON.stringify(data), "utf8");
@@ -29333,7 +29363,7 @@ function runScriptWithJson(name, param, data, args = []) {
   }
 }
 async function runScriptWithJsonAsync(name, param, data, args = []) {
-  const dir = fs16.mkdtempSync(path20.join(os3.tmpdir(), "sbx-"));
+  const dir = fs16.mkdtempSync(path20.join(os4.tmpdir(), "sbx-"));
   const file3 = path20.join(dir, "input.json");
   try {
     fs16.writeFileSync(file3, JSON.stringify(data), "utf8");
@@ -29404,14 +29434,7 @@ function installPools() {
   downloader.limit = net2;
   limitExtraction(heavy);
 }
-var BELOW_NORMAL = os4.constants.priority.PRIORITY_BELOW_NORMAL;
-function belowNormal(pid) {
-  if (pid === void 0) return;
-  try {
-    os4.setPriority(pid, BELOW_NORMAL);
-  } catch {
-  }
-}
+var belowNormal = lowerPriority;
 async function runInstaller(file3, args, o = {}) {
   for (let attempt = 1; ; attempt++) {
     const code = await installer.run(
@@ -29437,7 +29460,7 @@ async function runInstallerChecked(file3, args, o = {}) {
     throw new Error(path21.basename(file3) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
 function execHeavy(file3, args, options = {}) {
-  return heavy.run(() => execAsync(file3, args, options));
+  return heavy.run(() => execAsync(file3, args, { ...options, lowPriority: true }));
 }
 
 // src/guest/daemon/daemon.ts
@@ -30361,13 +30384,14 @@ function itemSizes(saved2) {
   }
   return sizes;
 }
+var ITEM_NAME = /^[A-Za-z0-9_-]{1,80}\.item$/;
 function isItemUnder(text2, root) {
   const at = itemInstallLocation(text2);
   return at !== null && isWithin2(root, at) && win2.resolve(at) !== win2.resolve(root);
 }
 function itemFiles(dir) {
   try {
-    return fs22.readdirSync(dir).filter((f) => /^[A-Za-z0-9_-]{1,80}\.item$/.test(f));
+    return fs22.readdirSync(dir).filter((f) => ITEM_NAME.test(f));
   } catch {
     return [];
   }
@@ -30451,6 +30475,8 @@ var UnrealStatusSchema = external_exports.object({
   ).max(64),
   launcher: external_exports.object({
     installed: external_exports.boolean(),
+    /** Its program (Program Files or Program Files (x86), by launcher version); null when there is none. */
+    exe: Text2().nullable().default(null),
     /** Where the launcher installs engines; null when it could not be set. */
     installLocation: Text2().nullable(),
     /** Why engines would not go to the data disk (shown loudly), null when they do. */
@@ -31523,7 +31549,10 @@ import path42 from "node:path";
 // src/guest/toolchains/signature.ts
 var SignatureSchema = external_exports.object({ subject: external_exports.string().max(4096), issuer: external_exports.string().max(4096) });
 function signatureOf(file3) {
-  const text2 = scriptOutput("get-signature.ps1", ["-Path", file3]).trim();
+  return parseSignature(scriptOutput("get-signature.ps1", ["-Path", file3]));
+}
+function parseSignature(output2) {
+  const text2 = output2.trim();
   if (!text2) return null;
   try {
     const parsed = SignatureSchema.safeParse(JSON.parse(text2));
@@ -31535,11 +31564,14 @@ function signatureOf(file3) {
 function signedBy(file3, signer) {
   return signerMatches(signatureOf(file3), signer);
 }
+async function signedByAsync(file3, signer) {
+  return signerMatches(parseSignature(await scriptOutputAsync("get-signature.ps1", ["-Path", file3])), signer);
+}
 
 // src/guest/toolchains/installers.ts
 function signatureCheck(signer, what) {
-  return (file3) => {
-    if (!signedBy(file3, signer)) throw new Error(what + " is not signed by its vendor");
+  return async (file3) => {
+    if (!await signedByAsync(file3, signer)) throw new Error(what + " is not signed by its vendor");
   };
 }
 async function signedInstaller(url2, file3, what, signer, sha256 = null) {
@@ -31548,7 +31580,7 @@ async function signedInstaller(url2, file3, what, signer, sha256 = null) {
     mkdirp(path42.dirname(file3));
