windows-development-sandbox 1.4.3 → 1.7.0

package/dist/runtime/db.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path21) {
-          path21 = castPath(path21, object2);
-          var index = 0, length = path21.length;
+        function baseGet(object2, path24) {
+          path24 = castPath(path24, object2);
+          var index = 0, length = path24.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path21[index++])];
+            object2 = object2[toKey(path24[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path21, args) {
-          path21 = castPath(path21, object2);
-          object2 = parent(object2, path21);
-          var func = object2 == null ? object2 : object2[toKey(last(path21))];
+        function baseInvoke(object2, path24, args) {
+          path24 = castPath(path24, object2);
+          object2 = parent(object2, path24);
+          var func = object2 == null ? object2 : object2[toKey(last(path24))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path21, srcValue) {
-          if (isKey(path21) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path21), srcValue);
+        function baseMatchesProperty(path24, srcValue) {
+          if (isKey(path24) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path24), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path21);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path21) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path24);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path24) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path21) {
-            return hasIn(object2, path21);
+          return basePickBy(object2, paths, function(value, path24) {
+            return hasIn(object2, path24);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path21 = paths[index], value = baseGet(object2, path21);
-            if (predicate(value, path21)) {
-              baseSet(result2, castPath(path21, object2), value);
+            var path24 = paths[index], value = baseGet(object2, path24);
+            if (predicate(value, path24)) {
+              baseSet(result2, castPath(path24, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path21) {
+        function basePropertyDeep(path24) {
           return function(object2) {
-            return baseGet(object2, path21);
+            return baseGet(object2, path24);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path21, value, customizer) {
+        function baseSet(object2, path24, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path21 = castPath(path21, object2);
-          var index = -1, length = path21.length, lastIndex = length - 1, nested = object2;
+          path24 = castPath(path24, object2);
+          var index = -1, length = path24.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path21[index]), newValue = value;
+            var key = toKey(path24[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path21[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path24[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path21) {
-          path21 = castPath(path21, object2);
-          var index = -1, length = path21.length;
+        function baseUnset(object2, path24) {
+          path24 = castPath(path24, object2);
+          var index = -1, length = path24.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path21[index]);
+            var key = toKey(path24[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path21);
-          return obj == null || delete obj[toKey(last(path21))];
+          var obj = parent(object2, path24);
+          return obj == null || delete obj[toKey(last(path24))];
         }
-        function baseUpdate(object2, path21, updater, customizer) {
-          return baseSet(object2, path21, updater(baseGet(object2, path21)), customizer);
+        function baseUpdate(object2, path24, updater, customizer) {
+          return baseSet(object2, path24, updater(baseGet(object2, path24)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path21, hasFunc) {
-          path21 = castPath(path21, object2);
-          var index = -1, length = path21.length, result2 = false;
+        function hasPath(object2, path24, hasFunc) {
+          path24 = castPath(path24, object2);
+          var index = -1, length = path24.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path21[index]);
+            var key = toKey(path24[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path21) {
-          return path21.length < 2 ? object2 : baseGet(object2, baseSlice(path21, 0, -1));
+        function parent(object2, path24) {
+          return path24.length < 2 ? object2 : baseGet(object2, baseSlice(path24, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path21, args) {
-          var index = -1, isFunc = typeof path21 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path24, args) {
+          var index = -1, isFunc = typeof path24 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path21, value, args) : baseInvoke(value, path21, args);
+            result2[++index] = isFunc ? apply(path24, value, args) : baseInvoke(value, path24, args);
           });
           return result2;
         });
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path21, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path21);
+        function get(object2, path24, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path24);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path21) {
-          return object2 != null && hasPath(object2, path21, baseHas);
+        function has(object2, path24) {
+          return object2 != null && hasPath(object2, path24, baseHas);
         }
-        function hasIn(object2, path21) {
-          return object2 != null && hasPath(object2, path21, baseHasIn);
+        function hasIn(object2, path24) {
+          return object2 != null && hasPath(object2, path24, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path21) {
-            path21 = castPath(path21, object2);
-            isDeep || (isDeep = path21.length > 1);
-            return path21;
+          paths = arrayMap(paths, function(path24) {
+            path24 = castPath(path24, object2);
+            isDeep || (isDeep = path24.length > 1);
+            return path24;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path21) {
-            return predicate(value, path21[0]);
+          return basePickBy(object2, props, function(value, path24) {
+            return predicate(value, path24[0]);
           });
         }
-        function result(object2, path21, defaultValue) {
-          path21 = castPath(path21, object2);
-          var index = -1, length = path21.length;
+        function result(object2, path24, defaultValue) {
+          path24 = castPath(path24, object2);
+          var index = -1, length = path24.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path21[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path24[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path21, value) {
-          return object2 == null ? object2 : baseSet(object2, path21, value);
+        function set2(object2, path24, value) {
+          return object2 == null ? object2 : baseSet(object2, path24, value);
         }
-        function setWith(object2, path21, value, customizer) {
+        function setWith(object2, path24, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path21, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path24, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path21) {
-          return object2 == null ? true : baseUnset(object2, path21);
+        function unset(object2, path24) {
+          return object2 == null ? true : baseUnset(object2, path24);
         }
-        function update(object2, path21, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path21, castFunction(updater));
+        function update(object2, path24, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path24, castFunction(updater));
         }
-        function updateWith(object2, path21, updater, customizer) {
+        function updateWith(object2, path24, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path21, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path24, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path21, srcValue) {
-          return baseMatchesProperty(path21, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path24, srcValue) {
+          return baseMatchesProperty(path24, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path21, args) {
+        var method = baseRest(function(path24, args) {
           return function(object2) {
-            return baseInvoke(object2, path21, args);
+            return baseInvoke(object2, path24, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path21) {
-            return baseInvoke(object2, path21, args);
+          return function(path24) {
+            return baseInvoke(object2, path24, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path21) {
-          return isKey(path21) ? baseProperty(toKey(path21)) : basePropertyDeep(path21);
+        function property(path24) {
+          return isKey(path24) ? baseProperty(toKey(path24)) : basePropertyDeep(path24);
         }
         function propertyOf(object2) {
-          return function(path21) {
-            return object2 == null ? undefined2 : baseGet(object2, path21);
+          return function(path24) {
+            return object2 == null ? undefined2 : baseGet(object2, path24);
           };
         }
         var range = createRange();
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path21, args) {
-          if (typeof path21 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path24, args) {
+          if (typeof path24 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path21, args);
+            return baseInvoke(value, path24, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5532,10 +5532,41 @@ var require_lodash = __commonJS({
 });
 
 // src/core/util/errors.ts
-var errMsg = (e) => e instanceof Error ? e.message : String(e);
+function errMsg(e) {
+  return e instanceof Error ? e.message : String(e);
+}
+
+// src/shared/system.ts
+import path from "node:path";
+var systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
+function system32(exe) {
+  return path.join(systemRoot(), "System32", exe);
+}
+var SYSTEM = {
+  cmd: () => system32("cmd.exe"),
+  powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
+  tasklist: () => system32("tasklist.exe"),
+  whoami: () => system32("whoami.exe"),
+  icacls: () => system32("icacls.exe"),
+  tar: () => system32("tar.exe"),
+  reg: () => system32("reg.exe"),
+  netsh: () => system32("netsh.exe"),
+  netstat: () => system32("NETSTAT.EXE"),
+  route: () => system32("ROUTE.EXE"),
+  ipconfig: () => system32("ipconfig.exe"),
+  robocopy: () => system32("Robocopy.exe"),
+  shutdown: () => system32("shutdown.exe"),
+  dism: () => system32("Dism.exe"),
+  msiexec: () => system32("msiexec.exe"),
+  /** The .NET Framework C# compiler that ships with Windows (C# 5). */
+  csc: () => path.join(systemRoot(), "Microsoft.NET", "Framework64", "v4.0.30319", "csc.exe")
+};
+function dropInheritedModulePath(env = process.env) {
+  delete env.PSModulePath;
+}
 
 // src/guest/databases/sbx-db.ts
-import fs17 from "node:fs";
+import fs19 from "node:fs";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -6353,10 +6384,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path21) {
-  if (!path21)
+function getElementAtPath(obj, path24) {
+  if (!path24)
     return obj;
-  return path21.reduce((acc, key) => acc?.[key], obj);
+  return path24.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6696,11 +6727,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path21, issues) {
+function prefixIssues(path24, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path21);
+    iss.path.unshift(path24);
     return iss;
   });
 }
@@ -7150,16 +7181,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path21 = []) => {
+  const processError = (error63, path24 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path21, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path24, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path24, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path24, ...issue2.path]);
       } else {
-        const fullpath = [...path21, ...issue2.path];
+        const fullpath = [...path24, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7198,17 +7229,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path21 = []) => {
+  const processError = (error63, path24 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path21, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path24, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path24, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path21, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path24, ...issue2.path]);
       } else {
-        const fullpath = [...path21, ...issue2.path];
+        const fullpath = [...path24, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7247,8 +7278,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path21 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path21) {
+  const path24 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path24) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -24350,13 +24381,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path21 = ref.slice(1).split("/").filter(Boolean);
-  if (path21.length === 0) {
+  const path24 = ref.slice(1).split("/").filter(Boolean);
+  if (path24.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path21[0] === defsKey) {
-    const key = path21[1] === void 0 ? void 0 : decodeJSONPointerSegment(path21[1]);
+  if (path24[0] === defsKey) {
+    const key = path24[1] === void 0 ? void 0 : decodeJSONPointerSegment(path24[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25210,7 +25241,7 @@ var RESERVED_GUEST = /^C:\\(?:Windows|Program Files|Program Files \(x86\)|Progra
 var MIRROR_LETTER = /^[D-Z]$/;
 var DRIVE_PATH = /^([A-Za-z]):\\(.*)$/;
 var BAD_CHARS = /[<>:"|?*/\x00-\x1f]/;
-var isValidGuestPath = (guest) => {
+function isValidGuestPath(guest) {
   const m = DRIVE_PATH.exec(guest);
   if (!m) return false;
   const letter = m[1].toUpperCase();
@@ -25220,7 +25251,7 @@ var isValidGuestPath = (guest) => {
     return false;
   if (letter === "C") return !RESERVED_GUEST.test("C:\\" + rest);
   return MIRROR_LETTER.test(letter);
-};
+}
 
