Commands can read, change, or delete files with the server user’s permissions. Common direct references to secrets, .env files, deployment targets, and destructive operations are blocked, but these filters are not complete. Every command is shown for approval first. Output is returned to the selected model. This is not a sandbox; use only on a computer you control.
Start the Eltes Node server locally with shell support enabled. Bash/macOS/Linux: ELTES_ENABLE_SHELL=1 HOST=127.0.0.1 npm start. PowerShell: $env:ELTES_ENABLE_SHELL=1; $env:HOST='127.0.0.1'; npm start. On Chromebook, start it from the Linux development terminal and use the local Eltes page, not the hosted PWA. Copy the one-time token printed by the server. It runs new commands as the server user; it does not attach to or read an existing terminal session. Python commands such as python3 --version work only if Python is installed in that same environment; each command starts a new process, not an interactive Python session. After connecting, turn on Tools and use a hosted model. This runner is unavailable on GitHub Pages or Vercel.
Disconnected. Tool calls are not sent to a shell.