diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md
index 201a713d..f58b135b 100644
--- a/.github/CONTRIBUTING.md
+++ b/.github/CONTRIBUTING.md
@@ -37,6 +37,18 @@ $ php composer.phar install
 > - Edit the `scss/qi_bootstrap.scss` file to customise Bootstrap variables.
 > - Run `$ npm run all` to compile and deploy new Bootstrap CSS/JS files to QuickInstall.
 
+### CLI tests
+
+The new CLI test suite uses an isolated Composer config so it can require PHPUnit without changing QuickInstall's legacy runtime dependency constraints.
+
+```
+$ cd tests
+$ COMPOSER=composer.cli-tests.json composer install
+$ cd ..
+$ tests/vendor/bin/phpunit -c phpunit.xml.dist
+```
+
+The CLI test dependencies install into `tests/vendor/`, leaving the main application `vendor/` directory unchanged.
 
 ## :computer: Make something great
 
@@ -66,4 +78,3 @@ Be prepared for:
 - Constructive criticism of your code changes.
 - phpBB team members, or the community at large may request changes to your code (repeat [step 2 from here](#computer-make-something-great)).
 - That feeling when your Pull Request is accepted and merged. :sunglasses:
-
diff --git a/.github/workflows/cli-tests.yml b/.github/workflows/cli-tests.yml
new file mode 100644
index 00000000..b0df942e
--- /dev/null
+++ b/.github/workflows/cli-tests.yml
@@ -0,0 +1,39 @@
+name: CLI tests
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  phpunit:
+    name: PHPUnit PHP ${{ matrix.php }}
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        php: ['8.1', '8.2', '8.3', '8.4']
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php }}
+          coverage: none
+
+      - name: Validate test Composer config
+        working-directory: tests
+        run: COMPOSER=composer.cli-tests.json composer validate --no-check-publish --strict
+
+      - name: Install test dependencies
+        working-directory: tests
+        run: COMPOSER=composer.cli-tests.json composer install --no-interaction --prefer-dist
+
+      - name: Run PHPUnit
+        run: tests/vendor/bin/phpunit -c phpunit.xml.dist
+
+      - name: Lint CLI entrypoint
+        run: php -l bin/qi
diff --git a/.gitignore b/.gitignore
index 1cb62c54..ffb13102 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,7 +5,13 @@ settings/*
 cache/*
 sources/*
 vendor/*
+tests/vendor/*
 build/*
+.qi/*
+customisations/*
 *~
 .idea
 node_modules
+/.agents
+/agent
+/skills-lock.json
diff --git a/README.md b/README.md
index fe6d83e7..76c249e0 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,12 @@ QuickInstall is a tool we built to support the community of phpBB extension deve
 ## 🛠 Upgrading
 1. Get the latest version of [QuickInstall](https://www.phpbb.com/customise/db/official_tool/phpbb3_quickinstall/) and extract it. 
 
-2. Copy everything into your existing QuickInstall directory **except for the 📁`boards/`, 📁`sources/` and 📁`settings/` directories**. 
+2. Copy everything into your existing QuickInstall directory **except for:**
+  - 📁`.qi/` (may be hidden by your operating system)
+  - 📁`boards/`
+  - 📁`customisations/`
+  - 📁`sources/`
+  - 📁`settings/`
 
 > If you are upgrading from QuickInstall 1.1.8 (or older) you MUST review and re-save your old Profile settings.
 
@@ -50,6 +55,32 @@ phpBB boards require a web server running PHP and one of the following database
 | 3.1.x          | 5.4.7 - 5.6.x | 3.23+  | 5.1+    | 8.3+       | SQLite 2 or 3  | Server 2000+ |
 | 3.0.x          | 5.4.7 - 5.6.x | 3.23+  | -       | 7.x        | SQLite 2       | Server 2000  |
 
+## QuickInstall CLI
+
+QuickInstall now includes a Docker-based CLI for creating local phpBB test boards. It writes generated state to `.qi/` and leaves the legacy web UI unchanged. The QuickInstall CLI requires PHP 8.0 or newer for the `php bin/qi` command.
+
+```bash
+php bin/qi init
+php bin/qi board:create test --phpbb 3.3 --db mariadb --port 8081 --populate extension-dev
+php bin/qi board:start test
+```
+
+The QuickInstall CLI targets phpBB 3.2+ installer-based boards. phpBB 3.0/3.1 remain legacy-web-app territory and are not planned for the QuickInstall CLI.
+
+Downloaded extensions can be unzipped into `customisations/` and mounted into boards:
+
+```bash
+php bin/qi ext:mount test customisations/vendor/extname
+```
+
+Downloaded styles can be unzipped into `customisations/` and mounted into boards:
+
+```bash
+php bin/qi style:mount test customisations/stylename
+```
+
+See the complete [QuickInstall CLI docs](index.php?page=cli).
+
 ## 🐞 Support
 You can receive support at the [phpBB3 QuickInstall Discussion/Support](https://www.phpbb.com/customise/db/official_tool/phpbb3_quickinstall/support) forum.
 
diff --git a/bin/qi b/bin/qi
new file mode 100755
index 00000000..dd6c3b12
--- /dev/null
+++ b/bin/qi
@@ -0,0 +1,26 @@
+#!/usr/bin/env php
+<?php
+
+if (PHP_VERSION_ID < 80000)
+{
+	fwrite(STDERR, "QuickInstall CLI requires PHP 8.0 or newer. You are running PHP " . PHP_VERSION . ".\n");
+	fwrite(STDERR, "Run bin/qi with a PHP 8+ CLI binary, or use the legacy web UI with your older PHP runtime.\n");
+	exit(1);
+}
+
+require __DIR__ . '/../src/QuickInstall/Sandbox/Application.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/CommandLine.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/Project.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/VersionMatrix.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/SourceProvider.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/SourceService.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/BoardService.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/DockerComposeWriter.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/BoardRunner.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/SeederWriter.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/ExtensionManager.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/StyleManager.php';
+
+use QuickInstall\Sandbox\Application;
+
+exit((new Application(dirname(__DIR__)))->run($argv));
diff --git a/build.xml b/build.xml
index 57adc158..7d46b350 100644
--- a/build.xml
+++ b/build.xml
@@ -13,8 +13,10 @@
 		Remove some unnecessary files/directories
 		-->
 		<delete dir="${dir}/.github" />
+		<delete dir="${dir}/.qi" />
 		<delete dir="${dir}/node_modules" />
 		<delete dir="${dir}/scss" />
+		<delete dir="${dir}/tests" />
 		<delete dir="${dir}/vendor/twig/twig/doc" />
 		<delete dir="${dir}/vendor/twig/twig/ext" />
 		<delete dir="${dir}/vendor/twig/twig/test" />
@@ -33,6 +35,7 @@
 		<delete file="${dir}/composer.phar" />
 		<delete file="${dir}/package.json" />
 		<delete file="${dir}/package-lock.json" />
+		<delete file="${dir}/phpunit.xml.dist" />
 	</target>
 
 	<!--
diff --git a/composer.phar b/composer.phar
index bb6ba648..43f4b991 100644
Binary files a/composer.phar and b/composer.phar differ
diff --git a/docs/sandbox-cli.md b/docs/sandbox-cli.md
new file mode 100644
index 00000000..590357e8
--- /dev/null
+++ b/docs/sandbox-cli.md
@@ -0,0 +1,384 @@
+# QuickInstall CLI
+
+QuickInstall CLI creates disposable local phpBB boards for extension, style, and development testing.
+
+You do not need MAMP, WAMP, XAMPP, or any local Apache/MySQL setup. QuickInstall uses Docker for the board runtime and stores generated boards under `.qi/`.
+
+## Quick Start
+
+Install requirements:
+
+- [Docker Desktop](https://www.docker.com/products/docker-desktop/) (must be installed and running)
+- PHP 8.0 or newer for the CLI command
+- Git, only required for Git sources
+
+From the QuickInstall project root:
+
+Initialize if this is your first time:
+
+```bash
+php bin/qi init
+```
+
+Create your first board:
+
+```bash
+php bin/qi board:create demo --phpbb 3.3 --db mariadb --port 8081 --populate none
+php bin/qi board:start demo
+```
+
+Open:
+
+```text
+http://localhost:8081/
+```
+
+Admin login:
+
+```text
+admin / password
+```
+
+That is the normal workflow. `board:create` downloads the requested phpBB source if needed, writes Docker config, and prepares the board. `board:start` starts Docker, installs phpBB, applies the selected seed preset once, and waits until the board URL responds before printing the final URL.
+
+If you ever need help with commands, run:
+
+```bash
+php bin/qi help
+```
+
+## Common Recipes
+
+Create a small empty board:
+
+```bash
+php bin/qi board:create clean --phpbb 3.3 --db mariadb --port 8081 --populate none
+php bin/qi board:start clean
+```
+
+Create a board with extension-development fixtures:
+
+```bash
+php bin/qi board:create extdev --phpbb 3.3.17 --db mariadb --port 8082 --populate extension-dev
+php bin/qi board:start extdev
+```
+
+Create a board with phpBB debug output enabled:
+
+```bash
+php bin/qi board:create debug --phpbb 3.3 --db mariadb --port 8085 --populate extension-dev --debug
+php bin/qi board:start debug
+```
+
+Create an older supported phpBB 3.2 board:
+
+```bash
+php bin/qi board:create old --phpbb 3.2 --db mariadb --port 8083 --populate tiny
+php bin/qi board:start old
+```
+
+Create an experimental master branch board:
+
+```bash
+php bin/qi board:create alpha --phpbb master --db mariadb --port 8084 --populate tiny
+php bin/qi board:start alpha
+```
+
+List boards (shows all created boards and their statuses):
+
+```bash
+php bin/qi board:list
+```
+
+Stop or remove a board:
+
+```bash
+php bin/qi board:stop demo
+php bin/qi board:destroy demo
+```
+
+`board:destroy` removes the board files, Docker runtime files, database files, local Docker containers, local Docker image, and board registry entry.
+
+Board names are unique. To reuse a name with a different setup, destroy it first:
+
+```bash
+php bin/qi board:destroy demo
+php bin/qi board:create demo --phpbb 3.3 --db mariadb --port 8081 --populate tiny
+```
+
+Or recreate it in one command:
+
+```bash
+php bin/qi board:create demo --phpbb 3.3 --db mariadb --port 8081 --populate tiny --replace
+```
+
+## Fixture Presets
+
+Fixture seeding populates a board with categories, forums, users, topics, and replies. For non-tiny presets, it also adds a few seeded users to Global Moderators and Newly Registered Users. Newly registered users are kept at zero posts. It does not create custom groups, permission matrices, or attachments.
+
+Use `--populate <preset>` during `board:create`:
+
+```bash
+php bin/qi board:create demo --populate extension-dev
+```
+
+Available presets:
+
+| Preset          | Description                                                          |
+|-----------------|----------------------------------------------------------------------|
+| `none`          | No seed data                                                         |
+| `tiny`          | 3 users, 1 category, 2 forums, 2 topics, 2 replies per topic         |
+| `extension-dev` | 10 users, 2 categories, 6 forums, 25 topics, 10 replies per topic    |
+| `load-test`     | 100 users, 4 categories, 20 forums, 100 topics, 20 replies per topic |
+| `random`        | Random counts up to load-test size                                   |
+
+Fixture seeding is supported for MariaDB, MySQL, and PostgreSQL boards. SQLite boards currently support `--populate none` only; phpBB's posting and permission APIs can hold SQLite write locks too long for reliable fixture generation.
+
+Use `board:create --debug` when you want phpBB debug output enabled for the created board. Debug mode is independent from fixture presets.
+
+You can seed again manually:
+
+```bash
+php bin/qi board:seed demo --preset extension-dev --seed 1
+```
+
+Replace seed data:
+
+```bash
+php bin/qi board:seed demo --preset extension-dev --seed 1 --replace
+```
+
+Remove seed data:
+
+```bash
+php bin/qi board:seed demo --preset extension-dev --seed 1 --reset
+```
+
+`--seed` is a repeatable random seed number. Use the same seed to get the same fixture shape.
+
+## Extensions
+
+Put downloaded extensions under `customisations/`:
+
+```text
+customisations/vendor/extname/composer.json
+```
+
+Mount into a board:
+
+```bash
+php bin/qi ext:mount demo customisations/vendor/extname
+```
+
+Mount every extension found under a directory:
+
+```bash
+php bin/qi ext:mount demo customisations --recursive
+```
+
+QuickInstall reads the extension `composer.json` name, such as `vendor/extname`, and bind-mounts it to:
+
+```text
+/var/www/html/ext/vendor/extname
+```
+
+Edits in `customisations/vendor/extname` are reflected in the board immediately. If the board is running, QuickInstall recreates the web container and purges phpBB cache.
+
+List and unmount extensions:
+
+```bash
+php bin/qi ext:list demo
+php bin/qi ext:unmount demo vendor/extname
+```
+
+Copy instead of bind-mount:
+
+```bash
+php bin/qi ext:mount demo customisations/vendor/extname --copy
+```
+
+`--copy` is only supported for one extension at a time. Recursive mounting always uses bind mounts.
+
+By default, extension sources must live under `customisations/`. To mount a trusted extension from somewhere else on your machine:
+
+```bash
+php bin/qi ext:mount demo /path/to/vendor/extname --allow-external
+```
+
+## Styles
+
+Put downloaded styles under `customisations/`:
+
+```text
+customisations/stylename/style.cfg
+```
+
+Mount into a board:
+
+```bash
+php bin/qi style:mount demo customisations/stylename
+```
+
+Mount every style found under a directory:
+
+```bash
+php bin/qi style:mount demo customisations --recursive
+```
+
+QuickInstall uses the style folder name and bind-mounts it to:
+
+```text
+/var/www/html/styles/stylename
+```
+
+List and unmount styles:
+
+```bash
+php bin/qi style:list demo
+php bin/qi style:unmount demo stylename
+```
+
+Copy instead of bind-mount:
+
+```bash
+php bin/qi style:mount demo customisations/stylename --copy
+```
+
+`--copy` is only supported for one style at a time. Recursive mounting always uses bind mounts.
+
+By default, style sources must live under `customisations/`. To mount a trusted style from somewhere else on your machine:
+
+```bash
+php bin/qi style:mount demo /path/to/stylename --allow-external
+```
+
+## Supported phpBB Versions
+
+Show supported selectors:
+
+```bash
+php bin/qi phpbb:list
+```
+
+Supported selectors:
+
+| Selector           | Resolves to                          |
+|--------------------|--------------------------------------|
+| `latest`           | Defaults to the supported 3.3 line   |
+| `3.3`              | Latest 3.3.x Composer release        |
+| `3.3.x`            | Exact 3.3 tag, such as 3.3.17        |
+| `3.2`              | Latest 3.2.x Composer release        |
+| `3.2.x`            | Exact 3.2 tag, such as 3.2.11        |
+| `4.0.x` / `master` | Experimental                         |
+| `3.0` / `3.1`      | Unsupported by QuickInstall CLI      |
+
+In the `3.3.x` and `3.2.x` examples above, `x` is a placeholder. Use the exact phpBB release tag you want, such as `3.3.17`, whenever you know it. If you literally enter `3.3.x`, `3.2.x`, `3.3`, or `3.2`, QuickInstall treats that as a convenience fallback and resolves the newest matching release available from Composer.
+
+phpBB 3.0 and 3.1 are intentionally not supported by QuickInstall CLI. They are too old for this modern installer-based flow.
+
+## Sources
+
+Most users do not need source commands. `board:create --phpbb <version>` automatically registers and downloads normal Composer release sources.
+
+Show downloaded phpBB sources:
+
+```bash
+php bin/qi source:list
+```
+`source:list` shows whether each source has been downloaded and which boards use it
+
+Register and download a phpBB source:
+
+```bash
+php bin/qi source:fetch 3.3.17
+```
+
+`source:fetch` simultaneously registers and downloads a phpBB source into `.qi/sources`.
+
+Delete a phpBB source: 
+
+```bash
+php bin/qi source:remove 3.3.17
+```
+
+`source:remove` deletes one source from `.qi/sources/` and removes it from the source registry. It refuses to remove a source still used by a board unless `--force` is passed.
+
+Delete all unused phpBB sources: 
+
+```bash
+php bin/qi source:prune
+```
+
+`source:prune` removes all unused sources. It never removes sources referenced by existing boards.
+
+Use explicit Git sources for custom branches or forks:
+
+```bash
+php bin/qi source:fetch master --git --url https://github.com/phpbb/phpbb.git
+```
+
+Custom Git URLs can run Composer code on your host during fetch. QuickInstall only accepts the official phpBB Git URL by default. For a trusted fork, opt in explicitly:
+
+```bash
+php bin/qi source:fetch my-branch --git --url https://github.com/example/phpbb.git --allow-external
+```
+
+Fetched sources live under:
+
+```text
+.qi/sources/phpbb-<source>
+```
+
+## Where Files Go
+
+Generated state:
+
+| Path                   | Contents                                     |
+|------------------------|----------------------------------------------|
+| `.qi/boards/<name>`    | Installed phpBB board files                  |
+| `.qi/runtime/<name>`   | Docker Compose, Dockerfile, installer config |
+| `.qi/db/<name>`        | Database files                               |
+| `.qi/sources/<source>` | Downloaded phpBB source                      |
+
+User-managed drop zone:
+
+```text
+customisations/
+```
+
+## Safety Defaults
+
+- Board web ports bind to `127.0.0.1`, not every network interface.
+- `board:create` refuses to overwrite an existing board unless `--replace` is used.
+- `board:create` rejects ports already registered to another board or already in use on the host.
+- `ext:mount` and `style:mount` only use `customisations/` unless `--allow-external` is used.
+- Custom Git source URLs require `--allow-external`; only use trusted forks.
+
+## Troubleshooting
+
+#### Docker command fails
+
+Check that Docker Desktop is running and that the docker command works in this terminal.
+
+#### Composer command fails
+
+QuickInstall uses composer from PATH first, then `composer.phar` from the project root. Restore `composer.phar` or install Composer if both are missing.
+
+#### View container logs
+
+If a board starts but the browser shows an error, or `board:start` waits longer than expected, inspect the Docker logs. The `web` logs usually show phpBB, PHP, or web server failures. The `db` logs show database startup and connection problems.
+
+```bash
+docker compose -f .qi/runtime/demo/compose.yml logs web
+docker compose -f .qi/runtime/demo/compose.yml logs db
+```
+
+#### Reset a board completely
+
+Use this when a board's files, database, or generated Docker runtime are no longer worth repairing. Destroying a board removes its generated state, so create and start it again afterward.
+
+```bash
+php bin/qi board:destroy demo
+php bin/qi board:create demo --phpbb 3.3 --db mariadb --port 8081 --populate none
+php bin/qi board:start demo
+```
diff --git a/includes/qi.php b/includes/qi.php
index 6cf05c47..7080b8d0 100644
--- a/includes/qi.php
+++ b/includes/qi.php
@@ -37,6 +37,7 @@ public static function page_header($page_title = '')
 			'PAGE_TITLE'	=> self::lang($page_title),
 			'QI_ROOT_PATH'	=> $quickinstall_path,
 
+			'U_CLI'			=> self::url('cli'),
 			'U_DOCS'		=> self::url('docs'),
 			'U_MANAGE'		=> self::url('manage'),
 			'U_MAIN'		=> self::url('main'),
@@ -161,6 +162,110 @@ public static function lang_key_exists($key)
 		return isset($user->lang[$key]);
 	}
 
+	public static function render_markdown($doc_body, $anchor_prefix = '')
+	{
+		if ($anchor_prefix !== '')
+		{
+			$doc_body = self::add_markdown_anchors($doc_body, $anchor_prefix);
+		}
+
+		$doc_body = Parsedown::instance()->text($doc_body);
+		$doc_body = preg_replace_callback('#<pre><code(?: class="language-([^"]+)")?>#', function ($matches) {
+			$language = !empty($matches[1]) ? $matches[1] : 'plain';
+			$language = preg_replace('/[^a-z0-9_-]/i', '', $language);
+
+			return '<pre class="codeblock codeblock-' . $language . '"><code>';
+		}, $doc_body);
+
+		return str_replace(
+			['<table>', '<blockquote>', '<h2>'],
+			['<table class="table table-sm table-striped">', '<blockquote class="callout callout-warning">', '<h2 class="border-bottom pt-3 pb-2">'],
+			$doc_body
+		);
+	}
+
+	public static function get_markdown_anchors($doc_body, $prefix)
+	{
+		$links = array();
+		$anchors = self::collect_markdown_anchors($doc_body, $prefix);
+
+		foreach ($anchors as $anchor)
+		{
+			$links[] = array(
+				'TITLE'		=> $anchor['title'],
+				'U_ANCHOR'	=> $anchor['anchor'],
+			);
+		}
+
+		return $links;
+	}
+
+	private static function add_markdown_anchors($doc_body, $prefix)
+	{
+		$lines = preg_split('/\R/', $doc_body);
+		$anchors = self::collect_markdown_anchors($doc_body, $prefix);
+
+		foreach ($anchors as $anchor)
+		{
+			$index = $anchor['line'];
+			$lines[$index] = '<div id="' . $anchor['anchor'] . '" class="anchor"></div>' . "\n\n" . $lines[$index];
+		}
+
+		return implode("\n", $lines);
+	}
+
+	private static function collect_markdown_anchors($doc_body, $prefix)
+	{
+		$seen = array();
+		$anchors = array();
+		$lines = preg_split('/\R/', $doc_body);
+		$in_code_block = false;
+
+		foreach ($lines as $index => $line)
+		{
+			if (preg_match('/^\s*(```|~~~)/', $line))
+			{
+				$in_code_block = !$in_code_block;
+			}
+
+			if ($in_code_block || !preg_match('/^ {0,3}##(?!#)[ \t]+(.+)$/', $line, $matches))
+			{
+				continue;
+			}
+
+			$title = preg_replace('/\s+#+\s*$/', '', trim($matches[1]));
+			$anchor = self::generate_markdown_anchor($title, $prefix);
+
+			if (isset($seen[$anchor]))
+			{
+				$seen[$anchor]++;
+				$anchor .= '-' . $seen[$anchor];
+			}
+			else
+			{
+				$seen[$anchor] = 1;
+			}
+
+			$anchors[] = array(
+				'line'		=> $index,
+				'title'		=> $title,
+				'anchor'	=> $anchor,
+			);
+		}
+
+		return $anchors;
+	}
+
+	private static function generate_markdown_anchor($title, $prefix)
+	{
+		$anchor = html_entity_decode(strip_tags($title), ENT_QUOTES | ENT_HTML5, 'UTF-8');
+		$anchor = strtolower($anchor);
+		$anchor = preg_replace('/[^\pL\pN]+/u', '-', $anchor);
+		$anchor = trim($anchor, '-');
+
+		return $prefix . '-' . ($anchor ?: 'section');
+	}
+
 	/**
 	 * Applies language selected by user to QI.
 	 *
diff --git a/language/en/qi.php b/language/en/qi.php
index da258b0f..1b16e8a6 100644
--- a/language/en/qi.php
+++ b/language/en/qi.php
@@ -137,6 +137,8 @@
 	'DELETE_SELECTED'	=> 'Delete selected',
 	'DIR_EXISTS'		=> 'The directory &quot;<strong>%s</strong>&quot; already exists.',
 	'DIR_FILE_SETTINGS'	=> 'Directories and Files',
+	'CLI_DOCS'			=> 'QuickInstall CLI',
+	'CLI_DOCS_SHORT'	=> 'CLI',
 	'DOCS_LONG'			=> 'Documentation',
 	'DOCS_SHORT'		=> 'Docs',
 	'DOWNLOAD'			=> 'Download',
@@ -176,6 +178,7 @@
 	'JAVASCRIPT_DISABLED_ALERT'	=> '<strong>Javascript is disabled!</strong> Please enable Javascript for full functionality.',
 
 	'LANGUAGE_PACK_MISSING'	=> 'The source phpBB board does not have a valid language pack. Please download a fresh copy of phpBB and try again.',
+	'LEARN_MORE'			=> 'Learn more.',
 	'LOAD'					=> 'Load',
 	'LOG_INSTALL_INSTALLED_QI'	=> '<strong>Installed by phpBB QuickInstall version %s</strong>',
 	'LOREM_IPSUM'			=> 'Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.',
@@ -254,6 +257,7 @@
 	'REDIRECT_BOARD'	=> 'Redirect to new board',
 	'RESET'				=> 'Reset',
 
+	'QUICKINSTALL_CLI_NOTICE'	=> 'QuickInstall now includes a Docker-based CLI for creating local phpBB test boards without the need for a local web server or manual phpBB downloads.',
 	'SAVE'					=> 'Save',
 	'SAVE_PROFILE'			=> 'Save as new profile',
 	'SAVE_PROFILE_EXPLAIN'	=> 'Enter a name to create a new profile with these settings, or leave this field blank to update the current profile. If a profile of the same name already exists, it will be overwritten.<br /><br />Allowed characters: <kbd>A-Z a-z 0-9 - _ .</kbd>',
diff --git a/modules/qi_cli.php b/modules/qi_cli.php
new file mode 100644
index 00000000..f6547589
--- /dev/null
+++ b/modules/qi_cli.php
@@ -0,0 +1,37 @@
+<?php
+/**
+*
+* @package quickinstall
+* @copyright (c) 2026 phpBB Limited
+* @license http://opensource.org/licenses/gpl-2.0.php GNU General Public License v2
+*
+*/
+
+/**
+ * qi_cli module
+ */
+class qi_cli
+{
+	public function run()
+	{
+		global $template, $quickinstall_path;
+
+		$doc_file = $quickinstall_path . 'docs/sandbox-cli.md';
+		if (file_exists($doc_file))
+		{
+			$doc_body = file_get_contents($doc_file);
+			foreach (qi::get_markdown_anchors($doc_body, 'cli') as $anchor)
+			{
+				$template->assign_block_vars('cli_nav', $anchor);
+			}
+
+			$template->assign_var('CLI_BODY', qi::render_markdown($doc_body, 'cli'));
+		}
+
+		$template->assign_var('S_CLI', true);
+
+		qi::page_header('CLI_DOCS');
+
+		qi::page_display('cli_body');
+	}
+}
diff --git a/modules/qi_docs.php b/modules/qi_docs.php
index e777ef97..7e72927b 100644
--- a/modules/qi_docs.php
+++ b/modules/qi_docs.php
@@ -20,14 +20,7 @@ public function run()
 		$doc_file = $quickinstall_path . 'README.md';
 		if (file_exists($doc_file))
 		{
-			$doc_body = file_get_contents($doc_file);
-			$doc_body = $this->add_readme_anchors($doc_body);
-			$doc_body = Parsedown::instance()->text($doc_body);
-			$doc_body = str_replace(
-				['<table>', '<blockquote>', '<h2>'],
-				['<table class="table table-sm table-striped">', '<blockquote class="callout callout-warning">', '<h2 class="border-bottom pt-3 pb-2">'],
-				$doc_body
-			);
+			$doc_body = qi::render_markdown(file_get_contents($doc_file), 'readme');
 			$template->assign_var('DOC_BODY', $doc_body);
 		}
 
