windows-development-sandbox 1.7.0 → 1.10.0

package/dist/runtime/main.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path74) {
-          path74 = castPath(path74, object2);
-          var index = 0, length = path74.length;
+        function baseGet(object2, path75) {
+          path75 = castPath(path75, object2);
+          var index = 0, length = path75.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path74[index++])];
+            object2 = object2[toKey(path75[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path74, args) {
-          path74 = castPath(path74, object2);
-          object2 = parent(object2, path74);
-          var func = object2 == null ? object2 : object2[toKey(last(path74))];
+        function baseInvoke(object2, path75, args) {
+          path75 = castPath(path75, object2);
+          object2 = parent(object2, path75);
+          var func = object2 == null ? object2 : object2[toKey(last(path75))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path74, srcValue) {
-          if (isKey(path74) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path74), srcValue);
+        function baseMatchesProperty(path75, srcValue) {
+          if (isKey(path75) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path75), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path74);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path74) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path75);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path75) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path74) {
-            return hasIn(object2, path74);
+          return basePickBy(object2, paths, function(value, path75) {
+            return hasIn(object2, path75);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path74 = paths[index], value = baseGet(object2, path74);
-            if (predicate(value, path74)) {
-              baseSet(result2, castPath(path74, object2), value);
+            var path75 = paths[index], value = baseGet(object2, path75);
+            if (predicate(value, path75)) {
+              baseSet(result2, castPath(path75, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path74) {
+        function basePropertyDeep(path75) {
           return function(object2) {
-            return baseGet(object2, path74);
+            return baseGet(object2, path75);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path74, value, customizer) {
+        function baseSet(object2, path75, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path74 = castPath(path74, object2);
-          var index = -1, length = path74.length, lastIndex = length - 1, nested = object2;
+          path75 = castPath(path75, object2);
+          var index = -1, length = path75.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path74[index]), newValue = value;
+            var key = toKey(path75[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path74[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path75[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path74) {
-          path74 = castPath(path74, object2);
-          var index = -1, length = path74.length;
+        function baseUnset(object2, path75) {
+          path75 = castPath(path75, object2);
+          var index = -1, length = path75.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path74[index]);
+            var key = toKey(path75[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path74);
-          return obj == null || delete obj[toKey(last(path74))];
+          var obj = parent(object2, path75);
+          return obj == null || delete obj[toKey(last(path75))];
         }
-        function baseUpdate(object2, path74, updater, customizer) {
-          return baseSet(object2, path74, updater(baseGet(object2, path74)), customizer);
+        function baseUpdate(object2, path75, updater, customizer) {
+          return baseSet(object2, path75, updater(baseGet(object2, path75)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path74, hasFunc) {
-          path74 = castPath(path74, object2);
-          var index = -1, length = path74.length, result2 = false;
+        function hasPath(object2, path75, hasFunc) {
+          path75 = castPath(path75, object2);
+          var index = -1, length = path75.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path74[index]);
+            var key = toKey(path75[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path74) {
-          return path74.length < 2 ? object2 : baseGet(object2, baseSlice(path74, 0, -1));
+        function parent(object2, path75) {
+          return path75.length < 2 ? object2 : baseGet(object2, baseSlice(path75, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path74, args) {
-          var index = -1, isFunc = typeof path74 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path75, args) {
+          var index = -1, isFunc = typeof path75 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path74, value, args) : baseInvoke(value, path74, args);
+            result2[++index] = isFunc ? apply(path75, value, args) : baseInvoke(value, path75, args);
           });
           return result2;
         });
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path74, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path74);
+        function get(object2, path75, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path75);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path74) {
-          return object2 != null && hasPath(object2, path74, baseHas);
+        function has(object2, path75) {
+          return object2 != null && hasPath(object2, path75, baseHas);
         }
-        function hasIn(object2, path74) {
-          return object2 != null && hasPath(object2, path74, baseHasIn);
+        function hasIn(object2, path75) {
+          return object2 != null && hasPath(object2, path75, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path74) {
-            path74 = castPath(path74, object2);
-            isDeep || (isDeep = path74.length > 1);
-            return path74;
+          paths = arrayMap(paths, function(path75) {
+            path75 = castPath(path75, object2);
+            isDeep || (isDeep = path75.length > 1);
+            return path75;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path74) {
-            return predicate(value, path74[0]);
+          return basePickBy(object2, props, function(value, path75) {
+            return predicate(value, path75[0]);
           });
         }
-        function result(object2, path74, defaultValue) {
-          path74 = castPath(path74, object2);
-          var index = -1, length = path74.length;
+        function result(object2, path75, defaultValue) {
+          path75 = castPath(path75, object2);
+          var index = -1, length = path75.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path74[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path75[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path74, value) {
-          return object2 == null ? object2 : baseSet(object2, path74, value);
+        function set2(object2, path75, value) {
+          return object2 == null ? object2 : baseSet(object2, path75, value);
         }
-        function setWith(object2, path74, value, customizer) {
+        function setWith(object2, path75, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path74, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path75, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path74) {
-          return object2 == null ? true : baseUnset(object2, path74);
+        function unset(object2, path75) {
+          return object2 == null ? true : baseUnset(object2, path75);
         }
-        function update(object2, path74, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path74, castFunction(updater));
+        function update(object2, path75, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path75, castFunction(updater));
         }
-        function updateWith(object2, path74, updater, customizer) {
+        function updateWith(object2, path75, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path74, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path75, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4532,7 +4532,7 @@ var require_lodash = __commonJS({
           }
           return baseClamp(toNumber(number4), lower, upper);
         }
-        function inRange(number4, start, end) {
+        function inRange2(number4, start, end) {
           start = toFinite(start);
           if (end === undefined2) {
             end = start;
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path74, srcValue) {
-          return baseMatchesProperty(path74, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path75, srcValue) {
+          return baseMatchesProperty(path75, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path74, args) {
+        var method = baseRest(function(path75, args) {
           return function(object2) {
-            return baseInvoke(object2, path74, args);
+            return baseInvoke(object2, path75, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path74) {
-            return baseInvoke(object2, path74, args);
+          return function(path75) {
+            return baseInvoke(object2, path75, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path74) {
-          return isKey(path74) ? baseProperty(toKey(path74)) : basePropertyDeep(path74);
+        function property(path75) {
+          return isKey(path75) ? baseProperty(toKey(path75)) : basePropertyDeep(path75);
         }
         function propertyOf(object2) {
-          return function(path74) {
-            return object2 == null ? undefined2 : baseGet(object2, path74);
+          return function(path75) {
+            return object2 == null ? undefined2 : baseGet(object2, path75);
           };
         }
         var range = createRange();
@@ -5235,7 +5235,7 @@ var require_lodash = __commonJS({
         lodash.identity = identity;
         lodash.includes = includes;
         lodash.indexOf = indexOf;
-        lodash.inRange = inRange;
+        lodash.inRange = inRange2;
         lodash.invoke = invoke;
         lodash.isArguments = isArguments;
         lodash.isArray = isArray;
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path74, args) {
-          if (typeof path74 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path75, args) {
+          if (typeof path75 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path74, args);
+            return baseInvoke(value, path75, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5532,8 +5532,8 @@ var require_lodash = __commonJS({
 });
 
 // src/guest/entries/main.ts
-import fs59 from "node:fs";
-import path73 from "node:path";
+import fs60 from "node:fs";
+import path74 from "node:path";
 
