@agent-api/cli 0.1.2 → 0.2.1

package/dist/agent/runner.d.ts

@@ -1,4 +1,5 @@
 import { type AgentResponse, type PresetToolCatalogClient, type ResponseStreamEvent, type Tool } from "@agent-api/sdk";
+import type { ShellIsolationPreferences } from "../workbench/shell-isolation.js";
 export interface AgentRunOptions {
     profile?: string;
     promptParts: string[];
@@ -19,6 +20,7 @@ export interface AgentRunOptions {
     maxContextFiles?: number;
     maxContextBytes?: number;
     accessMode?: WorkdirAccessMode;
+    shellIsolation?: ShellIsolationPreferences;
     abortSignal?: AbortSignal;
 }
 export type WorkdirAccessMode = "off" | "approval" | "full";

package/dist/agent/runner.js

@@ -4,6 +4,7 @@ import { createLocalShellToolRegistry, createLocalWorkdirToolRegistry, localShel
 import { resolvePreviousResponseID, updateConversation } from "../conversation/index.js";
 import { resolveRuntimeProfile } from "../profile.js";
 import { buildWorkdirContextBlock, openWorkdir } from "../workdir/index.js";
+import { localShellIsolationOptions } from "../workbench/shell-isolation.js";
 const defaultCatalogCacheTTLMS = 10 * 60_000;
 const presetCatalogCache = new Map();
 const toolCatalogCache = new Map();
@@ -381,6 +382,7 @@ async function prepareLocalWorkdirTools(options) {
     const shellRegistry = createLocalShellToolRegistry({
         accessMode: localToolAccessMode(options),
         workdir: service.workdir,
+        ...localShellIsolationOptions(options.shellIsolation),
     });
     return {
         registry: combineLocalToolRegistries(registry, shellRegistry),
@@ -389,6 +391,7 @@ async function prepareLocalWorkdirTools(options) {
             localShellToolInstructions({
                 accessMode: localToolAccessMode(options),
                 cwd: service.workdir.root,
+                ...localShellIsolationOptions(options.shellIsolation),
             }),
             "Use local_workdir for selected local workdir operations. Prefer summarize/list/search/grep before read/read_lines. Prefer preview_edits/apply_edits for source edits. Use local_shell for command/process tasks. In approval mode, local actions return requires_approval and must be explained to the user instead of retried blindly.",
         ].join("\n\n"),

package/dist/config.d.ts

@@ -1,5 +1,8 @@
+import type { ShellIsolationMode, ShellIsolationPreferences } from "./workbench/shell-isolation.js";
 export declare const defaultBaseURL = "https://api.agentsway.dev";
 export declare const configFile = "profiles.json";
+export declare const appConfigurationFile = "configuration.json";
+export declare const conversationsFile = "conversations.json";
 export type AuthProfile = {
     type: "api_key";
     apiKey: string;
@@ -20,8 +23,6 @@ export interface Profile {
 export interface CLIConfig {
     activeProfile: string;
     profiles: Record<string, Profile>;
-    conversations: Record<string, ConversationState>;
-    workbench: WorkbenchPreferences;
 }
 export interface ConversationState {
     name: string;
@@ -31,14 +32,35 @@ export interface ConversationState {
 }
 export interface WorkbenchPreferences {
     defaultPreset?: string | null;
+    isolation?: ShellIsolationPreferences;
+}
+export interface AppConfiguration {
+    workbench: WorkbenchPreferences;
+}
+export interface ConversationConfiguration {
+    conversations: Record<string, ConversationState>;
 }
 export declare function loadConfig(): Promise<CLIConfig>;
 export declare function saveConfig(config: CLIConfig): Promise<void>;
+export declare function loadAppConfiguration(): Promise<AppConfiguration>;
+export declare function saveAppConfiguration(config: AppConfiguration): Promise<void>;
+export declare function loadConversationConfiguration(): Promise<ConversationConfiguration>;
+export declare function saveConversationConfiguration(config: ConversationConfiguration): Promise<void>;
 export declare function upsertProfile(profile: Omit<Profile, "createdAt" | "updatedAt">): Promise<Profile>;
 export declare function activeProfile(profileName?: string): Promise<Profile>;
 export declare function emptyConfig(): CLIConfig;
+export declare function emptyAppConfiguration(): AppConfiguration;
+export declare function emptyConversationConfiguration(): ConversationConfiguration;
 export declare function loadWorkbenchPreferences(): Promise<WorkbenchPreferences>;
 export declare function updateWorkbenchPreferences(patch: {
     defaultPreset?: string | null | undefined;
+    isolation?: {
+        mode?: ShellIsolationMode | null | undefined;
+        executablePath?: string | null | undefined;
+        version?: string | null | undefined;
+        sourceURL?: string | null | undefined;
+        sha256?: string | null | undefined;
+        installSkipped?: boolean | null | undefined;
+    };
 }): Promise<WorkbenchPreferences>;
 export declare function redactSecret(value: string): string;

