windows-development-sandbox 1.11.7 → 1.13.0

package/dist/cli/manifest.d.ts

@@ -499,47 +499,6 @@ declare const COMMAND_LIST: readonly [{
     readonly group: "Data";
     readonly args: readonly [];
     readonly options: readonly [];
-}, {
-    readonly name: "audit";
-    readonly summary: "what happened in your sandboxes: programs started, files changed, sessions, repo guard (turn it on: sandbox config set audit.enabled true)";
-    readonly group: "Health";
-    readonly json: true;
-    readonly args: readonly [];
-    readonly options: readonly [{
-        readonly flag: "--days";
-        readonly type: "number";
-        readonly value: "n";
-        readonly description: "the last n days (default: today)";
-        readonly default: 1;
-    }, {
-        flag: string;
-        type: "string" | "number" | "boolean" | "list";
-        description: string;
-        short?: string | undefined;
-        value?: string | undefined;
-        label?: string | undefined;
-        default?: string | number | undefined;
-        choices?: string[] | "harnesses" | "sessions" | "accounts" | undefined;
-        advanced?: boolean | undefined;
-        when?: string | undefined;
-        noMenu?: boolean | undefined;
-        group?: string | undefined;
-        shownAs?: string | undefined;
-    }, {
-        flag: string;
-        type: "string" | "number" | "boolean" | "list";
-        description: string;
-        short?: string | undefined;
-        value?: string | undefined;
-        label?: string | undefined;
-        default?: string | number | undefined;
-        choices?: string[] | "harnesses" | "sessions" | "accounts" | undefined;
-        advanced?: boolean | undefined;
-        when?: string | undefined;
-        noMenu?: boolean | undefined;
-        group?: string | undefined;
-        shownAs?: string | undefined;
-    }];
 }, {
     readonly name: "logs";
     readonly summary: "print the newest sandbox log";
@@ -810,17 +769,76 @@ declare const COMMAND_LIST: readonly [{
     readonly interactive: true;
 }, {
     readonly name: "web";
-    readonly summary: "(beta) your sandbox sessions in a browser on this PC: start, stop, status or open";
+    readonly summary: "(beta) your sandbox sessions in a browser on this PC (and, if you allow it, on your network)";
     readonly group: "Web";
-    readonly examples: readonly ["sandbox web open               start the web UI and open it in your browser"];
+    readonly examples: readonly ["sandbox web open               start the web UI and open it in your browser", "sandbox web lan-on             let devices you allow use it on your network", "sandbox web allow-device       show a one-time code for a phone", "sandbox web devices            who may use it; sandbox web revoke <id> signs one out"];
     readonly args: readonly [{
         readonly name: "action";
-        readonly description: "start the server, stop it, show whether it runs, or open it in your browser";
+        readonly description: "start, stop, status, open; devices, allow-device, revoke, revoke-all, lan-on, lan-off (remote access)";
         readonly required: false;
         readonly choices: readonly ["start", "stop", "status", "open"];
+    }, {
+        readonly name: "id";
+        readonly description: "(revoke) the device or sign-in id from sandbox web devices";
+        readonly required: false;
+        readonly when: "revoke";
+    }];
+    readonly options: readonly [{
+        flag: string;
+        type: "string" | "number" | "boolean" | "list";
+        description: string;
+        short?: string | undefined;
+        value?: string | undefined;
+        label?: string | undefined;
+        default?: string | number | undefined;
+        choices?: string[] | "harnesses" | "sessions" | "accounts" | undefined;
+        advanced?: boolean | undefined;
+        when?: string | undefined;
+        noMenu?: boolean | undefined;
+        group?: string | undefined;
+        shownAs?: string | undefined;
+    }, {
+        flag: string;
+        type: "string" | "number" | "boolean" | "list";
+        description: string;
+        short?: string | undefined;
+        value?: string | undefined;
+        label?: string | undefined;
+        default?: string | number | undefined;
+        choices?: string[] | "harnesses" | "sessions" | "accounts" | undefined;
+        advanced?: boolean | undefined;
+        when?: string | undefined;
+        noMenu?: boolean | undefined;
+        group?: string | undefined;
+        shownAs?: string | undefined;
     }];
-    readonly options: readonly [];
     readonly json: true;
+}, {
+    readonly name: "remote";
+    readonly summary: "(beta) use another Windows user's web UI from here, signed in with your Windows account";
+    readonly group: "Web";
+    readonly examples: readonly ["sandbox remote                 the menu over the owner of the running sandbox (their program, your role)", "sandbox remote alice --browser open alice's web UI in your browser, signed in"];
+    readonly args: readonly [{
+        readonly name: "user";
+        readonly description: "whose web UI (default: the owner of the running sandbox)";
+        readonly required: false;
+    }];
+    readonly options: readonly [{
+        flag: string;
+        type: "string" | "number" | "boolean" | "list";
+        description: string;
+        short?: string | undefined;
+        value?: string | undefined;
+        label?: string | undefined;
+        default?: string | number | undefined;
+        choices?: string[] | "harnesses" | "sessions" | "accounts" | undefined;
+        advanced?: boolean | undefined;
+        when?: string | undefined;
+        noMenu?: boolean | undefined;
+        group?: string | undefined;
+        shownAs?: string | undefined;
+    }];
+    readonly interactive: true;
 }, {
     readonly name: "_watch";
     readonly summary: "background history sync";

