windows-development-sandbox 1.27.3 → 1.28.0

package/dist/bin/agent-sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/agent-sandbox.ts
 run(process.argv.slice(2));

package/dist/bin/{chunk-RU7XRN62.js → chunk-CB44HTTN.js}

@@ -46223,7 +46223,7 @@ var SandboxSchema = external_exports.strictObject({
     'The last resort that keeps the sandbox up, in MB below its commit limit (RAM plus paging file): builds are slowed down long before (sandbox.pressureResponse); only if everything the agents start together would take the sandbox to the very edge of its memory, where Windows inside it would start failing, is a build refused memory instead of Windows. "auto" = the larger of 1536 MB and 3 % of the commit limit; "none" = no backstop. Yours only: a project file cannot change it.'
   ),
   pressureResponse: external_exports.boolean().describe(
-    "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
+    "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. A memory gate also holds new compilers and linkers for a moment when the memory of the build programs grows faster than 4 GB in 3 seconds (3 GB with vGPU), and lets them go one at a time. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
     "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."
@@ -48941,6 +48941,8 @@ var PressureStatusSchema = external_exports.object({
   lowered: external_exports.number().int().min(0).max(1024),
   /** Compilers waiting their turn right now (name, process id, seconds until they may go on). */
   paused: external_exports.array(external_exports.object({ name: Text(64), pid: external_exports.number().int(), seconds: external_exports.number().int().min(0).max(60) })).max(8),
+  /** Build programs the memory gate holds right now (let go one at a time). */
+  held: external_exports.number().int().min(0).max(1024).optional(),
   /** The CPU share the compilers get together (percent; 100 = no cap). */
   cpuPercent: external_exports.number().int().min(0).max(100).optional(),
   /** The PC itself asked for slowing down (its memory or CPU is low). */
@@ -48961,6 +48963,8 @@ var HeartbeatSchema = external_exports.object({
   topProcesses: external_exports.array(external_exports.object({ name: Text(64), privateMb: external_exports.number().int().min(0).max(1e7) })).max(5),
   /** The disk queue this PC last reported while asking the sandbox to slow down. */
   diskQueueReported: external_exports.number().min(0).max(1e5).optional(),
+  /** Build programs the memory gate holds right now (let go one at a time). */
+  held: external_exports.number().int().min(0).max(1024).optional(),
   /** "ending": the sandbox is shutting down in order (idle shutdown, sandbox stop, Windows shutting down). */
   phase: external_exports.enum(["ready", "working", "ending"])
 });
@@ -53743,7 +53747,7 @@ var clock = (iso) => {
 };
 function heartbeatLine(hb) {
   const top = hb.topProcesses.map((p) => safeText(p.name) + " " + p.privateMb + " MB").join(", ");
-  return "last seen inside at " + clock(hb.at) + ": up " + Math.round(hb.uptimeS / 60) + " min, " + hb.ramFreePct + "% RAM free, " + hb.commitPct + "% commit used, builds at step " + hb.step + (hb.hostStep > 0 ? " (this PC asked for step " + hb.hostStep + ")" : "") + (hb.diskQueueReported !== void 0 ? ", this PC disk queue " + hb.diskQueueReported : "") + (top ? "; biggest: " + top : "");
+  return "last seen inside at " + clock(hb.at) + ": up " + Math.round(hb.uptimeS / 60) + " min, " + hb.ramFreePct + "% RAM free, " + hb.commitPct + "% commit used, builds at step " + hb.step + (hb.hostStep > 0 ? " (this PC asked for step " + hb.hostStep + ")" : "") + (hb.diskQueueReported !== void 0 ? ", this PC disk queue " + hb.diskQueueReported : "") + (hb.held ? ", " + hb.held + " builds held by the memory gate" : "") + (top ? "; biggest: " + top : "");
 }
 function guessReason(hb) {
   if (hb && hb.diskQueueReported !== void 0 && hb.hostStep > 0)
@@ -53817,7 +53821,12 @@ function findingLines(events) {
     );
   if (has2((e) => lower(e).startsWith("hyper-v")))
     lines.push("Hyper-V events: the sandbox's virtual machine (or the service that runs it) reported a problem.");
-  if (has2((e) => /^(application error|windows error reporting)$/i.test(e.provider)))
+  const isAppCrash = (e) => /^(application error|windows error reporting)$/i.test(e.provider);
+  if (has2((e) => isAppCrash(e) && /vmwp\.exe/i.test(e.process)))
+    lines.push(
+      "vmwp.exe, the Windows program that runs the sandbox's VM, crashed. That is a fault in Windows' Hyper-V code or a driver it uses (with vGPU on, usually the graphics driver), not a program inside the sandbox running out of memory."
+    );
+  else if (has2(isAppCrash))
     lines.push("A crash report names vmwp.exe or vmmem, the programs that hold the sandbox's VM.");
   return lines;
 }
@@ -53867,6 +53876,17 @@ function hostMemoryTail(storageRoot, dataPath) {
     return "";
   }
 }
+function memoryWasFineLine(hostMemoryLog) {
+  const last = hostMemoryLog.split(/\r?\n/).filter((l) => l.trim() !== "").pop();
+  if (!last) return null;
+  const ram = /RAM free\/total MB (\d{1,9})\/(\d{1,9})/.exec(last);
+  const commit = /commit free\/limit MB (\d{1,9})\/(\d{1,9})/.exec(last);
+  if (!ram || !commit) return null;
+  const freeRam = Number(ram[1]);
+  const freeCommit = Number(commit[1]);
+  if (freeRam < 4096 || freeCommit < 4096) return null;
+  return "This PC still had " + Math.floor(freeRam / 1024) + " GB of RAM and " + Math.floor(freeCommit / 1024) + " GB of memory (RAM plus paging file) free just before, so it did not run out of memory.";
+}
 function crashReportText(cause, events, memoryLog, lastSeen, extra = {}) {
   const seen = /* @__PURE__ */ new Set();
   const unique = events.filter((e) => {
@@ -53882,6 +53902,7 @@ function crashReportText(cause, events, memoryLog, lastSeen, extra = {}) {
   const hostLines = (extra.hostMemoryLog ?? "").split(/\r?\n/).filter(Boolean).slice(-20).map((l) => "  " + safeText(l));
   const freeze = freezeLine(cause, lastSeen);
   const meaning = findingLines(unique);
+  const fine = memoryWasFineLine(extra.hostMemoryLog ?? "");
   const dumps = extra.dumps ?? [];
   const vgpu = extra.vgpu ? ["vGPU was on for this sandbox. " + vgpuWarning("its launch settings"), ""] : [];
   return [
@@ -53895,6 +53916,7 @@ function crashReportText(cause, events, memoryLog, lastSeen, extra = {}) {
     ...vgpu,
     "What that usually means:",
     ...meaning.length ? meaning.map((l) => "  " + l) : ["  (no memory, blue screen or hardware event was logged)"],
+    ...fine ? ["  " + fine] : [],
     "",
     "Crash dumps Windows left (C:\\Windows\\Minidump, MEMORY.DMP):",
     ...dumps.length ? dumps.map((d) => "  " + d.name + "  " + d.at) : ["  (none from that time)"],
@@ -65192,8 +65214,37 @@ var OutputFilter = class {
   }
 };
 
