windows-development-sandbox 1.4.3 → 1.5.0

package/dist/runtime/view.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path4) {
-          path4 = castPath(path4, object2);
-          var index = 0, length = path4.length;
+        function baseGet(object2, path5) {
+          path5 = castPath(path5, object2);
+          var index = 0, length = path5.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path4[index++])];
+            object2 = object2[toKey(path5[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path4, args) {
-          path4 = castPath(path4, object2);
-          object2 = parent(object2, path4);
-          var func = object2 == null ? object2 : object2[toKey(last(path4))];
+        function baseInvoke(object2, path5, args) {
+          path5 = castPath(path5, object2);
+          object2 = parent(object2, path5);
+          var func = object2 == null ? object2 : object2[toKey(last(path5))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path4, srcValue) {
-          if (isKey(path4) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path4), srcValue);
+        function baseMatchesProperty(path5, srcValue) {
+          if (isKey(path5) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path5), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path4);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path4) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path5);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path5) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path4) {
-            return hasIn(object2, path4);
+          return basePickBy(object2, paths, function(value, path5) {
+            return hasIn(object2, path5);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path4 = paths[index], value = baseGet(object2, path4);
-            if (predicate(value, path4)) {
-              baseSet(result2, castPath(path4, object2), value);
+            var path5 = paths[index], value = baseGet(object2, path5);
+            if (predicate(value, path5)) {
+              baseSet(result2, castPath(path5, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path4) {
+        function basePropertyDeep(path5) {
           return function(object2) {
-            return baseGet(object2, path4);
+            return baseGet(object2, path5);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path4, value, customizer) {
+        function baseSet(object2, path5, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path4 = castPath(path4, object2);
-          var index = -1, length = path4.length, lastIndex = length - 1, nested = object2;
+          path5 = castPath(path5, object2);
+          var index = -1, length = path5.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path4[index]), newValue = value;
+            var key = toKey(path5[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path4[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path5[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path4) {
-          path4 = castPath(path4, object2);
-          var index = -1, length = path4.length;
+        function baseUnset(object2, path5) {
+          path5 = castPath(path5, object2);
+          var index = -1, length = path5.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path4[index]);
+            var key = toKey(path5[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path4);
-          return obj == null || delete obj[toKey(last(path4))];
+          var obj = parent(object2, path5);
+          return obj == null || delete obj[toKey(last(path5))];
         }
-        function baseUpdate(object2, path4, updater, customizer) {
-          return baseSet(object2, path4, updater(baseGet(object2, path4)), customizer);
+        function baseUpdate(object2, path5, updater, customizer) {
+          return baseSet(object2, path5, updater(baseGet(object2, path5)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path4, hasFunc) {
-          path4 = castPath(path4, object2);
-          var index = -1, length = path4.length, result2 = false;
+        function hasPath(object2, path5, hasFunc) {
+          path5 = castPath(path5, object2);
+          var index = -1, length = path5.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path4[index]);
+            var key = toKey(path5[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path4) {
-          return path4.length < 2 ? object2 : baseGet(object2, baseSlice(path4, 0, -1));
+        function parent(object2, path5) {
+          return path5.length < 2 ? object2 : baseGet(object2, baseSlice(path5, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path4, args) {
-          var index = -1, isFunc = typeof path4 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path5, args) {
+          var index = -1, isFunc = typeof path5 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path4, value, args) : baseInvoke(value, path4, args);
+            result2[++index] = isFunc ? apply(path5, value, args) : baseInvoke(value, path5, args);
           });
           return result2;
         });
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path4, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path4);
+        function get(object2, path5, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path5);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path4) {
-          return object2 != null && hasPath(object2, path4, baseHas);
+        function has(object2, path5) {
+          return object2 != null && hasPath(object2, path5, baseHas);
         }
-        function hasIn(object2, path4) {
