windows-development-sandbox 1.18.3 → 1.20.0

package/dist/app/features/agents/env.run.d.ts

@@ -0,0 +1,43 @@
+export declare const agentEnvRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").QueryDef<import("zod").ZodObject<{
+    agent: import("zod").ZodDefault<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    rows: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        group: import("zod").ZodEnum<{
+            Subagents: "Subagents";
+            Models: "Models";
+            Limits: "Limits";
+            Behaviour: "Behaviour";
+            Privacy: "Privacy";
+            Network: "Network";
+            Providers: "Providers";
+        }>;
+        label: import("zod").ZodString;
+        kind: import("zod").ZodEnum<{
+            number: "number";
+            enum: "enum";
+            flag: "flag";
+            text: "text";
+        }>;
+        description: import("zod").ZodString;
+        choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        range: import("zod").ZodOptional<import("zod").ZodString>;
+        secret: import("zod").ZodBoolean;
+        defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+        value: import("zod").ZodNullable<import("zod").ZodString>;
+        set: import("zod").ZodBoolean;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+    custom: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agents.env">, import("../../../cli/commands/context.js").Context>;
+export declare const agentsEnvSetRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    name: import("zod").ZodString;
+    value: import("zod").ZodDefault<import("zod").ZodNullable<import("zod").ZodString>>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agents.env.set">, import("../../../cli/commands/context.js").Context>;

package/dist/app/features/agents/env.run.js

@@ -0,0 +1,86 @@
+// The work of the agent environment editor: reads an agent's variables from your settings (secrets never leave this
+// file), and sets or removes one through the same config file the settings use. Talks only through io.
+import _ from 'lodash';
+import { DEFAULTS } from '../../../core/config/index.js';
+import { fail } from '../../../core/util/index.js';
+import { CLAUDE_ENV, envSpec, envValue } from './claude-env.def.js';
+import { anthropicKeyProblem } from '../../../shared/accounts/index.js';
+import { implement } from '../../context.js';
+import { ConfigFile } from '../settings/settings-file.js';
+import { agentEnv, agentsEnvSet } from './env.def.js';
+/** The variables written in your own settings file for an agent (a value that is not text is ignored). */
+function ownVariables(file, agent) {
+    const raw = file.valueInFile(['harnesses', agent, 'environment']);
+    if (!_.isPlainObject(raw))
+        return {};
+    return Object.fromEntries(Object.entries(raw).filter(([, v]) => typeof v === 'string'));
+}
+function rangeText(spec) {
+    if (spec.kind !== 'number')
+        return undefined;
+    const min = spec.min ?? 0;
+    return 'A whole number from ' + min + (spec.max !== undefined ? ' to ' + spec.max : ' up') + '.';
+}
+/** The agent must be one of your settings' agents. */
+function knownAgent(file, agent) {
+    if (!(agent in file.userConfig().harnesses))
+        fail('There is no agent called "' + agent + '".');
+}
+export const agentEnvRun = implement(agentEnv, (ctx, input) => {
+    const file = ConfigFile.user(ctx.loaded.configPath);
+    knownAgent(file, input.agent);
+    const mine = ownVariables(file, input.agent);
+    const base = DEFAULTS.harnesses[input.agent]?.environment ?? {};
+    const names = new Set([...Object.keys(base), ...Object.keys(mine)]);
+    const catalogue = input.agent === 'claude' ? CLAUDE_ENV : [];
+    const rows = catalogue.map((spec) => {
+        const value = mine[spec.name] ?? base[spec.name];
+        return {
+            name: spec.name,
+            group: spec.group,
+            label: spec.label,
+            kind: spec.kind,
+            description: spec.description,
+            ...(spec.choices ? { choices: [...spec.choices] } : {}),
+            ...(rangeText(spec) ? { range: rangeText(spec) } : {}),
+            secret: spec.secret === true,
+            ...(spec.defaultText ? { defaultText: spec.defaultText } : {}),
+            // A secret's value stays here.
+            value: value === undefined || spec.secret ? null : value,
+            set: value !== undefined,
+            fromSandbox: mine[spec.name] === undefined && base[spec.name] !== undefined,
+        };
+    });
+    const known = new Set(catalogue.map((s) => s.name));
+    const custom = [...names]
+        .filter((n) => !known.has(n))
+        .sort()
+        .map((name) => ({ name, fromSandbox: mine[name] === undefined }));
+    return { agent: input.agent, rows, custom };
+});
+export const agentsEnvSetRun = implement(agentsEnvSet, (ctx, input) => {
+    const file = ConfigFile.user(ctx.loaded.configPath);
+    knownAgent(file, input.agent);
+    const spec = input.agent === 'claude' ? envSpec(input.name) : undefined;
+    const shownName = spec?.label ?? input.name;
+    const checked = envValue(spec, input.value, anthropicKeyProblem);
+    if ('problem' in checked)
+        fail(shownName + ': ' + checked.problem);
+    const mine = ownVariables(file, input.agent);
+    if (checked.save === null && mine[input.name] === undefined) {
+        const sandbox = DEFAULTS.harnesses[input.agent]?.environment?.[input.name] !== undefined;
+        return {
+            message: sandbox
+                ? shownName + ' is set by the sandbox; give it another value to change it.'
+                : shownName + ' was not set.',
+        };
+    }
+    const result = file.set(['harnesses', input.agent, 'environment', input.name], checked.save ?? undefined);
+    if (typeof result === 'object')
+        fail('It could not be saved: ' + result.problems.join('; '));
+    if (checked.save === null)
+        return { message: shownName + ' is removed.' };
+    // Only the value of a plain catalogue entry is said back: everything else may hold a login.
+    const said = spec && !spec.secret ? (spec.kind === 'flag' ? 'on' : checked.save) : 'saved';
+    return { message: shownName + (said === 'saved' ? ' is saved.' : ' is ' + said + '.') };
+});