 // src/core/schema/common.ts
 var GuestPathSchema = external_exports.string().refine(
@@ -25229,23 +25260,34 @@ var GuestPathSchema = external_exports.string().refine(
 );
 var NameSchema = external_exports.string().regex(/^[A-Za-z0-9_-]+$/, "letters, numbers, - and _ only");
 var StringsSchema = external_exports.array(external_exports.string());
-var toggle = (description) => external_exports.strictObject({ enabled: external_exports.boolean().describe(description) });
+function toggle(description) {
+  return external_exports.strictObject({ enabled: external_exports.boolean().describe(description) });
+}
 var SchemaRefSchema = external_exports.string().describe("Path or URL of the JSON Schema for editor autocomplete and docs.");
 var GitAccessSchema = external_exports.enum(["full", "readonly", "none"]).describe(
   "full: normal git. readonly: status/log/diff/show/blame only (no commit, push, checkout, ...). none: no git at all; .git is hidden from the agent."
 );
 var EnabledSchema = external_exports.union([external_exports.boolean(), external_exports.literal("auto")]);
-var enabled = (what, markers) => EnabledSchema.describe(what + ' true, false, or "auto" = only when the project has ' + markers + ".");
-var Packages = (what, example) => StringsSchema.describe(what + ", installed once and kept (e.g. " + example + ").");
+function enabled(what, markers) {
+  return EnabledSchema.describe(what + ' true, false, or "auto" = only when the project has ' + markers + ".");
+}
+function Packages(what, example) {
+  return StringsSchema.describe(what + ", installed once and kept (e.g. " + example + ").");
+}
+function secret(schema) {
+  return schema.meta({ secret: true });
+}
 
 // src/core/schema/config.ts
 var import_lodash = __toESM(require_lodash(), 1);
 
 // src/core/schema/databases.ts
 var PortSchema = external_exports.number().int().min(1024).max(65535);
-var dbEnabled = (name) => EnabledSchema.describe(
-  name + ': true, false, or "auto" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings).'
-);
+function dbEnabled(name) {
+  return EnabledSchema.describe(
+    name + ': true, false, or "auto" = only when the project needs it (found from compose files, dependencies of every language, Prisma/ORM config and connection strings).'
+  );
+}
 var DatabasesSchema = external_exports.strictObject({
   postgres: external_exports.strictObject({
     enabled: dbEnabled("PostgreSQL (with psql, pg_dump). User postgres, no password, localhost only"),
@@ -25284,6 +25326,17 @@ var DatabasesSchema = external_exports.strictObject({
 });
 
 // src/core/schema/harness.ts
+var SubfolderSchema = external_exports.string().regex(/^(?!.*(^|[\\/])\.\.([\\/]|$))[A-Za-z0-9._ -]+([\\/][A-Za-z0-9._ -]+)*$/, "a plain relative folder");
+var HarnessHomeSchema = external_exports.strictObject({
+  env: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/), SubfolderSchema).describe("Environment variable -> folder (below the sandbox state folder) the agent keeps its data in."),
+  profileDirs: external_exports.array(SubfolderSchema.refine((d) => !d.split(/[\\/]/).includes("."), "a plain relative folder")).max(8).optional().describe(
+    "Folders below the sandbox's user profile (e.g. .qwen, .config/opencode) the agent keeps its data in: each becomes a link to state\\<agent>\\profile\\<folder>, so it survives between sandboxes."
+  ),
+  loginFiles: external_exports.array(SubfolderSchema).describe("Files that make up the login, relative to the agent's own state folder (state\\<agent>)."),
+  hostDir: external_exports.string().optional().describe(
+    "The agent's own folder on this PC (e.g. ~/.codex): loginFiles are read from it to save this PC's login."
+  )
+});
 var HarnessSchema = external_exports.strictObject({
   hostExecutable: external_exports.string().optional().describe("Executable copied from this PC when installed here (e.g. claude.exe)."),
   hostDir: external_exports.string().optional().describe('Folder of hostExecutable on this PC, or "auto" to search PATH and ~/.local/bin.'),
@@ -25292,11 +25345,25 @@ var HarnessSchema = external_exports.strictObject({
   uvPackage: external_exports.string().optional().describe("Python package installed with `uv tool install` inside the sandbox (e.g. aider-chat)."),
   uvBin: external_exports.string().optional().describe("Command the uv package provides."),
   arguments: StringsSchema.describe("Arguments always passed to the agent."),
-  environment: external_exports.record(external_exports.string(), external_exports.string()).describe("Environment variables for the agent."),
+  environment: external_exports.record(external_exports.string(), secret(external_exports.string())).describe(
+    "Environment variables for the agent (API keys go here). Their values are shown as *** and are handed to the sandbox in a one-shot file, never kept in the launch folder. The agent can read its own environment."
+  ),
+  home: HarnessHomeSchema.optional().describe(
+    "Where its login lives inside the sandbox; leave out when the agent cannot be pointed at a folder (then its login is not kept between sandboxes)."
+  ),
+  localState: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/), SubfolderSchema).optional().describe(
+    "Environment variable -> folder below the agent's own state folder (state\\<agent>) for SQLite databases. SQLite cannot run in a mapped folder, so the agent runs from a copy on the sandbox's disk (the variable points to it) that is copied from and back to that folder."
+  ),
   resumeArguments: StringsSchema.optional().describe(
     "Arguments used when the agent is restarted in place (e.g. after an account switch) so it resumes the conversation."
+  ),
+  resumeOneArguments: StringsSchema.optional().describe(
+    "Arguments that reopen one conversation, with {id} where its id goes (claude: --resume {id}). Used instead of resumeArguments when the conversation of a session is known."
   )
-}).refine((h) => h.hostExecutable || h.npmPackage || h.uvPackage, "needs hostExecutable, npmPackage or uvPackage").refine((h) => !h.uvPackage || h.uvBin, "needs uvBin when uvPackage is set").refine((h) => !h.npmPackage || h.npmBin, "needs npmBin when npmPackage is set");
+}).refine(
+  (h) => !h.resumeOneArguments || h.resumeOneArguments.some((a) => a.includes("{id}")),
+  "needs {id} in resumeOneArguments"
+).refine((h) => h.hostExecutable || h.npmPackage || h.uvPackage, "needs hostExecutable, npmPackage or uvPackage").refine((h) => !h.uvPackage || h.uvBin, "needs uvBin when uvPackage is set").refine((h) => !h.npmPackage || h.npmBin, "needs npmBin when npmPackage is set");
 
 // src/core/schema/profile.ts
 var SecretsSchema = external_exports.strictObject({
@@ -25338,6 +25405,9 @@ var ClaudeProfileSchema = external_exports.strictObject({
   globalStateFile: external_exports.string().describe('Your .claude.json, or "auto". Empty string = do not copy.'),
   copyCredentials: external_exports.boolean().describe("Copy your Claude LOGIN into the sandbox. Prefer sandbox account instead."),
   overwrite: external_exports.boolean().describe("Refresh these settings from this PC on every launch."),
+  sharePluginsAcrossAccounts: external_exports.boolean().describe(
+    "When you switch Claude accounts, copy your Claude plugins (and which ones are enabled) into a data set that has none yet. Off by default: plugins are code that runs in your sessions."
+  ),
   syncHistory: external_exports.boolean().describe("Bring conversation history in, and sync new history back (path-translated)."),
   historyScope: external_exports.enum(["project", "all"]).describe(
     `Which history comes in: "project" = only the projects in this sandbox (other projects' conversations, file backups and prompts stay on this PC), "all" = everything. Only this sandbox's projects ever sync back.`
@@ -25385,6 +25455,11 @@ var SandboxSchema = external_exports.strictObject({
     "Keep this PC from sleeping while a sandbox runs, so agents left working overnight keep going (the screen may still turn off; closing a laptop lid still sleeps it)."
   )
 });
+var SharingSchema = external_exports.strictObject({
+  otherUsers: external_exports.boolean().describe(
+    "Let other Windows users of this PC use a sandbox you start: list its sessions, attach, run commands and stop it. They use the agent logins inside it, and history goes to your account."
+  )
+});
 var PortSchema2 = external_exports.number().int().min(1).max(65535);
 var HostEntrySchema = external_exports.string().max(253).regex(
   /^(@developer|(\*\.)?([a-zA-Z0-9-]+\.)*[a-zA-Z0-9-]+)$/,
@@ -25409,7 +25484,10 @@ var NetworkSchema = external_exports.strictObject({
     "Reach servers in the sandbox from this PC: http://localhost:<pc> here goes to <sandbox> inside, while it runs. Nothing else on your network can use them."
   ),
   dns: external_exports.array(external_exports.string().regex(/^\d{1,3}(\.\d{1,3}){3}$/, "an IPv4 address like 1.1.1.1")).describe("DNS servers for the sandbox instead of your network's, e.g. 1.1.1.1 and 9.9.9.9."),
-  proxy: external_exports.string().regex(/^(https?:\/\/[^\s]+)?$/, "http://host:port").describe(
+  proxy: external_exports.string().regex(/^(https?:\/\/[^\s]+)?$/, "http://host:port").refine(
+    (v) => !/^https?:\/\/[^/?#]*@/i.test(v),
+    "no user name or password in the address (it would be stored in plain text and visible to the agent): use a proxy that needs no login"
+  ).describe(
     "An HTTP proxy the sandbox uses to reach the internet (HTTP_PROXY / HTTPS_PROXY for everything in it), e.g. http://proxy.corp:8080. Empty = none."
   )
 });
@@ -25585,8 +25663,18 @@ var ToolchainsSchema = external_exports.strictObject({
       '`openssl` on PATH, from the copy Git for Windows ships (its mingw64\\bin is not put on PATH, so it cannot shadow MinGW\'s gcc). "auto" = on.'
     )
   }).describe("Small portable command-line tools from their GitHub releases, installed once into tools\\cli."),
-  bun: toggle("Bun runtime (claude-mem needs it)."),
-  uv: toggle("uv, the Python package manager (claude-mem needs it)."),
+  bun: external_exports.strictObject({
+    enabled: enabled(
+      "Bun (JavaScript runtime and package manager; claude-mem needs it).",
+      "bun.lock, bun.lockb or bunfig.toml"
+    )
+  }),
+  uv: external_exports.strictObject({
+    enabled: enabled(
+      "uv (fast Python package and tool manager; claude-mem needs it for its search index).",
+      "uv.lock, a [tool.uv] pyproject.toml, toolchains.python.tools, or an agent installed with uv"
+    )
+  }),
   vcRuntime: toggle(
     "Microsoft Visual C++ runtime for tools that need it (a real installer, so it runs on every boot, ~15 s). PHP installs it regardless."
   ),
@@ -25599,8 +25687,8 @@ var ToolchainsSchema = external_exports.strictObject({
     )
   }),
   vscode: external_exports.strictObject({
-    enabled: external_exports.boolean().describe(
-      "Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist."
+    enabled: EnabledSchema.describe(
+      'Portable VS Code inside the sandbox (code on PATH, desktop shortcut); its settings and extensions persist. true, false, or "auto" = when VS Code is installed on this PC.'
     ),
     setup: external_exports.boolean().describe(
       "Point VS Code at the sandbox's own tools (JDK, Python, Go, compilers, .NET, Git, PowerShell 7 and Git Bash terminals) and install the language extensions for the toolchains in use."
@@ -25801,6 +25889,17 @@ var APPS = [
     exe: "lazygit.exe",
     cli: true
   },
+  {
+    id: "jj",
+    name: "Jujutsu (jj)",
+    category: "git",
+    about: "Git-compatible version control; conflicts do not block a rebase. Pilot, untested with worktrees.",
+    size: "10 MB",
+    source: gh("jj-vcs/jj", "^jj-v[\\d.]+-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "jj.exe",
+    cli: true,
+    fullGitOnly: true
+  },
   // ---- utilities
   {
     id: "7zip",
@@ -26329,6 +26428,26 @@ var APPS = [
     source: gh("gitleaks/gitleaks", "^gitleaks_[\\d.]+_windows_x64\\.zip$"),
     exe: "gitleaks.exe",
     cli: true
+  },
+  {
+    id: "ast-grep",
+    name: "ast-grep",
+    category: "cli",
+    about: "Search and rewrite code by its syntax tree (ast-grep, sg); prints only the matches.",
+    size: "15 MB",
+    source: gh("ast-grep/ast-grep", "^app-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "ast-grep.exe",
+    cli: true
+  },
+  {
+    id: "rust-analyzer",
+    name: "rust-analyzer",
+    category: "cli",
+    about: "Rust language server: type errors and go-to-definition without cargo (for editors and the Claude LSP plugin).",
+    size: "18 MB",
+    source: gh("rust-lang/rust-analyzer", "^rust-analyzer-x86_64-pc-windows-msvc\\.zip$"),
+    exe: "rust-analyzer.exe",
+    cli: true
   }
 ];
 
