windows-development-sandbox 1.4.0 → 1.4.1

package/dist/runtime/main.js

@@ -5534,7 +5534,7 @@ var require_lodash = __commonJS({
 // src/guest/main.ts
 import fs36 from "node:fs";
 import path50 from "node:path";
-import { spawn as spawn7 } from "node:child_process";
+import { spawn as spawn8 } from "node:child_process";
 
 // src/guest/guide.ts
 import fs6 from "node:fs";
@@ -5694,6 +5694,10 @@ var checksumRequired = false;
 var setChecksumRequired = (on) => {
   checksumRequired = on;
 };
+var downloadWatcher = null;
+var watchDownloads = (watcher) => {
+  downloadWatcher = watcher;
+};
 var download = async (url2, destination, expected = null) => {
   const sums = typeof expected === "string" || expected === null ? { sha256: expected } : expected;
   if (checksumRequired && !sums.sha256?.trim() && !sums.sha512?.trim()) {
@@ -5706,8 +5710,25 @@ var download = async (url2, destination, expected = null) => {
     const want = sums[kind]?.trim().toLowerCase();
     return want ? [{ want, hash: crypto.createHash(kind) }] : [];
   });
+  const size = Number(response.headers.get("content-length")) || 0;
+  const report = size > 0 ? downloadWatcher?.() ?? null : null;
+  let received = 0;
+  let tenth = 0;
+  let reportedAt = Date.now();
   const tap = new Transform({ transform(chunk, _encoding, done) {
     for (const c of checks) c.hash.update(chunk);
+    if (report) {
+      received += chunk.length;
+      const now2 = Math.floor(received * 10 / size);
+      if (now2 !== tenth || Date.now() - reportedAt > 5e3) {
+        tenth = now2;
+        reportedAt = Date.now();
+        try {
+          report(Math.min(1, received / size));
+        } catch {
+        }
+      }
+    }
     done(null, chunk);
   } });
   const partial2 = destination + ".part";
@@ -25603,7 +25624,7 @@ var ClaudeProfile = external_exports.strictObject({
 var GuestWorkspace = external_exports.union([external_exports.literal("auto"), external_exports.literal("mirror"), GuestPath]).describe('Where the workspace appears inside the sandbox. "auto" = C:\\Workspace\\<folder name>. "mirror" = the same path as on this PC, so absolute paths in configs and build caches match (another drive letter such as F: is a subst drive onto C:\\Mirror\\F); paths the sandbox reserves (C:\\Users\\..., C:\\Program Files\\...) fall back to "auto".');
 var Mapping = external_exports.strictObject({
   host: external_exports.string().min(1).describe("Folder on this PC (relative paths are relative to the config file)."),
-  guest: GuestPath.describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game: mapped to C:\\Mirror\\F\\... and shown as F: (subst) at boot."),
+  guest: external_exports.string().min(1).max(1024).optional().describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game (shown as F: at boot). Leave it out to use the same path as on this PC (a folder inside the project stays where it is in the project). A path the sandbox cannot use (C:\\Windows\\..., C:\\Users\\..., one already in use) goes to C:\\Mapped\\<drive>\\<path> instead, and the launch says so."),
   readOnly: external_exports.boolean().describe("true = the agent can only read it."),
   optional: external_exports.boolean().optional().describe("true = skip it quietly when the host folder does not exist.")
 });
@@ -25891,6 +25912,7 @@ var Projects = external_exports.strictObject({
   roots: external_exports.array(external_exports.string().min(1)).describe('Folders whose subfolders are your projects (e.g. "F:\\\\Code"), mapped read/write at every start. Any project inside one, including ones you create later, opens in the running sandbox at once, without a restart. Every agent in the sandbox can see all of them.'),
   askToAddRoot: external_exports.boolean().describe("When you start a project whose parent folder is not a root yet, ask once whether to add it."),
   declinedRoots: external_exports.array(external_exports.string().min(1)).describe("Parent folders you said no to (not asked again)."),
+  allowOutsideMappings: external_exports.union([external_exports.literal("ask"), external_exports.boolean()]).describe(`A project's .sandbox-config.json may map folders from outside the project (e.g. a game folder on another drive). "ask" = an interactive launch asks once per project and set of folders, and remembers your answer; true = always allowed (still listed when you approve the file); false = never (the launch stops and says which folders). Only your own settings decide this, never a project file.`),
   wsbShare: external_exports.boolean().describe("On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart.")
