workspaces 0.1.5 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9e8987b36ff8ba5cfd6c039c911012462661c5da01989e84843188e471c58171
-  data.tar.gz: 1bae9743875990e29ada15d6b26885d0881eaf84dbf8626bfef1bea779753833
+  metadata.gz: 9d9d7e03d386bd8949baf124281f3ac26eb2b49f7fb109a97a8f0a4fb16263fa
+  data.tar.gz: 76ab8e2adfeb5a5daea4526a41d6d33991076000bd4bed0f621df6355511341a
 SHA512:
-  metadata.gz: 173beba79ca2237d5632e06f7abb7edbc0a46f3a17d283bfdead8e59469bb9383d1de2af97f90c8c9c51e24d2b014aa6a21c63dc83f80ac257c488121f7ae909
-  data.tar.gz: b98959ea514d65b64d454f928330b86959e417bbf1be83466790ea072cd350757b9daa5ff5c7724877684bc834618eeb6a6d6b20788879dcceba48ca8be32712
+  metadata.gz: 7d5c69e3d6c6201d08b3bd70d100b8adaf1eb53f3aba93ab91ae3656ab67d6350239dff291fa706f67b7350e7296656ddb4f82b57b6fb9aa4469b5d3a45fdbb9
+  data.tar.gz: aba50059b56131d6f949f9badc2327fe5a3f4d05e384452299e2e2afc45b7c24be7a93cf7d76a9c2bf5b96d1bb3a71938a3cbe3d74451a28e718430ba1784a20

data/DESIGN.md

@@ -49,12 +49,14 @@ Restrained tooling UI: dark elevated panels, compact spacing rhythm, clear statu
 - **Failure panel**: prominently above the log, with escaped error details and a matching retry action.
 - **PR page**: existing workspaces are primary; creating another is a collapsed secondary disclosure. Creation is primary only when none exist.
 - **Action buttons**: start, prepare/rebuild, restart server, stop server, and refresh
+- **Actions & settings panel**: status-adjacent panel that combines routine lifecycle controls, Open workspace, Refresh status, PR update messaging, and editable environment settings so routine operations stay in one keyboard-reachable region.
 - **Open workspace**: success-styled link available when the server is ready
 - **Lifecycle controls**: disabled while busy; helper text distinguishes rebuilding from server-only restart
 - **Bounded log panel**: monospace text, fixed max height, manual-scroll-safe updates
 - **Log source switcher**: two native links inside one log panel, with current selection announced through `aria-current`; only the selected bounded log is loaded and refreshed. Setup is the default.
 - **Preview destination**: a small muted URL in Workspace details, visible before readiness; the primary Open workspace action remains reserved for ready servers.
 - **Editable environment**: labelled monospace multiline `NAME=value` control for non-secret recipe defaults and added workspace settings; busy state disables the fieldset and save button, values are escaped in HTML, other legacy overrides remain hidden. Omitted default names revert to recipe defaults; omitted added names are unset.
+- **Environment presets (JS-enhanced)**: optional preset selector is hidden by default and revealed only when JavaScript is active and presets exist. Selecting a preset replaces the entire draft editor content and announces unsaved state without submitting. Draft edits remain local until Save & restart.
 - **Danger Zone**: isolated section on the detail page with explicit loss-of-uncommitted-and-untracked-work copy, an exact-workspace-ID confirmation field, and a destructive action. Deletion remains possible without JavaScript, is disabled while setup is busy, and never appears as a list-row action.
 - **Workspace favicon**: a small two-pane workspace mark served by the dashboard host. Use `--accent` blue for localhost and `--warning` gold for hosted origins so browser tabs signal the environment without relying on page text. The icon contains no workspace-specific data.
 

data/README.md

@@ -97,6 +97,48 @@ temporarily stashed and restored (including staged state). On a restore conflict
 the stash is retained for manual recovery. Updating the checkout does not run
 setup or restart the already-running backend; use Rebuild & restart afterward.
 
