windows-development-sandbox 1.9.0 → 1.11.3

package/dist/runtime/view.js

@@ -1363,11 +1363,11 @@ var require_lodash = __commonJS({
             return isFunction(object2[key]);
           });
         }
-        function baseGet(object2, path5) {
-          path5 = castPath(path5, object2);
-          var index = 0, length = path5.length;
+        function baseGet(object2, path10) {
+          path10 = castPath(path10, object2);
+          var index = 0, length = path10.length;
           while (object2 != null && index < length) {
-            object2 = object2[toKey(path5[index++])];
+            object2 = object2[toKey(path10[index++])];
           }
           return index && index == length ? object2 : undefined2;
         }
@@ -1431,10 +1431,10 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function baseInvoke(object2, path5, args) {
-          path5 = castPath(path5, object2);
-          object2 = parent(object2, path5);
-          var func = object2 == null ? object2 : object2[toKey(last(path5))];
+        function baseInvoke(object2, path10, args) {
+          path10 = castPath(path10, object2);
+          object2 = parent(object2, path10);
+          var func = object2 == null ? object2 : object2[toKey(last(path10))];
           return func == null ? undefined2 : apply(func, object2, args);
         }
         function baseIsArguments(value) {
@@ -1590,13 +1590,13 @@ var require_lodash = __commonJS({
             return object2 === source || baseIsMatch(object2, source, matchData);
           };
         }
-        function baseMatchesProperty(path5, srcValue) {
-          if (isKey(path5) && isStrictComparable(srcValue)) {
-            return matchesStrictComparable(toKey(path5), srcValue);
+        function baseMatchesProperty(path10, srcValue) {
+          if (isKey(path10) && isStrictComparable(srcValue)) {
+            return matchesStrictComparable(toKey(path10), srcValue);
           }
           return function(object2) {
-            var objValue = get(object2, path5);
-            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path5) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
+            var objValue = get(object2, path10);
+            return objValue === undefined2 && objValue === srcValue ? hasIn(object2, path10) : baseIsEqual(srcValue, objValue, COMPARE_PARTIAL_FLAG | COMPARE_UNORDERED_FLAG);
           };
         }
         function baseMerge(object2, source, srcIndex, customizer, stack) {
@@ -1693,23 +1693,23 @@ var require_lodash = __commonJS({
           });
         }
         function basePick(object2, paths) {
-          return basePickBy(object2, paths, function(value, path5) {
-            return hasIn(object2, path5);
+          return basePickBy(object2, paths, function(value, path10) {
+            return hasIn(object2, path10);
           });
         }
         function basePickBy(object2, paths, predicate) {
           var index = -1, length = paths.length, result2 = {};
           while (++index < length) {
-            var path5 = paths[index], value = baseGet(object2, path5);
-            if (predicate(value, path5)) {
-              baseSet(result2, castPath(path5, object2), value);
+            var path10 = paths[index], value = baseGet(object2, path10);
+            if (predicate(value, path10)) {
+              baseSet(result2, castPath(path10, object2), value);
             }
           }
           return result2;
         }
-        function basePropertyDeep(path5) {
+        function basePropertyDeep(path10) {
           return function(object2) {
-            return baseGet(object2, path5);
+            return baseGet(object2, path10);
           };
         }
         function basePullAll(array2, values2, iteratee2, comparator) {
@@ -1783,14 +1783,14 @@ var require_lodash = __commonJS({
           var array2 = values(collection);
           return shuffleSelf(array2, baseClamp(n, 0, array2.length));
         }
-        function baseSet(object2, path5, value, customizer) {
+        function baseSet(object2, path10, value, customizer) {
           if (!isObject2(object2)) {
             return object2;
           }
-          path5 = castPath(path5, object2);
-          var index = -1, length = path5.length, lastIndex = length - 1, nested = object2;
+          path10 = castPath(path10, object2);
+          var index = -1, length = path10.length, lastIndex = length - 1, nested = object2;
           while (nested != null && ++index < length) {
-            var key = toKey(path5[index]), newValue = value;
+            var key = toKey(path10[index]), newValue = value;
             if (key === "__proto__" || key === "constructor" || key === "prototype") {
               return object2;
             }
@@ -1798,7 +1798,7 @@ var require_lodash = __commonJS({
               var objValue = nested[key];
               newValue = customizer ? customizer(objValue, key, nested) : undefined2;
               if (newValue === undefined2) {
-                newValue = isObject2(objValue) ? objValue : isIndex(path5[index + 1]) ? [] : {};
+                newValue = isObject2(objValue) ? objValue : isIndex(path10[index + 1]) ? [] : {};
               }
             }
             assignValue(nested, key, newValue);
@@ -1964,14 +1964,14 @@ var require_lodash = __commonJS({
             }
           return result2;
         }
-        function baseUnset(object2, path5) {
-          path5 = castPath(path5, object2);
-          var index = -1, length = path5.length;
+        function baseUnset(object2, path10) {
+          path10 = castPath(path10, object2);
+          var index = -1, length = path10.length;
           if (!length) {
             return true;
           }
           while (++index < length) {
-            var key = toKey(path5[index]);
+            var key = toKey(path10[index]);
             if (key === "__proto__" && !hasOwnProperty.call(object2, "__proto__")) {
               return false;
             }
@@ -1979,11 +1979,11 @@ var require_lodash = __commonJS({
               return false;
             }
           }
-          var obj = parent(object2, path5);
-          return obj == null || delete obj[toKey(last(path5))];
+          var obj = parent(object2, path10);
+          return obj == null || delete obj[toKey(last(path10))];
         }
-        function baseUpdate(object2, path5, updater, customizer) {
-          return baseSet(object2, path5, updater(baseGet(object2, path5)), customizer);
+        function baseUpdate(object2, path10, updater, customizer) {
+          return baseSet(object2, path10, updater(baseGet(object2, path10)), customizer);
         }
         function baseWhile(array2, predicate, isDrop, fromRight) {
           var length = array2.length, index = fromRight ? length : -1;
@@ -2866,11 +2866,11 @@ var require_lodash = __commonJS({
           var match = source.match(reWrapDetails);
           return match ? match[1].split(reSplitDetails) : [];
         }
-        function hasPath(object2, path5, hasFunc) {