@@ -26386,6 +26505,44 @@ var ProjectsSchema = external_exports.strictObject({
   )
 });
 
+// src/core/schema/resume.ts
+var RESUME_SESSIONS = ["ask", "always", "afterCrash", "never"];
+var ResumeSchema = external_exports.strictObject({
+  sessions: external_exports.enum(RESUME_SESSIONS).describe(
+    'When a sandbox starts after one that had agent sessions: "ask" lists them and asks whether to reopen them (without a terminal it prints the command sandbox resume), "always" reopens them, "afterCrash" reopens them only when the last sandbox ended unexpectedly, "never" leaves it to sandbox resume. Terminal tabs you opened yourself in the sandbox are never reopened.'
+  ),
+  restartAfterCrash: external_exports.boolean().describe(
+    "When the sandbox ends because Windows Sandbox crashed or ran out of memory, start it again by itself and reopen its sessions (at most 3 times in 6 hours)."
+  )
+});
+
+// src/core/schema/web.ts
+var WebSchema = external_exports.strictObject({
+  enabled: external_exports.boolean().describe(
+    "(Beta) Allow the web UI: your sandbox sessions in a browser on this PC. Off by default, and nothing starts it by itself yet: sandbox web start works either way and runs it until sandbox web stop (or a restart of the PC)."
+  ),
+  port: external_exports.number().int().min(1024).max(65535).describe("Port of the web UI on 127.0.0.1 (this PC only). Pick another when it is taken.")
+});
+
+// src/core/schema/vpn.ts
+var VPN_PROVIDERS = ["nordvpn", "openvpn-file"];
+var VpnSchema = external_exports.strictObject({
+  enabled: external_exports.boolean().describe(
+    "Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (sandbox vpn login). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."
+  ),
+  provider: external_exports.enum(VPN_PROVIDERS).describe(
+    "nordvpn: a recommended NordVPN server is picked at every launch. openvpn-file: your own .ovpn file (configFile)."
+  ),
+  protocol: external_exports.enum(["udp", "tcp"]).describe("udp is faster; tcp gets through networks that block udp."),
+  country: external_exports.string().regex(/^([A-Za-z][A-Za-z .'-]{0,39})?$/, "a country name or code like uk or Germany").describe("nordvpn: the country of the server, e.g. uk, us or Germany. Empty = the best server anywhere."),
+  configFile: external_exports.string().describe(
+    "openvpn-file: the .ovpn file on this PC (its certificates inside it). Files that run programs (script-security, up, down, plugin ...) are refused. A project's file can never set this."
+  ),
+  killSwitch: external_exports.boolean().describe(
+    "Block all traffic that does not go through the tunnel: when the tunnel cannot start, the sandbox stays offline instead of using your normal connection. A project can only turn this on, never off."
+  )
+});
+
 // src/core/schema/config.ts
 var ConfigSchema = external_exports.strictObject({
   $schema: SchemaRefSchema.optional(),
@@ -26396,8 +26553,11 @@ var ConfigSchema = external_exports.strictObject({
   audit: AuditSchema,
   mappings: external_exports.array(MappingSchema).describe("Extra folders from this PC."),
   sandbox: SandboxSchema,
+  sharing: SharingSchema,
   storage: external_exports.strictObject({
-    root: external_exports.string().min(1).describe("Where everything is kept on this PC (tools, databases, logins, launches)."),
+    root: external_exports.string().min(1).describe(
+      "Where everything is kept on this PC (tools, databases, logins, launches). The default is a private folder for you under %ProgramData%\\AgentSandbox\\users, which works for installs for one user and for everyone. sandbox storage move <folder> moves it."
+    ),
     persistAgentState: external_exports.boolean().describe("Keep agent logins and history between sandboxes."),
     dataName: NameSchema.describe("Name of the persistent data set (C:\\AgentData) shared by all workspaces."),
     markSandboxFiles: external_exports.boolean().describe(
@@ -26408,6 +26568,7 @@ var ConfigSchema = external_exports.strictObject({
     )
   }),
   network: NetworkSchema,
+  vpn: VpnSchema,
   provisioning: ProvisioningSchema,
   downloads: DownloadsSchema,
   toolchains: ToolchainsSchema,
@@ -26415,6 +26576,7 @@ var ConfigSchema = external_exports.strictObject({
     "Databases running inside the sandbox. Data persists in C:\\AgentData\\databases; each one starts at boot."
   ),
   attach: AttachSchema,
+  web: WebSchema,
   agentCommands: AgentCommandsSchema,
   secrets: SecretsSchema,
   personalization: toggle("Copy your desktop look (theme, accent, taskbar, wallpaper, ...) into the sandbox."),
@@ -26424,7 +26586,8 @@ var ConfigSchema = external_exports.strictObject({
   hooks: external_exports.strictObject({ failFast: external_exports.boolean().describe("Stop when a hook script fails.") }),
   projects: ProjectsSchema.describe(
     "Several projects in one sandbox: folders of projects mapped at every start, and adding folders while it runs."
-  )
+  ),
+  resume: ResumeSchema.describe("Reopening the sessions of the last sandbox when a new one starts.")
 }).refine((c) => c.harnesses[c.defaultHarness] !== void 0, {
   message: "defaultHarness must be one of the configured harnesses",
   path: ["defaultHarness"]
@@ -26446,6 +26609,8 @@ var LocalOverridesSchema = external_exports.strictObject({
   sandbox: SandboxSchema.omit({ cpuLimit: true, pageFileMb: true }).partial(),
   // A project may block more (the LAN, hosts); it never opens hosts, ports, DNS or a proxy.
   network: NetworkSchema.pick({ blockPrivateRanges: true, blockHosts: true }).partial(),
+  // A project may turn the kill switch on, never off, and never choose a VPN, a server, a file or a login.
+  vpn: VpnSchema.pick({ killSwitch: true }).partial(),
   provisioning: ProvisioningSchema.pick({ copyFromHost: true, fallbackToInstall: true, refresh: true }).extend({ git: GitSchema.partial(), terminal: toggle("Windows Terminal as the sandbox window.").partial() }).partial(),
   downloads: DownloadsSchema.partial(),
   // Every toolchain setting, each one optional (a project usually only switches languages on or pins a version).
@@ -26572,6 +26737,8 @@ var SessionStatusSchema = external_exports.object({
   message: Text(),
   updatedAt: TimeSchema,
   startedAt: TimeSchema,
+  /** The agent's own conversation this session is in (Claude: the file name of its .jsonl), once known. */
+  conversation: Text(128).optional(),
   exitCode: external_exports.number().int().optional(),
   attach: AttachEndpointSchema.optional()
 });
@@ -26584,23 +26751,35 @@ var ProjectStatusSchema = external_exports.object({
   databases: external_exports.array(external_exports.object({ database: Text(32), port: external_exports.number().int() })).max(16),
   summary: external_exports.array(Text(512)).max(64)
 });
+var VpnStatusSchema = external_exports.object({
+  state: external_exports.enum(["off", "starting", "up", "failed"]),
+  message: Text(2e3),
+  killSwitch: external_exports.boolean(),
+  /** The server's name, e.g. uk2201.nordvpn.com. */
+  server: Text(128).optional(),
+  /** What the sandbox's traffic looks like from outside, once the tunnel is up. */
+  publicIp: Text(64).optional(),
+  updatedAt: TimeSchema
+});
 