 // src/guest/runtime/paths.ts
 import path7 from "node:path";
@@ -6358,10 +6358,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path74) {
-  if (!path74)
+function getElementAtPath(obj, path75) {
+  if (!path75)
     return obj;
-  return path74.reduce((acc, key) => acc?.[key], obj);
+  return path75.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -6701,11 +6701,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path74, issues) {
+function prefixIssues(path75, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path74);
+    iss.path.unshift(path75);
     return iss;
   });
 }
@@ -7155,16 +7155,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path74 = []) => {
+  const processError = (error63, path75 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path74, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path75, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path74, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path75, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path74, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path75, ...issue2.path]);
       } else {
-        const fullpath = [...path74, ...issue2.path];
+        const fullpath = [...path75, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7203,17 +7203,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path74 = []) => {
+  const processError = (error63, path75 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path74, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path75, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path74, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path75, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path74, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path75, ...issue2.path]);
       } else {
-        const fullpath = [...path74, ...issue2.path];
+        const fullpath = [...path75, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7252,8 +7252,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path74 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path74) {
+  const path75 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path75) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -10030,9 +10030,9 @@ var $ZodTransform = /* @__PURE__ */ $constructor("$ZodTransform", (inst, def) =>
     }
     const _out = def.transform(payload.value, payload);
     if (ctx.async) {
-      const output2 = _out instanceof Promise ? _out : Promise.resolve(_out);
-      return output2.then((output3) => {
-        payload.value = output3;
+      const output3 = _out instanceof Promise ? _out : Promise.resolve(_out);
+      return output3.then((output4) => {
+        payload.value = output4;
         return payload;
       });
     }
@@ -10482,12 +10482,12 @@ var $ZodFunction = /* @__PURE__ */ $constructor("$ZodFunction", (inst, def) => {
       output: inst._def.output
     });
   };
-  inst.output = (output2) => {
+  inst.output = (output3) => {
     const F = inst.constructor;
     return new F({
       type: "function",
       input: inst._def.input,
-      output: output2
+      output: output3
     });
   };
   return inst;
@@ -23896,14 +23896,14 @@ var ZodTransform = /* @__PURE__ */ $constructor("ZodTransform", (inst, def) => {
         payload.issues.push(util_exports.issue(_issue));
       }
     };
-    const output2 = def.transform(payload.value, payload);
-    if (output2 instanceof Promise) {
-      return output2.then((output3) => {
-        payload.value = output3;
+    const output3 = def.transform(payload.value, payload);
+    if (output3 instanceof Promise) {
+      return output3.then((output4) => {
+        payload.value = output4;
         return payload;
       });
     }
-    payload.value = output2;
+    payload.value = output3;
     return payload;
   };
 });
@@ -24355,13 +24355,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path74 = ref.slice(1).split("/").filter(Boolean);
-  if (path74.length === 0) {
+  const path75 = ref.slice(1).split("/").filter(Boolean);
+  if (path75.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path74[0] === defsKey) {
-    const key = path74[1] === void 0 ? void 0 : decodeJSONPointerSegment(path74[1]);
+  if (path75[0] === defsKey) {
+    const key = path75[1] === void 0 ? void 0 : decodeJSONPointerSegment(path75[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25372,6 +25372,9 @@ var HarnessSchema = external_exports.strictObject({
   localState: external_exports.record(external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/), SubfolderSchema).optional().describe(
     "Environment variable -> folder below the agent's own state folder (state\\<agent>) for SQLite databases. SQLite cannot run in a mapped folder, so the agent runs from a copy on the sandbox's disk (the variable points to it) that is copied from and back to that folder."
   ),
+  bootReset: external_exports.array(SubfolderSchema).max(32).optional().describe(
+    "Files and folders below the agent's own state folder (state\\<agent>) that only work on the machine that wrote them (keys sealed with Windows DPAPI, local accounts it created). Every sandbox is a new machine, so they are deleted at each boot and the agent sets them up again."
+  ),
   resumeArguments: StringsSchema.optional().describe(
     "Arguments used when the agent is restarted in place (e.g. after an account switch) so it resumes the conversation."
   ),
@@ -25449,6 +25452,9 @@ var MappingSchema = external_exports.strictObject({
   optional: external_exports.boolean().optional().describe("true = skip it quietly when the host folder does not exist.")
 });
 var SandboxSchema = external_exports.strictObject({
+  engine: external_exports.enum(["windows-sandbox", "hcs"]).describe(
+    '(alpha) What runs the sandbox. "windows-sandbox" = Windows Sandbox (the default: desktop, Windows Terminal, GPU, clipboard, audio, printers). "hcs" = a headless Hyper-V isolated Server Core container for agents (no desktop, GPU or clipboard); it needs Windows features and an image on this PC (sandbox engine check hcs lists what is missing), and starting it is not enabled yet in this alpha. sandbox engine shows what each engine can do. Yours only: a project file (.sandbox-config.json) cannot set it.'
+  ),
   memoryMb: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(2048)]).describe('Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb.'),
   maxMemoryMb: external_exports.number().int().positive().describe('Upper limit for memoryMb "auto".'),
   maxMemoryPercent: external_exports.number().int().min(10).max(100).describe(`memoryMb "auto" never takes more than this share of this PC's total RAM (percent).`),
@@ -25458,10 +25464,22 @@ var SandboxSchema = external_exports.strictObject({
   pageFileMb: external_exports.number().int().min(0).max(262144).describe(
     `Size of the sandbox's paging file in MB, created at full size when it starts so it never grows while builds run (8 GB of its disk always stays free). Windows Sandbox starts with about 1 GB: parallel builds then fail with "The paging file is too small", and Windows grows the file under load. 0 = leave Windows' own.`
   ),
-  reserveHostMb: external_exports.number().int().nonnegative().describe('RAM always left for this PC when memoryMb is "auto".'),
-  vGpu: external_exports.boolean().describe("Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface."),
+  reserveHostMb: external_exports.number().int().nonnegative().describe(
+    'Memory always left for this PC when memoryMb is "auto": the sandbox gets at most (free RAM, and RAM plus paging file still unused) minus this.'
+  ),
+  agentMemoryHeadroomMb: external_exports.union([external_exports.literal("auto"), external_exports.literal("none"), external_exports.number().int().min(0)]).describe(
+    'Memory kept out of the agents reach inside the sandbox, in MB: everything the agents start (their builds, tests, tools) together may use at most the sandbox memory minus this; a runaway parallel build then gets out-of-memory errors in its own session instead of freezing or crashing the whole sandbox. "auto" = the larger of 2048 MB and 10 % of the sandbox memory; "none" = no limit. Yours only: a project file cannot change it.'
+  ),
+  pressureResponse: external_exports.boolean().describe(
+    "When the sandbox (or this PC) runs low on memory, slow the heaviest build programs down (lower priority) and, if that is not enough, pause the biggest compiler for a few seconds at a time, so heavy parallel builds slow down instead of closing the sandbox. Never touches the agents themselves. Yours only: a project file cannot change it."
+  ),
+  vGpu: external_exports.boolean().describe(
+    "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
+  ),
   networking: external_exports.boolean().describe("Internet access. false is the only hard network isolation Windows Sandbox offers."),
-  clipboard: external_exports.boolean().describe("Shared clipboard between this PC and the sandbox."),
+  clipboard: external_exports.boolean().describe(
+    "Shared clipboard between this PC and the sandbox. Also lets an agent's copy (in sandbox attach) reach this PC's clipboard."
+  ),
   audioInput: external_exports.boolean().describe("Microphone access."),
   videoInput: external_exports.boolean().describe("Camera access."),
   printerRedirection: external_exports.boolean().describe("Printers from this PC."),
@@ -26577,24 +26595,25 @@ var ResumeSchema = external_exports.strictObject({
 // src/core/schema/web.ts
 var WebSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "(Beta) Allow the web UI: your sandbox sessions in a browser on this PC. Off by default, and nothing starts it by itself yet: sandbox web start works either way and runs it until sandbox web stop (or a restart of the PC)."
+    "(Beta) The web UI: your sandbox sessions in a browser on this PC (http://127.0.0.1:<port>, this PC only). On: every sandbox start also starts it in the background (it keeps running until sandbox web stop or a restart of the PC). Off: only sandbox web start runs it. Open it signed in with sandbox web open."
   ),
-  port: external_exports.number().int().min(1024).max(65535).describe("Port of the web UI on 127.0.0.1 (this PC only). Pick another when it is taken.")
+  port: external_exports.number().int().min(1024).max(65535).describe("Port of the web UI on 127.0.0.1 (this PC only). Pick another when it is taken."),
+  openOnLaunch: external_exports.boolean().describe("(Beta) With the web UI on: open it in your browser, already signed in, every time a sandbox starts.")
 });
 
 // src/core/schema/vpn.ts
-var VPN_PROVIDERS = ["nordvpn", "openvpn-file"];
+var VPN_PROVIDERS = ["nordvpn", "openvpn-file", "wireguard-file"];
 var VpnSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (sandbox vpn login). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."
+    "(Alpha: not yet tried on a real PC) Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (sandbox vpn login). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."
   ),
   provider: external_exports.enum(VPN_PROVIDERS).describe(
-    "nordvpn: a recommended NordVPN server is picked at every launch. openvpn-file: your own .ovpn file (configFile)."
+    "nordvpn: a recommended NordVPN server is picked at every launch. openvpn-file: your own .ovpn file (configFile). wireguard-file: your own WireGuard .conf (configFile), e.g. from your company."
   ),
   protocol: external_exports.enum(["udp", "tcp"]).describe("udp is faster; tcp gets through networks that block udp."),
   country: external_exports.string().regex(/^([A-Za-z][A-Za-z .'-]{0,39})?$/, "a country name or code like uk or Germany").describe("nordvpn: the country of the server, e.g. uk, us or Germany. Empty = the best server anywhere."),
   configFile: external_exports.string().describe(
-    "openvpn-file: the .ovpn file on this PC (its certificates inside it). Files that run programs (script-security, up, down, plugin ...) are refused. A project's file can never set this."
+    "openvpn-file / wireguard-file: the .ovpn or .conf file on this PC (an .ovpn has its certificates inside it). Files that run programs (script-security, up, down, plugin, PostUp ...) are refused. A WireGuard file holds your private key: it is read when a sandbox starts and handed over in a one-shot file. A project's file can never set this."
   ),
   killSwitch: external_exports.boolean().describe(
     "Block all traffic that does not go through the tunnel: when the tunnel cannot start, the sandbox stays offline instead of using your normal connection. A project can only turn this on, never off."
@@ -26621,6 +26640,10 @@ var ConfigSchema = external_exports.strictObject({
     markSandboxFiles: external_exports.boolean().describe(
       `Programs and scripts (.exe, .ps1, .bat, .cmd, .msi, .lnk ...) that appear or change in your project while a sandbox runs get Windows' "downloaded from the internet" mark, so SmartScreen and PowerShell ask before they run on this PC.`
     ),
+    contained: external_exports.enum(["off", "vhdx"]).describe(
+      '(beta) Keep the sandbox tools, state and logs inside one disk image file (vhdx) instead of loose folders, so scanning programs on this PC see one file. Not yet tried on a real PC. Turn it on with sandbox storage contained on (it moves your files and asks first); Windows asks for permission to mount the image when a sandbox starts. "off" = loose folders, as always. Yours only: a project file (.sandbox-config.json) cannot set it.'
+    ),
+    containedMaxGb: external_exports.number().int().min(8).max(4096).describe("(beta) Largest size, in GB, the disk image of storage.contained may grow to."),
     warnDataGb: external_exports.number().min(0).describe(
       "Say at launch when the persisted data (tools, databases, logins) is bigger than this many GB; 0 = never. sandbox data shows what takes the space."
     )
@@ -26664,7 +26687,13 @@ var LocalOverridesSchema = external_exports.strictObject({
     "Scripts (.ps1 / .mjs / .cmd, relative to this file) run inside the sandbox before the agent."
   ),
   // This PC's resources are yours to share: CPU and paging file (this PC's disk) are not a project's to set.
-  sandbox: SandboxSchema.omit({ cpuLimit: true, pageFileMb: true }).partial(),
+  sandbox: SandboxSchema.omit({
+    cpuLimit: true,
+    pageFileMb: true,
+    engine: true,
+    agentMemoryHeadroomMb: true,
+    pressureResponse: true
+  }).partial(),
   // A project may block more (the LAN, hosts); it never opens hosts, ports, DNS or a proxy.
   network: NetworkSchema.pick({ blockPrivateRanges: true, blockHosts: true }).partial(),
   // A project may turn the kill switch on, never off, and never choose a VPN, a server, a file or a login.
@@ -26773,8 +26802,34 @@ var GuestRequestSchema = external_exports.discriminatedUnion("kind", [
     cwd: Text().optional(),
     createdAt: TimeSchema
   }),
-  external_exports.strictObject({ kind: external_exports.literal("ping"), id: IdSchema, createdAt: TimeSchema })
+  external_exports.strictObject({ kind: external_exports.literal("ping"), id: IdSchema, createdAt: TimeSchema }),
+  /**
+   * The PC's own memory or CPU is running low (the host watchdog): the sandbox slows its heaviest builds down for
+   * `seconds` (it never stops them) so Windows does not have to close it. Repeated while the PC stays low.
+   */
+  external_exports.strictObject({
+    kind: external_exports.literal("pressure"),
+    id: IdSchema,
+    reason: Text(300),
+    seconds: external_exports.number().int().min(10).max(300),
+    createdAt: TimeSchema
+  })
 ]);
+var PressureStatusSchema = external_exports.object({
+  level: external_exports.enum(["ok", "throttled", "suspending"]),
+  profile: external_exports.enum(["normal", "gentle"]),
+  /** Share of the sandbox's RAM still free and of its commit limit in use (percent). */
+  ramFreePercent: external_exports.number().int().min(0).max(100),
+  commitPercent: external_exports.number().int().min(0).max(100),
+  /** Programs running at lower priority because of it. */
+  lowered: external_exports.number().int().min(0).max(1024),
+  /** Programs paused right now (name, process id, seconds left). */
+  paused: external_exports.array(external_exports.object({ name: Text(64), pid: external_exports.number().int(), seconds: external_exports.number().int().min(0).max(60) })).max(8),
+  /** The PC itself asked for slowing down (its memory or CPU is low). */
+  pcLow: external_exports.boolean(),
+  lastAction: Text(300),
+  updatedAt: TimeSchema
+});
 var GuestResponseSchema = external_exports.object({
   id: IdSchema,
   ok: external_exports.boolean(),
@@ -26960,6 +27015,21 @@ function safeRemove(target, root) {
   fs3.rmSync(target, { recursive: true, force: true, maxRetries: 2 });
 }
 
+// src/shared/io/robocopy-result.ts
+function robocopyFailed(code) {
+  return code === null || code >= 8;
+}
+function robocopyMeaning(code) {
+  if (code === null) return "robocopy did not finish";
+  if (code >= 16) return "robocopy stopped with a fatal error (bad path or no access)";
+  if (code >= 8) return code & 1 ? "some files were copied and some could not be" : "files could not be copied";
+  return code === 0 ? "nothing to copy" : "copied";
+}
+function robocopyErrors(output3, max = 3) {
+  const lines = output3.split(/\r?\n/).map((l) => l.trim()).filter((l) => /\bERROR\b/.test(l) || /^The (process|system) cannot/i.test(l));
+  return lines.slice(0, max).map((l) => l.length > 220 ? l.slice(0, 217) + "..." : l);
+}
+
 // src/shared/channel/run-dir.ts
 function safeId(id) {
   return IdSchema.parse(id);
@@ -26983,6 +27053,8 @@ var RunDir = class {
   root;
   sandboxFile;
   vpnFile;
+  /** What the memory governor in the sandbox is doing (pressure.json). */
+  pressureFile;
   requestsDir;
   responsesDir;
   sessionsDir;
@@ -26995,6 +27067,7 @@ var RunDir = class {
     this.root = path6.join(dataDir2, "run");
     this.sandboxFile = path6.join(this.root, "sandbox.json");
     this.vpnFile = path6.join(this.root, "vpn.json");
+    this.pressureFile = path6.join(this.root, "pressure.json");
     this.requestsDir = path6.join(this.root, "requests");
     this.responsesDir = path6.join(this.root, "responses");
     this.sessionsDir = path6.join(this.root, "sessions");
@@ -27023,6 +27096,9 @@ var RunDir = class {
   readVpnStatus() {
     return readValid(VpnStatusSchema, this.vpnFile);
   }
+  readPressure() {
+    return readValid(PressureStatusSchema, this.pressureFile);
+  }
   readSession(id) {
     return readValid(SessionStatusSchema, this.sessionFile(id));
   }
@@ -27146,6 +27222,7 @@ var SYSTEM = {
   shutdown: () => system32("shutdown.exe"),
   dism: () => system32("Dism.exe"),
   msiexec: () => system32("msiexec.exe"),
+  sc: () => system32("sc.exe"),
   /** The .NET Framework C# compiler that ships with Windows (C# 5). */
   csc: () => path9.join(systemRoot(), "Microsoft.NET", "Framework64", "v4.0.30319", "csc.exe")
 };
@@ -27430,8 +27507,8 @@ function writeStatus(phase, message) {
 }
 
 // src/guest/boot/boot.ts
-import fs58 from "node:fs";
-import path72 from "node:path";
+import fs59 from "node:fs";
+import path73 from "node:path";
 import { spawn as spawn9 } from "node:child_process";
 
 // src/guest/boot/guide.ts
@@ -27535,7 +27612,16 @@ function execOutput(file3, args, options = {}) {
   return result.status === 0 ? String(result.stdout ?? "").trim() : "";
 }
 function runScript(name, args = []) {
-  exec(SYSTEM.powershell(), scriptArgs(name, args));
+  const result = spawnSync(SYSTEM.powershell(), scriptArgs(name, args), {
+    stdio: ["inherit", "inherit", "pipe"],
+    encoding: "utf8",
+    windowsHide: true
+  });
+  if (result.error) throw result.error;
+  const errors = String(result.stderr ?? "").trim();
+  if (errors) process.stderr.write(errors + "\n");
+  if (result.status !== 0)
+    throw new Error(name + " failed with exit code " + result.status + (errors ? ": " + errors.slice(0, 400) : ""));
 }
 function scriptOutput(name, args = [], options = {}) {
   return execOutput(SYSTEM.powershell(), scriptArgs(name, args), options);
@@ -27561,14 +27647,40 @@ function robocopy(from, to, files = []) {
       fs12.copyFileSync(path15.join(from, f), path15.join(to, f));
     return;
   }
-  const what = files.length ? files : ["/E", "/MT:16"];
-  const result = spawnSync(
-    SYSTEM.robocopy(),
-    [from, to, ...what, "/NFL", "/NDL", "/NJH", "/NJS", "/NP", "/R:1", "/W:1", "/XJ"],
-    { stdio: "ignore", windowsHide: true }
+  const what = files.length ? files : ["/E"];
+  const passes = [
+    ["/MT:16", "/R:1", "/W:1"],
+    ["/MT:1", "/R:4", "/W:3"]
+  ];
+  let code = null;
+  let output3 = "";
+  for (const pass of passes) {
+    const result = spawnSync(
+      SYSTEM.robocopy(),
+      [
+        from,
+        to,
+        ...what,
+        ...files.length ? [] : [pass[0]],
+        pass[1],
+        pass[2],
+        "/NFL",
+        "/NDL",
+        "/NJH",
+        "/NJS",
+        "/NP",
+        "/XJ"
+      ],
+      { encoding: "utf8", windowsHide: true }
+    );
+    code = result.status;
+    output3 = String(result.stdout ?? "") + String(result.stderr ?? "");
+    if (!robocopyFailed(code)) return;
+  }
+  const why = robocopyErrors(output3);
+  throw new Error(
+    "robocopy " + from + " -> " + to + " failed (exit " + code + ": " + robocopyMeaning(code) + ")" + (why.length ? ": " + why.join(" | ") : "")
   );
-  if ((result.status ?? 16) >= 8)
-    throw new Error("robocopy " + from + " -> " + to + " failed (exit " + result.status + ")");
 }
 function copyNode(from, to) {
   const work = stagingFolder(to);
@@ -28764,7 +28876,8 @@ var SOURCES = {
   openssl: "OpenSsl.cs",
   cargoshim: "CargoShim.cs",
   linkgate: "LinkGate.cs",
-  pathsync: "PathSync.cs"
+  pathsync: "PathSync.cs",
+  memgov: "MemGov.cs"
 };
 function sourceOf(name) {
   return path30.join(launchDir, "sandbox", "csharp", SOURCES[name]);
@@ -29928,6 +30041,10 @@ var ensureNvm = async () => {
   log("Downloading nvm-windows (" + asset.url.split("/").slice(-2, -1)[0] + ") ...");
   await downloader.archive(asset.url, NVM_HOME, { sha256: asset.sha256, locate: "nvm.exe", fileName: asset.name });
 };
+var hostNodeFolder = (version2) => {
+  const dir = path45.join(hostToolsDir, "node");
+  return session.hostTools.nodeVersion?.replace(/^v/, "") === version2 && exists(path45.join(dir, "node.exe")) ? dir : null;
+};
 var installNodeVersion = async (version2) => {
   const dir = path45.join(NVM_HOME, "v" + version2);
   const fromHost = path45.join(HOST_NVM, "v" + version2);
@@ -29937,6 +30054,12 @@ var installNodeVersion = async (version2) => {
     copyNode(fromHost, dir);
     return;
   }
+  const hostNode = hostNodeFolder(version2);
+  if (hostNode) {
+    log("Copying Node " + version2 + " from this PC (without global packages) ...");
+    copyNode(hostNode, dir);
+    return;
+  }
   log("Downloading Node " + version2 + " (~30 MB once) ...");
   mkdirp(NVM_TEMP);
   let out;
@@ -29945,8 +30068,13 @@ var installNodeVersion = async (version2) => {
   } finally {
     safeRemove(NVM_TEMP, NVM_HOME);
   }
-  if (!exists(path45.join(dir, "node.exe")))
-    throw new Error("nvm install " + version2 + " failed: " + out.trim().split("\n").slice(-2).join(" "));
+  if (!exists(path45.join(dir, "node.exe"))) {
+    const tail2 = out.trim().split(/\r?\n/).filter(Boolean).slice(-3).join(" ");
+    const why = /complete/i.test(out) ? "nvm said it finished, but its move into the data folder did not happen" : "nvm could not download or unpack it: check the internet connection and the free disk space";
+    throw new Error(
+      "nvm install " + version2 + " did not leave " + path45.join(dir, "node.exe") + " (" + why + ")" + (tail2 ? ". nvm printed: " + tail2 : "")
+    );
+  }
 };
 var activate = async (version2) => {
   await nvm(["use", version2]);
@@ -31108,12 +31236,12 @@ function parseTree(text, errors = [], options = ParseOptions.DEFAULT) {
   }
   return result;
 }
-function findNodeAtLocation(root, path74) {
+function findNodeAtLocation(root, path75) {
   if (!root) {
     return void 0;
   }
   let node2 = root;
-  for (let segment of path74) {
+  for (let segment of path75) {
     if (typeof segment === "string") {
       if (node2.type !== "object" || !Array.isArray(node2.children)) {
         return void 0;
@@ -31467,14 +31595,14 @@ function getNodeType(value) {
 
 // node_modules/jsonc-parser/lib/esm/impl/edit.js
 function setProperty(text, originalPath, value, options) {
-  const path74 = originalPath.slice();
+  const path75 = originalPath.slice();
   const errors = [];
   const root = parseTree(text, errors);
   let parent = void 0;
   let lastSegment = void 0;
-  while (path74.length > 0) {
-    lastSegment = path74.pop();
-    parent = findNodeAtLocation(root, path74);
+  while (path75.length > 0) {
+    lastSegment = path75.pop();
+    parent = findNodeAtLocation(root, path75);
     if (parent === void 0 && value !== void 0) {
       if (typeof lastSegment === "string") {
         value = { [lastSegment]: value };
@@ -31660,8 +31788,8 @@ var ParseErrorCode;
   ParseErrorCode2[ParseErrorCode2["InvalidEscapeCharacter"] = 15] = "InvalidEscapeCharacter";
   ParseErrorCode2[ParseErrorCode2["InvalidCharacter"] = 16] = "InvalidCharacter";
 })(ParseErrorCode || (ParseErrorCode = {}));
-function modify(text, path74, value, options) {
-  return setProperty(text, path74, value, options);
+function modify(text, path75, value, options) {
+  return setProperty(text, path75, value, options);
 }
 function applyEdits(text, edits) {
   let sortedEdits = edits.slice(0).sort((a, b) => {
@@ -31902,6 +32030,16 @@ async function setupVscode(env, refresh) {
 import fs41 from "node:fs";
 import os8 from "node:os";
 import path51 from "node:path";
+
+// src/shared/memory/policy.ts
+function cargoJobs(cpus, memoryGb, sessions) {
+  const byCpu = Math.max(2, Math.min(4, Math.floor(cpus / 4)));
+  const byMemory = Math.max(1, Math.floor(memoryGb / 4));
+  const jobs = Math.min(byCpu, byMemory);
+  return Math.max(1, Math.min(jobs, Math.floor(8 / Math.max(1, sessions))));
+}
+
+// src/guest/toolchains/native/rust-extras.ts
 var cargoTarget = (targetDir) => {
   if (targetDir === "shared" || targetDir === "separate") return null;
   if (targetDir === "local") return path51.join(localDir, "cargo-target");
@@ -31936,7 +32074,7 @@ function linkGate(env, rust, host) {
 function cargoDefaults(host) {
   const file3 = tool("rust", "cargo", "config.toml");
   if (exists(file3) || !exists(path51.dirname(file3))) return;
-  const jobs = Math.max(2, Math.min(4, Math.floor(os8.cpus().length / 4)));
+  const jobs = cargoJobs(os8.cpus().length, os8.totalmem() / 1024 ** 3, 1);
   const gnu = host.endsWith("-gnu");
   fs41.writeFileSync(
     file3,
@@ -32271,6 +32409,11 @@ function localStateEntries(agents2, stateDir2, localRoot2) {
     }))
   );
 }
+function bootResetPaths(agents2, stateDir2) {
+  return Object.entries(agents2).flatMap(
+    ([agent, harness]) => (harness.bootReset ?? []).map((rel) => ({ agent, path: path52.join(stateDir2, agent, rel) }))
+  );
+}
 var isDatabaseFile = (name) => /\.(sqlite3?|db)(-wal|-shm)?$/i.test(name);
 var isCopyableDatabaseFile = (name) => isDatabaseFile(name) && !/-shm$/i.test(name);
 
@@ -32318,6 +32461,21 @@ function adoptLegacy(s) {
   for (const n of names) fs42.rmSync(path53.join(s.legacy, n), { force: true });
   log(s.agent + ": moved " + copyable.length + " database file(s) to " + s.store + ".");
 }
+function resetMachineBound() {
+  if (dryRun) return;
+  for (const { agent, path: target } of bootResetPaths(session.agents ?? {}, stateDir)) {
+    try {
+      const stat = fs42.lstatSync(target, { throwIfNoEntry: false });
+      if (!stat || stat.isSymbolicLink()) continue;
+      fs42.rmSync(target, { recursive: true, force: true });
+      log(
+        agent + ": removed " + path53.relative(path53.join(stateDir, agent), target) + " (it only worked in the last sandbox)."
+      );
+    } catch (e) {
+      warn(agent + ": could not remove " + target + " (" + errMsg(e) + ").");
+    }
+  }
+}
 function restoreLocalState() {
   if (dryRun) return;
   for (const s of agentLocalStates()) {
@@ -32950,9 +33108,31 @@ function buildFirewallCommands(exemptIps) {
   }
   return commands;
 }
+var ATTACH_RULE = "AgentSandbox-Attach";
+function hasShortName(file3) {
+  return file3.split(/[/\\]/).some((part) => /~\d/.test(part));
+}
+function attachRuleCommands(ptyHostExe) {
+  return [
+    ["advfirewall", "firewall", "delete", "rule", "name=" + ATTACH_RULE],
+    [
+      "advfirewall",
+      "firewall",
+      "add",
+      "rule",
+      "name=" + ATTACH_RULE,
+      "dir=in",
+      "action=allow",
+      "enable=yes",
+      "profile=any",
+      "protocol=tcp",
+      "remoteip=LocalSubnet",
+      "program=" + ptyHostExe
+    ]
+  ];
+}
 
 // src/guest/network/firewall.ts
-var ATTACH_RULE = "AgentSandbox-Attach";
 var netsh = (args) => {
   const r = spawnSync5(SYSTEM.netsh(), args, { encoding: "utf8", windowsHide: true });
   return { status: r.status, out: (r.stdout ?? "") + (r.stderr ?? "") };
@@ -32986,23 +33166,38 @@ var waitForInternet = async (seconds) => {
   }
   return false;
 };
-var attachRule = (ptyHostExe) => [
-  ["advfirewall", "firewall", "delete", "rule", "name=" + ATTACH_RULE],
-  [
-    "advfirewall",
-    "firewall",
-    "add",
-    "rule",
-    "name=" + ATTACH_RULE,
-    "dir=in",
-    "action=allow",
-    "enable=yes",
-    "profile=any",
-    "protocol=tcp",
-    "remoteip=LocalSubnet",
-    "program=" + ptyHostExe
-  ]
-];
+var problems = [];
+function networkProblems() {
+  return problems;
+}
+var longPath = (file3) => {
+  if (!hasShortName(file3)) return file3;
+  try {
+    return fs48.realpathSync.native(file3);
+  } catch {
+    return file3;
+  }
+};
+async function applyAttachRule(ptyHostExe) {
+  if (!session.attach.enabled) return;
+  if (!ptyHostExe) {
+    problems.push("attach: the session host was not built, so the firewall rule for it was not created");
+    warn(problems[problems.length - 1]);
+    return;
+  }
+  let last = "";
+  for (let attempt = 1; attempt <= 3; attempt++) {
+    try {
+      run2(attachRuleCommands(longPath(ptyHostExe)));
+      return;
+    } catch (e) {
+      last = errMsg(e);
+      if (attempt < 3) await new Promise((r) => setTimeout(r, 1e3));
+    }
+  }
+  problems.push("attach: the firewall rule for the session host could not be created (" + last + ")");
+  warn("PROTECTION MISSING: " + problems[problems.length - 1]);
+}
 function run2(commands) {
   for (const c of commands) {
     const r = netsh(c);
@@ -33018,10 +33213,11 @@ async function applyNetworkPolicy(ptyHostExe) {
   const block = session.network.blockPrivateRanges;
   const exempt = block ? discoverExemptIps() : [];
   const lanRules = block ? buildFirewallCommands(exempt) : [];
+  const forwardRules = forwardRule();
   const commands = [
     ...lanRules,
-    ...ptyHostExe && session.attach.enabled ? attachRule(ptyHostExe) : [],
-    ...forwardRule()
+    ...ptyHostExe && session.attach.enabled ? attachRuleCommands(ptyHostExe) : [],
+    ...forwardRules
   ];
   if (isWin && !dryRun) {
     try {
@@ -33047,7 +33243,20 @@ async function applyNetworkPolicy(ptyHostExe) {
   }
   if (commands.length === 0) return "open";
   const online = block ? await waitForInternet(30) : true;
-  run2(commands);
+  const failures = [];
+  try {
+    run2(lanRules);
+  } catch (e) {
+    failures.push(errMsg(e));
+  }
+  await applyAttachRule(ptyHostExe);
+  try {
+    run2(forwardRules);
+  } catch (e) {
+    problems.push("forwardPorts: the firewall rule for the relays could not be created (" + errMsg(e) + ")");
+    warn("PROTECTION MISSING: " + problems[problems.length - 1]);
+  }
+  if (failures.length) throw new Error(failures[0]);
   if (!block) return "open";
   if (online && !await waitForInternet(15)) {
     run2(lanRules.filter((c) => c[2] === "delete"));
@@ -33336,9 +33545,9 @@ function enableProcessAudit() {
 
 // src/guest/vpn/vpn.ts
 import dns2 from "node:dns";
-import fs56 from "node:fs";
-import os13 from "node:os";
-import path70 from "node:path";
+import fs57 from "node:fs";
+import os14 from "node:os";
+import path71 from "node:path";
 
 // src/shared/vpn/ovpn.ts
 var PROGRAM_DIRECTIVES = [
@@ -33492,10 +33701,10 @@ function directiveOf(line) {
   return { name: parts2[0].toLowerCase(), args: parts2.slice(1) };
 }
 function inspectOvpn(text) {
-  const problems = [];
+  const problems2 = [];
   const found = [];
   const refuse = (message) => {
-    if (problems.length < 20 && !problems.includes(message)) problems.push(message);
+    if (problems2.length < 20 && !problems2.includes(message)) problems2.push(message);
   };
   if (Buffer.byteLength(text, "utf8") > MAX_OVPN_BYTES) return { ok: false, problems: ["the file is too big"] };
   if (text.includes("\0")) return { ok: false, problems: ["the file is not text"] };
@@ -33543,7 +33752,7 @@ function inspectOvpn(text) {
   if (block) refuse("a <" + block + "> section is never closed");
   if (remotes.length === 0) refuse("it names no remote server");
   if (remotes.length > 64) refuse("it names too many servers");
-  return problems.length ? { ok: false, problems } : { ok: true, remotes };
+  return problems2.length ? { ok: false, problems: problems2 } : { ok: true, remotes };
 }
 function assertSafeOvpn(text, what) {
   const report = inspectOvpn(text);
@@ -33553,6 +33762,181 @@ function assertSafeOvpn(text, what) {
   );
 }
 
+// src/shared/vpn/wireguard.ts
+import net2 from "node:net";
+var MAX_WIREGUARD_BYTES = 16 * 1024;
+var MAX_LINES2 = 300;
+var MAX_PEERS = 16;
+var WIREGUARD_PROGRAM_KEYS = ["preup", "postup", "predown", "postdown", "table", "saveconfig"];
+var INTERFACE_KEYS = /* @__PURE__ */ new Set(["privatekey", "address", "dns", "mtu", "listenport"]);
+var PEER_KEYS = /* @__PURE__ */ new Set(["publickey", "presharedkey", "allowedips", "endpoint", "persistentkeepalive"]);
+var LIST_KEYS = /* @__PURE__ */ new Set(["address", "dns", "allowedips"]);
+var KEY = /^[A-Za-z0-9+/]{43}=$/;
+var HOST2 = /^(?:\d{1,3}(?:\.\d{1,3}){3}|[A-Za-z0-9](?:[A-Za-z0-9.-]{0,251}[A-Za-z0-9])?)$/;
+function validCidr(text) {
+  const [addr, prefix, ...rest] = text.split("/");
+  if (rest.length > 0 || !addr) return false;
+  const version2 = net2.isIP(addr);
+  if (version2 === 0) return false;
+  if (prefix === void 0) return true;
+  if (!/^\d{1,3}$/.test(prefix)) return false;
+  return Number(prefix) <= (version2 === 4 ? 32 : 128);
+}
+var inRange = (text, low, high) => {
+  if (!/^\d{1,5}$/.test(text)) return null;
+  const n = Number(text);
+  return n >= low && n <= high ? n : null;
+};
+var splitList = (text) => text.split(",").map((s) => s.trim()).filter(Boolean);
+function inspectWireguard(text) {
+  const problems2 = [];
+  const refuse = (message) => {
+    if (problems2.length < 20 && !problems2.includes(message)) problems2.push(message);
+  };
+  if (Buffer.byteLength(text, "utf8") > MAX_WIREGUARD_BYTES) return { ok: false, problems: ["the file is too big"] };
+  if (text.includes("\0")) return { ok: false, problems: ["the file is not text"] };
+  const lines = (text.charCodeAt(0) === 65279 ? text.slice(1) : text).split(/\r?\n/);
+  if (lines.length > MAX_LINES2) return { ok: false, problems: ["the file has too many lines"] };
+  const sections = [];
+  let current = null;
+  lines.forEach((raw, i) => {
+    const at = "line " + (i + 1) + ": ";
+    const line = raw.replace(/#.*$/, "").trim();
+    if (!line) return;
+    const header = /^\[([A-Za-z]{1,20})\]$/.exec(line);
+    if (header) {
+      const name = header[1].toLowerCase();
+      if (name !== "interface" && name !== "peer") {
+        current = null;
+        return refuse(at + "[" + name + "] is not allowed");
+      }
+      current = { kind: name, values: /* @__PURE__ */ new Map() };
+      sections.push(current);
+      return;
+    }
+    const pair = /^([A-Za-z]{1,40})\s*=\s*(.*)$/.exec(line);
+    if (!pair) return refuse(at + 'not a "Key = value" line');
+    const key = pair[1].toLowerCase();
+    if (WIREGUARD_PROGRAM_KEYS.includes(key))
+      return refuse(at + pair[1] + " runs a program or changes how the tunnel is routed or saved");
+    if (!current) return refuse(at + pair[1] + " is outside a section");
+    if (!(current.kind === "interface" ? INTERFACE_KEYS : PEER_KEYS).has(key))
+      return refuse(at + pair[1] + " is not on the list of settings that are safe to accept");
+    const seen = current.values.get(key);
+    if (seen && !LIST_KEYS.has(key)) return refuse(at + pair[1] + " is given twice");
+    current.values.set(key, [...seen ?? [], pair[2].trim()]);
+  });
+  const one = (s, key) => s.values.get(key)?.[0];
+  const joined = (s, key) => (s.values.get(key) ?? []).flatMap(splitList);
+  const interfaces = sections.filter((s) => s.kind === "interface");
+  const peers = sections.filter((s) => s.kind === "peer");
+  if (interfaces.length !== 1) refuse("it needs exactly one [Interface] section");
+  if (peers.length === 0) refuse("it has no [Peer] section");
+  if (peers.length > MAX_PEERS) refuse("it has too many [Peer] sections");
+  if (problems2.length) return { ok: false, problems: problems2 };
+  const face = interfaces[0];
+  const privateKey = one(face, "privatekey");
+  if (!privateKey) refuse("[Interface] has no PrivateKey");
+  else if (!KEY.test(privateKey)) refuse("PrivateKey is not a WireGuard key (44 characters of base64)");
+  const addresses = joined(face, "address");
+  if (addresses.length === 0 || !addresses.every(validCidr)) refuse("[Interface] needs valid Address values");
+  else if (!addresses.some((a) => net2.isIPv4(a.split("/")[0])))
+    refuse("Address needs an IPv4 address (the kill switch works on IPv4)");
+  const dns3 = joined(face, "dns");
+  if (!dns3.every((d) => net2.isIP(d) !== 0)) refuse("DNS may only list IP addresses");
+  const mtuText = one(face, "mtu");
+  const mtu = mtuText === void 0 ? void 0 : inRange(mtuText, 576, 1500);
+  if (mtuText !== void 0 && mtu === null) refuse("MTU must be a number from 576 to 1500");
+  const portText = one(face, "listenport");
+  const listenPort = portText === void 0 ? void 0 : inRange(portText, 1, 65535);
+  if (portText !== void 0 && listenPort === null) refuse("ListenPort must be a number from 1 to 65535");
+  const checked = [];
+  peers.forEach((p, n) => {
+    const who = "[Peer] " + (n + 1) + ": ";
+    const publicKey = one(p, "publickey");
+    if (!publicKey || !KEY.test(publicKey)) return refuse(who + "PublicKey is missing or not a WireGuard key");
+    const preshared = one(p, "presharedkey");
+    if (preshared !== void 0 && !KEY.test(preshared)) return refuse(who + "PresharedKey is not a WireGuard key");
+    const allowed = joined(p, "allowedips");
+    if (allowed.length === 0 || !allowed.every(validCidr)) return refuse(who + "AllowedIPs is missing or invalid");
+    const endpoint = one(p, "endpoint");
+    const m = endpoint ? /^([^:[\]]+):(\d{1,5})$/.exec(endpoint) : null;
+    if (!m || !HOST2.test(m[1]) || inRange(m[2], 1, 65535) === null)
+      return refuse(who + "Endpoint must be host:port with a name or an IPv4 address");
+    if (/^\d+\.\d+\.\d+\.\d+$/.test(m[1]) && !net2.isIPv4(m[1])) return refuse(who + "Endpoint is not a valid address");
+    const keepText = one(p, "persistentkeepalive");
+    let keepalive;
+    if (keepText !== void 0 && keepText.toLowerCase() !== "off") {
+      const k = inRange(keepText, 0, 65535);
+      if (k === null) return refuse(who + "PersistentKeepalive must be a number or off");
+      keepalive = k;
+    }
+    checked.push({
+      publicKey,
+      ...preshared ? { presharedKey: preshared } : {},
+      allowedIps: allowed,
+      endpointHost: m[1],
+      endpointPort: Number(m[2]),
+      ...keepalive !== void 0 ? { keepalive } : {}
+    });
+  });
+  if (problems2.length || !privateKey) return { ok: false, problems: problems2 };
+  return {
+    ok: true,
+    config: {
+      privateKey,
+      addresses,
+      dns: dns3,
+      ...typeof mtu === "number" ? { mtu } : {},
+      ...typeof listenPort === "number" ? { listenPort } : {},
+      peers: checked
+    }
+  };
+}
+function assertSafeWireguard(text, what) {
+  const report = inspectWireguard(text);
+  if (report.ok) return report.config;
+  throw new Error(
+    what + " was refused because it could run programs or is not a plain WireGuard config:\n  - " + report.problems.slice(0, 5).join("\n  - ")
+  );
+}
+function renderWireguard(config2, endpointIps = {}) {
+  const out = ["[Interface]", "PrivateKey = " + config2.privateKey, "Address = " + config2.addresses.join(", ")];
+  if (config2.dns.length) out.push("DNS = " + config2.dns.join(", "));
+  if (config2.mtu !== void 0) out.push("MTU = " + config2.mtu);
+  if (config2.listenPort !== void 0) out.push("ListenPort = " + config2.listenPort);
+  config2.peers.forEach((p, i) => {
+    out.push("", "[Peer]", "PublicKey = " + p.publicKey);
+    if (p.presharedKey) out.push("PresharedKey = " + p.presharedKey);
+    out.push(
+      "AllowedIPs = " + p.allowedIps.join(", "),
+      "Endpoint = " + (endpointIps[i] ?? p.endpointHost) + ":" + p.endpointPort
+    );
+    if (p.keepalive !== void 0) out.push("PersistentKeepalive = " + p.keepalive);
+  });
+  return out.join("\r\n") + "\r\n";
+}
+function wireguardEndpoints(config2) {
+  return config2.peers.map((p) => ({ host: p.endpointHost, port: p.endpointPort }));
+}
+function wireguardTunnelAddress(config2) {
+  const found = config2.addresses.map((a) => a.split("/")[0]).find((a) => net2.isIPv4(a));
+  if (!found) throw new Error("the config has no IPv4 address");
+  return found;
+}
+function routesEverything(config2) {
+  return config2.peers.some((p) => p.allowedIps.some((a) => a === "0.0.0.0/0"));
+}
+function serviceRunning(scOutput) {
+  return /STATE\s*:\s*\d+\s+RUNNING/i.test(scOutput);
+}
+function handshakeDone(wgOutput) {
+  return wgOutput.split(/\r?\n/).some((line) => {
+    const t = /\s(\d+)\s*$/.exec(line);
+    return t !== null && Number(t[1]) > 0;
+  });
+}
+
 // src/shared/vpn/kill-switch.ts
 var VPN_RULE_PREFIX = "AgentSandbox-VPN-";
 var rule = (name, extra) => [
@@ -33637,6 +34021,18 @@ var OPENVPN_MSI = {
   },
   base: "https://swupdate.openvpn.org/community/releases/"
 };
+var WIREGUARD_MSI = {
+  version: "1.1.1",
+  x64: {
+    file: "wireguard-amd64-1.1.1.msi",
+    sha256: "7bfed60ad61b785c914b38b61555a975488e1d3ec472dbfb2fcdf498fca75242"
+  },
+  arm64: {
+    file: "wireguard-arm64-1.1.1.msi",
+    sha256: "8336335c738d4aff040fa9d11b752da65a80b6f41d3262d6ba5e82f97ebd1bd4"
+  },
+  base: "https://download.wireguard.com/windows-client/"
+};
 
 // src/guest/vpn/openvpn.ts
 function openvpnExe(env = process.env) {
@@ -33740,6 +34136,111 @@ async function startTunnel(o) {
   }
 }
 
+// src/guest/vpn/wireguard.ts
+import { execFile } from "node:child_process";
+import crypto5 from "node:crypto";
+import fs56 from "node:fs";
+import os13 from "node:os";
+import path70 from "node:path";
+var WIREGUARD_TUNNEL = "sandbox";
+function wireguardDir(env = process.env) {
+  return path70.join(env.ProgramFiles ?? "C:\\Program Files", "WireGuard");
+}
+function wireguardExe(env = process.env) {
+  return path70.join(wireguardDir(env), "wireguard.exe");
+}
+function wireguardDownload(arch2 = process.arch) {
+  const entry = arch2 === "arm64" ? WIREGUARD_MSI.arm64 : WIREGUARD_MSI.x64;
+  return { ...entry, url: WIREGUARD_MSI.base + entry.file };
+}
+var hasHash2 = (file3, sha256) => crypto5.createHash("sha256").update(fs56.readFileSync(file3)).digest("hex") === sha256;
+async function ensureWireguard() {
+  const exe = wireguardExe();
+  if (!isWin || dryRun) return exe;
+  if (exists(exe)) return exe;
+  const dl = wireguardDownload();
+  const msi = path70.join(mkdirp(path70.join(toolsDir, "downloads")), dl.file);
+  if (!exists(msi) || !hasHash2(msi, dl.sha256)) {
+    log("VPN: downloading WireGuard " + WIREGUARD_MSI.version + " (about 3 MB)");
+    await downloader.file(dl.url, msi, dl.sha256);
+  }
+  log("VPN: installing WireGuard");
+  const logFile2 = path70.join(toolsDir, "downloads", "wireguard-install.log");
+  const code = await spawnAsync(
+    SYSTEM.msiexec(),
+    ["/i", msi, "/qn", "/norestart", "DO_NOT_LAUNCH=1", "/l*v", logFile2],
+    {
+      stdio: "ignore"
+    }
+  );
+  if (code !== 0 && code !== 3010)
+    throw new Error("The WireGuard installer failed (exit " + code + "). Its log: " + logFile2);
+  if (!exists(exe))
+    throw new Error("WireGuard was installed but " + exe + " is missing. The installer log: " + logFile2);
+  return exe;
+}
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+function output2(file3, args) {
+  return new Promise((resolve2) => {
+    execFile(file3, args, { windowsHide: true, timeout: 15e3, maxBuffer: 1024 * 1024 }, (error62, stdout, stderr) => {
+      const code = error62 ? typeof error62.code === "number" ? error62.code : -1 : 0;
+      resolve2({ code, text: String(stdout) + String(stderr) });
+    });
+  });
+}
+var serviceName = () => "WireGuardTunnel$" + WIREGUARD_TUNNEL;
+var hasAdapter = (ip) => Object.values(os13.networkInterfaces()).some((list) => (list ?? []).some((i) => i.address === ip));
+async function removeWireguardTunnel(exe) {
+  try {
+    await output2(exe, ["/uninstalltunnelservice", WIREGUARD_TUNNEL]);
+  } catch {
+  }
+}
+async function startWireguardTunnel(o) {
+  const root = path70.join(process.env.SystemRoot ?? "C:\\Windows", "Temp");
+  const dir = fs56.mkdtempSync(path70.join(fs56.existsSync(root) ? root : os13.tmpdir(), "sbx-wg-"));
+  const file3 = path70.join(dir, WIREGUARD_TUNNEL + ".conf");
+  fs56.writeFileSync(file3, o.config, "utf8");
+  const fail = async (message) => {
+    await removeWireguardTunnel(o.exe);
+    return { ok: false, message };
+  };
+  try {
+    const install = await output2(o.exe, ["/installtunnelservice", file3]);
+    if (install.code !== 0) return await fail("WireGuard could not install the tunnel (exit " + install.code + ")");
+    const deadline = Date.now() + (o.timeoutMs ?? 6e4);
+    for (; ; ) {
+      const state = await output2(SYSTEM.sc(), ["query", serviceName()]);
+      if (serviceRunning(state.text) && hasAdapter(o.tunnelIp)) {
+        return { ok: true, message: "the tunnel service is running", tunnelIp: o.tunnelIp };
+      }
+      if (/STOPPED/i.test(state.text) || /1060/.test(state.text))
+        return await fail("the WireGuard tunnel service stopped (check the config: keys, address, endpoint)");
+      if (Date.now() > deadline)
+        return await fail("the WireGuard tunnel did not start in time (the network driver may not work here)");
+      await sleep(500);
+    }
+  } finally {
+    fs56.rmSync(dir, { recursive: true, force: true });
+  }
+}
+async function waitForHandshake(exe, poke, timeoutMs = 3e4) {
+  const wg = path70.join(path70.dirname(exe), "wg.exe");
+  if (!exists(wg)) return { ok: true, message: "the tunnel service is running (no wg.exe to check the handshake)" };
+  const deadline = Date.now() + timeoutMs;
+  for (; ; ) {
+    await poke().catch(() => void 0);
+    const shown = await output2(wg, ["show", WIREGUARD_TUNNEL, "latest-handshakes"]);
+    if (shown.code === 0 && handshakeDone(shown.text)) return { ok: true, message: "the server answered" };
+    if (Date.now() > deadline)
+      return {
+        ok: false,
+        message: "the VPN server did not answer (check the endpoint, the keys and that its UDP port is reachable)"
+      };
+    await sleep(1e3);
+  }
+}
+
 // src/guest/vpn/vpn.ts
 function setVpnStatus(state, message, extra = {}) {
   try {
@@ -33766,6 +34267,20 @@ async function serverAddresses(remotes) {
   }
   return out;
 }
+async function wireguardServers(config2) {
+  const endpointIps = {};
+  const servers = [];
+  const found = wireguardEndpoints(config2);
+  for (let i = 0; i < found.length; i++) {
+    const [ip] = await serverAddresses([{ host: found[i].host, port: found[i].port, proto: "udp" }]).then(
+      (all) => all.map((s) => s.ip)
+    );
+    if (!ip) throw new Error("the VPN server address could not be found");
+    endpointIps[i] = ip;
+    servers.push({ ip, port: found[i].port, proto: "udp" });
+  }
+  return { servers, text: renderWireguard(config2, endpointIps) };
+}
 async function publicAddress() {
   try {
     const text = (await (await fetch("https://api.ipify.org", { signal: AbortSignal.timeout(1e4) })).text()).trim();
@@ -33774,7 +34289,7 @@ async function publicAddress() {
     return null;
   }
 }
-var hasAdapter = (ip) => Object.values(os13.networkInterfaces()).some((list) => (list ?? []).some((i) => i.address === ip));
+var hasAdapter2 = (ip) => Object.values(os14.networkInterfaces()).some((list) => (list ?? []).some((i) => i.address === ip));
 async function setupVpn(secrets, ptyHostExe) {
   const vpn = session.vpn;
   if (!vpn) return true;
@@ -33788,25 +34303,53 @@ async function setupVpn(secrets, ptyHostExe) {
   setVpnStatus("starting", "Starting the VPN");
   try {
     if (!session.networking) throw new Error("networking is off for this sandbox");
-    const credentials = secrets.vpn;
-    if (!credentials) throw new Error("the VPN login did not arrive (start the sandbox again)");
-    const profile = path70.join(launchDir, "vpn", "server.ovpn");
-    const remotes = assertSafeOvpn(fs56.readFileSync(profile, "utf8"), vpn.server);
-    const exe = await ensureOpenVpn();
-    const servers = await serverAddresses(remotes);
-    if (servers.length === 0) throw new Error("the VPN server addresses could not be found");
-    if (killSwitch) block(servers);
-    if (dryRun || !isWin) {
-      log("(dry run) would start the VPN tunnel to " + vpn.server);
-      setVpnStatus("off", "dry run");
-      return true;
+    let result;
+    let wireguardExe2 = null;
+    if (vpn.provider === "wireguard-file") {
+      if (!secrets.wireguardConfig) throw new Error("the WireGuard config did not arrive (start the sandbox again)");
+      const config2 = assertSafeWireguard(secrets.wireguardConfig, vpn.server);
+      const exe = await ensureWireguard();
+      const { servers, text } = await wireguardServers(config2);
+      if (killSwitch && !routesEverything(config2))
+        warn(
+          "VPN: AllowedIPs does not include 0.0.0.0/0: with the kill switch on, only the tunnel traffic can leave the sandbox."
+        );
+      if (killSwitch) block(servers);
+      if (dryRun || !isWin) {
+        log("(dry run) would start the WireGuard tunnel " + vpn.server);
+        setVpnStatus("off", "dry run");
+        return true;
+      }
+      log("VPN: connecting with " + vpn.server);
+      wireguardExe2 = exe;
+      result = await startWireguardTunnel({ exe, config: text, tunnelIp: wireguardTunnelAddress(config2) });
+      if (result.ok && result.tunnelIp && killSwitch) run2(tunnelCommands(result.tunnelIp));
+      if (result.ok) result = await waitForHandshake(exe, publicAddress);
+    } else {
+      const credentials = secrets.vpn;
+      if (!credentials) throw new Error("the VPN login did not arrive (start the sandbox again)");
+      const profile = path71.join(launchDir, "vpn", "server.ovpn");
+      const remotes = assertSafeOvpn(fs57.readFileSync(profile, "utf8"), vpn.server);
+      const exe = await ensureOpenVpn();
+      const servers = await serverAddresses(remotes);
+      if (servers.length === 0) throw new Error("the VPN server addresses could not be found");
+      if (killSwitch) block(servers);
+      if (dryRun || !isWin) {
+        log("(dry run) would start the VPN tunnel to " + vpn.server);
+        setVpnStatus("off", "dry run");
+        return true;
+      }
+      log("VPN: connecting to " + vpn.server);
+      result = await startTunnel({ exe, profile, username: credentials.username, password: credentials.password });
+      if (result.ok && result.tunnelIp && hasAdapter2(result.tunnelIp) && killSwitch)
+        run2(tunnelCommands(result.tunnelIp));
+    }
+    if (!result.ok) {
+      if (wireguardExe2) await removeWireguardTunnel(wireguardExe2);
+      throw new Error(result.message);
     }
-    log("VPN: connecting to " + vpn.server);
-    const result = await startTunnel({ exe, profile, username: credentials.username, password: credentials.password });
-    if (!result.ok) throw new Error(result.message);
-    if (!result.tunnelIp || !hasAdapter(result.tunnelIp))
+    if (!result.tunnelIp || !hasAdapter2(result.tunnelIp))
       throw new Error("the tunnel reported it was up, but no network adapter with its address appeared");
-    if (killSwitch) run2(tunnelCommands(result.tunnelIp));
     const publicIp = await publicAddress();
     log("VPN: up" + (publicIp ? " (the sandbox appears as " + publicIp + ")" : "") + ".");
     setVpnStatus("up", "The tunnel is up", publicIp ? { publicIp } : {});
@@ -33877,10 +34420,10 @@ var FrameReader = class {
 };
 
