windows-development-sandbox 1.5.0 → 1.9.0

package/README.md

@@ -92,5 +92,6 @@ get `wsb`: [several projects](docs/projects.md#adding-folders-to-a-running-sandb
 - [Several projects](docs/projects.md): project roots, adding a project to a running sandbox, what each agent can see
 - [Changelog](CHANGELOG.md): what shipped in each version
 - [Security](docs/security.md): how your PC is protected, secrets, git access
+- [VPN](docs/vpn.md): send the sandbox through NordVPN (or your own OpenVPN profile), with a kill switch
 - [Troubleshooting](docs/troubleshooting.md): common problems and fixes
 - [Development](docs/development.md): building, testing, releasing (code layout in [CLAUDE.md](CLAUDE.md))

package/config.example.json

@@ -17,12 +17,15 @@
   },
   "mappings": [],
   "sandbox": {
+    "engine": "windows-sandbox",
     "memoryMb": "auto",
     "maxMemoryMb": 32768,
     "maxMemoryPercent": 80,
     "cpuLimit": 80,
     "pageFileMb": 16384,
     "reserveHostMb": 8192,
+    "agentMemoryHeadroomMb": "auto",
+    "pressureResponse": true,
     "vGpu": false,
     "networking": true,
     "clipboard": true,
@@ -37,10 +40,12 @@
     "otherUsers": false
   },
   "storage": {
-    "root": "%LOCALAPPDATA%\\AgentSandbox",
+    "root": "%ProgramData%\\AgentSandbox\\users\\%USERNAME%",
     "persistAgentState": true,
     "dataName": "default",
     "markSandboxFiles": true,
+    "contained": "off",
+    "containedMaxGb": 64,
     "warnDataGb": 50
   },
   "network": {
@@ -51,6 +56,14 @@
     "dns": [],
     "proxy": ""
   },
+  "vpn": {
+    "enabled": false,
+    "provider": "nordvpn",
+    "protocol": "udp",
+    "country": "",
+    "configFile": "",
+    "killSwitch": true
+  },
   "provisioning": {
     "copyFromHost": true,
     "fallbackToInstall": true,
@@ -207,6 +220,10 @@
     "auto": false,
     "autoHide": false
   },
+  "web": {
+    "enabled": false,
+    "port": 47800
+  },
   "agentCommands": {
     "enabled": false,
     "agents": "auto"
@@ -238,6 +255,7 @@
     "globalStateFile": "auto",
     "copyCredentials": false,
     "overwrite": true,
+    "sharePluginsAcrossAccounts": false,
     "syncHistory": true,
     "historyScope": "project",
     "syncClaudeMem": true,
@@ -284,6 +302,14 @@
         ],
         "hostDir": "~/.codex"
       },
+      "localState": {
+        "CODEX_SQLITE_HOME": "sqlite"
+      },
+      "bootReset": [
+        ".sandbox-secrets",
+        ".sandbox\\setup_marker.json",
+        ".sandbox\\deny_read_acl_state.json"
+      ],
       "resumeArguments": [
         "resume",
         "--last"

package/dist/app/context.d.ts

@@ -0,0 +1,8 @@
+import type { Context } from '../cli/commands/context.js';
+import type { TypedConfirm } from '../cli/commands/shared-use.js';
+import { type OperationIO } from './kernel/index.js';
+export type AppContext = Context;
+/** Attaches a run function to a definition: `implement(def, async (ctx, input, io) => output)`. */
+export declare const implement: <D extends import("./kernel/define.js").AnyDefinition>(def: D, run: (ctx: Context, input: import("zod").infer<D["input"]>, io: OperationIO) => import("zod").infer<D["output"]> | Promise<import("zod").infer<D["output"]>>) => import("./kernel/define.js").Implementation<D, Context>;
+/** Another user's sandbox asks for their name to be typed: through `io`, so every surface can ask it. */
+export declare function typedConfirm(io: OperationIO): TypedConfirm;

package/dist/app/context.js

@@ -0,0 +1,12 @@
+import { implementer } from './kernel/index.js';
+/** Attaches a run function to a definition: `implement(def, async (ctx, input, io) => output)`. */
+export const implement = implementer();
+/** Another user's sandbox asks for their name to be typed: through `io`, so every surface can ask it. */
+export function typedConfirm(io) {
+    return (prompt, expected) => io.confirm({
+        title: prompt,
+        typed: expected,
+        danger: true,
+        noTerminal: { message: prompt + ' It was not stopped.', fix: 'In a script, add --yes to do it anyway.' },
+    });
+}

