開放式代理執行環境(使用 TypeScript)——在背景執行任何程式碼代理,於其完成前檢查其工作,並將工具/技能/代理/工作流程投射至 CLI、HTTP、MCP、SDK、Mastra 以及 AI SDK。
AI 翻譯
Open agentic runtime in TypeScript — run any coding agent in the background, check its work before it lands, and project tools/skills/agents/workflows into CLI, HTTP, MCP, SDK, Mastra & the AI SDK.
取自儲存庫 README
正在載入完整 README。 以下為已儲存的摘錄。
Let your coding agents work without you watching.
agentproto runs Claude Code, Codex, Hermes, opencode, Mastra, and any other
coding agent in the background, shows them all in one place, and checks each
one's work — with your tests or a reviewer model — before anything is
committed. No more babysitting terminal windows.檢視完整 README ↗Let your coding agents work without you watching.
agentproto runs Claude Code, Codex, Hermes, opencode, Mastra, and any other coding agent in the background, shows them all in one place, and checks each one's work — with your tests or a reviewer model — before anything is committed. No more babysitting terminal windows.
The daemon is the flagship surface of something bigger: agentproto is an open agentic framework — the AIP specs define every agent component (tools, skills, agents, knowledge, workflows, policies) as a plain file with a declared contract, and this repo is the TypeScript runtime that loads, runs, and projects them into any host (CLI, HTTP, MCP, Mastra, Vercel AI SDK). Files with contracts is what lets any runtime load them — and lets agents read, write, and improve their own components.
Status: 1.32.0. APIs are stabilising; expect minor breaking changes between releases.
Or bootstrap from zero in one line:
# macOS / linux
curl -fsSL https://raw.githubusercontent.com/agentproto/ts/main/scripts/bootstrap/install.sh | bash
# Windows 10/11 (PowerShell 5.1+)
irm https://raw.githubusercontent.com/agentproto/ts/main/scripts/bootstrap/install.ps1 | iex
Manual path:
npm i -g @agentproto/cli
agentproto install claude-code # auto-installs the adapter package too
agentproto serve # start the daemon (foreground)
agentproto sessions start claude-code --cwd . --prompt "refactor the payments module"
agentproto sessions --watch
Then gate it: attach a policy to any session's turn-end and stage the commit behind a human ack. See agentproto.sh for the full pitch, or jump straight to agentproto.sh/features for the honest split below.
This repo ships two very different things under one name:
0.1.0-alpha
scaffolding — real schemas, real intent, not yet operational software.Full breakdown: https://agentproto.sh/features. If you find a Tier 2 claim anywhere that reads as shipped, please file an issue — that split is the contract.
The adapter contract is small: declare models[] and modes[] via an
AIP-45 manifest, implement the lifecycle verbs, and reuse the shared
provider-kit primitives (creds, catalog entry, setup/status tools). Obvious
gaps: Cursor (agent CLI, ACP-capable — not verified end to end), aider,
goose, cline, Continue. See adapters/claude-code
for a complete reference implementation, and look for good first issue
labels in the tracker.
packages/vscode contains the private agentproto-vscode extension: local
operational views for daemon sessions and permissions, plus commands to manage
agents from the editor. Every Releases
asset is built in CI, never committed to the repo:
main touching packages/vscode publishes
a prerelease VSIX tagged vscode-dev-<sha>, for grabbing the bleeding
edge.vscode-v<version>,
same cadence as every other package's release.Install either through VS Code's Extensions: Install from VSIX... command.
To build one yourself instead:
cd packages/vscode
pnpm package
unzip -t agentproto-vscode-*.vsix
See packages/vscode/README.md for
development and verification commands.
The repo is organised into five layers, each a sibling subtree under
packages/ or adapters/.
