windows-development-sandbox 1.27.1 → 1.27.3

package/dist/bin/{chunk-RSIX7C6D.js → chunk-RU7XRN62.js}

@@ -22806,10 +22806,10 @@ var esm_default2 = createPrompt((config3, done) => {
     const answer = theme.style.answer(theme.style.renderSelectedChoices(selection, items));
     return [prefix, message, answer].filter(Boolean).join(" ");
   }
-  let helpLine;
+  let helpLine2;
   if (theme.helpMode !== "never" && instructions !== false) {
     if (typeof instructions === "string") {
-      helpLine = instructions;
+      helpLine2 = instructions;
     } else {
       const keys = [
         ["\u2191\u2193", "navigate"],
@@ -22820,7 +22820,7 @@ var esm_default2 = createPrompt((config3, done) => {
       if (shortcuts.invert)
         keys.push([shortcuts.invert, "invert"]);
       keys.push(["\u23CE", "submit"]);
-      helpLine = theme.style.keysHelpTip(keys);
+      helpLine2 = theme.style.keysHelpTip(keys);
     }
   }
   const lines = [
@@ -22829,7 +22829,7 @@ var esm_default2 = createPrompt((config3, done) => {
     " ",
     description ? theme.style.description(description) : "",
     errorMsg ? theme.style.error(errorMsg) : "",
-    helpLine
+    helpLine2
   ].filter(Boolean).join("\n").trimEnd();
   return `${lines}${cursorHide}`;
 });
@@ -23687,13 +23687,13 @@ var esm_default10 = createPrompt((config3, done) => {
     }
   });
   const message = theme.style.message(config3.message, status);
-  let helpLine;
+  let helpLine2;
   if (theme.helpMode !== "never") {
     if (config3.instructions) {
       const { pager, navigation } = config3.instructions;
-      helpLine = theme.style.help(searchResults.length > pageSize ? pager : navigation);
+      helpLine2 = theme.style.help(searchResults.length > pageSize ? pager : navigation);
     } else {
-      helpLine = theme.style.keysHelpTip([
+      helpLine2 = theme.style.keysHelpTip([
         ["\u2191\u2193", "navigate"],
         ["\u23CE", "select"]
       ]);
@@ -23735,7 +23735,7 @@ var esm_default10 = createPrompt((config3, done) => {
     error62 ?? page,
     " ",
     description ? theme.style.description(description) : "",
-    helpLine
+    helpLine2
   ].filter(Boolean).join("\n").trimEnd();
   return [header, body];
 });
@@ -23857,13 +23857,13 @@ var esm_default11 = createPrompt((config3, done) => {
     clearTimeout(searchTimeoutRef.current);
   }, []);
   const message = theme.style.message(config3.message, status);
-  let helpLine;
+  let helpLine2;
   if (theme.helpMode !== "never") {
     if (config3.instructions) {
       const { pager, navigation } = config3.instructions;
-      helpLine = theme.style.help(items.length > pageSize ? pager : navigation);
+      helpLine2 = theme.style.help(items.length > pageSize ? pager : navigation);
     } else {
-      helpLine = theme.style.keysHelpTip([
+      helpLine2 = theme.style.keysHelpTip([
         ["\u2191\u2193", "navigate"],
         ["\u23CE", "select"]
       ]);
@@ -23899,7 +23899,7 @@ var esm_default11 = createPrompt((config3, done) => {
     page,
     " ",
     description ? theme.style.description(description) : "",
-    helpLine
+    helpLine2
   ].filter(Boolean).join("\n").trimEnd();
   return `${lines}${cursorHide}`;
 });
@@ -46814,6 +46814,7 @@ var GAMEDEV_APPS = [
     size: "100 MB",
     source: { github: "f3d-app/f3d", asset: "^F3D-[\\d.]+-Windows-x86_64\\.zip$" },
     exe: "f3d.exe",
+    onPath: true,
     needs: ["mesa"]
   },
   {
@@ -47961,7 +47962,7 @@ var SERVICE_SPECS = {
   },
   steam: {
     kind: "steam",
-    label: "Steam (SteamCMD)",
+    label: "Steam",
     usedBy: ["steam"],
     sources: ["file", "sandbox"],
     singleHolder: true,
@@ -47997,7 +47998,7 @@ var SERVICE_SPECS = {
   },
   cfx: {
     kind: "cfx",
-    label: "Cfx.re (FiveM / RedM server key)",
+    label: "FiveM key",
     usedBy: ["fivem"],
     sources: ["typed", "file"],
     singleHolder: false,
@@ -48026,7 +48027,7 @@ var SERVICE_SPECS = {
   },
   keystore: {
     kind: "keystore",
-    label: "Android upload keystore",
+    label: "Android keystore",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -48041,7 +48042,7 @@ var SERVICE_SPECS = {
   },
   play: {
     kind: "play",
-    label: "Google Play (service account)",
+    label: "Google Play",
     usedBy: ["android"],
     sources: ["file"],
     singleHolder: false,
@@ -48052,7 +48053,7 @@ var SERVICE_SPECS = {
   },
   expo: {
     kind: "expo",
-    label: "Expo (EAS)",
+    label: "Expo",
     usedBy: ["reactNative"],
     sources: ["typed"],
     singleHolder: false,
@@ -48063,7 +48064,7 @@ var SERVICE_SPECS = {
   },
   appstore: {
     kind: "appstore",
-    label: "App Store Connect API key",
+    label: "App Store Connect",
     usedBy: ["reactNative", "flutter"],
     sources: ["file", "typed"],
     singleHolder: false,
@@ -48077,7 +48078,7 @@ var SERVICE_SPECS = {
   },
   perplexity: {
     kind: "perplexity",
-    label: "Perplexity API key",
+    label: "Perplexity API",
     usedBy: ["perplexity"],
     sources: ["pc", "file", "typed"],
     singleHolder: false,
@@ -48101,7 +48102,7 @@ var SERVICE_SPECS = {
   },
   comet: {
     kind: "comet",
-    label: "Comet (Perplexity browser)",
+    label: "Comet",
     usedBy: ["comet"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -48117,7 +48118,7 @@ var SERVICE_SPECS = {
   },
   perplexityapp: {
     kind: "perplexityapp",
-    label: "Perplexity desktop app",
+    label: "Perplexity app",
     usedBy: ["perplexityapp"],
     sources: ["sandbox"],
     singleHolder: false,
@@ -56560,7 +56561,7 @@ function clearLiveRecord(storageRoot, dataPath) {
 import fs71 from "node:fs";
 import path94 from "node:path";
 import crypto14 from "node:crypto";
-import os16 from "node:os";
+import os17 from "node:os";
 