     await downloader.file(url2, file3, { sha256, verify: signatureCheck(signer, path42.basename(file3)) });
   }
-  if (!signedBy(file3, signer)) {
+  if (!await signedByAsync(file3, signer)) {
     fs25.rmSync(file3, { force: true });
     throw new Error(
       path42.basename(file3) + " is not signed by its vendor; deleted it (it is downloaded again next boot)"
@@ -31568,7 +31600,7 @@ var EMPTY = {
   updatedAt: "",
   engines: [],
   projects: [],
-  launcher: { installed: false, installLocation: null, problem: null, freeBytes: null, needBytes: 0 },
+  launcher: { installed: false, exe: null, installLocation: null, problem: null, freeBytes: null, needBytes: 0 },
   visualStudio: { version: "", path: "", how: "", check: "", ok: false },
   debugger: null,
   ddc: { mode: "local", dir: null },
@@ -31596,11 +31628,15 @@ var SAVED_ENTRIES = path44.join(SAVED_DIR, "LauncherInstalled.json");
 var programData = () => process.env.ProgramData ?? "C:\\ProgramData";
 var localAppData2 = () => process.env.LOCALAPPDATA ?? "";
 function launcherExe() {
-  const root = path44.join(process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)", "Epic Games", "Launcher");
-  for (const arch2 of ["Win64", "Win32"]) {
-    const exe = path44.join(root, "Portal", "Binaries", arch2, "EpicGamesLauncher.exe");
-    if (exists(exe)) return exe;
-  }
+  const roots = [
+    process.env.ProgramFiles ?? "C:\\Program Files",
+    process.env["ProgramFiles(x86)"] ?? "C:\\Program Files (x86)"
+  ];
+  for (const root of roots)
+    for (const arch2 of ["Win64", "Win32"]) {
+      const exe = path44.join(root, "Epic Games", "Launcher", "Portal", "Binaries", arch2, "EpicGamesLauncher.exe");
+      if (exists(exe)) return exe;
+    }
   return null;
 }
 async function fetchLauncher() {
@@ -31652,6 +31688,18 @@ function savedEntries() {
 function restoreLauncherItems() {
   return restoreItems(SAVED_MANIFESTS, launcherManifestsDir(programData()), ENGINES_DIR, exists);
 }
+function writePcLauncherItems(items) {
+  const dir = launcherManifestsDir(programData());
+  let written = 0;
+  for (const i of items) {
+    if (i.kind !== "unreal" || !i.launcherItem || !ITEM_NAME.test(i.launcherItem.name)) continue;
+    const at = itemInstallLocation(i.launcherItem.text);
+    if (!at || path44.win32.resolve(at).toLowerCase() !== path44.win32.resolve(i.guest).toLowerCase()) continue;
+    fs26.writeFileSync(path44.join(mkdirp(dir), i.launcherItem.name), i.launcherItem.text, "utf8");
+    written++;
+  }
+  return written;
+}
 function writeLauncherEntries(entries2) {
   if (!entries2.length) return;
   const file3 = launcherInstalledFile(programData());
@@ -31735,6 +31783,7 @@ async function registerEngines(engines, selectorFrom, ctx, aliases = []) {
   ];
   if (values.length) await runScriptWithJsonAsync("set-registry-values.ps1", "PlanFile", { values });
   try {
+    writePcLauncherItems(ctx.pcInstalls.items);
     writeLauncherEntries(launcherEntries(engines, ctx));
   } catch (e) {
     warn("Unreal: the Epic Games Launcher's LauncherInstalled.dat was left as it is (" + errMsg(e) + ")");
@@ -32615,7 +32664,7 @@ async function installFromKept(dest, signer, what) {
   if (!installer2) return null;
   const installed = installedCometExe();
   if (fs35.existsSync(installed)) return installed;
-  if (!signedBy(installer2, signer)) {
+  if (!await signedByAsync(installer2, signer)) {
     fs35.rmSync(path54.join(dest, ".agent-sandbox-app"), { force: true });
     fs35.rmSync(installer2, { force: true });
     throw new Error(what + "'s installer is not signed by its vendor; deleted it (it is downloaded again next boot)");
@@ -32917,7 +32966,7 @@ var MARKER = ".agent-sandbox-app";
 function prefetchedFile(entry, fileName) {
   return path58.join(tool("apps", ...entry.id.split("/")) + ".download", fileName.replace(/[\\/:*?"<>|]/g, "_"));
