Skip to content

Working folder vs artifacts

Open in product: preshos.com/agent-ops/working-folder

A session keeps two kinds of file state. The working folder is live scratch space: intermediate files, drafts-in-progress, tool outputs, and anything the agent needs along the way. The Workspace holds durable artifacts: the pages, files, and deliverables the session presents for human eyes. Knowing which is which keeps review on the artifact and experimentation in the folder.

On a Local run target, the folder is the project: Open folder… points the session at an existing project folder, New project… starts one. Chats that never pick a project still get a per-session folder under ~/PRESHos/YYYY-MM-DD/<chat> — the folder exists even when no project was named.

Working folder Workspace artifacts
Live and disposable Durable and reviewable
Agent’s scratch state Member-facing outputs
Safe to overwrite and discard Versioned by content hash, with the record behind them
Never the deliverable The deliverable, or its draft
Session files: working folder scratch state beside reviewable artifacts
  • Review artifacts, not folder contents. The preview pane shows what the agent stands behind; the folder shows how it got there.
  • A file nobody was asked to review is not approved. Pulling a working-folder file into downstream work skips the review the artifact path would have given it.
  • Promote deliberately: when scratch work becomes worth keeping, it becomes an artifact through the session — not by copying paths around it.
  • Secrets never land in either. Credential values stay in the vault and arrive as grants; they are never written into folder files, artifacts, chat, or code.

The Files tab carries no Saved/Live toggle. It picks the source itself: sessions on a local or running cloud host read live; everything else reads saved. Download all lives in the ⋯ menu. Treat the product UI as the source of truth for the exact source label shown.

Coding runs: branches and checkpoints behind the folder

Section titled “Coding runs: branches and checkpoints behind the folder”

On coding runs the working folder sits on a per-session Git branch bound at run creation, with automatic turn-end checkpoints as the run proceeds. The folder is still scratch — the branch and checkpoints are restore points, not reviewables. Nothing leaves the sandbox except through the brokered push path and HITL-governed publish_branch / create_pull_request, which refuse protected and foreign repos. Full rule: Sandbox.

Session artifacts: reviewable outputs presented for human review