diff --git a/machines/tart-agent-sandbox/configuration.nix b/machines/tart-agent-sandbox/configuration.nix
index 04ab5dd..73ea62a 100644
--- a/machines/tart-agent-sandbox/configuration.nix
+++ b/machines/tart-agent-sandbox/configuration.nix
@@ -13,6 +13,23 @@
 
   networking.hostName = "tart-agent-sandbox";
 
+  # Enable sway desktop
+  roles.desktop = {
+    enable = true;
+    wayland = true;
+  };
+
+  # Auto-login to sway (no display manager)
+  services.greetd = {
+    enable = true;
+    settings = {
+      default_session = {
+        command = "${pkgs.sway}/bin/sway";
+        user = "agent";
+      };
+    };
+  };
+
   # SSH access from host
   services.openssh = {
     enable = true;
@@ -26,7 +43,7 @@
   users.users.agent = {
     isNormalUser = true;
     description = "Agent sandbox user";
-    extraGroups = [ "wheel" "docker" ];
+    extraGroups = [ "wheel" "docker" "video" "input" ];
     initialPassword = "agent";
     openssh.authorizedKeys.keys = [
       # Add your SSH public key here for passwordless access