windows-development-sandbox 1.4.1 → 1.5.0

package/dist/runtime/db.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path16) {
-          path16 = castPath(path16, object2);
-          var index = 0, length = path16.length;
+        function baseGet(object2, path22) {
+          path22 = castPath(path22, object2);
+          var index = 0, length = path22.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path16[index++])];
+            object2 = object2[toKey(path22[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path16, args) {
-          path16 = castPath(path16, object2);
-          object2 = parent(object2, path16);
-          var func = object2 == null ? object2 : object2[toKey(last(path16))];
+        function baseInvoke(object2, path22, args) {
+          path22 = castPath(path22, object2);
+          object2 = parent(object2, path22);
+          var func = object2 == null ? object2 : object2[toKey(last(path22))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path16, srcValue) {
-          if (isKey(path16) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path16), srcValue);
+        function baseMatchesProperty(path22, srcValue) {
+          if (isKey(path22) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path22), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path16);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path16) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path22);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path22) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path16) {
-            return hasIn(object2, path16);
+          return basePickBy(object2, paths, function(value, path22) {
+            return hasIn(object2, path22);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path16 = paths[index], value = baseGet(object2, path16);
-            if (predicate(value, path16)) {
-              baseSet(result2, castPath(path16, object2), value);
+            var path22 = paths[index], value = baseGet(object2, path22);
+            if (predicate(value, path22)) {
+              baseSet(result2, castPath(path22, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path16) {
+        function basePropertyDeep(path22) {
           return function(object2) {
-            return baseGet(object2, path16);
+            return baseGet(object2, path22);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path16, value, customizer) {
+        function baseSet(object2, path22, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path16 = castPath(path16, object2);
-          var index = -1, length = path16.length, lastIndex = length - 1, nested = object2;
+          path22 = castPath(path22, object2);
+          var index = -1, length = path22.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path16[index]), newValue = value;
+            var key = toKey(path22[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path16[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path22[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path16) {
-          path16 = castPath(path16, object2);
-          var index = -1, length = path16.length;
+        function baseUnset(object2, path22) {
+          path22 = castPath(path22, object2);
+          var index = -1, length = path22.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path16[index]);
+            var key = toKey(path22[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path16);
-          return obj == null || delete obj[toKey(last(path16))];
+          var obj = parent(object2, path22);
+          return obj == null || delete obj[toKey(last(path22))];
         }
-        function baseUpdate(object2, path16, updater, customizer) {
-          return baseSet(object2, path16, updater(baseGet(object2, path16)), customizer);
+        function baseUpdate(object2, path22, updater, customizer) {
+          return baseSet(object2, path22, updater(baseGet(object2, path22)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path16, hasFunc) {
-          path16 = castPath(path16, object2);
-          var index = -1, length = path16.length, result2 = false;
+        function hasPath(object2, path22, hasFunc) {
+          path22 = castPath(path22, object2);
+          var index = -1, length = path22.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path16[index]);
+            var key = toKey(path22[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path16) {
-          return path16.length < 2 ? object2 : baseGet(object2, baseSlice(path16, 0, -1));
+        function parent(object2, path22) {
+          return path22.length < 2 ? object2 : baseGet(object2, baseSlice(path22, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path16, args) {
-          var index = -1, isFunc = typeof path16 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path22, args) {
+          var index = -1, isFunc = typeof path22 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path16, value, args) : baseInvoke(value, path16, args);
+            result2[++index] = isFunc ? apply(path22, value, args) : baseInvoke(value, path22, args);
           });
           return result2;
         });
@@ -3801,7 +3801,7 @@ var require_lodash = __commonJS({
           }
           return baseOrderBy(collection, baseFlatten(iteratees, 1), []);
         });
-        var now2 = ctxNow || function() {
+        var now = ctxNow || function() {
           return root.Date.now();
         };
         function after(n, func) {
@@ -3897,7 +3897,7 @@ var require_lodash = __commonJS({
             return lastCallTime === undefined2 || timeSinceLastCall >= wait || timeSinceLastCall < 0 || maxing && timeSinceLastInvoke >= maxWait;
           }
           function timerExpired() {
-            var time3 = now2();
+            var time3 = now();
             if (shouldInvoke(time3)) {
               return trailingEdge(time3);
             }
@@ -3919,10 +3919,10 @@ var require_lodash = __commonJS({
             lastArgs = lastCallTime = lastThis = timerId = undefined2;
           }
           function flush() {
-            return timerId === undefined2 ? result2 : trailingEdge(now2());
+            return timerId === undefined2 ? result2 : trailingEdge(now());
           }
           function debounced() {
-            var time3 = now2(), isInvoking = shouldInvoke(time3);
+            var time3 = now(), isInvoking = shouldInvoke(time3);
             lastArgs = arguments;
             lastThis = this;
             lastCallTime = time3;
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path16, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path16);
+        function get(object2, path22, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path22);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path16) {
-          return object2 != null && hasPath(object2, path16, baseHas);
+        function has(object2, path22) {
+          return object2 != null && hasPath(object2, path22, baseHas);
         }
-        function hasIn(object2, path16) {
-          return object2 != null && hasPath(object2, path16, baseHasIn);
+        function hasIn(object2, path22) {
+          return object2 != null && hasPath(object2, path22, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path16) {
-            path16 = castPath(path16, object2);
-            isDeep || (isDeep = path16.length > 1);
-            return path16;
+          paths = arrayMap(paths, function(path22) {
+            path22 = castPath(path22, object2);
+            isDeep || (isDeep = path22.length > 1);
+            return path22;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path16) {
-            return predicate(value, path16[0]);
+          return basePickBy(object2, props, function(value, path22) {
+            return predicate(value, path22[0]);
           });
         }
-        function result(object2, path16, defaultValue) {
-          path16 = castPath(path16, object2);
-          var index = -1, length = path16.length;
+        function result(object2, path22, defaultValue) {
+          path22 = castPath(path22, object2);
+          var index = -1, length = path22.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path16[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path22[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path16, value) {
-          return object2 == null ? object2 : baseSet(object2, path16, value);
+        function set2(object2, path22, value) {
+          return object2 == null ? object2 : baseSet(object2, path22, value);
         }
-        function setWith(object2, path16, value, customizer) {
+        function setWith(object2, path22, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path16, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path22, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path16) {
-          return object2 == null ? true : baseUnset(object2, path16);
+        function unset(object2, path22) {
+          return object2 == null ? true : baseUnset(object2, path22);
         }
-        function update(object2, path16, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path16, castFunction(updater));
+        function update(object2, path22, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path22, castFunction(updater));
         }
-        function updateWith(object2, path16, updater, customizer) {
+        function updateWith(object2, path22, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path16, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path22, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path16, srcValue) {
-          return baseMatchesProperty(path16, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path22, srcValue) {
+          return baseMatchesProperty(path22, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path16, args) {
+        var method = baseRest(function(path22, args) {
           return function(object2) {
-            return baseInvoke(object2, path16, args);
+            return baseInvoke(object2, path22, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path16) {
-            return baseInvoke(object2, path16, args);
+          return function(path22) {
+            return baseInvoke(object2, path22, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path16) {
-          return isKey(path16) ? baseProperty(toKey(path16)) : basePropertyDeep(path16);
+        function property(path22) {
+          return isKey(path22) ? baseProperty(toKey(path22)) : basePropertyDeep(path22);
         }
         function propertyOf(object2) {
-          return function(path16) {
-            return object2 == null ? undefined2 : baseGet(object2, path16);
+          return function(path22) {
+            return object2 == null ? undefined2 : baseGet(object2, path22);
           };
         }
         var range = createRange();
@@ -5297,7 +5297,7 @@ var require_lodash = __commonJS({
         lodash.nth = nth;
         lodash.noConflict = noConflict;
         lodash.noop = noop;
-        lodash.now = now2;
+        lodash.now = now;
         lodash.pad = pad;
         lodash.padEnd = padEnd;
         lodash.padStart = padStart;
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path16, args) {
-          if (typeof path16 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path22, args) {
+          if (typeof path22 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path16, args);
+            return baseInvoke(value, path22, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5531,8 +5531,42 @@ var require_lodash = __commonJS({
   }
 });
 
-// src/guest/db.ts
-import fs11 from "node:fs";
+// src/core/util/errors.ts
+function errMsg(e) {
+  return e instanceof Error ? e.message : String(e);
+}
+
+// src/shared/system.ts
+import path from "node:path";
+var systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
+function system32(exe) {
+  return path.join(systemRoot(), "System32", exe);
+}
+var SYSTEM = {
+  cmd: () => system32("cmd.exe"),
+  powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
+  tasklist: () => system32("tasklist.exe"),
+  whoami: () => system32("whoami.exe"),
+  icacls: () => system32("icacls.exe"),
+  tar: () => system32("tar.exe"),
+  reg: () => system32("reg.exe"),
+  netsh: () => system32("netsh.exe"),
+  netstat: () => system32("NETSTAT.EXE"),
+  route: () => system32("ROUTE.EXE"),
+  ipconfig: () => system32("ipconfig.exe"),
+  robocopy: () => system32("Robocopy.exe"),
+  shutdown: () => system32("shutdown.exe"),
+  dism: () => system32("Dism.exe"),
+  msiexec: () => system32("msiexec.exe"),
+  /** The .NET Framework C# compiler that ships with Windows (C# 5). */
+  csc: () => path.join(systemRoot(), "Microsoft.NET", "Framework64", "v4.0.30319", "csc.exe")
+};
+function dropInheritedModulePath(env = process.env) {
+  delete env.PSModulePath;
+}
+
+// src/guest/databases/sbx-db.ts
+import fs19 from "node:fs";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -6350,10 +6384,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path16) {
-  if (!path16)
+function getElementAtPath(obj, path22) {
+  if (!path22)
     return obj;
-  return path16.reduce((acc, key) => acc?.[key], obj);
+  return path22.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6693,11 +6727,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path16, issues) {
+function prefixIssues(path22, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path16);
+    iss.path.unshift(path22);
     return iss;
   });
 }
@@ -7147,16 +7181,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path16 = []) => {
+  const processError = (error63, path22 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path16, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path22, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else {
-        const fullpath = [...path16, ...issue2.path];
+        const fullpath = [...path22, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7195,17 +7229,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path16 = []) => {
+  const processError = (error63, path22 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path16, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path22, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path16, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path22, ...issue2.path]);
       } else {
-        const fullpath = [...path16, ...issue2.path];
+        const fullpath = [...path22, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7244,8 +7278,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path16 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path16) {
+  const path22 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path22) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -24347,13 +24381,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path16 = ref.slice(1).split("/").filter(Boolean);
-  if (path16.length === 0) {
+  const path22 = ref.slice(1).split("/").filter(Boolean);
+  if (path22.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path16[0] === defsKey) {
-    const key = path16[1] === void 0 ? void 0 : decodeJSONPointerSegment(path16[1]);
+  if (path22[0] === defsKey) {
+    const key = path22[1] === void 0 ? void 0 : decodeJSONPointerSegment(path22[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25202,104 +25236,161 @@ function date4(params) {
   return _coercedDate(ZodDate, params);
 }
 
-// src/shared/guest-paths.ts
+// src/shared/paths/guest-paths.ts
 var RESERVED_GUEST = /^C:\\(?:Windows|Program Files|Program Files \(x86\)|ProgramData|Users|AgentLaunch|AgentData|HostTools|nvm|Mirror)(?:\\|$)/i;
 var MIRROR_LETTER = /^[D-Z]$/;
 var DRIVE_PATH = /^([A-Za-z]):\\(.*)$/;
 var BAD_CHARS = /[<>:"|?*/\x00-\x1f]/;
-var isValidGuestPath = (guest) => {
+function isValidGuestPath(guest) {
   const m = DRIVE_PATH.exec(guest);
   if (!m) return false;
   const letter = m[1].toUpperCase();
   const rest = m[2].replace(/\\+$/, "");
   if (rest === "" || BAD_CHARS.test(rest)) return false;
-  if (rest.split("\\").some((segment) => segment === "" || segment === "." || segment === ".." || /[. ]$/.test(segment))) return false;
+  if (rest.split("\\").some((segment) => segment === "" || segment === "." || segment === ".." || /[. ]$/.test(segment)))
+    return false;
   if (letter === "C") return !RESERVED_GUEST.test("C:\\" + rest);
   return MIRROR_LETTER.test(letter);
-};
+}
 
 // src/core/schema/common.ts
-var GuestPath = external_exports.string().refine(
+var GuestPathSchema = external_exports.string().refine(
   isValidGuestPath,
   "reserved or invalid guest path (a folder under C:\\ other than Windows, Program Files, Users, AgentData, Mirror, ..., or on drive D: to Z:)"
 );
-var Name = external_exports.string().regex(/^[A-Za-z0-9_-]+$/, "letters, numbers, - and _ only");
-var Strings = external_exports.array(external_exports.string());
-var toggle = (description) => external_exports.strictObject({ enabled: external_exports.boolean().describe(description) });
-var SchemaRef = external_exports.string().describe("Path or URL of the JSON Schema for editor autocomplete and docs.");
-var GitAccess = external_exports.enum(["full", "readonly", "none"]).describe("full: normal git. readonly: status/log/diff/show/blame only (no commit, push, checkout, ...). none: no git at all; .git is hidden from the agent.");
-var Enabled = external_exports.union([external_exports.boolean(), external_exports.literal("auto")]);
-var enabled = (what, markers) => Enabled.describe(what + ' true, false, or "auto" = only when the project has ' + markers + ".");
-var Packages = (what, example) => Strings.describe(what + ", installed once and kept (e.g. " + example + ").");
+var NameSchema = external_exports.string().regex(/^[A-Za-z0-9_-]+$/, "letters, numbers, - and _ only");
+var StringsSchema = external_exports.array(external_exports.string());
+function toggle(description) {
+  return external_exports.strictObject({ enabled: external_exports.boolean().describe(description) });
+}
+var SchemaRefSchema = external_exports.string().describe("Path or URL of the JSON Schema for editor autocomplete and docs.");
+var GitAccessSchema = external_exports.enum(["full", "readonly", "none"]).describe(
+  "full: normal git. readonly: status/log/diff/show/blame only (no commit, push, checkout, ...). none: no git at all; .git is hidden from the agent."
+);
+var EnabledSchema = external_exports.union([external_exports.boolean(), external_exports.literal("auto")]);
+function enabled(what, markers) {
+  return EnabledSchema.describe(what + ' true, false, or "auto" = only when the project has ' + markers + ".");
+}
+function Packages(what, example) {
+  return StringsSchema.describe(what + ", installed once and kept (e.g. " + example + ").");
+}
 
 // src/core/schema/config.ts
 var import_lodash = __toESM(require_lodash(), 1);
 
 // src/core/schema/databases.ts
-var Port = external_exports.number().int().min(1024).max(65535);
-var dbEnabled = (name) => Enabled.describe(name + ': true, false, or "auto" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings).');
-var Databases = external_exports.strictObject({
+var PortSchema = external_exports.number().int().min(1024).max(65535);
+function dbEnabled(name) {
+  return EnabledSchema.describe(
+    name + ': true, false, or "auto" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings).'
+  );
+}
+var DatabasesSchema = external_exports.strictObject({
   postgres: external_exports.strictObject({
     enabled: dbEnabled("PostgreSQL (with psql, pg_dump). User postgres, no password, localhost only"),
     version: external_exports.string().min(1).describe('"latest" or a major version such as "16". A compose file pinning postgres:<major> wins.'),
-    port: Port.describe("Port inside the sandbox.")
+    port: PortSchema.describe("Port inside the sandbox.")
   }),
   mysql: external_exports.strictObject({
     enabled: dbEnabled("MySQL-compatible database (MariaDB). User root, no password, localhost only"),
     version: external_exports.string().min(1).describe('"lts" (newest MariaDB LTS) or a MariaDB series such as "11.4".'),
-    port: Port.describe("Port inside the sandbox.")
+    port: PortSchema.describe("Port inside the sandbox.")
   }),
   mongodb: external_exports.strictObject({
     enabled: dbEnabled("MongoDB with mongosh, localhost only"),
     version: external_exports.string().min(1).describe('"latest" or a version prefix such as "8.0".'),
-    port: Port.describe("Port inside the sandbox.")
+    port: PortSchema.describe("Port inside the sandbox.")
   }),
   redis: external_exports.strictObject({
     enabled: dbEnabled("Redis (community Windows build), localhost only"),
-    port: Port.describe("Port inside the sandbox.")
+    port: PortSchema.describe("Port inside the sandbox.")
   }),
   dynamodb: external_exports.strictObject({
-    enabled: dbEnabled("DynamoDB Local (Amazon's official emulator, on the Java toolchain) with dynamodb-admin, a web UI to browse and edit tables"),
-    port: Port.describe("DynamoDB endpoint port inside the sandbox (http://localhost:<port>)."),
-    adminPort: Port.describe("dynamodb-admin web UI port (open http://localhost:<adminPort> in the sandbox's browser)."),
+    enabled: dbEnabled(
+      "DynamoDB Local (Amazon's official emulator, on the Java toolchain) with dynamodb-admin, a web UI to browse and edit tables"
+    ),
+    port: PortSchema.describe("DynamoDB endpoint port inside the sandbox (http://localhost:<port>)."),
+    adminPort: PortSchema.describe(
+      "dynamodb-admin web UI port (open http://localhost:<adminPort> in the sandbox's browser)."
+    ),
     admin: external_exports.boolean().describe("Run dynamodb-admin next to DynamoDB Local.")
   }),
   sqlserver: external_exports.strictObject({
-    enabled: dbEnabled("SQL Server. It cannot run inside Windows Sandbox; when a project needs it you get a note to use Postgres or SQLite for local work")
+    enabled: dbEnabled(
+      "SQL Server. It cannot run inside Windows Sandbox; when a project needs it you get a note to use Postgres or SQLite for local work"
+    )
   })
 });
 
 // src/core/schema/harness.ts
-var Harness = external_exports.strictObject({
+var SubfolderSchema = external_exports.string().regex(/^(?!.*(^|[\\/])\.\.([\\/]|$))[A-Za-z0-9._ -]+([\\/][A-Za-z0-9._ -]+)*$/, "a plain relative folder");
+var HarnessHomeSchema = external_exports.strictObject({
+  env: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/), SubfolderSchema).describe("Environment variable -> folder (below the sandbox state folder) the agent keeps its data in."),
+  profileDirs: external_exports.array(SubfolderSchema.refine((d) => !d.split(/[\\/]/).includes("."), "a plain relative folder")).max(8).optional().describe(
+    "Folders below the sandbox's user profile (e.g. .qwen, .config/opencode) the agent keeps its data in: each becomes a link to state\\<agent>\\profile\\<folder>, so it survives between sandboxes."
+  ),
+  loginFiles: external_exports.array(SubfolderSchema).describe("Files that make up the login, relative to the agent's own state folder (state\\<agent>)."),
+  hostDir: external_exports.string().optional().describe(
+    "The agent's own folder on this PC (e.g. ~/.codex): loginFiles are read from it to save this PC's login."
+  )
+});
+var HarnessSchema = external_exports.strictObject({
   hostExecutable: external_exports.string().optional().describe("Executable copied from this PC when installed here (e.g. claude.exe)."),
   hostDir: external_exports.string().optional().describe('Folder of hostExecutable on this PC, or "auto" to search PATH and ~/.local/bin.'),
   npmPackage: external_exports.string().optional().describe("npm package installed inside the sandbox when there is no host copy."),
   npmBin: external_exports.string().optional().describe("Command the npm package provides."),
   uvPackage: external_exports.string().optional().describe("Python package installed with `uv tool install` inside the sandbox (e.g. aider-chat)."),
   uvBin: external_exports.string().optional().describe("Command the uv package provides."),
-  arguments: Strings.describe("Arguments always passed to the agent."),
+  arguments: StringsSchema.describe("Arguments always passed to the agent."),
   environment: external_exports.record(external_exports.string(), external_exports.string()).describe("Environment variables for the agent."),
-  resumeArguments: Strings.optional().describe("Arguments used when the agent is restarted in place (e.g. after an account switch) so it resumes the conversation.")
-}).refine((h) => h.hostExecutable || h.npmPackage || h.uvPackage, "needs hostExecutable, npmPackage or uvPackage").refine((h) => !h.uvPackage || h.uvBin, "needs uvBin when uvPackage is set").refine((h) => !h.npmPackage || h.npmBin, "needs npmBin when npmPackage is set");
+  home: HarnessHomeSchema.optional().describe(
+    "Where its login lives inside the sandbox; leave out when the agent cannot be pointed at a folder (then its login is not kept between sandboxes)."
+  ),
+  resumeArguments: StringsSchema.optional().describe(
+    "Arguments used when the agent is restarted in place (e.g. after an account switch) so it resumes the conversation."
+  ),
+  resumeOneArguments: StringsSchema.optional().describe(
+    "Arguments that reopen one conversation, with {id} where its id goes (claude: --resume {id}). Used instead of resumeArguments when the conversation of a session is known."
+  )
+}).refine(
+  (h) => !h.resumeOneArguments || h.resumeOneArguments.some((a) => a.includes("{id}")),
+  "needs {id} in resumeOneArguments"
+).refine((h) => h.hostExecutable || h.npmPackage || h.uvPackage, "needs hostExecutable, npmPackage or uvPackage").refine((h) => !h.uvPackage || h.uvBin, "needs uvBin when uvPackage is set").refine((h) => !h.npmPackage || h.npmBin, "needs npmBin when npmPackage is set");
 
 // src/core/schema/profile.ts
-var Secrets = external_exports.strictObject({
-  strip: external_exports.boolean().describe(`Remove credentials from everything copied into the sandbox (your Claude settings.json "env" and credential helpers, MCP servers' env, headers and arguments): AWS, Azure, Google Cloud, Cloudflare, hosting, CI, registries, payment, AI API keys, database URLs, anything named *_TOKEN / *_SECRET / *PASSWORD* / *_KEY or *PROD*, and values that look like keys.`),
-  allow: Strings.describe('Variable names that may go in anyway; * matches anything, e.g. ["AWS_REGION", "AWS_PROFILE", "MY_APP_*"].'),
-  patterns: Strings.describe('More variable names to treat as secrets; * matches anything, e.g. ["ACME_*", "*_INTERNAL_URL"].'),
-  warnFiles: external_exports.boolean().describe("Warn at launch about files in the workspace that usually hold secrets (.env, *.pem, credentials.json, ...). The agent CAN read them: Windows Sandbox maps the whole folder.")
+var SecretsSchema = external_exports.strictObject({
+  strip: external_exports.boolean().describe(
+    `Remove credentials from everything copied into the sandbox (your Claude settings.json "env" and credential helpers, MCP servers' env, headers and arguments): AWS, Azure, Google Cloud, Cloudflare, hosting, CI, registries, payment, AI API keys, database URLs, anything named *_TOKEN / *_SECRET / *PASSWORD* / *_KEY or *PROD*, and values that look like keys.`
+  ),
+  allow: StringsSchema.describe(
+    'Variable names that may go in anyway; * matches anything, e.g. ["AWS_REGION", "AWS_PROFILE", "MY_APP_*"].'
+  ),
+  patterns: StringsSchema.describe(
+    'More variable names to treat as secrets; * matches anything, e.g. ["ACME_*", "*_INTERNAL_URL"].'
+  ),
+  warnFiles: external_exports.boolean().describe(
+    "Warn at launch about files in the workspace that usually hold secrets (.env, *.pem, credentials.json, ...). The agent CAN read them: Windows Sandbox maps the whole folder."
+  )
 });
-var Attach = external_exports.strictObject({
+var AttachSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe("Allow sandbox claude --terminal / sandbox attach from this PC."),
-  reuseSession: external_exports.boolean().describe("sandbox claude -t in a running sandbox reattaches to this folder's session when no terminal on this PC is attached to it (--new always starts another)."),
-  auto: external_exports.boolean().describe("Starting an agent attaches this terminal automatically, as if you passed -t (only in an interactive terminal)."),
-  autoHide: external_exports.boolean().describe("Hide the Windows Sandbox window whenever this terminal attaches; it keeps running (sandbox show brings it back).")
+  reuseSession: external_exports.boolean().describe(
+    "sandbox claude -t in a running sandbox reattaches to this folder's session when no terminal on this PC is attached to it (--new always starts another)."
+  ),
+  auto: external_exports.boolean().describe(
+    "Starting an agent attaches this terminal automatically, as if you passed -t (only in an interactive terminal)."
+  ),
+  autoHide: external_exports.boolean().describe(
+    "Hide the Windows Sandbox window whenever this terminal attaches; it keeps running (sandbox show brings it back)."
+  )
 });
-var AgentCommands = external_exports.strictObject({
-  enabled: external_exports.boolean().describe("(Beta) Typing an agent's own command on this PC (claude, codex, ...) starts it in a hidden sandbox for the folder you are in and attaches that terminal. Adds one folder to the start of YOUR PATH; off removes it. SANDBOX_AGENT_DIRECT=1 runs the real agent instead."),
-  agents: external_exports.union([external_exports.literal("auto"), external_exports.array(Name)]).describe('"auto" = every agent installed on this PC, or a list of agent names, e.g. ["claude", "codex"].')
+var AgentCommandsSchema = external_exports.strictObject({
+  enabled: external_exports.boolean().describe(
+    "(Beta) Typing an agent's own command on this PC (claude, codex, ...) starts it in a hidden sandbox for the folder you are in and attaches that terminal. Adds one folder to the start of YOUR PATH; off removes it. SANDBOX_AGENT_DIRECT=1 runs the real agent instead."
+  ),
+  agents: external_exports.union([external_exports.literal("auto"), external_exports.array(NameSchema)]).describe('"auto" = every agent installed on this PC, or a list of agent names, e.g. ["claude", "codex"].')
 });
-var ClaudeProfile = external_exports.strictObject({
+var ClaudeProfileSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe("Copy selected Claude settings from this PC into the sandbox."),
   hostDir: external_exports.string().describe('Your Claude folder, or "auto" (~/.claude or CLAUDE_CONFIG_DIR).'),
   include: external_exports.array(external_exports.string().regex(/^[A-Za-z0-9._-]+$/)).describe("Files and folders copied from it."),
@@ -25307,25 +25398,37 @@ var ClaudeProfile = external_exports.strictObject({
   copyCredentials: external_exports.boolean().describe("Copy your Claude LOGIN into the sandbox. Prefer sandbox account instead."),
   overwrite: external_exports.boolean().describe("Refresh these settings from this PC on every launch."),
   syncHistory: external_exports.boolean().describe("Bring conversation history in, and sync new history back (path-translated)."),
-  historyScope: external_exports.enum(["project", "all"]).describe(`Which history comes in: "project" = only the projects in this sandbox (other projects' conversations, file backups and prompts stay on this PC), "all" = everything. Only this sandbox's projects ever sync back.`),
+  historyScope: external_exports.enum(["project", "all"]).describe(
+    `Which history comes in: "project" = only the projects in this sandbox (other projects' conversations, file backups and prompts stay on this PC), "all" = everything. Only this sandbox's projects ever sync back.`
+  ),
   syncClaudeMem: external_exports.boolean().describe("Bring claude-mem data into the sandbox (its settings and backups stay on this PC)."),
-  syncClaudeMemBack: external_exports.boolean().describe("Also copy claude-mem's database back to this PC when the sandbox closes. Off by default: what is in it is loaded into every Claude session on this PC, so a compromised agent could plant instructions there.")
+  syncClaudeMemBack: external_exports.boolean().describe(
+    "Also copy claude-mem's database back to this PC when the sandbox closes. Off by default: what is in it is loaded into every Claude session on this PC, so a compromised agent could plant instructions there."
+  )
 });
 