 // src/guest/runtime/ports.ts
 import net from "node:net";
-var portOpen = (port) => new Promise((resolve) => {
-  const socket = net.connect({ host: "127.0.0.1", port }, () => {
-    socket.destroy();
-    resolve(true);
+function portOpen(port) {
+  return new Promise((resolve) => {
+    const socket = net.connect({ host: "127.0.0.1", port }, () => {
+      socket.destroy();
+      resolve(true);
+    });
+    socket.once("error", () => resolve(false));
   });
-  socket.once("error", () => resolve(false));
-});
-var waitForPort = async (port, seconds) => {
+}
+async function waitForPort(port, seconds) {
   for (const end = Date.now() + seconds * 1e3; Date.now() < end; ) {
     if (await portOpen(port)) return true;
     await new Promise((r) => setTimeout(r, 300));
   }
   return false;
-};
+}
 
 // src/guest/databases/names.ts
 var DATABASE_NAMES = {
@@ -26613,67 +26792,71 @@ var DATABASE_NAMES = {
 };
 
 // src/guest/runtime/paths.ts
-import path5 from "node:path";
+import path6 from "node:path";
 
 // src/shared/channel/run-dir.ts
 import fs4 from "node:fs";
-import path4 from "node:path";
+import path5 from "node:path";
 
 // src/shared/io/json.ts
 import fs2 from "node:fs";
-import path2 from "node:path";
+import path3 from "node:path";
 
 // src/shared/test-guard.ts
 import fs from "node:fs";
 import os from "node:os";
-import path from "node:path";
-var selfTestRunning = () => process.env.AGENT_SANDBOX_SELFTEST === "1";
+import path2 from "node:path";
+function selfTestRunning() {
+  return process.env.AGENT_SANDBOX_SELFTEST === "1";
+}
 var canonical = (p) => {
   let rest = "";
-  let current = path.resolve(p);
+  let current = path2.resolve(p);
   for (; ; ) {
     try {
-      return path.join(fs.realpathSync.native(current), rest).toLowerCase();
+      return path2.join(fs.realpathSync.native(current), rest).toLowerCase();
     } catch {
-      const parent = path.dirname(current);
-      if (parent === current) return path.resolve(p).toLowerCase();
-      rest = path.join(path.basename(current), rest);
+      const parent = path2.dirname(current);
+      if (parent === current) return path2.resolve(p).toLowerCase();
+      rest = path2.join(path2.basename(current), rest);
       current = parent;
     }
   }
 };
-var testWriteRefusal = (target) => {
+function testWriteRefusal(target) {
   if (!selfTestRunning()) return null;
   const temp = canonical(os.tmpdir());
   const t = canonical(target);
-  return t === temp || t.startsWith(temp + path.sep) ? null : "The self-test refused to change " + target + ": it only works in temp folders, so it can never change this PC.";
-};
-var assertTestWritable = (target) => {
+  return t === temp || t.startsWith(temp + path2.sep) ? null : "The self-test refused to change " + target + ": it only works in temp folders, so it can never change this PC.";
+}
+function assertTestWritable(target) {
   const refusal = testWriteRefusal(target);
   if (refusal) throw new Error(refusal);
-};
+}
 
 // src/shared/io/json.ts
 var MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
-var readJsonFile = (file2) => {
+function readJsonFile(file2) {
   try {
     if (fs2.statSync(file2).size > MAX_MESSAGE_BYTES) return null;
     return JSON.parse(fs2.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""));
   } catch {
     return null;
   }
-};
-var readValid = (schema, file2) => {
+}
+function readValid(schema, file2) {
   const parsed = schema.safeParse(readJsonFile(file2));
   return parsed.success ? parsed.data : null;
-};
+}
 var pause = (ms) => {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 };
-var writeJsonAtomic = (file2, value) => writeFileAtomic(file2, JSON.stringify(value, null, 2) + "\n");
-var writeFileAtomic = (file2, text) => {
+function writeJsonAtomic(file2, value) {
+  return writeFileAtomic(file2, JSON.stringify(value, null, 2) + "\n");
+}
+function writeFileAtomic(file2, text) {
   assertTestWritable(file2);
-  fs2.mkdirSync(path2.dirname(file2), { recursive: true });
+  fs2.mkdirSync(path3.dirname(file2), { recursive: true });
   const temp = file2 + "." + process.pid + "-" + Math.random().toString(36).slice(2) + ".tmp";
   fs2.writeFileSync(temp, text, { encoding: "utf8", flag: "wx" });
   for (let attempt = 1; ; attempt++) {
@@ -26689,25 +26872,26 @@ var writeFileAtomic = (file2, text) => {
       pause(50 * attempt);
     }
   }
-};
+}
 
 // src/shared/io/safe-remove.ts
 import fs3 from "node:fs";
 import os2 from "node:os";
-import path3 from "node:path";
-var norm = (p) => path3.resolve(p).replace(/[\\/]+$/, "").toLowerCase();
+import path4 from "node:path";
+var norm = (p) => path4.resolve(p).replace(/[\\/]+$/, "").toLowerCase();
 var isAncestorOrSame = (parent, child) => {
   const a = norm(parent);
   const b = norm(child);
-  return a === b || b.startsWith(a + path3.sep);
+  return a === b || b.startsWith(a + path4.sep);
 };
+var depthBelow = (parent, child) => path4.relative(norm(parent), norm(child)).split(path4.sep).filter(Boolean).length;
 var protectedFolders = () => [
   os2.homedir(),
   process.env.USERPROFILE,
   process.env.APPDATA,
   process.env.LOCALAPPDATA,
-  path3.join(os2.homedir(), "Documents"),
-  path3.join(os2.homedir(), "Desktop"),
+  path4.join(os2.homedir(), "Documents"),
+  path4.join(os2.homedir(), "Desktop"),
   process.env.SystemRoot,
   process.env.WINDIR,
   process.env.ProgramFiles,
@@ -26716,28 +26900,24 @@ var protectedFolders = () => [
   "C:\\Users",
   "C:\\Windows"
 ].filter((p) => typeof p === "string" && p.trim() !== "");
-var systemFolders = () => [
-  process.env.SystemRoot,
-  process.env.WINDIR,
-  process.env.ProgramFiles,
-  process.env["ProgramFiles(x86)"],
-  "C:\\Windows",
-  "C:\\Program Files",
-  "C:\\Program Files (x86)"
-].filter((p) => typeof p === "string" && p.trim() !== "");
-var removeRefusal = (target, root) => {
-  if (!target || !path3.isAbsolute(target) || !root || !path3.isAbsolute(root)) return "not an absolute path";
+var present = (paths) => paths.filter((p) => typeof p === "string" && p.trim() !== "");
+var windowsFolders = () => present([process.env.SystemRoot, process.env.WINDIR, "C:\\Windows"]);
+var programFolders = () => present([process.env.ProgramFiles, process.env["ProgramFiles(x86)"], "C:\\Program Files", "C:\\Program Files (x86)"]);
+function removeRefusal(target, root) {
+  if (!target || !path4.isAbsolute(target) || !root || !path4.isAbsolute(root)) return "not an absolute path";
   if (/^[\\/]{2}[?.][\\/]/.test(target) || /^[\\/]{2}[?.][\\/]/.test(root)) return "a device path (\\\\?\\ or \\\\.\\)";
   const t = norm(target);
-  if (t === norm(path3.parse(t).root)) return "a drive root";
+  if (t === norm(path4.parse(t).root)) return "a drive root";
   const hit = protectedFolders().find((p) => isAncestorOrSame(t, p));
   if (hit) return "it is, or contains, " + hit;
-  const system = systemFolders().find((p) => isAncestorOrSame(p, t));
-  if (system) return "it is inside " + system;
-  if (!t.startsWith(norm(root) + path3.sep)) return "it is not inside " + root;
+  const windows = windowsFolders().find((p) => isAncestorOrSame(p, t));
+  if (windows) return "it is inside " + windows;
+  const program = programFolders().find((p) => isAncestorOrSame(p, t));
+  if (program && !(isAncestorOrSame(program, root) && depthBelow(program, root) >= 2)) return "it is inside " + program;
+  if (!t.startsWith(norm(root) + path4.sep)) return "it is not inside " + root;
   return null;
-};
-var safeRemove = (target, root) => {
+}
+function safeRemove(target, root) {
   const refusal = removeRefusal(target, root);
   if (refusal) throw new Error("Refusing to delete " + target + ": " + refusal);
   assertTestWritable(target);
@@ -26756,7 +26936,7 @@ var safeRemove = (target, root) => {
     return;
   }
   fs3.rmSync(target, { recursive: true, force: true, maxRetries: 2 });
-};
+}
 