@agentproto/runtime is the long-running gateway that turns a workspace into
a live AIP runtime: session management, an MCP server, an HTTP transport, the
HEARTBEAT autonomy loop, and append-only conversation persistence.
packages/runtime/ @agentproto/runtime Session lifecycle, MCP tools, HTTP API, supervisor / orchestrator
packages/cli/ @agentproto/cli `agentproto` binary — install adapters, run/serve sessions, daemon
packages/mcp-server/ @agentproto/mcp-server Per-doctype CRUD MCP tools (create/load/list/update/resolve/delete)
Key MCP tools exposed by the runtime:
| Tool | Purpose |
|---|---|
agent_start / agent_prompt / agent_output / agent_kill / agent_interrupt | Spawn, drive, interrupt, and stop long-lived agent-CLI sessions |
message_parent | Child session reports a result, progress update, or blocker up to its parent supervisor (resolved from the child's recorded parentSessionId; no session id argument) |
agent_set_model / agent_set_effort / agent_set_posture | Best-effort live switches for a session's config axes (return {applied:false, reason} when the running adapter can't apply them live) |
agent_sessions_list / agent_export | List agent sessions; export a clean transcript |
conversation_read | Read the provider-native conversation behind any session (agent-cli or PTY) |
session_list / session_tree / session_usage / session_restart | Canonical session list, hierarchy, usage, and resume |
session_archive / session_unarchive | Hide / restore sessions from the canonical list (VS Code "show archived" toggle) |
session_rename / session_set_pinned | Set or clear a session's user-facing title / label, or toggle its pinned sort flag |
session_flag_status | Manually correct a session's awaitingInput / awaitingQuestion classification |
worktree_gc | Plan/apply garbage collection of linked git worktrees |
terminal_start / terminal_input / terminal_output / terminal_kill | Drive raw PTY sessions |
command_log_tail | Read the JSONL audit log for command_execute |
policy_attach / policy_cancel / policy_status | Supervisor completion-policy lifecycle |
| / / / |
packages/provider-kit/ @agentproto/provider-kit Shared catalog, creds, setup-ledger, MCP tool primitives
packages/provider-presets/ @agentproto/provider-presets Shared gateway preset registry (Anthropic, Moonshot, OpenRouter, Requesty, DeepSeek, xAI, xAI-Anthropic, LLM Endpoint)
adapters/claude-code/ @agentproto/adapter-claude-code AIP-45 adapter for Claude Code
adapters/claude-sdk/ @agentproto/adapter-claude-sdk AIP-45 adapter for Claude SDK (Anthropic/Moonshot/OpenRouter gateway modes)
adapters/codex/ @agentproto/adapter-codex AIP-45 adapter for Codex
adapters/gemini/ @agentproto/adapter-gemini AIP-45 adapter for Gemini
adapters/hermes/ @agentproto/adapter-hermes AIP-45 adapter for Hermes
adapters/opencode/ @agentproto/adapter-opencode AIP-45 adapter for OpenCode
adapters/openclaw/ @agentproto/adapter-openclaw AIP-45 adapter for Openclaw
adapters/antigravity/ @agentproto/adapter-antigravity AIP-45 adapter for Google Antigravity
adapters/mastra-agent/ @agentproto/adapter-mastra-agent First-party agent — AIP-42 AGENT.md run as a live Mastra agent behind ACP
adapters/browser/ @agentproto/adapter-browser Browser / CDP session adapter
All agent-CLI adapters share the provider-kit primitives: makeSetupTool
(single-field or multi-field creds), computeStatus, AdapterCatalogEntry, and
makeCredsStore. mastra-agent is the odd one out: every other adapter wraps
an external agent CLI, whereas mastra-agent is ours end to end — an
AGENT.md run as a live Mastra agent (our loop, our models), spawned by the
daemon like any arm or standalone via agentproto-mastra acp.
The original three-layer model for tools consumed inside the runtime or projected into a host framework: contract → implementation → bundle.
