windows-development-sandbox 1.11.7 → 1.12.0

package/README.md

@@ -24,8 +24,9 @@ irm https://github.com/JoshDiDuca/windows-development-sandbox/releases/latest/do
 
 It checks your PC, offers to turn on Windows Sandbox, and asks **1) Just me** or **2) Everyone on this PC** (needs
 admin). It brings its own private copy of Node.js; nothing else is installed system-wide, and no Start menu shortcut
-unless you ask for one. `sandbox update` installs newer versions (and can do it by itself); a version that fails to
-start is rolled back automatically, and `sandbox update --rollback` goes back one by hand.
+unless you ask for one. `sandbox update` installs newer versions (and can do it by itself), even while a sandbox runs:
+the sandbox keeps its version until it restarts. A version that fails to start is rolled back automatically, and
+`sandbox update --rollback` goes back one by hand.
 
 Needs Windows 10/11 **Pro, Enterprise or Education**. Have Node.js 20+? `npm install -g windows-development-sandbox`
 works too. [Scopes, options (`-Version`, `-StartMenuShortcut` ...), upgrading, uninstall](docs/install.md)
@@ -54,12 +55,14 @@ The first start downloads what the project needs (a few minutes, once). After th
 |---|---|
 | **Safe by default** | The agent sees only your project folder. Credentials are stripped before anything is copied in, your LAN is blocked, and nothing the sandbox writes can run on your PC. |
 | **Languages** | Node, Python, Rust, C/C++ (GCC or MSVC), .NET (incl. .NET Framework targeting), Go, Java, Ruby, PHP, Deno, Bun, PowerShell 7, with pnpm, yarn, Volta, uv, pyenv, Maven, Gradle, Composer, gh ... |
-| **Apps and tools** | VS Code (set up for your languages, with their extensions) and Windows Terminal, plus 60 optional apps and tools by category: DBeaver, pgAdmin, Bruno, Godot, Blender, kubectl, jq, ripgrep ... and programs of your own |
+| **Apps and tools** | VS Code (set up for your languages, with their extensions) and Windows Terminal, plus 60 optional apps and tools by category: DBeaver, pgAdmin, Bruno, Godot, Blender, kubectl, jq, ripgrep ... and programs of your own. Agent add-ons too: rtk and Headroom (fewer tokens), ccusage, Playwright and Context7 MCP servers, claude-mem, REA. Playwright works out of the box with Edge |
 | **Databases** | PostgreSQL, MySQL, MongoDB, Redis and DynamoDB Local with a web UI, started when the project uses them, or any time with `--database` / `sandbox db` |
 | **Agents** | Claude Code, Codex, Gemini, opencode, Qwen, Crush, Copilot, Kilo, Amp, Cline, Continue, Kimi, Aider, DeepSeek agents |
 | **Smart** | Detects what the project needs from its files, respects version files, installs in parallel and reuses everything |
 | **Several projects** | `sandbox claude` from another project joins the running sandbox: its own folder, tools, versions, databases and environment, set up on demand. Start several agents at once (`--session claude@A --session codex@B`, or the menu) and attach to any of them from any terminal |
 | **Picks up where you left off** | After a crash or a restart, `sandbox resume` reopens the last sessions; `sandbox restart` restarts the agents in place and they continue their conversation |
+| **Leaves nothing behind** | When an agent's session ends, everything it started ends with it, background servers included. The web UI's server stops when no browser uses it, and nothing of this tool keeps running on your PC once the sandbox is closed |
+| **GitHub, safely** | Give sandboxes a fine-grained GitHub token you made for them (`sandbox github login`, `github.shareToken`): `gh` and `git push` work inside, and the token never lands in the sandbox's files |
 | **Feels like home** | Your desktop look, Claude settings, MCP servers and conversation history come along; history syncs back. Logins you save (`sandbox account`) are kept encrypted for your Windows user |
 