 // src/shared/accounts/fingerprint.ts
 import crypto8 from "node:crypto";
@@ -58861,10 +58862,20 @@ function scriptArgs(name2, args = []) {
 }
 
 // src/shared/download/spawn.ts
+import os14 from "node:os";
 import { spawn as spawn9 } from "node:child_process";
+function lowerPriority(pid) {
+  if (pid === void 0) return;
+  try {
+    os14.setPriority(pid, os14.constants.priority.PRIORITY_BELOW_NORMAL);
+  } catch {
+  }
+}
 function spawnAsync(file2, args, options = {}) {
+  const { lowPriority, ...spawnOptions } = options;
   return new Promise((resolve, reject) => {
-    const child = spawn9(file2, args, { stdio: "ignore", windowsHide: true, ...options });
+    const child = spawn9(file2, args, { stdio: "ignore", windowsHide: true, ...spawnOptions });
+    if (lowPriority) lowerPriority(child.pid);
     child.once("error", reject);
     child.once("close", (code) => resolve(code ?? -1));
   });
@@ -58885,13 +58896,16 @@ function extractArchive(archive, destination, members2 = []) {
 }
 async function extract(archive, destination, members2) {
   fs57.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2], {
+    lowPriority: true
+  });
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
     if (zip !== archive) fs57.copyFileSync(archive, zip);
     status = await spawnAsync(
       SYSTEM.powershell(),
-      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination]),
+      { lowPriority: true }
     );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
@@ -59789,10 +59803,10 @@ function pcHasPwsh(env = process.env, exists2 = fs60.existsSync) {
 
 // src/host/launch/pc-scan.ts
 import fs61 from "node:fs";
-import os14 from "node:os";
+import os15 from "node:os";
 import path84 from "node:path";
 function msvcRust() {
-  const settings = path84.join(process.env.RUSTUP_HOME ?? path84.join(os14.homedir(), ".rustup"), "settings.toml");
+  const settings = path84.join(process.env.RUSTUP_HOME ?? path84.join(os15.homedir(), ".rustup"), "settings.toml");
   try {
     return /default_host_triple\s*=\s*"[^"]*-msvc"/.test(fs61.readFileSync(settings, "utf8").slice(0, 64 * 1024));
   } catch {
@@ -59959,7 +59973,7 @@ function databasePlanner(config3, compose2) {
 import path89 from "node:path";
 