-          return object2 != null && hasPath(object2, path4, baseHasIn);
+        function hasIn(object2, path5) {
+          return object2 != null && hasPath(object2, path5, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path4) {
-            path4 = castPath(path4, object2);
-            isDeep || (isDeep = path4.length > 1);
-            return path4;
+          paths = arrayMap(paths, function(path5) {
+            path5 = castPath(path5, object2);
+            isDeep || (isDeep = path5.length > 1);
+            return path5;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path4) {
-            return predicate(value, path4[0]);
+          return basePickBy(object2, props, function(value, path5) {
+            return predicate(value, path5[0]);
           });
         }
-        function result(object2, path4, defaultValue) {
-          path4 = castPath(path4, object2);
-          var index = -1, length = path4.length;
+        function result(object2, path5, defaultValue) {
+          path5 = castPath(path5, object2);
+          var index = -1, length = path5.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path4[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path5[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path4, value) {
-          return object2 == null ? object2 : baseSet(object2, path4, value);
+        function set2(object2, path5, value) {
+          return object2 == null ? object2 : baseSet(object2, path5, value);
         }
-        function setWith(object2, path4, value, customizer) {
+        function setWith(object2, path5, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path4, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path5, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path4) {
-          return object2 == null ? true : baseUnset(object2, path4);
+        function unset(object2, path5) {
+          return object2 == null ? true : baseUnset(object2, path5);
         }
-        function update(object2, path4, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path4, castFunction(updater));
+        function update(object2, path5, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path5, castFunction(updater));
         }
-        function updateWith(object2, path4, updater, customizer) {
+        function updateWith(object2, path5, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path4, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path5, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path4, srcValue) {
-          return baseMatchesProperty(path4, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path5, srcValue) {
+          return baseMatchesProperty(path5, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path4, args) {
+        var method = baseRest(function(path5, args) {
           return function(object2) {
-            return baseInvoke(object2, path4, args);
+            return baseInvoke(object2, path5, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path4) {
-            return baseInvoke(object2, path4, args);
+          return function(path5) {
+            return baseInvoke(object2, path5, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path4) {
-          return isKey(path4) ? baseProperty(toKey(path4)) : basePropertyDeep(path4);
+        function property(path5) {
+          return isKey(path5) ? baseProperty(toKey(path5)) : basePropertyDeep(path5);
         }
         function propertyOf(object2) {
-          return function(path4) {
-            return object2 == null ? undefined2 : baseGet(object2, path4);
+          return function(path5) {
+            return object2 == null ? undefined2 : baseGet(object2, path5);
           };
         }
         var range = createRange();
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path4, args) {
-          if (typeof path4 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path5, args) {
+          if (typeof path5 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path4, args);
+            return baseInvoke(value, path5, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5546,25 +5546,25 @@ var FrameType = {
   Console: 21
 };
 var PING_INTERVAL_MS = 5e3;
-var encodeFrame = (type, payload = Buffer.alloc(0)) => {
+function encodeFrame(type, payload = Buffer.alloc(0)) {
   const header = Buffer.alloc(5);
   header.writeUInt8(type, 0);
   header.writeUInt32LE(payload.length, 1);
   return Buffer.concat([header, payload]);
-};
-var helloFrame = (token, cols, rows, flags = 0) => {
+}
+function helloFrame(token, cols, rows, flags = 0) {
   const head = Buffer.alloc(5);
   head.writeInt16LE(cols, 0);
   head.writeInt16LE(rows, 2);
   head.writeUInt8(flags, 4);
   return encodeFrame(FrameType.Hello, Buffer.concat([head, Buffer.from(token, "utf8")]));
-};
-var resizeFrame = (cols, rows) => {
+}
+function resizeFrame(cols, rows) {
   const payload = Buffer.alloc(4);
   payload.writeInt16LE(cols, 0);
   payload.writeInt16LE(rows, 2);
   return encodeFrame(FrameType.Resize, payload);
-};
+}
 var MAX_FRAME_BYTES = 1 << 20;
 var FrameReader = class {
   pending = Buffer.alloc(0);
@@ -5602,7 +5602,7 @@ var connectOnce = (host, port, timeoutMs) => {
     });
   });
 };
-var connect = async (endpoint, timeoutMs = 3e3) => {
+async function connect(endpoint, timeoutMs = 3e3) {
   const errors = [];
   for (const address of endpoint.addresses) {
     try {
@@ -5612,7 +5612,7 @@ var connect = async (endpoint, timeoutMs = 3e3) => {
     }
   }
   throw new Error("Could not reach the sandbox session (" + errors.join("; ") + ")");
-};
+}
 