 ## Built for heavy workloads
@@ -98,10 +101,12 @@ Details and settings: [troubleshooting](docs/troubleshooting.md#the-sandbox-clos
 | `sandbox exec -- <cmd>` | run a command inside |
 | `sandbox config get\|set\|reset\|list` | read and change any setting from the command line (`export` / `import` to share them) |
 | `sandbox account` | save, switch and rename agent logins |
+| `sandbox github` / `vpn` | the GitHub token for sandboxes; the VPN login and status |
 | `sandbox web` | (Beta) the web UI: start, stop, status, open |
 | `sandbox stop` / `hide` / `show` | shut down, hide or show the window |
 | `sandbox data` / `storage` | what's stored and how big, freeing space, moving the data folder |
 | `sandbox setup` / `doctor` / `repair` | check this PC, see what will be installed, fix common problems |
+| `sandbox engine` | the engines and what each can do on this PC; `engine clean` stops HCS systems left running |
 | `sandbox logs [-f] [--crash]` | the sandbox log, or the report of the last crash |
 | `sandbox update [--rollback]` / `--version` | update (or go back one version); the installed version |
 
@@ -117,14 +122,15 @@ keeps every feature it has.
 | **Web UI** (`sandbox web`, `web.enabled`) | Beta | Agents, sessions with live terminals, the sandbox's status, apps, accounts and every setting in your browser, with search (Ctrl+K) and a folder picker; on this PC only (loopback, signed in with a token). `web.openOnLaunch` opens it with every sandbox. [web-ui.md](docs/web-ui.md) |
 | **Agent commands** (`sandbox agent-commands on`) | Beta | Typing `claude`, `codex` ... in any folder starts it in a hidden sandbox and attaches your terminal |
 | **Contained storage** (`sandbox storage contained on`) | Beta | Tools, logins and logs in one disk image per data set, mounted only while a sandbox runs. One admin prompt per launch. [engines](docs/design/engines.md) |
-| **VPN** (`sandbox vpn`, `vpn.enabled`) | Alpha | The sandbox's traffic through NordVPN, your own OpenVPN profile or a WireGuard config, with a kill switch. Not yet tried on a real PC: read [vpn.md](docs/vpn.md) first |
-| **HCS engine** (`sandbox.engine: hcs`, `sandbox engine`) | Alpha | Headless agents in a Hyper-V isolated Server Core container. `sandbox engine check hcs` shows what your PC lacks; starting it is not enabled yet |
+| **VPN** (`sandbox vpn`, `vpn.enabled`) | Alpha | The sandbox's traffic through NordVPN, your own OpenVPN profile or a WireGuard config, with a kill switch that is checked with a real connection. The first real try fixed the install and the kill switch; a tunnel carrying traffic is not confirmed yet: read [vpn.md](docs/vpn.md) first |
+| **HCS engine** (`sandbox.engine: hcs`, `sandbox engine`) | Alpha | Headless agents in a Hyper-V isolated Server Core container. `sandbox engine check hcs` shows what your PC lacks; starting it is not enabled yet. Its create, start and stop steps pass on GitHub's Windows Server 2022 and 2025 runners |
 
 ## Known gaps
 
 - Adding a folder to a RUNNING sandbox needs Windows 11 24H2+ with the updated Windows Sandbox (`wsb share`,
   untested). On older Windows, folders inside a project root open at once and anything else offers a restart.
-  [Details, and how to get `wsb`](docs/projects.md#adding-folders-to-a-running-sandbox-wsb-share).
+  [Details, and how to get `wsb`](docs/projects.md#adding-folders-to-a-running-sandbox-wsb-share). A way for older
+  Windows through HCS is designed and waiting for a test on a real PC ([design](docs/design/hcs-live-folders.md)).
 - Windows Sandbox runs one sandbox at a time per PC; every project and agent shares it.
 - What is planned next: [roadmap](docs/roadmap.md).
 

package/config.example.json

@@ -9,11 +9,12 @@
     "include": []
   },
   "audit": {
-    "enabled": false,
-    "days": 14,
+    "enabled": true,
+    "days": 7,
     "maxMb": 100,
     "processes": true,
-    "files": true
+    "files": true,
+    "commits": true
   },
   "mappings": [],
   "sandbox": {

package/dist/app/features/apps/apps-rows.d.ts

@@ -21,7 +21,10 @@ export interface AppsSource {
 }
 /** The files as they are on disk. */
 export declare const SAVED: AppsSource;
-/** The catalogue entries a file can change (a project cannot change an app that has a setting of its own). */
+/**
+ * The catalogue entries a file can change (a project cannot change an app that has a setting of its own, nor an agent
+ * add-on that is yours only).
+ */
 export declare function entriesOf(file: ConfigFile): AppEntry[];
 /** Is the entry on in this source? */
 export declare function appIsOn(entry: AppEntry, file: ConfigFile, source: AppsSource): boolean;

