windows-development-sandbox 1.18.4 → 1.20.0

package/dist/app/features/agents/env.run.d.ts

@@ -0,0 +1,43 @@
+export declare const agentEnvRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").QueryDef<import("zod").ZodObject<{
+    agent: import("zod").ZodDefault<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    rows: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        group: import("zod").ZodEnum<{
+            Subagents: "Subagents";
+            Models: "Models";
+            Limits: "Limits";
+            Behaviour: "Behaviour";
+            Privacy: "Privacy";
+            Network: "Network";
+            Providers: "Providers";
+        }>;
+        label: import("zod").ZodString;
+        kind: import("zod").ZodEnum<{
+            number: "number";
+            enum: "enum";
+            flag: "flag";
+            text: "text";
+        }>;
+        description: import("zod").ZodString;
+        choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        range: import("zod").ZodOptional<import("zod").ZodString>;
+        secret: import("zod").ZodBoolean;
+        defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+        value: import("zod").ZodNullable<import("zod").ZodString>;
+        set: import("zod").ZodBoolean;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+    custom: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agents.env">, import("../../../cli/commands/context.js").Context>;
+export declare const agentsEnvSetRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    name: import("zod").ZodString;
+    value: import("zod").ZodDefault<import("zod").ZodNullable<import("zod").ZodString>>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agents.env.set">, import("../../../cli/commands/context.js").Context>;

package/dist/app/features/agents/env.run.js

@@ -0,0 +1,86 @@
+// The work of the agent environment editor: reads an agent's variables from your settings (secrets never leave this
+// file), and sets or removes one through the same config file the settings use. Talks only through io.
+import _ from 'lodash';
+import { DEFAULTS } from '../../../core/config/index.js';
+import { fail } from '../../../core/util/index.js';
+import { CLAUDE_ENV, envSpec, envValue } from './claude-env.def.js';
+import { anthropicKeyProblem } from '../../../shared/accounts/index.js';
+import { implement } from '../../context.js';
+import { ConfigFile } from '../settings/settings-file.js';
+import { agentEnv, agentsEnvSet } from './env.def.js';
+/** The variables written in your own settings file for an agent (a value that is not text is ignored). */
+function ownVariables(file, agent) {
+    const raw = file.valueInFile(['harnesses', agent, 'environment']);
+    if (!_.isPlainObject(raw))
+        return {};
+    return Object.fromEntries(Object.entries(raw).filter(([, v]) => typeof v === 'string'));
+}
+function rangeText(spec) {
+    if (spec.kind !== 'number')
+        return undefined;
+    const min = spec.min ?? 0;
+    return 'A whole number from ' + min + (spec.max !== undefined ? ' to ' + spec.max : ' up') + '.';
+}
+/** The agent must be one of your settings' agents. */
+function knownAgent(file, agent) {
+    if (!(agent in file.userConfig().harnesses))
+        fail('There is no agent called "' + agent + '".');
+}
+export const agentEnvRun = implement(agentEnv, (ctx, input) => {
+    const file = ConfigFile.user(ctx.loaded.configPath);
+    knownAgent(file, input.agent);
+    const mine = ownVariables(file, input.agent);
+    const base = DEFAULTS.harnesses[input.agent]?.environment ?? {};
+    const names = new Set([...Object.keys(base), ...Object.keys(mine)]);
+    const catalogue = input.agent === 'claude' ? CLAUDE_ENV : [];
+    const rows = catalogue.map((spec) => {
+        const value = mine[spec.name] ?? base[spec.name];
+        return {
+            name: spec.name,
+            group: spec.group,
+            label: spec.label,
+            kind: spec.kind,
+            description: spec.description,
+            ...(spec.choices ? { choices: [...spec.choices] } : {}),
+            ...(rangeText(spec) ? { range: rangeText(spec) } : {}),
+            secret: spec.secret === true,
+            ...(spec.defaultText ? { defaultText: spec.defaultText } : {}),
+            // A secret's value stays here.
+            value: value === undefined || spec.secret ? null : value,
+            set: value !== undefined,
+            fromSandbox: mine[spec.name] === undefined && base[spec.name] !== undefined,
+        };
+    });
+    const known = new Set(catalogue.map((s) => s.name));
+    const custom = [...names]
+        .filter((n) => !known.has(n))
+        .sort()
+        .map((name) => ({ name, fromSandbox: mine[name] === undefined }));
+    return { agent: input.agent, rows, custom };
+});
+export const agentsEnvSetRun = implement(agentsEnvSet, (ctx, input) => {
+    const file = ConfigFile.user(ctx.loaded.configPath);
+    knownAgent(file, input.agent);
+    const spec = input.agent === 'claude' ? envSpec(input.name) : undefined;
+    const shownName = spec?.label ?? input.name;
+    const checked = envValue(spec, input.value, anthropicKeyProblem);
+    if ('problem' in checked)
+        fail(shownName + ': ' + checked.problem);
+    const mine = ownVariables(file, input.agent);
+    if (checked.save === null && mine[input.name] === undefined) {
+        const sandbox = DEFAULTS.harnesses[input.agent]?.environment?.[input.name] !== undefined;
+        return {
+            message: sandbox
+                ? shownName + ' is set by the sandbox; give it another value to change it.'
+                : shownName + ' was not set.',
+        };
+    }
+    const result = file.set(['harnesses', input.agent, 'environment', input.name], checked.save ?? undefined);
+    if (typeof result === 'object')
+        fail('It could not be saved: ' + result.problems.join('; '));
+    if (checked.save === null)
+        return { message: shownName + ' is removed.' };
+    // Only the value of a plain catalogue entry is said back: everything else may hold a login.
+    const said = spec && !spec.secret ? (spec.kind === 'flag' ? 'on' : checked.save) : 'saved';
+    return { message: shownName + (said === 'saved' ? ' is saved.' : ' is ' + said + '.') };
+});

