Tensionix
Audion DevOps Tools

v2.0.0 ·

Audion DevOps Tools — Command Reference

EN RU

Audion DevOps Tools — Command Reference

Русский · About · User Guide

Contents

The complete list of operations with their parameters. Read it when you need the exact operation name, its fields, or what it does to the system.

This reference is generated from config\tool_manifest.yaml. It includes every GUI description, risk classification, inherited field, default and selectable option. Practical workflows and consequence notes remain in the authored sections above.

Runtime and shell > Preflight snapshot

  • Operation id: preflight_status
  • Description: One terminal snapshot: elevation, WSL, virtualization, PowerShell, network, Wi-Fi and disk risk flags.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Runtime and shell > PowerShell runtime status

  • Operation id: runtime_status
  • Description: Show which PowerShell the scripts run with - App\AudionPs.exe of the program or the system one - and its version.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Runtime and shell > Check Windows Long Paths

  • Operation id: windows_long_paths_status
  • Description: Show HKLM LongPathsEnabled and Git core.longpaths values. Does not change settings.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Runtime and shell > Enable Windows Long Paths

  • Operation id: windows_long_paths_enable
  • Description: Set HKLM LongPathsEnabled=1. Apps still need longPathAware manifest support.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Runtime and shell > Enable Git Long Paths

  • Operation id: git_long_paths_enable
  • Description: Set git config --global core.longpaths true for the current user.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Browser Bookmarks Master > Status

  • Operation id: browser_bookmarks_status
  • Description: Read-only check: selected browser profile files, process state and latest importable backup from SOURCE. GUI status can run for one or several checked browsers.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • browser_profile — Browser (type=select, default=chrome).
    • backup_label — Backup label (type=text, default=bookmarks_master).
    • backup_version — Backup version (type=text, default=auto).
    • close_browser_process — Close browser before file operation (type=checkbox, default=true).
    • browser_profile_path — Portable browser profile folder (type=folder).
    • backup_source_path — SOURCE backup folder (type=folder).
    • backup_target_path — TARGET backup folder (type=folder).

Browser Bookmarks Master > Clear local Favicons cache

  • Operation id: browser_bookmarks_clear_favicons
  • Description: Create a rollback backup, close selected browsers, then delete Favicons and sidecars. Chrome rebuilds an empty database but refetches icons only as pages are visited.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • browser_profile — Browser (type=select, default=chrome).
    • backup_label — Backup label (type=text, default=bookmarks_master).
    • backup_version — Backup version (type=text, default=auto).
    • close_browser_process — Close browser before file operation (type=checkbox, default=true).
    • browser_profile_path — Portable browser profile folder (type=folder).
    • backup_source_path — SOURCE backup folder (type=folder).
    • backup_target_path — TARGET backup folder (type=folder).

Browser Bookmarks Master > Export master to TARGET

  • Operation id: browser_bookmarks_export_master
  • Description: Close selected browsers and copy Bookmarks, Favicons and available Chromium sidecar files into versioned backup folders under TARGET.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • browser_profile — Browser (type=select, default=chrome).
    • backup_label — Backup label (type=text, default=bookmarks_master).
    • backup_version — Backup version (type=text, default=auto).
    • close_browser_process — Close browser before file operation (type=checkbox, default=true).
    • browser_profile_path — Portable browser profile folder (type=folder).
    • backup_source_path — SOURCE backup folder (type=folder).
    • backup_target_path — TARGET backup folder (type=folder).

Browser Bookmarks Master > Import master from SOURCE

  • Operation id: browser_bookmarks_import_master
  • Description: Import an explicitly selected native backup or HTML file into all checked system browsers; portable mode uses one exact profile. Each target gets a rollback backup.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters:
    • browser_profile — Browser (type=select, default=chrome).
    • backup_label — Backup label (type=text, default=bookmarks_master).
    • backup_version — Backup version (type=text, default=auto).
    • close_browser_process — Close browser before file operation (type=checkbox, default=true).
    • browser_profile_path — Portable browser profile folder (type=folder).
    • backup_source_path — SOURCE backup folder (type=folder).
    • backup_target_path — TARGET backup folder (type=folder).

Browser Bookmarks Master > Transfer master between browsers

  • Operation id: browser_bookmarks_transfer_master
  • Description: Two-stage transfer: export the selected source browser into a project-local backup, then import that backup into selected target browsers with pre-import backups and Favicons cleanup.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters:
    • browser_profile — Browser (type=select, default=chrome).
    • backup_label — Backup label (type=text, default=bookmarks_master).
    • backup_version — Backup version (type=text, default=auto).
    • close_browser_process — Close browser before file operation (type=checkbox, default=true).
    • browser_profile_path — Portable browser profile folder (type=folder).
    • backup_source_path — SOURCE backup folder (type=folder).
    • backup_target_path — TARGET backup folder (type=folder).

Browser Bookmarks Master > Open local safety backups

  • Operation id: browser_bookmarks_open_local_backup
  • Description: Open project-local Browser Bookmarks backup folder with pre-import snapshots.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • browser_profile — Browser (type=select, default=chrome).
    • backup_label — Backup label (type=text, default=bookmarks_master).
    • backup_version — Backup version (type=text, default=auto).
    • close_browser_process — Close browser before file operation (type=checkbox, default=true).
    • browser_profile_path — Portable browser profile folder (type=folder).
    • backup_source_path — SOURCE backup folder (type=folder).
    • backup_target_path — TARGET backup folder (type=folder).

Network Cleaner > Status snapshot

  • Operation id: network_status
  • Description: Read-only baseline: collects ipconfig/routes/adapters/DNS/proxy/Wi-Fi status and writes a timestamped project-local diagnostic snapshot.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Network Cleaner > Backup network state

  • Operation id: network_backup
  • Description: Full Network Cleaner snapshot: adapters, IP/DNS/routes, proxy, firewall, registry and Wi-Fi XML without clear-text keys.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Network Cleaner > Backup with Wi-Fi keys

  • Operation id: network_backup_wifi_keys
  • Description: Sensitive snapshot: exports Wi-Fi profiles with clear-text keys into the Network Cleaner backup folder.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters: none.

Network Cleaner > Restore network backup > Restore latest

  • Operation id: network_restore_latest
  • Description: Restore the newest Network Cleaner snapshot. First captures the current state, then imports saved registry/network/firewall/hosts/Wi-Fi data where available.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Network Cleaner > Restore network backup > Restore selected

  • Operation id: network_restore_selected
  • Description: Restore a selected Network Cleaner snapshot from the backup folder. Use when latest is not the state you want to return to.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • network_restore_snapshot — Network backup (type=select).

Network Cleaner > Repair profiles > Light repair

  • Operation id: network_light_repair
  • Description: Lowest-risk repair: flush/register DNS, clear ARP cache, refresh NetBIOS and renew DHCP only for connected DHCP interfaces.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Network Cleaner > Repair profiles > Standard repair

  • Operation id: network_standard_repair
  • Description: Normal escalation: resets Winsock, TCP/IP and WinHTTP proxy, then refreshes DNS and ARP. Reboot is recommended afterwards.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Network Cleaner > Repair profiles > Nuclear repair

  • Operation id: network_nuclear_repair
  • Description: Heavy repair: Standard repair plus route flush; the original script still asks separately before the deepest reset steps.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Network Cleaner > Proxy > Proxy status

  • Operation id: network_proxy_status
  • Description: Show current-user WinINet/System proxy and machine-level WinHTTP proxy without changing them.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Network Cleaner > Proxy > Disable user proxy

  • Operation id: network_proxy_disable_user
  • Description: Turns off current-user WinINet/System proxy settings. Useful after corporate/VPN/proxy tools leave stale proxy values.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Network Cleaner > Proxy > Reset WinHTTP proxy

  • Operation id: network_proxy_reset_winhttp
  • Description: Resets machine-level WinHTTP proxy used by services and some system tools. Does not edit browser/user proxy settings.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Network Cleaner > Open backup folder

  • Operation id: network_open_backup
  • Description: Open the project-local Network Cleaner backup folder with snapshots, restore manifests and run logs.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

DNS Doctor > Status snapshot

  • Operation id: dns_status
  • Description: Read-only: adapter DNS, what the router offers over DHCP, who holds port 53, who ends up asking outward with its reverse name, whether a name resolves, and the state of the tray-icon service.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

DNS Doctor > Repair names and icon

  • Operation id: dns_repair
  • Description: Starts a stopped local resolver (ControlD, YogaDNS, AdGuard, dnscrypt); if there is none, hands the adapters back to the router. Then restores the tray-icon service the way Windows keeps it.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Fix the tray icon

  • Operation id: dns_fix_icon
  • Description: Only NlaSvc: enables the active internet probe if it was disabled, sets the service to automatic start, starts it, and restarts it when the verdict is stale.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Resolver: router (DHCP)

  • Operation id: dns_use_auto
  • Description: Returns every physical adapter to automatic DNS, as intended in the network the machine is plugged into.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Resolver: the router itself

  • Operation id: dns_use_router
  • Description: Points the adapters at the default gateway directly. Checked with a name request before it is written.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Resolver: Cloudflare

  • Operation id: dns_use_cloudflare
  • Description: Cloudflare 1.1.1.1 and 1.0.0.1 - fast, filters nothing. Checked with a name request before it is written.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Resolver: Google

  • Operation id: dns_use_google
  • Description: Google 8.8.8.8 and 8.8.4.4. Checked with a name request before it is written.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Resolver: Quad9

  • Operation id: dns_use_quad9
  • Description: Quad9 9.9.9.9 and 149.112.112.112 - blocks malicious names. Checked with a name request before it is written.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Resolver: Yandex

  • Operation id: dns_use_yandex
  • Description: Yandex 77.88.8.8 and 77.88.8.1 - the closest hop from here, has its own filters. Checked with a name request before it is written.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

DNS Doctor > Resolver: AdGuard

  • Operation id: dns_use_adguard
  • Description: AdGuard 94.140.14.14 and 94.140.15.15 - blocks ads and trackers. Checked with a name request before it is written.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Connectivity > Wi-Fi profiles > Wi-Fi status

  • Operation id: network_wifi_status
  • Description: Show wlan interfaces and saved profiles. Does not change network settings.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • wifi_profile — Wi-Fi profile (type=select).
    • wifi_profile_override — Manual profile (type=text).
    • wifi_adapter — Wi-Fi adapter (type=select).