-// src/shared/pty/console-input.ts
+// src/shared/pty/clipboard-watch.ts
 import { spawn as spawn11 } from "node:child_process";
+var MAX_PENDING = 1024;
+function watchClipboard(onChange) {
+  if (process.platform !== "win32") return { stop: () => void 0 };
+  let child = null;
+  try {
+    child = spawn11(SYSTEM.powershell(), scriptArgs("watch-clipboard.ps1", ["-ProcessId", String(process.pid)]), {
+      stdio: ["ignore", "pipe", "ignore"],
+      windowsHide: true
+    });
+  } catch {
+    return { stop: () => void 0 };
+  }
+  let pending = "";
+  child.stdout?.setEncoding("latin1");
+  child.stdout?.on("data", (text) => {
+    const lines = (pending + text).split("\n");
+    pending = (lines.pop() ?? "").slice(-MAX_PENDING);
+    for (const line of lines) if (line.trim() === "changed") onChange();
+  });
+  child.on("error", () => void 0);
+  return {
+    stop: () => {
+      if (child && child.exitCode === null && child.signalCode === null) child.kill();
+    }
+  };
+}
+
+// src/shared/pty/console-input.ts
+import { spawn as spawn12 } from "node:child_process";
 function enableVtInput() {
   if (process.platform !== "win32" || !process.stdin.isTTY)
     return { ready: Promise.resolve(false), stop: () => Promise.resolve() };
@@ -65201,7 +65252,7 @@ function enableVtInput() {
   let exited = Promise.resolve();
   const ready = new Promise((resolve) => {
     try {
-      child = spawn11(SYSTEM.powershell(), scriptArgs("enable-vt-input.ps1", ["-ProcessId", String(process.pid)]), {
+      child = spawn12(SYSTEM.powershell(), scriptArgs("enable-vt-input.ps1", ["-ProcessId", String(process.pid)]), {
         stdio: "ignore",
         windowsHide: true
       });
@@ -65260,30 +65311,118 @@ function unfinishedSequence(data) {
   return data.length;
 }
 