package/dist/app/features/agents/index.d.ts

@@ -1,3 +1,5 @@
 export * from './agents.def.js';
 export * from './agents.run.js';
+export * from './env.def.js';
+export * from './env.run.js';
 export * from './agent-entry.js';

package/dist/app/features/agents/index.js

@@ -1,4 +1,6 @@
 // The agents feature: the list, starting an agent in a project of the running sandbox, and the agents in your settings.
 export * from './agents.def.js';
 export * from './agents.run.js';
+export * from './env.def.js';
+export * from './env.run.js';
 export * from './agent-entry.js';

package/dist/app/features/defs.d.ts

@@ -76,6 +76,12 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "agents.remove">, OperationDef<import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    name: import("zod").ZodString;
+    value: import("zod").ZodDefault<import("zod").ZodNullable<import("zod").ZodString>>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agents.env.set">, OperationDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";
         user: "user";
@@ -285,6 +291,14 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
     deleted: import("zod").ZodBoolean;
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "vpn.logout">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    on: import("zod").ZodBoolean;
+    commands: import("zod").ZodArray<import("zod").ZodString>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agentCommands.on">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    on: import("zod").ZodBoolean;
+    commands: import("zod").ZodArray<import("zod").ZodString>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agentCommands.off">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "github.login">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     deleted: import("zod").ZodBoolean;
@@ -438,7 +452,43 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         isDefault: import("zod").ZodBoolean;
         removable: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
+    subagents: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
 }, import("zod/v4/core").$strip>, "agents.list">, QueryDef<import("zod").ZodObject<{
+    agent: import("zod").ZodDefault<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    rows: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        group: import("zod").ZodEnum<{
+            Subagents: "Subagents";
+            Models: "Models";
+            Limits: "Limits";
+            Behaviour: "Behaviour";
+            Privacy: "Privacy";
+            Network: "Network";
+            Providers: "Providers";
+        }>;
+        label: import("zod").ZodString;
+        kind: import("zod").ZodEnum<{
+            number: "number";
+            enum: "enum";
+            flag: "flag";
+            text: "text";
+        }>;
+        description: import("zod").ZodString;
+        choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        range: import("zod").ZodOptional<import("zod").ZodString>;
+        secret: import("zod").ZodBoolean;
+        defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+        value: import("zod").ZodNullable<import("zod").ZodString>;
+        set: import("zod").ZodBoolean;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+    custom: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agents.env">, QueryDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";
         user: "user";
@@ -536,6 +586,7 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         canImport: import("zod").ZodBoolean;
         canLogin: import("zod").ZodBoolean;
         needsFile: import("zod").ZodBoolean;
+        ready: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "accounts.list">, QueryDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
@@ -941,7 +992,26 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         }>;
         text: import("zod").ZodString;
     }, import("zod/v4/core").$strip>>;
-}, import("zod/v4/core").$strip>, "vpn.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    lastFailure: import("zod").ZodNullable<import("zod").ZodObject<{
+        code: import("zod").ZodEnum<{
+            auth: "auth";
+            unreachable: "unreachable";
+            driver: "driver";
+            timeout: "timeout";
+            other: "other";
+        }>;
+        text: import("zod").ZodString;
+        at: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "vpn.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    enabled: import("zod").ZodBoolean;
+    dir: import("zod").ZodString;
+    found: import("zod").ZodArray<import("zod").ZodObject<{
+        command: import("zod").ZodString;
+        harness: import("zod").ZodString;