 // src/shared/pty/output-filter.ts
 var KEPT_OSC = (body) => {
@@ -5623,7 +5623,10 @@ var KEPT_OSC = (body) => {
 };
 var MAX_KEPT_STRING = 4096;
 var OutputFilter = class {
-  /** text: normal output; esc: after ESC; c2: after a 0xC2 lead byte; string: inside an OSC/DCS/...; stringEsc / stringC2: a possible terminator inside one. */
+  /**
+   * text: normal output; esc: after ESC; c2: after a 0xC2 lead byte; string: inside an OSC/DCS/...; stringEsc /
+   * stringC2: a possible terminator inside one.
+   */
   state = "text";
   /** The string being read: an OSC worth keeping is collected until its terminator; null = being dropped. */
   body = null;
@@ -5729,11 +5732,15 @@ import { spawn } from "node:child_process";
 // src/shared/system.ts
 import path from "node:path";
 var systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
-var system32 = (exe) => path.join(systemRoot(), "System32", exe);
+function system32(exe) {
+  return path.join(systemRoot(), "System32", exe);
+}
 var SYSTEM = {
   cmd: () => system32("cmd.exe"),
   powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
   tasklist: () => system32("tasklist.exe"),
+  whoami: () => system32("whoami.exe"),
+  icacls: () => system32("icacls.exe"),
   tar: () => system32("tar.exe"),
   reg: () => system32("reg.exe"),
   netsh: () => system32("netsh.exe"),
@@ -5743,54 +5750,45 @@ var SYSTEM = {
   robocopy: () => system32("Robocopy.exe"),
   shutdown: () => system32("shutdown.exe"),
   dism: () => system32("Dism.exe"),
-  msiexec: () => system32("msiexec.exe")
+  msiexec: () => system32("msiexec.exe"),
+  /** The .NET Framework C# compiler that ships with Windows (C# 5). */
+  csc: () => path.join(systemRoot(), "Microsoft.NET", "Framework64", "v4.0.30319", "csc.exe")
 };
 
+// src/shared/scripts.ts
+import fs from "node:fs";
+import path2 from "node:path";
+import { fileURLToPath } from "node:url";
+var HERE = path2.dirname(fileURLToPath(import.meta.url));
+function sandboxScriptsDir() {
+  const candidates = [path2.resolve(HERE, "..", "sandbox"), path2.resolve(HERE, "..", "..", "sandbox")];
+  return candidates.find((dir) => fs.existsSync(path2.join(dir, "boot", "bootstrap.ps1"))) ?? candidates[candidates.length - 1];
+}
+function scriptArgs(name, args = []) {
+  return [
+    "-NoLogo",
+    "-NoProfile",
+    "-NonInteractive",
+    "-ExecutionPolicy",
+    "Bypass",
+    "-File",
+    path2.join(sandboxScriptsDir(), "scripts", name),
+    ...args
+  ];
+}
+
 // src/shared/pty/console-input.ts
-var script = (pid) => [
-  'Add-Type -TypeDefinition @"',
-  "using System; using System.Runtime.InteropServices;",
-  "public static class SbxVtInput {",
-  '  [DllImport("kernel32.dll")] static extern bool FreeConsole();',
-  '  [DllImport("kernel32.dll")] static extern bool AttachConsole(uint pid);',
-  '  [DllImport("kernel32.dll", CharSet = CharSet.Unicode)] static extern IntPtr CreateFileW(string name, uint access, uint share, IntPtr security, uint creation, uint flags, IntPtr template);',
-  '  [DllImport("kernel32.dll")] static extern bool GetConsoleMode(IntPtr handle, out uint mode);',
-  '  [DllImport("kernel32.dll")] static extern bool SetConsoleMode(IntPtr handle, uint mode);',
-  '  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);',
-  "  public static int On(uint pid) {",
-  "    FreeConsole();",
-  "    if (!AttachConsole(pid)) return 2;",
-  '    IntPtr input = CreateFileW("CONIN$", 0xC0000000, 3, IntPtr.Zero, 3, 0, IntPtr.Zero);',
-  "    if (input == new IntPtr(-1)) return 3;",
-  "    uint mode; bool ok = GetConsoleMode(input, out mode) && SetConsoleMode(input, mode | 0x200);",
-  "    CloseHandle(input);",
-  "    FreeConsole();",
-  "    return ok ? 0 : 4;",
-  "  }",
-  "}",
-  '"@',
-  "exit [SbxVtInput]::On(" + pid + ")"
-].join("\n");
-var enableVtInput = () => {
+function enableVtInput() {
   if (process.platform !== "win32" || !process.stdin.isTTY)
     return { ready: Promise.resolve(false), stop: () => Promise.resolve() };
   let child = null;
   let exited = Promise.resolve();
   const ready = new Promise((resolve) => {
     try {
-      child = spawn(
-        SYSTEM.powershell(),
-        [
-          "-NoLogo",
-          "-NoProfile",
-          "-NonInteractive",
-          "-ExecutionPolicy",
-          "Bypass",
-          "-EncodedCommand",
-          Buffer.from(script(process.pid), "utf16le").toString("base64")
-        ],
-        { stdio: "ignore", windowsHide: true }
-      );
+      child = spawn(SYSTEM.powershell(), scriptArgs("enable-vt-input.ps1", ["-ProcessId", String(process.pid)]), {
+        stdio: "ignore",
+        windowsHide: true
+      });
     } catch {
       resolve(false);
       return;
@@ -5813,7 +5811,7 @@ var enableVtInput = () => {
       return exited;
     }
   };
-};
+}
 
