[Cuarroc]

In den Einstellungen gibt es jetzt unter „Allgemein“ eine Auswahl „Umgebung der Agenten“ (Streng, Erlaubnisliste, Erbt alles). Sie gilt für alle Projekte, Standard ist „Streng“, und eine Änderung wirkt nur bei neuen Starts und Neustarts. Schlägt das Speichern fehl, springt die Auswahl zurück und eine Fehlermeldung erscheint.

Report

What changed

• src/lib/ipc.ts: getAgentEnvIsolation / setAgentEnvIsolation over the existing get/set_agent_env_isolation commands (unknown value reads as strict).
• SettingsView.tsx / GeneralTab.tsx: radio group, optimistic update with rollback and role="alert" on failure; read through refreshGlobalSettings (useRefreshOnResume), same pattern as the digest switch. Help text: applies to new starts/respawns only, inherit is the weakest stage, coordinators stay strict.
• Tests: three new component tests in SettingsView.test.tsx.

Evidence

• Base: origin/main cd7ec32 (predecessor cc25874 / feat(env): global agent env stage via API, command and every spawn #438 merged).
• bash scripts/ci/red-first.sh -> exit 0.
• bash scripts/ci/gates.sh lane prepush at 685c665 -> exit 0 (also re-run by the pre-push hook).
• Diff: 4 files, ~126 insertions (incl. tests).

Architecture drift: no new findings.

NICHT ABGEDECKT

• #[cfg(windows)] tests / Windows lane (runs in the merge queue).
• GUI not launched; no screenshot, the layout of the new fieldset is unchecked visually.
• The backend PUT verdict-token path is not exercised here (Tauri command used, no HTTP).

Review disposition

Reviewer: kimi-k3 (Ollama kimi-k3:cloud), tier B. Candidate SHA 685c665; fix commit 788abcd (delta is test-only). Architecture drift checked: the pattern copies handleToggleDigest / refreshGlobalSettings and the Tauri command shape in main.rs:744-756; no second pattern.

• F1 (high, backend commands missing): rejected - get_agent_env_isolation / set_agent_env_isolation exist in src-tauri/src/main.rs:744,751, registered at main.rs:3906-3907, arg key stage matches (merged in feat(env): global agent env stage via API, command and every spawn #438).
• F2 (medium, out-of-order rollback / refresh race): rejected, follow-up - identical to the existing digest switch (SettingsView.tsx:171-186); a second pattern would be drift. If wanted, fix both switches together in a separate package.
• F3 (medium, read path untested): accepted - 788abcd adds "shows the stored stage when it is not the default" (red-first against merge base: OK).
• F4 (low, hint text unproven): rejected - backed by profiles.rs:57-71 (coordinators strict) and main.rs:748 (applies at next spawn).
• F5 (low, mockReset drops default): rejected - all three tests set their implementations; no live failure.
• F6 (low, describe options overload): rejected - already used at SettingsView.test.tsx:92, DiffView.test.tsx:85; vitest ^4.1.11.
• F7 (low, other GeneralTab render sites): rejected - only SettingsView.tsx renders it (grep).

🤖 Generated with Claude Code

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[Cuarroc]

@Mergifyio queue

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-10-05 04:30 UTC · Rule: default · triggered by @Cuarroc with the @mergifyio queue command
• ✅ Checks passed · on draft merge queue: checking #442 on main (e9e03bd) #449
• ✅ Merged — 2026-10-05 04:44 UTC · at 801f4ecb5c4b64d02c8c75e9fde06ed9390567ba · merge

This pull request spent 13 minutes 48 seconds in the queue, including 13 minutes 32 seconds running CI.

Required conditions to merge

• check-success = gates (linux)
• check-success = gates (windows)
• check-success = red-first
• label != do-not-merge
  • feat(settings): global agent env stage selector #442