Terminal

Integrated PTY terminal, plus the agent Shell tool with sandbox and permission prompts.

The workbench has a real integrated terminal (Ctrl+Backtick). The agent’s Shell tool uses a persistent session so cd, environment, and long jobs survive across calls.

Agent shell

  • Windows: ConPTY
  • Linux / remote Unix: PTY
  • Await waits on background jobs or a regex in output
  • Prefer the working_directory argument over cd when starting a command

Headless CLI can drive the same terminal and agent entry points from the desktop binary.

Sandbox

Off / Soft / Restricted. This is OS-level rlimits / job objects — not AppContainer or landlock. Treat Restricted as a seatbelt, not a multi-tenant jail.

Permissions

Ask / Allow safe / Allow all still gate the command. Plan and Ask will not let the agent mutate the product through the shell.

Not a fake preview

Eyeban is not a chat box that prints a command you cannot run. The terminal is in the workbench; the agent can use it when you allow it.