package/dist/app/features/defs.d.ts

@@ -0,0 +1,322 @@
+import type { AnyDefinition, AnyView, OperationDef, QueryDef } from '../kernel/index.js';
+export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "sandbox.showWindow">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "sandbox.hideWindow">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    stopped: import("zod").ZodBoolean;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "sandbox.stop">, OperationDef<import("zod").ZodObject<{
+    harness: import("zod").ZodOptional<import("zod").ZodString>;
+    all: import("zod").ZodDefault<import("zod").ZodBoolean>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "sessions.restart">, OperationDef<import("zod").ZodObject<{
+    scope: import("zod").ZodDefault<import("zod").ZodEnum<{
+        project: "project";
+        user: "user";
+    }>>;
+    key: import("zod").ZodString;
+    value: import("zod").ZodUnknown;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    key: import("zod").ZodString;
+    changed: import("zod").ZodBoolean;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "settings.set">, OperationDef<import("zod").ZodObject<{
+    scope: import("zod").ZodDefault<import("zod").ZodEnum<{
+        project: "project";
+        user: "user";
+    }>>;
+    key: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    key: import("zod").ZodString;
+    changed: import("zod").ZodBoolean;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "settings.reset">];
+export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    shared: import("zod").ZodOptional<import("zod").ZodObject<{
+        line: import("zod").ZodString;
+        limited: import("zod").ZodBoolean;
+        startedBy: import("zod").ZodNullable<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    sandbox: import("zod").ZodObject<{
+        running: import("zod").ZodBoolean;
+        phase: import("zod").ZodString;
+        message: import("zod").ZodOptional<import("zod").ZodString>;
+        headless: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        startedAt: import("zod").ZodNullable<import("zod").ZodNumber>;
+        daemon: import("zod").ZodString;
+        account: import("zod").ZodNullable<import("zod").ZodString>;
+        syncWatcher: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>;
+    here: import("zod").ZodObject<{
+        folder: import("zod").ZodString;
+        project: import("zod").ZodNullable<import("zod").ZodString>;
+        guest: import("zod").ZodNullable<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
+    roots: import("zod").ZodArray<import("zod").ZodObject<{
+        host: import("zod").ZodString;
+        guest: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+    projects: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        host: import("zod").ZodString;
+        guest: import("zod").ZodString;
+        mechanism: import("zod").ZodString;
+        here: import("zod").ZodBoolean;
+        setup: import("zod").ZodObject<{
+            phase: import("zod").ZodString;
+            message: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>;
+        databases: import("zod").ZodArray<import("zod").ZodObject<{
+            database: import("zod").ZodString;
+            port: import("zod").ZodNumber;
+            state: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+        sessions: import("zod").ZodArray<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+            harness: import("zod").ZodString;
+            viewers: import("zod").ZodString;
+            started: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+        repoGuard: import("zod").ZodArray<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>>;
+    otherSessions: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        harness: import("zod").ZodString;
+        cwd: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+    repoGuard: import("zod").ZodObject<{
+        guarded: import("zod").ZodNumber;
+        findings: import("zod").ZodArray<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>;
+}, import("zod/v4/core").$strip>, "sandbox.status">, QueryDef<import("zod").ZodObject<{
+    wide: import("zod").ZodDefault<import("zod").ZodBoolean>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    sandboxRunning: import("zod").ZodBoolean;
+    defaultAgent: import("zod").ZodString;
+    wide: import("zod").ZodBoolean;
+    owner: import("zod").ZodOptional<import("zod").ZodString>;
+    sessions: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        launchId: import("zod").ZodString;
+        harness: import("zod").ZodString;
+        cwd: import("zod").ZodString;
+        project: import("zod").ZodOptional<import("zod").ZodString>;
+        phase: import("zod").ZodEnum<{
+            failed: "failed";
+            starting: "starting";
+            running: "running";
+            exited: "exited";
+        }>;
+        message: import("zod").ZodString;
+        updatedAt: import("zod").ZodString;