 // src/core/schema/sandbox.ts
-var GuestWorkspace = external_exports.union([external_exports.literal("auto"), external_exports.literal("mirror"), GuestPath]).describe('Where the workspace appears inside the sandbox. "auto" = C:\\Workspace\\<folder name>. "mirror" = the same path as on this PC, so absolute paths in configs and build caches match (another drive letter such as F: is a subst drive onto C:\\Mirror\\F); paths the sandbox reserves (C:\\Users\\..., C:\\Program Files\\...) fall back to "auto".');
-var Mapping = external_exports.strictObject({
+var GuestWorkspaceSchema = external_exports.union([external_exports.literal("auto"), external_exports.literal("mirror"), GuestPathSchema]).describe(
+  'Where the workspace appears inside the sandbox. "auto" = C:\\Workspace\\<folder name>. "mirror" = the same path as on this PC, so absolute paths in configs and build caches match (another drive letter such as F: is a subst drive onto C:\\Mirror\\F); paths the sandbox reserves (C:\\Users\\..., C:\\Program Files\\...) fall back to "auto".'
+);
+var MappingSchema = external_exports.strictObject({
   host: external_exports.string().min(1).describe("Folder on this PC (relative paths are relative to the config file)."),
-  guest: external_exports.string().min(1).max(1024).optional().describe("Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game (shown as F: at boot). Leave it out to use the same path as on this PC (a folder inside the project stays where it is in the project). A path the sandbox cannot use (C:\\Windows\\..., C:\\Users\\..., one already in use) goes to C:\\Mapped\\<drive>\\<path> instead, and the launch says so."),
+  guest: external_exports.string().min(1).max(1024).optional().describe(
+    "Where it appears inside the sandbox, e.g. C:\\Assets, or on another drive letter (D: to Z:) such as F:\\SteamLibrary\\steamapps\\common\\Game (shown as F: at boot). Leave it out to use the same path as on this PC (a folder inside the project stays where it is in the project). A full path only; one the sandbox cannot use (C:\\Windows\\..., C:\\Users\\..., one already in use) stops the launch with the fix."
+  ),
   readOnly: external_exports.boolean().describe("true = the agent can only read it."),
   optional: external_exports.boolean().optional().describe("true = skip it quietly when the host folder does not exist.")
 });
-var Sandbox = external_exports.strictObject({
+var SandboxSchema = external_exports.strictObject({
   memoryMb: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(2048)]).describe('Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb.'),
   maxMemoryMb: external_exports.number().int().positive().describe('Upper limit for memoryMb "auto".'),
   maxMemoryPercent: external_exports.number().int().min(10).max(100).describe(`memoryMb "auto" never takes more than this share of this PC's total RAM (percent).`),
-  cpuLimit: external_exports.union([external_exports.literal("none"), external_exports.number().int().min(5).max(100)]).describe(`Most of this PC's CPU the sandbox may use, in percent (5-100), e.g. 50 keeps half free for you; "none" = no cap (Windows Sandbox would take every processor). Covers everything this tool starts in the sandbox (agents, installs, builds, its terminal).`),
-  pageFileMb: external_exports.number().int().min(0).max(262144).describe(`Size of the sandbox's paging file in MB, created at full size when it starts so it never grows while builds run (8 GB of its disk always stays free). Windows Sandbox starts with about 1 GB: parallel builds then fail with "The paging file is too small", and Windows grows the file under load. 0 = leave Windows' own.`),
+  cpuLimit: external_exports.union([external_exports.literal("none"), external_exports.number().int().min(5).max(100)]).describe(
+    `Most of this PC's CPU the sandbox may use, in percent (5-100), e.g. 50 keeps half free for you; "none" = no cap (Windows Sandbox would take every processor). Covers everything this tool starts in the sandbox (agents, installs, builds, its terminal).`
+  ),
+  pageFileMb: external_exports.number().int().min(0).max(262144).describe(
+    `Size of the sandbox's paging file in MB, created at full size when it starts so it never grows while builds run (8 GB of its disk always stays free). Windows Sandbox starts with about 1 GB: parallel builds then fail with "The paging file is too small", and Windows grows the file under load. 0 = leave Windows' own.`
+  ),
   reserveHostMb: external_exports.number().int().nonnegative().describe('RAM always left for this PC when memoryMb is "auto".'),
   vGpu: external_exports.boolean().describe("Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface."),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
@@ -25334,215 +25437,979 @@ var Sandbox = external_exports.strictObject({
   videoInput: external_exports.boolean().describe("Camera access."),
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
   protectedClient: external_exports.boolean().describe("Run the sandbox window in Protected Client mode (recommended)."),
-  headless: external_exports.boolean().describe("Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."),
-  keepAwake: external_exports.boolean().describe("Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it).")
+  headless: external_exports.boolean().describe(
+    "Hide the sandbox window (sbx-show brings it back). A headless sandbox shuts down when its last session ends."
+  ),
+  keepAwake: external_exports.boolean().describe(
+    "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
+  )
 });
-var Port2 = external_exports.number().int().min(1).max(65535);
-var HostEntry = external_exports.string().max(253).regex(/^(@developer|(\*\.)?([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+)$/, "a host name like example.com, *.example.com, or @developer");
-var Network = external_exports.strictObject({
+var SharingSchema = external_exports.strictObject({
+  otherUsers: external_exports.boolean().describe(
+    "Let other Windows users of this PC use a sandbox you start: list its sessions, attach, run commands and stop it. They use the agent logins inside it, and history goes to your account."
+  )
+});
+var PortSchema2 = external_exports.number().int().min(1).max(65535);
+var HostEntrySchema = external_exports.string().max(253).regex(
+  /^(@developer|(\*\.)?([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+)$/,
+  "a host name like example.com, *.example.com, or @developer"
+);
+var NetworkSchema = external_exports.strictObject({
   blockPrivateRanges: external_exports.boolean().describe("Block your LAN (10/8, 172.16/12, 192.168/16, SMB) from inside the sandbox."),
-  allowOnly: external_exports.array(HostEntry).describe("Only these hosts can be reached once the sandbox is set up (tools still download first). *.example.com covers its subdomains; @developer adds package registries, GitHub, toolchain downloads and the AI providers. Programs go through a proxy in the sandbox (HTTP_PROXY); anything else is blocked by its firewall. Empty = no limit."),
-  blockHosts: external_exports.array(external_exports.string().max(253).regex(/^([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+$/, "a host name like telemetry.example.com")).describe("Never reachable from the sandbox, e.g. production servers or telemetry (each exact name; the sandbox's hosts file sends them nowhere)."),
-  forwardPorts: external_exports.array(external_exports.strictObject({
-    pc: Port2.describe("The port on this PC (localhost only)."),
-    sandbox: Port2.describe("The port inside the sandbox (a server there may listen on localhost only).")
-  })).describe("Reach servers in the sandbox from this PC: http://localhost:<pc> here goes to <sandbox> inside, while it runs. Nothing else on your network can use them."),
+  allowOnly: external_exports.array(HostEntrySchema).describe(
+    "Only these hosts can be reached once the sandbox is set up (tools still download first). *.example.com covers its subdomains; @developer adds package registries, GitHub, toolchain downloads and the AI providers. Programs go through a proxy in the sandbox (HTTP_PROXY); anything else is blocked by its firewall. Empty = no limit."
+  ),
+  blockHosts: external_exports.array(
+    external_exports.string().max(253).regex(/^([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+$/, "a host name like telemetry.example.com")
+  ).describe(
+    "Never reachable from the sandbox, e.g. production servers or telemetry (each exact name; the sandbox's hosts file sends them nowhere)."
+  ),
+  forwardPorts: external_exports.array(
+    external_exports.strictObject({
+      pc: PortSchema2.describe("The port on this PC (localhost only)."),
+      sandbox: PortSchema2.describe("The port inside the sandbox (a server there may listen on localhost only).")
+    })
+  ).describe(
+    "Reach servers in the sandbox from this PC: http://localhost:<pc> here goes to <sandbox> inside, while it runs. Nothing else on your network can use them."
+  ),
   dns: external_exports.array(external_exports.string().regex(/^\d{1,3}(\.\d{1,3}){3}$/, "an IPv4 address like 1.1.1.1")).describe("DNS servers for the sandbox instead of your network's, e.g. 1.1.1.1 and 9.9.9.9."),
-  proxy: external_exports.string().regex(/^(https?:\/\/[^\s]+)?$/, "http://host:port").describe("An HTTP proxy the sandbox uses to reach the internet (HTTP_PROXY / HTTPS_PROXY for everything in it), e.g. http://proxy.corp:8080. Empty = none.")
+  proxy: external_exports.string().regex(/^(https?:\/\/[^\s]+)?$/, "http://host:port").describe(
+    "An HTTP proxy the sandbox uses to reach the internet (HTTP_PROXY / HTTPS_PROXY for everything in it), e.g. http://proxy.corp:8080. Empty = none."
+  )
 });
-var Audit = external_exports.strictObject({
-  enabled: external_exports.boolean().describe("Keep an audit log on this PC of what happened in your sandboxes: programs started (with their command lines), files changed in the project, sessions, and what the repo guard caught. The sandbox cannot change it. Read it with sandbox audit."),
+var AuditSchema = external_exports.strictObject({
+  enabled: external_exports.boolean().describe(
+    "Keep an audit log on this PC of what happened in your sandboxes: programs started (with their command lines), files changed in the project, sessions, and what the repo guard caught. The sandbox cannot change it. Read it with sandbox audit."
+  ),
   days: external_exports.number().int().min(1).max(365).describe("Days the audit log is kept."),
   maxMb: external_exports.number().int().min(5).max(5e3).describe("Most space the audit log may take, in MB (older days go first). Days before today are compressed."),
-  processes: external_exports.boolean().describe("Record every program started in the sandbox with its command line (Windows process auditing; repeated runs are counted, not listed)."),
+  processes: external_exports.boolean().describe(
+    "Record every program started in the sandbox with its command line (Windows process auditing; repeated runs are counted, not listed)."
+  ),
   files: external_exports.boolean().describe("Record the files changed in the project while the sandbox runs.")
 });
-var WorkspaceFilter = external_exports.strictObject({
-  enabled: external_exports.boolean().describe("Keep what your .gitignore lists (.env files, node_modules, build output ...) out of the sandbox. The sandbox works on a copy of the project without those files, kept in step with it both ways within about a second; what it creates that is ignored (its own node_modules, builds) stays in the sandbox. Git works as usual. Off = the project folder itself is mapped."),
+var WorkspaceFilterSchema = external_exports.strictObject({
+  enabled: external_exports.boolean().describe(
+    "Keep what your .gitignore lists (.env files, node_modules, build output ...) out of the sandbox. The sandbox works on a copy of the project without those files, kept in step with it both ways within about a second; what it creates that is ignored (its own node_modules, builds) stays in the sandbox. Git works as usual. Off = the project folder itself is mapped."
+  ),
   exclude: external_exports.array(external_exports.string().max(500)).describe("Also keep these out, as .gitignore patterns, e.g. secrets/, *.pem, data/private/."),
   include: external_exports.array(external_exports.string().max(500)).describe("Let these in although .gitignore lists them, e.g. .env.example, data/fixtures/.")
 });
-var Git = external_exports.strictObject({ enabled: external_exports.boolean().describe("Provide Git for Windows (and Git Bash, which Claude Code needs)."), access: GitAccess });
-var Provisioning = external_exports.strictObject({
+var GitSchema = external_exports.strictObject({
+  enabled: external_exports.boolean().describe("Provide Git for Windows (and Git Bash, which Claude Code needs)."),
+  access: GitAccessSchema
+});
+var ProvisioningSchema = external_exports.strictObject({
   copyFromHost: external_exports.boolean().describe("Copy Node, Git, nvm and the agent from this PC when they are installed here."),
   fallbackToInstall: external_exports.boolean().describe("Download anything that cannot be copied from this PC."),
   refresh: external_exports.boolean().describe("Re-copy / re-download everything on the next launch."),
-  git: Git,
+  git: GitSchema,
   terminal: toggle("Windows Terminal as the sandbox window (downloaded once)."),
-  conpty: toggle("Agent sessions use Microsoft's newer pseudo console (conpty.dll, downloaded once) instead of the one built into Windows: no garbled screen after resizing, real scrollback for the mouse wheel. Off = the one built into Windows.")
+  conpty: toggle(
+    "Agent sessions use Microsoft's newer pseudo console (conpty.dll, downloaded once) instead of the one built into Windows: no garbled screen after resizing, real scrollback for the mouse wheel. Off = the one built into Windows."
+  )
 });
-var Downloads = external_exports.strictObject({
-  requireChecksum: external_exports.boolean().describe("Refuse any toolchain, database or tool download that has no published checksum (SHA-256/SHA-512) to verify it against. false = allow those, as before. Downloads that do have a published checksum are always verified. A project's .sandbox-config.json can only turn this on.")
+var DownloadsSchema = external_exports.strictObject({
+  requireChecksum: external_exports.boolean().describe(
+    "Refuse any toolchain, database or tool download that has no published checksum (SHA-256/SHA-512) to verify it against. false = allow those, as before. Downloads that do have a published checksum are always verified. A project's .sandbox-config.json can only turn this on."
+  )
 });
 
 // src/core/schema/toolchains.ts
-var Toolchains = external_exports.strictObject({
+var ToolchainsSchema = external_exports.strictObject({
   node: external_exports.strictObject({
-    version: external_exports.string().min(1).describe(`Default Node version for nvm. "host" = the Node on this PC. A project's .nvmrc / .node-version wins.`),
-    extraVersions: Strings.describe("More Node versions to install (switch with nvm use). On top of the up to 3 versions copied from this PC's nvm, not counted towards that limit."),
+    version: external_exports.string().min(1).describe(
+      `Default Node version for nvm. "host" = the Node on this PC. A project's .nvmrc / .node-version wins.`
+    ),
+    extraVersions: StringsSchema.describe(
+      "More Node versions to install (switch with nvm use). On top of the up to 3 versions copied from this PC's nvm, not counted towards that limit."
+    ),
     corepack: external_exports.boolean().describe(`pnpm and yarn through corepack (a project's "packageManager" in package.json picks the version).`),
-    volta: Enabled.describe(`Volta: true, false, or "auto" = when the project's package.json has "volta" pins or this PC uses Volta. With pins, Volta's node/npm/yarn/pnpm come first on PATH.`),
-    globalPackages: Packages("npm packages installed globally into the default Node version", '["typescript", "npm-check-updates"]')
+    volta: EnabledSchema.describe(
+      `Volta: true, false, or "auto" = when the project's package.json has "volta" pins or this PC uses Volta. With pins, Volta's node/npm/yarn/pnpm come first on PATH.`
+    ),
+    globalPackages: Packages(
+      "npm packages installed globally into the default Node version",
+      '["typescript", "npm-check-updates"]'
+    )
   }),
   python: external_exports.strictObject({
-    enabled: enabled("Python 3 (CPython with pip).", "pyproject.toml, requirements.txt, setup.py, Pipfile or .python-version"),
+    enabled: enabled(
+      "Python 3 (CPython with pip).",
+      "pyproject.toml, requirements.txt, setup.py, Pipfile or .python-version"
+    ),
     version: external_exports.string().min(1).describe(`Python 3 version prefix, e.g. "3" or "3.12". A project's .python-version wins.`),
     python2: external_exports.boolean().describe("Also install Python 2.7 as python2 / pip2."),
-    pyenv: Enabled.describe('pyenv-win (pyenv install / local / global): true, false, or "auto" = when this PC uses pyenv. .python-version is honoured either way, and `uv python install` always works.'),
-    tools: Packages("Python command-line tools installed with `uv tool install` (needs uv)", '["poetry", "ruff", "pre-commit"]')
+    pyenv: EnabledSchema.describe(
+      'pyenv-win (pyenv install / local / global): true, false, or "auto" = when this PC uses pyenv. .python-version is honoured either way, and `uv python install` always works.'
+    ),
+    tools: Packages(
+      "Python command-line tools installed with `uv tool install` (needs uv)",
+      '["poetry", "ruff", "pre-commit"]'
+    )
   }),
   rust: external_exports.strictObject({
     enabled: enabled("Rust via rustup (cargo, rustc).", "Cargo.toml or rust-toolchain(.toml)"),
     toolchain: external_exports.string().min(1).describe('Default toolchain, e.g. "stable". rust-toolchain.toml in a project wins.'),
-    host: external_exports.string().min(1).describe('Host triple, or "auto": x86_64-pc-windows-msvc when the MSVC toolchain is on (like most PCs), else x86_64-pc-windows-gnu (MinGW is its linker).'),
+    host: external_exports.string().min(1).describe(
+      'Host triple, or "auto": x86_64-pc-windows-msvc when the MSVC toolchain is on (like most PCs), else x86_64-pc-windows-gnu (MinGW is its linker).'
+    ),
     components: Packages("Extra rustup components", '["rust-src", "llvm-tools"]'),
     targets: Packages("Extra rustup targets", '["wasm32-unknown-unknown"]'),
-    crates: Packages("Binaries for cargo: prebuilt via cargo-binstall when the crate publishes a Windows build, else compiled with `cargo install --locked` (slow the first time)", '["sccache", "cargo-nextest", "cargo-deny"]'),
-    targetDir: external_exports.string().min(1).describe(`"shared": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), "separate": <workspace>\\target\\sandbox (kept, no cross-talk), "local": on the sandbox's own disk (fastest, lost every boot), or a guest path.`)
+    crates: Packages(
+      "Binaries for cargo: prebuilt via cargo-binstall when the crate publishes a Windows build, else compiled with `cargo install --locked` (slow the first time)",
+      '["sccache", "cargo-nextest", "cargo-deny"]'
+    ),
+    targetDir: external_exports.string().min(1).describe(
+      `"shared": cargo's default target\\ (shared with builds on this PC, so builds on either side invalidate the other), "separate": <workspace>\\target\\sandbox (kept, no cross-talk), "local": on the sandbox's own disk (fastest, lost every boot), or a guest path.`
+    ),
+    linker: external_exports.enum(["lld", "gnu"]).describe(
+      `GNU host: "lld" links with Rust's own lld through MinGW's gcc (much less memory than GNU ld), "gnu" with GNU ld.`
+    ),
+    linkSlots: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(1).max(32)]).describe(
+      'GNU host: how many programs may link at the same time in the whole sandbox (other links wait). "auto" = one per 8 GB of sandbox memory, 2 to 4. Several agents linking big programs at once can take Windows down.'
+    )
   }),
   msvc: external_exports.strictObject({
-    enabled: enabled("MSVC (cl, link) and the Windows SDK, portable from Microsoft's Visual Studio manifest (~1-2 GB once), with vcvars64.bat and vswhere.", "a .vcxproj, CMakePresets.json, a script calling vcvars/vswhere, or a Rust project when this PC builds Rust with MSVC"),
-    acceptLicense: external_exports.boolean().describe("Required to install MSVC: you accept the Visual Studio licence terms (https://visualstudio.microsoft.com/license-terms/), which need a Visual Studio licence."),
+    enabled: enabled(
+      "MSVC (cl, link) and the Windows SDK, portable from Microsoft's Visual Studio manifest (~1-2 GB once), with vcvars64.bat and vswhere.",
+      "a .vcxproj, CMakePresets.json, a script calling vcvars/vswhere, or a Rust project when this PC builds Rust with MSVC"
+    ),
+    acceptLicense: external_exports.boolean().describe(
+      "Required to install MSVC: you accept the Visual Studio licence terms (https://visualstudio.microsoft.com/license-terms/), which need a Visual Studio licence."
+    ),
     msvcVersion: external_exports.string().min(1).describe('"latest" or an MSVC tools version prefix, e.g. "14.44".'),
     sdkVersion: external_exports.string().min(1).describe('"latest" or a Windows SDK build, e.g. "26100" or "10.0.22621".')
   }),
   cpp: external_exports.strictObject({
-    enabled: enabled("MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).", "CMakeLists.txt, Makefile, meson.build, premake5.lua or Cargo.toml"),
-    flexBison: external_exports.boolean().describe("win_flex / win_bison, the parser generators many C/C++ projects (game engines among them) need; CMake finds them.")
+    enabled: enabled(
+      "MinGW-w64 GCC with CMake, Ninja, premake5 and mingw32-make (also Rust's linker).",
+      "CMakeLists.txt, Makefile, meson.build, premake5.lua or Cargo.toml"
+    ),
+    flexBison: external_exports.boolean().describe(
+      "win_flex / win_bison, the parser generators many C/C++ projects (game engines among them) need; CMake finds them."
+    )
   }),
   dotnet: external_exports.strictObject({
     enabled: enabled(".NET SDK (C#, F#).", "a .sln, .slnx, .csproj, .fsproj or global.json"),
-    channels: Strings.describe(`SDK channels, e.g. ["LTS", "8.0"]. A project's global.json is installed too.`),
+    channels: StringsSchema.describe(`SDK channels, e.g. ["LTS", "8.0"]. A project's global.json is installed too.`),
     tools: Packages("Global .NET tools (`dotnet tool install -g`)", '["dotnet-ef", "csharpier"]'),
     workloads: Packages("SDK workloads (`dotnet workload install`)", '["aspire", "wasm-tools"]'),
-    frameworkTargets: Strings.describe('.NET Framework reference assemblies (targeting packs) from NuGet, so net4x and old-style .csproj projects build without Visual Studio, e.g. ["net48", "net472", "net462"]. The 4.8 runtime itself ships with Windows.'),
-    netfx35: external_exports.boolean().describe(".NET Framework 3.5 runtime (a Windows feature, enabled from Windows Update on every boot; a few minutes).")
+    frameworkTargets: StringsSchema.describe(
+      '.NET Framework reference assemblies (targeting packs) from NuGet, so net4x and old-style .csproj projects build without Visual Studio, e.g. ["net48", "net472", "net462"]. The 4.8 runtime itself ships with Windows.'
+    ),
+    netfx35: external_exports.boolean().describe(
+      ".NET Framework 3.5 runtime (a Windows feature, enabled from Windows Update on every boot; a few minutes)."
+    )
   }),
   go: external_exports.strictObject({
     enabled: enabled("Go.", "go.mod or go.work"),
-    version: external_exports.string().min(1).describe('"stable" or a version prefix such as "1.23". A go.mod asking for newer fetches it itself (GOTOOLCHAIN=auto).'),
+    version: external_exports.string().min(1).describe(
+      '"stable" or a version prefix such as "1.23". A go.mod asking for newer fetches it itself (GOTOOLCHAIN=auto).'
+    ),
     tools: Packages("Go tools (`go install <path>@<version>`)", '["golang.org/x/tools/gopls@latest"]')
   }),
   java: external_exports.strictObject({
-    enabled: enabled("Java: Eclipse Temurin JDK.", "pom.xml, build.gradle(.kts), settings.gradle(.kts), mvnw, gradlew or .java-version"),
+    enabled: enabled(
+      "Java: Eclipse Temurin JDK.",
+      "pom.xml, build.gradle(.kts), settings.gradle(.kts), mvnw, gradlew or .java-version"
+    ),
     version: external_exports.string().min(1).describe(`"lts" (newest LTS) or a major version such as "21". A project's .java-version or .sdkmanrc wins.`),
     maven: external_exports.boolean().describe("Apache Maven (mvn). A project's mvnw works either way."),
     gradle: external_exports.boolean().describe("Gradle (gradle). A project's gradlew works either way.")
   }),
   ruby: external_exports.strictObject({
-    enabled: enabled("Ruby (RubyInstaller, with gem and bundler). Gems with C extensions need MSYS2, which is not included.", "Gemfile, a .gemspec or .ruby-version"),
+    enabled: enabled(
+      "Ruby (RubyInstaller, with gem and bundler). Gems with C extensions need MSYS2, which is not included.",
+      "Gemfile, a .gemspec or .ruby-version"
+    ),
     version: external_exports.string().min(1).describe(`Version prefix, e.g. "3" or "3.3". A project's .ruby-version wins.`),
     gems: Packages("Gems installed globally", '["rubocop"]')
   }),
   php: external_exports.strictObject({
-    enabled: enabled("PHP (with the Visual C++ runtime it needs, installed on every boot).", "composer.json, artisan or .php-version"),
+    enabled: enabled(
+      "PHP (with the Visual C++ runtime it needs, installed on every boot).",
+      "composer.json, artisan or .php-version"
+    ),
     version: external_exports.string().min(1).describe(`Version prefix, e.g. "8" or "8.3". A project's .php-version wins.`),
     composer: external_exports.boolean().describe("Composer.")
   }),
   deno: external_exports.strictObject({ enabled: enabled("Deno.", "deno.json, deno.jsonc or deno.lock") }),
-  pwsh: external_exports.strictObject({ enabled: Enabled.describe('PowerShell 7 (pwsh), portable (~110 MB once); `powershell` stays Windows PowerShell 5.1. true, false, or "auto" = when a .ps1 at the root or one folder down has #Requires -Version 7 / -PSEdition Core or a `pwsh ...` usage line, or, in a folder that is no project yet, when this PC has PowerShell 7.') }),
+  pwsh: external_exports.strictObject({
+    enabled: EnabledSchema.describe(
+      'PowerShell 7 (pwsh), portable (~110 MB once); `powershell` stays Windows PowerShell 5.1. true, false, or "auto" = when a .ps1 at the root or one folder down has #Requires -Version 7 / -PSEdition Core or a `pwsh ...` usage line, or, in a folder that is no project yet, when this PC has PowerShell 7.'
+    )
+  }),
   cli: external_exports.strictObject({
-    gh: Enabled.describe('GitHub CLI (gh). Only with provisioning.git.access "full": gh can push and merge through the GitHub API, past a read-only git. Your PC\'s gh login is never copied; `gh auth login` inside persists (GH_CONFIG_DIR). "auto" = when the project has a .github folder.'),
-    zstd: Enabled.describe('Zstandard (zstd). "auto" = off; set true to get it.'),
-    openssl: Enabled.describe('`openssl` on PATH, from the copy Git for Windows ships (its mingw64\\bin is not put on PATH, so it cannot shadow MinGW\'s gcc). "auto" = on.')
+    gh: EnabledSchema.describe(
+      'GitHub CLI (gh). Only with provisioning.git.access "full": gh can push and merge through the GitHub API, past a read-only git. Your PC\'s gh login is never copied; `gh auth login` inside persists (GH_CONFIG_DIR). "auto" = when the project has a .github folder.'
+    ),
+    zstd: EnabledSchema.describe('Zstandard (zstd). "auto" = off; set true to get it.'),
+    openssl: EnabledSchema.describe(
+      '`openssl` on PATH, from the copy Git for Windows ships (its mingw64\\bin is not put on PATH, so it cannot shadow MinGW\'s gcc). "auto" = on.'
+    )
   }).describe("Small portable command-line tools from their GitHub releases, installed once into tools\\cli."),
-  bun: toggle("Bun runtime (claude-mem needs it)."),
-  uv: toggle("uv, the Python package manager (claude-mem needs it)."),
-  vcRuntime: toggle("Microsoft Visual C++ runtime for tools that need it (a real installer, so it runs on every boot, ~15 s). PHP installs it regardless."),
+  bun: external_exports.strictObject({
+    enabled: enabled(
+      "Bun (JavaScript runtime and package manager; claude-mem needs it).",
+      "bun.lock, bun.lockb or bunfig.toml"
+    )
+  }),
+  uv: external_exports.strictObject({
+    enabled: enabled(
+      "uv (fast Python package and tool manager; claude-mem needs it for its search index).",
+      "uv.lock, a [tool.uv] pyproject.toml, toolchains.python.tools, or an agent installed with uv"
+    )
+  }),
+  vcRuntime: toggle(
+    "Microsoft Visual C++ runtime for tools that need it (a real installer, so it runs on every boot, ~15 s). PHP installs it regardless."
+  ),
   mesa: external_exports.strictObject({
-    enabled: external_exports.boolean().describe("Mesa 3D (llvmpipe): OpenGL 4.5 in software for games and apps when there is no GPU (sandbox.vGpu off). Copy opengl32.dll and libgallium_wgl.dll from %MESA_DIR% next to the program's .exe."),
-    vulkan: external_exports.boolean().describe("Also software Vulkan 1.4 (Mesa lavapipe) with the Khronos loader, registered for every program; for wgpu set WGPU_BACKEND=vulkan.")
+    enabled: external_exports.boolean().describe(
+      "Mesa 3D (llvmpipe): OpenGL 4.5 in software for games and apps when there is no GPU (sandbox.vGpu off). Copy opengl32.dll and libgallium_wgl.dll from %MESA_DIR% next to the program's .exe."
+    ),
+    vulkan: external_exports.boolean().describe(
+      "Also software Vulkan 1.4 (Mesa lavapipe) with the Khronos loader, registered for every program; for wgpu set WGPU_BACKEND=vulkan."
+    )
   }),
   vscode: external_exports.strictObject({
-    enabled: external_exports.boolean().describe("Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."),
-    setup: external_exports.boolean().describe("Point VS Code at the sandbox's own tools (JDK, Python, Go, compilers, .NET, Git, PowerShell 7 and Git Bash terminals) and install the language extensions for the toolchains in use."),
+    enabled: EnabledSchema.describe(
+      'Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist. true, false, or "auto" = when VS Code is installed on this PC.'
+    ),
+    setup: external_exports.boolean().describe(
+      "Point VS Code at the sandbox's own tools (JDK, Python, Go, compilers, .NET, Git, PowerShell 7 and Git Bash terminals) and install the language extensions for the toolchains in use."
+    ),
     recommended: external_exports.boolean().describe("Also install the extensions a project recommends in its .vscode/extensions.json."),
     extensions: external_exports.array(external_exports.string().regex(/^[\w-]+\.[\w-]+$/, "publisher.name, e.g. eamodio.gitlens")).describe("More extensions to install in every sandbox, e.g. eamodio.gitlens, ms-azuretools.vscode-docker.")
   }),
-  environment: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/, "letters, digits and _ only"), external_exports.string()).describe('Extra environment variables for the agent and every terminal, e.g. registry mirrors: {"NPM_CONFIG_REGISTRY": "https://...", "PIP_INDEX_URL": "https://..."}.')
+  environment: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/, "letters, digits and _ only"), external_exports.string()).describe(
+    'Extra environment variables for the agent and every terminal, e.g. registry mirrors: {"NPM_CONFIG_REGISTRY": "https://...", "PIP_INDEX_URL": "https://..."}.'
+  )
 });
 