-// src/shared/pty/ctrl-c.ts
+// src/shared/web/protocol.ts
+var CSRF_HEADER = "x-sandbox-web";
+var CSRF_VALUE = "1";
+var COOKIE_NAME = "sbxweb";
+var MIN_COLS = 10;
+var MAX_COLS = 500;
+var MIN_ROWS = 2;
+var MAX_ROWS = 300;
+var MAX_CLIENT_MESSAGE_BYTES = 256 * 1024;
+function parseClientMessage(text) {
+  let value;
+  try {
+    value = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (typeof value !== "object" || value === null) return null;
+  const m = value;
+  if (m.t !== "resize") return null;
+  const { cols, rows } = m;
+  if (!Number.isInteger(cols) || !Number.isInteger(rows)) return null;
+  const c2 = cols;
+  const r = rows;
+  if (c2 < MIN_COLS || c2 > MAX_COLS || r < MIN_ROWS || r > MAX_ROWS) return null;
+  return { t: "resize", cols: c2, rows: r };
+}
+
+// src/shared/web/ctrl-c.ts
 var CTRL_C_CONFIRM_MS = 1500;
 var CTRL_C_HINT = "Ctrl+C again to send it to the program (Esc stops an agent)";
-var OSC_TITLE = /\x1b\][02];([^\x07\x1b]{0,256})(?:\x07|\x1b\\)/g;
-var CtrlCGuard = class {
+var CTRL_C_COPY_HINT = "Copied: Ctrl+C after selecting text is not sent to the program (Esc stops an agent)";
+var CtrlCDecider = class {
+  constructor(confirm = true) {
+    this.confirm = confirm;
+  }
+  confirm;
   armedAt = Number.NEGATIVE_INFINITY;
-  lastTitle = "";
-  /** What to send for one read from the keyboard: a lone Ctrl+C only when another came just before. */
-  push(chunk, nowMs) {
-    if (chunk.length !== 1 || chunk[0] !== 3) return { send: chunk, held: false };
+  selected = false;
+  /** Text was selected in the program: Ctrl+C is "copy" from now on. */
+  selection() {
+    this.selected = true;
+    this.armedAt = Number.NEGATIVE_INFINITY;
+  }
+  /** Any other key or a click: Ctrl+C is an interrupt again. */
+  otherInput() {
+    this.selected = false;
+  }
+  /** What to do with a lone Ctrl+C pressed at `nowMs`. */
+  ctrlC(nowMs) {
+    if (this.selected) return "copy";
+    if (!this.confirm) return "send";
     if (nowMs - this.armedAt <= CTRL_C_CONFIRM_MS) {
       this.armedAt = Number.NEGATIVE_INFINITY;
-      return { send: chunk, held: false };
+      return "send";
     }
     this.armedAt = nowMs;
-    return { send: Buffer.alloc(0), held: true };
+    return "hold";
+  }
+};
+var MOUSE_REPORT = /\x1b\[<(\d{1,4});\d{1,5};\d{1,5}([Mm])|\x1b\[M([\s\S])[\s\S]{2}/g;
+function classifyInput(text) {
+  let drag = false;
+  let click = false;
+  for (const m of text.matchAll(MOUSE_REPORT)) {
+    const sgr = m[1] !== void 0;
+    const b = sgr ? Number(m[1]) : (m[3] ?? " ").charCodeAt(0) - 32;
+    if (b & 64) continue;
+    if (b & 32) {
+      if ((b & 3) !== 3) drag = true;
+    } else if (sgr ? m[2] === "M" : (b & 3) !== 3) click = true;
+  }
+  return { mouse: drag ? "drag" : click ? "click" : null, keys: text.replace(MOUSE_REPORT, "").length > 0 };
+}
+function hasClipboardWrite(text) {
+  return /\x1b\]0{0,2}52;/.test(text) || /\u009d0{0,2}52;/.test(text);
+}
+
+// src/shared/pty/ctrl-c.ts
+var OSC_TITLE = /\x1b\][02];([^\x07\x1b]{0,256})(?:\x07|\x1b\\)/g;
+var CtrlCGuard = class {
+  decider;
+  lastTitle = "";
+  constructor(options = {}) {
+    this.decider = new CtrlCDecider(options.confirm !== false);
+  }
+  /** What to send for one read from the keyboard: a lone Ctrl+C only when it is not held back or taken as "copy". */
+  push(chunk, nowMs) {
+    if (chunk.length === 1 && chunk[0] === 3) {
+      const action2 = this.decider.ctrlC(nowMs);
+      if (action2 === "send") return { send: chunk, held: false, copied: false };
+      return { send: Buffer.alloc(0), held: action2 === "hold", copied: action2 === "copy" };
+    }
+    const c2 = classifyInput(chunk.toString("latin1"));
+    if (c2.keys || c2.mouse === "click") this.decider.otherInput();