+        startedAt: import("zod").ZodString;
+        conversation: import("zod").ZodOptional<import("zod").ZodString>;
+        exitCode: import("zod").ZodOptional<import("zod").ZodNumber>;
+        projectName: import("zod").ZodOptional<import("zod").ZodString>;
+        here: import("zod").ZodOptional<import("zod").ZodBoolean>;
+        viewers: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
+            viewers: import("zod").ZodNumber;
+            remote: import("zod").ZodNumber;
+        }, import("zod/v4/core").$strip>>>;
+        canOpen: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "sessions.list">, QueryDef<import("zod").ZodObject<{
+    scope: import("zod").ZodDefault<import("zod").ZodEnum<{
+        project: "project";
+        user: "user";
+    }>>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    scope: import("zod").ZodEnum<{
+        project: "project";
+        user: "user";
+    }>;
+    file: import("zod").ZodString;
+    exists: import("zod").ZodBoolean;
+    dataFolder: import("zod").ZodOptional<import("zod").ZodString>;
+    categories: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        label: import("zod").ZodString;
+        description: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+    rows: import("zod").ZodArray<import("zod").ZodObject<{
+        id: import("zod").ZodString;
+        key: import("zod").ZodArray<import("zod").ZodString>;
+        label: import("zod").ZodString;
+        category: import("zod").ZodString;
+        section: import("zod").ZodOptional<import("zod").ZodString>;
+        field: import("zod").ZodType<import("../kernel/fields.js").Field, unknown, import("zod/v4/core").$ZodTypeInternals<import("../kernel/fields.js").Field, unknown>>;
+        value: import("zod").ZodUnknown;
+        set: import("zod").ZodBoolean;
+        yours: import("zod").ZodUnknown;
+        yoursSet: import("zod").ZodBoolean;
+        inProject: import("zod").ZodOptional<import("zod").ZodUnknown>;
+        default: import("zod").ZodOptional<import("zod").ZodUnknown>;
+        locked: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "settings.list">, QueryDef<import("zod").ZodObject<{
+    key: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    key: import("zod").ZodString;
+    value: import("zod").ZodUnknown;
+}, import("zod/v4/core").$strip>, "settings.get">];
+export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
+    status: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        shared: import("zod").ZodOptional<import("zod").ZodObject<{
+            line: import("zod").ZodString;
+            limited: import("zod").ZodBoolean;
+            startedBy: import("zod").ZodNullable<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        sandbox: import("zod").ZodObject<{
+            running: import("zod").ZodBoolean;
+            phase: import("zod").ZodString;
+            message: import("zod").ZodOptional<import("zod").ZodString>;
+            headless: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            startedAt: import("zod").ZodNullable<import("zod").ZodNumber>;
+            daemon: import("zod").ZodString;
+            account: import("zod").ZodNullable<import("zod").ZodString>;
+            syncWatcher: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>;
+        here: import("zod").ZodObject<{
+            folder: import("zod").ZodString;
+            project: import("zod").ZodNullable<import("zod").ZodString>;
+            guest: import("zod").ZodNullable<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+        roots: import("zod").ZodArray<import("zod").ZodObject<{
+            host: import("zod").ZodString;
+            guest: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+        projects: import("zod").ZodArray<import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            host: import("zod").ZodString;
+            guest: import("zod").ZodString;
+            mechanism: import("zod").ZodString;
+            here: import("zod").ZodBoolean;
+            setup: import("zod").ZodObject<{
+                phase: import("zod").ZodString;
+                message: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>;
+            databases: import("zod").ZodArray<import("zod").ZodObject<{
+                database: import("zod").ZodString;
+                port: import("zod").ZodNumber;
+                state: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            sessions: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodString;
+                harness: import("zod").ZodString;
+                viewers: import("zod").ZodString;
+                started: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            repoGuard: import("zod").ZodArray<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        otherSessions: import("zod").ZodArray<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+            harness: import("zod").ZodString;