package/dist/config.js

@@ -1,7 +1,9 @@
 import { z } from "zod";
-import { runtime } from "./runtime/index.js";
+import { ensureRuntime, runtime } from "./runtime/index.js";
 export const defaultBaseURL = "https://api.agentsway.dev";
 export const configFile = "profiles.json";
+export const appConfigurationFile = "configuration.json";
+export const conversationsFile = "conversations.json";
 const authProfileSchema = z.discriminatedUnion("type", [
     z.object({
         type: z.literal("api_key"),
@@ -30,15 +32,28 @@ const conversationSchema = z.object({
 });
 const workbenchPreferencesSchema = z.object({
     defaultPreset: z.string().nullable().optional(),
+    isolation: z.object({
+        mode: z.enum(["none", "auto", "required"]).optional(),
+        executablePath: z.string().nullable().optional(),
+        version: z.string().nullable().optional(),
+        sourceURL: z.string().nullable().optional(),
+        sha256: z.string().nullable().optional(),
+        installSkipped: z.boolean().nullable().optional(),
+    }).optional(),
 }).default({});
 const cliConfigSchema = z.object({
     activeProfile: z.string().default("default"),
     profiles: z.record(z.string(), profileSchema).default({}),
     conversations: z.record(z.string(), conversationSchema).default({}),
+});
+const appConfigurationSchema = z.object({
     workbench: workbenchPreferencesSchema,
 });
+const conversationConfigurationSchema = z.object({
+    conversations: z.record(z.string(), conversationSchema).default({}),
+});
 export async function loadConfig() {
-    await runtime.ensure();
+    await ensureRuntime();
     const loaded = await runtime.config.read(configFile, emptyConfig());
     const parsed = cliConfigSchema.safeParse(loaded);
     if (!parsed.success) {
@@ -47,8 +62,37 @@ export async function loadConfig() {
     return parsed.data;
 }
 export async function saveConfig(config) {
-    await runtime.ensure();
-    await runtime.config.write(configFile, config);
+    await ensureRuntime();
+    await runtime.config.write(configFile, {
+        activeProfile: config.activeProfile,
+        profiles: config.profiles,
+    });
+}
+export async function loadAppConfiguration() {
+    await ensureRuntime();
+    const loaded = await runtime.config.read(appConfigurationFile, emptyAppConfiguration());
+    const parsed = appConfigurationSchema.safeParse(loaded);
+    if (!parsed.success) {
+        throw new Error(`Invalid app configuration: ${parsed.error.issues.map((issue) => issue.message).join("; ")}`);
+    }
+    return parsed.data;
+}
+export async function saveAppConfiguration(config) {
+    await ensureRuntime();
+    await runtime.config.write(appConfigurationFile, config);
+}
+export async function loadConversationConfiguration() {
+    await ensureRuntime();
+    const loaded = await runtime.config.read(conversationsFile, emptyConversationConfiguration());
+    const parsed = conversationConfigurationSchema.safeParse(loaded);
+    if (!parsed.success) {
+        throw new Error(`Invalid conversation configuration: ${parsed.error.issues.map((issue) => issue.message).join("; ")}`);
+    }
+    return parsed.data;
+}
+export async function saveConversationConfiguration(config) {
+    await ensureRuntime();
+    await runtime.config.write(conversationsFile, config);
 }
 export async function upsertProfile(profile) {
     const config = await loadConfig();
@@ -74,15 +118,21 @@ export async function activeProfile(profileName) {
     return profile;
 }
 export function emptyConfig() {
-    return { activeProfile: "default", profiles: {}, conversations: {}, workbench: {} };
+    return { activeProfile: "default", profiles: {} };
+}
+export function emptyAppConfiguration() {
+    return { workbench: {} };
+}
+export function emptyConversationConfiguration() {
+    return { conversations: {} };
 }
 export async function loadWorkbenchPreferences() {
-    const config = await loadConfig();
-    return config.workbench;
+    const appConfig = await loadAppConfiguration();
+    return appConfig.workbench;
 }
 export async function updateWorkbenchPreferences(patch) {
-    const config = await loadConfig();
-    const next = { ...config.workbench };
+    const appConfig = await loadAppConfiguration();
+    const next = { ...appConfig.workbench };
     if ("defaultPreset" in patch) {
         if (patch.defaultPreset === undefined) {
             delete next.defaultPreset;
@@ -100,10 +150,50 @@ export async function updateWorkbenchPreferences(patch) {
             }
         }
     }
-    config.workbench = next;
-    await saveConfig(config);
+    if ("isolation" in patch) {
+        next.isolation = updateIsolationPreferences(next.isolation, patch.isolation);
+    }
+    appConfig.workbench = next;
+    await saveAppConfiguration(appConfig);
     return next;
 }
+function updateIsolationPreferences(current, patch) {
+    const next = { ...(current ?? {}) };
+    if (!patch)
+        return Object.keys(next).length > 0 ? next : undefined;
+    if ("mode" in patch) {
+        if (patch.mode === null || patch.mode === undefined) {
+            delete next.mode;
+        }
+        else {
+            next.mode = patch.mode;
+        }
+    }
+    for (const key of ["executablePath", "version", "sourceURL", "sha256"]) {
+        if (key in patch) {
+            const value = patch[key];
+            if (value === undefined || value === null) {
+                delete next[key];
+            }
+            else {
+                const trimmed = value.trim();
+                if (trimmed)
+                    next[key] = trimmed;
+                else
+                    delete next[key];
+            }
+        }
+    }
+    if ("installSkipped" in patch) {
+        if (patch.installSkipped === undefined || patch.installSkipped === null) {
+            delete next.installSkipped;
+        }
+        else {
+            next.installSkipped = patch.installSkipped;
+        }
+    }
+    return Object.keys(next).length > 0 ? next : undefined;
+}
 export function redactSecret(value) {
     if (value.length <= 10)
         return "***";