-// src/shared/apps.ts
+// src/shared/apps/catalogue.ts
 var gh = (github, asset) => ({ github, asset });
 var APPS = [
   // ---- editors
-  { id: "vscode", name: "Visual Studio Code", category: "editors", about: "Code editor with debugging, set up for the sandbox's languages.", size: "150 MB", source: { resolve: "setting" }, exe: "Code.exe", setting: "toolchains.vscode.enabled" },
-  { id: "windows-terminal", name: "Windows Terminal", category: "utilities", about: "The sandbox window: tabs, panes, PowerShell 7 profile.", size: "40 MB", source: { resolve: "setting" }, exe: "WindowsTerminal.exe", setting: "provisioning.terminal.enabled" },
-  { id: "notepadpp", name: "Notepad++", category: "editors", about: "Fast text and code editor.", size: "8 MB", source: gh("notepad-plus-plus/notepad-plus-plus", "^npp\\.[\\d.]+\\.portable\\.x64\\.zip$"), exe: "notepad++.exe" },
-  { id: "sublime", name: "Sublime Text", category: "editors", about: "Fast code editor (paid licence, free to evaluate).", size: "28 MB", source: { resolve: "sublime" }, exe: "sublime_text.exe" },
-  { id: "neovim", name: "Neovim", category: "editors", about: "Terminal text editor (nvim).", size: "12 MB", source: gh("neovim/neovim", "^nvim-win64\\.zip$"), exe: "nvim.exe", cli: true },
+  {
+    id: "vscode",
+    name: "Visual Studio Code",
+    category: "editors",
+    about: "Code editor with debugging, set up for the sandbox's languages.",
+    size: "150 MB",
+    source: { resolve: "setting" },
+    exe: "Code.exe",
+    setting: "toolchains.vscode.enabled"
+  },
+  {
+    id: "windows-terminal",
+    name: "Windows Terminal",
+    category: "utilities",
+    about: "The sandbox window: tabs, panes, PowerShell 7 profile.",
+    size: "40 MB",
+    source: { resolve: "setting" },
+    exe: "WindowsTerminal.exe",
+    setting: "provisioning.terminal.enabled"
+  },
+  {
+    id: "notepadpp",
+    name: "Notepad++",
+    category: "editors",
+    about: "Fast text and code editor.",
+    size: "8 MB",
+    source: gh("notepad-plus-plus/notepad-plus-plus", "^npp\\.[\\d.]+\\.portable\\.x64\\.zip$"),
+    exe: "notepad++.exe"
+  },
+  {
+    id: "sublime",
+    name: "Sublime Text",
+    category: "editors",
+    about: "Fast code editor (paid licence, free to evaluate).",
+    size: "28 MB",
+    source: { resolve: "sublime" },
+    exe: "sublime_text.exe"
+  },
+  {
+    id: "neovim",
+    name: "Neovim",
+    category: "editors",
+    about: "Terminal text editor (nvim).",
+    size: "12 MB",
+    source: gh("neovim/neovim", "^nvim-win64\\.zip$"),
+    exe: "nvim.exe",
+    cli: true
+  },
   // ---- database clients
-  { id: "dbeaver", name: "DBeaver Community", category: "databases", about: "Universal database client: PostgreSQL, MySQL, SQLite, SQL Server and more.", size: "120 MB", source: gh("dbeaver/dbeaver", "^dbeaver-ce-[\\d.]+-windows-x86_64\\.zip$"), exe: "dbeaver.exe" },
-  { id: "pgadmin", name: "pgAdmin 4", category: "databases", about: "The PostgreSQL admin GUI (from the PostgreSQL binaries zip).", size: "330 MB", source: { resolve: "pgadmin" }, exe: "pgAdmin4.exe" },
-  { id: "heidisql", name: "HeidiSQL", category: "databases", about: "Light client for MySQL, MariaDB, PostgreSQL and SQL Server.", size: "28 MB", source: gh("HeidiSQL/HeidiSQL", "^HeidiSQL_[\\d.]+_64_Portable\\.zip$"), exe: "heidisql.exe" },
-  { id: "sqlitebrowser", name: "DB Browser for SQLite", category: "databases", about: "Open, browse and edit SQLite files.", size: "21 MB", source: gh("sqlitebrowser/sqlitebrowser", "^DB\\.Browser\\.for\\.SQLite-v?[\\d.]+-win64\\.zip$"), exe: "DB Browser for SQLite.exe" },
-  { id: "compass", name: "MongoDB Compass", category: "databases", about: "The MongoDB GUI.", size: "220 MB", source: gh("mongodb-js/compass", "^mongodb-compass-[\\d.]+-win32-x64\\.zip$"), exe: "MongoDBCompass.exe" },
-  { id: "redisinsight", name: "Redis Insight", category: "databases", about: "The Redis GUI.", size: "110 MB", source: gh("redis/RedisInsight", "^Redis-Insight-win-installer\\.exe$"), unpack: "nsis", exe: "Redis Insight.exe", needs: ["7zip"] },
-  { id: "dbgate", name: "DbGate", category: "databases", about: "Database manager for SQL and NoSQL databases.", size: "180 MB", source: gh("dbgate/dbgate", "^dbgate-[\\d.]+-win_x64\\.zip$"), exe: "DbGate.exe" },
-  { id: "beekeeper", name: "Beekeeper Studio", category: "databases", about: "SQL editor and database manager.", size: "245 MB", source: gh("beekeeper-studio/beekeeper-studio", "^Beekeeper-Studio-[\\d.]+-portable\\.exe$"), unpack: "nsis", exe: "Beekeeper Studio.exe", needs: ["7zip"] },
-  { id: "dynamodb-admin", name: "dynamodb-admin", category: "databases", about: "Web GUI for DynamoDB Local: run dynamodb-admin, then open http://localhost:8001.", size: "5 MB", source: { npm: "dynamodb-admin" }, exe: "dynamodb-admin.cmd", cli: true },
+  {
+    id: "dbeaver",
+    name: "DBeaver Community",
+    category: "databases",
+    about: "Universal database client: PostgreSQL, MySQL, SQLite, SQL Server and more.",
+    size: "120 MB",
+    source: gh("dbeaver/dbeaver", "^dbeaver-ce-[\\d.]+-windows-x86_64\\.zip$"),
+    exe: "dbeaver.exe"
+  },
+  {
+    id: "pgadmin",
+    name: "pgAdmin 4",
+    category: "databases",
+    about: "The PostgreSQL admin GUI (from the PostgreSQL binaries zip).",
+    size: "330 MB",
+    source: { resolve: "pgadmin" },
+    exe: "pgAdmin4.exe"
+  },
+  {
+    id: "heidisql",
+    name: "HeidiSQL",
+    category: "databases",
+    about: "Light client for MySQL, MariaDB, PostgreSQL and SQL Server.",
+    size: "28 MB",
+    source: gh("HeidiSQL/HeidiSQL", "^HeidiSQL_[\\d.]+_64_Portable\\.zip$"),
+    exe: "heidisql.exe"
+  },
+  {
+    id: "sqlitebrowser",
+    name: "DB Browser for SQLite",
+    category: "databases",
+    about: "Open, browse and edit SQLite files.",
+    size: "21 MB",
+    source: gh("sqlitebrowser/sqlitebrowser", "^DB\\.Browser\\.for\\.SQLite-v?[\\d.]+-win64\\.zip$"),
+    exe: "DB Browser for SQLite.exe"
+  },
+  {
+    id: "compass",
+    name: "MongoDB Compass",
+    category: "databases",
+    about: "The MongoDB GUI.",
+    size: "220 MB",
+    source: gh("mongodb-js/compass", "^mongodb-compass-[\\d.]+-win32-x64\\.zip$"),
+    exe: "MongoDBCompass.exe"
+  },
+  {
+    id: "redisinsight",
+    name: "Redis Insight",
+    category: "databases",
+    about: "The Redis GUI.",
+    size: "110 MB",
+    source: gh("redis/RedisInsight", "^Redis-Insight-win-installer\\.exe$"),
+    unpack: "nsis",
+    exe: "Redis Insight.exe",
+    needs: ["7zip"]
+  },
+  {
+    id: "dbgate",
+    name: "DbGate",
+    category: "databases",
+    about: "Database manager for SQL and NoSQL databases.",
+    size: "180 MB",
+    source: gh("dbgate/dbgate", "^dbgate-[\\d.]+-win_x64\\.zip$"),
+    exe: "DbGate.exe"
+  },
+  {
+    id: "beekeeper",
+    name: "Beekeeper Studio",
+    category: "databases",
+    about: "SQL editor and database manager.",
+    size: "245 MB",
+    source: gh("beekeeper-studio/beekeeper-studio", "^Beekeeper-Studio-[\\d.]+-portable\\.exe$"),
+    unpack: "nsis",
+    exe: "Beekeeper Studio.exe",
+    needs: ["7zip"]
+  },
+  {
+    id: "dynamodb-admin",
+    name: "dynamodb-admin",
+    category: "databases",
+    about: "Web GUI for DynamoDB Local: run dynamodb-admin, then open http://localhost:8001.",
+    size: "5 MB",
+    source: { npm: "dynamodb-admin" },
+    exe: "dynamodb-admin.cmd",
+    cli: true
+  },
   // ---- API clients
-  { id: "bruno", name: "Bruno", category: "api", about: "Offline, git-friendly API client (collections are files in your repo).", size: "175 MB", source: gh("usebruno/bruno", "^bruno_[\\d.]+_x64_win\\.zip$"), exe: "Bruno.exe" },
-  { id: "insomnia", name: "Insomnia", category: "api", about: "REST, GraphQL and gRPC client.", size: "590 MB", source: gh("Kong/insomnia", "^insomnia-[\\d.]+-full\\.nupkg$"), exe: "Insomnia.exe" },
+  {
+    id: "bruno",
+    name: "Bruno",
+    category: "api",
+    about: "Offline, git-friendly API client (collections are files in your repo).",
+    size: "175 MB",
+    source: gh("usebruno/bruno", "^bruno_[\\d.]+_x64_win\\.zip$"),
+    exe: "Bruno.exe"
+  },
+  {
+    id: "insomnia",
+    name: "Insomnia",
+    category: "api",
+    about: "REST, GraphQL and gRPC client.",
+    size: "590 MB",
+    source: gh("Kong/insomnia", "^insomnia-[\\d.]+-full\\.nupkg$"),
+    exe: "Insomnia.exe"
+  },
   // ---- git
-  { id: "sourcegit", name: "SourceGit", category: "git", about: "Fast open-source Git GUI.", size: "26 MB", source: gh("sourcegit-scm/sourcegit", "^sourcegit_[\\d.]+\\.win-x64\\.zip$"), exe: "SourceGit.exe" },
-  { id: "githubdesktop", name: "GitHub Desktop", category: "git", about: 'Simple Git GUI from GitHub. It has its own git, so it needs provisioning.git.access "full".', size: "300 MB", source: gh("desktop/desktop", "^GitHubDesktop-[\\d.]+-x64-full\\.nupkg$"), exe: "GitHubDesktop.exe", fullGitOnly: true },
-  { id: "lazygit", name: "lazygit", category: "git", about: "Git in the terminal.", size: "7 MB", source: gh("jesseduffield/lazygit", "^lazygit_[\\d.]+_windows_x86_64\\.zip$"), exe: "lazygit.exe", cli: true },
+  {
+    id: "sourcegit",
+    name: "SourceGit",
+    category: "git",
+    about: "Fast open-source Git GUI.",
+    size: "26 MB",
+    source: gh("sourcegit-scm/sourcegit", "^sourcegit_[\\d.]+\\.win-x64\\.zip$"),
+    exe: "SourceGit.exe"
+  },
+  {
+    id: "githubdesktop",
+    name: "GitHub Desktop",
+    category: "git",
+    about: 'Simple Git GUI from GitHub. It has its own git, so it needs provisioning.git.access "full".',
+    size: "300 MB",
+    source: gh("desktop/desktop", "^GitHubDesktop-[\\d.]+-x64-full\\.nupkg$"),
+    exe: "GitHubDesktop.exe",
+    fullGitOnly: true
+  },
+  {
+    id: "lazygit",
+    name: "lazygit",
+    category: "git",
+    about: "Git in the terminal.",
+    size: "7 MB",
+    source: gh("jesseduffield/lazygit", "^lazygit_[\\d.]+_windows_x86_64\\.zip$"),
+    exe: "lazygit.exe",
+    cli: true
+  },
   // ---- utilities
-  { id: "7zip", name: "7-Zip", category: "utilities", about: "Archive manager (7z, zip, rar, tar ...). Also unpacks installers for other apps.", size: "2 MB", source: { resolve: "7zip" }, exe: "7zFM.exe" },
-  { id: "winmerge", name: "WinMerge", category: "utilities", about: "Compare and merge files and folders.", size: "23 MB", source: gh("WinMerge/winmerge", "^winmerge-[\\d.]+-x64-exe\\.zip$"), exe: "WinMergeU.exe" },
-  { id: "everything", name: "Everything", category: "utilities", about: "Finds files by name instantly.", size: "2 MB", source: { resolve: "everything" }, exe: "Everything.exe" },
-  { id: "sysinternals", name: "Sysinternals Suite", category: "utilities", about: "Process Explorer, Process Monitor, Autoruns, TCPView and more (on PATH).", size: "200 MB", source: { url: "https://download.sysinternals.com/files/SysinternalsSuite.zip" }, exe: "procexp64.exe" },
-  { id: "imhex", name: "ImHex", category: "utilities", about: "Hex editor for reverse engineering and binary formats.", size: "80 MB", source: gh("WerWolv/ImHex", "^imhex-[\\d.]+-Windows-Portable-NoGPU-x86_64\\.zip$"), exe: "imhex-gui.exe" },
+  {
+    id: "7zip",
+    name: "7-Zip",
+    category: "utilities",
+    about: "Archive manager (7z, zip, rar, tar ...). Also unpacks installers for other apps.",
+    size: "2 MB",
+    source: { resolve: "7zip" },
+    exe: "7zFM.exe"
+  },
+  {
+    id: "winmerge",
+    name: "WinMerge",
+    category: "utilities",
+    about: "Compare and merge files and folders.",
+    size: "23 MB",
+    source: gh("WinMerge/winmerge", "^winmerge-[\\d.]+-x64-exe\\.zip$"),
+    exe: "WinMergeU.exe"
+  },
+  {
+    id: "everything",
+    name: "Everything",
+    category: "utilities",
+    about: "Finds files by name instantly.",
+    size: "2 MB",
+    source: { resolve: "everything" },
+    exe: "Everything.exe"
+  },
+  {
+    id: "sysinternals",
+    name: "Sysinternals Suite",
+    category: "utilities",
+    about: "Process Explorer, Process Monitor, Autoruns, TCPView and more (on PATH).",
+    size: "200 MB",
+    source: { url: "https://download.sysinternals.com/files/SysinternalsSuite.zip" },
+    exe: "procexp64.exe"
+  },
+  {
+    id: "imhex",
+    name: "ImHex",
+    category: "utilities",
+    about: "Hex editor for reverse engineering and binary formats.",
+    size: "80 MB",
+    source: gh("WerWolv/ImHex", "^imhex-[\\d.]+-Windows-Portable-NoGPU-x86_64\\.zip$"),
+    exe: "imhex-gui.exe"
+  },
   // ---- browsers
-  { id: "chrome", name: "Chrome for Testing", category: "browsers", about: "Chrome build made for automated tests (with chromedriver on PATH).", size: "170 MB", source: { resolve: "chrome" }, exe: "chrome.exe" },
-  { id: "firefox", name: "Firefox", category: "browsers", about: "Firefox for testing.", size: "75 MB", source: { resolve: "firefox" }, unpack: "nsis", exe: "firefox.exe", needs: ["7zip"] },
+  {
+    id: "chrome",
+    name: "Chrome for Testing",
+    category: "browsers",
+    about: "Chrome build made for automated tests (with chromedriver on PATH).",
+    size: "170 MB",
+    source: { resolve: "chrome" },
+    exe: "chrome.exe"
+  },
+  {
+    id: "firefox",
+    name: "Firefox",
+    category: "browsers",
+    about: "Firefox for testing.",
+    size: "75 MB",
+    source: { resolve: "firefox" },
+    unpack: "nsis",
+    exe: "firefox.exe",
+    needs: ["7zip"]
+  },
   // ---- game development
-  { id: "godot", name: "Godot", category: "gamedev", about: "Open-source 2D and 3D game engine.", size: "80 MB", source: gh("godotengine/godot", "^Godot_v[\\d.]+-stable_win64\\.exe\\.zip$"), exe: "/^Godot_v[\\d.]+-stable_win64\\.exe$/", needs: ["mesa"] },
-  { id: "blender", name: "Blender", category: "gamedev", about: "3D modelling, animation and rendering.", size: "400 MB", source: { resolve: "blender" }, exe: "blender.exe", needs: ["mesa"] },
-  { id: "love", name: "L\xD6VE", category: "gamedev", about: "Lua framework for 2D games.", size: "4 MB", source: gh("love2d/love", "^love-[\\d.]+-win64\\.zip$"), exe: "love.exe", needs: ["mesa"] },
-  { id: "defold", name: "Defold", category: "gamedev", about: "Free 2D/3D game engine and editor.", size: "330 MB", source: gh("defold/defold", "^Defold-x86_64-win32\\.zip$"), exe: "Defold.exe", needs: ["mesa"] },
-  { id: "pixelorama", name: "Pixelorama", category: "gamedev", about: "Pixel-art and sprite editor.", size: "40 MB", source: gh("Orama-Interactive/Pixelorama", "^Pixelorama-Windows-64bit\\.zip$"), exe: "Pixelorama.exe", needs: ["mesa"] },
-  { id: "tiled", name: "Tiled", category: "gamedev", about: "Tile map editor.", size: "22 MB", source: gh("mapeditor/tiled", "^Tiled-[\\d.]+_Windows-10\\+_x86_64\\.msi$"), unpack: "msi", exe: "tiled.exe" },
+  {
+    id: "godot",
+    name: "Godot",
+    category: "gamedev",
+    about: "Open-source 2D and 3D game engine.",
+    size: "80 MB",
+    source: gh("godotengine/godot", "^Godot_v[\\d.]+-stable_win64\\.exe\\.zip$"),
+    exe: "/^Godot_v[\\d.]+-stable_win64\\.exe$/",
+    needs: ["mesa"]
+  },
+  {
+    id: "blender",
+    name: "Blender",
+    category: "gamedev",
+    about: "3D modelling, animation and rendering.",
+    size: "400 MB",
+    source: { resolve: "blender" },
+    exe: "blender.exe",
+    needs: ["mesa"]
+  },
+  {
+    id: "love",
+    name: "L\xD6VE",
+    category: "gamedev",
+    about: "Lua framework for 2D games.",
+    size: "4 MB",
+    source: gh("love2d/love", "^love-[\\d.]+-win64\\.zip$"),
+    exe: "love.exe",
+    needs: ["mesa"]
+  },
+  {
+    id: "defold",
+    name: "Defold",
+    category: "gamedev",
+    about: "Free 2D/3D game engine and editor.",
+    size: "330 MB",
+    source: gh("defold/defold", "^Defold-x86_64-win32\\.zip$"),
+    exe: "Defold.exe",
+    needs: ["mesa"]
+  },
+  {
+    id: "pixelorama",
+    name: "Pixelorama",
+    category: "gamedev",
+    about: "Pixel-art and sprite editor.",
+    size: "40 MB",
+    source: gh("Orama-Interactive/Pixelorama", "^Pixelorama-Windows-64bit\\.zip$"),
+    exe: "Pixelorama.exe",
+    needs: ["mesa"]
+  },
+  {
+    id: "tiled",
+    name: "Tiled",
+    category: "gamedev",
+    about: "Tile map editor.",
+    size: "22 MB",
+    source: gh("mapeditor/tiled", "^Tiled-[\\d.]+_Windows-10\\+_x86_64\\.msi$"),
+    unpack: "msi",
+    exe: "tiled.exe"
+  },
   // ---- cloud
-  { id: "kubectl", name: "kubectl", category: "cloud", about: "Kubernetes command line.", size: "60 MB", source: { resolve: "kubectl" }, unpack: "file", exe: "kubectl.exe", cli: true },
-  { id: "helm", name: "Helm", category: "cloud", about: "Kubernetes package manager.", size: "20 MB", source: { resolve: "helm" }, exe: "helm.exe", cli: true },
-  { id: "k9s", name: "k9s", category: "cloud", about: "Kubernetes cluster UI in the terminal.", size: "40 MB", source: gh("derailed/k9s", "^k9s_Windows_amd64\\.zip$"), exe: "k9s.exe", cli: true },
-  { id: "terraform", name: "Terraform", category: "cloud", about: "Infrastructure as code.", size: "30 MB", source: { resolve: "terraform" }, exe: "terraform.exe", cli: true },
-  { id: "azure-cli", name: "Azure CLI", category: "cloud", about: "Manage Azure (az).", size: "90 MB", source: { url: "https://aka.ms/installazurecliwindowszipx64" }, exe: "az.cmd", cli: true },
-  { id: "gcloud", name: "Google Cloud CLI", category: "cloud", about: "Manage Google Cloud (gcloud, gsutil, bq).", size: "120 MB", source: { url: "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-windows-x86_64-bundled-python.zip" }, exe: "gcloud.cmd", cli: true },
-  { id: "aws-cli", name: "AWS CLI", category: "cloud", about: "Manage AWS (aws).", size: "50 MB", source: { url: "https://awscli.amazonaws.com/AWSCLIV2.msi" }, unpack: "msi", exe: "aws.exe", cli: true },
+  {
+    id: "kubectl",
+    name: "kubectl",
+    category: "cloud",
+    about: "Kubernetes command line.",
+    size: "60 MB",
+    source: { resolve: "kubectl" },
+    unpack: "file",
+    exe: "kubectl.exe",
+    cli: true
+  },
+  {
+    id: "helm",
+    name: "Helm",
+    category: "cloud",
+    about: "Kubernetes package manager.",
+    size: "20 MB",
+    source: { resolve: "helm" },
+    exe: "helm.exe",
+    cli: true
+  },
+  {
+    id: "k9s",
+    name: "k9s",
+    category: "cloud",
+    about: "Kubernetes cluster UI in the terminal.",
+    size: "40 MB",
+    source: gh("derailed/k9s", "^k9s_Windows_amd64\\.zip$"),
+    exe: "k9s.exe",
+    cli: true
+  },
+  {
+    id: "terraform",
+    name: "Terraform",
+    category: "cloud",
+    about: "Infrastructure as code.",
+    size: "30 MB",
+    source: { resolve: "terraform" },
+    exe: "terraform.exe",
+    cli: true
+  },
+  {
+    id: "azure-cli",
+    name: "Azure CLI",
+    category: "cloud",
+    about: "Manage Azure (az).",
+    size: "90 MB",
+    source: { url: "https://aka.ms/installazurecliwindowszipx64" },
+    exe: "az.cmd",
+    cli: true
+  },
+  {
+    id: "gcloud",
+    name: "Google Cloud CLI",
+    category: "cloud",
+    about: "Manage Google Cloud (gcloud, gsutil, bq).",
+    size: "120 MB",
+    source: {
+      url: "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-windows-x86_64-bundled-python.zip"
+    },
+    exe: "gcloud.cmd",
+    cli: true
+  },
+  {
+    id: "aws-cli",
+    name: "AWS CLI",
+    category: "cloud",
+    about: "Manage AWS (aws).",
+    size: "50 MB",
+    source: { url: "https://awscli.amazonaws.com/AWSCLIV2.msi" },
+    unpack: "msi",
+    exe: "aws.exe",
+    cli: true
+  },
   // ---- diagrams and docs
-  { id: "drawio", name: "draw.io", category: "diagrams", about: "Diagram editor (flowcharts, architecture, UML).", size: "170 MB", source: gh("jgraph/drawio-desktop", "^draw\\.io-[\\d.]+-windows\\.zip$"), exe: "draw.io.exe" },
-  { id: "pandoc", name: "Pandoc", category: "diagrams", about: "Convert documents between Markdown, HTML, Word, PDF ...", size: "35 MB", source: gh("jgm/pandoc", "^pandoc-[\\d.]+-windows-x86_64\\.zip$"), exe: "pandoc.exe", cli: true },
+  {
+    id: "drawio",
+    name: "draw.io",
+    category: "diagrams",
+    about: "Diagram editor (flowcharts, architecture, UML).",
+    size: "170 MB",
+    source: gh("jgraph/drawio-desktop", "^draw\\.io-[\\d.]+-windows\\.zip$"),
+    exe: "draw.io.exe"
+  },
+  {
+    id: "pandoc",
+    name: "Pandoc",
+    category: "diagrams",
+    about: "Convert documents between Markdown, HTML, Word, PDF ...",
+    size: "35 MB",
+    source: gh("jgm/pandoc", "^pandoc-[\\d.]+-windows-x86_64\\.zip$"),
+    exe: "pandoc.exe",
+    cli: true
+  },
   // ---- network
-  { id: "mitmproxy", name: "mitmproxy", category: "network", about: "Intercepting HTTPS proxy (mitmweb opens a web UI).", size: "90 MB", source: { resolve: "mitmproxy" }, exe: "mitmweb.exe", cli: true },
-  { id: "xh", name: "xh", category: "network", about: "Friendly HTTP requests from the terminal (like HTTPie).", size: "5 MB", source: gh("ducaale/xh", "^xh-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "xh.exe", cli: true },
-  { id: "grpcurl", name: "grpcurl", category: "network", about: "curl for gRPC servers.", size: "10 MB", source: gh("fullstorydev/grpcurl", "^grpcurl_[\\d.]+_windows_x86_64\\.zip$"), exe: "grpcurl.exe", cli: true },
-  { id: "k6", name: "k6", category: "network", about: "Load testing with JavaScript scripts.", size: "30 MB", source: gh("grafana/k6", "^k6-v[\\d.]+-windows-amd64\\.zip$"), exe: "k6.exe", cli: true },
+  {
+    id: "mitmproxy",
+    name: "mitmproxy",
+    category: "network",
+    about: "Intercepting HTTPS proxy (mitmweb opens a web UI).",
+    size: "90 MB",
+    source: { resolve: "mitmproxy" },
+    exe: "mitmweb.exe",
+    cli: true
+  },
+  {
+    id: "xh",
+    name: "xh",
+    category: "network",
+    about: "Friendly HTTP requests from the terminal (like HTTPie).",
+    size: "5 MB",
+    source: gh("ducaale/xh", "^xh-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "xh.exe",
+    cli: true
+  },
+  {
+    id: "grpcurl",
+    name: "grpcurl",
+    category: "network",
+    about: "curl for gRPC servers.",
+    size: "10 MB",
+    source: gh("fullstorydev/grpcurl", "^grpcurl_[\\d.]+_windows_x86_64\\.zip$"),
+    exe: "grpcurl.exe",
+    cli: true
+  },
+  {
+    id: "k6",
+    name: "k6",
+    category: "network",
+    about: "Load testing with JavaScript scripts.",
+    size: "30 MB",
+    source: gh("grafana/k6", "^k6-v[\\d.]+-windows-amd64\\.zip$"),
+    exe: "k6.exe",
+    cli: true
+  },
+  // ---- reverse engineering
+  {
+    id: "rea",
+    name: "REA (Reverse Engineer Anything)",
+    category: "reversing",
+    about: "Agent-driven reverse engineering (MCP server and CLI, by morluto). Run `rea setup` once to add it to Claude Code and Codex. Native binaries need Ghidra; needs Node 22.19+.",
+    size: "8 MB",
+    source: { npm: "rea-agents" },
+    exe: "rea.cmd",
+    cli: true
+  },
+  {
+    id: "ghidra",
+    name: "Ghidra",
+    category: "reversing",
+    about: "NSA's reverse-engineering suite: disassembler and decompiler. Needs Java 21 (toolchains.java).",
+    size: "570 MB",
+    source: gh("NationalSecurityAgency/ghidra", "^ghidra_[\\d.]+_PUBLIC_[\\d]+\\.zip$"),
+    exe: "ghidraRun.bat"
+  },
+  {
+    id: "x64dbg",
+    name: "x64dbg",
+    category: "reversing",
+    about: "Debugger for 64- and 32-bit Windows programs.",
+    size: "32 MB",
+    source: gh("x64dbg/x64dbg", "^snapshot_[\\d_-]+\\.zip$"),
+    exe: "/^x64dbg\\.exe$/"
+  },
+  {
+    id: "ilspy",
+    name: "ILSpy",
+    category: "reversing",
+    about: ".NET decompiler.",
+    size: "55 MB",
+    source: gh("icsharpcode/ILSpy", "^ILSpy_windows_selfcontained_[\\d.]+-x64\\.zip$"),
+    exe: "ILSpy.exe"
+  },
+  {
+    id: "dnspy",
+    name: "dnSpyEx",
+    category: "reversing",
+    about: ".NET debugger and assembly editor.",
+    size: "100 MB",
+    source: gh("dnSpyEx/dnSpy", "^dnSpy-net-win64\\.zip$"),
+    exe: "dnSpy.exe"
+  },
+  {
+    id: "die",
+    name: "Detect It Easy",
+    category: "reversing",
+    about: "Identifies file types, compilers and packers.",
+    size: "25 MB",
+    source: gh("horsicq/DIE-engine", "^die_win64_portable_[\\d.]+_x64\\.zip$"),
+    exe: "die.exe"
+  },
+  {
+    id: "pe-bear",
+    name: "PE-bear",
+    category: "reversing",
+    about: "Views and edits Windows executables (PE files).",
+    size: "12 MB",
+    source: gh("hasherezade/pe-bear", "^PE-bear_[\\d.]+_qt6_x64_win_vs22\\.zip$"),
+    exe: "PE-bear.exe"
+  },
+  {
+    id: "cutter",
+    name: "Cutter",
+    category: "reversing",
+    about: "Reverse-engineering GUI built on rizin.",
+    size: "141 MB",
+    source: gh("rizinorg/cutter", "^Cutter-v[\\d.]+-Windows-x86_64\\.zip$"),
+    exe: "cutter.exe"
+  },
+  {
+    id: "radare2",
+    name: "radare2",
+    category: "reversing",
+    about: "Command-line reverse-engineering framework (r2).",
+    size: "14 MB",
+    source: gh("radareorg/radare2", "^radare2-[\\d.]+-w64\\.zip$"),
+    exe: "radare2.exe",
+    cli: true
+  },
+  {
+    id: "jadx",
+    name: "JADX",
+    category: "reversing",
+    about: "Android APK and DEX decompiler.",
+    size: "99 MB",
+    source: gh("skylot/jadx", "^jadx-gui-[\\d.]+-with-jre-win\\.zip$"),
+    exe: "jadx-gui.exe"
+  },
+  {
+    id: "system-informer",
+    name: "System Informer",
+    category: "reversing",
+    about: "Process, service and network monitor (Process Hacker's successor).",
+    size: "22 MB",
+    source: gh("winsiderss/systeminformer", "^systeminformer-[\\d.]+-bin\\.zip$"),
+    exe: "SystemInformer.exe"
+  },
   // ---- command-line tools
-  { id: "jq", name: "jq", category: "cli", about: "Query and reshape JSON.", size: "1 MB", source: gh("jqlang/jq", "^jq-windows-amd64\\.exe$"), unpack: "file", exe: "jq.exe", cli: true },
-  { id: "yq", name: "yq", category: "cli", about: "Query and edit YAML, JSON, XML and TOML.", size: "10 MB", source: gh("mikefarah/yq", "^yq_windows_amd64\\.exe$"), unpack: "file", exe: "yq.exe", cli: true },
-  { id: "ripgrep", name: "ripgrep", category: "cli", about: "Very fast recursive search (rg).", size: "2 MB", source: gh("BurntSushi/ripgrep", "^ripgrep-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "rg.exe", cli: true },
-  { id: "fd", name: "fd", category: "cli", about: "Fast, friendly alternative to find.", size: "2 MB", source: gh("sharkdp/fd", "^fd-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "fd.exe", cli: true },
-  { id: "bat", name: "bat", category: "cli", about: "cat with syntax highlighting and git changes.", size: "3 MB", source: gh("sharkdp/bat", "^bat-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "bat.exe", cli: true },
-  { id: "fzf", name: "fzf", category: "cli", about: "Fuzzy finder for the terminal.", size: "2 MB", source: gh("junegunn/fzf", "^fzf-[\\d.]+-windows_amd64\\.zip$"), exe: "fzf.exe", cli: true },
-  { id: "delta", name: "delta", category: "cli", about: "Readable git diffs with syntax highlighting.", size: "3 MB", source: gh("dandavison/delta", "^delta-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "delta.exe", cli: true },
-  { id: "just", name: "just", category: "cli", about: "Command runner (a simpler make for project tasks).", size: "2 MB", source: gh("casey/just", "^just-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "just.exe", cli: true },
-  { id: "hyperfine", name: "hyperfine", category: "cli", about: "Benchmark commands.", size: "1 MB", source: gh("sharkdp/hyperfine", "^hyperfine-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "hyperfine.exe", cli: true },
-  { id: "watchexec", name: "watchexec", category: "cli", about: "Run a command when files change.", size: "5 MB", source: gh("watchexec/watchexec", "^watchexec-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"), exe: "watchexec.exe", cli: true },
-  { id: "protoc", name: "protoc", category: "cli", about: "Protocol Buffers compiler.", size: "3 MB", source: gh("protocolbuffers/protobuf", "^protoc-[\\d.]+-win64\\.zip$"), exe: "protoc.exe", cli: true },
-  { id: "ninja", name: "Ninja", category: "cli", about: "Small, fast build system (CMake's favourite generator).", size: "1 MB", source: gh("ninja-build/ninja", "^ninja-win\\.zip$"), exe: "ninja.exe", cli: true },
-  { id: "ffmpeg", name: "FFmpeg", category: "cli", about: "Convert and process audio and video.", size: "200 MB", source: gh("BtbN/FFmpeg-Builds", "^ffmpeg-master-latest-win64-gpl\\.zip$"), exe: "ffmpeg.exe", cli: true },
-  { id: "sqlite", name: "SQLite tools", category: "cli", about: "sqlite3 command-line shell.", size: "5 MB", source: { resolve: "sqlite" }, exe: "sqlite3.exe", cli: true },
-  { id: "shellcheck", name: "ShellCheck", category: "cli", about: "Finds bugs in shell scripts.", size: "10 MB", source: gh("koalaman/shellcheck", "^shellcheck-v[\\d.]+\\.zip$"), exe: "shellcheck.exe", cli: true },
-  { id: "gitleaks", name: "Gitleaks", category: "cli", about: "Finds secrets committed to git.", size: "8 MB", source: gh("gitleaks/gitleaks", "^gitleaks_[\\d.]+_windows_x64\\.zip$"), exe: "gitleaks.exe", cli: true }
+  {
+    id: "jq",
+    name: "jq",
+    category: "cli",
+    about: "Query and reshape JSON.",
+    size: "1 MB",
+    source: gh("jqlang/jq", "^jq-windows-amd64\\.exe$"),
+    unpack: "file",
+    exe: "jq.exe",
+    cli: true
+  },
+  {
+    id: "yq",
+    name: "yq",
+    category: "cli",
+    about: "Query and edit YAML, JSON, XML and TOML.",
+    size: "10 MB",
+    source: gh("mikefarah/yq", "^yq_windows_amd64\\.exe$"),
+    unpack: "file",
+    exe: "yq.exe",
+    cli: true
+  },
+  {
+    id: "ripgrep",
+    name: "ripgrep",
+    category: "cli",
+    about: "Very fast recursive search (rg).",
+    size: "2 MB",
+    source: gh("BurntSushi/ripgrep", "^ripgrep-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "rg.exe",
+    cli: true
+  },
+  {
+    id: "fd",
+    name: "fd",
+    category: "cli",
+    about: "Fast, friendly alternative to find.",
+    size: "2 MB",
+    source: gh("sharkdp/fd", "^fd-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "fd.exe",
+    cli: true
+  },
+  {
+    id: "bat",
+    name: "bat",
+    category: "cli",
+    about: "cat with syntax highlighting and git changes.",
+    size: "3 MB",
+    source: gh("sharkdp/bat", "^bat-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "bat.exe",
+    cli: true
+  },
+  {
+    id: "fzf",
+    name: "fzf",
+    category: "cli",
+    about: "Fuzzy finder for the terminal.",
+    size: "2 MB",
+    source: gh("junegunn/fzf", "^fzf-[\\d.]+-windows_amd64\\.zip$"),
+    exe: "fzf.exe",
+    cli: true
+  },
+  {
+    id: "delta",
+    name: "delta",
+    category: "cli",
+    about: "Readable git diffs with syntax highlighting.",
+    size: "3 MB",
+    source: gh("dandavison/delta", "^delta-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "delta.exe",
+    cli: true
+  },
+  {
+    id: "just",
+    name: "just",
+    category: "cli",
+    about: "Command runner (a simpler make for project tasks).",
+    size: "2 MB",
+    source: gh("casey/just", "^just-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "just.exe",
+    cli: true
+  },
+  {
+    id: "hyperfine",
+    name: "hyperfine",
+    category: "cli",
+    about: "Benchmark commands.",
+    size: "1 MB",
+    source: gh("sharkdp/hyperfine", "^hyperfine-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "hyperfine.exe",
+    cli: true
+  },
+  {
+    id: "watchexec",
+    name: "watchexec",
+    category: "cli",
+    about: "Run a command when files change.",
+    size: "5 MB",
+    source: gh("watchexec/watchexec", "^watchexec-[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "watchexec.exe",
+    cli: true
+  },
+  {
+    id: "protoc",
+    name: "protoc",
+    category: "cli",
+    about: "Protocol Buffers compiler.",
+    size: "3 MB",
+    source: gh("protocolbuffers/protobuf", "^protoc-[\\d.]+-win64\\.zip$"),
+    exe: "protoc.exe",
+    cli: true
+  },
+  {
+    id: "ninja",
+    name: "Ninja",
+    category: "cli",
+    about: "Small, fast build system (CMake's favourite generator).",
+    size: "1 MB",
+    source: gh("ninja-build/ninja", "^ninja-win\\.zip$"),
+    exe: "ninja.exe",
+    cli: true
+  },
+  {
+    id: "ffmpeg",
+    name: "FFmpeg",
+    category: "cli",
+    about: "Convert and process audio and video.",
+    size: "200 MB",
+    source: gh("BtbN/FFmpeg-Builds", "^ffmpeg-master-latest-win64-gpl\\.zip$"),
+    exe: "ffmpeg.exe",
+    cli: true
+  },
+  {
+    id: "sqlite",
+    name: "SQLite tools",
+    category: "cli",
+    about: "sqlite3 command-line shell.",
+    size: "5 MB",
+    source: { resolve: "sqlite" },
+    exe: "sqlite3.exe",
+    cli: true
+  },
+  {
+    id: "shellcheck",
+    name: "ShellCheck",
+    category: "cli",
+    about: "Finds bugs in shell scripts.",
+    size: "10 MB",
+    source: gh("koalaman/shellcheck", "^shellcheck-v[\\d.]+\\.zip$"),
+    exe: "shellcheck.exe",
+    cli: true
+  },
+  {
+    id: "gitleaks",
+    name: "Gitleaks",
+    category: "cli",
+    about: "Finds secrets committed to git.",
+    size: "8 MB",
+    source: gh("gitleaks/gitleaks", "^gitleaks_[\\d.]+_windows_x64\\.zip$"),
+    exe: "gitleaks.exe",
+    cli: true
+  }
 ];
 