Connectivity > Wi-Fi profiles > Connect profile

  • Operation id: network_wifi_connect
  • Description: Connect to the selected saved Wi-Fi profile, optionally through a selected adapter.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • wifi_profile — Wi-Fi profile (type=select).
    • wifi_profile_override — Manual profile (type=text).
    • wifi_adapter — Wi-Fi adapter (type=select).

Connectivity > Wi-Fi profiles > Profile autoconnect

  • Operation id: network_wifi_connection_mode
  • Description: Set the selected Wi-Fi profile to automatic or manual connection mode.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wifi_profile — Wi-Fi profile (type=select).
    • wifi_profile_override — Manual profile (type=text).
    • wifi_adapter — Wi-Fi adapter (type=select).
    • connection_mode — Connection mode (type=radio, default=auto).
      • Options: auto — Auto; manual — Manual

Connectivity > Wi-Fi profiles > Export profiles

  • Operation id: network_wifi_export
  • Description: Export Wi-Fi profiles to a selected folder; clear keys are included only when the checkbox is enabled.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • wifi_profile — Wi-Fi profile (type=select).
    • wifi_profile_override — Manual profile (type=text).
    • wifi_adapter — Wi-Fi adapter (type=select).
    • target_folder — Target folder (type=folder, default=output\wifi_profiles).
    • include_keys — Include clear-text keys (type=checkbox, default=false).

Connectivity > Wi-Fi profiles > Import profiles > Import XML file

  • Operation id: network_wifi_import_file
  • Description: Add one Wi-Fi profile XML file to Windows.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wifi_profile — Wi-Fi profile (type=select).
    • wifi_profile_override — Manual profile (type=text).
    • wifi_adapter — Wi-Fi adapter (type=select).
    • import_user_scope — User scope (type=radio, default=current).
      • Options: current — Current user; all — All users
    • import_profile_xml — Profile XML (type=file).

Connectivity > Wi-Fi profiles > Import profiles > Import XML folder

  • Operation id: network_wifi_import_folder
  • Description: Import all Wi-Fi profile XML files from a selected folder.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wifi_profile — Wi-Fi profile (type=select).
    • wifi_profile_override — Manual profile (type=text).
    • wifi_adapter — Wi-Fi adapter (type=select).
    • import_user_scope — User scope (type=radio, default=current).
      • Options: current — Current user; all — All users
    • import_profile_folder — Profile XML folder (type=folder, default=output\wifi_profiles).

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Slots status

  • Operation id: wifi_slot_status
  • Description: Show which slots are set (SSID and security, never the password), whether Windows has their profiles, and the current connection.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: form fields.

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Internet: CABLE

  • Operation id: internet_via_cable
  • Description: Cable on (the router, first provider), Wi-Fi off. Administrator rights.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: form fields.

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Internet: WI-FI MAIN

  • Operation id: wifi_slot_connect_main
  • Description: Cable off (it goes to the router of the first provider), Wi-Fi on, the Windows profile written from WI-FI MAIN, connected. Administrator rights.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: form fields.

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Internet: WI-FI SECOND

  • Operation id: wifi_slot_connect_second
  • Description: Cable off (it goes to the router of the first provider), Wi-Fi on, the Windows profile written from WI-FI SECOND, connected. Administrator rights.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: form fields.

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Save WI-FI MAIN

  • Operation id: wifi_slot_save_main
  • Description: Store the SSID and password of WI-FI MAIN; the password goes under DPAPI and is cleared from the window.
  • Risk: kind=safe, risk_level=user_write
  • Parameters: form fields.

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Save WI-FI SECOND

  • Operation id: wifi_slot_save_second
  • Description: Store the SSID and password of WI-FI SECOND; the password goes under DPAPI and is cleared from the window.
  • Risk: kind=safe, risk_level=user_write
  • Parameters: form fields.

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Forget WI-FI MAIN

  • Operation id: wifi_slot_forget_main
  • Description: Remove WI-FI MAIN from the slots file. The Windows profile stays.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: form fields.

Connectivity > Internet: cable / WI-FI MAIN / SECOND > Forget WI-FI SECOND

  • Operation id: wifi_slot_forget_second
  • Description: Remove WI-FI SECOND from the slots file. The Windows profile stays.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: form fields.

Connectivity > SMB network login

  • Operation id: smb_network_login
  • Description: Open an external console for net use authentication to a Windows file-sharing computer; type the password there and the SMB session becomes available for Explorer.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • smb_login — SMB login cache (type=smb_login_cache, default={computer: '', user: ''}).
    • smb_open_explorer — Open Explorer after login (type=checkbox, default=true).

Connectivity > Adapter action

  • Operation id: network_adapter_apply
  • Description: Enable, disable or restart the selected network adapter. Can interrupt active network connections.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • adapter — Adapter (type=select).
    • adapter_action — Action (type=radio, default=restart).
      • Options: restart — Restart; enable — Enable; disable — Disable

Connectivity > LAN/Wi-Fi switch

  • Operation id: network_lan_wifi_switch
  • Description: Switch to LAN only, Wi-Fi only, both enabled, or cycle Wi-Fi and reconnect a saved profile.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • lan_adapter — LAN adapter (type=select).
    • wifi_adapter — Wi-Fi adapter (type=select).
    • wifi_profile — Wi-Fi profile (type=select).
    • wifi_profile_override — Manual Wi-Fi profile (type=text).
    • switch_mode — Mode (type=radio, default=wifi_only).
      • Options: wifi_only — Wi-Fi only; lan_only — LAN only; both_on — Both on; cycle_wifi — Cycle Wi-Fi

Connectivity > Wi-Fi sticky pair

  • Operation id: network_wifi_sticky_pair
  • Description: Connect one saved profile and make it auto-connect while keeping the second profile manual.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • auto_wifi_profile — Auto profile (type=select).
    • auto_wifi_profile_override — Auto profile manually (type=text).
    • manual_wifi_profile — Manual profile (type=select).
    • manual_wifi_profile_override — Manual profile manually (type=text).
    • wifi_adapter — Wi-Fi adapter (type=select).
    • connect_auto_profile — Connect auto profile (type=checkbox, default=true).

WSL Toolkit > Basic and install > System WSL2 status

  • Operation id: wsl_system_status
  • Description: Show Windows optional features, WSL status and installed distributions.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Basic and install > Enable WSL2 features

  • Operation id: wsl_enable_features
  • Description: Enable Microsoft-Windows-Subsystem-Linux and VirtualMachinePlatform, then set WSL default version to 2. Reboot may be required.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

WSL Toolkit > Basic and install > Update WSL2

  • Operation id: wsl_update_engine
  • Description: Run wsl --update for the Windows WSL engine.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

WSL Toolkit > Basic and install > Installable distros

  • Operation id: wsl_list_online
  • Description: Run wsl --list --online and print available distro names.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Basic and install > Install distro

  • Operation id: wsl_install_distro
  • Description: Install the selected online WSL distro either into the system default location or into a selected folder.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • install_distro_pins — Pinned distros (type=profile_buttons).
    • install_distro — Distro (type=select, default=Ubuntu-26.04).
    • install_distro_override — Manual distro (type=text).
    • install_name — Instance name (type=text).
    • install_location_mode — Install location (type=radio, default=custom).
      • Options: custom — Selected folder; system — System default
    • install_location — Install folder (type=folder).
    • no_launch — Do not launch after install (type=checkbox, default=true).

WSL Toolkit > Basic and install > Install from image file

  • Operation id: wsl_install_from_file
  • Description: Install a local .wsl image such as ubuntu-26.04-wsl-amd64.wsl, or import tar/vhd/vhdx into a selected folder.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • install_image_file — WSL source image (type=file).
    • install_name — Distro name (type=text).
    • install_location — Install folder (type=folder).
    • no_launch — Do not launch after install (type=checkbox, default=true).

WSL Toolkit > Basic and install > Installed distros

  • Operation id: wsl_list
  • Description: Run wsl --list --verbose.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Basic and install > WSL status

  • Operation id: wsl_status
  • Description: Run wsl --status.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Basic and install > Shutdown WSL

  • Operation id: wsl_shutdown
  • Description: Stop all WSL distributions.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

WSL Toolkit > Linux configuration > Package update

  • Operation id: wsl_linux_apt_update
  • Description: Run apt/dnf package metadata update and optionally upgrade packages inside the selected WSL distro.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • linux_username — Linux user (type=text).
    • wsl_apt_upgrade — Upgrade (type=radio, default=none).
      • Options: none — Update only; upgrade — Upgrade; full-upgrade — Full upgrade / sync
    • wsl_apt_network_repair — Resilient apt network mode (type=checkbox, default=true).
    • wsl_apt_force_ipv4 — Force IPv4 for apt (type=checkbox, default=true).
    • wsl_apt_mirror — Ubuntu apt mirror (type=select, default=https_archive).
      • Options: https_archive — archive.ubuntu.com over HTTPS; https_azure — azure.archive.ubuntu.com over HTTPS; https_kernel — mirrors.edge.kernel.org over HTTPS; https_yandex — mirror.yandex.ru over HTTPS; keep — Keep current sources; custom — Custom mirror
    • wsl_apt_custom_mirror — Custom apt mirror (type=text).
    • wsl_apt_retries — APT retries (type=number, default=4).
    • wsl_apt_timeout — APT timeout seconds (type=number, default=20).