+        real: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agentCommands.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     shareToken: import("zod").ZodBoolean;
     gitAccess: import("zod").ZodEnum<{
         readonly: "readonly";
@@ -979,6 +1049,7 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         canImport: import("zod").ZodBoolean;
         canLogin: import("zod").ZodBoolean;
         needsFile: import("zod").ZodBoolean;
+        ready: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "accounts.services">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     lan: import("zod").ZodObject<{
@@ -1139,8 +1210,55 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             isDefault: import("zod").ZodBoolean;
             removable: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
+        subagents: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
     }, import("zod/v4/core").$strip>, "agents.list">;
+    agentCommands: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        enabled: import("zod").ZodBoolean;
+        dir: import("zod").ZodString;
+        found: import("zod").ZodArray<import("zod").ZodObject<{
+            command: import("zod").ZodString;
+            harness: import("zod").ZodString;
+            real: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "agentCommands.status">;
 }, Record<string, never>, "agents">, import("../kernel/define.js").ViewDef<{
+    env: QueryDef<import("zod").ZodObject<{
+        agent: import("zod").ZodDefault<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        agent: import("zod").ZodString;
+        rows: import("zod").ZodArray<import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            group: import("zod").ZodEnum<{
+                Subagents: "Subagents";
+                Models: "Models";
+                Limits: "Limits";
+                Behaviour: "Behaviour";
+                Privacy: "Privacy";
+                Network: "Network";
+                Providers: "Providers";
+            }>;
+            label: import("zod").ZodString;
+            kind: import("zod").ZodEnum<{
+                number: "number";
+                enum: "enum";
+                flag: "flag";
+                text: "text";
+            }>;
+            description: import("zod").ZodString;
+            choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            range: import("zod").ZodOptional<import("zod").ZodString>;
+            secret: import("zod").ZodBoolean;
+            defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+            value: import("zod").ZodNullable<import("zod").ZodString>;
+            set: import("zod").ZodBoolean;
+            fromSandbox: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+        custom: import("zod").ZodArray<import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            fromSandbox: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "agents.env">;
+}, import("./agents/env.def.js").AgentEnvParams, "agentEnv">, import("../kernel/define.js").ViewDef<{
     settings: QueryDef<import("zod").ZodObject<{
         scope: import("zod").ZodDefault<import("zod").ZodEnum<{
             project: "project";
@@ -1219,6 +1337,7 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             canImport: import("zod").ZodBoolean;
             canLogin: import("zod").ZodBoolean;
             needsFile: import("zod").ZodBoolean;
+            ready: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "accounts.list">;
     services: QueryDef<import("zod").ZodObject<{
@@ -1242,6 +1361,7 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             canImport: import("zod").ZodBoolean;
             canLogin: import("zod").ZodBoolean;
             needsFile: import("zod").ZodBoolean;
+            ready: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "accounts.services">;
 }, Record<string, never>, "accounts">, import("../kernel/define.js").ViewDef<{
@@ -1649,6 +1769,17 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             }>;
             text: import("zod").ZodString;
         }, import("zod/v4/core").$strip>>;
+        lastFailure: import("zod").ZodNullable<import("zod").ZodObject<{
+            code: import("zod").ZodEnum<{
+                auth: "auth";
+                unreachable: "unreachable";
+                driver: "driver";
+                timeout: "timeout";
+                other: "other";
+            }>;
+            text: import("zod").ZodString;
+            at: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "vpn.status">;
 }, Record<string, never>, "vpn">, import("../kernel/define.js").ViewDef<{
     status: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{