+    else if (c2.mouse === "drag") this.decider.selection();
+    return { send: chunk, held: false, copied: false };
+  }
+  /** The clipboard changed since the last key: you just copied. */
+  clipboardChanged() {
+    this.decider.selection();
+  }
+  /** The program wrote to the clipboard: that is a selection too. */
+  watchClipboard(raw) {
+    if (hasClipboardWrite(raw)) this.decider.selection();
   }
   /** Remembers the title the program last set (from its output), to put it back after the hint. */
   watchOutput(text) {
     for (const m of text.matchAll(OSC_TITLE)) this.lastTitle = m[1];
   }
   /** The escape sequence that shows the hint, and the one that puts the program's title back. */
-  hintTitle() {
-    return "\x1B]0;" + CTRL_C_HINT + "\x07";
+  hintTitle(kind = "hold") {
+    return "\x1B]0;" + (kind === "copy" ? CTRL_C_COPY_HINT : CTRL_C_HINT) + "\x07";
   }
   restoreTitle() {
     return "\x1B]0;" + this.lastTitle.replace(/[\x00-\x1f\x7f]/g, "") + "\x07";
@@ -65487,6 +65626,7 @@ function runTerminalClient(socket, token, options = {}) {
       clearTimeout(joinTimer);
       clearTimeout(hintTimer);
       clearTimeout(vtTimer);
+      clipboard.stop();
       socket.destroy();
       const tracked = mouse.tracking();
       const reset = "\x1B[0m\x1B[?25h" + MOUSE_OFF + (mouse.has(2004) ? "\x1B[?2004l" : "") + "\r\n";
@@ -65504,23 +65644,22 @@ function runTerminalClient(socket, token, options = {}) {
       if (data.length && !done) socket.write(encodeFrame(FrameType.Input, data));
     };
     const sendInput = (data) => write(keys.push(passthrough ? mouse.filter(data) : data));
-    const guard2 = options.confirmCtrlC ? new CtrlCGuard() : null;
+    const guard2 = new CtrlCGuard({ confirm: options.confirmCtrlC !== false });
     let hintTimer;
+    const clipboard = watchClipboard(() => guard2.clipboardChanged());
     const onInput = (chunk) => {
       if (options.detachKey !== void 0 && chunk.includes(options.detachKey)) {
         finish({ reason: "detach" });
         return;
       }
-      if (guard2) {
-        const decided = guard2.push(chunk, Date.now());
-        clearTimeout(hintTimer);
-        if (decided.held) {
-          stdout.write(guard2.hintTitle());
-          hintTimer = setTimeout(() => stdout.write(guard2.restoreTitle()), CTRL_C_CONFIRM_MS);
-          return;
-        }
-        if (decided.send.length === 1 && decided.send[0] === 3) stdout.write(guard2.restoreTitle());
+      const decided = guard2.push(chunk, Date.now());
+      clearTimeout(hintTimer);
+      if (decided.held || decided.copied) {
+        stdout.write(guard2.hintTitle(decided.copied ? "copy" : "hold"));
+        hintTimer = setTimeout(() => stdout.write(guard2.restoreTitle()), CTRL_C_CONFIRM_MS);
+        return;
       }
+      if (decided.send.length === 1 && decided.send[0] === 3) stdout.write(guard2.restoreTitle());
       clearTimeout(joinTimer);
       sendInput(joiner.push(chunk));
       if (joiner.holding()) joinTimer = setTimeout(() => sendInput(joiner.flush()), JOIN_MS);
@@ -65553,9 +65692,10 @@ function runTerminalClient(socket, token, options = {}) {
       }
       for (const frame of frames) {
         if (frame.type === FrameType.Output) {
+          guard2.watchClipboard(frame.payload.toString("latin1"));
           const out = filter.push(frame.payload);
           mouse.watch(out);
-          guard2?.watchOutput(out.toString("latin1"));
+          guard2.watchOutput(out.toString("latin1"));
           stdout.write(out);
         } else if (frame.type === FrameType.Console) passthrough = frame.payload.toString("latin1") === "conpty.dll";
         else if (frame.type === FrameType.Restarting) {
@@ -73033,7 +73173,7 @@ var AccessStore = class _AccessStore {
 };
 
