Tokens are encrypted on the box. General tokens reach every shell; project tokens only reach shells started inside that folder. Claude is told to use them from here instead of asking you.

No tokens yet. Add an API key or OAuth token and label what it is for.

This app is root-level control of the box. Keep two-step codes on and sign out of devices you no longer use. Lost your authenticator? Run box.ps1 reset-totp from the laptop.

Sign in opens a shell running the agent's login; follow the link it prints and paste the code back. Claude profiles are separate config folders, so each can be signed in to a different account.

Your repositories

Everything you build here can live in GitHub, so the box is disposable: push your projects, export the vault, run terraform destroy.