package/dist/app/features/agents/index.d.ts

@@ -1,3 +1,5 @@
 export * from './agents.def.js';
 export * from './agents.run.js';
+export * from './env.def.js';
+export * from './env.run.js';
 export * from './agent-entry.js';

package/dist/app/features/agents/index.js

@@ -1,4 +1,6 @@
 // The agents feature: the list, starting an agent in a project of the running sandbox, and the agents in your settings.
 export * from './agents.def.js';
 export * from './agents.run.js';
+export * from './env.def.js';
+export * from './env.run.js';
 export * from './agent-entry.js';

package/dist/app/features/defs.d.ts

@@ -26,6 +26,18 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
     stopped: import("zod").ZodBoolean;
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "sandbox.stop">, OperationDef<import("zod").ZodObject<{
+    service: import("zod").ZodOptional<import("zod").ZodBoolean>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    outcome: import("zod").ZodEnum<{
+        failed: "failed";
+        nothing: "nothing";
+        alive: "alive";
+        declined: "declined";
+        cleaned: "cleaned";
+        "service-restarted": "service-restarted";
+    }>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "sandbox.cleanUp">, OperationDef<import("zod").ZodObject<{
     harness: import("zod").ZodOptional<import("zod").ZodString>;
     all: import("zod").ZodDefault<import("zod").ZodBoolean>;
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
@@ -64,6 +76,12 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "agents.remove">, OperationDef<import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    name: import("zod").ZodString;
+    value: import("zod").ZodDefault<import("zod").ZodNullable<import("zod").ZodString>>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agents.env.set">, OperationDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";
         user: "user";
@@ -273,6 +291,14 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
     deleted: import("zod").ZodBoolean;
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "vpn.logout">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    on: import("zod").ZodBoolean;
+    commands: import("zod").ZodArray<import("zod").ZodString>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agentCommands.on">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    on: import("zod").ZodBoolean;
+    commands: import("zod").ZodArray<import("zod").ZodString>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agentCommands.off">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "github.login">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     deleted: import("zod").ZodBoolean;
@@ -378,6 +404,9 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         text: import("zod").ZodString;
         at: import("zod").ZodString;
     }, import("zod/v4/core").$strip>>;
+    leftover: import("zod").ZodOptional<import("zod").ZodObject<{
+        text: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "sandbox.status">, QueryDef<import("zod").ZodObject<{
     wide: import("zod").ZodDefault<import("zod").ZodBoolean>;
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
@@ -423,7 +452,43 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         isDefault: import("zod").ZodBoolean;
         removable: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
+    subagents: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
 }, import("zod/v4/core").$strip>, "agents.list">, QueryDef<import("zod").ZodObject<{
+    agent: import("zod").ZodDefault<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    rows: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        group: import("zod").ZodEnum<{
+            Subagents: "Subagents";
+            Models: "Models";
+            Limits: "Limits";
+            Behaviour: "Behaviour";
+            Privacy: "Privacy";
+            Network: "Network";
+            Providers: "Providers";
+        }>;
+        label: import("zod").ZodString;
+        kind: import("zod").ZodEnum<{
+            number: "number";
+            enum: "enum";
+            flag: "flag";
+            text: "text";
+        }>;
+        description: import("zod").ZodString;
+        choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        range: import("zod").ZodOptional<import("zod").ZodString>;
+        secret: import("zod").ZodBoolean;
+        defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+        value: import("zod").ZodNullable<import("zod").ZodString>;
+        set: import("zod").ZodBoolean;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+    custom: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agents.env">, QueryDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";
         user: "user";
@@ -521,6 +586,7 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         canImport: import("zod").ZodBoolean;
         canLogin: import("zod").ZodBoolean;
         needsFile: import("zod").ZodBoolean;
+        ready: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "accounts.list">, QueryDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
@@ -926,7 +992,26 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         }>;
         text: import("zod").ZodString;
     }, import("zod/v4/core").$strip>>;
-}, import("zod/v4/core").$strip>, "vpn.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    lastFailure: import("zod").ZodNullable<import("zod").ZodObject<{
+        code: import("zod").ZodEnum<{
+            auth: "auth";
+            unreachable: "unreachable";
+            driver: "driver";
+            timeout: "timeout";