 // src/host/remote/door-client.ts
-import { spawn as spawn12 } from "node:child_process";
+import { spawn as spawn13 } from "node:child_process";
 var NOT_OWNER = 3;
 var NO_PIPE = 4;
 var NO_USER = 5;
@@ -73060,7 +73200,7 @@ async function knockOnDoor(storageRoot, owner) {
   const exe = hostToolsExe(storageRoot);
   if (!exe) fail("Windows sign-in needs HostTools, which could not be built on this PC.", "Run sandbox doctor.");
   return new Promise((resolve) => {
-    const child = spawn12(exe, ["door-client", "--owner", owner], { windowsHide: true });
+    const child = spawn13(exe, ["door-client", "--owner", owner], { windowsHide: true });
     let out = "";
     child.stdout.on("data", (d) => {
       if (out.length < 1024) out += d.toString("utf8");
@@ -73174,7 +73314,7 @@ import crypto22 from "node:crypto";
 import fs119 from "node:fs";
 import os23 from "node:os";
 import path168 from "node:path";
-import { spawn as spawn13 } from "node:child_process";
+import { spawn as spawn14 } from "node:child_process";
 
 // src/host/remote/lan.ts
 import net7 from "node:net";
@@ -73266,7 +73406,7 @@ function removeRuleRequest() {
   return { action: "remove", ruleName: FIREWALL_RULE_NAME };
 }
 var spawnRunner3 = (exe, args, timeoutMs) => new Promise((resolve) => {
-  const child = spawn13(exe, [...args], { windowsHide: true });
+  const child = spawn14(exe, [...args], { windowsHide: true });
   let stdout = "";
   let stderr = "";
   const timer = setTimeout(() => child.kill(), timeoutMs);
@@ -73343,35 +73483,6 @@ import https from "node:https";
 