package/dist/app/features/apps/apps-rows.js

@@ -17,9 +17,12 @@ export const SAVED = {
     setting: (file, key) => _.get(file.userConfig(), key),
     custom: (file) => (file.isProject ? {} : file.userConfig().apps.custom),
 };
-/** The catalogue entries a file can change (a project cannot change an app that has a setting of its own). */
+/**
+ * The catalogue entries a file can change (a project cannot change an app that has a setting of its own, nor an agent
+ * add-on that is yours only).
+ */
 export function entriesOf(file) {
-    return APPS.filter((a) => !(file.isProject && a.setting));
+    return APPS.filter((a) => !(file.isProject && (a.setting || a.userOnly)));
 }
 /** Downloaded already (into this data folder), so the next sandbox starts it without a download. */
 function installed(entry, dataPath) {
@@ -57,6 +60,8 @@ export function appRows(file, dataPath, source = SAVED) {
         cli: Boolean(entry.cli),
         mesa: entry.needs?.includes('mesa') ?? false,
         fullGitOnly: Boolean(entry.fullGitOnly),
+        ...(entry.plugsInto ? { plugsInto: entry.plugsInto } : {}),
+        ...(entry.service ? { service: true } : {}),
         ...settingParts(entry, file, source),
         installed: installed(entry, dataPath),
         on: appIsOn(entry, file, source),

package/dist/app/features/apps/apps.def.d.ts

@@ -32,6 +32,8 @@ export declare const AppRowSchema: z.ZodObject<{
     cli: z.ZodBoolean;
     mesa: z.ZodBoolean;
     fullGitOnly: z.ZodBoolean;
+    plugsInto: z.ZodOptional<z.ZodString>;
+    service: z.ZodOptional<z.ZodBoolean>;
     setting: z.ZodOptional<z.ZodString>;
     settingField: z.ZodOptional<z.ZodType<Field, unknown, z.core.$ZodTypeInternals<Field, unknown>>>;
     settingValue: z.ZodOptional<z.ZodUnknown>;
@@ -63,6 +65,8 @@ export declare const AppsListSchema: z.ZodObject<{
         cli: z.ZodBoolean;
         mesa: z.ZodBoolean;
         fullGitOnly: z.ZodBoolean;
+        plugsInto: z.ZodOptional<z.ZodString>;
+        service: z.ZodOptional<z.ZodBoolean>;
         setting: z.ZodOptional<z.ZodString>;
         settingField: z.ZodOptional<z.ZodType<Field, unknown, z.core.$ZodTypeInternals<Field, unknown>>>;
         settingValue: z.ZodOptional<z.ZodUnknown>;
@@ -100,6 +104,8 @@ export declare const listApps: import("../../kernel/define.js").QueryDef<z.ZodOb
         cli: z.ZodBoolean;
         mesa: z.ZodBoolean;
         fullGitOnly: z.ZodBoolean;
+        plugsInto: z.ZodOptional<z.ZodString>;
+        service: z.ZodOptional<z.ZodBoolean>;
         setting: z.ZodOptional<z.ZodString>;
         settingField: z.ZodOptional<z.ZodType<Field, unknown, z.core.$ZodTypeInternals<Field, unknown>>>;
         settingValue: z.ZodOptional<z.ZodUnknown>;
@@ -137,6 +143,17 @@ export declare const setCustomApps: import("../../kernel/define.js").OperationDe
 export declare const requestApp: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
     url: z.ZodString;
 }, z.core.$strip>, "apps.request">;
+/** One line under an app: a short label ('' for a warning on its own) and its text. */
+export interface AppDetail {
+    readonly label: string;
+    readonly text: string;
+    readonly warn?: boolean;
+}
+/**
+ * The lines under an app: its download, how it starts, what it plugs into, what it needs. A setting-backed entry with
+ * nothing to download (claude-mem) has no size, so no download lines. The menu draws the same lines with colours.
+ */
+export declare function appDetails(row: AppRow): AppDetail[];
 /** The apps page of one scope: a category per group (with a switch per app), your own programs and their actions. */
 export declare function appsPage(o: AppsList): Page;
 export declare const appsView: import("../../kernel/define.js").ViewDef<{
@@ -161,6 +178,8 @@ export declare const appsView: import("../../kernel/define.js").ViewDef<{
             cli: z.ZodBoolean;
             mesa: z.ZodBoolean;
             fullGitOnly: z.ZodBoolean;
+            plugsInto: z.ZodOptional<z.ZodString>;
+            service: z.ZodOptional<z.ZodBoolean>;
             setting: z.ZodOptional<z.ZodString>;
             settingField: z.ZodOptional<z.ZodType<Field, unknown, z.core.$ZodTypeInternals<Field, unknown>>>;
             settingValue: z.ZodOptional<z.ZodUnknown>;