-          path5 = castPath(path5, object2);
-          var index = -1, length = path5.length, result2 = false;
+        function hasPath(object2, path10, hasFunc) {
+          path10 = castPath(path10, object2);
+          var index = -1, length = path10.length, result2 = false;
           while (++index < length) {
-            var key = toKey(path5[index]);
+            var key = toKey(path10[index]);
             if (!(result2 = object2 != null && hasFunc(object2, key))) {
               break;
             }
@@ -3072,8 +3072,8 @@ var require_lodash = __commonJS({
             return apply(func, this, otherArgs);
           };
         }
-        function parent(object2, path5) {
-          return path5.length < 2 ? object2 : baseGet(object2, baseSlice(path5, 0, -1));
+        function parent(object2, path10) {
+          return path10.length < 2 ? object2 : baseGet(object2, baseSlice(path10, 0, -1));
         }
         function reorder(array2, indexes) {
           var arrLength = array2.length, length = nativeMin(indexes.length, arrLength), oldArray = copyArray(array2);
@@ -3708,10 +3708,10 @@ var require_lodash = __commonJS({
           }
           return isString(collection) ? fromIndex <= length && collection.indexOf(value, fromIndex) > -1 : !!length && baseIndexOf(collection, value, fromIndex) > -1;
         }
-        var invokeMap = baseRest(function(collection, path5, args) {
-          var index = -1, isFunc = typeof path5 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
+        var invokeMap = baseRest(function(collection, path10, args) {
+          var index = -1, isFunc = typeof path10 == "function", result2 = isArrayLike(collection) ? Array2(collection.length) : [];
           baseEach(collection, function(value) {
-            result2[++index] = isFunc ? apply(path5, value, args) : baseInvoke(value, path5, args);
+            result2[++index] = isFunc ? apply(path10, value, args) : baseInvoke(value, path10, args);
           });
           return result2;
         });
@@ -4363,15 +4363,15 @@ var require_lodash = __commonJS({
         function functionsIn(object2) {
           return object2 == null ? [] : baseFunctions(object2, keysIn(object2));
         }
-        function get(object2, path5, defaultValue) {
-          var result2 = object2 == null ? undefined2 : baseGet(object2, path5);
+        function get(object2, path10, defaultValue) {
+          var result2 = object2 == null ? undefined2 : baseGet(object2, path10);
           return result2 === undefined2 ? defaultValue : result2;
         }
-        function has(object2, path5) {
-          return object2 != null && hasPath(object2, path5, baseHas);
+        function has(object2, path10) {
+          return object2 != null && hasPath(object2, path10, baseHas);
         }
-        function hasIn(object2, path5) {
-          return object2 != null && hasPath(object2, path5, baseHasIn);
+        function hasIn(object2, path10) {
+          return object2 != null && hasPath(object2, path10, baseHasIn);
         }
         var invert = createInverter(function(result2, value, key) {
           if (value != null && typeof value.toString != "function") {
@@ -4424,10 +4424,10 @@ var require_lodash = __commonJS({
             return result2;
           }
           var isDeep = false;
-          paths = arrayMap(paths, function(path5) {
-            path5 = castPath(path5, object2);
-            isDeep || (isDeep = path5.length > 1);
-            return path5;
+          paths = arrayMap(paths, function(path10) {
+            path10 = castPath(path10, object2);
+            isDeep || (isDeep = path10.length > 1);
+            return path10;
           });
           copyObject(object2, getAllKeysIn(object2), result2);
           if (isDeep) {
@@ -4453,19 +4453,19 @@ var require_lodash = __commonJS({
             return [prop];
           });
           predicate = getIteratee(predicate);
-          return basePickBy(object2, props, function(value, path5) {
-            return predicate(value, path5[0]);
+          return basePickBy(object2, props, function(value, path10) {
+            return predicate(value, path10[0]);
           });
         }
-        function result(object2, path5, defaultValue) {
-          path5 = castPath(path5, object2);
-          var index = -1, length = path5.length;
+        function result(object2, path10, defaultValue) {
+          path10 = castPath(path10, object2);
+          var index = -1, length = path10.length;
           if (!length) {
             length = 1;
             object2 = undefined2;
           }
           while (++index < length) {
-            var value = object2 == null ? undefined2 : object2[toKey(path5[index])];
+            var value = object2 == null ? undefined2 : object2[toKey(path10[index])];
             if (value === undefined2) {
               index = length;
               value = defaultValue;
@@ -4474,12 +4474,12 @@ var require_lodash = __commonJS({
           }
           return object2;
         }
-        function set2(object2, path5, value) {
-          return object2 == null ? object2 : baseSet(object2, path5, value);
+        function set2(object2, path10, value) {
+          return object2 == null ? object2 : baseSet(object2, path10, value);
         }
-        function setWith(object2, path5, value, customizer) {
+        function setWith(object2, path10, value, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseSet(object2, path5, value, customizer);
+          return object2 == null ? object2 : baseSet(object2, path10, value, customizer);
         }
         var toPairs = createToPairs(keys);
         var toPairsIn = createToPairs(keysIn);
@@ -4501,15 +4501,15 @@ var require_lodash = __commonJS({
           });
           return accumulator;
         }
-        function unset(object2, path5) {
-          return object2 == null ? true : baseUnset(object2, path5);
+        function unset(object2, path10) {
+          return object2 == null ? true : baseUnset(object2, path10);
         }
-        function update(object2, path5, updater) {
-          return object2 == null ? object2 : baseUpdate(object2, path5, castFunction(updater));
+        function update(object2, path10, updater) {
+          return object2 == null ? object2 : baseUpdate(object2, path10, castFunction(updater));
         }
-        function updateWith(object2, path5, updater, customizer) {
+        function updateWith(object2, path10, updater, customizer) {
           customizer = typeof customizer == "function" ? customizer : undefined2;
-          return object2 == null ? object2 : baseUpdate(object2, path5, castFunction(updater), customizer);
+          return object2 == null ? object2 : baseUpdate(object2, path10, castFunction(updater), customizer);
         }
         function values(object2) {
           return object2 == null ? [] : baseValues(object2, keys(object2));
@@ -4895,17 +4895,17 @@ var require_lodash = __commonJS({
         function matches(source) {
           return baseMatches(baseClone(source, CLONE_DEEP_FLAG));