package/dist/app/features/defs.js

@@ -1,4 +1,5 @@
 import { addAgent, agentsView, listAgents, makeDefaultAgent, removeAgent, startAgent } from './agents/agents.def.js';
+import { agentEnv, agentEnvView, agentsEnvSet } from './agents/env.def.js';
 import { accountsView, defaultAccount, listAccounts, removeAccount, renameAccount, saveAccount, useAccount, } from './accounts/accounts.def.js';
 import { listServices, serviceImport, serviceLogin, serviceLogout } from './accounts/services.def.js';
 import { appsView, listApps, requestApp, setCustomApps, toggleApp } from './apps/apps.def.js';
@@ -12,6 +13,7 @@ import { addProject, allProjects, chooseProjects, excludeProject, includeProject
 import { listLogs, logsView, tailLog } from './logs/logs.def.js';
 import { auditView, listAudit } from './audit/audit.def.js';
 import { closeSession, listSessions, restartSessions, sessionsView, startShell } from './sessions/sessions.def.js';
+import { agentCommandsOff, agentCommandsOn, agentCommandsStatus } from './agent-commands/agent-commands.def.js';
 import { vpnLogin, vpnLogout, vpnStatus, vpnView } from './vpn/vpn.def.js';
 import { githubLogin, githubLogout, githubStatus, githubView } from './github/github.def.js';
 import { exportConfig, getSetting, importConfig, listSettings, resetSetting, setSetting, settingsView, } from './settings/settings.def.js';
@@ -31,6 +33,7 @@ export const OPERATIONS = [
     addAgent,
     makeDefaultAgent,
     removeAgent,
+    agentsEnvSet,
     setSetting,
     resetSetting,
     exportConfig,
@@ -67,6 +70,8 @@ export const OPERATIONS = [
     stopWeb,
     vpnLogin,
     vpnLogout,
+    agentCommandsOn,
+    agentCommandsOff,
     githubLogin,
     githubLogout,
     serviceImport,
@@ -82,6 +87,7 @@ export const QUERIES = [
     sandboxStatus,
     listSessions,
     listAgents,
+    agentEnv,
     listSettings,
     getSetting,
     browseFolder,
@@ -101,6 +107,7 @@ export const QUERIES = [
     engineLeftovers,
     webStatus,
     vpnStatus,
+    agentCommandsStatus,
     githubStatus,
     listServices,
     accessStatus,
@@ -109,6 +116,7 @@ export const VIEWS = [
     sandboxView,
     sessionsView,
     agentsView,
+    agentEnvView,
     settingsView,
     accountsView,
     appsView,
@@ -159,6 +167,7 @@ export const NAV = [
         label: 'Workspace',
         children: [
             { label: 'Agents', view: 'agents' },
+            { label: 'Claude environment', view: 'agentEnv' },
             { label: 'Sessions', view: 'sessions' },
             { label: 'Activity', view: 'audit' },
         ],

package/dist/app/features/settings/categories.def.js

@@ -31,7 +31,7 @@ export const CATEGORIES = [
         id: 'agents',
         label: 'Agents & sessions',
         description: 'The agents you can start (also: Agents section), attaching your terminal to them, the (Beta) web UI and agent commands, which of your Claude settings are copied in, and reopening sessions.',
-        keys: ['harnesses', 'attach', 'web', 'agentCommands', 'claudeProfile', 'resume'],
+        keys: ['harnesses', 'codex', 'attach', 'web', 'agentCommands', 'claudeProfile', 'resume'],
     },
     {
         id: 'network',
@@ -58,7 +58,7 @@ export const SETTINGS_ELSEWHERE = ['apps'];
 const NAMES = {
     sandbox: 'Sandbox machine',
     attach: 'Attaching your terminal',
-    agentCommands: 'Agent commands (Beta)',
+    agentCommands: 'Agent commands',
     web: 'Web UI (Beta)',
     provisioning: 'Provisioning',
     downloads: 'Downloads',
@@ -90,6 +90,7 @@ const NAMES = {
     projects: 'Projects',
     resume: 'Reopening sessions',
     harnesses: 'Agents',
+    codex: 'Codex',
     databases: 'Databases',
     toolchains: 'Toolchains',
     git: 'Git',
@@ -142,6 +143,8 @@ const LABELS = {
     'projects.wsbShare': 'Add folders while the sandbox runs',
     'projects.liveFolders': 'Add folders through HCS (alpha, untested)',
     'projects.all': 'Map all known projects at start',
+    'codex.sandboxMode': "Codex's own sandbox",
+    'codex.windowsSandbox': 'Windows sandbox mode for Codex',
     'claudeProfile.hostDir': 'Claude folder on this PC',
     'claudeProfile.globalStateFile': 'Claude state file on this PC',
 };

