Dashboard.

Layout

One sidebar and one page at a time. The sidebar lists the screens below (Cmd/Ctrl+B collapses it) and ends with the account row: the workspace name and your email, with Switch workspace and Sign out; on the free credit it counts down what is left. The top bar carries the breadcrumb and New box, which rests as a + and shows its label when you point at it. A banner crosses the top when money needs attention (When we tell you), while the workspace is closing (with Reopen), or when a signed-in machine runs a CLI too old to update itself.

Screens

Boxes

/dashboard is a grid of cards, oldest first: name, state, shape (vCPU, RAM and disk), vitals, and the box's prized ssh <name> command (click to copy). Click a card to open the box.

New box

New box, the + in the top bar, opens /dashboard/boxes/new.

The box page

Six tabs: Overview, Terminal, Desktop, Monitor, Files, Secrets; the header shows the name, state, last heartbeat and the prized ssh chip.

Overview

A card per topic, each row one setting: its name, a line saying what it does, and its control. Machine leads with the readout — the cpu, memory and disk meters, then size, disk, region and created.

A refusal shows under the cards in the server's own words. Events closes the page: the last 50 state changes with reason, actor and time. What each action does is on Boxes and Snapshots.

Terminal

The box's tmux session main, the same one prized ssh opens; closing the tab loses nothing, and opening it wakes a paused box (Sessions). Select to copy (Cmd+C on a Mac, Ctrl+Insert or the right-click menu elsewhere); Ctrl+C goes to the shell.

Desktop

Pick Desktop or Browser, then Open desktop or Open browser (Desktop).

Monitor

Ranges: live, 1h, 6h, 24h, 7d, 30d; the stored ranges show averages and a max band, paused spans shaded, lifecycle events as ticks. Panels: cpu, memory, network, disk, ports · tmux, processes. Click a chart to pin a moment and the ports and processes panels show the nearest stored snapshot. The monitor never wakes a paused box; retention is on Data retention.

Files

A file browser as the box's login user; it needs a running box and never wakes one. Each row has download, rename and delete; a text file within the inline cap opens in an editor, a bigger one shows its head read-only, a binary file offers download. Caps are on Limits.

Secrets tab

Each mount with Unmount, then a secret picker, an env name and Mount. The picker lists only the secrets available to this box; a mount whose grant was revoked shows no longer granted until you unmount it. Mounts need a running box, and a restricted box refuses them.

Snapshots

New snapshot picks a box, a name and a description; the table lists every snapshot with kind, box, size, status and age. Per row: Restore (an optional name for the new box), Make template or Rename, and Delete then Confirm delete. The templates list offers new box from this and Drop name; recently deleted holds the undo copies of deleted boxes with Restore and Delete now (Snapshots).

Environments

One card per environment with Make default, Edit, and Delete (type delete <name>). New environment asks for a name, description, base size, env vars, a setup script, and Make it the default for new boxes. Edit opens sections that save on their own: General, the credentials a box may receive (Safe for third parties, or Secret mounts, Device keys, Phone access one at a time), env vars, secret files (shown as path, mode and size only), repos, and Versions with Upgrade N boxes to vX (Environments).

Connectors

One card per provider; Connect asks for a running box, the credential, the env name and, for ClickHouse, the HTTPS endpoint (Connectors).

Secrets

Add secret asks for a name, the value, the allowed hosts, a description, and Available to (all boxes, selected boxes, or selected members' boxes). Per row: Rotate (the placeholder stays, so mounted boxes keep working), Delete then Confirm delete, and Details (grants with Revoke, grant a box, grant a member, and the usage table). Values are write-only once saved (Secrets for agents, Teams: Scoped secrets).

Workspace

Owner-only controls say so to members; while the workspace is closing every control is read-only.

Activity

Now (boxes running, sessions attached, spend today and this cycle), Boxes (each live box with owner, state, idle time, sessions, last prompt and exec, spend), Members (not shown to contractors), and Recent (the newest 50 audit rows); terms are on Teams: Team activity.

Policies

The owner edits, members read. Each rule saves on its own, and its value is its switch: clear the field (or pick Any size) and save to turn a rule off.

The rules themselves are on Teams: Policies.

Audit

Kinds, origins and the export contract are on Teams: Audit log.

Billing

Everyone reads this page; only the owner sees the controls. Plan: the current plan and renewal date, a nudge when your boxes fit a smaller plan or outgrow this one, and the plan cards (Choose, Upgrade now or Switch next cycle, Cancel plan, Resume this plan). Balance: the balance and how long it lasts, Add credit once for a top-up, and the Overage checkbox. Then What you're burning (every live box and its hourly rate; a contractor's own), Recent activity (the last 50 ledger lines), and Manage in Stripe for the card, invoices and receipts (Billing).

Settings

Your account, not the workspace: Profile (Name and Save, plus your email and photo, both from your sign-in provider), Sign-in methods (Google and GitHub: Connect links another provider by its verified email, Disconnect unlinks one, never the last), and Sessions (Sign out per browser, or Sign out other sessions). CLI tokens live under Workspace; the sign-in model is on Identity and access.

Where a setting lives