package/dist/conversation/index.js

@@ -1,4 +1,4 @@
-import { activeProfile, loadConfig, saveConfig } from "../config.js";
+import { activeProfile, loadConversationConfiguration, saveConversationConfiguration } from "../config.js";
 export function conversationKey(profile, name) {
     return `${profile}:${name}`;
 }
@@ -10,32 +10,32 @@ export async function resolvePreviousResponseID(options) {
     if (!options.continueConversation)
         return undefined;
     const profile = await activeProfile(options.profile);
-    const config = await loadConfig();
+    const config = await loadConversationConfiguration();
     return config.conversations[conversationKey(profile.name, options.conversation)]?.previousResponseId;
 }
 export async function updateConversation(options, responseID) {
     if (!options.conversation)
         return;
     const profile = await activeProfile(options.profile);
-    const config = await loadConfig();
+    const config = await loadConversationConfiguration();
     config.conversations[conversationKey(profile.name, options.conversation)] = {
         name: options.conversation,
         profile: profile.name,
         previousResponseId: responseID,
         updatedAt: Math.floor(Date.now() / 1000),
     };
-    await saveConfig(config);
+    await saveConversationConfiguration(config);
 }
 export async function listConversations(profileName) {
     const profile = await activeProfile(profileName);
-    const config = await loadConfig();
+    const config = await loadConversationConfiguration();
     return Object.values(config.conversations)
         .filter((conversation) => conversation.profile === profile.name)
         .sort((a, b) => b.updatedAt - a.updatedAt);
 }
 export async function getConversation(name, profileName) {
     const profile = await activeProfile(profileName);
-    const config = await loadConfig();
+    const config = await loadConversationConfiguration();
     const conversation = config.conversations[conversationKey(profile.name, name)];
     if (!conversation)
         throw new Error(`Conversation not found: ${name}`);
@@ -43,9 +43,9 @@ export async function getConversation(name, profileName) {
 }
 export async function deleteConversation(name, profileName) {
     const profile = await activeProfile(profileName);
-    const config = await loadConfig();
+    const config = await loadConversationConfiguration();
     delete config.conversations[conversationKey(profile.name, name)];
-    await saveConfig(config);
+    await saveConversationConfiguration(config);
 }
 export function conversationSummary(conversation) {
     const updated = new Date(conversation.updatedAt * 1000).toISOString();

