@@ -9,6 +9,17 @@ file is the human-readable summary of what changed and why.
 
 ### Desktop / Web UI
 
+- **Sandboxes can mount more folders after creation** — a sandbox used to be
+  locked to the one project folder chosen when it was created. Each sandbox
+  now has a **Folders…** entry in its menu (Settings → Servers) to mount
+  additional folders from this computer and remove them again; the original
+  project folder stays fixed. Every mounted folder appears as its own project
+  on the sandbox, and mounts stay read-write. On Windows changes apply
+  immediately; on macOS and Linux saving restarts the sandbox — files on its
+  disk are kept, but running terminals and in-flight work stop.
+  **On macOS this requires the updated sandbox image** — if a folder does not
+  appear inside the sandbox after saving, use the sandbox's **Reset** button
+  to pick the new image up.
 - **New sessions show up in Recents right away** — starting a session left the
   sidebar's Recents list unchanged; the session only appeared once something
   made that list reload, which is why switching between Code and Work and back
 
@@ -191,7 +191,7 @@ from the squash message first, or use a plain merge.
 | `packages/desktop/src/main/updater.ts` | `autoUpdater.allowDowngrade` `true` → `false`. | Upstream's `true` is safe against immutable GitHub release tags. The fork's feed is a mutable bucket path, where re-uploading or failing to replace a stale `latest.yml` would actively downgrade every client on the next 10-minute poll. | Keep `false`; take upstream's other updater settings. `channel = "latest"` and `allowPrerelease = false` stay as upstream has them — the first must match `publish.channel` in `electron-builder.config.ts`, the second is inert for the `generic` provider (it only steers GitHub tag resolution). |
 | Dual-path WSL install: `packages/desktop/src/main/wsl/{runtime,servers}.ts` | `runtime.ts`: three internals gain `export` (`runPowerShell`, `runInteractiveCommand`, `resolveSystem32Command`) — no behavior change. `servers.ts`: the `install-wsl` job calls `installWslRuntimeDualPath` and the `install-distro` job calls `installWslDistroDualPath` (both from the fork-only `install-bundle.ts`, which holds all new logic) instead of `installWslRuntimeElevated` / `installWslDistro` directly; both return the same `WslCommandResult` shape, so the surrounding job/error handling is untouched. | The customer fleet sits behind whitelist-only proxies that cannot reach Microsoft's servers. The dual path downloads the pinned bundle (`wsl.zip`: runtime MSI + Ubuntu-24.04 image) from the codev storage host, enables VirtualMachinePlatform via offline dism + installs the MSI behind one UAC prompt, and falls back to upstream's `wsl --install` / `--web-download` paths only when the bundle cannot be *obtained* — a completed-but-failed elevated install is returned as-is, never retried behind a second UAC prompt. | Keep the two call swaps and the three `export` keywords; take upstream's surrounding changes. If upstream reworks `installWslRuntimeElevated` / `installWslDistro`, keep them exported from `runtime.ts` — `install-bundle.ts` calls them as the fallback path. |
 | Desktop sandbox wiring: `packages/desktop/src/main/{index,store-keys}.ts`, `packages/desktop/package.json` | Hooks the fork-only `src/main/sandbox/{bundle,controller,ipc}.ts` modules into startup: `index.ts` constructs the sandbox controller beside the WSL servers controller, adds `sandboxes.stopAll()` to `stopSidecars`, registers the `sandbox-*` IPC channels next to the WSL ones, and calls `sandboxes.initialize()` (all platforms) once the local server is ready; `store-keys.ts` gains `SANDBOXES_KEY = "sandboxes"`; `package.json` gains the `@codev/sandbox` and `@codev/gateway` workspace devDependencies (bundled into the main process by electron-vite, so not runtime dependencies; gateway supplies the sandbox egress broker's credentials and config fragment). | The desktop app is where sandboxes are created and run; `createSandboxController` generalizes the proven WSL-servers controller pattern to the per-platform `@codev/sandbox` providers (macOS vz / Windows wsl / Linux bwrap). | Keep the wiring lines and take upstream's surrounding changes; they are additive and order-insensitive apart from `initialize()` needing the local server ready first. Do not rename the `sandbox-*` channels or the `sandboxes` store key — preload/renderer and persisted sandbox configs depend on them. |
