Agents
Separate processes, explicit permissions.
Agents connect over typed A2A messages, keep their own runtime identity, and execute only the tools policy allows.
available
Engine daemon
Available in Slice 1: long-running engine process with durable sessions and typed event routing.
available
Textual TUI
Available in Slice 1: terminal UI for sessions, chat, tasks, approvals, controls, and logs.
available
Shell and filesystem tools
Available in Slice 1 through policy-mediated local tool execution and approval events.