 // src/host/web/auth.ts
 import crypto23 from "node:crypto";
-
-// src/shared/web/protocol.ts
-var CSRF_HEADER = "x-sandbox-web";
-var CSRF_VALUE = "1";
-var COOKIE_NAME = "sbxweb";
-var MIN_COLS = 10;
-var MAX_COLS = 500;
-var MIN_ROWS = 2;
-var MAX_ROWS = 300;
-var MAX_CLIENT_MESSAGE_BYTES = 256 * 1024;
-function parseClientMessage(text) {
-  let value;
-  try {
-    value = JSON.parse(text);
-  } catch {
-    return null;
-  }
-  if (typeof value !== "object" || value === null) return null;
-  const m = value;
-  if (m.t !== "resize") return null;
-  const { cols, rows } = m;
-  if (!Number.isInteger(cols) || !Number.isInteger(rows)) return null;
-  const c2 = cols;
-  const r = rows;
-  if (c2 < MIN_COLS || c2 > MAX_COLS || r < MIN_ROWS || r > MAX_ROWS) return null;
-  return { t: "resize", cols: c2, rows: r };
-}
-
-// src/host/web/auth.ts
 var COOKIE_LIFETIME_MS = 12 * 60 * 60 * 1e3;
 var MAX_COOKIES = 50;
 var MAX_FAILURES = 8;
@@ -73451,17 +73562,17 @@ function cookieHeader(value) {
 }
 
 // src/host/web/browser.ts
-import { spawn as spawn14 } from "node:child_process";
+import { spawn as spawn15 } from "node:child_process";
 function openBrowser(url2) {
   refuseInSelfTest("open a browser");
   if (!/^http:\/\/127\.0\.0\.1:\d{1,5}\/(#[kw]=[0-9a-f]{64})?$/.test(url2)) throw new Error("Not a web UI address.");
-  spawn14(SYSTEM.cmd(), ["/c", "start", "", url2], { detached: true, stdio: "ignore", windowsHide: true }).unref();
+  spawn15(SYSTEM.cmd(), ["/c", "start", "", url2], { detached: true, stdio: "ignore", windowsHide: true }).unref();
 }
 var ISSUE_URL = /^https:\/\/github\.com\/[\w.-]+\/[\w.-]+\/issues\/new\?[\w%.~&=+-]*$/;
 function openIssuePage(url2) {
   refuseInSelfTest("open a browser");
   if (!ISSUE_URL.test(url2) || url2.length > 2e3) throw new Error("Not a GitHub new-issue address.");
-  spawn14(system32("rundll32.exe"), ["url.dll,FileProtocolHandler", url2], {
+  spawn15(system32("rundll32.exe"), ["url.dll,FileProtocolHandler", url2], {
     detached: true,
     stdio: "ignore",
     windowsHide: true
@@ -74441,7 +74552,7 @@ var WebRunner = class {
 };
 
