windows-development-sandbox 1.18.4 → 1.23.0

package/dist/app/features/agents/env.run.d.ts

@@ -0,0 +1,43 @@
+export declare const agentEnvRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").QueryDef<import("zod").ZodObject<{
+    agent: import("zod").ZodDefault<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    rows: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        group: import("zod").ZodEnum<{
+            Subagents: "Subagents";
+            Models: "Models";
+            Limits: "Limits";
+            Behaviour: "Behaviour";
+            Privacy: "Privacy";
+            Network: "Network";
+            Providers: "Providers";
+        }>;
+        label: import("zod").ZodString;
+        kind: import("zod").ZodEnum<{
+            number: "number";
+            enum: "enum";
+            flag: "flag";
+            text: "text";
+        }>;
+        description: import("zod").ZodString;
+        choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        range: import("zod").ZodOptional<import("zod").ZodString>;
+        secret: import("zod").ZodBoolean;
+        defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+        value: import("zod").ZodNullable<import("zod").ZodString>;
+        set: import("zod").ZodBoolean;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+    custom: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agents.env">, import("../../../cli/commands/context.js").Context>;
+export declare const agentsEnvSetRun: import("../../kernel/define.js").Implementation<import("../../kernel/define.js").OperationDef<import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    name: import("zod").ZodString;
+    value: import("zod").ZodDefault<import("zod").ZodNullable<import("zod").ZodString>>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agents.env.set">, import("../../../cli/commands/context.js").Context>;

package/dist/app/features/agents/env.run.js

@@ -0,0 +1,86 @@
+// The work of the agent environment editor: reads an agent's variables from your settings (secrets never leave this
+// file), and sets or removes one through the same config file the settings use. Talks only through io.
+import _ from 'lodash';
+import { DEFAULTS } from '../../../core/config/index.js';
+import { fail } from '../../../core/util/index.js';
+import { CLAUDE_ENV, envSpec, envValue } from './claude-env.def.js';
+import { anthropicKeyProblem } from '../../../shared/accounts/index.js';
+import { implement } from '../../context.js';
+import { ConfigFile } from '../settings/settings-file.js';
+import { agentEnv, agentsEnvSet } from './env.def.js';
+/** The variables written in your own settings file for an agent (a value that is not text is ignored). */
+function ownVariables(file, agent) {
+    const raw = file.valueInFile(['harnesses', agent, 'environment']);
+    if (!_.isPlainObject(raw))
+        return {};
+    return Object.fromEntries(Object.entries(raw).filter(([, v]) => typeof v === 'string'));
+}
+function rangeText(spec) {
+    if (spec.kind !== 'number')
+        return undefined;
+    const min = spec.min ?? 0;
+    return 'A whole number from ' + min + (spec.max !== undefined ? ' to ' + spec.max : ' up') + '.';
+}
+/** The agent must be one of your settings' agents. */
+function knownAgent(file, agent) {
+    if (!(agent in file.userConfig().harnesses))
+        fail('There is no agent called "' + agent + '".');
+}
+export const agentEnvRun = implement(agentEnv, (ctx, input) => {
+    const file = ConfigFile.user(ctx.loaded.configPath);
+    knownAgent(file, input.agent);
+    const mine = ownVariables(file, input.agent);
+    const base = DEFAULTS.harnesses[input.agent]?.environment ?? {};
+    const names = new Set([...Object.keys(base), ...Object.keys(mine)]);
+    const catalogue = input.agent === 'claude' ? CLAUDE_ENV : [];
+    const rows = catalogue.map((spec) => {
+        const value = mine[spec.name] ?? base[spec.name];
+        return {
+            name: spec.name,
+            group: spec.group,
+            label: spec.label,
+            kind: spec.kind,
+            description: spec.description,
+            ...(spec.choices ? { choices: [...spec.choices] } : {}),
+            ...(rangeText(spec) ? { range: rangeText(spec) } : {}),
+            secret: spec.secret === true,
+            ...(spec.defaultText ? { defaultText: spec.defaultText } : {}),
+            // A secret's value stays here.
+            value: value === undefined || spec.secret ? null : value,
+            set: value !== undefined,
+            fromSandbox: mine[spec.name] === undefined && base[spec.name] !== undefined,
+        };
+    });
+    const known = new Set(catalogue.map((s) => s.name));
+    const custom = [...names]
+        .filter((n) => !known.has(n))
+        .sort()
+        .map((name) => ({ name, fromSandbox: mine[name] === undefined }));
+    return { agent: input.agent, rows, custom };
+});
+export const agentsEnvSetRun = implement(agentsEnvSet, (ctx, input) => {
+    const file = ConfigFile.user(ctx.loaded.configPath);
+    knownAgent(file, input.agent);
+    const spec = input.agent === 'claude' ? envSpec(input.name) : undefined;
+    const shownName = spec?.label ?? input.name;
+    const checked = envValue(spec, input.value, anthropicKeyProblem);
+    if ('problem' in checked)
+        fail(shownName + ': ' + checked.problem);
+    const mine = ownVariables(file, input.agent);
+    if (checked.save === null && mine[input.name] === undefined) {
+        const sandbox = DEFAULTS.harnesses[input.agent]?.environment?.[input.name] !== undefined;
+        return {
+            message: sandbox
+                ? shownName + ' is set by the sandbox; give it another value to change it.'
+                : shownName + ' was not set.',
+        };
+    }
+    const result = file.set(['harnesses', input.agent, 'environment', input.name], checked.save ?? undefined);
+    if (typeof result === 'object')
+        fail('It could not be saved: ' + result.problems.join('; '));
+    if (checked.save === null)
+        return { message: shownName + ' is removed.' };
+    // Only the value of a plain catalogue entry is said back: everything else may hold a login.
+    const said = spec && !spec.secret ? (spec.kind === 'flag' ? 'on' : checked.save) : 'saved';
+    return { message: shownName + (said === 'saved' ? ' is saved.' : ' is ' + said + '.') };
+});