 // src/shared/pty/input-joiner.ts
 var JOIN_MS = 30;
@@ -5848,11 +5846,11 @@ function unfinishedSequence(data) {
 
 // src/shared/pty/terminal.ts
 var MOUSE_OFF = "\x1B[?1000l\x1B[?1002l\x1B[?1003l\x1B[?1005l\x1B[?1006l\x1B[?1015l";
-var fixWindowsKeys = (chunk) => {
+function fixWindowsKeys(chunk) {
   if (!chunk.includes(8) && !chunk.includes(127)) return chunk;
   return Buffer.from(chunk.map((b) => b === 8 ? 127 : b === 127 ? 8 : b));
-};
-var runTerminalClient = (socket, token, options = {}) => {
+}
+function runTerminalClient(socket, token, options = {}) {
   const stdin = process.stdin;
   const stdout = process.stdout;
   const size = () => {
@@ -5952,14 +5950,14 @@ var runTerminalClient = (socket, token, options = {}) => {
     stdin.resume();
     stdout.on("resize", onResize);
   });
-};
+}
 
 // src/guest/runtime/paths.ts
-import path3 from "node:path";
+import path4 from "node:path";
 
 // src/shared/channel/run-dir.ts
-import fs2 from "node:fs";
-import path2 from "node:path";
+import fs3 from "node:fs";
+import path3 from "node:path";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -6777,10 +6775,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path4) {
-  if (!path4)
+function getElementAtPath(obj, path5) {
+  if (!path5)
     return obj;
-  return path4.reduce((acc, key) => acc?.[key], obj);
+  return path5.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -7120,11 +7118,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path4, issues) {
+function prefixIssues(path5, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path4);
+    iss.path.unshift(path5);
     return iss;
   });
 }
@@ -7574,16 +7572,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path4 = []) => {
+  const processError = (error63, path5 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path5, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else {
-        const fullpath = [...path4, ...issue2.path];
+        const fullpath = [...path5, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7622,17 +7620,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path4 = []) => {
+  const processError = (error63, path5 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path4, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path5, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path4, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
       } else {
-        const fullpath = [...path4, ...issue2.path];
+        const fullpath = [...path5, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7671,8 +7669,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path4 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path4) {
+  const path5 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path5) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -24774,13 +24772,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path4 = ref.slice(1).split("/").filter(Boolean);
-  if (path4.length === 0) {
+  const path5 = ref.slice(1).split("/").filter(Boolean);
+  if (path5.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path4[0] === defsKey) {
-    const key = path4[1] === void 0 ? void 0 : decodeJSONPointerSegment(path4[1]);
+  if (path5[0] === defsKey) {
+    const key = path5[1] === void 0 ? void 0 : decodeJSONPointerSegment(path5[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25634,7 +25632,7 @@ var RESERVED_GUEST = /^C:\\(?:Windows|Program Files|Program Files \(x86\)|Progra
 var MIRROR_LETTER = /^[D-Z]$/;
 var DRIVE_PATH = /^([A-Za-z]):\\(.*)$/;
 var BAD_CHARS = /[<>:"|?*/\x00-\x1f]/;
-var isValidGuestPath = (guest) => {
+function isValidGuestPath(guest) {
   const m = DRIVE_PATH.exec(guest);
   if (!m) return false;
   const letter = m[1].toUpperCase();
@@ -25644,7 +25642,7 @@ var isValidGuestPath = (guest) => {
     return false;
   if (letter === "C") return !RESERVED_GUEST.test("C:\\" + rest);
   return MIRROR_LETTER.test(letter);
-};
+}
 