 }
-var PARALLEL = 3;
+var PARALLEL = 2;
 var AppInstaller = class {
   constructor(env, options, parallel = PARALLEL) {
     this.env = env;
@@ -32938,19 +32987,21 @@ var AppInstaller = class {
     const todo = entries2.filter(
       (e) => !("remote" in e.source) && !("locked" in e.source) && !("store" in e.source) && !("npm" in e.source) && e.id !== "7zip" && (this.options.refresh || !exists(path58.join(tool("apps", ...e.id.split("/")), MARKER)))
     );
-    await Promise.all(
-      todo.map(async (entry) => {
-        try {
-          const d = await resolve(entry);
-          const file3 = prefetchedFile(entry, d.fileName);
-          if (exists(file3)) return;
-          await downloader.file(d.url, file3, {
-            sha256: d.sha256 ?? null,
-            ...entry.signer ? { verify: signatureCheck(entry.signer, d.fileName) } : {}
-          });
-        } catch {
-        }
-      })
+    await asBackground(
+      () => Promise.all(
+        todo.map(async (entry) => {
+          try {
+            const d = await resolve(entry);
+            const file3 = prefetchedFile(entry, d.fileName);
+            if (exists(file3)) return;
+            await downloader.file(d.url, file3, {
+              sha256: d.sha256 ?? null,
+              ...entry.signer ? { verify: signatureCheck(entry.signer, d.fileName) } : {}
+            });
+          } catch {
+          }
+        })
+      )
     );
   }
   /** Installs the entries (7-Zip first: the NSIS apps need it to unpack), then their shortcuts. */
@@ -33007,7 +33058,7 @@ var AppInstaller = class {
       const exe = findExe(dest, entry.exe) ?? (entry.unpack === "chromium" && entry.signer ? await installFromKept(dest, entry.signer, entry.name) : null);
       if (!exe) throw new Error(entry.exe + " not found in the download");
       await afterInstall(entry, exe);
-      if (!entry.service && (entry.cli || entry.id === "sysinternals")) {
+      if (!entry.service && (entry.cli || entry.onPath || entry.id === "sysinternals")) {
         if (entry.id === "rust-analyzer") this.env.prepend.unshift(path58.dirname(exe));
         else this.env.prepend.push(path58.dirname(exe));
       }
@@ -34573,8 +34624,19 @@ async function setupMesa(env, config2) {
   );
   if (config2.vulkan) await setupLavapipe(env, dir);
 }
-var VULKAN_RUNTIME = "https://sdk.lunarg.com/sdk/download/latest/windows/vulkan-runtime-components.zip";
-var VULKAN_RUNTIME_PINNED = "https://sdk.lunarg.com/sdk/download/1.4.350.0/windows/vulkan-runtime-components.zip";
+var VULKAN_LATEST = "https://vulkan.lunarg.com/sdk/latest.json";
+var runtimeUrl = (version2) => "https://sdk.lunarg.com/sdk/download/" + version2 + "/windows/vulkan-runtime-components.zip";
+var VULKAN_PINNED = "1.4.363.0";
+async function runtimeVersions() {
+  let latest = null;
+  try {
+    const value = (await fetchJson(VULKAN_LATEST)).windows;
+    if (typeof value === "string" && /^\d{1,2}\.\d{1,2}\.\d{1,4}\.\d{1,3}$/.test(value)) latest = value;
+  } catch {
+  }
+  const found = latest ? [latest, latest.replace(/\.\d+$/, ".0")] : [];
+  return [.../* @__PURE__ */ new Set([...found, VULKAN_PINNED])];
+}
 var setupLavapipe = async (env, mesaDir) => {
   const icd = path74.join(mesaDir, arch === "arm64" ? "lvp_icd.aarch64.json" : "lvp_icd.x86_64.json");
   if (!exists(icd)) throw new Error("this Mesa build has no lavapipe (" + path74.basename(icd) + ")");
@@ -34582,11 +34644,15 @@ var setupLavapipe = async (env, mesaDir) => {
   if (!exists(path74.join(dir, "vulkan-1.dll")) || !exists(path74.join(dir, "vulkaninfo.exe"))) {
     log("Downloading the Vulkan loader (~20 MB once) ...");
     const fetchRuntime = (url2) => downloader.archive(url2, dir, { locate: "vulkan-1.dll", fileName: "vulkan-runtime.zip", members: ["*/x64/*"] });
-    try {