 // src/host/launch/wsb-file.ts
-import os15 from "node:os";
+import os16 from "node:os";
 var GUEST = {
   launch: "C:\\AgentLaunch",
   data: "C:\\AgentData",
@@ -60002,7 +60016,7 @@ function memoryNote(decision) {
   if (decision.limitedBy !== "commit" || decision.withoutCommitMb - decision.mb < 2048) return null;
   return "The sandbox gets " + decision.mb / 1024 + " GB of memory instead of " + decision.withoutCommitMb / 1024 + " GB: this PC has only " + Math.floor((decision.commitAvailableMb ?? 0) / 1024) + " GB of memory (RAM plus paging file) left to hand out, and if it runs out Windows closes the sandbox. A bigger Windows paging file, or closing other programs, gives it more.";
 }
-function resolveMemoryMb(sandbox, freeMemoryBytes = os15.freemem(), totalMemoryBytes = os15.totalmem(), commitAvailableMb = null) {
+function resolveMemoryMb(sandbox, freeMemoryBytes = os16.freemem(), totalMemoryBytes = os16.totalmem(), commitAvailableMb = null) {
   if (sandbox.memoryMb !== "auto") return sandbox.memoryMb;
   const decision = decideMemory(
     sandbox,
@@ -60915,7 +60929,7 @@ function generateSandbox(given, opened) {
     resolveMemoryMb(config3.sandbox, o.freeMemoryBytes, void 0, commitAvailableMb),
     ...others.map((p) => typeof p.config.sandbox.memoryMb === "number" ? p.config.sandbox.memoryMb : 0)
   );
-  const memoryMb = cappedMemoryMb(askedMb, config3.sandbox, Math.floor(os16.totalmem() / 1048576));
+  const memoryMb = cappedMemoryMb(askedMb, config3.sandbox, Math.floor(os17.totalmem() / 1048576));
   const launchId = o.launchId ?? newLaunchId();
   const launchPath = path94.join(storageRoot, "launches", launchId);
   ensureDir(dataPath);
@@ -60988,8 +61002,8 @@ function generateSandbox(given, opened) {
     memoryNote: residentNote(askedMb, memoryMb) ?? (config3.sandbox.memoryMb === "auto" ? memoryNote(
       decideMemory(
         config3.sandbox,
-        Math.floor((o.freeMemoryBytes ?? os16.freemem()) / 1048576),
-        Math.floor(os16.totalmem() / 1048576),
+        Math.floor((o.freeMemoryBytes ?? os17.freemem()) / 1048576),
+        Math.floor(os17.totalmem() / 1048576),
         commitAvailableMb
       )
     ) : null),
@@ -62927,16 +62941,19 @@ function howToSave(spec) {
   if (spec.returns) return "sign in once in this sandbox, or: sandbox account import " + spec.kind;
   return spec.sources.includes("typed") ? "save one: sandbox account login " + spec.kind : "save one: sandbox account import " + spec.kind + " --from <file>";
 }
-function takeFromPc(kind, pc, store) {
+function takeFromPc(kind, pc, store, saved) {
   const source = HOST_SOURCES[kind];
-  if (!pc || !source.fromPc) return null;
+  if (!pc || !source.fromPc) return saved;
+  if (saved && store.info(kind)?.source !== "pc") return saved;
   let payload = null;
   try {
     payload = source.fromPc(pc);
   } catch {
-    return null;
+    return saved;
   }
-  if (payload) store.save(kind, payload, "pc", source.summary(payload));
+  if (!payload) return saved;
+  if (!saved || fingerprint(payload) !== fingerprint(saved))
+    store.save(kind, payload, "pc", source.summary(payload));
   return payload;
 }
 function prepareServiceAccounts(i) {
@@ -62968,7 +62985,7 @@ function prepareServiceAccounts(i) {
       } catch {
         unreadable = true;
       }
-      if (!payload && !unreadable) payload = takeFromPc(kind, i.pc, store);
+      if (!unreadable) payload = takeFromPc(kind, i.pc, store, payload);
       if (spec.singleHolder) {
         const claim2 = leases.claim(kind, dataSet, i.launchId, payload ? fingerprint(payload) : null, i.isRunning);
         if (!claim2.ok) {
@@ -63178,9 +63195,6 @@ async function prepareStorePackages(apps, o) {
   return { notes };
 }
 
-// src/host/pc-installs/epic.ts
-import path117 from "node:path";
-
 // src/shared/unreal/engines.ts
 import path113 from "node:path";
 var win = path113.win32;
@@ -63226,6 +63240,9 @@ var stripBom2 = (text) => text.replace(/^\uFEFF/, "");
 function launcherInstalledFile(programData) {
   return win2.join(programData, "Epic", "UnrealEngineLauncher", "LauncherInstalled.dat");
 }
+function launcherManifestsDir(programData) {
+  return win2.join(programData, "Epic", "EpicGamesLauncher", "Data", "Manifests");
+}
 var EntrySchema = external_exports.looseObject({
   InstallLocation: external_exports.string().max(1024),
   AppName: external_exports.string().max(200),
@@ -63261,6 +63278,41 @@ var ItemSchema = external_exports.looseObject({
   InstallSize: external_exports.number().int().min(0).optional(),
   bIsIncompleteInstall: external_exports.boolean().optional()
 });
+function itemInstallLocation(text) {
+  return itemInfo(text)?.installLocation ?? null;
+}
+function itemInfo(text) {
+  try {
+    const item = ItemSchema.parse(JSON.parse(stripBom2(text)));
+    const at = item.InstallLocation;
+    return at && win2.isAbsolute(at) ? { installLocation: at, sizeBytes: item.InstallSize ?? null } : null;
+  } catch {
+    return null;
+  }
+}
+var ITEM_NAME = /^[A-Za-z0-9_-]{1,80}\.item$/;
+function relocateItem(text, from, to) {
+  let item;
+  try {
+    item = JSON.parse(stripBom2(text));
+  } catch {
+    return null;
+  }
+  if (!item || typeof item !== "object" || Array.isArray(item)) return null;
+  const base = win2.resolve(from).toLowerCase();
+  const out = {};
+  for (const [key3, value] of Object.entries(item)) {
+    if (typeof value !== "string" || !win2.isAbsolute(value)) {
+      out[key3] = value;
+      continue;
+    }
+    const full = win2.resolve(value);
+    const low = full.toLowerCase();
+    if (low === base || low.startsWith(base + "\\")) out[key3] = to + full.slice(base.length);
+  }
+  const at = typeof out.InstallLocation === "string" ? out.InstallLocation : "";
+  return at.toLowerCase() === to.toLowerCase() ? JSON.stringify(out, null, "	") : null;
+}
 
 // src/shared/unreal/status.ts
 var UNREAL_STATUS_FILE = "status.json";
@@ -63404,6 +63456,7 @@ function vaultPacks(vault, fs141) {
 }
 
