THE PUBLIC GUIDE

Your agents.
One command center.

Command & Control is a self-hosted, authenticated console for conversations, approvals, design work and fleet coordination. This guide covers the established console and clearly marks staged work awaiting release.

The published native phone layout has five primary destinations: Chat, Approve, Design, Features and Board. Native also includes manual Approvals read aloud, started explicitly with no automatic speech. The browser console is published; web and native features can differ. Council is not in the current published native release.

Explore every area.

Chat Available

Find sessions and managed jobs, follow conversations, share files and pictures, and use the controls supported by the selected CLI. Delivery status distinguishes a queued message from one the agent actually received.

  • Search sessions and managed jobs together.
  • Inspect dialogue and recorded tool actions where supported.
  • Model, effort and permission controls follow each harness’s capabilities.

Approve Available

Answer agent questions and permission requests from your phone. Review the question, options and target before making a choice. Saved decisions remain searchable.

  • Approval IDs identify the specific request; a short display label is not a different request.
  • Copy commands and labelled values from their dedicated controls.
  • Published native releases include manual Approvals read aloud: start it explicitly; no automatic speech. Availability in the web console depends on its release.

Design Available

Connect a project to a maker session. Create SVGs, 3D scenes and models, prototypes or slides, then refine versions and hand a selected result to a coding agent.

  • Attach references and keep style notes.
  • Use format-specific previews, local tweaks and exports.
  • Publishing depends on the maker’s actual capabilities and your explicit choice.

Features Available

Follow work from planning through testing, review and delivery. Stage, priority and attention labels distinguish progress, a blocker and a decision waiting on you.

  • See the current stage and overdue or stuck work.
  • Change priority and add an owner note.
  • A source-complete feature is not automatically a released feature.

Board Available

Coordinate Primary, Secondary and Tertiary agents using plans, claims, tasks, results, team messages and shared facts. Keep implementation and independent review separate.

  • Route work to eligible agents and inspect ownership and outcomes.
  • Share findings across supported CLI environments.
  • Task tokens and API-equivalent estimates are not necessarily billed charges.

Sessions & Spawn Available

Find enrolled sessions, manage labels and groups, start supported terminals or managed work, and compose a mixed-CLI fleet. Availability depends on the host, installed harness and verified capabilities.

  • Inspect status and supported model or permission controls.
  • Use registered host recovery where configured.
  • An enrolled session is not a promise that every delivery or launcher path works.

Send & Outbox Available

Send notices, directives or halts to selected recipients. Follow collection and acknowledgement separately, inspect expiry and revoke delivery to remaining recipients.

  • Choose a session, group or selection.
  • Require an acknowledgement when needed.
  • A queued directive does not mean the model has acknowledged it.

Usage & provider limits Available

Read provider-reported quotas, credit balances, tokens and reset times with their source and freshness. A missing reading stays unavailable; a failed refresh does not become zero.

  • Claude and OpenAI report quota windows; DeepSeek reports balances.
  • Copilot depends on the account plan; Antigravity reports available quota pools.
  • OpenRouter key-level usage is not an account-wide balance or a task cost.
  • Muse and Grok activity counters are not dependable remaining-credit forecasts.

Tertiary Agents Available

Set work priority, near-limit thresholds, supported off-peak scheduling and standing rosters. Configure supported providers according to the capacity they actually report.

  • Priorities guide which eligible agents receive work.
  • Provider outages and missing quota data remain visible limitations.
  • Model and host support vary; no universal launcher compatibility is implied.

Hardware & Sites Available

Inspect reported host resources and configured site checks. Review incidents, notification subscriptions and optional recovery assignments.

  • CPU, memory, drive and supported GPU readings retain freshness and error state.
  • Site monitoring covers the sites you configure.
  • Push notifications require device permission and configured delivery.

Guide & Customize Available

Search setup help and the command reference. Adjust themes, typography, colors, glow, borders and rounding with previews and reset controls.

  • Synthwave brings cyan, violet and magenta to the same dark canvas.
  • Voice and dictation depend on available device or server integrations.
  • Browser, installable web app and native releases can differ in availability.

Installed extensions Available

Inspect supported installed extensions and their declared actions. Capability and confirmation boundaries remain specific to the host and harness.