package/dist/cli/manifest.js

@@ -386,20 +386,6 @@ const COMMAND_LIST = [
         json,
     },
     { name: 'sync', summary: 'copy conversation history back to this PC now', group: 'Data', args: [], options: [] },
-    {
-        name: 'audit',
-        summary: 'what happened in your sandboxes: programs started, files changed, sessions, repo guard (turn it on: sandbox config set audit.enabled true)',
-        group: 'Health',
-        json,
-        args: [],
-        options: [
-            { flag: '--days', type: 'number', value: 'n', description: 'the last n days (default: today)', default: 1 },
-            text('--kind', 'kind', 'only proc, file, session or guard events', {
-                choices: ['proc', 'file', 'session', 'guard'],
-            }),
-            text('--grep', 'text', 'only events containing this text'),
-        ],
-    },
     {
         name: 'logs',
         summary: 'print the newest sandbox log',
@@ -554,20 +540,49 @@ const COMMAND_LIST = [
     },
     {
         name: 'web',
-        summary: '(beta) your sandbox sessions in a browser on this PC: start, stop, status or open',
+        summary: '(beta) your sandbox sessions in a browser on this PC (and, if you allow it, on your network)',
         group: 'Web',
-        examples: ['sandbox web open               start the web UI and open it in your browser'],
+        examples: [
+            'sandbox web open               start the web UI and open it in your browser',
+            'sandbox web lan-on             let devices you allow use it on your network',
+            'sandbox web allow-device       show a one-time code for a phone',
+            'sandbox web devices            who may use it; sandbox web revoke <id> signs one out',
+        ],
         args: [
             {
                 name: 'action',
-                description: 'start the server, stop it, show whether it runs, or open it in your browser',
+                description: 'start, stop, status, open; devices, allow-device, revoke, revoke-all, lan-on, lan-off (remote access)',
                 required: false,
                 choices: ['start', 'stop', 'status', 'open'],
             },
+            {
+                name: 'id',
+                description: '(revoke) the device or sign-in id from sandbox web devices',
+                required: false,
+                when: 'revoke',
+            },
+        ],
+        options: [
+            text('--role', 'view|control', '(allow-device) what the device may do (default view)', {
+                when: 'allow-device',
+                choices: ['view', 'control'],
+            }),
+            bool('--yes', '(revoke-all, lan-off) do not ask first', { short: '-y', noMenu: true }),
         ],
-        options: [],
         json,
     },
+    {
+        name: 'remote',
+        summary: "(beta) use another Windows user's web UI from here, signed in with your Windows account",
+        group: 'Web',
+        examples: [
+            'sandbox remote                 the menu over the owner of the running sandbox (their program, your role)',
+            "sandbox remote alice --browser open alice's web UI in your browser, signed in",
+        ],
+        args: [{ name: 'user', description: 'whose web UI (default: the owner of the running sandbox)', required: false }],
+        options: [bool('--browser', 'open it in your browser instead of the menu')],
+        interactive: true,
+    },
     { name: '_watch', summary: 'background history sync', group: 'Data', args: [], options: [], hidden: true },
     {
         name: '_web',