 // src/core/schema/apps.ts
 var CATALOGUE_IDS = APPS.filter((a) => !a.setting).map((a) => a.id);
-var AppId = external_exports.enum(CATALOGUE_IDS);
-var CustomAppId = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,40}$/, "lower-case letters, digits and - only");
+var AppIdSchema = external_exports.enum(CATALOGUE_IDS);
+var CustomAppIdSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,40}$/, "lower-case letters, digits and - only");
 var compiles = (pattern) => {
   try {
     new RegExp(pattern);
@@ -25551,103 +26418,154 @@ var compiles = (pattern) => {
     return false;
   }
 };
-var CustomApp = external_exports.strictObject({
+var CustomAppSchema = external_exports.strictObject({
   name: external_exports.string().min(1).max(80).describe('The name on the desktop shortcut, e.g. "My Tool".'),
   github: external_exports.string().regex(/^[\w.-]+\/[\w.-]+$/, "owner/repo, e.g. sharkdp/bat").optional().describe("GitHub repository (owner/repo): the file comes from its latest release."),
   asset: external_exports.string().max(200).refine(compiles, "not a valid pattern").optional().describe("With github: a pattern (regular expression) matching the release file, e.g. windows.*x64\\.zip$"),
   url: external_exports.string().url().startsWith("https://", "https:// only").optional().describe("Or a direct https:// download link (zip, 7z, exe or msi)."),
   sha256: external_exports.string().regex(/^[0-9a-fA-F]{64}$/, "64 hex characters").optional().describe("SHA-256 of the download (GitHub releases usually publish one; then this is not needed)."),
-  unpack: external_exports.enum(["archive", "file", "nsis", "msi"]).optional().describe("archive (zip, 7z, tar: the default), file (a single .exe), nsis (an installer 7-Zip can open) or msi."),
+  unpack: external_exports.enum(["archive", "file", "nsis", "msi"]).optional().describe(
+    "archive (zip, 7z, tar: the default), file (a single .exe), nsis (an installer 7-Zip can open) or msi."
+  ),
   exe: external_exports.string().min(1).max(200).describe("The program to start (found anywhere in the download), e.g. mytool.exe."),
   cli: external_exports.boolean().optional().describe("A command-line tool: its folder goes on PATH instead of getting a desktop shortcut.")
-}).refine((a) => a.github && a.asset ? !a.url : Boolean(a.url) && !a.github && !a.asset, { message: "give github + asset, or url (not both)" });
-var Apps = external_exports.strictObject({
-  install: external_exports.array(AppId).describe("Apps from the catalogue to install in every sandbox (the Apps screen in the menu lists them by category). Each is downloaded once and kept."),
-  custom: external_exports.record(CustomAppId, CustomApp).describe("Programs of your own: a GitHub release or a download link, and the program to start. Installed like the catalogue apps.")
+}).refine((a) => a.github && a.asset ? !a.url : Boolean(a.url) && !a.github && !a.asset, {
+  message: "give github + asset, or url (not both)"
+});
+var AppsSchema = external_exports.strictObject({
+  install: external_exports.array(AppIdSchema).describe(
+    "Apps from the catalogue to install in every sandbox (the Apps screen in the menu lists them by category). Each is downloaded once and kept."
+  ),
+  custom: external_exports.record(CustomAppIdSchema, CustomAppSchema).describe(
+    "Programs of your own: a GitHub release or a download link, and the program to start. Installed like the catalogue apps."
+  )
 });
 
 // src/core/schema/projects.ts
-var Projects = external_exports.strictObject({
-  all: external_exports.boolean().describe("Map every project you have started before (and every folder in your roots) at every start, except those in exclude, so all of them open in the running sandbox without a restart. Every agent in the sandbox can then see all of them. Each one is still only set up when you first use it."),
+var ProjectsSchema = external_exports.strictObject({
+  all: external_exports.boolean().describe(
+    "Map every project you have started before (and every folder in your roots) at every start, except those in exclude, so all of them open in the running sandbox without a restart. Every agent in the sandbox can then see all of them. Each one is still only set up when you first use it."
+  ),
   exclude: external_exports.array(external_exports.string().min(1)).describe('Projects left out when "all" is on (folders on this PC).'),
-  roots: external_exports.array(external_exports.string().min(1)).describe('Folders whose subfolders are your projects (e.g. "F:\\\\Code"), mapped read/write at every start. Any project inside one, including ones you create later, opens in the running sandbox at once, without a restart. Every agent in the sandbox can see all of them.'),
+  roots: external_exports.array(external_exports.string().min(1)).describe(
+    'Folders whose subfolders are your projects (e.g. "F:\\\\Code"), mapped read/write at every start. Any project inside one, including ones you create later, opens in the running sandbox at once, without a restart. Every agent in the sandbox can see all of them.'
+  ),
   askToAddRoot: external_exports.boolean().describe("When you start a project whose parent folder is not a root yet, ask once whether to add it."),
   declinedRoots: external_exports.array(external_exports.string().min(1)).describe("Parent folders you said no to (not asked again)."),
-  allowOutsideMappings: external_exports.union([external_exports.literal("ask"), external_exports.boolean()]).describe(`A project's .sandbox-config.json may map folders from outside the project (e.g. a game folder on another drive). "ask" = an interactive launch asks once per project and set of folders, and remembers your answer; true = always allowed (still listed when you approve the file); false = never (the launch stops and says which folders). Only your own settings decide this, never a project file.`),
-  wsbShare: external_exports.boolean().describe("On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart.")
+  allowOutsideMappings: external_exports.union([external_exports.literal("ask"), external_exports.boolean()]).describe(
+    `A project's .sandbox-config.json may map folders from outside the project (e.g. a game folder on another drive). "ask" = an interactive launch asks once per project and set of folders, and remembers your answer; true = always allowed (still listed when you approve the file); false = never (the launch stops and says which folders). Only your own settings decide this, never a project file.`
+  ),
+  wsbShare: external_exports.boolean().describe(
+    "On Windows 11 24H2+ with the Windows Sandbox command line (wsb), add other folders to the running sandbox with `wsb share` (untested). Otherwise starting a project outside every root offers a restart."
+  )
+});
+
+// src/core/schema/resume.ts
+var RESUME_SESSIONS = ["ask", "always", "afterCrash", "never"];
+var ResumeSchema = external_exports.strictObject({
+  sessions: external_exports.enum(RESUME_SESSIONS).describe(
+    'When a sandbox starts after one that had agent sessions: "ask" lists them and asks whether to reopen them (without a terminal it prints the command sandbox resume), "always" reopens them, "afterCrash" reopens them only when the last sandbox ended unexpectedly, "never" leaves it to sandbox resume. Terminal tabs you opened yourself in the sandbox are never reopened.'
+  ),
+  restartAfterCrash: external_exports.boolean().describe(
+    "When the sandbox ends because Windows Sandbox crashed or ran out of memory, start it again by itself and reopen its sessions (at most 3 times in 6 hours)."
+  )
 });
 