+            other: "other";
+        }>;
+        text: import("zod").ZodString;
+        at: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "vpn.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    enabled: import("zod").ZodBoolean;
+    dir: import("zod").ZodString;
+    found: import("zod").ZodArray<import("zod").ZodObject<{
+        command: import("zod").ZodString;
+        harness: import("zod").ZodString;
+        real: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agentCommands.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     shareToken: import("zod").ZodBoolean;
     gitAccess: import("zod").ZodEnum<{
         readonly: "readonly";
@@ -964,6 +1049,7 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         canImport: import("zod").ZodBoolean;
         canLogin: import("zod").ZodBoolean;
         needsFile: import("zod").ZodBoolean;
+        ready: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "accounts.services">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     lan: import("zod").ZodObject<{
@@ -1072,6 +1158,9 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             text: import("zod").ZodString;
             at: import("zod").ZodString;
         }, import("zod/v4/core").$strip>>;
+        leftover: import("zod").ZodOptional<import("zod").ZodObject<{
+            text: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "sandbox.status">;
 }, Record<string, never>, "sandbox">, import("../kernel/define.js").ViewDef<{
     sessions: QueryDef<import("zod").ZodObject<{
@@ -1121,8 +1210,55 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             isDefault: import("zod").ZodBoolean;
             removable: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
+        subagents: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
     }, import("zod/v4/core").$strip>, "agents.list">;
+    agentCommands: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        enabled: import("zod").ZodBoolean;
+        dir: import("zod").ZodString;
+        found: import("zod").ZodArray<import("zod").ZodObject<{
+            command: import("zod").ZodString;
+            harness: import("zod").ZodString;
+            real: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "agentCommands.status">;
 }, Record<string, never>, "agents">, import("../kernel/define.js").ViewDef<{
+    env: QueryDef<import("zod").ZodObject<{
+        agent: import("zod").ZodDefault<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        agent: import("zod").ZodString;
+        rows: import("zod").ZodArray<import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            group: import("zod").ZodEnum<{
+                Subagents: "Subagents";
+                Models: "Models";
+                Limits: "Limits";
+                Behaviour: "Behaviour";
+                Privacy: "Privacy";
+                Network: "Network";
+                Providers: "Providers";
+            }>;
+            label: import("zod").ZodString;
+            kind: import("zod").ZodEnum<{
+                number: "number";
+                enum: "enum";
+                flag: "flag";
+                text: "text";
+            }>;
+            description: import("zod").ZodString;
+            choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            range: import("zod").ZodOptional<import("zod").ZodString>;
+            secret: import("zod").ZodBoolean;
+            defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+            value: import("zod").ZodNullable<import("zod").ZodString>;
+            set: import("zod").ZodBoolean;
+            fromSandbox: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+        custom: import("zod").ZodArray<import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            fromSandbox: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "agents.env">;
+}, import("./agents/env.def.js").AgentEnvParams, "agentEnv">, import("../kernel/define.js").ViewDef<{
     settings: QueryDef<import("zod").ZodObject<{
         scope: import("zod").ZodDefault<import("zod").ZodEnum<{
             project: "project";
@@ -1201,6 +1337,7 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             canImport: import("zod").ZodBoolean;
             canLogin: import("zod").ZodBoolean;
             needsFile: import("zod").ZodBoolean;
+            ready: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "accounts.list">;
     services: QueryDef<import("zod").ZodObject<{
@@ -1224,6 +1361,7 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             canImport: import("zod").ZodBoolean;
             canLogin: import("zod").ZodBoolean;
             needsFile: import("zod").ZodBoolean;
+            ready: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "accounts.services">;
 }, Record<string, never>, "accounts">, import("../kernel/define.js").ViewDef<{
@@ -1631,6 +1769,17 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             }>;
             text: import("zod").ZodString;
         }, import("zod/v4/core").$strip>>;
+        lastFailure: import("zod").ZodNullable<import("zod").ZodObject<{
+            code: import("zod").ZodEnum<{
+                auth: "auth";
+                unreachable: "unreachable";
+                driver: "driver";
+                timeout: "timeout";
+                other: "other";
+            }>;
+            text: import("zod").ZodString;
+            at: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "vpn.status">;
 }, Record<string, never>, "vpn">, import("../kernel/define.js").ViewDef<{
     status: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{