 // src/shared/channel/run-dir.ts
 function safeId(id) {
@@ -26768,45 +26948,56 @@ var scan = (schema, dir) => {
   const invalid = [];
   for (const name of fs4.readdirSync(dir)) {
     if (name.endsWith(".tmp")) continue;
-    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name) ? readValid(schema, path4.join(dir, name)) : null;
+    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name) ? readValid(schema, path5.join(dir, name)) : null;
     if (message) valid.push(message);
-    else invalid.push(path4.join(dir, name));
+    else invalid.push(path5.join(dir, name));
   }
   return { valid, invalid };
 };
 var RunDir = class {
   root;
   sandboxFile;
+  vpnFile;
   requestsDir;
   responsesDir;
   sessionsDir;
   projectsDir;
   /** audit.processes: programs the sandbox started, in small .jsonl files the host takes in and deletes. */
   auditDir;
+  /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
+  secretsDir;
   constructor(dataDir2) {
-    this.root = path4.join(dataDir2, "run");
-    this.sandboxFile = path4.join(this.root, "sandbox.json");
-    this.requestsDir = path4.join(this.root, "requests");
-    this.responsesDir = path4.join(this.root, "responses");
-    this.sessionsDir = path4.join(this.root, "sessions");
-    this.projectsDir = path4.join(this.root, "projects");
-    this.auditDir = path4.join(this.root, "audit");
+    this.root = path5.join(dataDir2, "run");
+    this.sandboxFile = path5.join(this.root, "sandbox.json");
+    this.vpnFile = path5.join(this.root, "vpn.json");
+    this.requestsDir = path5.join(this.root, "requests");
+    this.responsesDir = path5.join(this.root, "responses");
+    this.sessionsDir = path5.join(this.root, "sessions");
+    this.projectsDir = path5.join(this.root, "projects");
+    this.auditDir = path5.join(this.root, "audit");
+    this.secretsDir = path5.join(dataDir2, "secrets");
   }
   requestFile(id) {
-    return path4.join(this.requestsDir, safeId(id) + ".json");
+    return path5.join(this.requestsDir, safeId(id) + ".json");
   }
   responseFile(id) {
-    return path4.join(this.responsesDir, safeId(id) + ".json");
+    return path5.join(this.responsesDir, safeId(id) + ".json");
   }
   sessionFile(id) {
-    return path4.join(this.sessionsDir, safeId(id) + ".json");
+    return path5.join(this.sessionsDir, safeId(id) + ".json");
   }
   projectFile(name) {
-    return path4.join(this.projectsDir, safeId(name) + ".json");
+    return path5.join(this.projectsDir, safeId(name) + ".json");
+  }
+  secretFile(id) {
+    return path5.join(this.secretsDir, safeId(id) + ".json");
   }
   readSandboxStatus() {
     return readValid(SandboxStatusSchema, this.sandboxFile);
   }
+  readVpnStatus() {
+    return readValid(VpnStatusSchema, this.vpnFile);
+  }
   readSession(id) {
     return readValid(SessionStatusSchema, this.sessionFile(id));
   }
@@ -26835,15 +27026,15 @@ var launchDir = process.env.AGENT_LAUNCH_DIR ?? "C:\\AgentLaunch";
 var dataDir = process.env.AGENT_DATA_DIR ?? "C:\\AgentData";
 var hostToolsDir = process.env.AGENT_HOST_TOOLS_DIR ?? "C:\\HostTools";
 var localDir = process.env.AGENT_LOCAL_DIR ?? "C:\\nvm";
-var toolsDir = path5.join(dataDir, "tools");
-var logsDir = path5.join(dataDir, "logs");
+var toolsDir = path6.join(dataDir, "tools");
+var logsDir = path6.join(dataDir, "logs");
 var run = new RunDir(dataDir);
 
 // src/guest/runtime/log.ts
 import fs5 from "node:fs";
-import path6 from "node:path";
+import path7 from "node:path";
 fs5.mkdirSync(logsDir, { recursive: true });
-var logFile = path6.join(
+var logFile = path7.join(
   logsDir,
   (process.env.AGENT_LOG_PREFIX ?? "guest") + "-" + (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-") + ".log"
 );
@@ -26853,25 +27044,25 @@ var append = (line) => {
   } catch {
   }
 };
-var log = (message) => {
+function log(message) {
   console.log(message);
   append(message);
-};
-var warn = (message) => {
+}
+function warn(message) {
   console.warn("\x1B[33mWARNING: " + message + "\x1B[0m");
   append("WARNING: " + message);
-};
+}
 
 // src/guest/runtime/project-context.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 
 // src/guest/runtime/session.ts
-import fs8 from "node:fs";
-import path10 from "node:path";
+import fs9 from "node:fs";
+import path11 from "node:path";
 
 // src/shared/download/http.ts
 var USER_AGENT = "windows-development-sandbox";
-var fetchRetry = async (url2, init = {}, attempts = 5, timeoutMs = 6e4) => {
+async function fetchRetry(url2, init = {}, attempts = 5, timeoutMs = 6e4) {
   let last;
   for (let i = 1; i <= attempts; i++) {
     try {
@@ -26889,81 +27080,89 @@ var fetchRetry = async (url2, init = {}, attempts = 5, timeoutMs = 6e4) => {
     if (i < attempts) await new Promise((r) => setTimeout(r, 3e3));
   }
   throw last instanceof Error ? last : new Error(String(last));
-};
-var fetchJson = async (url2) => await (await fetchRetry(url2, { headers: { Accept: "application/json" } }, 2, 2e4)).json();
-var fetchText = async (url2) => await (await fetchRetry(url2)).text();
+}
+async function fetchJson(url2) {
+  return await (await fetchRetry(url2, { headers: { Accept: "application/json" } }, 2, 2e4)).json();
+}
+async function fetchText(url2) {
+  return await (await fetchRetry(url2)).text();
+}
 
 // src/shared/download/archive.ts
-import fs6 from "node:fs";
-import path8 from "node:path";
+import fs7 from "node:fs";
+import path9 from "node:path";
 import crypto from "node:crypto";
 
-// src/shared/system.ts
-import path7 from "node:path";
-var systemRoot = () => process.env.SystemRoot ?? process.env.WINDIR ?? "C:\\Windows";
-var system32 = (exe) => path7.join(systemRoot(), "System32", exe);
-var SYSTEM = {
-  cmd: () => system32("cmd.exe"),
-  powershell: () => system32("WindowsPowerShell\\v1.0\\powershell.exe"),
-  tasklist: () => system32("tasklist.exe"),
-  tar: () => system32("tar.exe"),
-  reg: () => system32("reg.exe"),
-  netsh: () => system32("netsh.exe"),
-  netstat: () => system32("NETSTAT.EXE"),
-  route: () => system32("ROUTE.EXE"),
-  ipconfig: () => system32("ipconfig.exe"),
-  robocopy: () => system32("Robocopy.exe"),
-  shutdown: () => system32("shutdown.exe"),
-  dism: () => system32("Dism.exe"),
-  msiexec: () => system32("msiexec.exe")
-};
+// src/shared/scripts.ts
+import fs6 from "node:fs";
+import path8 from "node:path";
+import { fileURLToPath } from "node:url";
+var HERE = path8.dirname(fileURLToPath(import.meta.url));
+function sandboxScriptsDir() {
+  const candidates = [path8.resolve(HERE, "..", "sandbox"), path8.resolve(HERE, "..", "..", "sandbox")];
+  return candidates.find((dir) => fs6.existsSync(path8.join(dir, "boot", "bootstrap.ps1"))) ?? candidates[candidates.length - 1];
+}
+function scriptArgs(name, args = []) {
+  return [
+    "-NoLogo",
+    "-NoProfile",
+    "-NonInteractive",
+    "-ExecutionPolicy",
+    "Bypass",
+    "-File",
+    path8.join(sandboxScriptsDir(), "scripts", name),
+    ...args
+  ];
+}
 
 // src/shared/download/spawn.ts
 import { spawn } from "node:child_process";
-var spawnAsync = (file2, args, options = {}) => new Promise((resolve, reject) => {
-  const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...options });
-  child.once("error", reject);
-  child.once("close", (code) => resolve(code ?? -1));
-});
+function spawnAsync(file2, args, options = {}) {
+  return new Promise((resolve, reject) => {
+    const child = spawn(file2, args, { stdio: "ignore", windowsHide: true, ...options });
+    child.once("error", reject);
+    child.once("close", (code) => resolve(code ?? -1));
+  });
+}
 
 // src/shared/download/archive.ts
-var stagingFolder = (destination) => destination + ".staging-" + crypto.randomBytes(3).toString("hex");
-var moveIntoPlace = (work, destination) => {
-  safeRemove(destination, path8.dirname(destination));
-  fs6.mkdirSync(path8.dirname(destination), { recursive: true });
-  fs6.renameSync(work, destination);
-};
-var extractArchive = async (archive, destination, members2 = []) => {
-  fs6.mkdirSync(destination, { recursive: true });
+function stagingFolder(destination) {
+  return destination + ".staging-" + crypto.randomBytes(3).toString("hex");
+}
+function moveIntoPlace(work, destination) {
+  safeRemove(destination, path9.dirname(destination));
+  fs7.mkdirSync(path9.dirname(destination), { recursive: true });
+  fs7.renameSync(work, destination);
+}
+async function extractArchive(archive, destination, members2 = []) {
+  fs7.mkdirSync(destination, { recursive: true });
   let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
   if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
     const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
-    if (zip !== archive) fs6.copyFileSync(archive, zip);
-    status = await spawnAsync(SYSTEM.powershell(), [
-      "-NoLogo",
-      "-NoProfile",
-      "-Command",
-      "Expand-Archive -LiteralPath '" + zip.replace(/'/g, "''") + "' -DestinationPath '" + destination.replace(/'/g, "''") + "' -Force"
-    ]);
+    if (zip !== archive) fs7.copyFileSync(archive, zip);
+    status = await spawnAsync(
+      SYSTEM.powershell(),
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+    );
   }
   if (status !== 0) throw new Error("Could not extract " + archive);
-};
-var findFile = (root, name, maxDepth = 4) => {
-  if (maxDepth < 0 || !fs6.existsSync(root)) return null;
-  const entries = fs6.readdirSync(root, { withFileTypes: true });
+}
+function findFile(root, name, maxDepth = 4) {
+  if (maxDepth < 0 || !fs7.existsSync(root)) return null;
+  const entries = fs7.readdirSync(root, { withFileTypes: true });
   for (const entry of entries)
-    if (entry.isFile() && entry.name.toLowerCase() === name.toLowerCase()) return path8.join(root, entry.name);
+    if (entry.isFile() && entry.name.toLowerCase() === name.toLowerCase()) return path9.join(root, entry.name);
   for (const entry of entries)
     if (entry.isDirectory()) {
-      const found = findFile(path8.join(root, entry.name), name, maxDepth - 1);
+      const found = findFile(path9.join(root, entry.name), name, maxDepth - 1);
       if (found) return found;
     }
   return null;
-};
+}
 