 // src/core/schema/config.ts
-var Config = external_exports.strictObject({
-  $schema: SchemaRef.optional(),
-  defaultHarness: Name.describe("Agent started by `sandbox launch` (sandbox claude always runs claude)."),
-  guestWorkspace: GuestWorkspace,
+var ConfigSchema = external_exports.strictObject({
+  $schema: SchemaRefSchema.optional(),
+  defaultHarness: NameSchema.describe("Agent started by `sandbox launch` (sandbox claude always runs claude)."),
+  guestWorkspace: GuestWorkspaceSchema,
   readOnly: external_exports.boolean().describe("Map the workspace read-only."),
-  workspaceFilter: WorkspaceFilter,
-  audit: Audit,
-  mappings: external_exports.array(Mapping).describe("Extra folders from this PC."),
-  sandbox: Sandbox,
+  workspaceFilter: WorkspaceFilterSchema,
+  audit: AuditSchema,
+  mappings: external_exports.array(MappingSchema).describe("Extra folders from this PC."),
+  sandbox: SandboxSchema,
+  sharing: SharingSchema,
   storage: external_exports.strictObject({
     root: external_exports.string().min(1).describe("Where everything is kept on this PC (tools, databases, logins, launches)."),
     persistAgentState: external_exports.boolean().describe("Keep agent logins and history between sandboxes."),
-    dataName: Name.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces."),
-    markSandboxFiles: external_exports.boolean().describe(`Programs and scripts (.exe, .ps1, .bat, .cmd, .msi, .lnk ...) that appear or change in your project while a sandbox runs get Windows' "downloaded from the internet" mark, so SmartScreen and PowerShell ask before they run on this PC.`),
-    warnDataGb: external_exports.number().min(0).describe("Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. sandbox data shows what takes the space.")
+    dataName: NameSchema.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces."),
+    markSandboxFiles: external_exports.boolean().describe(
+      `Programs and scripts (.exe, .ps1, .bat, .cmd, .msi, .lnk ...) that appear or change in your project while a sandbox runs get Windows' "downloaded from the internet" mark, so SmartScreen and PowerShell ask before they run on this PC.`
+    ),
+    warnDataGb: external_exports.number().min(0).describe(
+      "Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. sandbox data shows what takes the space."
+    )
   }),
-  network: Network,
-  provisioning: Provisioning,
-  downloads: Downloads,
-  toolchains: Toolchains,
-  databases: Databases.describe("Databases running inside the sandbox. Data persists in C:\\AgentData\\databases; each one starts at boot."),
-  attach: Attach,
-  agentCommands: AgentCommands,
-  secrets: Secrets,
+  network: NetworkSchema,
+  provisioning: ProvisioningSchema,
+  downloads: DownloadsSchema,
+  toolchains: ToolchainsSchema,
+  databases: DatabasesSchema.describe(
+    "Databases running inside the sandbox. Data persists in C:\\AgentData\\databases; each one starts at boot."
+  ),
+  attach: AttachSchema,
+  agentCommands: AgentCommandsSchema,
+  secrets: SecretsSchema,
   personalization: toggle("Copy your desktop look (theme, accent, taskbar, wallpaper, ...) into the sandbox."),
-  apps: Apps,
-  claudeProfile: ClaudeProfile,
-  harnesses: external_exports.record(Name, Harness).describe("Agents that can run in the sandbox."),
+  apps: AppsSchema,
+  claudeProfile: ClaudeProfileSchema,
+  harnesses: external_exports.record(NameSchema, HarnessSchema).describe("Agents that can run in the sandbox."),
   hooks: external_exports.strictObject({ failFast: external_exports.boolean().describe("Stop when a hook script fails.") }),
-  projects: Projects.describe("Several projects in one sandbox: folders of projects mapped at every start, and adding folders while it runs.")
-}).refine((c) => c.harnesses[c.defaultHarness] !== void 0, { message: "defaultHarness must be one of the configured harnesses", path: ["defaultHarness"] });
-var LocalOverrides = external_exports.strictObject({
-  $schema: SchemaRef,
-  harness: Name.describe("Agent for this project."),
-  guestWorkspace: GuestWorkspace,
+  projects: ProjectsSchema.describe(
+    "Several projects in one sandbox: folders of projects mapped at every start, and adding folders while it runs."
+  ),
+  resume: ResumeSchema.describe("Reopening the sessions of the last sandbox when a new one starts.")
+}).refine((c) => c.harnesses[c.defaultHarness] !== void 0, {
+  message: "defaultHarness must be one of the configured harnesses",
+  path: ["defaultHarness"]
+});
+var LocalOverridesSchema = external_exports.strictObject({
+  $schema: SchemaRefSchema,
+  harness: NameSchema.describe("Agent for this project."),
+  guestWorkspace: GuestWorkspaceSchema,
   readOnly: external_exports.boolean().describe("Map this project read-only."),
   // A project may turn the filter on and keep more out, never let ignored files in.
-  workspaceFilter: WorkspaceFilter.pick({ enabled: true, exclude: true }).partial(),
-  mappings: external_exports.array(Mapping).describe("Extra folders (relative paths are relative to this file), e.g. a read-only data folder at another place in the sandbox. Folders outside the project are used only as your projects.allowOutsideMappings setting allows (by default you are asked once)."),
-  scripts: Strings.describe("Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."),
+  workspaceFilter: WorkspaceFilterSchema.pick({ enabled: true, exclude: true }).partial(),
+  mappings: external_exports.array(MappingSchema).describe(
+    "Extra folders (relative paths are relative to this file), e.g. a read-only data folder at another place in the sandbox. Folders outside the project are used only as your projects.allowOutsideMappings setting allows (by default you are asked once)."
+  ),
+  scripts: StringsSchema.describe(
+    "Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."
+  ),
   // This PC's resources are yours to share: CPU and paging file (this PC's disk) are not a project's to set.
-  sandbox: Sandbox.omit({ cpuLimit: true, pageFileMb: true }).partial(),
+  sandbox: SandboxSchema.omit({ cpuLimit: true, pageFileMb: true }).partial(),
   // A project may block more (the LAN, hosts); it never opens hosts, ports, DNS or a proxy.
-  network: Network.pick({ blockPrivateRanges: true, blockHosts: true }).partial(),
-  provisioning: Provisioning.pick({ copyFromHost: true, fallbackToInstall: true, refresh: true }).extend({ git: Git.partial(), terminal: toggle("Windows Terminal as the sandbox window.").partial() }).partial(),
-  downloads: Downloads.partial(),
+  network: NetworkSchema.pick({ blockPrivateRanges: true, blockHosts: true }).partial(),
+  provisioning: ProvisioningSchema.pick({ copyFromHost: true, fallbackToInstall: true, refresh: true }).extend({ git: GitSchema.partial(), terminal: toggle("Windows Terminal as the sandbox window.").partial() }).partial(),
+  downloads: DownloadsSchema.partial(),
   // Every toolchain setting, each one optional (a project usually only switches languages on or pins a version).
   toolchains: external_exports.strictObject({
-    ...import_lodash.default.mapValues(import_lodash.default.omit(Toolchains.shape, "environment"), (shape) => shape.partial()),
-    environment: Toolchains.shape.environment
+    ...import_lodash.default.mapValues(import_lodash.default.omit(ToolchainsSchema.shape, "environment"), (shape) => shape.partial()),
+    environment: ToolchainsSchema.shape.environment
   }).partial(),
-  databases: external_exports.strictObject(import_lodash.default.mapValues(Databases.shape, (shape) => shape.partial())).partial(),
-  attach: Attach.partial(),
+  databases: external_exports.strictObject(import_lodash.default.mapValues(DatabasesSchema.shape, (shape) => shape.partial())).partial(),
+  attach: AttachSchema.partial(),
   personalization: toggle("Copy your desktop look into the sandbox.").partial(),
-  // Catalogue apps only (a vetted list): your own programs (apps.custom) download anything, so a repo cannot add them.
-  apps: Apps.pick({ install: true }).partial(),
-  claudeProfile: ClaudeProfile.pick({ enabled: true, overwrite: true, copyCredentials: true, syncHistory: true, syncClaudeMem: true }).partial(),
+  // Catalogue apps only (a vetted list): your own programs (apps.custom) download anything, so a repo cannot add
+  // them.
+  apps: AppsSchema.pick({ install: true }).partial(),
+  claudeProfile: ClaudeProfileSchema.pick({
+    enabled: true,
+    overwrite: true,
+    copyCredentials: true,
+    syncHistory: true,
+    syncClaudeMem: true
+  }).partial(),
   hooks: external_exports.strictObject({ failFast: external_exports.boolean() }).partial()
 }).partial();
 
-// src/shared/schema.ts
-var Id = external_exports.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "invalid id");
+// src/shared/channel/schema.ts
+var IdSchema = external_exports.string().regex(/^[A-Za-z0-9_-]{1,64}$/, "invalid id");
 var Text = (max = 4096) => external_exports.string().max(max);
-var Time = Text(64);
-var AttachEndpoint = external_exports.strictObject({
+var TimeSchema = Text(64);
+var AttachEndpointSchema = external_exports.strictObject({
   addresses: external_exports.array(Text(64)).max(16),
   port: external_exports.number().int().min(1024).max(65535),
   token: Text(256)
 });
-var BootProgress = external_exports.strictObject({
+var BootProgressSchema = external_exports.strictObject({
   step: external_exports.number().int().min(1).max(32),
   steps: external_exports.number().int().min(1).max(32),
   title: Text(120),
@@ -25656,60 +26574,82 @@ var BootProgress = external_exports.strictObject({
   done: external_exports.number().int().min(0).max(1e3),
   total: external_exports.number().int().min(0).max(1e3)
 });
-var SandboxStatus = external_exports.object({
+var SandboxStatusSchema = external_exports.object({
   launchId: Text(64),
   phase: external_exports.enum(["booting", "provisioning", "ready", "failed"]),
   message: Text(),
-  updatedAt: Time,
+  updatedAt: TimeSchema,
   workspaceHost: Text(),
   guestWorkspace: Text(),
   headless: external_exports.boolean(),
   /** The sandbox's IPv4 addresses (for network.forwardPorts; the host only uses ones on its Hyper-V network). */
   addresses: external_exports.array(external_exports.string().max(45)).max(8).optional(),
   /** A malformed progress is dropped, never the status (the phase still counts). */
-  progress: BootProgress.optional().catch(void 0)
+  progress: BootProgressSchema.optional().catch(void 0)
 });
-var Version = external_exports.strictObject({ spec: Text(128), source: Text(256) });
-var DatabasePlan = external_exports.strictObject({
+var VersionSchema = external_exports.strictObject({ spec: Text(128), source: Text(256) });
+var DatabasePlanSchema = external_exports.strictObject({
   database: external_exports.enum(["postgres", "mysql", "sqlserver", "mongodb", "redis", "dynamodb"]),
   reasons: external_exports.array(Text(1024)).max(32),
   version: Text(64),
   port: external_exports.number().int().min(1024).max(65535),
   adminPort: external_exports.number().int().min(1024).max(65535).optional()
 });
-var ProjectSpec = external_exports.strictObject({
-  name: Id,
+var ProjectSpecSchema = external_exports.strictObject({
+  name: IdSchema,
   /** Inside the sandbox: C:\Projects\<name>. */
   workspace: Text(1024),
   workspaceHost: Text(1024),
-  toolchains: Toolchains,
-  versions: external_exports.strictObject({ node: Version, nodeExtra: external_exports.array(Text(128)).max(16), python: Version }),
-  databases: external_exports.array(DatabasePlan).max(8),
+  toolchains: ToolchainsSchema,
+  versions: external_exports.strictObject({ node: VersionSchema, nodeExtra: external_exports.array(Text(128)).max(16), python: VersionSchema }),
+  databases: external_exports.array(DatabasePlanSchema).max(8),
   /** Agents this project may start that the sandbox did not boot with (its .sandbox-config.json "harness"). */
-  harnesses: external_exports.record(Text(64), Harness).refine((h) => Object.keys(h).length <= 8, "at most 8 agents"),
+  harnesses: external_exports.record(Text(64), HarnessSchema).refine((h) => Object.keys(h).length <= 8, "at most 8 agents"),
   /** Its hooks were staged in C:\AgentLaunch\projects\<name>\hooks. */
   hooks: external_exports.boolean()
 });
-var GuestRequest = external_exports.discriminatedUnion("kind", [
-  external_exports.strictObject({ kind: external_exports.literal("session"), id: Id, harness: Text(64), args: external_exports.array(Text()).max(256), cwd: Text(), project: ProjectSpec.optional(), harnessSpec: Harness.optional(), createdAt: Time }),
+var GuestRequestSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    kind: external_exports.literal("session"),
+    id: IdSchema,
+    harness: Text(64),
+    args: external_exports.array(Text()).max(256),
+    cwd: Text(),
+    project: ProjectSpecSchema.optional(),
+    harnessSpec: HarnessSchema.optional(),
+    createdAt: TimeSchema
+  }),
   /** Provision a registered project without starting an agent (sandbox start / exec / db from its folder). */
-  external_exports.strictObject({ kind: external_exports.literal("project"), id: Id, project: ProjectSpec, createdAt: Time }),
-  external_exports.strictObject({ kind: external_exports.literal("exec"), id: Id, command: external_exports.array(Text()).min(1).max(256), cwd: Text(), timeoutSeconds: external_exports.number().positive().max(86400), createdAt: Time }),
+  external_exports.strictObject({ kind: external_exports.literal("project"), id: IdSchema, project: ProjectSpecSchema, createdAt: TimeSchema }),
+  external_exports.strictObject({
+    kind: external_exports.literal("exec"),
+    id: IdSchema,
+    command: external_exports.array(Text()).min(1).max(256),
+    cwd: Text(),
+    timeoutSeconds: external_exports.number().positive().max(86400),
+    createdAt: TimeSchema
+  }),
   /** cwd: only the sessions in this folder or below (one project's); omitted = every session. */
-  external_exports.strictObject({ kind: external_exports.literal("restart"), id: Id, harness: Text(64).nullable(), cwd: Text().optional(), createdAt: Time }),
-  external_exports.strictObject({ kind: external_exports.literal("ping"), id: Id, createdAt: Time })
+  external_exports.strictObject({
+    kind: external_exports.literal("restart"),
+    id: IdSchema,
+    harness: Text(64).nullable(),
+    cwd: Text().optional(),
+    createdAt: TimeSchema
+  }),
+  external_exports.strictObject({ kind: external_exports.literal("ping"), id: IdSchema, createdAt: TimeSchema })
 ]);
-var GuestResponse = external_exports.object({
-  id: Id,
+var GuestResponseSchema = external_exports.object({
+  id: IdSchema,
   ok: external_exports.boolean(),
   message: Text(65536),
   exitCode: external_exports.number().int().optional(),
   stdout: Text(4 * 1024 * 1024).optional(),
   stderr: Text(4 * 1024 * 1024).optional(),
-  finishedAt: Time
+  finishedAt: TimeSchema
 });
-var SessionStatus = external_exports.object({
-  id: Id,
+var SessionStatusSchema = external_exports.object({
+  id: IdSchema,
   launchId: Text(64),
   harness: Text(64),
   cwd: Text(),
@@ -25717,86 +26657,70 @@ var SessionStatus = external_exports.object({
   project: Text(64).optional(),
   phase: external_exports.enum(["starting", "running", "exited", "failed"]),
   message: Text(),
-  updatedAt: Time,
-  startedAt: Time,
+  updatedAt: TimeSchema,
+  startedAt: TimeSchema,
+  /** The agent's own conversation this session is in (Claude: the file name of its .jsonl), once known. */
+  conversation: Text(128).optional(),
   exitCode: external_exports.number().int().optional(),
-  attach: AttachEndpoint.optional()
+  attach: AttachEndpointSchema.optional()
 });
-var ProjectStatus = external_exports.object({
-  name: Id,
+var ProjectStatusSchema = external_exports.object({
+  name: IdSchema,
   workspace: Text(1024),
   phase: external_exports.enum(["provisioning", "ready", "failed"]),
   message: Text(),
-  updatedAt: Time,
+  updatedAt: TimeSchema,
   databases: external_exports.array(external_exports.object({ database: Text(32), port: external_exports.number().int() })).max(16),
   summary: external_exports.array(Text(512)).max(64)
 });
 
-// src/guest/ports.ts
+// src/guest/runtime/ports.ts
 import net from "node:net";
-var portOpen = (port) => new Promise((resolve) => {
-  const socket = net.connect({ host: "127.0.0.1", port }, () => {
-    socket.destroy();
-    resolve(true);
+function portOpen(port) {
+  return new Promise((resolve) => {
+    const socket = net.connect({ host: "127.0.0.1", port }, () => {
+      socket.destroy();
+      resolve(true);
+    });
+    socket.once("error", () => resolve(false));
   });
-  socket.once("error", () => resolve(false));
-});
-var waitForPort = async (port, seconds) => {
+}
+async function waitForPort(port, seconds) {
   for (const end = Date.now() + seconds * 1e3; Date.now() < end; ) {
     if (await portOpen(port)) return true;
     await new Promise((r) => setTimeout(r, 300));
   }
   return false;
-};
-
-// src/guest/toolchains/databases/index.ts
-import fs10 from "node:fs";
-import path15 from "node:path";
-import { spawnSync as spawnSync2 } from "node:child_process";
+}
 
-// src/shared/system.ts
-import path from "node:path";
-var systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
-var system32 = (exe) => path.join(systemRoot(), "System32", exe);
-var SYSTEM = {
-  cmd: () => system32("cmd.exe"),
-  powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
-  tasklist: () => system32("tasklist.exe"),
-  tar: () => system32("tar.exe"),
-  reg: () => system32("reg.exe"),
-  netsh: () => system32("netsh.exe"),
-  netstat: () => system32("NETSTAT.EXE"),
-  route: () => system32("ROUTE.EXE"),
-  ipconfig: () => system32("ipconfig.exe"),
-  robocopy: () => system32("Robocopy.exe"),
-  shutdown: () => system32("shutdown.exe"),
-  dism: () => system32("Dism.exe"),
-  msiexec: () => system32("msiexec.exe")
+// src/guest/databases/names.ts
+var DATABASE_NAMES = {
+  postgres: "PostgreSQL",
+  mysql: "MySQL (MariaDB)",
+  mongodb: "MongoDB",
+  redis: "Redis",
+  dynamodb: "DynamoDB Local",
+  sqlserver: "SQL Server"
 };
 
-// src/guest/env.ts
-import fs5 from "node:fs";
+// src/guest/runtime/paths.ts
 import path6 from "node:path";
-import { spawnSync } from "node:child_process";
 
-// src/shared/download.ts
-import fs3 from "node:fs";
-import path4 from "node:path";
-import crypto from "node:crypto";
-import { spawn } from "node:child_process";
-import { Readable, Transform } from "node:stream";
-import { pipeline } from "node:stream/promises";
+// src/shared/channel/run-dir.ts
+import fs4 from "node:fs";
+import path5 from "node:path";
 
-// src/shared/safe-remove.ts
+// src/shared/io/json.ts
 import fs2 from "node:fs";
-import os2 from "node:os";
 import path3 from "node:path";
 
 // src/shared/test-guard.ts
 import fs from "node:fs";
 import os from "node:os";
 import path2 from "node:path";
-var selfTestRunning = () => process.env.AGENT_SANDBOX_SELFTEST === "1";
+function selfTestRunning() {
+  return process.env.AGENT_SANDBOX_SELFTEST === "1";
+}
 var canonical = (p) => {
   let rest = "";
   let current = path2.resolve(p);
@@ -25811,31 +26735,75 @@ var canonical = (p) => {
     }
   }
 };
-var testWriteRefusal = (target) => {
+function testWriteRefusal(target) {
   if (!selfTestRunning()) return null;
   const temp = canonical(os.tmpdir());
   const t = canonical(target);
   return t === temp || t.startsWith(temp + path2.sep) ? null : "The self-test refused to change " + target + ": it only works in temp folders, so it can never change this PC.";
-};
-var assertTestWritable = (target) => {
+}
+function assertTestWritable(target) {
   const refusal = testWriteRefusal(target);
   if (refusal) throw new Error(refusal);
+}
+
+// src/shared/io/json.ts
+var MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
+function readJsonFile(file2) {
+  try {
+    if (fs2.statSync(file2).size > MAX_MESSAGE_BYTES) return null;
+    return JSON.parse(fs2.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""));
+  } catch {
+    return null;
+  }
+}
+function readValid(schema, file2) {
+  const parsed = schema.safeParse(readJsonFile(file2));
+  return parsed.success ? parsed.data : null;
+}
+var pause = (ms) => {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 };
+function writeJsonAtomic(file2, value) {
+  return writeFileAtomic(file2, JSON.stringify(value, null, 2) + "\n");
+}
+function writeFileAtomic(file2, text) {
+  assertTestWritable(file2);
+  fs2.mkdirSync(path3.dirname(file2), { recursive: true });
+  const temp = file2 + "." + process.pid + "-" + Math.random().toString(36).slice(2) + ".tmp";
+  fs2.writeFileSync(temp, text, { encoding: "utf8", flag: "wx" });
+  for (let attempt = 1; ; attempt++) {
+    try {
+      fs2.renameSync(temp, file2);
+      return;
+    } catch (e) {
+      const code = e.code;
+      if (attempt >= 8 || code !== "EPERM" && code !== "EBUSY" && code !== "EACCES") {
+        fs2.rmSync(temp, { force: true });
+        throw e;
+      }
+      pause(50 * attempt);
+    }
+  }
+}
 
