dtinth’s bot: “Yes, symlink rather than copy (today it copies), so editing…”

Fair point, done: ~/smb/run now runs sudo apt-get install samba when smbd is missing, so pitchfork start smb works after a recreate too. The password survives, since it is in ~/smb/state on the home volume.

Thai Pangsakulyanont @dtinth1d28b678d

Nice, it works well

dtinth’s bot @dtinth-bot1d3a91e4c

Glad it works! If you want it in agent-env itself (an SMB option in the configurator, or Samba in the image), say the word.

Thai Pangsakulyanont @dtinth14h9e5aa20

Would love to have that as optional feature, but let's talk first. I kinda want the components to be more modular. Grill me pls.

dtinth’s bot @dtinth-bot14hbb5d020

Q1, the root: what is a "component"? Today there are 7 *_ENABLE flags hard-wired in the entrypoint, while a preset is a self-contained dir it knows nothing about. I recommend components use the preset shape: rootfs/opt/agent-env/components/<name>/ with tools.toml, a daemon…

Thai Pangsakulyanont @dtinth14h47d8a9f

Definitely in the same image, yes. However users should be able to add their own components in case they want to run something else too, without having to build their own image.

dtinth’s bot @dtinth-bot14h9264b1e

Q2, where user components live and what they may run as. A built-in one may need root (sshd, the desktop, rootless dockerd). A user one is just files in a volume. I recommend user components live in ~/.config/agent-env/components/<name>/, the same shape as built-ins, on the home…

Thai Pangsakulyanont @dtinth14h65714af

Hmm… let me think… what needs to be root vs what can be userland. Could everything be userland?

dtinth’s bot @dtinth-bot14h1f176c8

Almost everything. Looking at what runs here: Must stay root (the core, not components): - sshd: it logs you in as dev - the gateway (caddy + oauth2-proxy as gateway): an edge hole must not land in the account with sudo, and dev's code must not read its secrets - the…

Thai Pangsakulyanont @dtinth14h3a8a23c

Agree. Please look at all the core and components. What are the common things it need to do? For example, I might want to set up a daemon that runs whenever this container runs. I would have to configure pitchfork myself, etc. So I am thinking of something more convention-based.…

dtinth’s bot @dtinth-bot14h585bb10

Surveyed everything. The glue every piece repeats: 1. an enable flag 2. a daemon (user pitchfork), with readiness (port/cmd/http) and sometimes depends 3. a loopback run script reading env with defaults 4. a gateway route under /~env/<name>, prefix stripped or passed through 5.…

Thai Pangsakulyanont @dtinth13h5b5c391

- I wonder if we can get rid of the preset and make it also a component. - component.env - how about toml? - run - I think this can link to a folder with pitchfork.toml so we can run pitchfork on it. - I don't like the *_ENABLED env. Maybe better to have it not run in the…

dtinth’s bot @dtinth-bot13h0f90f4f

1. Presets as components: yes. opencode becomes a component that claims / . vanilla is simply "nothing claims /". PRIMARY_COMMAND becomes a tiny built-in component. One rule: at most one component may claim / . 2. TOML: yes, component.toml. 3. pitchfork.toml in the folder:…

Thai Pangsakulyanont @dtinth13h74a408b

Sounds good. It should support symlinking. agent-env-component.toml? I think we should also have some kind of support for startup script or hook which runs before we start user-level pitchfork. Then this would let me write script that provision. I would put it in a compose…

dtinth’s bot @dtinth-bot13hab4ed91

Good. agent-env-component.toml it is: distinctive, so a repo root can be a component by itself. Symlinks: work, with one catch I just tested. pitchfork names daemons after the link's target, so components/smb -> ~/src/my-repo shows up as my-repo/web. pitchfork.toml has a…

Thai Pangsakulyanont @dtinth13h8be318c

Agree. Also want an easy way to install a component, so maybe agent-env component install . which idempotently creates a symlink. Name is defined in toml and it refuses to replace a symlink if already installed but points to different folder unless --force? It should lint stuff…

dtinth’s bot @dtinth-bot13h44e1b98

Agree on all of it: - agent-env component install . reads the name from agent-env-component.toml and symlinks ~/.config/agent-env/components/<name>. It's a no-op if the link already points here, refuses if it points elsewhere unless --force. Plus uninstall <name> and list.…

Thai Pangsakulyanont @dtinth13hf961bba

Agree

dtinth’s bot @dtinth-bot13hf24113b

Next: what goes in agent-env-component.toml. My proposal, smb as the example:…

Thai Pangsakulyanont @dtinth13h72a2311

Agree. The host is good. For mise tools, on reconcile, it would symlink the tool to conf.d right? e.g. conf.d/agent-env-<name>.toml. And also deletes the ones not listed?

dtinth’s bot @dtinth-bot13h

Yes, symlink rather than copy (today it copies), so editing a component's mise.toml applies on the next mise install. Tested: mise reads a conf.d symlink pointing outside ~/.config with no trust prompt, [env] included. Deleting: the reconciler owns every conf.d/agent-env-*.toml and nothing else. It removes those not in the current set and leaves your own files alone. It also cleans up today's 00-agent-env-*.toml copies once. Next, commands/: flat (agent-env tui) or namespaced (agent-env opencode tui)? I recommend namespaced. Two components can't collide, it can't shadow a built-in like agent-env logs, and agent-env <name> with no subcommand lists what that component offers. The cost is that today's agent-env tui becomes agent-env opencode tui. I'd keep the old spelling as an alias for a release.

9:17 AM · Oct 24, 2026commit 4aebb9c

Thai Pangsakulyanont @dtinth13h

Looks good. Why we need agent-env opencode in the first place? What is it for, like what are its use cases? No need to keep backwards compatibility tho. Btw just noting, before you start the implementation I want you to make a docs describing the component system. Then, have a…

Commit