package/dist/cli/menu/io-menu.d.ts

@@ -1,4 +1,4 @@
-import { type Action, type AnyDefinition } from '../../app/kernel/index.js';
+import { type Action, type AnyDefinition, type OperationIO } from '../../app/kernel/index.js';
 import type { Context } from '../commands/context.js';
 import { type App } from '../tui/index.js';
 import type { ShellExit } from './shell.js';
@@ -12,10 +12,12 @@ export interface Performed {
     readonly notice?: string;
     readonly reload?: boolean;
 }
+/** How a definition is run: in this process (the menu), or on the owner's web UI (sandbox remote). */
+export type DefinitionRunner = (id: string, input: unknown, io: OperationIO) => Promise<unknown>;
 export declare class MenuOperations {
     private readonly app;
-    private readonly ctx;
-    constructor(app: App, ctx: Context);
+    private readonly runner;
+    constructor(app: App, ctx: Context, runner?: DefinitionRunner);
     /** Does what an action of a page says: follows a link, or asks for its fields and runs its operation. */
     perform(action: Action, where: Where, busy?: ShowBusy, onOutput?: (output: unknown) => void): Promise<Performed>;
     /** The values of an action's fields, from the editors that fit them (undefined: one was backed out of). */

package/dist/cli/menu/io-menu.js

@@ -66,10 +66,10 @@ function follow(target) {
 }
 export class MenuOperations {
     app;
-    ctx;
-    constructor(app, ctx) {
+    runner;
+    constructor(app, ctx, runner = (id, input, io) => runDefinition(id, ctx, input, io)) {
         this.app = app;
-        this.ctx = ctx;
+        this.runner = runner;
     }
     /** Does what an action of a page says: follows a link, or asks for its fields and runs its operation. */
     async perform(action, where, busy, onOutput) {
@@ -81,7 +81,14 @@ export class MenuOperations {
         const answers = await this.fields(action, def, where);
         if (!answers)
             return {};
-        return { reload: true, notice: await this.run(def, { ...action.input, ...answers }, where, busy, onOutput) };
+        // An operation that opens a session's terminal (a new shell) leaves the menu to attach to it.
+        let opened;
+        const notice = await this.run(def, { ...action.input, ...answers }, where, busy, (output) => {
+            onOutput?.(output);
+            opened = def.kind === 'operation' ? def.opens?.(output) : undefined;
+        });
+        const exit = opened ? follow(opened).exit : undefined;
+        return { reload: true, notice, ...(exit ? { exit } : {}) };
     }
     /** The values of an action's fields, from the editors that fit them (undefined: one was backed out of). */
     async fields(action, def, where) {
@@ -110,7 +117,7 @@ export class MenuOperations {
             log: (text, tone) => said.push(tone === 'warn' || tone === 'danger' ? Theme.warn(text) : text),
         });
         try {
-            const output = await runDefinition(def.id, this.ctx, input, io);
+            const output = await this.runner(def.id, input, io);
             onOutput?.(output);
             // The notice is one line: an operation that says several lines (accounts use) runs them together.
             const text = def.text?.(output)?.replace(/\n+/g, ' ');