package/dist/app/features/agents/index.d.ts

@@ -1,3 +1,5 @@
 export * from './agents.def.js';
 export * from './agents.run.js';
+export * from './env.def.js';
+export * from './env.run.js';
 export * from './agent-entry.js';

package/dist/app/features/agents/index.js

@@ -1,4 +1,6 @@
 // The agents feature: the list, starting an agent in a project of the running sandbox, and the agents in your settings.
 export * from './agents.def.js';
 export * from './agents.run.js';
+export * from './env.def.js';
+export * from './env.run.js';
 export * from './agent-entry.js';

package/dist/app/features/defs.d.ts

@@ -76,6 +76,12 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "agents.remove">, OperationDef<import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    name: import("zod").ZodString;
+    value: import("zod").ZodDefault<import("zod").ZodNullable<import("zod").ZodString>>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agents.env.set">, OperationDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";
         user: "user";
@@ -285,6 +291,14 @@ export declare const OPERATIONS: readonly [OperationDef<import("zod").ZodObject<
     deleted: import("zod").ZodBoolean;
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "vpn.logout">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    on: import("zod").ZodBoolean;
+    commands: import("zod").ZodArray<import("zod").ZodString>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agentCommands.on">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    on: import("zod").ZodBoolean;
+    commands: import("zod").ZodArray<import("zod").ZodString>;
+    message: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, "agentCommands.off">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     message: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "github.login">, OperationDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     deleted: import("zod").ZodBoolean;
@@ -411,9 +425,9 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         cwd: import("zod").ZodString;
         project: import("zod").ZodOptional<import("zod").ZodString>;
         phase: import("zod").ZodEnum<{
+            running: "running";
             failed: "failed";
             starting: "starting";
-            running: "running";
             exited: "exited";
         }>;
         message: import("zod").ZodString;
@@ -438,7 +452,43 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         isDefault: import("zod").ZodBoolean;
         removable: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
+    subagents: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
 }, import("zod/v4/core").$strip>, "agents.list">, QueryDef<import("zod").ZodObject<{
+    agent: import("zod").ZodDefault<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    agent: import("zod").ZodString;
+    rows: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        group: import("zod").ZodEnum<{
+            Subagents: "Subagents";
+            Models: "Models";
+            Limits: "Limits";
+            Behaviour: "Behaviour";
+            Privacy: "Privacy";
+            Network: "Network";
+            Providers: "Providers";
+        }>;
+        label: import("zod").ZodString;
+        kind: import("zod").ZodEnum<{
+            number: "number";
+            enum: "enum";
+            flag: "flag";
+            text: "text";
+        }>;
+        description: import("zod").ZodString;
+        choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+        range: import("zod").ZodOptional<import("zod").ZodString>;
+        secret: import("zod").ZodBoolean;
+        defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+        value: import("zod").ZodNullable<import("zod").ZodString>;
+        set: import("zod").ZodBoolean;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+    custom: import("zod").ZodArray<import("zod").ZodObject<{
+        name: import("zod").ZodString;
+        fromSandbox: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agents.env">, QueryDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
         project: "project";
         user: "user";
@@ -532,10 +582,12 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         summary: import("zod").ZodNullable<import("zod").ZodString>;
         heldBy: import("zod").ZodNullable<import("zod").ZodString>;
         usedBy: import("zod").ZodArray<import("zod").ZodString>;
+        usedFor: import("zod").ZodString;
         warnings: import("zod").ZodArray<import("zod").ZodString>;
         canImport: import("zod").ZodBoolean;
         canLogin: import("zod").ZodBoolean;
         needsFile: import("zod").ZodBoolean;
+        ready: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "accounts.list">, QueryDef<import("zod").ZodObject<{
     scope: import("zod").ZodDefault<import("zod").ZodEnum<{
@@ -941,7 +993,26 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         }>;