package/dist/app/features/apps/apps.def.js

@@ -10,6 +10,12 @@ export const AppsScopeSchema = z
     .describe("Your own settings (all projects) or this folder's .sandbox-config.json (this project)");
 /** The groups the page shows; the menu and the web list the apps by these, so the navigation stays short. */
 export const APP_GROUPS = [
+    {
+        id: 'agents',
+        label: 'Agent add-ons',
+        description: 'Plug-ins for the agents: rtk and Headroom save tokens, claude-mem gives Claude a memory, ccusage reports token use, Playwright, Context7 and REA add MCP servers. Only your own settings turn them on (except REA).',
+        members: ['agents'],
+    },
     {
         id: 'editors',
         label: 'Editors & docs',
@@ -79,6 +85,8 @@ export const AppRowSchema = z.object({
     cli: z.boolean().describe('A command-line tool (on PATH), not a desktop app'),
     mesa: z.boolean().describe('Needs OpenGL on the CPU (Mesa)'),
     fullGitOnly: z.boolean().describe('Only with full git access'),
+    plugsInto: z.string().optional().describe('Which agents an add-on plugs into, and how'),
+    service: z.boolean().optional().describe('Started by the sandbox or the agent (a proxy, an MCP server)'),
     setting: z.string().optional().describe('The setting it stands for (VS Code, Windows Terminal)'),
     /** That setting's own Field and value (on, off or auto), so it is changed with its own control. */
     settingField: FieldSchema.optional(),
@@ -144,23 +152,52 @@ export const requestApp = defineOperation({
     text: (o) => 'Opened the request form in your browser: ' + o.url,
     surfaces: { except: { cli: 'a request is filed on GitHub; the address is in docs' } },
 });
-/** The lines under an app: its download, how it starts, what it needs. Plain text, like the CLI's. */
-function details(row) {
+/**
+ * The lines under an app: its download, how it starts, what it plugs into, what it needs. A setting-backed entry with
+ * nothing to download (claude-mem) has no size, so no download lines. The menu draws the same lines with colours.
+ */
+export function appDetails(row) {
+    const downloads = row.size !== '';
     return [
-        'Download  ~' +
-            row.size +
-            ' once, kept in C:\\AgentData\\tools\\' +
-            (row.setting ? '' : 'apps\\') +
-            row.id +
-            (row.installed ? ' (downloaded already)' : ''),
-        'Starts    ' + (row.cli ? 'from a terminal (on PATH)' : 'from the desktop or Start > Sandbox apps'),
-        ...(row.mesa ? ['Graphics  OpenGL on the CPU (Mesa) is added for it'] : []),
+        ...(downloads
+            ? [
+                {
+                    label: 'Download',
+                    text: '~' +
+                        row.size +
+                        ' once, kept in C:\\AgentData\\tools\\' +
+                        (row.setting ? '' : 'apps\\') +
+                        row.id +
+                        (row.installed ? ' (downloaded already)' : ''),
+                },
+                {
+                    label: 'Starts',
+                    text: row.service
+                        ? 'by the sandbox or the agent (no shortcut, not on PATH)'
+                        : row.cli
+                            ? 'from a terminal (on PATH)'
+                            : 'from the desktop or Start > Sandbox apps',
+                },
+            ]
+            : []),
+        ...(row.plugsInto ? [{ label: 'Plugs in', text: row.plugsInto }] : []),
+        ...(row.mesa ? [{ label: 'Graphics', text: 'OpenGL on the CPU (Mesa) is added for it' }] : []),
         ...(row.fullGitOnly
-            ? ['Needs full git access (Settings > Projects & setup > Git): it pushes with its own git.']
+            ? [
+                {
+                    label: '',
+                    text: 'Needs full git access (Settings > Projects & setup > Git): it pushes with its own git.',
+                    warn: true,
+                },
+            ]
             : []),
-        ...(row.setting ? ['Setting   ' + row.setting] : []),
+        ...(row.setting ? [{ label: 'Setting', text: row.setting }] : []),
     ];
 }
+/** The lines as plain text, like the CLI's. */
+function details(row) {
+    return appDetails(row).map((d) => (d.label ? d.label.padEnd(10) : '') + d.text);
+}
 /** The switch that turns an app on or off: one boolean field, changed in place. */
 function switchField(row) {
     return { name: 'on', key: ['apps', 'install'], kind: 'boolean', label: row.name, optional: false };

