Terminal
Integrated PTY terminal, plus the agent Shell tool with sandbox and permission prompts.
The workbench has a real integrated terminal (Ctrl+Backtick). The agent’s Shell tool uses a persistent session so cd, environment, and long jobs survive across calls.
Agent shell
- Windows: ConPTY
- Linux / remote Unix: PTY
- Await waits on background jobs or a regex in output
- Prefer the
working_directoryargument overcdwhen starting a command
Headless CLI can drive the same terminal and agent entry points from the desktop binary.
Sandbox
Off / Soft / Restricted. This is OS-level rlimits / job objects — not AppContainer or landlock. Treat Restricted as a seatbelt, not a multi-tenant jail.
Permissions
Ask / Allow safe / Allow all still gate the command. Plan and Ask will not let the agent mutate the product through the shell.
Not a fake preview
Eyeban is not a chat box that prints a command you cannot run. The terminal is in the workbench; the agent can use it when you allow it.