WSL Toolkit > Linux configuration > Account bootstrap

  • Operation id: wsl_linux_account
  • Description: Create/update a Linux user, set password, sudo/wheel group and WSL default user.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • linux_username — Linux user (type=text).
    • linux_password — Password (type=password).
    • linux_set_password — Set password (type=checkbox, default=true).
    • linux_add_sudo — Add to sudo/wheel (type=checkbox, default=true).
    • linux_set_default_user — Set as WSL default user (type=checkbox, default=true).
    • linux_shell — Shell (type=text, default=/bin/bash).

WSL Toolkit > Linux configuration > Dev packages

  • Operation id: wsl_linux_dev_packages
  • Description: Install Audion WSL Dev packages. Heavy/Desktop packages are not selected.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • linux_username — Linux user (type=text).
    • wsl_packages_baseline — Baseline packages (type=checkboxes, default=[ca-certificates, curl, wget, rsync, zstd, git, git-lfs, jq, tree, ripgrep, fd-find, fzf, unzip, zip, 7zip, htop, btop, ncdu, mc, far2l, micro, neovim, tmux, shellcheck, tree-sitter-cli, build-essential, gcc, g++, make, cmake, pkg-config, python3, python3-pip, python3-venv, pipx, openssh-client, rclone, net-tools, nmap, traceroute]).
    • wsl_packages_media_cli — Media CLI packages (type=checkboxes, default=[]).
    • wsl_packages_sync — Sync/network packages (type=checkboxes, default=[]).
    • wsl_packages_lab — Lab/container packages (type=checkboxes, default=[]).
    • wsl_apt_update_first — Update package metadata first (type=checkbox, default=true).
    • wsl_apt_network_repair — Resilient apt network mode (type=checkbox, default=true).
    • wsl_apt_force_ipv4 — Force IPv4 for apt (type=checkbox, default=true).
    • wsl_apt_mirror — Ubuntu apt mirror (type=select, default=https_archive).
      • Options: https_archive — archive.ubuntu.com over HTTPS; https_azure — azure.archive.ubuntu.com over HTTPS; https_kernel — mirrors.edge.kernel.org over HTTPS; https_yandex — mirror.yandex.ru over HTTPS; keep — Keep current sources; custom — Custom mirror
    • wsl_apt_custom_mirror — Custom apt mirror (type=text).
    • wsl_apt_retries — APT retries (type=number, default=4).
    • wsl_apt_timeout — APT timeout seconds (type=number, default=20).
    • wsl_install_recommends — Install recommended packages (type=checkbox, default=false).
    • wsl_selinux_permissive — Set SELinux permissive (Fedora) (type=checkbox, default=false).
    • wsl_flatpak_flathub — Flatpak + Flathub remote (type=checkbox, default=false).
    • wsl_optional_packages — Optional packages (type=textarea).

WSL Toolkit > Linux configuration > Micro baseline

  • Operation id: wsl_micro_baseline
  • Description: Install Audion micro settings and keybindings for the selected Linux user.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • linux_username — Linux user (type=text).

WSL Toolkit > Linux configuration > MC skin

  • Operation id: wsl_mc_skin
  • Description: Install Audion Midnight Commander skin and optionally set it active.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • linux_username — Linux user (type=text).
    • mc_skin — Skin (type=radio, default=electricblue256).
      • Options: electricblue256 — Electric Blue; audion256 — Audion
    • mc_apply_skin — Set as active MC skin (type=checkbox, default=true).

WSL Toolkit > Linux configuration > Neovim base

  • Operation id: wsl_neovim_base
  • Description: Install an Audion Neovim profile without AI providers.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • linux_username — Linux user (type=text).
    • nvim_appname — NVIM_APPNAME (type=text, default=audion-ide).
    • nvim_profile — Profile (type=radio, default=lite).
      • Options: lite — Lite; lazyvim — LazyVim

WSL Toolkit > Ubuntu Dev Installer Kit > Open kit folder

  • Operation id: ubuntu_dev_open_folder
  • Description: Open tools/ubuntu_dev_installer.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Ubuntu Dev Installer Kit > Open README RU

  • Operation id: ubuntu_dev_open_readme_ru
  • Description: Open the Russian README for the project-local Ubuntu kit.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Ubuntu Dev Installer Kit > Open Btrfs guide

  • Operation id: ubuntu_dev_open_btrfs_guide
  • Description: Open the Btrfs/Timeshift LiveUSB guide.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Ubuntu Dev Installer Kit > Open installer script

  • Operation id: ubuntu_dev_open_installer_script
  • Description: Open the main Ubuntu dev installer script from the project-local kit.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Ubuntu Dev Installer Kit > Open NVMe prep script

  • Operation id: ubuntu_dev_open_nvme_prep_script
  • Description: Open the Btrfs/LUKS Ubuntu LiveUSB prep script from the project-local kit.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Ubuntu Dev Installer Kit > Open package lists

  • Operation id: ubuntu_dev_open_packages
  • Description: Open the package-list folder used by the kit.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

WSL Toolkit > Distro actions > Terminate distro

  • Operation id: wsl_terminate
  • Description: Terminate the selected WSL distribution.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).

WSL Toolkit > Distro actions > Backup distro

  • Operation id: wsl_backup
  • Description: Export selected distribution as tar or vhd.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • format — Format (type=radio, default=tar).
      • Options: tar — tar; vhd — vhd
    • backup_dir — Backup folder override (type=folder).

WSL Toolkit > Distro actions > Clone distro

  • Operation id: wsl_clone
  • Description: Export selected distro and import it under a new name.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • new_name — New name (type=text).
    • location — Install location (type=folder).
    • backup_dir — Temp backup folder (type=folder).

WSL Toolkit > Distro actions > Move distro

  • Operation id: wsl_move
  • Description: Move the selected distro through export/import.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).
    • location — New install location (type=folder).
    • backup_dir — Temp backup folder (type=folder).

WSL Toolkit > Distro actions > Delete distro

  • Operation id: wsl_delete
  • Description: Permanently unregister the selected WSL distribution.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters:
    • wsl_name — Distro (type=select).
    • wsl_name_override — Manual distro name (type=text).

WSL Toolkit > Import and restore > Import VHDX in place

  • Operation id: wsl_import_in_place
  • Description: Register an existing ext4.vhdx as a WSL distribution.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wsl_name_override — Distro name (type=text).
    • vhdx_path — VHDX file (type=select).
    • vhdx_path_manual — Manual VHDX file (type=file).

WSL Toolkit > Import and restore > Restore from backup

  • Operation id: wsl_restore_from_backup
  • Description: Import a tar/vhd/vhdx backup as a WSL distribution.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • wsl_name_override — Distro name (type=text).
    • location — Install location (type=folder).
    • backup_file — Backup file (type=select).
    • backup_file_manual — Manual backup file (type=file).

WSL Toolkit > Register VHDX batch > Register all VHDX

  • Operation id: wsl_register_all_vhdx
  • Description: Non-interactive batch import-in-place. Dry-run is enabled by default; existing distro names are skipped.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • register_root — VHDX root (type=folder).
    • filter — File filter (type=text, default=ext4.vhdx).
    • dry_run — Dry run (type=checkbox, default=true).

Virtualization > Virtualization status

  • Operation id: virt_status
  • Description: Show hypervisorlaunchtype, Hyper-V/VMPlatform/WHP/Sandbox/WSL feature state, VBS/Core Isolation, and the interpreted current mode.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Virtualization > Optimization status

  • Operation id: virt_optimization_status
  • Description: Read-only check of what slows VM/WSL: Core Isolation/VBS, active power plan, Defender exclusions for WSL/VM paths, .wslconfig presence and WSL VHDX placement.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Virtualization > Mode: Hyper-V / WSL2

  • Operation id: virt_mode_hyperv
  • Description: Set hypervisorlaunchtype=Auto and enable VirtualMachinePlatform. Hyper-V/WSL2/Sandbox work; third-party VMs run only via WHP or fail. Backup: backup\virtualization. Needs reboot.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Virtualization > Mode: Third-party fast

  • Operation id: virt_mode_thirdparty
  • Description: Set hypervisorlaunchtype=Off. VMware/VirtualBox run at full speed; WSL2/Hyper-V/Sandbox stop until you switch back. If VBS/Core Isolation is on, VT-x can still be held. Backup: backup\virtualization. Needs reboot.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Virtualization > Mode: Coexist (WHP)

  • Operation id: virt_mode_coexist
  • Description: Keep hypervisorlaunchtype=Auto and enable Windows Hypervisor Platform + VirtualMachinePlatform so modern VMware/VirtualBox run alongside Hyper-V/WSL2 (slower). Backup: backup\virtualization. Needs reboot.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Virtualization > Enable Hyper-V

  • Operation id: virt_hyperv_enable
  • Description: Enable Microsoft-Hyper-V-All (Hyper-V Manager + platform) and set hypervisorlaunchtype=Auto. Backup: backup\virtualization. Needs reboot.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Virtualization > Disable Hyper-V

  • Operation id: virt_hyperv_disable
  • Description: Disable Microsoft-Hyper-V-All. To give third-party VMs full speed also use Mode: Third-party fast (hypervisorlaunchtype=Off). Backup: backup\virtualization. Needs reboot.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Virtualization > Enable Windows Sandbox

  • Operation id: virt_sandbox_enable
  • Description: Enable Containers-DisposableClientVM (Windows Sandbox). Requires the hypervisor (Hyper-V/WSL2 mode). Backup: backup\virtualization. Needs reboot.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Virtualization > Disable Windows Sandbox

  • Operation id: virt_sandbox_disable
  • Description: Disable Containers-DisposableClientVM (Windows Sandbox). Backup: backup\virtualization. Needs reboot.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Hosts and Bitrix > Detect current endpoint

  • Operation id: bitrix_detect_endpoint
  • Description: DNS-only lookup ignores stale hosts entries, accepts only local/private IPs, scans candidate ports and fills IP/port fields without changing hosts.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • hosts_presets — Pins (type=profile_buttons).
    • host_name — Host name (type=text).
    • ip_address — IP address (type=text).
    • bitrix_ports — Custom TCP ports (type=text, default=443).
    • bitrix_auto_scan_ports — Auto-scan open ports (type=checkbox, default=true).
    • bitrix_port_scan_candidates — Port scan candidates (type=text, default=80,443,8080,8443,8890,8891,8892).