@@ -77,51 +70,4 @@ public function run()
 
 		qi::page_display('docs_body');
 	}
-
-	private function add_readme_anchors($doc_body)
-	{
-		$anchors = array();
-		$lines = preg_split('/\R/', $doc_body);
-		$in_code_block = false;
-
-		foreach ($lines as $index => $line)
-		{
-			if (preg_match('/^\s*(```|~~~)/', $line))
-			{
-				$in_code_block = !$in_code_block;
-			}
-
-			if ($in_code_block || !preg_match('/^ {0,3}##(?!#)[ \t]+(.+)$/', $line, $matches))
-			{
-				continue;
-			}
-
-			$title = preg_replace('/\s+#+\s*$/', '', trim($matches[1]));
-			$anchor = $this->generate_anchor($title, 'readme');
-
-			if (isset($anchors[$anchor]))
-			{
-				$anchors[$anchor]++;
-				$anchor .= '-' . $anchors[$anchor];
-			}
-			else
-			{
-				$anchors[$anchor] = 1;
-			}
-
-			$lines[$index] = '<div id="' . $anchor . '" class="anchor"></div>' . "\n\n" . $line;
-		}
-
-		return implode("\n", $lines);
-	}
-
-	private function generate_anchor($title, $prefix)
-	{
-		$anchor = html_entity_decode(strip_tags($title), ENT_QUOTES | ENT_HTML5, 'UTF-8');
-		$anchor = strtolower($anchor);
-		$anchor = preg_replace('/[^\pL\pN]+/u', '-', $anchor);
-		$anchor = trim($anchor, '-');
-
-		return $prefix . '-' . ($anchor ?: 'section');
-	}
 }
diff --git a/phpunit.xml.dist b/phpunit.xml.dist
new file mode 100644
index 00000000..23ad2c67
--- /dev/null
+++ b/phpunit.xml.dist
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<phpunit bootstrap="tests/bootstrap.php"
+         colors="true"
+         cacheResult="false"
+         executionOrder="random"
+         resolveDependencies="true"
+         beStrictAboutTestsThatDoNotTestAnything="true">
+    <testsuites>
+        <testsuite name="QuickInstall CLI">
+            <directory>tests</directory>
+        </testsuite>
+    </testsuites>
+    <coverage processUncoveredFiles="true">
+        <include>
+            <directory suffix=".php">src/QuickInstall/Sandbox</directory>
+        </include>
+    </coverage>
+</phpunit>
diff --git a/src/QuickInstall/Sandbox/Application.php b/src/QuickInstall/Sandbox/Application.php
new file mode 100644
index 00000000..769c892f
--- /dev/null
+++ b/src/QuickInstall/Sandbox/Application.php
@@ -0,0 +1,999 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+use RuntimeException;
+
+class Application
+{
+	private Project $project;
+	private $stderr;
+
+	public function __construct(string $root, $stderr = null)
+	{
+		$this->project = new Project($root);
+		$this->stderr = $stderr ?: STDERR;
+	}
+
+	public function run(array $argv): int
+	{
+		array_shift($argv);
+		$command = array_shift($argv) ?: 'help';
+		if (!in_array($command, ['help', '--help', '-h'], true) && (in_array('--help', $argv, true) || in_array('-h', $argv, true)))
+		{
+			$this->help([$command]);
+			return 0;
+		}
+
+		try
+		{
+			switch ($command)
+			{
+				case 'help':
+				case '--help':
+				case '-h':
+					$this->help($argv);
+					return 0;
+
+				case 'init':
+					return $this->init();
+
+				case 'source:list':
+					return $this->sourceList();
+
+				case 'source:fetch':
+					return $this->sourceFetch($argv);
+
+				case 'source:remove':
+					return $this->sourceRemove($argv);
+
+				case 'source:prune':
+					return $this->sourcePrune();
+
+				case 'phpbb:list':
+					return $this->phpbbList();
+
+				case 'board:create':
+					return $this->boardCreate($argv);
+
+				case 'board:list':
+					return $this->boardList();
+
+				case 'board:start':
+					return $this->boardStart($argv);
+
+				case 'board:stop':
+					return $this->boardStop($argv);
+
+				case 'board:destroy':
+					return $this->boardDestroy($argv);
+
+				case 'board:seed':
+					return $this->boardSeed($argv);
+
+				case 'ext:mount':
+					return $this->extMount($argv);
+
+				case 'ext:unmount':
+					return $this->extUnmount($argv);
+
+				case 'ext:list':
+					return $this->extList($argv);
+
+				case 'style:mount':
+					return $this->styleMount($argv);
+
+				case 'style:unmount':
+					return $this->styleUnmount($argv);
+
+				case 'style:list':
+					return $this->styleList($argv);
+
+				default:
+					$this->writeError("Unknown command: $command\n\n");
+					$this->help();
+					return 1;
+			}
+		}
+		catch (InvalidArgumentException|RuntimeException $e)
+		{
+			$this->writeError($e->getMessage() . "\n");
+			return 1;
+		}
+	}
+
+	private function init(): int
+	{
+		$created = $this->project->init();
+		if (!$created)
+		{
+			echo "QuickInstall workspace already initialized\n";
+			return 0;
+		}
+
+		echo "Created " . implode(' and ', $created) . "\n";
+		return 0;
+	}
+
+	private function sourceList(): int
+	{
+		$sources = (new SourceService($this->project))->list();
+
+		if (!$sources)
+		{
+			echo "No sources registered\n";
+			return 0;
+		}
+
+		$this->printTable(
+			['Source', 'Version', 'Type', 'Status', 'Downloaded', 'Used By', 'Path'],
+			array_map(static function ($source) {
+				return [
+					$source['source_key'] ?? $source['version'],
+					$source['version'],
+					$source['type'],
+					$source['status'] ?? '-',
+					!empty($source['downloaded']) ? 'yes' : 'no',
+					!empty($source['used_by']) ? implode(', ', $source['used_by']) : '-',
+					$source['path'],
+				];
+			}, $sources)
+		);
+
+		return 0;
+	}
+
+	private function sourceRemove(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$version = $cli->argument(0);
+		if ($version === null)
+		{
+			throw new InvalidArgumentException('Usage: qi source:remove <version|source> [--force]');
+		}
+
+		$removed = (new SourceService($this->project))->remove($version, $cli->has('force'));
+		echo "Removed source: {$removed['source']['source_key']}\n";
+		if (!empty($removed['used_by']))
+		{
+			echo "Warning: source was referenced by board(s): " . implode(', ', $removed['used_by']) . "\n";
+		}
+
+		return 0;
+	}
+
+	private function sourcePrune(): int
+	{
+		$removed = (new SourceService($this->project))->prune();
+		if (!$removed)
+		{
+			echo "No unused sources to prune\n";
+			return 0;
+		}
+
+		foreach ($removed as $source)
+		{
+			echo "Removed source: {$source['source_key']}\n";
+		}
+
+		return 0;
+	}
+
+	private function sourceFetch(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$version = $cli->argument(0);
+		if ($version === null)
+		{
+			throw new InvalidArgumentException('Usage: qi source:fetch <version|branch> [--git] [--url URL] [--allow-external]');
+		}
+
+		$record = (new SourceService($this->project))->fetch($version, $cli->has('git'), $cli->option('url'), $cli->has('allow-external'));
+
+		echo "Fetched phpBB source: {$record['path']}\n";
+		return 0;
+	}
+
+	private function phpbbList(): int
+	{
+		$this->printTable(
+			['Selector', 'Status', 'PHP', 'Resolves To', 'Notes'],
+			array_map(static function ($row) {
+				return [
+					$row['selector'],
+					$row['status'],
+					$row['php'] === '-' ? '-' : 'PHP ' . $row['php'],
+					$row['resolves_to'],
+					$row['notes'],
+				];
+			}, (new SourceService($this->project))->supportedVersions())
+		);
+
+		return 0;
+	}
+
+	private function boardCreate(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$name = $cli->argument(0);
+		if ($name === null)
+		{
+			throw new InvalidArgumentException('Usage: qi board:create <name> [--phpbb VERSION] [--db mariadb|mysql|postgres|sqlite] [--port PORT] [--populate PRESET] [--debug] [--replace]');
+		}
+
+		$version = $cli->option('phpbb', 'latest');
+		$db = $cli->option('db', 'mariadb');
+		$db = $db === 'sqlite3' ? 'sqlite' : $db;
+		$port = (int) $cli->option('port', '8080');
+		$populate = $cli->option('populate', 'none');
+		$debug = $cli->has('debug');
+		$this->validateBoardCreateOptions($db, $port, $populate);
+
+		$created = (new BoardService($this->project))->create($name, $version, $db, $port, $populate, $debug, $cli->has('replace'));
+		$paths = $created['paths'];
+
+		echo "Created board scaffold: $name\n";
+		echo "Compose: {$paths['compose']}\n";
+		echo "Install config: {$paths['install_config']}\n";
+		echo "URL after start: http://localhost:$port/\n";
+		if ($populate !== 'none')
+		{
+			echo "Populate preset: $populate (runs on board:start)\n";
+		}
+		if ($debug)
+		{
+			echo "Debug mode: enabled on board:start\n";
+		}
+		$this->nextStep("php bin/qi board:start $name");
+		return 0;
+	}
+
+	private function boardList(): int
+	{
+		$boards = (new BoardService($this->project))->list();
+		if (!$boards)
+		{
+			echo "No boards created\n";
+			return 0;
+		}
+
+		$this->printTable(
+			['Name', 'Status', 'phpBB', 'PHP', 'DB', 'Populate', 'Debug', 'URL'],
+			array_map(static function ($board) {
+				return [
+					$board['name'],
+					$board['status'],
+					$board['phpbb'],
+					$board['php'],
+					$board['db'],
+					$board['populate'] ?? 'none',
+					!empty($board['debug']) ? 'yes' : 'no',
+					$board['url'],
+				];
+			}, $boards)
+		);
+
+		return 0;
+	}
+
+	private function printTable(array $headers, array $rows): void
+	{
+		$widths = array_map('strlen', $headers);
+		foreach ($rows as $row)
+		{
+			foreach ($row as $index => $value)
+			{
+				$widths[$index] = max($widths[$index], strlen((string) $value));
+			}
+		}
+
+		$this->printTableRow($headers, $widths);
+		$this->printTableRow(array_map(static function ($width) {
+			return str_repeat('-', $width);
+		}, $widths), $widths);
+
+		foreach ($rows as $row)
+		{
+			$this->printTableRow($row, $widths);
+		}
+	}
+
+	private function printTableRow(array $row, array $widths): void
+	{
+		$cells = [];
+		foreach ($row as $index => $value)
+		{
+			$cells[] = str_pad((string) $value, $widths[$index]);
+		}
+
+		echo implode('  ', $cells) . "\n";
+	}
+
+	private function nextStep(string $text): void
+	{
+		echo "\n" . $this->style('NEXT:', '1;33') . " " . $this->style($text, '1') . "\n";
+	}
+
+	private function style(string $text, string $code): string
+	{
+		if (!$this->supportsAnsi())
+		{
+			return $text;
+		}
+
+		return "\033[" . $code . "m" . $text . "\033[0m";
+	}
+
+	private function supportsAnsi(): bool
+	{
+		if (getenv('NO_COLOR') !== false)
+		{
+			return false;
+		}
+
+		if (function_exists('posix_isatty') && defined('STDOUT'))
+		{
+			return posix_isatty(STDOUT);
+		}
+
+		return PHP_SAPI === 'cli';
+	}
+
+	private function boardStart(array $args): int
+	{
+		$name = $this->boardName($args, 'Usage: qi board:start <name>');
+		$board = (new BoardService($this->project))->start($name);
+		echo "Started board: $name\n";
+		echo "URL: {$board['url']}\n";
+		return 0;
+	}
+
+	private function boardStop(array $args): int
+	{
+		$name = $this->boardName($args, 'Usage: qi board:stop <name>');
+		(new BoardService($this->project))->stop($name);
+		echo "Stopped board: $name\n";
+		return 0;
+	}
+
+	private function boardDestroy(array $args): int
+	{
+		$name = $this->boardName($args, 'Usage: qi board:destroy <name>');
+		(new BoardService($this->project))->destroy($name);
+		echo "Destroyed board: $name\n";
+		return 0;
+	}
+
+	private function boardSeed(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$name = $cli->argument(0);
+		if ($name === null)
+		{
+			throw new InvalidArgumentException('Usage: qi board:seed <name> [--preset tiny|extension-dev|load-test|random] [--seed N] [--reset|--replace]');
+		}
+
+		$preset = $cli->option('preset', 'extension-dev');
+		$seed = (int) $cli->option('seed', '1');
+		$this->validatePreset($preset);
+		if ($seed < 1)
+		{
+			throw new InvalidArgumentException('--seed must be a positive integer.');
+		}
+		if ($cli->has('reset') && $cli->has('replace'))
+		{
+			throw new InvalidArgumentException('Use --reset or --replace, not both.');
+		}
+		$action = $cli->has('reset') ? 'reset' : ($cli->has('replace') ? 'replace' : 'seed');
+
+		(new BoardService($this->project))->seed($name, $preset, $seed, $action);
+		echo ucfirst($action) . " completed for board: $name\n";
+		return 0;
+	}
+
+	private function boardName(array $args, string $usage): string
+	{
+		$cli = CommandLine::parse($args);
+		$name = $cli->argument(0);
+		if ($name === null)
+		{
+			throw new InvalidArgumentException($usage);
+		}
+
+		return $name;
+	}
+
+	private function validateBoardCreateOptions(string $db, int $port, string $populate): void
+	{
+		if (!in_array($db, ['mariadb', 'mysql', 'postgres', 'sqlite'], true))
+		{
+			throw new InvalidArgumentException('--db must be one of: mariadb, mysql, postgres, sqlite.');
+		}
+
+		if ($port < 1 || $port > 65535)
+		{
+			throw new InvalidArgumentException('--port must be between 1 and 65535.');
+		}
+
+		if ($populate !== 'none')
+		{
+			$this->validatePreset($populate);
+		}
+
+		if ($db === 'sqlite' && $populate !== 'none')
+		{
+			throw new InvalidArgumentException('SQLite boards currently support --populate none only. Use mariadb, mysql, or postgres for fixture seeding.');
+		}
+	}
+
+	private function validatePreset(string $preset): void
+	{
+		if (!in_array($preset, ['tiny', 'extension-dev', 'load-test', 'random'], true))
+		{
+			throw new InvalidArgumentException('Preset must be one of: tiny, extension-dev, load-test, random.');
+		}
+	}
+
+	private function extMount(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$board = $cli->argument(0);
+		$source = $cli->argument(1);
+		if ($board === null || $source === null)
+		{
+			throw new InvalidArgumentException('Usage: qi ext:mount <board> <path> [--copy] [--recursive] [--allow-external]');
+		}
+		if ($cli->has('recursive') && $cli->has('copy'))
+		{
+			throw new InvalidArgumentException('--recursive cannot be combined with --copy. Mount recursively with bind mode, or copy individual extensions.');
+		}
+
+		return $this->mountResources('extension', new ExtensionManager($this->project), $board, $source, $cli->has('copy'), $cli->has('recursive'), $cli->has('allow-external'));
+	}
+
+	private function extUnmount(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$board = $cli->argument(0);
+		$name = $cli->argument(1);
+		if ($board === null || $name === null)
+		{
+			throw new InvalidArgumentException('Usage: qi ext:unmount <board> <vendor/extension>');
+		}
+
+		$extensions = new ExtensionManager($this->project);
+		$target = $extensions->unmount($board, $name);
+		$this->refreshBoardIfRunning($board);
+		$extensions->cleanupStaleTarget($board, $name);
+		echo "Unmounted $name from $board\n";
+		echo "Removed: $target\n";
+		return 0;
+	}
+
+	private function refreshBoardIfRunning(string $board): void
+	{
+		$runner = new BoardRunner($this->project);
+		(new DockerComposeWriter($this->project))->write($board, $this->runtimeConfig($this->project->board($board)));
+		if ($runner->status($board) === 'running')
+		{
+			$runner->recreateWeb($board);
+			$runner->purgeCache($board);
+		}
+	}
+
+	private function runtimeConfig(array $board): array
+	{
+		if (empty($board['port']) && !empty($board['url']))
+		{
+			$port = parse_url($board['url'], PHP_URL_PORT);
+			$board['port'] = $port ?: 80;
+		}
+
+		return $board + [
+			'admin_name' => 'admin',
+			'admin_pass' => 'password',
+			'admin_email' => 'admin@example.test',
+			'board_email' => 'board@example.test',
+			'populate' => 'none',
+			'debug' => false,
+			'extensions' => [],
+			'styles' => [],
+		];
+	}
+
+	private function extList(array $args): int
+	{
+		$board = $this->boardName($args, 'Usage: qi ext:list <board>');
+		$mounted = (new ExtensionManager($this->project))->list($board);
+
+		if (!$mounted)
+		{
+			echo "No extensions mounted for board: $board\n";
+			return 0;
+		}
+
+		$this->printTable(
+			['Extension', 'Mode', 'Source'],
+			array_map(static function ($extension) {
+				return [
+					$extension['name'],
+					$extension['mode'],
+					$extension['source'],
+				];
+			}, $mounted)
+		);
+
+		return 0;
+	}
+
+	private function styleMount(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$board = $cli->argument(0);
+		$source = $cli->argument(1);
+		if ($board === null || $source === null)
+		{
+			throw new InvalidArgumentException('Usage: qi style:mount <board> <path> [--copy] [--recursive] [--allow-external]');
+		}
+		if ($cli->has('recursive') && $cli->has('copy'))
+		{
+			throw new InvalidArgumentException('--recursive cannot be combined with --copy. Mount recursively with bind mode, or copy individual styles.');
+		}
+
+		return $this->mountResources('style', new StyleManager($this->project), $board, $source, $cli->has('copy'), $cli->has('recursive'), $cli->has('allow-external'));
+	}
+
+	private function styleUnmount(array $args): int
+	{
+		$cli = CommandLine::parse($args);
+		$board = $cli->argument(0);
+		$name = $cli->argument(1);
+		if ($board === null || $name === null)
+		{
+			throw new InvalidArgumentException('Usage: qi style:unmount <board> <style>');
+		}
+
+		$styles = new StyleManager($this->project);
+		$target = $styles->unmount($board, $name);
+		$this->refreshBoardIfRunning($board);
+		$styles->cleanupStaleTarget($board, $name);
+		echo "Unmounted $name from $board\n";
+		echo "Removed: $target\n";
+		return 0;
+	}
+
+	private function styleList(array $args): int
+	{
+		$board = $this->boardName($args, 'Usage: qi style:list <board>');
+		$mounted = (new StyleManager($this->project))->list($board);
+
+		if (!$mounted)
+		{
+			echo "No styles mounted for board: $board\n";
+			return 0;
+		}
+
+		$this->printTable(
+			['Style', 'Mode', 'Source'],
+			array_map(static function ($style) {
+				return [
+					$style['name'],
+					$style['mode'],
+					$style['source'],
+				];
+			}, $mounted)
+		);
+
+		return 0;
+	}
+
+	private function printBulkMountResult(string $type, string $board, array $mounted, array $errors): void
+	{
+		if (!$mounted && !$errors)
+		{
+			echo "No {$type}s found for board: $board\n";
+			return;
+		}
+
+		foreach ($mounted as $item)
+		{
+			echo "Mounted {$item['name']} on $board ({$item['mode']})\n";
+		}
+
+		foreach ($errors as $error)
+		{
+			$this->writeError("Skipped $type: $error\n");
+		}
+	}
+
+	private function writeError(string $message): void
+	{
+		fwrite($this->stderr, $message);
+	}
+
+	private function mountResources(string $type, object $manager, string $board, string $source, bool $copy, bool $recursive, bool $allowExternal): int
+	{
+		if ($recursive)
+		{
+			$this->project->board($board);
+			$mounted = [];
+			$errors = [];
+			foreach ($manager->discover($source, $allowExternal) as $path)
+			{
+				try
+				{
+					$mounted[] = $manager->mount($board, $path, false, $allowExternal);
+				}
+				catch (RuntimeException | InvalidArgumentException $e)
+				{
+					$errors[] = "$path: " . $e->getMessage();
+				}
+			}
+
+			if ($mounted)
+			{
+				$this->refreshBoardIfRunning($board);
+			}
+			$this->printBulkMountResult($type, $board, $mounted, $errors);
+			return $errors ? 1 : 0;
+		}
+
+		$mounted = $manager->mount($board, $source, $copy, $allowExternal);
+		$this->refreshBoardIfRunning($board);
+		echo "Mounted {$mounted['name']} on $board ({$mounted['mode']})\n";
+		echo "Source: {$mounted['source']}\n";
+		echo "Target: {$mounted['target']}\n";
+		return 0;
+	}
+
+	private function help(array $args = []): void
+	{
+		$command = $args[0] ?? null;
+		$commands = $this->helpCommands();
+		if ($command !== null)
+		{
+			$this->helpCommand($command, $commands);
+			return;
+		}
+
+		echo "QuickInstall CLI\n";
+		echo "Create disposable local phpBB boards with Docker.\n\n";
+		echo "Usage:\n";
+		echo "  qi <command> [arguments] [options]\n";
+		echo "  qi help [command]\n\n";
+		echo "Common workflow:\n";
+		echo "  qi board:create demo --phpbb 3.3 --db mariadb --port 8081 --populate extension-dev\n";
+		echo "  qi board:start demo\n\n";
+
+		foreach ($commands as $group => $items)
+		{
+			echo "$group:\n";
+			$width = max(array_map('strlen', array_keys($items)));
+			foreach ($items as $name => $help)
+			{
+				echo '  ' . str_pad($name, $width) . '  ' . $help['summary'] . "\n";
+			}
+			echo "\n";
+		}
+
+		echo "Run `qi help <command>` for usage and options.\n";
+		echo "Full guide: docs/sandbox-cli.md\n";
+	}
+
+	private function helpCommand(string $command, array $groups): void
+	{
+		foreach ($groups as $items)
+		{
+			if (!isset($items[$command]))
+			{
+				continue;
+			}
+
+			$help = $items[$command];
+			echo "{$help['title']}\n\n";
+			echo "Usage:\n";
+			echo "  qi {$help['usage']}\n\n";
+			echo "Description:\n";
+			echo "  {$help['description']}\n";
+			if (!empty($help['arguments']))
+			{
+				echo "\nArguments:\n";
+				$this->printHelpRows($help['arguments']);
+			}
+			if (!empty($help['options']))
+			{
+				echo "\nOptions:\n";
+				$this->printHelpRows($help['options']);
+			}
+			if (!empty($help['examples']))
+			{
+				echo "\nExamples:\n";
+				foreach ($help['examples'] as $example)
+				{
+					echo "  qi $example\n";
+				}
+			}
+			echo "\n";
+			return;
+		}
+
+		echo "Unknown command: $command\n\n";
+		$this->help();
+	}
+
+	private function printHelpRows(array $rows): void
+	{
+		$width = max(array_map('strlen', array_keys($rows)));
+		foreach ($rows as $name => $description)
+		{
+			echo '  ' . str_pad($name, $width) . '  ' . $description . "\n";
+		}
+	}
+
+	private function helpCommands(): array
+	{
+		return [
+			'Board commands' => [
+				'board:create' => [
+					'title' => 'board:create',
+					'usage' => 'board:create <name> [--phpbb VERSION] [--db mariadb|mysql|postgres|sqlite] [--port PORT] [--populate PRESET] [--debug] [--replace]',
+					'summary' => 'Create a board scaffold and Docker runtime.',
+					'description' => 'Creates a local board definition, downloads the requested phpBB source if needed, and prepares Docker files. Run board:start after this.',
+					'arguments' => [
+						'<name>' => 'Required board name. Use a short local name such as demo or extdev.',
+					],
+					'options' => [
+						'--phpbb VERSION' => 'phpBB selector. Examples: latest, 3.3, 3.3.17, 3.2, master. Default: latest.',
+						'--db DB' => 'Database engine. One of: mariadb, mysql, postgres, sqlite. Default: mariadb.',
+						'--port PORT' => 'Local browser port. Default: 8080.',
+						'--populate PRESET' => 'Seed preset. One of: none, tiny, extension-dev, load-test, random. Default: none.',
+						'--debug' => 'Enable phpBB debug settings after install.',
+						'--replace' => 'Destroy an existing board with the same name before creating the new one.',
+					],
+					'examples' => [
+						'board:create demo --phpbb 3.3 --db mariadb --port 8081',
+						'board:create extdev --phpbb 3.3.17 --populate extension-dev --debug',
+					],
+				],
+				'board:start' => [
+					'title' => 'board:start',
+					'usage' => 'board:start <name>',
+					'summary' => 'Start Docker and install the board if needed.',
+					'description' => 'Starts the board containers, runs phpBB install on first start, applies the configured populate preset once, and waits for the board URL to respond.',
+					'arguments' => [
+						'<name>' => 'Required board name.',
+					],
+					'examples' => [
+						'board:start demo',
+					],
+				],
+				'board:stop' => [
+					'title' => 'board:stop',
+					'usage' => 'board:stop <name>',
+					'summary' => 'Stop a running board.',
+					'description' => 'Stops the board containers without deleting board files or database files.',
+					'arguments' => [
+						'<name>' => 'Required board name.',
+					],
+					'examples' => [
+						'board:stop demo',
+					],
+				],
+				'board:destroy' => [
+					'title' => 'board:destroy',
+					'usage' => 'board:destroy <name>',
+					'summary' => 'Delete a board and its Docker image.',
+					'description' => 'Removes the board files, runtime files, database files, containers, local Docker image, and board registry entry.',
+					'arguments' => [
+						'<name>' => 'Required board name.',
+					],
+					'examples' => [
+						'board:destroy demo',
+					],
+				],
+				'board:list' => [
+					'title' => 'board:list',
+					'usage' => 'board:list',
+					'summary' => 'Show created boards and running status.',
+					'description' => 'Lists known boards with phpBB version, PHP version, database type, populate preset, debug flag, URL, and running status.',
+					'examples' => [
+						'board:list',
+					],
+				],
+				'board:seed' => [
+					'title' => 'board:seed',
+					'usage' => 'board:seed <name> [--preset tiny|extension-dev|load-test|random] [--seed N] [--reset|--replace]',
+					'summary' => 'Add, replace, or remove fixture content.',
+					'description' => 'Seeds categories, forums, users, topics, and replies on an installed board. SQLite boards only support reset.',
+					'arguments' => [
+						'<name>' => 'Required board name.',
+					],
+					'options' => [
+						'--preset PRESET' => 'Fixture preset. One of: tiny, extension-dev, load-test, random. Default: extension-dev.',
+						'--seed N' => 'Positive random seed number for repeatable fixture shape. Default: 1.',
+						'--replace' => 'Remove existing QuickInstall seed data, then seed again.',
+						'--reset' => 'Remove existing QuickInstall seed data without adding new data.',
+					],
+					'examples' => [
+						'board:seed demo --preset extension-dev --seed 1',
+						'board:seed demo --preset extension-dev --replace',
+					],
+				],
+			],
+			'Extension commands' => [
+				'ext:mount' => [
+					'title' => 'ext:mount',
+					'usage' => 'ext:mount <board> <path> [--copy] [--recursive] [--allow-external]',
+					'summary' => 'Mount one or more extensions into a board.',
+					'description' => 'Mounts a phpBB extension from the customisations drop zone. Running boards are refreshed automatically.',
+					'arguments' => [
+						'<board>' => 'Required board name.',
+						'<path>' => 'Extension path, or a directory to scan when --recursive is used.',
+					],
+					'options' => [
+						'--copy' => 'Copy one extension instead of bind-mounting it.',
+						'--recursive' => 'Find and bind-mount all extensions below <path>. Cannot be combined with --copy.',
+						'--allow-external' => 'Allow trusted paths outside the customisations drop zone.',
+					],
+					'examples' => [
+						'ext:mount demo customisations/vendor/extname',
+						'ext:mount demo customisations --recursive',
+					],
+				],
+				'ext:unmount' => [
+					'title' => 'ext:unmount',
+					'usage' => 'ext:unmount <board> <vendor/extension>',
+					'summary' => 'Remove a mounted extension from a board.',
+					'description' => 'Removes the extension mount or copied extension files, refreshes the board if running, and clears stale targets.',
+					'arguments' => [
+						'<board>' => 'Required board name.',
+						'<vendor/extension>' => 'Extension name from composer.json, such as phpbb/foo.',
+					],
+					'examples' => [
+						'ext:unmount demo vendor/extname',
+					],
+				],
+				'ext:list' => [
+					'title' => 'ext:list',
+					'usage' => 'ext:list <board>',
+					'summary' => 'Show extensions mounted on a board.',
+					'description' => 'Lists mounted extensions, mount mode, and source path for one board.',
+					'arguments' => [
+						'<board>' => 'Required board name.',
+					],
+					'examples' => [
+						'ext:list demo',
+					],
+				],
+			],
+			'Style commands' => [
+				'style:mount' => [
+					'title' => 'style:mount',
+					'usage' => 'style:mount <board> <path> [--copy] [--recursive] [--allow-external]',
+					'summary' => 'Mount one or more styles into a board.',
+					'description' => 'Mounts a phpBB style from the customisations drop zone. Running boards are refreshed automatically.',
+					'arguments' => [
+						'<board>' => 'Required board name.',
+						'<path>' => 'Style path, or a directory to scan when --recursive is used.',
+					],
+					'options' => [
+						'--copy' => 'Copy one style instead of bind-mounting it.',
+						'--recursive' => 'Find and bind-mount all styles below <path>. Cannot be combined with --copy.',
+						'--allow-external' => 'Allow trusted paths outside the customisations drop zone.',
+					],
+					'examples' => [
+						'style:mount demo customisations/stylename',
+						'style:mount demo customisations --recursive',
+					],
+				],
+				'style:unmount' => [
+					'title' => 'style:unmount',
+					'usage' => 'style:unmount <board> <style>',
+					'summary' => 'Remove a mounted style from a board.',
+					'description' => 'Removes the style mount or copied style files, refreshes the board if running, and clears stale targets.',
+					'arguments' => [
+						'<board>' => 'Required board name.',
+						'<style>' => 'Style folder name.',
+					],
+					'examples' => [
+						'style:unmount demo stylename',
+					],
+				],
+				'style:list' => [
+					'title' => 'style:list',
+					'usage' => 'style:list <board>',
+					'summary' => 'Show styles mounted on a board.',
+					'description' => 'Lists mounted styles, mount mode, and source path for one board.',
+					'arguments' => [
+						'<board>' => 'Required board name.',
+					],
+					'examples' => [
+						'style:list demo',
+					],
+				],
+			],
+			'Source commands' => [
+				'source:fetch' => [
+					'title' => 'source:fetch',
+					'usage' => 'source:fetch <version|branch> [--git] [--url URL] [--allow-external]',
+					'summary' => 'Register and download a phpBB source.',
+					'description' => 'Registers and downloads a source under .qi/sources. Normal board:create flows fetch automatically when needed. Prefer exact tags such as 3.3.17; convenience selectors such as 3.3, 3.3.x, latest, and master are stored under the exact phpBB version that was resolved.',
+					'arguments' => [
+						'<version|branch>' => 'Version selector or source name, such as 3.3.17 or master.',
+					],
+					'options' => [
+						'--git' => 'Fetch a Git source instead of a Composer release source.',
+						'--url URL' => 'Git repository URL. Defaults to the official phpBB repository for Git sources.',
+						'--allow-external' => 'Allow a trusted non-phpBB Git URL.',
+					],
+					'examples' => [
+						'source:fetch 3.3.17',
+						'source:fetch master --git --url https://github.com/phpbb/phpbb.git',
+					],
+				],
+				'source:list' => [
+					'title' => 'source:list',
+					'usage' => 'source:list',
+					'summary' => 'Show registered and downloaded sources.',
+					'description' => 'Lists sources, download status, paths, and boards currently using each source.',
+					'examples' => [
+						'source:list',
+					],
+				],
+				'source:remove' => [
+					'title' => 'source:remove',
+					'usage' => 'source:remove <version|source> [--force]',
+					'summary' => 'Delete one source.',
+					'description' => 'Deletes one source from .qi/sources and removes it from the source registry.',
+					'arguments' => [
+						'<version|source>' => 'Registered source selector.',