 // src/host/remote/windows-helper.ts
-import { spawn as spawn15 } from "node:child_process";
+import { spawn as spawn16 } from "node:child_process";
 import readline3 from "node:readline";
 var SID2 = /^S-1-[0-9-]{1,180}$/;
 var MEDIUM_INTEGRITY = 8192;
@@ -74480,7 +74591,7 @@ var HostToolsHelper = class _HostToolsHelper {
   answer = async () => "refused Windows sign-in is off.";
   problem = () => void 0;
   constructor(exe, pipe2) {
-    this.child = spawn15(exe, ["web-helper", "--pipe", pipe2 ?? "", "--server-pid", String(process.pid)], {
+    this.child = spawn16(exe, ["web-helper", "--pipe", pipe2 ?? "", "--server-pid", String(process.pid)], {
       windowsHide: true,
       stdio: ["pipe", "pipe", "pipe"]
     });
@@ -80151,6 +80262,9 @@ var SETTINGS = {
   theme: "dark",
   firstWindowPreference: "defaultProfile",
   confirmCloseAllTabs: false,
+  // Copied the moment the mouse is released, so an agent's redraw cannot clear the selection first.
+  copyOnSelect: true,
+  copyFormatting: "none",
   // New tabs pick up the PATH and variables the runner writes machine-wide after the window opened.
   compatibility: { reloadEnvironmentVariables: true },
   warning: { confirmCloseAllTabs: false, largePaste: false, multiLinePaste: false },
@@ -80189,6 +80303,10 @@ function withReloadEnvironment(settings) {
   if (compatibility?.reloadEnvironmentVariables === true) return null;
   return { ...settings, compatibility: { ...compatibility, reloadEnvironmentVariables: true } };
 }
+function withCopyOnSelect(settings) {
+  if ("copyOnSelect" in settings) return null;
+  return { ...settings, copyOnSelect: true };
+}
 function syncPwshProfile(dataPath, allowed) {
   const file2 = path185.join(terminalDir(dataPath), "settings", "settings.json");
   assertTestWritable2(file2);
@@ -80206,15 +80324,18 @@ function syncPwshProfile(dataPath, allowed) {
   }
   const withProfile = withPwshProfile(parsed, visible);
   if (withProfile) {
-    writeJson(file2, withReloadEnvironment(withProfile) ?? withProfile);
+    const reloaded = withReloadEnvironment(withProfile) ?? withProfile;
+    writeJson(file2, withCopyOnSelect(reloaded) ?? reloaded);
     return;
   }
-  if (withReloadEnvironment(parsed)) {
-    const edits = modify(text, ["compatibility", "reloadEnvironmentVariables"], true, {
-      formattingOptions: { insertSpaces: true, tabSize: 4 }
-    });
-    writeFileAtomic(file2, applyEdits(text, edits));
-  }
+  const missing = [];
+  if (withReloadEnvironment(parsed)) missing.push([["compatibility", "reloadEnvironmentVariables"], true]);
+  if (withCopyOnSelect(parsed)) missing.push([["copyOnSelect"], true]);
+  if (missing.length === 0) return;
+  let edited = text;
+  for (const [at, value] of missing)
+    edited = applyEdits(edited, modify(edited, at, value, { formattingOptions: { insertSpaces: true, tabSize: 4 } }));
+  writeFileAtomic(file2, edited);
 }
 async function ensureTerminal(dataPath, refresh, options = {}) {
   const result = await installTerminal(dataPath, refresh);
@@ -85335,7 +85456,7 @@ async function attachOpened(ctx, session) {
     nextStep("sandbox attach " + session);
     return 0;
   }
-  const { attach: attach2 } = await import("./chunk-FA5VWLP4.js");
+  const { attach: attach2 } = await import("./chunk-UZ5S3EMB.js");
   return attach2({ ...ctx, options: { ...ctx.options, positionals: [session] } });
 }
 function definitionHandler(def) {
@@ -86295,6 +86416,8 @@ export {
   NAV,
   withOperationCommands,
   SandboxChannel,
+  CSRF_HEADER,
+  CSRF_VALUE,
   reloadSettings,
   esm_default4 as esm_default,
   esm_default11 as esm_default2,
@@ -86354,8 +86477,6 @@ export {
   settingRow,
   ProjectsService,
   StorageService,
-  CSRF_HEADER,
-  CSRF_VALUE,
   openBrowser,
   import_websocket,
   INSTALL,