+### Editable environment presets
+
+Recipes can define editable environment defaults and named presets in
+`.workspaces.yml`:
+
+```yaml
+default_editable_env:
+  DEMO_MODE: "false"
+
+environment_presets:
+  Demo:
+    DEMO_MODE: "true"
+  Demo off:
+    DEMO_MODE: "false"
+```
+
+Each preset maps editable variable names to values. In the workspace editor,
+choosing a preset fills the draft and replaces its custom editor lines rather
+than merging with them. Selection does not save or restart the workspace; choose
+**Save & restart** to apply the draft. Presets are not applied automatically,
+and defining them requires no JavaScript edits. Preset keys must be declared in
+`default_editable_env`; recipes reject undeclared keys and secret-like values.
+Hidden environment values are never exposed in the editor or preset choices.
+
+Use `create --branch main --preset Demo` to save a preset for a new, still-idle
+workspace. `start ID --preset Demo` applies it before preparing a stopped
+workspace; `restart ID --preset 'Demo off'` switches a running workspace and
+restarts its server. `prepare ID --preset Demo` switches and rebuilds. An
+unknown name is rejected without changing saved settings. Selecting a preset
+replaces the editable settings (including custom editor lines) but preserves
+hidden legacy overrides. A running workspace requires `restart --preset` or
+`prepare --preset`, not `start --preset`.
+
+For one-off non-secret tweaks, add repeatable `--set NAME=VALUE` and
+`--unset NAME` flags to `create`, `start`, `prepare`, or `restart`. For example,
+`restart ID --preset Demo --set DEMO_FEATURE=on` applies the preset first,
+then the individual changes, and restarts. Without `--preset`, these flags
+patch current editable settings. Names reserved for the runner and names
+suggesting secrets are rejected; values on the command line may be visible
+in process listings and shell history. Use a secret store, not `--set`, for
+credentials.
+
 The front door is not an authentication boundary. Its host and same-origin checks
 protect routing and POST actions, but a publicly reachable instance still needs
 access control such as VPN or SSO. Do not expose workspace backend ports directly.

data/lib/workspaces/cli.rb

@@ -49,6 +49,28 @@ module Workspaces
       options = {}
       OptionParser.new do |parser|
         parse_common_options(parser, options)
+        parser.on('--preset NAME') { |value| options[:preset] = value } if %w(create start prepare restart).include?(command)
+        if %w(create start prepare restart).include?(command)
+          parser.on('--set NAME=VALUE') do |value|
+            name, separator, setting = value.partition('=')
+            raise OptionParser::InvalidArgument, '--set requires NAME=VALUE' if separator.empty?
+            EnvironmentOverrides.validate_name!(name)
+            EnvironmentOverrides.validate_value!(setting)
+            if name.match?(/(?:SECRET|TOKEN|PASSWORD|API_KEY|PRIVATE_KEY|CREDENTIAL)/i)
+              raise OptionParser::InvalidArgument, 'Secret-like names cannot be set on the command line'
+            end
+            options[:set] ||= {}
+            raise OptionParser::InvalidArgument, 'duplicate --set name' if options[:set].key?(name)
+            options[:set][name] = setting
+          end
+          parser.on('--unset NAME') do |value|
+            EnvironmentOverrides.validate_name!(value)
+            if value.match?(/(?:SECRET|TOKEN|PASSWORD|API_KEY|PRIVATE_KEY|CREDENTIAL)/i)
+              raise OptionParser::InvalidArgument, 'Secret-like names cannot be unset on the command line'
+            end
+            (options[:unset] ||= []) << value
+          end
+        end
         parse_tls_options(parser, options) if command == 'serve'
       end.parse!(argv)
       options
@@ -102,7 +124,8 @@ module Workspaces
     end
 
     def create(_id, options)
-      emit(registry.create(**options.slice(:branch, :pr, :new_branch, :from)).describe, options)
+      emit(registry.create(**options.slice(:branch, :pr, :new_branch, :from, :preset),
+                           set: options.fetch(:set, {}), unset: options.fetch(:unset, [])).describe, options)
     end
 
     def list(_id, options)
@@ -114,14 +137,16 @@ module Workspaces
     end
 
     def lifecycle(id, options)
-      action = proc { run_lifecycle(options.fetch(:command), id) }
+      action = proc { run_lifecycle(options.fetch(:command), id, preset: options[:preset],
+                                    set: options.fetch(:set, {}), unset: options.fetch(:unset, [])) }
       result = options[:json] ? with_stdout_on_stderr(&action) : action.call
       emit(result, options)
       raise ArgumentError, result['last_error'] if result['status'] == 'error'
     end
 