+					],
+					'options' => [
+						'--force' => 'Remove even if existing boards reference the source.',
+					],
+					'examples' => [
+						'source:remove 3.3.17',
+					],
+				],
+				'source:prune' => [
+					'title' => 'source:prune',
+					'usage' => 'source:prune',
+					'summary' => 'Delete unused sources.',
+					'description' => 'Removes all downloaded sources that are not referenced by existing boards.',
+					'examples' => [
+						'source:prune',
+					],
+				],
+				'phpbb:list' => [
+					'title' => 'phpbb:list',
+					'usage' => 'phpbb:list',
+					'summary' => 'Show supported phpBB selectors.',
+					'description' => 'Lists supported phpBB version selectors, PHP compatibility, and resolution notes.',
+					'examples' => [
+						'phpbb:list',
+					],
+				],
+			],
+			'Workspace commands' => [
+				'init' => [
+					'title' => 'init',
+					'usage' => 'init',
+					'summary' => 'Create the .qi workspace folders.',
+					'description' => 'Initializes QuickInstall local state folders. Other commands also initialize the workspace when needed.',
+					'examples' => [
+						'init',
+					],
+				],
+			],
+		];
+	}
+}
diff --git a/src/QuickInstall/Sandbox/BoardRunner.php b/src/QuickInstall/Sandbox/BoardRunner.php
new file mode 100644
index 00000000..23f25574
--- /dev/null
+++ b/src/QuickInstall/Sandbox/BoardRunner.php
@@ -0,0 +1,443 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+use RuntimeException;
+
+class BoardRunner
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function start(string $name): void
+	{
+		$board = $this->project->board($name);
+		$this->run(['docker', 'compose', '-f', $this->project->composePath($name), 'up', '--build', '-d', '--force-recreate', '--remove-orphans', 'web']);
+		echo "Waiting for phpBB install to finish...\n";
+		$this->waitUntilInstalled($name);
+		if (!empty($board['debug']))
+		{
+			echo "Enabling phpBB debug config...\n";
+			$this->enableDebug($name);
+		}
+		if (($board['db'] ?? '') === 'sqlite' && ($board['populate'] ?? 'none') !== 'none')
+		{
+			throw new RuntimeException('SQLite boards currently support populate:none only. Use mariadb, mysql, or postgres for seeded boards.');
+		}
+		$this->seedIfNeeded($name, $board['populate'] ?? 'none');
+		$this->waitUntilHttpReady($name, $board['url'] ?? '');
+	}
+
+	public function stop(string $name): void
+	{
+		$this->project->board($name);
+		$this->run(['docker', 'compose', '-f', $this->project->composePath($name), 'stop']);
+	}
+
+	public function destroy(string $name): void
+	{
+		$this->project->board($name);
+		$compose = $this->project->composePath($name);
+		if (file_exists($compose))
+		{
+			$this->run(['docker', 'compose', '-f', $compose, 'down', '--volumes', '--remove-orphans', '--rmi', 'local']);
+		}
+
+		$this->project->deleteTree($this->project->boardPath($name));
+		$this->project->deleteTree($this->project->runtimePath($name));
+		$this->project->deleteTree($this->project->dbPath($name));
+		$this->project->removeBoard($name);
+	}
+
+	public function status(string $name): string
+	{
+		$compose = $this->project->composePath($name);
+		if (!file_exists($compose))
+		{
+			return 'missing';
+		}
+
+		$all = $this->capture(['docker', 'compose', '-f', $compose, 'ps', '-a', '--services']);
+		if ($all['exit_code'] !== 0)
+		{
+			return 'error';
+		}
+
+		$services = $this->lines($all['output']);
+		if (!$services)
+		{
+			return 'stopped';
+		}
+
+		$running = $this->capture(['docker', 'compose', '-f', $compose, 'ps', '--services', '--filter', 'status=running']);
+		if ($running['exit_code'] !== 0)
+		{
+			return 'error';
+		}
+
+		$runningServices = $this->lines($running['output']);
+
+		if (count($runningServices) === count($services))
+		{
+			return 'running';
+		}
+
+		return $runningServices ? 'partial' : 'stopped';
+	}
+
+	public function seed(string $name, string $preset, int $seed, string $action = 'seed'): void
+	{
+		$this->project->board($name);
+		if (!in_array($action, ['seed', 'reset', 'replace'], true))
+		{
+			throw new InvalidArgumentException("Unknown seed action: $action");
+		}
+
+		if ($action === 'reset' || $action === 'replace')
+		{
+			$this->deleteSeedMarker($name, $preset);
+		}
+
+		$this->runSeeder($name, $preset, $seed, $action);
+
+		if ($action === 'replace')
+		{
+			$this->writeSeedMarker($name, $preset);
+		}
+	}
+
+	public function purgeCache(string $name): void
+	{
+		$this->project->board($name);
+		$this->run(['docker', 'compose', '-f', $this->project->composePath($name), 'exec', '-T', 'web', 'sh', '-lc', 'php bin/phpbbcli.php cache:purge']);
+	}
+
+	public function recreateWeb(string $name): void
+	{
+		$this->project->board($name);
+		$this->run(['docker', 'compose', '-f', $this->project->composePath($name), 'up', '-d', '--force-recreate', 'web']);
+	}
+
+	private function seedIfNeeded(string $name, string $preset): void
+	{
+		if ($preset === 'none' || $preset === '')
+		{
+			return;
+		}
+
+		$marker = $this->seedMarker($name, $preset);
+		if (file_exists($marker))
+		{
+			echo "Populate preset already applied: $preset\n";
+			return;
+		}
+
+		$this->runSeeder($name, $preset, 1);
+		$this->writeSeedMarker($name, $preset);
+	}
+
+	private function enableDebug(string $name): void
+	{
+		$board = $this->project->board($name);
+		$branch = (string) ($board['phpbb_branch'] ?? '');
+		$boardPath = $this->project->boardPath($name);
+
+		if (in_array($branch, ['3.3', '4.0'], true))
+		{
+			$this->enableYamlDebug($boardPath);
+			return;
+		}
+
+		if ($branch === '3.2')
+		{
+			$this->enableConfigPhpDebug($boardPath, true);
+		}
+	}
+
+	private function enableConfigPhpDebug(string $boardPath, bool $displayLoadTime): void
+	{
+		$configPath = $boardPath . '/config.php';
+		if (!is_file($configPath))
+		{
+			return;
+		}
+
+		$contents = file_get_contents($configPath);
+		if ($contents === false)
+		{
+			throw new RuntimeException("Unable to read board config: $configPath");
+		}
+
+		$contents = $this->setConfigDefine($contents, 'PHPBB_ENVIRONMENT', "@define('PHPBB_ENVIRONMENT', 'production');");
+		$contents = $this->setConfigDefine($contents, 'DEBUG_CONTAINER', "// @define('DEBUG_CONTAINER', true);");
+
+		if ($displayLoadTime)
+		{
+			$contents = $this->setConfigDefine($contents, 'PHPBB_DISPLAY_LOAD_TIME', "@define('PHPBB_DISPLAY_LOAD_TIME', true);");
+		}
+
+		file_put_contents($configPath, $contents);
+	}
+
+	private function enableYamlDebug(string $boardPath): void
+	{
+		$configPath = $boardPath . '/config/production/config.yml';
+		if (!is_file($configPath))
+		{
+			return;
+		}
+
+		$contents = file_get_contents($configPath);
+		if ($contents === false)
+		{
+			throw new RuntimeException("Unable to read board config: $configPath");
+		}
+
+		if (str_contains($contents, 'debug.load_time:'))
+		{
+			return;
+		}
+
+		$debugConfig = [
+			'debug.load_time' => 'true',
+			'debug.memory' => 'true',
+			'debug.sql_explain' => 'true',
+			'debug.show_errors' => 'true',
+			'debug.exceptions' => 'true',
+			'twig.debug' => 'false',
+			'twig.auto_reload' => 'false',
+			'twig.enable_debug_extension' => 'false',
+		];
+
+		$lines = [];
+		foreach ($debugConfig as $key => $value)
+		{
+			$lines[] = "    $key: $value";
+		}
+
+		if (preg_match('/^parameters:\s*$/m', $contents))
+		{
+			$contents = preg_replace('/^parameters:\s*$/m', "parameters:\n" . implode("\n", $lines), $contents, 1) ?? $contents;
+		}
+		else
+		{
+			$contents = rtrim($contents) . "\n\nparameters:\n" . implode("\n", $lines) . "\n";
+		}
+
+		file_put_contents($configPath, $contents);
+	}
+
+	private function setConfigDefine(string $contents, string $name, string $line): string
+	{
+		$pattern = "/^[ \\t]*(?:\\/\\/\\s*)?@define\\('" . preg_quote($name, '/') . "'[^\\n]*;\\s*$/m";
+		if (preg_match($pattern, $contents))
+		{
+			return preg_replace($pattern, $line, $contents, 1) ?? $contents;
+		}
+
+		$insert = "\n$line\n";
+		if (preg_match('/\?>\s*$/', $contents))
+		{
+			return preg_replace('/\s*\?>\s*$/', $insert . "?>\n", $contents, 1) ?? $contents;
+		}
+
+		return rtrim($contents) . $insert;
+	}
+
+	private function waitUntilInstalled(string $name): void
+	{
+		$boardPath = $this->project->boardPath($name);
+		$deadline = time() + 120;
+
+		while (time() <= $deadline)
+		{
+			$config = $boardPath . '/config.php';
+			if (file_exists($boardPath . '/includes/startup.php') && file_exists($config) && filesize($config) > 0 && !is_dir($boardPath . '/install'))
+			{
+				return;
+			}
+
+			$state = $this->serviceState($name, 'web');
+			if (in_array($state, ['exited', 'dead'], true))
+			{
+				throw new RuntimeException("Web container exited before phpBB install completed for board: $name. Run: docker compose -f " . $this->project->composePath($name) . " logs web");
+			}
+
+			usleep(500000);
+		}
+
+		throw new RuntimeException("Timed out waiting for phpBB install to complete for board: $name");
+	}
+
+	private function waitUntilHttpReady(string $name, string $url): void
+	{
+		if ($url === '')
+		{
+			return;
+		}
+
+		echo "Waiting for board URL...\n";
+		$deadline = time() + 30;
+		while (time() <= $deadline)
+		{
+			$status = $this->httpStatus($url);
+			if ($status >= 200 && $status < 500)
+			{
+				return;
+			}
+
+			usleep(500000);
+		}
+
+		echo "Warning: board container started, but $url was not reachable from the host after 30 seconds.\n";
+		echo "Try opening it again in a few seconds, or run: docker compose -f " . $this->project->composePath($name) . " logs web\n";
+	}
+
+	private function httpStatus(string $url): int
+	{
+		$context = stream_context_create([
+			'http' => [
+				'method' => 'GET',
+				'timeout' => 2,
+				'ignore_errors' => true,
+			],
+		]);
+
+		$headers = @get_headers($url, false, $context);
+		if (!is_array($headers) || !isset($headers[0]))
+		{
+			return 0;
+		}
+
+		return preg_match('/\s(\d{3})\s/', $headers[0], $matches) ? (int) $matches[1] : 0;
+	}
+
+	private function serviceState(string $name, string $service): string
+	{
+		$result = $this->capture(['docker', 'compose', '-f', $this->project->composePath($name), 'ps', $service, '--format', 'json']);
+		if ($result['exit_code'] !== 0 || trim($result['output']) === '')
+		{
+			return '';
+		}
+
+		$data = json_decode(trim($result['output']), true);
+		if (isset($data[0]) && is_array($data[0]))
+		{
+			$data = $data[0];
+		}
+
+		return strtolower((string) ($data['State'] ?? ''));
+	}
+
+	private function runSeeder(string $name, string $preset, int $seed, string $action = 'seed'): void
+	{
+		$writer = new SeederWriter($this->project);
+		$script = $writer->write($name);
+
+		echo "Running seed preset: $preset\n";
+		$this->run(['docker', 'compose', '-f', $this->project->composePath($name), 'cp', $script, 'web:/tmp/qi_seed.php']);
+		$this->run(['docker', 'compose', '-f', $this->project->composePath($name), 'exec', '-T', 'web', 'timeout', '300', 'php', '/tmp/qi_seed.php', $preset, (string) $seed, $action]);
+	}
+
+	private function seedMarker(string $name, string $preset): string
+	{
+		return $this->project->runtimePath($name) . '/seeded-' . preg_replace('/[^A-Za-z0-9._-]/', '_', $preset);
+	}
+
+	private function deleteSeedMarker(string $name, string $preset): void
+	{
+		$marker = $this->seedMarker($name, $preset);
+		if (file_exists($marker))
+		{
+			unlink($marker);
+		}
+	}
+
+	private function writeSeedMarker(string $name, string $preset): void
+	{
+		file_put_contents($this->seedMarker($name, $preset), gmdate('c') . "\n");
+	}
+
+	private function run(array $command): void
+	{
+		echo '$ ' . implode(' ', array_map('escapeshellarg', $command)) . "\n";
+
+		$descriptor = [
+			0 => ['file', '/dev/null', 'r'],
+			1 => defined('STDOUT') ? constant('STDOUT') : ['file', 'php://output', 'w'],
+			2 => defined('STDERR') ? constant('STDERR') : ['file', 'php://stderr', 'w'],
+		];
+
+		$process = proc_open($command, $descriptor, $pipes);
+		if (!is_resource($process))
+		{
+			throw new RuntimeException('Unable to start command: ' . $command[0]);
+		}
+
+		$status = proc_close($process);
+		if ($status !== 0)
+		{
+			throw new RuntimeException("Command failed with exit code $status: {$command[0]}" . $this->commandHint($command, $status));
+		}
+	}
+
+	private function capture(array $command): array
+	{
+		$descriptor = [
+			0 => ['file', '/dev/null', 'r'],
+			1 => ['pipe', 'w'],
+			2 => ['pipe', 'w'],
+		];
+
+		$process = proc_open($command, $descriptor, $pipes);
+		if (!is_resource($process))
+		{
+			return ['exit_code' => 1, 'output' => ''];
+		}
+
+		$output = stream_get_contents($pipes[1]) ?: '';
+		$error = stream_get_contents($pipes[2]) ?: '';
+		fclose($pipes[1]);
+		fclose($pipes[2]);
+
+		return [
+			'exit_code' => proc_close($process),
+			'output' => $output . $error,
+		];
+	}
+
+	private function lines(string $output): array
+	{
+		return array_values(array_filter(array_map('trim', explode("\n", $output)), static function ($line) {
+			return $line !== '';
+		}));
+	}
+
+	private function commandHint(array $command, int $status): string
+	{
+		if ($status === 124 && in_array('timeout', $command, true))
+		{
+			return "\nThe operation timed out. For seeding, try a smaller preset or use mariadb/mysql/postgres instead of sqlite.";
+		}
+
+		if (($command[0] ?? '') === 'docker')
+		{
+			return "\nCheck that Docker Desktop is running and that the docker command works in this terminal.";
+		}
+
+		return '';
+	}
+}
diff --git a/src/QuickInstall/Sandbox/BoardService.php b/src/QuickInstall/Sandbox/BoardService.php
new file mode 100644
index 00000000..84858a65
--- /dev/null
+++ b/src/QuickInstall/Sandbox/BoardService.php
@@ -0,0 +1,153 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+use RuntimeException;
+
+class BoardService
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function create(string $name, string $version = 'latest', string $db = 'mariadb', int $port = 8080, string $populate = 'none', bool $debug = false, bool $replace = false): array
+	{
+		$this->project->init();
+		$selection = (new VersionMatrix())->resolve($version);
+		$boards = $this->project->boards();
+		if (isset($boards[$name]))
+		{
+			if (!$replace)
+			{
+				throw new InvalidArgumentException("Board already exists: $name. Use board:destroy first, or pass --replace to recreate it.");
+			}
+
+			(new BoardRunner($this->project))->destroy($name);
+		}
+
+		foreach ($this->project->boards() as $board)
+		{
+			if (($board['name'] ?? '') !== $name && (int) ($board['port'] ?? 0) === $port)
+			{
+				throw new InvalidArgumentException("Port $port is already used by board: {$board['name']}");
+			}
+		}
+
+		if ($this->isPortInUse($port))
+		{
+			throw new InvalidArgumentException("Port $port is already in use on this host.");
+		}
+
+		$source = (new SourceProvider($this->project))->ensure($version);
+
+		$boardDir = $this->project->boardPath($name);
+		if (!is_dir($boardDir) && !mkdir($boardDir, 0775, true) && !is_dir($boardDir))
+		{
+			throw new RuntimeException("Unable to create board directory: $boardDir");
+		}
+
+		$config = [
+			'phpbb' => $source['version'],
+			'phpbb_source' => $source['source_key'],
+			'php' => $source['php'] ?? $selection['php'],
+			'db' => $db,
+			'port' => $port,
+			'populate' => $populate,
+			'debug' => $debug,
+			'admin_name' => 'admin',
+			'admin_pass' => 'password',
+			'admin_email' => 'admin@example.test',
+			'board_email' => 'board@example.test',
+			'extensions' => [],
+			'styles' => [],
+		];
+
+		$paths = (new DockerComposeWriter($this->project))->write($name, $config);
+		$board = [
+			'name' => $name,
+			'phpbb' => $source['version'],
+			'phpbb_source' => $source['source_key'],
+			'phpbb_branch' => $source['phpbb_branch'],
+			'php' => $source['php'] ?? $selection['php'],
+			'db' => $db,
+			'port' => $port,
+			'url' => "http://localhost:$port/",
+			'path' => $boardDir,
+			'populate' => $populate,
+			'debug' => $debug,
+			'extensions' => [],
+			'styles' => [],
+			'created_at' => gmdate('c'),
+		];
+
+		$this->project->appendBoard($board);
+
+		return ['board' => $board, 'paths' => $paths];
+	}
+
+	private function isPortInUse(int $port): bool
+	{
+		$socket = @stream_socket_server("tcp://127.0.0.1:$port", $errno, $errstr);
+		if ($socket === false)
+		{
+			return true;
+		}
+
+		fclose($socket);
+		return false;
+	}
+
+	public function list(): array
+	{
+		$runner = new BoardRunner($this->project);
+		$boards = [];
+		foreach ($this->project->boards() as $board)
+		{
+			$board['status'] = $runner->status($board['name']);
+			$board['populate'] = $board['populate'] ?? 'none';
+			$board['debug'] = $board['debug'] ?? false;
+			$boards[] = $board;
+		}
+
+		return $boards;
+	}
+
+	public function start(string $name): array
+	{
+		(new BoardRunner($this->project))->start($name);
+		return $this->project->board($name);
+	}
+
+	public function stop(string $name): void
+	{
+		(new BoardRunner($this->project))->stop($name);
+	}
+
+	public function destroy(string $name): void
+	{
+		(new BoardRunner($this->project))->destroy($name);
+	}
+
+	public function seed(string $name, string $preset, int $seed, string $action): void
+	{
+		$board = $this->project->board($name);
+		if (($board['db'] ?? '') === 'sqlite' && $action !== 'reset')
+		{
+			throw new InvalidArgumentException('SQLite boards do not support fixture seeding. Use --reset to remove partial seed data, or use mariadb, mysql, or postgres for seeded boards.');
+		}
+
+		(new BoardRunner($this->project))->seed($name, $preset, $seed, $action);
+	}
+}
diff --git a/src/QuickInstall/Sandbox/CommandLine.php b/src/QuickInstall/Sandbox/CommandLine.php
new file mode 100644
index 00000000..1ce8e1dc
--- /dev/null
+++ b/src/QuickInstall/Sandbox/CommandLine.php
@@ -0,0 +1,64 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+class CommandLine
+{
+	private array $args = [];
+	private array $options = [];
+
+	public static function parse(array $tokens): self
+	{
+		$cli = new self();
+		$count = count($tokens);
+
+		for ($i = 0; $i < $count; $i++)
+		{
+			$token = $tokens[$i];
+			if (!str_starts_with($token, '--'))
+			{
+				$cli->args[] = $token;
+				continue;
+			}
+
+			$option = substr($token, 2);
+			$value = true;
+
+			if (str_contains($option, '='))
+			{
+				[$option, $value] = explode('=', $option, 2);
+			}
+			else if (isset($tokens[$i + 1]) && !str_starts_with($tokens[$i + 1], '--'))
+			{
+				$value = $tokens[++$i];
+			}
+
+			$cli->options[$option] = $value;
+		}
+
+		return $cli;
+	}
+
+	public function argument(int $index): ?string
+	{
+		return $this->args[$index] ?? null;
+	}
+
+	public function option(string $name, ?string $default = null): ?string
+	{
+		return isset($this->options[$name]) && $this->options[$name] !== true ? (string) $this->options[$name] : $default;
+	}
+
+	public function has(string $name): bool
+	{
+		return isset($this->options[$name]);
+	}
+}
diff --git a/src/QuickInstall/Sandbox/DockerComposeWriter.php b/src/QuickInstall/Sandbox/DockerComposeWriter.php
new file mode 100644
index 00000000..f591cf12
--- /dev/null
+++ b/src/QuickInstall/Sandbox/DockerComposeWriter.php
@@ -0,0 +1,330 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use RuntimeException;
+
+class DockerComposeWriter
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function write(string $name, array $config): array
+	{
+		$runtimeDir = $this->project->workspacePath('runtime/' . $name);
+		if (!is_dir($runtimeDir) && !mkdir($runtimeDir, 0775, true) && !is_dir($runtimeDir))
+		{
+			throw new RuntimeException("Unable to create runtime directory: $runtimeDir");
+		}
+
+		$installConfig = $runtimeDir . '/install-config.yml';
+		$compose = $runtimeDir . '/compose.yml';
+		$dockerfile = $runtimeDir . '/Dockerfile';
+		$entrypoint = $runtimeDir . '/entrypoint.sh';
+
+		file_put_contents($installConfig, $this->installConfig($name, $config));
+		file_put_contents($compose, $this->compose($name, $config));
+		file_put_contents($dockerfile, $this->dockerfile($config));
+		file_put_contents($entrypoint, $this->entrypoint($config));
+		chmod($entrypoint, 0755);
+
+		return [
+			'compose' => $compose,
+			'install_config' => $installConfig,
+			'dockerfile' => $dockerfile,
+			'entrypoint' => $entrypoint,
+		];
+	}
+
+	private function installConfig(string $name, array $config): string
+	{
+		$dbms = $this->dbms($config['db']);
+		$dbhost = $config['db'] === 'sqlite' ? '/var/www/html/store/phpbb.sqlite' : 'db';
+		$dbport = $config['db'] === 'postgres' ? '5432' : ($config['db'] === 'sqlite' ? '' : '3306');
+		$adminName = $this->yamlString($config['admin_name']);
+		$adminPass = $this->yamlString($config['admin_pass']);
+		$adminEmail = $this->yamlString($config['admin_email']);
+		$boardName = $this->yamlString($name);
+
+		return <<<YAML
+installer:
+  admin:
+    name: $adminName
+    password: $adminPass
+    email: $adminEmail
+  board:
+    lang: en
+    name: $boardName
+    description: "QuickInstall sandbox"
+  database:
+    dbms: $dbms
+    dbhost: "$dbhost"
+    dbport: "$dbport"
+    dbuser: phpbb
+    dbpasswd: phpbb
+    dbname: phpbb
+    table_prefix: phpbb_
+  email:
+    enabled: false
+    smtp_delivery: false
+    smtp_host: ""
+    smtp_port: 25
+    smtp_user: ""
+    smtp_pass: ""
+  server:
+    cookie_secure: false
+    server_protocol: http://
+    force_server_vars: true
+    server_name: localhost
+    server_port: {$config['port']}
+    script_path: /
+  extensions: []
+
+YAML;
+	}
+
+	private function compose(string $name, array $config): string
+	{
+		$dbService = $this->databaseService($config['db'], $name);
+		$sourcePath = $this->project->sourcePath($config['phpbb_source'] ?? $config['phpbb']);
+		$boardPath = $this->project->boardPath($name);
+		$extensionVolumes = $this->extensionVolumes($config['extensions'] ?? []);
+		$styleVolumes = $this->styleVolumes($config['styles'] ?? []);
+		$dbPath = $this->project->workspacePath('db/' . $name);
+		if (!is_dir($dbPath) && !mkdir($dbPath, 0775, true) && !is_dir($dbPath))
+		{
+			throw new RuntimeException("Unable to create database directory: $dbPath");
+		}
+
+		return <<<YAML
+services:
+  web:
+    build:
+      context: .
+      args:
+        PHP_VERSION: "{$config['php']}"
+    working_dir: /var/www/html
+    ports:
+      - "127.0.0.1:{$config['port']}:80"
+    volumes:
+      - {$this->yamlString($sourcePath . ':/opt/phpbb-source:ro')}
+      - {$this->yamlString($boardPath . ':/var/www/html')}
+{$extensionVolumes}{$styleVolumes}      - ./install-config.yml:/opt/quickinstall/install-config.yml:ro
+      - ./entrypoint.sh:/opt/quickinstall/entrypoint.sh:ro
+    entrypoint: ["/bin/sh", "/opt/quickinstall/entrypoint.sh"]
+    depends_on:
+      db:
+        condition: service_healthy
+    environment:
+      QUICKINSTALL_PHPBB_VERSION: "{$config['phpbb']}"
+      QUICKINSTALL_POPULATE: "{$config['populate']}"
+
+$dbService
+
+YAML;
+	}
+
+	private function extensionVolumes(array $extensions): string
+	{
+		$volumes = '';
+		foreach ($extensions as $name => $extension)
+		{
+			if (($extension['mode'] ?? '') !== 'bind')
+			{
+				continue;
+			}
+
+			$source = $extension['source'] ?? '';
+			if ($source === '')
+			{
+				continue;
+			}
+
+			$target = '/var/www/html/ext/' . $name;
+			$volumes .= '      - ' . $this->yamlString($source . ':' . $target) . "\n";
+		}
+
+		return $volumes;
+	}
+
+	private function styleVolumes(array $styles): string
+	{
+		$volumes = '';
+		foreach ($styles as $name => $style)
+		{
+			if (($style['mode'] ?? '') !== 'bind')
+			{
+				continue;
+			}
+
+			$source = $style['source'] ?? '';
+			if ($source === '')
+			{
+				continue;
+			}
+
+			$target = '/var/www/html/styles/' . $name;
+			$volumes .= '      - ' . $this->yamlString($source . ':' . $target) . "\n";
+		}
+
+		return $volumes;
+	}
+
+	private function yamlString(string $value): string
+	{
+		return '"' . str_replace(
+			["\\", '"', "\n", "\r", "\t"],
+			["\\\\", '\\"', "\\n", "\\r", "\\t"],
+			$value
+		) . '"';
+	}
+
+	private function dockerfile(array $config): string
+	{
+		$extensionInstall = $config['db'] === 'postgres' ? 'docker-php-ext-install pgsql pdo_pgsql' : 'docker-php-ext-install mysqli pdo_mysql';
+		$aptSourceSetup = $this->aptSourceSetup($config['php']);
+
+		return <<<DOCKERFILE
+ARG PHP_VERSION=8.1
+FROM php:\${PHP_VERSION}-apache
+
+RUN {$aptSourceSetup}apt-get update \\
+    && apt-get install -y --no-install-recommends git unzip libonig-dev libpq-dev libsodium-dev libzip-dev zlib1g-dev \\
+    && docker-php-ext-install mbstring zip \\
+    && if ! php -m | grep -qi '^sodium$'; then docker-php-ext-install sodium; fi \\
+    && $extensionInstall \\
+    && for extension in PDO zip zlib sodium json mbstring; do php -m | grep -qi "^\${extension}$"; done \\
+    && rm -rf /var/lib/apt/lists/*
+
+DOCKERFILE;
+	}
+
+	private function aptSourceSetup(string $phpVersion): string
+	{
+		if (version_compare($phpVersion, '7.4', '>='))
+		{
+			return '';
+		}
+
+		return "sed -i 's|http://deb.debian.org/debian|http://archive.debian.org/debian|g' /etc/apt/sources.list \\\n"
+			. "    && sed -i '/debian-security/d' /etc/apt/sources.list \\\n"
+			. "    && echo 'Acquire::Check-Valid-Until \"false\";' > /etc/apt/apt.conf.d/99quickinstall-archive \\\n"
+			. "    && ";
+	}
+
+	private function entrypoint(array $config): string
+	{
+		return <<<'SH'
+set -eu
+
+if [ ! -f /var/www/html/common.php ]; then
+	if [ ! -f /opt/phpbb-source/common.php ]; then
+		echo "phpBB source missing at /opt/phpbb-source. Run qi source:fetch first."
+		exit 1
+	fi
+
+	cp -R /opt/phpbb-source/. /var/www/html/
+	chown -R www-data:www-data /var/www/html
+fi
+
+if [ -f /var/www/html/config.php ] && [ ! -s /var/www/html/config.php ]; then
+	rm -f /var/www/html/config.php
+fi
+
+if [ ! -s /var/www/html/config.php ] && [ -f /var/www/html/install/phpbbcli.php ]; then
+	php /var/www/html/install/phpbbcli.php install /opt/quickinstall/install-config.yml
+	rm -rf /var/www/html/install
+	chown -R www-data:www-data /var/www/html
+fi
+
+apache2-foreground
+SH;
+	}
+
+	private function databaseService(string $db, string $name): string
+	{
+		$dbPath = '../../db/' . $name;
+		switch ($db)
+		{
+			case 'mysql':
+				$image = 'mysql:8.0';
+				break;
+			case 'postgres':
+				return <<<YAML
+  db:
+    image: postgres:16
+    environment:
+      POSTGRES_DB: phpbb
+      POSTGRES_USER: phpbb
+      POSTGRES_PASSWORD: phpbb
+    volumes:
+      - {$this->yamlString($dbPath . ':/var/lib/postgresql/data')}
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U phpbb -d phpbb"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+YAML;
+			case 'sqlite':
+				return <<<YAML
+  db:
+    image: busybox
+    command: ["sh", "-c", "sleep infinity"]
+    healthcheck:
+      test: ["CMD", "true"]
+      interval: 5s
+      timeout: 5s
+      retries: 1
+YAML;
+			case 'mariadb':
+			default:
+				$image = 'mariadb:10.11';
+				break;
+		}
+		$dbVolume = $this->yamlString($dbPath . ':/var/lib/mysql');
+
+		return <<<YAML
+  db:
+    image: $image
+    environment:
+      MYSQL_DATABASE: phpbb
+      MYSQL_USER: phpbb
+      MYSQL_PASSWORD: phpbb
+      MYSQL_ROOT_PASSWORD: root
+    volumes:
+      - $dbVolume
+    healthcheck:
+      test: ["CMD-SHELL", "mysqladmin ping -h localhost -u root -proot"]
+      interval: 5s
+      timeout: 5s
+      retries: 20
+YAML;
+	}
+
+	private function dbms(string $db): string
+	{
+		switch ($db)
+		{
+			case 'postgres':
+				return 'postgres';
+			case 'sqlite':
+				return 'sqlite3';
+			case 'mysql':
+			case 'mariadb':
+			default:
+				return 'mysqli';
+		}
+	}
+}
diff --git a/src/QuickInstall/Sandbox/ExtensionManager.php b/src/QuickInstall/Sandbox/ExtensionManager.php
new file mode 100644
index 00000000..17758533
--- /dev/null
+++ b/src/QuickInstall/Sandbox/ExtensionManager.php
@@ -0,0 +1,251 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+use RuntimeException;
+
+class ExtensionManager
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function mount(string $board, string $source, bool $copy = false, bool $allowExternal = false): array
+	{
+		$boardConfig = $this->project->board($board);
+		$sourcePath = $this->resolvePath($source, $allowExternal);
+		if (!is_dir($sourcePath))
+		{
+			throw new InvalidArgumentException("Extension source is not a directory: $source");
+		}
+
+		$name = $this->extensionName($sourcePath);
+		[$vendor, $extension] = explode('/', $name, 2);
+		$target = $this->project->boardPath($board) . '/ext/' . $vendor . '/' . $extension;
+		$extensions = $boardConfig['extensions'] ?? [];
+
+		if (file_exists($target) || is_link($target))
+		{
+			if (!$copy && (is_link($target) || !is_file($target . '/composer.json')))
+			{
+				$this->project->deleteTree($target);
+			}
+			else if (!$copy && isset($extensions[$name]) && ($extensions[$name]['mode'] ?? '') === 'bind')
+			{
+				$extensions[$name] = ['mode' => 'bind', 'source' => $sourcePath];
+				$boardConfig['extensions'] = $extensions;
+				$this->project->appendBoard($boardConfig);
+
+				return ['name' => $name, 'source' => $sourcePath, 'target' => '/var/www/html/ext/' . $name, 'mode' => 'bind'];
+			}
+			else
+			{
+				throw new RuntimeException("Extension target already exists: $target");
+			}
+		}
+
+		if ($copy)
+		{
+			$this->project->copyTree($sourcePath, $target);
+			$mode = 'copy';
+			$extensions[$name] = ['mode' => 'copy', 'source' => $target];
+		}
+		else
+		{
+			$mode = 'bind';
+			$extensions[$name] = ['mode' => 'bind', 'source' => $sourcePath];
+			$target = '/var/www/html/ext/' . $name;
+		}
+
+		$boardConfig['extensions'] = $extensions;
+		$this->project->appendBoard($boardConfig);
+
+		return ['name' => $name, 'source' => $sourcePath, 'target' => $target, 'mode' => $mode];
+	}
+
+	public function discover(string $source, bool $allowExternal = false): array
+	{
+		$sourcePath = $this->resolvePath($source, $allowExternal);
+		if (!is_dir($sourcePath))
+		{
+			throw new InvalidArgumentException("Extension search path is not a directory: $source");
+		}
+
+		$found = [];
+		$this->discoverExtensions($sourcePath, $found);
+		sort($found);
+
+		return $found;
+	}
+
+	public function unmount(string $board, string $name): string
+	{
+		$boardConfig = $this->project->board($board);
+		$this->assertExtensionName($name);
+		$target = $this->project->boardPath($board) . '/ext/' . $name;
+		$extensions = $boardConfig['extensions'] ?? [];
+		$isBind = isset($extensions[$name]) && ($extensions[$name]['mode'] ?? '') === 'bind';
+
+		if (!isset($extensions[$name]) && !file_exists($target) && !is_link($target))
+		{