-      await fetchRuntime(VULKAN_RUNTIME);
-    } catch (e) {
-      warn("The latest Vulkan runtime could not be downloaded (" + errMsg(e) + "); using version 1.4.350.0.");
-      await fetchRuntime(VULKAN_RUNTIME_PINNED);
+    const versions = await runtimeVersions();
+    for (const [n, version2] of versions.entries()) {
+      try {
+        await fetchRuntime(runtimeUrl(version2));
+        log("Vulkan loader " + version2 + " installed");
+        break;
+      } catch (e) {
+        if (n === versions.length - 1) throw new Error("the Vulkan loader could not be downloaded (" + errMsg(e) + ")");
+      }
     }
   }
   const register = (file3) => execAsync(
@@ -35702,6 +35768,7 @@ async function setupUnreal(env, config2, _ctx) {
     ...s,
     launcher: {
       installed: launcher !== null,
+      exe: launcher,
       installLocation: place.installLocation,
       problem: place.problem,
       freeBytes: place.freeBytes,
@@ -36146,7 +36213,7 @@ async function setupVcRuntime(env, summary = true) {
       log("Downloading the Visual C++ runtime (~25 MB once) ...");
       await downloadFile(VC_REDIST, installer2);
     }
-    if (!signedBy(installer2, SIGNERS.microsoft)) {
+    if (!await signedByAsync(installer2, SIGNERS.microsoft)) {
       fs62.rmSync(installer2, { force: true });
       throw new Error("vc_redist.x64.exe is not signed by Microsoft; deleted it (it is downloaded again next boot)");
     }
@@ -36960,7 +37027,9 @@ import path97 from "node:path";
 async function syncSkills(unityExe, agent) {
   const home = agent === "claude" ? { CLAUDE_CONFIG_DIR: claudeDir } : { CODEX_HOME: path97.join(stateDir, "codex") };
   try {
-    await execAsync(unityExe, ["skill", "sync", agent], { env: { ...process.env, ...UNITY_CLI_ENV, ...home } });
+    await execAsync(unityExe, ["skill", "sync", agent === "claude" ? "claude-code" : "codex"], {
+      env: { ...process.env, ...UNITY_CLI_ENV, ...home }
+    });
     return true;
   } catch (e) {
     warn("Unity skills for " + agent + " were not synced: " + (e instanceof Error ? e.message : String(e)));
@@ -38180,7 +38249,7 @@ function plan(config2, versions, o) {
 
 // src/guest/toolchains/step-scheduler.ts
 import { AsyncLocalStorage as AsyncLocalStorage4 } from "node:async_hooks";
-var PARALLEL2 = 4;
+var PARALLEL2 = 3;
 async function runReported(sink2, name, env, work) {
   try {
     await work();

package/dist/runtime/db.js

@@ -26069,6 +26069,7 @@ var GAMEDEV_APPS = [
     size: "100 MB",
     source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
     exe: "f3d.exe",
+    onPath: true,
     needs: ["mesa"]
   },
   {
@@ -27168,7 +27169,7 @@ var SERVICE_SPECS = {
   },
   steam: {
     kind: "steam",
-    label: "Steam (SteamCMD)",
+    label: "Steam",
     usedBy: ["steam"],
     sources: ["file", "sandbox"],
     singleHolder: true,
@@ -27204,7 +27205,7 @@ var SERVICE_SPECS = {
   },
   cfx: {
     kind: "cfx",
-    label: "Cfx.re (FiveM / RedM server key)",
+    label: "FiveM key",
     usedBy: ["fivem"],
     sources: ["typed", "file"],
     singleHolder: false,
@@ -27233,7 +27234,7 @@ var SERVICE_SPECS = {
   },
   keystore: {
     kind: "keystore",
-    label: "Android upload keystore",
+    label: "Android keystore",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27248,7 +27249,7 @@ var SERVICE_SPECS = {
   },
   play: {
     kind: "play",
-    label: "Google Play (service account)",
+    label: "Google Play",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -27259,7 +27260,7 @@ var SERVICE_SPECS = {
   },
   expo: {
     kind: "expo",
-    label: "Expo (EAS)",
+    label: "Expo",
     usedBy: ["reactNative"],
     sources: ["typed"],
     singleHolder: false,
@@ -27270,7 +27271,7 @@ var SERVICE_SPECS = {
   },
   appstore: {
     kind: "appstore",
-    label: "App Store Connect API key",
+    label: "App Store Connect",