 // src/core/schema/common.ts
 var GuestPathSchema = external_exports.string().refine(
@@ -25653,23 +25651,31 @@ var GuestPathSchema = external_exports.string().refine(
 );
 var NameSchema = external_exports.string().regex(/^[A-Za-z0-9_-]+$/, "letters, numbers, - and _ only");
 var StringsSchema = external_exports.array(external_exports.string());
-var toggle = (description) => external_exports.strictObject({ enabled: external_exports.boolean().describe(description) });
+function toggle(description) {
+  return external_exports.strictObject({ enabled: external_exports.boolean().describe(description) });
+}
 var SchemaRefSchema = external_exports.string().describe("Path or URL of the JSON Schema for editor autocomplete and docs.");
 var GitAccessSchema = external_exports.enum(["full", "readonly", "none"]).describe(
   "full: normal git. readonly: status/log/diff/show/blame only (no commit, push, checkout, ...). none: no git at all; .git is hidden from the agent."
 );
 var EnabledSchema = external_exports.union([external_exports.boolean(), external_exports.literal("auto")]);
-var enabled = (what, markers) => EnabledSchema.describe(what + ' true, false, or "auto" = only when the project has ' + markers + ".");
-var Packages = (what, example) => StringsSchema.describe(what + ", installed once and kept (e.g. " + example + ").");
+function enabled(what, markers) {
+  return EnabledSchema.describe(what + ' true, false, or "auto" = only when the project has ' + markers + ".");
+}
+function Packages(what, example) {
+  return StringsSchema.describe(what + ", installed once and kept (e.g. " + example + ").");
+}
 
 // src/core/schema/config.ts
 var import_lodash = __toESM(require_lodash(), 1);
 
 // src/core/schema/databases.ts
 var PortSchema = external_exports.number().int().min(1024).max(65535);
-var dbEnabled = (name) => EnabledSchema.describe(
-  name + ': true, false, or "auto" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings).'
-);
+function dbEnabled(name) {
+  return EnabledSchema.describe(
+    name + ': true, false, or "auto" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings).'
+  );
+}
 var DatabasesSchema = external_exports.strictObject({
   postgres: external_exports.strictObject({
     enabled: dbEnabled("PostgreSQL (with psql, pg_dump). User postgres, no password, localhost only"),
@@ -25708,6 +25714,17 @@ var DatabasesSchema = external_exports.strictObject({
 });
 