         }
-        function matchesProperty(path5, srcValue) {
-          return baseMatchesProperty(path5, baseClone(srcValue, CLONE_DEEP_FLAG));
+        function matchesProperty(path10, srcValue) {
+          return baseMatchesProperty(path10, baseClone(srcValue, CLONE_DEEP_FLAG));
         }
-        var method = baseRest(function(path5, args) {
+        var method = baseRest(function(path10, args) {
           return function(object2) {
-            return baseInvoke(object2, path5, args);
+            return baseInvoke(object2, path10, args);
           };
         });
         var methodOf = baseRest(function(object2, args) {
-          return function(path5) {
-            return baseInvoke(object2, path5, args);
+          return function(path10) {
+            return baseInvoke(object2, path10, args);
           };
         });
         function mixin(object2, source, options) {
@@ -4952,12 +4952,12 @@ var require_lodash = __commonJS({
         var over = createOver(arrayMap);
         var overEvery = createOver(arrayEvery);
         var overSome = createOver(arraySome);
-        function property(path5) {
-          return isKey(path5) ? baseProperty(toKey(path5)) : basePropertyDeep(path5);
+        function property(path10) {
+          return isKey(path10) ? baseProperty(toKey(path10)) : basePropertyDeep(path10);
         }
         function propertyOf(object2) {
-          return function(path5) {
-            return object2 == null ? undefined2 : baseGet(object2, path5);
+          return function(path10) {
+            return object2 == null ? undefined2 : baseGet(object2, path10);
           };
         }
         var range = createRange();
@@ -5410,12 +5410,12 @@ var require_lodash = __commonJS({
         LazyWrapper.prototype.findLast = function(predicate) {
           return this.reverse().find(predicate);
         };
-        LazyWrapper.prototype.invokeMap = baseRest(function(path5, args) {
-          if (typeof path5 == "function") {
+        LazyWrapper.prototype.invokeMap = baseRest(function(path10, args) {
+          if (typeof path10 == "function") {
             return new LazyWrapper(this);
           }
           return this.map(function(value) {
-            return baseInvoke(value, path5, args);
+            return baseInvoke(value, path10, args);
           });
         });
         LazyWrapper.prototype.reject = function(predicate) {
@@ -5858,6 +5858,36 @@ function unfinishedSequence(data) {
   return data.length;
 }
 
+// src/shared/pty/ctrl-c.ts
+var CTRL_C_CONFIRM_MS = 1500;
+var CTRL_C_HINT = "Ctrl+C again to send it to the program (Esc stops an agent)";
+var OSC_TITLE = /\x1b\][02];([^\x07\x1b]{0,256})(?:\x07|\x1b\\)/g;
+var CtrlCGuard = class {
+  armedAt = Number.NEGATIVE_INFINITY;
+  lastTitle = "";
+  /** What to send for one read from the keyboard: a lone Ctrl+C only when another came just before. */
+  push(chunk, nowMs) {
+    if (chunk.length !== 1 || chunk[0] !== 3) return { send: chunk, held: false };
+    if (nowMs - this.armedAt <= CTRL_C_CONFIRM_MS) {
+      this.armedAt = Number.NEGATIVE_INFINITY;
+      return { send: chunk, held: false };
+    }
+    this.armedAt = nowMs;
+    return { send: Buffer.alloc(0), held: true };
+  }
+  /** Remembers the title the program last set (from its output), to put it back after the hint. */
+  watchOutput(text) {
+    for (const m of text.matchAll(OSC_TITLE)) this.lastTitle = m[1];
+  }
+  /** The escape sequence that shows the hint, and the one that puts the program's title back. */
+  hintTitle() {
+    return "\x1B]0;" + CTRL_C_HINT + "\x07";
+  }
+  restoreTitle() {
+    return "\x1B]0;" + this.lastTitle.replace(/[\x00-\x1f\x7f]/g, "") + "\x07";
+  }
+};
+
 // src/shared/pty/terminal.ts
 var MOUSE_OFF = "\x1B[?1000l\x1B[?1002l\x1B[?1003l\x1B[?1005l\x1B[?1006l\x1B[?1015l";
 function fixWindowsKeys(chunk) {
@@ -5888,6 +5918,7 @@ function runTerminalClient(socket, token, options = {}) {
       clearInterval(heartbeat);
       clearInterval(sizeWatch);
       clearTimeout(joinTimer);
+      clearTimeout(hintTimer);
       socket.destroy();
       stdout.write("\x1B[0m\x1B[?25h" + MOUSE_OFF + "\r\n");
       void (vtInput?.stop() ?? Promise.resolve()).then(() => {
@@ -5901,11 +5932,23 @@ function runTerminalClient(socket, token, options = {}) {
     const sendInput = (data) => {
       if (data.length && !done) socket.write(encodeFrame(FrameType.Input, swapKeys ? fixWindowsKeys(data) : data));
     };
+    const guard = options.confirmCtrlC ? new CtrlCGuard() : null;
+    let hintTimer;
     const onInput = (chunk) => {
       if (options.detachKey !== void 0 && chunk.includes(options.detachKey)) {
         finish({ reason: "detach" });
         return;
       }
+      if (guard) {
+        const decided = guard.push(chunk, Date.now());
+        clearTimeout(hintTimer);
+        if (decided.held) {
+          stdout.write(guard.hintTitle());
+          hintTimer = setTimeout(() => stdout.write(guard.restoreTitle()), CTRL_C_CONFIRM_MS);
+          return;
+        }
+        if (decided.send.length === 1 && decided.send[0] === 3) stdout.write(guard.restoreTitle());
+      }
       clearTimeout(joinTimer);
       sendInput(joiner.push(chunk));
       if (joiner.holding()) joinTimer = setTimeout(() => sendInput(joiner.flush()), JOIN_MS);
@@ -5938,8 +5981,11 @@ function runTerminalClient(socket, token, options = {}) {
         return;
       }
       for (const frame of frames) {
-        if (frame.type === FrameType.Output) stdout.write(filter.push(frame.payload));
-        else if (frame.type === FrameType.Console) passthrough = frame.payload.toString("latin1") === "conpty.dll";
+        if (frame.type === FrameType.Output) {
+          const out = filter.push(frame.payload);
+          guard?.watchOutput(out.toString("latin1"));
+          stdout.write(out);
+        } else if (frame.type === FrameType.Console) passthrough = frame.payload.toString("latin1") === "conpty.dll";
         else if (frame.type === FrameType.Restarting) stdout.write(MOUSE_OFF + "\x1B[2J\x1B[3J\x1B[H");
         else if (frame.type === FrameType.Exit)
           finish({ reason: "exit", exitCode: frame.payload.length >= 4 ? frame.payload.readInt32LE(0) : 1 });
@@ -5967,11 +6013,11 @@ function runTerminalClient(socket, token, options = {}) {
 }
 
 // src/guest/runtime/paths.ts
-import path4 from "node:path";
+import path6 from "node:path";
 
 // src/shared/channel/run-dir.ts
-import fs3 from "node:fs";
-import path3 from "node:path";
+import fs5 from "node:fs";
+import path5 from "node:path";
 
 // node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -6789,10 +6835,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path5) {
-  if (!path5)
+function getElementAtPath(obj, path10) {
+  if (!path10)
     return obj;
-  return path5.reduce((acc, key) => acc?.[key], obj);
+  return path10.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -7132,11 +7178,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path5, issues) {