package/dist/app/features/settings/settings-rows.js

@@ -6,6 +6,7 @@ import { NEVER_LOOSER } from '../../../core/local-config/index.js';
 import { redactSecrets } from '../../../core/schema/index.js';
 import { fail } from '../../../core/util/index.js';
 import { closest } from '../../../cli/validate.js';
+import { isToolchainReady } from '../../../shared/readiness.js';
 import { fieldOf } from '../../kernel/index.js';
 import { categoryOf, labelOf, nameOf } from './categories.def.js';
 /** Every editable setting of a file, each in its category (settings covered by another section are left out). */
@@ -24,7 +25,10 @@ export function settingsOf(file) {
                     section: several && category.id !== 'general' ? nameOf(top) : undefined,
                 },
             ];
-        return node.leaves([top]).map(({ key, node: leaf }) => {
+        return node
+            .leaves([top])
+            .filter(({ key }) => top !== 'toolchains' || isToolchainReady(key[1]))
+            .map(({ key, node: leaf }) => {
             const heading = [
                 several ? nameOf(top) : undefined,
                 key.length > 2 ? key.slice(1, -1).map(nameOf).join(' › ') : undefined,

package/dist/app/features/settings/settings.run.d.ts

@@ -1,5 +1,7 @@
+import type { Config } from '../../../core/types.js';
 import { type AppContext } from '../../context.js';
 import { type SettingsFiles } from './settings-rows.js';
+import { type Scope } from './settings.def.js';
 /** The file `sandbox config export` writes when none is named. */
 export declare const DEFAULT_EXPORT = "sandbox-settings.json";
 /** Your own settings file (the one --config names) and the project file of the current folder. */
@@ -48,6 +50,12 @@ export declare const getSettingRun: import("../../kernel/define.js").Implementat
 /** The file of a scope, and the setting a key names in it. */
 /** incoming with every *** that stands where saved has a text replaced by that saved text. Pure. */
 export declare function keepShownSecrets(saved: unknown, incoming: unknown): unknown;
+/** What brings this PC in line with a changed agentCommands setting (the real service, or a fake in a test). */
+export interface AgentCommandsReconciler {
+    reconcile(config: Config): unknown;
+}
+/** After your own settings change: a key under agentCommands also changes this PC (files, PATH), on every surface. */
+export declare function applyAgentCommandsChange(ctx: AppContext, scope: Scope, key: string, service?: AgentCommandsReconciler): void;
 export declare const setSettingRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";

package/dist/app/features/settings/settings.run.js

@@ -7,6 +7,7 @@ import { loadConfig } from '../../../core/config/index.js';
 import { REDACTED, redactSecrets } from '../../../core/schema/index.js';
 import { fail, safeText, writeJson } from '../../../core/util/index.js';
 import { hereDir } from '../../../cli/commands/projects/here.js';
+import { AgentCommandsService } from '../../../cli/services/agent-commands-service.js';
 import { implement } from '../../context.js';
 import { allowedText, cancelled, valueFromText } from '../../kernel/index.js';
 import { CATEGORIES } from './categories.def.js';
@@ -66,6 +67,12 @@ function target(ctx, scope, name) {
     const file = settingsFiles(ctx)[scope];
     return { ...findSetting(file, name), file };
 }
+/** After your own settings change: a key under agentCommands also changes this PC (files, PATH), on every surface. */
+export function applyAgentCommandsChange(ctx, scope, key, service = new AgentCommandsService(ctx)) {
+    if (scope !== 'user' || !/^agentCommands(\.|$)/.test(key))
+        return;
+    service.reconcile(freshConfig(ctx));
+}
 export const setSettingRun = implement(setSetting, (ctx, input) => {
     const { key, node, file } = target(ctx, input.scope, input.key);
     if (node.isSection)
@@ -81,6 +88,7 @@ export const setSettingRun = implement(setSetting, (ctx, input) => {
     const outcome = file.set(key, value);
     if (typeof outcome === 'object')
         fail('Could not change ' + input.key + ': ' + outcome.problems.join('; '), 'Nothing was written.');
+    applyAgentCommandsChange(ctx, input.scope, input.key);
     return {
         key: input.key,
         changed: outcome === 'saved',
@@ -96,6 +104,7 @@ export const resetSettingRun = implement(resetSetting, (ctx, input) => {
     const outcome = file.set(key, undefined);
     if (typeof outcome === 'object')
         fail('Could not reset ' + input.key + ': ' + outcome.problems.join('; '), 'Nothing was written.');
+    applyAgentCommandsChange(ctx, input.scope, input.key);
     return {
         key: input.key,
         changed: outcome === 'saved',