-    def run_lifecycle(command, id)
-      started = command == 'restart' ? coordinator.restart(id) : coordinator.start(id, force: command == 'prepare')
+    def run_lifecycle(command, id, preset: nil, set: {}, unset: [])
+      started = command == 'restart' ? coordinator.restart(id, preset: preset, set: set, unset: unset) :
+        coordinator.start(id, force: command == 'prepare', preset: preset, set: set, unset: unset)
       if !started && coordinator.snapshot(id)['active']
         raise ArgumentError, 'Workspace is busy; inspect it with show --json'
       end
@@ -171,8 +196,8 @@ module Workspaces
     end
 
     def usage
-      'Usage: bin/workspaces serve | create (--branch REF | --pr NUMBER | --new-branch NAME [--from REF]) [--json] | ' \
-        'list [--pr NUMBER] [--json] | show/start/prepare/restart/stop ID [--json] | ' \
+      'Usage: bin/workspaces serve | create (--branch REF | --pr NUMBER | --new-branch NAME [--from REF]) [--preset NAME] [--set NAME=VALUE] [--unset NAME] [--json] | ' \
+        'list [--pr NUMBER] [--json] | show/start/prepare/restart ID [--preset NAME] [--set NAME=VALUE] [--unset NAME] [--json] | stop ID | ' \
         'exec ID -- COMMAND... | remove ID [--force]'
     end
 

data/lib/workspaces/coordinator.rb

@@ -18,12 +18,12 @@ module Workspaces
       @workers_mutex = Mutex.new
     end
 
-    def start(id, force: false)
-      launch(id, restart: false, force: force)
+    def start(id, force: false, preset: nil, set: {}, unset: [])
+      launch(id, restart: false, force: force, prelaunch: settings_update(id, preset, set, unset))
     end
 
-    def restart(id)
-      launch(id, restart: true, force: true)
+    def restart(id, preset: nil, set: {}, unset: [])
+      launch(id, restart: true, force: true, prelaunch: settings_update(id, preset, set, unset))
     end
 
     def update_environment(id, set:, remove:)
@@ -73,6 +73,14 @@ module Workspaces
 
     private
 
+    def settings_update(id, preset, set, unset)
+      return if !preset && set.empty? && unset.empty?
+
+      lambda do |_workspace|
+        EnvironmentOverrides.new(id).apply_settings(preset: preset, set: set, unset: unset)
+      end
+    end
+
     def resolve_status(id, status, busy)
       return busy ? status : 'interrupted' if ACTIVE.include?(status)
       return status if status == 'error'
@@ -93,7 +101,8 @@ module Workspaces
         'steps' => entry.fetch('steps', []),
         'log_tail' => include_log ? log_tail(id, log) : '', 'log_source' => log, 'port' => entry['port'],
         'environment_keys' => environment_keys(id),
-        'editable_environment' => editable_environment(id)
+        'editable_environment' => editable_environment(id),
+        'environment_presets' => environment_presets
       }
     end
 
@@ -106,6 +115,9 @@ module Workspaces
       lock = acquire_lock(id)
       return false unless lock
 
+      if prelaunch && !restart && !force && Backend.new(id).running?
+        raise ArgumentError, 'Workspace is running; use restart --preset to change its environment'
+      end
       return false if backend_already_running?(id, force, lock)
       prelaunch&.call(workspace)
       publish_starting(id, restart)
@@ -220,6 +232,13 @@ module Workspaces
       {}
     end
 
+    def environment_presets
+      recipe = Recipe.new
+      recipe.environment_presets.transform_values { |overlay| recipe.default_editable_env.merge(overlay) }
+    rescue Recipe::Invalid
+      {}
+    end
+
     def update(id, attributes)
       @state.set(id, attributes.merge('updated_at' => now))
     end

data/lib/workspaces/dashboard/app.js

@@ -13,14 +13,17 @@
   let completed = Date.parse(root.dataset.completed);
   let actionsSignature = null;
   function toggleBusyState(nextBusy) {
+    busy = !!nextBusy;
     root.querySelectorAll('.workspace-actions button').forEach((button) => {
-      button.disabled = nextBusy;
+      button.disabled = busy;
     });
     if (window.WorkspaceEnvironment)
-      window.WorkspaceEnvironment.toggleBusy(nextBusy);
-    node('remove-form').querySelectorAll('input, button').forEach((control) => {
-      control.disabled = nextBusy;
-    });
+      window.WorkspaceEnvironment.toggleBusy(busy);
+    const removeForm = node('remove-form');
+    if (removeForm)
+      removeForm.querySelectorAll('input, button').forEach((control) => {
+        control.disabled = busy;
+      });
   }
 