-// src/shared/safe-remove.ts
-var norm = (p) => path3.resolve(p).replace(/[\\/]+$/, "").toLowerCase();
+// src/shared/io/safe-remove.ts
+import fs3 from "node:fs";
+import os2 from "node:os";
+import path4 from "node:path";
+var norm = (p) => path4.resolve(p).replace(/[\\/]+$/, "").toLowerCase();
 var isAncestorOrSame = (parent, child) => {
   const a = norm(parent);
   const b = norm(child);
-  return a === b || b.startsWith(a + path3.sep);
+  return a === b || b.startsWith(a + path4.sep);
 };
+var depthBelow = (parent, child) => path4.relative(norm(parent), norm(child)).split(path4.sep).filter(Boolean).length;
 var protectedFolders = () => [
   os2.homedir(),
   process.env.USERPROFILE,
   process.env.APPDATA,
   process.env.LOCALAPPDATA,
-  path3.join(os2.homedir(), "Documents"),
-  path3.join(os2.homedir(), "Desktop"),
+  path4.join(os2.homedir(), "Documents"),
+  path4.join(os2.homedir(), "Desktop"),
   process.env.SystemRoot,
   process.env.WINDIR,
   process.env.ProgramFiles,
@@ -25844,53 +26812,166 @@ var protectedFolders = () => [
   "C:\\Users",
   "C:\\Windows"
 ].filter((p) => typeof p === "string" && p.trim() !== "");
-var systemFolders = () => [process.env.SystemRoot, process.env.WINDIR, process.env.ProgramFiles, process.env["ProgramFiles(x86)"], "C:\\Windows", "C:\\Program Files", "C:\\Program Files (x86)"].filter((p) => typeof p === "string" && p.trim() !== "");
-var removeRefusal = (target, root) => {
-  if (!target || !path3.isAbsolute(target) || !root || !path3.isAbsolute(root)) return "not an absolute path";
+var present = (paths) => paths.filter((p) => typeof p === "string" && p.trim() !== "");
+var windowsFolders = () => present([process.env.SystemRoot, process.env.WINDIR, "C:\\Windows"]);
+var programFolders = () => present([process.env.ProgramFiles, process.env["ProgramFiles(x86)"], "C:\\Program Files", "C:\\Program Files (x86)"]);
+function removeRefusal(target, root) {
+  if (!target || !path4.isAbsolute(target) || !root || !path4.isAbsolute(root)) return "not an absolute path";
   if (/^[\\/]{2}[?.][\\/]/.test(target) || /^[\\/]{2}[?.][\\/]/.test(root)) return "a device path (\\\\?\\ or \\\\.\\)";
   const t = norm(target);
-  if (t === norm(path3.parse(t).root)) return "a drive root";
+  if (t === norm(path4.parse(t).root)) return "a drive root";
   const hit = protectedFolders().find((p) => isAncestorOrSame(t, p));
   if (hit) return "it is, or contains, " + hit;
-  const system = systemFolders().find((p) => isAncestorOrSame(p, t));
-  if (system) return "it is inside " + system;
-  if (!t.startsWith(norm(root) + path3.sep)) return "it is not inside " + root;
+  const windows = windowsFolders().find((p) => isAncestorOrSame(p, t));
+  if (windows) return "it is inside " + windows;
+  const program = programFolders().find((p) => isAncestorOrSame(p, t));
+  if (program && !(isAncestorOrSame(program, root) && depthBelow(program, root) >= 2)) return "it is inside " + program;
+  if (!t.startsWith(norm(root) + path4.sep)) return "it is not inside " + root;
   return null;
-};
-var safeRemove = (target, root) => {
+}
+function safeRemove(target, root) {
   const refusal = removeRefusal(target, root);
   if (refusal) throw new Error("Refusing to delete " + target + ": " + refusal);
   assertTestWritable(target);
   let stat;
   try {
-    stat = fs2.lstatSync(target);
+    stat = fs3.lstatSync(target);
   } catch {
     return;
   }
   if (stat.isSymbolicLink()) {
     try {
-      fs2.unlinkSync(target);
+      fs3.unlinkSync(target);
     } catch {
-      fs2.rmdirSync(target);
+      fs3.rmdirSync(target);
     }
     return;
   }
-  fs2.rmSync(target, { recursive: true, force: true, maxRetries: 2 });
+  fs3.rmSync(target, { recursive: true, force: true, maxRetries: 2 });
+}
+
+// src/shared/channel/run-dir.ts
+function safeId(id) {
+  return IdSchema.parse(id);
+}
+var scan = (schema, dir) => {
+  if (!fs4.existsSync(dir)) return { valid: [], invalid: [] };
+  const valid = [];
+  const invalid = [];
+  for (const name of fs4.readdirSync(dir)) {
+    if (name.endsWith(".tmp")) continue;
+    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name) ? readValid(schema, path5.join(dir, name)) : null;
+    if (message) valid.push(message);
+    else invalid.push(path5.join(dir, name));
+  }
+  return { valid, invalid };
+};
+var RunDir = class {
+  root;
+  sandboxFile;
+  requestsDir;
+  responsesDir;
+  sessionsDir;
+  projectsDir;
+  /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
+  auditDir;
+  constructor(dataDir2) {
+    this.root = path5.join(dataDir2, "run");
+    this.sandboxFile = path5.join(this.root, "sandbox.json");
+    this.requestsDir = path5.join(this.root, "requests");
+    this.responsesDir = path5.join(this.root, "responses");
+    this.sessionsDir = path5.join(this.root, "sessions");
+    this.projectsDir = path5.join(this.root, "projects");
+    this.auditDir = path5.join(this.root, "audit");
+  }
+  requestFile(id) {
+    return path5.join(this.requestsDir, safeId(id) + ".json");
+  }
+  responseFile(id) {
+    return path5.join(this.responsesDir, safeId(id) + ".json");
+  }
+  sessionFile(id) {
+    return path5.join(this.sessionsDir, safeId(id) + ".json");
+  }
+  projectFile(name) {
+    return path5.join(this.projectsDir, safeId(name) + ".json");
+  }
+  readSandboxStatus() {
+    return readValid(SandboxStatusSchema, this.sandboxFile);
+  }
+  readSession(id) {
+    return readValid(SessionStatusSchema, this.sessionFile(id));
+  }
+  readResponse(id) {
+    return readValid(GuestResponseSchema, this.responseFile(id));
+  }
+  listSessions() {
+    return scan(SessionStatusSchema, this.sessionsDir).valid.sort((a, b) => a.startedAt.localeCompare(b.startedAt));
+  }
+  readProjectStatus(name) {
+    return readValid(ProjectStatusSchema, this.projectFile(name));
+  }
+  listProjectStatus() {
+    return scan(ProjectStatusSchema, this.projectsDir).valid.slice(0, 64);
+  }
+  scanRequests() {
+    return scan(GuestRequestSchema, this.requestsDir);
+  }
 };
 
-// src/shared/download.ts
-var USER_AGENT = "windows-development-sandbox";
-var stagingFolder = (destination) => destination + ".staging-" + crypto.randomBytes(3).toString("hex");
-var moveIntoPlace = (work, destination) => {
-  safeRemove(destination, path4.dirname(destination));
-  fs3.mkdirSync(path4.dirname(destination), { recursive: true });
-  fs3.renameSync(work, destination);
+// src/guest/runtime/paths.ts
+var isWin = process.platform === "win32";
+var dryRun = process.env.AGENT_DRY_RUN === "1";
+var testMode = process.env.AGENT_SANDBOX_TEST === "1";
+var launchDir = process.env.AGENT_LAUNCH_DIR ?? "C:\\AgentLaunch";
+var dataDir = process.env.AGENT_DATA_DIR ?? "C:\\AgentData";
+var hostToolsDir = process.env.AGENT_HOST_TOOLS_DIR ?? "C:\\HostTools";
+var localDir = process.env.AGENT_LOCAL_DIR ?? "C:\\nvm";
+var toolsDir = path6.join(dataDir, "tools");
+var logsDir = path6.join(dataDir, "logs");
+var run = new RunDir(dataDir);
+
+// src/guest/runtime/log.ts
+import fs5 from "node:fs";
+import path7 from "node:path";
+fs5.mkdirSync(logsDir, { recursive: true });
+var logFile = path7.join(
+  logsDir,
+  (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log"
+);
+var append = (line) => {
+  try {
+    fs5.appendFileSync(logFile, line + "\n");
+  } catch {
+  }
 };
-var fetchRetry = async (url2, init = {}, attempts = 5, timeoutMs = 6e4) => {
+function log(message) {
+  console.log(message);
+  append(message);
+}
+function warn(message) {
+  console.warn("\x1B[33mWARNING: " + message + "\x1B[0m");
+  append("WARNING: " + message);
+}
+
+// src/guest/runtime/project-context.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+
+// src/guest/runtime/session.ts
+import fs9 from "node:fs";
+import path11 from "node:path";
+
+// src/shared/download/http.ts
+var USER_AGENT = "windows-development-sandbox";
+async function fetchRetry(url2, init = {}, attempts = 5, timeoutMs = 6e4) {
   let last;
   for (let i = 1; i <= attempts; i++) {
     try {
-      const response = await fetch(url2, { ...init, signal: AbortSignal.timeout(timeoutMs), headers: { "User-Agent": USER_AGENT, ...init.headers ?? {} } });
+      const response = await fetch(url2, {
+        ...init,
+        signal: AbortSignal.timeout(timeoutMs),
+        headers: { "User-Agent": USER_AGENT, ...init.headers ?? {} }
+      });
       if (response.ok) return response;
       last = new Error("HTTP " + response.status + " for " + url2);
       if (response.status === 404) break;
@@ -25900,64 +26981,186 @@ var fetchRetry = async (url2, init = {}, attempts = 5, timeoutMs = 6e4) => {
     if (i < attempts) await new Promise((r) => setTimeout(r, 3e3));
   }
   throw last instanceof Error ? last : new Error(String(last));
-};
-var fetchJson = async (url2) => await (await fetchRetry(url2, { headers: { Accept: "application/json" } }, 2, 2e4)).json();
-var fetchText = async (url2) => await (await fetchRetry(url2)).text();
-var checksumRequired = false;
-var setChecksumRequired = (on) => {
-  checksumRequired = on;
-};
-var downloadWatcher = null;
-var download = async (url2, destination, expected = null) => {
-  const sums = typeof expected === "string" || expected === null ? { sha256: expected } : expected;
-  if (checksumRequired && !sums.sha256?.trim() && !sums.sha512?.trim()) {
-    throw new Error("Refusing to download " + path4.basename(destination) + " (" + url2 + "): no checksum is published for it, and downloads.requireChecksum is on. Turn that setting off to allow downloads that cannot be verified.");
-  }
-  const response = await fetchRetry(url2, {}, 3, 20 * 60 * 1e3);
-  if (!response.body) throw new Error("Empty response for " + url2);
-  fs3.mkdirSync(path4.dirname(destination), { recursive: true });
-  const checks = ["sha256", "sha512"].flatMap((kind) => {
-    const want = sums[kind]?.trim().toLowerCase();
-    return want ? [{ want, hash: crypto.createHash(kind) }] : [];
+}
+async function fetchJson(url2) {
+  return await (await fetchRetry(url2, { headers: { Accept: "application/json" } }, 2, 2e4)).json();
+}
+async function fetchText(url2) {
+  return await (await fetchRetry(url2)).text();
+}
+
+// src/shared/download/archive.ts
+import fs7 from "node:fs";
+import path9 from "node:path";
+import crypto from "node:crypto";
+
+// src/shared/scripts.ts
+import fs6 from "node:fs";
+import path8 from "node:path";
+import { fileURLToPath } from "node:url";
+var HERE = path8.dirname(fileURLToPath(import.meta.url));
+function sandboxScriptsDir() {
+  const candidates = [path8.resolve(HERE, "..", "sandbox"), path8.resolve(HERE, "..", "..", "sandbox")];
+  return candidates.find((dir) => fs6.existsSync(path8.join(dir, "boot", "bootstrap.ps1"))) ?? candidates[candidates.length - 1];
+}
+function scriptArgs(name, args = []) {
+  return [
+    "-NoLogo",
+    "-NoProfile",
+    "-NonInteractive",
+    "-ExecutionPolicy",
+    "Bypass",
+    "-File",
+    path8.join(sandboxScriptsDir(), "scripts", name),
+    ...args
+  ];
+}
+
+// src/shared/download/spawn.ts
+import { spawn } from "node:child_process";
+function spawnAsync(file2, args, options = {}) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...options });
+    child.once("error", reject);
+    child.once("close", (code) => resolve(code ?? -1));
   });
-  const size = Number(response.headers.get("content-length")) || 0;
-  const report = size > 0 ? downloadWatcher?.() ?? null : null;
-  let received = 0;
-  let tenth = 0;
-  let reportedAt = Date.now();
-  const tap = new Transform({ transform(chunk, _encoding, done) {
-    for (const c of checks) c.hash.update(chunk);
-    if (report) {
-      received += chunk.length;
-      const now2 = Math.floor(received * 10 / size);
-      if (now2 !== tenth || Date.now() - reportedAt > 5e3) {
-        tenth = now2;
-        reportedAt = Date.now();
-        try {
-          report(Math.min(1, received / size));
-        } catch {
-        }
+}
+
+// src/shared/download/archive.ts
+function stagingFolder(destination) {
+  return destination + ".staging-" + crypto.randomBytes(3).toString("hex");
+}
+function moveIntoPlace(work, destination) {
+  safeRemove(destination, path9.dirname(destination));
+  fs7.mkdirSync(path9.dirname(destination), { recursive: true });
+  fs7.renameSync(work, destination);
+}
+async function extractArchive(archive, destination, members2 = []) {
+  fs7.mkdirSync(destination, { recursive: true });
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
+    const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
+    if (zip !== archive) fs7.copyFileSync(archive, zip);
+    status = await spawnAsync(
+      SYSTEM.powershell(),
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+    );
+  }
+  if (status !== 0) throw new Error("Could not extract " + archive);
+}
+function findFile(root, name, maxDepth = 4) {
+  if (maxDepth < 0 || !fs7.existsSync(root)) return null;
+  const entries = fs7.readdirSync(root, { withFileTypes: true });
+  for (const entry of entries)
+    if (entry.isFile() && entry.name.toLowerCase() === name.toLowerCase()) return path9.join(root, entry.name);
+  for (const entry of entries)
+    if (entry.isDirectory()) {
+      const found = findFile(path9.join(root, entry.name), name, maxDepth - 1);
+      if (found) return found;
+    }
+  return null;
+}
+
+// src/shared/download/downloader.ts
+import fs8 from "node:fs";
+import path10 from "node:path";
+import crypto2 from "node:crypto";
+import { Readable, Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+var Downloader = class {
+  /** downloads.requireChecksum: refuse anything without an expected hash. The guest sets it from session.json. */
+  requireChecksum = false;
+  watcher = null;
+  /** Reports coarse progress of the downloads that start from now on to `watcher` (null: stop). */
+  watch(watcher) {
+    this.watcher = watcher;
+  }
+  /**
+   * Streams a download to disk, hashing as it goes: big archives (PostgreSQL is ~330 MB) never sit in memory, and the
+   * event loop stays free so other toolchains keep downloading meanwhile. A mismatch (or any failure) leaves no file
+   * behind.
+   */
+  async file(url2, destination, expected = null) {
+    const sums = typeof expected === "string" || expected === null ? { sha256: expected } : expected;
+    if (this.requireChecksum && !sums.sha256?.trim() && !sums.sha512?.trim()) {
+      throw new Error(
+        "Refusing to download " + path10.basename(destination) + " (" + url2 + "): no checksum is published for it, and downloads.requireChecksum is on. Turn that setting off to allow downloads that cannot be verified."
+      );
+    }
+    const response = await fetchRetry(url2, {}, 3, 20 * 60 * 1e3);
+    if (!response.body) throw new Error("Empty response for " + url2);
+    fs8.mkdirSync(path10.dirname(destination), { recursive: true });
+    const checks = ["sha256", "sha512"].flatMap((kind) => {
+      const want = sums[kind]?.trim().toLowerCase();
+      return want ? [{ want, hash: crypto2.createHash(kind) }] : [];
+    });
+    const size = Number(response.headers.get("content-length")) || 0;
+    const report = size > 0 ? this.watcher?.() ?? null : null;
+    let received = 0;
+    let tenth = 0;
+    let reportedAt = Date.now();
+    const tap = new Transform({
+      transform(chunk, _encoding, done) {
+        for (const c of checks) c.hash.update(chunk);
+        if (report) {
+          received += chunk.length;
+          const now = Math.floor(received * 10 / size);
+          if (now !== tenth || Date.now() - reportedAt > 5e3) {
+            tenth = now;
+            reportedAt = Date.now();
+            try {
+              report(Math.min(1, received / size));
+            } catch {
+            }
+          }
+        }
+        done(null, chunk);
       }
+    });
+    const partial2 = destination + ".part";
+    try {
+      await pipeline(Readable.fromWeb(response.body), tap, fs8.createWriteStream(partial2));
+      if (checks.some((c) => c.hash.digest("hex") !== c.want)) throw new Error("Checksum mismatch for " + url2);
+      fs8.rmSync(destination, { force: true });
+      fs8.renameSync(partial2, destination);
+    } finally {
+      fs8.rmSync(partial2, { force: true });
+    }
+  }
+  /**
+   * Downloads + extracts into `destination` atomically (staging folder, then rename). With `locate`, only the folder
+   * holding that file is kept (`up` folders above it, e.g. locate ruby.exe with up 1 keeps the folder around bin).
+   */
+  async archive(url2, destination, options = {}) {
+    const work = stagingFolder(destination);
+    try {
+      const archive = path10.join(work, options.fileName ?? path10.basename(new URL(url2).pathname));
+      await this.file(url2, archive, { sha256: options.sha256, sha512: options.sha512 });
+      const extracted = path10.join(work, "x");
+      await extractArchive(archive, extracted, options.members);
+      let root = extracted;
+      if (options.locate) {
+        const found = findFile(extracted, options.locate);
+        if (!found) throw new Error(options.locate + " not found in " + url2);
+        root = path10.dirname(found);
+        for (let i = 0; i < (options.up ?? 0) && path10.dirname(root).startsWith(extracted); i++)
+          root = path10.dirname(root);
+      }
+      moveIntoPlace(root, destination);
+    } finally {
+      safeRemove(work, path10.dirname(work));
     }
-    done(null, chunk);
-  } });
-  const partial2 = destination + ".part";
-  try {
-    await pipeline(Readable.fromWeb(response.body), tap, fs3.createWriteStream(partial2));
-    if (checks.some((c) => c.hash.digest("hex") !== c.want)) throw new Error("Checksum mismatch for " + url2);
-    fs3.rmSync(destination, { force: true });
-    fs3.renameSync(partial2, destination);
-  } finally {
-    fs3.rmSync(partial2, { force: true });
   }
 };
-var spawnAsync = (file2, args, options = {}) => new Promise((resolve, reject) => {
-  const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...options });
-  child.once("error", reject);
-  child.once("close", (code) => resolve(code ?? -1));
+var downloader = new Downloader();
+
+// src/shared/download/github.ts
+var toAsset = (asset) => ({
+  url: asset.browser_download_url,
+  name: asset.name,
+  sha256: asset.digest?.startsWith("sha256:") ? asset.digest.slice(7) : null
 });
-var toAsset = (asset) => ({ url: asset.browser_download_url, name: asset.name, sha256: asset.digest?.startsWith("sha256:") ? asset.digest.slice(7) : null });
-var githubAsset = async (repo, pattern, searchOlder = false) => {
+async function githubAsset(repo, pattern, searchOlder = false) {
   let latest;
   try {
     latest = await fetchJson("https://api.github.com/repos/" + repo + "/releases/latest");
@@ -25968,331 +27171,388 @@ var githubAsset = async (repo, pattern, searchOlder = false) => {
   const hit = latest.assets.find((a) => pattern.test(a.name));
   if (hit) return toAsset(hit);
   if (searchOlder) {
-    const releases = await fetchJson("https://api.github.com/repos/" + repo + "/releases?per_page=100");
+    const releases = await fetchJson(
+      "https://api.github.com/repos/" + repo + "/releases?per_page=100"
+    );
     for (const release of releases.filter((r) => !r.prerelease && !r.draft)) {
       const older = release.assets.find((a) => pattern.test(a.name));
       if (older) return toAsset(older);
     }
   }
-  throw new Error("No asset matching " + pattern + " in the " + (searchOlder ? "stable" : "latest") + " " + repo + " release(s)");
-};
-var parseReleasePage = (html) => {
+  throw new Error(
+    "No asset matching " + pattern + " in the " + (searchOlder ? "stable" : "latest") + " " + repo + " release(s)"
+  );
+}
+function parseReleasePage(html) {
   const links = [...html.matchAll(/href="(\/[^"]+\/releases\/download\/[^"]+)"/g)];
   return links.map((link, i) => {
     const digest = /sha256:([0-9a-f]{64})/.exec(html.slice(link.index, links[i + 1]?.index ?? html.length))?.[1] ?? null;
     return { url: "https://github.com" + link[1], name: decodeURIComponent(link[1].split("/").pop()), sha256: digest };
   });
-};
-var latestGithubTag = async (repo) => {
+}
+async function latestGithubTag(repo) {
   const latest = await fetchRetry("https://github.com/" + repo + "/releases/latest", {}, 2, 2e4);
   const tag = decodeURIComponent(latest.url.split("/releases/tag/")[1] ?? "");
   return tag || Promise.reject(new Error("Could not find the latest release of " + repo));
-};
-var parseReleaseTags = (html, repo) => {
+}
+function parseReleaseTags(html, repo) {
   const escaped = repo.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&");
-  const tags = [...html.matchAll(new RegExp('href="/' + escaped + '/releases/tag/([^"?#]+)"', "gi"))].map((m) => decodeURIComponent(m[1]));
+  const tags = [...html.matchAll(new RegExp('href="/' + escaped + '/releases/tag/([^"?#]+)"', "gi"))].map(
+    (m) => decodeURIComponent(m[1])
+  );
   return [...new Set(tags)];
-};
+}
 var OLDER_RELEASES = 10;
 var githubAssetFromPage = async (repo, pattern, searchOlder) => {
-  const assetsOf = async (tag) => parseReleasePage(await fetchText("https://github.com/" + repo + "/releases/expanded_assets/" + encodeURIComponent(tag))).find((a) => pattern.test(a.name));
+  const assetsOf = async (tag) => parseReleasePage(
+    await fetchText("https://github.com/" + repo + "/releases/expanded_assets/" + encodeURIComponent(tag))
+  ).find((a) => pattern.test(a.name));
   const latest = await latestGithubTag(repo);
   const hit = await assetsOf(latest);
   if (hit) return hit;
   if (searchOlder) {
-    const older = parseReleaseTags(await fetchText("https://github.com/" + repo + "/releases"), repo).filter((t) => t !== latest);
+    const older = parseReleaseTags(await fetchText("https://github.com/" + repo + "/releases"), repo).filter(
+      (t) => t !== latest
+    );
     for (const tag of older.slice(0, OLDER_RELEASES)) {
       const found = await assetsOf(tag);
       if (found) return found;
     }
   }
-  throw new Error("No asset matching " + pattern + " in " + repo + " " + latest + (searchOlder ? " or the releases before it" : ""));
+  throw new Error(
+    "No asset matching " + pattern + " in " + repo + " " + latest + (searchOlder ? " or the releases before it" : "")
+  );
 };
-var extractArchive = async (archive, destination, members2 = []) => {
-  fs3.mkdirSync(destination, { recursive: true });
-  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
-  if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
-    const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
-    if (zip !== archive) fs3.copyFileSync(archive, zip);
-    status = await spawnAsync(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-Command", "Expand-Archive -LiteralPath '" + zip.replace(/'/g, "''") + "' -DestinationPath '" + destination.replace(/'/g, "''") + "' -Force"]);
+
+// src/guest/runtime/session.ts
+var session = JSON.parse(
+  fs9.readFileSync(path11.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, "")
+);
+downloader.requireChecksum = session.downloads?.requireChecksum === true;
+var workspace = process.env.AGENT_WORKSPACE ?? session.workspace;
+var stateDir = path11.join(dataDir, session.persistAgentState ? "state" : "state-session");
+var claudeDir = path11.join(stateDir, "claude");
+
+// src/guest/runtime/project-context.ts
+var store = new AsyncLocalStorage();
+function projectWorkspace() {
+  return store.getStore()?.workspace ?? workspace;
+}
+function duringSession() {
+  return store.getStore()?.duringSession ?? false;
+}
+
+// src/guest/databases/database-server.ts
+import { spawnSync } from "node:child_process";
+function listenerPid(port) {
+  const out = spawnSync(SYSTEM.netstat(), ["-ano", "-p", "TCP"], { encoding: "utf8", windowsHide: true }).stdout ?? "";
+  const hit = out.split(/\r?\n/).map((l) => /^\s*TCP\s+\S+:(\d+)\s+\S+\s+LISTENING\s+(\d+)/.exec(l)).find((m) => m && Number(m[1]) === port);
+  return hit ? Number(hit[2]) : null;
+}
+function killListeners(plan) {
+  for (const port of [plan.port, plan.adminPort ?? 0]) {
+    const pid = port && listenerPid(port);
+    if (pid)
+      try {
+        process.kill(pid);
+      } catch {
+      }
   }
-  if (status !== 0) throw new Error("Could not extract " + archive);
-};
-var findFile = (root, name, maxDepth = 4) => {
-  if (maxDepth < 0 || !fs3.existsSync(root)) return null;
-  const entries = fs3.readdirSync(root, { withFileTypes: true });
-  for (const entry of entries) if (entry.isFile() && entry.name.toLowerCase() === name.toLowerCase()) return path4.join(root, entry.name);
-  for (const entry of entries) if (entry.isDirectory()) {
-    const found = findFile(path4.join(root, entry.name), name, maxDepth - 1);
-    if (found) return found;
+}
+var DatabaseServer = class {
+  get label() {
+    return DATABASE_NAMES[this.id];
+  }
+  /** Ends whatever listens on the server's port (and its admin UI's port). */
+  async stop(plan) {
+    killListeners(plan);
   }
-  return null;
 };
-var installArchive = async (url2, destination, options = {}) => {
-  const work = stagingFolder(destination);
+
+// src/guest/databases/dynamodb.ts
+import fs17 from "node:fs";
+import path17 from "node:path";
+import { spawn as spawn3 } from "node:child_process";
+
+// src/guest/runtime/process.ts
+import fs10 from "node:fs";
+import os3 from "node:os";
+import path12 from "node:path";
+import { spawnSync as spawnSync2 } from "node:child_process";
+function exec(file2, args, options = {}) {
+  const result = spawnSync2(file2, args, { stdio: "inherit", windowsHide: true, ...options });
+  if (result.error) throw result.error;
+  if (result.status !== 0)
+    throw new Error(path12.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + result.status);
+}
+async function execAsync(file2, args, options = {}) {
+  const code = await spawnAsync(file2, args, { stdio: "inherit", ...options });
+  if (code !== 0)
+    throw new Error(path12.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
+}
+function runScript(name, args = []) {
+  exec(SYSTEM.powershell(), scriptArgs(name, args));
+}
+function runScriptWithJson(name, param, data, args = []) {
+  const dir = fs10.mkdtempSync(path12.join(os3.tmpdir(), "sbx-"));
+  const file2 = path12.join(dir, "input.json");
   try {
-    const archive = path4.join(work, options.fileName ?? path4.basename(new URL(url2).pathname));
-    await download(url2, archive, { sha256: options.sha256, sha512: options.sha512 });
-    const extracted = path4.join(work, "x");
-    await extractArchive(archive, extracted, options.members);
-    let root = extracted;
-    if (options.locate) {
-      const found = findFile(extracted, options.locate);
-      if (!found) throw new Error(options.locate + " not found in " + url2);
-      root = path4.dirname(found);
-      for (let i = 0; i < (options.up ?? 0) && path4.dirname(root).startsWith(extracted); i++) root = path4.dirname(root);
-    }
-    moveIntoPlace(root, destination);
+    fs10.writeFileSync(file2, JSON.stringify(data), "utf8");
+    runScript(name, ["-" + param, file2, ...args]);
   } finally {
-    safeRemove(work, path4.dirname(work));
+    fs10.rmSync(dir, { recursive: true, force: true });
   }
-};
+}
 