packages/tool/ @agentproto/tool AIP-14 defineTool, ToolHandle, validators
packages/driver/ @agentproto/driver AIP-30 implementTool, defineDriver, runTool, resolver
packages/driver/cli/ @agentproto/driver-cli AIP-29 CLI/subprocess transport
packages/driver/http/ @agentproto/driver-http HTTP transport
packages/driver/mcp/ @agentproto/driver-mcp MCP server transport
packages/driver/sdk/ @agentproto/driver-sdk SDK / dynamic-import transport
import { defineTool } from "@agentproto/tool"
import { implementTool, defineDriver } from "@agentproto/driver"
import { z } from "zod"
const greetTool = defineTool({
id: "greet",
description: "Greets a name in the bound locale.",
inputSchema: z.object({ name: z.string() }),
outputSchema: z.object({ greeting: z.string() }),
contextSchema: z.object({ locale: z.enum(["en", "fr"]) }),
})
const greetBuiltin = implementTool(greetTool, async ({ input, context }) => ({
greeting: context.locale === "fr" ? `Bonjour ${input.name}` : `Hello ${input.name}`,
}))
const greetDriver = defineDriver({
id: "greet-builtin",
name: "Greet (builtin)",
description: "In-process greeter.",
kind: "builtin",
implements: [{ tool: "greet", version: "0.1.0" }],
implementations: [greetBuiltin],
})
Re-express any ToolImplementation in a host framework's tool shape:
adapters/ai-sdk/ @agentproto/adapter-ai-sdk Vercel AI SDK Tool projection
adapters/mastra/ @agentproto/adapter-mastra Mastra createTool projection
packages/bridge/ @agentproto/bridge AIP-42 AGENT.md → Mastra Agent
import { toAiSdkTool } from "@agentproto/adapter-ai-sdk"
import { toMastraTool } from "@agentproto/adapter-mastra"
const aiSdkTool = toAiSdkTool(greetBuiltin, { context: { locale: "en" } })
const mastraTool = toMastraTool(greetBuiltin, { source: { context: { locale: "en" } } })
packages/corpus/ @agentproto/corpus AIP-10/12/18 knowledge composition (pure, no I/O)
packages/corpus-cli/ @agentproto/corpus-cli `corpus` binary — validate, lint, operate a corpus workspace
packages/workflow-runtime/ @agentproto/workflow-runtime AIP-15 typed step-walker (tool/map/branch/loop/transform)
packages/agent-runtime/ @agentproto/agent-runtime MultiAgentRuntime kernel with swappable ports
@agentproto/corpus composes AIP-10 KNOWLEDGE, AIP-12 PLAYBOOK, AIP-18
COLLECTION, AIP-9 OPERATOR, AIP-15 WORKFLOW, and AIP-41 ROUTINE into an
autonomous knowledge-improvement system. Pure: zero runtime, zero filesystem,
zero HTTP — all I/O via injected ports.
packages/auth/ @agentproto/auth Pluggable CredentialStore + device-code (RFC 8628) auth flow
packages/sandbox/ @agentproto/sandbox agent_start.sandbox: boot/reconnect/pause an isolated box
packages/secrets/ @agentproto/secrets Broker-resolved provision auth headers, mcp-header exposure
packages/processor/ @agentproto/processor Dependency-free Redactor port for transcript/log scrubbing
packages/telemetry/ @agentproto/telemetry Telemetry port + OTel adapter
packages/eval/ @agentproto/eval Scorers + runEval, including an LLM-judge scorer
The AIP markdown specs live in agentproto/agentproto. Browse rendered versions at https://agentproto.sh/docs.
Key specs implemented here:
| AIP | Spec | Package |
|---|---|---|
| AIP-9 | OPERATOR.md | @agentproto/operator |
| AIP-10 | KNOWLEDGE.md | @agentproto/corpus |
| AIP-12 | PLAYBOOK.md | @agentproto/corpus |
| AIP-14 | TOOL.md | @agentproto/tool |
| AIP-15 | WORKFLOW.md | @agentproto/workflow, @agentproto/workflow-runtime |
| AIP-17 | RUNNER.md | @agentproto/runner |
| AIP-18 | COLLECTION.md | @agentproto/corpus |
| AIP-29 | CLI.md | @agentproto/driver-cli |
| AIP-30 | DRIVER.md | @agentproto/driver |
| AIP-36 | SANDBOX.md | @agentproto/sandbox |
| AIP-40 | EXTENSION.md | @agentproto/extension |
| AIP-41 | ROUTINE.md | @agentproto/routine |
| AIP-42 | AGENT.md | @agentproto/agent, @agentproto/bridge |
| AIP-45 | Agent CLI adapter | adapters/{claude-code,claude-sdk,hermes,opencode,codex,openclaw,mastra-agent,antigravity,jcode} |
| AIP-57 | Model resolution primitive | @agentproto/model-routing |
| AIP-62 | REVIEW.md | @agentproto/review |
| AIP-65 | DECISION.md | @agentproto/runtime |
| AIP-66 | Managed cloud agents (cloud:<vendor> target) | @agentproto/runtime, adapters/claude-code-cloud |
pnpm install
pnpm -r build
pnpm -r test
Apache-2.0 — see LICENSE. Copyright 2026 Jeremy André and agentproto contributors.