     usedBy: ["reactNative", "flutter"],
     sources: ["file", "typed"],
     singleHolder: false,
@@ -27284,7 +27285,7 @@ var SERVICE_SPECS = {
   },
   perplexity: {
     kind: "perplexity",
-    label: "Perplexity API key",
+    label: "Perplexity API",
     usedBy: ["perplexity"],
     sources: ["pc", "file", "typed"],
     singleHolder: false,
@@ -27308,7 +27309,7 @@ var SERVICE_SPECS = {
   },
   comet: {
     kind: "comet",
-    label: "Comet (Perplexity browser)",
+    label: "Comet",
     usedBy: ["comet"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -27324,7 +27325,7 @@ var SERVICE_SPECS = {
   },
   perplexityapp: {
     kind: "perplexityapp",
-    label: "Perplexity desktop app",
+    label: "Perplexity app",
     usedBy: ["perplexityapp"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -28160,10 +28161,20 @@ function scriptArgs(name, args = []) {
 }
 
 // src/shared/download/spawn.ts
+import os3 from "node:os";
 import { spawn } from "node:child_process";
+function lowerPriority(pid) {
+  if (pid === void 0) return;
+  try {
+    os3.setPriority(pid, os3.constants.priority.PRIORITY_BELOW_NORMAL);
+  } catch {
+  }
+}
 function spawnAsync(file2, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   return new Promise((resolve, reject) => {
-    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...options });
+    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     child.once("error", reject);
     child.once("close", (code) => resolve(code ?? -1));
   });
@@ -28184,13 +28195,16 @@ function extractArchive(archive, destination, members2 = []) {
 }
 async function extract(archive, destination, members2) {
   fs7.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2], {
+    lowPriority: true
+  });
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
     if (zip !== archive) fs7.copyFileSync(archive, zip);
     status = await spawnAsync(
       SYSTEM.powershell(),
-      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination]),
+      { lowPriority: true }
     );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
@@ -28439,7 +28453,7 @@ import { spawn as spawn4 } from "node:child_process";
 
 // src/guest/runtime/process.ts
 import fs10 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 import path12 from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync2 } from "node:child_process";
 var outputSink = null;
@@ -28461,13 +28475,15 @@ function logLines(stream) {
   stream.on("end", () => logOutput(partial2));
 }
 async function execAsync(file2, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   const code = captureOutput() ? await new Promise((resolve, reject) => {
-    const child = spawn2(file2, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...options });
+    const child = spawn2(file2, args, { stdio: ["inherit", "pipe", "pipe"], windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     logLines(child.stdout);
     logLines(child.stderr);
     child.once("error", reject);
     child.once("close", (c) => resolve(c ?? -1));
-  }) : await spawnAsync(file2, args, { stdio: "inherit", ...options });
+  }) : await spawnAsync(file2, args, { stdio: "inherit", ...spawnOptions, ...lowPriority ? { lowPriority } : {} });
   if (code !== 0)
     throw new Error(path12.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
 }
@@ -28492,7 +28508,7 @@ function runScript(name, args = []) {
     throw new Error(name + " failed with exit code " + result.status + (errors ? ": " + errors.slice(0, 400) : ""));
 }
 function runScriptWithJson(name, param, data, args = []) {
-  const dir = fs10.mkdtempSync(path12.join(os3.tmpdir(), "sbx-"));
+  const dir = fs10.mkdtempSync(path12.join(os4.tmpdir(), "sbx-"));
   const file2 = path12.join(dir, "input.json");
   try {
     fs10.writeFileSync(file2, JSON.stringify(data), "utf8");