package/dist/cli/menu/pages/apps-page.js

@@ -4,7 +4,7 @@
 // (apps.toggle), so the staging stays here: "r" runs the feature's request operation, "c" stages your own programs.
 import _ from 'lodash';
 import { errMsg } from '../../../core/util/index.js';
-import { APP_GROUPS, appIsOn, appRows, customRows, CUSTOM_KEY, entriesOf, INSTALL, ISSUES_URL, requestApp, REQUEST_APP, SAVED, } from '../../../app/features/apps/index.js';
+import { APP_GROUPS, appDetails, appIsOn, appRows, customRows, CUSTOM_KEY, entriesOf, INSTALL, ISSUES_URL, requestApp, REQUEST_APP, SAVED, } from '../../../app/features/apps/index.js';
 import { action } from '../../../app/kernel/index.js';
 import { Theme } from '../../tui/index.js';
 import { ValueEditor } from '../settings/value-editor.js';
@@ -37,20 +37,7 @@ export function appsCategories(file) {
     ];
 }
 function appItem(row) {
-    const notes = [
-        Theme.muted('Download  ') +
-            '~' +
-            row.size +
-            ' once, kept in C:\\AgentData\\tools\\' +
-            (row.setting ? '' : 'apps\\') +
-            row.id,
-        Theme.muted('Starts    ') + (row.cli ? 'from a terminal (on PATH)' : 'from the desktop or Start > Sandbox apps'),
-        ...(row.mesa ? [Theme.muted('Graphics  ') + 'OpenGL on the CPU (Mesa) is added for it'] : []),
-        ...(row.fullGitOnly
-            ? [Theme.warn('Needs full git access (Settings > Projects & setup > Git): it pushes with its own git.')]
-            : []),
-        ...(row.setting ? [Theme.muted('Setting   ') + row.setting] : []),
-    ];
+    const notes = appDetails(row).map((d) => d.warn ? Theme.warn(d.text) : (d.label ? Theme.muted(d.label.padEnd(10)) : '') + d.text);
     return {
         value: row.id,
         label: row.name,

package/dist/cli/menu/pages/maintenance-page.d.ts

@@ -3,6 +3,7 @@ import { type Engines, type Leftovers } from '../../../app/features/engine/index
 import { type HealthLast } from '../../../app/features/health/index.js';
 import { type ContainedStatus, type StorageShow } from '../../../app/features/storage/index.js';
 import { type LogFiles } from '../../../app/features/logs/index.js';
+import { type AuditList } from '../../../app/features/audit/index.js';
 import { type UpdatesStatus } from '../../../app/features/updates/updates.def.js';
 import { type WebStatus } from '../../../app/features/web/index.js';
 import type { Context } from '../../commands/context.js';
@@ -31,6 +32,8 @@ export interface MaintenanceModel {
     readonly engine: Engines | null;
     /** HCS systems left running, read with the engines. */
     readonly leftovers?: Leftovers | null;
+    /** The audit log today (the audit view's query; null: not read yet or unreadable). */
+    readonly audit?: AuditList | null;
     /** The web UI's server (the web feature's status): running or not, and its address. */
     readonly web: WebStatus;
     /** The commands listed under "More commands". */
@@ -52,6 +55,7 @@ export declare class MaintenancePage extends ListPage<string> {
     private engine;
     private leftovers;
     private web;
+    private audit;
     private readonly operations;
     /** The newer version the last check found (null: none, or not looked yet). */
     private latest;