+			throw new InvalidArgumentException("Extension is not mounted: $name");
+		}
+
+		if (!$isBind)
+		{
+			$this->project->deleteTree($target);
+			$this->project->removeEmptyParents(dirname($target), $this->project->boardPath($board) . '/ext');
+		}
+
+		unset($extensions[$name]);
+		$boardConfig['extensions'] = $extensions;
+		$this->project->appendBoard($boardConfig);
+
+		return $isBind ? '/var/www/html/ext/' . $name : $target;
+	}
+
+	public function cleanupStaleTarget(string $board, string $name): void
+	{
+		$this->assertExtensionName($name);
+		$target = $this->project->boardPath($board) . '/ext/' . $name;
+		$this->project->deleteTree($target);
+		$this->project->removeEmptyParents(dirname($target), $this->project->boardPath($board) . '/ext');
+	}
+
+	public function list(string $board): array
+	{
+		$boardConfig = $this->project->board($board);
+		$mounted = [];
+		foreach (($boardConfig['extensions'] ?? []) as $name => $extension)
+		{
+			$mounted[$name] = [
+				'name' => $name,
+				'mode' => $extension['mode'] ?? 'bind',
+				'target' => '/var/www/html/ext/' . $name,
+				'source' => $extension['source'] ?? '',
+			];
+		}
+
+		$extPath = $this->project->boardPath($board) . '/ext';
+		if (!is_dir($extPath))
+		{
+			return array_values($mounted);
+		}
+
+		foreach (scandir($extPath) ?: [] as $vendor)
+		{
+			if ($vendor === '.' || $vendor === '..' || !is_dir($extPath . '/' . $vendor))
+			{
+				continue;
+			}
+
+			foreach (scandir($extPath . '/' . $vendor) ?: [] as $extension)
+			{
+				if ($extension === '.' || $extension === '..')
+				{
+					continue;
+				}
+
+				$path = $extPath . '/' . $vendor . '/' . $extension;
+				if (!is_dir($path) && !is_link($path))
+				{
+					continue;
+				}
+
+				$name = $vendor . '/' . $extension;
+				if (isset($mounted[$name]))
+				{
+					continue;
+				}
+
+				if (!is_file($path . '/composer.json'))
+				{
+					continue;
+				}
+
+				$mounted[$name] = [
+					'name' => $name,
+					'mode' => is_link($path) ? 'symlink' : 'copy',
+					'target' => $path,
+					'source' => is_link($path) ? readlink($path) : $path,
+				];
+			}
+		}
+
+		return array_values($mounted);
+	}
+
+	private function resolvePath(string $path, bool $allowExternal): string
+	{
+		return $this->project->resolveDropZonePath(
+			$path,
+			$this->project->customisationsPath(),
+			$allowExternal,
+			"Extension path must be under customisations/. Use --allow-external only for trusted local paths."
+		);
+	}
+
+	private function extensionName(string $sourcePath): string
+	{
+		$composer = $sourcePath . '/composer.json';
+		if (!is_file($composer))
+		{
+			throw new InvalidArgumentException("Extension source must contain composer.json: $sourcePath");
+		}
+
+		$data = json_decode((string) file_get_contents($composer), true);
+		if (!is_array($data) || empty($data['name']))
+		{
+			throw new InvalidArgumentException("Extension composer.json must contain a name like vendor/extension: $composer");
+		}
+
+		$name = strtolower((string) $data['name']);
+		$this->assertExtensionName($name);
+
+		return $name;
+	}
+
+	private function assertExtensionName(string $name): void
+	{
+		if (!preg_match('/^[a-z0-9_.-]+\/[a-z0-9_.-]+$/', $name))
+		{
+			throw new InvalidArgumentException("Invalid extension name: $name");
+		}
+	}
+
+	private function discoverExtensions(string $path, array &$found): void
+	{
+		if (is_file($path . '/composer.json'))
+		{
+			$found[] = $path;
+			return;
+		}
+
+		foreach (scandir($path) ?: [] as $item)
+		{
+			if ($item === '.' || $item === '..')
+			{
+				continue;
+			}
+
+			$child = $path . '/' . $item;
+			if (is_dir($child) && !is_link($child))
+			{
+				$this->discoverExtensions($child, $found);
+			}
+		}
+	}
+
+}
diff --git a/src/QuickInstall/Sandbox/Project.php b/src/QuickInstall/Sandbox/Project.php
new file mode 100644
index 00000000..6882a9ee
--- /dev/null
+++ b/src/QuickInstall/Sandbox/Project.php
@@ -0,0 +1,316 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+use RuntimeException;
+
+class Project
+{
+	private string $root;
+	private string $workspace;
+
+	public function __construct(string $root)
+	{
+		$this->root = rtrim($root, '/');
+		$this->workspace = $this->root . '/.qi';
+	}
+
+	public function init(): array
+	{
+		$created = [];
+		$customisationsPath = $this->customisationsPath();
+		$workspaceExists = is_dir($this->workspace);
+		if (!is_dir($customisationsPath))
+		{
+			if (!mkdir($customisationsPath, 0775, true) && !is_dir($customisationsPath))
+			{
+				throw new RuntimeException("Unable to create $customisationsPath");
+			}
+
+			$created[] = 'customisations drop zone';
+		}
+
+		foreach (['', '/sources', '/boards', '/runtime', '/db'] as $dir)
+		{
+			$path = $this->workspace . $dir;
+			if (!is_dir($path) && !mkdir($path, 0775, true) && !is_dir($path))
+			{
+				throw new RuntimeException("Unable to create $path");
+			}
+		}
+
+		if (!$workspaceExists && is_dir($this->workspace))
+		{
+			$created[] = '.qi workspace';
+		}
+
+		foreach (['sources.json' => [], 'boards.json' => []] as $file => $default)
+		{
+			$path = $this->workspace . '/' . $file;
+			if (!file_exists($path))
+			{
+				$this->writeJson($file, $default);
+			}
+		}
+
+		return $created;
+	}
+
+	public function workspacePath(string $path = ''): string
+	{
+		return $this->workspace . ($path === '' ? '' : '/' . ltrim($path, '/'));
+	}
+
+	public function rootPath(string $path = ''): string
+	{
+		return $this->root . ($path === '' ? '' : '/' . ltrim($path, '/'));
+	}
+
+	public function customisationsPath(): string
+	{
+		return $this->rootPath('customisations');
+	}
+
+	public function boardPath(string $name): string
+	{
+		$this->assertName($name, 'board');
+		return $this->workspacePath('boards/' . $name);
+	}
+
+	public function sourcePath(string $version): string
+	{
+		$this->assertName($version, 'version');
+		return $this->workspacePath('sources/phpbb-' . $version);
+	}
+
+	public function readJson(string $file, array $default): array
+	{
+		$path = $this->workspacePath($file);
+		if (!file_exists($path))
+		{
+			return $default;
+		}
+
+		$data = json_decode((string) file_get_contents($path), true);
+		return is_array($data) ? $data : $default;
+	}
+
+	public function writeJson(string $file, array $data): void
+	{
+		$path = $this->workspacePath($file);
+		$encoded = json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES) . "\n";
+		if (file_put_contents($path, $encoded) === false)
+		{
+			throw new RuntimeException("Unable to write $path");
+		}
+	}
+
+	public function appendBoard(array $board): void
+	{
+		$boards = $this->readJson('boards.json', []);
+		$boards[$board['name']] = $board;
+		$this->writeJson('boards.json', $boards);
+	}
+
+	public function boards(): array
+	{
+		return $this->readJson('boards.json', []);
+	}
+
+	public function board(string $name): array
+	{
+		$boards = $this->boards();
+		if (!isset($boards[$name]))
+		{
+			throw new InvalidArgumentException("Unknown board: $name");
+		}
+
+		return $boards[$name];
+	}
+
+	public function removeBoard(string $name): void
+	{
+		$boards = $this->boards();
+		unset($boards[$name]);
+		$this->writeJson('boards.json', $boards);
+	}
+
+	public function runtimePath(string $name): string
+	{
+		$this->assertName($name, 'board');
+		return $this->workspacePath('runtime/' . $name);
+	}
+
+	public function composePath(string $name): string
+	{
+		return $this->runtimePath($name) . '/compose.yml';
+	}
+
+	public function dbPath(string $name): string
+	{
+		$this->assertName($name, 'board');
+		return $this->workspacePath('db/' . $name);
+	}
+
+	public function deleteTree(string $path): void
+	{
+		if (!file_exists($path) && !is_link($path))
+		{
+			return;
+		}
+		$this->assertWorkspacePath($path);
+
+		if (is_file($path) || is_link($path))
+		{
+			if (!unlink($path))
+			{
+				throw new RuntimeException("Unable to delete $path");
+			}
+			return;
+		}
+
+		$items = scandir($path);
+		if ($items === false)
+		{
+			throw new RuntimeException("Unable to scan $path");
+		}
+
+		foreach ($items as $item)
+		{
+			if ($item === '.' || $item === '..')
+			{
+				continue;
+			}
+
+			$this->deleteTree($path . '/' . $item);
+		}
+
+		if (!rmdir($path))
+		{
+			throw new RuntimeException("Unable to delete $path");
+		}
+	}
+
+	public function copyTree(string $source, string $target): void
+	{
+		if (is_dir($target))
+		{
+			throw new RuntimeException("Copy target already exists: $target");
+		}
+
+		if (!mkdir($target, 0775, true) && !is_dir($target))
+		{
+			throw new RuntimeException("Unable to create copy target: $target");
+		}
+
+		foreach (scandir($source) ?: [] as $item)
+		{
+			if ($item === '.' || $item === '..')
+			{
+				continue;
+			}
+
+			$src = $source . '/' . $item;
+			$dst = $target . '/' . $item;
+			if (is_dir($src) && !is_link($src))
+			{
+				$this->copyTree($src, $dst);
+			}
+			else if (!copy($src, $dst))
+			{
+				throw new RuntimeException("Unable to copy $src to $dst");
+			}
+		}
+	}
+
+	public function removeEmptyParents(string $path, string $stop): void
+	{
+		while ($path !== $stop && is_dir($path) && count(array_diff(scandir($path) ?: [], ['.', '..'])) === 0)
+		{
+			rmdir($path);
+			$path = dirname($path);
+		}
+	}
+
+	public function resolveDropZonePath(string $path, string $basePath, bool $allowExternal, string $error): string
+	{
+		$candidates = [
+			$path,
+			$this->rootPath($path),
+			$basePath . '/' . ltrim($path, '/'),
+		];
+
+		foreach ($candidates as $candidate)
+		{
+			$real = realpath($candidate);
+			if ($real !== false && ($allowExternal || $this->isPathUnder($real, $basePath)))
+			{
+				return $real;
+			}
+		}
+
+		throw new InvalidArgumentException($error);
+	}
+
+	public function isPathUnder(string $path, string $parent): bool
+	{
+		$parent = realpath($parent);
+		return $parent !== false && ($path === $parent || str_starts_with($path, $parent . '/'));
+	}
+
+	private function assertWorkspacePath(string $path): void
+	{
+		$path = $this->normalizeAbsolutePath($path);
+		$workspace = $this->normalizeAbsolutePath($this->workspace);
+		if ($path !== $workspace && !str_starts_with($path, $workspace . '/'))
+		{
+			throw new RuntimeException("Refusing to delete path outside QuickInstall workspace: $path");
+		}
+	}
+
+	private function normalizeAbsolutePath(string $path): string
+	{
+		if ($path === '')
+		{
+			return $this->root;
+		}
+		if ($path[0] !== '/')
+		{
+			$path = $this->rootPath($path);
+		}
+
+		$parts = [];
+		foreach (explode('/', $path) as $part)
+		{
+			if ($part === '' || $part === '.')
+			{
+				continue;
+			}
+			if ($part === '..')
+			{
+				array_pop($parts);
+				continue;
+			}
+			$parts[] = $part;
+		}
+
+		return '/' . implode('/', $parts);
+	}
+
+	public function assertName(string $name, string $label): void
+	{
+		if (!preg_match('/^[A-Za-z0-9._-]+$/', $name))
+		{
+			throw new InvalidArgumentException("Invalid $label: $name");
+		}
+	}
+}
diff --git a/src/QuickInstall/Sandbox/SeederWriter.php b/src/QuickInstall/Sandbox/SeederWriter.php
new file mode 100644
index 00000000..37218c1b
--- /dev/null
+++ b/src/QuickInstall/Sandbox/SeederWriter.php
@@ -0,0 +1,659 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use RuntimeException;
+
+class SeederWriter
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function write(string $name): string
+	{
+		$path = $this->project->runtimePath($name) . '/seed.php';
+		if (file_put_contents($path, $this->script()) === false)
+		{
+			throw new RuntimeException("Unable to write $path");
+		}
+
+		return $path;
+	}
+
+	private function script(): string
+	{
+		return <<<'PHP'
+<?php
+
+$preset = $argv[1] ?? 'extension-dev';
+$seed = (int) ($argv[2] ?? 1);
+$action = $argv[3] ?? 'seed';
+
+$presets = [
+	'tiny' => ['users' => 3, 'categories' => 1, 'forums_per_category' => 2, 'topics' => 2, 'replies' => 2, 'groups' => false],
+	'extension-dev' => ['users' => 10, 'categories' => 2, 'forums_per_category' => 3, 'topics' => 25, 'replies' => 10, 'groups' => true],
+	'load-test' => ['users' => 100, 'categories' => 4, 'forums_per_category' => 5, 'topics' => 100, 'replies' => 20, 'groups' => true],
+	'random' => ['users' => 100, 'categories' => 4, 'forums_per_category' => 5, 'topics' => 100, 'replies' => 20, 'groups' => true, 'randomize' => true],
+];
+
+if (!isset($presets[$preset]))
+{
+	fwrite(STDERR, "Unknown seed preset: $preset\n");
+	exit(1);
+}
+
+if (!in_array($action, ['seed', 'reset', 'replace'], true))
+{
+	fwrite(STDERR, "Unknown seed action: $action\n");
+	exit(1);
+}
+
+$phpbb_root_path = '/var/www/html/';
+$phpEx = 'php';
+define('IN_PHPBB', true);
+
+require_once $phpbb_root_path . 'common.' . $phpEx;
+require_once $phpbb_root_path . 'includes/functions_user.' . $phpEx;
+require_once $phpbb_root_path . 'includes/functions_content.' . $phpEx;
+require_once $phpbb_root_path . 'includes/functions_posting.' . $phpEx;
+require_once $phpbb_root_path . 'includes/functions_admin.' . $phpEx;
+
+$user->session_begin();
+$auth->acl($user->data);
+$user->setup();
+
+$admin_id = 2;
+$user->data['user_id'] = $admin_id;
+$user->data['username'] = 'admin';
+$user->data['is_registered'] = true;
+
+mt_srand($seed);
+$counts = qi_seed_resolve_counts($presets[$preset]);
+
+if ($action === 'reset' || $action === 'replace')
+{
+	qi_seed_status('Resetting seed data...');
+	$reset = qi_seed_reset($db, $seed);
+	echo "Reset seed $seed: {$reset['topics']} topics, {$reset['forums']} forums, {$reset['users']} users\n";
+	if ($action === 'reset')
+	{
+		qi_seed_sync_user_post_counts($db);
+		exit(0);
+	}
+}
+
+qi_seed_status('Seeding board...');
+$users = qi_seed_users($db, $phpbb_container, $counts['users'], $seed);
+$posting_users = qi_seed_apply_group_variety($db, $users, !empty($counts['groups']));
+$forums = qi_seed_forums($db, $counts['categories'], $counts['forums_per_category'], $seed);
+if (!$forums)
+{
+	$forum_id = qi_seed_first_postable_forum($db);
+	$forums = $forum_id ? [$forum_id] : [];
+}
+
+if (!$forums)
+{
+	fwrite(STDERR, "No postable forum found\n");
+	exit(1);
+}
+
+qi_seed_status('Creating seeded topics and replies...');
+$created_topics = qi_seed_posts($forums, $posting_users, $counts['topics'], $counts['replies'], $seed);
+qi_seed_status('Finalizing seed data...');
+qi_seed_mark_posts_counted($db, $seed);
+qi_seed_sync_user_post_counts($db);
+
+echo "Seeded preset $preset: " . count($users) . " users available, " . count($forums) . " forums available, $created_topics topics\n";
+
+function qi_seed_status(string $message): void
+{
+	echo $message . "\n";
+	flush();
+}
+
+function qi_seed_reset($db, int $seed): array
+{
+	$topic_ids = qi_seed_ids_by_like($db, TOPICS_TABLE, 'topic_id', 'topic_title', sprintf('QI seeded topic %d-', $seed) . '%');
+	$forum_ids = qi_seed_ids_by_like($db, FORUMS_TABLE, 'forum_id', 'forum_name', sprintf('QI seed %d ', $seed) . '%');
+	$user_ids = qi_seed_ids_by_like($db, USERS_TABLE, 'user_id', 'username', sprintf('qi_user_%d_', $seed) . '%');
+
+	if ($topic_ids)
+	{
+		delete_topics('topic_id', $topic_ids, true, true, true);
+	}
+
+	if ($forum_ids)
+	{
+		$db->sql_query('DELETE FROM ' . ACL_GROUPS_TABLE . ' WHERE ' . $db->sql_in_set('forum_id', $forum_ids));
+		$db->sql_query('DELETE FROM ' . ACL_USERS_TABLE . ' WHERE ' . $db->sql_in_set('forum_id', $forum_ids));
+		$db->sql_query('DELETE FROM ' . FORUMS_TRACK_TABLE . ' WHERE ' . $db->sql_in_set('forum_id', $forum_ids));
+		$db->sql_query('DELETE FROM ' . FORUMS_WATCH_TABLE . ' WHERE ' . $db->sql_in_set('forum_id', $forum_ids));
+		$db->sql_query('DELETE FROM ' . FORUMS_ACCESS_TABLE . ' WHERE ' . $db->sql_in_set('forum_id', $forum_ids));
+		$db->sql_query('DELETE FROM ' . FORUMS_TABLE . ' WHERE ' . $db->sql_in_set('forum_id', $forum_ids));
+
+		$new_id = 1;
+		recalc_nested_sets($new_id, 'forum_id', FORUMS_TABLE);
+	}
+
+	if ($user_ids)
+	{
+		user_delete('remove', $user_ids);
+	}
+
+	qi_seed_sync_user_post_counts($db);
+	qi_seed_clear_caches();
+
+	return [
+		'topics' => count($topic_ids),
+		'forums' => count($forum_ids),
+		'users' => count($user_ids),
+	];
+}
+
+function qi_seed_ids_by_like($db, string $table, string $id_column, string $text_column, string $pattern): array
+{
+	$sql = "SELECT $id_column
+		FROM $table
+		WHERE $text_column LIKE '" . $db->sql_escape($pattern) . "'";
+	$result = $db->sql_query($sql);
+	$ids = [];
+	while ($row = $db->sql_fetchrow($result))
+	{
+		$ids[] = (int) $row[$id_column];
+	}
+	$db->sql_freeresult($result);
+
+	return $ids;
+}
+
+function qi_seed_sync_user_post_counts($db): void
+{
+	$db->sql_query('UPDATE ' . USERS_TABLE . '
+		SET user_posts = 0');
+
+	$sql = 'SELECT poster_id, COUNT(post_id) AS post_count
+		FROM ' . POSTS_TABLE . '
+		WHERE poster_id > 1
+			AND post_postcount = 1
+			AND post_visibility = ' . ITEM_APPROVED . '
+		GROUP BY poster_id';
+	$result = $db->sql_query($sql);
+	while ($row = $db->sql_fetchrow($result))
+	{
+		$db->sql_query('UPDATE ' . USERS_TABLE . '
+			SET user_posts = ' . (int) $row['post_count'] . '
+			WHERE user_id = ' . (int) $row['poster_id']);
+	}
+	$db->sql_freeresult($result);
+}
+
+function qi_seed_mark_posts_counted($db, int $seed): void
+{
+	$pattern = sprintf('%%QI seeded topic %d-%%', $seed);
+	$db->sql_query('UPDATE ' . POSTS_TABLE . '
+		SET post_postcount = 1
+		WHERE post_subject LIKE \'' . $db->sql_escape($pattern) . '\'');
+}
+
+function qi_seed_resolve_counts(array $preset): array
+{
+	if (empty($preset['randomize']))
+	{
+		return $preset;
+	}
+
+	$users = mt_rand(1, $preset['users']);
+	return [
+		'users' => $users,
+		'categories' => mt_rand(1, $preset['categories']),
+		'forums_per_category' => mt_rand(1, $preset['forums_per_category']),
+		'topics' => mt_rand(1, $preset['topics']),
+		'replies' => mt_rand(0, $preset['replies']),
+		'groups' => $users >= 5,
+	];
+}
+
+function qi_seed_first_postable_forum($db): int
+{
+	$sql = 'SELECT forum_id FROM ' . FORUMS_TABLE . ' WHERE forum_type = ' . FORUM_POST . ' ORDER BY forum_id ASC';
+	$result = $db->sql_query_limit($sql, 1);
+	$row = $db->sql_fetchrow($result);
+	$db->sql_freeresult($result);
+
+	return $row ? (int) $row['forum_id'] : 0;
+}
+
+function qi_seed_users($db, $phpbb_container, int $count, int $seed): array
+{
+	$users = [];
+	$passwords = $phpbb_container->get('passwords.manager');
+
+	for ($i = 1; $i <= $count; $i++)
+	{
+		$username = sprintf('qi_user_%d_%02d', $seed, $i);
+		$sql = 'SELECT user_id FROM ' . USERS_TABLE . " WHERE username_clean = '" . $db->sql_escape(utf8_clean_string($username)) . "'";
+		$result = $db->sql_query_limit($sql, 1);
+		$row = $db->sql_fetchrow($result);
+		$db->sql_freeresult($result);
+
+		if ($row)
+		{
+			$users[] = [
+				'user_id' => (int) $row['user_id'],
+				'username' => $username,
+				'user_colour' => '',
+			];
+			continue;
+		}
+
+		$user_id = user_add([
+			'username' => $username,
+			'user_password' => $passwords->hash('password'),
+			'user_email' => sprintf('%s@example.test', $username),
+			'group_id' => 2,
+			'user_type' => USER_NORMAL,
+			'user_ip' => '127.0.0.1',
+			'user_lang' => 'en',
+		]);
+
+		if ($user_id !== false)
+		{
+			$users[] = [
+				'user_id' => (int) $user_id,
+				'username' => $username,
+				'user_colour' => '',
+			];
+		}
+	}
+
+	return $users ?: [[
+		'user_id' => 2,
+		'username' => 'admin',
+		'user_colour' => 'AA0000',
+	]];
+}
+
+function qi_seed_apply_group_variety($db, array $users, bool $enabled): array
+{
+	if (!$enabled || count($users) < 5)
+	{
+		return $users;
+	}
+
+	$moderators = array_slice($users, 0, min(2, count($users)));
+	$newly_registered = array_slice($users, -min(2, max(1, count($users) - count($moderators))));
+
+	qi_seed_add_users_to_group($db, $moderators, 'GLOBAL_MODERATORS');
+	qi_seed_set_default_group($db, $moderators, 'GLOBAL_MODERATORS');
+	qi_seed_add_users_to_group($db, $newly_registered, 'NEWLY_REGISTERED');
+
+	$newly_registered_ids = array_fill_keys(array_map(static function ($user) {
+		return (int) $user['user_id'];
+	}, $newly_registered), true);
+
+	$posting_users = array_values(array_filter($users, static function ($user) use ($newly_registered_ids) {
+		return empty($newly_registered_ids[(int) $user['user_id']]);
+	}));
+
+	return $posting_users ?: $users;
+}
+
+function qi_seed_add_users_to_group($db, array $users, string $group_name): void
+{
+	if (!$users)
+	{
+		return;
+	}
+
+	$group_id = qi_seed_group_id($db, $group_name);
+	if (!$group_id)
+	{
+		return;
+	}
+
+	foreach ($users as $user_row)
+	{
+		$user_id = (int) $user_row['user_id'];
+		$sql = 'SELECT user_id FROM ' . USER_GROUP_TABLE . '
+			WHERE group_id = ' . $group_id . '
+				AND user_id = ' . $user_id;
+		$result = $db->sql_query_limit($sql, 1);
+		$exists = (bool) $db->sql_fetchrow($result);
+		$db->sql_freeresult($result);
+		if ($exists)
+		{
+			continue;
+		}
+
+		$db->sql_query('INSERT INTO ' . USER_GROUP_TABLE . ' ' . $db->sql_build_array('INSERT', [
+			'group_id' => $group_id,
+			'user_id' => $user_id,
+			'group_leader' => 0,
+			'user_pending' => 0,
+		]));
+	}
+}
+
+function qi_seed_set_default_group($db, array $users, string $group_name): void
+{
+	if (!$users)
+	{
+		return;
+	}
+
+	$group_id = qi_seed_group_id($db, $group_name);
+	if (!$group_id)
+	{
+		return;
+	}
+
+	$colour = qi_seed_group_field($db, $group_id, 'group_colour');
+	$rank = (int) qi_seed_group_field($db, $group_id, 'group_rank');
+	foreach ($users as $user_row)
+	{
+		$db->sql_query('UPDATE ' . USERS_TABLE . '
+			SET group_id = ' . $group_id . ",
+				user_colour = '" . $db->sql_escape($colour) . "',
+				user_rank = " . $rank . '
+			WHERE user_id = ' . (int) $user_row['user_id']);
+	}
+}
+
+function qi_seed_group_field($db, int $group_id, string $field): string
+{
+	if (!in_array($field, ['group_colour', 'group_rank'], true))
+	{
+		return '';
+	}
+
+	$sql = "SELECT $field
+		FROM " . GROUPS_TABLE . '
+		WHERE group_id = ' . $group_id;
+	$result = $db->sql_query_limit($sql, 1);
+	$value = (string) $db->sql_fetchfield($field);
+	$db->sql_freeresult($result);
+
+	return $value;
+}
+
+function qi_seed_group_id($db, string $group_name): int
+{
+	$sql = 'SELECT group_id FROM ' . GROUPS_TABLE . "
+		WHERE group_name = '" . $db->sql_escape($group_name) . "'";
+	$result = $db->sql_query_limit($sql, 1);
+	$group_id = (int) $db->sql_fetchfield('group_id');
+	$db->sql_freeresult($result);
+
+	return $group_id;
+}
+
+function qi_seed_forums($db, int $categories, int $forums_per_category, int $seed): array
+{
+	$forum_ids = [];
+	$category_ids = [];
+	$permission_source = qi_seed_first_postable_forum($db);
+
+	for ($category = 1; $category <= $categories; $category++)
+	{
+		$category_name = sprintf('QI seed %d category %02d', $seed, $category);
+		$category_id = qi_seed_forum_id_by_name($db, $category_name);
+		if (!$category_id)
+		{
+			$category_id = qi_seed_insert_forum($db, [
+				'parent_id' => 0,
+				'forum_type' => FORUM_CAT,
+				'forum_name' => $category_name,
+				'forum_desc' => sprintf('Generated category for seed %d.', $seed),
+			]);
+		}
+		$category_ids[] = $category_id;
+
+		for ($forum = 1; $forum <= $forums_per_category; $forum++)
+		{
+			$forum_name = sprintf('QI seed %d forum %02d-%02d', $seed, $category, $forum);
+			$forum_id = qi_seed_forum_id_by_name($db, $forum_name);
+			if (!$forum_id)
+			{
+				$forum_id = qi_seed_insert_forum($db, [
+					'parent_id' => $category_id,
+					'forum_type' => FORUM_POST,
+					'forum_name' => $forum_name,
+					'forum_desc' => sprintf('Generated forum %02d in category %02d.', $forum, $category),
+				]);
+			}
+
+			$forum_ids[] = $forum_id;
+		}
+	}
+
+	$new_id = 1;
+	recalc_nested_sets($new_id, 'forum_id', FORUMS_TABLE);
+
+	$forum_ids = array_values(array_unique(array_map('intval', $forum_ids)));
+	$permission_targets = array_values(array_unique(array_merge(array_map('intval', $category_ids), $forum_ids)));
+	if ($permission_source && $permission_targets)
+	{
+		qi_seed_copy_forum_permissions($db, $permission_source, $permission_targets);
+	}
+
+	qi_seed_clear_caches();
+
+	return $forum_ids;
+}
+
+function qi_seed_copy_forum_permissions($db, int $source_forum_id, array $target_forum_ids): void
+{
+	foreach ($target_forum_ids as $target_forum_id)
+	{
+		$target_forum_id = (int) $target_forum_id;
+		if ($target_forum_id === $source_forum_id)
+		{
+			continue;
+		}
+
+		$db->sql_query('DELETE FROM ' . ACL_GROUPS_TABLE . ' WHERE forum_id = ' . $target_forum_id);
+		$db->sql_query('DELETE FROM ' . ACL_USERS_TABLE . ' WHERE forum_id = ' . $target_forum_id);
+
+		qi_seed_copy_acl_rows($db, ACL_GROUPS_TABLE, $source_forum_id, $target_forum_id);
+		qi_seed_copy_acl_rows($db, ACL_USERS_TABLE, $source_forum_id, $target_forum_id);
+	}
+}
+
+function qi_seed_copy_acl_rows($db, string $table, int $source_forum_id, int $target_forum_id): void
+{
+	$result = $db->sql_query('SELECT * FROM ' . $table . ' WHERE forum_id = ' . $source_forum_id);
+	while ($row = $db->sql_fetchrow($result))
+	{
+		$row['forum_id'] = $target_forum_id;
+		$db->sql_query('INSERT INTO ' . $table . ' ' . $db->sql_build_array('INSERT', $row));
+	}
+	$db->sql_freeresult($result);
+}
+
+function qi_seed_clear_caches(): void
+{
+	global $auth, $cache;
+
+	if (is_object($auth) && method_exists($auth, 'acl_clear_prefetch'))
+	{
+		$auth->acl_clear_prefetch();
+	}
+
+	if (is_object($cache) && method_exists($cache, 'purge'))
+	{
+		$cache->purge();
+	}
+}
+
+function qi_seed_forum_id_by_name($db, string $name): int
+{
+	$sql = 'SELECT forum_id FROM ' . FORUMS_TABLE . " WHERE forum_name = '" . $db->sql_escape($name) . "'";
+	$result = $db->sql_query_limit($sql, 1);
+	$row = $db->sql_fetchrow($result);
+	$db->sql_freeresult($result);
+
+	return $row ? (int) $row['forum_id'] : 0;
+}
+
+function qi_seed_insert_forum($db, array $data): int
+{
+	$desc = $data['forum_desc'];
+	$desc_uid = $desc_bitfield = '';
+	$desc_options = 7;
+	generate_text_for_storage($desc, $desc_uid, $desc_bitfield, $desc_options, true, true, true);
+
+	$sql_ary = [
+		'parent_id' => (int) $data['parent_id'],
+		'left_id' => 0,
+		'right_id' => 0,
+		'forum_parents' => '',
+		'forum_name' => $data['forum_name'],
+		'forum_desc' => $desc,
+		'forum_desc_bitfield' => $desc_bitfield,
+		'forum_desc_options' => $desc_options,
+		'forum_desc_uid' => $desc_uid,
+		'forum_link' => '',
+		'forum_password' => '',
+		'forum_image' => '',
+		'forum_rules' => '',
+		'forum_rules_link' => '',
+		'forum_rules_bitfield' => '',
+		'forum_rules_options' => 7,
+		'forum_rules_uid' => '',
+		'forum_type' => (int) $data['forum_type'],
+		'forum_status' => ITEM_UNLOCKED,
+		'forum_flags' => 48,
+		'display_on_index' => 1,
+		'enable_indexing' => 1,
+		'enable_icons' => 1,
+		'display_subforum_list' => 1,
+	];
+
+	$db->sql_query('INSERT INTO ' . FORUMS_TABLE . ' ' . $db->sql_build_array('INSERT', $sql_ary));
+	return (int) $db->sql_nextid();
+}
+
+function qi_seed_posts(array $forum_ids, array $authors, int $topics, int $replies, int $seed): int
+{
+	$created = 0;
+	$existing = qi_seed_existing_topic_count($seed);
+
+	for ($topic = $existing + 1; $topic <= $topics; $topic++)
+	{
+		$forum_id = $forum_ids[array_rand($forum_ids)];
+		$author = $authors[array_rand($authors)];
+		$topic_id_hint = qi_seed_next_topic_id();
+		$subject = sprintf('QI seeded topic %d-%02d', $seed, $topic_id_hint);
+
+		qi_seed_set_author($author);
+		$data = qi_seed_post_data($forum_id, 0, $subject, sprintf("Seeded topic body %d.%02d\n\nUseful test content for extension development.", $seed, $topic_id_hint));
+		$poll = [];
+		submit_post('post', $subject, '', POST_NORMAL, $poll, $data, true, true);
+		$created++;
+
+		$topic_id = (int) ($data['topic_id'] ?? 0);
+		if (!$topic_id)
+		{
+			continue;
+		}
+
+		for ($reply = 1; $reply <= $replies; $reply++)
+		{
+			$reply_author = $authors[array_rand($authors)];
+			$reply_subject = 'Re: ' . $subject;
+			qi_seed_set_author($reply_author);
+			$reply_data = qi_seed_post_data($forum_id, $topic_id, $subject, sprintf('Seeded reply %d for topic %d.', $reply, $topic_id_hint));
+			$reply_poll = [];
+			submit_post('reply', $reply_subject, '', POST_NORMAL, $reply_poll, $reply_data, true, true);
+		}
+	}
+
+	return $created;
+}
+
+function qi_seed_existing_topic_count(int $seed): int
+{
+	global $db;
+
+	$sql = 'SELECT COUNT(topic_id) AS topic_count
+		FROM ' . TOPICS_TABLE . "
+		WHERE topic_title LIKE '" . $db->sql_escape(sprintf('QI seeded topic %d-', $seed)) . "%'";
+	$result = $db->sql_query($sql);
+	$count = (int) $db->sql_fetchfield('topic_count');
+	$db->sql_freeresult($result);
+
+	return $count;
+}
+
+function qi_seed_next_topic_id(): int
+{
+	global $db;
+
+	$sql = 'SELECT MAX(topic_id) AS max_topic_id
+		FROM ' . TOPICS_TABLE;
+	$result = $db->sql_query($sql);
+	$next_id = (int) $db->sql_fetchfield('max_topic_id') + 1;
+	$db->sql_freeresult($result);
+
+	return max(1, $next_id);
+}
+
+function qi_seed_set_author(array $author): void
+{
+	global $user;
+
+	$user->data['user_id'] = (int) $author['user_id'];
+	$user->data['username'] = $author['username'];
+	$user->data['username_clean'] = utf8_clean_string($author['username']);
+	$user->data['user_colour'] = $author['user_colour'] ?? '';
+	$user->data['is_registered'] = true;
+}
+
+function qi_seed_post_data(int $forum_id, int $topic_id, string $topic_title, string $message): array
+{
+	global $user;
+
+	$uid = $bitfield = '';
+	$options = 0;
+	generate_text_for_storage($message, $uid, $bitfield, $options, true, true, true);
+
+	return [
+		'forum_id' => $forum_id,
+		'topic_id' => $topic_id,
+		'icon_id' => 0,
+		'topic_title' => $topic_title,
+		'topic_time_limit' => 0,
+		'poster_id' => (int) $user->data['user_id'],
+		'enable_bbcode' => true,
+		'enable_smilies' => true,
+		'enable_urls' => true,
+		'enable_sig' => true,
+		'message' => $message,
+		'message_md5' => md5($message),
+		'bbcode_bitfield' => $bitfield,
+		'bbcode_uid' => $uid,
+		'post_edit_locked' => 0,
+		'notify_set' => false,
+		'notify' => false,
+		'post_time' => time(),
+		'forum_name' => '',
+		'enable_indexing' => true,
+		'force_approved_state' => true,
+	];
+}
+PHP;
+	}
+}
diff --git a/src/QuickInstall/Sandbox/SourceProvider.php b/src/QuickInstall/Sandbox/SourceProvider.php
new file mode 100644
index 00000000..c0181652
--- /dev/null
+++ b/src/QuickInstall/Sandbox/SourceProvider.php
@@ -0,0 +1,622 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+use RuntimeException;
+
+class SourceProvider
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function add(string $version, string $type, ?string $url, bool $allowExternal = false): array
+	{
+		if (!in_array($type, ['composer', 'git'], true))
+		{
