bubblewrap is a hard dependency, not a suggestion. Without it the core refuses to create agent sessions and TYBA is just a terminal.The .deb, the .rpm and the AUR package pull it in for you. With the AppImage, install it yourself: apt install bubblewrap.
If your distro ships unprivileged user namespaces disabled — some hardened kernels, or Debian with kernel.unprivileged_userns_clone=0 — agent sessions are refused with a message explaining why. The sandbox never degrades silently.
Download the .exe or the .msi:
File
When to use it
.exe
For most people — click and install
.msi
Managed or silent installs
The installer is not signed yet. SmartScreen will show “Windows protected your PC”. Click More info → Run anyway. Signing lands once the certificate is in place.
The agent jail reached Windows in 0.1.2. Like on the other platforms, it is fail-closed: if it cannot be applied, the session is refused instead of running unjailed.
The read guarantee on Windows is weaker than on macOS and Linux. Writes are contained the same way, but reads are allow-by-default, with a deny list of known secrets. In practice: the .env files of your other projects and other repositories on your machine are readable by the agent.Read Platforms before deciding whether that works for you.
Open TYBA and create an agent session. If it comes up, all three prerequisites are in place: the agent is on your PATH, the sandbox applies, and the directory is a repository.If something is missing, the message says which — TYBA fails with an explanation, not in silence.