-| Desktop sandbox renderer slice: `packages/app/package.json`, `packages/app/src/{index.ts,app.tsx}`, `packages/app/src/context/{platform,server}.tsx`, `packages/app/src/components/{settings-v2/servers.tsx,dialog-select-server.tsx}`, `packages/app/src/wsl/settings.tsx`, `packages/app/src/i18n/{en,es}.ts`, `packages/desktop/src/preload/{index,types}.ts`, `packages/desktop/src/renderer/index.tsx` | Surfaces the fork-only sandbox modules (`packages/app/src/sandbox/*`, `packages/desktop/src/renderer/sandbox/*`) in the UI: app `package.json` exports `./sandbox/types` (mirror of `./wsl/types`); `index.ts` re-exports `useSandboxes` + the sandbox types; `app.tsx` mounts `SandboxesProvider` inside `WslServersProvider`; `platform.tsx` gains optional `sandboxes?: SandboxesPlatform`; `server.tsx` adds the third `ServerConnection.Sidecar` variant `{ variant: "sandbox"; name; projectDir? }` with key `sandbox:<name>` (`projectDir` is the host folder mounted into the guest — the guest only ever sees its own mount point, so this is the only way the app can name a sandbox's project after the folder it works on); `settings-v2/servers.tsx` filters sandbox rows out of the generic list and renders `SandboxServerSettings` beside the WSL section; `dialog-select-server.tsx` `handleRemove` routes `sandbox:` keys to `platform.sandboxes.remove` (like `wsl:` keys) and moves the `tabs.removeServer(key)` + `server.remove(key)` pair *above* both awaited platform removals; `wsl/settings.tsx` `AddServerMenu` shows the menu when either wslServers or sandboxes exist and gains an "Add sandbox" item; i18n gains the `sandbox.*` key family (including the optional per-sandbox CPU/memory fields, macOS-only since only the vz backend applies them, and `sandbox.add.projectDirHint`, the standing explanation above the folder field); preload exposes `api.sandboxes` over the `sandbox-*` channels and `renderer/index.tsx` wires the platform api, loading gate, ready-connection list, and the `startupServer` fallback (fork-only wrapper that validates `sandbox:` default keys the way `availableStartupServer` validates `wsl:` ones). | Ready sandboxes must appear as first-class servers and be manageable from settings; the slice mirrors the WSL vertical exactly so upstream conflicts resolve the same way in both. Removing a server destroys a disk and takes seconds, and the connection leaves the list the moment it finishes, so the tab cleanup has to happen before the await rather than after it. | Keep every listed edit; take upstream's surrounding changes. If upstream adds a `Sidecar` variant or reworks `AddServerMenu`, re-apply the sandbox variant/menu item on top. The `sandbox:<name>` key format is persisted as the default-server key and as `config.id` in the main-process store — never change one side alone. Keep the tab cleanup ahead of the platform removals in `handleRemove`; if upstream reorders it back, re-apply. |
+| Desktop sandbox renderer slice: `packages/app/package.json`, `packages/app/src/{index.ts,app.tsx}`, `packages/app/src/context/{platform,server}.tsx`, `packages/app/src/components/{settings-v2/servers.tsx,dialog-select-server.tsx}`, `packages/app/src/wsl/settings.tsx`, `packages/app/src/i18n/{en,es}.ts`, `packages/desktop/src/preload/{index,types}.ts`, `packages/desktop/src/renderer/index.tsx` | Surfaces the fork-only sandbox modules (`packages/app/src/sandbox/*`, `packages/desktop/src/renderer/sandbox/*`) in the UI: app `package.json` exports `./sandbox/types` (mirror of `./wsl/types`); `index.ts` re-exports `useSandboxes` + the sandbox types; `app.tsx` mounts `SandboxesProvider` inside `WslServersProvider`; `platform.tsx` gains optional `sandboxes?: SandboxesPlatform`; `server.tsx` adds the third `ServerConnection.Sidecar` variant `{ variant: "sandbox"; name; projectDir?; mounts? }` with key `sandbox:<name>` (`projectDir` is the host folder mounted into the guest and `mounts` the extra host folders with their resolved guest paths — the guest only ever sees its own mount points, so this is the only way the app can name a sandbox's projects after the folders it works on); `settings-v2/servers.tsx` filters sandbox rows out of the generic list and renders `SandboxServerSettings` beside the WSL section; `dialog-select-server.tsx` `handleRemove` routes `sandbox:` keys to `platform.sandboxes.remove` (like `wsl:` keys) and moves the `tabs.removeServer(key)` + `server.remove(key)` pair *above* both awaited platform removals; `wsl/settings.tsx` `AddServerMenu` shows the menu when either wslServers or sandboxes exist and gains an "Add sandbox" item; i18n gains the `sandbox.*` key family (including the optional per-sandbox CPU/memory fields, macOS-only since only the vz backend applies them; `sandbox.add.projectDirHint`, the standing explanation above the folder field; and the `sandbox.mounts.*` family for the manage-folders dialog that adds/removes extra mounts on an existing sandbox); preload exposes `api.sandboxes` over the `sandbox-*` channels and `renderer/index.tsx` wires the platform api, loading gate, ready-connection list, and the `startupServer` fallback (fork-only wrapper that validates `sandbox:` default keys the way `availableStartupServer` validates `wsl:` ones). | Ready sandboxes must appear as first-class servers and be manageable from settings; the slice mirrors the WSL vertical exactly so upstream conflicts resolve the same way in both. Removing a server destroys a disk and takes seconds, and the connection leaves the list the moment it finishes, so the tab cleanup has to happen before the await rather than after it. | Keep every listed edit; take upstream's surrounding changes. If upstream adds a `Sidecar` variant or reworks `AddServerMenu`, re-apply the sandbox variant/menu item on top. The `sandbox:<name>` key format is persisted as the default-server key and as `config.id` in the main-process store — never change one side alone. Keep the tab cleanup ahead of the platform removals in `handleRemove`; if upstream reorders it back, re-apply. |
 