package/dist/app/features/apps/apps.run.d.ts

@@ -19,6 +19,8 @@ export declare const listAppsRun: import("../../kernel/define.js").Implementatio
         cli: import("zod").ZodBoolean;
         mesa: import("zod").ZodBoolean;
         fullGitOnly: import("zod").ZodBoolean;
+        plugsInto: import("zod").ZodOptional<import("zod").ZodString>;
+        service: import("zod").ZodOptional<import("zod").ZodBoolean>;
         setting: import("zod").ZodOptional<import("zod").ZodString>;
         settingField: import("zod").ZodOptional<import("zod").ZodType<import("../../kernel/fields.js").Field, unknown, import("zod/v4/core").$ZodTypeInternals<import("../../kernel/fields.js").Field, unknown>>>;
         settingValue: import("zod").ZodOptional<import("zod").ZodUnknown>;

package/dist/app/features/apps/apps.run.js

@@ -26,7 +26,7 @@ export const listAppsRun = implement(listApps, (ctx, input) => {
 export const toggleAppRun = implement(toggleApp, (ctx, input) => {
     const file = settingsFiles(ctx)[input.scope];
     const entry = APPS.find((a) => a.id === input.id);
-    if (!entry || (file.isProject && entry.setting))
+    if (!entry || (file.isProject && (entry.setting || entry.userOnly)))
         fail('"' + input.id + '" is not an app this scope can change.', 'Pick one of the apps the Apps page lists.');
     const name = entry.name;
     // A setting-backed app (VS Code, Windows Terminal) is its setting; a catalogue app is one id in apps.install.