Spec evolution happens at agentproto/agentproto. This repo tracks AIP progression — implementations follow as AIPs reach Review/Final status. PRs welcome for runtime bugfixes, perf, and adapter coverage — see "Contributing an adapter" above.
workflow_run_fileworkflow_startworkflow_statusworkflow_cancel| Run WORKFLOW.md and stage-barrier workflows |
app_install / app_run / app_list / app_status / app_stop | Install and run @agentproto/app apps as live agent sessions |
app_apply / app_unapply / app_list_applied | Mount / unmount apps to scopes with dependency validation |
app_data_read / app_data_write / app_data_list / app_data_migrate | App-scoped durable data plane (read/write/list + legacy migration), anchored at the app's dataDir (default <dir>/data) |
harness_preset_list / harness_preset_create / harness_preset_delete / harness_preset_set_default | Persisted harness→auth-profile presets |
workspace_brain_query / workspace_brain_status / workspace_brain_ingest | Per-workspace transcript recall (BM25) |
memory_search / memory_list / memory_read / memory_write / memory_supersede / memory_archive / memory_dismiss | AIP-72 memory store (memory.root, default ~/.agentproto/memory); anyone proposes, the operator or a supervisor commits; memory-bound agents get a spawn digest in their system prompt |
conversation_export | Export a daemon transcript to a target adapter's native store (claude-code today) |
llm_endpoint_start / llm_endpoint_stop / llm_endpoint_status / llm_endpoint_set_upstream_link / llm_endpoint_list_links | Local LLM Endpoint proxy sidecar (requires features.llmEndpoint) |
tunnel_create / tunnel_list / tunnel_stop / tunnel_revoke / tunnel_status | Public URL tunnels for local ports (private signed link by default; public: true opts out; tunnel_revoke invalidates the link) |
list_provider_presets | Gateway presets (Anthropic, Moonshot, OpenRouter, Requesty, DeepSeek, xAI) |
adapter_install | Install a not-yet-installed agent-CLI harness by slug |
harness_capabilities | Discover what an installed adapter can do on this host |
catalog_models | Read-only catalog of runnable models + routes (daemon GET /catalog/models) |
list_sandbox_providers / setup_sandbox_provider | Sandbox provider catalog and credentials |
sandbox_exec | Run one command in a sandbox box (ephemeral, or an existing sandboxId) and return exit code + stdout/stderr |
list_eval_reporters / setup_eval_reporter | Eval-reporter backends (e.g. Langfuse) |
start_browser / stop_browser / browser_status | Manage browser sessions |
mcp_discovered_list / mcp_imported_list / mcp_import / mcp_imported_remove | Discover and curate imported MCP servers |
mcp_imported_status / mcp_imported_tool_list / mcp_imported_call | Proxy imported MCP tools |
skill_import / skill_imported_list / skill_imported_remove / skill_resync | Curate imported skills (a SKILL.md folder is copied into ~/.agentproto/skills/<id>/) for per-session delivery |
permissions_list / permissions_respond | Held permission requests across permission-hold sessions |
cron_create / cron_list / cron_delete / cron_run | Recurring daemon jobs (opt-in) |
role_list | Enumerate spawn-time roles and delegation privileges |
daemon_health | Cheap in-process liveness probe |
agentproto_session_story / agentproto_terminal | Per-session story / live PTY MCP App panels |
agentproto_sessions / agentproto_bureau_sessions | MCP App panel views |