 // src/shared/pty/client.ts
-import net2 from "node:net";
+import net3 from "node:net";
 var connectOnce = (host, port, timeoutMs) => {
   return new Promise((resolve2, reject) => {
-    const socket = net2.connect({ host, port });
+    const socket = net3.connect({ host, port });
     const timer = setTimeout(() => {
       socket.destroy();
       reject(new Error("timed out connecting to " + host + ":" + port));
@@ -33916,7 +34459,14 @@ var KEPT_OSC = (body) => {
   return n <= 2 || n === 8 || n === 133 || n === 9 && body.startsWith(number4[1] + ";4;");
 };
 var MAX_KEPT_STRING = 4096;
+var MAX_CLIPBOARD_STRING = 1024 * 1024;
+var CLIPBOARD_WRITE = /^0{0,2}52;[cpqs0-7]{0,8};[A-Za-z0-9+/=]*$/;
 var OutputFilter = class {
+  constructor(options = {}) {
+    this.options = options;
+    this.maxString = options.clipboardWrites ? MAX_CLIPBOARD_STRING : MAX_KEPT_STRING;
+  }
+  options;
   /**
    * text: normal output; esc: after ESC; c2: after a 0xC2 lead byte; string: inside an OSC/DCS/...; stringEsc /
    * stringC2: a possible terminator inside one.
@@ -33924,8 +34474,14 @@ var OutputFilter = class {
   state = "text";
   /** The string being read: an OSC worth keeping is collected until its terminator; null = being dropped. */
   body = null;
+  maxString;
+  /** An OSC that may pass: a short title, link, progress or mark, or (when allowed) a clipboard write. */
+  kept(body) {
+    if (this.options.clipboardWrites && CLIPBOARD_WRITE.test(body)) return true;
+    return body.length <= MAX_KEPT_STRING && KEPT_OSC(body);
+  }
   push(chunk) {
-    const out = Buffer.allocUnsafe(chunk.length + MAX_KEPT_STRING + 8);
+    const out = Buffer.allocUnsafe(chunk.length + (this.body?.length ?? 0) + 8);
     let n = 0;
     const put = (...bytes) => {
       for (const b of bytes) out[n++] = b;
@@ -33945,7 +34501,7 @@ var OutputFilter = class {
     };
     const endString = (terminator) => {
       const body = this.body && Buffer.from(this.body).toString("latin1");
-      if (body !== null && KEPT_OSC(body)) {
+      if (body !== null && this.kept(body)) {
         put(27, 93);
         out.write(body, n, "latin1");
         n += body.length;
@@ -33955,7 +34511,7 @@ var OutputFilter = class {
       this.state = "text";
     };
     const collect = (b) => {
-      if (this.body && this.body.push(b) > MAX_KEPT_STRING) this.body = null;
+      if (this.body && this.body.push(b) > this.maxString) this.body = null;
     };
     for (const b of chunk) {
       switch (this.state) {
@@ -34105,7 +34661,7 @@ function runTerminalClient(socket, token, options = {}) {
   return new Promise((resolve2) => {
     let done = false;
     const reader = new FrameReader();
-    const filter = new OutputFilter();
+    const filter = new OutputFilter({ clipboardWrites: options.clipboardWrites });
     let sent = size();
     let resizeTimer;
     let vtInput;
@@ -34222,14 +34778,14 @@ async function viewSession(id) {
     return 1;
   }
   const socket = await connect({ ...session2.attach, addresses: ["127.0.0.1"] });
-  const result = await runTerminalClient(socket, session2.attach.token);
+  const result = await runTerminalClient(socket, session2.attach.token, { clipboardWrites: true });
   if (result.reason === "exit") console.log(session2.harness + " exited with code " + result.exitCode + ".");
   else if (result.reason === "error") console.log("Session error: " + result.message);
   return result.reason === "exit" ? result.exitCode : 1;
 }
 
 // src/guest/boot/boot-env.ts
-import path71 from "node:path";
+import path72 from "node:path";
 
 // src/guest/boot/project-env.ts
 var EnvSchema = external_exports.object({
@@ -34248,7 +34804,7 @@ var BootEnvSchema = external_exports.object({
 });
 
 // src/guest/boot/boot-env.ts
-var file2 = () => path71.join(localDir, "boot-env.json");
+var file2 = () => path72.join(localDir, "boot-env.json");
 function saveBootEnv(value) {
   try {
     writeJsonAtomic(file2(), value);
@@ -34277,7 +34833,7 @@ function saveProjectStatus(name, workspace2, phase, message, databases, summary)
 }
 
 // src/guest/runtime/secrets.ts
-import fs57 from "node:fs";
+import fs58 from "node:fs";
 
 // src/shared/channel/secrets.ts
 var Environment = external_exports.record(external_exports.string().max(256), external_exports.string().max(65536));
@@ -34291,7 +34847,9 @@ var SecretsFileSchema = external_exports.strictObject({
   /** The login of this PC's Claude (claudeProfile.copyCredentials): the text of .credentials.json. */
   claudeCredentials: external_exports.string().max(1024 * 1024).optional(),
   /** VPN service credentials (vpn.provider's login), only for the launch's own sandbox. */
-  vpn: external_exports.strictObject({ username: external_exports.string().min(1).max(256), password: external_exports.string().min(1).max(1024) }).optional()
+  vpn: external_exports.strictObject({ username: external_exports.string().min(1).max(256), password: external_exports.string().min(1).max(1024) }).optional(),
+  /** The checked WireGuard config of vpn.provider wireguard-file (holds the private key). */
+  wireguardConfig: external_exports.string().min(1).max(32 * 1024).optional()
 });
 
 // src/guest/runtime/secrets.ts
@@ -34301,12 +34859,12 @@ function takeSecrets(id) {
   const file3 = run.secretFile(id);
   let text;
   try {
-    if (fs57.statSync(file3).size > MAX_BYTES) throw new Error("too big");
-    text = fs57.readFileSync(file3, "utf8").replace(/^\uFEFF/, "");
+    if (fs58.statSync(file3).size > MAX_BYTES) throw new Error("too big");
+    text = fs58.readFileSync(file3, "utf8").replace(/^\uFEFF/, "");
   } catch {
     return {};
   } finally {
-    fs57.rmSync(file3, { force: true });
+    fs58.rmSync(file3, { force: true });
   }
   try {
     const parsed = SecretsFileSchema.safeParse(JSON.parse(text));
@@ -34344,7 +34902,7 @@ async function soft(what, work) {
   }
 }
 function startDaemon(env, secrets) {
-  spawn9(process.execPath, [path72.join(path72.dirname(process.argv[1]), "daemon.js")], {
+  spawn9(process.execPath, [path73.join(path73.dirname(process.argv[1]), "daemon.js")], {
     detached: true,
     stdio: "ignore",
     windowsHide: true,
@@ -34357,20 +34915,20 @@ function startDaemon(env, secrets) {
   }).unref();
 }
 function writeDbCommand() {
-  const dir = mkdirp(path72.join(localDir, "bin"));
-  const db = path72.join(path72.dirname(process.argv[1]), "db.js");
-  fs58.writeFileSync(
-    path72.join(dir, "sbx-db.cmd"),
+  const dir = mkdirp(path73.join(localDir, "bin"));
+  const db = path73.join(path73.dirname(process.argv[1]), "db.js");
+  fs59.writeFileSync(
+    path73.join(dir, "sbx-db.cmd"),
     '@setlocal\r\n@set AGENT_LOG_PREFIX=db\r\n@"' + process.execPath + '" "' + db + '" %*\r\n'
   );
   writeAgentCommands(dir);
   return dir;
 }
 function writeAgentCommands(dir) {
-  const install = { node: process.execPath, script: path72.join(path72.dirname(process.argv[1]), "agent.js") };
+  const install = { node: process.execPath, script: path73.join(path73.dirname(process.argv[1]), "agent.js") };
   for (const shim3 of agentShims(toolsDir, session.agents ?? {}))
-    fs58.writeFileSync(path72.join(dir, shim3.command + ".cmd"), shimText(shim3, install));
-  fs58.writeFileSync(path72.join(dir, "sbx-agent.cmd"), sbxAgentText(install));
+    fs59.writeFileSync(path73.join(dir, shim3.command + ".cmd"), shimText(shim3, install));
+  fs59.writeFileSync(path73.join(dir, "sbx-agent.cmd"), sbxAgentText(install));
 }
 async function waitForPrimary() {
   for (let i = 0; i < PRIMARY_POLLS; i++) {
@@ -34398,7 +34956,7 @@ var Boot = class {
     log(
       "Agent sandbox: " + session.project + " | workspace " + workspace + " | agent " + session.harnessName + " | log " + logPath
     );
-    if (!fs58.statSync(workspace, { throwIfNoEntry: false })?.isDirectory())
+    if (!fs59.statSync(workspace, { throwIfNoEntry: false })?.isDirectory())
       throw new Error("Workspace folder is missing in the sandbox: " + workspace);
     mkdirp(toolsDir);
     mkdirp(run.root);
@@ -34442,6 +35000,7 @@ var Boot = class {
       databases: session.databases ?? [],
       apps: session.apps
     });
+    for (const p of networkProblems()) tools.summary.push("PROTECTION MISSING: " + p);
     if (!dryRun) tools.prepend.push(writeDbCommand());
     Object.assign(tools.vars, proxyEnv());
     await soft("Network: allow only some hosts", async () => {
@@ -34491,6 +35050,7 @@ var Boot = class {
     if (session.harnessName === "claude")
       await soft("Claude settings", () => syncClaudeProfile(this.secrets.claudeCredentials));
     await soft("claude-mem restore", restoreClaudeMem);
+    await soft("Agent files of the last sandbox", resetMachineBound);
     await soft("Agent databases restore", restoreLocalState);
     await soft("Sandbox guide for the agent", () => writeGuides(tools.summary, this.lan));
     await soft("Claude managed settings", () => writeManagedSettings2(this.gitAccess));
@@ -34545,11 +35105,11 @@ runBoot().catch((e) => {
   const message = errMsg(e) + (e instanceof Error && e.stack ? "\n" + e.stack : "");
   try {
     setSandboxStatus("failed", errMsg(e));
-    fs59.writeFileSync(path73.join(logsDir, "guest-error.txt"), message);
+    fs60.writeFileSync(path74.join(logsDir, "guest-error.txt"), message);
   } catch {
   }
   console.error(
-    "\n\x1B[31mThe sandbox could not start: " + errMsg(e) + "\x1B[0m\nDetails: " + path73.join(logsDir, "guest-error.txt")
+    "\n\x1B[31mThe sandbox could not start: " + errMsg(e) + "\x1B[0m\nDetails: " + path74.join(logsDir, "guest-error.txt")
   );
   process.exitCode = 1;
 });