package/dist/cli/menu/pages/maintenance-page.js

@@ -1,6 +1,6 @@
 // Section 7: keeping things in shape. Updates (the program and your saved settings), Data & storage (the data folder,
-// what is stored, clean-up), Health (doctor, repair and this PC's setup together), the logs, and the less common
-// commands. Each is a category on the left and loads when you open it.
+// what is stored, clean-up), Health (doctor, repair and this PC's setup together), Activity (the audit log), the logs,
+// and the less common commands. Each is a category on the left and loads when you open it.
 import { dataPage, showData } from '../../../app/features/data/index.js';
 import { readQuery } from '../../../app/registry.js';
 import { errMsg } from '../../../core/util/index.js';
@@ -8,6 +8,7 @@ import { enginePage, engineLeftovers, engineStatus, } from '../../../app/feature
 import { healthPage, lastHealth } from '../../../app/features/health/index.js';
 import { containedStatus, showStorage, storagePage, } from '../../../app/features/storage/index.js';
 import { CRASH, listLogs, logsPage } from '../../../app/features/logs/index.js';
+import { auditArgv, auditPage, listAudit } from '../../../app/features/audit/index.js';
 import { updatesPage, updatesStatus } from '../../../app/features/updates/updates.def.js';
 import { webPage, webStatus } from '../../../app/features/web/index.js';
 import { commandSpec } from '../../manifest.js';
@@ -32,6 +33,11 @@ const CATEGORIES = [
         label: 'Health',
         description: 'Checks this PC and your settings, repairs problems, and sets up Windows Sandbox.',
     },
+    {
+        id: 'activity',
+        label: 'Activity',
+        description: 'What your agents ran, changed and committed in the last 24 hours (the audit log). Enter on a session shows all of it.',
+    },
     { id: 'logs', label: 'Logs', description: "The sandbox's own logs." },
     {
         id: 'web',
@@ -45,14 +51,13 @@ const CATEGORIES = [
     },
     { id: 'more', label: 'More commands', description: 'Less common commands.' },
 ];
-const MORE_COMMANDS = ['sync', 'audit', 'config', 'generate', 'exec', 'agent-commands'];
+const MORE_COMMANDS = ['sync', 'config', 'generate', 'exec', 'agent-commands'];
 const NO_LOGS = { folder: '', files: [], crash: false };
 /** Until the status is read: the server counts as not running. */
 const NO_WEB = { running: false, port: null, address: null };
 /** Plain names for the commands under More commands. */
 const MORE_LABELS = {
     sync: 'Copy history back now',
-    audit: 'What happened in the sandbox',
     config: 'Your settings file',
     generate: 'Preview a start',
     exec: 'Run a command in the sandbox',
@@ -107,6 +112,10 @@ const NO_UPDATES = {
 function logsMenu(files) {
     return menuView({ ...logsPage(files), empty: undefined }, { category: 'logs', refresh: false });
 }
+/** The audit view (src/app/features/audit) as the Activity category's rows and keys (none until it was read). */
+function auditMenu(m) {
+    return m.audit ? menuView(auditPage(m.audit), { category: 'activity', prefix: 'audit:', refresh: false }) : undefined;
+}
 /** The Web UI view (src/app/features/web) as the menu's rows, keys and Enter labels, for the Web UI category. */
 function webMenu(m) {
     return menuView(webPage(m.web), { category: 'web', prefix: 'web:', refresh: false });
@@ -120,6 +129,7 @@ export function maintenanceOptions(m) {
     const updates = updatesMenu(m);
     const engine = engineMenu(m);
     const web = webMenu(m);
+    const audit = auditMenu(m);
     const more = m.more.map((c) => ({
         value: 'more:' + c.name,
         label: MORE_LABELS[c.name] ?? Text.humanize(c.name),
@@ -129,7 +139,16 @@ export function maintenanceOptions(m) {
     return {
         path: [],
         categories: CATEGORIES,
-        items: [...updates.items, ...dataItems(m), ...health.items, ...logs, ...web.items, ...engine.items, ...more],
+        items: [