         text: import("zod").ZodString;
     }, import("zod/v4/core").$strip>>;
-}, import("zod/v4/core").$strip>, "vpn.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    lastFailure: import("zod").ZodNullable<import("zod").ZodObject<{
+        code: import("zod").ZodEnum<{
+            auth: "auth";
+            unreachable: "unreachable";
+            driver: "driver";
+            timeout: "timeout";
+            other: "other";
+        }>;
+        text: import("zod").ZodString;
+        at: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "vpn.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+    enabled: import("zod").ZodBoolean;
+    dir: import("zod").ZodString;
+    found: import("zod").ZodArray<import("zod").ZodObject<{
+        command: import("zod").ZodString;
+        harness: import("zod").ZodString;
+        real: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>, "agentCommands.status">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
     shareToken: import("zod").ZodBoolean;
     gitAccess: import("zod").ZodEnum<{
         readonly: "readonly";
@@ -958,6 +1029,11 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         classic: "classic";
     }>>;
     savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+    login: import("zod").ZodNullable<import("zod").ZodString>;
+    expiresAt: import("zod").ZodNullable<import("zod").ZodString>;
+    repoCount: import("zod").ZodNullable<import("zod").ZodNumber>;
+    checkedAt: import("zod").ZodNullable<import("zod").ZodString>;
+    tokenUrl: import("zod").ZodString;
 }, import("zod/v4/core").$strip>, "github.status">, QueryDef<import("zod").ZodObject<{
     name: import("zod").ZodOptional<import("zod").ZodString>;
 }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
@@ -975,10 +1051,12 @@ export declare const QUERIES: readonly [QueryDef<import("zod").ZodObject<{}, imp
         summary: import("zod").ZodNullable<import("zod").ZodString>;
         heldBy: import("zod").ZodNullable<import("zod").ZodString>;
         usedBy: import("zod").ZodArray<import("zod").ZodString>;
+        usedFor: import("zod").ZodString;
         warnings: import("zod").ZodArray<import("zod").ZodString>;
         canImport: import("zod").ZodBoolean;
         canLogin: import("zod").ZodBoolean;
         needsFile: import("zod").ZodBoolean;
+        ready: import("zod").ZodBoolean;
     }, import("zod/v4/core").$strip>>;
 }, import("zod/v4/core").$strip>, "accounts.services">, QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
     lan: import("zod").ZodObject<{
@@ -1110,9 +1188,9 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             cwd: import("zod").ZodString;
             project: import("zod").ZodOptional<import("zod").ZodString>;
             phase: import("zod").ZodEnum<{
+                running: "running";
                 failed: "failed";
                 starting: "starting";
-                running: "running";
                 exited: "exited";
             }>;
             message: import("zod").ZodString;
@@ -1139,8 +1217,55 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             isDefault: import("zod").ZodBoolean;
             removable: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
+        subagents: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
     }, import("zod/v4/core").$strip>, "agents.list">;
+    agentCommands: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        enabled: import("zod").ZodBoolean;
+        dir: import("zod").ZodString;
+        found: import("zod").ZodArray<import("zod").ZodObject<{
+            command: import("zod").ZodString;
+            harness: import("zod").ZodString;
+            real: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "agentCommands.status">;
 }, Record<string, never>, "agents">, import("../kernel/define.js").ViewDef<{
+    env: QueryDef<import("zod").ZodObject<{
+        agent: import("zod").ZodDefault<import("zod").ZodString>;
+    }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+        agent: import("zod").ZodString;
+        rows: import("zod").ZodArray<import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            group: import("zod").ZodEnum<{
+                Subagents: "Subagents";
+                Models: "Models";
+                Limits: "Limits";
+                Behaviour: "Behaviour";
+                Privacy: "Privacy";
+                Network: "Network";
+                Providers: "Providers";
+            }>;
+            label: import("zod").ZodString;
+            kind: import("zod").ZodEnum<{
+                number: "number";
+                enum: "enum";
+                flag: "flag";
+                text: "text";
+            }>;
+            description: import("zod").ZodString;
+            choices: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            range: import("zod").ZodOptional<import("zod").ZodString>;