 // src/core/schema/harness.ts
+var SubfolderSchema = external_exports.string().regex(/^(?!.*(^|[\\/])\.\.([\\/]|$))[A-Za-z0-9._ -]+([\\/][A-Za-z0-9._ -]+)*$/, "a plain relative folder");
+var HarnessHomeSchema = external_exports.strictObject({
+  env: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/), SubfolderSchema).describe("Environment variable -> folder (below the sandbox state folder) the agent keeps its data in."),
+  profileDirs: external_exports.array(SubfolderSchema.refine((d) => !d.split(/[\\/]/).includes("."), "a plain relative folder")).max(8).optional().describe(
+    "Folders below the sandbox's user profile (e.g. .qwen, .config/opencode) the agent keeps its data in: each becomes a link to state\\<agent>\\profile\\<folder>, so it survives between sandboxes."
+  ),
+  loginFiles: external_exports.array(SubfolderSchema).describe("Files that make up the login, relative to the agent's own state folder (state\\<agent>)."),
+  hostDir: external_exports.string().optional().describe(
+    "The agent's own folder on this PC (e.g. ~/.codex): loginFiles are read from it to save this PC's login."
+  )
+});
 var HarnessSchema = external_exports.strictObject({
   hostExecutable: external_exports.string().optional().describe("Executable copied from this PC when installed here (e.g. claude.exe)."),
   hostDir: external_exports.string().optional().describe('Folder of hostExecutable on this PC, or "auto" to search PATH and ~/.local/bin.'),
@@ -25717,10 +25734,19 @@ var HarnessSchema = external_exports.strictObject({
   uvBin: external_exports.string().optional().describe("Command the uv package provides."),
   arguments: StringsSchema.describe("Arguments always passed to the agent."),
   environment: external_exports.record(external_exports.string(), external_exports.string()).describe("Environment variables for the agent."),
+  home: HarnessHomeSchema.optional().describe(
+    "Where its login lives inside the sandbox; leave out when the agent cannot be pointed at a folder (then its login is not kept between sandboxes)."
+  ),
   resumeArguments: StringsSchema.optional().describe(
     "Arguments used when the agent is restarted in place (e.g. after an account switch) so it resumes the conversation."
+  ),
+  resumeOneArguments: StringsSchema.optional().describe(
+    "Arguments that reopen one conversation, with {id} where its id goes (claude: --resume {id}). Used instead of resumeArguments when the conversation of a session is known."
   )
-}).refine((h) => h.hostExecutable || h.npmPackage || h.uvPackage, "needs hostExecutable, npmPackage or uvPackage").refine((h) => !h.uvPackage || h.uvBin, "needs uvBin when uvPackage is set").refine((h) => !h.npmPackage || h.npmBin, "needs npmBin when npmPackage is set");
+}).refine(
+  (h) => !h.resumeOneArguments || h.resumeOneArguments.some((a) => a.includes("{id}")),
+  "needs {id} in resumeOneArguments"
+).refine((h) => h.hostExecutable || h.npmPackage || h.uvPackage, "needs hostExecutable, npmPackage or uvPackage").refine((h) => !h.uvPackage || h.uvBin, "needs uvBin when uvPackage is set").refine((h) => !h.npmPackage || h.npmBin, "needs npmBin when npmPackage is set");
 
 // src/core/schema/profile.ts
 var SecretsSchema = external_exports.strictObject({
@@ -25809,6 +25835,11 @@ var SandboxSchema = external_exports.strictObject({
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
   )
 });
+var SharingSchema = external_exports.strictObject({
+  otherUsers: external_exports.boolean().describe(
+    "Let other Windows users of this PC use a sandbox you start: list its sessions, attach, run commands and stop it. They use the agent logins inside it, and history goes to your account."
+  )
+});
 var PortSchema2 = external_exports.number().int().min(1).max(65535);
 var HostEntrySchema = external_exports.string().max(253).regex(
   /^(@developer|(\*\.)?([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+)$/,
@@ -26009,8 +26040,18 @@ var ToolchainsSchema = external_exports.strictObject({
       '`openssl` on PATH, from the copy Git for Windows ships (its mingw64\\bin is not put on PATH, so it cannot shadow MinGW\'s gcc). "auto" = on.'
     )
   }).describe("Small portable command-line tools from their GitHub releases, installed once into tools\\cli."),
-  bun: toggle("Bun runtime (claude-mem needs it)."),
-  uv: toggle("uv, the Python package manager (claude-mem needs it)."),
+  bun: external_exports.strictObject({
+    enabled: enabled(
+      "Bun (JavaScript runtime and package manager; claude-mem needs it).",
+      "bun.lock, bun.lockb or bunfig.toml"
+    )
+  }),
+  uv: external_exports.strictObject({
+    enabled: enabled(
+      "uv (fast Python package and tool manager; claude-mem needs it for its search index).",
+      "uv.lock, a [tool.uv] pyproject.toml, toolchains.python.tools, or an agent installed with uv"
+    )
+  }),
   vcRuntime: toggle(
     "Microsoft Visual C++ runtime for tools that need it (a real installer, so it runs on every boot, ~15 s). PHP installs it regardless."
   ),
@@ -26023,8 +26064,8 @@ var ToolchainsSchema = external_exports.strictObject({
     )
   }),
   vscode: external_exports.strictObject({
-    enabled: external_exports.boolean().describe(
-      "Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."
+    enabled: EnabledSchema.describe(
+      'Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist. true, false, or "auto" = when VS Code is installed on this PC.'
     ),
     setup: external_exports.boolean().describe(
       "Point VS Code at the sandbox's own tools (JDK, Python, Go, compilers, .NET, Git, PowerShell 7 and Git Bash terminals) and install the language extensions for the toolchains in use."
@@ -26810,6 +26851,17 @@ var ProjectsSchema = external_exports.strictObject({
   )
 });
 