+            ...updates.items,
+            ...dataItems(m),
+            ...health.items,
+            ...(audit?.items ?? []),
+            ...logs,
+            ...web.items,
+            ...engine.items,
+            ...more,
+        ],
         empty: 'Nothing here yet.',
         actions: maintenanceActions(m),
         enterLabel: (category, id) => category === 'health'
@@ -140,9 +159,11 @@ export function maintenanceOptions(m) {
                     ? engine.enterLabel(category, id)
                     : category === 'web'
                         ? web.enterLabel(category, id)
-                        : (category === 'data'
-                            ? storageMenu(m.storage)?.enterLabel(category, id) || dataMenuView(m.data)?.enterLabel(category, id)
-                            : undefined) || enterLabel(id ?? ''),
+                        : category === 'activity'
+                            ? (audit?.enterLabel(category, id) ?? '')
+                            : (category === 'data'
+                                ? storageMenu(m.storage)?.enterLabel(category, id) || dataMenuView(m.data)?.enterLabel(category, id)
+                                : undefined) || enterLabel(id ?? ''),
     };
 }
 /**
@@ -201,6 +222,8 @@ function maintenanceActions(m) {
                 return [{ key: 'l', label: m.engine ? 'check again' : 'check' }, ...engineMenu(m).actions];
             case 'web':
                 return webMenu(m).actions;
+            case 'activity':
+                return auditMenu(m)?.actions ?? [];
             default:
                 return [];
         }
@@ -217,6 +240,7 @@ export class MaintenancePage extends ListPage {
     engine = null;
     leftovers = null;
     web = NO_WEB;
+    audit = null;
     operations;
     /** The newer version the last check found (null: none, or not looked yet). */
     latest = null;
@@ -235,6 +259,7 @@ export class MaintenancePage extends ListPage {
             engine: this.engine,
             leftovers: this.leftovers,
             web: this.web,
+            audit: this.audit,
             more: MORE_COMMANDS.flatMap((name) => {
                 const spec = commandSpec(name);
                 return spec ? [{ name, summary: spec.summary }] : [];
@@ -259,6 +284,13 @@ export class MaintenancePage extends ListPage {
         }
         this.last = (await readQuery(lastHealth, this.ctx)).last;
         this.updates = await readQuery(updatesStatus, this.ctx);
+        try {
+            this.audit = await readQuery(listAudit, this.ctx, { limit: 200 });
+        }
+        catch {
+            // An unreadable log: the category says there is nothing yet.
+            this.audit = null;
+        }
         try {
             this.web = await readQuery(webStatus, this.ctx);
         }
@@ -306,6 +338,17 @@ export class MaintenancePage extends ListPage {
                     return await this.operations.perform(chosen.action, [this.label], (text) => this.busy(text));
                 return {};
             }
+            // Activity: a session's row shows its events on the normal screen (sandbox audit --session ...); turning the
+            // log on runs the settings operation.
+            if (this.category === 'activity') {
+                const chosen = auditMenu(this.model())?.resolve(result);
+                if (chosen?.kind !== 'action')
+                    return {};
+                const target = chosen.action.kind === 'link' ? chosen.action.target : undefined;
+                if (target?.kind === 'view')
+                    return { exit: { kind: 'run', argv: auditArgv(target.params) } };
+                return await this.operations.perform(chosen.action, [this.label], (text) => this.busy(text));
+            }
             if (key === 'm' || id === 'data:measure')
                 return await this.measure();
             // Only the open category's rows and keys: `f` and Enter mean something else in Health.