 });
 
@@ -25933,7 +25955,7 @@ var LocalOverrides = external_exports.strictObject({
   readOnly: external_exports.boolean().describe("Map this project read-only."),
   // A project may turn the filter on and keep more out, never let ignored files in.
   workspaceFilter: WorkspaceFilter.pick({ enabled: true, exclude: true }).partial(),
-  mappings: external_exports.array(Mapping).describe("Extra folders inside this project (relative to this file), e.g. a read-only data folder at another place in the sandbox."),
+  mappings: external_exports.array(Mapping).describe("Extra folders (relative paths are relative to this file), e.g. a read-only data folder at another place in the sandbox. Folders outside the project are used only as your projects.allowOutsideMappings setting allows (by default you are asked once)."),
   scripts: Strings.describe("Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."),
   // This PC's resources are yours to share: CPU and paging file (this PC's disk) are not a project's to set.
   sandbox: Sandbox.omit({ cpuLimit: true, pageFileMb: true }).partial(),
@@ -25964,6 +25986,15 @@ var AttachEndpoint = external_exports.strictObject({
   port: external_exports.number().int().min(1024).max(65535),
   token: Text(256)
 });
+var BootProgress = external_exports.strictObject({
+  step: external_exports.number().int().min(1).max(32),
+  steps: external_exports.number().int().min(1).max(32),
+  title: Text(120),
+  /** Being set up now; percent while it downloads (when the size is known). */
+  active: external_exports.array(external_exports.strictObject({ name: Text(64), percent: external_exports.number().int().min(0).max(100).optional() })).max(8),
+  done: external_exports.number().int().min(0).max(1e3),
+  total: external_exports.number().int().min(0).max(1e3)
+});
 var SandboxStatus = external_exports.object({
   launchId: Text(64),
   phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
@@ -25973,7 +26004,9 @@ var SandboxStatus = external_exports.object({
   guestWorkspace: Text(),
   headless: external_exports.boolean(),
   /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
-  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional()
+  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
+  /** A malformed progress is dropped, never the status (the phase still counts). */
+  progress: BootProgress.optional().catch(void 0)
 });
 var Version = external_exports.strictObject({ spec: Text(128), source: Text(256) });
 var DatabasePlan = external_exports.strictObject({
@@ -26136,16 +26169,25 @@ var mkdirp = (p) => {
   return p;
 };
 var logPath = logFile;
-var setSandboxStatus = (phase, message) => {
+var progress;
+var setSandboxStatus = (phase, message, update) => {
   try {
+    if (update) progress = fitProgress({ step: 1, steps: 1, title: "", active: [], done: 0, total: 0, ...progress, ...update });
     writeJsonAtomicChecked(phase, message);
   } catch (e) {
     warn("Could not update sandbox status: " + errMsg(e));
   }
 };
+var fitProgress = (p) => ({
+  ...p,
+  title: p.title.slice(0, 120),
+  done: Math.min(p.done, 1e3),
+  total: Math.min(p.total, 1e3),
+  active: p.active.slice(0, 8).map((a) => ({ name: a.name.slice(0, 64), ...a.percent === void 0 ? {} : { percent: Math.max(0, Math.min(100, Math.round(a.percent))) } }))
+});
 var ownAddresses = () => Object.values(os3.networkInterfaces()).flat().filter((i) => Boolean(i) && i.family === "IPv4" && !i.internal).map((i) => i.address).slice(0, 8);
 var writeJsonAtomicChecked = (phase, message) => {
-  writeJsonAtomic(run.sandbox, { launchId: session.launchId, phase, message, updatedAt: now(), workspaceHost: session.workspaceHost, guestWorkspace: workspace, headless: session.headless, addresses: ownAddresses() });