package/dist/app/features/defs.js

@@ -1,4 +1,5 @@
 import { addAgent, agentsView, listAgents, makeDefaultAgent, removeAgent, startAgent } from './agents/agents.def.js';
+import { agentEnv, agentEnvView, agentsEnvSet } from './agents/env.def.js';
 import { accountsView, defaultAccount, listAccounts, removeAccount, renameAccount, saveAccount, useAccount, } from './accounts/accounts.def.js';
 import { listServices, serviceImport, serviceLogin, serviceLogout } from './accounts/services.def.js';
 import { appsView, listApps, requestApp, setCustomApps, toggleApp } from './apps/apps.def.js';
@@ -7,11 +8,12 @@ import { checkEngine, cleanEngine, engineLeftovers, engineStatus, engineView } f
 import { checkHealth, enableSandbox, healthView, lastHealth, repairHealth } from './health/health.def.js';
 import { cleanData, dataView, pruneStorage, showData } from './data/data.def.js';
 import { changeDataFolder, containedOff, containedOn, containedStatus, moveStorage, showStorage, storageView, useStorage, } from './storage/storage.def.js';
-import { hideWindow, sandboxStatus, sandboxView, showWindow, stopSandbox } from './sandbox/sandbox.def.js';
+import { cleanUpSandbox, hideWindow, sandboxStatus, sandboxView, showWindow, stopSandbox, } from './sandbox/sandbox.def.js';
 import { addProject, allProjects, chooseProjects, excludeProject, includeProject, listProjects, projectRoots, projectsView, removeProject, } from './projects/projects.def.js';
 import { listLogs, logsView, tailLog } from './logs/logs.def.js';
 import { auditView, listAudit } from './audit/audit.def.js';
 import { closeSession, listSessions, restartSessions, sessionsView, startShell } from './sessions/sessions.def.js';
+import { agentCommandsOff, agentCommandsOn, agentCommandsStatus } from './agent-commands/agent-commands.def.js';
 import { vpnLogin, vpnLogout, vpnStatus, vpnView } from './vpn/vpn.def.js';
 import { githubLogin, githubLogout, githubStatus, githubView } from './github/github.def.js';
 import { exportConfig, getSetting, importConfig, listSettings, resetSetting, setSetting, settingsView, } from './settings/settings.def.js';
@@ -23,6 +25,7 @@ export const OPERATIONS = [
     showWindow,
     hideWindow,
     stopSandbox,
+    cleanUpSandbox,
     restartSessions,
     startShell,
     closeSession,
@@ -30,6 +33,7 @@ export const OPERATIONS = [
     addAgent,
     makeDefaultAgent,
     removeAgent,
+    agentsEnvSet,
     setSetting,
     resetSetting,
     exportConfig,
@@ -66,6 +70,8 @@ export const OPERATIONS = [
     stopWeb,
     vpnLogin,
     vpnLogout,
+    agentCommandsOn,
+    agentCommandsOff,
     githubLogin,
     githubLogout,
     serviceImport,
@@ -81,6 +87,7 @@ export const QUERIES = [
     sandboxStatus,
     listSessions,
     listAgents,
+    agentEnv,
     listSettings,
     getSetting,
     browseFolder,
@@ -100,6 +107,7 @@ export const QUERIES = [
     engineLeftovers,
     webStatus,
     vpnStatus,
+    agentCommandsStatus,
     githubStatus,
     listServices,
     accessStatus,
@@ -108,6 +116,7 @@ export const VIEWS = [
     sandboxView,
     sessionsView,
     agentsView,
+    agentEnvView,
     settingsView,
     accountsView,
     appsView,
@@ -158,6 +167,7 @@ export const NAV = [
         label: 'Workspace',
         children: [
             { label: 'Agents', view: 'agents' },
+            { label: 'Claude environment', view: 'agentEnv' },
             { label: 'Sessions', view: 'sessions' },
             { label: 'Activity', view: 'audit' },
         ],