 // src/host/pc-installs/epic.ts
+import path117 from "node:path";
 var APP = /^[A-Za-z0-9._-]{1,100}$/;
 function findEpicGames(text, wanted) {
   const names = wanted === true ? null : new Set(wanted.map((w) => String(w).toLowerCase()));
@@ -63925,6 +63978,25 @@ var versionOf = (dir, files) => {
   const bytes = files.read(win9.join(dir, "Engine", "Build", "Build.version"), 64 * 1024);
   return bytes ? parseBuildVersion(bytes.toString("utf8")) : null;
 };
+var MAX_ITEM_BYTES2 = 64 * 1024;
+function launcherItemOf(dir, files) {
+  if (!files.manifests) return {};
+  const want = win9.resolve(dir).toLowerCase();
+  for (const name2 of files.list(files.manifests).filter((n) => ITEM_NAME.test(n))) {
+    const bytes = files.read(win9.join(files.manifests, name2), MAX_ITEM_BYTES2);
+    const at = bytes ? itemInstallLocation(bytes.toString("utf8")) : null;
+    if (bytes && at && win9.resolve(at).toLowerCase() === want)
+      return { launcherItem: { name: name2, text: bytes.toString("utf8") } };
+  }
+  return {};
+}
+function launcherIdsOf(dir, files) {
+  const want = win9.resolve(dir).toLowerCase();
+  const entry = (files.launcherInstalled ? launcherInstallations(files.launcherInstalled) : []).find(
+    (i) => APP_NAME.test(i.appName) && i.ids && win9.resolve(i.installLocation).toLowerCase() === want
+  );
+  return entry?.ids ? { launcher: entry.ids } : {};
+}
 var isWanted = (wanted, v) => wanted === true || wanted.map((w) => String(w).replace(/^UE_/i, "")).includes(v.major + "." + v.minor);
 function findUnrealInstalls(files, wanted) {
   const found = [];
@@ -63944,7 +64016,8 @@ function findUnrealInstalls(files, wanted) {
       version: versionText(v),
       host: win9.normalize(dir),
       guest: "",
-      ...ids ? { launcher: ids } : {}
+      ...ids ? { launcher: ids } : {},
+      ...launcherItemOf(dir, files)
     });
   };
   const listed = files.launcherInstalled ? launcherInstallations(files.launcherInstalled) : [];
@@ -63989,7 +64062,10 @@ function findEngineFolders(files, folders) {
       host: dir,
       guest: "",
       writable: true,
-      ...source ? { buildId: source.buildId } : {}
+      ...source ? { buildId: source.buildId } : {},
+      // An engine the launcher installed keeps its ids and manifest, so the sandbox's launcher lists it too.
+      ...launcherIdsOf(dir, { launcherInstalled: files.launcherInstalled ?? null }),
+      ...files.list ? launcherItemOf(dir, { manifests: files.manifests, list: files.list, read: files.read }) : {}
     });
   }
   return found;
@@ -64017,6 +64093,7 @@ function unrealPcFiles(pc) {
       win9.join(d, "Program Files", "Epic Games"),
       win9.join(d, "Epic Games")
     ]),
+    manifests: launcherManifestsDir(pc.programData),
     list: listDir2,
     read: readBoundedFile
   };
@@ -64155,8 +64232,9 @@ function discoverPcInstalls(s3, o, pc = pcEnv()) {
           readOnly: !writable,
           label: writable ? "this PC, writable" : "this PC, read-only"
         });
-        const { host: _host, ...shown } = install;
-        items.push({ ...shown, guest });
+        const { host: _host, launcherItem, ...shown } = install;
+        const moved = launcherItem ? relocateItem(launcherItem.text, install.host, guest) : null;
+        items.push({ ...shown, guest, ...moved ? { launcherItem: { name: launcherItem.name, text: moved } } : {} });
       } catch (e) {
         notes.push("pcInstalls: " + install.name + " is not mapped: " + errMsg(e));
       }
@@ -64866,7 +64944,7 @@ var SandboxChannel = class {
 
 // src/host/channel/attach.ts
 import net4 from "node:net";
-import os17 from "node:os";
+import os18 from "node:os";
 
 // src/shared/pty/protocol.ts
 var FrameType = {
@@ -65512,7 +65590,7 @@ function runTerminalClient(socket, token, options = {}) {
 
 // src/host/channel/attach.ts
 var ipToInt = (ip) => ip.split(".").reduce((n, part) => n * 256 + Number(part), 0);
-function isSandboxAddress(ip, interfaces = os17.networkInterfaces()) {
+function isSandboxAddress(ip, interfaces = os18.networkInterfaces()) {
   if (!net4.isIPv4(ip)) return false;
   return Object.entries(interfaces).some(
     ([name2, list2]) => /^vEthernet/i.test(name2) && !/WSL/i.test(name2) && (list2 ?? []).some((i) => {
@@ -66353,7 +66431,7 @@ var AuditCollector = class {
 };
 