Hosts and Bitrix > Status / DNS / ports

  • Operation id: bitrix_status
  • Description: Show hosts override, effective resolved IP, DNS answer, auto-scanned ports and TCP checks.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • hosts_presets — Pins (type=profile_buttons).
    • host_name — Host name (type=text).
    • ip_address — IP address (type=text).
    • bitrix_ports — Custom TCP ports (type=text, default=443).
    • bitrix_auto_scan_ports — Auto-scan open ports (type=checkbox, default=true).
    • bitrix_port_scan_candidates — Port scan candidates (type=text, default=80,443,8080,8443,8890,8891,8892).

Hosts and Bitrix > Enable override

  • Operation id: bitrix_enable
  • Description: Apply hosts override for selected host and IP; detected/custom ports are saved in the managed hosts comment.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • hosts_presets — Pins (type=profile_buttons).
    • host_name — Host name (type=text).
    • ip_address — IP address (type=text).
    • bitrix_ports — Custom TCP ports (type=text, default=443).
    • bitrix_auto_scan_ports — Auto-scan open ports (type=checkbox, default=true).
    • bitrix_port_scan_candidates — Port scan candidates (type=text, default=80,443,8080,8443,8890,8891,8892).

Hosts and Bitrix > Disable override

  • Operation id: bitrix_disable
  • Description: Bitwise depatch: restore the exact pre-patch hosts backup referenced by the managed hosts line.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • hosts_presets — Pins (type=profile_buttons).
    • host_name — Host name (type=text).
    • ip_address — IP address (type=text).
    • bitrix_ports — Custom TCP ports (type=text, default=443).
    • bitrix_auto_scan_ports — Auto-scan open ports (type=checkbox, default=true).
    • bitrix_port_scan_candidates — Port scan candidates (type=text, default=80,443,8080,8443,8890,8891,8892).

Hosts and Bitrix > Restore original hosts

  • Operation id: bitrix_restore
  • Description: Restore hosts from the latest pre-patch backup when an explicit managed-line depatch is not available.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • hosts_presets — Pins (type=profile_buttons).
    • host_name — Host name (type=text).
    • ip_address — IP address (type=text).
    • bitrix_ports — Custom TCP ports (type=text, default=443).
    • bitrix_auto_scan_ports — Auto-scan open ports (type=checkbox, default=true).
    • bitrix_port_scan_candidates — Port scan candidates (type=text, default=80,443,8080,8443,8890,8891,8892).

Default apps and Microsoft apps > Policy

  • Operation id: default_apps_policy
  • Description: Save the current set of default programs and make Windows restore it at every sign-in.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • policy_action — Action (type=radio, default=status).
      • Options: apply — Enable / repair the protection; remove — Turn the protection off; status — Check - show what opens what; snapshot — Save a snapshot of the current state; export — Make the current state the reference; import — Take the reference from a file; open_profiles — Open the reference folder; open_policy — Open the active policy folder; open_backups — Open the backup folder; cleanup — Prune old backups
    • profile_xml — Reference file (type=file, default=profiles\default_apps\AppAssociations.xml).
    • import_backup_xml — Saved snapshot (type=select, default=``).
    • import_profile_xml — File from another machine (type=file, default=``).
    • strip_suggested — Enforce hard (type=checkbox, default=true).
    • backup_label — Backup label (type=text, default=``).
    • check_identifiers — Tracked file types (type=checkboxes, default=[http, https, .htm, .html, .pdf, .txt, .md, .rtf, .doc, .docx, .xls, .xlsx, .ppt, .pptx, .zip, .7z, .rar, .tar, .gz, .jpg, .jpeg, .png, .webp, .gif, .bmp, .tif, .tiff, .svg, .avif, .heic, .psd, .mp4, .mkv, .webm, .avi, .mov, .mxf, .mp3, .flac, .wav, .m4a, .aac, .ogg, .opus, .alac, .m3u, .m3u8, .pls]).
      • Options: http — http; https — https; .htm — .htm; .html — .html; .pdf — .pdf; .txt — .txt; .md — .md; .rtf — .rtf; .doc — .doc; .docx — .docx; .xls — .xls; .xlsx — .xlsx; .ppt — .ppt; .pptx — .pptx; .zip — .zip; .7z — .7z; .rar — .rar; .tar — .tar; .gz — .gz; .jpg — .jpg; .jpeg — .jpeg; .png — .png; .webp — .webp; .gif — .gif; .bmp — .bmp; .tif — .tif; .tiff — .tiff; .svg — .svg; .avif — .avif; .heic — .heic; .psd — .psd; .mp4 — .mp4; .mkv — .mkv; .webm — .webm; .avi — .avi; .mov — .mov; .mxf — .mxf; .mp3 — .mp3; .flac — .flac; .wav — .wav; .m4a — .m4a; .aac — .aac; .ogg — .ogg; .opus — .opus; .alac — .alac; .m3u — .m3u; .m3u8 — .m3u8; .pls — .pls
    • extra_identifiers — Extra file types (type=text, default=``).
    • include_dism_inventory — Full Windows list (type=checkbox, default=false).
    • remove_policy_xml — Also delete the active file (type=checkbox, default=false).
    • allow_unsupported_policy_edition — Allow unsupported edition (type=checkbox, default=false).
    • program_data_dir — Policy folder (type=folder, default=%ProgramData%\Audion\DefaultApps).
    • backup_dir — Backup folder (type=folder, default=backup\default_apps).
    • backup_retention_days — Keep backups, days (type=number, default=30).
    • cleanup_dry_run — Cleanup dry run (type=checkbox, default=true).

Default apps and Microsoft apps > Microsoft

  • Operation id: default_apps_microsoft
  • Description: Remove or bring back the built-in Microsoft apps, and keep the decision valid after Windows updates.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • apps_action — Action (type=radio, default=status).
      • Options: remove — Remove selected apps; keep_removed — Remove and keep them removed; rearm_check — Run the re-apply check now; restore — Bring the apps back; provision — Repair for new profiles only; allow_back — Stop holding them removed; status — Check - what is installed; open_logs — Open the guard folder
    • apps — Applications (type=checkboxes, default=[Photos, ZuneMusic, ZuneVideo, MediaPlayerLegacy, Paint, ScreenSketch]).
      • Options: Photos — Photos - opens pictures and videos; ZuneMusic — Media Player - opens music and videos; ZuneVideo — Films & TV - opens videos; MediaPlayerLegacy — Windows Media Player Legacy - the old player; Paint — Paint - takes pictures; the editor goes too; ScreenSketch — Snipping Tool - takes pictures; Win+Shift+S goes too; OutlookForWindows — Outlook for Windows - mail, mailto, calendar; Teams — Microsoft Teams - calls: tel, sip; YourPhone — Phone Link - calls and SMS; Camera — Camera - .jpg; scanners and QR need it; Clipchamp — Clipchamp - video editor; OneNote — OneNote for Windows - its notes; SoundRecorder — Sound Recorder; GamingApp — Xbox; XboxGamingOverlay — Xbox Game Bar; XboxSpeechToTextOverlay — Xbox speech overlay; XboxIdentityProvider — Xbox Identity Provider (games sign-in); SolitaireCollection — Solitaire Collection; People — People; BingNews — News; BingWeather — Weather; Getstarted — Tips; FeedbackHub — Feedback Hub; WindowsMaps — Maps; Copilot — Copilot; StickyNotes — Sticky Notes; Todos — To Do; Whiteboard — Whiteboard; PowerAutomateDesktop — Power Automate; QuickAssist — Quick Assist (remote help); DevHome — Dev Home; Family — Microsoft Family
    • dry_run — Dry run (type=checkbox, default=true).

Default apps and Microsoft apps > Edge

  • Operation id: default_apps_edge
  • Description: Keep Edge, but stop it from claiming links and file types that belong to another browser.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • edge_owned_now — Что сейчас закреплено за Edge (type=info_badges).
    • edge_action — Action (type=radio, default=status).
      • Options: apply — Stop Edge from claiming associations; revert — Give Edge its freedom back; webview2 — Repair WebView2 Runtime; status — Check - what Edge is allowed to do
    • edge_level — How far to go (type=radio, default=calm).
      • Options: calm — Calm - stop the nagging and the background; quiet — Quiet - also turn off side panels and extras
    • dry_run — Dry run (type=checkbox, default=true).

Default apps and Microsoft apps > Tracking

  • Operation id: default_apps_watch
  • Description: Track association changes and manage the Audion Defender exclusions.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • guard_action — Action (type=radio, default=status).
      • Options: enable — Turn on; disable — Turn off; status — Check; run_check — Check the defaults right now
    • guard_targets — Targets (type=checkboxes, default=[Drift]).
      • Options: Drift — Association change tracking; Defender — Defender exclusions for Audion folders

Default apps and Microsoft apps > Snapshot

  • Operation id: default_apps_snapshot
  • Description: Save and compare the association map of the current user.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • snapshot_action — Action (type=radio, default=status).
      • Options: status — Compare the snapshot with what you have now; capture — Save the current associations; open_snapshots — Open the snapshot folder
    • snapshot_name — Snapshot name (type=text, default=Microsoft Snapshot).
    • snapshot_machine — Machine tag (type=text, default=``).
    • dry_run — Dry run (type=checkbox, default=true).