package/dist/index.js

@@ -7,7 +7,7 @@ import React from "react";
 import { conversationSummary, deleteConversation, getConversation, listConversations, runAgent } from "./agent.js";
 import { normalizeChatOptions } from "./chat-options.js";
 import { ChatApp } from "./tui/chat.js";
-import { activeProfile, loadConfig, redactSecret } from "./config.js";
+import { activeProfile, loadConfig, loadConversationConfiguration, redactSecret } from "./config.js";
 import { cliVersion, runtime } from "./runtime/index.js";
 import { openWorkdir } from "./workdir/index.js";
 import { deleteProfile, listProfiles, loginWithAPIKey, loginWithBrowser, profileSummary, resolveRuntimeProfile, useProfile, } from "./profile.js";
@@ -64,12 +64,13 @@ program
     .description("Print local CLI diagnostics")
     .action(async () => {
     const config = await loadConfig();
+    const conversations = await loadConversationConfiguration();
     const { profiles } = await listProfiles();
     console.log(JSON.stringify({
         version: cliVersion,
         activeProfile: config.activeProfile,
         profileCount: profiles.length,
-        conversationCount: Object.keys(config.conversations).length,
+        conversationCount: Object.keys(conversations.conversations).length,
         configDir: runtime.dirs.config,
         dataDir: runtime.dirs.data,
         node: process.version,

package/dist/runtime/index.d.ts

@@ -1,5 +1,5 @@
-export declare const cliName = "agent-api-cli";
+export declare const cliName = "agent-tui";
 export declare const cliAuthor = "AgentsWay";
-export declare const cliVersion = "0.1.2";
+export declare const cliVersion = "0.2.1";
 export declare const runtime: import("@agent-api/sdk/local").LocalRuntime;
 export declare function ensureRuntime(): Promise<import("@agent-api/sdk/local").LocalRuntime>;

