Whether Edit/Write diffs start expanded in the chat. Either way, click a card to toggle it.
With this on, pressing Esc while the open session is running stops its turn, exactly as the Stop button does. Esc still closes menus and dialogs first.
A message that shows a picture is never folded into a tool group.
Off: a subagent's dot stays small even when it has unread messages.
Kept in agency's own directory (~/.agency/agents/…) and mounted into each turn —
never the host's own ~/.claude or ~/.codex. Log in runs the agent's own login in a container; DeepSeek and
Copilot take an API key instead; Log out deletes the login file. Tokens stay on the relay.
What this image got, what sandbox/agents.lock pins, and what upstream has.
The first two need no network and are shown at once; Check for updates asks the npm registry, GitHub
and the antigravity updater through the relay and takes a few seconds. A row marked with the accent has
a newer release upstream; a release missing a file the Dockerfile downloads says so instead, and is not
an update. To take one: sandbox/check-agent-versions.sh --bump, then rebuild
(docs/update.md A).
agency signs with its own key, never yours: sessions granted SSH get a socket that can list
and sign with it, and nothing else — the key stays in one small container of its own. The host daemon makes the key on its first start;
Generate is only for making one again after Delete, Rotate for replacing it. Register the public key where agency should reach — GitHub / GitLab SSH keys, a host's
~/.ssh/authorized_keys. The hosts agency may reach by alias are below.
Written into agency's own ssh config, which every agency container mounts — a session reaches them
once its SSH chip is on. Nothing is read from this machine's ~/.ssh, and nothing is imported from any file: what is listed here is all a
session can reach by name. An agent is told the aliases only, never the host names or users.
Every image docker has on this machine: the ones agency names first, then the rest.
Deleting one docker still needs (a running container's) is refused, in the row. A reference sharing an
image with another is untagged only; the image and its size stay with the other name. The two agency runs
on cannot be deleted from here at all.
Measured when asked, never in the background. Indented rows are parts of the row above and
are not added again; containers count their writable layer only, not their image.
Shown in the tab title and under the app's icon.
iPhone: remove the app from the home screen and add it again to see a new name or colour.
Requires a supervisor (launchd) to bring the process back up — see infra/launchd/. The host-tools daemon (gh/glab) restarts with it, so a browser login waiting for its code is lost.
The only way to hand memory back to the host: the VM keeps whatever
it grew to until it is restarted. Everything running in docker dies with it, and services
do not come back on their own.