Rings a short chime in this tab when a run reaches a terminal state (done / failed / killed). Client-side preference, stored in this browser only. Browsers only allow sound after you have interacted with the page, so the bell starts working after your first click here.

Shows the meter buttons (fleet header + project filter) that open mission control — per-project flow + analytics (#/factory/<project>). Client-side preference, stored in this browser only; off by default.

Pulls the latest commit (git pull --ff-only) and runs the deploy script. Locally modified files (e.g. edited config) are stashed for the pull and re-applied after. If the script fails, the checkout rolls back to the previous commit and the script re-runs there.

Connect a GitHub App installation so runs clone repos and open PRs with per-run installation tokens — no PAT needed. ADD GITHUB opens GitHub's install page; pick an account and repos there, and GitHub sends you straight back here with the installation recorded below.

Global key/value secrets, exported as environment variables inside every run's sandbox (firecracker: they ride the read-only config drive and are exported after untrusted repo setup — the agent and its tools see them, setup never does). Values are write-only: the list shows names, never values. Runs launched after a change pick it up; a running VM keeps the secrets it launched with. Names must be env-var syntax (NPM_TOKEN, AWS_SECRET_ACCESS_KEY, …); pi-cloud's own variables (PI_*, model keys, PATH, …) are reserved.