+// src/core/schema/resume.ts
+var RESUME_SESSIONS = ["ask", "always", "afterCrash", "never"];
+var ResumeSchema = external_exports.strictObject({
+  sessions: external_exports.enum(RESUME_SESSIONS).describe(
+    'When a sandbox starts after one that had agent sessions: "ask" lists them and asks whether to reopen them (without a terminal it prints the command sandbox resume), "always" reopens them, "afterCrash" reopens them only when the last sandbox ended unexpectedly, "never" leaves it to sandbox resume. Terminal tabs you opened yourself in the sandbox are never reopened.'
+  ),
+  restartAfterCrash: external_exports.boolean().describe(
+    "When the sandbox ends because Windows Sandbox crashed or ran out of memory, start it again by itself and reopen its sessions (at most 3 times in 6 hours)."
+  )
+});
+
 // src/core/schema/config.ts
 var ConfigSchema = external_exports.strictObject({
   $schema: SchemaRefSchema.optional(),
@@ -26820,6 +26872,7 @@ var ConfigSchema = external_exports.strictObject({
   audit: AuditSchema,
   mappings: external_exports.array(MappingSchema).describe("Extra folders from this PC."),
   sandbox: SandboxSchema,
+  sharing: SharingSchema,
   storage: external_exports.strictObject({
     root: external_exports.string().min(1).describe("Where everything is kept on this PC (tools, databases, logins, launches)."),
     persistAgentState: external_exports.boolean().describe("Keep agent logins and history between sandboxes."),
@@ -26848,7 +26901,8 @@ var ConfigSchema = external_exports.strictObject({
   hooks: external_exports.strictObject({ failFast: external_exports.boolean().describe("Stop when a hook script fails.") }),
   projects: ProjectsSchema.describe(
     "Several projects in one sandbox: folders of projects mapped at every start, and adding folders while it runs."
-  )
+  ),
+  resume: ResumeSchema.describe("Reopening the sessions of the last sandbox when a new one starts.")
 }).refine((c) => c.harnesses[c.defaultHarness] !== void 0, {
   message: "defaultHarness must be one of the configured harnesses",
   path: ["defaultHarness"]
@@ -26996,6 +27050,8 @@ var SessionStatusSchema = external_exports.object({
   message: Text(),
   updatedAt: TimeSchema,
   startedAt: TimeSchema,
+  /** The agent's own conversation this session is in (Claude: the file name of its .jsonl), once known. */
+  conversation: Text(128).optional(),
   exitCode: external_exports.number().int().optional(),
   attach: AttachEndpointSchema.optional()
 });
@@ -27010,34 +27066,34 @@ var ProjectStatusSchema = external_exports.object({
 });
 
 // src/shared/io/json.ts
-import fs from "node:fs";
+import fs2 from "node:fs";
 var MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
-var readJsonFile = (file2) => {
+function readJsonFile(file2) {
   try {
-    if (fs.statSync(file2).size > MAX_MESSAGE_BYTES) return null;
-    return JSON.parse(fs.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""));
+    if (fs2.statSync(file2).size > MAX_MESSAGE_BYTES) return null;
+    return JSON.parse(fs2.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""));
   } catch {
     return null;
   }
-};
-var readValid = (schema, file2) => {
+}
+function readValid(schema, file2) {
   const parsed = schema.safeParse(readJsonFile(file2));
   return parsed.success ? parsed.data : null;
-};
+}
 