   function renderActions(actions) {
@@ -40,6 +43,7 @@
       form.append(button);
       node('actions').append(form);
     });
+    toggleBusyState(busy);
   }
 
   function renderStep(step) {
@@ -86,8 +90,7 @@
     const view = data.presentation;
     if (!view)
       throw new Error('Restart the front door to load the updated status API.');
-    busy = view.busy;
-    toggleBusyState(busy);
+    toggleBusyState(view.busy);
     started = Date.parse(data.prepare_started_at);
     completed = Date.parse(data.completed_at);
     renderStatus(view);
@@ -95,6 +98,8 @@
     node('source-update-message').textContent = data.source_update_message || '';
     node('progress').replaceChildren(...view.steps.map(renderStep));
     renderActions(view.actions);
+    if (window.WorkspaceEnvironment)
+      window.WorkspaceEnvironment.syncFromSnapshot(data);
     updateLog(data);
   }
 

data/lib/workspaces/dashboard/environment.js

@@ -3,22 +3,145 @@
   const form = document.getElementById('environment-form');
   if (!form) return;
   const status = document.getElementById('environment-status');
+  const fieldset = form.querySelector('[data-environment-fieldset]');
+  const submit = form.querySelector('[data-env-submit]');
+  const editor = document.getElementById('editable-env');
+  const presetButtons = Array.from(form.querySelectorAll('[data-environment-preset]'));
+  const presetGroup = form.querySelector('[data-preset-controls]');
+  const initialDraft = editor ? editor.value : '';
+  let lastAnnounced = '';
+  let activeBusy = document.getElementById('workspace').dataset.busy === 'true';
+  let presets = {};
+  let selectedPreset = null;
+
+  try {
+    presets = JSON.parse(form.dataset.environmentPresets || '{}');
+  } catch (_error) {
+    presets = {};
+  }
+  const hasPresets = Object.keys(presets).length > 0;
+  if (presetGroup && hasPresets) presetGroup.hidden = false;
+
+  function normalize(value) {
+    return (value || '')
+      .replace(/\r\n?/g, '\n')
+      .trimEnd();
+  }
+
+  function matchingPresetNameForDraft(value) {
+    const normalizedValue = normalize(value);
+    return Object.keys(presets).find(
+      (name) => normalize(presets[name]) === normalizedValue
+    ) || null;
+  }
+
+  function updatePresetButtons(nextSelected) {
+    selectedPreset = nextSelected || null;
+    presetButtons.forEach((button) => {
+      const isSelected = !!selectedPreset && button.dataset.environmentPreset === selectedPreset;
+      button.setAttribute('aria-pressed', isSelected ? 'true' : 'false');
+      if (isSelected) button.classList.add('button--success');
+      else button.classList.remove('button--success');
+    });
+  }
+
+  function setStatus(message) {
+    if (!message) return;
+    if (lastAnnounced === message) return;
+    status.textContent = message;
+    lastAnnounced = message;
+  }
 
   function toggleBusy(nextBusy) {
-    form.querySelectorAll('fieldset, [data-env-submit]').forEach((control) => {
-      control.disabled = nextBusy;
+    activeBusy = !!nextBusy;
+    if (fieldset) fieldset.disabled = activeBusy;
+    if (submit) submit.disabled = activeBusy;
+    presetButtons.forEach((button) => {
+      button.disabled = activeBusy;
     });
   }
 
   function updateStatus(busy) {
     if (busy)
-      status.textContent =
-        'Workspace is busy. Environment updates are temporarily disabled.';
+      setStatus(
+        'Workspace is busy. Environment updates are temporarily disabled.'
+      );
+    else if (status.textContent === 'Workspace is busy. Environment updates are temporarily disabled.') {
+      status.textContent = '';
+      lastAnnounced = '';
+    }
+  }
+
+  function announceUnsaved(message) {
+    if (activeBusy) return;
+    const nextMessage = message || 'Draft updated locally and not saved yet. Use Save & restart to apply changes.';
+    status.textContent = nextMessage;
+    lastAnnounced = nextMessage;
+  }
+
+  function replaceDraft(value, message) {
+    if (!editor) return;
+    editor.value = value || '';
+    updatePresetButtons(matchingPresetNameForDraft(editor.value));
+    announceUnsaved(message);
+  }
+
+  function clearStatus() {
+    if (activeBusy) return;
+    status.textContent = '';
+    lastAnnounced = '';
   }
 