 // src/sync/watcher.ts
-import os18 from "node:os";
+import os19 from "node:os";
 var WATCH_INTERVAL_MS = 60 * 1e3;
 var FIRST_SYNC_MS = 3e4;
 var AUDIT_FLUSH_MS = 1e4;
@@ -66412,7 +66490,7 @@ var Watcher = class {
   memoryStream = null;
   watchdog = WATCHDOG_START;
   watchdogBusy = false;
-  lastCpu = os18.cpus();
+  lastCpu = os19.cpus();
   lastHostLog = 0;
   /** Runs until the sandbox has closed and the final sync is done (or the end deadline passed). */
   async run() {
@@ -66532,7 +66610,7 @@ var Watcher = class {
     try {
       const settings = readLoadSettings(this.storageRoot, this.dataPath);
       const memory = this.memoryStream?.latest() ?? await readHostMemoryAsync(this.storageRoot);
-      const cpus = os18.cpus();
+      const cpus = os19.cpus();
       const cpuPercent = cpuPercentBetween(this.lastCpu, cpus);
       this.lastCpu = cpus;
       const nowMs = Date.now();
@@ -69257,7 +69335,7 @@ function continuesAfterFailedMigration(command2) {
 
 // src/cli/services/update-service.ts
 import fs112 from "node:fs";
-import os19 from "node:os";
+import os20 from "node:os";
 import path156 from "node:path";
 
 // src/host/update/release-source.ts
@@ -69692,7 +69770,7 @@ var Updater = class {
 var NPM_UPDATE_COMMAND = "npm install -g windows-development-sandbox";
 var AUTO_CHECK_HOURS = 24;
 var SeenSchema = external_exports.object({ seen: external_exports.string() });
-function runsAsSystem(env = process.env, username = os19.userInfo().username) {
+function runsAsSystem(env = process.env, username = os20.userInfo().username) {
   return username.toUpperCase() === "SYSTEM" || (env.USERNAME ?? "").endsWith("$");
 }
 var UpdateService = class _UpdateService {
@@ -70315,7 +70393,7 @@ import { spawnSync as spawnSync29 } from "node:child_process";
 
 // src/cli/commands/setup/facts.ts
 var import_lodash27 = __toESM(require_lodash(), 1);
-import os20 from "node:os";
+import os21 from "node:os";
 var FEATURE = "Containers-DisposableClientVM";
 var ENABLE_COMMAND = "Enable-WindowsOptionalFeature -Online -FeatureName " + FEATURE + " -All -NoRestart";
 function parseRegQuery(text) {
@@ -70363,7 +70441,7 @@ function gatherFacts(storageRoot) {
     sandboxExe: fileExists(system32("WindowsSandbox.exe")),
     virtualizationFirmware: probe.virtualizationFirmware ?? null,
     hypervisorPresent: probe.hypervisorPresent ?? null,
-    totalRamBytes: os20.totalmem(),
+    totalRamBytes: os21.totalmem(),
     freeDiskBytes: freeBytesAt(storageRoot),
     storageRoot,
     nodeVersion: process.version
@@ -71381,6 +71459,12 @@ import path162 from "node:path";
 
 // src/app/context.ts
 var implement = implementer();
+function reloadSettings(ctx) {
+  try {
+    ctx.loaded = loadConfig(ctx.loaded.configPath ?? ctx.options.config);
+  } catch {
+  }
+}
 function typedConfirm(io) {
   return (prompt, expected) => io.confirm({
     title: prompt,
@@ -73088,13 +73172,13 @@ function fingerprintOf(der) {
 // src/host/remote/firewall.ts
 import crypto22 from "node:crypto";
 import fs119 from "node:fs";
-import os22 from "node:os";
+import os23 from "node:os";
 import path168 from "node:path";
 import { spawn as spawn13 } from "node:child_process";
 
 // src/host/remote/lan.ts
 import net7 from "node:net";
-import os21 from "node:os";
+import os22 from "node:os";
 var toInt = (ip) => ip.split(".").reduce((n, part) => n * 256 + Number(part), 0) >>> 0;
 function isPrivateIPv4(ip) {
   if (!net7.isIPv4(ip)) return false;
@@ -73111,7 +73195,7 @@ function plainIPv4(ip) {
 function virtualAdapter(name2) {
   return /^vEthernet/i.test(name2) || /Hyper-V|WSL/i.test(name2);
 }
-function privateAddresses(interfaces = os21.networkInterfaces()) {
+function privateAddresses(interfaces = os22.networkInterfaces()) {
   const out = [];
   for (const [adapter, list2] of Object.entries(interfaces)) {
     if (virtualAdapter(adapter)) continue;
@@ -73121,7 +73205,7 @@ function privateAddresses(interfaces = os21.networkInterfaces()) {
   }
   return out;
 }
-function chooseLanAddress(configured, interfaces = os21.networkInterfaces()) {
+function chooseLanAddress(configured, interfaces = os22.networkInterfaces()) {
   const own2 = privateAddresses(interfaces);
   if (configured) {
     if (!isPrivateIPv4(configured))
@@ -73149,7 +73233,7 @@ function sameSubnet(a, b, netmask) {
   const mask = toInt(netmask);
   return mask !== 0 && (toInt(a) & mask) === (toInt(b) & mask);
 }
-function lanPeerProblem(peer, local, bound, interfaces = os21.networkInterfaces()) {
+function lanPeerProblem(peer, local, bound, interfaces = os22.networkInterfaces()) {
   const ip = plainIPv4(peer);
   if (plainIPv4(local) !== bound.address) return "reached another address of this PC";
   if (!isPrivateIPv4(ip)) return "not a private address";
@@ -73200,7 +73284,7 @@ var OutcomeSchema3 = external_exports.object({
   commands: external_exports.array(external_exports.string().max(1e3)).max(4).optional()
 });
 async function runScript2(request2, dryRun, run3) {
-  const dir = fs119.mkdtempSync(path168.join(os22.tmpdir(), "agent-sandbox-firewall-"));
+  const dir = fs119.mkdtempSync(path168.join(os23.tmpdir(), "agent-sandbox-firewall-"));
   try {
     const file2 = path168.join(dir, "request.json");
     fs119.writeFileSync(file2, JSON.stringify(request2, null, 2), "utf8");
@@ -74793,7 +74877,7 @@ var RemoteGate = class {
 };
 