package/dist/app/features/audit/audit.def.d.ts

@@ -0,0 +1,341 @@
+import { z } from 'zod';
+import { type Page } from '../../kernel/index.js';
+export declare const AUDIT_EVENT_KINDS: readonly ["proc", "file", "commit", "session", "guard", "note"];
+export declare const AUDIT_KIND_FILTERS: readonly ["all", "proc", "file", "commit", "session", "guard"];
+/** The session filter that means "not linked to any session". */
+export declare const NO_SESSION = "none";
+export declare const AuditRowSchema: z.ZodObject<{
+    time: z.ZodString;
+    kind: z.ZodEnum<{
+        file: "file";
+        session: "session";
+        note: "note";
+        commit: "commit";
+        proc: "proc";
+        guard: "guard";
+    }>;
+    what: z.ZodString;
+    command: z.ZodOptional<z.ZodString>;
+    parent: z.ZodOptional<z.ZodString>;
+    action: z.ZodOptional<z.ZodString>;
+    folder: z.ZodOptional<z.ZodString>;
+    project: z.ZodOptional<z.ZodString>;
+    session: z.ZodOptional<z.ZodString>;
+    agent: z.ZodOptional<z.ZodString>;
+    linked: z.ZodOptional<z.ZodEnum<{
+        process: "process";
+        "only-session": "only-session";
+    }>>;
+    count: z.ZodNumber;
+    sha: z.ZodOptional<z.ZodString>;
+    author: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuditRow = z.output<typeof AuditRowSchema>;
+export declare const AuditSessionSchema: z.ZodObject<{
+    commands: z.ZodNumber;
+    files: z.ZodNumber;
+    commits: z.ZodNumber;
+    id: z.ZodString;
+    agent: z.ZodString;
+    project: z.ZodString;
+    started: z.ZodString;
+    ended: z.ZodOptional<z.ZodString>;
+    last: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuditSession = z.output<typeof AuditSessionSchema>;
+export declare const AuditAgentSchema: z.ZodObject<{
+    commands: z.ZodNumber;
+    files: z.ZodNumber;
+    commits: z.ZodNumber;
+    agent: z.ZodString;
+    sessions: z.ZodNumber;
+}, z.core.$strip>;
+export declare const AuditListSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    keepDays: z.ZodNumber;
+    maxMb: z.ZodNumber;
+    bytes: z.ZodNumber;
+    folder: z.ZodString;
+    filter: z.ZodObject<{
+        days: z.ZodNumber;
+        kind: z.ZodEnum<{
+            file: "file";
+            all: "all";
+            session: "session";
+            commit: "commit";
+            proc: "proc";
+            guard: "guard";
+        }>;
+        session: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        project: z.ZodOptional<z.ZodString>;
+        grep: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    matched: z.ZodNumber;
+    events: z.ZodArray<z.ZodObject<{
+        time: z.ZodString;
+        kind: z.ZodEnum<{
+            file: "file";
+            session: "session";
+            note: "note";
+            commit: "commit";
+            proc: "proc";
+            guard: "guard";
+        }>;
+        what: z.ZodString;
+        command: z.ZodOptional<z.ZodString>;
+        parent: z.ZodOptional<z.ZodString>;
+        action: z.ZodOptional<z.ZodString>;
+        folder: z.ZodOptional<z.ZodString>;
+        project: z.ZodOptional<z.ZodString>;
+        session: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        linked: z.ZodOptional<z.ZodEnum<{
+            process: "process";
+            "only-session": "only-session";
+        }>>;
+        count: z.ZodNumber;
+        sha: z.ZodOptional<z.ZodString>;
+        author: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    totals: z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+        events: z.ZodNumber;
+        sessions: z.ZodNumber;
+    }, z.core.$strip>;
+    agents: z.ZodArray<z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+        agent: z.ZodString;
+        sessions: z.ZodNumber;
+    }, z.core.$strip>>;
+    sessions: z.ZodArray<z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+        id: z.ZodString;
+        agent: z.ZodString;
+        project: z.ZodString;
+        started: z.ZodString;
+        ended: z.ZodOptional<z.ZodString>;
+        last: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    unlinked: z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type AuditList = z.output<typeof AuditListSchema>;
+export declare const listAudit: import("../../kernel/define.js").QueryDef<z.ZodObject<{
+    days: z.ZodDefault<z.ZodNumber>;
+    kind: z.ZodDefault<z.ZodEnum<{
+        file: "file";
+        all: "all";
+        session: "session";
+        commit: "commit";
+        proc: "proc";
+        guard: "guard";
+    }>>;
+    session: z.ZodOptional<z.ZodString>;
+    agent: z.ZodOptional<z.ZodString>;
+    project: z.ZodOptional<z.ZodString>;
+    grep: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    enabled: z.ZodBoolean;
+    keepDays: z.ZodNumber;
+    maxMb: z.ZodNumber;
+    bytes: z.ZodNumber;
+    folder: z.ZodString;
+    filter: z.ZodObject<{
+        days: z.ZodNumber;
+        kind: z.ZodEnum<{
+            file: "file";
+            all: "all";
+            session: "session";
+            commit: "commit";
+            proc: "proc";
+            guard: "guard";
+        }>;
+        session: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        project: z.ZodOptional<z.ZodString>;
+        grep: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    matched: z.ZodNumber;
+    events: z.ZodArray<z.ZodObject<{
+        time: z.ZodString;
+        kind: z.ZodEnum<{
+            file: "file";
+            session: "session";
+            note: "note";
+            commit: "commit";
+            proc: "proc";
+            guard: "guard";
+        }>;
+        what: z.ZodString;
+        command: z.ZodOptional<z.ZodString>;
+        parent: z.ZodOptional<z.ZodString>;