+function prefixIssues(path10, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path5);
+    iss.path.unshift(path10);
     return iss;
   });
 }
@@ -7586,16 +7632,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path5 = []) => {
+  const processError = (error63, path10 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path5, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path10, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else {
-        const fullpath = [...path5, ...issue2.path];
+        const fullpath = [...path10, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -7634,17 +7680,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path5 = []) => {
+  const processError = (error63, path10 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path5, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path10, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path5, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path10, ...issue2.path]);
       } else {
-        const fullpath = [...path5, ...issue2.path];
+        const fullpath = [...path10, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -7683,8 +7729,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path5 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path5) {
+  const path10 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path10) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -21387,13 +21433,13 @@ function _promise(Class2, innerType) {
 }
 // @__NO_SIDE_EFFECTS__
 function _custom(Class2, fn, _params) {
-  const norm = normalizeParams(_params);
-  norm.abort ?? (norm.abort = true);
+  const norm2 = normalizeParams(_params);
+  norm2.abort ?? (norm2.abort = true);
   const schema = new Class2({
     type: "custom",
     check: "custom",
     fn,
-    ...norm
+    ...norm2
   });
   return schema;
 }
@@ -24786,13 +24832,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path5 = ref.slice(1).split("/").filter(Boolean);
-  if (path5.length === 0) {
+  const path10 = ref.slice(1).split("/").filter(Boolean);
+  if (path10.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path5[0] === defsKey) {
-    const key = path5[1] === void 0 ? void 0 : decodeJSONPointerSegment(path5[1]);
+  if (path10[0] === defsKey) {
+    const key = path10[1] === void 0 ? void 0 : decodeJSONPointerSegment(path10[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -25798,6 +25844,9 @@ var AttachSchema = external_exports.strictObject({
   ),
   autoHide: external_exports.boolean().describe(
     "Hide the Windows Sandbox window whenever this terminal attaches; it keeps running (sandbox show brings it back)."
+  ),
+  confirmCtrlC: external_exports.boolean().describe(
+    'In an attached terminal and the sandbox window, a single Ctrl+C is held back (the title says so) and only a second one within 1.5 seconds reaches the agent: a Ctrl+C meant as "copy" no longer stops it. Esc still stops an agent.'
   )
 });
 var AgentCommandsSchema = external_exports.strictObject({
@@ -25842,7 +25891,9 @@ var SandboxSchema = external_exports.strictObject({
   engine: external_exports.enum(["windows-sandbox", "hcs"]).describe(
     '(alpha) What runs the sandbox. "windows-sandbox" = Windows Sandbox (the default: desktop, Windows Terminal, GPU, clipboard, audio, printers). "hcs" = a headless Hyper-V isolated Server Core container for agents (no desktop, GPU or clipboard); it needs Windows features and an image on this PC (sandbox engine check hcs lists what is missing), and starting it is not enabled yet in this alpha. sandbox engine shows what each engine can do. Yours only: a project file (.sandbox-config.json) cannot set it.'
   ),
-  memoryMb: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(2048)]).describe('Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb.'),
+  memoryMb: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(2048)]).describe(
+    'Sandbox RAM in MB (>= 2048), or "auto": free RAM minus reserveHostMb, capped at maxMemoryMb. Never more than this PC can keep in RAM for it (its RAM minus the larger of reserveHostMb and 25 %, 2 GB more with vGPU): a bigger value is lowered.'
+  ),
   maxMemoryMb: external_exports.number().int().positive().describe('Upper limit for memoryMb "auto".'),
   maxMemoryPercent: external_exports.number().int().min(10).max(100).describe(`memoryMb "auto" never takes more than this share of this PC's total RAM (percent).`),
   cpuLimit: external_exports.union([external_exports.literal("none"), external_exports.number().int().min(5).max(100)]).describe(
@@ -25855,10 +25906,10 @@ var SandboxSchema = external_exports.strictObject({
     'Memory always left for this PC when memoryMb is "auto": the sandbox gets at most (free RAM, and RAM plus paging file still unused) minus this.'
   ),
   agentMemoryHeadroomMb: external_exports.union([external_exports.literal("auto"), external_exports.literal("none"), external_exports.number().int().min(0)]).describe(
-    'Memory kept out of the agents reach inside the sandbox, in MB: everything the agents start (their builds, tests, tools) together may use at most the sandbox memory minus this; a runaway parallel build then gets out-of-memory errors in its own session instead of freezing or crashing the whole sandbox. "auto" = the larger of 2048 MB and 10 % of the sandbox memory; "none" = no limit. Yours only: a project file cannot change it.'
+    'The last resort that keeps the sandbox up, in MB below its commit limit (RAM plus paging file): builds are slowed down long before (sandbox.pressureResponse); only if everything the agents start together would take the sandbox to the very edge of its memory, where Windows inside it would start failing, is a build refused memory instead of Windows. "auto" = the larger of 1536 MB and 3 % of the commit limit; "none" = no backstop. Yours only: a project file cannot change it.'
   ),
   pressureResponse: external_exports.boolean().describe(
-    "When the sandbox (or this PC) runs low on memory, slow the heaviest build programs down (lower priority) and, if that is not enough, pause the biggest compiler for a few seconds at a time, so heavy parallel builds slow down instead of closing the sandbox. Never touches the agents themselves. Yours only: a project file cannot change it."
+    "When the sandbox (or this PC) runs low on memory, slow builds down in steps, like a PC that gets slower instead of failing: build programs get lower CPU and memory priority, then less CPU, then compilers take turns (the waiting ones briefly suspended and trimmed to the paging file). Nothing is stopped or killed, and the agents themselves are never touched. Yours only: a project file cannot change it."
   ),
   vGpu: external_exports.boolean().describe(
     "Virtual GPU. Off by default: Microsoft notes it widens the sandbox attack surface. The sandbox then uses this PC's graphics card, and with some graphics drivers heavy use can freeze the whole PC: turn it on only when a program in the sandbox needs the GPU (the mesa toolchain gives software OpenGL without it)."