+            secret: import("zod").ZodBoolean;
+            defaultText: import("zod").ZodOptional<import("zod").ZodString>;
+            value: import("zod").ZodNullable<import("zod").ZodString>;
+            set: import("zod").ZodBoolean;
+            fromSandbox: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+        custom: import("zod").ZodArray<import("zod").ZodObject<{
+            name: import("zod").ZodString;
+            fromSandbox: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>, "agents.env">;
+}, import("./agents/env.def.js").AgentEnvParams, "agentEnv">, import("../kernel/define.js").ViewDef<{
     settings: QueryDef<import("zod").ZodObject<{
         scope: import("zod").ZodDefault<import("zod").ZodEnum<{
             project: "project";
@@ -1215,10 +1340,12 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             summary: import("zod").ZodNullable<import("zod").ZodString>;
             heldBy: import("zod").ZodNullable<import("zod").ZodString>;
             usedBy: import("zod").ZodArray<import("zod").ZodString>;
+            usedFor: import("zod").ZodString;
             warnings: import("zod").ZodArray<import("zod").ZodString>;
             canImport: import("zod").ZodBoolean;
             canLogin: import("zod").ZodBoolean;
             needsFile: import("zod").ZodBoolean;
+            ready: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "accounts.list">;
     services: QueryDef<import("zod").ZodObject<{
@@ -1238,12 +1365,37 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             summary: import("zod").ZodNullable<import("zod").ZodString>;
             heldBy: import("zod").ZodNullable<import("zod").ZodString>;
             usedBy: import("zod").ZodArray<import("zod").ZodString>;
+            usedFor: import("zod").ZodString;
             warnings: import("zod").ZodArray<import("zod").ZodString>;
             canImport: import("zod").ZodBoolean;
             canLogin: import("zod").ZodBoolean;
             needsFile: import("zod").ZodBoolean;
+            ready: import("zod").ZodBoolean;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "accounts.services">;
+    github: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+        shareToken: import("zod").ZodBoolean;
+        gitAccess: import("zod").ZodEnum<{
+            readonly: "readonly";
+            none: "none";
+            full: "full";
+        }>;
+        token: import("zod").ZodEnum<{
+            none: "none";
+            saved: "saved";
+            unreadable: "unreadable";
+        }>;
+        kind: import("zod").ZodNullable<import("zod").ZodEnum<{
+            "fine-grained": "fine-grained";
+            classic: "classic";
+        }>>;
+        savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+        login: import("zod").ZodNullable<import("zod").ZodString>;
+        expiresAt: import("zod").ZodNullable<import("zod").ZodString>;
+        repoCount: import("zod").ZodNullable<import("zod").ZodNumber>;
+        checkedAt: import("zod").ZodNullable<import("zod").ZodString>;
+        tokenUrl: import("zod").ZodString;
+    }, import("zod/v4/core").$strip>, "github.status">;
 }, Record<string, never>, "accounts">, import("../kernel/define.js").ViewDef<{
     apps: QueryDef<import("zod").ZodObject<{
         scope: import("zod").ZodDefault<import("zod").ZodEnum<{
@@ -1649,6 +1801,17 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             }>;
             text: import("zod").ZodString;
         }, import("zod/v4/core").$strip>>;
+        lastFailure: import("zod").ZodNullable<import("zod").ZodObject<{
+            code: import("zod").ZodEnum<{
+                auth: "auth";
+                unreachable: "unreachable";
+                driver: "driver";
+                timeout: "timeout";
+                other: "other";
+            }>;
+            text: import("zod").ZodString;
+            at: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>, "vpn.status">;
 }, Record<string, never>, "vpn">, import("../kernel/define.js").ViewDef<{
     status: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
@@ -1668,6 +1831,11 @@ export declare const VIEWS: readonly [import("../kernel/define.js").ViewDef<{
             classic: "classic";
         }>>;
         savedAt: import("zod").ZodNullable<import("zod").ZodString>;
+        login: import("zod").ZodNullable<import("zod").ZodString>;
+        expiresAt: import("zod").ZodNullable<import("zod").ZodString>;
+        repoCount: import("zod").ZodNullable<import("zod").ZodNumber>;
+        checkedAt: import("zod").ZodNullable<import("zod").ZodString>;
+        tokenUrl: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, "github.status">;
 }, Record<string, never>, "github">, import("../kernel/define.js").ViewDef<{
     status: QueryDef<import("zod").ZodObject<{}, import("zod/v4/core").$strip>, import("zod").ZodObject<{