 // src/shared/download/downloader.ts
-import fs7 from "node:fs";
-import path9 from "node:path";
+import fs8 from "node:fs";
+import path10 from "node:path";
 import crypto2 from "node:crypto";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
@@ -26984,12 +27183,12 @@ var Downloader = class {
     const sums = typeof expected === "string" || expected === null ? { sha256: expected } : expected;
     if (this.requireChecksum && !sums.sha256?.trim() && !sums.sha512?.trim()) {
       throw new Error(
-        "Refusing to download " + path9.basename(destination) + " (" + url2 + "): no checksum is published for it, and downloads.requireChecksum is on. Turn that setting off to allow downloads that cannot be verified."
+        "Refusing to download " + path10.basename(destination) + " (" + url2 + "): no checksum is published for it, and downloads.requireChecksum is on. Turn that setting off to allow downloads that cannot be verified."
       );
     }
     const response = await fetchRetry(url2, {}, 3, 20 * 60 * 1e3);
     if (!response.body) throw new Error("Empty response for " + url2);
-    fs7.mkdirSync(path9.dirname(destination), { recursive: true });
+    fs8.mkdirSync(path10.dirname(destination), { recursive: true });
     const checks = ["sha256", "sha512"].flatMap((kind) => {
       const want = sums[kind]?.trim().toLowerCase();
       return want ? [{ want, hash: crypto2.createHash(kind) }] : [];
@@ -27019,12 +27218,12 @@ var Downloader = class {
     });
     const partial2 = destination + ".part";
     try {
-      await pipeline(Readable.fromWeb(response.body), tap, fs7.createWriteStream(partial2));
+      await pipeline(Readable.fromWeb(response.body), tap, fs8.createWriteStream(partial2));
       if (checks.some((c) => c.hash.digest("hex") !== c.want)) throw new Error("Checksum mismatch for " + url2);
-      fs7.rmSync(destination, { force: true });
-      fs7.renameSync(partial2, destination);
+      fs8.rmSync(destination, { force: true });
+      fs8.renameSync(partial2, destination);
     } finally {
-      fs7.rmSync(partial2, { force: true });
+      fs8.rmSync(partial2, { force: true });
     }
   }
   /**
@@ -27034,21 +27233,21 @@ var Downloader = class {
   async archive(url2, destination, options = {}) {
     const work = stagingFolder(destination);
     try {
-      const archive = path9.join(work, options.fileName ?? path9.basename(new URL(url2).pathname));
+      const archive = path10.join(work, options.fileName ?? path10.basename(new URL(url2).pathname));
       await this.file(url2, archive, { sha256: options.sha256, sha512: options.sha512 });
-      const extracted = path9.join(work, "x");
+      const extracted = path10.join(work, "x");
       await extractArchive(archive, extracted, options.members);
       let root = extracted;
       if (options.locate) {
         const found = findFile(extracted, options.locate);
         if (!found) throw new Error(options.locate + " not found in " + url2);
-        root = path9.dirname(found);
-        for (let i = 0; i < (options.up ?? 0) && path9.dirname(root).startsWith(extracted); i++)
-          root = path9.dirname(root);
+        root = path10.dirname(found);
+        for (let i = 0; i < (options.up ?? 0) && path10.dirname(root).startsWith(extracted); i++)
+          root = path10.dirname(root);
       }
       moveIntoPlace(root, destination);
     } finally {
-      safeRemove(work, path9.dirname(work));
+      safeRemove(work, path10.dirname(work));
     }
   }
 };
@@ -27060,7 +27259,7 @@ var toAsset = (asset) => ({
   name: asset.name,
   sha256: asset.digest?.startsWith("sha256:") ? asset.digest.slice(7) : null
 });
-var githubAsset = async (repo, pattern, searchOlder = false) => {
+async function githubAsset(repo, pattern, searchOlder = false) {
   let latest;
   try {
     latest = await fetchJson("https://api.github.com/repos/" + repo + "/releases/latest");
@@ -27082,26 +27281,26 @@ var githubAsset = async (repo, pattern, searchOlder = false) => {
   throw new Error(
     "No asset matching " + pattern + " in the " + (searchOlder ? "stable" : "latest") + " " + repo + " release(s)"
   );
-};
-var parseReleasePage = (html) => {
+}
+function parseReleasePage(html) {
   const links = [...html.matchAll(/href="(\/[^"]+\/releases\/download\/[^"]+)"/g)];
   return links.map((link, i) => {
     const digest = /sha256:([0-9a-f]{64})/.exec(html.slice(link.index, links[i + 1]?.index ?? html.length))?.[1] ?? null;
     return { url: "https://github.com" + link[1], name: decodeURIComponent(link[1].split("/").pop()), sha256: digest };
   });
-};
-var latestGithubTag = async (repo) => {
+}
+async function latestGithubTag(repo) {
   const latest = await fetchRetry("https://github.com/" + repo + "/releases/latest", {}, 2, 2e4);
   const tag = decodeURIComponent(latest.url.split("/releases/tag/")[1] ?? "");
   return tag || Promise.reject(new Error("Could not find the latest release of " + repo));
-};
-var parseReleaseTags = (html, repo) => {
+}
+function parseReleaseTags(html, repo) {
   const escaped = repo.replace(/[.*+?^${}()|[\]\\/]/g, "\\$&");
   const tags = [...html.matchAll(new RegExp('href="/' + escaped + '/releases/tag/([^"?#]+)"', "gi"))].map(
     (m) => decodeURIComponent(m[1])
   );
   return [...new Set(tags)];
-};
+}
 var OLDER_RELEASES = 10;
 var githubAssetFromPage = async (repo, pattern, searchOlder) => {
   const assetsOf = async (tag) => parseReleasePage(
@@ -27126,17 +27325,21 @@ var githubAssetFromPage = async (repo, pattern, searchOlder) => {
 
 // src/guest/runtime/session.ts
 var session = JSON.parse(
-  fs8.readFileSync(path10.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, "")
+  fs9.readFileSync(path11.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, "")
 );
 downloader.requireChecksum = session.downloads?.requireChecksum === true;
 var workspace = process.env.AGENT_WORKSPACE ?? session.workspace;
-var stateDir = path10.join(dataDir, session.persistAgentState ? "state" : "state-session");
-var claudeDir = path10.join(stateDir, "claude");
+var stateDir = path11.join(dataDir, session.persistAgentState ? "state" : "state-session");
+var claudeDir = path11.join(stateDir, "claude");
 
 // src/guest/runtime/project-context.ts
 var store = new AsyncLocalStorage();
-var projectWorkspace = () => store.getStore()?.workspace ?? workspace;
-var duringSession = () => store.getStore()?.duringSession ?? false;
+function projectWorkspace() {
+  return store.getStore()?.workspace ?? workspace;
+}
+function duringSession() {
+  return store.getStore()?.duringSession ?? false;
+}
 
 // src/guest/databases/database-server.ts
 import { spawnSync } from "node:child_process";
@@ -27166,56 +27369,72 @@ var DatabaseServer = class {
 };
 
 // src/guest/databases/dynamodb.ts
-import fs15 from "node:fs";
-import path16 from "node:path";
+import fs17 from "node:fs";
+import path17 from "node:path";
 import { spawn as spawn3 } from "node:child_process";
 
 // src/guest/runtime/process.ts
-import path11 from "node:path";
+import fs10 from "node:fs";
+import os3 from "node:os";
+import path12 from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
-var exec = (file2, args, options = {}) => {
+function exec(file2, args, options = {}) {
   const result = spawnSync2(file2, args, { stdio: "inherit", windowsHide: true, ...options });
   if (result.error) throw result.error;
   if (result.status !== 0)
-    throw new Error(path11.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + result.status);
-};
-var execAsync = async (file2, args, options = {}) => {
+    throw new Error(path12.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + result.status);
+}
+async function execAsync(file2, args, options = {}) {
   const code = await spawnAsync(file2, args, { stdio: "inherit", ...options });
   if (code !== 0)
-    throw new Error(path11.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
-};
-var powershell = (script) => exec(SYSTEM.powershell(), ["-NoLogo", "-NoProfile", "-ExecutionPolicy", "Bypass", "-Command", script]);
+    throw new Error(path12.basename(file2) + " " + args.slice(0, 3).join(" ") + " failed with exit code " + code);
+}
+function runScript(name, args = []) {
+  exec(SYSTEM.powershell(), scriptArgs(name, args));
+}
+function runScriptWithJson(name, param, data, args = []) {
+  const dir = fs10.mkdtempSync(path12.join(os3.tmpdir(), "sbx-"));
+  const file2 = path12.join(dir, "input.json");
+  try {
+    fs10.writeFileSync(file2, JSON.stringify(data), "utf8");
+    runScript(name, ["-" + param, file2, ...args]);
+  } finally {
+    fs10.rmSync(dir, { recursive: true, force: true });
+  }
+}
 
 // src/guest/runtime/fs.ts
-import fs9 from "node:fs";
-var exists = (p) => fs9.existsSync(p);
-var mkdirp = (p) => {
-  fs9.mkdirSync(p, { recursive: true });
+import fs11 from "node:fs";
+function exists(p) {
+  return fs11.existsSync(p);
+}
+function mkdirp(p) {
+  fs11.mkdirSync(p, { recursive: true });
   return p;
-};
+}
 
 // src/guest/toolchains/languages/java.ts
-import fs13 from "node:fs";
-import path14 from "node:path";
+import fs15 from "node:fs";
+import path15 from "node:path";
 
 // src/guest/toolchains/tool-env.ts
-import path12 from "node:path";
+import path13 from "node:path";
 function emptyEnv() {
   return { vars: {}, prepend: [], append: [], summary: [] };
 }
 var arch = process.arch === "arm64" ? "arm64" : "x64";
 function tool(...parts) {
-  return path12.join(toolsDir, ...parts);
+  return path13.join(toolsDir, ...parts);
 }
 
 // src/guest/toolchains/version-cache.ts
-import fs11 from "node:fs";
+import fs13 from "node:fs";
 
 // src/guest/toolchains/state-file.ts
-import fs10 from "node:fs";
+import fs12 from "node:fs";
 function readState(file2, schema, empty) {
   try {
-    return schema.safeParse(JSON.parse(fs10.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""))).data ?? empty;
+    return schema.safeParse(JSON.parse(fs12.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""))).data ?? empty;
   } catch {
     return empty;
   }
@@ -27250,7 +27469,7 @@ var VersionCache = class {
       return cached2.value;
     try {
       const value = await resolve();
-      fs11.mkdirSync(toolsDir, { recursive: true });
+      fs13.mkdirSync(toolsDir, { recursive: true });
       writeJsonAtomic(this.file(), { ...this.remembered(), [key]: { value, at: Date.now() } });
       return value;
     } catch (e) {
@@ -27277,20 +27496,22 @@ function resolveCached(key, resolve) {
 }
 
 // src/guest/toolchains/detect.ts
-import fs12 from "node:fs";
-import path13 from "node:path";
+import fs14 from "node:fs";
+import path14 from "node:path";
 