 // src/host/remote/tls-store.ts
-import os23 from "node:os";
+import os24 from "node:os";
 import path171 from "node:path";
 var TlsFileSchema = external_exports.strictObject({
   cert: external_exports.string().max(8e3),
@@ -74835,7 +74919,7 @@ var TlsStore = class {
   }
   /** A new certificate (the old one is gone). */
   renew(addresses) {
-    const made = makeCertificate({ addresses, dnsNames: [os23.hostname()], now: this.now() });
+    const made = makeCertificate({ addresses, dnsNames: [os24.hostname()], now: this.now() });
     this.file.write({
       cert: made.cert,
       key: this.secrets.seal(made.key),
@@ -76331,12 +76415,16 @@ var ServiceRowSchema = external_exports.object({
   canImport: external_exports.boolean().describe("It can be taken from this PC or a file (sandbox account import)"),
   canLogin: external_exports.boolean().describe("It can be typed (sandbox account login)"),
   needsFile: external_exports.boolean().describe("Importing it needs --from <file>"),
+  fromPc: external_exports.boolean().describe("This PC's own program can give it (the next launch takes it when sharing is on)"),
+  hasFileSource: external_exports.boolean().describe("It can be read from a file you name"),
+  onPc: external_exports.boolean().nullable().describe("This PC has one to take (null: it cannot be taken from this PC). Only the presence, never the sign-in"),
+  sandboxOnly: external_exports.boolean().describe("Only a sandbox can give it: sign in once inside one and it is kept"),
   ready: external_exports.boolean().describe("Its sign-in is written; false: the menu and the web leave it out (the CLI says coming)")
 });
 var ServicesListSchema = external_exports.object({ services: external_exports.array(ServiceRowSchema) });
 var STATE_TEXT = {
   none: "not saved",
-  saved: "saved (encrypted)",
+  saved: "saved",
   unreadable: "cannot be read"
 };
 var STATE_TONE = {
@@ -76345,10 +76433,10 @@ var STATE_TONE = {
   unreadable: "danger"
 };
 var SOURCE_TEXT = {
-  pc: "taken from this PC",
+  pc: "from this PC",
   file: "from a file",
-  typed: "typed in",
-  sandbox: "signed in (or renewed) in a sandbox"
+  typed: "by typing it",
+  sandbox: "from a sandbox"
 };
 var day = (iso) => iso ? iso.slice(0, 10) : "";
 function servicesText(o) {
@@ -76381,7 +76469,8 @@ var serviceImport = defineOperation({
   summary: "save a service sign-in from this PC's program or a file, for sandboxes",
   input: external_exports.object({
     name: KindSchema,
-    from: external_exports.string().max(1e3).optional().describe("(import) the file or folder to take the sign-in from")
+    from: external_exports.string().max(1e3).optional().describe("(import) the file or folder to take the sign-in from"),
+    file: external_exports.boolean().optional().describe("(import) ask for a file even when this PC has one to take")
   }),
   output: MessageSchema2,
   text: (o) => o.message,
@@ -76410,6 +76499,12 @@ var SERVICE_OPERATIONS = [serviceImport, serviceLogin, serviceLogout];
 function serviceCategory(kind) {
   return "service:" + kind;
 }
+var PC_HELP = {
+  epic: "Sign in to the Epic launcher here, with Remember me on.",
+  steam: "Log in once with SteamCMD in C:\\steamcmd.",
+  unity: "Sign in to the Unity Hub here.",
+  perplexity: "Set PERPLEXITY_API_KEY for your Windows user."
+};
 function serviceActions(s3) {
   return [
     action(
@@ -76422,51 +76517,75 @@ function serviceActions(s3) {
         importance: 1
       }
     ),
-    ...s3.canImport ? [action(serviceImport, { name: s3.kind }, { key: "i", verb: "import", importance: 1 })] : [],
-    ...s3.canLogin ? [action(serviceLogin, { name: s3.kind }, { key: "n", verb: "sign in", importance: 1 })] : [],
+    ...s3.fromPc ? [
+      action(
+        serviceImport,
+        { name: s3.kind },
+        { key: "i", verb: "take from this PC", label: "Take this PC's sign-in", importance: 1 }
+      )
+    ] : [],
+    ...s3.hasFileSource ? [
+      action(
+        serviceImport,
+        { name: s3.kind, file: true },
+        {
+          key: s3.fromPc ? "f" : "i",
+          verb: "import a file",
+          label: "Import from a file\u2026",
+          importance: s3.fromPc ? 2 : 1
+        }
+      )
+    ] : [],
+    ...s3.canLogin ? [
+      action(
+        serviceLogin,
+        { name: s3.kind },
+        { key: "n", verb: "type it in", label: "Type the sign-in\u2026", importance: 1 }
+      )
+    ] : [],
     ...s3.state !== "none" ? [action(serviceLogout, { name: s3.kind }, { key: "x", verb: "forget", importance: 2 })] : []
   ];
 }
-function howTo(s3) {
-  const ways = [...s3.canImport ? ["import it"] : [], ...s3.canLogin ? ["type it in"] : []];
-  return ways.length ? ways.join(" or ") : "sign in once inside a sandbox (it can't be copied from this PC: Windows locks it to your PC account)";
+function helpLine(s3) {
+  if (s3.state !== "none") return void 0;
+  if (s3.sandboxOnly) return "Sign in once inside a sandbox; it is kept for the next ones.";
+  if (s3.fromPc && s3.onPc)
+    return s3.share ? "The next sandbox takes this PC's." : "Share it and the next sandbox takes this PC's.";
+  if (s3.fromPc) return PC_HELP[s3.kind] ?? "Not found on this PC.";
+  return s3.canLogin ? "Type it in, or import it from a file." : "Import it from a file.";
 }
 function serviceSection(s3) {
   const facts2 = [
     {
       id: s3.kind + ":share",
-      label: "Shared with sandboxes",
+      label: "Shared",
       value: s3.share ? "on" : "off",
       tone: s3.share ? "ok" : "muted",
-      description: "For sandboxes that use " + s3.usedFor + ". " + s3.warnings.join(" ")
+      description: "The agent can use it."
