agentctl

Provisions and runs AI agents as isolated Linux users, each with its own browser-based workspace.

Each agent is a Linux user with a fixed set of systemd units and on-disk locations. Its owner reaches it over HTTP in a browser surface called the cockpit, which carries a chat stream, the agent's files, its sessions and scheduled runs, and a launcher of mini-apps that read data from the MCPs that agent has wired. The cockpit installs as a PWA.

The fleet is declared in a git repo. agentctl apply reads that repo and reconciles the host to match it.

Where to start

Quick start	one host, one agent, a browser workspace
Architecture	the on-host shape and the authz boundary
CLI reference	every verb with its flags
Operations	apply semantics, cost caps, the port map