package/dist/app/features/sandbox/sandbox.def.d.ts

@@ -61,6 +61,9 @@ export declare const SandboxStatusSchema: z.ZodObject<{
         text: z.ZodString;
         at: z.ZodString;
     }, z.core.$strip>>;
+    leftover: z.ZodOptional<z.ZodObject<{
+        text: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type SandboxStatus = z.output<typeof SandboxStatusSchema>;
 /** "pong (2 session(s) running)" from the helper in the sandbox, in plain words. */
@@ -126,6 +129,9 @@ export declare const sandboxStatus: import("../../kernel/define.js").QueryDef<z.
         text: z.ZodString;
         at: z.ZodString;
     }, z.core.$strip>>;
+    leftover: z.ZodOptional<z.ZodObject<{
+        text: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, "sandbox.status">;
 export declare const showWindow: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
     message: z.ZodString;
@@ -133,6 +139,19 @@ export declare const showWindow: import("../../kernel/define.js").OperationDef<z
 export declare const hideWindow: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
     message: z.ZodString;
 }, z.core.$strip>, "sandbox.hideWindow">;
+export declare const cleanUpSandbox: import("../../kernel/define.js").OperationDef<z.ZodObject<{
+    service: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, z.ZodObject<{
+    outcome: z.ZodEnum<{
+        failed: "failed";
+        nothing: "nothing";
+        alive: "alive";
+        declined: "declined";
+        cleaned: "cleaned";
+        "service-restarted": "service-restarted";
+    }>;
+    message: z.ZodString;
+}, z.core.$strip>, "sandbox.cleanUp">;
 export declare const stopSandbox: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strip>, z.ZodObject<{
     stopped: z.ZodBoolean;
     message: z.ZodString;
@@ -201,5 +220,8 @@ export declare const sandboxView: import("../../kernel/define.js").ViewDef<{
             text: z.ZodString;
             at: z.ZodString;
         }, z.core.$strip>>;
+        leftover: z.ZodOptional<z.ZodObject<{
+            text: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, "sandbox.status">;
 }, Record<string, never>, "sandbox">;