     },
     {
       id: s3.kind + ":state",
       label: "Sign-in",
       value: STATE_TEXT[s3.state] + (s3.savedAt ? "  " + day(s3.savedAt) : ""),
       tone: STATE_TONE[s3.state],
-      description: s3.state === "none" ? "Save one: " + howTo(s3) + "." : void 0
+      description: s3.state === "unreadable" ? "Only the Windows user that saved it can read it: save it again." : helpLine(s3) ?? (s3.source ? "Saved " + (SOURCE_TEXT[s3.source] ?? s3.source) + "." : void 0)
     },
-    ...s3.source ? [{ id: s3.kind + ":source", label: "From", value: SOURCE_TEXT[s3.source] ?? s3.source }] : [],
+    ...s3.onPc === null ? [] : [
+      {
+        id: s3.kind + ":pc",
+        label: "On this PC",
+        value: s3.onPc ? "found" : "not found",
+        tone: s3.onPc ? "ok" : "muted"
+      }
+    ],
     ...s3.summary ? [{ id: s3.kind + ":summary", label: "Account", value: s3.summary }] : [],
     ...s3.heldBy ? [{ id: s3.kind + ":held", label: "In use by", value: "sandbox " + s3.heldBy, tone: "accent" }] : []
   ];
-  const warnings = s3.warnings.map((w, i) => ({
-    id: s3.kind + ":warning:" + i,
-    label: w,
-    tone: "warn",
-    group: "Before you share it"
-  }));
-  const notes = [
-    ...s3.state === "unreadable" ? [{ text: "Only the Windows user that saved it can read it: save it again.", tone: "muted" }] : []
-  ];
   return {
     id: serviceCategory(s3.kind),
     title: s3.label,
     summary: (s3.share ? "shared" : "not shared") + " \xB7 " + STATE_TEXT[s3.state],
     facts: facts2,
-    items: warnings,
-    notes,
     actions: serviceActions(s3)
   };
 }
@@ -76781,7 +76900,17 @@ var accountsView = defineView({
 // src/app/features/accounts/services.run.ts
 import fs124 from "node:fs";
 import path174 from "node:path";
-function serviceRow(kind, config3, store, leases) {
+function presentOnPc(kind, pc) {
+  const source = HOST_SOURCES[kind];
+  if (!source.fromPc) return null;
+  if (!pc) return false;
+  try {
+    return source.fromPc(pc) !== null;
+  } catch {
+    return false;
+  }
+}
+function serviceRow(kind, config3, store, leases, pc) {
   const spec = SERVICE_SPECS[kind];
   const source = HOST_SOURCES[kind];
   const state = store.state(kind);
@@ -76802,6 +76931,10 @@ function serviceRow(kind, config3, store, leases) {
     canImport: Boolean(source.fromPc || source.fromFile),
     canLogin: Boolean(source.fromAnswers),
     needsFile: Boolean(source.fromFile && !source.fromPc),
+    fromPc: Boolean(source.fromPc),
+    hasFileSource: Boolean(source.fromFile),
+    onPc: presentOnPc(kind, pc),
+    sandboxOnly: !source.fromPc && !source.fromFile && !source.fromAnswers,
     ready: isKindReady(kind)
   };
 }
@@ -76849,7 +76982,7 @@ function refuseSandboxOnly(spec) {
 function savedMessage(kind, share2) {
   return "Saved your " + SERVICE_SPECS[kind].label + " sign-in (encrypted for your Windows user)." + (share2 ? "" : " Sandboxes get it once you turn on Share with sandboxes.");
 }
-async function importServiceFlow(io, kind, from, deps) {
+async function importServiceFlow(io, kind, from, deps, wantFile = false) {
   const spec = SERVICE_SPECS[kind];
   const source = HOST_SOURCES[kind];
   if (!source.fromPc && !source.fromFile) refuseSandboxOnly(spec);
@@ -76857,7 +76990,7 @@ async function importServiceFlow(io, kind, from, deps) {
     failWith(spec.label + " cannot be imported.", "Type it instead.", {
       op: "accounts.service.login",
       input: { name: kind },
-      label: "Sign in\u2026",
+      label: "Type the sign-in\u2026",
       cli: "sandbox account login " + kind
     });
   let file2 = from === void 0 ? void 0 : path174.resolve(from);
@@ -76868,7 +77001,7 @@ async function importServiceFlow(io, kind, from, deps) {
       return false;
     }
   };
-  const useFile = Boolean(source.fromFile && (file2 ? isFile(file2) : !source.fromPc));
+  const useFile = Boolean(source.fromFile && (file2 ? isFile(file2) : wantFile || !source.fromPc));
   if (useFile && !file2) {
     const asked = await io.path({ title: "The " + spec.label + " file:", pathKind: "file" });
     if (asked === void 0) cancelled();
@@ -76945,7 +77078,8 @@ var listServicesRun = implement(listServices, async (ctx, input2) => {
   if (name2 !== void 0 && name2 !== "" && !isServiceKind(name2))
     fail('There is no service called "' + safeText(input2.name ?? "") + '".', "Use one of: " + SERVICE_KINDS.join(", "));
   const kinds = name2 ? [name2] : [...SERVICE_KINDS];
-  return { services: kinds.map((k) => serviceRow(k, ctx.loaded.config, store, leases)) };
+  const pc = pcEnv();
+  return { services: kinds.map((k) => serviceRow(k, ctx.loaded.config, store, leases, pc)) };
 });
 var serviceImportRun = implement(serviceImport, async (ctx, input2, io) => {
   requireOnPc("account import");
@@ -76955,11 +77089,17 @@ var serviceImportRun = implement(serviceImport, async (ctx, input2, io) => {
     "import",
     (s3) => Boolean(HOST_SOURCES[s3.kind].fromPc || HOST_SOURCES[s3.kind].fromFile)
   );
-  return importServiceFlow(io, kind, input2.from, {
-    store: new ServiceAccountStore(ctx.storageRoot),
-    pc: pcEnv(),
-    share: ctx.loaded.config.accounts[kind].share
-  });
+  return importServiceFlow(
+    io,
+    kind,
+    input2.from,
+    {
+      store: new ServiceAccountStore(ctx.storageRoot),
+      pc: pcEnv(),
+      share: ctx.loaded.config.accounts[kind].share
+    },
+    input2.file ?? false
+  );
 });
 var serviceLoginRun = implement(serviceLogin, async (ctx, input2, io) => {
   requireOnPc("account login");
@@ -83319,7 +83459,7 @@ var vpnLogoutRun = implement(vpnLogout, async (ctx, _input, io) => {
 });
 