+            cwd: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+        repoGuard: import("zod").ZodObject<{
+            guarded: import("zod").ZodNumber;
+            findings: import("zod").ZodArray<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>, "sandbox.status">;
+}, Record<string, never>, "sandbox">, import("../kernel/define.js").ViewDef<{
+    sessions: QueryDef<import("zod").ZodObject<{
+        wide: import("zod").ZodDefault<import("zod").ZodBoolean>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        sandboxRunning: import("zod").ZodBoolean;
+        defaultAgent: import("zod").ZodString;
+        wide: import("zod").ZodBoolean;
+        owner: import("zod").ZodOptional<import("zod").ZodString>;
+        sessions: import("zod").ZodArray<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+            launchId: import("zod").ZodString;
+            harness: import("zod").ZodString;
+            cwd: import("zod").ZodString;
+            project: import("zod").ZodOptional<import("zod").ZodString>;
+            phase: import("zod").ZodEnum<{
+                failed: "failed";
+                starting: "starting";
+                running: "running";
+                exited: "exited";
+            }>;
+            message: import("zod").ZodString;
+            updatedAt: import("zod").ZodString;
+            startedAt: import("zod").ZodString;
+            conversation: import("zod").ZodOptional<import("zod").ZodString>;
+            exitCode: import("zod").ZodOptional<import("zod").ZodNumber>;
+            projectName: import("zod").ZodOptional<import("zod").ZodString>;
+            here: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            viewers: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
+                viewers: import("zod").ZodNumber;
+                remote: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>>>;
+            canOpen: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "sessions.list">;
+}, Record<string, never>, "sessions">, import("../kernel/define.js").ViewDef<{
+    settings: QueryDef<import("zod").ZodObject<{
+        scope: import("zod").ZodDefault<import("zod").ZodEnum<{
+            project: "project";
+            user: "user";
+        }>>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        scope: import("zod").ZodEnum<{
+            project: "project";
+            user: "user";
+        }>;
+        file: import("zod").ZodString;
+        exists: import("zod").ZodBoolean;
+        dataFolder: import("zod").ZodOptional<import("zod").ZodString>;
+        categories: import("zod").ZodArray<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+            label: import("zod").ZodString;
+            description: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+        rows: import("zod").ZodArray<import("zod").ZodObject<{
+            id: import("zod").ZodString;
+            key: import("zod").ZodArray<import("zod").ZodString>;
+            label: import("zod").ZodString;
+            category: import("zod").ZodString;
+            section: import("zod").ZodOptional<import("zod").ZodString>;
+            field: import("zod").ZodType<import("../kernel/fields.js").Field, unknown, import("zod/v4/core").$ZodTypeInternals<import("../kernel/fields.js").Field, unknown>>;
+            value: import("zod").ZodUnknown;
+            set: import("zod").ZodBoolean;
+            yours: import("zod").ZodUnknown;
+            yoursSet: import("zod").ZodBoolean;
+            inProject: import("zod").ZodOptional<import("zod").ZodUnknown>;
+            default: import("zod").ZodOptional<import("zod").ZodUnknown>;
+            locked: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "settings.list">;
+}, {
+    scope: import("./settings/settings.def.js").Scope;
+}, "settings">];
+export type Operation = (typeof OPERATIONS)[number];
+export type Query = (typeof QUERIES)[number];
+export type View = (typeof VIEWS)[number];
+export type OperationId = Operation['id'];
+export type QueryId = Query['id'];
+export type ViewId = View['id'];
+export type OperationById<Id extends OperationId> = Extract<Operation, {
+    id: Id;
+}>;
+export type QueryById<Id extends QueryId> = Extract<Query, {
+    id: Id;
+}>;
+export type ViewById<Id extends ViewId> = Extract<View, {
+    id: Id;
+}>;
+export declare const DEFINITIONS: readonly AnyDefinition[];
+export declare function definitionById(id: string): AnyDefinition | undefined;
+export declare function operationById(id: string): OperationDef | undefined;
+export declare function queryById(id: string): QueryDef | undefined;
+export declare function viewById(id: string): AnyView | undefined;
+/** One section of the web UI's navigation: the menu's sections in its order; `view` once the area is a feature. */
+export interface NavSection {
+    readonly label: string;
+    readonly view?: ViewId;
+    /** Where the area is today when it has no view yet. */
+    readonly elsewhere?: string;
+}
+export declare const NAV: readonly NavSection[];

