Inline Terminal Tiles with Sandbox

A Workspace, Not Another Chat Window · Shipped · workstation

Commands the agent runs stream live stdout/stderr directly inside chat turns, with sandbox isolation and redact filters.

When Halbert runs a shell command, it executes inside an inline terminal tile within the conversation turn — not in a hidden background process. You see live stdout/stderr, return codes, and can kill or re-run commands. The streaming subsystem provides sandbox isolation, PTY management, and automatic redaction of sensitive output.

Terminal output streams via WebSocket from the backend PTY session into xterm.js-backed inline tiles. The sandbox module isolates command execution. The redact filter scrubs sensitive patterns (API keys, passwords) from streamed output before it reaches the frontend.

Limits and invariants

Destructive commands require explicit user approval before execution.

Where this lives

• halbert_core/halbert_core/dashboard/frontend/src/components/agent/TerminalTile.tsx
• halbert_core/halbert_core/streaming/sandbox.py
• halbert_core/halbert_core/streaming/pty.py
• halbert_core/halbert_core/streaming/session_manager.py
• halbert_core/halbert_core/dashboard/routes/terminal.py