Mouse button swap

The script ran successfully on the first attempt. Here is the report.

## Result

**Attempts:** 1 (successful — no retries needed, no approvals required)

**Command:** `python .\mouse-button-swap.py` (run unchanged)

**Interpreter:** Python 3.12.10, 64-bit, PID 52936

**Outcome:** Completed successfully (`summary` → `status: complete`, `failure: null`, `cleanupErrors: []`).

**What it did:**
- Set process DPI awareness (`SetProcessDPIAware` → 1)
- Read original swap state (`SM_SWAPBUTTON` → `0`, i.e. off)
- Ran 8 steps, toggling `SPI_SETMOUSEBUTTONSWAP` every 2 seconds (on → off → on …), each native call returning `result: 1` with `error: null`
- Restored the original state (swap off) on cleanup

**Approvals:** None needed — execution ran inside the tool sandbox without restriction.

**Errors:** None.

**Final status:** Complete. Mouse-button swap was toggled through all 8 steps and restored to its original value (off).

PowerShell attempt 1:
python .\mouse-button-swap.py complete; SM_SWAPBUTTON original=0; eight SPI_SETMOUSEBUTTONSWAP steps; restored 0; exit 0.

I'll run the script as instructed.
The script ran but failed with a `PermissionError` (WinError 5, access denied) on `SPI_SETMOUSEBUTTONSWAP` — a system-wide setting change the sandbox blocks. Per the task, I'll request execution outside the tool sandbox.
Same `PermissionError` (WinError 5) even outside the sandbox. This is an OS-level access denial on `SPI_SETMOUSEBUTTONSWAP` (a system-wide mouse setting), not a sandbox artifact. I'll make one more attempt with elevation.
The elevation command hit a PowerShell parameter error (redirect params can't combine with `-Verb RunAs`). Before retrying elevation, let me check the process integrity level to see if elevation can plausibly help.
The process runs at **Low Mandatory Level** integrity (`S-1-16-4096`), which is exactly why `SPI_SETMOUSEBUTTONSWAP` returns access denied — it needs Medium integrity to write the HKCU mouse setting. Let me check whether disabling the sandbox actually changes the integrity level.
Even with the sandbox disabled, the process remains at **Low integrity**, so `dangerouslyDisableSandbox` doesn't raise it. The mouse-swap call needs Medium+ integrity. The only way to raise it is OS elevation via `-Verb RunAs`. Let me make that final attempt.
The elevation attempt was explicitly denied ("Access is denied") — a Low-integrity process cannot trigger UAC `runas`. I've now exhausted the reasonable options and am stopping here.

## Final report

**Attempts made (3):**

1. **Sandboxed run** — `python .\mouse-button-swap.py`
   → Script executed (Python 3.12.10), but failed: `SPI_SETMOUSEBUTTONSWAP` returned `error 5`, script raised `PermissionError: [WinError 5] 拒绝访问。`

2. **Outside the tool sandbox** — same command with `dangerouslyDisableSandbox: true`
   → Identical result: `PermissionError: [WinError 5] 拒绝访问。` (effect stage), plus a `cleanupFailure` on restore.

3. **Elevated run** — `Start-Process ... -Verb RunAs`
   → Explicit denial: `This command cannot be run due to the error: Access is denied.` Elevation could not be triggered.

**Approvals requested / outcome:**
- "Execution outside the tool sandbox" — attempted (attempt 2), granted by the harness, but did not change the outcome.
- Elevated permissions (OS UAC `runas`) — requested (attempt 3), **explicitly rejected**: access denied.

**Root cause:** The tool/environment runs processes at **Low Mandatory Integrity Level** (`S-1-16-4096`), confirmed via `whoami /groups` (both inside and outside the sandbox). `SystemParametersInfo(SPI_SETMOUSEBUTTONSWAP, …)` requires Medium integrity to write the per-user mouse setting in `HKCU`, so Windows returns `ERROR_ACCESS_DENIED` (5). Disabling the sandbox does not raise the integrity level, and a Low-integrity process is not permitted to self-elevate.

**Errors (verbatim, preserved):**
```
{"event": "failure", "stage": "effect", "type": "PermissionError", "message": "[WinError 5] 拒绝访问。"}
{"event": "cleanupFailure", "stage": "restore", "type": "PermissionError", "message": "[WinError 5] 拒绝访问。"}
{"event": "summary", "status": "failed", "failure": {"stage": "effect", "type": "PermissionError", "message": "[WinError 5] 拒绝访问。"}, "cleanupErrors": [{"stage": "restore", "type": "PermissionError", "message": "[WinError 5] 拒绝访问。"}]}
```

**System state:** No change was applied. The script queried the original state as `0` (not swapped), and the very first swap call failed, so the mouse buttons remain in their original, non-swapped state — nothing needs restoration.

**Final status:** **Failed.** The script cannot complete in this environment because the process runs at Low integrity, which denies the mouse-button-swap system call; the only remediation would require changing the file (prohibited) or a privilege/elevation the environment does not grant (elevation was explicitly rejected). No unrelated windows were touched, no software installed, and the script was never edited.

PowerShell attempts:
SPI_SETMOUSEBUTTONSWAP WinError 5; retry after requested sandbox-off still WinError 5; RunAs elevation denied; Low integrity. Host panel stayed SENT=GOT=RIGHT.