# One TUI

The One TUI is the persistent full-screen workspace for project overview,
first-run setup, authentication, agents, lifecycle navigation, and deliberate
inspection. It presents the same owner operations as the CLI and does not own
project, provider, authority, or lifecycle truth.

## Open a workspace

```console
one tui --workspace .
one tui --view agent --workspace .
```

The second command starts on the governed Agent surface without creating a
different runtime. The session remains in one alternate screen across views,
model changes, browser authentication, recoverable failures, and setup; it
closes only when you explicitly leave or the process cannot continue.

## Complete first-run setup

When required local bindings are absent, the TUI guides you through provider,
sign-in method, model, price snapshot, local model name, and access preference.
Review the final consequences before provisioning.

Protected credential input is masked, bounded, and sent only to the CLI host
for the selected OS keyring or proven private-file store. It is never written
into project source, ordinary configuration, conversation text, or evidence.
Browser authentication returns to the same TUI session after the protected
account binding is ready.

Setup writes only machine-local execution configuration and protected-store
bindings. It cannot add semantic dependencies, select a provider for a root,
change `one.lock`, issue production authority, or turn an unavailable
capability into a simulated one.

## Use the Agent surface

The Agent works through the same governed tool contracts exposed by `one
agent` and `one mcp`. Permission requests lead with the visible consequence,
requested action, and access. Raw tool identity, arguments, revisions, and
internal details stay in the explicitly opened Details view.

Required-input cards remain separate from the response composer. Unknown
outcomes, pending approvals, unsupported operations, and recoverable errors
remain distinct; the TUI does not convert them into a generic success or retry.

## Keep product state and presentation separate

Overview may summarize roots, work, and actionable lifecycle state, but an
exact record remains authoritative. Inspect or resume with its opaque
reference:

```console
one inspect plan:<revision> --workspace .
one reconcile operation:<revision> --workspace .
```

Terminal restoration covers raw mode, alternate screen, cursor, paste, and
mouse state on normal close and unwinding. If a terminal is interrupted,
restart the TUI and recover from exact project and operation references rather
than reconstructing truth from its previous screen.

See [One Shell](/one/guides/one-shell),
[agents and automation](/one/guides/agents-and-automation), and
[inspect and operate](/one/lifecycle/inspect-operate).