+        action: z.ZodOptional<z.ZodString>;
+        folder: z.ZodOptional<z.ZodString>;
+        project: z.ZodOptional<z.ZodString>;
+        session: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        linked: z.ZodOptional<z.ZodEnum<{
+            process: "process";
+            "only-session": "only-session";
+        }>>;
+        count: z.ZodNumber;
+        sha: z.ZodOptional<z.ZodString>;
+        author: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    totals: z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+        events: z.ZodNumber;
+        sessions: z.ZodNumber;
+    }, z.core.$strip>;
+    agents: z.ZodArray<z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+        agent: z.ZodString;
+        sessions: z.ZodNumber;
+    }, z.core.$strip>>;
+    sessions: z.ZodArray<z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+        id: z.ZodString;
+        agent: z.ZodString;
+        project: z.ZodString;
+        started: z.ZodString;
+        ended: z.ZodOptional<z.ZodString>;
+        last: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    unlinked: z.ZodObject<{
+        commands: z.ZodNumber;
+        files: z.ZodNumber;
+        commits: z.ZodNumber;
+    }, z.core.$strip>;
+}, z.core.$strip>, "audit.list">;
+/** "14:03:22" today, "Oct 18 14:03" before (local time). */
+export declare function eventTime(iso: string, now?: number): string;
+/** The first few characters of a session id (enough to tell sessions apart, and to filter by). */
+export declare function shortId(id: string): string;
+/** What an event says, in one line. */
+export declare function eventWhat(e: AuditRow): string;
+/** The page: the period's totals, per agent, the sessions (each opens its own events), and the events. Pure. */
+export declare function auditPage(o: AuditList): Page;
+/** The command line that shows what a view address of this page shows (the menu runs it on the normal screen). */
+export declare function auditArgv(params?: Readonly<Record<string, string>>): string[];
+/** What the view's address can set. */
+export interface AuditParams {
+    readonly days?: string;
+    readonly kind?: string;
+    readonly session?: string;
+    readonly agent?: string;
+    readonly project?: string;
+    readonly grep?: string;
+}
+export declare const auditView: import("../../kernel/define.js").ViewDef<{
+    audit: import("../../kernel/define.js").QueryDef<z.ZodObject<{
+        days: z.ZodDefault<z.ZodNumber>;
+        kind: z.ZodDefault<z.ZodEnum<{
+            file: "file";
+            all: "all";
+            session: "session";
+            commit: "commit";
+            proc: "proc";
+            guard: "guard";
+        }>>;
+        session: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        project: z.ZodOptional<z.ZodString>;
+        grep: z.ZodOptional<z.ZodString>;
+        limit: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        keepDays: z.ZodNumber;
+        maxMb: z.ZodNumber;
+        bytes: z.ZodNumber;
+        folder: z.ZodString;
+        filter: z.ZodObject<{
+            days: z.ZodNumber;
+            kind: z.ZodEnum<{
+                file: "file";
+                all: "all";
+                session: "session";
+                commit: "commit";
+                proc: "proc";
+                guard: "guard";
+            }>;
+            session: z.ZodOptional<z.ZodString>;
+            agent: z.ZodOptional<z.ZodString>;
+            project: z.ZodOptional<z.ZodString>;
+            grep: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        matched: z.ZodNumber;
+        events: z.ZodArray<z.ZodObject<{
+            time: z.ZodString;
+            kind: z.ZodEnum<{
+                file: "file";
+                session: "session";
+                note: "note";
+                commit: "commit";
+                proc: "proc";
+                guard: "guard";
+            }>;
+            what: z.ZodString;
+            command: z.ZodOptional<z.ZodString>;
+            parent: z.ZodOptional<z.ZodString>;
+            action: z.ZodOptional<z.ZodString>;
+            folder: z.ZodOptional<z.ZodString>;
+            project: z.ZodOptional<z.ZodString>;
+            session: z.ZodOptional<z.ZodString>;
+            agent: z.ZodOptional<z.ZodString>;
+            linked: z.ZodOptional<z.ZodEnum<{
+                process: "process";
+                "only-session": "only-session";
+            }>>;
+            count: z.ZodNumber;
+            sha: z.ZodOptional<z.ZodString>;
+            author: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        totals: z.ZodObject<{
+            commands: z.ZodNumber;
+            files: z.ZodNumber;
+            commits: z.ZodNumber;
+            events: z.ZodNumber;
+            sessions: z.ZodNumber;
+        }, z.core.$strip>;
+        agents: z.ZodArray<z.ZodObject<{
+            commands: z.ZodNumber;
+            files: z.ZodNumber;
+            commits: z.ZodNumber;
+            agent: z.ZodString;
+            sessions: z.ZodNumber;
+        }, z.core.$strip>>;
+        sessions: z.ZodArray<z.ZodObject<{
+            commands: z.ZodNumber;
+            files: z.ZodNumber;
+            commits: z.ZodNumber;
+            id: z.ZodString;
+            agent: z.ZodString;
+            project: z.ZodString;
+            started: z.ZodString;
+            ended: z.ZodOptional<z.ZodString>;
+            last: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        unlinked: z.ZodObject<{
+            commands: z.ZodNumber;
+            files: z.ZodNumber;
+            commits: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>, "audit.list">;
+}, AuditParams, "audit">;