package/dist/runtime/index.js

@@ -1,12 +1,152 @@
 import { createLocalRuntime } from "@agent-api/sdk/local";
-export const cliName = "agent-api-cli";
+import { cp, mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import path from "node:path";
+export const cliName = "agent-tui";
 export const cliAuthor = "AgentsWay";
-export const cliVersion = "0.1.2";
+export const cliVersion = "0.2.1";
+const legacyCliName = "agent-api-cli";
 export const runtime = createLocalRuntime({
     appName: cliName,
     appAuthor: cliAuthor,
 });
+const legacyRuntime = createLocalRuntime({
+    appName: legacyCliName,
+    appAuthor: cliAuthor,
+});
+let migrationPromise = null;
 export async function ensureRuntime() {
+    migrationPromise ??= migrateLegacyRuntime();
+    await migrationPromise;
     await runtime.ensure();
+    await splitMonolithicConfig();
     return runtime;
 }
+async function migrateLegacyRuntime() {
+    await migrateLegacyConfigDirectory();
+    for (const key of ["data", "cache", "logs"]) {
+        await moveDirectoryIfNeeded(legacyRuntime.dirs[key], runtime.dirs[key]);
+    }
+}
+async function moveDirectoryIfNeeded(from, to) {
+    if (from === to || !(await isDirectory(from)))
+        return;
+    await mkdir(path.dirname(to), { recursive: true });
+    if (await pathExists(to)) {
+        await cp(from, to, { recursive: true, errorOnExist: false, force: false });
+        await rm(from, { recursive: true, force: true });
+        return;
+    }
+    try {
+        await rename(from, to);
+    }
+    catch (error) {
+        if (error?.code !== "EXDEV")
+            throw error;
+        await cp(from, to, { recursive: true, errorOnExist: false });
+        await rm(from, { recursive: true, force: true });
+    }
+}
+async function migrateLegacyConfigDirectory() {
+    const from = legacyRuntime.dirs.config;
+    const to = runtime.dirs.config;
+    if (from === to || !(await isDirectory(from)))
+        return;
+    await mkdir(to, { recursive: true });
+    const legacyProfilesPath = path.join(from, "profiles.json");
+    const profilesPath = path.join(to, "profiles.json");
+    const legacyRaw = await readJSONRecord(legacyProfilesPath);
+    if (legacyRaw) {
+        const nextRaw = await readJSONRecord(profilesPath) ?? {};
+        const legacyProfiles = recordValue(legacyRaw.profiles);
+        const nextProfiles = recordValue(nextRaw.profiles);
+        const mergedProfiles = { ...legacyProfiles, ...nextProfiles };
+        const activeProfile = typeof nextRaw.activeProfile === "string"
+            ? nextRaw.activeProfile
+            : typeof legacyRaw.activeProfile === "string"
+                ? legacyRaw.activeProfile
+                : "default";
+        await writeJSON(profilesPath, { ...nextRaw, activeProfile, profiles: mergedProfiles });
+        const configurationPath = path.join(to, "configuration.json");
+        if ("workbench" in legacyRaw && !(await pathExists(configurationPath))) {
+            await writeJSON(configurationPath, { workbench: recordValue(legacyRaw.workbench) });
+        }
+        const conversationsPath = path.join(to, "conversations.json");
+        if ("conversations" in legacyRaw && !(await pathExists(conversationsPath))) {
+            await writeJSON(conversationsPath, { conversations: recordValue(legacyRaw.conversations) });
+        }
+    }
+    await copyFileIfMissing(path.join(from, "configuration.json"), path.join(to, "configuration.json"));
+    await copyFileIfMissing(path.join(from, "conversations.json"), path.join(to, "conversations.json"));
+    await rm(from, { recursive: true, force: true });
+}
+async function splitMonolithicConfig() {
+    const profilesPath = path.join(runtime.dirs.config, "profiles.json");
+    const raw = await readJSONRecord(profilesPath);
+    if (!raw)
+        return;
+    let changed = false;
+    if ("workbench" in raw && !(await pathExists(path.join(runtime.dirs.config, "configuration.json")))) {
+        await writeJSON(path.join(runtime.dirs.config, "configuration.json"), { workbench: raw.workbench && typeof raw.workbench === "object" ? raw.workbench : {} });
+    }
+    if ("workbench" in raw) {
+        delete raw.workbench;
+        changed = true;
+    }
+    if ("conversations" in raw && !(await pathExists(path.join(runtime.dirs.config, "conversations.json")))) {
+        await writeJSON(path.join(runtime.dirs.config, "conversations.json"), {
+            conversations: raw.conversations && typeof raw.conversations === "object" ? raw.conversations : {},
+        });
+    }
+    if ("conversations" in raw) {
+        delete raw.conversations;
+        changed = true;
+    }
+    if (changed) {
+        await writeJSON(profilesPath, raw);
+    }
+}
+function recordValue(value) {
+    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+async function readJSONRecord(file) {
+    try {
+        const value = JSON.parse(await readFile(file, "utf8"));
+        return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+    }
+    catch (error) {
+        if (error?.code === "ENOENT")
+            return null;
+        throw error;
+    }
+}
+async function writeJSON(file, value) {
+    await mkdir(path.dirname(file), { recursive: true });
+    await writeFile(file, `${JSON.stringify(value, null, 2)}\n`);
+}
+async function copyFileIfMissing(from, to) {
+    if (!(await pathExists(from)) || await pathExists(to))
+        return;
+    await mkdir(path.dirname(to), { recursive: true });
+    await cp(from, to, { errorOnExist: true, force: false });
+}
+async function pathExists(file) {
+    try {
+        await stat(file);
+        return true;
+    }
+    catch (error) {
+        if (error?.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+async function isDirectory(file) {
+    try {
+        return (await stat(file)).isDirectory();
+    }
+    catch (error) {
+        if (error?.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}