package/dist/app/features/defs.js

@@ -1,4 +1,5 @@
 import { addAgent, agentsView, listAgents, makeDefaultAgent, removeAgent, startAgent } from './agents/agents.def.js';
+import { agentEnv, agentEnvView, agentsEnvSet } from './agents/env.def.js';
 import { accountsView, defaultAccount, listAccounts, removeAccount, renameAccount, saveAccount, useAccount, } from './accounts/accounts.def.js';
 import { listServices, serviceImport, serviceLogin, serviceLogout } from './accounts/services.def.js';
 import { appsView, listApps, requestApp, setCustomApps, toggleApp } from './apps/apps.def.js';
@@ -12,6 +13,7 @@ import { addProject, allProjects, chooseProjects, excludeProject, includeProject
 import { listLogs, logsView, tailLog } from './logs/logs.def.js';
 import { auditView, listAudit } from './audit/audit.def.js';
 import { closeSession, listSessions, restartSessions, sessionsView, startShell } from './sessions/sessions.def.js';
+import { agentCommandsOff, agentCommandsOn, agentCommandsStatus } from './agent-commands/agent-commands.def.js';
 import { vpnLogin, vpnLogout, vpnStatus, vpnView } from './vpn/vpn.def.js';
 import { githubLogin, githubLogout, githubStatus, githubView } from './github/github.def.js';
 import { exportConfig, getSetting, importConfig, listSettings, resetSetting, setSetting, settingsView, } from './settings/settings.def.js';
@@ -31,6 +33,7 @@ export const OPERATIONS = [
     addAgent,
     makeDefaultAgent,
     removeAgent,
+    agentsEnvSet,
     setSetting,
     resetSetting,
     exportConfig,
@@ -67,6 +70,8 @@ export const OPERATIONS = [
     stopWeb,
     vpnLogin,
     vpnLogout,
+    agentCommandsOn,
+    agentCommandsOff,
     githubLogin,
     githubLogout,
     serviceImport,
@@ -82,6 +87,7 @@ export const QUERIES = [
     sandboxStatus,
     listSessions,
     listAgents,
+    agentEnv,
     listSettings,
     getSetting,
     browseFolder,
@@ -101,6 +107,7 @@ export const QUERIES = [
     engineLeftovers,
     webStatus,
     vpnStatus,
+    agentCommandsStatus,
     githubStatus,
     listServices,
     accessStatus,
@@ -109,6 +116,7 @@ export const VIEWS = [
     sandboxView,
     sessionsView,
     agentsView,
+    agentEnvView,
     settingsView,
     accountsView,
     appsView,
@@ -159,6 +167,7 @@ export const NAV = [
         label: 'Workspace',
         children: [
             { label: 'Agents', view: 'agents' },
+            { label: 'Claude environment', view: 'agentEnv' },
             { label: 'Sessions', view: 'sessions' },
             { label: 'Activity', view: 'audit' },
         ],

package/dist/app/features/engine/engine.run.js

@@ -72,6 +72,6 @@ export const cleanEngineRun = implement(cleanEngine, async (ctx, _input, io) =>
     const stopped = results.filter((r) => r.stopped).length;
     const failed = results.length - stopped;
     if (failed)
-        fail(plural(failed, 'HCS system') + ' could not be stopped.', 'Run it again from an administrator terminal: sandbox engine clean');
+        fail(plural(failed, 'HCS system') + ' could not be stopped.', 'Stopping them needs administrator rights: start the menu from an administrator terminal and try again.');
     return { available: true, stopped, failed, message: 'Stopped ' + plural(stopped, 'HCS system') + '.' };
 });