 // src/shared/channel/run-dir.ts
 function safeId(id) {
   return IdSchema.parse(id);
 }
 var scan = (schema, dir) => {
-  if (!fs2.existsSync(dir)) return { valid: [], invalid: [] };
+  if (!fs3.existsSync(dir)) return { valid: [], invalid: [] };
   const valid = [];
   const invalid = [];
-  for (const name of fs2.readdirSync(dir)) {
+  for (const name of fs3.readdirSync(dir)) {
     if (name.endsWith(".tmp")) continue;
-    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name) ? readValid(schema, path2.join(dir, name)) : null;
+    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name) ? readValid(schema, path3.join(dir, name)) : null;
     if (message) valid.push(message);
-    else invalid.push(path2.join(dir, name));
+    else invalid.push(path3.join(dir, name));
   }
   return { valid, invalid };
 };
@@ -27051,25 +27107,25 @@ var RunDir = class {
   /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
   auditDir;
   constructor(dataDir2) {
-    this.root = path2.join(dataDir2, "run");
-    this.sandboxFile = path2.join(this.root, "sandbox.json");
-    this.requestsDir = path2.join(this.root, "requests");
-    this.responsesDir = path2.join(this.root, "responses");
-    this.sessionsDir = path2.join(this.root, "sessions");
-    this.projectsDir = path2.join(this.root, "projects");
-    this.auditDir = path2.join(this.root, "audit");
+    this.root = path3.join(dataDir2, "run");
+    this.sandboxFile = path3.join(this.root, "sandbox.json");
+    this.requestsDir = path3.join(this.root, "requests");
+    this.responsesDir = path3.join(this.root, "responses");
+    this.sessionsDir = path3.join(this.root, "sessions");
+    this.projectsDir = path3.join(this.root, "projects");
+    this.auditDir = path3.join(this.root, "audit");
   }
   requestFile(id) {
-    return path2.join(this.requestsDir, safeId(id) + ".json");
+    return path3.join(this.requestsDir, safeId(id) + ".json");
   }
   responseFile(id) {
-    return path2.join(this.responsesDir, safeId(id) + ".json");
+    return path3.join(this.responsesDir, safeId(id) + ".json");
   }
   sessionFile(id) {
-    return path2.join(this.sessionsDir, safeId(id) + ".json");
+    return path3.join(this.sessionsDir, safeId(id) + ".json");
   }
   projectFile(name) {
-    return path2.join(this.projectsDir, safeId(name) + ".json");
+    return path3.join(this.projectsDir, safeId(name) + ".json");
   }
   readSandboxStatus() {
     return readValid(SandboxStatusSchema, this.sandboxFile);
@@ -27102,8 +27158,8 @@ var launchDir = process.env.AGENT_LAUNCH_DIR ?? "C:\\AgentLaunch";
 var dataDir = process.env.AGENT_DATA_DIR ?? "C:\\AgentData";
 var hostToolsDir = process.env.AGENT_HOST_TOOLS_DIR ?? "C:\\HostTools";
 var localDir = process.env.AGENT_LOCAL_DIR ?? "C:\\nvm";
-var toolsDir = path3.join(dataDir, "tools");
-var logsDir = path3.join(dataDir, "logs");
+var toolsDir = path4.join(dataDir, "tools");
+var logsDir = path4.join(dataDir, "logs");
 var run = new RunDir(dataDir);
 
 // src/guest/sessions/viewer.ts
@@ -27120,7 +27176,7 @@ var waitUntilStarted = async (id) => {
   }
   return run.readSession(id);
 };
-var viewSession = async (id) => {
+async function viewSession(id) {
   const session = await waitUntilStarted(id);
   if (session?.phase === "failed") {
     console.error("Session " + id + " could not start: " + session.message);
@@ -27136,7 +27192,7 @@ var viewSession = async (id) => {
   if (result.reason === "exit") console.log(session.harness + " exited with code " + result.exitCode + ".");
   else if (result.reason === "error") console.log("Session error: " + result.message);
   return result.reason === "exit" ? result.exitCode : 1;
-};
+}
 
 // src/guest/entries/view.ts
 if (process.argv[1]?.endsWith("view.js") && process.argv[2]) {