package/dist/bin/{chunk-FA5VWLP4.js → chunk-UZ5S3EMB.js}

@@ -1,7 +1,7 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   attach
-} from "./chunk-RU7XRN62.js";
+} from "./chunk-CB44HTTN.js";
 export {
   attach
 };

package/dist/bin/{chunk-4M5SZZ5P.js → chunk-ZMZI3625.js}

@@ -258,7 +258,7 @@ import {
   withOperationCommands,
   working,
   writeJson
-} from "./chunk-RU7XRN62.js";
+} from "./chunk-CB44HTTN.js";
 
 // node_modules/commander/lib/error.js
 var require_error = __commonJS({

package/dist/bin/claude-host.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/claude-host.ts
 var args = process.argv.slice(2);

package/dist/bin/claude-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/claude-sbx.ts
 run(process.argv.slice(2), { harness: "claude" });

package/dist/bin/codex-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/codex-sbx.ts
 run(process.argv.slice(2), { harness: "codex" });

package/dist/bin/gemini-sbx.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/gemini-sbx.ts
 run(process.argv.slice(2), { harness: "gemini" });

package/dist/bin/sandbox.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/sandbox.ts
 run(process.argv.slice(2));

package/dist/bin/sbx-hide.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/sbx-hide.ts
 run(process.argv.slice(2), { command: "hide" });

package/dist/bin/sbx-show.js

@@ -2,8 +2,8 @@
 import { createRequire as __createRequire } from 'node:module'; const require = __createRequire(import.meta.url);
 import {
   run
-} from "./chunk-4M5SZZ5P.js";
-import "./chunk-RU7XRN62.js";
+} from "./chunk-ZMZI3625.js";
+import "./chunk-CB44HTTN.js";
 
 // src/bin/sbx-show.ts
 run(process.argv.slice(2), { command: "show" });

package/dist/core/schema/sandbox.js

@@ -48,7 +48,7 @@ export const SandboxSchema = z.strictObject({
         .describe('The last resort that keeps the sandbox up, in MB below its commit limit (RAM plus paging file): builds are slowed down long before (sandbox.pressureResponse); only if everything the agents start together would take the sandbox to the very edge of its memory, where Windows inside it would start failing, is a build refused memory instead of Windows. "auto" = the larger of 1536 MB and 3 % of the commit limit; "none" = no backstop. Yours only: a project file cannot change it.'),
     pressureResponse: z
         .boolean()
-        .describe('When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it.'),
+        .describe('When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. A memory gate also holds new compilers and linkers for a moment when the memory of the build programs grows faster than 4 GB in 3 seconds (3 GB with vGPU), and lets them go one at a time. Yours only: a project file cannot change it.'),
     vGpu: z
         .boolean()
         .describe("Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it). Browsers in the sandbox never use it (they draw in software)."),

package/dist/guest/daemon/heartbeat.js

@@ -23,6 +23,7 @@ export function buildHeartbeat(snapshot, sessionCount, uptimeSeconds, freeBytes,
         ...(snapshot?.diskQueue !== null && snapshot?.diskQueue !== undefined
             ? { diskQueueReported: snapshot.diskQueue }
             : {}),
+        ...(snapshot && snapshot.held > 0 ? { held: Math.min(1024, snapshot.held) } : {}),
         phase: ending ? 'ending' : sessionCount > 0 ? 'working' : 'ready',
     };
 }