package/dist/app/features/defs.js

@@ -0,0 +1,28 @@
+import { hideWindow, sandboxStatus, sandboxView, showWindow, stopSandbox } from './sandbox/sandbox.def.js';
+import { listSessions, restartSessions, sessionsView } from './sessions/sessions.def.js';
+import { getSetting, listSettings, resetSetting, setSetting, settingsView } from './settings/settings.def.js';
+export const OPERATIONS = [showWindow, hideWindow, stopSandbox, restartSessions, setSetting, resetSetting];
+export const QUERIES = [sandboxStatus, listSessions, listSettings, getSetting];
+export const VIEWS = [sandboxView, sessionsView, settingsView];
+export const DEFINITIONS = [...OPERATIONS, ...QUERIES];
+export function definitionById(id) {
+    return DEFINITIONS.find((d) => d.id === id);
+}
+export function operationById(id) {
+    return OPERATIONS.find((d) => d.id === id);
+}
+export function queryById(id) {
+    return QUERIES.find((d) => d.id === id);
+}
+export function viewById(id) {
+    return VIEWS.find((v) => v.id === id);
+}
+export const NAV = [
+    { label: 'Agents', elsewhere: 'Start agents from the menu (sandbox) or with sandbox <agent>.' },
+    { label: 'Sessions', view: 'sessions' },
+    { label: 'Sandbox', view: 'sandbox' },
+    { label: 'Apps', elsewhere: 'Choose apps in the menu (sandbox > Apps).' },
+    { label: 'Settings', view: 'settings' },
+    { label: 'Accounts', elsewhere: 'Manage logins in the menu (sandbox > Accounts) or with sandbox account.' },
+    { label: 'Maintenance', elsewhere: 'Doctor, repair, data and updates are in the menu (sandbox > Maintenance).' },
+];

package/dist/app/features/sandbox/index.d.ts

@@ -0,0 +1,2 @@
+export * from './sandbox.def.js';
+export * from './sandbox.run.js';

package/dist/app/features/sandbox/index.js

@@ -0,0 +1,3 @@
+// The sandbox feature: its status (live), its window, and stopping it.
+export * from './sandbox.def.js';
+export * from './sandbox.run.js';