Default apps and Microsoft apps > Groups

  • Operation id: default_apps_groups
  • Description: Capture associations group by group while the right apps are installed.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • group_action — Action (type=radio, default=status).
      • Options: status — Check the groups; commit — Save the selected group; compose — Build one snapshot from the groups
    • group_name — Group (type=radio, default=photo).
      • Options: photo — Photo; audio — Audio; video — Video; pdf — PDF and books; documents — Documents; archives — Archives; browser — Browser; custom — Custom
    • group_custom_name — Custom group name (type=text, default=``).
    • group_ext — Custom extensions (type=text, default=``).
    • snapshot_name — Snapshot name (type=text, default=Microsoft Snapshot).
    • snapshot_machine — Machine tag (type=text, default=``).
    • dry_run — Dry run (type=checkbox, default=true).

Default apps and Microsoft apps > Full report

  • Operation id: default_apps_overview
  • Description: Run every read-only check in this section at once.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Driver/Firmware Audit

  • Operation id: driver_firmware_audit
  • Description: Read-only Windows diagnostic report for problem devices, BIOS/EC, firmware resources and key signed drivers.
  • Risk: kind=safe, risk_level=project_write
  • Parameters:
    • output_dir — Output folder (type=folder, default=logs).
    • json — Write JSON (type=checkbox, default=true).
    • csv — Write key-driver CSV (type=checkbox, default=true).
    • open_report — Open report in Notepad (type=checkbox, default=false).

Hardware > Driver/Firmware Audit materials > Open addon folder

  • Operation id: driver_firmware_audit_open_folder
  • Description: Open tools/driver_firmware_audit.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Driver/Firmware Audit materials > Open README

  • Operation id: driver_firmware_audit_open_readme
  • Description: Open the addon README from the project-local copy.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Driver Update Blocker > Windows Update driver policy > Check driver protection

  • Operation id: driver_update_status
  • Description: Read-only status: Windows Update driver policy, driver-search settings, device metadata policy, DeviceInstall restrictions, and present NVIDIA PCI devices.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Driver Update Blocker > Windows Update driver policy > Block Windows Update drivers

  • Operation id: driver_update_block_all
  • Description: Backs up current policy keys, sets ExcludeWUDriversInQualityUpdate=1, disables driver-wizard WU search and device metadata downloads, then runs gpupdate. Reboot is recommended.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Hardware > Driver Update Blocker > Windows Update driver policy > Unblock Windows Update drivers

  • Operation id: driver_update_unblock_all
  • Description: Backs up current policy keys, removes the Windows Update driver block values, restores normal driver-search behavior, then runs gpupdate. Reboot is recommended.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Hardware > Driver Update Blocker > Windows Update driver policy > Open policy backups

  • Operation id: driver_update_open_policy_backups
  • Description: Open registry-policy backup files created before block/unblock operations.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Driver Update Blocker > Device driver HWID guard > Check current lock

  • Operation id: hwid_driver_status
  • Description: Read-only check: shows whether this HWID is locked and which driver is currently best-ranked/installed.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • hwid_builtin_cache_pins — Preset (type=profile_buttons).
    • hwid_guard_identity_badges — Driver identity (type=info_badges).
    • target_hardware_ids — HWID to protect (type=textarea, default=PCI\VEN_8086&DEV_46A8&SUBSYS_22E717AA ).
    • target_device_instance_id — Device Instance ID (type=text).
    • hwid_retroactive — Retroactive block (type=checkbox, default=false).
    • hwid_keep_global_wu_block — Keep global WU driver block (type=checkbox, default=false).

Hardware > Driver Update Blocker > Device driver HWID guard > 1. Unblock before driver update

  • Operation id: hwid_driver_unblock
  • Description: Use before installing the wanted manual/generic driver. Removes matching HWID locks while preserving unrelated policy entries.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • hwid_builtin_cache_pins — Preset (type=profile_buttons).
    • hwid_guard_identity_badges — Driver identity (type=info_badges).
    • target_hardware_ids — HWID to protect (type=textarea, default=PCI\VEN_8086&DEV_46A8&SUBSYS_22E717AA ).
    • target_device_instance_id — Device Instance ID (type=text).
    • hwid_retroactive — Retroactive block (type=checkbox, default=false).
    • hwid_keep_global_wu_block — Keep global WU driver block (type=checkbox, default=false).

Hardware > Driver Update Blocker > Device driver HWID guard > 2. Block after driver install

  • Operation id: hwid_driver_block
  • Description: Use after the wanted driver is installed and active. Adds this HWID to DenyDeviceIDs so Windows Driver Store/WU cannot replace it silently.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • hwid_builtin_cache_pins — Preset (type=profile_buttons).
    • hwid_guard_identity_badges — Driver identity (type=info_badges).
    • target_hardware_ids — HWID to protect (type=textarea, default=PCI\VEN_8086&DEV_46A8&SUBSYS_22E717AA ).
    • target_device_instance_id — Device Instance ID (type=text).
    • hwid_retroactive — Retroactive block (type=checkbox, default=false).
    • hwid_keep_global_wu_block — Keep global WU driver block (type=checkbox, default=false).

Hardware > Driver Update Blocker > Emergency rank repair by HWID > Check rank target

  • Operation id: hwid_driver_rank_status
  • Description: Read-only target check: resolves the device by HWID, shows current signed driver data and pnputil driver/rank report.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • hwid_builtin_cache_pins — Preset (type=profile_buttons).
    • hwid_repair_identity_badges — Repair markers (type=info_badges).
    • target_hardware_ids — HWID to repair (type=textarea, default=PCI\VEN_8086&DEV_46A8&SUBSYS_22E717AA ).
    • target_device_instance_id — Device Instance ID (type=text).
    • bad_driver_version — Bad driver version (type=text, default=32.0.101.7026).
    • target_driver_version — Target driver version (type=text, default=32.0.101.7085).
    • target_inf_name_pattern — Target INF pattern (type=text, default=*.inf).
    • target_inf_path — Target INF path (type=text).
    • driver_rank_class — Driver class (type=text, default=Display).
    • skip_current_version_check — Skip current version check (type=checkbox, default=false).
    • allow_version_only_target_inf_fallback — Allow version-only INF fallback (type=checkbox, default=false).
    • no_policy_block_after_repair — Do not block HWID after repair (type=checkbox, default=false).
    • hwid_keep_global_wu_block — Keep global WU driver block (type=checkbox, default=false).

Hardware > Driver Update Blocker > Emergency rank repair by HWID > Repair driver rank by HWID

  • Operation id: hwid_driver_rank_repair
  • Description: Creates a REG/JSON preflight backup, exports the old package, removes the bad current INF package, installs the target INF, rescans/restarts the device, then applies the targeted HWID block. Use only after checking the target.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • hwid_builtin_cache_pins — Preset (type=profile_buttons).
    • hwid_repair_identity_badges — Repair markers (type=info_badges).
    • target_hardware_ids — HWID to repair (type=textarea, default=PCI\VEN_8086&DEV_46A8&SUBSYS_22E717AA ).
    • target_device_instance_id — Device Instance ID (type=text).
    • bad_driver_version — Bad driver version (type=text, default=32.0.101.7026).
    • target_driver_version — Target driver version (type=text, default=32.0.101.7085).
    • target_inf_name_pattern — Target INF pattern (type=text, default=*.inf).
    • target_inf_path — Target INF path (type=text).
    • driver_rank_class — Driver class (type=text, default=Display).
    • skip_current_version_check — Skip current version check (type=checkbox, default=false).
    • allow_version_only_target_inf_fallback — Allow version-only INF fallback (type=checkbox, default=false).
    • no_policy_block_after_repair — Do not block HWID after repair (type=checkbox, default=false).
    • hwid_keep_global_wu_block — Keep global WU driver block (type=checkbox, default=false).

Hardware > Driver Update Blocker > NVIDIA driver install restrictions > Block NVIDIA driver installs

  • Operation id: nvidia_driver_block
  • Description: Detects present NVIDIA PCI devices, writes their Hardware IDs into Device Installation Restrictions and runs gpupdate. Use before trusting a known-good manual/NVCleanstall driver.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • include_compatible_ids — Include compatible IDs (type=checkbox, default=false).
    • nvidia_retroactive — Retroactive block (type=checkbox, default=false).

Hardware > Driver Update Blocker > NVIDIA driver install restrictions > Unblock NVIDIA driver installs

  • Operation id: nvidia_driver_unblock
  • Description: Removes NVIDIA PCI IDs from Device Installation Restrictions while preserving non-NVIDIA entries in the same policy lists.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • include_compatible_ids — Include compatible IDs (type=checkbox, default=false).
    • nvidia_retroactive — Retroactive block (type=checkbox, default=false).

Hardware > Driver Update Blocker > Driver Store backups > Save Driver Store manifest

  • Operation id: driver_store_manifest
  • Description: Saves pnputil, systeminfo and Get-WindowsDriver reports without exporting driver packages.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • driver_backup_select — Driver backup (type=select).
    • driver_backup_path — Manual backup folder (type=folder).

Hardware > Driver Update Blocker > Driver Store backups > Export installed drivers

  • Operation id: driver_store_export
  • Description: Exports currently staged third-party drivers from Driver Store into a timestamped backup folder using Export-WindowsDriver or DISM fallback.
  • Risk: kind=safe, risk_level=project_write
  • Parameters:
    • driver_backup_select — Driver backup (type=select).
    • driver_backup_path — Manual backup folder (type=folder).