  • Installing a plugin does not grant universal Chat or Spawn support.
  • Review permissions and the data an external service receives.
  • The new user-plugin workflow below is staged separately.

Phone navigation Available

The published native phone layout places Chat, Approve, Design, Features and Board first. Web-console navigation depends on the installed web release.

  • Additional screens stay reachable through the remaining navigation.
  • Use approval identifiers and provider meter labels to keep the request and its context clear.

Council Staged

Council is source work awaiting release review and publication. It is not in the current published native release.

  • No current-download or native-availability promise is made.

Descriptors & session symbols Staged

Descriptor and symbol work is prepared in source. Presentation metadata does not prove a runtime model or authorize a launcher.

  • Source completion is separate from release availability.

User plugins Staged

The new user-plugin workflow is staged source work. It is distinct from the existing installed-extension tools and is not advertised as delivered.

  • Plugin presentation does not confer execution capability or permission.

Private Music Staged

The private Music work is staged and is not part of a public download promise.

  • No private media, account information or internal artifacts are included in this tour.

Registration and installation.

  1. Register an instance through the registration service. C&C is proprietary: Free covers one active computer. $42 USD once covers unlimited enrolled computers in one account and one canonical instance. $420 USD once includes that same runtime entitlement plus complete proprietary development source. Neither paid offer grants a second independent instance; the source remains proprietary. Check the exact terms there; provider usage and hosting are separate.
  2. Open Authentication & downloads and select your Authentication JSON. The service validates it before granting access.
  3. After successful validation, eligible catalog entries appear immediately inline. Scroll through the available role, operating system and architecture options; no additional reveal screen is required.
  4. Check package version, signing information and SHA-256 checksum. An unavailable package is labelled and has no download link. Downloading remains an explicit action.

Invalid, expired or unentitled JSON does not grant downloads. Do not share your Authentication JSON in chat or public reports. Installer availability comes from the actual catalog; this guide does not promise unlisted platform support.

Server and satellite

The server hosts the console and shared services. A satellite connects another computer running supported agents. Follow the selected package’s setup and platform requirements. Connecting a device, trusting a certificate, configuring public exposure and signing in remain deliberate setup decisions.

Choose your installer

Choose Server for the computer that hosts your console, API and database. Choose Satellite to connect agents to an existing server using its private join file. Then choose where the agents and their settings should live.

Regular installation

Regular installers use the selected user account on your computer. During setup, choose which CLI hooks and managed settings to install. All are selected initially; clear any you do not want, including all of them. Optional background services have their own choices.

Isolated Docker installation

Docker editions run setup and agents inside a separate Linux instance. Its home directory, hooks, CLI settings, credentials, services and nested Docker data persist in named volumes. Your computer needs a running Docker engine; Windows and macOS use Docker Desktop with Linux containers.

The instance is privileged so it can run systemd and its own Docker engine. It separates configuration, but is not a security sandbox for untrusted code. It does not mount your host home or Docker socket. The workspace is isolated by default; explicitly selecting a host project folder gives the instance read/write access to that folder. Stopping the instance keeps its data.

These descriptions explain the installer families. The authenticated catalog determines which versions and architectures are downloadable now. Docker editions and selective setup options require the release that includes them; a description here does not make an older package support them. macOS and arm64 support must be confirmed in the catalog.

Linux guided setup — ServerUbuntu / Debian · .deb

Install the full setup package, open Command & Control Setup from your applications menu, and choose Server. A local browser wizard prepares the console, API and database. Supported Ubuntu/Debian systems can prepare Docker through explicit administrator prompts.

Linux guided setup — SatelliteUbuntu / Debian · .deb

The same full setup package with Satellite selected. It enrolls this computer with an existing server and applies your selected hooks and settings. It does not create another console or database.

Linux satellite-only setupUbuntu / Debian · smaller .deb

A smaller guided package for computers that only join an existing server. It offers no Server role and conflicts with the full setup package, so choose one package rather than installing both.

Regular terminal installer — ServerLinux / WSL2 · .run

A self-extracting package with terminal setup for the console, API and database. Requires Docker Engine 28+ and Compose v2 already installed. Selected agent integrations and services use the installing account on the host.