+			throw new InvalidArgumentException("Unsupported source type: $type");
+		}
+		$selection = (new VersionMatrix())->resolve($version, $type === 'git');
+		$url = $url ?: ($type === 'git' ? 'https://github.com/phpbb/phpbb.git' : null);
+		if ($type === 'git' && !$allowExternal && $url !== 'https://github.com/phpbb/phpbb.git')
+		{
+			throw new InvalidArgumentException('Custom Git source URLs can run Composer code on your host. Use --allow-external only for trusted phpBB forks.');
+		}
+
+		$sources = $this->project->readJson('sources.json', []);
+		$record = [
+			'version' => $selection['version'],
+			'source_key' => $selection['source_key'],
+			'constraint' => $selection['constraint'],
+			'branch' => $selection['branch'],
+			'phpbb_branch' => $selection['phpbb_branch'],
+			'php' => $selection['php'],
+			'status' => $selection['status'],
+			'type' => $type,
+			'package' => $type === 'composer' ? 'phpbb/phpbb' : null,
+			'url' => $url,
+			'path' => $this->project->sourcePath($selection['source_key']),
+			'registered_at' => gmdate('c'),
+		];
+
+		$sources[$selection['source_key']] = $record;
+		$this->project->writeJson('sources.json', $sources);
+
+		if ($type === 'composer' && $this->isFloatingSelection($selection))
+		{
+			return $this->ensure($version);
+		}
+
+		return $record;
+	}
+
+	public function ensure(string $version): array
+	{
+		$sources = $this->project->readJson('sources.json', []);
+		try
+		{
+			$selection = (new VersionMatrix())->resolve($version);
+		}
+		catch (InvalidArgumentException $e)
+		{
+			if (isset($sources[$version]))
+			{
+				return $this->ensureRegisteredSource($sources[$version] + ['source_key' => $version]);
+			}
+
+			throw $e;
+		}
+
+		if ($this->isFloatingSelection($selection))
+		{
+			return $this->ensureFloating($version, $selection);
+		}
+
+		if (!isset($sources[$selection['source_key']]))
+		{
+			echo "Registering phpBB source: $version\n";
+			$sources[$selection['source_key']] = $this->add($version, 'composer', null);
+		}
+
+		$source = $sources[$selection['source_key']];
+		$source = $this->withSelectionDefaults($source, $selection);
+		if (!file_exists($source['path'] . '/common.php'))
+		{
+			echo "Fetching phpBB source: $version\n";
+			$this->fetch($source);
+		}
+		$source = $this->withInstalledSourceMetadata($source, $selection['php']);
+		$sources[$source['source_key']] = $source;
+		$this->project->writeJson('sources.json', $sources);
+
+		return $source;
+	}
+
+	private function ensureRegisteredSource(array $source): array
+	{
+		$source += [
+			'path' => $this->project->sourcePath($source['source_key']),
+			'php'  => '8.1',
+		];
+		if (!file_exists($source['path'] . '/common.php'))
+		{
+			echo "Fetching phpBB source: {$source['source_key']}\n";
+			$this->fetch($source);
+		}
+
+		$source = $this->withInstalledSourceMetadata($source, $source['php']);
+		$sources = $this->project->readJson('sources.json', []);
+		$sources[$source['source_key']] = $source;
+		$this->project->writeJson('sources.json', $sources);
+
+		return $source;
+	}
+
+	private function ensureFloating(string $version, array $selection): array
+	{
+		$sources = $this->project->readJson('sources.json', []);
+		$source = $this->withSelectionDefaults($sources[$selection['source_key']] ?? [], $selection);
+		$source['type'] = $source['type'] ?? 'composer';
+		$source['package'] = $source['type'] === 'composer' ? 'phpbb/phpbb' : ($source['package'] ?? null);
+		$source['url'] = $source['url'] ?? ($source['type'] === 'git' ? 'https://github.com/phpbb/phpbb.git' : null);
+
+		if (!isset($sources[$selection['source_key']]))
+		{
+			echo "Resolving phpBB source: $version\n";
+		}
+
+		$resolvedVersion = null;
+		if ($source['type'] === 'composer' && $selection['constraint'] !== 'dev-master')
+		{
+			$resolvedVersion = $this->latestComposerVersion($selection['constraint']);
+			if ($resolvedVersion !== null)
+			{
+				$resolvedKey = $this->sourceKey($resolvedVersion);
+				$resolvedPath = $this->project->sourcePath($resolvedKey);
+				if (is_file($resolvedPath . '/common.php'))
+				{
+					if (!isset($sources[$resolvedKey]))
+					{
+						$sources[$resolvedKey] = $this->recordForResolvedSource($source, $selection, $version, $resolvedVersion, $resolvedKey, $resolvedPath);
+					}
+					$sources[$resolvedKey] = $this->withInstalledSourceMetadata($sources[$resolvedKey], $selection['php']);
+					$this->project->writeJson('sources.json', $sources);
+
+					$this->removeUnusedFloatingSource($sources, $selection['source_key'], $resolvedPath);
+					return $sources[$resolvedKey];
+				}
+			}
+		}
+
+		$tempKey = '_tmp-' . $selection['source_key'] . '-' . str_replace('.', '', uniqid('', true));
+		$tempSource = $source;
+		$tempSource['source_key'] = $tempKey;
+		$tempSource['path'] = $this->project->sourcePath($tempKey);
+		if ($resolvedVersion !== null)
+		{
+			$tempSource['constraint'] = $resolvedVersion;
+		}
+
+		echo "Fetching phpBB source: $version\n";
+		try
+		{
+			$this->fetch($tempSource);
+		}
+		catch (RuntimeException $e)
+		{
+			if (file_exists($tempSource['path']) || is_link($tempSource['path']))
+			{
+				$this->project->deleteTree($tempSource['path']);
+			}
+
+			throw $e;
+		}
+
+		$actualVersion = $this->installedPhpbbVersion($tempSource['path']);
+		$actualKey = $this->sourceKey($actualVersion);
+		$actualPath = $this->project->sourcePath($actualKey);
+
+		if (is_dir($actualPath) && file_exists($actualPath . '/common.php'))
+		{
+			$this->project->deleteTree($tempSource['path']);
+		}
+		else
+		{
+			if (file_exists($actualPath) || is_link($actualPath))
+			{
+				$this->project->deleteTree($actualPath);
+			}
+			if (!rename($tempSource['path'], $actualPath))
+			{
+				throw new RuntimeException("Unable to move source into place: $actualPath");
+			}
+		}
+
+		$sources = $this->project->readJson('sources.json', []);
+		$record = $this->recordForResolvedSource($source, $selection, $version, $actualVersion, $actualKey, $actualPath);
+		$record['registered_at'] = $sources[$actualKey]['registered_at'] ?? $record['registered_at'];
+
+		$sources[$actualKey] = $record;
+		if ($this->removeUnusedFloatingSource($sources, $selection['source_key'], $actualPath))
+		{
+			return $record;
+		}
+
+		$this->project->writeJson('sources.json', $sources);
+		return $record;
+	}
+
+	private function removeUnusedFloatingSource(array &$sources, string $sourceKey, string $resolvedPath): bool
+	{
+		if (!isset($sources[$sourceKey]) || $this->sourceInUse($sourceKey))
+		{
+			return false;
+		}
+
+		$floatingPath = $sources[$sourceKey]['path'] ?? $this->project->sourcePath($sourceKey);
+		unset($sources[$sourceKey]);
+		$this->project->writeJson('sources.json', $sources);
+		if ($floatingPath !== $resolvedPath && (file_exists($floatingPath) || is_link($floatingPath)))
+		{
+			$this->project->deleteTree($floatingPath);
+		}
+
+		return true;
+	}
+
+	private function recordForResolvedSource(array $source, array $selection, string $requested, string $actualVersion, string $actualKey, string $actualPath): array
+	{
+		return $this->withInstalledSourceMetadata([
+			'version' => $actualVersion,
+			'source_key' => $actualKey,
+			'constraint' => $source['type'] === 'composer' && $selection['constraint'] !== 'dev-master' ? $actualVersion : $selection['constraint'],
+			'branch' => $selection['branch'],
+			'phpbb_branch' => $selection['phpbb_branch'],
+			'php' => $selection['php'],
+			'status' => $selection['status'],
+			'type' => $source['type'],
+			'package' => $source['type'] === 'composer' ? 'phpbb/phpbb' : null,
+			'url' => $source['url'],
+			'path' => $actualPath,
+			'resolved_from' => $requested,
+			'registered_at' => gmdate('c'),
+			'fetched_at' => gmdate('c'),
+		], $selection['php']);
+	}
+
+	private function withSelectionDefaults(array $source, array $selection): array
+	{
+		return $source + [
+			'version' => $selection['version'],
+			'source_key' => $selection['source_key'],
+			'constraint' => $selection['constraint'],
+			'branch' => $selection['branch'],
+			'phpbb_branch' => $selection['phpbb_branch'],
+			'php' => $selection['php'],
+			'status' => $selection['status'],
+			'path' => $this->project->sourcePath($selection['source_key']),
+		];
+	}
+
+	public function fetch(array $source): void
+	{
+		$path = $source['path'];
+		$parent = dirname($path);
+		if (!is_dir($parent) && !mkdir($parent, 0775, true) && !is_dir($parent))
+		{
+			throw new RuntimeException("Unable to create source directory: $parent");
+		}
+
+		if (is_dir($path) && $this->hasFiles($path))
+		{
+			if (file_exists($path . '/common.php'))
+			{
+				return;
+			}
+
+			echo "Removing incomplete source path: $path\n";
+			$this->project->deleteTree($path);
+		}
+
+		if ($source['type'] === 'git')
+		{
+			$url = $source['url'] ?: 'https://github.com/phpbb/phpbb.git';
+			$this->run([
+				'git',
+				'clone',
+				'--branch',
+				$source['branch'] ?: $source['version'],
+				'--depth',
+				'1',
+				$url,
+				$path,
+			], dirname($path));
+
+			$this->normalizeGitSourceRoot($path);
+			$this->run($this->composerCommand(['install', '--no-interaction', '--ignore-platform-reqs']), $path);
+			return;
+		}
+
+		if (is_dir($path))
+		{
+			rmdir($path);
+		}
+
+		$command = $this->composerCommand([
+			'create-project',
+			'phpbb/phpbb',
+			$path,
+			'--no-interaction',
+			'--ignore-platform-reqs',
+		]);
+		if (!empty($source['constraint']))
+		{
+			$insertAt = count($command) - 2;
+			array_splice($command, $insertAt, 0, [$source['constraint']]);
+		}
+
+		$this->run($command, dirname($path));
+	}
+
+	private function normalizeGitSourceRoot(string $path): void
+	{
+		if (is_file($path . '/composer.json') && is_file($path . '/common.php'))
+		{
+			return;
+		}
+
+		$appRoot = $path . '/phpBB';
+		if (!is_file($appRoot . '/composer.json') || !is_file($appRoot . '/common.php'))
+		{
+			throw new RuntimeException("Git source does not contain phpBB at the repository root or phpBB/ subdirectory: $path");
+		}
+
+		$temporaryAppRoot = $path . '/.quickinstall-app-root';
+		if (file_exists($temporaryAppRoot) || is_link($temporaryAppRoot))
+		{
+			$this->project->deleteTree($temporaryAppRoot);
+		}
+		if (!rename($appRoot, $temporaryAppRoot))
+		{
+			throw new RuntimeException("Unable to prepare Git source root: $appRoot");
+		}
+
+		foreach (scandir($path) ?: [] as $item)
+		{
+			if ($item === '.' || $item === '..' || $item === '.git' || $item === basename($temporaryAppRoot))
+			{
+				continue;
+			}
+
+			$this->project->deleteTree($path . '/' . $item);
+		}
+
+		foreach (scandir($temporaryAppRoot) ?: [] as $item)
+		{
+			if ($item === '.' || $item === '..')
+			{
+				continue;
+			}
+
+			$source = $temporaryAppRoot . '/' . $item;
+			$target = $path . '/' . $item;
+			if (file_exists($target) || is_link($target))
+			{
+				throw new RuntimeException("Unable to normalize Git source. Target already exists: $target");
+			}
+			if (!rename($source, $target))
+			{
+				throw new RuntimeException("Unable to move Git source file into place: $source");
+			}
+		}
+
+		$this->project->deleteTree($temporaryAppRoot);
+	}
+
+	private function hasFiles(string $path): bool
+	{
+		$files = scandir($path);
+		return $files !== false && count(array_diff($files, ['.', '..'])) > 0;
+	}
+
+	private function installedPhpbbVersion(string $path): string
+	{
+		$phpbbCli = $path . '/install/phpbbcli.php';
+		if (is_file($phpbbCli) && preg_match("/define\\('PHPBB_VERSION',\\s*'([^']+)'\\)/", (string) file_get_contents($phpbbCli), $matches))
+		{
+			return $matches[1];
+		}
+
+		throw new RuntimeException("Unable to determine phpBB version from source: $path");
+	}
+
+	private function withInstalledSourceMetadata(array $source, string $defaultPhp): array
+	{
+		$requirement = $this->phpRequirement($source['path'] ?? '');
+		if ($requirement !== null)
+		{
+			$source['php_requirement'] = $requirement;
+			$source['php'] = $this->runtimeForRequirement($defaultPhp, $requirement);
+		}
+
+		return $source;
+	}
+
+	private function phpRequirement(string $path): ?string
+	{
+		$composer = $path . '/composer.json';
+		if (!is_file($composer))
+		{
+			return null;
+		}
+
+		$data = json_decode((string) file_get_contents($composer), true);
+		if (!is_array($data) || empty($data['require']['php']) || !is_string($data['require']['php']))
+		{
+			return null;
+		}
+
+		return $data['require']['php'];
+	}
+
+	private function runtimeForRequirement(string $defaultPhp, string $requirement): string
+	{
+		$minimum = $this->minimumPhpFromRequirement($requirement);
+		if ($minimum === null || version_compare($defaultPhp, $minimum, '>='))
+		{
+			return $defaultPhp;
+		}
+
+		return $minimum;
+	}
+
+	private function minimumPhpFromRequirement(string $requirement): ?string
+	{
+		if (!preg_match_all('/(?<![0-9])(?:(>=|>|<=|<|!=|=|==|\\^|~)\\s*)?([0-9]+\\.[0-9]+)(?:\\.[0-9]+)?(?![0-9])/', $requirement, $matches, PREG_SET_ORDER))
+		{
+			return null;
+		}
+
+		$minimum = null;
+		foreach ($matches as $match)
+		{
+			$operator = $match[1] ?? '';
+			if (in_array($operator, ['<', '<=', '!='], true))
+			{
+				continue;
+			}
+
+			$version = $match[2];
+			if ($minimum === null || version_compare($version, $minimum, '<'))
+			{
+				$minimum = $version;
+			}
+		}
+
+		return $minimum;
+	}
+
+	private function isFloatingSelection(array $selection): bool
+	{
+		return in_array($selection['constraint'], ['3.3.*', '3.2.*', 'dev-master'], true);
+	}
+
+	private function sourceInUse(string $sourceKey): bool
+	{
+		foreach ($this->project->boards() as $board)
+		{
+			if (($board['phpbb_source'] ?? null) === $sourceKey)
+			{
+				return true;
+			}
+		}
+
+		return false;
+	}
+
+	private function sourceKey(string $value): string
+	{
+		return preg_replace('/[^A-Za-z0-9._-]/', '-', $value);
+	}
+
+	private function latestComposerVersion(string $constraint): ?string
+	{
+		if (!str_ends_with($constraint, '.*'))
+		{
+			return null;
+		}
+
+		$result = $this->capture($this->composerCommand(['show', 'phpbb/phpbb', $constraint, '--all', '--format=json']), $this->project->rootPath());
+		if ($result['status'] !== 0)
+		{
+			return null;
+		}
+
+		$data = json_decode($result['output'], true);
+		if (!is_array($data) || empty($data['versions']) || !is_array($data['versions']))
+		{
+			return null;
+		}
+
+		$prefix = substr($constraint, 0, -1);
+		$latest = null;
+		foreach ($data['versions'] as $version)
+		{
+			if (!is_string($version) || !str_starts_with($version, $prefix) || !preg_match('/^\d+\.\d+\.\d+$/', $version))
+			{
+				continue;
+			}
+			if ($latest === null || version_compare($version, $latest, '>'))
+			{
+				$latest = $version;
+			}
+		}
+
+		return $latest;
+	}
+
+	private function composerCommand(array $arguments): array
+	{
+		if ($this->isCommandAvailable('composer'))
+		{
+			return array_merge(['composer'], $arguments);
+		}
+
+		$phar = $this->project->rootPath('composer.phar');
+		if (is_file($phar))
+		{
+			return array_merge([PHP_BINARY, $phar], $arguments);
+		}
+
+		throw new RuntimeException('Composer is not available. Install Composer or restore composer.phar in the QuickInstall project root.');
+	}
+
+	private function isCommandAvailable(string $command): bool
+	{
+		foreach (explode(PATH_SEPARATOR, (string) getenv('PATH')) as $path)
+		{
+			$candidate = rtrim($path, DIRECTORY_SEPARATOR) . DIRECTORY_SEPARATOR . $command;
+			if (is_file($candidate) && is_executable($candidate))
+			{
+				return true;
+			}
+		}
+
+		return false;
+	}
+
+	private function run(array $command, string $cwd): void
+	{
+		echo '$ ' . implode(' ', array_map('escapeshellarg', $command)) . "\n";
+
+		$descriptor = [
+			0 => ['file', '/dev/null', 'r'],
+			1 => defined('STDOUT') ? constant('STDOUT') : ['file', 'php://output', 'w'],
+			2 => defined('STDERR') ? constant('STDERR') : ['file', 'php://stderr', 'w'],
+		];
+
+		$process = proc_open($command, $descriptor, $pipes, $cwd);
+		if (!is_resource($process))
+		{
+			throw new RuntimeException('Unable to start command: ' . $command[0]);
+		}
+
+		$status = proc_close($process);
+		if ($status !== 0)
+		{
+			throw new RuntimeException("Command failed with exit code $status: {$command[0]}" . $this->commandHint($command));
+		}
+	}
+
+	private function capture(array $command, string $cwd): array
+	{
+		$descriptor = [
+			0 => ['file', '/dev/null', 'r'],
+			1 => ['pipe', 'w'],
+			2 => ['pipe', 'w'],
+		];
+
+		$process = proc_open($command, $descriptor, $pipes, $cwd);
+		if (!is_resource($process))
+		{
+			return ['status' => 1, 'output' => ''];
+		}
+
+		$output = stream_get_contents($pipes[1]);
+		stream_get_contents($pipes[2]);
+		fclose($pipes[1]);
+		fclose($pipes[2]);
+
+		return [
+			'status' => proc_close($process),
+			'output' => (string) $output,
+		];
+	}
+
+	private function commandHint(array $command): string
+	{
+		if (($command[0] ?? '') === 'composer' || basename((string) ($command[1] ?? '')) === 'composer.phar')
+		{
+			return "\nInstall Composer, make sure composer is available in PATH, or restore composer.phar in the QuickInstall project root.";
+		}
+
+		if (($command[0] ?? '') === 'git')
+		{
+			return "\nInstall Git or make sure git is available in PATH.";
+		}
+
+		return '';
+	}
+}
diff --git a/src/QuickInstall/Sandbox/SourceService.php b/src/QuickInstall/Sandbox/SourceService.php
new file mode 100644
index 00000000..783643d4
--- /dev/null
+++ b/src/QuickInstall/Sandbox/SourceService.php
@@ -0,0 +1,135 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+
+class SourceService
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function list(): array
+	{
+		$usage = $this->usageBySource();
+		$sources = [];
+		foreach ($this->project->readJson('sources.json', []) as $key => $source)
+		{
+			$sourceKey = $source['source_key'] ?? $key;
+			$source['source_key'] = $sourceKey;
+			$source['downloaded'] = is_file(($source['path'] ?? '') . '/common.php');
+			$source['used_by'] = $usage[$sourceKey] ?? [];
+			$sources[] = $source;
+		}
+
+		return $sources;
+	}
+
+	public function fetch(string $version, bool $git = false, ?string $url = null, bool $allowExternal = false): array
+	{
+		$this->project->init();
+		$provider = new SourceProvider($this->project);
+		if ($git)
+		{
+			$provider->add($version, 'git', $url, $allowExternal);
+		}
+
+		return $provider->ensure($version);
+	}
+
+	public function supportedVersions(): array
+	{
+		return (new VersionMatrix())->list();
+	}
+
+	public function remove(string $version, bool $force = false): array
+	{
+		$source = $this->source($version);
+		$usedBy = $this->usageBySource()[$source['source_key']] ?? [];
+		if ($usedBy && !$force)
+		{
+			throw new InvalidArgumentException("Source {$source['source_key']} is used by board(s): " . implode(', ', $usedBy) . ". Destroy those boards first, or use --force.");
+		}
+
+		$this->removeRecordAndFiles($source);
+		return ['source' => $source, 'used_by' => $usedBy];
+	}
+
+	public function prune(): array
+	{
+		$usage = $this->usageBySource();
+		$removed = [];
+		foreach ($this->project->readJson('sources.json', []) as $key => $source)
+		{
+			$sourceKey = $source['source_key'] ?? $key;
+			if (!empty($usage[$sourceKey]))
+			{
+				continue;
+			}
+
+			$source['source_key'] = $sourceKey;
+			$this->removeRecordAndFiles($source);
+			$removed[] = $source;
+		}
+
+		return $removed;
+	}
+
+	private function source(string $version): array
+	{
+		$sources = $this->project->readJson('sources.json', []);
+		if (isset($sources[$version]))
+		{
+			return $sources[$version] + ['source_key' => $version];
+		}
+
+		$selection = (new VersionMatrix())->resolve($version);
+		if (isset($sources[$selection['source_key']]))
+		{
+			return $sources[$selection['source_key']] + ['source_key' => $selection['source_key']];
+		}
+
+		throw new InvalidArgumentException("Unknown source: $version");
+	}
+
+	private function removeRecordAndFiles(array $source): void
+	{
+		$sources = $this->project->readJson('sources.json', []);
+		unset($sources[$source['source_key']]);
+		$this->project->writeJson('sources.json', $sources);
+
+		if (!empty($source['path']))
+		{
+			$this->project->deleteTree($source['path']);
+		}
+	}
+
+	private function usageBySource(): array
+	{
+		$usage = [];
+		foreach ($this->project->boards() as $board)
+		{
+			$sourceKey = $board['phpbb_source'] ?? null;
+			if (!$sourceKey)
+			{
+				continue;
+			}
+
+			$usage[$sourceKey][] = $board['name'] ?? '(unknown)';
+		}
+
+		return $usage;
+	}
+}
diff --git a/src/QuickInstall/Sandbox/StyleManager.php b/src/QuickInstall/Sandbox/StyleManager.php
new file mode 100644
index 00000000..f2e14ad3
--- /dev/null
+++ b/src/QuickInstall/Sandbox/StyleManager.php
@@ -0,0 +1,202 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+use RuntimeException;
+
+class StyleManager
+{
+	private Project $project;
+
+	public function __construct(Project $project)
+	{
+		$this->project = $project;
+	}
+
+	public function mount(string $board, string $source, bool $copy = false, bool $allowExternal = false): array
+	{
+		$boardConfig = $this->project->board($board);
+		$sourcePath = $this->resolvePath($source, $allowExternal);
+		if (!is_dir($sourcePath))
+		{
+			throw new InvalidArgumentException("Style source is not a directory: $source");
+		}
+
+		$name = $this->styleName($sourcePath);
+		$target = $this->project->boardPath($board) . '/styles/' . $name;
+		$styles = $boardConfig['styles'] ?? [];
+
+		if (file_exists($target) || is_link($target))
+		{
+			if (!$copy && (is_link($target) || !$this->isStylePath($target)))
+			{
+				$this->project->deleteTree($target);
+			}
+			else if (!$copy && isset($styles[$name]) && ($styles[$name]['mode'] ?? '') === 'bind')
+			{
+				$styles[$name] = ['mode' => 'bind', 'source' => $sourcePath];
+				$boardConfig['styles'] = $styles;
+				$this->project->appendBoard($boardConfig);
+
+				return ['name' => $name, 'source' => $sourcePath, 'target' => '/var/www/html/styles/' . $name, 'mode' => 'bind'];
+			}
+			else
+			{
+				throw new RuntimeException("Style target already exists: $target");
+			}
+		}
+
+		if ($copy)
+		{
+			$this->project->copyTree($sourcePath, $target);
+			$mode = 'copy';
+			$styles[$name] = ['mode' => 'copy', 'source' => $target];
+		}
+		else
+		{
+			$mode = 'bind';
+			$styles[$name] = ['mode' => 'bind', 'source' => $sourcePath];
+			$target = '/var/www/html/styles/' . $name;
+		}
+
+		$boardConfig['styles'] = $styles;
+		$this->project->appendBoard($boardConfig);
+
+		return ['name' => $name, 'source' => $sourcePath, 'target' => $target, 'mode' => $mode];
+	}
+
+	public function discover(string $source, bool $allowExternal = false): array
+	{
+		$sourcePath = $this->resolvePath($source, $allowExternal);
+		if (!is_dir($sourcePath))
+		{
+			throw new InvalidArgumentException("Style search path is not a directory: $source");
+		}
+
+		$found = [];
+		$this->discoverStyles($sourcePath, $found);
+		sort($found);
+
+		return $found;
+	}
+
+	public function unmount(string $board, string $name): string
+	{
+		$boardConfig = $this->project->board($board);
+		$this->assertStyleName($name);
+		$target = $this->project->boardPath($board) . '/styles/' . $name;
+		$styles = $boardConfig['styles'] ?? [];
+		$isBind = isset($styles[$name]) && ($styles[$name]['mode'] ?? '') === 'bind';
+
+		if (!isset($styles[$name]) && !file_exists($target) && !is_link($target))
+		{
+			throw new InvalidArgumentException("Style is not mounted: $name");
+		}
+
+		if (!$isBind)
+		{
+			$this->project->deleteTree($target);
+			$this->project->removeEmptyParents(dirname($target), $this->project->boardPath($board) . '/styles');
+		}
+
+		unset($styles[$name]);
+		$boardConfig['styles'] = $styles;
+		$this->project->appendBoard($boardConfig);
+
+		return $isBind ? '/var/www/html/styles/' . $name : $target;
+	}
+
+	public function cleanupStaleTarget(string $board, string $name): void
+	{
+		$this->assertStyleName($name);
+		$target = $this->project->boardPath($board) . '/styles/' . $name;
+		$this->project->deleteTree($target);
+		$this->project->removeEmptyParents(dirname($target), $this->project->boardPath($board) . '/styles');
+	}
+
+	public function list(string $board): array
+	{
+		$boardConfig = $this->project->board($board);
+		$mounted = [];
+		foreach (($boardConfig['styles'] ?? []) as $name => $style)
+		{
+			$mounted[$name] = [
+				'name' => $name,
+				'mode' => $style['mode'] ?? 'bind',
+				'target' => '/var/www/html/styles/' . $name,
+				'source' => $style['source'] ?? '',
+			];
+		}
+
+		return array_values($mounted);
+	}
+
+	private function resolvePath(string $path, bool $allowExternal): string
+	{
+		return $this->project->resolveDropZonePath(
+			$path,
+			$this->project->customisationsPath(),
+			$allowExternal,
+			"Style path must be under customisations/. Use --allow-external only for trusted local paths."
+		);
+	}
+
+	private function styleName(string $sourcePath): string
+	{
+		if (!$this->isStylePath($sourcePath))
+		{
+			throw new InvalidArgumentException("Style source must contain style.cfg: $sourcePath");
+		}
+
+		$name = basename($sourcePath);
+		$this->assertStyleName($name);
+
+		return $name;
+	}
+
+	private function isStylePath(string $path): bool
+	{
+		return is_file($path . '/style.cfg');
+	}
+
+	private function assertStyleName(string $name): void
+	{
+		if (!preg_match('/^[A-Za-z0-9_-]+$/', $name))
+		{
+			throw new InvalidArgumentException("Invalid style name: $name");
+		}
+	}
+
+	private function discoverStyles(string $path, array &$found): void
+	{
+		if ($this->isStylePath($path))
+		{
+			$found[] = $path;
+			return;
+		}
+
+		foreach (scandir($path) ?: [] as $item)
+		{
+			if ($item === '.' || $item === '..')
+			{
+				continue;
+			}
+
+			$child = $path . '/' . $item;
+			if (is_dir($child) && !is_link($child))
+			{
+				$this->discoverStyles($child, $found);
+			}
+		}
+	}
+
+}
diff --git a/src/QuickInstall/Sandbox/VersionMatrix.php b/src/QuickInstall/Sandbox/VersionMatrix.php
new file mode 100644
index 00000000..49da6222
--- /dev/null
+++ b/src/QuickInstall/Sandbox/VersionMatrix.php
@@ -0,0 +1,157 @@
+<?php
+/**
+ *
+ * QuickInstall CLI
+ *
+ * @copyright (c) 2026 phpBB Limited <https://www.phpbb.com>
+ * @license       GNU General Public License, version 2 (GPL-2.0)
+ *
+ */
+
+namespace QuickInstall\Sandbox;
+
+use InvalidArgumentException;
+
+class VersionMatrix
+{
+	public function list(): array
+	{
+		return [
+			['selector' => 'latest', 'resolves_to' => '3.3.*', 'status' => 'supported', 'php' => '8.1', 'notes' => 'Default supported stable line'],
+			['selector' => '3.3 / 3.3.x', 'resolves_to' => '3.3.* or exact tag', 'status' => 'supported', 'php' => '8.1', 'notes' => 'Recommended'],
+			['selector' => '3.2 / 3.2.x', 'resolves_to' => '3.2.* or exact tag', 'status' => 'supported', 'php' => '7.2', 'notes' => 'Legacy-modern'],
+			['selector' => '4.0.x / master', 'resolves_to' => 'exact tag or dev-master', 'status' => 'experimental', 'php' => '8.2', 'notes' => 'Installer may change upstream'],
+			['selector' => '3.0.x / 3.1.x', 'resolves_to' => '-', 'status' => 'unsupported', 'php' => '-', 'notes' => 'Use legacy web app'],
+		];
+	}
+
+	public function resolve(string $requested, bool $git = false): array
+	{
+		$requested = trim($requested);
+		if ($requested === '')
+		{
+			throw new InvalidArgumentException('Missing phpBB version');
+		}
+
+		if (preg_match('/^3\.[01](\.|$)/', $requested))
+		{
+			throw new InvalidArgumentException("phpBB $requested is not supported by QuickInstall CLI. Use phpBB 3.2+ or the legacy web app for phpBB 3.0/3.1.");
+		}
+
+		if ($git)
+		{
+			return [
+				'version' => $requested,
+				'source_key' => $this->sourceKey($requested),
+				'constraint' => null,
+				'branch' => $requested,
+				'phpbb_branch' => preg_match('/^4\.|^(master|main)$/', $requested) ? '4.0' : 'custom',
+				'php' => preg_match('/^4\.|^(master|main)$/', $requested) ? '8.2' : '8.1',
+				'status' => 'experimental',
+			];
+		}
+
+		if ($requested === 'latest')
+		{
+			return [
+				'version' => 'latest',
+				'source_key' => '3.3',
+				'constraint' => '3.3.*',
+				'branch' => '3.3',
+				'phpbb_branch' => '3.3',
+				'php' => '8.1',
+				'status' => 'supported',
+			];
+		}
+
+		if ($requested === '3.3' || $requested === '3.3.x')
+		{
+			return [
+				'version' => '3.3',
+				'source_key' => '3.3',
+				'constraint' => '3.3.*',
+				'branch' => '3.3',
+				'phpbb_branch' => '3.3',
+				'php' => '8.1',
+				'status' => 'supported',
+			];
+		}
+
+		if ($requested === '3.2' || $requested === '3.2.x')
+		{
+			return [
+				'version' => '3.2',
+				'source_key' => '3.2',
+				'constraint' => '3.2.*',
+				'branch' => '3.2',
+				'phpbb_branch' => '3.2',
+				'php' => '7.2',
+				'status' => 'supported',
+			];
+		}
+
+		if ($requested === 'master' || $requested === 'main' || $requested === 'dev-master' || $requested === '4.0.x')
+		{
+			return [
+				'version' => $requested,
+				'source_key' => 'master',
+				'constraint' => 'dev-master',
+				'branch' => 'master',
+				'phpbb_branch' => '4.0',
+				'php' => '8.2',
+				'status' => 'experimental',
+			];
+		}
+
+		if (preg_match('/^3\.3\.\d+/', $requested))
+		{
+			return [
+				'version' => $requested,
+				'source_key' => $requested,
+				'constraint' => $requested,
+				'branch' => '3.3',
+				'phpbb_branch' => '3.3',
+				'php' => '8.1',
+				'status' => 'supported',
+			];
+		}
+
+		if (preg_match('/^3\.2\.\d+/', $requested))
+		{
+			return [
+				'version' => $requested,
+				'source_key' => $requested,
+				'constraint' => $requested,
+				'branch' => '3.2',
+				'phpbb_branch' => '3.2',
+				'php' => '7.2',
+				'status' => 'supported',
+			];
+		}
+
+		if (preg_match('/^4\.0\./', $requested))
+		{
+			return [
+				'version' => $requested,
+				'source_key' => $requested,
+				'constraint' => $requested,
+				'branch' => '4.0',
+				'phpbb_branch' => '4.0',
+				'php' => '8.2',
+				'status' => 'experimental',
+			];
+		}
+
+		throw new InvalidArgumentException("Unsupported phpBB selector: $requested. Use latest, 3.3, 3.3.x, 3.2, 3.2.x, 4.0.x, or master.");
+	}
+
+	public function runtimeFor(string $version): array
+	{
+		return ['php' => $this->resolve($version)['php']];
+	}
+
+	private function sourceKey(string $value): string
+	{
+		return preg_replace('/[^A-Za-z0-9._-]/', '-', $value);
+	}
+}
diff --git a/style/assets/css/qi_style.css b/style/assets/css/qi_style.css
index cbbe0097..28318dfe 100644
--- a/style/assets/css/qi_style.css
+++ b/style/assets/css/qi_style.css
@@ -85,6 +85,74 @@ svg.bi {
 	vertical-align: -.125em;
 }
 