Hardware > Driver Update Blocker > Driver Store backups > Restore exported drivers

  • Operation id: driver_store_restore
  • Description: Runs pnputil /add-driver on the selected backup without interactive prompts. Use backups from the same machine or a very similar hardware profile.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • driver_backup_select — Driver backup (type=select).
    • driver_backup_path — Manual backup folder (type=folder).

Hardware > Driver Update Blocker > Driver Store backups > Open driver backups

  • Operation id: driver_store_open_backups
  • Description: Open the exported driver backup folder.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • driver_backup_select — Driver backup (type=select).
    • driver_backup_path — Manual backup folder (type=folder).

Hardware > Driver Update Blocker > Open Driver Update Blocker folder

  • Operation id: driver_update_open_tool
  • Description: Open the project-local PowerShell module folder used by the GUI and project launchers.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > NVIDIA audio status

  • Operation id: nvidia_audio_status
  • Description: Read-only status: matching NVIDIA HDMI/DP audio devices, selected HDAUDIO Hardware IDs and current DeviceInstall policy entries.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Export NVIDIA audio IDs

  • Operation id: nvidia_audio_export_ids
  • Description: Writes device details and policy-block candidate IDs to the original tool output folder.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Disable NVIDIA HDMI/DP audio

  • Operation id: nvidia_audio_disable
  • Description: Disables currently installed matching NVIDIA HDMI/DP audio devices through Disable-PnpDevice. It does not remove normal audio interfaces.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Enable NVIDIA HDMI/DP audio

  • Operation id: nvidia_audio_enable
  • Description: Enables matching NVIDIA HDMI/DP audio devices again. If policy block remains active, unblock policy first.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Block NVIDIA HDMI/DP audio policy

  • Operation id: nvidia_audio_block_policy
  • Description: Backs up DeviceInstall policy, adds only NVIDIA HDAUDIO codec IDs to DenyDeviceIDs, disables matching devices and rescans PnP.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Unblock NVIDIA HDMI/DP audio policy

  • Operation id: nvidia_audio_unblock_policy
  • Description: Removes known NVIDIA HDAUDIO IDs from DeviceInstall policy, rescans PnP and tries to enable matching devices.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Open NVIDIA audio output

  • Operation id: nvidia_audio_open_output
  • Description: Open the output folder with exported NVIDIA HDMI/DP audio device IDs.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Open NVIDIA audio backup

  • Operation id: nvidia_audio_open_backup
  • Description: Open DeviceInstall policy backups created before NVIDIA audio policy changes.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > NVIDIA HDMI/DP Audio > Open NVIDIA audio tool folder

  • Operation id: nvidia_audio_open_tool
  • Description: Open the project-local NVIDIA HDMI/DP Audio module folder used by the GUI and project launchers.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Storage / Disk procedures > Disk and volume inventory

  • Operation id: storage_inventory
  • Description: Read-only Get-Disk/Get-Volume summary: disk numbers, sizes, volume letters, filesystem and health.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Storage / Disk procedures > Selected disk details

  • Operation id: storage_disk_details
  • Description: Read-only disk and partition layout for the selected disk number before manual storage work.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • disk_number — Disk (type=select).

Hardware > Storage / Disk procedures > Launch SSD/NVMe wizard

  • Operation id: storage_ssd_reset_wizard
  • Description: Open the original wizard in an external console; destructive actions still require its own typed confirmations.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.

Hardware > Storage / Disk procedures > Open SSD/NVMe folder

  • Operation id: storage_ssd_open_folder
  • Description: Open the SSD/NVMe wizard folder with README, logs and original scripts; no disk changes.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Removable drives > Wipe removable and lay one partition

  • Operation id: storage_removable_prepare
  • Description: Open the removable-drive tool in an external console: it lists disks, asks for the number and that disk's size as confirmation, then wipes and formats.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.

Hardware > Removable drives > Open removable-drive folder

  • Operation id: storage_removable_open_folder
  • Description: Open the disk-removable folder with README and scripts; no disk changes.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Network > Wi-Fi status / connect > Wi-Fi sharing

  • Operation id: network_wifi_hotspot
  • Description: Show, start or stop Wi-Fi sharing - the same switch as in Windows settings. The network name and password stay in Windows' own settings; this only brings the sharing up. It cannot be started at boot: the tethering interface needs a logged-in user.
  • Risk: kind=dangerous, risk_level=modifies
  • Parameters:
    • hotspot_action — What to do (type=select, default=status). Options: status — Show state; on — Start sharing; off — Stop sharing

Hardware > Autostart > What starts by itself

  • Operation id: startup_kit_open
  • Description: Open the startup tool in an external console: scheduled tasks with logon/boot triggers, both Startup folders, Run and RunOnce - in one list, with delays. It adds entries, finds what already launches the same program, and removes overlaps.
  • Risk: kind=dangerous, risk_level=modifies
  • Parameters: none.

Hardware > Autostart > Open autostart folder

  • Operation id: startup_kit_open_folder
  • Description: Open the startup_kit folder with README and scripts; changes nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Storage / Disk procedures > WinRE layout status

  • Operation id: storage_winre_status
  • Description: Read-only reagentc and OS disk layout check: shows active WinRE location and adjacent partitions.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Hardware > Storage / Disk procedures > Run WinRE extend wizard

  • Operation id: storage_winre_wizard
  • Description: Disable WinRE, delete the recovery partition to the right of C:, and extend C: after project confirmation.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters:
    • winre_typed_confirm — Typed confirmation (type=text).

OpenSSH KeyKit > Check access links

  • Operation id: ssh_keykit_check_links
  • Description: Read ssh and rclone configuration and report every key, known_hosts and proxy path that no longer exists.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • ssh_root — Keys folder (type=folder, default=``).
    • profile_name — Machine/profile name (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • ssh_config_path — ssh config to check (type=file, default=``).
    • rclone_config_path — rclone config to check (type=file, default=``).
    • links_report_path — Save report to CSV (type=text, default=``).
    • fail_on_broken — Fail when a path is missing (type=checkbox, default=true).
    • snapshot — Snapshot for import (type=text, default=``).

OpenSSH KeyKit > Export client SSH keys

  • Operation id: ssh_keykit_export_client
  • Description: Export current user's .ssh keys/config/known_hosts/authorized_keys into output\ssh_keykit.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • ssh_root — Keys folder (type=folder, default=``).
    • profile_name — Machine/profile name (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • ssh_config_path — ssh config to check (type=file, default=``).
    • rclone_config_path — rclone config to check (type=file, default=``).
    • links_report_path — Save report to CSV (type=text, default=``).
    • fail_on_broken — Fail when a path is missing (type=checkbox, default=true).
    • snapshot — Snapshot for import (type=text, default=``).

OpenSSH KeyKit > Export client + server SSH keys

  • Operation id: ssh_keykit_export_all
  • Description: Export current user's .ssh plus ProgramData\ssh host keys and sshd_config when elevated.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • ssh_root — Keys folder (type=folder, default=``).
    • profile_name — Machine/profile name (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • ssh_config_path — ssh config to check (type=file, default=``).
    • rclone_config_path — rclone config to check (type=file, default=``).
    • links_report_path — Save report to CSV (type=text, default=``).
    • fail_on_broken — Fail when a path is missing (type=checkbox, default=true).
    • snapshot — Snapshot for import (type=text, default=``).

OpenSSH KeyKit > Import client SSH keys

  • Operation id: ssh_keykit_import_client
  • Description: Copy current .ssh aside as .ssh.bak.timestamp, import the newest/selected client snapshot from input and fix private-key ACLs.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • ssh_root — Keys folder (type=folder, default=``).
    • profile_name — Machine/profile name (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • ssh_config_path — ssh config to check (type=file, default=``).
    • rclone_config_path — rclone config to check (type=file, default=``).
    • links_report_path — Save report to CSV (type=text, default=``).
    • fail_on_broken — Fail when a path is missing (type=checkbox, default=true).
    • snapshot — Snapshot for import (type=text, default=``).

OpenSSH KeyKit > Import client + server SSH keys

  • Operation id: ssh_keykit_import_all
  • Description: Import client keys plus server host keys from input, fix ACLs, restart sshd and set it Automatic when elevated.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • ssh_root — Keys folder (type=folder, default=``).
    • profile_name — Machine/profile name (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • ssh_config_path — ssh config to check (type=file, default=``).
    • rclone_config_path — rclone config to check (type=file, default=``).
    • links_report_path — Save report to CSV (type=text, default=``).
    • fail_on_broken — Fail when a path is missing (type=checkbox, default=true).
    • snapshot — Snapshot for import (type=text, default=``).

OpenSSH KeyKit > Open KeyKit scripts folder

  • Operation id: ssh_keykit_open_folder
  • Description: Open tools\ssh_keykit with export/import scripts and wrapper commands; no key changes.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • ssh_root — Keys folder (type=folder, default=``).
    • profile_name — Machine/profile name (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • ssh_config_path — ssh config to check (type=file, default=``).
    • rclone_config_path — rclone config to check (type=file, default=``).
    • links_report_path — Save report to CSV (type=text, default=``).
    • fail_on_broken — Fail when a path is missing (type=checkbox, default=true).
    • snapshot — Snapshot for import (type=text, default=``).

AI CLI Backup > Backup (export)

  • Operation id: ai_backup_export
  • Description: Atomically export Claude and Codex into output\ai_backup, then verify its manifest and SHA-256 hashes.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • essentials — Move only the essentials (type=checkbox, default=true).
    • include_auth — Include authentication secrets (type=checkbox, default=false).
    • export_chats — Chats (type=multiselect, default=every Claude app chat).