@@ -26004,7 +26055,7 @@ var ToolchainsSchema = external_exports.strictObject({
       `GNU host: "lld" links with Rust's own lld through MinGW's gcc (much less memory than GNU ld), "gnu" with GNU ld.`
     ),
     linkSlots: external_exports.union([external_exports.literal("auto"), external_exports.number().int().min(1).max(32)]).describe(
-      'GNU host: how many programs may link at the same time in the whole sandbox (other links wait). "auto" = one per 8 GB of sandbox memory, 2 to 4. Several agents linking big programs at once can take Windows down.'
+      'GNU host: how many programs may link at the same time in the whole sandbox (other links wait). "auto" = one per 3 GB of sandbox memory after 6 GB, 2 to 8 (the memory governor slows links down too when memory runs short).'
     )
   }),
   msvc: external_exports.strictObject({
@@ -26079,7 +26130,7 @@ var ToolchainsSchema = external_exports.strictObject({
   }),
   cli: external_exports.strictObject({
     gh: EnabledSchema.describe(
-      'GitHub CLI (gh). Only with provisioning.git.access "full": gh can push and merge through the GitHub API, past a read-only git. Your PC\'s gh login is never copied; `gh auth login` inside persists (GH_CONFIG_DIR). "auto" = when the project has a .github folder.'
+      'GitHub CLI (gh). Only with provisioning.git.access "full": gh can push and merge through the GitHub API, past a read-only git. Your PC\'s gh login is never copied; `gh auth login` inside persists (GH_CONFIG_DIR), unless a token you saved for sandboxes is handed over (github.shareToken). "auto" = when the project has a .github folder.'
     ),
     zstd: EnabledSchema.describe('Zstandard (zstd). "auto" = off; set true to get it.'),
     openssl: EnabledSchema.describe(
@@ -26942,16 +26993,17 @@ var ResumeSchema = external_exports.strictObject({
 // src/core/schema/web.ts
 var WebSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "(Beta) Allow the web UI: your sandbox sessions in a browser on this PC. Off by default, and nothing starts it by itself yet: sandbox web start works either way and runs it until sandbox web stop (or a restart of the PC)."
+    "(Beta) The web UI: your sandbox sessions in a browser on this PC (http://127.0.0.1:<port>, this PC only). On: every sandbox start also starts it in the background (it keeps running until sandbox web stop or a restart of the PC). Off: only sandbox web start runs it. Open it signed in with sandbox web open."
   ),
-  port: external_exports.number().int().min(1024).max(65535).describe("Port of the web UI on 127.0.0.1 (this PC only). Pick another when it is taken.")
+  port: external_exports.number().int().min(1024).max(65535).describe("Port of the web UI on 127.0.0.1 (this PC only). Pick another when it is taken."),
+  openOnLaunch: external_exports.boolean().describe("(Beta) With the web UI on: open it in your browser, already signed in, every time a sandbox starts.")
 });
 
 // src/core/schema/vpn.ts
 var VPN_PROVIDERS = ["nordvpn", "openvpn-file", "wireguard-file"];
 var VpnSchema = external_exports.strictObject({
   enabled: external_exports.boolean().describe(
-    "Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (sandbox vpn login). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."
+    "(Alpha: not yet tried on a real PC) Send the sandbox's traffic through a VPN. Only the sandbox: your PC's own connection is untouched. Needs a saved login first (sandbox vpn login). The agent in the sandbox can read that login and can turn the tunnel off (it is the administrator there)."
   ),
   provider: external_exports.enum(VPN_PROVIDERS).describe(
     "nordvpn: a recommended NordVPN server is picked at every launch. openvpn-file: your own .ovpn file (configFile). wireguard-file: your own WireGuard .conf (configFile), e.g. from your company."
@@ -26966,6 +27018,13 @@ var VpnSchema = external_exports.strictObject({
   )
 });
 
+// src/core/schema/github.ts
+var GithubSchema = external_exports.strictObject({
+  shareToken: external_exports.boolean().describe(
+    'Give each sandbox the GitHub token you saved with `sandbox github login` (best a fine-grained token limited to some repositories and permissions), so gh and https git work there without logging in. Only with provisioning.git.access "full". The agent in the sandbox can read the token and use it for whatever it allows. A project file (.sandbox-config.json) cannot turn this on.'
+  )
+});
+
 // src/core/schema/config.ts
 var ConfigSchema = external_exports.strictObject({
   $schema: SchemaRefSchema.optional(),
@@ -26996,6 +27055,7 @@ var ConfigSchema = external_exports.strictObject({
   }),
   network: NetworkSchema,
   vpn: VpnSchema,
+  github: GithubSchema,
   provisioning: ProvisioningSchema,
   downloads: DownloadsSchema,
   toolchains: ToolchainsSchema,
@@ -27158,19 +27218,25 @@ var GuestRequestSchema = external_exports.discriminatedUnion("kind", [
     id: IdSchema,
     reason: Text(300),
     seconds: external_exports.number().int().min(10).max(300),
+    /** "severe": the PC is nearly out of memory; builds go to the governor's last step at once. */
+    level: external_exports.enum(["slow", "severe"]).optional(),
     createdAt: TimeSchema
   })
 ]);
 var PressureStatusSchema = external_exports.object({
   level: external_exports.enum(["ok", "throttled", "suspending"]),
+  /** The governor's dial, 0 (nothing wrong) to 4 (one compiler at a time). */
+  step: external_exports.number().int().min(0).max(4).optional(),
   profile: external_exports.enum(["normal", "gentle"]),
   /** Share of the sandbox's RAM still free and of its commit limit in use (percent). */
   ramFreePercent: external_exports.number().int().min(0).max(100),
   commitPercent: external_exports.number().int().min(0).max(100),
   /** Programs running at lower priority because of it. */
   lowered: external_exports.number().int().min(0).max(1024),
-  /** Programs paused right now (name, process id, seconds left). */
+  /** Compilers waiting their turn right now (name, process id, seconds until they may go on). */
   paused: external_exports.array(external_exports.object({ name: Text(64), pid: external_exports.number().int(), seconds: external_exports.number().int().min(0).max(60) })).max(8),
+  /** The CPU share the compilers get together (percent; 100 = no cap). */
+  cpuPercent: external_exports.number().int().min(0).max(100).optional(),