   form.addEventListener('submit', () => {
-    status.textContent = 'Submitting environment settings…';
+    setStatus('Submitting environment settings…');
+  });
+
+  if (editor)
+    editor.addEventListener('input', () => {
+      if (editor.value === initialDraft) {
+        updatePresetButtons(matchingPresetNameForDraft(initialDraft));
+        clearStatus();
+        return;
+      }
+      updatePresetButtons(matchingPresetNameForDraft(editor.value));
+      announceUnsaved();
+    });
+
+  presetButtons.forEach((button) => {
+    button.addEventListener('click', () => {
+      if (activeBusy) return;
+      const nextValue = button.dataset.environmentPreset;
+      if (!nextValue) return;
+      if (!Object.prototype.hasOwnProperty.call(presets, nextValue)) return;
+      replaceDraft(
+        presets[nextValue],
+        'Preset loaded into draft only. Use Save & restart to apply changes.'
+      );
+    });
   });
-  window.WorkspaceEnvironment = { toggleBusy, updateStatus };
-  toggleBusy(document.getElementById('workspace').dataset.busy === 'true');
+
+  window.WorkspaceEnvironment = {
+    toggleBusy,
+    updateStatus,
+    setStatus,
+    syncFromSnapshot(snapshot) {
+      if (!snapshot || presetButtons.length === 0 || !editor) return;
+      const rendered = snapshot.editable_environment;
+      if (!rendered || typeof rendered !== 'object') return;
+      const expected = Object.keys(rendered)
+        .sort()
+        .map((name) => name + '=' + rendered[name])
+        .join('\n');
+      if (editor === document.activeElement) return;
+      if (editor.value !== expected) return;
+      updatePresetButtons(matchingPresetNameForDraft(expected));
+    }
+  };
+  updatePresetButtons(matchingPresetNameForDraft(initialDraft));
+  if (!hasPresets) {
+    presetButtons.forEach((button) => {
+      button.disabled = true;
+    });
+  }
+  toggleBusy(activeBusy);
 })();

data/lib/workspaces/dashboard/styles.css

@@ -270,6 +270,47 @@ fieldset:disabled {
   align-items: start;
 }
 
+.controls-panel h2,
+.controls-panel h3 {
+  margin: 0;
+}
+
+.workspace-actions-group,
+.workspace-settings {
+  display: grid;
+  gap: var(--space-3);
+}
+
+.workspace-settings {
+  border-top: 1px solid var(--border);
+  padding-top: var(--space-4);
+}
+
+.workspace-actions {
+  margin-block-start: 0;
+}
+
+.workspace-actions .button,
+.workspace-actions form {
+  margin: 0;
+}
+
+.env-preset-buttons {
+  display: flex;
+  flex-wrap: wrap;
+  gap: var(--space-2);
+}
+
+.env-preset-button {
+  min-block-size: 34px;
+  padding-inline: var(--space-3);
+}
+
+.env-preset-button[aria-pressed='true'] {
+  border-color: color-mix(in oklab, var(--success) 55%, var(--border));
+  background: color-mix(in oklab, var(--success) 22%, transparent);
+}
+
 .button {
   display: inline-flex;
   justify-content: center;