 // src/core/detect/versions.ts
-var specFromVersionFile = (text) => /(\d+(?:\.\d+){0,2})/.exec(
-  text.split(/\r?\n/).map((l) => l.replace(/#.*$/, "").trim()).find(Boolean) ?? ""
-)?.[1] ?? null;
-var javaMajorFrom = (text, sdkmanrc = false) => {
+function specFromVersionFile(text) {
+  return /(\d+(?:\.\d+){0,2})/.exec(
+    text.split(/\r?\n/).map((l) => l.replace(/#.*$/, "").trim()).find(Boolean) ?? ""
+  )?.[1] ?? null;
+}
+function javaMajorFrom(text, sdkmanrc = false) {
   const line = sdkmanrc ? /^\s*java\s*=\s*(.+)$/m.exec(text)?.[1] : text;
   const spec = line ? specFromVersionFile(line) : null;
   if (!spec) return null;
   const [major, minor] = spec.split(".");
   return major === "1" && minor ? minor : major;
-};
+}
 
 // src/core/detect/toolchains.ts
 var MARKERS = {
@@ -27338,6 +27559,10 @@ var MARKERS = {
   ruby: ["Gemfile", "*.gemspec", ".ruby-version", "*.rb"],
   php: ["composer.json", "artisan", ".php-version", "*.php"],
   deno: ["deno.json", "deno.jsonc", "deno.lock"],
+  bun: ["bun.lock", "bun.lockb", "bunfig.toml"],
+  uv: ["uv.lock"],
+  // VS Code is decided from this PC (hints are not needed): see decideToolchains.
+  vscode: [],
   // Windows PowerShell 5.1 runs any .ps1: PowerShell 7 is decided from script contents (hints.pwsh) or this PC.
   pwsh: []
 };
@@ -27347,9 +27572,9 @@ var PROJECT_FILES = [.../* @__PURE__ */ new Set([...Object.values(MARKERS).flat(
 // src/guest/toolchains/detect.ts
 function versionFromFiles(files, parse3 = (t) => specFromVersionFile(t)) {
   for (const name of files) {
-    const file2 = path13.join(projectWorkspace(), name);
+    const file2 = path14.join(projectWorkspace(), name);
     if (!exists(file2)) continue;
-    const spec = parse3(fs12.readFileSync(file2, "utf8"), name);
+    const spec = parse3(fs14.readFileSync(file2, "utf8"), name);
     if (spec) return { spec, source: name };
   }
   return null;
@@ -27381,7 +27606,7 @@ var setupJdk = async (env, config2) => {
   const { major, source } = await javaMajor(config2);
   const release = await resolveCached("java:" + major, async () => (await temurin(major)).release_name);
   const home = tool("java", release.replace(/[^A-Za-z0-9.-]/g, "_"));
-  if (!exists(path14.join(home, "bin", "java.exe"))) {
+  if (!exists(path15.join(home, "bin", "java.exe"))) {
     const asset = await temurin(major);
     log("Downloading Java " + release + " (JDK, ~200 MB once) ...");
     await downloader.archive(asset.binary.package.link, home, {
@@ -27391,42 +27616,42 @@ var setupJdk = async (env, config2) => {
     });
   }
   env.vars.JAVA_HOME = home;
-  env.prepend.push(path14.join(home, "bin"));
+  env.prepend.push(path15.join(home, "bin"));
   env.summary.push("java: " + release + " (Temurin, from " + source + ")");
 };
 async function ensureJdk() {
   const root = tool("java");
-  const installed = exists(root) ? fs13.readdirSync(root).filter((d) => exists(path14.join(root, d, "bin", "java.exe"))).sort((a, b) => b.localeCompare(a, void 0, { numeric: true })) : [];
-  if (installed.length) return path14.join(root, installed[0]);
+  const installed = exists(root) ? fs15.readdirSync(root).filter((d) => exists(path15.join(root, d, "bin", "java.exe"))).sort((a, b) => b.localeCompare(a, void 0, { numeric: true })) : [];
+  if (installed.length) return path15.join(root, installed[0]);
   const scratch = emptyEnv();
   await setupJdk(scratch, { enabled: true, version: "lts", maven: false, gradle: false });
   return scratch.vars.JAVA_HOME;
 }
 
 // src/guest/databases/server.ts
-import fs14 from "node:fs";
-import path15 from "node:path";
+import fs16 from "node:fs";
+import path16 from "node:path";
 import { spawn as spawn2 } from "node:child_process";
 function dataFor(name) {
-  return path15.join(dataDir, "databases", name);
+  return path16.join(dataDir, "databases", name);
 }
 async function startServer(name, exe, args, port) {
   if (await portOpen(port)) throw new Error("port " + port + " is already in use (change databases." + name + ".port)");
-  const logFile2 = path15.join(logsDir, name + ".log");
-  const out = fs14.openSync(logFile2, "a");
+  const logFile2 = path16.join(logsDir, name + ".log");
+  const out = fs16.openSync(logFile2, "a");
   spawn2(exe, args, { detached: true, stdio: ["ignore", out, out], windowsHide: true }).unref();
-  fs14.closeSync(out);
+  fs16.closeSync(out);
   if (!await waitForPort(port, 60))
     throw new Error(name + " did not start listening on port " + port + "; see " + logFile2);
 }
 async function clearStaleLocks(dir, files, port) {
   if (await portOpen(port)) return;
-  for (const f of files) fs14.rmSync(path15.join(dir, f), { force: true });
+  for (const f of files) fs16.rmSync(path16.join(dir, f), { force: true });
 }
 async function createOnce(data, marker, create) {
-  if (exists(path15.join(data, marker))) return;
+  if (exists(path16.join(data, marker))) return;
   const existed = exists(data);
-  mkdirp(path15.dirname(data));
+  mkdirp(path16.dirname(data));
   try {
     await create();
   } catch (e) {
@@ -27450,9 +27675,9 @@ var DynamoServer = class extends DatabaseServer {
    * local endpoint up from AWS_ENDPOINT_URL_DYNAMODB, with dummy credentials (real ones never reach the sandbox).
    */
   async start(env, plan) {
-    const java = path16.join(await ensureJdk(), "bin", "java.exe");
+    const java = path17.join(await ensureJdk(), "bin", "java.exe");
     const home = tool("dynamodb-local");
-    if (!exists(path16.join(home, "DynamoDBLocal.jar"))) {
+    if (!exists(path17.join(home, "DynamoDBLocal.jar"))) {
       log("Downloading DynamoDB Local (~60 MB once) ...");
       const sha256 = (await fetchText(DYNAMO_ZIP + ".sha256")).trim().split(/\s+/)[0];
       await downloader.archive(DYNAMO_ZIP, home, {
@@ -27466,9 +27691,9 @@ var DynamoServer = class extends DatabaseServer {
       "dynamodb",
       java,
       [
-        "-Djava.library.path=" + path16.join(home, "DynamoDBLocal_lib"),
+        "-Djava.library.path=" + path17.join(home, "DynamoDBLocal_lib"),
         "-jar",
-        path16.join(home, "DynamoDBLocal.jar"),
+        path17.join(home, "DynamoDBLocal.jar"),
         "-sharedDb",
         "-dbPath",
         data,
@@ -27492,10 +27717,10 @@ var DynamoServer = class extends DatabaseServer {
     );
     if (!plan.adminPort) return;
     const prefix = tool("dynamodb-admin");
-    const script = path16.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
+    const script = path17.join(prefix, "node_modules", "dynamodb-admin", "dist", "dynamodb-admin.js");
     if (!exists(script)) {
       log("Installing dynamodb-admin, the DynamoDB web UI (~20 MB once) ...");
-      const npmCli = path16.join(path16.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+      const npmCli = path17.join(path17.dirname(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
       await execAsync(
         process.execPath,
         [npmCli, "install", "--global", "--prefix", prefix, "dynamodb-admin", "--no-fund", "--no-audit"],
@@ -27508,15 +27733,15 @@ var DynamoServer = class extends DatabaseServer {
       );
       return;
     }
-    const out = fs15.openSync(path16.join(logsDir, "dynamodb-admin.log"), "a");
+    const out = fs17.openSync(path17.join(logsDir, "dynamodb-admin.log"), "a");
     spawn3(
       process.execPath,
       [script, "--port", String(plan.adminPort), "--dynamo-endpoint", endpoint, "--skip-default-credentials"],
       { detached: true, stdio: ["ignore", out, out], windowsHide: true, env: { ...process.env, ...aws } }
     ).unref();
-    fs15.closeSync(out);
+    fs17.closeSync(out);
     if (!await waitForPort(plan.adminPort, 30))
-      throw new Error("dynamodb-admin did not start; see " + path16.join(logsDir, "dynamodb-admin.log"));
+      throw new Error("dynamodb-admin did not start; see " + path17.join(logsDir, "dynamodb-admin.log"));
     env.summary.push(
       "dynamodb-admin: http://localhost:" + plan.adminPort + " (browse and edit tables in the sandbox's browser)"
     );
@@ -27524,7 +27749,7 @@ var DynamoServer = class extends DatabaseServer {
 };
 
 // src/guest/databases/mongodb.ts
-import path17 from "node:path";
+import path18 from "node:path";
 
 // src/guest/toolchains/install.ts
 async function installFromGithub(repo, pattern, o) {
@@ -27553,13 +27778,13 @@ var MongoServer = class extends DatabaseServer {
     };
     const version2 = await resolveCached("mongodb:" + plan.version, async () => (await find2()).version);
     const home = tool("mongodb", version2);
-    if (!exists(path17.join(home, "bin", "mongod.exe"))) {
+    if (!exists(path18.join(home, "bin", "mongod.exe"))) {
       const { archive } = await find2();
       log("Downloading MongoDB " + version2 + " (~400 MB once) ...");
       await downloader.archive(archive.url, home, { sha256: archive.sha256, locate: "mongod.exe", up: 1 });
     }
     const shell = tool("mongosh");
-    if (!exists(path17.join(shell, "mongosh.exe"))) {
+    if (!exists(path18.join(shell, "mongosh.exe"))) {
       await installFromGithub("mongodb-js/mongosh", /^mongosh-[\d.]+-win32-x64\.zip$/, {
         dest: shell,
         what: "mongosh, the MongoDB shell (~50 MB once)",
@@ -27570,17 +27795,17 @@ var MongoServer = class extends DatabaseServer {
     await clearStaleLocks(data, ["mongod.lock"], plan.port);
     await startServer(
       "mongodb",
-      path17.join(home, "bin", "mongod.exe"),
+      path18.join(home, "bin", "mongod.exe"),
       ["--dbpath", data, "--bind_ip", "127.0.0.1", "--port", String(plan.port)],
       plan.port
     );
-    env.prepend.push(path17.join(home, "bin"), shell);
+    env.prepend.push(path18.join(home, "bin"), shell);
     env.summary.push("mongodb " + version2 + ": mongodb://127.0.0.1:" + plan.port + " (mongosh on PATH)");
   }
 };
 