package/dist/app/features/sandbox/sandbox.def.d.ts

@@ -0,0 +1,193 @@
+import { z } from 'zod';
+import { type Page } from '../../kernel/index.js';
+export declare const SandboxStatusSchema: z.ZodObject<{
+    shared: z.ZodOptional<z.ZodObject<{
+        line: z.ZodString;
+        limited: z.ZodBoolean;
+        startedBy: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sandbox: z.ZodObject<{
+        running: z.ZodBoolean;
+        phase: z.ZodString;
+        message: z.ZodOptional<z.ZodString>;
+        headless: z.ZodOptional<z.ZodBoolean>;
+        startedAt: z.ZodNullable<z.ZodNumber>;
+        daemon: z.ZodString;
+        account: z.ZodNullable<z.ZodString>;
+        syncWatcher: z.ZodBoolean;
+    }, z.core.$strip>;
+    here: z.ZodObject<{
+        folder: z.ZodString;
+        project: z.ZodNullable<z.ZodString>;
+        guest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    roots: z.ZodArray<z.ZodObject<{
+        host: z.ZodString;
+        guest: z.ZodString;
+    }, z.core.$strip>>;
+    projects: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        host: z.ZodString;
+        guest: z.ZodString;
+        mechanism: z.ZodString;
+        here: z.ZodBoolean;
+        setup: z.ZodObject<{
+            phase: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strip>;
+        databases: z.ZodArray<z.ZodObject<{
+            database: z.ZodString;
+            port: z.ZodNumber;
+            state: z.ZodString;
+        }, z.core.$strip>>;
+        sessions: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            harness: z.ZodString;
+            viewers: z.ZodString;
+            started: z.ZodString;
+        }, z.core.$strip>>;
+        repoGuard: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    otherSessions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        harness: z.ZodString;
+        cwd: z.ZodString;
+    }, z.core.$strip>>;
+    repoGuard: z.ZodObject<{
+        guarded: z.ZodNumber;
+        findings: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type SandboxStatus = z.output<typeof SandboxStatusSchema>;
+/** "pong (2 session(s) running)" from the helper in the sandbox, in plain words. */
+export declare function helperText(answer: string): string;
+export declare const sandboxStatus: import("../../kernel/define.js").QueryDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+    shared: z.ZodOptional<z.ZodObject<{
+        line: z.ZodString;
+        limited: z.ZodBoolean;
+        startedBy: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sandbox: z.ZodObject<{
+        running: z.ZodBoolean;
+        phase: z.ZodString;
+        message: z.ZodOptional<z.ZodString>;
+        headless: z.ZodOptional<z.ZodBoolean>;
+        startedAt: z.ZodNullable<z.ZodNumber>;
+        daemon: z.ZodString;
+        account: z.ZodNullable<z.ZodString>;
+        syncWatcher: z.ZodBoolean;
+    }, z.core.$strip>;
+    here: z.ZodObject<{
+        folder: z.ZodString;
+        project: z.ZodNullable<z.ZodString>;
+        guest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    roots: z.ZodArray<z.ZodObject<{
+        host: z.ZodString;
+        guest: z.ZodString;
+    }, z.core.$strip>>;
+    projects: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        host: z.ZodString;
+        guest: z.ZodString;
+        mechanism: z.ZodString;
+        here: z.ZodBoolean;
+        setup: z.ZodObject<{
+            phase: z.ZodString;
+            message: z.ZodString;
+        }, z.core.$strip>;
+        databases: z.ZodArray<z.ZodObject<{
+            database: z.ZodString;
+            port: z.ZodNumber;
+            state: z.ZodString;
+        }, z.core.$strip>>;
+        sessions: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            harness: z.ZodString;
+            viewers: z.ZodString;
+            started: z.ZodString;
+        }, z.core.$strip>>;
+        repoGuard: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    otherSessions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        harness: z.ZodString;
+        cwd: z.ZodString;
+    }, z.core.$strip>>;
+    repoGuard: z.ZodObject<{
+        guarded: z.ZodNumber;
+        findings: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>, "sandbox.status">;
+export declare const showWindow: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+    message: z.ZodString;
+}, z.core.$strip>, "sandbox.showWindow">;
+export declare const hideWindow: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+    message: z.ZodString;
+}, z.core.$strip>, "sandbox.hideWindow">;
+export declare const stopSandbox: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+    stopped: z.ZodBoolean;
+    message: z.ZodString;
+}, z.core.$strip>, "sandbox.stop">;
+/** The status page: the facts, the window and stop actions, the projects, and the repo guard. */
+export declare function sandboxPage(o: SandboxStatus): Page;
+export declare const sandboxView: import("../../kernel/define.js").ViewDef<{
+    status: import("../../kernel/define.js").QueryDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
+        shared: z.ZodOptional<z.ZodObject<{
+            line: z.ZodString;
+            limited: z.ZodBoolean;
+            startedBy: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        sandbox: z.ZodObject<{
+            running: z.ZodBoolean;
+            phase: z.ZodString;
+            message: z.ZodOptional<z.ZodString>;
+            headless: z.ZodOptional<z.ZodBoolean>;
+            startedAt: z.ZodNullable<z.ZodNumber>;
+            daemon: z.ZodString;
+            account: z.ZodNullable<z.ZodString>;
+            syncWatcher: z.ZodBoolean;
+        }, z.core.$strip>;
+        here: z.ZodObject<{
+            folder: z.ZodString;
+            project: z.ZodNullable<z.ZodString>;
+            guest: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        roots: z.ZodArray<z.ZodObject<{
+            host: z.ZodString;
+            guest: z.ZodString;
+        }, z.core.$strip>>;
+        projects: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            host: z.ZodString;
+            guest: z.ZodString;
+            mechanism: z.ZodString;
+            here: z.ZodBoolean;
+            setup: z.ZodObject<{
+                phase: z.ZodString;
+                message: z.ZodString;
+            }, z.core.$strip>;
+            databases: z.ZodArray<z.ZodObject<{
+                database: z.ZodString;
+                port: z.ZodNumber;
+                state: z.ZodString;
+            }, z.core.$strip>>;
+            sessions: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                harness: z.ZodString;
+                viewers: z.ZodString;
+                started: z.ZodString;
+            }, z.core.$strip>>;
+            repoGuard: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        otherSessions: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            harness: z.ZodString;
+            cwd: z.ZodString;
+        }, z.core.$strip>>;
+        repoGuard: z.ZodObject<{
+            guarded: z.ZodNumber;
+            findings: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, "sandbox.status">;
+}, Record<string, never>, "sandbox">;