package/dist/tui/ink/app.js

@@ -25,6 +25,7 @@ function AuthenticatedChatApp({ options }) {
     }
     const authGateController = authGateControllerRef.current;
     const [currentProfile, setCurrentProfile] = useState(options.profile || "default");
+    const [authCursorVisible, setAuthCursorVisible] = useState(true);
     const [auth, setAuth] = useState(() => authGateController.initialState({
         apiKey: process.env.AGENT_API_KEY || "",
         baseURL: process.env.AGENT_API_BASE_URL || defaultBaseURL,
@@ -44,6 +45,16 @@ function AuthenticatedChatApp({ options }) {
             mounted = false;
         };
     }, [authGateController, options.profile]);
+    useEffect(() => {
+        if (!isAuthInputStatus(auth.status)) {
+            setAuthCursorVisible(true);
+            return;
+        }
+        const interval = setInterval(() => {
+            setAuthCursorVisible((visible) => !visible);
+        }, 500);
+        return () => clearInterval(interval);
+    }, [auth.status]);
     useInput((input, key) => {
         const result = authGateController.handleInput(input, key, auth);
         if (result.state !== auth)
@@ -87,7 +98,14 @@ function AuthenticatedChatApp({ options }) {
                 setAuth((current) => authGateController.requestSwitchProfile(current, currentProfile, name));
             }, options: { ...options, profile: currentProfile }, profileName: currentProfile, authController: authController }));
     }
-    return _jsx(InkAuthGate, { state: auth });
+    return _jsx(InkAuthGate, { cursorVisible: authCursorVisible, state: auth });
+}
+function isAuthInputStatus(status) {
+    return status === "api_profile"
+        || status === "api_base_url"
+        || status === "api_key"
+        || status === "browser_profile"
+        || status === "browser_base_url";
 }
 function WorkbenchApp({ authController, onLogin, onLogout, onDeleteProfile, onSwitchProfile, options, profileName, }) {
     const app = useApp();
@@ -167,6 +185,16 @@ function WorkbenchApp({ authController, onLogin, onLogout, onDeleteProfile, onSw
             if (!mounted)
                 return;
             dispatch({ type: "settings.set", settings });
+            if (settings.activity) {
+                dispatch({ type: "activity.add", level: "success", text: settings.activity });
+            }
+            if (settings.notice) {
+                dispatch({ type: "message.add", role: "system", text: settings.notice });
+                dispatch({ type: "activity.add", level: "warning", text: "Shell isolation setup is not configured" });
+            }
+            if (settings.warning) {
+                dispatch({ type: "activity.add", level: "warning", text: settings.warning });
+            }
         })
             .catch((error) => {
             if (!mounted)

package/dist/tui/ink/components.d.ts

@@ -5,6 +5,7 @@ export declare function InkWorkbenchScreen({ renderModel, spinnerFrame, }: {
     renderModel: WorkbenchRenderModel;
     spinnerFrame: number;
 }): React.JSX.Element;
-export declare function InkAuthGate({ state }: {
+export declare function InkAuthGate({ cursorVisible, state }: {
+    cursorVisible: boolean;
     state: AuthGateState;
 }): React.JSX.Element;