+  writeJsonAtomic(run.sandbox, { launchId: session.launchId, phase, message, updatedAt: now(), workspaceHost: session.workspaceHost, guestWorkspace: workspace, headless: session.headless, addresses: ownAddresses(), ...progress ? { progress } : {} });
 };
 var exec = (file3, args, options = {}) => {
   const result = spawnSync(file3, args, { stdio: "inherit", windowsHide: true, ...options });
@@ -26160,7 +26202,7 @@ var execOutput = (file3, args, options = {}) => {
   const result = spawnSync(file3, args, { encoding: "utf8", windowsHide: true, ...options });
   return result.status === 0 ? String(result.stdout ?? "").trim() : "";
 };
-var powershell = (script) => exec(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script]);
+var powershell = (script2) => exec(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script2]);
 var robocopy = (from, to, files = []) => {
   if (!isWin) {
     if (!files.length) {
@@ -26239,6 +26281,9 @@ var removeGuide = (file3) => {
   if (start >= 0 && end > start) fs6.writeFileSync(file3, (current.slice(0, start) + current.slice(end + END.length)).trim() + "\n", "utf8");
 };
 
+// src/guest/toolchains/index.ts
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
+
 // src/guest/toolchains/common.ts
 import fs7 from "node:fs";
 import path8 from "node:path";
@@ -26846,8 +26891,8 @@ var setupDynamo = async (env, plan2) => {
   env.summary.push("dynamodb (DynamoDB Local): " + endpoint + " (AWS SDKs use it automatically via AWS_ENDPOINT_URL_DYNAMODB; dummy credentials)");
   if (!plan2.adminPort) return;
   const prefix = tool("dynamodb-admin");
-  const script = path13.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
-  if (!exists(script)) {
+  const script2 = path13.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
+  if (!exists(script2)) {
     log("Installing dynamodb-admin, the DynamoDB web UI (~20 MB once) ...");
     const npmCli = path13.join(path13.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
     await execAsync(process.execPath, [npmCli, "install", "--global", "--prefix", prefix, "dynamodb-admin", "--no-fund", "--no-audit"], { stdio: "ignore" });
@@ -26857,7 +26902,7 @@ var setupDynamo = async (env, plan2) => {
     return;
   }
   const out = fs12.openSync(path13.join(logsDir, "dynamodb-admin.log"), "a");
-  spawn3(process.execPath, [script, "--port", String(plan2.adminPort), "--dynamo-endpoint", endpoint, "--skip-default-credentials"], { detached: true, stdio: ["ignore", out, out], windowsHide: true, env: { ...process.env, ...aws } }).unref();
+  spawn3(process.execPath, [script2, "--port", String(plan2.adminPort), "--dynamo-endpoint", endpoint, "--skip-default-credentials"], { detached: true, stdio: ["ignore", out, out], windowsHide: true, env: { ...process.env, ...aws } }).unref();
   fs12.closeSync(out);
   if (!await waitForPort(plan2.adminPort, 30)) throw new Error("dynamodb-admin did not start; see " + path13.join(logsDir, "dynamodb-admin.log"));
   env.summary.push("dynamodb-admin: http://localhost:" + plan2.adminPort + " (browse and edit tables in the sandbox's browser)");
@@ -27315,7 +27360,7 @@ var DotnetMarker = external_exports.record(external_exports.string(), external_e
 var setupDotnet = async (env, config2, refresh) => {
   const root = tool("dotnet");
   const marker = path24.join(root, ".agent-sandbox-installed.json");
-  const script = tool("dotnet-install.ps1");
+  const script2 = tool("dotnet-install.ps1");
   if (dryRun) {
     log("(dry run) would provision .NET SDK channels " + config2.channels.join(", "));
     return;
@@ -27328,9 +27373,9 @@ var setupDotnet = async (env, config2, refresh) => {