-// src/shared/rundir.ts
-import fs4 from "node:fs";
-import path5 from "node:path";
-var MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
-var safeId = (id) => Id.parse(id);
-var runPaths = (dataDir2) => {
-  const run2 = path5.join(dataDir2, "run");
-  const file2 = (dir) => (id) => path5.join(run2, dir, safeId(id) + ".json");
-  return {
-    run: run2,
-    sandbox: path5.join(run2, "sandbox.json"),
-    requests: path5.join(run2, "requests"),
-    responses: path5.join(run2, "responses"),
-    sessions: path5.join(run2, "sessions"),
-    projects: path5.join(run2, "projects"),
-    /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
-    audit: path5.join(run2, "audit"),
-    request: file2("requests"),
-    response: file2("responses"),
-    session: file2("sessions"),
-    project: file2("projects")
-  };
-};
-var pause = (ms) => {
-  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
-};
-var writeJsonAtomic = (file2, value) => writeFileAtomic(file2, JSON.stringify(value, null, 2) + "\n");
-var writeFileAtomic = (file2, text) => {
-  assertTestWritable(file2);
-  fs4.mkdirSync(path5.dirname(file2), { recursive: true });
-  const temp = file2 + "." + process.pid + "-" + Math.random().toString(36).slice(2) + ".tmp";
-  fs4.writeFileSync(temp, text, { encoding: "utf8", flag: "wx" });
-  for (let attempt = 1; ; attempt++) {
-    try {
-      fs4.renameSync(temp, file2);
-      return;
-    } catch (e) {
-      const code = e.code;
-      if (attempt >= 8 || code !== "EPERM" && code !== "EBUSY" && code !== "EACCES") {
-        fs4.rmSync(temp, { force: true });
-        throw e;
-      }
-      pause(50 * attempt);
-    }
-  }
-};
+// src/guest/runtime/fs.ts
+import fs11 from "node:fs";
+function exists(p) {
+  return fs11.existsSync(p);
+}
+function mkdirp(p) {
+  fs11.mkdirSync(p, { recursive: true });
+  return p;
+}
 
-// src/guest/env.ts
-var isWin = process.platform === "win32";
-var dryRun = process.env.AGENT_DRY_RUN === "1";
-var testMode = process.env.AGENT_SANDBOX_TEST === "1";
-var launchDir = process.env.AGENT_LAUNCH_DIR ?? "C:\\AgentLaunch";
-var dataDir = process.env.AGENT_DATA_DIR ?? "C:\\AgentData";
-var hostToolsDir = process.env.AGENT_HOST_TOOLS_DIR ?? "C:\\HostTools";
-var localDir = process.env.AGENT_LOCAL_DIR ?? "C:\\nvm";
-var toolsDir = path6.join(dataDir, "tools");
-var logsDir = path6.join(dataDir, "logs");
-var run = runPaths(dataDir);
-var session = JSON.parse(fs5.readFileSync(path6.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, ""));
-setChecksumRequired(session.downloads?.requireChecksum === true);
-var workspace = process.env.AGENT_WORKSPACE ?? session.workspace;
-var stateDir = path6.join(dataDir, session.persistAgentState ? "state" : "state-session");
-var claudeDir = path6.join(stateDir, "claude");
-fs5.mkdirSync(logsDir, { recursive: true });
-var logFile = path6.join(logsDir, (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log");
-var append = (line) => {
+// src/guest/toolchains/languages/java.ts
+import fs15 from "node:fs";
+import path15 from "node:path";
+
+// src/guest/toolchains/tool-env.ts
+import path13 from "node:path";
+function emptyEnv() {
+  return { vars: {}, prepend: [], append: [], summary: [] };
+}
+var arch = process.arch === "arm64" ? "arm64" : "x64";
+function tool(...parts) {
+  return path13.join(toolsDir, ...parts);
+}
+
+// src/guest/toolchains/version-cache.ts
+import fs13 from "node:fs";
+
+// src/guest/toolchains/state-file.ts
+import fs12 from "node:fs";
+function readState(file2, schema, empty) {
   try {
-    fs5.appendFileSync(logFile, line + "\n");
+    return schema.safeParse(JSON.parse(fs12.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""))).data ?? empty;
   } catch {
+    return empty;
   }
-};
-var log = (message) => {
-  console.log(message);
-  append(message);
-};
-var warn = (message) => {
-  console.warn("\x1B[33mWARNING: " + message + "\x1B[0m");
-  append("WARNING: " + message);
-};
-var errMsg = (e) => e instanceof Error ? e.message : String(e);
-var exists = (p) => fs5.existsSync(p);
-var mkdirp = (p) => {
-  fs5.mkdirSync(p, { recursive: true });
-  return p;
-};
-var exec = (file2, args, options = {}) => {
-  const result = spawnSync(file2, args, { stdio: "inherit", windowsHide: true, ...options });
-  if (result.error) throw result.error;
-  if (result.status !== 0) throw new Error(path6.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + result.status);
-};
-var execAsync = async (file2, args, options = {}) => {
-  const code = await spawnAsync(file2, args, { stdio: "inherit", ...options });
-  if (code !== 0) throw new Error(path6.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
-};
-var powershell = (script) => exec(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script]);
+}
 
-// src/guest/toolchains/common.ts
-import fs6 from "node:fs";
-import path7 from "node:path";
+// src/guest/toolchains/version-cache.ts
+var ResolvedSchema = external_exports.record(
+  external_exports.string(),
+  external_exports.union([external_exports.string(), external_exports.strictObject({ value: external_exports.string(), at: external_exports.number() })])
+);
+var FRESH_MS = 24 * 60 * 60 * 1e3;
+function isNetworkError(e) {
+  return /fetch failed|timed? ?out|aborted|ENOTFOUND|EAI_AGAIN|ECONN|ENETUNREACH|EHOSTUNREACH|HTTP 5\d\d|socket/i.test(
+    errMsg(e) + " " + String(e?.cause ?? "")
+  );
+}
+var VersionCache = class {
+  constructor(file2 = () => tool("resolved-versions.json")) {
+    this.file = file2;
+  }
+  file;
+  /** Set after a network failure: the remaining lookups go straight to the remembered versions. */
+  offline = false;
+  /**
+   * Resolves a version online and remembers it for a day (provisioning.refresh looks again). After a network failure
+   * the remaining lookups use the remembered versions instead of each waiting for the network; other errors (no such
+   * version) do not.
+   */
+  async resolve(key, resolve) {
+    const cached2 = this.remembered()[key];
+    if (cached2 && (this.offline || !session.provisioning.refresh && Date.now() - cached2.at < FRESH_MS))
+      return cached2.value;
+    try {
+      const value = await resolve();
+      fs13.mkdirSync(toolsDir, { recursive: true });
+      writeJsonAtomic(this.file(), { ...this.remembered(), [key]: { value, at: Date.now() } });
+      return value;
+    } catch (e) {
+      if (isNetworkError(e)) this.offline = true;
+      if (!cached2) throw e;
+      warn(
+        "Could not look up the latest " + key + " online (" + errMsg(e) + "); using " + cached2.value + " from an earlier start."
+      );
+      return cached2.value;
+    }
+  }
+  remembered() {
+    return Object.fromEntries(
+      Object.entries(readState(this.file(), ResolvedSchema, {})).map(([k, v]) => [
+        k,
+        typeof v === "string" ? { value: v, at: 0 } : v
+      ])
+    );
+  }
+};
+var versionCache = new VersionCache();
+function resolveCached(key, resolve) {
+  return versionCache.resolve(key, resolve);
+}
 
-// src/guest/project-context.ts
-import { AsyncLocalStorage } from "node:async_hooks";
-var store = new AsyncLocalStorage();
-var projectWorkspace = () => store.getStore()?.workspace ?? workspace;
-var duringSession = () => store.getStore()?.duringSession ?? false;
+// src/guest/toolchains/detect.ts
+import fs14 from "node:fs";
+import path14 from "node:path";
 
-// src/guest/toolchains/versions.ts
-var specFromVersionFile = (text) => /(\d+(?:\.\d+){0,2})/.exec(text.split(/\r?\n/).map((l) => l.replace(/#.*$/, "").trim()).find(Boolean) ?? "")?.[1] ?? null;
-var javaMajorFrom = (text, sdkmanrc = false) => {
+// src/core/detect/versions.ts
+function specFromVersionFile(text) {
+  return /(\d+(?:\.\d+){0,2})/.exec(
+    text.split(/\r?\n/).map((l) => l.replace(/#.*$/, "").trim()).find(Boolean) ?? ""
+  )?.[1] ?? null;
+}
+function javaMajorFrom(text, sdkmanrc = false) {
   const line = sdkmanrc ? /^\s*java\s*=\s*(.+)$/m.exec(text)?.[1] : text;
   const spec = line ? specFromVersionFile(line) : null;
   if (!spec) return null;
   const [major, minor] = spec.split(".");
   return major === "1" && minor ? minor : major;
-};
+}
 
-// src/core/detect-toolchains.ts
+// src/core/detect/toolchains.ts
 var MARKERS = {
-  python: ["pyproject.toml", "requirements.txt", "setup.py", "setup.cfg", "Pipfile", "uv.lock", "poetry.lock", ".python-version", "*.py", "*.ipynb"],
+  python: [
+    "pyproject.toml",
+    "requirements.txt",
+    "setup.py",
+    "setup.cfg",
+    "Pipfile",
+    "uv.lock",
+    "poetry.lock",
+    ".python-version",
+    "*.py",
+    "*.ipynb"
+  ],
   rust: ["Cargo.toml", "rust-toolchain", "rust-toolchain.toml"],
   msvc: ["*.vcxproj", "CMakePresets.json", "CMakeUserPresets.json"],
-  cpp: ["CMakeLists.txt", "Makefile", "meson.build", "premake5.lua", "Cargo.toml", "*.vcxproj", "*.c", "*.cpp", "*.cc", "*.h", "*.hpp"],
+  cpp: [
+    "CMakeLists.txt",
+    "Makefile",
+    "meson.build",
+    "premake5.lua",
+    "Cargo.toml",
+    "*.vcxproj",
+    "*.c",
+    "*.cpp",
+    "*.cc",
+    "*.h",
+    "*.hpp"
+  ],
   dotnet: ["*.sln", "*.slnx", "*.csproj", "*.fsproj", "*.vbproj", "global.json", "*.cs"],
   go: ["go.mod", "go.work", "*.go"],
-  java: ["pom.xml", "build.gradle", "build.gradle.kts", "settings.gradle", "settings.gradle.kts", "mvnw", "gradlew", ".java-version", ".sdkmanrc", "*.java"],
+  java: [
+    "pom.xml",
+    "build.gradle",
+    "build.gradle.kts",
+    "settings.gradle",
+    "settings.gradle.kts",
+    "mvnw",
+    "gradlew",
+    ".java-version",
+    ".sdkmanrc",
+    "*.java"
+  ],
   ruby: ["Gemfile", "*.gemspec", ".ruby-version", "*.rb"],
   php: ["composer.json", "artisan", ".php-version", "*.php"],
   deno: ["deno.json", "deno.jsonc", "deno.lock"],
+  bun: ["bun.lock", "bun.lockb", "bunfig.toml"],
+  uv: ["uv.lock"],
+  // VS Code is decided from this PC (hints are not needed): see decideToolchains.
+  vscode: [],
   // Windows PowerShell 5.1 runs any .ps1: PowerShell 7 is decided from script contents (hints.pwsh) or this PC.
   pwsh: []
 };
 var AUTO_TOOLCHAINS = Object.keys(MARKERS);
 var PROJECT_FILES = [.../* @__PURE__ */ new Set([...Object.values(MARKERS).flat(), "package.json", "deno.json", "*.ts", "*.js"])];
 
-// src/guest/toolchains/common.ts
-var emptyEnv = () => ({ vars: {}, prepend: [], append: [], summary: [] });
-var arch = process.arch === "arm64" ? "arm64" : "x64";
-var tool = (...parts) => path7.join(toolsDir, ...parts);
-var readState = (file2, schema, empty) => {
-  try {
-    return schema.safeParse(JSON.parse(fs6.readFileSync(file2, "utf8").replace(/^/, ""))).data ?? empty;
-  } catch {
-    return empty;
-  }
-};
-var Resolved = external_exports.record(external_exports.string(), external_exports.union([external_exports.string(), external_exports.strictObject({ value: external_exports.string(), at: external_exports.number() })]));
-var resolvedFile = () => tool("resolved-versions.json");
-var remembered = () => Object.fromEntries(Object.entries(readState(resolvedFile(), Resolved, {})).map(([k, v]) => [k, typeof v === "string" ? { value: v, at: 0 } : v]));
-var FRESH_MS = 24 * 60 * 60 * 1e3;
-var offline = false;
-var networkError = (e) => /fetch failed|timed? ?out|aborted|ENOTFOUND|EAI_AGAIN|ECONN|ENETUNREACH|EHOSTUNREACH|HTTP 5\d\d|socket/i.test(errMsg(e) + " " + String(e?.cause ?? ""));
-var resolveCached = async (key, resolve) => {
-  const cached2 = remembered()[key];
-  if (cached2 && (offline || !session.provisioning.refresh && Date.now() - cached2.at < FRESH_MS)) return cached2.value;
-  try {
-    const value = await resolve();
-    fs6.mkdirSync(toolsDir, { recursive: true });
-    writeJsonAtomic(resolvedFile(), { ...remembered(), [key]: { value, at: Date.now() } });
-    return value;
-  } catch (e) {
-    if (networkError(e)) offline = true;
-    if (!cached2) throw e;
-    warn("Could not look up the latest " + key + " online (" + errMsg(e) + "); using " + cached2.value + " from an earlier start.");
-    return cached2.value;
-  }
-};
-var installFromGithub = async (repo, pattern, o) => {
-  const asset = await githubAsset(repo, pattern, o.searchOlder);
-  log("Downloading " + (typeof o.what === "string" ? o.what : o.what(asset)) + " ...");
-  await installArchive(asset.url, o.dest, { sha256: asset.sha256, fileName: asset.name, ...o.locate ? { locate: o.locate } : {}, ...o.up ? { up: o.up } : {} });
-};
-var versionFromFiles = (files, parse3 = (t) => specFromVersionFile(t)) => {
+// src/guest/toolchains/detect.ts
+function versionFromFiles(files, parse3 = (t) => specFromVersionFile(t)) {
   for (const name of files) {
-    const file2 = path7.join(projectWorkspace(), name);
+    const file2 = path14.join(projectWorkspace(), name);
     if (!exists(file2)) continue;
-    const spec = parse3(fs6.readFileSync(file2, "utf8"), name);
+    const spec = parse3(fs14.readFileSync(file2, "utf8"), name);
     if (spec) return { spec, source: name };
   }
   return null;
-};
-
-// src/guest/toolchains/databases/dynamodb.ts
-import fs9 from "node:fs";
-import path10 from "node:path";
-import { spawn as spawn3 } from "node:child_process";
+}
 
-// src/guest/toolchains/java.ts
-import fs7 from "node:fs";
-import path8 from "node:path";
+// src/guest/toolchains/languages/java.ts
 var ADOPTIUM = "https://api.adoptium.net/v3";
 var temurin = async (major) => {
-  const assets = await fetchJson(ADOPTIUM + "/assets/latest/" + major + "/hotspot?image_type=jdk&os=windows&vendor=eclipse&architecture=" + (arch === "arm64" ? "aarch64" : "x64"));
+  const assets = await fetchJson(
+    ADOPTIUM + "/assets/latest/" + major + "/hotspot?image_type=jdk&os=windows&vendor=eclipse&architecture=" + (arch === "arm64" ? "aarch64" : "x64")
+  );
   return assets.find((a) => a.binary.package.name.endsWith(".zip")) ?? Promise.reject(new Error("No Temurin " + major + " JDK zip for Windows"));
 };
 var javaMajor = async (config2) => {
-  const fromProject = versionFromFiles([".java-version", ".sdkmanrc"], (text, name) => javaMajorFrom(text, name === ".sdkmanrc"));
+  const fromProject = versionFromFiles(
+    [".java-version", ".sdkmanrc"],
+    (text, name) => javaMajorFrom(text, name === ".sdkmanrc")
+  );
   if (fromProject) return { major: fromProject.spec, source: fromProject.source };
   const spec = config2.version.trim().toLowerCase();
   if (spec !== "lts") return { major: javaMajorFrom(spec) ?? spec, source: "config" };
-  const lts = await resolveCached("java:lts", async () => String((await fetchJson(ADOPTIUM + "/info/available_releases")).most_recent_lts));
+  const lts = await resolveCached(
+    "java:lts",
+    async () => String((await fetchJson(ADOPTIUM + "/info/available_releases")).most_recent_lts)
+  );
   return { major: lts, source: "newest LTS" };
 };
 var setupJdk = async (env, config2) => {
   const { major, source } = await javaMajor(config2);
   const release = await resolveCached("java:" + major, async () => (await temurin(major)).release_name);
   const home = tool("java", release.replace(/[^A-Za-z0-9.-]/g, "_"));
-  if (!exists(path8.join(home, "bin", "java.exe"))) {
+  if (!exists(path15.join(home, "bin", "java.exe"))) {
     const asset = await temurin(major);
     log("Downloading Java " + release + " (JDK, ~200 MB once) ...");
-    await installArchive(asset.binary.package.link, home, { sha256: asset.binary.package.checksum, locate: "release", fileName: asset.binary.package.name });
+    await downloader.archive(asset.binary.package.link, home, {
+      sha256: asset.binary.package.checksum,
+      locate: "release",
+      fileName: asset.binary.package.name
+    });
   }
   env.vars.JAVA_HOME = home;
-  env.prepend.push(path8.join(home, "bin"));
+  env.prepend.push(path15.join(home, "bin"));
   env.summary.push("java: " + release + " (Temurin, from " + source + ")");
 };
-var ensureJdk = async () => {
+async function ensureJdk() {
   const root = tool("java");
-  const installed = exists(root) ? fs7.readdirSync(root).filter((d) => exists(path8.join(root, d, "bin", "java.exe"))).sort((a, b) => b.localeCompare(a, void 0, { numeric: true })) : [];
-  if (installed.length) return path8.join(root, installed[0]);
+  const installed = exists(root) ? fs15.readdirSync(root).filter((d) => exists(path15.join(root, d, "bin", "java.exe"))).sort((a, b) => b.localeCompare(a, void 0, { numeric: true })) : [];
+  if (installed.length) return path15.join(root, installed[0]);
   const scratch = emptyEnv();
   await setupJdk(scratch, { enabled: true, version: "lts", maven: false, gradle: false });
   return scratch.vars.JAVA_HOME;
-};
+}
 
-// src/guest/toolchains/databases/server.ts
-import fs8 from "node:fs";
-import path9 from "node:path";
+// src/guest/databases/server.ts
+import fs16 from "node:fs";
+import path16 from "node:path";
 import { spawn as spawn2 } from "node:child_process";
-var dataFor = (name) => path9.join(dataDir, "databases", name);
-var startServer = async (name, exe, args, port) => {
+function dataFor(name) {
+  return path16.join(dataDir, "databases", name);
+}
+async function startServer(name, exe, args, port) {
   if (await portOpen(port)) throw new Error("port " + port + " is already in use (change databases." + name + ".port)");
-  const logFile2 = path9.join(logsDir, name + ".log");
-  const out = fs8.openSync(logFile2, "a");
+  const logFile2 = path16.join(logsDir, name + ".log");
+  const out = fs16.openSync(logFile2, "a");
   spawn2(exe, args, { detached: true, stdio: ["ignore", out, out], windowsHide: true }).unref();
-  fs8.closeSync(out);
-  if (!await waitForPort(port, 60)) throw new Error(name + " did not start listening on port " + port + "; see " + logFile2);
-};
-var clearStaleLocks = async (dir, files, port) => {
+  fs16.closeSync(out);
+  if (!await waitForPort(port, 60))
+    throw new Error(name + " did not start listening on port " + port + "; see " + logFile2);
+}
+async function clearStaleLocks(dir, files, port) {
   if (await portOpen(port)) return;
-  for (const f of files) fs8.rmSync(path9.join(dir, f), { force: true });
-};
-var createOnce = async (data, marker, create) => {
-  if (exists(path9.join(data, marker))) return;
+  for (const f of files) fs16.rmSync(path16.join(dir, f), { force: true });
+}
+async function createOnce(data, marker, create) {
+  if (exists(path16.join(data, marker))) return;
   const existed = exists(data);
-  mkdirp(path9.dirname(data));
+  mkdirp(path16.dirname(data));
   try {
     await create();
   } catch (e) {
@@ -26304,217 +27564,353 @@ var createOnce = async (data, marker, create) => {
     }
     throw e;
   }
-};
+}
 
-// src/guest/toolchains/databases/dynamodb.ts
+// src/guest/databases/dynamodb.ts
 var DYNAMO_ZIP = "https://d1ni2b6xgvw0s0.cloudfront.net/v2.x/dynamodb_local_latest.zip";
-var setupDynamo = async (env, plan) => {
-  const java = path10.join(await ensureJdk(), "bin", "java.exe");
-  const home = tool("dynamodb-local");
-  if (!exists(path10.join(home, "DynamoDBLocal.jar"))) {
-    log("Downloading DynamoDB Local (~60 MB once) ...");
-    const sha256 = (await fetchText(DYNAMO_ZIP + ".sha256")).trim().split(/\s+/)[0];
-    await installArchive(DYNAMO_ZIP, home, { sha256, locate: "DynamoDBLocal.jar", fileName: "dynamodb_local.zip" });
-  }
-  const data = mkdirp(dataFor("dynamodb"));
-  await startServer("dynamodb", java, ["-Djava.library.path=" + path10.join(home, "DynamoDBLocal_lib"), "-jar", path10.join(home, "DynamoDBLocal.jar"), "-sharedDb", "-dbPath", data, "-port", String(plan.port)], plan.port);
-  const endpoint = "http://localhost:" + plan.port;
-  const aws = { AWS_ENDPOINT_URL_DYNAMODB: endpoint, DYNAMO_ENDPOINT: endpoint, AWS_ACCESS_KEY_ID: "local", AWS_SECRET_ACCESS_KEY: "local", AWS_REGION: "us-east-1", AWS_DEFAULT_REGION: "us-east-1" };
-  Object.assign(env.vars, aws);
-  env.summary.push("dynamodb (DynamoDB Local): " + endpoint + " (AWS SDKs use it automatically via AWS_ENDPOINT_URL_DYNAMODB; dummy credentials)");
-  if (!plan.adminPort) return;
-  const prefix = tool("dynamodb-admin");
-  const script = path10.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
-  if (!exists(script)) {
-    log("Installing dynamodb-admin, the DynamoDB web UI (~20 MB once) ...");
-    const npmCli = path10.join(path10.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
-    await execAsync(process.execPath, [npmCli, "install", "--global", "--prefix", prefix, "dynamodb-admin", "--no-fund", "--no-audit"], { stdio: "ignore" });
-  }
-  if (await portOpen(plan.adminPort)) {
-    env.summary.push("dynamodb-admin: NOT started, port " + plan.adminPort + " is in use (change databases.dynamodb.adminPort)");
-    return;
+var DynamoServer = class extends DatabaseServer {
+  id = "dynamodb";
+  /**
+   * Amazon's DynamoDB Local (a Java program; the Java toolchain step runs first, else this installs the LTS JDK) and
+   * dynamodb-admin, the web UI to browse and edit tables, installed with the runner's own npm. Every AWS SDK picks the
+   * local endpoint up from AWS_ENDPOINT_URL_DYNAMODB, with dummy credentials (real ones never reach the sandbox).
+   */
+  async start(env, plan) {
+    const java = path17.join(await ensureJdk(), "bin", "java.exe");
+    const home = tool("dynamodb-local");
+    if (!exists(path17.join(home, "DynamoDBLocal.jar"))) {
+      log("Downloading DynamoDB Local (~60 MB once) ...");
+      const sha256 = (await fetchText(DYNAMO_ZIP + ".sha256")).trim().split(/\s+/)[0];
+      await downloader.archive(DYNAMO_ZIP, home, {
+        sha256,
+        locate: "DynamoDBLocal.jar",
+        fileName: "dynamodb_local.zip"
+      });
+    }
+    const data = mkdirp(dataFor("dynamodb"));
+    await startServer(
+      "dynamodb",
+      java,
+      [
+        "-Djava.library.path=" + path17.join(home, "DynamoDBLocal_lib"),
+        "-jar",
+        path17.join(home, "DynamoDBLocal.jar"),
+        "-sharedDb",
+        "-dbPath",
+        data,
+        "-port",
+        String(plan.port)
+      ],
+      plan.port
+    );
+    const endpoint = "http://localhost:" + plan.port;
+    const aws = {
+      AWS_ENDPOINT_URL_DYNAMODB: endpoint,
+      DYNAMO_ENDPOINT: endpoint,
+      AWS_ACCESS_KEY_ID: "local",
+      AWS_SECRET_ACCESS_KEY: "local",
+      AWS_REGION: "us-east-1",
+      AWS_DEFAULT_REGION: "us-east-1"
+    };
+    Object.assign(env.vars, aws);
+    env.summary.push(
+      "dynamodb (DynamoDB Local): " + endpoint + " (AWS SDKs use it automatically via AWS_ENDPOINT_URL_DYNAMODB; dummy credentials)"
+    );
+    if (!plan.adminPort) return;
+    const prefix = tool("dynamodb-admin");
+    const script = path17.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
+    if (!exists(script)) {
+      log("Installing dynamodb-admin, the DynamoDB web UI (~20 MB once) ...");
+      const npmCli = path17.join(path17.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+      await execAsync(
+        process.execPath,
+        [npmCli, "install", "--global", "--prefix", prefix, "dynamodb-admin", "--no-fund", "--no-audit"],
+        { stdio: "ignore" }
+      );
+    }
+    if (await portOpen(plan.adminPort)) {
+      env.summary.push(
+        "dynamodb-admin: NOT started, port " + plan.adminPort + " is in use (change databases.dynamodb.adminPort)"
+      );
+      return;
+    }
+    const out = fs17.openSync(path17.join(logsDir, "dynamodb-admin.log"), "a");
+    spawn3(
+      process.execPath,
+      [script, "--port", String(plan.adminPort), "--dynamo-endpoint", endpoint, "--skip-default-credentials"],
+      { detached: true, stdio: ["ignore", out, out], windowsHide: true, env: { ...process.env, ...aws } }
+    ).unref();
+    fs17.closeSync(out);
+    if (!await waitForPort(plan.adminPort, 30))
+      throw new Error("dynamodb-admin did not start; see " + path17.join(logsDir, "dynamodb-admin.log"));
+    env.summary.push(
+      "dynamodb-admin: http://localhost:" + plan.adminPort + " (browse and edit tables in the sandbox's browser)"
+    );
   }
-  const out = fs9.openSync(path10.join(logsDir, "dynamodb-admin.log"), "a");
-  spawn3(process.execPath, [script, "--port", String(plan.adminPort), "--dynamo-endpoint", endpoint, "--skip-default-credentials"], { detached: true, stdio: ["ignore", out, out], windowsHide: true, env: { ...process.env, ...aws } }).unref();
-  fs9.closeSync(out);
-  if (!await waitForPort(plan.adminPort, 30)) throw new Error("dynamodb-admin did not start; see " + path10.join(logsDir, "dynamodb-admin.log"));
-  env.summary.push("dynamodb-admin: http://localhost:" + plan.adminPort + " (browse and edit tables in the sandbox's browser)");
 };
 