package/dist/app/features/sandbox/sandbox.def.js

@@ -44,6 +44,11 @@ export const SandboxStatusSchema = z.object({
         .object({ text: z.string().describe('What happened'), at: z.string().describe('When (ISO time)') })
         .optional()
         .describe('The last sandbox ended unexpectedly'),
+    /** Windows Sandbox programs left behind by a sandbox that is gone (Windows then refuses to start a new one). */
+    leftover: z
+        .object({ text: z.string().describe('What was found') })
+        .optional()
+        .describe('Windows Sandbox programs are left over from a sandbox that is gone'),
 });
 const MessageSchema = z.object({ message: z.string().describe('What happened') });
 /** "pong (2 session(s) running)" from the helper in the sandbox, in plain words. */
@@ -92,6 +97,7 @@ export const sandboxStatus = defineQuery({
                 otherSessions: o.otherSessions,
                 repoGuard: o.repoGuard,
                 ...(o.lastEnd ? { lastEnd: o.lastEnd } : {}),
+                ...(o.leftover ? { leftover: o.leftover } : {}),
             };
         },
     },
@@ -116,6 +122,23 @@ export const hideWindow = defineOperation({
     text: (o) => o.message,
     cli: { name: 'hide', group: 'Sessions' },
 });
+export const cleanUpSandbox = defineOperation({
+    id: 'sandbox.cleanUp',
+    title: 'Clean up Windows Sandbox…',
+    summary: 'close the Windows Sandbox programs a dead sandbox left behind, so a new one can start',
+    input: z.object({
+        service: z
+            .boolean()
+            .optional()
+            .describe('Also restart the Windows Sandbox service (Windows asks for administrator permission)'),
+    }),
+    output: z.object({
+        outcome: z.enum(['nothing', 'alive', 'declined', 'cleaned', 'service-restarted', 'failed']),
+        message: z.string(),
+    }),
+    text: (o) => o.message,
+    cli: { name: 'cleanup', group: 'Sessions' },
+});
 export const stopSandbox = defineOperation({
     id: 'sandbox.stop',
     access: 'control',
@@ -175,6 +198,7 @@ function facts(o) {
                 fact('sessions', 'Sessions', String(sessions)),
             ]
             : []),
+        ...(o.leftover ? [fact('leftover', 'Windows Sandbox', o.leftover.text, { tone: 'warn' })] : []),
         ...(o.lastEnd ? [fact('lastEnd', 'Last sandbox', o.lastEnd.text, { tone: 'warn' })] : []),
         fact('account', 'Account', s.account ?? 'none selected (sandbox account use)'),
         fact('sync', 'Background sync', s.syncWatcher ? 'on' : 'off'),
@@ -229,21 +253,24 @@ export function sandboxPage(o) {
         title: 'Status',
         facts: facts(o),
         // Only the window action that changes something: show a hidden window, hide a shown one.
-        actions: running
-            ? [
-                o.sandbox.headless
-                    ? action(showWindow, {}, { key: 'w', verb: 'show', importance: 3 })
-                    : action(hideWindow, {}, { key: 'h', verb: 'hide', importance: 3 }),
-                action(stopSandbox, {}, { key: 'x', verb: 'stop', importance: 1 }),
-            ]
-            : o.lastEnd
+        actions: [
+            ...(o.leftover ? [action(cleanUpSandbox, {}, { key: 'c', verb: 'clean up', importance: 1 })] : []),
+            ...(running
                 ? [
-                    link({ kind: 'view', view: 'logs', params: { name: CRASH } }, 'Show crash report', {
-                        verb: 'show',
-                        importance: 2,
-                    }),
+                    o.sandbox.headless
+                        ? action(showWindow, {}, { key: 'w', verb: 'show', importance: 3 })
+                        : action(hideWindow, {}, { key: 'h', verb: 'hide', importance: 3 }),
+                    action(stopSandbox, {}, { key: 'x', verb: 'stop', importance: 1 }),
                 ]
-                : [],
+                : o.lastEnd
+                    ? [
+                        link({ kind: 'view', view: 'logs', params: { name: CRASH } }, 'Show crash report', {
+                            verb: 'show',
+                            importance: 2,
+                        }),
+                    ]
+                    : []),
+        ],
     };
     const others = {
         id: 'other-sessions',
@@ -270,6 +297,6 @@ export const sandboxView = defineView({
     title: 'Sandbox',
     summary: 'Status, projects and controls of the running sandbox.',
     queries: { status: sandboxStatus },
-    operations: [showWindow, hideWindow, stopSandbox],
+    operations: [showWindow, hideWindow, stopSandbox, cleanUpSandbox],
     build: ({ status }) => sandboxPage(status),
 });

package/dist/app/features/sandbox/sandbox.run.d.ts

@@ -59,6 +59,9 @@ export declare const sandboxStatusRun: import("../../kernel/define.js").Implemen
         text: import("zod").ZodString;
         at: import("zod").ZodString;
     }, import("zod/v4/core").$strip>>;
+    leftover: import("zod").ZodOptional<import("zod").ZodObject<{
+        text: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "sandbox.status">, import("../../../cli/commands/context.js").Context>;
 export declare const showWindowRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     message: import("zod").ZodString;
@@ -66,6 +69,23 @@ export declare const showWindowRun: import("../../kernel/define.js").Implementat
 export declare const hideWindowRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "sandbox.hideWindow">, import("../../../cli/commands/context.js").Context>;
+/**
+ * A dead sandbox leaves Windows Sandbox programs behind and Windows then refuses to start a new one ("signed out"):
+ * ends them after asking, and restarts the Windows Sandbox service when asked to (or when they will not go).
+ */
+export declare const cleanUpSandboxRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
+    service: import("zod").ZodOptional<import("zod").ZodBoolean>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    outcome: import("zod").ZodEnum<{
+        failed: "failed";
+        nothing: "nothing";
+        alive: "alive";
+        declined: "declined";
+        cleaned: "cleaned";
+        "service-restarted": "service-restarted";
+    }>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "sandbox.cleanUp">, import("../../../cli/commands/context.js").Context>;
 /**
  * Stopping ends every project's sessions: it says which, and the sessions of other projects need a yes (also on the
  * command line, where --yes gives it; a script without it fails rather than end them by accident).