     ...exists(globalJson) ? [["global.json:" + fs17.readFileSync(globalJson, "utf8").replace(/\s+/g, ""), ["-JSonFile", globalJson]]] : []
   ];
   for (const [key, args] of installs.filter(([k]) => !done[k])) {
-    await downloadFile("https://dot.net/v1/dotnet-install.ps1", script);
+    await downloadFile("https://dot.net/v1/dotnet-install.ps1", script2);
     log("Installing the .NET SDK " + (key.startsWith("channel:") ? key.slice(8) : "pinned in global.json") + " (~250 MB once) ...");
-    await execAsync(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-File", script, ...args, "-InstallDir", root, "-NoPath"]);
+    await execAsync(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-File", script2, ...args, "-InstallDir", root, "-NoPath"]);
     done[key] = true;
     writeJsonAtomic(marker, done);
   }
@@ -27881,8 +27926,8 @@ var shimPair = (folder, version2, dir) => {
   shim(folder, "pip" + version2, python + " -m pip");
 };
 var pyLauncher = (folder, py3, py2) => {
-  const script = path33.join(mkdirp(folder), "py-launcher.py");
-  fs24.writeFileSync(script, [
+  const script2 = path33.join(mkdirp(folder), "py-launcher.py");
+  fs24.writeFileSync(script2, [
     "import subprocess, sys",
     "PY3, PY2 = " + JSON.stringify(path33.join(py3, "python.exe")) + ", " + JSON.stringify(py2 ? path33.join(py2, "python.exe") : null),
     "args = sys.argv[1:]",
@@ -27895,7 +27940,7 @@ var pyLauncher = (folder, py3, py2) => {
     "sys.exit(subprocess.call([exe] + args))",
     ""
   ].join("\n"));
-  shim(folder, "py", '"' + path33.join(py3, "python.exe") + '" "' + script + '"');
+  shim(folder, "py", '"' + path33.join(py3, "python.exe") + '" "' + script2 + '"');
 };
 var setupPython = async (env, config2, versions) => {
   if (dryRun) {
@@ -29706,6 +29751,7 @@ var plan = (config2, versions, o) => {
 
 // src/guest/toolchains/index.ts
 var PARALLEL2 = 4;
+var currentStep = new AsyncLocalStorage2();
 var locks = /* @__PURE__ */ new Map();
 var lockKey = (name) => name.split(" ")[0].toLowerCase();
 var exclusive = async (name, work) => {
@@ -29731,10 +29777,19 @@ var runSteps = async (steps, o) => {
   const running = /* @__PURE__ */ new Set();
   const waiting = [];
   let done = 0;
-  const say = o.report ?? ((message) => setSandboxStatus("provisioning", message));
+  const percent = /* @__PURE__ */ new Map();
+  const active = () => [...running].map((name) => ({ name, ...percent.has(name) ? { percent: percent.get(name) } : {} }));
+  const say = o.report ?? ((message) => setSandboxStatus("provisioning", message, { active: active(), done, total: steps.length }));
   const report = () => {
     if (running.size) say("Installing " + [...running].join(", ") + " (" + done + " of " + steps.length + " done)");
   };
+  if (!o.report) watchDownloads(() => {
+    const name = currentStep.getStore();
+    return name ? (fraction) => {
+      percent.set(name, Math.round(fraction * 100));
+      report();
+    } : null;
+  });
   for (const s of steps) {
     finished.set(s.name, (async () => {
       await Promise.all((s.after ?? []).map((name) => finished.get(name)));
@@ -29748,16 +29803,22 @@ var runSteps = async (steps, o) => {
       running.add(s.name);
       report();
       try {
-        await exclusive(s.name, () => step(s.name, envs.get(s.name), async () => s.run(envs.get(s.name))));
+        await currentStep.run(s.name, () => exclusive(s.name, () => step(s.name, envs.get(s.name), async () => s.run(envs.get(s.name)))));
       } finally {
         running.delete(s.name);
+        percent.delete(s.name);
         done++;
         report();
         waiting.shift()?.();
       }
     })());
   }
-  await Promise.all(finished.values());
+  try {
+    await Promise.all(finished.values());
+  } finally {