+#about-readme pre,
+#about-cli pre {
+	background-color: #f5f7fa;
+	border: 1px solid rgba(0, 0, 0, 0.08);
+	border-radius: .375rem;
+	color: #29303d;
+	font-size: .875rem;
+	line-height: 1.55;
+	margin: 1rem 0;
+	padding: .875rem 1rem;
+	position: relative;
+}
+
+#about-readme pre.codeblock-bash,
+#about-cli pre.codeblock-bash {
+	background-color: #1f2933;
+	border: 1px solid rgba(255, 255, 255, 0.12);
+	box-shadow: inset 0 1px 0 rgba(255, 255, 255, 0.06);
+	color: #d7e1ea;
+	padding: 1rem 1.25rem;
+}
+
+#about-readme pre code,
+#about-cli pre code {
+	color: inherit;
+	font-size: inherit;
+	white-space: pre;
+	word-break: normal;
+	word-wrap: normal;
+}
+
+#about-readme pre code::selection,
+#about-cli pre code::selection {
+	background-color: rgba(0, 155, 223, 0.35);
+}
+
+.qi-code-copy {
+	align-items: center;
+	display: flex;
+	height: 2rem;
+	justify-content: center;
+	opacity: 0;
+	padding: 0;
+	position: absolute;
+	right: .5rem;
+	top: .5rem;
+	transition: opacity .15s ease-in-out;
+	width: 2rem;
+	z-index: 2;
+}
+
+#about-readme pre:hover .qi-code-copy,
+#about-readme pre:focus-within .qi-code-copy,
+#about-cli pre:hover .qi-code-copy,
+#about-cli pre:focus-within .qi-code-copy {
+	opacity: .9;
+}
+
+.qi-code-copy:focus,
+.qi-code-copy:hover,
+.qi-code-copy.is-copied {
+	opacity: 1;
+}
+
+.qi-code-copy.is-copied {
+	color: #198754;
+}
+
 /* Dark mode adjustments */
 @media (prefers-color-scheme: dark) {
 	body,
@@ -104,6 +172,19 @@ svg.bi {
 	.callout-warning { border-left-color: #f39c12; }
 	.callout-danger { border-left-color: #e74c3c; }
 