 | Desktop identity: `packages/desktop/src/main/{index,store}.ts`, `packages/desktop/electron-builder.config{,.test}.ts`, `packages/desktop/scripts/copy-metainfo.ts`, `packages/desktop/resources/linux/opencode-desktop.desktop` (deleted), `packages/app/src/pages/layout/{deep-links.ts,helpers.test.ts}`, `packages/codev-brand/test/brand.test.ts` | appId `ai.opencode.desktop{,.beta,.dev}` → `ai.codev.desktop{,.beta,.dev}` (both copies: `APP_IDS` in main and in the builder config, plus the unpackaged fallback); deep-link scheme `opencode://` → `codev://` in all three places that must agree — `protocols.schemes`, `app.setAsDefaultProtocolClient`, and the renderer's `parseUrl` — plus the `argv.startsWith` filter the second-instance handler uses; `rpm.packageName` `opencode`/`opencode-beta`/`opencode-dev` → `codev`/`codev-beta`/`codev-dev`; the hidden `opencode-desktop.desktop` legacy launcher and its `deb`/`rpm` fpm wiring deleted. `src/main/migrate.ts` keeps the old ids — they name the *Tauri* app's directories, not ours. | The appId is the whole desktop identity: `app.setPath("userData", join(appData, appId))`, so it also names the data directory, and it drives the macOS bundle id, the Windows AppUserModelId and NSIS keys, the Linux `.desktop` filename, `executableName` and `StartupWMClass`, and the AppStream metainfo id. Leaving it as opencode meant the fork's app identified itself as upstream to the OS. Renamed as a clean cut with no data migration and no back-compat shim, on the explicit basis that there is no installed base: existing profiles under `appData/ai.opencode.desktop*` are simply orphaned (settings, session history, sandboxes and the downloaded guest image), and a packaged update across the rename would install beside the old app rather than replace it. The legacy launcher went with it — it existed to rescue GNOME/KDE pins from a superseded packaging id, and its `Exec=/opt/OpenCode/...` no longer matched any install layout. | Keep our ids and scheme; take upstream's other config. Never rename the `TAURI_APP_IDS` in `migrate.ts` to match — a blind find-and-replace there points the Tauri migration at a directory that never existed. All three deep-link sites have to move together or links open nothing; `electron-builder.config.test.ts` covers the ids, the package names and the scheme per channel. |
 
 
@@ -213,6 +213,9 @@ export namespace ServerConnection {
         // mount point, so this is the one place the app can recover which
         // folder a sandbox is actually working on.
         projectDir?: string
+        // Extra host folders shared into the running guest, with the guest
+        // paths they resolved to.
+        mounts?: { path: string; guestPath: string }[]
       }
   ) &
     Base
 