package/dist/tui/ink/components.js

@@ -6,11 +6,11 @@ import { activityColor, } from "../workbench.js";
 export function InkWorkbenchScreen({ renderModel, spinnerFrame, }) {
     return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Header, { contextEnabled: renderModel.header.contextEnabled, conversation: renderModel.header.conversation, model: renderModel.header.model, accessMode: renderModel.header.accessMode, pendingLocalLabel: renderModel.header.pendingLocalLabel, preset: renderModel.header.preset, profile: renderModel.header.profile, renderMode: renderModel.header.renderMode, workdir: renderModel.header.workdir }), _jsxs(Box, { marginTop: 1, height: renderModel.viewportHeight, children: [_jsxs(Box, { flexDirection: "column", width: "72%", paddingRight: 1, children: [renderModel.transcript.visibleLines.map((line) => (_jsx(Text, { bold: line.bold, color: line.color, inverse: line.inverse, wrap: "truncate", children: line.text || " " }, line.id))), renderModel.transcript.visibleLines.length === 0 && _jsx(Text, { color: "gray", children: "No transcript lines." })] }), _jsxs(Box, { flexDirection: "column", width: "28%", height: renderModel.activityHeight, borderStyle: "single", borderColor: "gray", paddingX: 1, children: [_jsx(Text, { bold: true, wrap: "truncate", children: "Activity" }), renderModel.visibleActivities.map((activity) => (_jsxs(Text, { color: activityColor(activity.level), wrap: "truncate", children: [new Date(activity.timestamp).toLocaleTimeString(), " ", activity.text] }, activity.id)))] })] }), _jsxs(Box, { borderStyle: "single", borderColor: renderModel.input.busy ? "yellow" : "green", paddingX: 1, children: [renderModel.input.fullAccess && (_jsx(Text, { color: "red", bold: true, inverse: true, children: "FULL ACCESS" })), renderModel.input.fullAccess && _jsx(Text, { children: " " }), _jsxs(Text, { color: renderModel.input.busy ? "yellow" : "green", children: [renderModel.input.label, " "] }), renderModel.input.busy ? (_jsxs(Text, { wrap: "truncate", children: [_jsx(Text, { color: "yellow", children: busySpinner(spinnerFrame) }), " ", renderModel.input.waitingText] })) : (_jsxs(Text, { wrap: "truncate", children: [renderModel.input.draft, _jsx(Cursor, { visible: true })] }))] }), _jsx(Box, { paddingX: 1, children: _jsx(Text, { color: "gray", wrap: "truncate", children: renderModel.footerText }) })] }));
 }
-export function InkAuthGate({ state }) {
-    return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { borderStyle: "round", borderColor: "cyan", paddingX: 1, flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Agent API Workbench" }), _jsx(Text, { color: "gray", children: "Authentication required before starting the conversation UI." })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: state.error ? "red" : "gray", children: state.error || state.message }), state.status === "checking" && _jsx(Text, { color: "yellow", children: "Checking..." }), state.status === "select" && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [authMethods.map((method, index) => (_jsxs(Text, { color: index === state.selectedMethod ? "green" : "gray", children: [index === state.selectedMethod ? "›" : " ", " ", method.label, " - ", method.description] }, method.method))), _jsx(Text, { color: "gray", children: "Use \u2191/\u2193 and Enter." })] })), state.status === "api_profile" && _jsx(AuthPrompt, { label: "Profile", value: state.profile }), state.status === "api_base_url" && _jsx(AuthPrompt, { label: "Base URL", value: state.baseURL }), state.status === "api_key" && _jsx(AuthPrompt, { label: "API key", value: state.apiKey ? "•".repeat(Math.min(state.apiKey.length, 32)) : "" }), state.status === "browser_profile" && _jsx(AuthPrompt, { label: "Profile", value: state.profile }), state.status === "browser_base_url" && _jsx(AuthPrompt, { label: "Base URL", value: state.baseURL }), state.status === "browser_waiting" && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [state.browserURL && _jsxs(Text, { children: ["URL: ", state.browserURL] }), state.browserCode && _jsxs(Text, { children: ["Code: ", state.browserCode] }), _jsx(Text, { color: "yellow", children: "Waiting for browser approval..." })] }))] })] }));
+export function InkAuthGate({ cursorVisible, state }) {
+    return (_jsxs(Box, { flexDirection: "column", children: [_jsxs(Box, { borderStyle: "round", borderColor: "cyan", paddingX: 1, flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Agent API Workbench" }), _jsx(Text, { color: "gray", children: "Authentication required before starting the conversation UI." })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { color: state.error ? "red" : "gray", children: state.error || state.message }), state.status === "checking" && _jsx(Text, { color: "yellow", children: "Checking..." }), state.status === "select" && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [authMethods.map((method, index) => (_jsxs(Text, { color: index === state.selectedMethod ? "green" : "gray", children: [index === state.selectedMethod ? "›" : " ", " ", method.label, " - ", method.description] }, method.method))), _jsx(Text, { color: "gray", children: "Use \u2191/\u2193 and Enter." })] })), state.status === "api_profile" && _jsx(AuthPrompt, { cursorVisible: cursorVisible, label: "Profile", value: state.profile }), state.status === "api_base_url" && _jsx(AuthPrompt, { cursorVisible: cursorVisible, label: "Base URL", value: state.baseURL }), state.status === "api_key" && _jsx(AuthPrompt, { cursorVisible: cursorVisible, label: "API key", value: state.apiKey ? "•".repeat(Math.min(state.apiKey.length, 32)) : "" }), state.status === "browser_profile" && _jsx(AuthPrompt, { cursorVisible: cursorVisible, label: "Profile", value: state.profile }), state.status === "browser_base_url" && _jsx(AuthPrompt, { cursorVisible: cursorVisible, label: "Base URL", value: state.baseURL }), state.status === "browser_waiting" && (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [state.browserURL && _jsxs(Text, { children: ["URL: ", state.browserURL] }), state.browserCode && _jsxs(Text, { children: ["Code: ", state.browserCode] }), _jsx(Text, { color: "yellow", children: "Waiting for browser approval..." })] }))] })] }));
 }
-function AuthPrompt({ label, value }) {
-    return (_jsxs(Box, { borderStyle: "single", borderColor: "green", paddingX: 1, marginTop: 1, children: [_jsxs(Text, { color: "green", children: [label, ": "] }), _jsx(Text, { children: value })] }));
+function AuthPrompt({ cursorVisible, label, value }) {
+    return (_jsxs(Box, { borderStyle: "single", borderColor: "green", paddingX: 1, marginTop: 1, children: [_jsxs(Text, { color: "green", children: [label, ": "] }), _jsxs(Text, { children: [value, _jsx(Cursor, { visible: cursorVisible })] })] }));
 }
 function Header({ contextEnabled, conversation, accessMode, model, pendingLocalLabel, preset, profile, renderMode, workdir, }) {
     return (_jsxs(Box, { borderStyle: "round", borderColor: "cyan", paddingX: 1, flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Agent API Workbench" }), _jsxs(Text, { color: "gray", wrap: "truncate", children: ["profile=", profile, " conversation=", conversation, " preset=", preset, " model=", model] }), _jsxs(Text, { color: "gray", wrap: "truncate", children: ["workdir=", workdir, " access=", accessMode, " local_tools=", contextEnabled ? "on" : "off", " render=", renderMode, " pending=", pendingLocalLabel] })] }));

