···4545 cwd: "."
4646 sandbox:
4747 type: none
4848+4949+ # Without a declared terminal the dashboard refuses to open one ("Terminals
5050+ # can only be created for agents whose spec declares them"), so a session
5151+ # started from the browser would have no way to poke at the machine it runs
5252+ # on. One entry is enough; the panel can open several instances of it.
5353+ terminals:
5454+ shell:
5555+ command: bash
5656+ os_env: inherit
4857 '';
49585059 # One identity per line. Admins bypass every per-session ACL, which is what