-// src/guest/toolchains/databases/mongodb.ts
-import path11 from "node:path";
-var setupMongo = async (env, plan) => {
-  const find2 = async () => {
-    const { versions } = await fetchJson("https://downloads.mongodb.org/full.json");
-    const prod = versions.filter((v) => v.production_release);
-    const hit = plan.version === "latest" ? prod[0] : prod.find((v) => v.version === plan.version || v.version.startsWith(plan.version + "."));
-    const archive = hit?.downloads.find((d) => d.target === "windows" && d.arch === "x86_64" && d.edition === "base")?.archive;
-    return hit && archive ? { version: hit.version, archive } : Promise.reject(new Error("No MongoDB " + plan.version + " for Windows"));
-  };
-  const version2 = await resolveCached("mongodb:" + plan.version, async () => (await find2()).version);
-  const home = tool("mongodb", version2);
-  if (!exists(path11.join(home, "bin", "mongod.exe"))) {
-    const { archive } = await find2();
-    log("Downloading MongoDB " + version2 + " (~400 MB once) ...");
-    await installArchive(archive.url, home, { sha256: archive.sha256, locate: "mongod.exe", up: 1 });
-  }
-  const shell = tool("mongosh");
-  if (!exists(path11.join(shell, "mongosh.exe"))) {
-    await installFromGithub("mongodb-js/mongosh", /^mongosh-[\d.]+-win32-x64\.zip$/, { dest: shell, what: "mongosh, the MongoDB shell (~50 MB once)", locate: "mongosh.exe" });
-  }
-  const data = mkdirp(dataFor("mongodb"));
-  await clearStaleLocks(data, ["mongod.lock"], plan.port);
-  await startServer("mongodb", path11.join(home, "bin", "mongod.exe"), ["--dbpath", data, "--bind_ip", "127.0.0.1", "--port", String(plan.port)], plan.port);
-  env.prepend.push(path11.join(home, "bin"), shell);
-  env.summary.push("mongodb " + version2 + ": mongodb://127.0.0.1:" + plan.port + " (mongosh on PATH)");
+// src/guest/databases/mongodb.ts
+import path18 from "node:path";
+
+// src/guest/toolchains/install.ts
+async function installFromGithub(repo, pattern, o) {
+  const asset = await githubAsset(repo, pattern, o.searchOlder);
+  log("Downloading " + (typeof o.what === "string" ? o.what : o.what(asset)) + " ...");
+  await downloader.archive(asset.url, o.dest, {
+    sha256: asset.sha256,
+    fileName: asset.name,
+    ...o.locate ? { locate: o.locate } : {},
+    ...o.up ? { up: o.up } : {}
+  });
+}
+
+// src/guest/databases/mongodb.ts
+var MongoServer = class extends DatabaseServer {
+  id = "mongodb";
+  async start(env, plan) {
+    const find2 = async () => {
+      const { versions } = await fetchJson("https://downloads.mongodb.org/full.json");
+      const prod = versions.filter((v) => v.production_release);
+      const hit = plan.version === "latest" ? prod[0] : prod.find((v) => v.version === plan.version || v.version.startsWith(plan.version + "."));
+      const archive = hit?.downloads.find(
+        (d) => d.target === "windows" && d.arch === "x86_64" && d.edition === "base"
+      )?.archive;
+      return hit && archive ? { version: hit.version, archive } : Promise.reject(new Error("No MongoDB " + plan.version + " for Windows"));
+    };
+    const version2 = await resolveCached("mongodb:" + plan.version, async () => (await find2()).version);
+    const home = tool("mongodb", version2);
+    if (!exists(path18.join(home, "bin", "mongod.exe"))) {
+      const { archive } = await find2();
+      log("Downloading MongoDB " + version2 + " (~400 MB once) ...");
+      await downloader.archive(archive.url, home, { sha256: archive.sha256, locate: "mongod.exe", up: 1 });
+    }
+    const shell = tool("mongosh");
+    if (!exists(path18.join(shell, "mongosh.exe"))) {
+      await installFromGithub("mongodb-js/mongosh", /^mongosh-[\d.]+-win32-x64\.zip$/, {
+        dest: shell,
+        what: "mongosh, the MongoDB shell (~50 MB once)",
+        locate: "mongosh.exe"
+      });
+    }
+    const data = mkdirp(dataFor("mongodb"));
+    await clearStaleLocks(data, ["mongod.lock"], plan.port);
+    await startServer(
+      "mongodb",
+      path18.join(home, "bin", "mongod.exe"),
+      ["--dbpath", data, "--bind_ip", "127.0.0.1", "--port", String(plan.port)],
+      plan.port
+    );
+    env.prepend.push(path18.join(home, "bin"), shell);
+    env.summary.push("mongodb " + version2 + ": mongodb://127.0.0.1:" + plan.port + " (mongosh on PATH)");
+  }
 };
 
-// src/guest/toolchains/databases/mysql.ts
-import path12 from "node:path";
+// src/guest/databases/mysql.ts
+import path19 from "node:path";
 var MARIA = "https://downloads.mariadb.org/rest-api/mariadb/";
-var setupMysql = async (env, plan) => {
-  const series = await resolveCached("mariadb:" + plan.version, async () => {
-    if (plan.version !== "lts") return plan.version;
-    const { major_releases: all } = await fetchJson(MARIA);
-    return all.find((r) => r.release_status === "Stable" && r.release_support_type === "Long Term Support")?.release_id ?? Promise.reject(new Error("No MariaDB LTS release found"));
-  });
-  const latest = async () => {
-    const { releases } = await fetchJson(MARIA + series + "/latest/");
-    const [version3, release] = Object.entries(releases)[0] ?? [];
-    const zip = release?.files.find((f) => /-winx64\.zip$/.test(f.file_name));
-    return zip ? { version: version3, zip } : Promise.reject(new Error("No MariaDB " + series + " zip for Windows"));
-  };
-  const version2 = await resolveCached("mariadb-version:" + series, async () => (await latest()).version);
-  const home = tool("mariadb", version2);
-  const bin = path12.join(home, "bin");
-  if (!exists(path12.join(bin, "mariadbd.exe"))) {
-    const { zip } = await latest();
-    log("Downloading MariaDB " + version2 + " (~90 MB once) ...");
-    await installArchive(zip.file_download_url.replace(/^http:/, "https:"), home, { sha256: zip.checksum?.sha256sum ?? null, locate: "mariadbd.exe", up: 1, fileName: zip.file_name });
-  }
-  const data = dataFor("mariadb");
-  await createOnce(data, "mysql", async () => {
-    log("Creating the MariaDB database (first start) ...");
-    await execAsync(path12.join(bin, "mariadb-install-db.exe"), ["--datadir=" + data, "--port=" + plan.port], { stdio: "ignore" });
-  });
-  await startServer("mysql", path12.join(bin, "mariadbd.exe"), ["--datadir=" + data, "--port=" + plan.port, "--bind-address=127.0.0.1", "--console"], plan.port);
-  Object.assign(env.vars, { MYSQL_HOST: "127.0.0.1", MYSQL_TCP_PORT: String(plan.port) });
-  env.prepend.push(bin);
-  env.summary.push("mysql (MariaDB " + version2 + "): 127.0.0.1:" + plan.port + ", user root, no password (mysql://root@127.0.0.1:" + plan.port + ")");
+var MysqlServer = class extends DatabaseServer {
+  id = "mysql";
+  async start(env, plan) {
+    const series = await resolveCached("mariadb:" + plan.version, async () => {
+      if (plan.version !== "lts") return plan.version;
+      const { major_releases: all } = await fetchJson(MARIA);
+      return all.find((r) => r.release_status === "Stable" && r.release_support_type === "Long Term Support")?.release_id ?? Promise.reject(new Error("No MariaDB LTS release found"));
+    });
+    const latest = async () => {
+      const { releases } = await fetchJson(MARIA + series + "/latest/");
+      const [version3, release] = Object.entries(releases)[0] ?? [];
+      const zip = release?.files.find((f) => /-winx64\.zip$/.test(f.file_name));
+      return zip ? { version: version3, zip } : Promise.reject(new Error("No MariaDB " + series + " zip for Windows"));
+    };
+    const version2 = await resolveCached("mariadb-version:" + series, async () => (await latest()).version);
+    const home = tool("mariadb", version2);
+    const bin = path19.join(home, "bin");
+    if (!exists(path19.join(bin, "mariadbd.exe"))) {
+      const { zip } = await latest();
+      log("Downloading MariaDB " + version2 + " (~90 MB once) ...");
+      await downloader.archive(zip.file_download_url.replace(/^http:/, "https:"), home, {
+        sha256: zip.checksum?.sha256sum ?? null,
+        locate: "mariadbd.exe",
+        up: 1,
+        fileName: zip.file_name
+      });
+    }
+    const data = dataFor("mariadb");
+    await createOnce(data, "mysql", async () => {
+      log("Creating the MariaDB database (first start) ...");
+      await execAsync(path19.join(bin, "mariadb-install-db.exe"), ["--datadir=" + data, "--port=" + plan.port], {
+        stdio: "ignore"
+      });
+    });
+    await startServer(
+      "mysql",
+      path19.join(bin, "mariadbd.exe"),
+      ["--datadir=" + data, "--port=" + plan.port, "--bind-address=127.0.0.1", "--console"],
+      plan.port
+    );
+    Object.assign(env.vars, { MYSQL_HOST: "127.0.0.1", MYSQL_TCP_PORT: String(plan.port) });
+    env.prepend.push(bin);
+    env.summary.push(
+      "mysql (MariaDB " + version2 + "): 127.0.0.1:" + plan.port + ", user root, no password (mysql://root@127.0.0.1:" + plan.port + ")"
+    );
+  }
 };
 
-// src/guest/toolchains/databases/postgres.ts
-import path13 from "node:path";
-var postgresData = (version2) => dataFor("postgres-" + version2.split(".")[0]);
-var setupPostgres = async (env, plan) => {
-  const exact = await resolveCached("postgres:" + plan.version, async () => {
-    const versions = (await fetchJson("https://www.postgresql.org/versions.json")).filter((v) => v.supported);
-    const hit = plan.version === "latest" ? versions.find((v) => v.current) ?? versions[versions.length - 1] : versions.find((v) => v.major === plan.version.split(".")[0]);
-    return hit ? hit.major + "." + hit.latestMinor : Promise.reject(new Error("No supported PostgreSQL " + plan.version));
-  });
-  const home = tool("postgres", exact);
-  const bin = path13.join(home, "bin");
-  if (!exists(path13.join(bin, "pg_ctl.exe"))) {
-    log("Downloading PostgreSQL " + exact + " (~330 MB once) ...");
-    await installArchive("https://get.enterprisedb.com/postgresql/postgresql-" + exact + "-1-windows-x64-binaries.zip", home, {
-      locate: "pg_ctl.exe",
-      up: 1,
-      fileName: "postgresql-" + exact + ".zip",
-      members: ["pgsql/bin", "pgsql/lib", "pgsql/share", "pgsql/include"]
+// src/guest/databases/postgres.ts
+import fs18 from "node:fs";
+import path20 from "node:path";
+function postgresData(version2) {
+  return dataFor("postgres-" + version2.split(".")[0]);
+}
+var PostgresServer = class extends DatabaseServer {
+  id = "postgres";
+  async start(env, plan) {
+    const exact = await resolveCached("postgres:" + plan.version, async () => {
+      const versions = (await fetchJson("https://www.postgresql.org/versions.json")).filter(
+        (v) => v.supported
+      );
+      const hit = plan.version === "latest" ? versions.find((v) => v.current) ?? versions[versions.length - 1] : versions.find((v) => v.major === plan.version.split(".")[0]);
+      return hit ? hit.major + "." + hit.latestMinor : Promise.reject(new Error("No supported PostgreSQL " + plan.version));
     });
+    const home = tool("postgres", exact);
+    const bin = path20.join(home, "bin");
+    if (!exists(path20.join(bin, "pg_ctl.exe"))) {
+      log("Downloading PostgreSQL " + exact + " (~330 MB once) ...");
+      await downloader.archive(
+        "https://get.enterprisedb.com/postgresql/postgresql-" + exact + "-1-windows-x64-binaries.zip",
+        home,
+        {
+          locate: "pg_ctl.exe",
+          up: 1,
+          fileName: "postgresql-" + exact + ".zip",
+          members: ["pgsql/bin", "pgsql/lib", "pgsql/share", "pgsql/include"]
+        }
+      );
+    }
+    const data = postgresData(exact);
+    await createOnce(data, "PG_VERSION", async () => {
+      log("Creating the PostgreSQL database (first start) ...");
+      await execAsync(
+        path20.join(bin, "initdb.exe"),
+        ["-D", data, "-U", "postgres", "-A", "trust", "-E", "UTF8", "--locale=C"],
+        { stdio: "ignore" }
+      );
+    });
+    if (await portOpen(plan.port))
+      throw new Error("port " + plan.port + " is already in use (change databases.postgres.port)");
+    await clearStaleLocks(data, ["postmaster.pid"], plan.port);
+    await execAsync(
+      path20.join(bin, "pg_ctl.exe"),
+      [
+        "start",
+        "-D",
+        data,
+        "-w",
+        "-t",
+        "60",
+        "-l",
+        path20.join(logsDir, "postgres.log"),
+        "-o",
+        "-p " + plan.port + " -c listen_addresses=localhost"
+      ],
+      { stdio: "ignore" }
+    );
+    Object.assign(env.vars, { PGHOST: "localhost", PGPORT: String(plan.port), PGUSER: "postgres" });
+    env.prepend.push(bin);
+    env.summary.push(
+      "postgres " + exact + ": localhost:" + plan.port + ", user postgres, no password (postgres://postgres@localhost:" + plan.port + "/postgres)"
+    );
+  }
+  /** Every installed version's cluster shuts down cleanly through pg_ctl first. */
+  async stop(plan) {
+    if (exists(tool("postgres"))) {
+      for (const version2 of fs18.readdirSync(tool("postgres"))) {
+        const data = postgresData(version2);
+        const pgCtl = path20.join(tool("postgres", version2), "bin", "pg_ctl.exe");
+        if (exists(path20.join(data, "postmaster.pid")) && exists(pgCtl))
+          await execAsync(pgCtl, ["stop", "-D", data, "-m", "fast", "-w"], { stdio: "ignore" });
+      }
+    }
+    await super.stop(plan);
   }
-  const data = postgresData(exact);
-  await createOnce(data, "PG_VERSION", async () => {
-    log("Creating the PostgreSQL database (first start) ...");
-    await execAsync(path13.join(bin, "initdb.exe"), ["-D", data, "-U", "postgres", "-A", "trust", "-E", "UTF8", "--locale=C"], { stdio: "ignore" });
-  });
-  if (await portOpen(plan.port)) throw new Error("port " + plan.port + " is already in use (change databases.postgres.port)");
-  await clearStaleLocks(data, ["postmaster.pid"], plan.port);
-  await execAsync(path13.join(bin, "pg_ctl.exe"), ["start", "-D", data, "-w", "-t", "60", "-l", path13.join(logsDir, "postgres.log"), "-o", "-p " + plan.port + " -c listen_addresses=localhost"], { stdio: "ignore" });
-  Object.assign(env.vars, { PGHOST: "localhost", PGPORT: String(plan.port), PGUSER: "postgres" });
-  env.prepend.push(bin);
-  env.summary.push("postgres " + exact + ": localhost:" + plan.port + ", user postgres, no password (postgres://postgres@localhost:" + plan.port + "/postgres)");
 };
 
-// src/guest/toolchains/databases/redis.ts
-import path14 from "node:path";
-var setupRedis = async (env, plan) => {
-  const home = tool("redis");
-  if (!exists(path14.join(home, "redis-server.exe"))) {
-    await installFromGithub("redis-windows/redis-windows", /^Redis-[\d.]+-Windows-x64-msys2\.zip$/, { dest: home, what: (a) => "Redis (" + a.name + ", ~10 MB once)", locate: "redis-server.exe" });
-  }
-  const data = mkdirp(dataFor("redis"));
-  await startServer("redis", path14.join(home, "redis-server.exe"), ["--port", String(plan.port), "--bind", "127.0.0.1", "--dir", data.replace(/\\/g, "/"), "--appendonly", "yes"], plan.port);
-  env.prepend.push(home);
-  env.summary.push("redis: redis://127.0.0.1:" + plan.port + " (redis-cli on PATH)");
+// src/guest/databases/redis.ts
+import path21 from "node:path";
+var RedisServer = class extends DatabaseServer {
+  id = "redis";
+  async start(env, plan) {
+    const home = tool("redis");
+    if (!exists(path21.join(home, "redis-server.exe"))) {
+      await installFromGithub("redis-windows/redis-windows", /^Redis-[\d.]+-Windows-x64-msys2\.zip$/, {
+        dest: home,
+        what: (a) => "Redis (" + a.name + ", ~10 MB once)",
+        locate: "redis-server.exe"
+      });
+    }
+    const data = mkdirp(dataFor("redis"));
+    await startServer(
+      "redis",
+      path21.join(home, "redis-server.exe"),
+      ["--port", String(plan.port), "--bind", "127.0.0.1", "--dir", data.replace(/\\/g, "/"), "--appendonly", "yes"],
+      plan.port
+    );
+    env.prepend.push(home);
+    env.summary.push("redis: redis://127.0.0.1:" + plan.port + " (redis-cli on PATH)");
+  }
 };
 
-// src/guest/toolchains/databases/index.ts
-var SETUP = { postgres: setupPostgres, mysql: setupMysql, mongodb: setupMongo, redis: setupRedis, dynamodb: setupDynamo };
-var DATABASE_NAMES = { postgres: "PostgreSQL", mysql: "MySQL (MariaDB)", mongodb: "MongoDB", redis: "Redis", dynamodb: "DynamoDB Local", sqlserver: "SQL Server" };
-var listenerPid = (port) => {
-  const out = spawnSync2(SYSTEM.netstat(), ["-ano", "-p", "TCP"], { encoding: "utf8", windowsHide: true }).stdout ?? "";
-  const hit = out.split(/\r?\n/).map((l) => /^\s*TCP\s+\S+:(\d+)\s+\S+\s+LISTENING\s+(\d+)/.exec(l)).find((m) => m && Number(m[1]) === port);
-  return hit ? Number(hit[2]) : null;
+// src/guest/databases/registry.ts
+var SERVERS = {
+  postgres: new PostgresServer(),
+  mysql: new MysqlServer(),
+  mongodb: new MongoServer(),
+  redis: new RedisServer(),
+  dynamodb: new DynamoServer()
 };
-var stopDatabase = async (plan) => {
+async function stopDatabase(plan) {
   if (!await portOpen(plan.port)) return false;
-  if (plan.database === "postgres" && exists(tool("postgres"))) {
-    for (const version2 of fs10.readdirSync(tool("postgres"))) {
-      const data = postgresData(version2);
-      const pgCtl = path15.join(tool("postgres", version2), "bin", "pg_ctl.exe");
-      if (exists(path15.join(data, "postmaster.pid")) && exists(pgCtl)) await execAsync(pgCtl, ["stop", "-D", data, "-m", "fast", "-w"], { stdio: "ignore" });
-    }
-  }
-  for (const port of [plan.port, plan.adminPort ?? 0]) {
-    const pid = port && listenerPid(port);
-    if (pid) try {
-      process.kill(pid);
-    } catch {
-    }
-  }
+  if (plan.database === "sqlserver") killListeners(plan);
+  else await SERVERS[plan.database].stop(plan);
   return true;
-};
-var setupDatabase = async (env, plan) => {
+}
+async function setupDatabase(env, plan) {
   if (plan.database === "sqlserver") {
-    env.summary.push("sqlserver: NOT available (SQL Server cannot start inside Windows Sandbox). Switch the project to Postgres or SQLite for local work");
+    env.summary.push(
+      "sqlserver: NOT available (SQL Server cannot start inside Windows Sandbox). Switch the project to Postgres or SQLite for local work"
+    );
     return;
   }
   if (dryRun) {
-    log("(dry run) would run " + DATABASE_NAMES[plan.database] + " on port " + plan.port + " (" + plan.reasons.join("; ") + ")");
+    log(
+      "(dry run) would run " + DATABASE_NAMES[plan.database] + " on port " + plan.port + " (" + plan.reasons.join("; ") + ")"
+    );
     return;
   }
   if (duringSession() && await portOpen(plan.port)) {
     env.summary.push(plan.database + ": shared, already running on port " + plan.port);
     return;
   }
-  await SETUP[plan.database](env, plan);
-};
+  await SERVERS[plan.database].start(env, plan);
+}
 
 // src/guest/setup/environment.ts
-var addMachineEnvironment = (vars, dirs, additive = false) => {
+function addMachineEnvironment(vars, dirs, additive = false) {
   if (!isWin || dryRun || testMode) return;
-  const script = [
-    "$vars = '" + JSON.stringify(vars).replace(/'/g, "''") + "' | ConvertFrom-Json",
-    "foreach ($p in $vars.PSObject.Properties) { " + (additive ? "if ([Environment]::GetEnvironmentVariable($p.Name, 'Machine')) { continue }; " : "") + "[Environment]::SetEnvironmentVariable($p.Name, [string]$p.Value, 'Machine') }",
-    "$path = [Environment]::GetEnvironmentVariable('Path', 'Machine') -split ';'",
-    "$add = '" + JSON.stringify(dirs).replace(/'/g, "''") + "' | ConvertFrom-Json | Where-Object { $path -notcontains $_ }",
-    "if ($add) { [Environment]::SetEnvironmentVariable('Path', (" + (additive ? "($path + @($add))" : "(@($add) + $path)") + " -join ';'), 'Machine') }"
-  ].join("\n");
   try {
-    powershell(script);
+    runScriptWithJson("set-machine-environment.ps1", "SettingsFile", { vars, path: null, add: dirs, additive });
   } catch (e) {
     warn("Could not add to the environment: " + errMsg(e));
   }
-};
+}
 
-// src/guest/db.ts
+// src/guest/databases/sbx-db.ts
 var USAGE = "Usage: sbx-db [list] | sbx-db start <name> | sbx-db stop <name>";
 var projectPlans = () => {
   const file2 = process.env.AGENT_PROJECT_FILE;
   if (!file2) return null;
   try {
-    return ProjectSpec.safeParse(JSON.parse(fs11.readFileSync(file2, "utf8"))).data?.databases ?? null;
+    return ProjectSpecSchema.safeParse(JSON.parse(fs19.readFileSync(file2, "utf8"))).data?.databases ?? null;
   } catch {
     return null;
   }
@@ -26526,7 +27922,10 @@ var plans = () => {
 var find = (name) => {
   const all = plans();
   const plan = all.find((p) => p.database === name?.toLowerCase());
-  if (!plan) throw new Error((name ? 'Unknown database "' + name + '". ' : "") + "Choose one of: " + all.map((p) => p.database).join(", "));
+  if (!plan)
+    throw new Error(
+      (name ? 'Unknown database "' + name + '". ' : "") + "Choose one of: " + all.map((p) => p.database).join(", ")
+    );
   if (plan.database === "sqlserver") throw new Error("SQL Server cannot run inside Windows Sandbox.");
   return plan;
 };
@@ -26556,17 +27955,23 @@ var stop = async (name) => {
   console.log(await stopDatabase(plan) ? "Stopped " + plan.database + "." : plan.database + " was not running.");
   return 0;
 };
-var main = (args) => {
+function runSbxDb(args) {
   const [action = "list", name] = args;
   if (action === "list") return list();
   if (action === "start") return start(name);
   if (action === "stop") return stop(name);
   console.error(USAGE);
   return Promise.resolve(2);
-};
-main(process.argv.slice(2)).then((code) => {
-  process.exitCode = code;
-}, (e) => {
-  console.error(errMsg(e));
-  process.exitCode = 1;
-});
+}
+
+// src/guest/entries/db.ts
+dropInheritedModulePath();
+runSbxDb(process.argv.slice(2)).then(
+  (code) => {
+    process.exitCode = code;
+  },
+  (e) => {
+    console.error(errMsg(e));
+    process.exitCode = 1;
+  }
+);