AI CLI Backup > Restore (import)

  • Operation id: ai_backup_import
  • Description: Verify the backup staged in input, preview changes by default, then overwrite only selected matching files; unrelated local files stay.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • essentials — Restore only the essentials (type=checkbox, default=true).
    • include_auth — Restore authentication secrets (type=checkbox, default=false).
    • dry_run — Dry run (type=checkbox, default=true).
    • import_chats — Chats in the backup (type=multiselect, default=every chat of the backup in input).
    • allow_foreign_paths — Allow saved absolute paths from another PC (type=checkbox, default=false).
    • allow_legacy — Allow legacy bundle without manifest (type=checkbox, default=false).

AI CLI Backup > Merge memory

  • Operation id: ai_backup_merge
  • Description: Verify the staged bundle and merge Claude .md memory, previewing by default. Name clashes are kept unless Overwrite is enabled.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • overwrite — Overwrite name clashes (type=checkbox, default=false).
    • dry_run — Dry run (type=checkbox, default=true).
    • allow_legacy — Allow legacy bundle without manifest (type=checkbox, default=false).

AI CLI Backup > Open tool folder

  • Operation id: ai_backup_open
  • Description: Open tools\ai_backup with the script and wrapper commands.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Certificate KeyKit > Certificate status

  • Operation id: cert_status
  • Description: List the selected store: subject, thumbprint, expiry, private key and exportability (flags TPM/non-exportable keys).
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • cert_store — Certificate store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — My - personal; CurrentUser\Root — Root - trusted roots; CurrentUser\CA — CA - intermediate; LocalMachine\My — My - personal; LocalMachine\Root — Root - trusted roots; LocalMachine\CA — CA - intermediate
    • cert_backup_dir — Certificates folder (type=folder, default=``).
    • pfx_password — PFX password (type=password, default=``).
    • import_file — Import file (.pfx/.cer/.crt/.sst) (type=file, default=``).
    • import_store — Import target store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — CurrentUser\My (personal); LocalMachine\My — LocalMachine\My (personal); CurrentUser\Root — CurrentUser\Root (trusted roots); LocalMachine\Root — LocalMachine\Root (trusted roots); CurrentUser\CA — CurrentUser\CA (intermediate); LocalMachine\CA — LocalMachine\CA (intermediate)

Certificate KeyKit > Export personal keys to PFX

  • Operation id: cert_export_pfx
  • Description: Export exportable private-key certs from the selected store to password-protected .pfx in output\certificates. TPM-bound keys are skipped. Output contains PRIVATE KEYS.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • cert_store — Certificate store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — My - personal; CurrentUser\Root — Root - trusted roots; CurrentUser\CA — CA - intermediate; LocalMachine\My — My - personal; LocalMachine\Root — Root - trusted roots; LocalMachine\CA — CA - intermediate
    • cert_backup_dir — Certificates folder (type=folder, default=``).
    • pfx_password — PFX password (type=password, default=``).
    • import_file — Import file (.pfx/.cer/.crt/.sst) (type=file, default=``).
    • import_store — Import target store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — CurrentUser\My (personal); LocalMachine\My — LocalMachine\My (personal); CurrentUser\Root — CurrentUser\Root (trusted roots); LocalMachine\Root — LocalMachine\Root (trusted roots); CurrentUser\CA — CurrentUser\CA (intermediate); LocalMachine\CA — LocalMachine\CA (intermediate)

Certificate KeyKit > Export store to SST (public)

  • Operation id: cert_export_roots
  • Description: Export the selected store's public certificates (no private keys) to a timestamped .sst bundle in output\certificates.
  • Risk: kind=safe, risk_level=project_write
  • Parameters:
    • cert_store — Certificate store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — My - personal; CurrentUser\Root — Root - trusted roots; CurrentUser\CA — CA - intermediate; LocalMachine\My — My - personal; LocalMachine\Root — Root - trusted roots; LocalMachine\CA — CA - intermediate
    • cert_backup_dir — Certificates folder (type=folder, default=``).
    • pfx_password — PFX password (type=password, default=``).
    • import_file — Import file (.pfx/.cer/.crt/.sst) (type=file, default=``).
    • import_store — Import target store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — CurrentUser\My (personal); LocalMachine\My — LocalMachine\My (personal); CurrentUser\Root — CurrentUser\Root (trusted roots); LocalMachine\Root — LocalMachine\Root (trusted roots); CurrentUser\CA — CurrentUser\CA (intermediate); LocalMachine\CA — LocalMachine\CA (intermediate)

Certificate KeyKit > Import PFX

  • Operation id: cert_import_pfx
  • Description: Import the selected .pfx (with password) into the target store, marking the key exportable. Changes the certificate store; reboot not required. Pick file and password in Advanced.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • cert_store — Certificate store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — My - personal; CurrentUser\Root — Root - trusted roots; CurrentUser\CA — CA - intermediate; LocalMachine\My — My - personal; LocalMachine\Root — Root - trusted roots; LocalMachine\CA — CA - intermediate
    • cert_backup_dir — Certificates folder (type=folder, default=``).
    • pfx_password — PFX password (type=password, default=``).
    • import_file — Import file (.pfx/.cer/.crt/.sst) (type=file, default=``).
    • import_store — Import target store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — CurrentUser\My (personal); LocalMachine\My — LocalMachine\My (personal); CurrentUser\Root — CurrentUser\Root (trusted roots); LocalMachine\Root — LocalMachine\Root (trusted roots); CurrentUser\CA — CurrentUser\CA (intermediate); LocalMachine\CA — LocalMachine\CA (intermediate)

Certificate KeyKit > Import every PFX in the folder

  • Operation id: cert_import_pfx_folder
  • Description: Import every .pfx listed in certificates.json, each into the store it was exported from, using one password. Changes the certificate store.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • cert_store — Certificate store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — My - personal; CurrentUser\Root — Root - trusted roots; CurrentUser\CA — CA - intermediate; LocalMachine\My — My - personal; LocalMachine\Root — Root - trusted roots; LocalMachine\CA — CA - intermediate
    • cert_backup_dir — Certificates folder (type=folder, default=``).
    • pfx_password — PFX password (type=password, default=``).
    • import_file — Import file (.pfx/.cer/.crt/.sst) (type=file, default=``).
    • import_store — Import target store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — CurrentUser\My (personal); LocalMachine\My — LocalMachine\My (personal); CurrentUser\Root — CurrentUser\Root (trusted roots); LocalMachine\Root — LocalMachine\Root (trusted roots); CurrentUser\CA — CurrentUser\CA (intermediate); LocalMachine\CA — LocalMachine\CA (intermediate)

Certificate KeyKit > Import certificate / CA

  • Operation id: cert_import_cert
  • Description: Import a public .cer/.crt/.sst into the target store (e.g. trust a corporate root CA). Changes trust; choose target store carefully. Pick file in Advanced.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • cert_store — Certificate store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — My - personal; CurrentUser\Root — Root - trusted roots; CurrentUser\CA — CA - intermediate; LocalMachine\My — My - personal; LocalMachine\Root — Root - trusted roots; LocalMachine\CA — CA - intermediate
    • cert_backup_dir — Certificates folder (type=folder, default=``).
    • pfx_password — PFX password (type=password, default=``).
    • import_file — Import file (.pfx/.cer/.crt/.sst) (type=file, default=``).
    • import_store — Import target store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — CurrentUser\My (personal); LocalMachine\My — LocalMachine\My (personal); CurrentUser\Root — CurrentUser\Root (trusted roots); LocalMachine\Root — LocalMachine\Root (trusted roots); CurrentUser\CA — CurrentUser\CA (intermediate); LocalMachine\CA — LocalMachine\CA (intermediate)

Certificate KeyKit > Open certificate export folder

  • Operation id: cert_open_folder
  • Description: Open output\certificates; no certificate changes.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • cert_store — Certificate store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — My - personal; CurrentUser\Root — Root - trusted roots; CurrentUser\CA — CA - intermediate; LocalMachine\My — My - personal; LocalMachine\Root — Root - trusted roots; LocalMachine\CA — CA - intermediate
    • cert_backup_dir — Certificates folder (type=folder, default=``).
    • pfx_password — PFX password (type=password, default=``).
    • import_file — Import file (.pfx/.cer/.crt/.sst) (type=file, default=``).
    • import_store — Import target store (type=select, default=CurrentUser\My).
      • Options: CurrentUser\My — CurrentUser\My (personal); LocalMachine\My — LocalMachine\My (personal); CurrentUser\Root — CurrentUser\Root (trusted roots); LocalMachine\Root — LocalMachine\Root (trusted roots); CurrentUser\CA — CurrentUser\CA (intermediate); LocalMachine\CA — LocalMachine\CA (intermediate)

User fonts > Show my fonts

  • Operation id: fonts_status
  • Description: List the fonts installed for this user with [ OK ] or [MISS], and count the system ones. Changes nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • fonts_folder — Fonts folder (type=folder, default=``).
    • include_system — List system fonts too (type=checkbox, default=false).

User fonts > Export my fonts

  • Operation id: fonts_export
  • Description: Copy the user's font files into output\fonts with a map of their registered names. System fonts are not copied.
  • Risk: kind=safe, risk_level=project_write
  • Parameters:
    • fonts_folder — Fonts folder (type=folder, default=``).
    • include_system — List system fonts too (type=checkbox, default=false).

User fonts > Import fonts

  • Operation id: fonts_import
  • Description: Install the collected fonts for this user only: file into the profile, name under HKCU, running programs notified. Needs no administrator and leaves C:\Windows\Fonts alone.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • fonts_folder — Fonts folder (type=folder, default=``).
    • include_system — List system fonts too (type=checkbox, default=false).

User fonts > Open fonts folder

  • Operation id: fonts_open_folder
  • Description: Open output\fonts; collects nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • fonts_folder — Fonts folder (type=folder, default=``).
    • include_system — List system fonts too (type=checkbox, default=false).