 // src/guest/databases/mysql.ts
-import path18 from "node:path";
+import path19 from "node:path";
 var MARIA = "https://downloads.mariadb.org/rest-api/mariadb/";
 var MysqlServer = class extends DatabaseServer {
   id = "mysql";
@@ -27598,8 +27823,8 @@ var MysqlServer = class extends DatabaseServer {
     };
     const version2 = await resolveCached("mariadb-version:" + series, async () => (await latest()).version);
     const home = tool("mariadb", version2);
-    const bin = path18.join(home, "bin");
-    if (!exists(path18.join(bin, "mariadbd.exe"))) {
+    const bin = path19.join(home, "bin");
+    if (!exists(path19.join(bin, "mariadbd.exe"))) {
       const { zip } = await latest();
       log("Downloading MariaDB " + version2 + " (~90 MB once) ...");
       await downloader.archive(zip.file_download_url.replace(/^http:/, "https:"), home, {
@@ -27612,13 +27837,13 @@ var MysqlServer = class extends DatabaseServer {
     const data = dataFor("mariadb");
     await createOnce(data, "mysql", async () => {
       log("Creating the MariaDB database (first start) ...");
-      await execAsync(path18.join(bin, "mariadb-install-db.exe"), ["--datadir=" + data, "--port=" + plan.port], {
+      await execAsync(path19.join(bin, "mariadb-install-db.exe"), ["--datadir=" + data, "--port=" + plan.port], {
         stdio: "ignore"
       });
     });
     await startServer(
       "mysql",
-      path18.join(bin, "mariadbd.exe"),
+      path19.join(bin, "mariadbd.exe"),
       ["--datadir=" + data, "--port=" + plan.port, "--bind-address=127.0.0.1", "--console"],
       plan.port
     );
@@ -27631,8 +27856,8 @@ var MysqlServer = class extends DatabaseServer {
 };
 
 // src/guest/databases/postgres.ts
-import fs16 from "node:fs";
-import path19 from "node:path";
+import fs18 from "node:fs";
+import path20 from "node:path";
 function postgresData(version2) {
   return dataFor("postgres-" + version2.split(".")[0]);
 }
@@ -27647,8 +27872,8 @@ var PostgresServer = class extends DatabaseServer {
       return hit ? hit.major + "." + hit.latestMinor : Promise.reject(new Error("No supported PostgreSQL " + plan.version));
     });
     const home = tool("postgres", exact);
-    const bin = path19.join(home, "bin");
-    if (!exists(path19.join(bin, "pg_ctl.exe"))) {
+    const bin = path20.join(home, "bin");
+    if (!exists(path20.join(bin, "pg_ctl.exe"))) {
       log("Downloading PostgreSQL " + exact + " (~330 MB once) ...");
       await downloader.archive(
         "https://get.enterprisedb.com/postgresql/postgresql-" + exact + "-1-windows-x64-binaries.zip",
@@ -27665,7 +27890,7 @@ var PostgresServer = class extends DatabaseServer {
     await createOnce(data, "PG_VERSION", async () => {
       log("Creating the PostgreSQL database (first start) ...");
       await execAsync(
-        path19.join(bin, "initdb.exe"),
+        path20.join(bin, "initdb.exe"),
         ["-D", data, "-U", "postgres", "-A", "trust", "-E", "UTF8", "--locale=C"],
         { stdio: "ignore" }
       );
@@ -27674,7 +27899,7 @@ var PostgresServer = class extends DatabaseServer {
       throw new Error("port " + plan.port + " is already in use (change databases.postgres.port)");
     await clearStaleLocks(data, ["postmaster.pid"], plan.port);
     await execAsync(
-      path19.join(bin, "pg_ctl.exe"),
+      path20.join(bin, "pg_ctl.exe"),
       [
         "start",
         "-D",
@@ -27683,7 +27908,7 @@ var PostgresServer = class extends DatabaseServer {
         "-t",
         "60",
         "-l",
-        path19.join(logsDir, "postgres.log"),
+        path20.join(logsDir, "postgres.log"),
         "-o",
         "-p " + plan.port + " -c listen_addresses=localhost"
       ],
@@ -27698,10 +27923,10 @@ var PostgresServer = class extends DatabaseServer {
   /** Every installed version's cluster shuts down cleanly through pg_ctl first. */
   async stop(plan) {
     if (exists(tool("postgres"))) {
-      for (const version2 of fs16.readdirSync(tool("postgres"))) {
+      for (const version2 of fs18.readdirSync(tool("postgres"))) {
         const data = postgresData(version2);
-        const pgCtl = path19.join(tool("postgres", version2), "bin", "pg_ctl.exe");
-        if (exists(path19.join(data, "postmaster.pid")) && exists(pgCtl))
+        const pgCtl = path20.join(tool("postgres", version2), "bin", "pg_ctl.exe");
+        if (exists(path20.join(data, "postmaster.pid")) && exists(pgCtl))
           await execAsync(pgCtl, ["stop", "-D", data, "-m", "fast", "-w"], { stdio: "ignore" });
       }
     }
@@ -27710,12 +27935,12 @@ var PostgresServer = class extends DatabaseServer {
 };
 
 // src/guest/databases/redis.ts
-import path20 from "node:path";
+import path21 from "node:path";
 var RedisServer = class extends DatabaseServer {
   id = "redis";
   async start(env, plan) {
     const home = tool("redis");
-    if (!exists(path20.join(home, "redis-server.exe"))) {
+    if (!exists(path21.join(home, "redis-server.exe"))) {
       await installFromGithub("redis-windows/redis-windows", /^Redis-[\d.]+-Windows-x64-msys2\.zip$/, {
         dest: home,
         what: (a) => "Redis (" + a.name + ", ~10 MB once)",
@@ -27725,7 +27950,7 @@ var RedisServer = class extends DatabaseServer {
     const data = mkdirp(dataFor("redis"));
     await startServer(
       "redis",
-      path20.join(home, "redis-server.exe"),
+      path21.join(home, "redis-server.exe"),
       ["--port", String(plan.port), "--bind", "127.0.0.1", "--dir", data.replace(/\\/g, "/"), "--appendonly", "yes"],
       plan.port
     );
@@ -27769,21 +27994,45 @@ async function setupDatabase(env, plan) {
 }
 
 // src/guest/setup/environment.ts
-var addMachineEnvironment = (vars, dirs, additive = false) => {
+import path23 from "node:path";
+
+// src/guest/setup/path-plan.ts
+import path22 from "node:path";
+function pathKey(folder) {
+  const slashes = folder.trim().replace(/^"|"$/g, "").replace(/\//g, "\\");
+  return (slashes.length > 3 ? slashes.replace(/\\+$/, "") : slashes).toLowerCase();
+}
+function splitPath(value) {
+  return value.split(";").map((part) => part.trim().replace(/^"|"$/g, "")).filter(Boolean);
+}
+function planPath(input2) {
+  const seen = /* @__PURE__ */ new Set();
+  const result = [];
+  for (const entry of input2.entries.flatMap(splitPath)) {
+    const key = pathKey(entry);
+    if (seen.has(key) || input2.drop?.(entry) || !input2.exists(entry)) continue;
+    seen.add(key);
+    result.push(entry);
+  }
+  return result;
+}
+function isPinnedNodeDir(folder, nvmHome2) {
+  const key = pathKey(folder);
+  const home = pathKey(nvmHome2);
+  return key.startsWith(home + "\\") && /^v\d/.test(path22.win32.basename(key));
+}
+
+// src/guest/setup/environment.ts
+function addMachineEnvironment(vars, dirs, additive = false) {
   if (!isWin || dryRun || testMode) return;
-  const script = [
-    "$vars = '" + JSON.stringify(vars).replace(/'/g, "''") + "' | ConvertFrom-Json",
-    "foreach ($p in $vars.PSObject.Properties) { " + (additive ? "if ([Environment]::GetEnvironmentVariable($p.Name, 'Machine')) { continue }; " : "") + "[Environment]::SetEnvironmentVariable($p.Name, [string]$p.Value, 'Machine') }",
-    "$path = [Environment]::GetEnvironmentVariable('Path', 'Machine') -split ';'",
-    "$add = '" + JSON.stringify(dirs).replace(/'/g, "''") + "' | ConvertFrom-Json | Where-Object { $path -notcontains $_ }",
-    "if ($add) { [Environment]::SetEnvironmentVariable('Path', (" + (additive ? "($path + @($add))" : "(@($add) + $path)") + " -join ';'), 'Machine') }"
-  ].join("\n");
+  const planned = planPath({ entries: dirs, exists, drop: (dir) => isPinnedNodeDir(dir, nvmHome()) });
   try {
-    powershell(script);
+    runScriptWithJson("set-machine-environment.ps1", "SettingsFile", { vars, path: null, add: planned, additive });
   } catch (e) {
     warn("Could not add to the environment: " + errMsg(e));
   }
-};
+}
+var nvmHome = () => path23.join(toolsDir, "nvm");
 
 // src/guest/databases/sbx-db.ts
 var USAGE = "Usage: sbx-db [list] | sbx-db start <name> | sbx-db stop <name>";
@@ -27791,7 +28040,7 @@ var projectPlans = () => {
   const file2 = process.env.AGENT_PROJECT_FILE;
   if (!file2) return null;
   try {
-    return ProjectSpecSchema.safeParse(JSON.parse(fs17.readFileSync(file2, "utf8"))).data?.databases ?? null;
+    return ProjectSpecSchema.safeParse(JSON.parse(fs19.readFileSync(file2, "utf8"))).data?.databases ?? null;
   } catch {
     return null;
   }
@@ -27846,6 +28095,7 @@ function runSbxDb(args) {
 }
 
 // src/guest/entries/db.ts
+dropInheritedModulePath();
 runSbxDb(process.argv.slice(2)).then(
   (code) => {
     process.exitCode = code;