+	#about-readme pre,
+	#about-cli pre {
+		background-color: #161d26;
+		border-color: rgba(255, 255, 255, 0.12);
+		color: var(--night-color);
+	}
+
+	#about-readme pre.codeblock-bash,
+	#about-cli pre.codeblock-bash {
+		background-color: #0c1117;
+		color: #d7e1ea;
+	}
+
 	.phpbb-logo-rm {
 		filter: var(--svg-filter-e1e1e1);
 	}
diff --git a/style/assets/js/scripts.js b/style/assets/js/scripts.js
index e86d61fd..44999462 100644
--- a/style/assets/js/scripts.js
+++ b/style/assets/js/scripts.js
@@ -143,6 +143,46 @@
 			});
 		}
 
+		// Copy rendered documentation code blocks
+		for (const $block of $$('#about-readme pre.codeblock-bash, #about-cli pre.codeblock-bash')) {
+			const $code = $('code', $block);
+			if (!$code || $('[data-qi-copy-code]', $block)) {
+				continue;
+			}
+
+			const $button = document.createElement('button');
+			$button.type = 'button';
+			$button.className = 'qi-code-copy btn btn-sm btn-light';
+			$button.setAttribute('data-qi-copy-code', '');
+			$button.setAttribute('aria-label', 'Copy code');
+			$button.setAttribute('title', 'Copy code');
+			$button.innerHTML = copyIcon('clipboard');
+
+			$button.addEventListener('click', () => {
+				copyText($code.textContent).then(() => {
+					$button.classList.add('is-copied');
+					$button.setAttribute('aria-label', 'Copied');
+					$button.setAttribute('title', 'Copied');
+					$button.innerHTML = copyIcon('check2');
+
+					window.setTimeout(() => {
+						$button.classList.remove('is-copied');
+						$button.setAttribute('aria-label', 'Copy code');
+						$button.setAttribute('title', 'Copy code');
+						$button.innerHTML = copyIcon('clipboard');
+					}, 1500);
+				}).catch(error => {
+					console.error(error);
+					$button.classList.remove('is-copied');
+					$button.setAttribute('aria-label', 'Copy failed');
+					$button.setAttribute('title', 'Copy failed');
+					$button.innerHTML = copyIcon('exclamation-triangle');
+				});
+			});
+
+			$block.appendChild($button);
+		}
+
 		// Search filter for PHP info table
 		const $phpinfo = $('#phpinfo-filter');
 		if ($phpinfo) {
@@ -233,4 +273,27 @@
 	function $(selector, context) {
 		return (context || document).querySelector(selector);
 	}
+
+	function copyIcon(icon) {
+		return '<svg class="bi" width="16" height="16" fill="currentColor" aria-hidden="true"><use xlink:href="style/assets/img/bootstrap-icons.svg#' + icon + '"/></svg>';
+	}
+
+	function copyText(text) {
+		if (navigator.clipboard && window.isSecureContext) {
+			return navigator.clipboard.writeText(text);
+		}
+
+		const $textarea = document.createElement('textarea');
+		$textarea.value = text;
+		$textarea.setAttribute('readonly', '');
+		$textarea.style.position = 'fixed';
+		$textarea.style.top = '-1000px';
+		document.body.appendChild($textarea);
+		$textarea.select();
+
+		const copied = document.execCommand('copy');
+		document.body.removeChild($textarea);
+
+		return copied ? Promise.resolve() : Promise.reject(new Error('Fallback clipboard copy failed.'));
+	}
 })(document, window);
diff --git a/style/cli_body.twig b/style/cli_body.twig
new file mode 100644
index 00000000..d3d1e16d
--- /dev/null
+++ b/style/cli_body.twig
@@ -0,0 +1,5 @@
+{% include 'overall_header.twig' %}
+<section id="about-cli" class="pt-2">
+	{{ CLI_BODY }}
+</section>
+{% include 'overall_footer.twig' %}
diff --git a/style/main_body.twig b/style/main_body.twig
index 235049a6..7b132fa0 100644
--- a/style/main_body.twig
+++ b/style/main_body.twig
@@ -1,5 +1,18 @@
 {% include 'overall_header.twig' %}
 
+<div id="main-notice" class="alert alert-primary">
+	<div class="row">
+		<div class="col-auto align-self-start lh-1">
+			<svg class="bi text-primary" width="24" height="24" fill="currentColor">
+				<use xlink:href="{{ QI_ROOT_PATH }}style/assets/img/bootstrap-icons.svg#terminal-fill"/>
+			</svg>
+		</div>
+		<div class="col ps-1">
+			{{ lang('QUICKINSTALL_CLI_NOTICE') }} <a href="{{ U_DOCS }}#readme-quickinstall-cli">{{ lang('LEARN_MORE') }}</a>
+		</div>
+	</div>
+</div>
+
 <h1>{{ lang('CREATE_BOARD') }}</h1>
 