+    if (!o.report) watchDownloads(null);
+  }
+  if (!o.report) setSandboxStatus("provisioning", "Set up " + steps.length + " toolchains and databases", { active: [], done, total: steps.length });
   return envs;
 };
 var setupToolchains = async (config2, versions, options, run3 = {}) => {
@@ -29976,13 +30037,13 @@ var agentEnv = (tools, target = { workspace, project: session.project, base: pro
 var persistEnvironment = (env, toolVars2) => {
   if (!isWin || dryRun || testMode) return;
   const vars = Object.fromEntries([...toolVars2, ...AGENT_VARS].filter((n) => env[n] !== void 0).map((n) => [n, env[n]]));
-  const script = [
+  const script2 = [
     "$vars = '" + JSON.stringify(vars).replace(/'/g, "''") + "' | ConvertFrom-Json",
     "foreach ($p in $vars.PSObject.Properties) { [Environment]::SetEnvironmentVariable($p.Name, [string]$p.Value, 'Machine') }",
     "[Environment]::SetEnvironmentVariable('Path', '" + (env.PATH ?? "").replace(/'/g, "''") + "', 'Machine')"
   ].join("\n");
   try {
-    powershell(script);
+    powershell(script2);
   } catch (e) {
     warn("Could not persist the environment machine-wide: " + errMsg(e));
   }
@@ -30441,8 +30502,65 @@ var enableProcessAudit = () => {
 
 // src/shared/pty-client.ts
 import net2 from "node:net";
+
+// src/shared/console-input.ts
+import { spawn as spawn7 } from "node:child_process";
+var script = (pid) => [
+  'Add-Type -TypeDefinition @"',
+  "using System; using System.Runtime.InteropServices;",
+  "public static class SbxVtInput {",
+  '  [DllImport("kernel32.dll")] static extern bool FreeConsole();',
+  '  [DllImport("kernel32.dll")] static extern bool AttachConsole(uint pid);',
+  '  [DllImport("kernel32.dll", CharSet = CharSet.Unicode)] static extern IntPtr CreateFileW(string name, uint access, uint share, IntPtr security, uint creation, uint flags, IntPtr template);',
+  '  [DllImport("kernel32.dll")] static extern bool GetConsoleMode(IntPtr handle, out uint mode);',
+  '  [DllImport("kernel32.dll")] static extern bool SetConsoleMode(IntPtr handle, uint mode);',
+  '  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);',
+  "  public static int On(uint pid) {",
+  "    FreeConsole();",
+  "    if (!AttachConsole(pid)) return 2;",
+  '    IntPtr input = CreateFileW("CONIN$", 0xC0000000, 3, IntPtr.Zero, 3, 0, IntPtr.Zero);',
+  "    if (input == new IntPtr(-1)) return 3;",
+  "    uint mode; bool ok = GetConsoleMode(input, out mode) && SetConsoleMode(input, mode | 0x200);",
+  "    CloseHandle(input);",
+  "    FreeConsole();",
+  "    return ok ? 0 : 4;",
+  "  }",
+  "}",
+  '"@',
+  "exit [SbxVtInput]::On(" + pid + ")"
+].join("\n");
+var enableVtInput = () => {
+  if (process.platform !== "win32" || !process.stdin.isTTY) return { ready: Promise.resolve(false), stop: () => Promise.resolve() };
+  let child = null;
+  let exited = Promise.resolve();
+  const ready = new Promise((resolve2) => {
+    try {
+      child = spawn7(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-EncodedCommand", Buffer.from(script(process.pid), "utf16le").toString("base64")], { stdio: "ignore", windowsHide: true });
+    } catch {
+      resolve2(false);
+      return;
+    }
+    exited = new Promise((done) => {
+      child?.on("exit", (code) => {
+        resolve2(code === 0);
+        done();
+      });
+      child?.on("error", () => {
+        resolve2(false);
+        done();
+      });
+    });
+  });
+  return { ready, stop: () => {
+    if (child && child.exitCode === null && child.signalCode === null) child.kill();
+    return exited;
+  } };
+};
+
+// src/shared/pty-client.ts
 var FrameType = { Hello: 1, Input: 2, Resize: 3, Restart: 4, Ping: 5, Output: 16, Exit: 17, Error: 18, Restarting: 19, Status: 20, Console: 21 };