package/dist/cli/menu/remote-menu.d.ts

@@ -0,0 +1,19 @@
+import { type AnyView, type Caller } from '../../app/kernel/index.js';
+import type { Context } from '../commands/context.js';
+import type { RemoteClient } from '../services/remote-client.js';
+import { type App } from '../tui/index.js';
+/** The views of the owner's program this role may open (remote access itself is the owner's). */
+export declare function remoteViews(role: Caller): AnyView[];
+export declare class RemoteMenu {
+    private readonly app;
+    private readonly client;
+    private readonly owner;
+    private readonly caller;
+    private readonly operations;
+    constructor(app: App, ctx: Context, client: RemoteClient, owner: string, caller: Caller);
+    private title;
+    /** The list of areas, until Esc. */
+    start(): Promise<void>;
+    private page;
+    private showView;
+}

package/dist/cli/menu/remote-menu.js

@@ -0,0 +1,108 @@
+// `sandbox remote`: the menu drawn over another Windows user's program (docs/design/remote-access.md). Every view the
+// web UI has is drawn by the menu's own renderer (menuView) from the shared core's pure definitions; its queries and
+// operations run on the owner's web UI over the RPC socket, which checks the role this user was given and writes each
+// action to the owner's audit log. Nothing here runs on this user's own settings or data.
+import { NAV, navViews, viewById } from '../../app/features/defs.js';
+import { NO_QUESTIONS, allows, viewInputs, } from '../../app/kernel/index.js';
+import { errMsg, safeText } from '../../core/util/index.js';
+import { Theme } from '../tui/index.js';
+import { MenuOperations } from './io-menu.js';
+import { menuView } from './render-view.js';
+/** The views of the owner's program this role may open (remote access itself is the owner's). */
+export function remoteViews(role) {
+    return navViews(NAV)
+        .map((id) => viewById(id))
+        .filter((v) => v !== undefined)
+        .filter((v) => Object.values(v.queries).every((q) => allows(role, q.access ?? 'view')));
+}
+export class RemoteMenu {
+    app;
+    client;
+    owner;
+    caller;
+    operations;
+    constructor(app, ctx, client, owner, caller) {
+        this.app = app;
+        this.client = client;
+        this.owner = owner;
+        this.caller = caller;
+        this.operations = new MenuOperations(app, ctx, (id, input, io) => client.run(id, input, io));
+    }
+    title() {
+        return safeText(this.owner) + "'s sandbox";
+    }
+    /** The list of areas, until Esc. */
+    async start() {
+        const views = remoteViews(this.caller);
+        const role = this.caller.kind === 'owner' ? 'owner' : this.caller.role;
+        let at;
+        for (;;) {
+            const picked = await this.app.list({
+                path: [this.title()],
+                intro: [
+                    'You are using ' + safeText(this.owner) + "'s program with the role " + role + '.',
+                    'What you do runs as ' + safeText(this.owner) + ' and is written to their audit log.',
+                ],
+                items: views.map((v) => ({ value: v.id, label: v.title, description: v.summary })),
+                startAt: at,
+                escapeLabel: 'quit',
+                enterLabel: 'open',
+            });
+            if (picked.kind !== 'pick')
+                return;
+            at = picked.value;
+            const view = views.find((v) => v.id === picked.value);
+            if (view)
+                await this.showView(view);
+        }
+    }
+    async page(view) {
+        const inputs = viewInputs(view, {});
+        const data = {};
+        for (const [name, query] of Object.entries(view.queries))
+            data[name] = await this.client.run(query.id, inputs[name], NO_QUESTIONS);
+        return view.build(data, {});
+    }
+    async showView(view) {
+        let notice;
+        for (;;) {
+            let page;
+            try {
+                page = await this.page(view);
+            }
+            catch (e) {
+                await this.app.message({ path: [this.title(), view.title], lines: [safeText(errMsg(e))], tone: 'error' });
+                return;
+            }
+            const mv = menuView(page);
+            const result = await this.app.list({
+                path: [this.title(), view.title],
+                intro: page.notice ? [safeText(page.notice.text)] : undefined,
+                items: mv.items,
+                actions: mv.actions,
+                enterLabel: mv.enterLabel,
+                notice,
+                empty: page.empty?.text,
+            });
+            if (result.kind === 'back')
+                return;
+            const chosen = mv.resolve(result);
+            notice = undefined;
+            if (!chosen || chosen.kind === 'refresh')
+                continue;
+            const action = chosen.action;
+            if (action.kind === 'link') {
+                notice =
+                    action.target.kind === 'terminal'
+                        ? Theme.muted('Attach to it from your own terminal: sandbox attach ' + safeText(action.target.session))
+                        : Theme.muted('That opens on ' + safeText(this.owner) + "'s side only.");
+                continue;
+            }
+            const done = await this.operations.perform(action, [this.title(), view.title], (text) => {
+                notice = text;
+                this.app.redraw();
+            });
+            notice = done.notice;
+        }
+    }
+}

package/dist/cli/menu/views.js

@@ -7,6 +7,7 @@ import { accountsView } from '../../app/features/accounts/index.js';
 import { appsView } from '../../app/features/apps/index.js';
 import { healthView } from '../../app/features/health/index.js';
 import { logsView } from '../../app/features/logs/index.js';
+import { auditView } from '../../app/features/audit/index.js';
 import { projectsView } from '../../app/features/projects/index.js';
 import { sandboxView } from '../../app/features/sandbox/index.js';
 import { sessionsView } from '../../app/features/sessions/index.js';
@@ -17,6 +18,7 @@ import { updatesView } from '../../app/features/updates/index.js';
 import { webView } from '../../app/features/web/index.js';
 import { vpnView } from '../../app/features/vpn/index.js';
 import { githubView } from '../../app/features/github/index.js';
+import { accessView } from '../../app/features/access/index.js';
 export const MENU_VIEWS = [
     { view: agentsView, section: 'Agents' },
     { view: sessionsView, section: 'Sessions' },
@@ -29,9 +31,11 @@ export const MENU_VIEWS = [
     { view: dataView, section: 'Maintenance' },
     { view: storageView, section: 'Maintenance' },
     { view: logsView, section: 'Maintenance' },
+    { view: auditView, section: 'Maintenance' },
     { view: updatesView, section: 'Maintenance' },
     { view: engineView, section: 'Maintenance' },
     { view: webView, section: 'Maintenance' },
+    { view: accessView, section: 'Maintenance' },
     // The Settings page draws the VPN row itself (its login is staged with the settings); the view lists its operations.
     { view: vpnView, section: 'Settings' },
     // The same for the GitHub token row.