package/dist/tui/workbench.d.ts

@@ -1,4 +1,5 @@
 import type { LocalToolApprovalRequest, WorkdirAccessMode } from "../agent.js";
+import type { ShellIsolationPreferences } from "../workbench/shell-isolation.js";
 export type WorkbenchRole = "user" | "assistant" | "system";
 export interface WorkbenchMessage {
     id: string;
@@ -38,6 +39,7 @@ export interface WorkbenchState {
     runModel?: string;
     renderMode: RenderMode;
     defaultPreset?: string | null;
+    shellIsolation?: ShellIsolationPreferences;
 }
 export interface InputHistory {
     record(value: string): void;
@@ -88,7 +90,7 @@ export type WorkbenchAction = {
     name: string;
 } | {
     type: "settings.set";
-    settings: Partial<Pick<WorkbenchState, "runPreset" | "runModel" | "renderMode" | "defaultPreset">>;
+    settings: Partial<Pick<WorkbenchState, "runPreset" | "runModel" | "renderMode" | "defaultPreset" | "shellIsolation">>;
 };
 export type WorkbenchCommand = {
     kind: "invalid";
@@ -114,7 +116,7 @@ export type WorkbenchCommand = {
     kind: "auth_status";
 } | {
     kind: "config";
-    field?: "preset";
+    field?: "preset" | "isolation" | "isolator";
     value?: string;
 } | {
     kind: "render";
@@ -171,6 +173,7 @@ export declare function createInitialWorkbenchState(options: {
     model?: string;
     renderMode?: RenderMode;
     defaultPreset?: string | null;
+    shellIsolation?: ShellIsolationPreferences;
 }): WorkbenchState;
 export declare function createInputHistory(limit?: number): InputHistory;
 export declare function workbenchReducer(state: WorkbenchState, action: WorkbenchAction): WorkbenchState;

package/dist/tui/workbench.js

@@ -18,6 +18,7 @@ export function createInitialWorkbenchState(options) {
         runModel: options.model,
         renderMode: options.renderMode ?? "markdown",
         defaultPreset: options.defaultPreset,
+        shellIsolation: options.shellIsolation,
     };
 }
 export function createInputHistory(limit = 100) {
@@ -188,7 +189,7 @@ export function parseWorkbenchCommand(input) {
             const [field, ...valueParts] = rest;
             if (!field)
                 return { kind: "config" };
-            if (field === "preset") {
+            if (field === "preset" || field === "isolation" || field === "isolator") {
                 return { kind: "config", field, value: valueParts.join(" ").trim() || undefined };
             }
             return { kind: "invalid", command: `${name} ${field}` };
@@ -290,6 +291,8 @@ export function helpText() {
         "/transcript      show a plain-text transcript preview",
         "/export [file]   save the plain-text transcript to a file",
         "/config preset   save default preset; use none/off for no preset, reset for built-in",
+        "/config isolation save shell isolation mode: none, auto, or required",
+        "/config isolator save agent-isolator path; use none/off to clear",
         "/preset [name]   show or set preset; use none/off to clear",
         "/model [name]    show or set explicit model; use auto/none/off to clear",
         "/access [mode]   show or set local tool access: off, approval, or full",