@@ -383,6 +383,7 @@ export const dict = {
   "sandbox.server.menu.label": "Sandbox",
   "sandbox.server.start": "Start",
   "sandbox.server.reset": "Reset",
+  "sandbox.server.mounts": "Folders...",
   "sandbox.status.starting": "Starting...",
   "sandbox.status.ready": "Ready",
   "sandbox.status.stopped": "Stopped",
@@ -394,14 +395,29 @@ export const dict = {
   "sandbox.add.nameInvalid": "Use letters, numbers, dots, dashes, or underscores.",
   "sandbox.add.projectDir": "Project folder",
   "sandbox.add.projectDirHint":
-    "Choose the folder you want to work on. It is the only folder on this computer the sandbox can reach, it cannot be changed later, and the agent edits files in it without asking.",
+    "Choose the folder you want to work on. The sandbox can only reach folders you mount from this computer — you can mount more later — and the agent edits files in them without asking.",
   "sandbox.add.choose": "Choose...",
   "sandbox.add.create": "Create",
   "sandbox.add.cpus": "CPUs (optional)",
   "sandbox.add.memory": "Memory GB (optional)",
   "sandbox.add.resourcesInvalid": "CPUs must be 1-32 and memory 1-64 GB.",
   "sandbox.add.downloadHint": "The first sandbox downloads its image; on a slow connection this can take a while.",
   "sandbox.add.downloadProgress": "Downloading image… {{done}}/{{total}} MB",
+  "sandbox.mounts.title": "Sandbox folders",
+  "sandbox.mounts.hint":
+    "Folders mounted here are the only ones on this computer the sandbox can reach, and the agent edits files in them without asking.",
+  "sandbox.mounts.primary": "Project folder",
+  "sandbox.mounts.empty": "No extra folders are mounted.",
+  "sandbox.mounts.add": "Add folder...",
+  "sandbox.mounts.remove": "Remove folder",
+  "sandbox.mounts.save": "Save",
+  "sandbox.mounts.restartWarning":
+    "Saving restarts the sandbox. Files on disk are kept; running terminals and in-flight work in the sandbox stop.",
+  "sandbox.mounts.imageHint":
+    "If a folder does not appear inside the sandbox after saving, reset the sandbox to update it to the current image.",
+  "sandbox.mounts.invalid.duplicate": "This folder is already mounted: {{path}}",
+  "sandbox.mounts.invalid.nested": "{{path}} overlaps a folder that is already mounted ({{other}}).",
+  "sandbox.mounts.invalid.unc": "Network paths cannot be mounted: {{path}}",
   "wsl.onboarding.step.distro": "Choose distro",
   "wsl.onboarding.step.opencode": "CoDev Code",
   "wsl.onboarding.checkingRuntime": "Checking WSL...",
 
@@ -374,6 +374,7 @@ export const dict = {
   "sandbox.server.menu.label": "Sandbox",
   "sandbox.server.start": "Iniciar",
   "sandbox.server.reset": "Restablecer",
+  "sandbox.server.mounts": "Carpetas...",
   "sandbox.status.starting": "Iniciando...",
   "sandbox.status.ready": "Listo",
   "sandbox.status.stopped": "Detenido",
@@ -385,14 +386,29 @@ export const dict = {
   "sandbox.add.nameInvalid": "Usa letras, números, puntos, guiones o guiones bajos.",
   "sandbox.add.projectDir": "Carpeta del proyecto",
   "sandbox.add.projectDirHint":
-    "Elige la carpeta en la que quieres trabajar. Es la única carpeta de este equipo a la que el sandbox puede acceder, no se puede cambiar después y el agente edita archivos en ella sin preguntar.",
+    "Elige la carpeta en la que quieres trabajar. El sandbox solo puede acceder a las carpetas de este equipo que montes — puedes montar más después — y el agente edita archivos en ellas sin preguntar.",
   "sandbox.add.choose": "Elegir...",
   "sandbox.add.create": "Crear",
   "sandbox.add.cpus": "CPU (opcional)",
   "sandbox.add.memory": "Memoria GB (opcional)",
   "sandbox.add.resourcesInvalid": "Las CPU deben ser 1-32 y la memoria 1-64 GB.",
   "sandbox.add.downloadHint": "El primer sandbox descarga su imagen; con una conexión lenta puede tardar un poco.",
   "sandbox.add.downloadProgress": "Descargando imagen… {{done}}/{{total}} MB",
+  "sandbox.mounts.title": "Carpetas del sandbox",
+  "sandbox.mounts.hint":
+    "Las carpetas montadas aquí son las únicas de este equipo a las que el sandbox puede acceder, y el agente edita archivos en ellas sin preguntar.",
+  "sandbox.mounts.primary": "Carpeta del proyecto",
+  "sandbox.mounts.empty": "No hay carpetas adicionales montadas.",
+  "sandbox.mounts.add": "Añadir carpeta...",
+  "sandbox.mounts.remove": "Quitar carpeta",
+  "sandbox.mounts.save": "Guardar",
+  "sandbox.mounts.restartWarning":
+    "Al guardar se reinicia el sandbox. Los archivos en disco se conservan; las terminales abiertas y el trabajo en curso dentro del sandbox se detienen.",
+  "sandbox.mounts.imageHint":
+    "Si una carpeta no aparece dentro del sandbox después de guardar, restablece el sandbox para actualizarlo a la imagen actual.",
+  "sandbox.mounts.invalid.duplicate": "Esta carpeta ya está montada: {{path}}",
+  "sandbox.mounts.invalid.nested": "{{path}} se superpone con una carpeta ya montada ({{other}}).",
+  "sandbox.mounts.invalid.unc": "Las rutas de red no se pueden montar: {{path}}",
   "wsl.onboarding.step.distro": "Elegir distribución",
   "wsl.onboarding.step.opencode": "CoDev Code",
   "wsl.onboarding.checkingRuntime": "Comprobando WSL...",