data/lib/workspaces/dashboard/template.html.erb

@@ -17,12 +17,44 @@
     <section class="error-panel setup-error" id="error-panel" role="alert" <%= 'hidden' unless @presentation['error'] %>>
       <h3>What went wrong</h3><pre id="error"><%= escape(@presentation['error']) %></pre>
     </section>
-    <div class="workspace-actions">
-      <a id="preview" class="button button--primary" href="<%= escape(Config.preview_url(@id)) %>" <%= 'hidden' unless @presentation['ready'] %> target="_blank" rel="noopener noreferrer">Open workspace</a>
-      <div id="actions" class="workspace-actions"><% @presentation['actions'].each do |action| %><%= action_form(action) %><% end %></div>
-    </div>
     <p id="connection" role="status"></p>
-    <p id="source-update-message" role="status"><%= field('source_update_message') %></p>
+  </section>
+  <section class="status-panel controls-panel" aria-labelledby="actions-settings-title">
+    <h2 id="actions-settings-title">Actions &amp; settings</h2>
+    <div class="workspace-actions-group" aria-labelledby="actions-heading">
+      <h3 id="actions-heading">Workspace actions</h3>
+      <div class="workspace-actions">
+        <a id="preview" class="button button--primary" href="<%= escape(Config.preview_url(@id)) %>" <%= 'hidden' unless @presentation['ready'] %> target="_blank" rel="noopener noreferrer">Open workspace</a>
+        <div id="actions" class="workspace-actions"><% @presentation['actions'].each do |action| %><%= action_form(action) %><% end %></div>
+        <a class="button button--subtle" href="/workspaces/<%= @id %><%= @snapshot['log_source'] == 'backend' ? '?log=backend' : '' %>">Refresh status</a>
+      </div>
+      <p id="source-update-message" role="status"><%= field('source_update_message') %></p>
+    </div>
+    <div class="workspace-settings" aria-labelledby="environment-overrides">
+      <h3 id="environment-overrides">Editable environment</h3>
+      <form method="post" action="/workspaces/<%= @id %>/environment" id="environment-form" data-environment-form data-environment-presets="<%= escape(environment_presets_json) %>">
+        <fieldset class="env-fieldset" data-environment-fieldset <%= 'disabled' if @presentation['busy'] %>>
+          <legend class="env-legend">Workspace settings</legend>
+          <% unless environment_presets.empty? %>
+            <div data-preset-controls hidden>
+              <p class="env-input-label" id="environment-preset-label">Preset</p>
+              <div class="env-preset-buttons" role="group" aria-labelledby="environment-preset-label" aria-describedby="environment-preset-help">
+                <% environment_presets.each_key do |name| %>
+                  <button type="button" class="button button--subtle env-preset-button" data-environment-preset="<%= escape(name) %>" aria-pressed="false"><%= escape(name) %></button>
+                <% end %>
+              </div>
+              <p class="muted" id="environment-preset-help">Select a preset, then Save &amp; restart to apply.</p>
+            </div>
+          <% end %>
+          <label class="env-input-label" for="editable-env">Environment variables</label>
+          <textarea id="editable-env" name="editable_env" rows="8" spellcheck="false" autocomplete="off" autocapitalize="off"><%= escape(editable_environment_text) %></textarea>
+        </fieldset>
+        <div class="env-actions">
+          <button class="button button--primary" data-env-submit <%= 'disabled' if @presentation['busy'] %>>Save &amp; restart</button>
+        </div>
+        <p class="muted" id="environment-status" role="status" aria-live="polite"></p>
+      </form>
+    </div>
   </section>
   <section class="log-panel" aria-labelledby="log-title">
     <div class="log-header"><h2 id="log-title">Live <%= field('log_source') == 'backend' ? 'backend' : 'setup' %> log</h2><time id="updated"><%= field('updated_at') %></time></div>
@@ -32,23 +64,6 @@
     </nav>
     <pre id="log" tabindex="0" aria-label="<%= field('log_source') == 'backend' ? 'Backend' : 'Setup' %> log"><%= field('log_tail') %></pre>
   </section>
-  <section class="status-panel env-panel" aria-labelledby="environment-overrides">
-    <h2 id="environment-overrides">Editable environment</h2>
-    <p class="muted">One NAME=value per line. These non-secret settings start from <code>default_editable_env</code> in the trusted recipe. Edit values to customize this workspace; remove a line to restore its default.</p>
-    <p class="muted">Do not enter secrets: editor values appear in the dashboard and status API. Add other non-secret names as needed. Previously saved values outside the editor remain hidden and unchanged.</p>
-    <form method="post" action="/workspaces/<%= @id %>/environment" id="environment-form" data-environment-form>
-      <fieldset class="env-fieldset" data-environment-fieldset>
-        <legend class="env-legend">Workspace settings</legend>
-        <label class="env-input-label" for="editable-env">Environment variables</label>
-        <textarea id="editable-env" name="editable_env" rows="8" spellcheck="false" autocomplete="off" autocapitalize="off" aria-describedby="editable-env-help"><%= escape(editable_environment_text) %></textarea>
-        <p class="muted" id="editable-env-help">Values may contain =. Blank lines are ignored. Names are case-sensitive and cannot repeat.</p>
-      </fieldset>
-      <div class="env-actions">
-        <button class="button button--primary" data-env-submit>Save &amp; restart</button>
-      </div>
-      <p class="muted" id="environment-status" role="status" aria-live="polite"></p>
-    </form>
-  </section>
   <details class="status-panel"><summary>Workspace details</summary><dl><dt>Preview URL</dt><dd><a class="detail-link" href="<%= escape(Config.preview_url(@id)) %>" target="_blank" rel="noopener noreferrer"><%= escape(Config.preview_url(@id)) %></a> <span class="muted">Available when ready</span></dd><dt>Branch</dt><dd><%= field('branch') %></dd><dt>Path</dt><dd><code><%= field('path') %></code></dd><dt>Related PR</dt><dd><%= escape(@snapshot.dig('related_pr', 'number') || 'None') %></dd><dt>Created</dt><dd><%= escape(@snapshot['created_at'] || 'Unavailable') %></dd><dt>Last startup</dt><dd><%= escape(@snapshot['started_at'] || 'Never') %></dd></dl></details>
   <section class="status-panel danger-zone" aria-labelledby="danger-heading">
     <h2 id="danger-heading">Danger Zone</h2>