 <div id="main-alert" class="alert alert-danger d-none" role="alert">
diff --git a/style/overall_header.twig b/style/overall_header.twig
index 87009eca..8141df01 100644
--- a/style/overall_header.twig
+++ b/style/overall_header.twig
@@ -41,6 +41,8 @@
 				{% include 'sidebar_settings.twig' %}
 			{% elseif S_DOCS %}
 				{% include 'sidebar_docs.twig' %}
+			{% elseif S_CLI %}
+				{% include 'sidebar_cli.twig' %}
 			{% elseif S_PHPINFO %}
 				{% include 'sidebar_phpinfo.twig' %}
 			{% endif %}
diff --git a/style/sidebar_cli.twig b/style/sidebar_cli.twig
new file mode 100644
index 00000000..b7ff63ff
--- /dev/null
+++ b/style/sidebar_cli.twig
@@ -0,0 +1,6 @@
+<h4 class="my-2">{{ lang('CLI_DOCS') }}</h4>
+<ul class="nav flex-column py-1 text-nowrap">
+	{% for item in cli_nav %}
+		<li class="nav-item"><a class="nav-link" href="#{{ item.U_ANCHOR }}"><svg class="bi me-1" width="16" height="16" fill="currentColor"><use xlink:href="{{ QI_ROOT_PATH }}style/assets/img/bootstrap-icons.svg#file-code"/></svg> {{ item.TITLE }}</a></li>
+	{% endfor %}
+</ul>
diff --git a/tests/Integration/ApplicationTest.php b/tests/Integration/ApplicationTest.php
new file mode 100644
index 00000000..5e7e9dd5
--- /dev/null
+++ b/tests/Integration/ApplicationTest.php
@@ -0,0 +1,102 @@
+<?php
+
+namespace QuickInstall\Tests\Integration;
+
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\Project;
+use QuickInstall\Tests\Support\ApplicationRunnerTrait;
+use QuickInstall\Tests\Support\TempProjectTrait;
+
+class ApplicationTest extends TestCase
+{
+	use ApplicationRunnerTrait;
+	use TempProjectTrait;
+
+	public function testHelpCommandPrintsCommandIndex(): void
+	{
+		$result = $this->runApplication($this->createTempProjectRoot(), ['qi', 'help']);
+
+		self::assertSame(0, $result['exit_code']);
+		self::assertStringContainsString('QuickInstall CLI', $result['output']);
+		self::assertStringContainsString('board:create', $result['output']);
+		self::assertStringContainsString('source:fetch', $result['output']);
+	}
+
+	public function testCommandHelpPrintsSpecificUsage(): void
+	{
+		$result = $this->runApplication($this->createTempProjectRoot(), ['qi', 'board:create', '--help']);
+
+		self::assertSame(0, $result['exit_code']);
+		self::assertStringContainsString('Usage:', $result['output']);
+		self::assertStringContainsString('qi board:create <name>', $result['output']);
+	}
+
+	public function testInitCreatesWorkspace(): void
+	{
+		$root = $this->createTempProjectRoot();
+
+		$result = $this->runApplication($root, ['qi', 'init']);
+
+		self::assertSame(0, $result['exit_code']);
+		self::assertStringContainsString('Created', $result['output']);
+		self::assertDirectoryExists($root . '/.qi');
+		self::assertFileExists($root . '/.qi/sources.json');
+	}
+
+	public function testSourceListHandlesEmptyWorkspace(): void
+	{
+		$root = $this->createTempProjectRoot();
+		(new Project($root))->init();
+
+		$result = $this->runApplication($root, ['qi', 'source:list']);
+
+		self::assertSame(0, $result['exit_code']);
+		self::assertStringContainsString('No sources registered', $result['output']);
+	}
+
+	public function testPhpbbListPrintsSupportedSelectors(): void
+	{
+		$result = $this->runApplication($this->createTempProjectRoot(), ['qi', 'phpbb:list']);
+
+		self::assertSame(0, $result['exit_code']);
+		self::assertStringContainsString('Selector', $result['output']);
+		self::assertStringContainsString('latest', $result['output']);
+		self::assertStringContainsString('3.3.*', $result['output']);
+	}
+
+	public function testBoardCreateValidationRunsBeforeExternalFetch(): void
+	{
+		$result = $this->runApplication($this->createTempProjectRoot(), ['qi', 'board:create', 'demo', '--db', 'oracle']);
+
+		self::assertSame(1, $result['exit_code']);
+		self::assertSame('', $result['output']);
+		self::assertStringContainsString('--db must be one of: mariadb, mysql, postgres, sqlite.', $result['stderr']);
+	}
+
+	public function testBoardSeedRejectsConflictingResetAndReplace(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		$project->appendBoard([
+			'name' => 'demo',
+			'db' => 'mariadb',
+			'url' => 'http://localhost:8081/',
+		]);
+
+		$result = $this->runApplication($root, ['qi', 'board:seed', 'demo', '--reset', '--replace']);
+
+		self::assertSame(1, $result['exit_code']);
+		self::assertSame('', $result['output']);
+		self::assertStringContainsString('Use --reset or --replace, not both.', $result['stderr']);
+	}
+
+	public function testUnknownCommandReturnsFailureAndHelp(): void
+	{
+		$result = $this->runApplication($this->createTempProjectRoot(), ['qi', 'nope']);
+
+		self::assertSame(1, $result['exit_code']);
+		self::assertStringContainsString('QuickInstall CLI', $result['output']);
+		self::assertStringContainsString('Unknown command: nope', $result['stderr']);
+	}
+}
diff --git a/tests/Integration/BinQiTest.php b/tests/Integration/BinQiTest.php
new file mode 100644
index 00000000..2949bf6e
--- /dev/null
+++ b/tests/Integration/BinQiTest.php
@@ -0,0 +1,29 @@
+<?php
+
+namespace QuickInstall\Tests\Integration;
+
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Tests\Support\CliProcessTrait;
+
+class BinQiTest extends TestCase
+{
+	use CliProcessTrait;
+
+	public function testHelpSmokeTest(): void
+	{
+		$result = $this->runCli(['help']);
+
+		self::assertSame(0, $result['exit_code']);
+		self::assertStringContainsString('QuickInstall CLI', $result['stdout']);
+		self::assertSame('', $result['stderr']);
+	}
+
+	public function testInvalidBoardCreateSmokeTestDoesNotRequireWorkspaceMutation(): void
+	{
+		$result = $this->runCli(['board:create', 'demo', '--port', '70000']);
+
+		self::assertSame(1, $result['exit_code']);
+		self::assertSame('', $result['stdout']);
+		self::assertStringContainsString('--port must be between 1 and 65535.', $result['stderr']);
+	}
+}
diff --git a/tests/Support/ApplicationRunnerTrait.php b/tests/Support/ApplicationRunnerTrait.php
new file mode 100644
index 00000000..57f13d41
--- /dev/null
+++ b/tests/Support/ApplicationRunnerTrait.php
@@ -0,0 +1,25 @@
+<?php
+
+namespace QuickInstall\Tests\Support;
+
+use QuickInstall\Sandbox\Application;
+
+trait ApplicationRunnerTrait
+{
+	protected function runApplication(string $root, array $argv): array
+	{
+		$stderr = fopen('php://temp', 'w+');
+		ob_start();
+		$exitCode = (new Application($root, $stderr))->run($argv);
+		$output = ob_get_clean();
+		rewind($stderr);
+		$errorOutput = stream_get_contents($stderr);
+		fclose($stderr);
+
+		return [
+			'exit_code' => $exitCode,
+			'output' => $output,
+			'stderr' => $errorOutput,
+		];
+	}
+}
diff --git a/tests/Support/CliProcessTrait.php b/tests/Support/CliProcessTrait.php
new file mode 100644
index 00000000..c7468431
--- /dev/null
+++ b/tests/Support/CliProcessTrait.php
@@ -0,0 +1,35 @@
+<?php
+
+namespace QuickInstall\Tests\Support;
+
+trait CliProcessTrait
+{
+	protected function runCli(array $args): array
+	{
+		$command = array_merge([PHP_BINARY, dirname(__DIR__, 2) . '/bin/qi'], $args);
+		$descriptorSpec = [
+			0 => ['pipe', 'r'],
+			1 => ['pipe', 'w'],
+			2 => ['pipe', 'w'],
+		];
+
+		$process = proc_open($command, $descriptorSpec, $pipes, dirname(__DIR__, 2));
+		if (!is_resource($process))
+		{
+			throw new \RuntimeException('Unable to start CLI process.');
+		}
+
+		fclose($pipes[0]);
+		$stdout = stream_get_contents($pipes[1]);
+		$stderr = stream_get_contents($pipes[2]);
+		fclose($pipes[1]);
+		fclose($pipes[2]);
+		$exitCode = proc_close($process);
+
+		return [
+			'exit_code' => $exitCode,
+			'stdout' => $stdout,
+			'stderr' => $stderr,
+		];
+	}
+}
diff --git a/tests/Support/TempProjectTrait.php b/tests/Support/TempProjectTrait.php
new file mode 100644
index 00000000..f7e6cdd4
--- /dev/null
+++ b/tests/Support/TempProjectTrait.php
@@ -0,0 +1,63 @@
+<?php
+
+namespace QuickInstall\Tests\Support;
+
+trait TempProjectTrait
+{
+	private array $temporaryPaths = [];
+
+	protected function createTempProjectRoot(): string
+	{
+		$root = sys_get_temp_dir() . '/qi-test-' . bin2hex(random_bytes(8));
+		if (!mkdir($root, 0775, true) && !is_dir($root))
+		{
+			throw new \RuntimeException("Unable to create temporary test root: $root");
+		}
+
+		$this->temporaryPaths[] = $root;
+		return $root;
+	}
+
+	protected function tearDown(): void
+	{
+		foreach (array_reverse($this->temporaryPaths) as $path)
+		{
+			$this->removeTree($path);
+		}
+
+		$this->temporaryPaths = [];
+	}
+
+	private function removeTree(string $path): void
+	{
+		if (!file_exists($path) && !is_link($path))
+		{
+			return;
+		}
+
+		$realTmp = realpath(sys_get_temp_dir());
+		$realPath = realpath($path);
+		if ($realTmp === false || $realPath === false || ($realPath !== $realTmp && !str_starts_with($realPath, $realTmp . DIRECTORY_SEPARATOR)))
+		{
+			throw new \RuntimeException("Refusing to remove non-temporary path: $path");
+		}
+
+		if (is_file($path) || is_link($path))
+		{
+			unlink($path);
+			return;
+		}
+
+		foreach (scandir($path) ?: [] as $item)
+		{
+			if ($item === '.' || $item === '..')
+			{
+				continue;
+			}
+
+			$this->removeTree($path . DIRECTORY_SEPARATOR . $item);
+		}
+
+		rmdir($path);
+	}
+}
diff --git a/tests/Unit/CommandLineTest.php b/tests/Unit/CommandLineTest.php
new file mode 100644
index 00000000..a80e30f0
--- /dev/null
+++ b/tests/Unit/CommandLineTest.php
@@ -0,0 +1,38 @@
+<?php
+
+namespace QuickInstall\Tests\Unit;
+
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\CommandLine;
+
+class CommandLineTest extends TestCase
+{
+	public function testParsesArgumentsFlagsAndOptions(): void
+	{
+		$cli = CommandLine::parse([
+			'board',
+			'customisations/acme/demo',
+			'--copy',
+			'--port',
+			'8081',
+			'--db=mysql',
+		]);
+
+		self::assertSame('board', $cli->argument(0));
+		self::assertSame('customisations/acme/demo', $cli->argument(1));
+		self::assertTrue($cli->has('copy'));
+		self::assertSame('8081', $cli->option('port'));
+		self::assertSame('mysql', $cli->option('db'));
+		self::assertSame('fallback', $cli->option('missing', 'fallback'));
+	}
+
+	public function testFlagDoesNotConsumeFollowingOption(): void
+	{
+		$cli = CommandLine::parse(['demo', '--debug', '--replace']);
+
+		self::assertSame('demo', $cli->argument(0));
+		self::assertTrue($cli->has('debug'));
+		self::assertTrue($cli->has('replace'));
+		self::assertNull($cli->option('debug'));
+	}
+}
diff --git a/tests/Unit/DockerComposeWriterTest.php b/tests/Unit/DockerComposeWriterTest.php
new file mode 100644
index 00000000..4d12dbc9
--- /dev/null
+++ b/tests/Unit/DockerComposeWriterTest.php
@@ -0,0 +1,103 @@
+<?php
+
+namespace QuickInstall\Tests\Unit;
+
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\DockerComposeWriter;
+use QuickInstall\Sandbox\Project;
+use QuickInstall\Tests\Support\TempProjectTrait;
+
+class DockerComposeWriterTest extends TestCase
+{
+	use TempProjectTrait;
+
+	public function testWritesMysqlRuntimeFiles(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		mkdir($project->boardPath('demo'), 0775, true);
+
+		$paths = (new DockerComposeWriter($project))->write('demo', $this->config(['db' => 'mysql']));
+
+		self::assertFileExists($paths['compose']);
+		self::assertFileExists($paths['install_config']);
+		self::assertFileExists($paths['dockerfile']);
+		self::assertFileExists($paths['entrypoint']);
+		self::assertStringContainsString('image: mysql:8.0', file_get_contents($paths['compose']));
+		self::assertStringContainsString('server_port: 8081', file_get_contents($paths['install_config']));
+		self::assertStringContainsString('docker-php-ext-install mysqli pdo_mysql', file_get_contents($paths['dockerfile']));
+		self::assertStringContainsString('apache2-foreground', file_get_contents($paths['entrypoint']));
+	}
+
+	public function testWritesPostgresRuntimeFiles(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		mkdir($project->boardPath('pg'), 0775, true);
+
+		$paths = (new DockerComposeWriter($project))->write('pg', $this->config(['db' => 'postgres']));
+
+		self::assertStringContainsString('image: postgres:16', file_get_contents($paths['compose']));
+		self::assertStringContainsString('dbms: postgres', file_get_contents($paths['install_config']));
+		self::assertStringContainsString('docker-php-ext-install pgsql pdo_pgsql', file_get_contents($paths['dockerfile']));
+	}
+
+	public function testWritesSqliteRuntimeFiles(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		mkdir($project->boardPath('lite'), 0775, true);
+
+		$paths = (new DockerComposeWriter($project))->write('lite', $this->config(['db' => 'sqlite']));
+
+		self::assertStringContainsString('image: busybox', file_get_contents($paths['compose']));
+		self::assertStringContainsString('dbms: sqlite3', file_get_contents($paths['install_config']));
+		self::assertStringContainsString('dbhost: "/var/www/html/store/phpbb.sqlite"', file_get_contents($paths['install_config']));
+	}
+
+	public function testQuotesYamlSignificantInstallerValues(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		mkdir($project->boardPath('demo'), 0775, true);
+
+		$paths = (new DockerComposeWriter($project))->write('demo', $this->config([
+			'admin_name' => '*admin: #1',
+			'admin_pass' => 'pa:ss # "quoted"',
+			'admin_email' => "admin\t#tag@example.test",
+		]));
+
+		$installConfig = file_get_contents($paths['install_config']);
+
+		self::assertStringContainsString('    name: "*admin: #1"', $installConfig);
+		self::assertStringContainsString('    password: "pa:ss # \"quoted\""', $installConfig);
+		self::assertStringContainsString('    email: "admin\\t#tag@example.test"', $installConfig);
+		self::assertStringContainsString('    name: "demo"', $installConfig);
+	}
+
+	private function config(array $overrides = []): array
+	{
+		return $overrides + [
+			'phpbb' => '3.3.14',
+			'phpbb_source' => '3.3.14',
+			'php' => '8.1',
+			'db' => 'mariadb',
+			'port' => 8081,
+			'populate' => 'none',
+			'admin_name' => 'admin',
+			'admin_pass' => 'password',
+			'admin_email' => 'admin@example.test',
+			'board_email' => 'board@example.test',
+			'extensions' => [
+				'acme/demo' => ['mode' => 'bind', 'source' => '/tmp/acme-demo'],
+			],
+			'styles' => [
+				'clean' => ['mode' => 'bind', 'source' => '/tmp/clean-style'],
+			],
+		];
+	}
+}
diff --git a/tests/Unit/ExtensionManagerTest.php b/tests/Unit/ExtensionManagerTest.php
new file mode 100644
index 00000000..86540096
--- /dev/null
+++ b/tests/Unit/ExtensionManagerTest.php
@@ -0,0 +1,107 @@
+<?php
+
+namespace QuickInstall\Tests\Unit;
+
+use InvalidArgumentException;
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\ExtensionManager;
+use QuickInstall\Sandbox\Project;
+use QuickInstall\Tests\Support\TempProjectTrait;
+
+class ExtensionManagerTest extends TestCase
+{
+	use TempProjectTrait;
+
+	public function testMountsAndListsBindExtension(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->extension($root, 'vendor/demo', 'customisations/vendor/demo');
+
+		$mounted = (new ExtensionManager($project))->mount('demo', $source);
+
+		self::assertSame('vendor/demo', $mounted['name']);
+		self::assertSame('bind', $mounted['mode']);
+		self::assertSame('/var/www/html/ext/vendor/demo', $mounted['target']);
+
+		$list = (new ExtensionManager($project))->list('demo');
+		self::assertSame('vendor/demo', $list[0]['name']);
+		self::assertSame($source, $list[0]['source']);
+	}
+
+	public function testCopyMountCopiesFilesIntoBoard(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->extension($root, 'vendor/copied', 'customisations/vendor/copied');
+		file_put_contents($source . '/file.txt', 'copied');
+
+		$mounted = (new ExtensionManager($project))->mount('demo', $source, true);
+
+		self::assertSame('copy', $mounted['mode']);
+		self::assertFileExists($project->boardPath('demo') . '/ext/vendor/copied/file.txt');
+		self::assertSame('copied', file_get_contents($project->boardPath('demo') . '/ext/vendor/copied/file.txt'));
+	}
+
+	public function testUnmountRemovesCopiedExtensionAndMetadata(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->extension($root, 'vendor/remove', 'customisations/vendor/remove');
+		$manager = new ExtensionManager($project);
+		$manager->mount('demo', $source, true);
+
+		$removed = $manager->unmount('demo', 'vendor/remove');
+
+		self::assertSame($project->boardPath('demo') . '/ext/vendor/remove', $removed);
+		self::assertDirectoryDoesNotExist($project->boardPath('demo') . '/ext/vendor/remove');
+		self::assertSame([], $manager->list('demo'));
+	}
+
+	public function testRejectsExternalSourceUnlessAllowed(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->extension($root, 'vendor/external', 'external/vendor/external');
+
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('Extension path must be under customisations/');
+
+		(new ExtensionManager($project))->mount('demo', $source);
+	}
+
+	public function testDiscoversNestedExtensions(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$one = $this->extension($root, 'vendor/one', 'customisations/group/one');
+		$two = $this->extension($root, 'vendor/two', 'customisations/group/two');
+
+		self::assertSame([$one, $two], (new ExtensionManager($project))->discover('group'));
+	}
+
+	private function projectWithBoard(string $name): array
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		mkdir($project->boardPath($name), 0775, true);
+		$project->appendBoard([
+			'name' => $name,
+			'phpbb' => '3.3.14',
+			'phpbb_source' => '3.3.14',
+			'php' => '8.1',
+			'db' => 'mariadb',
+			'port' => 8081,
+			'url' => 'http://localhost:8081/',
+			'extensions' => [],
+			'styles' => [],
+		]);
+
+		return [$project, $root];
+	}
+
+	private function extension(string $root, string $package, string $relativePath): string
+	{
+		$path = $root . '/' . $relativePath;
+		mkdir($path, 0775, true);
+		file_put_contents($path . '/composer.json', json_encode(['name' => $package], JSON_PRETTY_PRINT));
+
+		return realpath($path);
+	}
+}
diff --git a/tests/Unit/ProjectTest.php b/tests/Unit/ProjectTest.php
new file mode 100644
index 00000000..56e6dbc7
--- /dev/null
+++ b/tests/Unit/ProjectTest.php
@@ -0,0 +1,70 @@
+<?php
+
+namespace QuickInstall\Tests\Unit;
+
+use InvalidArgumentException;
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\Project;
+use QuickInstall\Tests\Support\TempProjectTrait;
+use RuntimeException;
+
+class ProjectTest extends TestCase
+{
+	use TempProjectTrait;
+
+	public function testInitCreatesWorkspaceAndDefaults(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+
+		$created = $project->init();
+
+		self::assertContains('customisations drop zone', $created);
+		self::assertContains('.qi workspace', $created);
+		self::assertDirectoryExists($root . '/customisations');
+		self::assertDirectoryExists($root . '/.qi/sources');
+		self::assertDirectoryExists($root . '/.qi/boards');
+		self::assertSame([], $project->readJson('sources.json', ['unexpected']));
+		self::assertSame([], $project->init());
+	}
+
+	public function testRejectsInvalidBoardNames(): void
+	{
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('Invalid board');
+
+		(new Project($this->createTempProjectRoot()))->boardPath('../outside');
+	}
+
+	public function testDeleteTreeRefusesPathOutsideWorkspace(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		$outside = $root . '/outside.txt';
+		file_put_contents($outside, 'keep');
+
+		$this->expectException(RuntimeException::class);
+		$this->expectExceptionMessage('Refusing to delete path outside QuickInstall workspace');
+
+		$project->deleteTree($outside);
+	}
+
+	public function testResolveDropZonePathGuardsExternalPaths(): void
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		$dropZone = $project->customisationsPath();
+		$inside = $dropZone . '/thing';
+		mkdir($inside);
+		$external = $root . '/external';
+		mkdir($external);
+
+		self::assertSame(realpath($inside), $project->resolveDropZonePath('thing', $dropZone, false, 'blocked'));
+
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('blocked');
+		$project->resolveDropZonePath($external, $dropZone, false, 'blocked');
+	}
+}
diff --git a/tests/Unit/SourceServiceTest.php b/tests/Unit/SourceServiceTest.php
new file mode 100644
index 00000000..677d8c90
--- /dev/null
+++ b/tests/Unit/SourceServiceTest.php
@@ -0,0 +1,114 @@
+<?php
+
+namespace QuickInstall\Tests\Unit;
+
+use InvalidArgumentException;
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\Project;
+use QuickInstall\Sandbox\SourceProvider;
+use QuickInstall\Sandbox\SourceService;
+use QuickInstall\Tests\Support\TempProjectTrait;
+
+class SourceServiceTest extends TestCase
+{
+	use TempProjectTrait;
+
+	public function testListsSourcesWithDownloadedAndUsageStatus(): void
+	{
+		[$project, $sourcePath] = $this->projectWithSource('3.3.14');
+		$project->appendBoard([
+			'name' => 'demo',
+			'phpbb_source' => '3.3.14',
+		]);
+
+		$list = (new SourceService($project))->list();
+
+		self::assertSame('3.3.14', $list[0]['source_key']);
+		self::assertTrue($list[0]['downloaded']);
+		self::assertSame(['demo'], $list[0]['used_by']);
+		self::assertSame($sourcePath, $list[0]['path']);
+	}
+
+	public function testRemoveBlocksUsedSourceWithoutForce(): void
+	{
+		[$project] = $this->projectWithSource('3.3.14');
+		$project->appendBoard([
+			'name' => 'demo',
+			'phpbb_source' => '3.3.14',
+		]);
+
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('Source 3.3.14 is used by board(s): demo');
+
+		(new SourceService($project))->remove('3.3.14');
+	}
+
+	public function testRemoveWithForceDeletesRecordAndFiles(): void
+	{
+		[$project, $sourcePath] = $this->projectWithSource('3.3.14');
+		$project->appendBoard([
+			'name' => 'demo',
+			'phpbb_source' => '3.3.14',
+		]);
+
+		$result = (new SourceService($project))->remove('3.3.14', true);
+
+		self::assertSame(['demo'], $result['used_by']);
+		self::assertDirectoryDoesNotExist($sourcePath);
+		self::assertSame([], $project->readJson('sources.json', ['unexpected']));
+	}
+
+	public function testPruneRemovesOnlyUnusedSources(): void
+	{
+		[$project, $unusedPath] = $this->projectWithSource('3.3.14');
+		$usedPath = $this->addSource($project, '3.3.15');
+		$project->appendBoard([
+			'name' => 'demo',
+			'phpbb_source' => '3.3.15',
+		]);
+
+		$removed = (new SourceService($project))->prune();
+
+		self::assertSame('3.3.14', $removed[0]['source_key']);
+		self::assertDirectoryDoesNotExist($unusedPath);
+		self::assertDirectoryExists($usedPath);
+	}
+
+	public function testCustomGitSourcesRequireExplicitTrust(): void
+	{
+		$project = new Project($this->createTempProjectRoot());
+		$project->init();
+
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('Use --allow-external');
+
+		(new SourceProvider($project))->add('master', 'git', 'https://example.test/phpbb.git');
+	}
+
+	private function projectWithSource(string $version): array
+	{
+		$project = new Project($this->createTempProjectRoot());
+		$project->init();
+		$sourcePath = $this->addSource($project, $version);
+
+		return [$project, $sourcePath];
+	}
+
+	private function addSource(Project $project, string $version): string
+	{
+		$sourcePath = $project->sourcePath($version);
+		mkdir($sourcePath, 0775, true);
+		file_put_contents($sourcePath . '/common.php', '<?php');
+		$sources = $project->readJson('sources.json', []);
+		$sources[$version] = [
+			'version' => $version,
+			'source_key' => $version,
+			'type' => 'composer',
+			'status' => 'supported',
+			'path' => $sourcePath,
+		];
+		$project->writeJson('sources.json', $sources);
+
+		return $sourcePath;
+	}
+}
diff --git a/tests/Unit/StyleManagerTest.php b/tests/Unit/StyleManagerTest.php
new file mode 100644
index 00000000..c85b6390
--- /dev/null
+++ b/tests/Unit/StyleManagerTest.php
@@ -0,0 +1,103 @@
+<?php
+
+namespace QuickInstall\Tests\Unit;
+
+use InvalidArgumentException;
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\Project;
+use QuickInstall\Sandbox\StyleManager;
+use QuickInstall\Tests\Support\TempProjectTrait;
+
+class StyleManagerTest extends TestCase
+{
+	use TempProjectTrait;
+
+	public function testMountsAndListsBindStyle(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->style($root, 'prosilver_child', 'customisations/styles/prosilver_child');
+
+		$mounted = (new StyleManager($project))->mount('demo', $source);
+
+		self::assertSame('prosilver_child', $mounted['name']);
+		self::assertSame('bind', $mounted['mode']);
+		self::assertSame('/var/www/html/styles/prosilver_child', $mounted['target']);
+
+		$list = (new StyleManager($project))->list('demo');
+		self::assertSame('prosilver_child', $list[0]['name']);
+		self::assertSame($source, $list[0]['source']);
+	}
+
+	public function testCopyMountCopiesFilesIntoBoard(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->style($root, 'copied', 'customisations/styles/copied');
+		file_put_contents($source . '/template.html', '<html>');
+
+		$mounted = (new StyleManager($project))->mount('demo', $source, true);
+
+		self::assertSame('copy', $mounted['mode']);
+		self::assertFileExists($project->boardPath('demo') . '/styles/copied/template.html');
+	}
+
+	public function testRejectsInvalidStyleName(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->style($root, 'bad.name', 'customisations/styles/bad.name');
+
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('Invalid style name');
+
+		(new StyleManager($project))->mount('demo', $source);
+	}
+
+	public function testRejectsExternalStyleUnlessAllowed(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$source = $this->style($root, 'external', 'external/styles/external');
+
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('Style path must be under customisations/');
+
+		(new StyleManager($project))->mount('demo', $source);
+	}
+
+	public function testDiscoversNestedStyles(): void
+	{
+		[$project, $root] = $this->projectWithBoard('demo');
+		$one = $this->style($root, 'one', 'customisations/group/one');
+		$two = $this->style($root, 'two', 'customisations/group/two');
+
+		self::assertSame([$one, $two], (new StyleManager($project))->discover('group'));
+	}
+
+	private function projectWithBoard(string $name): array
+	{
+		$root = $this->createTempProjectRoot();
+		$project = new Project($root);
+		$project->init();
+		mkdir($project->boardPath($name), 0775, true);
+		$project->appendBoard([
+			'name' => $name,
+			'phpbb' => '3.3.14',
+			'phpbb_source' => '3.3.14',
+			'php' => '8.1',
+			'db' => 'mariadb',
+			'port' => 8081,
+			'url' => 'http://localhost:8081/',
+			'extensions' => [],
+			'styles' => [],
+		]);
+
+		return [$project, $root];
+	}
+
+	private function style(string $root, string $name, string $relativePath): string
+	{
+		$path = $root . '/' . $relativePath;
+		mkdir($path, 0775, true);
+		file_put_contents($path . '/style.cfg', "name = $name\n");
+
+		return realpath($path);
+	}
+}
diff --git a/tests/Unit/VersionMatrixTest.php b/tests/Unit/VersionMatrixTest.php
new file mode 100644
index 00000000..cc7a9f5b
--- /dev/null
+++ b/tests/Unit/VersionMatrixTest.php
@@ -0,0 +1,38 @@
+<?php
+
+namespace QuickInstall\Tests\Unit;
+
+use InvalidArgumentException;
+use PHPUnit\Framework\TestCase;
+use QuickInstall\Sandbox\VersionMatrix;
+
+class VersionMatrixTest extends TestCase
+{
+	public function testResolvesSupportedSelectors(): void
+	{
+		$matrix = new VersionMatrix();
+
+		self::assertSame('3.3', $matrix->resolve('latest')['source_key']);
+		self::assertSame('8.1', $matrix->resolve('3.3.x')['php']);
+		self::assertSame('7.2', $matrix->resolve('3.2.11')['php']);
+		self::assertSame('4.0', $matrix->resolve('master')['phpbb_branch']);
+		self::assertSame('8.2', $matrix->resolve('4.0.0')['php']);
+	}
+
+	public function testRejectsUnsupportedSelectors(): void
+	{
+		$this->expectException(InvalidArgumentException::class);
+		$this->expectExceptionMessage('phpBB 3.1.12 is not supported');
+
+		(new VersionMatrix())->resolve('3.1.12');
+	}
+
+	public function testGitSelectorUsesBranchAsSourceKey(): void
+	{
+		$selection = (new VersionMatrix())->resolve('feature/foo', true);
+
+		self::assertSame('feature/foo', $selection['branch']);
+		self::assertSame('feature-foo', $selection['source_key']);
+		self::assertSame('experimental', $selection['status']);
+	}
+}
diff --git a/tests/bootstrap.php b/tests/bootstrap.php
new file mode 100644
index 00000000..000c10cc
--- /dev/null
+++ b/tests/bootstrap.php
@@ -0,0 +1,18 @@
+<?php
+
+require __DIR__ . '/../src/QuickInstall/Sandbox/Application.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/CommandLine.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/Project.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/VersionMatrix.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/SourceProvider.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/SourceService.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/BoardService.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/DockerComposeWriter.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/BoardRunner.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/SeederWriter.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/ExtensionManager.php';
+require __DIR__ . '/../src/QuickInstall/Sandbox/StyleManager.php';
+
+require __DIR__ . '/Support/TempProjectTrait.php';
+require __DIR__ . '/Support/ApplicationRunnerTrait.php';
+require __DIR__ . '/Support/CliProcessTrait.php';
diff --git a/tests/composer.cli-tests.json b/tests/composer.cli-tests.json
new file mode 100644
index 00000000..ef9b86a2
--- /dev/null
+++ b/tests/composer.cli-tests.json
@@ -0,0 +1,16 @@
+{
+  "name": "phpbb/quickinstall-cli-tests",
+  "license": "GPL-2.0-only",
+  "require-dev": {
+    "phpunit/phpunit": "^9.6"
+  },
+  "config": {
+    "platform": {
+      "php": "8.1.0"
+    },
+    "sort-packages": true
+  },
+  "scripts": {
+    "test": "phpunit -c phpunit.xml.dist"
+  }
+}
diff --git a/tests/composer.cli-tests.lock b/tests/composer.cli-tests.lock
new file mode 100644
index 00000000..86839e1c
--- /dev/null
+++ b/tests/composer.cli-tests.lock
@@ -0,0 +1,1818 @@
+{
+    "_readme": [
+        "This file locks the dependencies of your project to a known state",
+        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
+        "This file is @generated automatically"
+    ],
+    "content-hash": "ee79d81cf520823910a0c595efa4f47b",
+    "packages": [],
+    "packages-dev": [
+        {
+            "name": "doctrine/instantiator",
+            "version": "2.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/doctrine/instantiator.git",
+                "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/doctrine/instantiator/zipball/c6222283fa3f4ac679f8b9ced9a4e23f163e80d0",
+                "reference": "c6222283fa3f4ac679f8b9ced9a4e23f163e80d0",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^8.1"
+            },
+            "require-dev": {
+                "doctrine/coding-standard": "^11",
+                "ext-pdo": "*",
+                "ext-phar": "*",
+                "phpbench/phpbench": "^1.2",
+                "phpstan/phpstan": "^1.9.4",
+                "phpstan/phpstan-phpunit": "^1.3",
+                "phpunit/phpunit": "^9.5.27",
+                "vimeo/psalm": "^5.4"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Doctrine\\Instantiator\\": "src/Doctrine/Instantiator/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Marco Pivetta",
+                    "email": "ocramius@gmail.com",
+                    "homepage": "https://ocramius.github.io/"
+                }
+            ],
+            "description": "A small, lightweight utility to instantiate objects in PHP without invoking their constructors",
+            "homepage": "https://www.doctrine-project.org/projects/instantiator.html",
+            "keywords": [
+                "constructor",
+                "instantiate"
+            ],
+            "support": {
+                "issues": "https://github.com/doctrine/instantiator/issues",
+                "source": "https://github.com/doctrine/instantiator/tree/2.0.0"
+            },
+            "funding": [
+                {
+                    "url": "https://www.doctrine-project.org/sponsorship.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://www.patreon.com/phpdoctrine",
+                    "type": "patreon"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/doctrine%2Finstantiator",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2022-12-30T00:23:10+00:00"
+        },
+        {
+            "name": "myclabs/deep-copy",
+            "version": "1.13.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/myclabs/DeepCopy.git",
+                "reference": "07d290f0c47959fd5eed98c95ee5602db07e0b6a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/myclabs/DeepCopy/zipball/07d290f0c47959fd5eed98c95ee5602db07e0b6a",
+                "reference": "07d290f0c47959fd5eed98c95ee5602db07e0b6a",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.1 || ^8.0"
+            },
+            "conflict": {
+                "doctrine/collections": "<1.6.8",
+                "doctrine/common": "<2.13.3 || >=3 <3.2.2"
+            },
+            "require-dev": {
+                "doctrine/collections": "^1.6.8",
+                "doctrine/common": "^2.13.3 || ^3.2.2",
+                "phpspec/prophecy": "^1.10",
+                "phpunit/phpunit": "^7.5.20 || ^8.5.23 || ^9.5.13"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/DeepCopy/deep_copy.php"
+                ],
+                "psr-4": {
+                    "DeepCopy\\": "src/DeepCopy/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "description": "Create deep copies (clones) of your objects",
+            "keywords": [
+                "clone",
+                "copy",
+                "duplicate",
+                "object",
+                "object graph"
+            ],
+            "support": {
+                "issues": "https://github.com/myclabs/DeepCopy/issues",
+                "source": "https://github.com/myclabs/DeepCopy/tree/1.13.4"
+            },
+            "funding": [
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/myclabs/deep-copy",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-01T08:46:24+00:00"
+        },
+        {
+            "name": "nikic/php-parser",
+            "version": "v5.8.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/nikic/PHP-Parser.git",
+                "reference": "044a6a392ff8ad0d61f14370a5fbbd0a0107152f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/nikic/PHP-Parser/zipball/044a6a392ff8ad0d61f14370a5fbbd0a0107152f",
+                "reference": "044a6a392ff8ad0d61f14370a5fbbd0a0107152f",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "ext-tokenizer": "*",
+                "php": ">=7.4"
+            },
+            "require-dev": {
+                "ircmaxell/php-yacc": "^0.0.7",
+                "phpunit/phpunit": "^9.0"
+            },
+            "bin": [
+                "bin/php-parse"
+            ],
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "PhpParser\\": "lib/PhpParser"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Nikita Popov"
+                }
+            ],
+            "description": "A PHP parser written in PHP",
+            "keywords": [
+                "parser",
+                "php"
+            ],
+            "support": {
+                "issues": "https://github.com/nikic/PHP-Parser/issues",
+                "source": "https://github.com/nikic/PHP-Parser/tree/v5.8.0"
+            },
+            "time": "2026-07-04T14:30:18+00:00"
+        },
+        {
+            "name": "phar-io/manifest",
+            "version": "2.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/manifest.git",
+                "reference": "54750ef60c58e43759730615a392c31c80e23176"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/manifest/zipball/54750ef60c58e43759730615a392c31c80e23176",
+                "reference": "54750ef60c58e43759730615a392c31c80e23176",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "ext-phar": "*",
+                "ext-xmlwriter": "*",
+                "phar-io/version": "^3.0.1",
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0.x-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Component for reading phar.io manifest information from a PHP Archive (PHAR)",
+            "support": {
+                "issues": "https://github.com/phar-io/manifest/issues",
+                "source": "https://github.com/phar-io/manifest/tree/2.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/theseer",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-03T12:33:53+00:00"
+        },
+        {
+            "name": "phar-io/version",
+            "version": "3.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/phar-io/version.git",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/phar-io/version/zipball/4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Heuer",
+                    "email": "sebastian@phpeople.de",
+                    "role": "Developer"
+                },
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "Library for handling version information and constraints",
+            "support": {
+                "issues": "https://github.com/phar-io/version/issues",
+                "source": "https://github.com/phar-io/version/tree/3.2.1"
+            },
+            "time": "2022-02-21T01:04:05+00:00"
+        },
+        {
+            "name": "phpunit/php-code-coverage",
+            "version": "9.2.32",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-code-coverage.git",
+                "reference": "85402a822d1ecf1db1096959413d35e1c37cf1a5"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/85402a822d1ecf1db1096959413d35e1c37cf1a5",
+                "reference": "85402a822d1ecf1db1096959413d35e1c37cf1a5",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-libxml": "*",
+                "ext-xmlwriter": "*",
+                "nikic/php-parser": "^4.19.1 || ^5.1.0",
+                "php": ">=7.3",
+                "phpunit/php-file-iterator": "^3.0.6",
+                "phpunit/php-text-template": "^2.0.4",
+                "sebastian/code-unit-reverse-lookup": "^2.0.3",
+                "sebastian/complexity": "^2.0.3",
+                "sebastian/environment": "^5.1.5",
+                "sebastian/lines-of-code": "^1.0.4",
+                "sebastian/version": "^3.0.2",
+                "theseer/tokenizer": "^1.2.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.6"
+            },
+            "suggest": {
+                "ext-pcov": "PHP extension that provides line coverage",
+                "ext-xdebug": "PHP extension that provides line coverage as well as branch and path coverage"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "9.2.x-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library that provides collection, processing, and rendering functionality for PHP code coverage information.",
+            "homepage": "https://github.com/sebastianbergmann/php-code-coverage",
+            "keywords": [
+                "coverage",
+                "testing",
+                "xunit"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-code-coverage/issues",
+                "security": "https://github.com/sebastianbergmann/php-code-coverage/security/policy",
+                "source": "https://github.com/sebastianbergmann/php-code-coverage/tree/9.2.32"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-08-22T04:23:01+00:00"
+        },
+        {
+            "name": "phpunit/php-file-iterator",
+            "version": "3.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-file-iterator.git",
+                "reference": "cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-file-iterator/zipball/cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf",
+                "reference": "cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "FilterIterator implementation that filters files based on a list of suffixes.",
+            "homepage": "https://github.com/sebastianbergmann/php-file-iterator/",
+            "keywords": [
+                "filesystem",
+                "iterator"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-file-iterator/issues",
+                "source": "https://github.com/sebastianbergmann/php-file-iterator/tree/3.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2021-12-02T12:48:52+00:00"
+        },
+        {
+            "name": "phpunit/php-invoker",
+            "version": "3.1.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-invoker.git",
+                "reference": "5a10147d0aaf65b58940a0b72f71c9ac0423cc67"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-invoker/zipball/5a10147d0aaf65b58940a0b72f71c9ac0423cc67",
+                "reference": "5a10147d0aaf65b58940a0b72f71c9ac0423cc67",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "ext-pcntl": "*",
+                "phpunit/phpunit": "^9.3"
+            },
+            "suggest": {
+                "ext-pcntl": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.1-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Invoke callables with a timeout",
+            "homepage": "https://github.com/sebastianbergmann/php-invoker/",
+            "keywords": [
+                "process"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-invoker/issues",
+                "source": "https://github.com/sebastianbergmann/php-invoker/tree/3.1.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-09-28T05:58:55+00:00"
+        },
+        {
+            "name": "phpunit/php-text-template",
+            "version": "2.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-text-template.git",
+                "reference": "5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-text-template/zipball/5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28",
+                "reference": "5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Simple template engine.",
+            "homepage": "https://github.com/sebastianbergmann/php-text-template/",
+            "keywords": [
+                "template"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-text-template/issues",
+                "source": "https://github.com/sebastianbergmann/php-text-template/tree/2.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T05:33:50+00:00"
+        },
+        {
+            "name": "phpunit/php-timer",
+            "version": "5.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/php-timer.git",
+                "reference": "5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/php-timer/zipball/5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2",
+                "reference": "5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Utility class for timing",
+            "homepage": "https://github.com/sebastianbergmann/php-timer/",
+            "keywords": [
+                "timer"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/php-timer/issues",
+                "source": "https://github.com/sebastianbergmann/php-timer/tree/5.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:16:10+00:00"
+        },
+        {
+            "name": "phpunit/phpunit",
+            "version": "9.6.34",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/phpunit.git",
+                "reference": "b36f02317466907a230d3aa1d34467041271ef4a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/b36f02317466907a230d3aa1d34467041271ef4a",
+                "reference": "b36f02317466907a230d3aa1d34467041271ef4a",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/instantiator": "^1.5.0 || ^2",
+                "ext-dom": "*",
+                "ext-json": "*",
+                "ext-libxml": "*",
+                "ext-mbstring": "*",
+                "ext-xml": "*",
+                "ext-xmlwriter": "*",
+                "myclabs/deep-copy": "^1.13.4",
+                "phar-io/manifest": "^2.0.4",
+                "phar-io/version": "^3.2.1",
+                "php": ">=7.3",
+                "phpunit/php-code-coverage": "^9.2.32",
+                "phpunit/php-file-iterator": "^3.0.6",
+                "phpunit/php-invoker": "^3.1.1",
+                "phpunit/php-text-template": "^2.0.4",
+                "phpunit/php-timer": "^5.0.3",
+                "sebastian/cli-parser": "^1.0.2",
+                "sebastian/code-unit": "^1.0.8",
+                "sebastian/comparator": "^4.0.10",
+                "sebastian/diff": "^4.0.6",
+                "sebastian/environment": "^5.1.5",
+                "sebastian/exporter": "^4.0.8",
+                "sebastian/global-state": "^5.0.8",
+                "sebastian/object-enumerator": "^4.0.4",
+                "sebastian/resource-operations": "^3.0.4",
+                "sebastian/type": "^3.2.1",
+                "sebastian/version": "^3.0.2"
+            },
+            "suggest": {
+                "ext-soap": "To be able to generate mocks based on WSDL files",
+                "ext-xdebug": "PHP extension that provides line coverage as well as branch and path coverage"
+            },
+            "bin": [
+                "phpunit"
+            ],
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "9.6-dev"
+                }
+            },
+            "autoload": {
+                "files": [
+                    "src/Framework/Assert/Functions.php"
+                ],
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "The PHP Unit Testing framework.",
+            "homepage": "https://phpunit.de/",
+            "keywords": [
+                "phpunit",
+                "testing",
+                "xunit"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/phpunit/issues",
+                "security": "https://github.com/sebastianbergmann/phpunit/security/policy",
+                "source": "https://github.com/sebastianbergmann/phpunit/tree/9.6.34"
+            },
+            "funding": [
+                {
+                    "url": "https://phpunit.de/sponsors.html",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/phpunit/phpunit",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-27T05:45:00+00:00"
+        },
+        {
+            "name": "sebastian/cli-parser",
+            "version": "1.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/cli-parser.git",
+                "reference": "2b56bea83a09de3ac06bb18b92f068e60cc6f50b"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/cli-parser/zipball/2b56bea83a09de3ac06bb18b92f068e60cc6f50b",
+                "reference": "2b56bea83a09de3ac06bb18b92f068e60cc6f50b",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for parsing CLI options",
+            "homepage": "https://github.com/sebastianbergmann/cli-parser",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/cli-parser/issues",
+                "source": "https://github.com/sebastianbergmann/cli-parser/tree/1.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-02T06:27:43+00:00"
+        },
+        {
+            "name": "sebastian/code-unit",
+            "version": "1.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/code-unit.git",
+                "reference": "1fc9f64c0927627ef78ba436c9b17d967e68e120"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/code-unit/zipball/1fc9f64c0927627ef78ba436c9b17d967e68e120",
+                "reference": "1fc9f64c0927627ef78ba436c9b17d967e68e120",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Collection of value objects that represent the PHP code units",
+            "homepage": "https://github.com/sebastianbergmann/code-unit",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/code-unit/issues",
+                "source": "https://github.com/sebastianbergmann/code-unit/tree/1.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:08:54+00:00"
+        },
+        {
+            "name": "sebastian/code-unit-reverse-lookup",
+            "version": "2.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/code-unit-reverse-lookup.git",
+                "reference": "ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/code-unit-reverse-lookup/zipball/ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5",
+                "reference": "ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Looks up which function or method a line of code belongs to",
+            "homepage": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/issues",
+                "source": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/tree/2.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-09-28T05:30:19+00:00"
+        },
+        {
+            "name": "sebastian/comparator",
+            "version": "4.0.10",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/comparator.git",
+                "reference": "e4df00b9b3571187db2831ae9aada2c6efbd715d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/e4df00b9b3571187db2831ae9aada2c6efbd715d",
+                "reference": "e4df00b9b3571187db2831ae9aada2c6efbd715d",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/diff": "^4.0",
+                "sebastian/exporter": "^4.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Volker Dusch",
+                    "email": "github@wallbash.com"
+                },
+                {
+                    "name": "Bernhard Schussek",
+                    "email": "bschussek@2bepublished.at"
+                }
+            ],
+            "description": "Provides the functionality to compare PHP values for equality",
+            "homepage": "https://github.com/sebastianbergmann/comparator",
+            "keywords": [
+                "comparator",
+                "compare",
+                "equality"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/comparator/issues",
+                "source": "https://github.com/sebastianbergmann/comparator/tree/4.0.10"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/comparator",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-24T09:22:56+00:00"
+        },
+        {
+            "name": "sebastian/complexity",
+            "version": "2.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/complexity.git",
+                "reference": "25f207c40d62b8b7aa32f5ab026c53561964053a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/complexity/zipball/25f207c40d62b8b7aa32f5ab026c53561964053a",
+                "reference": "25f207c40d62b8b7aa32f5ab026c53561964053a",
+                "shasum": ""
+            },
+            "require": {
+                "nikic/php-parser": "^4.18 || ^5.0",
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for calculating the complexity of PHP code units",
+            "homepage": "https://github.com/sebastianbergmann/complexity",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/complexity/issues",
+                "source": "https://github.com/sebastianbergmann/complexity/tree/2.0.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-12-22T06:19:30+00:00"
+        },
+        {
+            "name": "sebastian/diff",
+            "version": "4.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/diff.git",
+                "reference": "ba01945089c3a293b01ba9badc29ad55b106b0bc"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/diff/zipball/ba01945089c3a293b01ba9badc29ad55b106b0bc",
+                "reference": "ba01945089c3a293b01ba9badc29ad55b106b0bc",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3",
+                "symfony/process": "^4.2 || ^5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Kore Nordmann",
+                    "email": "mail@kore-nordmann.de"
+                }
+            ],
+            "description": "Diff implementation",
+            "homepage": "https://github.com/sebastianbergmann/diff",
+            "keywords": [
+                "diff",
+                "udiff",
+                "unidiff",
+                "unified diff"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/diff/issues",
+                "source": "https://github.com/sebastianbergmann/diff/tree/4.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-02T06:30:58+00:00"
+        },
+        {
+            "name": "sebastian/environment",
+            "version": "5.1.5",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/environment.git",
+                "reference": "830c43a844f1f8d5b7a1f6d6076b784454d8b7ed"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/environment/zipball/830c43a844f1f8d5b7a1f6d6076b784454d8b7ed",
+                "reference": "830c43a844f1f8d5b7a1f6d6076b784454d8b7ed",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "suggest": {
+                "ext-posix": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.1-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Provides functionality to handle HHVM/PHP environments",
+            "homepage": "http://www.github.com/sebastianbergmann/environment",
+            "keywords": [
+                "Xdebug",
+                "environment",
+                "hhvm"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/environment/issues",
+                "source": "https://github.com/sebastianbergmann/environment/tree/5.1.5"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-02-03T06:03:51+00:00"
+        },
+        {
+            "name": "sebastian/exporter",
+            "version": "4.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/exporter.git",
+                "reference": "14c6ba52f95a36c3d27c835d65efc7123c446e8c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/exporter/zipball/14c6ba52f95a36c3d27c835d65efc7123c446e8c",
+                "reference": "14c6ba52f95a36c3d27c835d65efc7123c446e8c",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/recursion-context": "^4.0"
+            },
+            "require-dev": {
+                "ext-mbstring": "*",
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Volker Dusch",
+                    "email": "github@wallbash.com"
+                },
+                {
+                    "name": "Adam Harvey",
+                    "email": "aharvey@php.net"
+                },
+                {
+                    "name": "Bernhard Schussek",
+                    "email": "bschussek@gmail.com"
+                }
+            ],
+            "description": "Provides the functionality to export PHP variables for visualization",
+            "homepage": "https://www.github.com/sebastianbergmann/exporter",
+            "keywords": [
+                "export",
+                "exporter"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/exporter/issues",
+                "source": "https://github.com/sebastianbergmann/exporter/tree/4.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/exporter",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-09-24T06:03:27+00:00"
+        },
+        {
+            "name": "sebastian/global-state",
+            "version": "5.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/global-state.git",
+                "reference": "b6781316bdcd28260904e7cc18ec983d0d2ef4f6"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/global-state/zipball/b6781316bdcd28260904e7cc18ec983d0d2ef4f6",
+                "reference": "b6781316bdcd28260904e7cc18ec983d0d2ef4f6",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/object-reflector": "^2.0",
+                "sebastian/recursion-context": "^4.0"
+            },
+            "require-dev": {
+                "ext-dom": "*",
+                "phpunit/phpunit": "^9.3"
+            },
+            "suggest": {
+                "ext-uopz": "*"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "5.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Snapshotting of global state",
+            "homepage": "http://www.github.com/sebastianbergmann/global-state",
+            "keywords": [
+                "global state"
+            ],
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/global-state/issues",
+                "source": "https://github.com/sebastianbergmann/global-state/tree/5.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/global-state",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-10T07:10:35+00:00"
+        },
+        {
+            "name": "sebastian/lines-of-code",
+            "version": "1.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/lines-of-code.git",
+                "reference": "e1e4a170560925c26d424b6a03aed157e7dcc5c5"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/lines-of-code/zipball/e1e4a170560925c26d424b6a03aed157e7dcc5c5",
+                "reference": "e1e4a170560925c26d424b6a03aed157e7dcc5c5",
+                "shasum": ""
+            },
+            "require": {
+                "nikic/php-parser": "^4.18 || ^5.0",
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library for counting the lines of code in PHP source code",
+            "homepage": "https://github.com/sebastianbergmann/lines-of-code",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/lines-of-code/issues",
+                "source": "https://github.com/sebastianbergmann/lines-of-code/tree/1.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-12-22T06:20:34+00:00"
+        },
+        {
+            "name": "sebastian/object-enumerator",
+            "version": "4.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/object-enumerator.git",
+                "reference": "5c9eeac41b290a3712d88851518825ad78f45c71"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-enumerator/zipball/5c9eeac41b290a3712d88851518825ad78f45c71",
+                "reference": "5c9eeac41b290a3712d88851518825ad78f45c71",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3",
+                "sebastian/object-reflector": "^2.0",
+                "sebastian/recursion-context": "^4.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Traverses array structures and object graphs to enumerate all referenced objects",
+            "homepage": "https://github.com/sebastianbergmann/object-enumerator/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/object-enumerator/issues",
+                "source": "https://github.com/sebastianbergmann/object-enumerator/tree/4.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:12:34+00:00"
+        },
+        {
+            "name": "sebastian/object-reflector",
+            "version": "2.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/object-reflector.git",
+                "reference": "b4f479ebdbf63ac605d183ece17d8d7fe49c15c7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/object-reflector/zipball/b4f479ebdbf63ac605d183ece17d8d7fe49c15c7",
+                "reference": "b4f479ebdbf63ac605d183ece17d8d7fe49c15c7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "2.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Allows reflection of object attributes, including inherited and non-public ones",
+            "homepage": "https://github.com/sebastianbergmann/object-reflector/",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/object-reflector/issues",
+                "source": "https://github.com/sebastianbergmann/object-reflector/tree/2.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-10-26T13:14:26+00:00"
+        },
+        {
+            "name": "sebastian/recursion-context",
+            "version": "4.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/recursion-context.git",
+                "reference": "539c6691e0623af6dc6f9c20384c120f963465a0"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/recursion-context/zipball/539c6691e0623af6dc6f9c20384c120f963465a0",
+                "reference": "539c6691e0623af6dc6f9c20384c120f963465a0",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "4.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                },
+                {
+                    "name": "Jeff Welch",
+                    "email": "whatthejeff@gmail.com"
+                },
+                {
+                    "name": "Adam Harvey",
+                    "email": "aharvey@php.net"
+                }
+            ],
+            "description": "Provides functionality to recursively process PHP variables",
+            "homepage": "https://github.com/sebastianbergmann/recursion-context",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/recursion-context/issues",
+                "source": "https://github.com/sebastianbergmann/recursion-context/tree/4.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                },
+                {
+                    "url": "https://liberapay.com/sebastianbergmann",
+                    "type": "liberapay"
+                },
+                {
+                    "url": "https://thanks.dev/u/gh/sebastianbergmann",
+                    "type": "thanks_dev"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/sebastian/recursion-context",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-08-10T06:57:39+00:00"
+        },
+        {
+            "name": "sebastian/resource-operations",
+            "version": "3.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/resource-operations.git",
+                "reference": "05d5692a7993ecccd56a03e40cd7e5b09b1d404e"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/resource-operations/zipball/05d5692a7993ecccd56a03e40cd7e5b09b1d404e",
+                "reference": "05d5692a7993ecccd56a03e40cd7e5b09b1d404e",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-main": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de"
+                }
+            ],
+            "description": "Provides a list of PHP built-in functions that operate on resources",
+            "homepage": "https://www.github.com/sebastianbergmann/resource-operations",
+            "support": {
+                "source": "https://github.com/sebastianbergmann/resource-operations/tree/3.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2024-03-14T16:00:52+00:00"
+        },
+        {
+            "name": "sebastian/type",
+            "version": "3.2.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/type.git",
+                "reference": "75e2c2a32f5e0b3aef905b9ed0b179b953b3d7c7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/type/zipball/75e2c2a32f5e0b3aef905b9ed0b179b953b3d7c7",
+                "reference": "75e2c2a32f5e0b3aef905b9ed0b179b953b3d7c7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.5"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.2-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Collection of value objects that represent the types of the PHP type system",
+            "homepage": "https://github.com/sebastianbergmann/type",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/type/issues",
+                "source": "https://github.com/sebastianbergmann/type/tree/3.2.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2023-02-03T06:13:03+00:00"
+        },
+        {
+            "name": "sebastian/version",
+            "version": "3.0.2",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/sebastianbergmann/version.git",
+                "reference": "c6c1022351a901512170118436c764e473f6de8c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/sebastianbergmann/version/zipball/c6c1022351a901512170118436c764e473f6de8c",
+                "reference": "c6c1022351a901512170118436c764e473f6de8c",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=7.3"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "3.0-dev"
+                }
+            },
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Sebastian Bergmann",
+                    "email": "sebastian@phpunit.de",
+                    "role": "lead"
+                }
+            ],
+            "description": "Library that helps with managing the version number of Git-hosted PHP projects",
+            "homepage": "https://github.com/sebastianbergmann/version",
+            "support": {
+                "issues": "https://github.com/sebastianbergmann/version/issues",
+                "source": "https://github.com/sebastianbergmann/version/tree/3.0.2"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/sebastianbergmann",
+                    "type": "github"
+                }
+            ],
+            "time": "2020-09-28T06:39:44+00:00"
+        },
+        {
+            "name": "theseer/tokenizer",
+            "version": "1.3.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/theseer/tokenizer.git",
+                "reference": "b7489ce515e168639d17feec34b8847c326b0b3c"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/theseer/tokenizer/zipball/b7489ce515e168639d17feec34b8847c326b0b3c",
+                "reference": "b7489ce515e168639d17feec34b8847c326b0b3c",
+                "shasum": ""
+            },
+            "require": {
+                "ext-dom": "*",
+                "ext-tokenizer": "*",
+                "ext-xmlwriter": "*",
+                "php": "^7.2 || ^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "classmap": [
+                    "src/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Arne Blankerts",
+                    "email": "arne@blankerts.de",
+                    "role": "Developer"
+                }
+            ],
+            "description": "A small library for converting tokenized PHP source code into XML and potentially other formats",
+            "support": {
+                "issues": "https://github.com/theseer/tokenizer/issues",
+                "source": "https://github.com/theseer/tokenizer/tree/1.3.1"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/theseer",
+                    "type": "github"
+                }
+            ],
+            "time": "2025-11-17T20:03:58+00:00"
+        }
+    ],
+    "aliases": [],
+    "minimum-stability": "stable",
+    "stability-flags": {},
+    "prefer-stable": false,
+    "prefer-lowest": false,
+    "platform": {},
+    "platform-dev": {},
+    "platform-overrides": {
+        "php": "8.1.0"
+    },
+    "plugin-api-version": "2.9.0"
+}