 var PING_INTERVAL_MS = 5e3;
+var MOUSE_OFF = "\x1B[?1000l\x1B[?1002l\x1B[?1003l\x1B[?1005l\x1B[?1006l\x1B[?1015l";
 var encodeFrame = (type, payload = Buffer.alloc(0)) => {
   const header = Buffer.alloc(5);
   header.writeUInt8(type, 0);
@@ -30618,6 +30736,34 @@ var fixWindowsKeys = (chunk) => {
   if (!chunk.includes(8) && !chunk.includes(127)) return chunk;
   return Buffer.from(chunk.map((b) => b === 8 ? 127 : b === 127 ? 8 : b));
 };
+var JOIN_MS = 30;
+var MAX_HELD = 64;
+var InputJoiner = class {
+  held = Buffer.alloc(0);
+  /** The bytes to send now; an unfinished sequence at the end is kept for the next chunk. */
+  push(chunk) {
+    const data = this.held.length ? Buffer.concat([this.held, chunk]) : chunk;
+    const cut = unfinishedSequence(data);
+    this.held = Buffer.from(data.subarray(cut));
+    return data.subarray(0, cut);
+  }
+  holding() {
+    return this.held.length > 0;
+  }
+  flush() {
+    const out = this.held;
+    this.held = Buffer.alloc(0);
+    return out;
+  }
+};
+var unfinishedSequence = (data) => {
+  const start = data.lastIndexOf(27, -1);
+  if (start === -1 || data.length - start > MAX_HELD) return data.length;
+  const rest = data.subarray(start + 1);
+  if (rest.length === 0) return start;
+  if (rest[0] === 91 || rest[0] === 79) return rest.subarray(1).every((b) => b >= 32 && b <= 63) && (rest[0] === 91 || rest.length === 1) ? start : data.length;
+  return data.length;
+};
 var runTerminalClient = (socket, token, options = {}) => {
   const stdin = process.stdin;
   const stdout = process.stdout;
@@ -30625,13 +30771,14 @@ var runTerminalClient = (socket, token, options = {}) => {
     const [c, r] = stdout.isTTY ? stdout.getWindowSize() : [0, 0];
     return [c || 120, r || 30];
   };
-  const swapKeys = process.platform === "win32" && stdin.isTTY;
+  let swapKeys = process.platform === "win32" && stdin.isTTY;
   return new Promise((resolve2) => {
     let done = false;
     const reader = new FrameReader();
     const filter = new OutputFilter();
     let sent = size();
     let resizeTimer;
+    let vtInput;
     const finish = (result) => {
       if (done) return;
       done = true;
@@ -30640,18 +30787,28 @@ var runTerminalClient = (socket, token, options = {}) => {
       clearTimeout(resizeTimer);
       clearInterval(heartbeat);
       clearInterval(sizeWatch);
-      if (stdin.isTTY) stdin.setRawMode(false);
-      stdin.pause();
+      clearTimeout(joinTimer);
       socket.destroy();
-      stdout.write("\x1B[0m\x1B[?25h\r\n");
-      resolve2(result);
+      stdout.write("\x1B[0m\x1B[?25h" + MOUSE_OFF + "\r\n");
+      void (vtInput?.stop() ?? Promise.resolve()).then(() => {
+        if (stdin.isTTY) stdin.setRawMode(false);
+        stdin.pause();
+        resolve2(result);
+      });
+    };
+    const joiner = new InputJoiner();
+    let joinTimer;
+    const sendInput = (data) => {
+      if (data.length && !done) socket.write(encodeFrame(FrameType.Input, swapKeys ? fixWindowsKeys(data) : data));
     };
     const onInput = (chunk) => {
       if (options.detachKey !== void 0 && chunk.includes(options.detachKey)) {
         finish({ reason: "detach" });
         return;
       }
-      socket.write(encodeFrame(FrameType.Input, swapKeys ? fixWindowsKeys(chunk) : chunk));
+      clearTimeout(joinTimer);
+      sendInput(joiner.push(chunk));
+      if (joiner.holding()) joinTimer = setTimeout(() => sendInput(joiner.flush()), JOIN_MS);
     };
     let passthrough = false;
     const sendSize = () => {
@@ -30683,7 +30840,7 @@ var runTerminalClient = (socket, token, options = {}) => {
       for (const frame of frames) {
         if (frame.type === FrameType.Output) stdout.write(filter.push(frame.payload));
         else if (frame.type === FrameType.Console) passthrough = frame.payload.toString("latin1") === "conpty.dll";
-        else if (frame.type === FrameType.Restarting) stdout.write("\x1B[2J\x1B[3J\x1B[H");
+        else if (frame.type === FrameType.Restarting) stdout.write(MOUSE_OFF + "\x1B[2J\x1B[3J\x1B[H");
         else if (frame.type === FrameType.Exit) finish({ reason: "exit", exitCode: frame.payload.length >= 4 ? frame.payload.readInt32LE(0) : 1 });
         else if (frame.type === FrameType.Error) finish({ reason: "error", message: frame.payload.toString("utf8").slice(0, 500).replace(/[\x00-\x1f\x7f]/g, " ") });
       }
@@ -30694,6 +30851,10 @@ var runTerminalClient = (socket, token, options = {}) => {
     stdout.write("\x1B[2J\x1B[3J\x1B[H");
     socket.write(helloFrame(token, c, r));
     if (stdin.isTTY) stdin.setRawMode(true);
+    vtInput = enableVtInput();
+    void vtInput.ready.then((on) => {
+      if (on) swapKeys = false;
+    });
     stdin.on("data", onInput);
     stdin.resume();
     stdout.on("resize", onResize);
@@ -30794,7 +30955,7 @@ var saveProjectStatus = (name, workspace2, phase, message, databases, summary) =
 var STEPS = 8;
 var step2 = (n, title) => {
   log("\n\x1B[36m[" + n + "/" + STEPS + "] " + title + "\x1B[0m");
-  setSandboxStatus(n === 1 ? "booting" : "provisioning", "[" + n + "/" + STEPS + "] " + title);
+  setSandboxStatus(n === 1 ? "booting" : "provisioning", "[" + n + "/" + STEPS + "] " + title, { step: n, steps: STEPS, title: title.replace(/ \(.*\)$/, ""), active: [], done: 0, total: 0 });
 };
 var soft = async (what, work) => {
   try {
@@ -30804,7 +30965,7 @@ var soft = async (what, work) => {
   }
 };
 var startDaemon = (env) => {
-  spawn7(process.execPath, [path50.join(path50.dirname(process.argv[1]), "daemon.js")], { detached: true, stdio: "ignore", windowsHide: true, env: { ...env, AGENT_LOG_PREFIX: "daemon" } }).unref();
+  spawn8(process.execPath, [path50.join(path50.dirname(process.argv[1]), "daemon.js")], { detached: true, stdio: "ignore", windowsHide: true, env: { ...env, AGENT_LOG_PREFIX: "daemon" } }).unref();
 };
 var writeDbCommand = () => {
   const dir = mkdirp(path50.join(localDir, "bin"));

package/dist/runtime/netproxy.js

@@ -25404,7 +25404,7 @@ var ClaudeProfile = external_exports.strictObject({
 var GuestWorkspace = external_exports.union([external_exports.literal("auto"), external_exports.literal("mirror"), GuestPath]).describe('Where the workspace appears inside the sandbox. "auto" = C:\\Workspace\\<folder name>. "mirror" = the same path as on this PC, so absolute paths in configs and build caches match (another drive letter such as F: is a subst drive onto C:\\Mirror\\F); paths the sandbox reserves (C:\\Users\\..., C:\\Program Files\\...) fall back to "auto".');
 var Mapping = external_exports.strictObject({
   host: external_exports.string().min(1).describe("Folder on this PC (relative paths are relative to the config file)."),
-  guest: GuestPath.describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game: mapped to C:\\Mirror\\F\\... and shown as F: (subst) at boot."),
+  guest: external_exports.string().min(1).max(1024).optional().describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game (shown as F: at boot). Leave it out to use the same path as on this PC (a folder inside the project stays where it is in the project). A path the sandbox cannot use (C:\\Windows\\..., C:\\Users\\..., one already in use) goes to C:\\Mapped\\<drive>\\<path> instead, and the launch says so."),
   readOnly: external_exports.boolean().describe("true = the agent can only read it."),
   optional: external_exports.boolean().optional().describe("true = skip it quietly when the host folder does not exist.")
 });
@@ -25661,6 +25661,7 @@ var Projects = external_exports.strictObject({
   roots: external_exports.array(external_exports.string().min(1)).describe('Folders whose subfolders are your projects (e.g. "F:\\\\Code"), mapped read/write at every start. Any project inside one, including ones you create later, opens in the running sandbox at once, without a restart. Every agent in the sandbox can see all of them.'),
   askToAddRoot: external_exports.boolean().describe("When you start a project whose parent folder is not a root yet, ask once whether to add it."),
   declinedRoots: external_exports.array(external_exports.string().min(1)).describe("Parent folders you said no to (not asked again)."),
+  allowOutsideMappings: external_exports.union([external_exports.literal("ask"), external_exports.boolean()]).describe(`A project's .sandbox-config.json may map folders from outside the project (e.g. a game folder on another drive). "ask" = an interactive launch asks once per project and set of folders, and remembers your answer; true = always allowed (still listed when you approve the file); false = never (the launch stops and says which folders). Only your own settings decide this, never a project file.`),
   wsbShare: external_exports.boolean().describe("On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart.")
 });
 
@@ -25703,7 +25704,7 @@ var LocalOverrides = external_exports.strictObject({
   readOnly: external_exports.boolean().describe("Map this project read-only."),
   // A project may turn the filter on and keep more out, never let ignored files in.
   workspaceFilter: WorkspaceFilter.pick({ enabled: true, exclude: true }).partial(),
-  mappings: external_exports.array(Mapping).describe("Extra folders inside this project (relative to this file), e.g. a read-only data folder at another place in the sandbox."),
+  mappings: external_exports.array(Mapping).describe("Extra folders (relative paths are relative to this file), e.g. a read-only data folder at another place in the sandbox. Folders outside the project are used only as your projects.allowOutsideMappings setting allows (by default you are asked once)."),
   scripts: Strings.describe("Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."),
   // This PC's resources are yours to share: CPU and paging file (this PC's disk) are not a project's to set.
   sandbox: Sandbox.omit({ cpuLimit: true, pageFileMb: true }).partial(),
@@ -25734,6 +25735,15 @@ var AttachEndpoint = external_exports.strictObject({
   port: external_exports.number().int().min(1024).max(65535),
   token: Text(256)
 });
+var BootProgress = external_exports.strictObject({
+  step: external_exports.number().int().min(1).max(32),
+  steps: external_exports.number().int().min(1).max(32),
+  title: Text(120),
+  /** Being set up now; percent while it downloads (when the size is known). */
+  active: external_exports.array(external_exports.strictObject({ name: Text(64), percent: external_exports.number().int().min(0).max(100).optional() })).max(8),
+  done: external_exports.number().int().min(0).max(1e3),
+  total: external_exports.number().int().min(0).max(1e3)
+});
 var SandboxStatus = external_exports.object({
   launchId: Text(64),
   phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
@@ -25743,7 +25753,9 @@ var SandboxStatus = external_exports.object({
   guestWorkspace: Text(),
   headless: external_exports.boolean(),
   /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
-  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional()
+  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
+  /** A malformed progress is dropped, never the status (the phase still counts). */
+  progress: BootProgress.optional().catch(void 0)
 });
 var Version = external_exports.strictObject({ spec: Text(128), source: Text(256) });
 var DatabasePlan = external_exports.strictObject({