   /** The PC itself asked for slowing down (its memory or CPU is low). */
   pcLow: external_exports.boolean(),
   lastAction: Text(300),
@@ -27214,6 +27280,8 @@ var VpnStatusSchema = external_exports.object({
   state: external_exports.enum(["off", "starting", "up", "failed"]),
   message: Text(2e3),
   killSwitch: external_exports.boolean(),
+  /** A direct connection was tried after the kill switch was applied: false = it still got out. */
+  killSwitchHeld: external_exports.boolean().optional(),
   /** The server's name, e.g. uk2201.nordvpn.com. */
   server: Text(128).optional(),
   /** What the sandbox's traffic looks like from outside, once the tunnel is up. */
@@ -27222,12 +27290,46 @@ var VpnStatusSchema = external_exports.object({
 });
 
 // src/shared/io/json.ts
+import fs3 from "node:fs";
+
+// src/shared/test-guard.ts
 import fs2 from "node:fs";
+import os from "node:os";
+import path3 from "node:path";
+function selfTestRunning() {
+  return process.env.AGENT_SANDBOX_SELFTEST === "1";
+}
+var canonical = (p) => {
+  let rest = "";
+  let current = path3.resolve(p);
+  for (; ; ) {
+    try {
+      return path3.join(fs2.realpathSync.native(current), rest).toLowerCase();
+    } catch {
+      const parent = path3.dirname(current);
+      if (parent === current) return path3.resolve(p).toLowerCase();
+      rest = path3.join(path3.basename(current), rest);
+      current = parent;
+    }
+  }
+};
+function testWriteRefusal(target) {
+  if (!selfTestRunning()) return null;
+  const temp = canonical(os.tmpdir());
+  const t = canonical(target);
+  return t === temp || t.startsWith(temp + path3.sep) ? null : "The self-test refused to change " + target + ": it only works in temp folders, so it can never change this PC.";
+}
+function assertTestWritable(target) {
+  const refusal = testWriteRefusal(target);
+  if (refusal) throw new Error(refusal);
+}
+
+// src/shared/io/json.ts
 var MAX_MESSAGE_BYTES = 8 * 1024 * 1024;
 function readJsonFile(file2) {
   try {
-    if (fs2.statSync(file2).size > MAX_MESSAGE_BYTES) return null;
-    return JSON.parse(fs2.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""));
+    if (fs3.statSync(file2).size > MAX_MESSAGE_BYTES) return null;
+    return JSON.parse(fs3.readFileSync(file2, "utf8").replace(/^\uFEFF/, ""));
   } catch {
     return null;
   }
@@ -27237,19 +27339,83 @@ function readValid(schema, file2) {
   return parsed.success ? parsed.data : null;
 }
 
+// src/shared/io/safe-remove.ts
+import fs4 from "node:fs";
+import os2 from "node:os";
+import path4 from "node:path";
+var norm = (p) => path4.resolve(p).replace(/[\\/]+$/, "").toLowerCase();
+var isAncestorOrSame = (parent, child) => {
+  const a = norm(parent);
+  const b = norm(child);
+  return a === b || b.startsWith(a + path4.sep);
+};
+var depthBelow = (parent, child) => path4.relative(norm(parent), norm(child)).split(path4.sep).filter(Boolean).length;
+var protectedFolders = () => [
+  os2.homedir(),
+  process.env.USERPROFILE,
+  process.env.APPDATA,
+  process.env.LOCALAPPDATA,
+  path4.join(os2.homedir(), "Documents"),
+  path4.join(os2.homedir(), "Desktop"),
+  process.env.SystemRoot,
+  process.env.WINDIR,
+  process.env.ProgramFiles,
+  process.env["ProgramFiles(x86)"],
+  process.env.ProgramData,
+  "C:\\Users",
+  "C:\\Windows"
+].filter((p) => typeof p === "string" && p.trim() !== "");
+var present = (paths) => paths.filter((p) => typeof p === "string" && p.trim() !== "");
+var windowsFolders = () => present([process.env.SystemRoot, process.env.WINDIR, "C:\\Windows"]);
+var programFolders = () => present([process.env.ProgramFiles, process.env["ProgramFiles(x86)"], "C:\\Program Files", "C:\\Program Files (x86)"]);
+function removeRefusal(target, root) {
+  if (!target || !path4.isAbsolute(target) || !root || !path4.isAbsolute(root)) return "not an absolute path";
+  if (/^[\\/]{2}[?.][\\/]/.test(target) || /^[\\/]{2}[?.][\\/]/.test(root)) return "a device path (\\\\?\\ or \\\\.\\)";
+  const t = norm(target);
+  if (t === norm(path4.parse(t).root)) return "a drive root";
+  const hit = protectedFolders().find((p) => isAncestorOrSame(t, p));
+  if (hit) return "it is, or contains, " + hit;
+  const windows = windowsFolders().find((p) => isAncestorOrSame(p, t));
+  if (windows) return "it is inside " + windows;
+  const program = programFolders().find((p) => isAncestorOrSame(p, t));
+  if (program && !(isAncestorOrSame(program, root) && depthBelow(program, root) >= 2)) return "it is inside " + program;
+  if (!t.startsWith(norm(root) + path4.sep)) return "it is not inside " + root;
+  return null;
+}
+function safeRemove(target, root) {
+  const refusal = removeRefusal(target, root);
+  if (refusal) throw new Error("Refusing to delete " + target + ": " + refusal);
+  assertTestWritable(target);
+  let stat;
+  try {
+    stat = fs4.lstatSync(target);
+  } catch {
+    return;
+  }
+  if (stat.isSymbolicLink()) {
+    try {
+      fs4.unlinkSync(target);
+    } catch {
+      fs4.rmdirSync(target);
+    }
+    return;
+  }
+  fs4.rmSync(target, { recursive: true, force: true, maxRetries: 2 });
+}
+
 // src/shared/channel/run-dir.ts
 function safeId(id) {
   return IdSchema.parse(id);
 }
 var scan = (schema, dir) => {
-  if (!fs3.existsSync(dir)) return { valid: [], invalid: [] };
+  if (!fs5.existsSync(dir)) return { valid: [], invalid: [] };
   const valid = [];
   const invalid = [];
-  for (const name of fs3.readdirSync(dir)) {
+  for (const name of fs5.readdirSync(dir)) {
     if (name.endsWith(".tmp")) continue;
-    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name) ? readValid(schema, path3.join(dir, name)) : null;
+    const message = /^[A-Za-z0-9_-]{1,64}\.json$/.test(name) ? readValid(schema, path5.join(dir, name)) : null;
     if (message) valid.push(message);
-    else invalid.push(path3.join(dir, name));
+    else invalid.push(path5.join(dir, name));
   }
   return { valid, invalid };
 };
@@ -27259,6 +27425,8 @@ var RunDir = class {
   vpnFile;
   /** What the memory governor in the sandbox is doing (pressure.json). */
   pressureFile;
+  /** What the sandbox's programs may really use (budget.json): processors, memory, build jobs, link slots. */
+  budgetFile;
   requestsDir;
   responsesDir;
   sessionsDir;
@@ -27268,31 +27436,32 @@ var RunDir = class {