Shell environment > Show shell files

  • Operation id: shell_status
  • Description: List the Windows Terminal settings and PowerShell profiles this machine has, with [ OK ] or [ -- ]. Changes nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • shell_folder — Shell folder (type=folder, default=``).

Shell environment > Export shell files

  • Operation id: shell_export
  • Description: Copy the found settings and profiles into output\shell with a map of what each file is.
  • Risk: kind=safe, risk_level=project_write
  • Parameters:
    • shell_folder — Shell folder (type=folder, default=``).

Shell environment > Import shell files

  • Operation id: shell_import
  • Description: Put each collected file where it belongs on this machine, keeping a dated copy of anything replaced. A file identical to the one already there is left alone.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • shell_folder — Shell folder (type=folder, default=``).

Shell environment > Open shell folder

  • Operation id: shell_open_folder
  • Description: Open output\shell; collects nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • shell_folder — Shell folder (type=folder, default=``).

Configured access > Show what configuration names

  • Operation id: access_status
  • Description: List every key, known_hosts, certificate and proxy path named in ssh and rclone configuration, with [ OK ] or [MISS]. Changes nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • access_folder — Access folder (type=folder, default=``).
    • access_key_root — Where keys land here (type=folder, default=``).
    • ssh_config_path — ssh config (type=file, default=``).
    • rclone_config_path — rclone config (type=file, default=``).

Configured access > Export configured access

  • Operation id: access_export
  • Description: Copy ssh config, rclone.conf and every file they name into output\access with a map of where each came from. Contains PRIVATE KEYS.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • access_folder — Access folder (type=folder, default=``).
    • access_key_root — Where keys land here (type=folder, default=``).
    • ssh_config_path — ssh config (type=file, default=``).
    • rclone_config_path — rclone config (type=file, default=``).

Configured access > Import configured access

  • Operation id: access_import
  • Description: Put the carried files under the chosen root, rewrite ssh and rclone configuration to match, restrict key ACLs, then check the links. Replaces both configuration files, keeping a dated copy of each.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters:
    • access_folder — Access folder (type=folder, default=``).
    • access_key_root — Where keys land here (type=folder, default=``).
    • ssh_config_path — ssh config (type=file, default=``).
    • rclone_config_path — rclone config (type=file, default=``).

Machine migration > Show what travels

  • Operation id: migration_plan
  • Description: Read config\migration_plan.yaml and list every item, its pack, its folder and whether it can be imported unattended. Changes nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • migration_folder — Migration folder (type=folder, default=``).
    • profile_name — Machine name for the folder (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • pfx_password — PFX password (type=password, default=``).

Machine migration > Check access after a move

  • Operation id: migration_verify
  • Description: Run the same access-link check the SSH pack runs: every key, known_hosts and proxy path named in ssh and rclone configuration.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • migration_folder — Migration folder (type=folder, default=``).
    • profile_name — Machine name for the folder (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • pfx_password — PFX password (type=password, default=``).

Machine migration > Export the migration

  • Operation id: migration_export
  • Description: Walk the plan, call each pack and collect everything into output\migration<machine>_<time> with an inventory file. Contains PRIVATE KEYS and clear Wi-Fi passwords.
  • Risk: kind=dangerous, risk_level=secret_export
  • Parameters:
    • migration_folder — Migration folder (type=folder, default=``).
    • profile_name — Machine name for the folder (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • pfx_password — PFX password (type=password, default=``).

Machine migration > Import the migration

  • Operation id: migration_import
  • Description: Read the inventory from input, hand every item back to its pack, then check access links. Replaces this user's SSH material and adds Wi-Fi profiles.
  • Risk: kind=dangerous, risk_level=system_change
  • Parameters:
    • migration_folder — Migration folder (type=folder, default=``).
    • profile_name — Machine name for the folder (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • pfx_password — PFX password (type=password, default=``).

Machine migration > Open migration folder

  • Operation id: migration_open_folder
  • Description: Open output\migration; collects nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • migration_folder — Migration folder (type=folder, default=``).
    • profile_name — Machine name for the folder (type=text, default=``).
    • user_name — Windows user (type=text, default=``).
    • pfx_password — PFX password (type=password, default=``).

Utilities > ripgrep version

  • Operation id: ripgrep_status
  • Description: Show project-local ripgrep\rg.exe version.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Utilities > Open tool folder

  • Operation id: open_tool_folder
  • Description: Open a project-local utility folder.
  • Risk: kind=safe, risk_level=readonly
  • Parameters:
    • folder — Folder (type=select).
      • Options: ripgrep — ripgrep; tools/network_cleaner — tools/network_cleaner; WSL — WSL; tools/codex_nuke — tools/codex_nuke; tools/python_nuke — tools/python_nuke; tools/driver_firmware_audit — tools/driver_firmware_audit; tools/ssh_keykit — tools/ssh_keykit; tools/ubuntu_dev_installer — tools/ubuntu_dev_installer; tools/ssd_nvme_reset_wizard — tools/ssd_nvme_reset_wizard; tools/winre_extend — tools/winre_extend; tools/disable_windows_proxy — tools/disable_windows_proxy; tools/wires_wireless — tools/wires_wireless; tools/wsl — tools/wsl; tools/cache_cleaner — tools/cache_cleaner

Maintenance & Cleanup > Codex Nuke > Codex Nuke audit

  • Operation id: codex_nuke_audit
  • Description: Read-only scan of Codex desktop artifacts.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Maintenance & Cleanup > Codex Nuke > Codex Nuke dry run

  • Operation id: codex_nuke_dryrun
  • Description: Simulate Codex Nuke without changing the system.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Maintenance & Cleanup > Codex Nuke > Codex session reset

  • Operation id: codex_nuke_session_reset
  • Description: Soft reset: kill Codex processes and clear sessions/cache while keeping auth, config and install.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Maintenance & Cleanup > Codex Nuke > Codex NUKE, keep CLI state

  • Operation id: codex_nuke_keep_cli_state
  • Description: Remove Codex desktop artifacts while preserving ~/.codex for Codex CLI state.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.

Maintenance & Cleanup > Codex Nuke > Codex NUKE full

  • Operation id: codex_nuke_full
  • Description: Full Codex desktop removal, including shared Codex user state.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.

Maintenance & Cleanup > Cache Cleaner > Measure caches

  • Operation id: cache_cleaner_audit
  • Description: Measure pip, npm, NuGet, Temp of the user and of Windows older than 24 h, Claude Code sessions idle for 24 h and Adobe media cache; change nothing.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Maintenance & Cleanup > Cache Cleaner > Clear caches

  • Operation id: cache_cleaner_clean
  • Description: Clear pip, npm, NuGet http cache, Temp of the user and of Windows older than 24 h (files in use stay; the Windows Temp needs administrator rights), Claude Code sessions idle for 24 h and Adobe media cache (skipped while Adobe video apps run).
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Maintenance & Cleanup > Cache Cleaner > Clear caches and NuGet packages

  • Operation id: cache_cleaner_clean_nuget
  • Description: Same as Clear caches plus ~/.nuget/packages; the next build downloads every package again.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Maintenance & Cleanup > Cache Cleaner > Clear Temp older than 24 h

  • Operation id: cache_cleaner_temp
  • Description: Clear the user Temp and the Windows Temp older than 24 h and the Claude Code sessions idle for 24 h (%TEMP%\claude); a session at work and the files in use stay. The Windows Temp needs administrator rights and is skipped without them.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Maintenance & Cleanup > Cache Cleaner > Clear Premiere cache

  • Operation id: cache_cleaner_adobe
  • Description: Clear the media cache of Premiere Pro and the other Adobe video apps: Media Cache Files, Media Cache, Peak Files - in the usual place and where the preferences of Premiere moved it. Skipped while Premiere Pro, After Effects, Media Encoder or Audition runs.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Maintenance & Cleanup > Cache Cleaner > Remove Chrome AI model

  • Operation id: cache_cleaner_chrome_model
  • Description: Delete Chrome on-device AI model (OptGuideOnDeviceModel) and set the user Chrome policy GenAILocalFoundationalModelSettings = 1 so it does not come back. Close Chrome first.
  • Risk: kind=dangerous, risk_level=user_write
  • Parameters: none.

Maintenance & Cleanup > Cache Cleaner > Allow Chrome AI model again

  • Operation id: cache_cleaner_chrome_undo
  • Description: Remove the Chrome policy set by Remove Chrome AI model; Chrome may download the model again.
  • Risk: kind=safe, risk_level=user_write
  • Parameters: none.

Maintenance & Cleanup > Python Nuke > Python Nuke audit

  • Operation id: python_nuke_audit
  • Description: Read-only scan of Python installs, launchers, caches, env vars and PATH entries.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Maintenance & Cleanup > Python Nuke > Python Nuke dry run

  • Operation id: python_nuke_dryrun
  • Description: Simulate Python Nuke without changing the system.
  • Risk: kind=safe, risk_level=readonly
  • Parameters: none.

Maintenance & Cleanup > Python Nuke > Python NUKE full

  • Operation id: python_nuke_full
  • Description: Remove common Python installs, launchers, pip cache, env vars and PATH entries.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.

Maintenance & Cleanup > Python Nuke > Python NUKE, keep winget

  • Operation id: python_nuke_keep_winget
  • Description: Run Python Nuke but skip the winget uninstall pass.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.

Maintenance & Cleanup > Clear workspace

  • Operation id: cleanup_workspace
  • Description: Delete only files inside the managed workspace folder.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.

Maintenance > Clear I/O

  • Operation id: cleanup_input_output
  • Description: Delete contents of managed input and output folders.
  • Risk: kind=dangerous, risk_level=destructive
  • Parameters: none.