data/lib/workspaces/dashboard_view.rb

@@ -1,4 +1,5 @@
 require 'erb'
+require 'json'
 require_relative 'config'
 require_relative 'presentation'
 
@@ -123,6 +124,23 @@ module Workspaces
       values.sort.map { |name, value| "#{name}=#{value}" }.join("\n")
     end
 
+    def environment_presets
+      presets = @snapshot['environment_presets']
+      return {} unless presets.is_a?(Hash)
+
+      presets.each_with_object({}) do |(name, entries), memo|
+        next unless name.respond_to?(:to_s)
+        next unless entries.is_a?(Hash)
+
+        lines = entries.sort.map { |entry_name, value| "#{entry_name}=#{value}" }.join("\n")
+        memo[name.to_s] = lines
+      end
+    end
+
+    def environment_presets_json
+      JSON.generate(environment_presets)
+    end
+
     def action_form(action)
       style = action['primary'] ? 'button--primary' : 'button--subtle'
       "<form method=\"post\" action=\"/workspaces/#{@id}/#{action.fetch('key')}\">" \

data/lib/workspaces/environment_overrides.rb

@@ -75,6 +75,33 @@ module Workspaces
       load
     end
 
+    def apply_preset(name, recipe: Recipe.new)
+      apply_settings(preset: name, recipe: recipe)
+    end
+
+    def self.settings_for(recipe:, preset: nil, set: {}, unset: [], current: nil)
+      defaults = recipe.default_editable_env
+      preset_values = recipe.environment_presets.fetch(preset) { raise Invalid, "Unknown environment preset: #{preset}" } if preset
+      values = preset ? defaults.merge(preset_values) : (current || defaults).dup
+      validate_entries!(set)
+      unset.each { |name| validate_name!(name) }
+      raise Invalid, 'Cannot set and unset the same name' unless (set.keys & unset).empty?
+      names = set.keys + unset
+      if names.any? { |name| name.match?(/(?:SECRET|TOKEN|PASSWORD|API_KEY|PRIVATE_KEY|CREDENTIAL)/i) }
+        raise Invalid, 'Secret-like environment names cannot be stored in the visible editor'
+      end
+      values.merge!(set)
+      unset.each { |name| values.delete(name) }
+      validate_entries!(values)
+      values
+    end
+
+    def apply_settings(preset: nil, set: {}, unset: [], recipe: Recipe.new)
+      current = preset ? nil : editable_values(recipe.default_editable_env)
+      values = self.class.settings_for(recipe: recipe, preset: preset, set: set, unset: unset, current: current)
+      replace_editable(values.sort.map { |key, value| "#{key}=#{value}" }.join("\n"), defaults: recipe.default_editable_env)
+    end
+
     def apply_patch(set:, remove:)
       validate_patch!(set, remove)
       updated = load_file(file_path).merge(set)

data/lib/workspaces/recipe.rb

@@ -7,13 +7,14 @@ module Workspaces
     class Invalid < ArgumentError; end
     RESERVED_ENV = %w(WORKSPACE_ID WORKSPACE_PATH WORKSPACE_REPO_ROOT WORKSPACE_PORT WORKSPACE_URL
                       WORKSPACE_HOST WORKSPACE_CACHE_DIR WORKSPACE_RUN_ID).freeze
-    attr_reader :steps, :environment, :default_editable_env
+    attr_reader :steps, :environment, :default_editable_env, :environment_presets
 