   /** One-shot secrets the host hands over (see secrets.ts). Next to run, not in it: shared-use users can change run. */
   secretsDir;
   constructor(dataDir2) {
-    this.root = path3.join(dataDir2, "run");
-    this.sandboxFile = path3.join(this.root, "sandbox.json");
-    this.vpnFile = path3.join(this.root, "vpn.json");
-    this.pressureFile = path3.join(this.root, "pressure.json");
-    this.requestsDir = path3.join(this.root, "requests");
-    this.responsesDir = path3.join(this.root, "responses");
-    this.sessionsDir = path3.join(this.root, "sessions");
-    this.projectsDir = path3.join(this.root, "projects");
-    this.auditDir = path3.join(this.root, "audit");
-    this.secretsDir = path3.join(dataDir2, "secrets");
+    this.root = path5.join(dataDir2, "run");
+    this.sandboxFile = path5.join(this.root, "sandbox.json");
+    this.vpnFile = path5.join(this.root, "vpn.json");
+    this.pressureFile = path5.join(this.root, "pressure.json");
+    this.budgetFile = path5.join(this.root, "budget.json");
+    this.requestsDir = path5.join(this.root, "requests");
+    this.responsesDir = path5.join(this.root, "responses");
+    this.sessionsDir = path5.join(this.root, "sessions");
+    this.projectsDir = path5.join(this.root, "projects");
+    this.auditDir = path5.join(this.root, "audit");
+    this.secretsDir = path5.join(dataDir2, "secrets");
   }
   requestFile(id) {
-    return path3.join(this.requestsDir, safeId(id) + ".json");
+    return path5.join(this.requestsDir, safeId(id) + ".json");
   }
   responseFile(id) {
-    return path3.join(this.responsesDir, safeId(id) + ".json");
+    return path5.join(this.responsesDir, safeId(id) + ".json");
   }
   sessionFile(id) {
-    return path3.join(this.sessionsDir, safeId(id) + ".json");
+    return path5.join(this.sessionsDir, safeId(id) + ".json");
   }
   projectFile(name) {
-    return path3.join(this.projectsDir, safeId(name) + ".json");
+    return path5.join(this.projectsDir, safeId(name) + ".json");
   }
   secretFile(id) {
-    return path3.join(this.secretsDir, safeId(id) + ".json");
+    return path5.join(this.secretsDir, safeId(id) + ".json");
   }
   readSandboxStatus() {
     return readValid(SandboxStatusSchema, this.sandboxFile);
@@ -27331,10 +27500,188 @@ var launchDir = process.env.AGENT_LAUNCH_DIR ?? "C:\\AgentLaunch";
 var dataDir = process.env.AGENT_DATA_DIR ?? "C:\\AgentData";
 var hostToolsDir = process.env.AGENT_HOST_TOOLS_DIR ?? "C:\\HostTools";
 var localDir = process.env.AGENT_LOCAL_DIR ?? "C:\\nvm";
-var toolsDir = path4.join(dataDir, "tools");
-var logsDir = path4.join(dataDir, "logs");
+var toolsDir = path6.join(dataDir, "tools");
+var logsDir = path6.join(dataDir, "logs");
 var run = new RunDir(dataDir);
 
+// src/guest/runtime/session.ts
+import fs8 from "node:fs";
+import path9 from "node:path";
+
+// src/shared/download/http.ts
+var USER_AGENT = "windows-development-sandbox";
+async function fetchRetry(url2, init = {}, attempts = 5, timeoutMs = 6e4) {
+  let last;
+  for (let i = 1; i <= attempts; i++) {
+    try {
+      const response = await fetch(url2, {
+        ...init,
+        signal: AbortSignal.timeout(timeoutMs),
+        headers: { "User-Agent": USER_AGENT, ...init.headers ?? {} }
+      });
+      if (response.ok) return response;
+      last = new Error("HTTP " + response.status + " for " + url2);
+      if (response.status === 404) break;
+    } catch (e) {
+      last = e;
+    }
+    if (i < attempts) await new Promise((r) => setTimeout(r, 3e3));
+  }
+  throw last instanceof Error ? last : new Error(String(last));
+}
+
+// src/shared/download/archive.ts
+import fs6 from "node:fs";
+import path7 from "node:path";
+import crypto from "node:crypto";
+
+// src/shared/download/spawn.ts
+import { spawn as spawn2 } from "node:child_process";
+function spawnAsync(file2, args, options = {}) {
+  return new Promise((resolve, reject) => {
+    const child = spawn2(file2, args, { stdio: "ignore", windowsHide: true, ...options });
+    child.once("error", reject);
+    child.once("close", (code) => resolve(code ?? -1));
+  });
+}
+
+// src/shared/download/archive.ts
+function stagingFolder(destination) {
+  return destination + ".staging-" + crypto.randomBytes(3).toString("hex");
+}
+function moveIntoPlace(work, destination) {
+  safeRemove(destination, path7.dirname(destination));
+  fs6.mkdirSync(path7.dirname(destination), { recursive: true });
+  fs6.renameSync(work, destination);
+}
+async function extractArchive(archive, destination, members2 = []) {
+  fs6.mkdirSync(destination, { recursive: true });
+  let status = await spawnAsync(SYSTEM.tar(), ["-xf", archive, "-C", destination, ...members2]);
+  if (status !== 0 && /\.(zip|nupkg)$/i.test(archive)) {
+    const zip = archive.endsWith(".zip") ? archive : archive + ".zip";
+    if (zip !== archive) fs6.copyFileSync(archive, zip);
+    status = await spawnAsync(
+      SYSTEM.powershell(),
+      scriptArgs("expand-archive.ps1", ["-Archive", zip, "-Destination", destination])
+    );
+  }
+  if (status !== 0) throw new Error("Could not extract " + archive);
+}
+function findFile(root, name, maxDepth = 4) {
+  if (maxDepth < 0 || !fs6.existsSync(root)) return null;
+  const entries = fs6.readdirSync(root, { withFileTypes: true });
+  for (const entry of entries)
+    if (entry.isFile() && entry.name.toLowerCase() === name.toLowerCase()) return path7.join(root, entry.name);
+  for (const entry of entries)
+    if (entry.isDirectory()) {
+      const found = findFile(path7.join(root, entry.name), name, maxDepth - 1);
+      if (found) return found;
+    }
+  return null;
+}
+
+// src/shared/download/downloader.ts
+import fs7 from "node:fs";
+import path8 from "node:path";
+import crypto2 from "node:crypto";
+import { Readable, Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+var Downloader = class {
+  /** downloads.requireChecksum: refuse anything without an expected hash. The guest sets it from session.json. */
+  requireChecksum = false;
+  watcher = null;
+  /** Reports coarse progress of the downloads that start from now on to `watcher` (null: stop). */
+  watch(watcher) {
+    this.watcher = watcher;
+  }
+  /**
+   * Streams a download to disk, hashing as it goes: big archives (PostgreSQL is ~330 MB) never sit in memory, and the
+   * event loop stays free so other toolchains keep downloading meanwhile. A mismatch (or any failure) leaves no file
+   * behind.
+   */
+  async file(url2, destination, expected = null) {
+    const sums = typeof expected === "string" || expected === null ? { sha256: expected } : expected;
+    if (this.requireChecksum && !sums.sha256?.trim() && !sums.sha512?.trim()) {
+      throw new Error(
+        "Refusing to download " + path8.basename(destination) + " (" + url2 + "): no checksum is published for it, and downloads.requireChecksum is on. Turn that setting off to allow downloads that cannot be verified."
+      );
+    }
+    const response = await fetchRetry(url2, {}, 3, 20 * 60 * 1e3);
+    if (!response.body) throw new Error("Empty response for " + url2);
+    fs7.mkdirSync(path8.dirname(destination), { recursive: true });
+    const checks = ["sha256", "sha512"].flatMap((kind) => {
+      const want = sums[kind]?.trim().toLowerCase();
+      return want ? [{ want, hash: crypto2.createHash(kind) }] : [];
+    });
+    const size = Number(response.headers.get("content-length")) || 0;
+    const report = size > 0 ? this.watcher?.() ?? null : null;
+    let received = 0;
+    let tenth = 0;
+    let reportedAt = Date.now();
+    const tap = new Transform({
+      transform(chunk, _encoding, done) {
+        for (const c of checks) c.hash.update(chunk);
+        if (report) {
+          received += chunk.length;
+          const now = Math.floor(received * 10 / size);
+          if (now !== tenth || Date.now() - reportedAt > 5e3) {
+            tenth = now;
+            reportedAt = Date.now();
+            try {
+              report(Math.min(1, received / size));
+            } catch {
+            }
+          }
+        }
+        done(null, chunk);
+      }
+    });
+    const partial2 = destination + ".part";
+    try {
+      await pipeline(Readable.fromWeb(response.body), tap, fs7.createWriteStream(partial2));
+      if (checks.some((c) => c.hash.digest("hex") !== c.want)) throw new Error("Checksum mismatch for " + url2);
+      fs7.rmSync(destination, { force: true });
+      fs7.renameSync(partial2, destination);
+    } finally {
+      fs7.rmSync(partial2, { force: true });
+    }
+  }
+  /**
+   * Downloads + extracts into `destination` atomically (staging folder, then rename). With `locate`, only the folder
+   * holding that file is kept (`up` folders above it, e.g. locate ruby.exe with up 1 keeps the folder around bin).
+   */
+  async archive(url2, destination, options = {}) {
+    const work = stagingFolder(destination);
+    try {
+      const archive = path8.join(work, options.fileName ?? path8.basename(new URL(url2).pathname));
+      await this.file(url2, archive, { sha256: options.sha256, sha512: options.sha512 });
+      const extracted = path8.join(work, "x");
+      await extractArchive(archive, extracted, options.members);
+      let root = extracted;
+      if (options.locate) {
+        const found = findFile(extracted, options.locate);
+        if (!found) throw new Error(options.locate + " not found in " + url2);
+        root = path8.dirname(found);
+        for (let i = 0; i < (options.up ?? 0) && path8.dirname(root).startsWith(extracted); i++)
+          root = path8.dirname(root);
+      }
+      moveIntoPlace(root, destination);
+    } finally {
+      safeRemove(work, path8.dirname(work));
+    }
+  }
+};
+var downloader = new Downloader();
+
+// src/guest/runtime/session.ts
+var session = JSON.parse(
+  fs8.readFileSync(path9.join(launchDir, "session.json"), "utf8").replace(/^\uFEFF/, "")
+);
+downloader.requireChecksum = session.downloads?.requireChecksum === true;
+var workspace = process.env.AGENT_WORKSPACE ?? session.workspace;
+var stateDir = path9.join(dataDir, session.persistAgentState ? "state" : "state-session");
+var claudeDir = path9.join(stateDir, "claude");
+
 // src/guest/sessions/viewer.ts
 var waitUntilStarted = async (id) => {
   let last = "";
@@ -27350,19 +27697,22 @@ var waitUntilStarted = async (id) => {
   return run.readSession(id);
 };
 async function viewSession(id) {
-  const session = await waitUntilStarted(id);
-  if (session?.phase === "failed") {
-    console.error("Session " + id + " could not start: " + session.message);
+  const session2 = await waitUntilStarted(id);
+  if (session2?.phase === "failed") {
+    console.error("Session " + id + " could not start: " + session2.message);
     await new Promise((r) => setTimeout(r, 3e4));
     return 1;
   }
-  if (!session?.attach) {
+  if (!session2?.attach) {
     console.error("Session " + id + " is not running.");
     return 1;
   }
-  const socket = await connect({ ...session.attach, addresses: ["127.0.0.1"] });
-  const result = await runTerminalClient(socket, session.attach.token, { clipboardWrites: true });
-  if (result.reason === "exit") console.log(session.harness + " exited with code " + result.exitCode + ".");
+  const socket = await connect({ ...session2.attach, addresses: ["127.0.0.1"] });
+  const result = await runTerminalClient(socket, session2.attach.token, {
+    clipboardWrites: true,
+    confirmCtrlC: session.attach.confirmCtrlC !== false
+  });
+  if (result.reason === "exit") console.log(session2.harness + " exited with code " + result.exitCode + ".");
   else if (result.reason === "error") console.log("Session error: " + result.message);
   return result.reason === "exit" ? result.exitCode : 1;
 }