 // src/app/features/github/github.run.ts
-import os24 from "node:os";
+import os25 from "node:os";
 async function saveGithubTokenFlow(io, store, verify = verifyGithubToken) {
   io.log("Make a GitHub token only for sandboxes:");
   GITHUB_STEPS.forEach((s3, i) => io.log("  " + (i + 1) + ". " + s3));
@@ -83380,7 +83520,7 @@ var githubStatusRun = implement(githubStatus, async (ctx) => {
     expiresAt: token === "none" ? null : store.check()?.expiresAt ?? null,
     repoCount: token === "none" ? null : store.check()?.repoCount ?? null,
     checkedAt: token === "none" ? null : store.check()?.checkedAt ?? null,
-    tokenUrl: tokenUrlFor(os24.hostname())
+    tokenUrl: tokenUrlFor(os25.hostname())
   };
 });
 var githubLoginRun = implement(githubLogin, async (ctx, _input, io) => {
@@ -84736,7 +84876,14 @@ function implementationOf(id) {
 function runDefinition(id, ctx, input2, io) {
   const impl = implementationOf(id);
   if (!impl) throw new Error("No implementation for " + id);
-  return invoke(impl, ctx, input2, io);
+  return invokeAndRefresh(impl, ctx, input2, io);
+}
+async function invokeAndRefresh(impl, ctx, input2, io) {
+  try {
+    return await invoke(impl, ctx, input2, io);
+  } finally {
+    if (impl.def.kind === "operation") reloadSettings(ctx);
+  }
 }
 async function readQuery(def, ctx, input2 = {}) {
   return await runDefinition(def.id, ctx, input2, NO_QUESTIONS);
@@ -84761,7 +84908,7 @@ function createRpcHost(ctx) {
       if (!impl) throw new Error("Not allowed on the web: " + id);
       const need = accessNeeded(impl.def, input2);
       if (!allows(caller, need)) fail(refusalText(caller, need));
-      return invoke(impl, ctx, input2, io);
+      return invokeAndRefresh(impl, ctx, input2, io);
     }
   };
 }
@@ -85188,7 +85335,7 @@ async function attachOpened(ctx, session) {
     nextStep("sandbox attach " + session);
     return 0;
   }
-  const { attach: attach2 } = await import("./chunk-4TLSWPG7.js");
+  const { attach: attach2 } = await import("./chunk-FA5VWLP4.js");
   return attach2({ ...ctx, options: { ...ctx.options, positionals: [session] } });
 }
 function definitionHandler(def) {
@@ -86148,6 +86295,7 @@ export {
   NAV,
   withOperationCommands,
   SandboxChannel,
+  reloadSettings,
   esm_default4 as esm_default,
   esm_default11 as esm_default2,
   askChoice,