Regular terminal installer — SatelliteLinux / WSL2 · .run

Terminal setup for a computer joining an existing server. Requires Python 3.10+, a reachable server with trusted TLS, its private join file and the selected agent CLIs. Installs only the integrations and optional services you choose.

Isolated Docker installer — ServerLinux / macOS · .sh

Creates a Linux Docker instance and runs server setup inside it. The console, API, database, agent home and selected hooks stay in that instance’s persistent volumes. Use this when you want a server with agent settings separate from your everyday account.

Isolated Docker installer — SatelliteLinux / macOS · .sh

Creates an isolated Linux agent environment and joins an existing server. Agent credentials, hooks and settings stay in its own home volume. Run the agents inside the instance; agents launched directly on your host are not enrolled by this installer.

Windows Docker installer — ServerWindows / Docker Desktop · .ps1

A PowerShell launcher for the isolated Linux server instance. Requires Docker Desktop running Linux containers. Keeps the server and agent configuration in Docker volumes rather than your Windows profile; the server runs in Linux, not as a native Windows service.

Windows Docker installer — SatelliteWindows / Docker Desktop · .ps1

A PowerShell launcher for an isolated Linux satellite that connects to your existing server. Run agent CLIs inside that instance, with their settings and credentials in its volumes. This edition does not enroll agents launched directly in your Windows profile.

Regular Windows installer — WSL2 ServerWindows / existing WSL2 distribution · .zip

A Windows launcher that runs the POSIX server installer inside an explicitly selected, existing WSL2 Linux distribution. Install the server prerequisites in that distribution and keep its installation and state on the Linux filesystem. WSL1 and native Windows server operation are unsupported. This package is built separately; download availability depends on the catalog.

Regular Windows installer — SatelliteNative Windows / PowerShell · .zip

Enrolls the Windows user account with an existing server using PowerShell and Python 3.10+ on PATH. Applies your selected hooks and settings to supported agent CLIs in that account. Selecting a CLI’s hooks does not promise that its terminal launcher is supported on Windows. This package is built separately; download availability depends on the catalog.

macOS guided setup — ServermacOS app · preview / unavailable

A planned clickable macOS setup app for a server using Docker Desktop. It is not a release download until the package is built, its signing status is recorded and it passes real Mac validation. The Docker shell edition is a separate artifact.

macOS guided setup — SatellitemacOS app · preview / unavailable

A planned clickable app to join a Mac to an existing server. Native Mac hooks and background-service support need platform validation. Check the catalog; the presence of a macOS filename alone does not establish support.

Linux arm64 guided setupLinux arm64 · unavailable

The arm64 setup package has not been built and tested for this release. The x86_64 package does not imply arm64 support.

SHA256SUMSRelease verification file

Lists the SHA-256 hashes of the downloadable release files. Use it to check that a file matches the release. A checksum is not a publisher signature; signing status is listed separately for each installer.

Hook events you can select

SessionStart
Integration when a session begins.
UserPromptSubmit
Integration when a user sends a prompt.
PreToolUse
Checks before a tool runs.
PostToolUse
Updates after a tool runs.
PermissionRequest
Handling for a tool permission request.
Stop
End-of-turn handling, where the harness and distribution support it.
SessionEnd
Cleanup and reporting when a session ends.

Managed settings groups you can select

Instructions
Managed global instruction text.
Skills
Bundled C&C skill integrations.
Tools
C&C command links in your user environment.
Privacy
Managed privacy defaults for supported CLIs.
Permissions
Managed permission defaults where supported by the installer path.

Choices apply only where the selected CLI supports them. Disabling an integration also disables the C&C behavior it supplies. The installer manages its own additions; deselecting a settings group stops applying its defaults, but does not promise to restore an earlier third-party preference value. Provider sign-in, required connection settings and account registration are separate setup requirements.

Provider and tool privacy

Self-hosting C&C does not make cloud model requests local. Review the selected providers, enabled tools and network policy. Independent agent review supplies evidence; it does not enforce an outbound-data boundary.

Historical illustrations

Earlier fictional screenshots and interactive demos are not included in this refreshed public tour. They are historical source fixtures, not evidence of current release or platform support.