package/dist/app/features/updates/updates.run.js

@@ -3,7 +3,7 @@
 // runs, rollback on failure) stays in host/update.
 import { userDir } from '../../../core/config/index.js';
 import { errMsg, fail } from '../../../core/util/index.js';
-import { MigrateService, NPM_UPDATE_COMMAND, UpdateService } from '../../../cli/services/index.js';
+import { AgentCommandsService, MigrateService, NPM_UPDATE_COMMAND, UpdateService, } from '../../../cli/services/index.js';
 import { implement } from '../../context.js';
 import { cancelled } from '../../kernel/index.js';
 import { describeResult, whereOf } from './update-lines.js';
@@ -73,7 +73,17 @@ export const runUpdateRun = implement(runUpdate, async (ctx, input, io) => {
     // A folder of the user's choosing is installed from only on the command line (the web and the menu send no feed).
     if (input.feed !== undefined && input.feed !== ctx.options.feed)
         fail('--feed works only on the command line.');
-    return updateWith(UpdateService.forPackage(ctx.packageRoot, input.feed, { userDir: userDir() }), input, io);
+    const result = await updateWith(UpdateService.forPackage(ctx.packageRoot, input.feed, { userDir: userDir() }), input, io);
+    // The agent commands (claude, codex ...) point at the program: bring them in line with what is installed now.
+    if (ctx.loaded.config.agentCommands.enabled && !input.check && !input.rollback && !input.auto) {
+        try {
+            new AgentCommandsService(ctx).reconcile(ctx.loaded.config);
+        }
+        catch {
+            // The update itself worked; the agent commands are put right at the next launch.
+        }
+    }
+    return result;
 });
 /** sandbox migrate's work, given the service (tests pass their own). */
 export async function migrateWith(service, input, io) {

package/dist/app/features/vpn/vpn.def.d.ts

@@ -31,6 +31,17 @@ export declare const VpnStatusSchema: z.ZodObject<{
         }>;
         text: z.ZodString;
     }, z.core.$strip>>;
+    lastFailure: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            auth: "auth";
+            unreachable: "unreachable";
+            driver: "driver";
+            timeout: "timeout";
+            other: "other";
+        }>;
+        text: z.ZodString;
+        at: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type VpnStatus = z.output<typeof VpnStatusSchema>;
 export declare const vpnStatus: import("../../kernel/define.js").QueryDef<z.ZodObject<{
@@ -62,6 +73,17 @@ export declare const vpnStatus: import("../../kernel/define.js").QueryDef<z.ZodO
         }>;
         text: z.ZodString;
     }, z.core.$strip>>;
+    lastFailure: z.ZodNullable<z.ZodObject<{
+        code: z.ZodEnum<{
+            auth: "auth";
+            unreachable: "unreachable";
+            driver: "driver";
+            timeout: "timeout";
+            other: "other";
+        }>;
+        text: z.ZodString;
+        at: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, "vpn.status">;
 export declare const vpnLogin: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strict>, z.ZodObject<{
     message: z.ZodString;
@@ -108,5 +130,16 @@ export declare const vpnView: import("../../kernel/define.js").ViewDef<{
             }>;
             text: z.ZodString;
         }, z.core.$strip>>;
+        lastFailure: z.ZodNullable<z.ZodObject<{
+            code: z.ZodEnum<{
+                auth: "auth";
+                unreachable: "unreachable";
+                driver: "driver";
+                timeout: "timeout";
+                other: "other";
+            }>;
+            text: z.ZodString;
+            at: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, "vpn.status">;
 }, Record<string, never>, "vpn">;