AgentOS
A self-hosted home for your AI coding agents. Run Claude Code, Codex,
OpenCode and others side by side, in a chat or their own terminal. Hand off
tasks that end in a pull request, let an orchestrator review and merge them,
and check on all of it from your phone.
What it does
- An orchestrator for each workspace. A chat that starts tasks, answers blocked agents, and merges pull requests only through gates. Anything that is yours to decide waits as an ask. More
- Tasks that end in a pull request. Each gets its own worktree, branch and ports, runs the project's code review, and waits for your sign-off. A queue ranks waiting tasks by priority and machine load, can start one on a linked machine when this one is busy, and a running task can be paused for a set time and resumes by itself. More
- Each kind of work on the right model. Planning, review, implementation and titles each run on their own model, set in Settings → Models. More
- Nothing starts until you send. ⌥N opens a draft with project, machine, agent and branch as chips. More
- Other machines in the same list. Link another machine that runs AgentOS and start or move work there. More
- Built for your phone. The whole app works on a phone; pair it with a QR code, or get the iPhone app from the App Store. More
- Phone to orchestrator. A paired phone can send a shake report or a shared page or file to a workspace's orchestrator (
POST /api/orchestrators/:workspaceId/intake, saved under intake/ beside the database, shared content marked untrusted), and fetch names to improve dictation (GET /api/voice/vocab?workspace=). More
- An analyst beside your coding agent. Pair a chat with a second one that reviews each turn, explains it in plain English, flags issues and drafts the next prompt, which you send, edit or dismiss. It runs on Claude unless you pick another model, local ones included. Side by side on a desktop, a switch on a phone. More
- Agents that talk to each other. Sessions message each other with
aos, and you see every conversation in Messages. More
- Chat or terminal, same conversation. Streaming replies, steps and diffs, plan mode, slash commands,
@file, undo. More
- Bookmarks. Star any message, tool call or turn, then find it again from the chat or across every chat, with a search. More
- Search every conversation. ⌘K (Ctrl+K off a Mac), then Tab: what you and your agents said in any chat, found as you type from a full-text index (a word's start matches, quotes match a phrase), with the message and its neighbours shown beside the results and a jump to it in the chat. Done, dropped and archived chats are included. More
- Every artifact in one place. A session's plan, PR, files, pages, images and job logs in one list, with a preview, kept after its worktree is removed. More
- Share a chat or a page. A read-only snapshot link with secrets, home paths and machine names masked, a preview before anything leaves your machine, and a Markdown copy to hand to an agent. More
- Project config.
agentos.json gives each session its own ports, environment, files and a private Postgres copy. More
- Schedules and recipes. Start work on a timer, or save a job that comes up again. More
- Plans in pieces and stacks. A plan splits into several PRs only for a real reason; a board can run as stacked PRs. More
- Export a session for AI. A whole chat or a range of its turns as Markdown, JSON or HTML, with a compact mode, the same masking as Share, a size and token estimate, and every cut labelled. More
- Machine load and status. A load gauge, each session's share of CPU and memory, and Needs you, Working, In review and Done as it changes. More
- A health watcher. Zero-token checks on the orchestrator's tick catch a red machine load, a held queue, a quiet background job, a restart loop, slow CI, a PR armed for hours and a piece started twice. Each trip wakes one short, tool-less Sonnet call that judges it and posts one line to the orchestrator; only a thing you alone can clear reaches your phone. Settings → Health lists what is open, the history, the notes on what normal looks like and the thresholds. Report only: it never acts. More
- Workspaces. Group projects, finish work with Done, and get a log of every merged task. More
- Session groups. Named shelves inside a workspace, under Pinned, for sessions that belong together; a group stays put while its sessions change state. More
- LumifyHub (optional). Boards, cards and docs for a workspace, if you want them. More
- No approvals mode. One switch in Settings that approves every ask, lets brakes and plan-only tasks through, and starts every agent with its permission prompts off; each approval it makes is logged. Off by default. More
- Experiments. Settings → Experiments lists features still being tried, each off until you turn it on, with what it has cost and how often its suggestions were taken. The first is Learning cards: when a session ends it can offer to save the work as a recipe or keep a lesson where it belongs. More
- Also: a ⌘K palette (actions, sessions, conversations), code search, a file picker, a git panel, dev servers, up to four panes, and dictation.
Documentation
Install
The iPhone app, AgentOS: Coding Agents, is on the App Store.
You need Node.js 22+, git, tmux, and at least one agent CLI (the installer offers to set up what's missing).
npm install -g @saadnvd1/agent-os
agent-os install # checks for tmux and ripgrep, installs what's missing, builds the app
agent-os start # runs in the background on http://localhost:3011
Without Node.js, the install script sets up everything:
curl -fsSL https://raw.githubusercontent.com/saadnvd1/agent-os/main/scripts/install.sh | bash
agent-os start
Then open AgentOS, add a project from ⌘K, and press ⌥N. The install guide covers Windows (WSL2), the supported agents, first run and the agent-os commands. To use it from your phone, see the phone guide.
Connect
AgentOS Connect is live. It gives your machine a private address at runagentos.com, so your phone reaches it from any network with nothing to open on your router and no VPN.
- Free ($0): Connect for one machine, including phone access from anywhere, on up to 3 devices.
- Pro ($4/mo billed yearly, or $6 monthly): link up to 10 machines, with unlimited devices and 100 GB of traffic a month.
Sign up, then run agent-os connect on the machine and enter the code. The phone guide has the steps.
Reach it from your phone with the AgentOS iPhone app, now on the App Store.
The machine gets its own address at https://m-<id>.runagentos.com, served through a Cloudflare tunnel that AgentOS starts and stops with itself. Its key is made on the machine and never leaves it, and a device still has to be paired before it gets in. Connect also hosts the read-only links made with Share. How it works, and what it does and doesn't trust, is in docs/reference/security.md.
Security
AgentOS gives whoever uses it a terminal as you, so it decides who that is. This machine (localhost) is always trusted. Your tailnet is trusted by default. Everything else, including Wi-Fi and any reverse proxy, needs a paired device. AGENTOS_AUTH=off removes pairing and gives anyone who reaches the port a shell, so use it only behind a proxy that does its own login. The full model, Connect and demo mode are in docs/reference/security.md.
Development
npm run dev # http://localhost:3011
npm test # vitest
npm run lint # eslint
npm run check # typecheck, lint, format and tests: what CI runs
npm run screenshots # regenerate screenshots/ from a demo instance with fake data
Dependencies install with pnpm, frozen to the lockfile, with a 7-day cooldown on new versions and an allowlist for install scripts: see docs/reference/dependencies.md (it also covers adding a package that needs an install script and the override for an urgent security fix). A pre-commit hook checks formatting, secrets and banned terms on what is staged. Route handlers may not call *Sync functions, and git runs only through lib/git-exec.ts. More in docs/reference/development.md.
License
MIT. See LICENSE.