package/dist/app/features/github/github.def.d.ts

@@ -1,7 +1,21 @@
 import { z } from 'zod';
-import { type Page } from '../../kernel/index.js';
+import { type Item, type Page, type Section } from '../../kernel/index.js';
 /** Where GitHub makes a fine-grained token. */
 export declare const NEW_TOKEN_URL = "https://github.com/settings/personal-access-tokens/new";
+/** What a token for sandboxes needs (GitHub's names for the permissions), asked for in the pre-filled form. */
+export declare const TOKEN_PERMISSIONS: Readonly<Record<string, 'read' | 'write'>>;
+/**
+ * The link that opens GitHub's "new fine-grained token" form already filled in (name, description, days until it
+ * expires, permissions): docs.github.com, "Creating a fine-grained personal access token". Pure.
+ */
+export declare function newTokenUrl(o: {
+    readonly name: string;
+    readonly description?: string;
+    readonly days: number;
+    readonly permissions: Readonly<Record<string, 'read' | 'write'>>;
+}): string;
+/** The pre-filled link for this PC (the name says which PC the token is for). */
+export declare function tokenUrlFor(host: string): string;
 /** The steps to make a token for sandboxes (shown before asking for it). */
 export declare const GITHUB_STEPS: readonly string[];
 /** What everyone who shares a token must know: on every surface. */
@@ -23,6 +37,11 @@ export declare const GithubStatusSchema: z.ZodObject<{
         classic: "classic";
     }>>;
     savedAt: z.ZodNullable<z.ZodString>;
+    login: z.ZodNullable<z.ZodString>;
+    expiresAt: z.ZodNullable<z.ZodString>;
+    repoCount: z.ZodNullable<z.ZodNumber>;
+    checkedAt: z.ZodNullable<z.ZodString>;
+    tokenUrl: z.ZodString;
 }, z.core.$strip>;
 export type GithubStatus = z.output<typeof GithubStatusSchema>;
 export declare const githubStatus: import("../../kernel/define.js").QueryDef<z.ZodObject<{}, z.core.$strict>, z.ZodObject<{
@@ -42,6 +61,11 @@ export declare const githubStatus: import("../../kernel/define.js").QueryDef<z.Z
         classic: "classic";
     }>>;
     savedAt: z.ZodNullable<z.ZodString>;
+    login: z.ZodNullable<z.ZodString>;
+    expiresAt: z.ZodNullable<z.ZodString>;
+    repoCount: z.ZodNullable<z.ZodNumber>;
+    checkedAt: z.ZodNullable<z.ZodString>;
+    tokenUrl: z.ZodString;
 }, z.core.$strip>, "github.status">;
 export declare const githubLogin: import("../../kernel/define.js").OperationDef<z.ZodObject<{}, z.core.$strict>, z.ZodObject<{
     message: z.ZodString;
@@ -56,8 +80,20 @@ export declare function githubTokenRowOf(s: GithubStatus): {
     hint: string;
     description: string;
 };
-/** The status page: the facts, the next step (command line only), the warnings and the token actions. */
-export declare function githubPage(s: GithubStatus): Page;
+/** A token that expires within this many days is flagged. */
+export declare const EXPIRY_WARN_DAYS = 14;
+/** How the expiry reads: "Expires 3 Feb 2027 (in 12 days)", "Expired 3 Feb 2027", and its tone. */
+export declare function expiryOf(expiresAt: string | null, now?: number): {
+    readonly text: string;
+    readonly tone: 'ok' | 'warn' | 'danger';
+    readonly days: number;
+} | null;
+/** The GitHub card (the "thing you connect" pattern): used by the GitHub page and the Accounts page. */
+export declare function githubItem(s: GithubStatus, now?: number): Item;
+/** The GitHub section (the card, the git-access fact, the warnings and the link that opens GitHub's form). */
+export declare function githubSection(s: GithubStatus, now?: number): Section;
+/** The status page: the card, the git access it needs, the warnings and how to make a new token. */
+export declare function githubPage(s: GithubStatus, now?: number): Page;
 export declare const githubView: import("../../kernel/define.js").ViewDef<{
     status: import("../../kernel/define.js").QueryDef<z.ZodObject<{}, z.core.$strict>, z.ZodObject<{
         shareToken: z.ZodBoolean;
@@ -76,5 +112,10 @@ export declare const githubView: import("../../kernel/define.js").ViewDef<{
             classic: "classic";
         }>>;
         savedAt: z.ZodNullable<z.ZodString>;
+        login: z.ZodNullable<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodString>;
+        repoCount: z.ZodNullable<z.ZodNumber>;
+        checkedAt: z.ZodNullable<z.ZodString>;
+        tokenUrl: z.ZodString;
     }, z.core.$strip>, "github.status">;
 }, Record<string, never>, "github">;