     def initialize(root: Config.repo_root)
       @root = root
       document = YAML.safe_load(root.join('.workspaces.yml').read, aliases: false)
       validate_document!(document)
       @default_editable_env = validate_editable_env!(document.fetch('default_editable_env', {}))
+      @environment_presets = validate_environment_presets!(document.fetch('environment_presets', {}))
       @environment = validate_env!(document.fetch('env', {}))
       @steps = document.fetch('steps').map { |step| validate_step!(step) }
       validate_editable_overlap!
@@ -49,7 +50,7 @@ module Workspaces
         raise Invalid,
               'Configuration must be a mapping with version: 1'
       end
-      unknown_keys!(document, %w(version env default_editable_env steps))
+      unknown_keys!(document, %w(version env default_editable_env environment_presets steps))
       raise Invalid, 'steps must be a nonempty array' unless document['steps'].is_a?(Array) && !document['steps'].empty?
     end
 
@@ -109,14 +110,14 @@ module Workspaces
       values
     end
 
-    def validate_editable_env!(values)
-      raise Invalid, 'default_editable_env must be a mapping' unless values.is_a?(Hash)
+    def validate_editable_env!(values, setting: 'default_editable_env')
+      raise Invalid, "#{setting} must be a mapping" unless values.is_a?(Hash)
 
       EnvironmentOverrides.validate_entries!(values)
       values.each do |key, value|
         raise Invalid, "#{key} is supplied by the workspace runner" if RESERVED_ENV.include?(key)
         if key.match?(/(?:SECRET|TOKEN|PASSWORD|API_KEY|PRIVATE_KEY|CREDENTIAL)/i)
-          raise Invalid, 'Secret-like names cannot be declared in default_editable_env'
+          raise Invalid, "Secret-like names cannot be declared in #{setting}"
         end
         raise Invalid, 'Editable environment values must be single-line strings' if value.match?(/[\r\n]/)
       end
@@ -125,6 +126,21 @@ module Workspaces
       raise Invalid, e.message
     end
 
+    def validate_environment_presets!(presets)
+      raise Invalid, 'environment_presets must be a mapping' unless presets.is_a?(Hash)
+
+      presets.each do |name, values|
+        unless name.is_a?(String) && !name.empty? && name == name.strip && !name.match?(/[[:cntrl:]]/)
+          raise Invalid, 'Preset names must be nonempty trimmed strings without control characters'
+        end
+        validate_editable_env!(values, setting: 'Each environment preset')
+        unless (values.keys - default_editable_env.keys).empty?
+          raise Invalid, 'Preset environment names must be declared in default_editable_env'
+        end
+      end
+      presets
+    end
+
     def validate_editable_overlap!
       names = default_editable_env.keys
       return unless environment.keys.intersect?(names) || steps.any? { |step| step['env'].keys.intersect?(names) }

data/lib/workspaces/registry.rb

@@ -1,6 +1,8 @@
 require_relative 'worktree'
 require_relative 'state_store'
 require_relative 'backend'
+require_relative 'recipe'
+require_relative 'environment_overrides'
 
 module Workspaces
   class Registry
@@ -17,9 +19,12 @@ module Workspaces
       end
     end
 
-    def create(**options)
+    def create(preset: nil, set: {}, unset: [], **options)
+      recipe = Recipe.new if preset || !set.empty? || !unset.empty?
+      EnvironmentOverrides.settings_for(recipe: recipe, preset: preset, set: set, unset: unset) if recipe
       workspace = Worktree.create(**options)
       StateStore.new(Config.state_file).set(workspace.id, 'status' => 'idle', 'related_pr' => workspace.related_pr)
+      EnvironmentOverrides.new(workspace.id).apply_settings(preset: preset, set: set, unset: unset, recipe: recipe) if recipe
       workspace
     end
 

data/lib/workspaces/version.rb

@@ -1,3 +1,3 @@
 module Workspaces
-  VERSION = '0.1.5'
+  VERSION = '0.1.7'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: workspaces
 version: !ruby/object:Gem::Version
-  version: 0.1.5
+  version: 0.1.7
 platform: ruby
 authors:
 - Workspaces contributors
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-10-02 00:00:00.000000000 Z
+date: 2026-10-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack