windows-development-sandbox 1.4.0 → 1.4.1

package/dist/runtime/view.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path3) {
-          path3 = castPath(path3, object2);
-          var index = 0, length = path3.length;
+        function baseGet(object2, path4) {
+          path4 = castPath(path4, object2);
+          var index = 0, length = path4.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path3[index++])];
+            object2 = object2[toKey(path4[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path3, args) {
-          path3 = castPath(path3, object2);
-          object2 = parent(object2, path3);
-          var func = object2 == null ? object2 : object2[toKey(last(path3))];
+        function baseInvoke(object2, path4, args) {
+          path4 = castPath(path4, object2);
+          object2 = parent(object2, path4);
+          var func = object2 == null ? object2 : object2[toKey(last(path4))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path3, srcValue) {
-          if (isKey(path3) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path3), srcValue);
+        function baseMatchesProperty(path4, srcValue) {
+          if (isKey(path4) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path4), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path3);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path3) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path4);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path4) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path3) {
-            return hasIn(object2, path3);
+          return basePickBy(object2, paths, function(value, path4) {
+            return hasIn(object2, path4);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path3 = paths[index], value = baseGet(object2, path3);
-            if (predicate(value, path3)) {
-              baseSet(result2, castPath(path3, object2), value);
+            var path4 = paths[index], value = baseGet(object2, path4);
+            if (predicate(value, path4)) {
+              baseSet(result2, castPath(path4, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path3) {
+        function basePropertyDeep(path4) {
           return function(object2) {
-            return baseGet(object2, path3);
+            return baseGet(object2, path4);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path3, value, customizer) {
+        function baseSet(object2, path4, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length, lastIndex = length - 1, nested = object2;
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path3[index]), newValue = value;
+            var key = toKey(path4[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path3[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path4[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path3) {
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length;
+        function baseUnset(object2, path4) {
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path3[index]);
+            var key = toKey(path4[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path3);
-          return obj == null || delete obj[toKey(last(path3))];
+          var obj = parent(object2, path4);
+          return obj == null || delete obj[toKey(last(path4))];
         }
-        function baseUpdate(object2, path3, updater, customizer) {
-          return baseSet(object2, path3, updater(baseGet(object2, path3)), customizer);
+        function baseUpdate(object2, path4, updater, customizer) {
+          return baseSet(object2, path4, updater(baseGet(object2, path4)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path3, hasFunc) {
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length, result2 = false;
+        function hasPath(object2, path4, hasFunc) {
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path3[index]);
+            var key = toKey(path4[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path3) {
-          return path3.length < 2 ? object2 : baseGet(object2, baseSlice(path3, 0, -1));
+        function parent(object2, path4) {
+          return path4.length < 2 ? object2 : baseGet(object2, baseSlice(path4, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path3, args) {
-          var index = -1, isFunc = typeof path3 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path4, args) {
+          var index = -1, isFunc = typeof path4 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path3, value, args) : baseInvoke(value, path3, args);
+            result2[++index] = isFunc ? apply(path4, value, args) : baseInvoke(value, path4, args);
           });
           return result2;
         });
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path3, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path3);
+        function get(object2, path4, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path4);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path3) {
-          return object2 != null && hasPath(object2, path3, baseHas);
+        function has(object2, path4) {
+          return object2 != null && hasPath(object2, path4, baseHas);
         }
-        function hasIn(object2, path3) {
-          return object2 != null && hasPath(object2, path3, baseHasIn);
+        function hasIn(object2, path4) {
+          return object2 != null && hasPath(object2, path4, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path3) {
-            path3 = castPath(path3, object2);
-            isDeep || (isDeep = path3.length > 1);
-            return path3;
+          paths = arrayMap(paths, function(path4) {
+            path4 = castPath(path4, object2);
+            isDeep || (isDeep = path4.length > 1);
+            return path4;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path3) {
-            return predicate(value, path3[0]);
+          return basePickBy(object2, props, function(value, path4) {
+            return predicate(value, path4[0]);
           });
         }
-        function result(object2, path3, defaultValue) {
-          path3 = castPath(path3, object2);
-          var index = -1, length = path3.length;
+        function result(object2, path4, defaultValue) {
+          path4 = castPath(path4, object2);
+          var index = -1, length = path4.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path3[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path4[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path3, value) {
-          return object2 == null ? object2 : baseSet(object2, path3, value);
+        function set2(object2, path4, value) {
+          return object2 == null ? object2 : baseSet(object2, path4, value);
         }
-        function setWith(object2, path3, value, customizer) {
+        function setWith(object2, path4, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path3, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path4, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path3) {
-          return object2 == null ? true : baseUnset(object2, path3);
+        function unset(object2, path4) {
+          return object2 == null ? true : baseUnset(object2, path4);
         }
-        function update(object2, path3, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path3, castFunction(updater));
+        function update(object2, path4, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path4, castFunction(updater));
         }
-        function updateWith(object2, path3, updater, customizer) {
+        function updateWith(object2, path4, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path3, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path4, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path3, srcValue) {
-          return baseMatchesProperty(path3, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path4, srcValue) {
+          return baseMatchesProperty(path4, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path3, args) {
+        var method = baseRest(function(path4, args) {
           return function(object2) {
-            return baseInvoke(object2, path3, args);
+            return baseInvoke(object2, path4, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path3) {
-            return baseInvoke(object2, path3, args);
+          return function(path4) {
+            return baseInvoke(object2, path4, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path3) {
-          return isKey(path3) ? baseProperty(toKey(path3)) : basePropertyDeep(path3);
+        function property(path4) {
+          return isKey(path4) ? baseProperty(toKey(path4)) : basePropertyDeep(path4);
         }
         function propertyOf(object2) {
-          return function(path3) {
-            return object2 == null ? undefined2 : baseGet(object2, path3);
+          return function(path4) {
+            return object2 == null ? undefined2 : baseGet(object2, path4);
           };
         }
         var range = createRange();
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path3, args) {
-          if (typeof path3 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path4, args) {
+          if (typeof path4 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path3, args);
+            return baseInvoke(value, path4, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5533,8 +5533,87 @@ var require_lodash = __commonJS({
 
 // src/shared/pty-client.ts
 import net from "node:net";
+
+// src/shared/console-input.ts
+import { spawn } from "node:child_process";
+
+// src/shared/system.ts
+import path from "node:path";
+var systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
+var system32 = (exe) => path.join(systemRoot(), "System32", exe);
+var SYSTEM = {
+  cmd: () => system32("cmd.exe"),
+  powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
+  tasklist: () => system32("tasklist.exe"),
+  tar: () => system32("tar.exe"),
+  reg: () => system32("reg.exe"),
+  netsh: () => system32("netsh.exe"),
+  netstat: () => system32("NETSTAT.EXE"),
+  route: () => system32("ROUTE.EXE"),
+  ipconfig: () => system32("ipconfig.exe"),
+  robocopy: () => system32("Robocopy.exe"),
+  shutdown: () => system32("shutdown.exe"),
+  dism: () => system32("Dism.exe"),
+  msiexec: () => system32("msiexec.exe")
+};
+
+// src/shared/console-input.ts
+var script = (pid) => [
+  'Add-Type -TypeDefinition @"',
+  "using System; using System.Runtime.InteropServices;",
+  "public static class SbxVtInput {",
+  '  [DllImport("kernel32.dll")] static extern bool FreeConsole();',
+  '  [DllImport("kernel32.dll")] static extern bool AttachConsole(uint pid);',
+  '  [DllImport("kernel32.dll", CharSet = CharSet.Unicode)] static extern IntPtr CreateFileW(string name, uint access, uint share, IntPtr security, uint creation, uint flags, IntPtr template);',
+  '  [DllImport("kernel32.dll")] static extern bool GetConsoleMode(IntPtr handle, out uint mode);',
+  '  [DllImport("kernel32.dll")] static extern bool SetConsoleMode(IntPtr handle, uint mode);',
+  '  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);',
+  "  public static int On(uint pid) {",
+  "    FreeConsole();",
+  "    if (!AttachConsole(pid)) return 2;",
+  '    IntPtr input = CreateFileW("CONIN$", 0xC0000000, 3, IntPtr.Zero, 3, 0, IntPtr.Zero);',
+  "    if (input == new IntPtr(-1)) return 3;",
+  "    uint mode; bool ok = GetConsoleMode(input, out mode) && SetConsoleMode(input, mode | 0x200);",
+  "    CloseHandle(input);",
+  "    FreeConsole();",
+  "    return ok ? 0 : 4;",
+  "  }",
+  "}",
+  '"@',
+  "exit [SbxVtInput]::On(" + pid + ")"
+].join("\n");
+var enableVtInput = () => {
+  if (process.platform !== "win32" || !process.stdin.isTTY) return { ready: Promise.resolve(false), stop: () => Promise.resolve() };
+  let child = null;
+  let exited = Promise.resolve();
+  const ready = new Promise((resolve) => {
+    try {
+      child = spawn(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-EncodedCommand", Buffer.from(script(process.pid), "utf16le").toString("base64")], { stdio: "ignore", windowsHide: true });
+    } catch {
+      resolve(false);
+      return;
+    }
+    exited = new Promise((done) => {
+      child?.on("exit", (code) => {
+        resolve(code === 0);
+        done();
+      });
+      child?.on("error", () => {
+        resolve(false);
+        done();
+      });
+    });
+  });
+  return { ready, stop: () => {
+    if (child && child.exitCode === null && child.signalCode === null) child.kill();
+    return exited;
+  } };
+};
+
+// src/shared/pty-client.ts
 var FrameType = { Hello: 1, Input: 2, Resize: 3, Restart: 4, Ping: 5, Output: 16, Exit: 17, Error: 18, Restarting: 19, Status: 20, Console: 21 };
 var PING_INTERVAL_MS = 5e3;
+var MOUSE_OFF = "\x1B[?1000l\x1B[?1002l\x1B[?1003l\x1B[?1005l\x1B[?1006l\x1B[?1015l";
 var encodeFrame = (type, payload = Buffer.alloc(0)) => {
   const header = Buffer.alloc(5);
   header.writeUInt8(type, 0);
@@ -5710,6 +5789,34 @@ var fixWindowsKeys = (chunk) => {
   if (!chunk.includes(8) && !chunk.includes(127)) return chunk;
   return Buffer.from(chunk.map((b) => b === 8 ? 127 : b === 127 ? 8 : b));
 };
+var JOIN_MS = 30;
+var MAX_HELD = 64;
+var InputJoiner = class {
+  held = Buffer.alloc(0);
+  /** The bytes to send now; an unfinished sequence at the end is kept for the next chunk. */
+  push(chunk) {
+    const data = this.held.length ? Buffer.concat([this.held, chunk]) : chunk;
+    const cut = unfinishedSequence(data);
+    this.held = Buffer.from(data.subarray(cut));
+    return data.subarray(0, cut);
+  }
+  holding() {
+    return this.held.length > 0;
+  }
+  flush() {
+    const out = this.held;
+    this.held = Buffer.alloc(0);
+    return out;
+  }
+};
+var unfinishedSequence = (data) => {
+  const start = data.lastIndexOf(27, -1);
+  if (start === -1 || data.length - start > MAX_HELD) return data.length;
+  const rest = data.subarray(start + 1);
+  if (rest.length === 0) return start;
+  if (rest[0] === 91 || rest[0] === 79) return rest.subarray(1).every((b) => b >= 32 && b <= 63) && (rest[0] === 91 || rest.length === 1) ? start : data.length;
+  return data.length;
+};
 var runTerminalClient = (socket, token, options = {}) => {
   const stdin = process.stdin;
   const stdout = process.stdout;
@@ -5717,13 +5824,14 @@ var runTerminalClient = (socket, token, options = {}) => {
     const [c, r] = stdout.isTTY ? stdout.getWindowSize() : [0, 0];
     return [c || 120, r || 30];
   };
-  const swapKeys = process.platform === "win32" && stdin.isTTY;
+  let swapKeys = process.platform === "win32" && stdin.isTTY;
   return new Promise((resolve) => {
     let done = false;
     const reader = new FrameReader();
     const filter = new OutputFilter();
     let sent = size();
     let resizeTimer;
+    let vtInput;
     const finish = (result) => {
       if (done) return;
       done = true;
@@ -5732,18 +5840,28 @@ var runTerminalClient = (socket, token, options = {}) => {
       clearTimeout(resizeTimer);
       clearInterval(heartbeat);
       clearInterval(sizeWatch);
-      if (stdin.isTTY) stdin.setRawMode(false);
-      stdin.pause();
+      clearTimeout(joinTimer);
       socket.destroy();
-      stdout.write("\x1B[0m\x1B[?25h\r\n");
-      resolve(result);
+      stdout.write("\x1B[0m\x1B[?25h" + MOUSE_OFF + "\r\n");
+      void (vtInput?.stop() ?? Promise.resolve()).then(() => {
+        if (stdin.isTTY) stdin.setRawMode(false);
+        stdin.pause();
+        resolve(result);
+      });
+    };
+    const joiner = new InputJoiner();
+    let joinTimer;
+    const sendInput = (data) => {
+      if (data.length && !done) socket.write(encodeFrame(FrameType.Input, swapKeys ? fixWindowsKeys(data) : data));
     };
     const onInput = (chunk) => {
       if (options.detachKey !== void 0 && chunk.includes(options.detachKey)) {
         finish({ reason: "detach" });
         return;
       }
-      socket.write(encodeFrame(FrameType.Input, swapKeys ? fixWindowsKeys(chunk) : chunk));
+      clearTimeout(joinTimer);
+      sendInput(joiner.push(chunk));
+      if (joiner.holding()) joinTimer = setTimeout(() => sendInput(joiner.flush()), JOIN_MS);
     };
     let passthrough = false;
     const sendSize = () => {
@@ -5775,7 +5893,7 @@ var runTerminalClient = (socket, token, options = {}) => {
       for (const frame of frames) {
         if (frame.type === FrameType.Output) stdout.write(filter.push(frame.payload));
         else if (frame.type === FrameType.Console) passthrough = frame.payload.toString("latin1") === "conpty.dll";
-        else if (frame.type === FrameType.Restarting) stdout.write("\x1B[2J\x1B[3J\x1B[H");
+        else if (frame.type === FrameType.Restarting) stdout.write(MOUSE_OFF + "\x1B[2J\x1B[3J\x1B[H");
         else if (frame.type === FrameType.Exit) finish({ reason: "exit", exitCode: frame.payload.length >= 4 ? frame.payload.readInt32LE(0) : 1 });
         else if (frame.type === FrameType.Error) finish({ reason: "error", message: frame.payload.toString("utf8").slice(0, 500).replace(/[\x00-\x1f\x7f]/g, " ") });
       }
@@ -5786,6 +5904,10 @@ var runTerminalClient = (socket, token, options = {}) => {
     stdout.write("\x1B[2J\x1B[3J\x1B[H");
     socket.write(helloFrame(token, c, r));
     if (stdin.isTTY) stdin.setRawMode(true);
+    vtInput = enableVtInput();
+    void vtInput.ready.then((on) => {
+      if (on) swapKeys = false;
+    });
     stdin.on("data", onInput);
     stdin.resume();
     stdout.on("resize", onResize);
@@ -5794,7 +5916,7 @@ var runTerminalClient = (socket, token, options = {}) => {
 
 // src/shared/rundir.ts
 import fs from "node:fs";
-import path from "node:path";
+import path2 from "node:path";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -6612,10 +6734,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path3) {
-  if (!path3)
+function getElementAtPath(obj, path4) {
+  if (!path4)
     return obj;
-  return path3.reduce((acc, key) => acc?.[key], obj);
+  return path4.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6955,11 +7077,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path3, issues) {
+function prefixIssues(path4, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path3);
+    iss.path.unshift(path4);
     return iss;
   });
 }
@@ -7409,16 +7531,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path3 = []) => {
+  const processError = (error63, path4 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path3, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else {
-        const fullpath = [...path3, ...issue2.path];
+        const fullpath = [...path4, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7457,17 +7579,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path3 = []) => {
+  const processError = (error63, path4 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path3, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path3, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
       } else {
-        const fullpath = [...path3, ...issue2.path];
+        const fullpath = [...path4, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7506,8 +7628,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path3 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path3) {
+  const path4 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path4) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -24609,13 +24731,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path3 = ref.slice(1).split("/").filter(Boolean);
-  if (path3.length === 0) {
+  const path4 = ref.slice(1).split("/").filter(Boolean);
+  if (path4.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path3[0] === defsKey) {
-    const key = path3[1] === void 0 ? void 0 : decodeJSONPointerSegment(path3[1]);
+  if (path4[0] === defsKey) {
+    const key = path4[1] === void 0 ? void 0 : decodeJSONPointerSegment(path4[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25578,7 +25700,7 @@ var ClaudeProfile = external_exports.strictObject({
 var GuestWorkspace = external_exports.union([external_exports.literal("auto"), external_exports.literal("mirror"), GuestPath]).describe('Where the workspace appears inside the sandbox. "auto" = C:\\Workspace\\<folder name>. "mirror" = the same path as on this PC, so absolute paths in configs and build caches match (another drive letter such as F: is a subst drive onto C:\\Mirror\\F); paths the sandbox reserves (C:\\Users\\..., C:\\Program Files\\...) fall back to "auto".');
 var Mapping = external_exports.strictObject({
   host: external_exports.string().min(1).describe("Folder on this PC (relative paths are relative to the config file)."),
-  guest: GuestPath.describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game: mapped to C:\\Mirror\\F\\... and shown as F: (subst) at boot."),
+  guest: external_exports.string().min(1).max(1024).optional().describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game (shown as F: at boot). Leave it out to use the same path as on this PC (a folder inside the project stays where it is in the project). A path the sandbox cannot use (C:\\Windows\\..., C:\\Users\\..., one already in use) goes to C:\\Mapped\\<drive>\\<path> instead, and the launch says so."),
   readOnly: external_exports.boolean().describe("true = the agent can only read it."),
   optional: external_exports.boolean().optional().describe("true = skip it quietly when the host folder does not exist.")
 });
@@ -25835,6 +25957,7 @@ var Projects = external_exports.strictObject({
   roots: external_exports.array(external_exports.string().min(1)).describe('Folders whose subfolders are your projects (e.g. "F:\\\\Code"), mapped read/write at every start. Any project inside one, including ones you create later, opens in the running sandbox at once, without a restart. Every agent in the sandbox can see all of them.'),
   askToAddRoot: external_exports.boolean().describe("When you start a project whose parent folder is not a root yet, ask once whether to add it."),
   declinedRoots: external_exports.array(external_exports.string().min(1)).describe("Parent folders you said no to (not asked again)."),
+  allowOutsideMappings: external_exports.union([external_exports.literal("ask"), external_exports.boolean()]).describe(`A project's .sandbox-config.json may map folders from outside the project (e.g. a game folder on another drive). "ask" = an interactive launch asks once per project and set of folders, and remembers your answer; true = always allowed (still listed when you approve the file); false = never (the launch stops and says which folders). Only your own settings decide this, never a project file.`),
   wsbShare: external_exports.boolean().describe("On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart.")
 });
 
@@ -25877,7 +26000,7 @@ var LocalOverrides = external_exports.strictObject({
   readOnly: external_exports.boolean().describe("Map this project read-only."),
   // A project may turn the filter on and keep more out, never let ignored files in.
   workspaceFilter: WorkspaceFilter.pick({ enabled: true, exclude: true }).partial(),
-  mappings: external_exports.array(Mapping).describe("Extra folders inside this project (relative to this file), e.g. a read-only data folder at another place in the sandbox."),
+  mappings: external_exports.array(Mapping).describe("Extra folders (relative paths are relative to this file), e.g. a read-only data folder at another place in the sandbox. Folders outside the project are used only as your projects.allowOutsideMappings setting allows (by default you are asked once)."),
   scripts: Strings.describe("Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."),
   // This PC's resources are yours to share: CPU and paging file (this PC's disk) are not a project's to set.
   sandbox: Sandbox.omit({ cpuLimit: true, pageFileMb: true }).partial(),
@@ -25908,6 +26031,15 @@ var AttachEndpoint = external_exports.strictObject({
   port: external_exports.number().int().min(1024).max(65535),
   token: Text(256)
 });
+var BootProgress = external_exports.strictObject({
+  step: external_exports.number().int().min(1).max(32),
+  steps: external_exports.number().int().min(1).max(32),
+  title: Text(120),
+  /** Being set up now; percent while it downloads (when the size is known). */
+  active: external_exports.array(external_exports.strictObject({ name: Text(64), percent: external_exports.number().int().min(0).max(100).optional() })).max(8),
+  done: external_exports.number().int().min(0).max(1e3),
+  total: external_exports.number().int().min(0).max(1e3)
+});
 var SandboxStatus = external_exports.object({
   launchId: Text(64),
   phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
@@ -25917,7 +26049,9 @@ var SandboxStatus = external_exports.object({
   guestWorkspace: Text(),
   headless: external_exports.boolean(),
   /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
-  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional()
+  addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
+  /** A malformed progress is dropped, never the status (the phase still counts). */
+  progress: BootProgress.optional().catch(void 0)
 });
 var Version = external_exports.strictObject({ spec: Text(128), source: Text(256) });
 var DatabasePlan = external_exports.strictObject({
@@ -25986,17 +26120,17 @@ var ProjectStatus = external_exports.object({
 var MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
 var safeId = (id) => Id.parse(id);
 var runPaths = (dataDir2) => {
-  const run2 = path.join(dataDir2, "run");
-  const file2 = (dir) => (id) => path.join(run2, dir, safeId(id) + ".json");
+  const run2 = path2.join(dataDir2, "run");
+  const file2 = (dir) => (id) => path2.join(run2, dir, safeId(id) + ".json");
   return {
     run: run2,
-    sandbox: path.join(run2, "sandbox.json"),
-    requests: path.join(run2, "requests"),
-    responses: path.join(run2, "responses"),
-    sessions: path.join(run2, "sessions"),
-    projects: path.join(run2, "projects"),
+    sandbox: path2.join(run2, "sandbox.json"),
+    requests: path2.join(run2, "requests"),
+    responses: path2.join(run2, "responses"),
+    sessions: path2.join(run2, "sessions"),
+    projects: path2.join(run2, "projects"),
     /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
-    audit: path.join(run2, "audit"),
+    audit: path2.join(run2, "audit"),
     request: file2("requests"),
     response: file2("responses"),
     session: file2("sessions"),
@@ -26019,7 +26153,7 @@ var readSession = (dataDir2, id) => readValid(SessionStatus, runPaths(dataDir2).
 
 // src/guest/env.ts
 import fs2 from "node:fs";
-import path2 from "node:path";
+import path3 from "node:path";
 
 // src/shared/download.ts
 var checksumRequired = false;
@@ -26035,16 +26169,16 @@ var launchDir = process.env.AGENT_LAUNCH_DIR ?? "C:\\AgentLaunch";
 var dataDir = process.env.AGENT_DATA_DIR ?? "C:\\AgentData";
 var hostToolsDir = process.env.AGENT_HOST_TOOLS_DIR ?? "C:\\HostTools";
 var localDir = process.env.AGENT_LOCAL_DIR ?? "C:\\nvm";
-var toolsDir = path2.join(dataDir, "tools");
-var logsDir = path2.join(dataDir, "logs");
+var toolsDir = path3.join(dataDir, "tools");
+var logsDir = path3.join(dataDir, "logs");
 var run = runPaths(dataDir);
-var session = JSON.parse(fs2.readFileSync(path2.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, ""));
+var session = JSON.parse(fs2.readFileSync(path3.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, ""));
 setChecksumRequired(session.downloads?.requireChecksum === true);
 var workspace = process.env.AGENT_WORKSPACE ?? session.workspace;
-var stateDir = path2.join(dataDir, session.persistAgentState ? "state" : "state-session");
-var claudeDir = path2.join(stateDir, "claude");
+var stateDir = path3.join(dataDir, session.persistAgentState ? "state" : "state-session");
+var claudeDir = path3.join(stateDir, "claude");
 fs2.mkdirSync(logsDir, { recursive: true });
-var logFile = path2.join(logsDir, (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log");
+var logFile = path3.join(logsDir, (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log");
 
 // src/guest/view.ts
 var waitUntilStarted = async (id) => {